SonyUsbDataSend from NetMDUSB.dll HELP!

Hey i've been looking at that dll again!
SonyUsbDataSend is causing me some problems, mainly because simpleburner and
OpenMG don't like having my debugger running on them when they make calls to
it, non-the-less i read the ret 0xc and guessed at 3 params, and noticed it
faf'ed about with eax so guessed a dword return wouldn't cuas too much
problem!

Sofar i have noticed this:
First Param MDHandle: when sending a song to the MD openMG asks for a handle
once, before using that handle throughout the transfer of that song.
Second Param MDData: Data to send to the netmd, i am guessing this as it
sends this same param to DeviceIoControl
<HELP>Third Param MDDataLen: *GUESS* this is complete guessery hacking,
sorry, it dosen't seam to follow the length of the buffer used by the call
to DeviceIoControl.  It seams this 3rd param is 0x00010000 until the last
transfer when its size depends on the file, this is the reasoning behind my
guess.  Only problem is i can't see how the kernel mode recives this
number.</HELP>

Thanks in Advance!

Alex Muirhead
"Beware of programmers carrying screwdrivers." - Chip Salzenberg
"The nice thing about standards is that there are so many of them to choose
from." - Andrew S. Tanenbaum