MZ@ !L!This program cannot be run in DOS mode. $ OaOaOaO`VarJagNakKaRichOaPEL87  @%F 6+<-8 2\ Th.text h.rdata;@@H.dataE!`!@PAGEEADS@%@% `PAGEEAWR)) `INIT++ .rsrc8-@-@B.reloc 2 2@Benter DriverEntryFailed to create device objectexit DriverEntryUQSW338#]u ;t;9$t hVuJFpF8F@FHFD F4T #;tu VЋ8#uI5$EPVy ;}9$t h#vGE@(ǀ#9$^tW+9$t h4_[enter DRVSHELL_DispatchIRP_MJ_DEVICE_CONTROLDRVSHELL doesn't handle this IOCTLSTATUS_PENDINGIRP_MJ_INTERNAL_DEVICE_CONTROLnextStack pointer is NULL.\drvshell.cnextStack != NULLPassed PnP Irp downIRP_MJ_POWERexit DRVSHELL_DispatchUQQSV3W95$ut hJ] E{ sss`H(=$MNM t QWQSPȃIt6tu E WPSu=$h"=$t h+{`$uhhhhj YC`HE=$EtlhM=$thb=$t hz#t#Su=Eu=$th=$t h2uE_^[enter DRVSHELL_CreateSTATUS_PENDINGexit DRVSHELL_CreateUQSVW39=$}t hu ^ ~~ $~`tVu=EtjSPVu^=$th=$t hE_^[enter DRVSHELL_CloseSTATUS_PENDINGexit DRVSHELL_CloseUQSVW39=$}t h~Iu ^ ~~$~`tVu=EtjSPVu=$th=$t hE_^[enter DRVSHELL_WriteSTATUS_INVALID_BUFFER_SIZESTATUS_PENDINGexit DRVSHELL_WriteUQSVW39=$}t hDgEu @tF ;teN`y4t-^3;tSWWSCtC WSNyE]t%t!$t VuЉE'ff9]=$Et&h\}u=$t hxE@t tS=$_^[t hEenter DRVSHELL_ReadSTATUS_INVALID_BUFFER_SIZEGOT BACK FROM EAWDMFD READ STATUS_PENDINGexit DRVSHELL_ReadUQQSVW39=$}}t h Eu @^`t ~ txC6t7F;ljE tejWPE @tx WPF@E}t1}t+$t VuЉE39$th FF=$Eth I}tuWPVu=$t h E_^[@t} t u =$t h Eenter DRVSHELL_Unload=$t h> -enter DRVSHELL_CompleteIOexit DRVSHELL_CompleteIOU=$t ht bEM VWp( AE+ҋEF>2҉F=$_^t h ]enter DRVSHELL_RemoveDeviceexit DRVSHELL_RemoveDeviceU=$t h SVW}w(tPPEPEjPEP؍EP$tWЋWEPs"=$t h2 -_^[enter DRVSHELL_CreateDeviceObject\DosDevices\\Device\exit DRVSHELL_CreateDeviceObjectU =$t h SVW" 2 `}3+ًOˍ`}+ًOˍ`P5EP֍PEP֋5EjPEP֍EjPEP֋] Sjjj"EPh(uEEPEP EjJP(Y3󫍽`Ƃ+3󤍽э+u } ȃ$t3ЉE5EP֍EPփ=$_^[t h> E Eawdmfd1.00##o&$$$G $$$)$$ $33$##$$$ $$$$ $enter Eawdmfd_DriverEntryexit Eawdmfd_DriverEntryS39$Vt h Sj8SjjS%%@%jjS5ho& %$%%h)9$^[t h 3Enter : Eawdmfd_DeleteNodeOne Node BUFFER DeletedOne Node DeletedExit : Eawdmfd_DeleteNodeVW39=$t h t$ ;t;;tP,9=$t h >V~9=$th 9=$t h _^ %L$enter Eawdmfd_UnloadFreed the Spin LockFreed the List Headexit Eawdmfd_UnloadW39=$t h8 V5ho&h)֡%^;t PC =%9=4$t=4$ %;tP 9=$t h %;tP 9=$th 9=$t h _enter Eawdmfd_AddDeviceexit Eawdmfd_AddDeviceSU339$VWt h|\ t$jj S~( ;uXX N9$t h _^][enter Eawdmfd_RemoveDeviceexit Eawdmfd_RemoveDevice=$t h D$VWx( t FtP ff  =$_^t h, 3enter Eawdmfd_CreateExit Eawdmfd_Create %08X exit Eawdmfd_Create=$t h D$V5 %p( jh[ =$YY^t h 3enter Eawdmfd_Closeenter Delete Linked Listexit Eawdmfd_CloseS39$Vt hH D$ @( F;t P ^^%9$th\I %9t($SP}S%9uɈ9$^[t hx 3Enter : Eawdmfd_AddNodeToQueueWe have a Pending IRP Lets Copy that using Eawdmfd_Array_IOCTL_ReadExit : Eawdmfd_AddNodeToQueueUQ=$t hoESVWH(MHtE P`p Z u ] E t"HAtq jQE HY=%ˋ2҃3ȉ} xX%=r=w=r 4$;tPыu9tM9=$t h:X5%u=%jE Y3 %!YWjW$WSWu;t?;t;5%ˋȋEX5 % %P$$39=$_^[t h~E Enter : Eawdmfd_ServicePendingIrpAfter Checking if(!IsListEmpty(IrpListHead))Get the Head of the WriteBuffers ListExit : Eawdmfd_ServicePendingIrpS39$VWt h(F|$8%w(te9t]%9tT9$t hL($9$t h|S5%: $$SW%9$5%t h_^[enter Eawdmfd_Readexit Eawdmfd_ReadUQSVW39=$}t hrkEH( 9{tw@tM A I`Q+t!u F@t@ WPNQE U K;rыsʋȋE Pscu3E p9=$t h_^[enter Eawdmfd_IOCtl_ReadGot the irpStack location in Eawdmfd_IOCtl_Read exit Eawdmfd_IOCtl_ReadUQQSVW39=$}t hf4E@( u9~] =${`t hE@tC W)tC@t@ jPKQEUN;rыvʋȃuSvfu3 ] {2ҋˉs9=$t hg_^[enter Eawdmfd_Array_IOCtl_ReadGot the irpStack location in Eawdmfd_IOCtl_Read exit Eawdmfd_Array_IOCtl_ReadUSV3W95$th95$t hE] @tC tC@t@ VPEujYc2ҋC8=$_^[t hY3] DRVSHELL0.99=$u $= $u  $Vj@|j@| j@%}^á$V3;tP5$5$$;tP5$5$$;tP5$5$^Vt$;5$tM$tP%$%$%$tjPj $u5$3^Vt$;5$tM$tPH%$%$%$tjPj$u5$3^Vt$;5$tM$tP%$%$%$tjPjL$u5$3^U$W3=$@5$j$EGE G EjGXW9EwE}GtȋVuȃ^_]$V35$@5$j$VD$F^W|$}1$V35$@5$j$V~^_Debug_Trap: =$thj=$t t$Xt$Vt$ hWdm FPt$ЅtJ$;%$v%2T2*@@*+ր|$tW3΃_%%^ D$PH8*@@*u )$Q %%%%-,++++&,8,P,p,+,,,,-$-0-H-h-x--+,8$68[8p\MAXFNCSETQUOQRYQUODEVCHGSETSECQRYSECMAILSLCLNUP LOKCTLSHTDWNINDVCTDEVCTLSYSCTLDIRCTLSETVOLQRYVOLFLSBUFSETEA QRYEA SETINFQRYINFWRITE READ CLOSE CNPIPECREATESTATUS_INVALID_BUFFER_SIZESTATUS_DEVICE_NOT_READYSTATUS_INVALID_DEVICE_REQUESTSTATUS_INSUFFICIENT_RESOURCESSTATUS_DEVICE_BUSYSTATUS_PENDINGSTATUS_SUCCESS!!!!h!P!4!,!$!!! !!                | t l d enter Eawdmfd_DispatchGET_DRIVER_INFO1.00Eawdmfd Driver: %s Version: %s EAWDMFD_BEGIN_READEAWDMFD_END_READAfter Setting the Status Success for Ending ReadEAWDMFD_READ_PENDINGMARK THIS READ PENDING EAWDMFD_WRITEDriver doesn't handle this IOCTLexit Eawdmfd_DispatchUQQEe=$SVWx(t h@%] C`s u H@ - "MjY+B++t?