+SeAuditingFileEventsWithContext()
[captive.git] / src / libcaptive / ke / exports.captivesym
index f3c5a90..5b26a0e 100644 (file)
@@ -1,6 +1,6 @@
 # $Id$
 # List symbols exported by libcaptive to reactos; see doc of captivesym.pl
-# Copyright (C) 2002 Jan Kratochvil <project-captive@jankratochvil.net>
+# Copyright (C) 2002-2003 Jan Kratochvil <project-captive@jankratochvil.net>
 # 
 # This program is free software; you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 
 
+ntoskrnl.exe   <patch>
 ntoskrnl.exe   ObfDereferenceObject
-ntoskrnl.exe   CcPurgeCacheSection     undef
-ntoskrnl.exe   RtlTimeFieldsToTime
-ntoskrnl.exe   CcSetFileSizes  undef
+ntoskrnl.exe   CcPurgeCacheSection
+ntoskrnl.exe   RtlTimeFieldsToTime     pass
+ntoskrnl.exe   CcSetFileSizes
 ntoskrnl.exe   CcInitializeCacheMap
 ntoskrnl.exe   IoCreateStreamFileObject
-ntoskrnl.exe   _allmul
-ntoskrnl.exe   CcUninitializeCacheMap  undef
-ntoskrnl.exe   CcMdlReadComplete       undef
-ntoskrnl.exe   MmFlushImageSection     undef
-ntoskrnl.exe   KeBugCheckEx    undef
-ntoskrnl.exe   FsRtlIsNtstatusExpected undef
+ntoskrnl.exe   _allmul pass
+ntoskrnl.exe   CcUninitializeCacheMap
 ntoskrnl.exe   IofCompleteRequest
+ntoskrnl.exe   IoCompleteRequest
 ntoskrnl.exe   IoSetTopLevelIrp
 ntoskrnl.exe   IoGetStackLimits
 ntoskrnl.exe   IoGetTopLevelIrp
-ntoskrnl.exe   FsRtlFastCheckLockForRead       undef
-ntoskrnl.exe   IoGetCurrentProcess     undef
-ntoskrnl.exe   IoRaiseHardError        undef
-ntoskrnl.exe   IoSetDeviceToVerify     undef
-ntoskrnl.exe   IoGetDeviceToVerify     undef
+ntoskrnl.exe   IoGetCurrentProcess
 ntoskrnl.exe   KeLeaveCriticalRegion
 ntoskrnl.exe   IoIsOperationSynchronous
 ntoskrnl.exe   KeEnterCriticalRegion
 ntoskrnl.exe   IoDeleteDevice
-ntoskrnl.exe   IoUnregisterFileSystem  undef
-ntoskrnl.exe   ExDeleteResourceLite    undef
-ntoskrnl.exe   IoFreeWorkItem  undef
+ntoskrnl.exe   ExDeleteResourceLite
+ntoskrnl.exe   IoFreeWorkItem
 ntoskrnl.exe   MmQuerySystemSize
 ntoskrnl.exe   IoAllocateWorkItem
 ntoskrnl.exe   KeInitializeEvent
 ntoskrnl.exe   ExInitializeResourceLite
-ntoskrnl.exe   FsRtlCopyRead   undef
 ntoskrnl.exe   ObfReferenceObject
 ntoskrnl.exe   IoRegisterFileSystem
 ntoskrnl.exe   IoRegisterShutdownNotification
 ntoskrnl.exe   IoCreateDevice
 ntoskrnl.exe   RtlInitUnicodeString
 ntoskrnl.exe   FsRtlNotifyVolumeEvent
-ntoskrnl.exe   IoRemoveShareAccess     undef
-ntoskrnl.exe   IoReleaseVpbSpinLock    undef
-ntoskrnl.exe   IoAcquireVpbSpinLock    undef
+ntoskrnl.exe   IoRemoveShareAccess
 ntoskrnl.exe   FsRtlNotifyCleanup
-ntoskrnl.exe   FsRtlOplockIsFastIoPossible     undef
-ntoskrnl.exe   FsRtlFastUnlockAll      undef
-ntoskrnl.exe   IoGetRequestorProcess   undef
-ntoskrnl.exe   FsRtlCheckOplock        undef
+ntoskrnl.exe   FsRtlOplockIsFastIoPossible
+ntoskrnl.exe   FsRtlFastUnlockAll
+ntoskrnl.exe   IoGetRequestorProcess
+ntoskrnl.exe   FsRtlCheckOplock
 ntoskrnl.exe   ExAcquireResourceExclusiveLite
-ntoskrnl.exe   IoQueueWorkItem undef
-ntoskrnl.exe   FsRtlDoesNameContainWildCards
+ntoskrnl.exe   IoQueueWorkItem
+ntoskrnl.exe   FsRtlDoesNameContainWildCards   pass
 ntoskrnl.exe   memmove
-ntoskrnl.exe   IoUpdateShareAccess     undef
+ntoskrnl.exe   IoUpdateShareAccess
 ntoskrnl.exe   IoSetShareAccess
-ntoskrnl.exe   IoCheckShareAccess      undef
-ntoskrnl.exe   FsRtlCurrentBatchOplock undef
-ntoskrnl.exe   _abnormal_termination
+ntoskrnl.exe   IoCheckShareAccess
+ntoskrnl.exe   FsRtlCurrentBatchOplock
 ntoskrnl.exe   IofCallDriver
-ntoskrnl.exe   FsRtlNormalizeNtstatus  undef
 ntoskrnl.exe   KeWaitForSingleObject
 ntoskrnl.exe   IoBuildSynchronousFsdRequest
 ntoskrnl.exe   KeGetCurrentThread
 ntoskrnl.exe   MmProbeAndLockPages
 ntoskrnl.exe   IoAllocateMdl
 ntoskrnl.exe   IoBuildDeviceIoControlRequest
-ntoskrnl.exe   MmBuildMdlForNonPagedPool       undef
-ntoskrnl.exe   _alldiv
+ntoskrnl.exe   _alldiv pass
 ntoskrnl.exe   IoFreeIrp
 ntoskrnl.exe   KeClearEvent
 ntoskrnl.exe   KeSetEvent
 ntoskrnl.exe   ExReleaseResourceForThreadLite
-ntoskrnl.exe   IoBuildPartialMdl       undef
-ntoskrnl.exe   IoMakeAssociatedIrp     undef
+ntoskrnl.exe   IoBuildPartialMdl
+ntoskrnl.exe   IoMakeAssociatedIrp     pass
 ntoskrnl.exe   MmMapLockedPagesSpecifyCache
 ntoskrnl.exe   FsRtlNotifyFullChangeDirectory
 ntoskrnl.exe   RtlUpcaseUnicodeString
 ntoskrnl.exe   RtlOemToUnicodeN
 ntoskrnl.exe   CcMapData
 ntoskrnl.exe   ExAcquireResourceSharedLite
-ntoskrnl.exe   CcWaitForCurrentLazyWriterActivity      undef
-ntoskrnl.exe   FsRtlOplockFsctrl       undef
 ntoskrnl.exe   ObReferenceObjectByHandle
 ntoskrnl.exe   IoFileObjectType
-ntoskrnl.exe   SeSinglePrivilegeCheck  undef
 ntoskrnl.exe   KeInitializeSpinLock
 ntoskrnl.exe   RtlOemStringToCountedUnicodeString
-ntoskrnl.exe   FsRtlProcessFileLock    undef
-ntoskrnl.exe   FsRtlPrivateLock        undef
-ntoskrnl.exe   FsRtlFastUnlockSingle   undef
-ntoskrnl.exe   FsRtlFastUnlockAllByKey undef
-ntoskrnl.exe   FsRtlIsFatDbcsLegal
-ntoskrnl.exe   RtlUnicodeStringToCountedOemString
+ntoskrnl.exe   FsRtlIsFatDbcsLegal     pass
+ntoskrnl.exe   RtlUnicodeStringToCountedOemString      pass
+ntoskrnl.exe   RtlUnicodeToOemN
 ntoskrnl.exe   RtlFreeOemString
 ntoskrnl.exe   NlsOemLeadByteInfo
 ntoskrnl.exe   NlsMbOemCodePageTag
 ntoskrnl.exe   RtlUnicodeStringToOemString
-ntoskrnl.exe   RtlGenerate8dot3Name
-ntoskrnl.exe   FsRtlIsNameInExpression undef
-ntoskrnl.exe   RtlCompareMemory        undef
-ntoskrnl.exe   RtlDelete       undef
-ntoskrnl.exe   RtlSplay        undef
-ntoskrnl.exe   CcMdlRead       undef
-ntoskrnl.exe   CcCopyRead      undef
-ntoskrnl.exe   CcSetReadAheadGranularity       undef
-ntoskrnl.exe   FsRtlCheckLockForReadAccess     undef
+ntoskrnl.exe   RtlGenerate8dot3Name    pass
+ntoskrnl.exe   RtlCompareMemory        pass
+ntoskrnl.exe   RtlDelete       pass
+ntoskrnl.exe   RtlSplay        pass
+ntoskrnl.exe   RtlSubtreePredecessor   pass
+ntoskrnl.exe   CcCopyRead
+ntoskrnl.exe   FsRtlCheckLockForReadAccess
