📄 filethread.map
字号:
FileThread
Timestamp is 3e09d173 (Wed Dec 25 23:40:35 2002)
Preferred load address is 00010000
Start Length Name Class
0001:00000000 00000104H .idata$5 CODE
0001:00000104 00000530H .rdata CODE
0001:00000640 00009b54H .text CODE
0002:00000000 00000094H .data DATA
0002:00000098 000001a9H .bss DATA
0003:00000000 00000004H .CRT$XCA DATA
0003:00000004 00000004H .CRT$XCU DATA
0003:00000008 00000004H .CRT$XCZ DATA
0004:00000000 00000004H .STL$A DATA
0004:00000004 00000004H .STL$L DATA
0004:00000008 00000004H .STL$M DATA
0004:0000000c 00000004H .STL$Z DATA
0005:00000000 0000162fH PAGE CODE
0006:00000000 0000059cH INIT CODE
0006:0000059c 0000003cH .idata$2 CODE
0006:000005d8 00000014H .idata$3 CODE
0006:000005ec 00000104H .idata$4 CODE
0006:000006f0 00000536H .idata$6 CODE
0007:00000000 00000058H .rsrc$01 DATA
0007:00000060 00000338H .rsrc$02 DATA
Address Publics by Value Rva+Base Lib:Object
0001:00000000 __imp_@KfAcquireSpinLock@4 00010300 wdm:HAL.DLL
0001:00000004 __imp__KeGetCurrentIrql@0 00010304 wdm:HAL.DLL
0001:00000008 __imp_@KfReleaseSpinLock@8 00010308 wdm:HAL.DLL
0001:0000000c \177HAL_NULL_THUNK_DATA 0001030c wdm:HAL.DLL
0001:00000010 __imp__ExAllocatePoolWithTag@12 00010310 wdm:NTOSKRNL.EXE
0001:00000014 __imp__KeInitializeSpinLock@4 00010314 wdm:NTOSKRNL.EXE
0001:00000018 __imp__RtlTimeToTimeFields@8 00010318 wdm:NTOSKRNL.EXE
0001:0000001c __imp__KeQuerySystemTime@4 0001031c wdm:NTOSKRNL.EXE
0001:00000020 __imp__DbgPrint 00010320 wdm:NTOSKRNL.EXE
0001:00000024 __imp__RtlInitUnicodeString@8 00010324 wdm:NTOSKRNL.EXE
0001:00000028 __imp__KeWaitForSingleObject@20 00010328 wdm:NTOSKRNL.EXE
0001:0000002c __imp__ExFreePool@4 0001032c wdm:NTOSKRNL.EXE
0001:00000030 __imp_@ObfDereferenceObject@4 00010330 wdm:NTOSKRNL.EXE
0001:00000034 __imp__PsTerminateSystemThread@4 00010334 wdm:NTOSKRNL.EXE
0001:00000038 __imp__RtlAssert@16 00010338 wdm:NTOSKRNL.EXE
0001:0000003c __imp__ZwClose@4 0001033c wdm:NTOSKRNL.EXE
0001:00000040 __imp__IoAllocateIrp@8 00010340 wdm:NTOSKRNL.EXE
0001:00000044 __imp__IoFreeIrp@4 00010344 wdm:NTOSKRNL.EXE
0001:00000048 __imp__PoStartNextPowerIrp@4 00010348 wdm:NTOSKRNL.EXE
0001:0000004c __imp_@IofCompleteRequest@8 0001034c wdm:NTOSKRNL.EXE
0001:00000050 __imp__PoCallDriver@8 00010350 wdm:NTOSKRNL.EXE
0001:00000054 __imp_@IofCallDriver@8 00010354 wdm:NTOSKRNL.EXE
0001:00000058 __imp__KeReleaseSemaphore@16 00010358 wdm:NTOSKRNL.EXE
0001:0000005c __imp__IoAttachDeviceToDeviceStack@8 0001035c wdm:NTOSKRNL.EXE
0001:00000060 __imp_@InterlockedExchange@8 00010360 wdm:NTOSKRNL.EXE
0001:00000064 __imp__ObReferenceObjectByHandle@24 00010364 wdm:NTOSKRNL.EXE
0001:00000068 __imp__PsCreateSystemThread@28 00010368 wdm:NTOSKRNL.EXE
0001:0000006c __imp__ZwCreateFile@44 0001036c wdm:NTOSKRNL.EXE
0001:00000070 __imp__ZwReadFile@36 00010370 wdm:NTOSKRNL.EXE
0001:00000074 __imp__ZwWriteFile@36 00010374 wdm:NTOSKRNL.EXE
0001:00000078 __imp__ZwQueryInformationFile@20 00010378 wdm:NTOSKRNL.EXE
0001:0000007c __imp_@InterlockedDecrement@4 0001037c wdm:NTOSKRNL.EXE
0001:00000080 __imp__KeInitializeSemaphore@12 00010380 wdm:NTOSKRNL.EXE
0001:00000084 __imp__RtlAppendUnicodeStringToString@8 00010384 wdm:NTOSKRNL.EXE
0001:00000088 __imp__IoDeleteDevice@4 00010388 wdm:NTOSKRNL.EXE
0001:0000008c __imp__IoDeleteSymbolicLink@4 0001038c wdm:NTOSKRNL.EXE
0001:00000090 __imp__IoCreateSymbolicLink@8 00010390 wdm:NTOSKRNL.EXE
0001:00000094 __imp__IoCreateDevice@28 00010394 wdm:NTOSKRNL.EXE
0001:00000098 __imp__strncpy 00010398 wdm:NTOSKRNL.EXE
0001:0000009c __imp__memmove 0001039c wdm:NTOSKRNL.EXE
0001:000000a0 __imp__RtlIntegerToUnicodeString@12 000103a0 wdm:NTOSKRNL.EXE
0001:000000a4 __imp__ZwOpenKey@12 000103a4 wdm:NTOSKRNL.EXE
0001:000000a8 __imp__ZwCreateKey@28 000103a8 wdm:NTOSKRNL.EXE
0001:000000ac __imp__IoSetDeviceInterfaceState@8 000103ac wdm:NTOSKRNL.EXE
0001:000000b0 __imp__RtlFreeUnicodeString@4 000103b0 wdm:NTOSKRNL.EXE
0001:000000b4 __imp__KeReleaseMutex@8 000103b4 wdm:NTOSKRNL.EXE
0001:000000b8 __imp_@InterlockedIncrement@4 000103b8 wdm:NTOSKRNL.EXE
0001:000000bc __imp__IoDetachDevice@4 000103bc wdm:NTOSKRNL.EXE
0001:000000c0 __imp__IoAcquireCancelSpinLock@4 000103c0 wdm:NTOSKRNL.EXE
0001:000000c4 __imp__IoReleaseCancelSpinLock@4 000103c4 wdm:NTOSKRNL.EXE
0001:000000c8 __imp__KeClearEvent@4 000103c8 wdm:NTOSKRNL.EXE
0001:000000cc __imp__KeSetEvent@12 000103cc wdm:NTOSKRNL.EXE
0001:000000d0 __imp__PoSetPowerState@12 000103d0 wdm:NTOSKRNL.EXE
0001:000000d4 __imp__PoRequestPowerIrp@24 000103d4 wdm:NTOSKRNL.EXE
0001:000000d8 __imp__IoCancelIrp@4 000103d8 wdm:NTOSKRNL.EXE
0001:000000dc __imp__IoRegisterDeviceInterface@16 000103dc wdm:NTOSKRNL.EXE
0001:000000e0 __imp__IoGetDeviceObjectPointer@16 000103e0 wdm:NTOSKRNL.EXE
0001:000000e4 __imp__KeInitializeEvent@12 000103e4 wdm:NTOSKRNL.EXE
0001:000000e8 __imp_@KefAcquireSpinLockAtDpcLevel@4 000103e8 wdm:NTOSKRNL.EXE
0001:000000ec __imp__KeInitializeMutex@8 000103ec wdm:NTOSKRNL.EXE
0001:000000f0 __imp__KeRemoveEntryDeviceQueue@8 000103f0 wdm:NTOSKRNL.EXE
0001:000000f4 __imp_@KefReleaseSpinLockFromDpcLevel@4 000103f4 wdm:NTOSKRNL.EXE
0001:000000f8 \177NTOSKRNL_NULL_THUNK_DATA 000103f8 wdm:NTOSKRNL.EXE
0001:000000fc __imp__ExSystemTimeToLocalTime@8 000103fc ntoskrnl:ntoskrnl.exe
0001:00000100 \177ntoskrnl_NULL_THUNK_DATA 00010400 ntoskrnl:ntoskrnl.exe
0001:0000012c ??_7DebugPrint@@6B@ 0001042c DebugPrint.obj
0001:00000130 ??_C@_0DF@KLGO@DriverWorks?5?$CIc?$CJ?5Copyright?51998?5C@ 00010430 FileThread.obj
0001:00000168 ??_7FileThread@@6B@ 00010468 FileThread.obj
0001:0000017c ??_7KDriver@@6B@ 0001047c FileThread.obj
0001:00000190 ??_C@_0BL@DGKJ@m_Irp?9?$DOCurrentLocation?5?$DO?51?$AA@ 00010490 FileThread.obj
