?? hello.map
字號:
Hello
Timestamp is 3f640934 (Sun Sep 14 14:22:44 2003)
Preferred load address is 00010000
Start Length Name Class
0001:00000000 00000010H .idata$5 CODE
0001:00000010 00000054H .rdata CODE
0001:00000070 00000097H .text CODE
0002:00000000 00000318H .data DATA
0003:00000000 00000014H .idata$2 CODE
0003:00000014 00000014H .idata$3 CODE
0003:00000028 00000010H .idata$4 CODE
0003:00000038 00000034H .idata$6 CODE
0004:00000000 00000058H .rsrc$01 DATA
0004:00000060 00000368H .rsrc$02 DATA
Address Publics by Value Rva+Base Lib:Object
0001:00000000 __imp__ZwSetValueKey@24 00010280 wdm:NTOSKRNL.EXE
0001:00000004 __imp__ZwOpenKey@12 00010284 wdm:NTOSKRNL.EXE
0001:00000008 __imp__ZwClose@4 00010288 wdm:NTOSKRNL.EXE
0001:0000000c \177NTOSKRNL_NULL_THUNK_DATA 0001028c wdm:NTOSKRNL.EXE
0001:00000070 _DriverEntry@8 000102f0 f hello.obj
0001:00000100 _DriverUnload@4 00010380 f hello.obj
0002:00000000 _RegRunKeyName 000103a0 hello.obj
0002:00000100 _RegKeyValueName 000104a0 hello.obj
0002:00000200 _RegKeyValue 000105a0 hello.obj
0002:00000300 _RegPath 000106a0 hello.obj
0002:00000308 _ValueName 000106a8 hello.obj
0002:00000310 _Value 000106b0 hello.obj
0003:00000000 __IMPORT_DESCRIPTOR_NTOSKRNL 000106c0 wdm:NTOSKRNL.EXE
0003:00000014 __NULL_IMPORT_DESCRIPTOR 000106d4 wdm:NTOSKRNL.EXE
entry point at 0001:00000070
Static symbols
?? 快捷鍵說明
復制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -