regsample.map

一个用DriveStdio和VC在DDK的基础上做的驱动实例

 RegSample

 Timestamp is 41a0b158 (Sun Nov 21 23:16:40 2004)

 Preferred load address is 00010000

 Start         Length     Name                   Class
 0001:00000000 000000f0H .idata$5                CODE
 0001:000000f0 00000584H .rdata                  CODE
 0001:00000674 0000004eH .rdata$debug            CODE
 0001:000006d0 0000a23eH .text                   CODE
 0001:0000a910 00000035H .text$yc                CODE
 0001:0000a950 0000000fH .text$yd                CODE
 0002:00000000 00000090H .data                   DATA
 0002:00000090 00000485H .bss                    DATA
 0003:00000000 00000004H .CRT$XCA                DATA
 0003:00000004 00000004H .CRT$XCU                DATA
 0003:00000008 00000004H .CRT$XCZ                DATA
 0004:00000000 00000004H .STL$A                  DATA
 0004:00000004 00000004H .STL$L                  DATA
 0004:00000008 00000004H .STL$M                  DATA
 0004:0000000c 00000004H .STL$Z                  DATA
 0005:00000000 00001971H PAGE                    CODE
 0006:00000000 000008fcH INIT                    CODE
 0006:000008fc 00000028H .idata$2                CODE
 0006:00000924 00000014H .idata$3                CODE
 0006:00000938 000000f0H .idata$4                CODE
 0006:00000a28 000004acH .idata$6                CODE
 0007:00000000 00000058H .rsrc$01                DATA
 0007:00000060 00000330H .rsrc$02                DATA

