1 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:23 1 0x00000000 161 CONNECTPACKET conn_disconn { Connected=1; Payload="\\??\\USB#VID_067B&PID_2303#6&1b45552&0&2#{0100fdd7-be5a-4808-91f5-05002bc60f72}" } 18.09.2015 10:21:23 1 0x00000001 4 int Connected 1 18.09.2015 10:21:23 1 0x00000005 156 wchar_t[78] Payload "\\??\\USB#VID_067B&PID_2303#6&1b45552&0&2#{0100fdd7-be5a-4808-91f5-05002bc60f72}" 18.09.2015 10:21:23 00000000 005c 003f 003f 005c 0055 0053 0042 0023 0056 0049 0044 005f 0030 0036 0037 0042 00000020 0026 0050 0049 0044 005f 0032 0033 0030 0033 0023 0036 0026 0031 0062 0034 0035 00000040 0035 0035 0032 0026 0030 0026 0032 0023 007b 0030 0031 0030 0030 0066 0064 0064 00000060 0037 002d 0062 0065 0035 0061 002d 0034 0038 0030 0038 002d 0039 0031 0066 0035 00000080 002d 0030 0035 0030 0030 0032 0062 0063 0036 0030 0066 0037 0032 007d 2 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 2 0x00000000 4 CREATEPACKET create { ProcessId=2636 } 18.09.2015 10:21:28 2 0x00000000 4 unsigned long ProcessId 2636 18.09.2015 10:21:28 3 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 3 0x00000000 4 CREATEPACKET create { ProcessId=2636 } 18.09.2015 10:21:28 3 0x00000000 4 unsigned long ProcessId 2636 18.09.2015 10:21:28 4 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 4 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_GET_BAUD_RATE } 18.09.2015 10:21:28 4 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_BAUD_RATE 18.09.2015 10:21:28 5 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 5 0x00000000 9 IOPACKET io { IoCode=IOCTL_SERIAL_GET_BAUD_RATE; CurrentBaudRate=19200 } 18.09.2015 10:21:28 5 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_BAUD_RATE 18.09.2015 10:21:28 5 0x00000005 4 unsigned long CurrentBaudRate 19200 18.09.2015 10:21:28 6 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 6 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_GET_LINE_CONTROL } 18.09.2015 10:21:28 6 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_LINE_CONTROL 18.09.2015 10:21:28 7 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 7 0x00000000 8 IOPACKET io {…} 18.09.2015 10:21:28 7 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_LINE_CONTROL 18.09.2015 10:21:28 7 0x00000005 3 SERIAL_LINE_CONTROL CurrentLineControl { StopBits=ONESTOPBIT; Parity=NoParity; WordLength=8 } 18.09.2015 10:21:28 7 0x00000005 1 StopBitEnum StopBits ONESTOPBIT 18.09.2015 10:21:28 7 0x00000006 1 ParityEnum Parity NoParity 18.09.2015 10:21:28 7 0x00000007 1 unsigned char WordLength 8 18.09.2015 10:21:28 8 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 8 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_GET_CHARS } 18.09.2015 10:21:28 8 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_CHARS 18.09.2015 10:21:28 9 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 9 0x00000000 11 IOPACKET io {…} 18.09.2015 10:21:28 9 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_CHARS 18.09.2015 10:21:28 9 0x00000005 6 SERIAL_CHARS CurrentChars { EofChar=0; ErrorChar=0; BreakChar=0; EventChar=0; XonChar=17… } 18.09.2015 10:21:28 9 0x00000005 1 unsigned char EofChar 0 18.09.2015 10:21:28 9 0x00000006 1 unsigned char ErrorChar 0 18.09.2015 10:21:28 9 0x00000007 1 unsigned char BreakChar 0 18.09.2015 10:21:28 9 0x00000008 1 unsigned char EventChar 0 18.09.2015 10:21:28 9 0x00000009 1 unsigned char XonChar 17 18.09.2015 10:21:28 9 0x0000000a 1 unsigned char XoffChar 19 18.09.2015 10:21:28 10 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 10 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_GET_HANDFLOW } 18.09.2015 10:21:28 10 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_HANDFLOW 18.09.2015 10:21:28 11 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 11 0x00000000 21 IOPACKET io {…} 18.09.2015 10:21:28 11 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_HANDFLOW 18.09.2015 10:21:28 11 0x00000005 16 SERIAL_HANDFLOW CurrentHandFlow { handshake=SERIAL_DTR_CONTROL; flow=SERIAL_RTS_CONTROL; XonLimit=2048; XoffLimit=512 } 18.09.2015 10:21:28 11 0x00000005 4 ControlHandshake handshake SERIAL_DTR_CONTROL 18.09.2015 10:21:28 11 0x00000009 4 FlowReplace flow SERIAL_RTS_CONTROL 18.09.2015 10:21:28 11 0x0000000d 4 long XonLimit 2048 18.09.2015 10:21:28 11 0x00000011 4 long XoffLimit 512 18.09.2015 10:21:28 12 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 12 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_GET_BAUD_RATE } 18.09.2015 10:21:28 12 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_BAUD_RATE 18.09.2015 10:21:28 13 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 13 0x00000000 9 IOPACKET io { IoCode=IOCTL_SERIAL_GET_BAUD_RATE; CurrentBaudRate=19200 } 18.09.2015 10:21:28 13 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_BAUD_RATE 18.09.2015 10:21:28 13 0x00000005 4 unsigned long CurrentBaudRate 19200 18.09.2015 10:21:28 14 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 14 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_GET_LINE_CONTROL } 18.09.2015 10:21:28 14 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_LINE_CONTROL 18.09.2015 10:21:28 15 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 15 0x00000000 8 IOPACKET io {…} 18.09.2015 10:21:28 15 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_LINE_CONTROL 18.09.2015 10:21:28 15 0x00000005 3 SERIAL_LINE_CONTROL CurrentLineControl { StopBits=ONESTOPBIT; Parity=NoParity; WordLength=8 } 18.09.2015 10:21:28 15 0x00000005 1 StopBitEnum StopBits ONESTOPBIT 18.09.2015 10:21:28 15 0x00000006 1 ParityEnum Parity NoParity 18.09.2015 10:21:28 15 0x00000007 1 unsigned char WordLength 8 18.09.2015 10:21:28 16 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 16 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_GET_CHARS } 18.09.2015 10:21:28 16 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_CHARS 18.09.2015 10:21:28 17 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 17 0x00000000 11 IOPACKET io {…} 18.09.2015 10:21:28 17 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_CHARS 18.09.2015 10:21:28 17 0x00000005 6 SERIAL_CHARS CurrentChars { EofChar=0; ErrorChar=0; BreakChar=0; EventChar=0; XonChar=17… } 18.09.2015 10:21:28 17 0x00000005 1 unsigned char EofChar 0 18.09.2015 10:21:28 17 0x00000006 1 unsigned char ErrorChar 0 18.09.2015 10:21:28 17 0x00000007 1 unsigned char BreakChar 0 18.09.2015 10:21:28 17 0x00000008 1 unsigned char EventChar 0 18.09.2015 10:21:28 17 0x00000009 1 unsigned char XonChar 17 18.09.2015 10:21:28 17 0x0000000a 1 unsigned char XoffChar 19 18.09.2015 10:21:28 18 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 18 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_GET_HANDFLOW } 18.09.2015 10:21:28 18 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_HANDFLOW 18.09.2015 10:21:28 19 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 19 0x00000000 21 IOPACKET io {…} 18.09.2015 10:21:28 19 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_HANDFLOW 18.09.2015 10:21:28 19 0x00000005 16 SERIAL_HANDFLOW CurrentHandFlow { handshake=SERIAL_DTR_CONTROL; flow=SERIAL_RTS_CONTROL; XonLimit=2048; XoffLimit=512 } 18.09.2015 10:21:28 19 0x00000005 4 ControlHandshake handshake SERIAL_DTR_CONTROL 18.09.2015 10:21:28 19 0x00000009 4 FlowReplace flow SERIAL_RTS_CONTROL 18.09.2015 10:21:28 19 0x0000000d 4 long XonLimit 2048 18.09.2015 10:21:28 19 0x00000011 4 long XoffLimit 512 18.09.2015 10:21:28 20 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 20 0x00000000 9 IOPACKET io { IoCode=IOCTL_SERIAL_SET_BAUD_RATE; NewBaudRate=19200 } 18.09.2015 10:21:28 20 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_SET_BAUD_RATE 18.09.2015 10:21:28 20 0x00000005 4 unsigned long NewBaudRate 19200 18.09.2015 10:21:28 21 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 21 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_SET_BAUD_RATE } 18.09.2015 10:21:28 21 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_SET_BAUD_RATE 18.09.2015 10:21:28 22 