From aa0c17a7130b28ef4de28d0d1f7f023dcd835831 Mon Sep 17 00:00:00 2001 From: short <> Date: Thu, 30 Jan 2003 11:36:20 +0000 Subject: [PATCH] +Commandline option '--load-module' - it is now mandatory to load W32 ntoskrnl.exe +undef exports of bootvid.dll and kdcom.dll --- src/libcaptive/ke/exports.captivesym | 260 +++++++++++++++++++++++------------ 1 file changed, 173 insertions(+), 87 deletions(-) diff --git a/src/libcaptive/ke/exports.captivesym b/src/libcaptive/ke/exports.captivesym index 5f580b3..d8514bb 100644 --- a/src/libcaptive/ke/exports.captivesym +++ b/src/libcaptive/ke/exports.captivesym @@ -16,6 +16,7 @@ # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA +ntoskrnl.exe ntoskrnl.exe ObfDereferenceObject ntoskrnl.exe CcPurgeCacheSection ntoskrnl.exe RtlTimeFieldsToTime @@ -24,31 +25,22 @@ ntoskrnl.exe CcInitializeCacheMap ntoskrnl.exe IoCreateStreamFileObject ntoskrnl.exe _allmul ntoskrnl.exe CcUninitializeCacheMap -ntoskrnl.exe CcMdlReadComplete undef -ntoskrnl.exe MmFlushImageSection undef -ntoskrnl.exe KeBugCheckEx undef -ntoskrnl.exe FsRtlIsNtstatusExpected undef ntoskrnl.exe IofCompleteRequest +ntoskrnl.exe IoCompleteRequest ntoskrnl.exe IoSetTopLevelIrp ntoskrnl.exe IoGetStackLimits ntoskrnl.exe IoGetTopLevelIrp -ntoskrnl.exe FsRtlFastCheckLockForRead undef ntoskrnl.exe IoGetCurrentProcess -ntoskrnl.exe IoRaiseHardError undef -ntoskrnl.exe IoSetDeviceToVerify undef -ntoskrnl.exe IoGetDeviceToVerify undef ntoskrnl.exe KeLeaveCriticalRegion ntoskrnl.exe IoIsOperationSynchronous ntoskrnl.exe KeEnterCriticalRegion ntoskrnl.exe IoDeleteDevice -ntoskrnl.exe IoUnregisterFileSystem undef ntoskrnl.exe ExDeleteResourceLite ntoskrnl.exe IoFreeWorkItem ntoskrnl.exe MmQuerySystemSize ntoskrnl.exe IoAllocateWorkItem ntoskrnl.exe KeInitializeEvent ntoskrnl.exe ExInitializeResourceLite -ntoskrnl.exe FsRtlCopyRead undef ntoskrnl.exe ObfReferenceObject ntoskrnl.exe IoRegisterFileSystem ntoskrnl.exe IoRegisterShutdownNotification @@ -56,8 +48,6 @@ ntoskrnl.exe IoCreateDevice ntoskrnl.exe RtlInitUnicodeString ntoskrnl.exe FsRtlNotifyVolumeEvent ntoskrnl.exe IoRemoveShareAccess -ntoskrnl.exe IoReleaseVpbSpinLock undef -ntoskrnl.exe IoAcquireVpbSpinLock undef ntoskrnl.exe FsRtlNotifyCleanup ntoskrnl.exe FsRtlOplockIsFastIoPossible ntoskrnl.exe FsRtlFastUnlockAll @@ -73,38 +63,29 @@ ntoskrnl.exe IoCheckShareAccess ntoskrnl.exe FsRtlCurrentBatchOplock ntoskrnl.exe _abnormal_termination ntoskrnl.exe IofCallDriver -ntoskrnl.exe FsRtlNormalizeNtstatus undef ntoskrnl.exe KeWaitForSingleObject ntoskrnl.exe IoBuildSynchronousFsdRequest ntoskrnl.exe KeGetCurrentThread ntoskrnl.exe MmProbeAndLockPages ntoskrnl.exe IoAllocateMdl