  Address         Publics by Value              Rva+Base     Lib:Object

 0001:00000000       __imp_@KfAcquireSpinLock@4 00010320     wdm:HAL.DLL
 0001:00000004       __imp_@KfReleaseSpinLock@8 00010324     wdm:HAL.DLL
 0001:00000008       __imp__KeGetCurrentIrql@0  00010328     wdm:HAL.DLL
 0001:0000000c       \177HAL_NULL_THUNK_DATA    0001032c     wdm:HAL.DLL
 0001:00000010       __imp__ZwClose@4           00010330     wdm:NTOSKRNL.EXE
 0001:00000014       __imp__RtlAssert@16        00010334     wdm:NTOSKRNL.EXE
 0001:00000018       __imp__PoSetPowerState@12  00010338     wdm:NTOSKRNL.EXE
 0001:0000001c       __imp__wcscpy              0001033c     wdm:NTOSKRNL.EXE
 0001:00000020       __imp__PoStartNextPowerIrp@4 00010340     wdm:NTOSKRNL.EXE
 0001:00000024       __imp__IoFreeMdl@4         00010344     wdm:NTOSKRNL.EXE
 0001:00000028       __imp__MmMapLockedPages@8  00010348     wdm:NTOSKRNL.EXE
 0001:0000002c       __imp_@IofCompleteRequest@8 0001034c     wdm:NTOSKRNL.EXE
 0001:00000030       __imp_@ObfDereferenceObject@4 00010350     wdm:NTOSKRNL.EXE
 0001:00000034       __imp__PoCallDriver@8      00010354     wdm:NTOSKRNL.EXE
 0001:00000038       __imp_@IofCallDriver@8     00010358     wdm:NTOSKRNL.EXE
 0001:0000003c       __imp__RtlInitAnsiString@8 0001035c     wdm:NTOSKRNL.EXE
 0001:00000040       __imp__DbgBreakPoint@0     00010360     wdm:NTOSKRNL.EXE
 0001:00000044       __imp__memmove             00010364     wdm:NTOSKRNL.EXE
 0001:00000048       __imp__strchr              00010368     wdm:NTOSKRNL.EXE
 0001:0000004c       __imp___vsnprintf          0001036c     wdm:NTOSKRNL.EXE
 0001:00000050       __imp__DbgPrint            00010370     wdm:NTOSKRNL.EXE
 0001:00000054       __imp_@InterlockedIncrement@4 00010374     wdm:NTOSKRNL.EXE
 0001:00000058       __imp_@InterlockedDecrement@4 00010378     wdm:NTOSKRNL.EXE
 0001:0000005c       __imp__ExFreePool@4        0001037c     wdm:NTOSKRNL.EXE
 0001:00000060       __imp__RtlAppendUnicodeStringToString@8 00010380     wdm:NTOSKRNL.EXE
 0001:00000064       __imp__ExAllocatePoolWithTag@12 00010384     wdm:NTOSKRNL.EXE
 0001:00000068       __imp__ZwCreateKey@28      00010388     wdm:NTOSKRNL.EXE
 0001:0000006c       __imp__ZwQueryValueKey@24  0001038c     wdm:NTOSKRNL.EXE
 0001:00000070       __imp__IoDeleteDevice@4    00010390     wdm:NTOSKRNL.EXE
 0001:00000074       __imp__IoDeleteSymbolicLink@4 00010394     wdm:NTOSKRNL.EXE
 0001:00000078       __imp__IoCreateSymbolicLink@8 00010398     wdm:NTOSKRNL.EXE
 0001:0000007c       __imp__IoCreateDevice@28   0001039c     wdm:NTOSKRNL.EXE
 0001:00000080       __imp__IoAttachDeviceToDeviceStack@8 000103a0     wdm:NTOSKRNL.EXE
 0001:00000084       __imp__IoAllocateIrp@8     000103a4     wdm:NTOSKRNL.EXE
 0001:00000088       __imp__IoFreeIrp@4         000103a8     wdm:NTOSKRNL.EXE
 0001:0000008c       __imp_@InterlockedExchange@8 000103ac     wdm:NTOSKRNL.EXE
 0001:00000090       __imp__RtlFreeUnicodeString@4 000103b0     wdm:NTOSKRNL.EXE
 0001:00000094       __imp__KeWaitForSingleObject@20 000103b4     wdm:NTOSKRNL.EXE
 0001:00000098       __imp__KeReleaseMutex@8    000103b8     wdm:NTOSKRNL.EXE
 0001:0000009c       __imp__IoDetachDevice@4    000103bc     wdm:NTOSKRNL.EXE
 0001:000000a0       __imp__IoAcquireCancelSpinLock@4 000103c0     wdm:NTOSKRNL.EXE
 0001:000000a4       __imp__IoReleaseCancelSpinLock@4 000103c4     wdm:NTOSKRNL.EXE
 0001:000000a8       __imp__KeClearEvent@4      000103c8     wdm:NTOSKRNL.EXE
 0001:000000ac       __imp__KeSetEvent@12       000103cc     wdm:NTOSKRNL.EXE
 0001:000000b0       __imp__PoRequestPowerIrp@24 000103d0     wdm:NTOSKRNL.EXE
 0001:000000b4       __imp__IoCancelIrp@4       000103d4     wdm:NTOSKRNL.EXE
 0001:000000b8       __imp__IoRegisterDeviceInterface@16 000103d8     wdm:NTOSKRNL.EXE
 0001:000000bc       __imp__IoSetDeviceInterfaceState@8 000103dc     wdm:NTOSKRNL.EXE
 0001:000000c0       __imp__KeInitializeSpinLock@4 000103e0     wdm:NTOSKRNL.EXE
 0001:000000c4       __imp__RtlCopyUnicodeString@8 000103e4     wdm:NTOSKRNL.EXE
 0001:000000c8       __imp__ZwOpenKey@12        000103e8     wdm:NTOSKRNL.EXE
 0001:000000cc       __imp__IoGetDeviceObjectPointer@16 000103ec     wdm:NTOSKRNL.EXE
 0001:000000d0       __imp__IoBuildDeviceIoControlRequest@36 000103f0     wdm:NTOSKRNL.EXE
 0001:000000d4       __imp__KeInitializeEvent@12 000103f4     wdm:NTOSKRNL.EXE
 0001:000000d8       __imp__KeInitializeMutex@8 000103f8     wdm:NTOSKRNL.EXE
 0001:000000dc       __imp__KeRemoveEntryDeviceQueue@8 000103fc     wdm:NTOSKRNL.EXE
 0001:000000e0       __imp_@KefAcquireSpinLockAtDpcLevel@4 00010400     wdm:NTOSKRNL.EXE
 0001:000000e4       __imp_@KefReleaseSpinLockFromDpcLevel@4 00010404     wdm:NTOSKRNL.EXE
 0001:000000e8       __imp__RtlInitUnicodeString@8 00010408     wdm:NTOSKRNL.EXE
 0001:000000ec       \177NTOSKRNL_NULL_THUNK_DATA 0001040c     wdm:NTOSKRNL.EXE
 0001:0000010c       ??_C@_0DF@OJJCGMGD@DriverWorks?5?$CIc?$CJ?5Copyright?52003?5C@ 0001042c     RegSample.obj
 0001:00000144       ??_7RegSample@@6B@         00010464     RegSample.obj
 0001:00000158       ??_7KDriver@@6B@           00010478     RegSample.obj
 0001:0000016c       ??_C@_0BL@NNGFNHOB@m_Irp?9?$DOCurrentLocation?5?$DO?51?$AA@ 0001048c     RegSample.obj
 0001:00000188       ??_C@_0CM@FADDDCMO@m_Irp?9?$DOCurrentLocation?5?$DM?$DN?5m_Irp?9@ 000104a8     RegSample.obj
 0001:000001b4       ??_C@_0DO@EFKCJHCD@C?3?2PROGRA?$HO1?2Compuware?2DriverStud@ 000104d4     RegSample.obj
 0001:000001f4       ??_C@_02DKCKIIND@?$CFs?$AA@ 00010514     RegSample.obj
 0001:000001f8       ??_C@_02GMHACPFF@?$CFu?$AA@ 00010518     RegSample.obj
 0001:000001fc       ??_C@_07KFGDNAFA@0x?$CF08lx?$AA@ 0001051c     RegSample.obj
 0001:00000204       ??_C@_02KPKOKMHB@?$CFS?$AA@ 00010524     RegSample.obj
 0001:00000208       ??_C@_04MGOIBCNE@?$CF?9?$CKS?$AA@ 00010528     RegSample.obj
 0001:00000210       ??_7RegSampleDevice@@6B@   00010530     RegSampleDevice.obj
 0001:0000033c       ??_C@_05MAJJAKPI@FALSE?$AA@ 0001065c     RegSampleDevice.obj
 0001:00000348       ??_C@_0EB@COLAEKAL@C?3?2PROGRA?$HO1?2Compuware?2DriverStud@ 00010668     RegSampleDevice.obj
 0001:0000038c       ??_C@_0CG@IJCOJOJN@I?4MajorFunction?$CINEXT?$CJ?5?$DN?$DN?5IRP_MJ_@ 000106ac     RegSampleDevice.obj
 0001:000003b8       ??_C@_0EB@JAFEGOBF@C?3?2PROGRA?$HO1?2Compuware?2DriverStud@ 000106d8     RegSampleDevice.obj
 0001:000003fc       ??_C@_0BE@HGMFHLDM@?4?2?4?4?2include?2kirp?4h?$AA@ 0001071c     vdw_wdm:ktrace.obj
 0001:00000410       ??_7KDevice@@6B@           00010730     vdw_wdm:kdevice.obj
 0001:00000498       ??_7KDeviceBase@@6B@       000107b8     vdw_wdm:kdevice.obj
 0001:000004a0       ??_C@_0BH@BINHOGGO@?4?2?4?4?2include?2kdevice?4h?$AA@ 000107c0     vdw_wdm:kdevice.obj
 0001:000004b8       ??_7KPnpDevice@@6B@        000107d8     vdw_wdm:kpnpdev.obj
 0001:000005e4       ??_C@_0O@KBDMFNDM@m_pdq?5?$CB?$DN?5NULL?$AA@ 00010904     vdw_wdm:kpnpdev.obj
 0001:000005f4       ??_C@_0BH@BIPCAELK@?4?2?4?4?2include?2kdevque?4h?$AA@ 00010914     vdw_wdm:kpnpdev.obj
 0001:0000060c       ??_C@_0DN@BBDLMDMH@?$CIOnSuccess?$CJ?5?$HM?5?$CIOnError?$CJ?5?$HM?5?$CIOnCan@ 0001092c     vdw_wdm:kpnpdev.obj
 0001:0000064c       ??_C@_0BH@LIGMDPNJ@?4?2?4?4?2include?2kpnplow?4h?$AA@ 0001096c     vdw_wdm:kpnpdev.obj
 0001:00000664       ??_7?$KList@UINTERFACE_LIST_ENTRY@@@@6B@ 00010984     vdw_wdm:kpnpdev.obj
 0001:000006d0       ?AddDevice@RegSample@@UAEJPAU_DEVICE_OBJECT@@@Z 000109f0 f   RegSample.obj
 0001:000007c0       ?Unload@RegSample@@UAEXXZ  00010ae0 f   RegSample.obj
 0001:00000800       ??2@YAPAXI@Z               00010b20 f i RegSample.obj
 0001:00000830       ??2@YAPAXIW4_POOL_TYPE@@@Z 00010b50 f i RegSample.obj
 0001:00000870       ??1KRegistryKey@@QAE@XZ    00010b90 f i RegSample.obj
 0001:00000900       ??3@YAXPAX@Z               00010c20 f i RegSample.obj
 0001:00000900       ??_V@YAXPAX@Z              00010c20 f i RegSample.obj
 0001:00000920       ?IsValid@KUstring@@QAEEXZ  00010c40 f i vdw_wdm:kregkey.obj
 0001:00000920       ?IsValid@KDispatcherObject@@QAEEXZ 00010c40 f i vdw_wdm:kpnpdev.obj
 0001:00000920       ?IsValid@KRegistryKey@@QAEEXZ 00010c40 f i RegSample.obj
 0001:00000940       ?Invalidate@KRegistryKey@@QAEXXZ 00010c60 f i RegSample.obj
 0001:00000970       ?LastError@KRegistryKey@@QAEJXZ 00010c90 f i RegSample.obj
 0001:00000990       ?ConstructorStatus@KDevice@@QAEJXZ 00010cb0 f i RegSample.obj
 0001:000009b0       ?_self_delete@KDriver@@EAEXXZ 00010cd0 f i RegSample.obj
 0001:000009f0       ??_GKDriver@@QAEPAXI@Z     00010d10 f i RegSample.obj
 0001:00000a20       ??1KDriver@@QAE@XZ         00010d40 f i RegSample.obj
 0001:00000a70       ?DriverInstance@KDriver@@SGPAV1@XZ 00010d90 f i RegSample.obj
 0001:00000a80       ?AddDeviceDispatch@KDriver@@KGJPAU_DRIVER_OBJECT@@PAU_DEVICE_OBJECT@@@Z 00010da0 f   RegSample.obj
 0001:00000ae0       ?DriverIrpDispatch@KDriver@@SGJPAU_DEVICE_OBJECT@@PAU_IRP@@@Z 00010e00 f   RegSample.obj