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 22 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_GET_TIMEOUTS | 16 } 18.09.2015 10:21:28 22 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_TIMEOUTS | 16 18.09.2015 10:21:28 23 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 23 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_GET_TIMEOUTS | 16 } 18.09.2015 10:21:28 23 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_GET_TIMEOUTS | 16 18.09.2015 10:21:28 24 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 24 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_SET_BAUD_RATE | 32 } 18.09.2015 10:21:28 24 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_SET_BAUD_RATE | 32 18.09.2015 10:21:28 25 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 25 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_SET_BAUD_RATE | 32 } 18.09.2015 10:21:28 25 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_SET_BAUD_RATE | 32 18.09.2015 10:21:28 26 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 26 0x00000000 8 IOPACKET io {…} 18.09.2015 10:21:28 26 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_SET_LINE_CONTROL 18.09.2015 10:21:28 26 0x00000005 3 SERIAL_LINE_CONTROL NewLineControl { StopBits=ONESTOPBIT; Parity=NoParity; WordLength=8 } 18.09.2015 10:21:28 26 0x00000005 1 StopBitEnum StopBits ONESTOPBIT 18.09.2015 10:21:28 26 0x00000006 1 ParityEnum Parity NoParity 18.09.2015 10:21:28 26 0x00000007 1 unsigned char WordLength 8 18.09.2015 10:21:28 27 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 27 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_SET_LINE_CONTROL } 18.09.2015 10:21:28 27 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_SET_LINE_CONTROL 18.09.2015 10:21:28 28 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 28 0x00000000 11 IOPACKET io {…} 18.09.2015 10:21:28 28 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_SET_CHARS 18.09.2015 10:21:28 28 0x00000005 6 SERIAL_CHARS NewChars { EofChar=0; ErrorChar=0; BreakChar=0; EventChar=0; XonChar=17… } 18.09.2015 10:21:28 28 0x00000005 1 unsigned char EofChar 0 18.09.2015 10:21:28 28 0x00000006 1 unsigned char ErrorChar 0 18.09.2015 10:21:28 28 0x00000007 1 unsigned char BreakChar 0 18.09.2015 10:21:28 28 0x00000008 1 unsigned char EventChar 0 18.09.2015 10:21:28 28 0x00000009 1 unsigned char XonChar 17 18.09.2015 10:21:28 28 0x0000000a 1 unsigned char XoffChar 19 18.09.2015 10:21:28 29 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 29 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_SET_CHARS } 18.09.2015 10:21:28 29 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_SET_CHARS 18.09.2015 10:21:28 30 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 30 0x00000000 21 IOPACKET io {…} 18.09.2015 10:21:28 30 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_SET_HANDFLOW 18.09.2015 10:21:28 30 0x00000005 16 SERIAL_HANDFLOW NewHandflow { handshake=SERIAL_DTR_CONTROL; flow=SERIAL_RTS_CONTROL; XonLimit=2048; XoffLimit=512 } 18.09.2015 10:21:28 30 0x00000005 4 ControlHandshake handshake SERIAL_DTR_CONTROL 18.09.2015 10:21:28 30 0x00000009 4 FlowReplace flow SERIAL_RTS_CONTROL 18.09.2015 10:21:28 30 0x0000000d 4 long XonLimit 2048 18.09.2015 10:21:28 30 0x00000011 4 long XoffLimit 512 18.09.2015 10:21:28 31 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 31 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_SET_HANDFLOW } 18.09.2015 10:21:28 31 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_SET_HANDFLOW 18.09.2015 10:21:28 32 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 32 0x00000000 13 IOPACKET io {…} 18.09.2015 10:21:28 32 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_SET_QUEUE_SIZE 18.09.2015 10:21:28 32 0x00000005 8 _SERIAL_QUEUE_SIZE SERIAL_QUEUE_SIZE { InSize=4096; OutSize=1024 } 18.09.2015 10:21:28 32 0x00000005 4 unsigned long InSize 4096 18.09.2015 10:21:28 32 0x00000009 4 unsigned long OutSize 1024 18.09.2015 10:21:28 33 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 