ntoskrnl.exe IoBuildDeviceIoControlRequest -ntoskrnl.exe MmBuildMdlForNonPagedPool undef ntoskrnl.exe _alldiv ntoskrnl.exe IoFreeIrp ntoskrnl.exe KeClearEvent ntoskrnl.exe KeSetEvent ntoskrnl.exe ExReleaseResourceForThreadLite ntoskrnl.exe IoBuildPartialMdl -ntoskrnl.exe IoMakeAssociatedIrp undef +ntoskrnl.exe IoMakeAssociatedIrp pass ntoskrnl.exe MmMapLockedPagesSpecifyCache ntoskrnl.exe FsRtlNotifyFullChangeDirectory ntoskrnl.exe RtlUpcaseUnicodeString ntoskrnl.exe RtlOemToUnicodeN ntoskrnl.exe CcMapData ntoskrnl.exe ExAcquireResourceSharedLite -ntoskrnl.exe CcWaitForCurrentLazyWriterActivity undef -ntoskrnl.exe FsRtlOplockFsctrl undef ntoskrnl.exe ObReferenceObjectByHandle ntoskrnl.exe IoFileObjectType -ntoskrnl.exe SeSinglePrivilegeCheck undef ntoskrnl.exe KeInitializeSpinLock ntoskrnl.exe RtlOemStringToCountedUnicodeString -ntoskrnl.exe FsRtlProcessFileLock undef -ntoskrnl.exe FsRtlPrivateLock undef -ntoskrnl.exe FsRtlFastUnlockSingle undef -ntoskrnl.exe FsRtlFastUnlockAllByKey undef ntoskrnl.exe FsRtlIsFatDbcsLegal ntoskrnl.exe RtlUnicodeStringToCountedOemString ntoskrnl.exe RtlFreeOemString @@ -112,31 +93,21 @@ ntoskrnl.exe NlsOemLeadByteInfo ntoskrnl.exe NlsMbOemCodePageTag ntoskrnl.exe RtlUnicodeStringToOemString ntoskrnl.exe RtlGenerate8dot3Name -ntoskrnl.exe FsRtlIsNameInExpression undef ntoskrnl.exe RtlCompareMemory ntoskrnl.exe RtlDelete ntoskrnl.exe RtlSplay -ntoskrnl.exe CcMdlRead undef ntoskrnl.exe CcCopyRead -ntoskrnl.exe CcSetReadAheadGranularity undef ntoskrnl.exe FsRtlCheckLockForReadAccess ntoskrnl.exe ExAcquireSharedStarveExclusive ntoskrnl.exe FsRtlNotifyUninitializeSync ntoskrnl.exe RtlInsertElementGenericTable -ntoskrnl.exe FsRtlAllocateFileLock undef ntoskrnl.exe RtlLookupElementGenericTable ntoskrnl.exe RtlEnumerateGenericTableWithoutSplaying ntoskrnl.exe RtlInitializeGenericTable ntoskrnl.exe FsRtlNotifyInitializeSync -ntoskrnl.exe FsRtlUninitializeOplock undef -ntoskrnl.exe FsRtlFreeFileLock undef ntoskrnl.exe FsRtlTeardownPerStreamContexts ntoskrnl.exe RtlDeleteElementGenericTable ntoskrnl.exe IoSetHardErrorOrVerifyDevice -ntoskrnl.exe IoVerifyVolume undef -ntoskrnl.exe _allshr undef -ntoskrnl.exe ExQueueWorkItem undef -ntoskrnl.exe _except_handler3 undef ntoskrnl.exe ExRaiseStatus ntoskrnl.exe ExReleaseResourceLite ntoskrnl.exe CcUnpinData @@ -145,106 +116,67 @@ ntoskrnl.exe IoFreeMdl ntoskrnl.exe ExFreePoolWithTag ntoskrnl.exe RtlAssert ntoskrnl.exe DbgPrint -ntoskrnl.exe _allshl undef ntoskrnl.exe ExIsResourceAcquiredExclusiveLite -ntoskrnl.exe DbgBreakPoint undef ntoskrnl.exe InterlockedPopEntrySList ntoskrnl.exe InterlockedPushEntrySList ntoskrnl.exe CcRepinBcb -ntoskrnl.exe FsRtlAllocatePool undef ntoskrnl.exe CcUnpinRepinnedBcb -ntoskrnl.exe CcGetFileObjectFromBcb undef ntoskrnl.exe FsRtlInitializeFileLock ntoskrnl.exe RtlCompareUnicodeString ntoskrnl.exe CcSetDirtyPinnedData ntoskrnl.exe RtlSetBits ntoskrnl.exe RtlInitializeBitMap ntoskrnl.exe CcPinRead -ntoskrnl.exe FsRtlUninitializeLargeMcb -ntoskrnl.exe FsRtlUninitializeFileLock undef +ntoskrnl.exe FsRtlUninitializeLargeMcb pass ntoskrnl.exe KeQuerySystemTime -ntoskrnl.exe FsRtlInitializeLargeMcb +ntoskrnl.exe FsRtlInitializeLargeMcb pass ntoskrnl.exe RtlAnsiStringToUnicodeString ntoskrnl.exe RtlUnicodeStringToAnsiString -ntoskrnl.exe FsRtlFastCheckLockForWrite undef -ntoskrnl.exe CcFlushCache undef -ntoskrnl.exe FsRtlGetNextFileLock undef ntoskrnl.exe FsRtlAreNamesEqual -ntoskrnl.exe MmCanFileBeTruncated undef -ntoskrnl.exe ExDeleteNPagedLookasideList -ntoskrnl.exe ExDeletePagedLookasideList -ntoskrnl.exe IoDeleteSymbolicLink undef +ntoskrnl.exe ExDeleteNPagedLookasideList pass +#ntoskrnl.exe ExDeletePagedLookasideList #==ExDeleteNPagedLookasideList ntoskrnl.exe RtlQueryRegistryValues ntoskrnl.exe RtlAppendUnicodeToString ntoskrnl.exe RtlCopyUnicodeString -ntoskrnl.exe IoCreateSymbolicLink undef -ntoskrnl.exe ExInitializePagedLookasideList -ntoskrnl.exe ExInitializeNPagedLookasideList -ntoskrnl.exe FsRtlCopyWrite undef +ntoskrnl.exe ExInitializePagedLookasideList pass +ntoskrnl.exe ExInitializeNPagedLookasideList pass ntoskrnl.exe RtlTimeToTimeFields -ntoskrnl.exe FsRtlRemoveLargeMcbEntry -ntoskrnl.exe FsRtlLookupLargeMcbEntry -ntoskrnl.exe FsRtlAddLargeMcbEntry +ntoskrnl.exe FsRtlRemoveLargeMcbEntry pass +ntoskrnl.exe FsRtlLookupLargeMcbEntry pass +ntoskrnl.exe FsRtlAddLargeMcbEntry pass ntoskrnl.exe RtlFindClearBits ntoskrnl.exe RtlClearBits -ntoskrnl.exe CcZeroData undef -ntoskrnl.exe CcPreparePinWrite undef -ntoskrnl.exe CcPrepareMdlWrite undef -ntoskrnl.exe CcCopyWrite undef ntoskrnl.exe FsRtlCheckLockForWriteAccess -ntoskrnl.exe CcMdlWriteComplete undef ntoskrnl.exe CcCanIWrite -ntoskrnl.exe CcDeferWrite undef -ntoskrnl.exe CcIsThereDirtyData undef ntoskrnl.exe CcPinMappedData -ntoskrnl.exe CcSetAdditionalCacheAttributes undef -ntoskrnl.exe DbgPrintEx undef ntoskrnl.exe ExAcquireFastMutexUnsafe -ntoskrnl.exe ExAcquireSharedWaitForExclusive undef -ntoskrnl.exe ExAllocatePoolWithQuotaTag undef ntoskrnl.exe ExConvertExclusiveToSharedLite -ntoskrnl.exe ExGetExclusiveWaiterCount undef -ntoskrnl.exe ExGetSharedWaiterCount undef ntoskrnl.exe ExIsResourceAcquiredSharedLite ntoskrnl.exe ExLocalTimeToSystemTime ntoskrnl.exe ExReleaseFastMutexUnsafe ntoskrnl.exe ExSystemTimeToLocalTime -ntoskrnl.exe ExfInterlockedAddUlong undef