readwrite.map

DriverStudio包含一个DriverMonitor显示工具。ReadWrite实例便是它的一个仿真

 0001:00009670       ?Remove@?$KInterlockedList@U_IRP@@@@QAEPAU_IRP@@PAU2@@Z 00019970 f i vdw_wdm:kpnpdev.obj
 0001:000096b0       ?RemoveHead@?$KInterlockedList@U_IRP@@@@QAEPAU_IRP@@XZ 000199b0 f i vdw_wdm:kpnpdev.obj
 0001:000096b0       ?RemoveHead@?$KInterlockedList@U_MY_LIST_ENTRY@@@@QAEPAU_MY_LIST_ENTRY@@XZ 000199b0 f i ReadWriteDevice.obj
 0001:000096e0       ?IsEmpty@?$KInterlockedList@U_IRP@@@@QAEEXZ 000199e0 f i vdw_wdm:kpnpdev.obj
 0001:00009710       ?Lock@?$KInterlockedList@U_IRP@@@@QAEXXZ 00019a10 f i vdw_wdm:kpnpdev.obj
 0001:00009710       ?Lock@?$KInterlockedList@U_MY_LIST_ENTRY@@@@QAEXXZ 00019a10 f i ReadWriteDevice.obj
 0001:00009740       ??0?$KList@UINTERFACE_LIST_ENTRY@@@@QAE@XZ 00019a40 f i vdw_wdm:kpnpdev.obj
 0001:00009780       ?Head@?$KList@UINTERFACE_LIST_ENTRY@@@@QAEPAUINTERFACE_LIST_ENTRY@@XZ 00019a80 f i vdw_wdm:kpnpdev.obj
 0001:000097c0       ?Next@?$KList@UINTERFACE_LIST_ENTRY@@@@QAEPAUINTERFACE_LIST_ENTRY@@PAU2@@Z 00019ac0 f i vdw_wdm:kpnpdev.obj
 0001:00009800       ?InsertTail@?$KList@UINTERFACE_LIST_ENTRY@@@@QAEXPAUINTERFACE_LIST_ENTRY@@@Z 00019b00 f i vdw_wdm:kpnpdev.obj
 0001:00009840       ?RemoveHead@?$KList@UINTERFACE_LIST_ENTRY@@@@QAEPAUINTERFACE_LIST_ENTRY@@XZ 00019b40 f i vdw_wdm:kpnpdev.obj
 0001:00009880       ?Unlock@?$KList@UINTERFACE_LIST_ENTRY@@@@UAEXXZ 00019b80 f i vdw_wdm:kpnpdev.obj
 0001:00009880       ?UnlockAtDpc@?$KList@UINTERFACE_LIST_ENTRY@@@@UAEXXZ 00019b80 f i vdw_wdm:kpnpdev.obj
 0001:00009880       ?LockAtDpc@?$KList@UINTERFACE_LIST_ENTRY@@@@UAEXXZ 00019b80 f i vdw_wdm:kpnpdev.obj
 0001:00009880       ?Lock@?$KList@UINTERFACE_LIST_ENTRY@@@@UAEXXZ 00019b80 f i vdw_wdm:kpnpdev.obj
 0001:00009890       ?ListEntryOffset@@YGKPAUINTERFACE_LIST_ENTRY@@@Z 00019b90 f i vdw_wdm:kpnpdev.obj
 0001:000098a0       ??BKEvent@@QAEPAU_KEVENT@@XZ 00019ba0 f i vdw_wdm:klower.obj
 0001:000098a0       ?Object@KDispatcherObject@@QAEPAXXZ 00019ba0 f i vdw_wdm:klower.obj
 0001:000098a0       ??BKDevice@@QAEPAU_DEVICE_OBJECT@@XZ 00019ba0 f i vdw_wdm:kpnplow.obj
 0001:000098a0       ?DriverObject@KDriver@@QAEPAU_DRIVER_OBJECT@@XZ 00019ba0 f i ReadWrite.obj
 0001:00009920       ?Initialize@KPnpLowerDevice@@QAEJPAVKDevice@@PAU_DEVICE_OBJECT@@@Z 00019c20 f   vdw_wdm:kpnplow.obj
 0001:000099e0       ??0KPnpLowerDevice@@QAE@XZ 00019ce0 f   vdw_wdm:kpnplow.obj
 0001:00009a6c       ?PowerCallWaitComplete@KPnpLowerDevice@@QAEJVKIrp@@EPAK@Z 00019d6c f   vdw_wdm:kpnplow.obj
 0001:00009ba0       ??0_listcore@@IAE@K@Z      00019ea0 f   vdw_wdm:klist.obj
 0001:00009bd0       _InitializeListHead@4      00019ed0 f i vdw_wdm:klist.obj
 0001:00009bf0       ?_head@_listcore@@QAEPAXXZ 00019ef0 f   vdw_wdm:klist.obj
 0001:00009c20       ?Container@_listcore@@QAEPAXPAU_LIST_ENTRY@@@Z 00019f20 f i vdw_wdm:klist.obj
 0001:00009c50       ?_insertTail@_listcore@@QAEXPAX@Z 00019f50 f   vdw_wdm:klist.obj
 0001:00009c80       _InsertTailList@8          00019f80 f i vdw_wdm:klist.obj
 0001:00009cc0       ?ListEntryPointer@_listcore@@QAEPAU_LIST_ENTRY@@PAX@Z 00019fc0 f i vdw_wdm:klist.obj
 0001:00009ce0       ?_next@_listcore@@QAEPAXPAX@Z 00019fe0 f   vdw_wdm:klist.obj
 0001:00009d30       ?_remove@_listcore@@QAEPAXPAX@Z 0001a030 f   vdw_wdm:klist.obj
 0001:00009d60       _RemoveEntryList@4         0001a060 f i vdw_wdm:klist.obj
 0001:00009d90       ?_isEmpty@_listcore@@QAEEXZ 0001a090 f   vdw_wdm:klist.obj
 0001:00009db0       ?_removeHead@_listcore@@QAEPAXXZ 0001a0b0 f   vdw_wdm:klist.obj
 0001:00009df0       _RemoveHeadList@4          0001a0f0 f i vdw_wdm:klist.obj
 0001:00009e20       ?_count@_listcore@@QAEKXZ  0001a120 f   vdw_wdm:klist.obj
 0001:00009e70       ??0KUstring@@QAE@GW4_POOL_TYPE@@@Z 0001a170 f   vdw_wdm:kustring.obj
 0001:00009ee0       ?Assign@KUstring@@QAEJAAV1@@Z 0001a1e0 f   vdw_wdm:kustring.obj
 0001:00009f30       ?Assign@KUstring@@QAEJPBG@Z 0001a230 f   vdw_wdm:kustring.obj
 0001:00009f90       ?GrowMaxBy@KUstring@@QAEJGW4_POOL_TYPE@@@Z 0001a290 f   vdw_wdm:kustring.obj
 0001:0000a040       ?ustrlen@@YGKPBG@Z         0001a340 f   vdw_wdm:util.obj
 0001:0000a080       ?ustrsiz@@YGKPBG@Z         0001a380 f   vdw_wdm:util.obj
 0001:0000a0a0       ?GetObjectName@@YGPAU_UNICODE_STRING@@PAX@Z 0001a3a0 f   vdw_wdm:util.obj
 0001:0000a0e0       ??0KLowerDevice@@QAE@XZ    0001a3e0 f   vdw_wdm:klower.obj
 0001:0000a110       ??0KLowerDevice@@QAE@PBGK@Z 0001a410 f   vdw_wdm:klower.obj
 0001:0000a20c       ?CallWaitComplete@KLowerDevice@@QAEJVKIrp@@EPAK@Z 0001a50c f   vdw_wdm:klower.obj
 0001:0000a340       ?SynchCallCompletionRoutine@KLowerDevice@@KGJPAU_DEVICE_OBJECT@@PAU_IRP@@PAX@Z 0001a640 f   vdw_wdm:klower.obj
 0001:0000a3f0       ?DeviceIoControl@KLowerDevice@@QAEJKPAXK0KEPAK@Z 0001a6f0 f   vdw_wdm:klower.obj