33 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_SET_QUEUE_SIZE } 18.09.2015 10:21:28 33 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_SET_QUEUE_SIZE 18.09.2015 10:21:28 34 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 34 0x00000000 25 IOPACKET io {…} 18.09.2015 10:21:28 34 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_SET_TIMEOUTS 18.09.2015 10:21:28 34 0x00000005 20 SERIAL_TIMEOUTS NewTimeOuts { ReadIntervalTimeout=388; ReadTotalTimeoutMultiplier=100; ReadTotalTimeoutConstant=1000; WriteTotalTimeoutMultiplier=200; WriteTotalTimeoutConstant=100 } 18.09.2015 10:21:28 34 0x00000005 4 unsigned long ReadIntervalTimeout 388 18.09.2015 10:21:28 34 0x00000009 4 unsigned long ReadTotalTimeoutMultiplier 100 18.09.2015 10:21:28 34 0x0000000d 4 unsigned long ReadTotalTimeoutConstant 1000 18.09.2015 10:21:28 34 0x00000011 4 unsigned long WriteTotalTimeoutMultiplier 200 18.09.2015 10:21:28 34 0x00000015 4 unsigned long WriteTotalTimeoutConstant 100 18.09.2015 10:21:28 35 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 35 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_SET_TIMEOUTS } 18.09.2015 10:21:28 35 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_SET_TIMEOUTS 18.09.2015 10:21:28 36 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 36 0x00000000 9 IOPACKET io { IoCode=IOCTL_SERIAL_PURGE; PurgeMask=SERIAL_PURGE_TXCLEAR | SERIAL_PURGE_RXCLEAR } 18.09.2015 10:21:28 36 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_PURGE 18.09.2015 10:21:28 36 0x00000005 4 MaskPurge PurgeMask SERIAL_PURGE_TXCLEAR | SERIAL_PURGE_RXCLEAR 18.09.2015 10:21:28 37 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 37 0x00000000 5 IOPACKET io { IoCode=IOCTL_SERIAL_PURGE } 18.09.2015 10:21:28 37 0x00000001 4 IOCTL IoCode IOCTL_SERIAL_PURGE 18.09.2015 10:21:28 38 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 38 0x00000001 4 IrpMJFunction Type IRP_MJ_WRITE 18.09.2015 10:21:28 38 0x00000005 5 SerialPayload Payload { Payload={ 125, 128, 255, 0, 93 } } 18.09.2015 10:21:28 38 0x00000005 5 unsigned char[5] Payload { 125, 128, 255, 0, 93 } 18.09.2015 10:21:28 00000000 7d 80 ff 00 5d }...] 39 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 39 0x00000001 4 IrpMJFunction Type IRP_MJ_WRITE 18.09.2015 10:21:28 40 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 40 0x00000001 4 IrpMJFunction Type IRP_MJ_READ 18.09.2015 10:21:28 41 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 41 0x00000001 4 IrpMJFunction Type IRP_MJ_READ 18.09.2015 10:21:28 41 0x00000005 10 SerialPayload Payload { Payload={ 125, 128, 0, 74, 25… } } 18.09.2015 10:21:28 41 0x00000005 10 unsigned char[10] Payload { 125, 128, 0, 74, 25… } 18.09.2015 10:21:28 00000000 7d 80 00 4a 19 5e 73 26 70 49 }..J.^s&pI 42 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 42 0x00000001 4 IrpMJFunction Type IRP_MJ_READ 18.09.2015 10:21:28 43 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 43 0x00000001 4 IrpMJFunction Type IRP_MJ_READ 18.09.2015 10:21:28 43 0x00000005 10 SerialPayload Payload { Payload={ 13, 61, 12, 8, 48… } } 18.09.2015 10:21:28 43 0x00000005 10 unsigned char[10] Payload { 13, 61, 12, 8, 48… } 18.09.2015 10:21:28 00000000 0d 3d 0c 08 30 37 3f 30 90 84 .=..07?0.. 44 0x00000000 0 $print instruction Direction "Down" 18.09.2015 10:21:28 44 0x00000001 4 IrpMJFunction Type IRP_MJ_READ 18.09.2015 10:21:28 45 0x00000000 0 $print instruction Direction "Up" 18.09.2015 10:21:28 45 0x00000001 4 IrpMJFunction Type IRP_MJ_READ 18.09.2015 10:21:28 45 0x00000005 59 SerialPayload Payload { Payload={ 132, 137, 37, 42, 188… } } 18.09.2015 10:21:28 45 0x00000005 59 unsigned char[59] Payload { 132, 137, 37, 42, 188… } 18.09.2015 10:21:28 00000000 84 89 25 2a bc a7 ff d9 a3 ab 57 5e 9a 9f 3f 3a ..%*......W^..?: 00000010 84 94 fc ed 67 62 32 34 f8 f9 fd c5 c2 ca c5 65 ....gb24.......e 00000020 71 71 7c d0 df 49 52 0a 2c a8 a0 5c 55 91 94 c4 qq|..IR.,..\U... 00000030 c2 0e 01 a1 b5 b5 b0 e0 e6 2a 2a .........**