 ntoskrnl.exe   ExAcquireSharedStarveExclusive
 ntoskrnl.exe   FsRtlNotifyUninitializeSync
-ntoskrnl.exe   RtlInsertElementGenericTable
-ntoskrnl.exe   FsRtlAllocateFileLock   undef
-ntoskrnl.exe   RtlLookupElementGenericTable
-ntoskrnl.exe   RtlEnumerateGenericTableWithoutSplaying
-ntoskrnl.exe   RtlInitializeGenericTable
+ntoskrnl.exe   RtlInsertElementGenericTable    pass
+ntoskrnl.exe   RtlInsertElementGenericTableAvl pass
+ntoskrnl.exe   RtlInsertElementGenericTableFull        pass
+ntoskrnl.exe   RtlLookupElementGenericTable    pass
+ntoskrnl.exe   RtlLookupElementGenericTableAvl pass
+ntoskrnl.exe   RtlLookupElementGenericTableFull        pass
+ntoskrnl.exe   RtlEnumerateGenericTableWithoutSplaying pass
+ntoskrnl.exe   RtlEnumerateGenericTableWithoutSplayingAvl      pass
+ntoskrnl.exe   RtlInitializeGenericTable       pass    # 'pass'=>Arguments MUST be stdcall even if in .so file!
+ntoskrnl.exe   RtlInitializeGenericTableAvl    pass    # 'pass'=>Arguments MUST be stdcall even if in .so file!
+ntoskrnl.exe   RtlLookupElementGenericTableFullAvl     pass
+ntoskrnl.exe   RtlInsertElementGenericTableFullAvl     pass
 ntoskrnl.exe   FsRtlNotifyInitializeSync
-ntoskrnl.exe   FsRtlUninitializeOplock undef
-ntoskrnl.exe   FsRtlFreeFileLock       undef
-ntoskrnl.exe   FsRtlTeardownPerStreamContexts  undef
-ntoskrnl.exe   RtlDeleteElementGenericTable
+ntoskrnl.exe   FsRtlTeardownPerStreamContexts
+ntoskrnl.exe   RtlDeleteElementGenericTable    pass
+ntoskrnl.exe   RtlDeleteElementGenericTableAvl pass
 ntoskrnl.exe   IoSetHardErrorOrVerifyDevice
-ntoskrnl.exe   IoVerifyVolume  undef
-ntoskrnl.exe   _allshr undef
-ntoskrnl.exe   ExQueueWorkItem undef
-ntoskrnl.exe   _except_handler3        undef
 ntoskrnl.exe   ExRaiseStatus
 ntoskrnl.exe   ExReleaseResourceLite
 ntoskrnl.exe   CcUnpinData
 ntoskrnl.exe   ExAllocatePoolWithTag
 ntoskrnl.exe   IoFreeMdl
 ntoskrnl.exe   ExFreePoolWithTag
+ntoskrnl.exe   ExFreePool
 ntoskrnl.exe   RtlAssert
 ntoskrnl.exe   DbgPrint
-ntoskrnl.exe   _allshl undef
-ntoskrnl.exe   ExIsResourceAcquiredExclusiveLite       undef
-ntoskrnl.exe   DbgBreakPoint   undef
-ntoskrnl.exe   InterlockedPopEntrySList        undef
-ntoskrnl.exe   InterlockedPushEntrySList       undef
-ntoskrnl.exe   CcRepinBcb      undef
-ntoskrnl.exe   FsRtlAllocatePool       undef
-ntoskrnl.exe   CcUnpinRepinnedBcb      undef
-ntoskrnl.exe   CcGetFileObjectFromBcb  undef
-ntoskrnl.exe   FsRtlInitializeFileLock undef
+ntoskrnl.exe   ExIsResourceAcquiredExclusiveLite
+ntoskrnl.exe   InterlockedPopEntrySList
+ntoskrnl.exe   InterlockedPushEntrySList
+ntoskrnl.exe   CcRepinBcb
+ntoskrnl.exe   CcUnpinRepinnedBcb
+ntoskrnl.exe   FsRtlInitializeFileLock
 ntoskrnl.exe   RtlCompareUnicodeString
-ntoskrnl.exe   CcSetDirtyPinnedData    undef
-ntoskrnl.exe   RtlSetBits      undef
-ntoskrnl.exe   RtlInitializeBitMap     undef
-ntoskrnl.exe   CcPinRead       undef
-ntoskrnl.exe   FsRtlUninitializeLargeMcb       undef
-ntoskrnl.exe   FsRtlUninitializeFileLock       undef
+ntoskrnl.exe   CcSetDirtyPinnedData
+ntoskrnl.exe   RtlSetBits      pass
+ntoskrnl.exe   RtlInitializeBitMap     pass
+ntoskrnl.exe   CcPinRead
+ntoskrnl.exe   FsRtlUninitializeLargeMcb       pass
 ntoskrnl.exe   KeQuerySystemTime
-ntoskrnl.exe   FsRtlInitializeLargeMcb undef
+ntoskrnl.exe   FsRtlInitializeLargeMcb pass
 ntoskrnl.exe   RtlAnsiStringToUnicodeString
 ntoskrnl.exe   RtlUnicodeStringToAnsiString
-ntoskrnl.exe   FsRtlFastCheckLockForWrite      undef
-ntoskrnl.exe   CcFlushCache    undef
-ntoskrnl.exe   FsRtlGetNextFileLock    undef
-ntoskrnl.exe   FsRtlAreNamesEqual      undef
-ntoskrnl.exe   MmCanFileBeTruncated    undef
-ntoskrnl.exe   ExDeleteNPagedLookasideList
-ntoskrnl.exe   ExDeletePagedLookasideList
-ntoskrnl.exe   IoDeleteSymbolicLink    undef
+ntoskrnl.exe   FsRtlAreNamesEqual      pass
+ntoskrnl.exe   ExDeleteNPagedLookasideList     pass    #==ExDeletePagedLookasideList
+ntoskrnl.exe   ExDeletePagedLookasideList      pass    #==ExDeleteNPagedLookasideList
 ntoskrnl.exe   RtlQueryRegistryValues
 ntoskrnl.exe   RtlAppendUnicodeToString
 ntoskrnl.exe   RtlCopyUnicodeString
-ntoskrnl.exe   IoCreateSymbolicLink    undef
-ntoskrnl.exe   ExInitializePagedLookasideList
-ntoskrnl.exe   ExInitializeNPagedLookasideList
+ntoskrnl.exe   ExInitializePagedLookasideList  pass
+ntoskrnl.exe   ExInitializeNPagedLookasideList pass
+ntoskrnl.exe   ExFreeToPagedLookasideList      pass
+ntoskrnl.exe   RtlTimeToTimeFields     pass
+ntoskrnl.exe   FsRtlRemoveLargeMcbEntry        pass
+ntoskrnl.exe   FsRtlLookupLargeMcbEntry        pass
+ntoskrnl.exe   FsRtlAddLargeMcbEntry   pass
+ntoskrnl.exe   RtlFindClearBits        pass
+ntoskrnl.exe   RtlClearBits    pass
+ntoskrnl.exe   FsRtlCheckLockForWriteAccess
+ntoskrnl.exe   CcCanIWrite
+ntoskrnl.exe   CcPinMappedData
+ntoskrnl.exe   ExAcquireFastMutexUnsafe        
+ntoskrnl.exe   ExConvertExclusiveToSharedLite
+ntoskrnl.exe   ExIsResourceAcquiredSharedLite
+ntoskrnl.exe   ExLocalTimeToSystemTime
+ntoskrnl.exe   ExReleaseFastMutexUnsafe        
+ntoskrnl.exe   ExSystemTimeToLocalTime
+ntoskrnl.exe   FsRtlAddToTunnelCache
+ntoskrnl.exe   FsRtlBalanceReads
+ntoskrnl.exe   FsRtlDeleteKeyFromTunnelCache
+ntoskrnl.exe   FsRtlDeleteTunnelCache
+ntoskrnl.exe   FsRtlDissectName        pass
+ntoskrnl.exe   FsRtlFindInTunnelCache
+ntoskrnl.exe   FsRtlGetNextLargeMcbEntry       pass
+ntoskrnl.exe   FsRtlInitializeOplock
+ntoskrnl.exe   FsRtlInitializeTunnelCache
+ntoskrnl.exe   FsRtlLegalAnsiCharacterArray    pass
+ntoskrnl.exe   FsRtlLookupLastLargeMcbEntry    pass
+ntoskrnl.exe   FsRtlLookupLastLargeMcbEntryAndIndex    pass
+ntoskrnl.exe   FsRtlNotifyFullReportChange     
+ntoskrnl.exe   FsRtlNumberOfRunsInLargeMcb     pass
+ntoskrnl.exe   FsRtlTruncateLargeMcb   pass
+ntoskrnl.exe   KeAreApcsDisabled
+ntoskrnl.exe   KeCancelTimer
+ntoskrnl.exe   KeInitializeDpc
+ntoskrnl.exe   KeInitializeTimer
+ntoskrnl.exe   KeNumberProcessors
+ntoskrnl.exe   KeRemoveQueueDpc
+ntoskrnl.exe   MmUnlockPages   
+ntoskrnl.exe   MmUnmapLockedPages      
+ntoskrnl.exe   RtlAreBitsClear pass
+ntoskrnl.exe   RtlAreBitsSet   pass
+ntoskrnl.exe   RtlCompareString        
+ntoskrnl.exe   RtlDowncaseUnicodeString        
+ntoskrnl.exe   RtlEqualString  
+ntoskrnl.exe   RtlFindLongestRunClear  pass
+ntoskrnl.exe   RtlFreeUnicodeString    
+ntoskrnl.exe   RtlNumberOfClearBits    pass
+ntoskrnl.exe   RtlUpcaseUnicodeStringToCountedOemString        
+ntoskrnl.exe   RtlUpperString  
+ntoskrnl.exe   RtlxOemStringToUnicodeSize      
+ntoskrnl.exe   SeExports
+ntoskrnl.exe   ZwClose 
+ntoskrnl.exe   ZwOpenKey
+ntoskrnl.exe   ExfInterlockedInsertTailList
+ntoskrnl.exe   RtlTimeToSecondsSince1970       pass
+ntoskrnl.exe   RtlSecondsSince1970ToTime       pass
+ntoskrnl.exe   RtlExtendedMagicDivide  pass
+ntoskrnl.exe   RtlExtendedIntegerMultiply      pass
+ntoskrnl.exe   ExAllocateFromPagedLookasideList        wrap
+ntoskrnl.exe   CcMdlReadComplete       undef
+ntoskrnl.exe   MmFlushImageSection
+ntoskrnl.exe   KeBugCheckEx    undef
+ntoskrnl.exe   FsRtlIsNtstatusExpected pass
+ntoskrnl.exe   FsRtlFastCheckLockForRead       undef
+ntoskrnl.exe   IoRaiseHardError        undef
+ntoskrnl.exe   IoSetDeviceToVerify     undef
+ntoskrnl.exe   IoGetDeviceToVerify     undef
+ntoskrnl.exe   IoUnregisterFileSystem
+ntoskrnl.exe   FsRtlCopyRead   undef
+ntoskrnl.exe   IoReleaseVpbSpinLock
+ntoskrnl.exe   IoAcquireVpbSpinLock
+ntoskrnl.exe   FsRtlNormalizeNtstatus  undef
+ntoskrnl.exe   MmBuildMdlForNonPagedPool
+ntoskrnl.exe   CcWaitForCurrentLazyWriterActivity
+ntoskrnl.exe   FsRtlOplockFsctrl       undef
+ntoskrnl.exe   SeSinglePrivilegeCheck  undef
+ntoskrnl.exe   FsRtlProcessFileLock    undef
+ntoskrnl.exe   FsRtlPrivateLock        undef
+ntoskrnl.exe   FsRtlFastUnlockSingle   undef
+ntoskrnl.exe   FsRtlFastUnlockAllByKey undef
+ntoskrnl.exe   FsRtlIsNameInExpression pass
+ntoskrnl.exe   CcMdlRead       undef
+ntoskrnl.exe   CcSetReadAheadGranularity
+ntoskrnl.exe   FsRtlAllocateFileLock   undef
+ntoskrnl.exe   FsRtlUninitializeOplock
+ntoskrnl.exe   FsRtlFreeFileLock       undef
+ntoskrnl.exe   IoVerifyVolume  undef
+ntoskrnl.exe   _allshr pass
+ntoskrnl.exe   _aullshr        pass
+ntoskrnl.exe   ExQueueWorkItem
+ntoskrnl.exe   _except_handler3
+ntoskrnl.exe   _allshl pass
+ntoskrnl.exe   DbgBreakPoint
+ntoskrnl.exe   FsRtlAllocatePool       pass
+ntoskrnl.exe   CcGetFileObjectFromBcb  undef
+ntoskrnl.exe   FsRtlUninitializeFileLock
+ntoskrnl.exe   FsRtlFastCheckLockForWrite      undef
+ntoskrnl.exe   CcFlushCache
+ntoskrnl.exe   FsRtlGetNextFileLock
+ntoskrnl.exe   MmCanFileBeTruncated
+ntoskrnl.exe   IoDeleteSymbolicLink    undef
+ntoskrnl.exe   IoCreateSymbolicLink
 ntoskrnl.exe   FsRtlCopyWrite  undef
-ntoskrnl.exe   RtlTimeToTimeFields
-ntoskrnl.exe   FsRtlRemoveLargeMcbEntry        undef
-ntoskrnl.exe   FsRtlLookupLargeMcbEntry        undef
-ntoskrnl.exe   FsRtlAddLargeMcbEntry   undef
-ntoskrnl.exe   RtlFindClearBits        undef
