**************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [5448] at 2024/02/04 07:38:19:147 **************** WIA: 5448.2068 63 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 5448.2068 63 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001D98B1EC6F0 from server WIA: 5448.2068 63 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 5448.2068 63 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5448.2068 63 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5448.2068 63 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D98CDD9C10 WIA: 5448.5696 63 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5448.5696 63 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 5448.2068 63 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5448.2068 63 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5448.2068 63 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D98CDD9C10 WIA: 5448.2068 4360 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5448.2068 4360 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5448.2068 4360 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D98CDD9C10 WIA: 5448.2068 4360 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5448.2068 4360 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5448.2068 4360 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D98CDD9C10 WIA: 5448.2068 4360 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 5448.2068 4360 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 5448.2068 4360 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5448.5696 4391 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 5448.5696 4391 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001640 is now shut down WIA: 5448.2068 4469 0 0 [sti.dll] DllEntryPoint, sti.dll (0xC00C0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 5448.2068 4469 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5448.2068 4469 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [1692] at 2024/02/04 07:38:31:837 **************** WIA: 1692.2688 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 1692.2688 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000025E2BC8E6D0 from server WIA: 1692.2688 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 1692.4024 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 1692.4024 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 1692.2688 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1692.2688 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 1692.2688 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000025E2D95A0E0 WIA: 1692.2688 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1692.2688 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 1692.2688 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000025E2D95A0E0 WIA: 1692.2688 2890 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1692.2688 2890 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 1692.2688 2890 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000025E2D95A0E0 WIA: 1692.2688 2890 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1692.2688 2890 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 1692.2688 2890 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000025E2D95A0E0 WIA: 1692.2688 2890 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 1692.2688 2890 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 1692.2688 2890 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 1692.4024 2906 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 1692.4024 2906 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00000FB8 is now shut down WIA: 1692.2688 2906 0 0 [sti.dll] DllEntryPoint, sti.dll (0xC00C0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 1692.2688 2906 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 1692.2688 2906 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [7116] at 2024/02/04 18:19:45:204 **************** WIA: 7116.6980 16 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 7116.6980 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 4228 WIA: 7116.4228 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7116.5396 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 7116.5396 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 7116.5396 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 7116.5396 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 7116.4228 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 7116.4228 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 7116.4228 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 7116.4228 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000002BC30A073A0 WIA: 7116.4228 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 7116.4228 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 7116.4228 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 7116.4228 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 7116.4228 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 8072) WIA: 7116.4228 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 7116.8072 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 7116.8072 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 7116.8072 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 7116.4228 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7116.4228 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 7116.4228 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 7116.4228 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7116.360 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7116.6980 16 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 7116.6980 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 7116.6980 32 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7116.6980 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7116.6980 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7116.6980 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7116.6980 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7116.6980 32 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 7116.360 32 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [8004] at 2024/02/04 18:19:45:234 **************** WIA: 8004.3412 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7116.360 32 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 7116.360 32 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 7116.360 32 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 8004.3412 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000022CDE51E590 from server WIA: 8004.3412 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7116.360 32 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8004.1732 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7116.360 32 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022CE00EA1C0 WIA: 8004.1732 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 8004.3412 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8004.3412 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8004.3412 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022CE00EA1C0 WIA: 7116.360 32 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 7116.2472 32 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7116.2472 32 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022CE00EA1C0 WIA: 8004.3412 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8004.3412 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8004.3412 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022CE00EA1C0 WIA: 7116.360 5719 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7116.360 5719 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022CE00EA1C0 WIA: 8004.3412 5687 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8004.3412 5687 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8004.3412 5687 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022CE00EA1C0 WIA: 7116.360 5719 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7116.360 5719 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022CE00EA1C0 WIA: 8004.3412 5687 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8004.3412 5687 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8004.3412 5687 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022CE00EA1C0 WIA: 8004.3412 5687 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7116.360 5719 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 7116.360 5719 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7116.360 5719 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 7116.2872 5719 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8004.3412 5687 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 8004.3412 5687 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7116.2872 5735 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7116.2872 5735 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7116.2872 5735 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 7116.2872 5735 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8004.1732 5703 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 8004.1732 5703 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000006C4 is now shut down WIA: 8004.3412 5703 0 0 [sti.dll] DllEntryPoint, sti.dll (0xB7BB0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 8004.3412 5703 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8004.3412 5703 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7116.2472 5750 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7116.2872 5750 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7116.2472 5750 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7116.2872 5750 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7116.2872 35750 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 7116.2872 35750 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 7116.6980 35750 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 7116.6980 35750 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000002BC30A06310) WIA: 7116.6980 35750 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000002BC30A06270) WIA: 7116.6980 35750 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 7116.6980 35750 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000002BC30A05C80) WIA: 7116.6980 35750 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000002BC30A061D0) WIA: 7116.6980 35750 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000002BC30A063B0) WIA: 7116.6980 35750 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 7116.6980 35750 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 7116.6980 35750 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000002BC30A06990) WIA: 7116.6980 35750 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000002BC30A06580) WIA: 7116.6980 35750 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000002BC30A064D0) WIA: 7116.6980 35750 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000002BC30A06BF0) WIA: 7116.6980 35750 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000002BC30A06C60) WIA: 7116.6980 35750 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000002BC30A03030) WIA: 7116.6980 35750 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 7116.2872 35750 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7116.6980 35750 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000002BC30A05D50) WIA: 7116.6980 35750 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 7116.4228 35750 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 7116.6980 35750 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [7116] at 2024/02/04 18:19:45:234 **************** WIA: 7116.6980 35718 0 0 [sti.dll] DllEntryPoint, sti.dll (0xB7BB0000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 7116.6980 35718 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7116.6980 35718 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [7804] at 2024/02/07 23:14:15:328 **************** WIA: 7804.6416 15 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 7804.6416 15 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 5664 WIA: 7804.5664 78 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7804.5608 78 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 7804.5608 78 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 7804.5608 78 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 7804.5664 78 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 7804.5664 78 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 7804.5664 78 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 7804.5664 78 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x0000026806E073E0 WIA: 7804.5608 78 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 7804.5664 78 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 7804.5664 78 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 7804.5664 78 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 7804.5664 78 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 7804.5664 78 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 6268) WIA: 7804.5664 78 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 7804.6268 78 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 7804.6268 78 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 7804.6268 78 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 7804.2948 78 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7804.5664 78 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7804.5664 78 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 7804.5664 78 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 7804.5664 78 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7804.6416 78 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 7804.6416 78 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 7804.6416 93 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7804.6416 93 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7804.6416 93 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7804.6416 93 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7804.6416 93 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7804.6416 93 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 7804.2948 93 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [5264] at 2024/02/07 23:14:15:422 **************** WIA: 5264.6988 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7804.2948 93 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 7804.2948 93 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 7804.2948 93 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 5264.6988 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001C3F2D7CFE0 from server WIA: 5264.6988 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7804.2948 93 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7804.2948 93 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C3F4A2A1D0 WIA: 5264.6988 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5264.6988 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5264.5344 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5264.6988 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C3F4A2A1D0 WIA: 5264.5344 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 7804.2948 93 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7804.2948 93 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C3F4A2A1D0 WIA: 5264.6988 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5264.6988 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5264.6988 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C3F4A2A1D0 WIA: 7804.2948 93 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 7804.2948 3671 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7804.2948 3671 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C3F4A2A1D0 WIA: 5264.6988 3578 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5264.6988 3578 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5264.6988 3578 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C3F4A2A1D0 WIA: 7804.2948 3671 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7804.2948 3671 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C3F4A2A1D0 WIA: 5264.6988 3578 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5264.6988 3578 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5264.6988 3578 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C3F4A2A1D0 WIA: 5264.6988 3578 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7804.2948 3671 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 7804.2948 3671 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7804.2948 3671 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 7804.5352 3671 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5264.6988 3578 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 5264.6988 3578 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7804.5352 3687 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7804.5352 3687 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7804.5352 3687 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 7804.5352 3687 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5264.5344 3594 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 7804.1236 3703 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7804.5352 3703 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7804.1236 3703 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7804.5352 3703 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7804.1236 5203 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (2) WIA: 7804.1236 5203 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 7804.1236 5203 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7804.1236 5218 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [5248] at 2024/02/07 23:14:20:531 **************** WIA: 5248.6492 15 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7804.1236 5218 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000002 WIA: 7804.1236 5218 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000002 to WiaEventNotifier WIA: 5248.6492 15 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001D81CC8C6F0 from server WIA: 5248.6492 15 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7804.1236 5218 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7804.1236 5218 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D81E9395C0 WIA: 5248.7556 15 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5248.6492 15 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5248.6492 15 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5248.6492 15 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D81E9395C0 WIA: 7804.1236 5218 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7804.1236 5218 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D81E9395C0 WIA: 5248.6492 15 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5248.6492 15 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5248.6492 15 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D81E9395C0 WIA: 5248.7556 78 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 7804.1236 5281 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 7804.1236 8296 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7804.1236 8296 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D81E9395C0 WIA: 5248.6492 3093 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5248.6492 3093 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5248.6492 3093 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D81E9395C0 WIA: 7804.1236 8296 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7804.1236 8296 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D81E9395C0 WIA: 5248.6492 3093 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5248.6492 3093 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5248.6492 3093 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D81E9395C0 WIA: 5248.6492 3093 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7804.1236 8296 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000002 WIA: 7804.1236 8296 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 7804.1236 8296 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000002 marked for removal WIA: 5248.6492 3093 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 5248.6492 3093 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7804.5352 8296 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7804.5352 8312 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7804.5352 8312 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7804.5352 8312 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 7804.5352 8312 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5248.7556 3109 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 5248.7556 3109 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001D84 is now shut down WIA: 5248.6492 3109 0 0 [sti.dll] DllEntryPoint, sti.dll (0xDBCD0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 5248.6492 3109 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5248.6492 3109 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7804.1236 8375 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 7804.1236 8375 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 7804.5352 8375 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7804.5352 8375 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7804.1236 9875 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (6) WIA: 7804.1236 9875 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 7804.1236 9875 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7804.1236 9875 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [6480] at 2024/02/07 23:14:25:203 **************** WIA: 6480.3420 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7804.1236 9875 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000003 WIA: 7804.1236 9875 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000003 to WiaEventNotifier WIA: 6480.3420 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000018D5886C5E0 from server WIA: 6480.3420 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7804.1236 9875 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7804.1236 9875 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018D5A409CC0 WIA: 6480.3420 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6480.3420 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6480.5268 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6480.3420 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018D5A409CC0 WIA: 6480.5268 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 7804.1236 9875 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7804.1236 9875 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018D5A409CC0 WIA: 6480.3420 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6480.3420 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6480.3420 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018D5A409CC0 WIA: 7804.1236 9875 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 7804.2948 12140 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7804.2948 12140 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018D5A409CC0 WIA: 6480.3420 2265 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6480.3420 2265 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6480.3420 2265 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018D5A409CC0 WIA: 7804.2948 12140 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7804.2948 12140 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018D5A409CC0 WIA: 6480.3420 2265 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6480.3420 2265 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6480.3420 2265 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000018D5A409CC0 WIA: 6480.3420 2265 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7804.2948 12140 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000003 WIA: 7804.2948 12140 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 7804.2948 12140 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000003 marked for removal WIA: 6480.3420 2265 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 6480.3420 2265 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7804.5352 12156 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7804.5352 12156 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7804.5352 12156 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7804.5352 12156 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 7804.5352 12156 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6480.5268 2296 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 6480.5268 2296 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001494 is now shut down WIA: 6480.3420 2296 0 0 [sti.dll] DllEntryPoint, sti.dll (0xDBCD0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 6480.3420 2296 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6480.3420 2296 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7804.1236 12171 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 7804.5352 12171 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7804.1236 12171 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 7804.5352 12171 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7804.1236 15984 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (A) WIA: 7804.1236 15984 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 7804.1236 15984 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7804.1236 16000 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [5776] at 2024/02/07 23:14:31:317 **************** WIA: 5776.6684 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7804.1236 16000 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000004 WIA: 7804.1236 16000 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000004 to WiaEventNotifier WIA: 5776.6684 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001B91E64C910 from server WIA: 5776.6684 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7804.1236 16000 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7804.1236 16000 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B92043A3C0 WIA: 5776.6684 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5776.6684 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5776.6684 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B92043A3C0 WIA: 7804.1236 16000 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7804.1236 16000 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B92043A3C0 WIA: 5776.6684 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5776.6684 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5776.6684 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B92043A3C0 WIA: 5776.7288 15 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5776.7288 15 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 7804.1236 16015 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 7804.1236 18859 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7804.1236 18859 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B92043A3C0 WIA: 5776.6684 2859 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5776.6684 2859 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5776.6684 2859 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B92043A3C0 WIA: 7804.1236 18859 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7804.1236 18859 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B92043A3C0 WIA: 5776.6684 2859 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5776.6684 2859 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5776.6684 2859 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001B92043A3C0 WIA: 5776.6684 2859 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7804.1236 18859 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000004 WIA: 7804.1236 18859 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 7804.1236 18859 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000004 marked for removal WIA: 7804.5352 18859 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5776.6684 2859 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 5776.6684 2859 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7804.5352 18890 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7804.5352 18890 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7804.5352 18890 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 7804.5352 18890 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5776.7288 2890 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 5776.7288 2890 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001C78 is now shut down WIA: 5776.6684 2906 0 0 [sti.dll] DllEntryPoint, sti.dll (0xDBCD0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 5776.6684 2906 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5776.6684 2906 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7804.2948 18906 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 7804.2948 18906 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 7804.5352 18906 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7804.5352 18906 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7804.5352 48906 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 7804.5352 48906 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 7804.6416 48906 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 7804.6416 48906 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (0000026806E06350) WIA: 7804.6416 48906 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (0000026806E062B0) WIA: 7804.6416 48906 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 7804.6416 48906 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (0000026806E05CC0) WIA: 7804.6416 48906 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (0000026806E06210) WIA: 7804.6416 48906 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (0000026806E063F0) WIA: 7804.6416 48906 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 7804.6416 48906 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 7804.6416 48906 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (0000026806E069D0) WIA: 7804.6416 48906 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (0000026806E065C0) WIA: 7804.6416 48906 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (0000026806E06510) WIA: 7804.6416 48906 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (0000026806E06C30) WIA: 7804.6416 48906 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (0000026806E06CA0) WIA: 7804.6416 48906 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (0000026806E04C80) WIA: 7804.6416 48906 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 7804.5352 48906 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7804.6416 48906 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (0000026806E05D90) WIA: 7804.6416 48906 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 7804.5664 48906 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 7804.6416 48906 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [7804] at 2024/02/07 23:14:15:422 **************** WIA: 7804.5608 48813 0 0 [sti.dll] DllEntryPoint, sti.dll (0xDBCD0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7804.5608 48813 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7804.5608 48813 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [5504] at 2024/02/18 17:10:47:100 **************** WIA: 5504.3176 0 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 5504.3176 15 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 6012 WIA: 5504.6012 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 5504.4676 15 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 5504.4676 15 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 5504.4676 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 5504.6012 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 5504.6012 15 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 5504.6012 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 5504.6012 15 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000001E2BC806FE0 WIA: 5504.4676 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 5504.6012 15 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 5504.6012 15 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 5504.6012 15 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 5504.6012 15 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 5504.6012 15 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 7400) WIA: 5504.6012 15 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 5504.6012 15 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 5504.6012 15 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 5504.7400 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 5504.7400 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 5504.7400 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 5504.6012 15 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 5504.6012 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 5504.3148 15 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 5504.3176 15 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 5504.3176 15 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 5504.3176 31 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 5504.3176 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 5504.3176 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 5504.3176 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 5504.3176 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 5504.3176 31 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 5504.5476 31 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [2380] at 2024/02/18 17:10:47:132 **************** WIA: 2380.5248 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 5504.3148 31 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 5504.3148 31 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 5504.3148 31 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 2380.5248 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000002496A7FC0A0 from server WIA: 2380.5248 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 5504.3148 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5504.3148 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002496C3D9BB0 WIA: 2380.5248 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2380.5248 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 2380.5248 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002496C3D9BB0 WIA: 5504.3148 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5504.3148 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002496C3D9BB0 WIA: 2380.5248 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2380.5248 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 2380.5248 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002496C3D9BB0 WIA: 2380.8072 16 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 2380.8072 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 5504.3148 47 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 5504.5476 4531 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 5504.5476 4531 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002496C3D9BB0 WIA: 2380.5248 4500 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2380.5248 4500 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 2380.5248 4500 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002496C3D9BB0 WIA: 5504.5476 4531 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 5504.5476 4531 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002496C3D9BB0 WIA: 2380.5248 4500 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2380.5248 4500 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 2380.5248 4500 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002496C3D9BB0 WIA: 2380.5248 4500 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 5504.5476 4531 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 5504.5476 4531 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 5504.5476 4531 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 2380.5248 4500 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 2380.5248 4500 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5504.6052 4531 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5504.6052 4547 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 5504.6052 4547 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 5504.6052 4547 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 5504.6052 4547 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 2380.8072 4516 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 2380.8072 4516 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001F88 is now shut down WIA: 2380.5248 4578 0 0 [sti.dll] DllEntryPoint, sti.dll (0x81860000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 2380.5248 4578 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 2380.5248 4578 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5504.3148 4609 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 5504.3148 4609 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 5504.6052 4609 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5504.6052 4609 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5504.5476 9422 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (2) WIA: 5504.5476 9422 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 5504.5476 9422 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 5504.5476 9437 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [3476] at 2024/02/18 17:10:56:536 **************** WIA: 3476.6512 63 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 5504.2068 9500 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000002 WIA: 5504.2068 9500 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000002 to WiaEventNotifier WIA: 3476.6512 63 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000020C3E48DE40 from server WIA: 3476.6512 63 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 5504.2068 9500 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5504.2068 9500 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020C401D9650 WIA: 3476.6512 63 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3476.6512 63 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 3476.6512 63 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020C401D9650 WIA: 5504.2068 9500 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5504.2068 9500 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020C401D9650 WIA: 3476.6512 63 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3476.6512 63 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 3476.6512 63 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020C401D9650 WIA: 3476.6900 63 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 3476.6900 63 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 5504.3148 9515 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 5504.3148 12812 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 5504.3148 12812 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020C401D9650 WIA: 3476.6512 3375 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3476.6512 3375 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 3476.6512 3375 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020C401D9650 WIA: 5504.3148 12812 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 5504.3148 12812 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020C401D9650 WIA: 3476.6512 3375 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3476.6512 3375 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 3476.6512 3375 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020C401D9650 WIA: 3476.6512 3375 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 5504.3148 12812 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000002 WIA: 5504.3148 12812 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 5504.3148 12812 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000002 marked for removal WIA: 3476.6512 3375 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 3476.6512 3375 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5504.6052 12812 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5504.6052 12828 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 5504.6052 12828 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 5504.6052 12828 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 5504.6052 12828 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3476.6512 3406 0 0 [sti.dll] DllEntryPoint, sti.dll (0x81860000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 3476.6512 3406 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 3476.6512 3406 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5504.3148 12843 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 5504.3148 12843 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 5504.6052 12843 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5504.6052 12843 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5504.6052 42828 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 5504.6052 42828 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 5504.3176 42828 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 5504.3176 42828 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000001E2BC806350) WIA: 5504.3176 42828 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000001E2BC8062B0) WIA: 5504.3176 42828 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 5504.3176 42828 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000001E2BC805CC0) WIA: 5504.3176 42828 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000001E2BC806210) WIA: 5504.3176 42828 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000001E2BC8063F0) WIA: 5504.3176 42828 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 5504.3176 42828 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 5504.3176 42828 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000001E2BC807070) WIA: 5504.3176 42828 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000001E2BC8065C0) WIA: 5504.3176 42828 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000001E2BC806510) WIA: 5504.3176 42828 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000001E2BC8072D0) WIA: 5504.3176 42828 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000001E2BC807340) WIA: 5504.3176 42828 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000001E2BC804C80) WIA: 5504.3176 42828 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 5504.6052 42828 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5504.3176 42828 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000001E2BC805D90) WIA: 5504.3176 42828 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 5504.6012 42828 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 5504.3176 42828 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [5504] at 2024/02/18 17:10:47:132 **************** WIA: 5504.4676 43187 0 0 [sti.dll] DllEntryPoint, sti.dll (0x81860000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 5504.4676 43187 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5504.4676 43187 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [5104] at 2024/02/18 18:27:57:500 **************** WIA: 5104.4384 0 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 5104.4384 0 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 6456 WIA: 5104.6456 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 5104.7296 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 5104.7296 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 5104.7296 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 5104.6456 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 5104.6456 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 5104.6456 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 5104.6456 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000001C9DFA073E0 WIA: 5104.6456 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 5104.6456 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 5104.6456 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 5104.6456 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 5104.6456 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 4952) WIA: 5104.6456 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 5104.7296 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 5104.4952 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 5104.4952 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 5104.4952 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 5104.6456 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 5104.6456 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 5104.6456 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 5104.6456 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 5104.7228 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 5104.4384 16 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 5104.4384 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 5104.4384 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 5104.4384 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 5104.4384 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 5104.4384 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 5104.4384 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 5104.4384 16 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 5104.7576 31 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [5272] at 2024/02/18 18:27:57:533 **************** WIA: 5272.7332 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 5104.7228 31 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 5104.7228 31 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 5104.7228 31 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 5272.7332 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001E330FECE40 from server WIA: 5272.7332 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 5104.7228 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5104.7228 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E332C09BF0 WIA: 5272.7332 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5272.7332 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5272.7332 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E332C09BF0 WIA: 5104.7228 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5104.7228 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E332C09BF0 WIA: 5272.7332 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5272.7332 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5272.7332 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E332C09BF0 WIA: 5272.5612 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5272.5612 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 5104.7576 31 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 5104.7228 3359 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 5104.7228 3359 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E332C09BF0 WIA: 5272.7332 3328 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5272.7332 3328 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5272.7332 3328 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E332C09BF0 WIA: 5104.7228 3359 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 5104.7228 3359 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E332C09BF0 WIA: 5272.7332 3328 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5272.7332 3328 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5272.7332 3328 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E332C09BF0 WIA: 5272.7332 3328 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 5104.7228 3359 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 5104.7228 3359 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 5104.7228 3359 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 5272.7332 3328 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 5272.7332 3328 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5104.6964 3406 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5104.6964 3406 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 5104.6964 3406 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 5104.6964 3406 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 5104.6964 3406 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5272.5612 3375 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 5272.5612 3375 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000015EC is now shut down WIA: 5272.7332 3391 0 0 [sti.dll] DllEntryPoint, sti.dll (0x80C20000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 5272.7332 3391 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5272.7332 3391 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5104.7228 3422 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 5104.7228 3422 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 5104.6964 3422 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5104.6964 3422 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5104.6964 33422 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 5104.6964 33422 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 5104.4384 33422 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 5104.4384 33422 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000001C9DFA06350) WIA: 5104.4384 33422 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000001C9DFA062B0) WIA: 5104.4384 33422 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 5104.4384 33422 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000001C9DFA05CC0) WIA: 5104.4384 33422 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000001C9DFA06210) WIA: 5104.4384 33422 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000001C9DFA063F0) WIA: 5104.4384 33422 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 5104.4384 33422 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 5104.4384 33422 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000001C9DFA06D10) WIA: 5104.4384 33422 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000001C9DFA065C0) WIA: 5104.4384 33422 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000001C9DFA06510) WIA: 5104.4384 33422 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000001C9DFA06F70) WIA: 5104.4384 33422 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000001C9DFA072F0) WIA: 5104.4384 33422 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000001C9DFA04C80) WIA: 5104.4384 33422 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 5104.6964 33422 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5104.4384 33422 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000001C9DFA05D90) WIA: 5104.4384 33422 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 5104.6456 33422 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 5104.4384 33422 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [5104] at 2024/02/18 18:27:57:517 **************** WIA: 5104.4384 33406 0 0 [sti.dll] DllEntryPoint, sti.dll (0x80C20000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 5104.4384 33406 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5104.4384 33406 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [7260] at 2025/02/16 11:59:03:704 **************** WIA: 7260.5856 0 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 7260.5856 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 1012 WIA: 7260.1012 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7260.4344 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 7260.4344 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 7260.4344 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 7260.4344 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 7260.1012 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 7260.1012 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 7260.1012 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 7260.1012 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x0000023553807020 WIA: 7260.1012 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 7260.1012 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 7260.1012 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 7260.1012 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 7260.1012 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 2936) WIA: 7260.1012 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 7260.1012 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7260.1012 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 7260.1012 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 7260.1012 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7260.2936 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 7260.2936 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 7260.2936 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 7260.8696 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7260.5856 16 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 7260.5856 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 7260.5856 31 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7260.5856 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7260.5856 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7260.5856 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7260.5856 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7260.5856 31 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 7260.8696 47 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [6156] at 2025/02/16 11:59:03:752 **************** WIA: 6156.4696 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7260.6716 47 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 7260.6716 47 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 7260.6716 47 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 6156.4696 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000002C4A831FBE0 from server WIA: 6156.4696 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7260.6716 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7260.6716 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C4AA82AE80 WIA: 6156.4696 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6156.4696 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6156.4696 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C4AA82AE80 WIA: 7260.6716 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7260.6716 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C4AA82AE80 WIA: 6156.4696 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6156.4696 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6156.4696 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C4AA82AE80 WIA: 6156.9956 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6156.9956 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 7260.6716 47 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 7260.620 5828 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7260.620 5828 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C4AA82AE80 WIA: 6156.4696 5781 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6156.4696 5781 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6156.4696 5781 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C4AA82AE80 WIA: 7260.620 5828 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7260.620 5828 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C4AA82AE80 WIA: 6156.4696 5781 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6156.4696 5781 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6156.4696 5781 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002C4AA82AE80 WIA: 6156.4696 5781 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7260.620 5859 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 7260.620 5859 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7260.620 5859 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 6156.4696 5812 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 6156.4696 5812 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7260.9948 5859 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7260.9948 5875 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7260.9948 5875 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7260.9948 5875 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 6156.9956 5828 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 7260.9948 5875 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6156.9956 5828 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000026E4 is now shut down WIA: 6156.4696 5844 0 0 [sti.dll] DllEntryPoint, sti.dll (0x928A0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 6156.4696 5844 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6156.4696 5844 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7260.6716 5906 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7260.6716 5906 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7260.9948 5906 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7260.9948 5906 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7260.9948 35891 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 7260.9948 35891 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 7260.5856 35891 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 7260.5856 35891 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (0000023553806350) WIA: 7260.5856 35891 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (00000235538062B0) WIA: 7260.5856 35891 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 7260.5856 35891 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (0000023553805CC0) WIA: 7260.5856 35891 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (0000023553806210) WIA: 7260.5856 35891 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (00000235538063F0) WIA: 7260.5856 35891 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 7260.5856 35891 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 7260.5856 35891 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (0000023553807070) WIA: 7260.5856 35891 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (00000235538065C0) WIA: 7260.5856 35891 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (0000023553806510) WIA: 7260.5856 35891 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (00000235538072D0) WIA: 7260.5856 35891 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (0000023553807340) WIA: 7260.5856 35891 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (0000023553804C80) WIA: 7260.5856 35891 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 7260.9948 35891 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7260.5856 35891 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (0000023553805D90) WIA: 7260.5856 35891 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 7260.1012 35891 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 7260.5856 35891 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [7260] at 2025/02/16 11:59:03:744 **************** WIA: 7260.5856 35860 0 0 [sti.dll] DllEntryPoint, sti.dll (0x928A0000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 7260.5856 35860 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7260.5856 35860 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [10088] at 2025/02/16 11:59:41:009 **************** WIA: 10088.1996 0 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 10088.1996 0 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 2376 WIA: 10088.2376 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 10088.3032 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 10088.3032 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 10088.3032 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 10088.2376 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 10088.2376 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 10088.2376 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 10088.2376 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x0000014558A06CF0 WIA: 10088.2376 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 10088.2376 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 10088.2376 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 5980) WIA: 10088.3032 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 10088.2376 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 10088.2376 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 10088.5980 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 10088.5980 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 10088.5980 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 10088.2376 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 10088.2376 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 10088.7128 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 10088.1996 16 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 10088.1996 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 10088.1996 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 10088.1996 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 10088.1996 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 10088.1996 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 10088.1996 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 10088.1996 16 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 10088.4264 31 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [6880] at 2025/02/16 11:59:41:040 **************** WIA: 6880.6436 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 10088.4264 31 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 10088.4264 31 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 10088.4264 31 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 6880.6436 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000025807EAE5F0 from server WIA: 6880.6436 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 10088.4264 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10088.4264 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002580A4CAC60 WIA: 6880.6436 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6880.6436 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6880.5128 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6880.6436 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002580A4CAC60 WIA: 6880.5128 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 10088.4264 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 10088.4264 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002580A4CAC60 WIA: 10088.9864 31 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 6880.6436 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6880.6436 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6880.6436 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002580A4CAC60 WIA: 10088.9864 2406 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10088.9864 2406 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002580A4CAC60 WIA: 6880.6436 2375 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6880.6436 2375 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6880.6436 2375 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002580A4CAC60 WIA: 10088.9864 2406 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 10088.9864 2406 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002580A4CAC60 WIA: 6880.6436 2375 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6880.6436 2375 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6880.6436 2375 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002580A4CAC60 WIA: 6880.6436 2375 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 10088.9864 2406 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 10088.9864 2406 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 10088.9864 2406 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 10088.9188 2406 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6880.6436 2375 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 6880.6436 2375 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10088.9188 2437 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 10088.9188 2437 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 10088.9188 2437 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 10088.9188 2437 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6880.5128 2422 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 6880.5128 2422 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001408 is now shut down WIA: 6880.6436 2438 0 0 [sti.dll] DllEntryPoint, sti.dll (0x928A0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 6880.6436 2438 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6880.6436 2438 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 10088.4264 2469 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 10088.9188 2469 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10088.4264 2469 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 10088.9188 2469 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10088.9188 32437 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 10088.9188 32437 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 10088.1996 32437 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 10088.1996 32437 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (0000014558A06350) WIA: 10088.1996 32437 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (0000014558A062B0) WIA: 10088.1996 32437 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 10088.1996 32437 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (0000014558A05CC0) WIA: 10088.1996 32437 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (0000014558A06210) WIA: 10088.1996 32437 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (0000014558A063F0) WIA: 10088.1996 32437 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 10088.1996 32437 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 10088.1996 32437 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (0000014558A07070) WIA: 10088.1996 32437 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (0000014558A065C0) WIA: 10088.1996 32437 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (0000014558A06510) WIA: 10088.1996 32437 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (0000014558A072D0) WIA: 10088.1996 32437 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (0000014558A07340) WIA: 10088.1996 32437 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (0000014558A04C80) WIA: 10088.1996 32437 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 10088.9188 32437 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 10088.1996 32437 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (0000014558A05D90) WIA: 10088.1996 32437 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 10088.2376 32437 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 10088.1996 32437 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [10088] at 2025/02/16 11:59:41:025 **************** WIA: 10088.1996 32421 0 0 [sti.dll] DllEntryPoint, sti.dll (0x928A0000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 10088.1996 32421 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 10088.1996 32421 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [5552] at 2025/05/11 17:41:53:525 **************** WIA: 5552.200 0 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 5552.200 15 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 8000 WIA: 5552.8000 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 5552.8888 15 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 5552.8888 15 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 5552.8888 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 5552.8000 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 5552.8000 15 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 5552.8000 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 5552.8000 15 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x00000224CAE070F0 WIA: 5552.8888 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 5552.8000 15 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 5552.8000 15 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 5552.8000 15 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 5552.8000 15 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 5552.8000 15 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 3296) WIA: 5552.8000 15 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 5552.8000 15 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 5552.8000 15 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 5552.8000 15 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 5552.8000 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 5552.3296 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 5552.3296 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 5552.3296 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 5552.4152 15 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 5552.200 15 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 5552.200 15 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 5552.200 15 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 5552.200 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 5552.200 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 5552.200 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 5552.200 15 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 5552.200 15 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 5552.4152 47 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [6588] at 2025/05/11 17:41:53:568 **************** WIA: 6588.3832 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 5552.1924 47 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 5552.1924 47 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 5552.1924 47 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 6588.3832 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000019BA851F700 from server WIA: 6588.3832 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 5552.7396 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5552.7396 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000019BAAAD9A50 WIA: 6588.3832 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6588.3832 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6588.3832 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000019BAAAD9A50 WIA: 5552.7396 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5552.7396 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000019BAAAD9A50 WIA: 6588.3832 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6588.3832 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6588.3832 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000019BAAAD9A50 WIA: 6588.7780 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6588.7780 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 5552.7396 47 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 5552.4152 3984 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 5552.4152 3984 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000019BAAAD9A50 WIA: 6588.3832 3937 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6588.3832 3937 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6588.3832 3937 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000019BAAAD9A50 WIA: 5552.4152 3984 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 5552.4152 3984 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000019BAAAD9A50 WIA: 6588.3832 3937 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6588.3832 3937 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6588.3832 3937 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000019BAAAD9A50 WIA: 6588.3832 3937 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 5552.4152 3984 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 5552.4152 3984 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 5552.4152 3984 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 6588.3832 3937 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 6588.3832 3937 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5552.3008 3984 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5552.3008 4000 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 5552.3008 4000 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 5552.3008 4000 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 5552.3008 4000 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6588.7780 3953 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 6588.7780 3953 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001E64 is now shut down WIA: 6588.3832 3968 0 0 [sti.dll] DllEntryPoint, sti.dll (0x167A0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 6588.3832 3968 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6588.3832 3968 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5552.4152 4031 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 5552.4152 4031 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 5552.3008 4031 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5552.3008 4031 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5552.4152 5765 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (2) WIA: 5552.4152 5765 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 5552.4152 5765 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 5552.4152 5781 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [7324] at 2025/05/11 17:41:59:284 **************** WIA: 7324.7856 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 5552.4152 5781 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000002 WIA: 5552.4152 5781 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000002 to WiaEventNotifier WIA: 7324.7856 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000299CB92F850 from server WIA: 7324.7856 16 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 5552.4152 5781 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5552.4152 5781 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000299CD4B97D0 WIA: 7324.8916 16 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7324.7856 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7324.7856 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7324.8916 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 7324.7856 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000299CD4B97D0 WIA: 5552.7396 5781 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5552.7396 5781 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000299CD4B97D0 WIA: 5552.4152 5781 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 7324.7856 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7324.7856 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7324.7856 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000299CD4B97D0 WIA: 5552.4152 8015 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 5552.4152 8015 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000299CD4B97D0 WIA: 7324.7856 2250 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7324.7856 2250 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7324.7856 2250 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000299CD4B97D0 WIA: 5552.4152 8015 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 5552.4152 8015 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000299CD4B97D0 WIA: 7324.7856 2250 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7324.7856 2250 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7324.7856 2250 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000299CD4B97D0 WIA: 7324.7856 2250 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 5552.4152 8015 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000002 WIA: 5552.4152 8015 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 5552.4152 8015 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000002 marked for removal WIA: 5552.3008 8015 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7324.7856 2250 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 7324.7856 2250 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5552.3008 8031 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 5552.3008 8031 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 5552.3008 8031 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 5552.3008 8031 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7324.8916 2266 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 7324.8916 2266 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000022D4 is now shut down WIA: 7324.7856 2282 0 0 [sti.dll] DllEntryPoint, sti.dll (0x167A0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7324.7856 2282 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7324.7856 2282 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5552.7396 8047 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 5552.3008 8047 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5552.7396 8047 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 5552.3008 8047 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5552.7396 9625 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (6) WIA: 5552.7396 9625 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 5552.7396 9625 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 5552.7396 9640 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [6932] at 2025/05/11 17:42:03:166 **************** WIA: 6932.8552 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 5552.1924 9640 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000003 WIA: 5552.1924 9640 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000003 to WiaEventNotifier WIA: 6932.8552 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000021843C4E660 from server WIA: 6932.8552 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 5552.1924 9640 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5552.1924 9640 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002184618A330 WIA: 6932.8552 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6932.8552 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6932.8552 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002184618A330 WIA: 5552.1924 9640 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5552.1924 9640 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002184618A330 WIA: 6932.8552 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6932.8552 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6932.8552 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002184618A330 WIA: 6932.1380 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6932.1380 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 5552.4152 9687 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 5552.4152 11797 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 5552.4152 11797 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002184618A330 WIA: 6932.8552 2157 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6932.8552 2157 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6932.8552 2157 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002184618A330 WIA: 5552.4152 11797 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 5552.4152 11797 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002184618A330 WIA: 6932.8552 2157 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6932.8552 2157 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6932.8552 2157 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002184618A330 WIA: 6932.8552 2157 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 5552.4152 11797 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000003 WIA: 5552.4152 11797 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 5552.4152 11797 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000003 marked for removal WIA: 6932.8552 2157 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 6932.8552 2157 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5552.3008 11797 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5552.3008 11812 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 5552.3008 11812 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 5552.3008 11812 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 5552.3008 11812 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6932.8552 2172 0 0 [sti.dll] DllEntryPoint, sti.dll (0x167A0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 6932.8552 2172 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6932.8552 2172 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5552.7396 11812 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 5552.7396 11812 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 5552.3008 11812 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5552.3008 11812 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5552.7396 13390 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (A) WIA: 5552.7396 13390 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 5552.7396 13390 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 5552.7396 13390 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [3944] at 2025/05/11 17:42:06:916 **************** WIA: 3944.1676 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 5552.1924 13390 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000004 WIA: 5552.1924 13390 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000004 to WiaEventNotifier WIA: 3944.1676 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000017E7B25F310 from server WIA: 3944.1676 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 5552.1924 13390 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5552.1924 13390 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000017E7CE19910 WIA: 3944.1676 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3944.1676 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 3944.1676 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000017E7CE19910 WIA: 5552.1924 13390 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 5552.1924 13390 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000017E7CE19910 WIA: 3944.1676 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3944.1676 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 3944.1676 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000017E7CE19910 WIA: 3944.6328 16 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 3944.6328 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 5552.4152 13422 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 5552.4152 15515 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 5552.4152 15515 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000017E7CE19910 WIA: 3944.1676 2125 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3944.1676 2125 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 3944.1676 2125 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000017E7CE19910 WIA: 5552.4152 15515 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 5552.4152 15515 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000017E7CE19910 WIA: 3944.1676 2125 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3944.1676 2125 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 3944.1676 2125 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000017E7CE19910 WIA: 3944.1676 2125 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 5552.4152 15515 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000004 WIA: 5552.4152 15515 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 5552.4152 15515 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000004 marked for removal WIA: 3944.1676 2125 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 3944.1676 2125 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5552.3008 15531 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5552.3008 15531 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 5552.3008 15531 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 5552.3008 15531 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 5552.3008 15531 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3944.6328 2141 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 3944.6328 2141 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000018B8 is now shut down WIA: 3944.1676 2157 0 0 [sti.dll] DllEntryPoint, sti.dll (0x167A0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 3944.1676 2157 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 3944.1676 2157 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 5552.7396 15547 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 5552.3008 15547 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5552.7396 15547 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 5552.3008 15547 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5552.3008 45547 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 5552.3008 45547 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 5552.200 45547 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 5552.200 45547 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (00000224CAE06350) WIA: 5552.200 45547 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (00000224CAE062B0) WIA: 5552.200 45547 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 5552.200 45547 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (00000224CAE05CC0) WIA: 5552.200 45547 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (00000224CAE06210) WIA: 5552.200 45547 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (00000224CAE063F0) WIA: 5552.200 45547 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 5552.200 45547 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 5552.200 45547 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (00000224CAE069D0) WIA: 5552.200 45547 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (00000224CAE065C0) WIA: 5552.200 45547 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (00000224CAE06510) WIA: 5552.200 45547 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (00000224CAE06C30) WIA: 5552.200 45547 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (00000224CAE06CA0) WIA: 5552.200 45547 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (00000224CAE04C80) WIA: 5552.200 45547 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 5552.3008 45547 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5552.200 45547 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (00000224CAE05D90) WIA: 5552.200 45547 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 5552.8000 45547 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 5552.200 45547 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [5552] at 2025/05/11 17:41:53:556 **************** WIA: 5552.8888 45516 0 0 [sti.dll] DllEntryPoint, sti.dll (0x167A0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 5552.8888 45516 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5552.8888 45516 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [8752] at 2025/05/11 17:54:32:743 **************** WIA: 8752.5524 15 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 8752.5524 15 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 7728 WIA: 8752.7728 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8752.732 15 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 8752.732 15 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 8752.732 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8752.732 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 8752.7728 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8752.7728 15 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 8752.7728 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 8752.7728 15 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x00000223BBE06CF0 WIA: 8752.7728 15 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 8752.7728 15 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 8752.7728 15 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 4888) WIA: 8752.4888 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 8752.4888 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 8752.4888 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 8752.7728 15 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 8752.7728 15 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 8752.7728 15 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 8752.7728 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8752.7492 15 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 8752.5524 31 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 8752.5524 31 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 8752.5524 31 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 8752.5524 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8752.5524 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8752.5524 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8752.5524 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8752.5524 31 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 8752.7492 31 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [8412] at 2025/05/11 17:54:32:775 **************** WIA: 8412.7748 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 8752.7492 31 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 8752.7492 31 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 8752.7492 31 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 8412.7748 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000022CB96CD7A0 from server WIA: 8412.7748 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 8752.7492 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8412.7480 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8752.7492 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022CBBD39650 WIA: 8412.7480 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 8412.7748 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8412.7748 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8752.7492 31 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 8412.7748 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022CBBD39650 WIA: 8752.7492 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8752.7492 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022CBBD39650 WIA: 8412.7748 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8412.7748 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8412.7748 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022CBBD39650 WIA: 8752.7492 37171 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 8752.7492 37171 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [4684] at 2025/05/11 17:55:09:915 **************** WIA: 4684.7620 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 8752.7492 37171 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000002 WIA: 8752.7492 37171 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000002 to WiaEventNotifier WIA: 4684.7620 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000204673CEFB0 from server WIA: 4684.7620 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 4684.1296 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 4684.1296 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 8752.7492 37171 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8752.7492 37171 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020469949E50 WIA: 4684.7620 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 4684.7620 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8752.4564 37171 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 4684.7620 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020469949E50 WIA: 8752.4564 37171 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8752.4564 37171 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020469949E50 WIA: 4684.7620 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 4684.7620 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 4684.7620 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020469949E50 WIA: 8752.4564 95281 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8752.4564 95281 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022CBBD39650 WIA: 8412.7748 95250 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8412.7748 95250 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8412.7748 95250 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022CBBD39650 WIA: 8752.4564 95281 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8752.4564 95281 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022CBBD39650 WIA: 8412.7748 95250 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8412.7748 95250 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8412.7748 95250 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000022CBBD39650 WIA: 8412.7748 95250 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 8752.4564 95281 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 8752.4564 95281 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8752.4564 95281 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 8412.7748 95250 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 8412.7748 95250 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8752.3776 95296 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8752.3776 95296 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 8752.3776 95296 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 8412.7480 95265 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 8412.7480 95265 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001D38 is now shut down WIA: 8412.7748 95281 0 0 [sti.dll] DllEntryPoint, sti.dll (0x17D20000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 8412.7748 95281 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8412.7748 95281 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8752.7492 95328 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8752.3776 95328 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8752.7492 95328 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8752.3776 95328 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8752.7492 97390 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8752.7492 97390 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020469949E50 WIA: 4684.7620 60219 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 4684.7620 60219 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 4684.7620 60219 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020469949E50 WIA: 8752.7492 97390 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8752.7492 97390 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020469949E50 WIA: 4684.7620 60219 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 4684.7620 60219 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 4684.7620 60219 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000020469949E50 WIA: 4684.7620 60219 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 8752.7492 97390 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000002 WIA: 8752.7492 97390 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 8752.7492 97390 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000002 marked for removal WIA: 4684.7620 60219 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 8752.3776 97390 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4684.7620 60219 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8752.3776 97406 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 8752.3776 97406 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 8752.3776 97406 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 8752.3776 97406 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4684.1296 60235 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 4684.1296 60235 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00000510 is now shut down WIA: 4684.7620 60250 0 0 [sti.dll] DllEntryPoint, sti.dll (0x17D20000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 4684.7620 60250 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 4684.7620 60250 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8752.4564 97421 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 8752.4564 97421 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 8752.3776 97421 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8752.3776 97421 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8752.3776 127421 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 8752.3776 127421 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 8752.5524 127421 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 8752.5524 127421 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (00000223BBE06350) WIA: 8752.5524 127421 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (00000223BBE062B0) WIA: 8752.5524 127421 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 8752.5524 127421 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (00000223BBE05CC0) WIA: 8752.5524 127421 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (00000223BBE06210) WIA: 8752.5524 127421 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (00000223BBE063F0) WIA: 8752.5524 127421 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 8752.5524 127421 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 8752.5524 127421 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (00000223BBE07070) WIA: 8752.5524 127421 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (00000223BBE065C0) WIA: 8752.5524 127421 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (00000223BBE06510) WIA: 8752.5524 127421 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (00000223BBE072D0) WIA: 8752.5524 127421 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (00000223BBE07340) WIA: 8752.5524 127421 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (00000223BBE04C80) WIA: 8752.5524 127421 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 8752.3776 127421 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8752.5524 127421 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (00000223BBE05D90) WIA: 8752.7728 127421 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 8752.5524 127421 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 8752.5524 127421 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [8752] at 2025/05/11 17:54:32:768 **************** WIA: 8752.5524 127390 0 0 [sti.dll] DllEntryPoint, sti.dll (0x17D20000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 8752.5524 127390 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8752.5524 127390 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [8080] at 2025/05/11 18:29:29:152 **************** WIA: 8080.4028 16 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 8080.4028 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 1440 WIA: 8080.1440 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8080.7020 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 8080.7020 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 8080.7020 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 8080.7020 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 8080.1440 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 8080.1440 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 8080.1440 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 8080.1440 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x00000252D4A070F0 WIA: 8080.1440 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 8080.1440 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 8080.1440 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 8080.1440 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 8080.1440 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 1240) WIA: 8080.1440 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 8080.1440 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 8080.1240 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 8080.1240 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 8080.1240 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 8080.1440 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 8080.1440 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 8080.1440 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 8080.4548 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 8080.4028 32 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 8080.4028 32 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 8080.4028 32 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 8080.4028 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8080.4028 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8080.4028 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8080.4028 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 8080.4028 32 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 8080.4128 32 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [8932] at 2025/05/11 18:29:29:184 **************** WIA: 8932.9020 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 8080.4548 32 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 8080.4548 32 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 8080.4548 32 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 8932.9020 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000207E86FA120 from server WIA: 8932.9020 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 8080.4548 32 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8080.4548 32 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000207EAB3A1E0 WIA: 8932.9020 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8932.9020 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8932.9020 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000207EAB3A1E0 WIA: 8080.4548 32 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8080.4548 32 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000207EAB3A1E0 WIA: 8932.9020 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8932.9020 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8932.9020 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000207EAB3A1E0 WIA: 8932.7808 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8932.7808 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 8080.5304 32 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 8080.4128 51375 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 8080.4128 51391 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [1528] at 2025/05/11 18:30:20:552 **************** WIA: 1528.7428 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 8080.4128 51391 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000002 WIA: 8080.4128 51391 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000002 to WiaEventNotifier WIA: 1528.7428 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001F37F68CF50 from server WIA: 1528.7428 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 1528.7372 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 1528.7372 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 8080.4128 51391 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8080.4128 51391 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F3014B9CB0 WIA: 1528.7428 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1528.7428 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 1528.7428 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F3014B9CB0 WIA: 8080.4128 51391 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 8080.5304 51391 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8080.5304 51391 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F3014B9CB0 WIA: 1528.7428 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1528.7428 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 1528.7428 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F3014B9CB0 WIA: 8080.5304 116516 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8080.5304 116516 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000207EAB3A1E0 WIA: 8932.9020 116484 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8932.9020 116484 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8932.9020 116484 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000207EAB3A1E0 WIA: 8080.5304 116516 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8080.5304 116516 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000207EAB3A1E0 WIA: 8932.9020 116484 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8932.9020 116484 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8932.9020 116484 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000207EAB3A1E0 WIA: 8932.9020 116484 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 8080.5304 116516 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 8080.5304 116516 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8080.5304 116516 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 8080.6612 116516 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8932.9020 116484 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 8932.9020 116484 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8080.6612 116532 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 8080.6612 116532 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 8932.7808 116515 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 8932.7808 116515 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001E80 is now shut down WIA: 8932.9020 116531 0 0 [sti.dll] DllEntryPoint, sti.dll (0x1EBA0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 8932.9020 116531 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8932.9020 116531 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8080.5304 116579 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8080.5304 116579 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 8080.6612 116579 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8080.6612 116579 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8080.5304 117500 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8080.5304 117500 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F3014B9CB0 WIA: 1528.7428 66109 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1528.7428 66109 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 1528.7428 66109 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F3014B9CB0 WIA: 8080.5304 117500 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8080.5304 117500 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F3014B9CB0 WIA: 1528.7428 66109 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 1528.7428 66109 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 1528.7428 66109 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F3014B9CB0 WIA: 1528.7428 66109 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 8080.5304 117500 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000002 WIA: 8080.5304 117500 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 8080.5304 117500 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000002 marked for removal WIA: 1528.7428 66109 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 1528.7428 66109 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8080.6612 117500 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8080.6612 117516 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 8080.6612 117516 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 8080.6612 117516 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 8080.6612 117516 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1528.7372 66125 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 1528.7372 66125 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001CCC is now shut down WIA: 1528.7428 66125 0 0 [sti.dll] DllEntryPoint, sti.dll (0x1EBA0000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 1528.7428 66125 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 1528.7428 66125 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8080.5304 117532 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 8080.6612 117532 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8080.5304 117532 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 8080.6612 117532 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8080.5304 147157 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (5) WIA: 8080.5304 147157 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 8080.5304 147157 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 8080.5304 147157 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [7024] at 2025/05/11 18:31:56:320 **************** WIA: 7024.8276 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 8080.5304 147157 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000003 WIA: 8080.5304 147157 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000003 to WiaEventNotifier WIA: 7024.8276 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001BD5BF8C140 from server WIA: 7024.8276 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7024.1836 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7024.1836 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 8080.5304 147157 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8080.5304 147157 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001BD5DAC9970 WIA: 7024.8276 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7024.8276 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7024.8276 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001BD5DAC9970 WIA: 8080.5932 147157 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 8080.5304 147157 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8080.5304 147157 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001BD5DAC9970 WIA: 7024.8276 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7024.8276 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7024.8276 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001BD5DAC9970 WIA: 8080.880 296704 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 8080.880 296704 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [8764] at 2025/05/11 18:34:25:865 **************** WIA: 8764.6492 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 8080.880 296704 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000004 WIA: 8080.880 296704 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000004 to WiaEventNotifier WIA: 8764.6492 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000002EB88BFCCC0 from server WIA: 8764.6492 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 8080.880 296704 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8764.5916 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8080.880 296704 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002EB8B1BA360 WIA: 8764.5916 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 8764.6492 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8764.6492 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8764.6492 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002EB8B1BA360 WIA: 8080.880 296704 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 8080.2268 296704 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8080.2268 296704 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002EB8B1BA360 WIA: 8764.6492 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8764.6492 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8764.6492 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002EB8B1BA360 WIA: 8080.2268 378954 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 8080.2268 378954 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [8348] at 2025/05/11 18:35:48:115 **************** WIA: 8348.3088 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 8080.2268 378954 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000005 WIA: 8080.2268 378954 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000005 to WiaEventNotifier WIA: 8348.3088 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001EDD13ACD50 from server WIA: 8348.3088 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 8080.2268 378954 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8348.2196 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8080.2268 378954 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001EDD2F5AD60 WIA: 8348.2196 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 8348.3088 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8348.3088 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8348.3088 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001EDD2F5AD60 WIA: 8080.2268 378954 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 8080.428 378954 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 8080.428 378954 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001EDD2F5AD60 WIA: 8348.3088 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8348.3088 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8348.3088 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001EDD2F5AD60 WIA: 8080.8684 999219 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8080.8684 999219 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001EDD2F5AD60 WIA: 8348.3088 620265 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8348.3088 620265 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8348.3088 620265 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001EDD2F5AD60 WIA: 8080.8684 999219 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8080.8684 999219 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001EDD2F5AD60 WIA: 8348.3088 620265 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8348.3088 620265 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8348.3088 620265 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001EDD2F5AD60 WIA: 8348.3088 620265 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 8080.8684 999219 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000005 WIA: 8080.8684 999219 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 8080.8684 999219 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000005 marked for removal WIA: 8348.3088 620265 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 8080.6612 999219 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8348.3088 620265 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8080.6612 999235 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 8080.6612 999235 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 8348.2196 620296 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 8348.2196 620296 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00000894 is now shut down WIA: 8348.3088 620296 0 0 [sti.dll] DllEntryPoint, sti.dll (0x1EBA0000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 8348.3088 620296 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8348.3088 620296 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8080.8684 999266 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 8080.6612 999266 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8080.8684 999266 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 8080.6612 999266 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8080.8684 1000063 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8080.8684 1000063 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002EB8B1BA360 WIA: 8764.6492 703359 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8764.6492 703359 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8764.6492 703359 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002EB8B1BA360 WIA: 8080.8684 1000063 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8080.8684 1000063 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002EB8B1BA360 WIA: 8764.6492 703359 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8764.6492 703359 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8764.6492 703359 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002EB8B1BA360 WIA: 8764.6492 703359 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 8080.8684 1000063 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000004 WIA: 8080.8684 1000063 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 8080.8684 1000063 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000004 marked for removal WIA: 8080.6612 1000063 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8764.6492 703359 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 8764.6492 703359 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8080.6612 1000079 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 8080.6612 1000079 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 8764.5916 703375 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 8764.5916 703375 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x0000171C is now shut down WIA: 8764.6492 703390 0 0 [sti.dll] DllEntryPoint, sti.dll (0x1EBA0000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 8764.6492 703390 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8764.6492 703390 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8080.8684 1000110 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 8080.8684 1000110 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 8080.6612 1000110 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8080.6612 1000110 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8080.8684 1000594 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8080.8684 1000594 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001BD5DAC9970 WIA: 7024.8276 853437 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7024.8276 853437 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7024.8276 853437 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001BD5DAC9970 WIA: 8080.8684 1000594 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 8080.8684 1000594 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001BD5DAC9970 WIA: 7024.8276 853437 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7024.8276 853437 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7024.8276 853437 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001BD5DAC9970 WIA: 7024.8276 853437 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 8080.8684 1000594 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000003 WIA: 8080.8684 1000594 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 8080.8684 1000594 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000003 marked for removal WIA: 7024.8276 853437 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 8080.6612 1000594 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7024.8276 853437 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8080.6612 1000610 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 8080.6612 1000610 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 8080.6612 1000610 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 8080.6612 1000610 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7024.1836 853453 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 7024.1836 853468 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x0000072C is now shut down WIA: 7024.8276 853468 0 0 [sti.dll] DllEntryPoint, sti.dll (0x1EBA0000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 7024.8276 853468 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7024.8276 853468 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 8080.8684 1000657 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 8080.8684 1000657 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 8080.6612 1000657 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8080.6612 1000657 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8080.6612 1030625 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 8080.6612 1030625 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 8080.4028 1030625 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 8080.4028 1030625 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (00000252D4A06350) WIA: 8080.4028 1030625 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (00000252D4A062B0) WIA: 8080.4028 1030625 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 8080.4028 1030625 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (00000252D4A059B0) WIA: 8080.4028 1030625 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (00000252D4A06210) WIA: 8080.4028 1030625 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (00000252D4A063F0) WIA: 8080.4028 1030625 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 8080.4028 1030625 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 8080.4028 1030625 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (00000252D4A069D0) WIA: 8080.4028 1030625 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (00000252D4A065C0) WIA: 8080.4028 1030625 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (00000252D4A06510) WIA: 8080.4028 1030625 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (00000252D4A06C30) WIA: 8080.4028 1030625 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (00000252D4A07000) WIA: 8080.4028 1030625 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (00000252D4A04C80) WIA: 8080.4028 1030625 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 8080.6612 1030625 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8080.4028 1030625 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (00000252D4A05D90) WIA: 8080.4028 1030625 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 8080.1440 1030625 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 8080.4028 1030625 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [8080] at 2025/05/11 18:29:29:178 **************** WIA: 8080.4028 1030609 0 0 [sti.dll] DllEntryPoint, sti.dll (0x1EBA0000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 8080.4028 1030609 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8080.4028 1030609 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [1384] at 2025/05/11 19:08:07:504 **************** WIA: 1384.2032 0 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 1384.2032 0 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 6296 WIA: 1384.6296 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 1384.7288 0 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 1384.7288 0 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 1384.7288 0 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 1384.6296 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 1384.6296 0 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 1384.6296 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 1384.6296 0 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x00000239DDE073E0 WIA: 1384.6296 0 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 1384.6296 0 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 1384.6296 0 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 1384.6296 0 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 1384.6296 0 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 8752) WIA: 1384.6296 0 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 1384.7288 0 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 1384.6296 0 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 1384.6296 0 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 1384.6296 0 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 1384.8752 0 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 1384.8752 0 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 1384.8752 0 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 1384.6296 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 1384.9168 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 1384.2032 16 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 1384.2032 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 1384.2032 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 1384.2032 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 1384.2032 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 1384.2032 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 1384.2032 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 1384.2032 16 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 1384.8032 16 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [5308] at 2025/05/11 19:08:07:520 **************** WIA: 5308.6080 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 1384.8032 31 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 1384.8032 31 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 1384.8032 31 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 5308.6080 15 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000002096DC7EAD0 from server WIA: 5308.6080 15 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 1384.8032 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1384.8032 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002097022A150 WIA: 5308.968 15 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5308.6080 15 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5308.6080 15 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5308.968 15 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 5308.6080 15 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002097022A150 WIA: 1384.2624 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1384.8032 31 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 1384.2624 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002097022A150 WIA: 5308.6080 15 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5308.6080 15 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5308.6080 15 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002097022A150 WIA: 1384.8032 2516 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 1384.8032 2516 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002097022A150 WIA: 5308.6080 2500 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5308.6080 2500 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5308.6080 2500 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002097022A150 WIA: 1384.8032 2516 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 1384.8032 2516 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002097022A150 WIA: 5308.6080 2500 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5308.6080 2500 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5308.6080 2500 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002097022A150 WIA: 5308.6080 2500 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 1384.8032 2516 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 1384.8032 2516 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 1384.8032 2516 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 1384.868 2516 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5308.6080 2500 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 5308.6080 2500 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 1384.868 2531 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 1384.868 2531 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 1384.868 2531 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 1384.868 2531 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5308.968 2515 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 5308.968 2515 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000003C8 is now shut down WIA: 5308.6080 2515 0 0 [sti.dll] DllEntryPoint, sti.dll (0x1B2F0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 5308.6080 2515 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5308.6080 2515 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 1384.2624 2547 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 1384.2624 2547 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 1384.868 2547 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1384.868 2547 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1384.8032 4594 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (2) WIA: 1384.8032 4594 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 1384.8032 4594 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 1384.8032 4610 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [2080] at 2025/05/11 19:08:12:112 **************** WIA: 2080.7140 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 1384.9168 4610 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000002 WIA: 1384.9168 4610 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000002 to WiaEventNotifier WIA: 2080.7140 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000132C5CAB400 from server WIA: 2080.7140 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 1384.9168 4610 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1384.9168 4610 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000132C8329DF0 WIA: 2080.7140 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2080.7140 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 2080.7140 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000132C8329DF0 WIA: 1384.9168 4610 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1384.9168 4610 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000132C8329DF0 WIA: 2080.7140 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2080.7140 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 2080.7140 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000132C8329DF0 WIA: 2080.2788 15 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 2080.2788 15 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 1384.2624 4641 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 1384.2624 6797 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 1384.2624 6797 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000132C8329DF0 WIA: 2080.7140 2187 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2080.7140 2187 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 2080.7140 2187 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000132C8329DF0 WIA: 1384.2624 6797 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 1384.2624 6797 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000132C8329DF0 WIA: 2080.7140 2187 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2080.7140 2187 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 2080.7140 2187 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000132C8329DF0 WIA: 2080.7140 2187 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 1384.2624 6797 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000002 WIA: 1384.2624 6797 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 1384.2624 6797 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000002 marked for removal WIA: 2080.7140 2187 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 2080.7140 2187 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 1384.868 6797 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1384.868 6813 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 1384.868 6813 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 1384.868 6813 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 1384.868 6813 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 2080.2788 2203 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 2080.2788 2203 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00000AE4 is now shut down WIA: 2080.7140 2203 0 0 [sti.dll] DllEntryPoint, sti.dll (0x1B2F0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 2080.7140 2203 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 2080.7140 2203 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 1384.2624 6828 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 1384.2624 6828 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 1384.868 6828 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1384.868 6828 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1384.2624 18828 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (6) WIA: 1384.2624 18828 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 1384.2624 18828 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 1384.2624 18844 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [7820] at 2025/05/11 19:08:26:346 **************** WIA: 7820.196 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 1384.9168 18844 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000003 WIA: 1384.9168 18844 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000003 to WiaEventNotifier WIA: 7820.196 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000002A78CAEF760 from server WIA: 7820.196 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 1384.9168 18844 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1384.9168 18844 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002A78F0EA330 WIA: 7820.196 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7820.196 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7820.196 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002A78F0EA330 WIA: 1384.9168 18844 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1384.9168 18844 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002A78F0EA330 WIA: 7820.196 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7820.196 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7820.196 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002A78F0EA330 WIA: 7820.7236 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7820.7236 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 1384.8032 18844 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 1384.8032 21172 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 1384.8032 21172 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002A78F0EA330 WIA: 7820.196 2328 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7820.196 2328 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7820.196 2328 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002A78F0EA330 WIA: 1384.8032 21172 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 1384.8032 21172 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002A78F0EA330 WIA: 7820.196 2328 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7820.196 2328 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7820.196 2328 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002A78F0EA330 WIA: 7820.196 2328 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 1384.8032 21172 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000003 WIA: 1384.8032 21172 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 1384.8032 21172 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000003 marked for removal WIA: 1384.868 21172 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7820.196 2328 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 7820.196 2328 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 1384.868 21188 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 1384.868 21188 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 1384.868 21188 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 1384.868 21188 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7820.7236 2344 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 7820.7236 2344 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001C44 is now shut down WIA: 7820.196 2359 0 0 [sti.dll] DllEntryPoint, sti.dll (0x1B2F0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7820.196 2359 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7820.196 2359 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 1384.2624 21203 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 1384.868 21203 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1384.2624 21203 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 1384.868 21203 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1384.2624 24016 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (A) WIA: 1384.2624 24016 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 1384.2624 24016 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 1384.2624 24016 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [4216] at 2025/05/11 19:08:31:518 **************** WIA: 4216.7856 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 1384.9168 24016 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000004 WIA: 1384.9168 24016 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000004 to WiaEventNotifier WIA: 4216.7856 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000019601C6DA40 from server WIA: 4216.7856 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 1384.9168 24016 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1384.9168 24031 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001960387A860 WIA: 4216.7856 15 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 4216.7856 15 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 4216.7856 15 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001960387A860 WIA: 1384.9168 24031 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1384.9168 24031 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001960387A860 WIA: 4216.7856 15 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 4216.7856 15 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 4216.7856 15 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001960387A860 WIA: 4216.7988 15 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 4216.7988 15 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 1384.8032 24047 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 1384.8032 26094 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 1384.8032 26094 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001960387A860 WIA: 4216.7856 2078 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 4216.7856 2078 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 4216.7856 2078 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001960387A860 WIA: 1384.8032 26094 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 1384.8032 26094 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001960387A860 WIA: 4216.7856 2078 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 4216.7856 2078 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 4216.7856 2078 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001960387A860 WIA: 4216.7856 2078 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 1384.8032 26094 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000004 WIA: 1384.8032 26094 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 1384.8032 26094 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000004 marked for removal WIA: 1384.868 26094 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4216.7856 2078 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 4216.7856 2078 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 1384.868 26110 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 1384.868 26110 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 1384.868 26110 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 1384.868 26110 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4216.7988 2094 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 4216.7988 2094 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001F34 is now shut down WIA: 4216.7856 2109 0 0 [sti.dll] DllEntryPoint, sti.dll (0x1B2F0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 4216.7856 2109 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 4216.7856 2109 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 1384.2624 26125 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 1384.2624 26125 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 1384.868 26125 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1384.868 26125 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1384.2624 49063 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (E) WIA: 1384.2624 49063 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 1384.2624 49063 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 1384.2624 49078 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [5396] at 2025/05/11 19:08:56:581 **************** WIA: 5396.7952 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 1384.8032 49078 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000005 WIA: 1384.8032 49078 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000005 to WiaEventNotifier WIA: 5396.7952 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001CFBD28F8A0 from server WIA: 5396.7952 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 1384.8032 49078 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1384.8032 49078 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001CFBF6B95D0 WIA: 5396.7952 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5396.7952 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5396.7952 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001CFBF6B95D0 WIA: 1384.8032 49078 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1384.8032 49078 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001CFBF6B95D0 WIA: 5396.7952 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5396.7952 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5396.7952 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001CFBF6B95D0 WIA: 5396.4412 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5396.4412 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 1384.2624 49078 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 1384.2624 56781 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 1384.2624 56781 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001CFBF6B95D0 WIA: 5396.7952 7703 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5396.7952 7703 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5396.7952 7703 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001CFBF6B95D0 WIA: 1384.2624 56781 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 1384.2624 56781 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001CFBF6B95D0 WIA: 5396.7952 7703 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5396.7952 7703 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5396.7952 7703 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001CFBF6B95D0 WIA: 5396.7952 7703 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 1384.2624 56781 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000005 WIA: 1384.2624 56781 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 1384.2624 56781 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000005 marked for removal WIA: 5396.7952 7703 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 5396.7952 7703 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 1384.868 56781 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1384.868 56797 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 1384.868 56797 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 1384.868 56797 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 1384.868 56797 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5396.4412 7719 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 5396.4412 7719 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x0000113C is now shut down WIA: 5396.7952 7735 0 0 [sti.dll] DllEntryPoint, sti.dll (0x1B2F0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 5396.7952 7735 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5396.7952 7735 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 1384.8032 56813 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 1384.8032 56813 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 1384.868 56813 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1384.868 56813 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1384.868 86813 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 1384.868 86813 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 1384.2032 86813 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 1384.2032 86813 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (00000239DDE06350) WIA: 1384.2032 86813 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (00000239DDE062B0) WIA: 1384.2032 86813 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 1384.2032 86813 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (00000239DDE05CC0) WIA: 1384.2032 86813 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (00000239DDE06210) WIA: 1384.2032 86813 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (00000239DDE063F0) WIA: 1384.2032 86813 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 1384.2032 86813 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 1384.2032 86813 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (00000239DDE069D0) WIA: 1384.2032 86813 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (00000239DDE065C0) WIA: 1384.2032 86813 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (00000239DDE06510) WIA: 1384.2032 86813 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (00000239DDE06C30) WIA: 1384.2032 86813 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (00000239DDE06F90) WIA: 1384.2032 86813 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (00000239DDE04C80) WIA: 1384.2032 86813 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 1384.868 86813 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1384.2032 86813 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (00000239DDE05D90) WIA: 1384.2032 86813 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 1384.6296 86813 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 1384.2032 86813 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [1384] at 2025/05/11 19:08:07:520 **************** WIA: 1384.2032 86797 0 0 [sti.dll] DllEntryPoint, sti.dll (0x1B2F0000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 1384.2032 86797 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 1384.2032 86797 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [876] at 2025/05/11 19:20:46:830 **************** WIA: 876.8104 16 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 876.8104 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 5116 WIA: 876.5116 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 876.8992 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 876.8992 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 876.8992 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 876.5116 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 876.5116 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 876.5116 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 876.5116 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x0000016280607510 WIA: 876.5116 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 876.5116 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 876.5116 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 876.5116 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 876.8992 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 876.5116 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 7912) WIA: 876.5116 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 876.7912 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 876.7912 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 876.7912 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 876.5116 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 876.5116 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 876.5116 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 876.5116 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 876.2680 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 876.8104 16 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 876.8104 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 876.8104 32 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 876.8104 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 876.8104 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 876.8104 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 876.8104 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 876.8104 32 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 876.5604 32 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [8472] at 2025/05/11 19:20:46:861 **************** WIA: 8472.880 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 876.5604 32 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 876.5604 32 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 876.5604 32 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 8472.880 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001F9DE82E420 from server WIA: 8472.880 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 876.5604 32 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 876.5604 32 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F9E0DD9CB0 WIA: 8472.880 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8472.880 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8472.988 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8472.880 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F9E0DD9CB0 WIA: 8472.988 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 876.5604 32 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 876.5604 32 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F9E0DD9CB0 WIA: 8472.880 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8472.880 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 8472.880 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F9E0DD9CB0 WIA: 876.6716 32 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 876.5604 2235 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 876.5604 2235 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F9E0DD9CB0 WIA: 8472.880 2203 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8472.880 2203 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8472.880 2203 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F9E0DD9CB0 WIA: 876.5604 2235 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 876.5604 2235 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F9E0DD9CB0 WIA: 8472.880 2203 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 8472.880 2203 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 8472.880 2203 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F9E0DD9CB0 WIA: 8472.880 2203 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 876.5604 2235 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 876.5604 2235 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 876.5604 2235 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 876.1052 2235 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8472.880 2203 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 8472.880 2203 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 876.1052 2250 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 876.1052 2250 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 876.1052 2250 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 876.1052 2250 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 8472.988 2218 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 8472.988 2218 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000003DC is now shut down WIA: 8472.880 2218 0 0 [sti.dll] DllEntryPoint, sti.dll (0x26030000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 8472.880 2218 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 8472.880 2218 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 876.5604 2266 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 876.5604 2266 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 876.1052 2266 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 876.1052 2266 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 876.1052 32250 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 876.1052 32250 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 876.8104 32250 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 876.8104 32250 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (0000016280606040) WIA: 876.8104 32250 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (0000016280605FA0) WIA: 876.8104 32250 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 876.8104 32250 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (0000016280605CC0) WIA: 876.8104 32250 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (0000016280605F00) WIA: 876.8104 32250 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (00000162806060E0) WIA: 876.8104 32250 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 876.8104 32250 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 876.8104 32250 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (00000162806063D0) WIA: 876.8104 32250 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (00000162806062B0) WIA: 876.8104 32250 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (0000016280606200) WIA: 876.8104 32250 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (0000016280606630) WIA: 876.8104 32250 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (00000162806066A0) WIA: 876.8104 32250 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (0000016280604C80) WIA: 876.8104 32250 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 876.1052 32250 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 876.8104 32250 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (0000016280605D90) WIA: 876.5116 32250 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 876.8104 32250 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 876.8104 32250 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [876] at 2025/05/11 19:20:46:861 **************** WIA: 876.8104 32218 0 0 [sti.dll] DllEntryPoint, sti.dll (0x26030000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 876.8104 32218 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 876.8104 32218 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [7952] at 2025/05/11 19:21:50:080 **************** WIA: 7952.968 16 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 7952.968 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 4716 WIA: 7952.4716 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7952.868 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 7952.868 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 7952.868 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 7952.4716 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 7952.4716 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 7952.4716 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 7952.4716 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x00000173506073E0 WIA: 7952.4716 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 7952.4716 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 7952.4716 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 7952.4716 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 7952.4716 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 6220) WIA: 7952.4716 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 7952.868 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 7952.4716 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7952.4716 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 7952.6220 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 7952.6220 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 7952.6220 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 7952.4716 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 7952.4716 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7952.7128 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7952.968 16 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 7952.968 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 7952.968 32 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7952.968 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7952.968 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7952.968 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7952.968 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7952.968 32 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 7952.7128 32 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [6620] at 2025/05/11 19:21:50:100 **************** WIA: 6620.7084 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7952.4536 32 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 7952.4536 32 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 7952.4536 32 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 6620.7084 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000002A3D279F1D0 from server WIA: 6620.7084 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7952.7128 32 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7952.7128 32 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002A3D4CFA210 WIA: 6620.6624 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6620.7084 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6620.7084 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6620.6624 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 6620.7084 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002A3D4CFA210 WIA: 7952.2404 32 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7952.2404 32 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002A3D4CFA210 WIA: 7952.7128 32 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 6620.7084 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6620.7084 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6620.7084 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002A3D4CFA210 WIA: 7952.7128 2266 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7952.7128 2266 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002A3D4CFA210 WIA: 6620.7084 2234 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6620.7084 2234 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6620.7084 2234 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002A3D4CFA210 WIA: 7952.7128 2266 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7952.7128 2266 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002A3D4CFA210 WIA: 6620.7084 2234 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6620.7084 2234 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6620.7084 2234 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002A3D4CFA210 WIA: 6620.7084 2234 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7952.7128 2266 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 7952.7128 2266 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7952.7128 2266 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 6620.7084 2234 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 6620.7084 2234 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7952.1912 2266 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7952.1912 2282 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7952.1912 2282 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7952.1912 2282 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 7952.1912 2282 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6620.6624 2250 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 6620.6624 2250 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000019E0 is now shut down WIA: 6620.7084 2265 0 0 [sti.dll] DllEntryPoint, sti.dll (0x26030000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 6620.7084 2265 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6620.7084 2265 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7952.2404 2297 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7952.2404 2297 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7952.1912 2297 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7952.1912 2297 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7952.1912 32297 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 7952.1912 32297 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 7952.968 32297 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 7952.968 32297 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (0000017350606350) WIA: 7952.968 32297 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (00000173506062B0) WIA: 7952.968 32297 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 7952.968 32297 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (0000017350605CC0) WIA: 7952.968 32297 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (0000017350606210) WIA: 7952.968 32297 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (00000173506063F0) WIA: 7952.968 32297 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 7952.968 32297 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 7952.968 32297 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (00000173506069D0) WIA: 7952.968 32297 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (00000173506065C0) WIA: 7952.968 32297 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (0000017350606510) WIA: 7952.968 32297 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (0000017350606C30) WIA: 7952.968 32297 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (0000017350606CA0) WIA: 7952.968 32297 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (0000017350604C80) WIA: 7952.968 32297 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 7952.1912 32297 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7952.968 32297 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (0000017350605D90) WIA: 7952.968 32297 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 7952.4716 32297 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 7952.968 32297 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [7952] at 2025/05/11 19:21:50:084 **************** WIA: 7952.868 32281 0 0 [sti.dll] DllEntryPoint, sti.dll (0x26030000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7952.868 32281 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7952.868 32281 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [4832] at 2026/01/23 19:42:31:351 **************** WIA: 4832.8072 0 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 4832.8072 0 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 5180 WIA: 4832.5180 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 4832.7440 0 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 4832.7440 0 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 4832.7440 0 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 4832.7440 0 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 4832.5180 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 4832.5180 0 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 4832.5180 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 4832.5180 0 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x00000263ABE06CF0 WIA: 4832.5180 0 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 4832.5180 0 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 4832.5180 0 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 2228) WIA: 4832.2228 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 4832.2228 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 4832.2228 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 4832.4412 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 4832.8072 16 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 4832.5180 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 4832.5180 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 4832.8072 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 4832.8072 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 4832.5180 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 4832.5180 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 4832.8072 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 4832.8072 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 4832.8072 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 4832.8072 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 4832.8072 16 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 4832.4412 62 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [4796] at 2026/01/23 19:42:31:403 **************** WIA: 4796.5712 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 4832.4412 62 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 4832.4412 62 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 4832.4412 62 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 4796.5712 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000020806CECEB0 from server WIA: 4796.5712 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 4832.4412 78 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 4832.4412 78 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000208092C9AD0 WIA: 4796.5712 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 4796.5712 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 4796.5712 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000208092C9AD0 WIA: 4832.4412 78 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 4832.4412 78 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000208092C9AD0 WIA: 4796.5712 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 4796.5712 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 4796.5712 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000208092C9AD0 WIA: 4796.6464 16 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 4796.6464 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 4832.6004 78 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 4832.6004 3937 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 4832.6004 3937 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000208092C9AD0 WIA: 4796.5712 3875 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 4796.5712 3875 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 4796.5712 3875 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000208092C9AD0 WIA: 4832.6004 3937 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 4832.6004 3937 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000208092C9AD0 WIA: 4796.5712 3875 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 4796.5712 3875 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 4796.5712 3875 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000208092C9AD0 WIA: 4796.5712 3875 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 4832.6004 3937 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 4832.6004 3937 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 4832.6004 3937 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 4832.1796 3937 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4796.5712 3875 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 4796.5712 3875 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 4832.1796 3953 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 4832.1796 3953 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 4832.1796 3953 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 4796.6464 3891 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 4832.1796 3953 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4796.6464 3891 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001940 is now shut down WIA: 4796.5712 3922 0 0 [sti.dll] DllEntryPoint, sti.dll (0xB6350000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 4796.5712 3922 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 4796.5712 3922 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 4832.4412 3984 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 4832.4412 3984 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 4832.1796 3984 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4832.1796 3984 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4832.1796 33953 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 4832.1796 33953 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 4832.8072 33953 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 4832.8072 33953 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (00000263ABE06350) WIA: 4832.8072 33953 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (00000263ABE062B0) WIA: 4832.8072 33953 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 4832.8072 33953 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (00000263ABE05CC0) WIA: 4832.8072 33953 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (00000263ABE06210) WIA: 4832.8072 33953 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (00000263ABE063F0) WIA: 4832.8072 33953 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 4832.8072 33953 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 4832.8072 33953 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (00000263ABE06D80) WIA: 4832.8072 33953 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (00000263ABE065C0) WIA: 4832.8072 33953 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (00000263ABE06510) WIA: 4832.8072 33953 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (00000263ABE06FE0) WIA: 4832.8072 33953 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (00000263ABE07050) WIA: 4832.8072 33953 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (00000263ABE04C80) WIA: 4832.8072 33953 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 4832.1796 33953 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4832.8072 33953 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (00000263ABE05D90) WIA: 4832.8072 33953 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 4832.5180 33953 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 4832.8072 33953 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [4832] at 2026/01/23 19:42:31:382 **************** WIA: 4832.7440 33922 0 0 [sti.dll] DllEntryPoint, sti.dll (0xB6350000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 4832.7440 33922 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 4832.7440 33922 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [3604] at 2026/05/23 19:47:47:915 **************** WIA: 3604.2056 0 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 3604.2056 0 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 6488 WIA: 3604.6488 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 3604.4520 0 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 3604.4520 0 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 3604.4520 0 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 3604.6488 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 3604.6488 0 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 3604.6488 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 3604.6488 0 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000002167A206CF0 WIA: 3604.4520 0 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 3604.6488 0 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 3604.6488 0 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 3604.6488 0 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 6368) WIA: 3604.6368 0 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 3604.6368 0 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 3604.6368 0 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 3604.6488 0 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 3604.6488 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 3604.6488 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 3604.6488 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 3604.3356 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 3604.2056 16 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 3604.2056 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 3604.2056 32 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 3604.2056 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 3604.2056 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 3604.2056 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 3604.2056 32 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 3604.2056 32 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 3604.3356 47 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [588] at 2026/05/23 19:47:47:962 **************** WIA: 588.5916 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 3604.3356 47 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 3604.3356 47 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 3604.3356 47 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 588.5916 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000242408EC540 from server WIA: 588.5916 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 3604.3356 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 3604.3356 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000024242339CF0 WIA: 588.5916 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 588.5916 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 588.5916 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000024242339CF0 WIA: 3604.3356 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 3604.3356 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000024242339CF0 WIA: 588.5916 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 588.5916 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 588.5916 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000024242339CF0 WIA: 588.4792 16 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 588.4792 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 3604.3356 63 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 3604.936 3266 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 3604.936 3266 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000024242339CF0 WIA: 588.5916 3219 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 588.5916 3219 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 588.5916 3219 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000024242339CF0 WIA: 3604.936 3266 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 3604.936 3266 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000024242339CF0 WIA: 588.5916 3219 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 588.5916 3219 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 588.5916 3219 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000024242339CF0 WIA: 588.5916 3219 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 3604.936 3266 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 3604.936 3266 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 3604.936 3266 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 588.5916 3219 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 588.5916 3219 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 3604.260 3266 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3604.260 3282 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 3604.260 3282 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 3604.260 3282 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 3604.260 3282 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 588.4792 3235 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 588.4792 3235 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000012B8 is now shut down WIA: 588.5916 3250 0 0 [sti.dll] DllEntryPoint, sti.dll (0xD6D40000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 588.5916 3250 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 588.5916 3250 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 3604.3356 3313 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 3604.3356 3313 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 3604.260 3313 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3604.260 3313 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3604.3356 4954 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (2) WIA: 3604.3356 4954 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 3604.3356 4954 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 3604.3356 4985 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [6844] at 2026/05/23 19:47:52:906 **************** WIA: 6844.1236 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 3604.3356 4985 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000002 WIA: 3604.3356 4985 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000002 to WiaEventNotifier WIA: 6844.1236 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000278F5A0F8D0 from server WIA: 6844.1236 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 3604.3356 4985 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 3604.3356 4985 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000278F745A0B0 WIA: 6844.1236 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6844.1236 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6844.1236 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000278F745A0B0 WIA: 3604.3356 4985 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 3604.3356 4985 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000278F745A0B0 WIA: 6844.1236 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6844.1236 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 6844.1236 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000278F745A0B0 WIA: 6844.5068 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6844.5068 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 3604.800 4985 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 3604.800 7594 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 3604.800 7594 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000278F745A0B0 WIA: 6844.1236 2609 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6844.1236 2609 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6844.1236 2609 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000278F745A0B0 WIA: 3604.800 7594 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 3604.800 7594 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000278F745A0B0 WIA: 6844.1236 2609 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 6844.1236 2609 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 6844.1236 2609 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000278F745A0B0 WIA: 6844.1236 2609 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 3604.800 7594 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000002 WIA: 3604.800 7594 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 3604.800 7594 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000002 marked for removal WIA: 6844.1236 2609 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 6844.1236 2609 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 3604.260 7594 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3604.260 7610 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 3604.260 7610 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 3604.260 7610 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 3604.260 7610 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6844.5068 2640 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 6844.5068 2640 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000013CC is now shut down WIA: 6844.1236 2656 0 0 [sti.dll] DllEntryPoint, sti.dll (0xD6D40000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 6844.1236 2656 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6844.1236 2656 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 3604.800 7641 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 3604.800 7641 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 3604.260 7641 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3604.260 7641 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3604.800 9016 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (6) WIA: 3604.800 9016 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 3604.800 9016 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 3604.800 9032 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [7140] at 2026/05/23 19:47:56:937 **************** WIA: 7140.4476 31 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 3604.3356 9047 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000003 WIA: 3604.3356 9047 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000003 to WiaEventNotifier WIA: 7140.4476 31 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001FA8F3A0060 from server WIA: 7140.4476 31 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 3604.3356 9047 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 3604.3356 9047 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001FA91A69870 WIA: 7140.4476 31 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7140.4476 31 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7140.4476 31 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001FA91A69870 WIA: 3604.3356 9047 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 3604.3356 9047 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001FA91A69870 WIA: 7140.4476 31 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7140.4476 31 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7140.4476 31 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001FA91A69870 WIA: 7140.6484 47 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7140.6484 47 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 3604.936 9094 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 3604.936 11157 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 3604.936 11157 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001FA91A69870 WIA: 7140.4476 2141 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7140.4476 2141 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7140.4476 2141 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001FA91A69870 WIA: 3604.936 11157 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 3604.936 11157 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001FA91A69870 WIA: 7140.4476 2141 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7140.4476 2141 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7140.4476 2141 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001FA91A69870 WIA: 7140.4476 2141 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 3604.936 11157 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000003 WIA: 3604.936 11157 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 3604.936 11157 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000003 marked for removal WIA: 7140.4476 2141 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 7140.4476 2141 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 3604.260 11157 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3604.260 11172 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 3604.260 11172 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 3604.260 11172 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 3604.260 11172 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7140.6484 2156 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 7140.6484 2156 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001954 is now shut down WIA: 7140.4476 2172 0 0 [sti.dll] DllEntryPoint, sti.dll (0xD6D40000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7140.4476 2172 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7140.4476 2172 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 3604.800 11204 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 3604.260 11204 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3604.800 11204 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000003 WIA: 3604.260 11204 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3604.800 15532 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (A) WIA: 3604.800 15532 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 3604.800 15532 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 3604.800 15563 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [7360] at 2026/05/23 19:48:03:451 **************** WIA: 7360.7128 47 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 3604.936 15579 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000004 WIA: 3604.936 15579 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000004 to WiaEventNotifier WIA: 7360.7128 47 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001C76F0CCD40 from server WIA: 7360.7128 47 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 3604.936 15579 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 3604.936 15579 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C770B39810 WIA: 7360.7128 47 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7360.7128 47 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7360.7128 47 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C770B39810 WIA: 3604.936 15579 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 3604.936 15579 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C770B39810 WIA: 7360.7128 47 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7360.7128 47 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7360.7128 47 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C770B39810 WIA: 7360.5076 47 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7360.5076 62 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 3604.800 15594 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 3604.800 18188 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 3604.800 18188 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C770B39810 WIA: 7360.7128 2656 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7360.7128 2656 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7360.7128 2656 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C770B39810 WIA: 3604.800 18188 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 3604.800 18188 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C770B39810 WIA: 7360.7128 2656 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7360.7128 2656 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7360.7128 2656 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001C770B39810 WIA: 7360.7128 2656 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 3604.800 18188 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000004 WIA: 3604.800 18188 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 3604.800 18188 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000004 marked for removal WIA: 7360.7128 2656 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 3604.260 18188 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7360.7128 2656 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 3604.260 18204 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 3604.260 18204 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 3604.260 18204 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 3604.260 18204 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7360.5076 2672 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 7360.5076 2672 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000013D4 is now shut down WIA: 7360.7128 2687 0 0 [sti.dll] DllEntryPoint, sti.dll (0xD6D40000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7360.7128 2687 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7360.7128 2687 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 3604.936 18219 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 3604.936 18219 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000004 WIA: 3604.260 18219 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3604.260 18219 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3604.800 23766 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (E) WIA: 3604.800 23766 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 3604.800 23766 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 3604.800 23766 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [3092] at 2026/05/23 19:48:11:683 **************** WIA: 3092.2020 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 3604.3356 23766 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000005 WIA: 3604.3356 23766 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000005 to WiaEventNotifier WIA: 3092.2020 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001E80E82D590 from server WIA: 3092.2020 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 3604.3356 23766 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 3604.3356 23766 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E810D69AF0 WIA: 3092.2020 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3092.2020 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 3092.2020 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E810D69AF0 WIA: 3604.3356 23766 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 3604.3356 23766 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E810D69AF0 WIA: 3092.2020 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3092.2020 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 3092.2020 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E810D69AF0 WIA: 3092.4996 16 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 3092.4996 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 3604.936 23782 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 3604.936 26313 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 3604.936 26313 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E810D69AF0 WIA: 3092.2020 2547 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3092.2020 2547 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 3092.2020 2547 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E810D69AF0 WIA: 3604.936 26313 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 3604.936 26313 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E810D69AF0 WIA: 3092.2020 2547 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 3092.2020 2547 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 3092.2020 2547 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E810D69AF0 WIA: 3092.2020 2547 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 3604.936 26313 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000005 WIA: 3604.936 26313 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 3604.936 26313 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000005 marked for removal WIA: 3092.2020 2547 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 3092.2020 2547 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 3604.260 26313 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3604.260 26329 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 3604.260 26329 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 3604.260 26329 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 3604.260 26329 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3092.4996 2563 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 3092.4996 2563 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001384 is now shut down WIA: 3092.2020 2578 0 0 [sti.dll] DllEntryPoint, sti.dll (0xD6D40000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 3092.2020 2578 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 3092.2020 2578 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 3604.936 26360 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 3604.936 26360 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000005 WIA: 3604.260 26360 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3604.260 26360 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3604.260 56344 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 3604.260 56344 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 3604.2056 56344 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 3604.2056 56344 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000002167A206350) WIA: 3604.2056 56344 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000002167A2062B0) WIA: 3604.2056 56344 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 3604.2056 56344 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000002167A205CC0) WIA: 3604.2056 56344 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000002167A206210) WIA: 3604.2056 56344 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000002167A2063F0) WIA: 3604.2056 56344 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 3604.2056 56344 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 3604.2056 56344 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000002167A207070) WIA: 3604.2056 56344 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000002167A2065C0) WIA: 3604.2056 56344 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000002167A206510) WIA: 3604.2056 56344 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000002167A2072D0) WIA: 3604.2056 56344 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000002167A207340) WIA: 3604.2056 56344 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000002167A204C80) WIA: 3604.2056 56344 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 3604.260 56344 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3604.2056 56344 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000002167A205D90) WIA: 3604.2056 56344 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 3604.6488 56344 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 3604.2056 56344 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [3604] at 2026/05/23 19:47:47:946 **************** WIA: 3604.2056 56312 0 0 [sti.dll] DllEntryPoint, sti.dll (0xD6D40000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 3604.2056 56312 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 3604.2056 56312 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [1224] at 2026/06/02 12:59:29:618 **************** WIA: 1224.2532 0 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 1224.2532 0 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 4976 WIA: 1224.4976 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 1224.1816 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 1224.1816 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 1224.1816 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 1224.4976 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 1224.4976 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 1224.4976 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 1224.4976 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x0000025B37C073E0 WIA: 1224.1816 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 1224.4976 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 1224.4976 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 1224.4976 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 1224.4976 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 1224.4976 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 1856) WIA: 1224.4976 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 1224.4976 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 1224.4976 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 1224.4976 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 1224.4976 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 1224.1856 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 1224.1856 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 1224.1856 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 1224.752 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 1224.2532 16 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 1224.2532 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 1224.2532 31 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 1224.2532 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 1224.2532 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 1224.2532 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 1224.2532 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 1224.2532 31 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 1224.752 31 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [5748] at 2026/06/02 12:59:29:649 **************** WIA: 5748.1496 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 1224.4524 47 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 1224.4524 47 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 1224.4524 47 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 5748.1496 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000026391B6DA00 from server WIA: 5748.1496 16 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 1224.1696 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1224.1696 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002639416A900 WIA: 5748.1496 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5748.1496 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5748.1496 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002639416A900 WIA: 1224.1696 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 1224.1696 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002639416A900 WIA: 5748.1496 16 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5748.1496 16 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 5748.1496 16 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002639416A900 WIA: 5748.6924 16 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5748.6924 16 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 1224.1696 47 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 1224.752 2125 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 1224.752 2125 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002639416A900 WIA: 5748.1496 2094 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5748.1496 2094 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5748.1496 2094 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002639416A900 WIA: 1224.752 2125 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 1224.752 2125 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002639416A900 WIA: 5748.1496 2094 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 5748.1496 2094 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 5748.1496 2094 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000002639416A900 WIA: 5748.1496 2094 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 1224.752 2125 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 1224.752 2125 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 1224.752 2125 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 1224.1852 2125 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5748.1496 2094 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 5748.1496 2094 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 1224.1852 2141 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 1224.1852 2141 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 1224.1852 2141 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 1224.1852 2141 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 5748.6924 2110 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 5748.6924 2110 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001B0C is now shut down WIA: 5748.1496 2125 0 0 [sti.dll] DllEntryPoint, sti.dll (0xD9860000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 5748.1496 2125 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 5748.1496 2125 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 1224.1696 2172 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 1224.1696 2172 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 1224.1852 2172 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1224.1852 2172 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1224.1852 32141 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 1224.1852 32141 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 1224.2532 32141 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 1224.2532 32141 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (0000025B37C06350) WIA: 1224.2532 32141 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (0000025B37C062B0) WIA: 1224.2532 32141 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 1224.2532 32141 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (0000025B37C05CC0) WIA: 1224.2532 32141 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (0000025B37C06210) WIA: 1224.2532 32141 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (0000025B37C063F0) WIA: 1224.2532 32141 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 1224.2532 32141 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 1224.2532 32141 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (0000025B37C06CC0) WIA: 1224.2532 32141 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (0000025B37C065C0) WIA: 1224.2532 32141 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (0000025B37C06510) WIA: 1224.2532 32141 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (0000025B37C06F70) WIA: 1224.2532 32141 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (0000025B37C072F0) WIA: 1224.2532 32141 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (0000025B37C04C80) WIA: 1224.2532 32141 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 1224.1852 32141 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 1224.2532 32141 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (0000025B37C05D90) WIA: 1224.2532 32141 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 1224.4976 32141 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 1224.2532 32141 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [1224] at 2026/06/02 12:59:29:649 **************** WIA: 1224.2532 32110 0 0 [sti.dll] DllEntryPoint, sti.dll (0xD9860000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 1224.2532 32110 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 1224.2532 32110 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [7100] at 2026/06/02 20:20:54:254 **************** WIA: 7100.604 15 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 7100.604 15 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 5740 WIA: 7100.5740 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7100.7012 15 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 7100.7012 15 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 7100.7012 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 7100.5740 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 7100.5740 15 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 7100.5740 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 7100.5740 15 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000001A11C806FE0 WIA: 7100.5740 15 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 7100.5740 15 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 7100.5740 15 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 7100.5740 15 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 7100.5740 15 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 4120) WIA: 7100.5740 15 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 7100.7012 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 7100.5740 15 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7100.5740 15 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 7100.5740 31 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 7100.5740 31 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7100.4120 31 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 7100.4120 31 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 7100.4120 31 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 7100.1572 31 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7100.604 31 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 7100.604 31 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 7100.604 47 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7100.604 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7100.604 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7100.604 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7100.604 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7100.604 47 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 7100.1572 47 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [7768] at 2026/06/02 20:20:54:301 **************** WIA: 7768.1284 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7100.1572 47 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 7100.1572 47 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 7100.1572 47 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 7768.1284 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000025DF2B7E750 from server WIA: 7768.1284 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7100.1572 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7768.4880 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7100.1572 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000025DF5219B30 WIA: 7768.4880 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 7768.1284 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7768.1284 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7100.1572 47 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 7768.1284 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000025DF5219B30 WIA: 7100.1572 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7100.1572 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000025DF5219B30 WIA: 7768.1284 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7768.1284 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7768.1284 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000025DF5219B30 WIA: 7100.1572 3359 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7100.1572 3359 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000025DF5219B30 WIA: 7768.1284 3312 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7768.1284 3312 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7768.1284 3312 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000025DF5219B30 WIA: 7100.1572 3359 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7100.1572 3359 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000025DF5219B30 WIA: 7768.1284 3312 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7768.1284 3312 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7768.1284 3312 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000025DF5219B30 WIA: 7768.1284 3312 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7100.1572 3359 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 7100.1572 3359 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7100.1572 3359 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 7768.1284 3312 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 7100.7420 3359 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7768.1284 3312 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7100.7420 3375 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7100.7420 3375 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7100.7420 3375 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 7100.7420 3375 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7768.4880 3328 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 7768.4880 3328 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001310 is now shut down WIA: 7768.1284 3343 0 0 [sti.dll] DllEntryPoint, sti.dll (0xD2A40000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7768.1284 3343 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7768.1284 3343 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7100.7912 3406 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7100.7420 3406 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7100.7912 3406 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7100.7420 3406 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7100.7420 33375 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 7100.7420 33375 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 7100.604 33375 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 7100.604 33375 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000001A11C806350) WIA: 7100.604 33375 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000001A11C8062B0) WIA: 7100.604 33375 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 7100.604 33375 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000001A11C805CC0) WIA: 7100.604 33375 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000001A11C806210) WIA: 7100.604 33375 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000001A11C8063F0) WIA: 7100.604 33375 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 7100.604 33375 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 7100.604 33375 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000001A11C807070) WIA: 7100.604 33375 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000001A11C8065C0) WIA: 7100.604 33375 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000001A11C806510) WIA: 7100.604 33375 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000001A11C8072D0) WIA: 7100.604 33375 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000001A11C807340) WIA: 7100.604 33375 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000001A11C804C80) WIA: 7100.604 33375 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 7100.7420 33375 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7100.604 33375 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000001A11C805D90) WIA: 7100.604 33375 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 7100.5740 33375 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 7100.604 33375 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [7100] at 2026/06/02 20:20:54:286 **************** WIA: 7100.7012 33344 0 0 [sti.dll] DllEntryPoint, sti.dll (0xD2A40000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7100.7012 33344 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7100.7012 33344 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [6336] at 2026/06/02 20:21:32:223 **************** WIA: 6336.7668 15 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 6336.7668 15 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 8184 WIA: 6336.8184 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 6336.4840 15 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 6336.4840 15 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 6336.4840 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 6336.8184 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 6336.8184 15 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 6336.8184 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 6336.8184 15 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x0000026D29206FE0 WIA: 6336.8184 15 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 6336.8184 15 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 6336.4840 15 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 6336.8184 15 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 2824) WIA: 6336.8184 15 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 6336.2824 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 6336.2824 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 6336.2824 15 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 6336.8184 15 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 6336.8184 15 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 6336.8184 15 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 6336.8184 15 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 6336.1696 31 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 6336.7668 31 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 6336.7668 31 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 6336.7668 31 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 6336.7668 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 6336.7668 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 6336.7668 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 6336.7668 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 6336.7668 31 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 6336.1696 31 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [7672] at 2026/06/02 20:21:32:255 **************** WIA: 7672.5276 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 6336.1696 31 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 6336.1696 31 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 6336.1696 31 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 7672.5276 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000029F915E0800 from server WIA: 7672.5276 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 6336.1696 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 6336.1696 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000029F93BBA730 WIA: 7672.7872 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7672.5276 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7672.7872 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 7672.5276 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7672.5276 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000029F93BBA730 WIA: 6336.1696 31 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 6336.6092 31 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 6336.6092 31 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000029F93BBA730 WIA: 7672.5276 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7672.5276 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7672.5276 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000029F93BBA730 WIA: 6336.6092 2546 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 6336.6092 2546 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000029F93BBA730 WIA: 7672.5276 2515 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7672.5276 2515 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7672.5276 2515 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000029F93BBA730 WIA: 6336.6092 2546 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 6336.6092 2546 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000029F93BBA730 WIA: 7672.5276 2515 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7672.5276 2515 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7672.5276 2515 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000029F93BBA730 WIA: 7672.5276 2515 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 6336.6092 2546 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 6336.6092 2546 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 6336.6092 2546 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 7672.5276 2515 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 7672.5276 2515 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 6336.6072 2546 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6336.6072 2562 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 6336.6072 2562 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 6336.6072 2562 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 6336.6072 2562 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7672.7872 2531 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 7672.7872 2531 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001EC0 is now shut down WIA: 7672.5276 2531 0 0 [sti.dll] DllEntryPoint, sti.dll (0xD23A0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7672.5276 2531 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7672.5276 2531 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 6336.1696 2578 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 6336.6072 2578 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6336.1696 2578 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 6336.6072 2578 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6336.6072 32578 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 6336.6072 32578 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 6336.7668 32578 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 6336.7668 32578 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (0000026D29206350) WIA: 6336.7668 32578 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (0000026D292062B0) WIA: 6336.7668 32578 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 6336.7668 32578 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (0000026D29205CC0) WIA: 6336.7668 32578 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (0000026D29206210) WIA: 6336.7668 32578 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (0000026D292063F0) WIA: 6336.7668 32578 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 6336.7668 32578 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 6336.7668 32578 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (0000026D29207070) WIA: 6336.7668 32578 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (0000026D292065C0) WIA: 6336.7668 32578 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (0000026D29206510) WIA: 6336.7668 32578 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (0000026D292072D0) WIA: 6336.7668 32578 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (0000026D29207340) WIA: 6336.7668 32578 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (0000026D29204C80) WIA: 6336.7668 32578 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 6336.6072 32578 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 6336.7668 32578 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (0000026D29205D90) WIA: 6336.7668 32578 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 6336.8184 32578 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 6336.7668 32578 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [6336] at 2026/06/02 20:21:32:255 **************** WIA: 6336.4840 32547 0 0 [sti.dll] DllEntryPoint, sti.dll (0xD23A0000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 6336.4840 32547 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 6336.4840 32547 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [3312] at 2026/06/02 20:24:31:208 **************** WIA: 3312.5864 31 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 3312.5864 31 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 6004 WIA: 3312.6004 31 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 3312.3984 31 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 3312.3984 31 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 3312.3984 31 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 3312.6004 31 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 3312.6004 31 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 3312.6004 31 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 3312.6004 31 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000001AE6B007820 WIA: 3312.6004 31 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 3312.3984 31 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 3312.6004 31 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 3312.6004 31 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 3312.6004 31 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 3312.6004 31 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 1520) WIA: 3312.6004 31 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 3312.6004 31 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 3312.6004 31 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 3312.6004 31 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 3312.6004 31 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 3312.4684 31 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 3312.5864 31 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 3312.5864 31 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 3312.1520 47 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 3312.1520 47 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 3312.1520 47 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 3312.5864 47 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 3312.5864 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 3312.5864 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 3312.5864 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 3312.5864 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 3312.5864 47 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 3312.7956 62 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [7260] at 2026/06/02 20:24:31:270 **************** WIA: 7260.2264 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 3312.4684 62 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 3312.4684 62 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 3312.4684 62 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 7260.2264 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001F95B21C9A0 from server WIA: 7260.2264 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 3312.4684 62 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 3312.4684 62 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F95CDF9A50 WIA: 7260.2264 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7260.2264 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7260.2264 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F95CDF9A50 WIA: 3312.4684 62 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 3312.4684 62 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F95CDF9A50 WIA: 7260.2264 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7260.2264 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7260.2264 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F95CDF9A50 WIA: 7260.7080 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7260.7080 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 3312.776 62 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 3312.776 3219 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 3312.776 3219 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F95CDF9A50 WIA: 7260.2264 3157 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7260.2264 3157 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7260.2264 3157 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F95CDF9A50 WIA: 3312.776 3219 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 3312.776 3219 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F95CDF9A50 WIA: 7260.2264 3157 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7260.2264 3157 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7260.2264 3157 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001F95CDF9A50 WIA: 7260.2264 3157 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 3312.776 3219 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 3312.776 3219 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 3312.776 3219 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 3312.2772 3219 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7260.2264 3157 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 7260.2264 3157 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 3312.2772 3234 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 3312.2772 3234 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 3312.2772 3234 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 3312.2772 3234 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7260.7080 3188 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 7260.7080 3188 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001BA8 is now shut down WIA: 7260.2264 3204 0 0 [sti.dll] DllEntryPoint, sti.dll (0xD2A40000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7260.2264 3204 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7260.2264 3204 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 3312.7956 3266 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 3312.2772 3266 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3312.7956 3266 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 3312.2772 3266 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3312.2772 33234 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 3312.2772 33234 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 3312.5864 33234 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 3312.5864 33234 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000001AE6B005D30) WIA: 3312.5864 33234 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000001AE6B005C90) WIA: 3312.5864 33234 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 3312.5864 33234 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000001AE6B0059B0) WIA: 3312.5864 33234 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000001AE6B005BF0) WIA: 3312.5864 33234 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000001AE6B005DD0) WIA: 3312.5864 33234 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 3312.5864 33234 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 3312.5864 33234 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000001AE6B0066E0) WIA: 3312.5864 33234 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000001AE6B005FA0) WIA: 3312.5864 33234 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000001AE6B005EF0) WIA: 3312.5864 33234 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000001AE6B006940) WIA: 3312.5864 33234 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000001AE6B0069B0) WIA: 3312.5864 33234 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000001AE6B004C80) WIA: 3312.5864 33234 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 3312.2772 33234 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 3312.5864 33234 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000001AE6B005A80) WIA: 3312.6004 33234 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 3312.5864 33234 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 3312.5864 33234 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [3312] at 2026/06/02 20:24:31:255 **************** WIA: 3312.3984 33187 0 0 [sti.dll] DllEntryPoint, sti.dll (0xD2A40000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 3312.3984 33187 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 3312.3984 33187 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [4444] at 2026/06/05 17:34:49:651 **************** WIA: 4444.4212 16 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 4444.4212 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 6348 WIA: 4444.6348 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 4444.3228 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 4444.3228 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 4444.3228 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 4444.6348 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 4444.6348 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 4444.6348 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 4444.6348 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000002647F0073E0 WIA: 4444.3228 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 4444.6348 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 4444.6348 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 4444.6348 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 4444.6348 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 4444.6348 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 6748) WIA: 4444.6348 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 4444.6348 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 4444.6348 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 4444.6348 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 4444.6348 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 4444.6748 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 4444.6748 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 4444.6748 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 4444.980 31 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 4444.4212 31 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 4444.4212 31 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 4444.4212 31 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 4444.4212 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 4444.4212 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 4444.4212 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 4444.4212 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 4444.4212 47 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 4444.980 47 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [940] at 2026/06/05 17:34:49:704 **************** WIA: 940.7988 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 4444.5052 47 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 4444.5052 47 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 4444.5052 47 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 940.7988 15 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001E9C4BBDC10 from server WIA: 940.7988 15 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 4444.6444 62 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 4444.6444 62 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E9C7219BB0 WIA: 940.7988 15 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 940.7988 15 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 940.7988 15 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E9C7219BB0 WIA: 4444.6444 62 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 4444.6444 62 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E9C7219BB0 WIA: 940.7988 15 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 940.7988 15 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 940.7988 15 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E9C7219BB0 WIA: 940.6060 15 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 940.6060 15 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 4444.6444 62 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 4444.6444 2953 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 4444.6444 2953 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E9C7219BB0 WIA: 940.7988 2906 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 940.7988 2906 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 940.7988 2906 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E9C7219BB0 WIA: 4444.6444 2953 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 4444.6444 2953 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E9C7219BB0 WIA: 940.7988 2906 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 940.7988 2906 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 940.7988 2906 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001E9C7219BB0 WIA: 940.7988 2906 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 4444.6444 2953 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 4444.6444 2953 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 4444.6444 2953 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 940.7988 2906 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 940.7988 2906 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 4444.7212 2953 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4444.7212 2969 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 4444.7212 2969 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 4444.7212 2969 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 4444.7212 2969 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 940.6060 2937 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 940.6060 2937 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000017AC is now shut down WIA: 940.7988 2937 0 0 [sti.dll] DllEntryPoint, sti.dll (0xDD490000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 940.7988 2937 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 940.7988 2937 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 4444.6444 3000 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 4444.6444 3000 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 4444.7212 3000 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4444.7212 3000 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4444.6444 14000 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (2) WIA: 4444.6444 14000 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed WIA: 4444.6444 14000 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 4444.6444 14016 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [7036] at 2026/06/05 17:35:03:667 **************** WIA: 7036.5568 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 4444.6444 14016 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000002 WIA: 4444.6444 14016 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000002 to WiaEventNotifier WIA: 7036.5568 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000028CB80CFBC0 from server WIA: 7036.5568 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 4444.6444 14016 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 4444.6444 14016 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000028CBA689570 WIA: 7036.5568 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7036.5568 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7036.5568 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000028CBA689570 WIA: 4444.6444 14016 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 4444.6444 14016 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000028CBA689570 WIA: 7036.6836 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7036.5568 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7036.5568 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 7036.6836 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 7036.5568 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000028CBA689570 WIA: 4444.6444 14016 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 4444.980 17094 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 4444.980 17094 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000028CBA689570 WIA: 7036.5568 3078 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7036.5568 3078 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7036.5568 3078 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000028CBA689570 WIA: 4444.980 17094 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 4444.980 17094 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000028CBA689570 WIA: 7036.5568 3078 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 7036.5568 3078 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 7036.5568 3078 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x0000028CBA689570 WIA: 7036.5568 3078 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 4444.980 17094 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000002 WIA: 4444.980 17094 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 4444.980 17094 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000002 marked for removal WIA: 7036.5568 3078 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 7036.5568 3078 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 4444.7212 17109 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4444.7212 17109 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 4444.7212 17109 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 4444.7212 17109 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 4444.7212 17109 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7036.6836 3109 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 7036.6836 3109 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001AB4 is now shut down WIA: 7036.5568 3125 0 0 [sti.dll] DllEntryPoint, sti.dll (0xDD490000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7036.5568 3125 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7036.5568 3125 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 4444.980 17141 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 4444.980 17141 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002 WIA: 4444.7212 17141 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4444.7212 17141 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4444.7212 47125 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 4444.7212 47125 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 4444.4212 47125 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 4444.4212 47125 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (000002647F006350) WIA: 4444.4212 47125 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (000002647F0062B0) WIA: 4444.4212 47125 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 4444.4212 47125 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (000002647F005CC0) WIA: 4444.4212 47125 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (000002647F006210) WIA: 4444.4212 47125 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (000002647F0063F0) WIA: 4444.4212 47125 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 4444.4212 47125 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 4444.4212 47125 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (000002647F006CC0) WIA: 4444.4212 47125 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (000002647F0065C0) WIA: 4444.4212 47125 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (000002647F006510) WIA: 4444.4212 47125 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (000002647F006F20) WIA: 4444.4212 47125 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (000002647F006F90) WIA: 4444.4212 47125 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000002647F004C80) WIA: 4444.4212 47125 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 4444.7212 47125 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 4444.4212 47125 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (000002647F005D90) WIA: 4444.4212 47125 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 4444.6348 47125 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 4444.4212 47125 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [4444] at 2026/06/05 17:34:49:683 **************** WIA: 4444.4212 47094 0 0 [sti.dll] DllEntryPoint, sti.dll (0xDD490000) received DLL_PROCESS_DETACH, process terminating: 0 WIA: 4444.4212 47094 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 4444.4212 47094 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server **************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [7344] at 2026/06/19 19:20:53:735 **************** WIA: 7344.4436 16 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized WIA: 7344.4436 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 8628 WIA: 7344.8628 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7344.7888 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes WIA: 7344.7888 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787) WIA: 7344.7888 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume... WIA: 7344.7888 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning WIA: 7344.8628 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread... WIA: 7344.8628 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue WIA: 7344.8628 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)... WIA: 7344.8628 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x00000252502073E0 WIA: 7344.8628 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787.. WIA: 7344.8628 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000 WIA: 7344.8628 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE WIA: 7344.8628 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby... WIA: 7344.8628 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 8300) WIA: 7344.8628 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 7344.8300 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.. WIA: 7344.8300 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge... WIA: 7344.8300 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL... WIA: 7344.8628 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7344.8628 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0 WIA: 7344.8628 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted WIA: 7344.8628 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep... WIA: 7344.5792 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr WIA: 7344.4436 31 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success WIA: 7344.4436 31 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices) WIA: 7344.4436 31 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices WIA: 7344.4436 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7344.4436 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7344.4436 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7344.4436 31 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101 WIA: 7344.4436 31 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running. WIA: 7344.5792 47 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate **************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [2336] at 2026/06/19 19:20:53:783 **************** WIA: 2336.4716 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server WIA: 7344.9156 47 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client WIA: 7344.9156 47 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001 WIA: 7344.9156 47 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier WIA: 2336.4716 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000119E307CBB0 from server WIA: 2336.4716 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started... WIA: 7344.8616 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7344.8616 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000119E4BD9990 WIA: 2336.4716 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2336.4716 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 2336.4716 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000119E4BD9990 WIA: 7344.8616 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration: WIA: 7344.8616 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000119E4BD9990 WIA: 2336.4716 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2336.4716 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration: WIA: 2336.4716 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000119E4BD9990 WIA: 2336.7984 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 2336.7984 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel... WIA: 7344.8616 47 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification WIA: 7344.8616 3422 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7344.8616 3422 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000119E4BD9990 WIA: 2336.4716 3375 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2336.4716 3375 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 2336.4716 3375 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000119E4BD9990 WIA: 7344.8616 3422 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration: WIA: 7344.8616 3422 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000119E4BD9990 WIA: 2336.4716 3375 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information. WIA: 2336.4716 3375 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration: WIA: 2336.4716 3375 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000119E4BD9990 WIA: 2336.4716 3375 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ... WIA: 7344.8616 3422 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001 WIA: 7344.8616 3422 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7344.8616 3422 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal WIA: 2336.4716 3375 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server WIA: 2336.4716 3375 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7344.8800 3422 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7344.8800 3438 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification WIA: 7344.8800 3438 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall WIA: 7344.8800 3438 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0 WIA: 7344.8800 3438 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 2336.7984 3391 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread! WIA: 2336.7984 3391 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00001F30 is now shut down WIA: 2336.4716 3437 0 0 [sti.dll] DllEntryPoint, sti.dll (0xD6020000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 2336.4716 3437 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 2336.4716 3437 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server WIA: 7344.5792 3500 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7344.8800 3500 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7344.5792 3500 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001 WIA: 7344.8800 3500 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7344.8800 33453 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service WIA: 7344.8800 33453 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0 WIA: 7344.4436 33453 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher WIA: 7344.4436 33453 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler, (0000025250206350) WIA: 7344.4436 33453 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler, (00000252502062B0) WIA: 7344.4436 33453 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher WIA: 7344.4436 33453 1 0 [wiaservc.dll] Dispatcher::~Dispatcher, (0000025250205CC0) WIA: 7344.4436 33453 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource, (0000025250206210) WIA: 7344.4436 33453 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager, (00000252502063F0) WIA: 7344.4436 33453 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager WIA: 7344.4436 33453 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager WIA: 7344.4436 33453 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator, (00000252502069D0) WIA: 7344.4436 33453 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler, (00000252502065C0) WIA: 7344.4436 33453 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet, (0000025250206510) WIA: 7344.4436 33453 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr, (0000025250206C30) WIA: 7344.4436 33453 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier, (0000025250206F90) WIA: 7344.4436 33453 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (0000025250204C80) WIA: 7344.4436 33453 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1 WIA: 7344.8800 33453 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000 WIA: 7344.4436 33453 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, (0000025250205D90) WIA: 7344.4436 33453 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate... WIA: 7344.8628 33453 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread WIA: 7344.4436 33453 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0 **************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [7344] at 2026/06/19 19:20:53:767 **************** WIA: 7344.7888 33422 0 0 [sti.dll] DllEntryPoint, sti.dll (0xD6020000) received DLL_PROCESS_DETACH, process terminating: 1 WIA: 7344.7888 33422 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel... WIA: 7344.7888 33422 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server