+t=$t h4&@E =$h$&=$t h%=$%%Wuu %=$t h &M%J@`HZ=$t h%%$%5t"@ 2҃`փ%%32ҋˉCECփ=$h%395$t h% $%2ҋˉsus39=$t hX%&WhW;ljEu{EClhh%hp%hx%P}3I;Ms*}+} уOʃu 3uIKr=$t hX&/E_^[enter Eawdmfd_WriteEnter : AUDIOVXD Connected...Enter : AUDIOVXD Connected...For Disconnecting...BeginEndReadFlag SETReadPendingFlag SETDuplicate the System Buffer of the IRP and add to the Linked List.BeginEndReadFlag SET$SVW33;th)$t$N`Qua9Q u0;t h)F ;ã4$u~Fu'y u!;t h4)94$t4$^f8$%tI;thh)$8%tP;th)u9$t h)cVt$";t h)GF ^2ҋ_^[D+-<+--,++++&,8,P,p,+,,,,-$-0-H-h-x--+,IofCallDriver\MmUnlockPagesFMmMapLockedPagesOMmProbeAndLockPagessprintfIofCompleteRequestFRtlFreeUnicodeStringIoDeleteDevice!IoDeleteSymbolicLinkRtlAnsiStringToUnicodeStringWRtlInitAnsiString"IoDetachDeviceIoCreateUnprotectedSymbolicLinkIoCreateDeviceBMmLockPagableDataSectionExfInterlockedRemoveHeadList[MmUnlockPagableImageSection-DbgPrintKeInitializeSpinLock~ExfInterlockedInsertTailList*DbgBreakPoint:ExAllocatePoolWithTagGExFreePoolntoskrnl.exeFKeQueryPerformanceCounterHAL.dll0 H@.4VS_VERSION_INFO?4StringFileInfo040904b0CommentsXCompanyNameCompaq Computer CorporationTFileDescriptionCompaq EAWDMFD driver8 FileVersion3.00.000.b78 InternalNameeawdmfd.sys0LegalCopyrightCopyright (C) Compaq Computer Corporation, 1997(LegalTrademarks@ OriginalFilenameeawdmfd.sys PrivateBuild\ProductNameEasy Access WDM Filter Driver< ProductVersion3.00.000.b7 SpecialBuildDVarFileInfo$Translation ,R3y33333333333334"41484V5`5555556 661676B6J6R6]6e6o666667 7!7P7X7c7k777788(8088888999H9\9d9}999:':`:v::::::::;%;-;V;^;;;;;K>d>>>>?%?)?/?3?9?=?C?G?M?Q?W?[?a?e?k?o?u?y??????????????????0!090C0K0]0b0g0m0s0z0001 1(1/1E1L1W1^1n1x1111112222$242;2E2U2\2g2n22222I3Q33333 44!4/4:4444444445 55556,616N6f6m66666667777777778888)848L8R8Y8`8888L9S999 ::H::::A;H;S;Z;;;;;;;;;;<91>8>@>F>d>r>y>>>>>>>>? ??@?H?k?r?x???? 11112 22$2,242<2D2L2T2\2d2l2t2|222222222222222}666666 777&7@7K7S7n777777778 8818>8E8u8z8888899:%:6:`:k:s:~::::::::: @(@comp.id?"I "U"`!j%{ %%%%$$$$$$$$SG6038$SG6036$SG6124 $/8$@comp.id=4$$SG6141$SG6140$SG6155$SG6154$SG6172$SG6164$SG6189$SG6187$SG6183$SG6177$SG6316X&$SG6281x%$SG6280p%$SG6279h%$SG6272X%$SG6285%$SG6298%$SG6291%$SG6306 &$SG6301%$SG6310$&$SG63134&$SG6265@%$SG6335$SG6333$SG6329$SG6321$SG6355$SG6344|$SG6374,$SG6364$SG6391$SG6389$SG6385$SG6420x$SG6417\$SG6407H$SG6459~$SG6447:$SG6434$SG6484$SG6480|$SG6478L$SG6471($SG6520)$SG6517)$SG6515)$SG6512h)$SG65064)$SG6497)$SG6494)$SG6579$SG6567r$SG6607$SG6599$SG6593f$SG6633$SG6626$SG6624@comp.id@comp.idO#$SG56744$SG5670$SG5663$SG57302$SG5712$SG5706z$SG5699b$SG5723$SG5720$SG5719$SG5718$SG5715$SG5726"$SG5690J$SG5752$SG5750$SG5742$SG5774$SG5772$SG5764~$SG5816$SG5813x$SG5803\$SG5788D$SG5860 $SG5857 $SG5845 $SG5850 $SG5830 $SG5865> _Slots"$SG5911 $SG5908t $SG59272 $SG5921 $SG5956> $SG59472 $SG5946" $SG5945 @comp.id$R000000@.