-ntoskrnl.exe   RtlClearBits    undef
-ntoskrnl.exe   CcZeroData      undef
-ntoskrnl.exe   CcPreparePinWrite       undef
+ntoskrnl.exe   CcZeroData
+ntoskrnl.exe   CcPreparePinWrite
 ntoskrnl.exe   CcPrepareMdlWrite       undef
-ntoskrnl.exe   CcCopyWrite     undef
-ntoskrnl.exe   FsRtlCheckLockForWriteAccess    undef
+ntoskrnl.exe   CcCopyWrite
 ntoskrnl.exe   CcMdlWriteComplete      undef
+ntoskrnl.exe   CcDeferWrite    undef
+ntoskrnl.exe   CcIsThereDirtyData
+ntoskrnl.exe   CcSetAdditionalCacheAttributes
+ntoskrnl.exe   DbgPrintEx      undef
+ntoskrnl.exe   ExAcquireSharedWaitForExclusive
+ntoskrnl.exe   ExAllocatePoolWithQuotaTag      undef
+ntoskrnl.exe   ExGetExclusiveWaiterCount
+ntoskrnl.exe   ExGetSharedWaiterCount
+ntoskrnl.exe   ExfInterlockedAddUlong  undef
+ntoskrnl.exe   FsRtlIsDbcsInExpression undef
+ntoskrnl.exe   FsRtlIsTotalDeviceFailure
+ntoskrnl.exe   FsRtlPostPagingFileStackOverflow        undef
+ntoskrnl.exe   FsRtlPostStackOverflow  undef
+ntoskrnl.exe   IoBuildAsynchronousFsdRequest
+ntoskrnl.exe   IoCheckEaBufferValidity undef
+ntoskrnl.exe   IoGetFileObjectGenericMapping
+ntoskrnl.exe   IoIsSystemThread
+ntoskrnl.exe   IoRaiseInformationalHardError   undef
+ntoskrnl.exe   KeDelayExecutionThread
+ntoskrnl.exe   KeSetTimer
+ntoskrnl.exe   ProbeForRead    undef
+ntoskrnl.exe   ProbeForWrite   undef
+ntoskrnl.exe   SeAccessCheck
+ntoskrnl.exe   SeFilterToken   undef
+ntoskrnl.exe   SeLockSubjectContext
+ntoskrnl.exe   SePrivilegeCheck
+ntoskrnl.exe   SeReleaseSubjectContext
+ntoskrnl.exe   SeUnlockSubjectContext
+ntoskrnl.exe   ZwQueryValueKey undef
+ntoskrnl.exe   _allrem pass
+ntoskrnl.exe   strncmp
+ntoskrnl.exe   ExInterlockedPushEntrySList
+ntoskrnl.exe   ExInterlockedPopEntrySList
+ntoskrnl.exe   SeCaptureSubjectContext
+ntoskrnl.exe   RtlLengthRequiredSid
+ntoskrnl.exe   RtlInitializeSid
+ntoskrnl.exe   RtlSubAuthoritySid
+ntoskrnl.exe   RtlCreateAcl
+ntoskrnl.exe   RtlAddAccessAllowedAce
+ntoskrnl.exe   RtlCreateSecurityDescriptor
+ntoskrnl.exe   RtlSetDaclSecurityDescriptor
+ntoskrnl.exe   SeAssignSecurity
+ntoskrnl.exe   RtlLengthSecurityDescriptor     pass
+ntoskrnl.exe   SeValidSecurityDescriptor
+ntoskrnl.exe   VerSetConditionMask     pass
+ntoskrnl.exe   RtlVerifyVersionInfo    pass
+ntoskrnl.exe   RtlGetVersion
+ntoskrnl.exe   KeInitializeMutant
+ntoskrnl.exe   KeReleaseMutant
+ntoskrnl.exe   IoRegisterDriverReinitialization
+ntoskrnl.exe   PoQueueShutdownWorkItem
+ntoskrnl.exe   ZwCreateEvent
+ntoskrnl.exe   PsCreateSystemThread
+ntoskrnl.exe   IoCreateStreamFileObjectLite
+ntoskrnl.exe   CcSetLogHandleForFile
+ntoskrnl.exe   _alloca_probe   pass    # ntoskrnl.exe implementation is fully acceptable
+ntoskrnl.exe   IoAllocateErrorLogEntry pass
+ntoskrnl.exe   CcGetDirtyPages
+ntoskrnl.exe   ExReinitializeResourceLite
+ntoskrnl.exe   CcSetBcbOwnerPointer
+ntoskrnl.exe   IoSynchronousPageWrite
+ntoskrnl.exe   RtlFindClearRuns        pass
+ntoskrnl.exe   RtlFindLastBackwardRunClear     pass
+ntoskrnl.exe   ObQueryNameString
+ntoskrnl.exe   RtlLengthSid
+ntoskrnl.exe   SeAuditingFileEvents
+ntoskrnl.exe   CcRemapBcb
+ntoskrnl.exe   CcUnpinDataForThread
+ntoskrnl.exe   SeDeassignSecurity
+ntoskrnl.exe   FsRtlNotifyFilterChangeDirectory
+ntoskrnl.exe   RtlFindNextForwardRunClear      pass
+ntoskrnl.exe   IoAcquireCancelSpinLock
+ntoskrnl.exe   IoReleaseCancelSpinLock
+ntoskrnl.exe   _global_unwind2
+ntoskrnl.exe   RtlUnwind
+ntoskrnl.exe   _local_unwind2  pass
+# we can pass iff "_local_unwind2 pass" as there is registered local handler to %fs:[0]:
+ntoskrnl.exe   _abnormal_termination   wrap
+ntoskrnl.exe   FsRtlIncrementCcFastReadNoWait
+ntoskrnl.exe   FsRtlResetLargeMcb      pass
+ntoskrnl.exe   RtlGetCompressionWorkSpaceSize  pass
+ntoskrnl.exe   RtlDecompressFragment   pass
+ntoskrnl.exe   KeSetPriorityThread
+ntoskrnl.exe   IoPageRead
+ntoskrnl.exe   RtlCompressBuffer       pass
+ntoskrnl.exe   FsRtlSplitLargeMcb      pass
+ntoskrnl.exe   captive_reactos_wcsncmp
+ntoskrnl.exe   MmGetSystemRoutineAddress
+ntoskrnl.exe   RtlEqualUnicodeString
+ntoskrnl.exe   RtlIsGenericTableEmpty  pass
+ntoskrnl.exe   RtlRealSuccessor        pass
+ntoskrnl.exe   PsGetVersion
+ntoskrnl.exe   RtlIsGenericTableEmptyAvl       pass
+ntoskrnl.exe   RtlEnumerateGenericTable        pass
+ntoskrnl.exe   RtlEnumerateGenericTableAvl     pass
+ntoskrnl.exe   MmSetAddressRangeModified
+ntoskrnl.exe   RtlEqualSid
+ntoskrnl.exe   SeAuditingFileEventsWithContext
 
-hal.dll        KfReleaseSpinLock       undef
+hal.dll        KfReleaseSpinLock
 hal.dll        KeGetCurrentIrql
 hal.dll        ExAcquireFastMutex
 hal.dll        ExReleaseFastMutex
-hal.dll        KfAcquireSpinLock       undef
+hal.dll        KfAcquireSpinLock
+hal.dll        HalReportResourceUsage  undef
+hal.dll        HalAllProcessorsStarted undef
+hal.dll        HalQueryRealTimeClock   undef
+hal.dll        HalAllocateAdapterChannel       undef
+hal.dll        KeStallExecutionProcessor       undef
+hal.dll        HalTranslateBusAddress  undef
+hal.dll        HalGetBusDataByOffset   undef
+hal.dll        HalSetBusDataByOffset   undef
+hal.dll        KeQueryPerformanceCounter
+hal.dll        HalReturnToFirmware     undef
+hal.dll        READ_PORT_UCHAR undef
+hal.dll        READ_PORT_USHORT        undef
+hal.dll        READ_PORT_ULONG undef
+hal.dll        WRITE_PORT_UCHAR        undef
+hal.dll        WRITE_PORT_USHORT       undef
+hal.dll        WRITE_PORT_ULONG        undef
+hal.dll        HalInitializeProcessor  undef
+hal.dll        HalCalibratePerformanceCounter  undef
+hal.dll        HalSetRealTimeClock     undef
+hal.dll        HalHandleNMI    undef
+hal.dll        HalBeginSystemInterrupt undef
+hal.dll        HalEndSystemInterrupt   undef
+hal.dll        KeRaiseIrqlToSynchLevel undef
+hal.dll        KeAcquireInStackQueuedSpinLockRaiseToSynch      undef
+hal.dll        HalInitSystem   undef
+hal.dll        HalDisableSystemInterrupt       undef
+hal.dll        HalEnableSystemInterrupt        undef
+hal.dll        KeRaiseIrql
+hal.dll        KeLowerIrql
+hal.dll        HalClearSoftwareInterrupt       undef
+hal.dll        KeReleaseSpinLock
+hal.dll        KeAcquireSpinLock
+hal.dll        ExTryToAcquireFastMutex
+hal.dll        KeAcquireSpinLockRaiseToSynch   undef
+hal.dll        KeFlushWriteBuffer      undef
+hal.dll        HalProcessorIdle        undef
+hal.dll        HalReadDmaCounter       undef
+hal.dll        IoMapTransfer   undef
+hal.dll        IoFreeMapRegisters      undef
+hal.dll        IoFreeAdapterChannel    undef
+hal.dll        IoFlushAdapterBuffers   undef
+hal.dll        HalFreeCommonBuffer     undef
+hal.dll        HalAllocateCommonBuffer undef
+hal.dll        HalAllocateCrashDumpRegisters   undef
+hal.dll        HalGetAdapter   undef
+hal.dll        HalSetTimeIncrement     undef
+hal.dll        HalGetEnvironmentVariable       undef
+hal.dll        HalSetEnvironmentVariable       undef
+hal.dll        KfRaiseIrql
+hal.dll        HalGetInterruptVector   undef
+hal.dll        HalRequestSoftwareInterrupt     undef
+hal.dll        KeAcquireInStackQueuedSpinLock
+hal.dll        KeReleaseInStackQueuedSpinLock
+hal.dll        KeRaiseIrqlToDpcLevel   undef
+hal.dll        HalSystemVectorDispatchEntry    undef
+hal.dll        KfLowerIrql
+hal.dll        HalStartProfileInterrupt        undef
+hal.dll        HalSetProfileInterval   undef
+hal.dll        HalStopProfileInterrupt undef
+hal.dll        KeAcquireQueuedSpinLockRaiseToSynch
+hal.dll        HalRequestIpi   undef
+hal.dll        HalStartNextProcessor   undef
+hal.dll        KeTryToAcquireQueuedSpinLock    undef
+hal.dll        KeAcquireQueuedSpinLock
+hal.dll        KeReleaseQueuedSpinLock
+hal.dll        IoReadPartitionTable    undef
+hal.dll        IoAssignDriveLetters    undef
+hal.dll        KdPortSave      undef
+hal.dll        KdPortRestore   undef
+hal.dll        KdPortPollByte  undef
+hal.dll        KdPortInitialize        undef
+hal.dll        KdPortGetByte   undef
+hal.dll        KdPortPutByte   undef
+
+bootvid.dll    VidInitialize   undef
+bootvid.dll    VidDisplayString        undef
+bootvid.dll    VidSetTextColor undef
+bootvid.dll    VidSolidColorFill       undef
+bootvid.dll    VidBitBlt       undef
+bootvid.dll    VidBufferToScreenBlt    undef
+bootvid.dll    VidScreenToBufferBlt    undef
+bootvid.dll    VidResetDisplay undef
+bootvid.dll    VidCleanUp      undef
+bootvid.dll    VidSetScrollRegion      undef
+
+kdcom.dll      KdD0Transition  undef
+kdcom.dll      KdD3Transition  undef
+kdcom.dll      KdRestore       undef
+kdcom.dll      KdReceivePacket undef
+kdcom.dll      KdDebuggerInitialize0   undef
+kdcom.dll      KdSave  undef
+kdcom.dll      KdDebuggerInitialize1   undef
+kdcom.dll      KdSendPacket    undef
+
+ksecdd.sys     GenerateSessionKey      undef
+ksecdd.sys     EfsGenerateKey  undef
+ksecdd.sys     GenerateDirEfs  undef
+ksecdd.sys     InitSecurityInterfaceW  undef
+ksecdd.sys     EfsDecryptFek   undef