 - driver extracted from the exe and put in \winnt\system32\drivers
 - performs debug checks
 - same routine for
 	- IRP_MJ_CREATE
 	- IRP_MJ_CLOSE
 	- IRP_MJ_DEVICE_CONTROL

- this routine does not always call debug check

- home of the nasty drX checks
- and most likely other checks as well ?