0001:000001ac ??_C@_0CM@GODI@m_Irp?9?$DOCurrentLocation?5?$DM?$DN?5m_Irp?9@ 000104ac FileThread.obj
0001:000001d8 ??_C@_0DE@JFBK@C?3?2PROGRA?$HO1?2NuMega?2DRIVER?$HO1?2DRIV@ 000104d8 FileThread.obj
0001:0000020c ??_7FileThreadDevice@@6B@ 0001050c FileThreadDevice.obj
0001:00000334 ??_C@_05LLOB@FALSE?$AA@ 00010634 FileThreadDevice.obj
0001:0000033c ??_C@_0DH@JOAA@C?3?2PROGRA?$HO1?2NuMega?2DRIVER?$HO1?2DRIV@ 0001063c FileThreadDevice.obj
0001:00000374 ??_C@_0CG@GBKI@I?4MajorFunction?$CINEXT?$CJ?5?$DN?$DN?5IRP_MJ_@ 00010674 FileThreadDevice.obj
0001:0000039c ??_C@_0DH@GPKH@C?3?2PROGRA?$HO1?2NuMega?2DRIVER?$HO1?2DRIV@ 0001069c FileThreadDevice.obj
0001:000003d4 ??_C@_0BE@OHAP@?4?2?4?4?2include?2kirp?4h?$AA@ 000106d4 vdw_wdm:kchecker.obj
0001:000003e8 ??_7KDevice@@6B@ 000106e8 vdw_wdm:kdevice.obj
0001:0000046c ??_C@_0BH@OBIK@?4?2?4?4?2include?2kdevice?4h?$AA@ 0001076c vdw_wdm:kdevice.obj
0001:00000484 ??_7KPnpDevice@@6B@ 00010784 vdw_wdm:kpnpdev.obj
0001:000005ac ??_C@_0O@PCO@m_pdq?5?$CB?$DN?5NULL?$AA@ 000108ac vdw_wdm:kpnpdev.obj
0001:000005bc ??_C@_0BH@GIDI@?4?2?4?4?2include?2kdevque?4h?$AA@ 000108bc vdw_wdm:kpnpdev.obj
0001:000005d4 ??_C@_0DN@KDCI@?$CIOnSuccess?$CJ?5?$HM?5?$CIOnError?$CJ?5?$HM?5?$CIOnCan@ 000108d4 vdw_wdm:kpnpdev.obj
0001:00000614 ??_C@_0BH@CDCF@?4?2?4?4?2include?2kpnplow?4h?$AA@ 00010914 vdw_wdm:kpnpdev.obj
0001:0000062c ??_7?$KList@UINTERFACE_LIST_ENTRY@@@@6B@ 0001092c vdw_wdm:kpnpdev.obj
0001:00000640 ??0DebugPrint@@QAE@PAD@Z 00010940 f DebugPrint.obj
0001:000006e0 ?Stage1LINK@DebugPrint@@SGXPAX@Z 000109e0 f i DebugPrint.obj
0001:00000700 ??_GDebugPrint@@UAEPAXI@Z 00010a00 f i DebugPrint.obj
0001:00000700 ??_EDebugPrint@@UAEPAXI@Z 00010a00 f i DebugPrint.obj
0001:00000730 ??1DebugPrint@@UAE@XZ 00010a30 f DebugPrint.obj
0001:000007e0 ??1DPTestThread@@QAE@XZ 00010ae0 f i DebugPrint.obj
0001:0000084b ?Stage1@DebugPrint@@QAEXXZ 00010b4b f DebugPrint.obj
0001:00000980 ??0DPTestThread@@QAE@XZ 00010c80 f DebugPrint.obj
0001:000009b0 ?DPrint@DebugPrint@@QAEXPAD@Z 00010cb0 f DebugPrint.obj
0001:00000b20 ??0?$KInterlockedList@U_DEBUGPRINT_EVENT@@@@QAE@XZ 00010e20 f i DebugPrint.obj
0001:00000b60 ?RemoveHead@?$KInterlockedList@U_DEBUGPRINT_EVENT@@@@QAEPAU_DEBUGPRINT_EVENT@@XZ 00010e60 f i DebugPrint.obj
0001:00000b60 ?RemoveHead@?$KInterlockedList@U_IRP@@@@QAEPAU_IRP@@XZ 00010e60 f i DebugPrint.obj
0001:00000b90 ?Count@?$KInterlockedList@U_DEBUGPRINT_EVENT@@@@QAEKXZ 00010e90 f i DebugPrint.obj
0001:00000bc0 ??2@YAPAXIW4_POOL_TYPE@@@Z 00010ec0 f i DebugPrint.obj
0001:00000c00 ??3@YAXPAX@Z 00010f00 f i DebugPrint.obj
0001:00000c20 ?ListEntryOffset@@YGKPAU_DEBUGPRINT_EVENT@@@Z 00010f20 f i DebugPrint.obj
0001:00000c30 ??1KUstring@@QAE@XZ 00010f30 f i DebugPrint.obj
0001:00000c60 ??0KUstring@@QAE@PBG@Z 00010f60 f i DebugPrint.obj
0001:00000c90 ?Invalidate@KUstring@@QAEXXZ 00010f90 f i DebugPrint.obj
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -