Mr.Combet Webshell
Your IP :
216.73.216.136
Server IP :
103.233.58.157
Server :
Windows NT WIN-4PGF72KEHKB 10.0 build 17763 (Windows Server 2016) AMD64
Server Software :
Microsoft-IIS/10.0
PHP Version :
7.3.25
Add File :
Submit
Add Directory :
Submit
Dir :
C:
/
Windows
/
debug
/
WIA
/
View File Name :
wiatrace.log
**************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [10524] at 2022/02/10 17:01:43:247 **************** WIA: 10524.4492 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 10524.4492 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001A301594A50 from server WIA: 10524.4492 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 10524.3572 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10524.3572 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 10524.4492 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10524.4492 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 10524.4492 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001A3032B52B0 WIA: 10524.4492 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10524.4492 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 10524.4492 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001A3032B52B0 WIA: 10524.4492 2094 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10524.4492 2094 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 10524.4492 2094 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001A3032B52B0 WIA: 10524.4492 2094 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10524.4492 2094 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 10524.4492 2094 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001A3032B52B0 WIA: 10524.4492 2094 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 10524.4492 2094 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 10524.4492 2094 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10524.3572 2110 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 10524.3572 2110 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00000DF4 is now shut down WIA: 10524.4492 2110 0 0 [sti.dll] DllEntryPoint, sti.dll (0xE09B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 10524.4492 2110 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10524.4492 2110 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [6552] at 2022/02/10 21:12:17:387 **************** WIA: 6552.2984 15 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 6552.2984 15 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 2580 WIA: 6552.2580 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 6552.4080 15 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 6552.4080 15 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 6552.4080 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 6552.2580 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 6552.2580 15 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 6552.2580 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 6552.2580 15 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x0000028BA1807A90 WIA: 6552.4080 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 6552.8544 15 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 6552.2984 15 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 6552.2984 15 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 6552.2580 31 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 6552.2580 31 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 6552.2580 31 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 6552.2580 31 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 6552.2580 31 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 8228) WIA: 6552.8228 93 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 6552.8228 93 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 6552.8228 93 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 6552.2984 109 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 6552.2984 109 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 6552.2984 109 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 6552.2984 109 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 6552.2984 109 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 6552.2984 109 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 6552.8544 109 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate WIA: 6552.2580 109 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 6552.2580 109 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 6552.2580 109 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 6552.2580 109 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 6552.2984 109 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [8040] at 2022/02/10 21:12:17:481 **************** WIA: 8040.1116 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 6552.8544 109 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 6552.8544 109 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 6552.8544 109 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 8040.1116 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001D19753ED40 from server WIA: 8040.1116 16 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 6552.8544 109 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 6552.8544 109 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D1990A57D0 WIA: 8040.1116 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8040.1116 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8040.1116 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D1990A57D0 WIA: 6552.8544 109 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 6552.8544 109 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D1990A57D0 WIA: 8040.1116 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8040.1116 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8040.1116 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D1990A57D0 WIA: 8040.6448 16 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8040.6448 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 6552.1908 109 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 6552.8544 2703 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 6552.8544 2703 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D1990A57D0 WIA: 8040.1116 2610 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8040.1116 2610 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8040.1116 2610 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D1990A57D0 WIA: 6552.8544 2703 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 6552.8544 2703 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D1990A57D0 WIA: 8040.1116 2610 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8040.1116 2610 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8040.1116 2610 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D1990A57D0 WIA: 8040.1116 2610 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 6552.8544 2703 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 6552.8544 2703 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 6552.8544 2703 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 6552.1556 2703 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8040.1116 2610 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 8040.1116 2610 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 6552.1556 2718 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 6552.1556 2718 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 6552.1556 2718 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 6552.1556 2718 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8040.6448 2625 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 8040.6448 2625 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001930 is now shut down WIA: 8040.1116 2688 0 0 [sti.dll] DllEntryPoint, sti.dll (0x82350000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 8040.1116 2688 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8040.1116 2688 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 6552.1908 2797 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 6552.1556 2797 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6552.1908 2797 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 6552.1556 2797 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6552.4080 4297 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 6552.4080 4297 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 6552.4080 4297 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 6552.2580 4297 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 6552.2580 4297 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 6552.2580 4297 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 6552.2580 4297 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 6552.2580 4297 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 6552.2580 4297 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 6552.2580 4297 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 6552.2580 4297 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 6552.2580 4297 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 6552.2580 4297 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 6552.4080 4453 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 6552.4080 4453 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 6552.4080 4453 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 6552.2580 4453 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 6552.2580 4453 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 6552.2580 4453 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 6552.2580 4453 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 6552.2580 4453 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 6552.2580 4453 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 6552.2580 4453 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 6552.2580 4453 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 6552.2580 4453 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 6552.2580 4453 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 6552.4080 14515 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 6552.4080 14515 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 6552.4080 14515 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 6552.2580 14515 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 6552.2580 14515 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 6552.2580 14515 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 6552.2580 14515 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 6552.2580 14515 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 6552.2580 14515 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 6552.2580 14515 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 6552.2580 14515 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 6552.2580 14515 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 6552.2580 14515 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 6552.4080 24687 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 6552.4080 24687 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 6552.4080 24687 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 6552.2580 24687 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 6552.2580 24687 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 6552.2580 24687 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 6552.2580 24687 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 6552.2580 24687 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 6552.2580 24687 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 6552.2580 24687 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 6552.2580 24687 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 6552.2580 24687 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 6552.2580 24687 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 6552.1556 32734 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 6552.1556 32734 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 6552.2984 32734 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 6552.2984 32734 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (0000028BA1806F50) WIA: 6552.2984 32734 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (0000028BA1806F00) WIA: 6552.2984 32734 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 6552.2984 32734 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (0000028BA1801950) WIA: 6552.2984 32734 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (0000028BA1801B10) WIA: 6552.2984 32734 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (0000028BA1806FB0) WIA: 6552.2984 32734 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 6552.2984 32734 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 6552.2984 32734 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (0000028BA1807AD0) WIA: 6552.2984 32734 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (0000028BA1807120) WIA: 6552.2984 32734 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (0000028BA18070A0) WIA: 6552.2984 32734 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (0000028BA1807CD0) WIA: 6552.2984 32734 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (0000028BA1807D10) WIA: 6552.2984 32734 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (0000028BA1801910) WIA: 6552.2984 32734 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 6552.1556 32734 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6552.2984 33000 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (0000028BA18019F0) WIA: 6552.2580 33000 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 6552.2984 33000 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 6552.2984 33000 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [6552] at 2022/02/10 21:12:17:481 **************** WIA: 6552.2984 32907 0 0 [sti.dll] DllEntryPoint, sti.dll (0x82350000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 6552.2984 32907 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6552.2984 32907 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [8620] at 2022/02/25 13:05:10:520 **************** WIA: 8620.8364 16 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 8620.8364 31 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 8524 WIA: 8620.8524 31 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8620.5652 31 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 8620.5652 31 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 8620.5652 31 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8620.8524 31 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8620.8524 31 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 8620.8524 31 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 8620.8524 31 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000001EFE18D77B0 WIA: 8620.8524 31 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 8620.8524 31 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 8620.8524 31 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 7096) WIA: 8620.5652 31 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 8620.7096 31 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 8620.7096 31 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 8620.7096 31 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 8620.8524 31 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 8620.8524 31 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 8620.8524 31 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 8620.8524 31 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8620.144 31 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 8620.8364 47 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 8620.8364 47 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 8620.8364 47 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 8620.8364 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8620.8364 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8620.8364 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8620.8364 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8620.8364 47 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 8620.144 63 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [6512] at 2022/02/25 13:05:10:567 **************** WIA: 6512.1868 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 8620.8748 63 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 8620.8748 63 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 8620.8748 63 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 6512.1868 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000218700B9240 from server WIA: 6512.1868 16 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 8620.8748 63 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8620.8748 63 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000218726E5190 WIA: 6512.1868 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6512.1868 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6512.1868 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000218726E5190 WIA: 8620.8748 63 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8620.8748 63 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000218726E5190 WIA: 6512.1868 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6512.1868 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6512.1868 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000218726E5190 WIA: 6512.8840 16 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6512.8840 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 8620.144 63 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 8620.144 2860 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8620.144 2860 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000218726E5190 WIA: 6512.1868 2813 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6512.1868 2813 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6512.1868 2813 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000218726E5190 WIA: 8620.144 2860 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8620.144 2860 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000218726E5190 WIA: 6512.1868 2813 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6512.1868 2813 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6512.1868 2813 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000218726E5190 WIA: 6512.1868 2813 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 8620.144 2860 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 8620.144 2860 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8620.144 2860 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 6512.1868 2813 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 8620.7620 2860 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6512.1868 2813 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8620.7620 2875 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 8620.7620 2875 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 8620.7620 2875 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 8620.7620 2875 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6512.8840 2828 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 6512.8840 2828 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00002288 is now shut down WIA: 6512.1868 2844 0 0 [sti.dll] DllEntryPoint, sti.dll (0x79090000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 6512.1868 2844 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6512.1868 2844 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8620.8748 2922 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8620.8748 2922 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8620.7620 2922 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8620.7620 2922 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8620.5652 5328 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 8620.5652 5328 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8620.5652 5328 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 8620.8524 5328 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8620.8524 5328 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 8620.8524 5328 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 8620.8524 5328 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 8620.8524 5328 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 8620.8524 5328 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 8620.8524 5328 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 8620.8524 5328 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 8620.8524 5328 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 8620.8524 5328 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8620.5652 5485 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 8620.5652 5485 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8620.5652 5485 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 8620.8524 5485 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8620.8524 5485 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 8620.8524 5485 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 8620.8524 5485 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 8620.8524 5485 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 8620.8524 5485 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 8620.8524 5485 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 8620.8524 5485 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 8620.8524 5485 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 8620.8524 5485 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8620.5652 15578 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 8620.5652 15578 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8620.5652 15578 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 8620.8524 15578 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8620.8524 15578 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 8620.8524 15578 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 8620.8524 15578 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 8620.8524 15578 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 8620.8524 15578 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 8620.8524 15578 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 8620.8524 15578 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 8620.8524 15578 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 8620.8524 15578 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8620.5652 25844 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 8620.5652 25844 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8620.8524 25844 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8620.8524 25844 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 8620.8524 25844 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 8620.8524 25844 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 8620.8524 25844 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 8620.8524 25844 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 8620.8524 25844 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 8620.8524 25844 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 8620.8524 25844 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 8620.8524 25844 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8620.5652 25844 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 8620.7620 32891 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 8620.7620 32891 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 8620.8364 32891 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 8620.8364 32891 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000001EFE18D6F50) WIA: 8620.8364 32891 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000001EFE18D6F00) WIA: 8620.8364 32891 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 8620.8364 32891 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000001EFE18D1950) WIA: 8620.8364 32891 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000001EFE18D1B10) WIA: 8620.8364 32891 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000001EFE18D6FB0) WIA: 8620.8364 32891 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 8620.8364 32891 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 8620.8364 32891 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000001EFE18D7AD0) WIA: 8620.8364 32891 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000001EFE18D7120) WIA: 8620.8364 32891 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000001EFE18D70A0) WIA: 8620.8364 32891 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000001EFE18D7CD0) WIA: 8620.8364 32891 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000001EFE18D7D10) WIA: 8620.8364 32891 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000001EFE18D1910) WIA: 8620.8364 32891 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 8620.7620 32891 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8620.8364 33156 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000001EFE18D19F0) WIA: 8620.8364 33156 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 8620.8524 33156 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 8620.8364 33156 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [8620] at 2022/02/25 13:05:10:567 **************** WIA: 8620.5652 33109 0 0 [sti.dll] DllEntryPoint, sti.dll (0x79090000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 8620.5652 33109 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8620.5652 33109 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [5400] at 2022/02/25 13:06:57:379 **************** WIA: 5400.8400 15 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 5400.8400 15 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 6272 WIA: 5400.6272 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 5400.1080 15 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 5400.1080 15 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 5400.1080 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 5400.6272 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 5400.6272 15 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 5400.6272 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 5400.6272 15 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000001D28E9B77B0 WIA: 5400.6272 15 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 5400.6272 15 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 5400.6272 15 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 6908) WIA: 5400.1080 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 5400.6908 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 5400.6908 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 5400.6908 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 5400.6944 15 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 5400.8400 15 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 5400.6272 15 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 5400.6272 15 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 5400.8400 15 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 5400.8400 15 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 5400.6272 15 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 5400.6272 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 5400.8400 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 5400.8400 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 5400.8400 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 5400.8400 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 5400.8400 31 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 5400.6176 31 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [1720] at 2022/02/25 13:06:57:411 **************** WIA: 1720.6920 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 5400.6176 31 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 5400.6176 31 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 5400.6176 31 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 1720.6920 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001F3A32C9330 from server WIA: 1720.6920 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 1720.5036 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5400.6176 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1720.5036 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 5400.6176 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F3A5A63AE0 WIA: 1720.6920 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5400.6944 31 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 1720.6920 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 1720.6920 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F3A5A63AE0 WIA: 5400.6944 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5400.6944 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F3A5A63AE0 WIA: 1720.6920 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1720.6920 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 1720.6920 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F3A5A63AE0 WIA: 5400.1080 937 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 5400.1080 937 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 5400.1080 937 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 5400.6272 937 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 5400.6272 937 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 5400.6272 937 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 5400.6272 937 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 5400.6272 937 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 5400.6272 937 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 5400.6272 937 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 5400.6272 937 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 5400.6272 937 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 5400.1080 1031 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 5400.1080 1031 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 5400.1080 1031 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 5400.6272 1031 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 5400.6272 1031 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 5400.6272 1031 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 5400.6272 1031 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 5400.6272 1031 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 5400.6272 1031 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 5400.6272 1031 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 5400.6272 1031 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 5400.6272 1031 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 5400.6944 2156 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 5400.6944 2156 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F3A5A63AE0 WIA: 1720.6920 2125 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1720.6920 2125 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 1720.6920 2125 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F3A5A63AE0 WIA: 5400.6944 2156 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 5400.6944 2156 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F3A5A63AE0 WIA: 1720.6920 2125 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1720.6920 2125 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 1720.6920 2125 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F3A5A63AE0 WIA: 1720.6920 2125 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 5400.6944 2156 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 5400.6944 2156 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 5400.6944 2156 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 1720.6920 2125 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 5400.3236 2156 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1720.6920 2125 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5400.3236 2171 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 5400.3236 2171 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 5400.3236 2171 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 5400.3236 2171 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1720.5036 2140 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 1720.5036 2140 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000013AC is now shut down WIA: 1720.6920 2140 0 0 [sti.dll] DllEntryPoint, sti.dll (0x784D0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 1720.6920 2140 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 1720.6920 2140 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5400.6176 2187 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 5400.3236 2187 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5400.6176 2187 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 5400.3236 2187 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5400.1080 11187 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 5400.1080 11187 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 5400.1080 11187 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 5400.6272 11187 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 5400.6272 11187 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 5400.6272 11187 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 5400.6272 11187 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 5400.6272 11187 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 5400.6272 11187 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 5400.6272 11187 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 5400.6272 11187 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 5400.6272 11187 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 5400.6272 11187 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 5400.1080 21421 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 5400.1080 21421 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 5400.1080 21421 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 5400.6272 21421 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 5400.6272 21421 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 5400.6272 21421 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 5400.6272 21421 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 5400.6272 21421 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 5400.6272 21421 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 5400.6272 21421 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 5400.6272 21421 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 5400.6272 21421 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 5400.6272 21421 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 5400.1080 31671 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 5400.1080 31671 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 5400.1080 31671 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 5400.6272 31671 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 5400.6272 31671 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 5400.6272 31671 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 5400.6272 31671 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 5400.6272 31671 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 5400.6272 31671 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 5400.6272 31671 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 5400.6272 31671 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 5400.6272 31671 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 5400.6272 31671 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 5400.3236 32187 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 5400.3236 32187 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 5400.8400 32187 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 5400.8400 32187 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000001D28E9B6F50) WIA: 5400.8400 32187 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000001D28E9B6F00) WIA: 5400.8400 32187 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 5400.8400 32187 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000001D28E9B1950) WIA: 5400.8400 32187 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000001D28E9B1B10) WIA: 5400.8400 32187 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000001D28E9B6FB0) WIA: 5400.8400 32187 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 5400.8400 32187 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 5400.8400 32187 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000001D28E9B7AD0) WIA: 5400.8400 32187 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000001D28E9B7120) WIA: 5400.8400 32187 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000001D28E9B70A0) WIA: 5400.8400 32187 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000001D28E9B7CD0) WIA: 5400.8400 32187 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000001D28E9B7D10) WIA: 5400.8400 32187 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000001D28E9B1910) WIA: 5400.8400 32187 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 5400.3236 32187 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5400.8400 32453 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000001D28E9B19F0) WIA: 5400.8400 32453 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 5400.6272 32453 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 5400.8400 32453 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [5400] at 2022/02/25 13:06:57:395 **************** WIA: 5400.1080 32438 0 0 [sti.dll] DllEntryPoint, sti.dll (0x784D0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 5400.1080 32438 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5400.1080 32438 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [632] at 2022/02/25 13:09:27:848 **************** WIA: 632.8948 16 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 632.8948 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 8584 WIA: 632.8584 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 632.7836 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 632.7836 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 632.7836 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 632.8584 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 632.8584 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 632.8584 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 632.8584 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000001F46FFC77B0 WIA: 632.8584 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 632.8584 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 632.8584 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 8728) WIA: 632.7836 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 632.8728 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 632.8728 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 632.8728 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 632.7612 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 632.8584 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 632.8584 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 632.8584 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 632.8584 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 632.8948 32 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 632.8948 32 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 632.8948 32 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 632.8948 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 632.8948 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 632.8948 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 632.8948 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 