 0001:0000a510       ?Invalidate@KEvent@@QAEXXZ 0001a810 f   vdw_wdm:kevent.obj
 0001:0000a550       ??0KDispatcherObject@@IAE@PAXE@Z 0001a850 f i vdw_wdm:kevent.obj
 0001:0000a590       ?RemoveSpecificEntry@KDeviceQueue@@QAEEPAU_IRP@@@Z 0001a890 f i vdw_wdm:kdevque.obj
 0001:0000a5b0       ?_lock@KDeviceQueue@@QAEEE@Z 0001a8b0 f i vdw_wdm:kdevque.obj
 0001:0000a5e0       ??0KSpinLock@@QAE@PAK@Z    0001a8e0 f i vdw_wdm:kdevque.obj
 0001:0000a600       ?_lock@KSpinLock@@QAEEE@Z  0001a900 f i vdw_wdm:kdevque.obj
 0001:0000a640       ?_unlock@KDeviceQueue@@QAEXE@Z 0001a940 f i vdw_wdm:kdevque.obj
 0001:0000a670       ?_unlock@KSpinLock@@QAEXE@Z 0001a970 f i vdw_wdm:kdevque.obj
 0001:0000a6b0       ?Head@KDeviceQueue@@QAEPAU_IRP@@XZ 0001a9b0 f i vdw_wdm:kdevque.obj
 0001:0000a6d0       ?Tail@KDeviceQueue@@QAEPAU_IRP@@XZ 0001a9d0 f i vdw_wdm:kdevque.obj
 0001:0000a6f0       ?Next@KDeviceQueue@@QAEPAU_IRP@@PAU2@@Z 0001a9f0 f i vdw_wdm:kdevque.obj
 0001:0000a730       ?Container@KDeviceQueue@@IAEPAU_IRP@@PAU_KDEVICE_QUEUE_ENTRY@@@Z 0001aa30 f i vdw_wdm:kdevque.obj
 0001:0000a760       ?PnpCleanUp@KDeviceQueue@@QAEXPAVKPnpDevice@@PAU_FILE_OBJECT@@@Z 0001aa60 f   vdw_wdm:kdevque.obj
 0001:0000a8d8       _memmove                   0001abd8 f   wdm:NTOSKRNL.EXE
 0001:0000a8de       _DbgBreakPoint@0           0001abde f   wdm:NTOSKRNL.EXE
 0001:0000a8e4       _strchr                    0001abe4 f   wdm:NTOSKRNL.EXE
 0001:0000a8ea       __vsnprintf                0001abea f   wdm:NTOSKRNL.EXE
 0001:0000a8f0       _DbgPrint                  0001abf0 f   wdm:NTOSKRNL.EXE
 0002:00000000       ?____CR@@3PADA             0001ac60     ReadWrite.obj
 0002:00000004       ?DefaultPoolTag@@3KA       0001ac64     ReadWrite.obj
 0002:00000008       ?ReadWriteDevice_Guid@@3U_GUID@@A 0001ac68     ReadWriteDevice.obj
 0002:00000018       ?IrpDispatchTable@@3PAP8KDevice@@AEJVKIrp@@@ZA 0001ac78     vdw_wdm:kdevice.obj
 0002:00000088       ?ScratchBufferIndex@@3JA   0001ace8     vdw_wdm:ktrace.obj
 0002:00000090       ?m_TheDriver@KDriver@@1PAV1@A 0001acf0     ReadWrite.obj
 0002:00000094       ?m_bFilterDispatch@KDriver@@1EA 0001acf4     ReadWrite.obj
 0002:00000098       ?m_DriverClass@KDriver@@2U_UNICODE_STRING@@A 0001acf8     ReadWrite.obj
 0002:000000a0       ?_bWindows98_@@3EA         0001ad00     ReadWrite.obj
 0002:000000a4       ?T@@3VKTrace@@A            0001ad04     ReadWriteDevice.obj
 0002:000000cc       ?DriverInstance@BoundsChecker@@3PAVKDriver@@A 0001ad2c     vdw_wdm:kchecker.obj
 0002:000000d0       ?BchkdInfo@BoundsChecker@@3UBchkdInfo_t@@A 0001ad30     vdw_wdm:kchecker.obj
 0002:000000e4       ?m_ListHead@AtExitCall@@2PAV1@A 0001ad44     vdw_wdm:stcinit.obj
 0002:000000e8       ?m_Status@AtExitCall@@2JA  0001ad48     vdw_wdm:stcinit.obj
 0002:000000f0       ?ScratchBuffers@@3PAUKTRACESCRATCHBUFFER@@A 0001ad50     vdw_wdm:ktrace.obj
 0002:000004f0       ?m_Open@KTrace@@1P6GPAXPAU_UNICODE_STRING@@PAU_KINTERRUPT@@K@ZA 0001b150     vdw_wdm:ktrace.obj
 0002:000004f4       ?m_Post@KTrace@@1P6GXPAXPAD@ZA 0001b154     vdw_wdm:ktrace.obj
 0002:000004f8       ?m_Close@KTrace@@1P6GXPAX@ZA 0001b158     vdw_wdm:ktrace.obj
 0002:000004fc       ?m_PreviousState@CancelSpinLock@@1EA 0001b15c     vdw_wdm:kspin.obj
 0002:00000500       ?m_DummyEvent@KLowerDevice@@1U_KEVENT@@A 0001b160     vdw_wdm:klower.obj
 0003:00000000       ?___StartInitCalls__@@3PAP6GXXZA 0001b180     vdw_wdm:stcinit.obj
 0003:00000008       ?___EndInitCalls__@@3PAP6GXXZA 0001b188     vdw_wdm:stcinit.obj
 0004:00000000       ?___StlStartInitCalls__@@3PAP6GXXZA 0001b1a0     vdw_wdm:stcinit.obj
 0004:00000004       ?___StlEndInitCalls__@@3PAP6GXXZA 0001b1a4     vdw_wdm:stcinit.obj
 0004:00000008       ?___StlStartTerminateCalls__@@3PAP6GXXZA 0001b1a8     vdw_wdm:stcinit.obj
 0004:0000000c       ?___StlEndTerminateCalls__@@3PAP6GXXZA 0001b1ac     vdw_wdm:stcinit.obj
 0005:0000006b       ?UnloadDispatch@KDriver@@KGXPAU_DRIVER_OBJECT@@@Z 0001b22b f   ReadWrite.obj
 0005:00000110       ?Unload@KDriver@@UAEXXZ    0001b2d0 f   ReadWrite.obj
 0005:00000130       ?_DeleteDeviceChain@@YGXPAU_DEVICE_OBJECT@@@Z 0001b2f0 f   ReadWrite.obj
 0005:00000170       ?DeleteDevices@KDriver@@QAEXXZ 0001b330 f   ReadWrite.obj
 0005:00000190       ??0KDevice@@QAE@XZ         0001b350 f   vdw_wdm:kdevice.obj
 0005:000001f0       ??_GKDevice@@UAEPAXI@Z     0001b3b0 f i vdw_wdm:kdevice.obj
 0005:000001f0       ??_EKDevice@@UAEPAXI@Z     0001b3b0 f i vdw_wdm:kdevice.obj
 0005:00000220       ?CatNames@@YGJAAVKUstring@@PBG1W4_POOL_TYPE@@@Z 0001b3e0 f   vdw_wdm:kdevice.obj
 0005:000002a0       ??1KDevice@@UAE@XZ         0001b460 f   vdw_wdm:kdevice.obj
 0005:00000380       ??2KDevice@@SAPAXIPBGK0KK@Z 0001b540 f   vdw_wdm:kdevice.obj
 0005:000003d0       ??3KDevice@@SAXPAX@Z       0001b590 f   vdw_wdm:kdevice.obj
 0005:00000476       ?__construct@KDevice@@KGPAV1@PAV1@KPBGK1KKAAJ@Z 0001b636 f   vdw_wdm:kdevice.obj
 0005:00000840       ?CheckDriverFunctions@KDevice@@IAEXXZ 0001ba00 f   vdw_wdm:kdevice.obj
 0005:000008c0       ?SubscribeShutdownNotification@KDevice@@QAEJXZ 0001ba80 f   vdw_wdm:kdevice.obj
 0005:000008e0       ?CancelShutdownNotification@KDevice@@QAEXXZ 0001baa0 f   vdw_wdm:kdevice.obj
 0005:000008f0       ??0KUnitizedName@@QAE@PBGKK@Z 0001bab0 f   vdw_wdm:kunitnam.obj
 0005:00000a60       ?__construct@KUnitizedName@@IAEXPAU_UNICODE_STRING@@@Z 0001bc20 f   vdw_wdm:kunitnam.obj
 0005:00000bb0       ?Invalidate@KUnitizedName@@QAEXXZ 0001bd70 f   vdw_wdm:kunitnam.obj
 0005:00000bf0       ?NextUnit@KUnitizedName@@QAEXXZ 0001bdb0 f   vdw_wdm:kunitnam.obj
 0005:00000cdc       ??0KRegistryKey@@QAE@W4__registryRoot@@PBGEKKK@Z 0001be9c f   vdw_wdm:kregkey.obj
 0005:00000e26       ?Reconstruct@KRegistryKey@@QAEJPAU_UNICODE_STRING@@0KKEK@Z 0001bfe6 f   vdw_wdm:kregkey.obj
 0005:000013f2       ?GetRootPath@KRegistryKey@@SGPAU_UNICODE_STRING@@PAU2@W4__registryRoot@@@Z 0001c5b2 f   vdw_wdm:kregkey.obj
 0005:0000151c       ??0KEvent@@QAE@W4_EVENT_TYPE@@E@Z 0001c6dc f   vdw_wdm:kevent.obj
 0005:0000160c       ??0KMutex@@QAE@K@Z         0001c7cc f   vdw_wdm:kmutex.obj
 0006:00000000       ?__create_driver_class_instance@@YGXXZ 0001c860 f   ReadWrite.obj
 0006:00000040       ??0ReadWrite@@QAE@XZ       0001c8a0 f i ReadWrite.obj
 0006:00000060       ?DriverEntry@ReadWrite@@UAEJPAU_UNICODE_STRING@@@Z 0001c8c0 f   ReadWrite.obj
 0006:0000019b       _DriverEntry@8             0001c9fb f   ReadWrite.obj
 0006:000003d8       ??0KDriver@@QAE@XZ         0001cc38 f   ReadWrite.obj
 0006:00000440       ?DriverInit@KDriver@@SGJPAU_DRIVER_OBJECT@@PAU_UNICODE_STRING@@@Z 0001cca0 f   ReadWrite.obj
 0006:000005d0       ?SetUpDispatchCalls@KDriver@@IAEXXZ 0001ce30 f   ReadWrite.obj
 0006:0000068c       __IMPORT_DESCRIPTOR_NTOSKRNL 0001ceec     wdm:NTOSKRNL.EXE
 0006:000006a0       __IMPORT_DESCRIPTOR_HAL    0001cf00     wdm:HAL.DLL
 0006:000006b4       __NULL_IMPORT_DESCRIPTOR   0001cf14     wdm:NTOSKRNL.EXE

 entry point at        0000:00000000

 Static symbols

 0001:0000a90a       _$E1                       0001ac0a f   ReadWriteDevice.obj
 0001:0000a940       _$E2                       0001ac40 f   ReadWriteDevice.obj