@comp.id@comp.id@comp.id.idata$6-@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@id.comp@comp.id@comp.id.idata$6-@id.compheaderF J ( ; M _  pT    N  `  b# g   %l   G     @ P f7 L P8      N  ," Z    P cR  :   *& .Up.t:K k   d 'l @t Y| r         9 R k       ! !5 !O !i $! ,! 4! P! h!( !Z ! ! !#p#$$$ $$$D$ $ $$$($_ulFirst,$_ulLast0$$=$$%%% %$%ko& )  ++(+end6l_DriverEntry@8_DRVSHELL_Dispatch@8_DRVSHELL_Create@8_DRVSHELL_Close@8_DRVSHELL_Write@8_DRVSHELL_Read@8_DRVSHELL_Unload@4_DRVSHELL_PnPAddDevice@8_DRVSHELL_CompleteIO@20_DRVSHELL_RemoveDevice@4_DRVSHELL_CreateDeviceObject@12_Debug_LogError@4_ErrorLogSize_DriverName_VectorDriverEntry_Debug_LogPath@4_DebugPathSize_Debug_OpenWDMDebug@0_OpenDriver@0_VectorDispatch__imp_@IofCallDriver@8_Debug_Assert@16_Debug_LogIrpHist@20_IRPHistorySize_VectorCreate_VectorClose__imp__MmUnlockPages@4_VectorWrite__imp__MmMapLockedPages@8__imp__MmProbeAndLockPages@12_VectorRead_Debug_CloseWDMDebug@0_CloseDriver@0__imp__IoAttachDeviceToDeviceStack@8__imp__sprintf__imp_@IofCompleteRequest@8__imp__RtlFreeUnicodeString@4__imp__IoDeleteDevice@4_VectorRemoveDevice__imp__IoDeleteSymbolicLink@4__imp__RtlAnsiStringToUnicodeString@12__imp__RtlInitAnsiString@8__imp__IoDetachDevice@4_VectorAddDevice__imp__IoCreateUnprotectedSymbolicLink@8__imp__IoCreateDevice@28_DriverVersion_VectorUnload_Eawdmfd_DriverEntry@8_Eawdmfd_DeleteNode@4_Eawdmfd_GetNode@8_Eawdmfd_AddKeyToArray@4_Eawdmfd_GetKeyFrmArray@8_Eawdmfd_Dispatch@8_Eawdmfd_Unload@4_Eawdmfd_AddDevice@4_Eawdmfd_RemoveDevice@4_Eawdmfd_Create@8_Eawdmfd_Close@8_Eawdmfd_AddNodeToQueue@8_Eawdmfd_ServicePendingIrp@8_Eawdmfd_Write@8_Eawdmfd_IOCtl_Write@8_Eawdmfd_Read@8_Eawdmfd_IOCtl_Read@8_Eawdmfd_Array_IOCtl_Read@12_ulNodeCount_ulTotNumWriteQd_BeginEndReadFlag_IrpSpinLock_tempBuffer_IrpListHead_IrpListFirstHead_ReadPendingFlag_ReadIrpListHead_WriteBuffArray_ReadIrpSpinLock__imp__MmLockPagableDataSection@4_Debug_MemAlloc@12_Debug_MemFree@4__imp_@ExfInterlockedRemoveHeadList@8__imp__MmUnlockPagableImageSection@4_DbgPrint__imp__KeInitializeSpinLock@4__imp_@ExfInterlockedInsertTailList@12??_C@_06NPMH@MAXFNC?$AA@??_C@_06OPKE@SETQUO?$AA@??