632.8948 32 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 632.7612 32 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [5660] at 2022/02/25 13:09:27:879 **************** WIA: 5660.3536 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 632.7612 32 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 632.7612 32 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 632.7612 32 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 5660.3536 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000002014ED57970 from server WIA: 5660.3536 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 5660.9020 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 632.7612 32 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5660.9020 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 632.7612 32 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020151295C20 WIA: 5660.3536 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 632.7936 32 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 5660.3536 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5660.3536 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020151295C20 WIA: 632.7936 32 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 632.7936 32 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020151295C20 WIA: 5660.3536 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5660.3536 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5660.3536 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020151295C20 WIA: 632.7936 1922 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 632.7936 1922 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020151295C20 WIA: 5660.3536 1890 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5660.3536 1890 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5660.3536 1890 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020151295C20 WIA: 632.7936 1922 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 632.7936 1922 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020151295C20 WIA: 5660.3536 1890 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5660.3536 1890 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5660.3536 1890 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020151295C20 WIA: 5660.3536 1890 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 632.7936 1922 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 632.7936 1922 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 632.7936 1922 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 5660.3536 1890 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 632.8908 1922 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5660.3536 1890 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 632.8908 1938 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 632.8908 1938 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 632.8908 1938 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 632.8908 1938 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5660.9020 1906 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 5660.9020 1906 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x0000233C is now shut down WIA: 5660.3536 1906 0 0 [sti.dll] DllEntryPoint, sti.dll (0x78B10000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 5660.3536 1906 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5660.3536 1906 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 632.7612 1953 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 632.7612 1953 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 632.8908 1953 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 632.8908 1953 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 632.7836 5016 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 632.7836 5016 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 632.7836 5016 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 632.8584 5016 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 632.8584 5016 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 632.8584 5016 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 632.8584 5016 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 632.8584 5016 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 632.8584 5016 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 632.8584 5016 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 632.8584 5016 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 632.8584 5016 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 632.8584 5016 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 632.7836 5110 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 632.7836 5110 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 632.7836 5110 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 632.8584 5110 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 632.8584 5110 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 632.8584 5110 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 632.8584 5110 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 632.8584 5110 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 632.8584 5110 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 632.8584 5110 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 632.8584 5110 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 632.8584 5110 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 632.8584 5110 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 632.7836 15250 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 632.7836 15250 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 632.7836 15250 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 632.8584 15250 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 632.8584 15250 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 632.8584 15250 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 632.8584 15250 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 632.8584 15250 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 632.8584 15250 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 632.8584 15250 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 632.8584 15250 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 632.8584 15250 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 632.8584 15250 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 632.7836 25485 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 632.7836 25485 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 632.7836 25485 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 632.8584 25485 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 632.8584 25485 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 632.8584 25485 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 632.8584 25485 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 632.8584 25485 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 632.8584 25485 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 632.8584 25485 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 632.8584 25485 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 632.8584 25485 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 632.8584 25485 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 632.8908 31953 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 632.8908 31953 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 632.8948 31953 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 632.8948 31953 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000001F46FFC6F50) WIA: 632.8948 31953 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000001F46FFC6F00) WIA: 632.8948 31953 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 632.8948 31953 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000001F46FFC1950) WIA: 632.8948 31953 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000001F46FFC1B10) WIA: 632.8948 31953 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000001F46FFC6FB0) WIA: 632.8948 31953 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 632.8948 31953 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 632.8948 31953 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000001F46FFC7AD0) WIA: 632.8948 31953 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000001F46FFC7120) WIA: 632.8948 31953 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000001F46FFC70A0) WIA: 632.8948 31953 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000001F46FFC7CD0) WIA: 632.8948 31953 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000001F46FFC7D10) WIA: 632.8948 31953 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000001F46FFC1910) WIA: 632.8948 31953 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 632.8908 31953 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 632.8948 32219 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000001F46FFC19F0) WIA: 632.8948 32219 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 632.8584 32219 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 632.8948 32219 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [632] at 2022/02/25 13:09:27:879 **************** WIA: 632.7836 32187 0 0 [sti.dll] DllEntryPoint, sti.dll (0x78B10000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 632.7836 32187 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 632.7836 32187 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [7716] at 2022/03/04 14:34:01:186 **************** WIA: 7716.8332 31 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 7716.8332 47 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 5152 WIA: 7716.5152 47 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7716.9664 47 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 7716.9664 47 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 7716.9664 47 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 7716.5152 47 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 7716.5152 47 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 7716.5152 47 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 7716.5152 47 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000002047D0977B0 WIA: 7716.5152 47 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 7716.5152 47 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 7716.5152 47 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 7468) WIA: 7716.9664 47 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 7716.7468 47 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 7716.7468 47 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 7716.7468 47 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 7716.8640 47 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7716.8332 63 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 7716.5152 63 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7716.5152 63 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 7716.8332 63 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 7716.8332 63 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7716.5152 63 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 7716.5152 63 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7716.8332 63 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7716.8332 63 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7716.8332 63 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7716.8332 63 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7716.8332 63 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 7716.8640 78 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [10044] at 2022/03/04 14:34:01:264 **************** WIA: 10044.9748 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7716.1696 78 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 7716.1696 78 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 7716.1696 78 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 10044.9748 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000018A67737F30 from server WIA: 10044.9748 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7716.1696 78 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7716.1696 78 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018A69C057C0 WIA: 10044.9748 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10044.9748 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 10044.9748 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018A69C057C0 WIA: 7716.1696 78 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7716.1696 78 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018A69C057C0 WIA: 10044.9748 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10044.9748 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 10044.9748 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018A69C057C0 WIA: 10044.7876 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10044.7876 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 7716.1696 78 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 7716.8640 3219 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7716.8640 3219 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018A69C057C0 WIA: 10044.9748 3141 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10044.9748 3141 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 10044.9748 3141 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018A69C057C0 WIA: 7716.8640 3219 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7716.8640 3219 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018A69C057C0 WIA: 10044.9748 3141 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10044.9748 3141 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 10044.9748 3141 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018A69C057C0 WIA: 10044.9748 3141 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7716.8640 3219 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 7716.8640 3219 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7716.8640 3219 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 10044.9748 3141 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 7716.6324 3219 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10044.9748 3141 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7716.6324 3234 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7716.6324 3234 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7716.6324 3234 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 7716.6324 3234 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10044.7876 3156 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 10044.7876 3156 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001EC4 is now shut down WIA: 10044.9748 3172 0 0 [sti.dll] DllEntryPoint, sti.dll (0xA0C10000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 10044.9748 3172 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10044.9748 3172 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7716.1696 3344 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7716.6324 3344 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7716.1696 3344 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7716.6324 3344 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7716.9664 6797 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 7716.9664 6797 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 7716.9664 6797 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 7716.5152 6797 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 7716.5152 6797 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 7716.5152 6797 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 7716.5152 6797 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 7716.5152 6797 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 7716.5152 6797 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 7716.5152 6813 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 7716.5152 6813 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 7716.5152 6813 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 7716.5152 6813 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7716.9664 7016 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 7716.9664 7016 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 7716.9664 7016 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 7716.5152 7016 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 7716.5152 7016 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 7716.5152 7016 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 7716.5152 7016 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 7716.5152 7016 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 7716.5152 7016 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 7716.5152 7016 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 7716.5152 7016 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 7716.5152 7016 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 7716.5152 7016 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7716.9664 17031 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 7716.9664 17031 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 7716.9664 17031 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 7716.5152 17031 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 7716.5152 17031 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 7716.5152 17031 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 7716.5152 17031 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 7716.5152 17031 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 7716.5152 17031 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 7716.5152 17031 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 7716.5152 17031 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 7716.5152 17031 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 7716.5152 17031 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7716.9664 27266 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 7716.9664 27266 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 7716.9664 27266 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 7716.5152 27266 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 7716.5152 27266 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 7716.5152 27266 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 7716.5152 27266 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 7716.5152 27266 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 7716.5152 27266 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 7716.5152 27266 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 7716.5152 27266 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 7716.5152 27266 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 7716.5152 27266 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7716.6324 33250 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 7716.6324 33250 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 7716.8332 33250 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 7716.8332 33250 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000002047D096F50) WIA: 7716.8332 33250 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000002047D096F00) WIA: 7716.8332 33250 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 7716.8332 33250 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000002047D091950) WIA: 7716.8332 33250 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000002047D091B10) WIA: 7716.8332 33250 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000002047D096FB0) WIA: 7716.8332 33250 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 7716.8332 33250 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 7716.8332 33250 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000002047D097AD0) WIA: 7716.8332 33250 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000002047D097120) WIA: 7716.8332 33250 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000002047D0970A0) WIA: 7716.8332 33250 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000002047D097CD0) WIA: 7716.8332 33250 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000002047D097D10) WIA: 7716.8332 33250 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000002047D091910) WIA: 7716.8332 33250 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 7716.6324 33250 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7716.8332 33516 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000002047D0919F0) WIA: 7716.8332 33516 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 7716.5152 33516 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 7716.8332 33516 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [7716] at 2022/03/04 14:34:01:248 **************** WIA: 7716.9664 33453 0 0 [sti.dll] DllEntryPoint, sti.dll (0xA0C10000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7716.9664 33453 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7716.9664 33453 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [7292] at 2022/06/17 13:31:45:837 **************** WIA: 7292.2032 15 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 7292.2032 15 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 592 WIA: 7292.592 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7292.1104 31 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 7292.1104 31 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 7292.1104 31 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 7292.592 31 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 7292.592 31 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 7292.592 31 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 7292.592 31 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000001F044E177B0 WIA: 7292.592 31 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 7292.592 31 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 7292.592 31 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 7520) WIA: 7292.1104 31 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 7292.7520 31 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 7292.7520 31 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 7292.7520 31 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 7292.592 31 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7292.592 31 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 7292.592 31 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 7292.592 31 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7292.9052 31 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7292.2032 47 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 7292.2032 47 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 7292.2032 47 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7292.2032 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7292.2032 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7292.2032 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7292.2032 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7292.2032 47 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 7292.9052 109 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [10116] at 2022/06/17 13:31:45:900 **************** WIA: 10116.9464 63 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7292.8884 125 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 7292.8884 125 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 7292.8884 125 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 10116.9464 63 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000258D247B8A0 from server WIA: 10116.9464 63 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7292.8884 125 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7292.8884 125 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000258D4B045C0 WIA: 10116.9464 63 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10116.9464 63 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 10116.9464 63 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000258D4B045C0 WIA: 7292.8884 125 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7292.8884 125 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000258D4B045C0 WIA: 10116.9464 63 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10116.9464 63 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 10116.9464 63 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000258D4B045C0 WIA: 10116.5052 78 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10116.5052 78 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 7292.9052 140 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 7292.9052 2312 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7292.9052 2312 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000258D4B045C0 WIA: 10116.9464 2250 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10116.9464 2250 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 10116.9464 2250 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000258D4B045C0 WIA: 7292.9052 2312 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7292.9052 2312 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000258D4B045C0 WIA: 10116.9464 2250 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10116.9464 2250 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 10116.9464 2250 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000258D4B045C0 WIA: 10116.9464 2250 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7292.9052 2312 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 7292.9052 2312 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7292.9052 2312 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 7292.7024 2312 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10116.9464 2250 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 10116.9464 2250 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7292.7024 2328 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7292.7024 2328 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7292.7024 2328 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 7292.7024 2328 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10116.5052 2266 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 10116.5052 2266 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000013BC is now shut down WIA: 10116.9464 2266 0 0 [sti.dll] DllEntryPoint, sti.dll (0x37120000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 10116.9464 2282 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10116.9464 2282 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7292.8884 2531 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7292.8884 2531 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7292.7024 2531 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7292.7024 2531 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7292.7024 32344 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 7292.7024 32344 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 7292.2032 32344 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 7292.2032 32344 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000001F044E16F50) WIA: 7292.2032 32344 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000001F044E16F00) WIA: 7292.2032 32344 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 7292.2032 32344 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000001F044E11950) WIA: 7292.2032 32344 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000001F044E11B10) WIA: 7292.2032 32344 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000001F044E16FB0) WIA: 7292.2032 32344 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 7292.2032 32344 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 7292.2032 32344 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000001F044E17AD0) WIA: 7292.2032 32344 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000001F044E17120) WIA: 7292.2032 32344 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000001F044E170A0) WIA: 7292.2032 32344 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000001F044E17CD0) WIA: 7292.2032 32344 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000001F044E17D10) WIA: 7292.2032 32344 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000001F044E11910) WIA: 7292.2032 32344 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 7292.7024 32344 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7292.2032 32609 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000001F044E119F0) WIA: 7292.2032 32609 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 7292.592 32609 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 7292.2032 32609 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [7292] at 2022/06/17 13:31:45:884 **************** WIA: 7292.1104 32562 0 0 [sti.dll] DllEntryPoint, sti.dll (0x37120000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7292.1104 32562 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7292.1104 32562 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [1988] at 2022/06/30 17:05:19:198 **************** WIA: 1988.5424 16 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 1988.5424 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 8460 WIA: 1988.8460 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 1988.6328 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 1988.6328 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 1988.6328 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 1988.6328 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 1988.8460 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 1988.8460 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 1988.8460 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 1988.8460 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000001A97E7877B0 WIA: 1988.8460 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 1988.8460 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 1988.8460 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 6752) WIA: 1988.6752 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 1988.6752 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 1988.6752 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 1988.8460 47 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 1988.8460 47 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 1988.8460 47 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 1988.8460 47 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 1988.8724 47 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 1988.5424 47 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 1988.5424 47 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 1988.5424 47 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 1988.5424 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 1988.5424 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 1988.5424 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 1988.5424 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 1988.5424 47 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 1988.8724 63 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [824] at 2022/06/30 17:05:19:261 **************** WIA: 824.6116 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 1988.9080 63 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 1988.9080 63 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 1988.9080 63 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 824.6116 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000237334A1700 from server WIA: 824.6116 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 1988.9080 63 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 824.4320 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 1988.9080 63 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023736434670 WIA: 824.4320 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 824.6116 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 824.6116 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 824.6116 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023736434670 WIA: 1988.9080 63 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 1988.8724 63 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1988.8724 63 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023736434670 WIA: 824.6116 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 824.6116 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 824.6116 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023736434670 WIA: 1988.6328 3297 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 1988.6328 3297 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 1988.6328 3297 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 1988.8460 3297 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 1988.8460 3297 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 1988.8460 3297 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 1988.8460 3297 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 1988.8460 3297 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 1988.8460 3297 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 1988.8460 3297 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 1988.8460 3297 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 1988.8460 3297 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 1988.6328 3500 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 1988.6328 3500 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 1988.6328 3500 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 1988.8460 3500 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 1988.8460 3500 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 1988.8460 3500 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 1988.8460 3500 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 1988.8460 3500 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 1988.8460 3500 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 1988.8460 3500 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 1988.8460 3500 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 1988.8460 3500 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 1988.8724 12375 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 1988.8724 12375 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023736434670 WIA: 824.6116 12312 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 824.6116 12312 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 824.6116 12312 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023736434670 WIA: 1988.8724 12375 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 1988.8724 12375 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023736434670 WIA: 824.6116 12312 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 824.6116 12312 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 824.6116 12312 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023736434670 WIA: 824.6116 12312 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 1988.8724 12375 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 1988.8724 12375 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 1988.8724 12375 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 824.6116 12312 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 1988.8332 12375 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 824.6116 12312 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 1988.8332 12391 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 1988.8332 12391 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 824.4320 12328 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 1988.8332 12391 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 824.4320 12328 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000010E0 is now shut down WIA: 1988.8332 12391 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 824.6116 12375 0 0 [sti.dll] DllEntryPoint, sti.dll (0x5A40000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 824.6116 12390 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 824.6116 12390 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 1988.9080 12516 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 1988.9080 12516 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 1988.8332 12516 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1988.8332 12516 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1988.6328 13485 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 1988.6328 13485 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 1988.6328 13485 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 1988.8460 13485 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 1988.8460 13485 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 1988.8460 13485 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 1988.8460 13485 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 1988.8460 13485 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 1988.8460 13485 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 1988.8460 13485 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 1988.8460 13485 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 1988.8460 13485 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 1988.8460 13485 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 1988.6328 23703 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 1988.6328 23703 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 1988.6328 23703 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 1988.8460 23703 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 1988.8460 23703 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 1988.8460 23703 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 1988.8460 23703 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 1988.8460 23703 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 1988.8460 23703 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 1988.8460 23703 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 1988.8460 23703 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 1988.8460 23703 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 1988.8460 23703 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 1988.6328 33891 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 1988.6328 33891 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 1988.6328 33891 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 1988.8460 33891 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 1988.8460 33891 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 1988.8460 33891 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 1988.8460 33891 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 1988.8460 33891 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 1988.8460 33891 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 1988.8460 33891 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 1988.8460 33891 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 1988.8460 33891 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 1988.8460 33891 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 1988.8332 42407 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 1988.8332 42407 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 1988.5424 42407 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 1988.5424 42407 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000001A97E786F50) WIA: 1988.5424 42407 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000001A97E786F00) WIA: 1988.5424 42407 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 1988.5424 42407 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000001A97E781950) WIA: 1988.5424 42407 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000001A97E781B10) WIA: 1988.5424 42407 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000001A97E786FB0) WIA: 1988.5424 42407 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 1988.5424 42407 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 1988.5424 42407 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000001A97E787DB0) WIA: 1988.5424 42407 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000001A97E787120) WIA: 1988.5424 42407 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000001A97E7870A0) WIA: 1988.5424 42407 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000001A97E787FB0) WIA: 1988.5424 42407 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000001A97E787FF0) WIA: 1988.5424 42407 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000001A97E781910) WIA: 1988.5424 42407 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 1988.8332 42407 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1988.5424 42672 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000001A97E7819F0) WIA: 1988.5424 42672 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 1988.8460 42672 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 1988.5424 42672 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [1988] at 2022/06/30 17:05:19:261 **************** WIA: 1988.6328 42609 0 0 [sti.dll] DllEntryPoint, sti.dll (0x5A40000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 1988.6328 42609 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 1988.6328 42609 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [7984] at 2022/10/30 13:03:55:466 **************** WIA: 7984.9704 16 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 7984.9704 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 9532 WIA: 7984.9532 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7984.4472 32 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 7984.4472 32 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 7984.4472 32 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 7984.4472 32 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 7984.9532 32 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 7984.9532 32 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 7984.9532 32 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 7984.9532 32 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x0000021E7E8877B0 WIA: 7984.9532 32 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 7984.9532 32 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 7984.9532 32 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 6452) WIA: 7984.6452 32 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 7984.6452 32 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 7984.6452 32 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 7984.9532 47 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7984.9532 47 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 7984.9532 47 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 7984.9532 47 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7984.9964 47 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7984.9704 47 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 7984.9704 47 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 7984.9704 47 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7984.9704 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7984.9704 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7984.9704 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7984.9704 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7984.9704 47 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 7984.9964 63 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [2840] at 2022/10/30 13:03:55:528 **************** WIA: 2840.976 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7984.3040 63 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 7984.3040 63 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 7984.3040 63 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 2840.976 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000002103C459990 from server WIA: 2840.976 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7984.3040 63 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7984.3040 63 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002103EA06380 WIA: 2840.976 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2840.976 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 2840.976 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002103EA06380 WIA: 2840.7744 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7984.3040 63 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7984.3040 63 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002103EA06380 WIA: 2840.7744 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 2840.976 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2840.976 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 2840.976 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002103EA06380 WIA: 7984.3040 63 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 7984.9964 2172 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7984.9964 2172 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002103EA06380 WIA: 2840.976 2109 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2840.976 2109 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 2840.976 2109 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002103EA06380 WIA: 7984.9964 2172 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7984.9964 2172 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002103EA06380 WIA: 2840.976 2109 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2840.976 2109 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 2840.976 2109 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002103EA06380 WIA: 2840.976 2109 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7984.9964 2172 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 7984.9964 2172 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7984.9964 2172 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 2840.976 2109 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 7984.7788 2172 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 2840.976 2109 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7984.7788 2188 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7984.7788 2188 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7984.7788 2188 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 7984.7788 2188 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 2840.7744 2125 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 2840.7744 2125 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001E40 is now shut down WIA: 2840.976 2125 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93C20000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 2840.976 2125 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 2840.976 2125 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7984.3040 2235 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7984.3040 2235 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7984.7788 2235 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7984.7788 2235 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7984.3040 3329 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (2) WIA: 7984.3040 3329 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 7984.3040 3329 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7984.3040 3329 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [8972] at 2022/10/30 13:03:58:794 **************** WIA: 8972.6680 15 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7984.9964 3344 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000002 WIA: 7984.9964 3344 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000002 to WiaEventNotifier WIA: 8972.6680 15 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000209D6B39B30 from server WIA: 8972.6680 15 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7984.9964 3344 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8972.1468 15 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7984.9964 3344 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000209D91E5B00 WIA: 8972.1468 15 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 8972.6680 15 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8972.6680 15 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8972.6680 15 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000209D91E5B00 WIA: 7984.9964 3344 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 7984.3040 3344 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7984.3040 3344 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000209D91E5B00 WIA: 8972.6680 15 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8972.6680 15 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8972.6680 15 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000209D91E5B00 WIA: 7984.3040 7016 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7984.3040 7016 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000209D91E5B00 WIA: 8972.6680 3687 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8972.6680 3687 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8972.6680 3687 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000209D91E5B00 WIA: 7984.3040 7016 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7984.3040 7016 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000209D91E5B00 WIA: 8972.6680 3687 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8972.6680 3687 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8972.6680 3687 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000209D91E5B00 WIA: 8972.6680 3687 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7984.3040 7016 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000002 WIA: 7984.3040 7016 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 7984.3040 7016 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000002 marked for removal WIA: 7984.7788 7016 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8972.6680 3687 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 8972.6680 3687 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7984.7788 7032 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7984.7788 7032 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7984.7788 7032 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 7984.7788 7032 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8972.1468 3703 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 8972.1468 3703 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000005BC is now shut down WIA: 8972.6680 3718 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93C20000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 8972.6680 3718 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8972.6680 3718 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7984.9964 7047 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 7984.9964 7047 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 7984.7788 7063 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7984.7788 7063 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7984.9964 8172 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (6) WIA: 7984.9964 8172 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 7984.9964 8172 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7984.9964 8172 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [4444] at 2022/10/30 13:04:03:637 **************** WIA: 4444.4912 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7984.9964 8172 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000003 WIA: 7984.9964 8172 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000003 to WiaEventNotifier WIA: 4444.4912 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000244E8FA9160 from server WIA: 4444.4912 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7984.9964 8172 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 4444.4980 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7984.9964 8172 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000244EBFF5860 WIA: 4444.4980 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 4444.4912 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 4444.4912 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 4444.4912 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000244EBFF5860 WIA: 7984.9964 8172 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 7984.3040 8172 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7984.3040 8172 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000244EBFF5860 WIA: 4444.4912 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 4444.4912 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 4444.4912 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000244EBFF5860 WIA: 7984.3040 10563 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7984.3040 10563 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000244EBFF5860 WIA: 4444.4912 2391 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 4444.4912 2391 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 4444.4912 2391 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000244EBFF5860 WIA: 7984.3040 10563 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7984.3040 10563 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000244EBFF5860 WIA: 4444.4912 2391 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 4444.4912 2391 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 4444.4912 2391 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000244EBFF5860 WIA: 4444.4912 2391 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7984.3040 10563 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000003 WIA: 7984.3040 10563 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 7984.3040 10563 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000003 marked for removal WIA: 7984.7788 10563 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4444.4912 2391 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 4444.4912 2391 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7984.7788 10579 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7984.7788 10579 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7984.7788 10579 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 4444.4980 2407 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 7984.7788 10579 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4444.4980 2407 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001374 is now shut down WIA: 4444.4912 2407 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93C20000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 4444.4912 2407 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 4444.4912 2407 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7984.9964 10594 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 7984.9964 10594 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 7984.7788 10594 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7984.7788 10594 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7984.9964 12079 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (A) WIA: 7984.9964 12079 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 7984.9964 12079 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7984.9964 12094 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [1332] at 2022/10/30 13:04:07:559 **************** WIA: 1332.5064 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7984.9964 12094 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000004 WIA: 7984.9964 12094 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000004 to WiaEventNotifier WIA: 1332.5064 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000002C9F570CEC0 from server WIA: 1332.5064 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 1332.9156 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7984.9964 12094 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1332.9156 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 7984.9964 12094 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C9F60F5840 WIA: 1332.5064 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1332.5064 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7984.3040 12094 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 1332.5064 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C9F60F5840 WIA: 7984.3040 12094 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7984.3040 12094 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C9F60F5840 WIA: 1332.5064 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1332.5064 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 1332.5064 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C9F60F5840 WIA: 7984.3040 14110 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7984.3040 14110 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C9F60F5840 WIA: 1332.5064 2016 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1332.5064 2016 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 1332.5064 2016 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C9F60F5840 WIA: 7984.3040 14110 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7984.3040 14110 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C9F60F5840 WIA: 1332.5064 2016 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1332.5064 2016 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 1332.5064 2016 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C9F60F5840 WIA: 1332.5064 2016 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7984.3040 14110 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000004 WIA: 7984.3040 14110 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 7984.3040 14110 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000004 marked for removal WIA: 1332.5064 2016 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 7984.7788 14110 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1332.5064 2016 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7984.7788 14125 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7984.7788 14125 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7984.7788 14125 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 1332.9156 2031 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 7984.7788 14125 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1332.9156 2031 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000023C4 is now shut down WIA: 1332.5064 2063 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93C20000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 1332.5064 2063 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 1332.5064 2063 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7984.9964 14157 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 7984.9964 14157 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 7984.7788 14157 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7984.7788 14157 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7984.9964 15360 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (E) WIA: 7984.9964 15360 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 7984.9964 15360 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7984.9964 15375 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [1156] at 2022/10/30 13:04:10:841 **************** WIA: 1156.6588 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7984.9964 15375 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000005 WIA: 7984.9964 15375 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000005 to WiaEventNotifier WIA: 1156.6588 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000018C3E338D50 from server WIA: 1156.6588 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7984.9964 15375 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7984.9964 15375 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018C41446030 WIA: 1156.32 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 1156.32 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 1156.6588 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1156.6588 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7984.9964 15375 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 1156.6588 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018C41446030 WIA: 7984.9964 15375 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7984.9964 15375 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018C41446030 WIA: 1156.6588 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1156.6588 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 1156.6588 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018C41446030 WIA: 7984.9964 19860 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7984.9964 19860 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018C41446030 WIA: 1156.6588 4485 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1156.6588 4485 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 1156.6588 4485 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018C41446030 WIA: 7984.9964 19860 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7984.9964 19860 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018C41446030 WIA: 1156.6588 4485 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1156.6588 4485 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 1156.6588 4485 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018C41446030 WIA: 1156.6588 4485 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7984.9964 19860 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000005 WIA: 7984.9964 19860 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 7984.9964 19860 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000005 marked for removal WIA: 7984.7788 19860 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1156.6588 4485 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 1156.6588 4485 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7984.7788 19875 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7984.7788 19875 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7984.7788 19875 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 7984.7788 19875 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1156.32 4500 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 1156.32 4500 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00000020 is now shut down WIA: 1156.6588 4516 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93C20000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 1156.6588 4516 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 1156.6588 4516 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7984.3040 19907 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 7984.7788 19907 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7984.3040 19907 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 7984.7788 19907 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7984.3040 22719 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (12) WIA: 7984.3040 22719 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 7984.3040 22719 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7984.3040 22735 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [8368] at 2022/10/30 13:04:18:200 **************** WIA: 8368.8076 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7984.3040 22735 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000006 WIA: 7984.3040 22735 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000006 to WiaEventNotifier WIA: 8368.8076 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000258F21F8CB0 from server WIA: 8368.8076 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7984.3040 22735 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8368.7280 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7984.3040 22735 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000258F31258A0 WIA: 8368.7280 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 8368.8076 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8368.8076 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8368.8076 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000258F31258A0 WIA: 7984.3040 22735 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 7984.9964 22735 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7984.9964 22735 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000258F31258A0 WIA: 8368.8076 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8368.8076 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8368.8076 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000258F31258A0 WIA: 7984.9964 32172 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7984.9964 32172 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000258F31258A0 WIA: 8368.8076 9437 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8368.8076 9437 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8368.8076 9437 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000258F31258A0 WIA: 7984.9964 32172 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7984.9964 32172 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000258F31258A0 WIA: 8368.8076 9437 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8368.8076 9437 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8368.8076 9437 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000258F31258A0 WIA: 8368.8076 9437 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7984.9964 32172 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000006 WIA: 7984.9964 32172 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000006 WIA: 7984.9964 32172 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000006 marked for removal WIA: 8368.8076 9437 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 7984.7788 32172 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8368.8076 9437 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7984.7788 32188 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7984.7788 32188 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7984.7788 32188 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 8368.7280 9453 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 7984.7788 32188 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8368.7280 9453 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001C70 is now shut down WIA: 7984.7788 32204 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 7984.7788 32204 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 7984.9704 32204 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 7984.9704 32204 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (0000021E7E886F50) WIA: 7984.9704 32204 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (0000021E7E886F00) WIA: 7984.9704 32204 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 7984.9704 32204 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (0000021E7E881950) WIA: 7984.9704 32204 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (0000021E7E881B10) WIA: 7984.9704 32204 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (0000021E7E886FB0) WIA: 7984.9704 32204 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 7984.9704 32204 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 7984.9704 32204 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (0000021E7E887DB0) WIA: 7984.9704 32204 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (0000021E7E887120) WIA: 7984.9704 32204 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (0000021E7E8870A0) WIA: 7984.9704 32204 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (0000021E7E887FB0) WIA: 7984.9704 32204 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (0000021E7E887FF0) WIA: 7984.9704 32204 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (0000021E7E881910) WIA: 7984.9704 32204 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 7984.7788 32204 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8368.8076 9469 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93C20000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 8368.8076 9469 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8368.8076 9469 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7984.3040 32219 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000006 WIA: 7984.3040 32219 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000006 WIA: 7984.9704 32469 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (0000021E7E8819F0) WIA: 7984.9704 32469 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 7984.9532 32469 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 7984.9704 32469 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [7984] at 2022/10/30 13:03:55:512 **************** WIA: 7984.4472 32422 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93C20000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7984.4472 32422 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7984.4472 32422 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [7340] at 2022/10/30 13:04:42:887 **************** WIA: 7340.10040 16 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 7340.10040 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 10144 WIA: 7340.10144 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7340.2680 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 7340.2680 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 7340.2680 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 7340.2680 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 7340.10144 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 7340.10144 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 7340.10144 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 7340.10144 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000001F3AAFA77B0 WIA: 7340.10144 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 7340.10144 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 7340.10144 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 2188) WIA: 7340.2188 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 7340.2188 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 7340.2188 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 7340.10144 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7340.10144 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 7340.10144 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 7340.10144 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7340.10040 16 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 7340.10040 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 7340.10040 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7340.9112 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7340.10040 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7340.10040 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7340.10040 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7340.10040 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7340.10040 16 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 7340.9112 32 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [3484] at 2022/10/30 13:04:42:919 **************** WIA: 3484.3488 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7340.9112 32 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 7340.9112 32 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 7340.9112 32 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 3484.3488 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000002B80E158DD0 from server WIA: 3484.3488 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 3484.3200 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7340.9112 32 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 3484.3200 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 7340.9112 32 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002B810766170 WIA: 3484.3488 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3484.3488 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7340.4988 32 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 3484.3488 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002B810766170 WIA: 7340.4988 32 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7340.4988 32 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002B810766170 WIA: 3484.3488 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3484.3488 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 3484.3488 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002B810766170 WIA: 7340.4988 8875 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7340.4988 8875 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002B810766170 WIA: 3484.3488 8843 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3484.3488 8843 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 3484.3488 8843 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002B810766170 WIA: 7340.4988 8875 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7340.4988 8875 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002B810766170 WIA: 3484.3488 8843 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3484.3488 8843 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 3484.3488 8843 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002B810766170 WIA: 3484.3488 8843 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7340.4988 8875 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 7340.4988 8875 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7340.4988 8875 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 3484.3488 8843 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 7340.7916 8875 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3484.3488 8843 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7340.7916 8891 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7340.7916 8891 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 3484.3200 8859 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 7340.7916 8891 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 3484.3200 8859 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00000C80 is now shut down WIA: 7340.7916 8891 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3484.3488 8890 0 0 [sti.dll] DllEntryPoint, sti.dll (0x954B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 3484.3488 8890 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 3484.3488 8890 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7340.9112 8922 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7340.9112 8922 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7340.7916 8922 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7340.7916 8922 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7340.7916 38907 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 7340.7916 38907 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 7340.10040 38907 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 7340.10040 38907 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000001F3AAFA6F50) WIA: 7340.10040 38907 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000001F3AAFA6F00) WIA: 7340.10040 38907 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 7340.10040 38907 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000001F3AAFA1950) WIA: 7340.10040 38907 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000001F3AAFA1B10) WIA: 7340.10040 38907 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000001F3AAFA6FB0) WIA: 7340.10040 38907 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 7340.10040 38907 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 7340.10040 38907 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000001F3AAFA7DB0) WIA: 7340.10040 38907 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000001F3AAFA7120) WIA: 7340.10040 38907 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000001F3AAFA70A0) WIA: 7340.10040 38907 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000001F3AAFA7FB0) WIA: 7340.10040 38907 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000001F3AAFA7FF0) WIA: 7340.10040 38907 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000001F3AAFA1910) WIA: 7340.10040 38907 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 7340.7916 38907 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7340.10040 39172 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000001F3AAFA19F0) WIA: 7340.10040 39172 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 7340.10144 39172 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 7340.10040 39172 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [7340] at 2022/10/30 13:04:42:919 **************** WIA: 7340.2680 39140 0 0 [sti.dll] DllEntryPoint, sti.dll (0x954B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7340.2680 39140 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7340.2680 39140 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [10216] at 2022/12/06 13:47:25:224 **************** WIA: 10216.11156 16 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 10216.11156 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 4992 WIA: 10216.4992 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 10216.9908 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 10216.9908 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 10216.9908 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 10216.9908 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 10216.4992 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 10216.4992 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 10216.4992 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 10216.4992 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000002E7BF1577B0 WIA: 10216.4992 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 10216.4992 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 10216.4992 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 8452) WIA: 10216.8452 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 10216.8452 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 10216.8452 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 10216.4992 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 10216.4992 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 10216.4992 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 10216.4992 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 10216.1092 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 10216.11156 16 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 10216.11156 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 10216.11156 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 10216.11156 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 10216.11156 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 10216.11156 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 10216.11156 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 10216.11156 16 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 10216.1092 47 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [8508] at 2022/12/06 13:47:25:271 **************** WIA: 8508.6436 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 10216.10612 47 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 10216.10612 47 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 10216.10612 47 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 8508.6436 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000002047C4427A0 from server WIA: 8508.6436 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 10216.10612 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10216.10612 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002047F415610 WIA: 8508.6436 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8508.6436 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8508.6436 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002047F415610 WIA: 10216.10612 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10216.10612 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002047F415610 WIA: 8508.6436 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8508.280 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8508.6436 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8508.6436 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002047F415610 WIA: 8508.280 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 10216.10612 47 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 10216.1092 6172 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10216.1092 6172 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002047F415610 WIA: 8508.6436 6125 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8508.6436 6125 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8508.6436 6125 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002047F415610 WIA: 10216.1092 6172 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10216.1092 6172 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002047F415610 WIA: 8508.6436 6125 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8508.6436 6125 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8508.6436 6125 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002047F415610 WIA: 8508.6436 6125 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 10216.1092 6172 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 10216.1092 6172 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 10216.1092 6172 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 8508.6436 6125 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 10216.10340 6172 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8508.6436 6125 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10216.10340 6188 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 10216.10340 6188 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 10216.10340 6188 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 8508.280 6141 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 10216.10340 6188 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8508.280 6141 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00000118 is now shut down WIA: 8508.6436 6219 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93CE0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 8508.6436 6219 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8508.6436 6219 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10216.10612 6344 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 10216.10612 6344 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 10216.10340 6344 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10216.10340 6344 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10216.10612 8797 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (2) WIA: 10216.10612 8797 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 10216.10612 8797 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 10216.10612 8797 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [8544] at 2022/12/06 13:47:34:021 **************** WIA: 8544.7444 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 10216.1092 8797 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000002 WIA: 10216.1092 8797 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000002 to WiaEventNotifier WIA: 8544.7444 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001F43CB72300 from server WIA: 8544.7444 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 10216.1092 8797 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8544.6668 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10216.1092 8797 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F43FB858B0 WIA: 8544.6668 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 8544.7444 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8544.7444 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8544.7444 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F43FB858B0 WIA: 10216.1092 8797 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 10216.10612 8797 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10216.10612 8797 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F43FB858B0 WIA: 8544.7444 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8544.7444 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8544.7444 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F43FB858B0 WIA: 10216.10612 10547 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10216.10612 10547 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F43FB858B0 WIA: 8544.7444 1750 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8544.7444 1750 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8544.7444 1750 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F43FB858B0 WIA: 10216.10612 10547 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10216.10612 10547 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F43FB858B0 WIA: 8544.7444 1750 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8544.7444 1750 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8544.7444 1750 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F43FB858B0 WIA: 8544.7444 1750 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 10216.10612 10547 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000002 WIA: 10216.10612 10547 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 10216.10612 10547 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000002 marked for removal WIA: 8544.7444 1750 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 10216.10340 10547 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8544.7444 1750 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10216.10340 10563 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 10216.10340 10563 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 10216.10340 10563 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 10216.10340 10563 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8544.6668 1766 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 8544.6668 1766 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001A0C is now shut down WIA: 8544.7444 1781 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93CE0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 8544.7444 1781 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8544.7444 1781 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10216.10612 10578 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 10216.10612 10578 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 10216.10340 10578 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10216.10340 10578 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10216.10612 15172 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (6) WIA: 10216.10612 15172 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 10216.10612 15172 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 10216.10612 15172 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [11736] at 2022/12/06 13:47:40:396 **************** WIA: 11736.11252 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 10216.10612 15172 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000003 WIA: 10216.10612 15172 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000003 to WiaEventNotifier WIA: 11736.11252 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001F4BB201490 from server WIA: 11736.11252 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 10216.10612 15172 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 11736.1768 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10216.10612 15172 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F4BD865600 WIA: 11736.1768 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 11736.11252 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 11736.11252 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 10216.10612 15172 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 11736.11252 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F4BD865600 WIA: 10216.10612 15172 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10216.10612 15172 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F4BD865600 WIA: 11736.11252 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 11736.11252 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 11736.11252 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F4BD865600 WIA: 10216.10612 16922 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10216.10612 16922 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F4BD865600 WIA: 11736.11252 1750 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 11736.11252 1750 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 11736.11252 1750 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F4BD865600 WIA: 10216.10612 16922 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10216.10612 16922 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F4BD865600 WIA: 11736.11252 1750 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 11736.11252 1750 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 11736.11252 1750 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F4BD865600 WIA: 11736.11252 1750 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 10216.10612 16922 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000003 WIA: 10216.10612 16922 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 10216.10612 16922 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000003 marked for removal WIA: 10216.10340 16922 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11736.11252 1750 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 11736.11252 1750 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10216.10340 16938 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 10216.10340 16938 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 10216.10340 16938 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 11736.1768 1766 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 11736.1768 1766 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000006E8 is now shut down WIA: 10216.10340 16938 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11736.11252 1766 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93CE0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 11736.11252 1766 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 11736.11252 1766 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10216.1092 16953 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 10216.1092 16953 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 10216.10340 16953 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10216.10340 16953 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10216.1092 17766 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (A) WIA: 10216.1092 17766 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 10216.1092 17766 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 10216.1092 17766 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [12152] at 2022/12/06 13:47:42:990 **************** WIA: 12152.7764 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 10216.10612 17766 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000004 WIA: 10216.10612 17766 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000004 to WiaEventNotifier WIA: 12152.7764 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001860DB025C0 from server WIA: 12152.7764 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 12152.5864 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10216.10612 17766 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 12152.5864 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 10216.10612 17766 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001860E435250 WIA: 12152.7764 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 12152.7764 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 10216.1092 17766 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 12152.7764 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001860E435250 WIA: 10216.1092 17766 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10216.1092 17766 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001860E435250 WIA: 12152.7764 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 12152.7764 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 12152.7764 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001860E435250 WIA: 10216.1092 19547 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10216.1092 19547 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001860E435250 WIA: 12152.7764 1781 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 12152.7764 1781 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 12152.7764 1781 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001860E435250 WIA: 10216.1092 19547 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10216.1092 19547 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001860E435250 WIA: 12152.7764 1781 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 12152.7764 1781 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 12152.7764 1781 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001860E435250 WIA: 12152.7764 1781 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 10216.1092 19547 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000004 WIA: 10216.1092 19547 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 10216.1092 19547 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000004 marked for removal WIA: 12152.7764 1781 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 10216.10340 19547 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 12152.7764 1781 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10216.10340 19563 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 10216.10340 19563 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 10216.10340 19563 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 10216.10340 19563 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 12152.5864 1797 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 12152.5864 1797 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000016E8 is now shut down WIA: 12152.7764 1812 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93CE0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 12152.7764 1812 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 12152.7764 1812 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10216.10612 19594 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 10216.10612 19594 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 10216.10340 19594 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10216.10340 19594 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10216.10612 22891 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (E) WIA: 10216.10612 22891 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 10216.10612 22891 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 10216.10612 22907 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [7340] at 2022/12/06 13:47:48:131 **************** WIA: 7340.5640 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 10216.3432 22907 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000005 WIA: 10216.3432 22907 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000005 to WiaEventNotifier WIA: 7340.5640 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001F24B191A00 from server WIA: 7340.5640 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7340.5104 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10216.3432 22907 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7340.5104 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 10216.3432 22907 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F24D905AE0 WIA: 7340.5640 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7340.5640 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 10216.1092 22907 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 7340.5640 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F24D905AE0 WIA: 10216.1092 22907 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10216.1092 22907 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F24D905AE0 WIA: 7340.5640 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7340.5640 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7340.5640 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F24D905AE0 WIA: 10216.1092 29297 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10216.1092 29297 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F24D905AE0 WIA: 7340.5640 6390 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7340.5640 6390 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7340.5640 6390 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F24D905AE0 WIA: 10216.1092 29297 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10216.1092 29297 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F24D905AE0 WIA: 7340.5640 6390 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7340.5640 6390 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7340.5640 6390 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F24D905AE0 WIA: 7340.5640 6390 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 10216.1092 29297 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000005 WIA: 10216.1092 29297 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 10216.1092 29297 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000005 marked for removal WIA: 7340.5640 6390 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 10216.10340 29297 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7340.5640 6390 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10216.10340 29313 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 10216.10340 29313 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 10216.10340 29313 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 7340.5104 6406 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 10216.10340 29313 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7340.5104 6406 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000013F0 is now shut down WIA: 7340.5640 6421 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93CE0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7340.5640 6421 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7340.5640 6421 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10216.1092 29344 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 10216.1092 29344 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 10216.10340 29344 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10216.10340 29344 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10216.1092 30828 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (12) WIA: 10216.1092 30828 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 10216.1092 30828 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 10216.1092 30844 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [6232] at 2022/12/06 13:47:56:068 **************** WIA: 6232.7212 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 10216.1092 30844 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000006 WIA: 10216.1092 30844 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000006 to WiaEventNotifier WIA: 6232.7212 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000016F5ED717F0 from server WIA: 6232.7212 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 10216.1092 30844 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 6232.11084 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10216.1092 30844 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000016F612A57A0 WIA: 6232.11084 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 6232.7212 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6232.7212 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6232.7212 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000016F612A57A0 WIA: 10216.1092 30844 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 10216.3432 30844 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10216.3432 30844 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000016F612A57A0 WIA: 6232.7212 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6232.7212 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6232.7212 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000016F612A57A0 WIA: 10216.3432 32782 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10216.3432 32782 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000016F612A57A0 WIA: 6232.7212 1938 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6232.7212 1938 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6232.7212 1938 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000016F612A57A0 WIA: 10216.3432 32782 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10216.3432 32782 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000016F612A57A0 WIA: 6232.7212 1938 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6232.7212 1938 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6232.7212 1938 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000016F612A57A0 WIA: 6232.7212 1938 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 10216.3432 32782 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000006 WIA: 10216.3432 32782 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000006 WIA: 10216.3432 32782 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000006 marked for removal WIA: 6232.7212 1938 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 10216.10340 32782 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6232.7212 1938 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10216.10340 32797 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 10216.10340 32797 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 10216.10340 32797 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 10216.10340 32797 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6232.11084 1953 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 6232.11084 1953 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00002B4C is now shut down WIA: 6232.7212 1953 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93CE0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 6232.7212 1953 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6232.7212 1953 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10216.1092 32813 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000006 WIA: 10216.10340 32813 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10216.1092 32813 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000006 WIA: 10216.10340 32813 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10216.1092 34313 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (16) WIA: 10216.1092 34313 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 10216.1092 34313 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 10216.1092 34328 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [8704] at 2022/12/06 13:47:59:552 **************** WIA: 8704.7332 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 10216.10612 34328 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000007 WIA: 10216.10612 34328 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000007 to WiaEventNotifier WIA: 8704.7332 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000011FD69417D0 from server WIA: 8704.7332 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 8704.5780 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10216.10612 34328 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8704.5780 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 10216.10612 34328 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000011FD8F957E0 WIA: 8704.7332 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8704.7332 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 10216.3432 34328 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 8704.7332 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000011FD8F957E0 WIA: 10216.3432 34328 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10216.3432 34328 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000011FD8F957E0 WIA: 8704.7332 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8704.7332 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8704.7332 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000011FD8F957E0 WIA: 10216.3432 36078 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10216.3432 36078 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000011FD8F957E0 WIA: 8704.7332 1750 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8704.7332 1750 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8704.7332 1750 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000011FD8F957E0 WIA: 10216.3432 36078 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10216.3432 36078 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000011FD8F957E0 WIA: 8704.7332 1750 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8704.7332 1750 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8704.7332 1750 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000011FD8F957E0 WIA: 8704.7332 1750 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 10216.3432 36078 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000007 WIA: 10216.3432 36078 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000007 WIA: 10216.3432 36078 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000007 marked for removal WIA: 8704.7332 1750 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 10216.10340 36078 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8704.7332 1750 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10216.10340 36094 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 10216.10340 36094 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 8704.5780 1766 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 10216.10340 36094 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 8704.5780 1766 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001694 is now shut down WIA: 10216.10340 36094 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8704.7332 1782 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93CE0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 8704.7332 1782 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8704.7332 1782 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10216.10612 36110 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000007 WIA: 10216.10612 36110 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000007 WIA: 10216.10340 36110 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10216.10340 36110 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10216.10340 36203 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 10216.10340 36203 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 10216.11156 36203 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 10216.11156 36203 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000002E7BF156F50) WIA: 10216.11156 36203 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000002E7BF156F00) WIA: 10216.11156 36203 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 10216.11156 36203 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000002E7BF151950) WIA: 10216.11156 36203 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000002E7BF151B10) WIA: 10216.11156 36203 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000002E7BF156FB0) WIA: 10216.11156 36203 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 10216.11156 36203 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 10216.11156 36203 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000002E7BF157AD0) WIA: 10216.11156 36203 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000002E7BF157120) WIA: 10216.11156 36203 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000002E7BF1570A0) WIA: 10216.11156 36203 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000002E7BF157CD0) WIA: 10216.11156 36203 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000002E7BF157D10) WIA: 10216.11156 36203 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000002E7BF151910) WIA: 10216.11156 36203 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 10216.10340 36203 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10216.11156 36469 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000002E7BF1519F0) WIA: 10216.11156 36469 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 10216.4992 36469 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 10216.11156 36469 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [10216] at 2022/12/06 13:47:25:271 **************** WIA: 10216.11156 36422 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93CE0000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 10216.11156 36422 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10216.11156 36422 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [11212] at 2022/12/06 13:48:04:959 **************** WIA: 11212.9372 0 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 11212.9372 0 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 6872 WIA: 11212.6872 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 11212.12276 0 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 11212.12276 0 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 11212.12276 0 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 11212.12276 0 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 11212.6872 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 11212.6872 0 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 11212.6872 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 11212.6872 0 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000002A5156177B0 WIA: 11212.6872 0 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 11212.6872 0 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 11212.6872 0 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 12124) WIA: 11212.12124 0 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 11212.12124 0 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 11212.12124 0 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 11212.6872 15 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 11212.6872 15 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 11212.6872 15 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 11212.6872 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 11212.9372 15 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 11212.9372 15 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 11212.9372 15 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 11212.9372 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 11212.3304 15 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 11212.9372 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 11212.9372 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 11212.9372 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 11212.9372 15 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 11212.3304 31 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [6692] at 2022/12/06 13:48:04:990 **************** WIA: 6692.11160 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 11212.6188 31 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 11212.6188 31 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 11212.6188 31 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 6692.11160 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000022434FE06D0 from server WIA: 6692.11160 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 11212.6188 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 6692.10668 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 11212.6188 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000224359B4F40 WIA: 6692.10668 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 6692.11160 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 11212.6188 31 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 6692.11160 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6692.11160 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000224359B4F40 WIA: 11212.6188 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 11212.6188 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000224359B4F40 WIA: 6692.11160 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6692.11160 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6692.11160 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000224359B4F40 WIA: 11212.6188 4937 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 11212.6188 4937 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000224359B4F40 WIA: 6692.11160 4906 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6692.11160 4906 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6692.11160 4906 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000224359B4F40 WIA: 11212.6188 4937 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 11212.6188 4937 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000224359B4F40 WIA: 6692.11160 4906 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6692.11160 4906 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6692.11160 4906 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000224359B4F40 WIA: 6692.11160 4906 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 11212.6188 4937 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 11212.6188 4937 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 11212.6188 4937 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 6692.11160 4906 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 11212.5792 4937 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6692.11160 4906 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 11212.5792 4953 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 11212.5792 4953 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 11212.5792 4953 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 6692.10668 4922 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 11212.5792 4953 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6692.10668 4922 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000029AC is now shut down WIA: 6692.11160 4953 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93930000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 6692.11160 4953 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6692.11160 4953 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 11212.3304 4984 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 11212.3304 4984 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 11212.5792 4984 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11212.5792 4984 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11212.3304 5922 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (2) WIA: 11212.3304 5922 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 11212.3304 5922 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 11212.3304 5922 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [9004] at 2022/12/06 13:48:10:881 **************** WIA: 9004.9340 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 11212.6188 5922 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000002 WIA: 11212.6188 5922 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000002 to WiaEventNotifier WIA: 9004.9340 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000020254921940 from server WIA: 9004.9340 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 9004.8892 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 11212.6188 5922 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9004.8892 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 11212.6188 5922 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020256F950B0 WIA: 9004.9340 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 11212.3304 5922 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 9004.9340 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 9004.9340 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020256F950B0 WIA: 11212.3304 5922 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 11212.3304 5922 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020256F950B0 WIA: 9004.9340 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9004.9340 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 9004.9340 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020256F950B0 WIA: 11212.3304 7718 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 11212.3304 7718 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020256F950B0 WIA: 9004.9340 1796 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9004.9340 1796 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 9004.9340 1796 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020256F950B0 WIA: 11212.3304 7718 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 11212.3304 7718 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020256F950B0 WIA: 9004.9340 1796 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9004.9340 1796 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 9004.9340 1796 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020256F950B0 WIA: 9004.9340 1796 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 11212.3304 7718 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000002 WIA: 11212.3304 7718 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 11212.3304 7718 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000002 marked for removal WIA: 9004.9340 1796 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 11212.5792 7718 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9004.9340 1796 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 11212.5792 7734 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 11212.5792 7734 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 11212.5792 7734 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 11212.5792 7734 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9004.8892 1812 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 9004.8892 1812 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000022BC is now shut down WIA: 9004.9340 1828 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93930000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 9004.9340 1828 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9004.9340 1828 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 11212.6188 7750 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 11212.6188 7750 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 11212.5792 7750 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11212.5792 7750 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11212.6188 8922 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (6) WIA: 11212.6188 8922 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 11212.6188 8922 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 11212.6188 8937 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [8336] at 2022/12/06 13:48:13:896 **************** WIA: 8336.7156 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 11212.3304 8937 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000003 WIA: 11212.3304 8937 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000003 to WiaEventNotifier WIA: 8336.7156 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000186025E38E0 from server WIA: 8336.7156 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 11212.6188 8937 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 11212.6188 8937 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018605605320 WIA: 8336.7156 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8336.7156 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8336.10400 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8336.7156 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018605605320 WIA: 8336.10400 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 11212.6188 8937 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 11212.6188 8937 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018605605320 WIA: 8336.7156 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 11212.3304 8937 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 8336.7156 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8336.7156 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018605605320 WIA: 11212.3304 11000 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 11212.3304 11000 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018605605320 WIA: 8336.7156 2063 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8336.7156 2063 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8336.7156 2063 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018605605320 WIA: 11212.3304 11000 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 11212.3304 11000 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018605605320 WIA: 8336.7156 2063 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8336.7156 2063 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8336.7156 2063 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018605605320 WIA: 8336.7156 2063 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 11212.3304 11000 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000003 WIA: 11212.3304 11000 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 11212.3304 11000 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000003 marked for removal WIA: 11212.5792 11000 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8336.7156 2063 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 8336.7156 2063 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 11212.5792 11015 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 11212.5792 11015 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 11212.5792 11015 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 11212.5792 11015 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8336.10400 2078 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 8336.10400 2078 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000028A0 is now shut down WIA: 8336.7156 2078 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93930000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 8336.7156 2078 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8336.7156 2078 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 11212.6188 11015 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 11212.5792 11015 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11212.6188 11015 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 11212.5792 11015 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11212.6188 13015 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (A) WIA: 11212.6188 13015 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 11212.6188 13015 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 11212.6188 13031 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [1468] at 2022/12/06 13:48:17:990 **************** WIA: 1468.11040 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 11212.3304 13031 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000004 WIA: 11212.3304 13031 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000004 to WiaEventNotifier WIA: 1468.11040 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001F079C22690 from server WIA: 1468.11040 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 11212.6188 13031 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 11212.6188 13031 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F07C2D59D0 WIA: 1468.10288 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 1468.11040 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1468.11040 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 1468.10288 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 1468.11040 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F07C2D59D0 WIA: 11212.6188 13031 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 11212.3304 13031 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 11212.3304 13031 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F07C2D59D0 WIA: 1468.11040 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1468.11040 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 1468.11040 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F07C2D59D0 WIA: 11212.3304 17578 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 11212.3304 17578 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F07C2D59D0 WIA: 1468.11040 4547 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1468.11040 4547 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 1468.11040 4547 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F07C2D59D0 WIA: 11212.3304 17578 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 11212.3304 17578 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F07C2D59D0 WIA: 1468.11040 4547 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1468.11040 4547 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 1468.11040 4547 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F07C2D59D0 WIA: 1468.11040 4547 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 11212.3304 17578 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000004 WIA: 11212.3304 17578 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 11212.3304 17578 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000004 marked for removal WIA: 1468.11040 4547 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 11212.5792 17578 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1468.11040 4547 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 11212.5792 17593 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 11212.5792 17593 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 1468.10288 4562 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 11212.5792 17593 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 1468.10288 4562 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00002830 is now shut down WIA: 11212.5792 17593 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1468.11040 4578 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93930000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 1468.11040 4578 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 1468.11040 4578 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 11212.6188 17625 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 11212.6188 17625 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 11212.5792 17625 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11212.5792 17625 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11212.6188 20109 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (E) WIA: 11212.6188 20109 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 11212.6188 20109 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 11212.6188 20125 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [9108] at 2022/12/06 13:48:25:084 **************** WIA: 9108.7924 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 11212.6188 20125 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000005 WIA: 11212.6188 20125 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000005 to WiaEventNotifier WIA: 9108.7924 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000002768E2011A0 from server WIA: 9108.7924 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 9108.2808 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 11212.6188 20125 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9108.2808 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 11212.6188 20125 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000276912954C0 WIA: 9108.7924 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9108.7924 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 11212.3304 20125 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 9108.7924 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000276912954C0 WIA: 11212.3304 20125 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 11212.3304 20125 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000276912954C0 WIA: 9108.7924 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9108.7924 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 9108.7924 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000276912954C0 WIA: 11212.3304 24500 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 11212.3304 24500 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000276912954C0 WIA: 9108.7924 4375 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9108.7924 4375 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 9108.7924 4375 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000276912954C0 WIA: 11212.3304 24500 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 11212.3304 24500 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000276912954C0 WIA: 9108.7924 4375 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9108.7924 4375 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 9108.7924 4375 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000276912954C0 WIA: 9108.7924 4375 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 11212.3304 24500 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000005 WIA: 11212.3304 24500 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 11212.3304 24500 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000005 marked for removal WIA: 9108.7924 4375 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 11212.5792 24500 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9108.7924 4375 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 11212.5792 24515 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 11212.5792 24515 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 11212.5792 24515 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 11212.5792 24515 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9108.2808 4390 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 9108.2808 4390 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00000AF8 is now shut down WIA: 9108.7924 4422 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93930000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 9108.7924 4422 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9108.7924 4422 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 11212.6188 24562 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 11212.6188 24562 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 11212.5792 24562 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11212.5792 24562 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11212.5792 34968 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 11212.5792 34968 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 11212.9372 34968 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 11212.9372 34968 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000002A515616F50) WIA: 11212.9372 34968 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000002A515616F00) WIA: 11212.9372 34968 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 11212.9372 34968 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000002A515611950) WIA: 11212.9372 34968 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000002A515611B10) WIA: 11212.9372 34968 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000002A515616FB0) WIA: 11212.9372 34968 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 11212.9372 34968 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 11212.9372 34968 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000002A515617DB0) WIA: 11212.9372 34968 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000002A515617120) WIA: 11212.9372 34968 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000002A5156170A0) WIA: 11212.9372 34968 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000002A515617FB0) WIA: 11212.9372 34968 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000002A515617FF0) WIA: 11212.9372 34968 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000002A515611910) WIA: 11212.9372 34968 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 11212.5792 34968 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11212.9372 35234 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000002A5156119F0) WIA: 11212.6872 35234 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 11212.9372 35234 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 11212.9372 35234 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [11212] at 2022/12/06 13:48:04:974 **************** WIA: 11212.9372 35219 0 0 [sti.dll] DllEntryPoint, sti.dll (0x93930000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 11212.9372 35219 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 11212.9372 35219 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [11688] at 2023/04/30 17:03:15:946 **************** WIA: 11688.9384 0 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 11688.9384 47 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 2780 WIA: 11688.2780 47 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 11688.804 47 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 11688.804 47 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 11688.804 47 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 11688.804 47 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 11688.2780 47 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 11688.2780 47 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 11688.2780 47 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 11688.2780 47 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000001D1BA147D90 WIA: 11688.2780 47 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 11688.2780 47 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 11688.2780 47 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 11688.2780 47 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 11688.2780 47 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 4304) WIA: 11688.2780 47 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 11688.4304 47 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 11688.4304 47 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 11688.4304 47 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 11688.7748 63 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 11688.9384 63 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 11688.2780 63 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 11688.2780 63 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 11688.9384 63 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 11688.9384 63 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 11688.2780 63 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 11688.2780 63 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 11688.9384 63 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 11688.9384 63 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 11688.9384 63 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 11688.9384 63 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 11688.9384 63 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 11688.7748 78 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [9388] at 2023/04/30 17:03:16:024 **************** WIA: 9388.8552 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 11688.7748 78 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 11688.7748 78 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 11688.7748 78 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 9388.8552 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000181E7F098D0 from server WIA: 9388.8552 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 11688.7748 78 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9388.10156 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 11688.7748 78 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000181EA705DF0 WIA: 9388.10156 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 9388.8552 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9388.8552 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 9388.8552 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000181EA705DF0 WIA: 11688.7748 94 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 11688.7676 94 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 11688.7676 94 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000181EA705DF0 WIA: 9388.8552 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9388.8552 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 9388.8552 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000181EA705DF0 WIA: 11688.7748 2078 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 11688.7748 2078 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000181EA705DF0 WIA: 9388.8552 2000 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9388.8552 2000 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 9388.8552 2000 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000181EA705DF0 WIA: 11688.7748 2078 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 11688.7748 2078 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000181EA705DF0 WIA: 9388.8552 2000 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9388.8552 2000 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 9388.8552 2000 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000181EA705DF0 WIA: 9388.8552 2000 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 11688.7748 2078 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 11688.7748 2078 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 11688.7748 2078 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 11688.9856 2078 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9388.8552 2000 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 9388.8552 2000 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 11688.9856 2094 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 11688.9856 2094 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 11688.9856 2094 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 11688.9856 2094 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9388.10156 2016 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 9388.10156 2016 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000027AC is now shut down WIA: 9388.8552 2078 0 0 [sti.dll] DllEntryPoint, sti.dll (0xB4910000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 9388.8552 2078 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9388.8552 2078 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 11688.7676 2281 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 11688.9856 2281 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11688.7676 2281 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 11688.9856 2281 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11688.9856 32110 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 11688.9856 32110 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 11688.9384 32110 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 11688.9384 32110 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000001D1BA146F50) WIA: 11688.9384 32110 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000001D1BA146F00) WIA: 11688.9384 32110 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 11688.9384 32110 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000001D1BA141950) WIA: 11688.9384 32110 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000001D1BA141B10) WIA: 11688.9384 32110 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000001D1BA146FB0) WIA: 11688.9384 32110 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 11688.9384 32110 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 11688.9384 32110 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000001D1BA147AB0) WIA: 11688.9384 32110 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000001D1BA147120) WIA: 11688.9384 32110 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000001D1BA1470A0) WIA: 11688.9384 32110 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000001D1BA147CB0) WIA: 11688.9384 32110 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000001D1BA147CF0) WIA: 11688.9384 32110 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000001D1BA141910) WIA: 11688.9384 32110 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 11688.9856 32110 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11688.9384 32375 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000001D1BA1419F0) WIA: 11688.9384 32375 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 11688.2780 32375 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 11688.9384 32375 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [11688] at 2023/04/30 17:03:16:024 **************** WIA: 11688.804 32297 0 0 [sti.dll] DllEntryPoint, sti.dll (0xB4910000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 11688.804 32297 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 11688.804 32297 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [8152] at 2023/05/03 16:12:07:052 **************** WIA: 8152.3680 0 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 8152.3680 47 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 1216 WIA: 8152.1216 47 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8152.10064 47 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 8152.10064 47 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 8152.10064 47 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8152.10064 47 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 8152.1216 47 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8152.1216 47 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 8152.1216 47 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 8152.1216 47 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x00000268081077B0 WIA: 8152.1216 47 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 8152.1216 47 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 8152.1216 47 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 10176) WIA: 8152.10176 47 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 8152.10176 47 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 8152.10176 47 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 8152.1216 47 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 8152.1216 47 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 8152.1216 47 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 8152.1216 47 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8152.932 63 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 8152.3680 63 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 8152.3680 63 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 8152.3680 63 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 8152.3680 63 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8152.3680 63 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8152.3680 63 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8152.3680 63 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8152.3680 63 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 8152.932 78 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [9712] at 2023/05/03 16:12:07:130 **************** WIA: 9712.7472 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 8152.932 78 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 8152.932 78 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 8152.932 78 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 9712.7472 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000020D45BEE230 from server WIA: 9712.7472 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 8152.932 78 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9712.10356 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8152.932 78 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020D483A45E0 WIA: 9712.10356 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 9712.7472 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9712.7472 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 9712.7472 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020D483A45E0 WIA: 8152.932 78 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 8152.11424 78 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8152.11424 78 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020D483A45E0 WIA: 9712.7472 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9712.7472 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 9712.7472 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020D483A45E0 WIA: 8152.11424 1813 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8152.11424 1813 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020D483A45E0 WIA: 9712.7472 1735 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9712.7472 1735 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 9712.7472 1735 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020D483A45E0 WIA: 8152.11424 1813 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8152.11424 1813 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020D483A45E0 WIA: 9712.7472 1735 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9712.7472 1735 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 9712.7472 1735 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020D483A45E0 WIA: 9712.7472 1735 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 8152.11424 1813 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 8152.11424 1813 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8152.11424 1813 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 9712.7472 1735 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 9712.7472 1735 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8152.12092 1813 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8152.12092 1828 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 8152.12092 1828 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 8152.12092 1828 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 9712.10356 1750 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 8152.12092 1828 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9712.10356 1750 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00002874 is now shut down WIA: 9712.7472 1766 0 0 [sti.dll] DllEntryPoint, sti.dll (0x31B60000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 9712.7472 1766 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9712.7472 1766 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8152.932 1985 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8152.932 1985 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8152.12092 1985 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8152.12092 1985 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8152.10064 7188 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 8152.10064 7188 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8152.10064 7188 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 8152.1216 7188 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8152.1216 7188 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 8152.1216 7188 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 8152.1216 7188 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 8152.1216 7188 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 8152.1216 7188 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 8152.1216 7188 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 8152.1216 7188 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 8152.1216 7188 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 8152.1216 7188 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8152.10064 7266 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 8152.10064 7266 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8152.10064 7266 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 8152.1216 7266 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8152.1216 7266 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 8152.1216 7266 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 8152.1216 7266 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 8152.1216 7266 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 8152.1216 7266 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 8152.1216 7266 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 8152.1216 7266 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 8152.1216 7266 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 8152.1216 7266 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8152.10064 17391 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 8152.10064 17391 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8152.10064 17391 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 8152.1216 17391 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8152.1216 17391 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 8152.1216 17391 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 8152.1216 17391 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 8152.1216 17391 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 8152.1216 17391 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 8152.1216 17391 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 8152.1216 17391 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 8152.1216 17391 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 8152.1216 17391 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8152.10064 27578 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 8152.10064 27578 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8152.10064 27578 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 8152.1216 27578 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8152.1216 27578 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 8152.1216 27578 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 8152.1216 27578 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 8152.1216 27578 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 8152.1216 27578 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 8152.1216 27578 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 8152.1216 27578 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 8152.1216 27578 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 8152.1216 27578 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8152.12092 31844 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 8152.12092 31844 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 8152.3680 31844 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 8152.3680 31844 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (0000026808106F50) WIA: 8152.3680 31844 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (0000026808106F00) WIA: 8152.3680 31844 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 8152.3680 31844 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (0000026808101950) WIA: 8152.3680 31844 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (0000026808101B10) WIA: 8152.3680 31844 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (0000026808106FB0) WIA: 8152.3680 31844 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 8152.3680 31844 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 8152.3680 31844 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (0000026808107DB0) WIA: 8152.3680 31844 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (0000026808107120) WIA: 8152.3680 31844 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (00000268081070A0) WIA: 8152.3680 31844 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (0000026808107FB0) WIA: 8152.3680 31844 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (0000026808107FF0) WIA: 8152.3680 31844 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (0000026808101910) WIA: 8152.3680 31844 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 8152.12092 31844 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8152.3680 32094 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (00000268081019F0) WIA: 8152.3680 32094 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 8152.1216 32094 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 8152.3680 32094 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [8152] at 2023/05/03 16:12:07:115 **************** WIA: 8152.10064 32031 0 0 [sti.dll] DllEntryPoint, sti.dll (0x31B60000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 8152.10064 32031 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8152.10064 32031 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [9920] at 2023/09/08 16:31:31:457 **************** WIA: 9920.2656 0 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 9920.2656 0 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 4224 WIA: 9920.4224 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 9920.11032 15 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 9920.11032 15 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 9920.11032 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 9920.11032 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 9920.4224 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 9920.4224 15 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 9920.4224 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 9920.4224 15 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x0000029F3C7C7E10 WIA: 9920.4224 15 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 9920.4224 15 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 9920.4224 15 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 9920.4224 15 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 9920.4224 15 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 10228) WIA: 9920.4224 15 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 9920.10228 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 9920.10228 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 9920.10228 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 9920.10464 15 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 9920.2656 15 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 9920.4224 15 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 9920.4224 15 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 9920.2656 15 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 9920.2656 15 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 9920.4224 15 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 9920.4224 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 9920.2656 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 9920.2656 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 9920.2656 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 9920.2656 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 9920.2656 15 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 9920.10464 47 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [9736] at 2023/09/08 16:31:31:498 **************** WIA: 9736.2328 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 9920.10464 47 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 9920.10464 47 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 9920.10464 47 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 9736.2328 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000015462FC2B90 from server WIA: 9736.2328 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 9920.10464 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9736.5052 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9920.10464 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000015465785050 WIA: 9736.5052 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 9736.2328 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9736.2328 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 9736.2328 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000015465785050 WIA: 9920.10464 47 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 9920.10104 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9920.10104 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000015465785050 WIA: 9736.2328 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9736.2328 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 9736.2328 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000015465785050 WIA: 9920.10464 3375 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10464 3375 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000015465785050 WIA: 9736.2328 3328 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9736.2328 3328 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 9736.2328 3328 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000015465785050 WIA: 9920.10464 3375 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10464 3375 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000015465785050 WIA: 9736.2328 3328 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9736.2328 3328 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 9736.2328 3328 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000015465785050 WIA: 9736.2328 3328 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 9920.10464 3375 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 9920.10464 3375 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 9920.10464 3375 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 9920.1196 3375 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9736.2328 3328 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 9736.2328 3328 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.1196 3390 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 9920.1196 3390 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 9736.5052 3343 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 9920.1196 3390 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 9736.5052 3343 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000013BC is now shut down WIA: 9920.1196 3390 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9736.2328 3359 0 0 [sti.dll] DllEntryPoint, sti.dll (0xEE6B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 9736.2328 3359 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9736.2328 3359 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.10104 3468 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 9920.10104 3468 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 9920.1196 3468 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.1196 3468 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.10104 4437 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (2) WIA: 9920.10104 4437 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 9920.10104 4437 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 9920.10104 4437 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [11772] at 2023/09/08 16:31:35:894 **************** WIA: 11772.10732 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 9920.10464 4437 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000002 WIA: 9920.10464 4437 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000002 to WiaEventNotifier WIA: 11772.10732 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000023A0BF7E970 from server WIA: 11772.10732 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 11772.9360 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9920.10464 4437 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 11772.9360 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 9920.10464 4437 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023A0E6B56B0 WIA: 9920.10104 4437 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 11772.10732 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 11772.10732 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 11772.10732 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023A0E6B56B0 WIA: 9920.10104 4437 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9920.10104 4437 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023A0E6B56B0 WIA: 11772.10732 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 11772.10732 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 11772.10732 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023A0E6B56B0 WIA: 9920.10104 6281 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10104 6281 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023A0E6B56B0 WIA: 11772.10732 1844 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 11772.10732 1844 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 11772.10732 1844 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023A0E6B56B0 WIA: 9920.10104 6281 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10104 6281 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023A0E6B56B0 WIA: 11772.10732 1844 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 11772.10732 1844 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 11772.10732 1844 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023A0E6B56B0 WIA: 11772.10732 1844 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 9920.10104 6281 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000002 WIA: 9920.10104 6281 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 9920.10104 6281 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000002 marked for removal WIA: 11772.10732 1844 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 9920.1196 6281 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11772.10732 1844 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.1196 6297 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 9920.1196 6297 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 11772.9360 1860 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 9920.1196 6297 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 11772.9360 1860 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00002490 is now shut down WIA: 9920.1196 6297 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11772.10732 1875 0 0 [sti.dll] DllEntryPoint, sti.dll (0xEE6B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 11772.10732 1875 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 11772.10732 1875 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.10464 6328 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 9920.10464 6328 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 9920.1196 6328 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.1196 6328 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.10464 7875 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (6) WIA: 9920.10464 7875 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 9920.10464 7875 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 9920.10464 7875 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [10424] at 2023/09/08 16:31:39:333 **************** WIA: 10424.2240 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 9920.10464 7875 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000003 WIA: 9920.10464 7875 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000003 to WiaEventNotifier WIA: 10424.2240 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001C2A54F1AB0 from server WIA: 10424.2240 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 10424.12260 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9920.10464 7875 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10424.12260 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 9920.10464 7875 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C2A7D951D0 WIA: 10424.2240 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9920.10104 7875 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 10424.2240 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 10424.2240 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C2A7D951D0 WIA: 9920.10104 7875 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9920.10104 7875 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C2A7D951D0 WIA: 10424.2240 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10424.2240 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 10424.2240 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C2A7D951D0 WIA: 9920.10104 9562 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10104 9562 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C2A7D951D0 WIA: 10424.2240 1687 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10424.2240 1687 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 10424.2240 1687 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C2A7D951D0 WIA: 9920.10104 9562 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10104 9562 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C2A7D951D0 WIA: 10424.2240 1687 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10424.2240 1687 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 10424.2240 1687 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C2A7D951D0 WIA: 10424.2240 1687 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 9920.10104 9562 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000003 WIA: 9920.10104 9578 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 9920.10104 9578 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000003 marked for removal WIA: 10424.2240 1703 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 9920.1196 9578 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10424.2240 1703 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.1196 9593 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 9920.1196 9593 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 9920.1196 9593 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 10424.12260 1718 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 9920.1196 9593 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10424.12260 1718 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00002FE4 is now shut down WIA: 10424.2240 1718 0 0 [sti.dll] DllEntryPoint, sti.dll (0xEE6B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 10424.2240 1718 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10424.2240 1718 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.10464 9609 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 9920.10464 9609 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 9920.1196 9609 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.1196 9609 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.11032 10000 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 9920.11032 10000 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 9920.11032 10000 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 9920.4224 10000 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 9920.4224 10000 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 9920.4224 10000 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 9920.4224 10000 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 9920.4224 10000 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 9920.4224 10000 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 9920.4224 10000 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 9920.4224 10000 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 9920.4224 10000 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 9920.4224 10000 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 9920.11032 10203 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 9920.11032 10203 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 9920.11032 10203 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 9920.4224 10203 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 9920.4224 10203 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 9920.4224 10203 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 9920.4224 10203 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 9920.4224 10203 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 9920.4224 10203 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 9920.4224 10203 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 9920.4224 10203 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 9920.4224 10203 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 9920.4224 10203 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 9920.10464 11265 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (A) WIA: 9920.10464 11265 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 9920.10464 11265 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 9920.10464 11265 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [1592] at 2023/09/08 16:31:42:726 **************** WIA: 1592.5572 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 9920.10104 11265 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000004 WIA: 9920.10104 11265 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000004 to WiaEventNotifier WIA: 1592.5572 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000022A5F9BE820 from server WIA: 1592.5572 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 1592.1396 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9920.10104 11265 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1592.1396 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 9920.10104 11265 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022A62335380 WIA: 1592.5572 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1592.5572 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 9920.10464 11265 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 1592.5572 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022A62335380 WIA: 9920.10464 11265 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9920.10464 11265 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022A62335380 WIA: 1592.5572 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1592.5572 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 1592.5572 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022A62335380 WIA: 9920.10464 13078 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10464 13078 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022A62335380 WIA: 1592.5572 1813 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1592.5572 1813 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 1592.5572 1813 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022A62335380 WIA: 9920.10464 13078 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10464 13078 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022A62335380 WIA: 1592.5572 1813 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1592.5572 1813 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 1592.5572 1813 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022A62335380 WIA: 1592.5572 1813 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 9920.10464 13078 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000004 WIA: 9920.10464 13078 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 9920.10464 13078 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000004 marked for removal WIA: 1592.5572 1813 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 9920.1196 13078 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1592.5572 1813 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.1196 13093 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 9920.1196 13093 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 1592.1396 1828 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 9920.1196 13093 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 1592.1396 1828 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00000574 is now shut down WIA: 9920.1196 13093 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1592.5572 1828 0 0 [sti.dll] DllEntryPoint, sti.dll (0xEE6B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 1592.5572 1828 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 1592.5572 1828 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.10104 13109 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 9920.10104 13109 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 9920.1196 13109 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.1196 13109 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.10104 14250 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (E) WIA: 9920.10104 14250 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 9920.10104 14250 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 9920.10104 14250 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [3188] at 2023/09/08 16:31:45:705 **************** WIA: 3188.11436 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 9920.10104 14250 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000005 WIA: 9920.10104 14250 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000005 to WiaEventNotifier WIA: 3188.11436 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000022AF815EC70 from server WIA: 3188.11436 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 3188.4580 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9920.10104 14250 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 3188.4580 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 9920.10104 14250 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022AFA9851F0 WIA: 3188.11436 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9920.10464 14250 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 3188.11436 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 3188.11436 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022AFA9851F0 WIA: 9920.10464 14250 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9920.10464 14250 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022AFA9851F0 WIA: 3188.11436 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3188.11436 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 3188.11436 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022AFA9851F0 WIA: 9920.10464 16062 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10464 16062 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022AFA9851F0 WIA: 3188.11436 1812 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3188.11436 1812 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 3188.11436 1812 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022AFA9851F0 WIA: 9920.10464 16062 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10464 16062 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022AFA9851F0 WIA: 3188.11436 1812 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3188.11436 1812 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 3188.11436 1812 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022AFA9851F0 WIA: 3188.11436 1812 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 9920.10464 16062 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000005 WIA: 9920.10464 16062 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 9920.10464 16062 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000005 marked for removal WIA: 3188.11436 1812 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 9920.1196 16062 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3188.11436 1812 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.1196 16078 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 9920.1196 16078 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 3188.4580 1828 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 9920.1196 16078 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 3188.4580 1828 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000011E4 is now shut down WIA: 9920.1196 16078 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3188.11436 1843 0 0 [sti.dll] DllEntryPoint, sti.dll (0xEE6B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 3188.11436 1843 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 3188.11436 1843 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.10464 16093 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 9920.10464 16093 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 9920.1196 16093 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.1196 16109 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.10464 17718 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (12) WIA: 9920.10464 17718 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 9920.10464 17718 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 9920.10464 17718 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [5088] at 2023/09/08 16:31:49:183 **************** WIA: 5088.7272 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 9920.10104 17718 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000006 WIA: 9920.10104 17718 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000006 to WiaEventNotifier WIA: 5088.7272 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001B145EB2F30 from server WIA: 5088.7272 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 5088.8292 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9920.10104 17718 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5088.8292 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 9920.10104 17718 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B1486B5560 WIA: 5088.7272 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5088.7272 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5088.7272 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B1486B5560 WIA: 9920.10464 17718 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 9920.10104 17718 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9920.10104 17718 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B1486B5560 WIA: 5088.7272 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5088.7272 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5088.7272 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B1486B5560 WIA: 9920.10104 19609 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10104 19609 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B1486B5560 WIA: 5088.7272 1891 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5088.7272 1891 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5088.7272 1891 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B1486B5560 WIA: 9920.10104 19625 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10104 19625 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B1486B5560 WIA: 5088.7272 1907 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5088.7272 1907 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5088.7272 1907 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B1486B5560 WIA: 5088.7272 1907 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 9920.10104 19625 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000006 WIA: 9920.10104 19625 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000006 WIA: 9920.10104 19625 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000006 marked for removal WIA: 5088.7272 1907 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 9920.1196 19625 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5088.7272 1907 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.1196 19640 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 9920.1196 19640 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 9920.1196 19640 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 5088.8292 1922 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 9920.1196 19640 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5088.8292 1922 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00002064 is now shut down WIA: 5088.7272 1954 0 0 [sti.dll] DllEntryPoint, sti.dll (0xEE6B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 5088.7272 1954 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5088.7272 1954 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.10464 19672 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000006 WIA: 9920.10464 19672 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000006 WIA: 9920.1196 19672 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.1196 19672 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.11032 20172 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 9920.11032 20172 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 9920.11032 20172 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 9920.4224 20172 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 9920.4224 20172 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 9920.4224 20172 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 9920.4224 20172 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 9920.4224 20172 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 9920.4224 20172 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 9920.4224 20172 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 9920.4224 20172 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 9920.4224 20172 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 9920.4224 20172 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 9920.10464 21047 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (16) WIA: 9920.10464 21047 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 9920.10464 21047 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 9920.10464 21047 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [5876] at 2023/09/08 16:31:52:503 **************** WIA: 5876.2224 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 9920.10464 21047 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000007 WIA: 9920.10464 21047 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000007 to WiaEventNotifier WIA: 5876.2224 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001E0FA4BEC10 from server WIA: 5876.2224 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 5876.6636 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9920.10464 21047 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5876.6636 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 9920.10464 21047 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E0FCC65050 WIA: 5876.2224 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5876.2224 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 9920.10104 21047 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 5876.2224 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E0FCC65050 WIA: 9920.10104 21047 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9920.10104 21047 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E0FCC65050 WIA: 5876.2224 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5876.2224 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5876.2224 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E0FCC65050 WIA: 9920.10104 22343 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10104 22343 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E0FCC65050 WIA: 5876.2224 1296 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5876.2224 1296 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5876.2224 1296 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E0FCC65050 WIA: 9920.10104 22343 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10104 22343 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E0FCC65050 WIA: 5876.2224 1296 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5876.2224 1296 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5876.2224 1296 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E0FCC65050 WIA: 5876.2224 1296 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 9920.10104 22343 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000007 WIA: 9920.10104 22343 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000007 WIA: 9920.10104 22343 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000007 marked for removal WIA: 5876.2224 1296 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 9920.1196 22343 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5876.2224 1296 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.1196 22359 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 9920.1196 22359 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 5876.6636 1312 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 9920.1196 22359 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 5876.6636 1312 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000019EC is now shut down WIA: 9920.1196 22359 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5876.2224 1312 0 0 [sti.dll] DllEntryPoint, sti.dll (0xEE6B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 5876.2224 1312 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5876.2224 1312 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.10464 22375 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000007 WIA: 9920.10464 22375 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000007 WIA: 9920.1196 22375 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.1196 22375 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.10464 23406 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (1A) WIA: 9920.10464 23406 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 9920.10464 23406 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 9920.10464 23422 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [10084] at 2023/09/08 16:31:54:872 **************** WIA: 10084.9848 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 9920.10464 23422 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000008 WIA: 9920.10464 23422 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000008 to WiaEventNotifier WIA: 10084.9848 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000266A4A63110 from server WIA: 10084.9848 16 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 10084.10212 16 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9920.10464 23422 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10084.10212 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 9920.10464 23422 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000266A7284B20 WIA: 10084.9848 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9920.10104 23422 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 10084.9848 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 10084.9848 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000266A7284B20 WIA: 9920.10104 23422 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9920.10104 23422 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000266A7284B20 WIA: 10084.9848 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10084.9848 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 10084.9848 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000266A7284B20 WIA: 9920.10104 25062 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10104 25062 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000266A7284B20 WIA: 10084.9848 1656 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10084.9848 1656 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 10084.9848 1656 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000266A7284B20 WIA: 9920.10104 25062 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10104 25062 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000266A7284B20 WIA: 10084.9848 1656 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 10084.9848 1656 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 10084.9848 1656 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000266A7284B20 WIA: 10084.9848 1656 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 9920.10104 25062 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000008 WIA: 9920.10104 25062 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000008 WIA: 9920.10104 25062 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000008 marked for removal WIA: 10084.9848 1656 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 9920.1196 25062 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10084.9848 1656 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.1196 25078 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 9920.1196 25078 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 10084.10212 1672 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 9920.1196 25078 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 10084.10212 1672 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000027E4 is now shut down WIA: 9920.1196 25078 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10084.9848 1687 0 0 [sti.dll] DllEntryPoint, sti.dll (0xEE6B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 10084.9848 1687 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10084.9848 1687 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.10464 25093 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000008 WIA: 9920.10464 25093 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000008 WIA: 9920.1196 25093 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.1196 25093 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.10464 26843 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (1E) WIA: 9920.10464 26843 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 9920.10464 26843 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 9920.10464 26843 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [2812] at 2023/09/08 16:31:58:309 **************** WIA: 2812.7184 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 9920.10104 26859 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000009 WIA: 9920.10104 26859 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000009 to WiaEventNotifier WIA: 2812.7184 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000002B2AD671990 from server WIA: 2812.7184 16 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 2812.10180 16 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9920.10104 26859 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 2812.10180 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 9920.10104 26859 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002B2AFF04D20 WIA: 2812.7184 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9920.10464 26859 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 2812.7184 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 2812.7184 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002B2AFF04D20 WIA: 9920.10464 26859 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9920.10464 26859 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002B2AFF04D20 WIA: 2812.7184 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2812.7184 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 2812.7184 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002B2AFF04D20 WIA: 9920.10464 28234 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10464 28234 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002B2AFF04D20 WIA: 2812.7184 1391 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2812.7184 1391 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 2812.7184 1391 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002B2AFF04D20 WIA: 9920.10464 28234 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10464 28234 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002B2AFF04D20 WIA: 2812.7184 1391 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2812.7184 1391 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 2812.7184 1391 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002B2AFF04D20 WIA: 2812.7184 1391 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 9920.10464 28234 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000009 WIA: 9920.10464 28234 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000009 WIA: 9920.10464 28234 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000009 marked for removal WIA: 9920.1196 28234 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 2812.7184 1391 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 2812.7184 1391 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.1196 28250 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 9920.1196 28250 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 2812.10180 1407 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 9920.1196 28250 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 2812.10180 1407 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000027C4 is now shut down WIA: 9920.1196 28250 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 2812.7184 1422 0 0 [sti.dll] DllEntryPoint, sti.dll (0xEE6B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 2812.7184 1422 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 2812.7184 1422 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.10104 28265 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000009 WIA: 9920.10104 28265 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000009 WIA: 9920.1196 28265 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.1196 28265 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.10104 29640 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (22) WIA: 9920.10104 29640 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 9920.10104 29640 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 9920.10104 29640 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [1436] at 2023/09/08 16:32:01:098 **************** WIA: 1436.7216 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 9920.10464 29640 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 000000000000000A WIA: 9920.10464 29640 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 000000000000000A to WiaEventNotifier WIA: 1436.7216 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000002C82E76ECD0 from server WIA: 1436.7216 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 9920.10464 29640 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1436.4832 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9920.10464 29640 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C831145040 WIA: 1436.4832 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 1436.7216 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1436.7216 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 1436.7216 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C831145040 WIA: 9920.10464 29640 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 9920.10104 29640 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9920.10104 29640 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C831145040 WIA: 1436.7216 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1436.7216 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 1436.7216 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C831145040 WIA: 9920.11032 30359 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 9920.11032 30359 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 9920.11032 30359 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 9920.4224 30359 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 9920.4224 30359 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 9920.4224 30359 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 9920.4224 30359 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 9920.4224 30359 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 9920.4224 30359 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 9920.4224 30359 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 9920.4224 30359 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 9920.4224 30359 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 9920.10104 31547 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10104 31547 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C831145040 WIA: 1436.7216 1907 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1436.7216 1907 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 1436.7216 1907 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C831145040 WIA: 9920.10104 31547 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10104 31547 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C831145040 WIA: 1436.7216 1907 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1436.7216 1907 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 1436.7216 1907 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C831145040 WIA: 1436.7216 1907 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 9920.10104 31547 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 000000000000000A WIA: 9920.10104 31547 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 000000000000000A WIA: 9920.10104 31547 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 000000000000000A marked for removal WIA: 1436.7216 1907 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 9920.1196 31547 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1436.7216 1907 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.1196 31562 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 9920.1196 31562 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 9920.1196 31562 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 1436.4832 1922 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 9920.1196 31562 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1436.4832 1922 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000012E0 is now shut down WIA: 1436.7216 1938 0 0 [sti.dll] DllEntryPoint, sti.dll (0xEE6B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 1436.7216 1938 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 1436.7216 1938 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.10464 31593 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 000000000000000A WIA: 9920.10464 31593 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 000000000000000A WIA: 9920.1196 31593 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.1196 31593 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.10464 32843 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (26) WIA: 9920.10464 32843 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 9920.10464 32843 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 9920.10464 32859 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [11552] at 2023/09/08 16:32:04:310 **************** WIA: 11552.9276 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 9920.10104 32859 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 000000000000000B WIA: 9920.10104 32859 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 000000000000000B to WiaEventNotifier WIA: 11552.9276 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000011D9816EDD0 from server WIA: 11552.9276 16 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 9920.10104 32859 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 11552.7728 16 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9920.10104 32859 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000011D9A894A20 WIA: 11552.7728 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 11552.9276 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 11552.9276 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 11552.9276 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000011D9A894A20 WIA: 9920.10104 32859 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 9920.10464 32859 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9920.10464 32859 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000011D9A894A20 WIA: 11552.9276 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 11552.9276 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 11552.9276 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000011D9A894A20 WIA: 9920.1196 33406 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 9920.10464 34500 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10464 34500 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000011D9A894A20 WIA: 11552.9276 1657 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 11552.9276 1657 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 11552.9276 1657 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000011D9A894A20 WIA: 9920.10464 34500 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10464 34500 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000011D9A894A20 WIA: 11552.9276 1657 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 11552.9276 1657 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 11552.9276 1657 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000011D9A894A20 WIA: 11552.9276 1657 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 9920.10464 34500 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 000000000000000B WIA: 9920.10464 34500 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 000000000000000B WIA: 9920.10464 34500 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 000000000000000B marked for removal WIA: 11552.9276 1657 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 9920.1196 34500 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11552.9276 1657 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.1196 34515 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 9920.1196 34515 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 9920.1196 34515 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 11552.7728 1672 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 9920.1196 34515 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 11552.7728 1672 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001E30 is now shut down WIA: 11552.9276 1688 0 0 [sti.dll] DllEntryPoint, sti.dll (0xEE6B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 11552.9276 1688 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 11552.9276 1688 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.10104 34531 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 000000000000000B WIA: 9920.10104 34531 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 000000000000000B WIA: 9920.1196 34531 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.1196 34531 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.10104 35922 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (2A) WIA: 9920.10104 35922 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 9920.10104 35922 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 9920.10104 35937 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [9780] at 2023/09/08 16:32:07:390 **************** WIA: 9780.1828 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 9920.10104 35937 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 000000000000000C WIA: 9920.10104 35937 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 000000000000000C to WiaEventNotifier WIA: 9780.1828 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000022D559A1990 from server WIA: 9780.1828 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 9780.2332 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9920.10104 35937 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9780.2332 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 9920.10104 35937 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022D58155860 WIA: 9780.1828 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9780.1828 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 9920.10464 35937 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 9780.1828 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022D58155860 WIA: 9920.10464 35937 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9920.10464 35937 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022D58155860 WIA: 9780.1828 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9780.1828 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 9780.1828 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022D58155860 WIA: 9920.1196 36312 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 9920.10464 37093 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10464 37093 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022D58155860 WIA: 9780.1828 1156 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9780.1828 1156 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 9780.1828 1156 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022D58155860 WIA: 9920.10464 37093 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10464 37093 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022D58155860 WIA: 9780.1828 1156 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9780.1828 1156 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 9780.1828 1156 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022D58155860 WIA: 9780.1828 1156 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 9920.10464 37093 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 000000000000000C WIA: 9920.10464 37093 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 000000000000000C WIA: 9920.10464 37093 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 000000000000000C marked for removal WIA: 9780.1828 1156 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 9920.1196 37093 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9780.1828 1156 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.1196 37109 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 9920.1196 37109 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 9920.1196 37109 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 9780.2332 1172 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 9920.1196 37109 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9780.2332 1172 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x0000091C is now shut down WIA: 9780.1828 1188 0 0 [sti.dll] DllEntryPoint, sti.dll (0xEE6B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 9780.1828 1188 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9780.1828 1188 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.10104 37140 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 000000000000000C WIA: 9920.1196 37140 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.10104 37140 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 000000000000000C WIA: 9920.1196 37140 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.10104 38422 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (2E) WIA: 9920.10104 38422 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 9920.10104 38422 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 9920.10104 38422 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [9084] at 2023/09/08 16:32:09:878 **************** WIA: 9084.820 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 9920.10464 38422 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 000000000000000D WIA: 9920.10464 38422 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 000000000000000D to WiaEventNotifier WIA: 9084.820 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000260E72DE910 from server WIA: 9084.820 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 9920.10464 38422 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9084.7204 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9920.10464 38422 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000260E9B65620 WIA: 9084.7204 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 9084.820 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9084.820 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 9084.820 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000260E9B65620 WIA: 9920.10464 38422 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 9920.10104 38422 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9920.10104 38422 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000260E9B65620 WIA: 9084.820 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9084.820 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 9084.820 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000260E9B65620 WIA: 9920.10104 39484 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10104 39484 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000260E9B65620 WIA: 9084.820 1062 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9084.820 1062 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 9084.820 1062 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000260E9B65620 WIA: 9920.10104 39484 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 9920.10104 39484 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000260E9B65620 WIA: 9084.820 1062 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9084.820 1062 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 9084.820 1062 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000260E9B65620 WIA: 9084.820 1062 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 9920.10104 39484 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 000000000000000D WIA: 9920.10104 39484 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 000000000000000D WIA: 9920.10104 39484 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 000000000000000D marked for removal WIA: 9084.820 1062 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 9084.820 1062 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.1196 39484 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.1196 39500 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 9920.1196 39500 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 9084.7204 1078 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 9920.1196 39500 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 9084.7204 1078 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001C24 is now shut down WIA: 9920.1196 39500 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9084.820 1093 0 0 [sti.dll] DllEntryPoint, sti.dll (0xEE6B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 9084.820 1093 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9084.820 1093 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 9920.10464 39531 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 000000000000000D WIA: 9920.10464 39531 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 000000000000000D WIA: 9920.1196 39531 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.1196 39531 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.1196 39609 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 9920.1196 39609 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 9920.2656 39609 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 9920.2656 39609 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (0000029F3C7C6FF0) WIA: 9920.2656 39609 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (0000029F3C7C1B70) WIA: 9920.2656 39609 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 9920.2656 39609 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (0000029F3C7C1950) WIA: 9920.2656 39609 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (0000029F3C7C1B10) WIA: 9920.2656 39609 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (0000029F3C7C7030) WIA: 9920.2656 39609 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 9920.2656 39609 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 9920.2656 39609 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (0000029F3C7C7820) WIA: 9920.2656 39609 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (0000029F3C7C71A0) WIA: 9920.2656 39609 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (0000029F3C7C7120) WIA: 9920.2656 39609 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (0000029F3C7C7A20) WIA: 9920.2656 39609 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (0000029F3C7C7A60) WIA: 9920.2656 39609 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (0000029F3C7C1910) WIA: 9920.2656 39609 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 9920.1196 39609 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9920.2656 39859 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (0000029F3C7C19F0) WIA: 9920.2656 39859 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 9920.4224 39859 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 9920.2656 39859 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [9920] at 2023/09/08 16:31:31:491 **************** WIA: 9920.11032 39828 0 0 [sti.dll] DllEntryPoint, sti.dll (0xEE6B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 9920.11032 39828 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9920.11032 39828 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [8356] at 2023/09/08 16:32:12:131 **************** WIA: 8356.5224 15 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 8356.5224 15 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 10028 WIA: 8356.10028 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8356.2364 15 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 8356.2364 15 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 8356.2364 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8356.2364 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 8356.10028 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8356.10028 15 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 8356.10028 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 8356.10028 15 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000001C404617E10 WIA: 8356.10028 15 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 8356.10028 15 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 8356.10028 15 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 8356.10028 15 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 8356.10028 15 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 3796) WIA: 8356.10028 15 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 8356.3796 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 8356.3796 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 8356.3796 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 8356.5224 15 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 8356.10396 15 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 8356.10028 15 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 8356.10028 15 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 8356.5224 15 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 8356.5224 15 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 8356.10028 15 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 8356.10028 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8356.5224 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8356.5224 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8356.5224 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8356.5224 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8356.5224 15 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 8356.10396 31 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [9472] at 2023/09/08 16:32:12:157 **************** WIA: 9472.10616 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 8356.10396 31 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 8356.10396 31 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 8356.10396 31 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 9472.10616 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001C8D7DEFA40 from server WIA: 9472.10616 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 8356.10396 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 9472.8612 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8356.10396 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C8DA684EA0 WIA: 9472.8612 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 9472.10616 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9472.10616 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8356.10396 31 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 9472.10616 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C8DA684EA0 WIA: 8356.10396 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8356.10396 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C8DA684EA0 WIA: 9472.10616 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9472.10616 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 9472.10616 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C8DA684EA0 WIA: 8356.10396 1250 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8356.10396 1250 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C8DA684EA0 WIA: 9472.10616 1219 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9472.10616 1219 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 9472.10616 1219 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C8DA684EA0 WIA: 8356.10396 1250 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8356.10396 1250 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C8DA684EA0 WIA: 9472.10616 1219 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 9472.10616 1219 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 9472.10616 1219 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C8DA684EA0 WIA: 9472.10616 1219 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 8356.10396 1250 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 8356.10396 1250 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8356.10396 1250 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 9472.10616 1219 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 8356.9464 1250 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9472.10616 1219 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8356.9464 1265 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 8356.9464 1265 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 8356.9464 1265 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 9472.8612 1234 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 8356.9464 1265 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 9472.8612 1234 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000021A4 is now shut down WIA: 9472.10616 1234 0 0 [sti.dll] DllEntryPoint, sti.dll (0xEE6B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 9472.10616 1234 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 9472.10616 1234 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8356.10016 1281 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8356.10016 1281 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8356.9464 1281 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8356.9464 1281 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8356.2364 10062 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 8356.2364 10062 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8356.2364 10062 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 8356.10028 10062 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8356.10028 10062 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 8356.10028 10062 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 8356.10028 10062 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 8356.10028 10062 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 8356.10028 10062 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 8356.10028 10062 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 8356.10028 10062 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 8356.10028 10062 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 8356.10028 10062 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8356.2364 10140 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 8356.2364 10140 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8356.2364 10140 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 8356.10028 10140 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8356.10028 10140 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 8356.10028 10140 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 8356.10028 10140 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 8356.10028 10140 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 8356.10028 10140 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 8356.10028 10140 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 8356.10028 10140 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 8356.10028 10140 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 8356.10028 10140 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8356.2364 20265 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 8356.2364 20265 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8356.2364 20265 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 8356.10028 20265 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8356.10028 20265 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 8356.10028 20265 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 8356.10028 20265 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 8356.10028 20265 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 8356.10028 20265 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 8356.10028 20265 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 8356.10028 20265 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 8356.10028 20265 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 8356.10028 20265 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8356.2364 30437 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 4, event type: 0) WIA: 8356.2364 30437 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8356.2364 30437 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 4, event type: 0) returning WIA: 8356.10028 30437 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8356.10028 30437 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 4, event type: 0) detached from queue WIA: 8356.10028 30437 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 4, event type: 0)... WIA: 8356.10028 30437 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 4, dwEventType 0, lpEventData: 0x0000000000000000 WIA: 8356.10028 30437 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 4, event type 0.. WIA: 8356.10028 30437 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 4, event type 0, completed with with hr 0x00000000 WIA: 8356.10028 30437 2 0 [wiaservc.dll] ServiceEventHandler::ProcessEvent, The ServiceEventHandler received a SERVICE_CONTROL_INTERROGATE and may update the service status for interrogation WIA: 8356.10028 30437 80000000 0 [wiaservc.dll] WiaService::CheckForActivityAndShutdown, Last client released reference to service, not initiating shutdown because another shutdown is already pending. WIA: 8356.10028 30437 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 4, event type: 0) deleted WIA: 8356.10028 30437 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8356.9464 31281 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 8356.9464 31281 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 8356.5224 31281 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 8356.5224 31281 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000001C404616FF0) WIA: 8356.5224 31281 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000001C404611B70) WIA: 8356.5224 31281 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 8356.5224 31281 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000001C404611950) WIA: 8356.5224 31281 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000001C404611B10) WIA: 8356.5224 31281 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000001C404617030) WIA: 8356.5224 31281 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 8356.5224 31281 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 8356.5224 31281 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000001C404617820) WIA: 8356.5224 31281 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000001C4046171A0) WIA: 8356.5224 31281 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000001C404617120) WIA: 8356.5224 31281 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000001C404617A20) WIA: 8356.5224 31281 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000001C404617A60) WIA: 8356.5224 31281 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000001C404611910) WIA: 8356.5224 31281 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 8356.9464 31281 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8356.5224 31531 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000001C4046119F0) WIA: 8356.5224 31531 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 8356.10028 31531 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 8356.5224 31531 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [8356] at 2023/09/08 16:32:12:152 **************** WIA: 8356.5224 31516 0 0 [sti.dll] DllEntryPoint, sti.dll (0xEE6B0000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 8356.5224 31516 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8356.5224 31516 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [29640] at 2024/05/05 16:01:03:571 **************** WIA: 29640.40156 0 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 29640.40156 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 18228 WIA: 29640.18228 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 29640.43188 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 29640.43188 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 29640.43188 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 29640.43188 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 29640.18228 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 29640.18228 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 29640.18228 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 29640.18228 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000001E41F177E10 WIA: 29640.18228 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 29640.18228 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 29640.18228 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 29640.18228 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 29640.18228 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 34940) WIA: 29640.18228 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 29640.34940 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 29640.34940 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 29640.34940 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 29640.40156 16 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 29640.580 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 29640.18228 31 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 29640.40156 31 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 29640.40156 31 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 29640.18228 31 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 29640.18228 31 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 29640.18228 31 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 29640.40156 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 29640.40156 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 29640.40156 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 29640.40156 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 29640.40156 31 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 29640.580 47 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [22340] at 2024/05/05 16:01:03:613 **************** WIA: 22340.30428 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 29640.580 47 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 29640.580 47 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 29640.580 47 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 22340.30428 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000023CD23EE540 from server WIA: 22340.30428 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 29640.580 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 29640.580 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023CD40A54A0 WIA: 22340.30428 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 22340.30428 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 22340.42252 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 22340.30428 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023CD40A54A0 WIA: 22340.42252 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 29640.580 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 29640.580 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023CD40A54A0 WIA: 22340.30428 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 22340.30428 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 22340.30428 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023CD40A54A0 WIA: 29640.580 47 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 29640.7812 2078 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 29640.7812 2078 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023CD40A54A0 WIA: 22340.30428 2031 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 22340.30428 2031 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 22340.30428 2031 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023CD40A54A0 WIA: 29640.7812 2078 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 29640.7812 2078 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023CD40A54A0 WIA: 22340.30428 2031 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 22340.30428 2031 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 22340.30428 2031 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000023CD40A54A0 WIA: 22340.30428 2031 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 29640.7812 2078 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 29640.7812 2078 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 29640.7812 2078 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 22340.30428 2031 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 22340.30428 2031 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 29640.12240 2078 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 29640.12240 2094 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 29640.12240 2094 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 29640.12240 2094 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 22340.42252 2047 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 22340.42252 2047 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x0000A50C is now shut down WIA: 29640.12240 2094 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 22340.30428 2062 0 0 [sti.dll] DllEntryPoint, sti.dll (0xFC3B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 22340.30428 2062 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 22340.30428 2062 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 29640.41516 2109 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 29640.12240 2109 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 29640.41516 2109 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 29640.12240 2109 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 29640.12240 32109 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 29640.12240 32109 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 29640.40156 32109 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 29640.40156 32109 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000001E41F176FF0) WIA: 29640.40156 32109 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000001E41F171B70) WIA: 29640.40156 32109 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 29640.40156 32109 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000001E41F171950) WIA: 29640.40156 32109 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000001E41F171B10) WIA: 29640.40156 32109 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000001E41F177030) WIA: 29640.40156 32109 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 29640.40156 32109 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 29640.40156 32109 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000001E41F177540) WIA: 29640.40156 32109 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000001E41F1771A0) WIA: 29640.40156 32109 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000001E41F177120) WIA: 29640.40156 32109 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000001E41F177740) WIA: 29640.40156 32109 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000001E41F177780) WIA: 29640.40156 32109 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000001E41F171910) WIA: 29640.40156 32109 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 29640.12240 32109 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 29640.40156 32359 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000001E41F1719F0) WIA: 29640.40156 32359 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 29640.18228 32359 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 29640.40156 32359 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [29640] at 2024/05/05 16:01:03:607 **************** WIA: 29640.43188 32328 0 0 [sti.dll] DllEntryPoint, sti.dll (0xFC3B0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 29640.43188 32328 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 29640.43188 32328 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [8692] at 2024/05/07 11:05:11:188 **************** WIA: 8692.31976 16 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 8692.31976 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 44084 WIA: 8692.44084 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8692.24780 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 8692.24780 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 8692.24780 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8692.24780 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 8692.44084 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8692.44084 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 8692.44084 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 8692.44084 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x0000023A93C07E10 WIA: 8692.44084 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 8692.44084 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 8692.44084 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 8692.44084 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 8692.44084 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 41720) WIA: 8692.41720 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 8692.41720 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 8692.44084 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 8692.41720 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 8692.44084 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 8692.44084 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 8692.44084 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 8692.44084 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8692.3956 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 8692.31976 16 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 8692.31976 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 8692.31976 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 8692.31976 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8692.31976 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8692.31976 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8692.31976 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8692.31976 16 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 8692.3956 32 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [25724] at 2024/05/07 11:05:11:211 **************** WIA: 25724.26888 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 8692.3956 32 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 8692.3956 32 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 8692.3956 32 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 25724.26888 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000264F09FD110 from server WIA: 25724.26888 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 8692.3956 32 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 25724.4844 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8692.3956 32 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000264F2715300 WIA: 25724.4844 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 25724.26888 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 25724.26888 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 25724.26888 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000264F2715300 WIA: 8692.3956 32 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 8692.3956 32 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8692.3956 32 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000264F2715300 WIA: 25724.26888 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 25724.26888 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 25724.26888 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000264F2715300 WIA: 8692.31080 6688 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8692.31080 6688 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000264F2715300 WIA: 25724.26888 6656 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 25724.26888 6656 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 25724.26888 6656 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000264F2715300 WIA: 8692.31080 6688 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8692.31080 6688 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000264F2715300 WIA: 25724.26888 6656 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 25724.26888 6656 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 25724.26888 6656 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000264F2715300 WIA: 25724.26888 6656 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 8692.31080 6688 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 8692.31080 6688 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8692.31080 6688 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 25724.26888 6656 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 25724.26888 6656 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8692.22388 6688 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8692.22388 6703 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 8692.22388 6703 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 8692.22388 6703 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 25724.4844 6671 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 25724.4844 6671 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000012EC is now shut down WIA: 8692.22388 6703 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 25724.26888 6687 0 0 [sti.dll] DllEntryPoint, sti.dll (0xB330000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 25724.26888 6687 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 25724.26888 6687 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8692.31260 6719 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8692.31260 6719 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8692.22388 6719 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8692.22388 