SZDD'3A]// // HOOKMON.C -- Monitor Routines f File System Api HookCopyright (C) 1996 by Stan Mitchell #include "precomp.h"Y resourcel multimon l static char* F)_Strings[48] = { "FS_Read",Write FindNextChangeNotify0,, leSeek",ClosLommyi Lock DateTimXNamedPipeRequestHandleInfo EnumerJP,,MountVolJDele1"irwAtbut{eslush))GetDiskOpenURenUSearch~UQueryR|-| connect%UNCIoctl16Driv y$Parm"=* y ( PEBLOCK pEvt,psz ) {int funcNA->ex$@cBf i( kA]]C BkC= 42]@IFSFN_IOC{TL0RIVE ir_flags valueޭAthe B s7ub-kAti0ber (Ih@21h FE44h)@wsptf(YA%s (/%02xAQ)M@,qDfh.cmd`XF)$@ else"]2]F]V]fUT}S]UQ_AQWkA]}DreturnYA}DP'M7@A2>MNM^Bsw0N@rHyi/*mmcD*-ba s0Usf}}s4c` 0 :GCREAD*|1:}J}N_WR3ITL]%cqn} (bVopc& 0x8000) ? 'm'pp'-'m0/'aFILE'_ASYNCQaСgԿNO_LASsC_DA}Rͷ}̈́4rdO` asynchro?nouslyp²updlasccess ogv oLEea ŽOLea[pGION 'UUNYgRp1͕ex4TIMEGp- GET_?MODIFY. 'S-S3 C (d2l Qd] &c.C\pT@_ Q]  Q%a euH"Gm"\lƒ"S@}a 5-.-= 6}c/ g ex5N_PIPEREQ'UESjs6--N=INF-ex7--N_ENUM>i'2- S2_2i1;gei@0inf|y# hb!P_=fs=iNAME:5namesocipd `h=߷ir=1ND332wfor0sum]`=rJRESGUMEv::Be領KF`onBMRAdrWMEviDIRrC dirtry0GꡊL:J>-N-zfi/- ]]fn5]E]U]"irn]~]] 3}rfh"rdo--HIO---7"G s@ ====Gu"@FIR CLUc}]j4 - _F0|V )=atVOL r_Cpw=MM2ryERE*=k5=M_IGNFOMMf6P<1 OPENK#}bqsists of awer bytePz] "open aOb_"/Ɂa"cn"QpACj2NEW (10h)]U= \ALWAYS `2mVoe+hvQEXISTI?NG (01FmVg*ivQ8A7ѽx' Axa0BEUxj|͏xԁͷx +"9]7]e]`#NAv=n8ݚ?_SEARCM-M0=MMM:='ftF`3$}An' ^o`M9a_40|BONNEC쀈SS }QU@-xU@RpRMAL}_I+\Rq.T_Su`LLPWe need to identify whatsource is being disPnecGted'11~A_UNCPIp#EQQ a '2{ CTL16DRIV kthe  sub-f{unSnumbP(Int 21h F/44Z|Q'lt@_PKT_LIN_ADD '3x UPARM&=@INDv]-#M3-m1SD =F2 _ABCpSYORS) " ϑp=yReadMӠ elQP--Es-+Writδ-="S0LOCKC_ST`&=Volume LockMY-⬥==\_ static char* GetArgsSt?g( PEBp1s,Dଓn㞓5tindex2I/*P_MoMvCn*9H`le-bdFs0FMMC"8w-3 ADz ]NFrcnt=%lxHPssSptrsR"2tam&@ S7 pqs0ad or w=0ten]].pos}, Rfile Pi]].datya Qbuff;add3s==*]:]B!NDm}mB perhaps we shouldawHPts q E! .0ucX`eqmmB!CWi“)]-OCLOS“`}B$s}Ò}6s}Òpm&}^pqOMMI?}1} }B"LEp1“#-HXTIMEc10v-OUEl“6N_HAN?DLEINF“xOENUMHmXhM;EK֞& ()Y i y "ͺf-S=R͠N_UNCӄgwN_IOCTL16DRIVW1Q" appar>`ly onj ѳInt 21hŦ 44hj`llG`Q+ e pas¡down tocSD; any hI" e - `s0dP Mgr?-1-PARM CS-;$=s==ASDI ଔ.d%6@_ABSRCTO?RS || #BM@RJMRcEʝ}=pVsoSZJ]]\MMVabsҰt`B*]:]-m=j%QuMRFSET___CACH@TATEqL DLC_LEVEL4RTAKENɒV!`cpyQ ǐtaken"2J ]j=RuASEDm)lrele=mMm]m"mg1mm/d37mmmmc}mm tlf=default:}}cp / ]!T System FN~ Scan ei 'r b&:a rg԰nts Psrom"FS__Openq,KFindFirstSetc.sstaticq Get( PEBQ|R, char*1pk3swit3chT]ex׍H)ƭ֭'7~MoADlB!->NDNEX=d۝C 1\ EK0P:LOS14&֭˝OMMI/16QA8=o^TIME1MUESN1Q罩ENUMHANDLM1%98||Wsfn=t=1%0@<ȍ荔Vs)AQH@Gw1@Vp 3&ݰR_݀?ATTRIB 훽-'LUS׽i46Kk{F-;-K#=6=Mk %M5C}ͅx N_== =] !.3min P)o<; succRP`*cs(qjz^s0"-s }]!Displa%llA PListview kLVJP mPage 0 supply text!d#various fi7eldS" |$_r_FSHook(; _@M *pLvi,b-sb->su_btypeja00p SubIq*S,=Moduup-C5Nam"btnis20Ti !zD0T12cchp1Ma!bBPk=T!y-3PMoniaS<[=k8"fsh===1M"J0xFhT3eMF!Stg!Em4,MrXBRxJ}}j}0hRRr}}}rhMRmP}}rc4aWRwa0rc2aOBRoRrhARa' MM; DevicI1#T=xMt3devn='M#0h #J0Sys 1FiQ1u+mb% ()xB аMM ArP- argnts specific]!thi #BXM@#"]P2ViyL˭ eu$(-"1-- =/7Gx=lhgek he le_^}ͯ(char*ϑt C&| detW Bs[]`,: szReserved #*a en^fi b**/