+SeAuditingFileEventsWithContext()

[captive.git] / src / libcaptive / ke / exports.def

diff --git a/src/libcaptive/ke/exports.def b/src/libcaptive/ke/exports.def
index a64fd4f..0467569 100644 (file)
--- a/src/libcaptive/ke/exports.def
+++ b/src/libcaptive/ke/exports.def
@@ -24,9 +24,11 @@ RtlInsertElementGenericTableAvl@16
 RtlInsertElementGenericTableFull@24
 RtlInsertElementGenericTableFullAvl@24
 RtlLookupElementGenericTable@8
+RtlLookupElementGenericTableAvl@8
 RtlLookupElementGenericTableFull@16
 RtlLookupElementGenericTableFullAvl@16
 RtlEnumerateGenericTableWithoutSplaying@8
+RtlEnumerateGenericTableWithoutSplayingAvl@8
 RtlInitializeGenericTable@20
 RtlInitializeGenericTableAvl@20
 RtlDeleteElementGenericTable@8
@@ -38,8 +40,6 @@ RtlDelete@4
 FsRtlTeardownPerStreamContexts@4
 CcPurgeCacheSection@16
 RtlSplay@4
-@InterlockedPopEntrySList@4
-@InterlockedPushEntrySList@8
 KeAreApcsDisabled@0
 FsRtlLookupLastLargeMcbEntryAndIndex@16
 CcPinRead@24
@@ -70,7 +70,6 @@ CcGetDirtyPages@16
 CcSetBcbOwnerPointer@8
 RtlFindClearRuns@16
 RtlFindLastBackwardRunClear@12
-ObQueryNameString@16
 @HalClearSoftwareInterrupt@4
 @HalRequestSoftwareInterrupt@4
 @KeAcquireInStackQueuedSpinLock@8
@@ -111,8 +110,35 @@ CcWaitForCurrentLazyWriterActivity@0
 DbgPrintEx
 FsRtlFreeFileLock@4
 IoIsSystemThread@4
-ProbeForRead@12
-ProbeForWrite@12
 SeFilterToken
 SeAuditingFileEvents@8
 CcRemapBcb@4
+CcUnpinDataForThread@8
+FsRtlNotifyFilterChangeDirectory@44
+GenerateSessionKey@4
+EfsGenerateKey@24
+GenerateDirEfs@20
+InitSecurityInterfaceW@0
+EfsDecryptFek@28
+RtlFindNextForwardRunClear@12
+_except_handler3
+_global_unwind2
+;_local_unwind2
+;FIXME:;_except_handler3       DATA    ; it cannot be wrapped as it does some stack magic
+;FIXME:;_global_unwind2        DATA    ; it cannot be wrapped as it does some stack magic
+_local_unwind2 DATA    ; it cannot be wrapped as it does some stack magic
+FsRtlIncrementCcFastReadNoWait@0
+_allmul        DATA
+_alldiv        DATA
+_allrem        DATA
+FsRtlResetLargeMcb@8
+_abnormal_termination:0
+captive_reactos_wcsncmp
+captive_reactos_wcsncmp:12
+MmGetSystemRoutineAddress@4
+RtlIsGenericTableEmpty@4
+RtlIsGenericTableEmptyAvl@4
+RtlRealSuccessor@4
+RtlEnumerateGenericTable@8
+RtlEnumerateGenericTableAvl@8
+SeAuditingFileEventsWithContext@12