6719 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8692.22388 36719 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 8692.22388 36719 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 8692.31976 36719 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 8692.31976 36719 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (0000023A93C06FF0) WIA: 8692.31976 36719 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (0000023A93C01B70) WIA: 8692.31976 36719 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 8692.31976 36719 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (0000023A93C01950) WIA: 8692.31976 36719 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (0000023A93C01B10) WIA: 8692.31976 36719 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (0000023A93C07030) WIA: 8692.31976 36719 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 8692.31976 36719 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 8692.31976 36719 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (0000023A93C07820) WIA: 8692.31976 36719 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (0000023A93C071A0) WIA: 8692.31976 36719 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (0000023A93C07120) WIA: 8692.31976 36719 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (0000023A93C07A20) WIA: 8692.31976 36719 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (0000023A93C07A60) WIA: 8692.31976 36719 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (0000023A93C01910) WIA: 8692.31976 36719 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 8692.22388 36719 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8692.31976 36969 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (0000023A93C019F0) WIA: 8692.31976 36969 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 8692.44084 36969 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 8692.31976 36969 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [8692] at 2024/05/07 11:05:11:205 **************** WIA: 8692.24780 36953 0 0 [sti.dll] DllEntryPoint, sti.dll (0xB330000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 8692.24780 36953 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8692.24780 36953 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [10244] at 2024/07/16 15:31:42:165 **************** WIA: 10244.42728 0 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 10244.42728 0 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 29840 WIA: 10244.29840 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 10244.30616 0 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 10244.30616 0 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 10244.30616 0 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 10244.30616 0 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 10244.29840 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 10244.29840 0 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 10244.29840 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 10244.29840 0 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000001B8E13F7E80 WIA: 10244.29840 0 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 10244.29840 0 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 10244.29840 0 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 10244.29840 0 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 10244.29840 0 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 34132) WIA: 10244.29840 0 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 10244.34132 0 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 10244.34132 0 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 10244.34132 0 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 10244.19172 15 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 10244.42728 15 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 10244.29840 15 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 10244.29840 15 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 10244.42728 15 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 10244.42728 15 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 10244.29840 15 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 10244.29840 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 10244.42728 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 10244.42728 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 10244.42728 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 10244.42728 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 10244.42728 15 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 10244.19172 31 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [65544] at 2024/07/16 15:31:42:204 **************** WIA: 65544.40852 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 10244.19172 31 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 10244.19172 31 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 10244.19172 31 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 65544.40852 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001B0C7E3FA20 from server WIA: 65544.40852 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 65544.25924 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10244.19172 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10244.19172 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B0CA495D40 WIA: 65544.25924 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 65544.40852 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 65544.40852 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 65544.40852 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B0CA495D40 WIA: 10244.19172 31 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 10244.19172 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10244.19172 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B0CA495D40 WIA: 65544.40852 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 65544.40852 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 65544.40852 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B0CA495D40 WIA: 10244.29752 3484 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10244.29752 3484 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B0CA495D40 WIA: 65544.40852 3453 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 65544.40852 3453 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 65544.40852 3453 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B0CA495D40 WIA: 10244.29752 3484 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10244.29752 3484 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B0CA495D40 WIA: 65544.40852 3453 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 65544.40852 3453 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 65544.40852 3453 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B0CA495D40 WIA: 65544.40852 3453 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 10244.29752 3484 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 10244.29752 3484 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 10244.29752 3484 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 65544.40852 3453 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 65544.40852 3453 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10244.60296 3484 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10244.60296 3500 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 10244.60296 3500 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 10244.60296 3500 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 10244.60296 3500 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 65544.25924 3469 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 65544.25924 3469 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00006544 is now shut down WIA: 65544.40852 3531 0 0 [sti.dll] DllEntryPoint, sti.dll (0xA36F0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 65544.40852 3531 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 65544.40852 3531 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10244.53464 3562 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 10244.53464 3562 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 10244.60296 3562 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10244.60296 3562 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10244.53464 5672 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (2) WIA: 10244.53464 5672 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 10244.53464 5672 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 10244.53464 5687 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [55132] at 2024/07/16 15:31:47:859 **************** WIA: 55132.55628 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 10244.29752 5687 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000002 WIA: 10244.29752 5687 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000002 to WiaEventNotifier WIA: 55132.55628 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001A2D348E5A0 from server WIA: 55132.55628 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 10244.29752 5687 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10244.29752 5687 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001A2D5A43F70 WIA: 55132.55628 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 55132.55628 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 55132.55628 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001A2D5A43F70 WIA: 10244.53464 5687 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10244.53464 5687 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001A2D5A43F70 WIA: 55132.55628 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 55132.55628 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 55132.31016 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 55132.55628 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001A2D5A43F70 WIA: 55132.31016 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 10244.29752 5687 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 10244.53464 7531 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10244.53464 7531 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001A2D5A43F70 WIA: 55132.55628 1844 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 55132.55628 1844 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 55132.55628 1844 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001A2D5A43F70 WIA: 10244.53464 7531 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10244.53464 7531 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001A2D5A43F70 WIA: 55132.55628 1844 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 55132.55628 1844 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 55132.55628 1844 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001A2D5A43F70 WIA: 55132.55628 1844 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 10244.53464 7531 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000002 WIA: 10244.53464 7531 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 10244.53464 7531 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000002 marked for removal WIA: 55132.55628 1844 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 10244.60296 7531 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 55132.55628 1844 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10244.60296 7547 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 10244.60296 7547 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 10244.60296 7547 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 55132.31016 1860 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 10244.60296 7547 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 55132.31016 1860 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00007928 is now shut down WIA: 55132.55628 1875 0 0 [sti.dll] DllEntryPoint, sti.dll (0xA36F0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 55132.55628 1875 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 55132.55628 1875 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10244.29752 7562 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 10244.29752 7562 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 10244.60296 7562 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10244.60296 7562 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10244.29752 9172 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (6) WIA: 10244.29752 9172 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 10244.29752 9172 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 10244.29752 9187 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [64416] at 2024/07/16 15:31:51:349 **************** WIA: 64416.10640 15 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 10244.29752 9187 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000003 WIA: 10244.29752 9187 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000003 to WiaEventNotifier WIA: 64416.10640 15 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000021C3C210920 from server WIA: 64416.10640 15 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 10244.29752 9187 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10244.29752 9187 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000021C3DDE4430 WIA: 64416.10640 15 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 64416.10640 15 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 64416.12312 15 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 64416.10640 15 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000021C3DDE4430 WIA: 64416.12312 15 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 10244.29752 9187 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10244.29752 9187 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000021C3DDE4430 WIA: 10244.53464 9187 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 64416.10640 15 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 64416.10640 15 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 64416.10640 15 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000021C3DDE4430 WIA: 10244.53464 11187 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10244.53464 11187 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000021C3DDE4430 WIA: 64416.10640 2015 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 64416.10640 2015 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 64416.10640 2015 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000021C3DDE4430 WIA: 10244.53464 11187 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10244.53464 11187 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000021C3DDE4430 WIA: 64416.10640 2015 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 64416.10640 2015 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 64416.10640 2015 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000021C3DDE4430 WIA: 64416.10640 2015 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 10244.53464 11187 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000003 WIA: 10244.53464 11187 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 10244.53464 11187 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000003 marked for removal WIA: 64416.10640 2015 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 64416.10640 2015 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10244.60296 11187 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10244.60296 11203 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 10244.60296 11203 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 10244.60296 11203 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 64416.12312 2031 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 10244.60296 11203 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 64416.12312 2031 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00003018 is now shut down WIA: 64416.10640 2062 0 0 [sti.dll] DllEntryPoint, sti.dll (0xA36F0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 64416.10640 2062 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 64416.10640 2062 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10244.29752 11250 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 10244.29752 11250 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 10244.60296 11250 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10244.60296 11250 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10244.60296 33515 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 10244.60296 33515 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 10244.42728 33515 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 10244.42728 33515 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000001B8E13F7040) WIA: 10244.42728 33515 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000001B8E13F6FF0) WIA: 10244.42728 33515 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 10244.42728 33515 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000001B8E13F6B00) WIA: 10244.42728 33515 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000001B8E13F6F80) WIA: 10244.42728 33515 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000001B8E13F70A0) WIA: 10244.42728 33515 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 10244.42728 33515 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 10244.42728 33515 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000001B8E13F7BA0) WIA: 10244.42728 33515 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000001B8E13F7210) WIA: 10244.42728 33515 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000001B8E13F7190) WIA: 10244.42728 33515 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000001B8E13F7DA0) WIA: 10244.42728 33515 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000001B8E13F7DE0) WIA: 10244.42728 33515 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000001B8E13F1910) WIA: 10244.42728 33515 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 10244.60296 33515 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10244.42728 33765 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000001B8E13F6BA0) WIA: 10244.42728 33765 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 10244.29840 33765 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 10244.42728 33765 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [10244] at 2024/07/16 15:31:42:195 **************** WIA: 10244.30616 33734 0 0 [sti.dll] DllEntryPoint, sti.dll (0xA36F0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 10244.30616 33734 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10244.30616 33734 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [369164] at 2024/11/04 12:02:58:606 **************** WIA: 369164.366704 16 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 369164.366704 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 370932 WIA: 369164.370932 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 369164.363324 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 369164.363324 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 369164.363324 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 369164.363324 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 369164.370932 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 369164.370932 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 369164.370932 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 369164.370932 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x00000240163F7E60 WIA: 369164.370932 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 369164.370932 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 369164.370932 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 369164.370932 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 369164.370932 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 371236) WIA: 369164.370932 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 369164.371236 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 369164.371236 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 369164.371236 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 369164.367680 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 369164.370932 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 369164.370932 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 369164.370932 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 369164.370932 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 369164.366704 16 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 369164.366704 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 369164.366704 31 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 369164.366704 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 369164.366704 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 369164.366704 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 369164.366704 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 369164.366704 31 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 369164.367680 31 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [370248] at 2024/11/04 12:02:58:633 **************** WIA: 370248.369220 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 369164.367680 31 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 369164.367680 31 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 369164.367680 31 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 370248.369220 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000295F456F690 from server WIA: 370248.369220 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 369164.367680 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 369164.367680 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000295F6205100 WIA: 370248.371700 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 370248.369220 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 370248.369220 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 370248.371700 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 370248.369220 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000295F6205100 WIA: 369164.367680 31 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 369164.367680 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 369164.367680 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000295F6205100 WIA: 370248.369220 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 370248.369220 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 370248.369220 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000295F6205100 WIA: 369164.369368 2750 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 369164.369368 2750 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000295F6205100 WIA: 370248.369220 2719 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 370248.369220 2719 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 370248.369220 2719 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000295F6205100 WIA: 369164.369368 2750 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 369164.369368 2750 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000295F6205100 WIA: 370248.369220 2719 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 370248.369220 2719 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 370248.369220 2719 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000295F6205100 WIA: 370248.369220 2719 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 369164.369368 2750 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 369164.369368 2750 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 369164.369368 2750 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 370248.369220 2719 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 370248.369220 2719 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 369164.370456 2750 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 369164.370456 2766 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 369164.370456 2766 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 370248.371700 2735 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 369164.370456 2766 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 370248.371700 2735 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x0005ABF4 is now shut down WIA: 369164.370456 2766 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 370248.369220 2750 0 0 [sti.dll] DllEntryPoint, sti.dll (0x7E090000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 370248.369220 2750 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 370248.369220 2750 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 369164.364080 2781 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 369164.370456 2781 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 369164.364080 2781 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 369164.370456 2781 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 369164.364080 25562 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (2) WIA: 369164.364080 25562 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 369164.364080 25562 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 369164.364080 25578 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [363368] at 2024/11/04 12:03:24:170 **************** WIA: 363368.369620 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 369164.364080 25578 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000002 WIA: 369164.364080 25578 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000002 to WiaEventNotifier WIA: 363368.369620 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001CFBD53F570 from server WIA: 363368.369620 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 369164.364080 25578 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 369164.364080 25578 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001CFBF195A60 WIA: 363368.370508 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 363368.369620 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 363368.369620 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 363368.370508 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 363368.369620 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001CFBF195A60 WIA: 369164.364080 25578 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 369164.369368 25578 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 369164.369368 25578 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001CFBF195A60 WIA: 363368.369620 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 363368.369620 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 363368.369620 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001CFBF195A60 WIA: 369164.369368 28453 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 369164.369368 28453 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001CFBF195A60 WIA: 363368.369620 2875 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 363368.369620 2875 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 363368.369620 2875 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001CFBF195A60 WIA: 369164.369368 28453 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 369164.369368 28453 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001CFBF195A60 WIA: 363368.369620 2875 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 363368.369620 2875 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 363368.369620 2875 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001CFBF195A60 WIA: 363368.369620 2875 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 369164.369368 28453 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000002 WIA: 369164.369368 28453 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 369164.369368 28453 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000002 marked for removal WIA: 363368.369620 2875 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 363368.369620 2875 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 369164.370456 28453 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 369164.370456 28469 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 369164.370456 28469 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 363368.370508 2891 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 369164.370456 28469 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 363368.370508 2891 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x0005A74C is now shut down WIA: 369164.370456 28469 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 363368.369620 2891 0 0 [sti.dll] DllEntryPoint, sti.dll (0x7E090000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 363368.369620 2891 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 363368.369620 2891 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 369164.364080 28469 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 369164.364080 28469 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 369164.370456 28469 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 369164.370456 28469 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 369164.370456 32781 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 369164.370456 32781 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 369164.366704 32781 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 369164.366704 32781 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (00000240163F7020) WIA: 369164.366704 32781 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (00000240163F6FD0) WIA: 369164.366704 32781 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 369164.366704 32781 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (00000240163F6AD0) WIA: 369164.366704 32781 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (00000240163F6F70) WIA: 369164.366704 32781 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (00000240163F7080) WIA: 369164.366704 32781 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 369164.366704 32781 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 369164.366704 32781 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (00000240163F7870) WIA: 369164.366704 32781 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (00000240163F71F0) WIA: 369164.366704 32781 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (00000240163F7170) WIA: 369164.366704 32781 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (00000240163F7A70) WIA: 369164.366704 32781 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (00000240163F7AB0) WIA: 369164.366704 32781 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (00000240163F1910) WIA: 369164.366704 32781 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 369164.370456 32781 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 369164.366704 33031 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (00000240163F6B70) WIA: 369164.366704 33031 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 369164.370932 33031 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 369164.366704 33031 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [369164] at 2024/11/04 12:02:58:627 **************** WIA: 369164.366704 33000 0 0 [sti.dll] DllEntryPoint, sti.dll (0x7E090000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 369164.366704 33000 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 369164.366704 33000 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [15600] at 2025/01/23 17:01:52:727 **************** WIA: 15600.16264 16 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 15600.16264 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 2288 WIA: 15600.2288 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 15600.8972 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 15600.8972 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 15600.8972 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 15600.8972 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 15600.2288 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 15600.2288 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 15600.2288 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 15600.2288 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000001D41F837EC0 WIA: 15600.2288 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 15600.2288 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 15600.2288 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 15600.2288 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 15600.2288 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 15504) WIA: 15600.15504 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 15600.15504 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 15600.15504 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 15600.2288 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 15600.15520 31 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 15600.16264 31 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 15600.2288 47 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 15600.2288 47 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 15600.16264 47 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 15600.16264 47 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 15600.2288 47 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 15600.2288 47 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 15600.16264 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 15600.16264 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 15600.16264 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 15600.16264 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 15600.16264 47 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 15600.15520 63 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [6208] at 2025/01/23 17:01:52:792 **************** WIA: 6208.13840 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 15600.15520 63 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 15600.15520 63 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 15600.15520 63 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 6208.13840 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001B062244E50 from server WIA: 6208.13840 15 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 6208.14344 15 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 15600.15520 78 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 6208.14344 15 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 15600.15520 78 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B0648B5C60 WIA: 6208.13840 15 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6208.13840 15 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 15600.15520 78 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 6208.13840 15 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B0648B5C60 WIA: 15600.15520 78 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 15600.15520 78 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B0648B5C60 WIA: 6208.13840 15 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6208.13840 15 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6208.13840 15 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B0648B5C60 WIA: 15600.14416 157203 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 15600.14416 157203 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B0648B5C60 WIA: 6208.13840 157140 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6208.13840 157140 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6208.13840 157140 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B0648B5C60 WIA: 15600.14416 157203 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 15600.14416 157203 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B0648B5C60 WIA: 6208.13840 157140 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6208.13840 157140 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6208.13840 157140 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B0648B5C60 WIA: 6208.13840 157140 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 15600.14416 157203 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 15600.14416 157203 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 15600.14416 157203 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 6208.13840 157140 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 15600.8204 157203 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6208.13840 157140 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 15600.8204 157219 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 15600.8204 157219 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 15600.8204 157219 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 6208.14344 157156 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 15600.8204 157219 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6208.14344 157156 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00003808 is now shut down WIA: 6208.13840 157297 0 0 [sti.dll] DllEntryPoint, sti.dll (0xDFB90000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 6208.13840 157297 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6208.13840 157297 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 15600.220 157375 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 15600.220 157375 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 15600.8204 157375 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 15600.8204 157375 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 15600.8204 187235 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 15600.8204 187235 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 15600.16264 187235 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 15600.16264 187235 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000001D41F831AC0) WIA: 15600.16264 187235 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000001D41F831A70) WIA: 15600.16264 187235 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 15600.16264 187235 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000001D41F831850) WIA: 15600.16264 187235 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000001D41F831A10) WIA: 15600.16264 187235 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000001D41F831B20) WIA: 15600.16264 187235 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 15600.16264 187235 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 15600.16264 187235 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000001D41F8378F0) WIA: 15600.16264 187235 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000001D41F8372B0) WIA: 15600.16264 187235 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000001D41F837230) WIA: 15600.16264 187235 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000001D41F837AD0) WIA: 15600.16264 187235 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000001D41F837B10) WIA: 15600.16264 187235 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000001D41F831810) WIA: 15600.16264 187235 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 15600.8204 187235 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 15600.16264 187485 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000001D41F8318F0) WIA: 15600.16264 187485 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 15600.2288 187485 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 15600.16264 187485 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [15600] at 2025/01/23 17:01:52:781 **************** WIA: 15600.16264 187422 0 0 [sti.dll] DllEntryPoint, sti.dll (0xDFB90000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 15600.16264 187422 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 15600.16264 187422 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server