_C@_06DMMB@QRYQUO?$AA@??_C@_06FFGA@DEVCHG?$AA@??_C@_06NPME@SETSEC?$AA@??_C@_06MKB@QRYSEC?$AA@??_C@_06JIM@MAILSL?$AA@??_C@_06NDJL@CLNUP?5?$AA@??_C@_06FIPM@LOKCTL?$AA@??_C@_06HCNK@SHTDWN?$AA@??_C@_06CGMF@INDVCT?$AA@??_C@_06HLDG@DEVCTL?$AA@??_C@_06PKKE@SYSCTL?$AA@??_C@_06GPMB@DIRCTL?$AA@??_C@_06FMNE@SETVOL?$AA@??_C@_06IPLB@QRYVOL?$AA@??_C@_06EEJ@FLSBUF?$AA@??_C@_06EAOK@SETEA?5?$AA@??_C@_06JDIP@QRYEA?5?$AA@??_C@_06EEFG@SETINF?$AA@??_C@_06JHDD@QRYINF?$AA@??_C@_06JCLI@WRITE?5?$AA@??_C@_06LDK@READ?5?5?$AA@??_C@_06DMBH@CLOSE?5?$AA@??_C@_06DNOC@CNPIPE?$AA@??_C@_06JBCM@CREATE?$AA@??_C@_0BL@DKCM@STATUS_INVALID_BUFFER_SIZE?$AA@??_C@_0BI@OOMA@STATUS_DEVICE_NOT_READY?$AA@??_C@_0BO@BNDJ@STATUS_INVALID_DEVICE_REQUEST?$AA@??_C@_0BO@OBCB@STATUS_INSUFFICIENT_RESOURCES?$AA@??_C@_0BD@NFHJ@STATUS_DEVICE_BUSY?$AA@??_C@_0P@CFP@STATUS_PENDING?$AA@??_C@_0P@LIPJ@STATUS_SUCCESS?$AA@_Debug_SizeIRPHistoryTable@4_Debug_SizeDebugPathHist@4_Debug_SizeErrorLog@4_Debug_Trap@4_Debug_ExtractAttachedDevices@12_Debug_ExtractIRPHist@8_Debug_ExtractPathHist@8_Debug_ExtractErrorLog@8_Debug_DumpDriverLog@12_Debug_TranslateStatus@4_Debug_TranslateIoctl@4_Debug_StartPentiumCycleCounter@4_Debug_StopPentiumCycleCounter@4__imp__KeQueryPerformanceCounter@4_DbgBreakPoint@0__imp__ExAllocatePoolWithTag@12__imp__ExFreePool@4@IofCallDriver@8__IMPORT_DESCRIPTOR_ntoskrnl_MmUnlockPages@4_MmMapLockedPages@8_MmProbeAndLockPages@12_IoAttachDeviceToDeviceStack@8@IofCompleteRequest@8_RtlFreeUnicodeString@4_IoDeleteDevice@4_IoDeleteSymbolicLink@4_RtlAnsiStringToUnicodeString@12_RtlInitAnsiString@8_IoDetachDevice@4_IoCreateUnprotectedSymbolicLink@8_IoCreateDevice@28_MmLockPagableDataSection@4@ExfInterlockedRemoveHeadList@8_MmUnlockPagableImageSection@4__imp__DbgPrint_KeInitializeSpinLock@4@ExfInterlockedInsertTailList@12__imp__DbgBreakPoint@0_ExAllocatePoolWithTag@12_ExFreePool@4__NULL_IMPORT_DESCRIPTORntoskrnl_NULL_THUNK_DATA_KeQueryPerformanceCounter@4__IMPORT_DESCRIPTOR_HALHAL_NULL_THUNK_DATA_NumIoctl_IoctlCodes_NumNTErrs_NTErrors_MaxMemAllocated_MemFreeCnt_MemFreeFailCnt_MemAllocCnt_MemAllocFailCnt_MemoryAllocated_ErrorLogIndex_ErrorLog_DebugPathIndex_DebugPathHist_IRPHistoryIndex_IRPHistoryTable_UnknownStatus_UnknownIoctl_pfnAudioCallBack_?initd@?1??DriverEntry@@9@9d:\DEVTOOLS\DDK2K\lib\i386\i386\EAWDMFD.sysFJm ӻӝ /T  kN ` I #qDplcG`W7W8V``N`t "8Z>- tR5o&)