ntoskrnl.exe FsRtlAddToTunnelCache ntoskrnl.exe FsRtlBalanceReads ntoskrnl.exe FsRtlDeleteKeyFromTunnelCache ntoskrnl.exe FsRtlDeleteTunnelCache ntoskrnl.exe FsRtlDissectName ntoskrnl.exe FsRtlFindInTunnelCache -ntoskrnl.exe FsRtlGetNextLargeMcbEntry +ntoskrnl.exe FsRtlGetNextLargeMcbEntry pass ntoskrnl.exe FsRtlInitializeOplock ntoskrnl.exe FsRtlInitializeTunnelCache -ntoskrnl.exe FsRtlIsDbcsInExpression undef -ntoskrnl.exe FsRtlIsTotalDeviceFailure undef ntoskrnl.exe FsRtlLegalAnsiCharacterArray -ntoskrnl.exe FsRtlLookupLastLargeMcbEntryAndIndex +ntoskrnl.exe FsRtlLookupLastLargeMcbEntryAndIndex pass ntoskrnl.exe FsRtlNotifyFullReportChange -ntoskrnl.exe FsRtlNumberOfRunsInLargeMcb -ntoskrnl.exe FsRtlPostPagingFileStackOverflow undef -ntoskrnl.exe FsRtlPostStackOverflow undef -ntoskrnl.exe FsRtlTruncateLargeMcb -ntoskrnl.exe IoBuildAsynchronousFsdRequest undef -ntoskrnl.exe IoCheckEaBufferValidity undef -ntoskrnl.exe IoGetFileObjectGenericMapping undef -ntoskrnl.exe IoIsSystemThread undef -ntoskrnl.exe IoRaiseInformationalHardError undef +ntoskrnl.exe FsRtlNumberOfRunsInLargeMcb pass +ntoskrnl.exe FsRtlTruncateLargeMcb pass ntoskrnl.exe KeAreApcsDisabled ntoskrnl.exe KeCancelTimer -ntoskrnl.exe KeDelayExecutionThread undef ntoskrnl.exe KeInitializeDpc ntoskrnl.exe KeInitializeTimer ntoskrnl.exe KeNumberProcessors ntoskrnl.exe KeRemoveQueueDpc -ntoskrnl.exe KeSetTimer undef ntoskrnl.exe MmUnlockPages ntoskrnl.exe MmUnmapLockedPages -ntoskrnl.exe ProbeForRead undef -ntoskrnl.exe ProbeForWrite undef ntoskrnl.exe RtlAreBitsClear ntoskrnl.exe RtlAreBitsSet ntoskrnl.exe RtlCompareString @@ -256,15 +188,89 @@ ntoskrnl.exe RtlNumberOfClearBits ntoskrnl.exe RtlUpcaseUnicodeStringToCountedOemString ntoskrnl.exe RtlUpperString ntoskrnl.exe RtlxOemStringToUnicodeSize -ntoskrnl.exe SeAccessCheck undef ntoskrnl.exe SeExports +ntoskrnl.exe ZwClose +ntoskrnl.exe ZwOpenKey +ntoskrnl.exe ExfInterlockedInsertTailList + +ntoskrnl.exe ExAllocateFromPagedLookasideList wrap + +ntoskrnl.exe CcMdlReadComplete undef +ntoskrnl.exe MmFlushImageSection undef +ntoskrnl.exe KeBugCheckEx undef +ntoskrnl.exe FsRtlIsNtstatusExpected undef +ntoskrnl.exe FsRtlFastCheckLockForRead undef +ntoskrnl.exe IoRaiseHardError undef +ntoskrnl.exe IoSetDeviceToVerify undef +ntoskrnl.exe IoGetDeviceToVerify undef +ntoskrnl.exe IoUnregisterFileSystem undef +ntoskrnl.exe FsRtlCopyRead undef +ntoskrnl.exe IoReleaseVpbSpinLock undef +ntoskrnl.exe IoAcquireVpbSpinLock undef +ntoskrnl.exe FsRtlNormalizeNtstatus undef +ntoskrnl.exe MmBuildMdlForNonPagedPool undef +ntoskrnl.exe CcWaitForCurrentLazyWriterActivity undef +ntoskrnl.exe FsRtlOplockFsctrl undef +ntoskrnl.exe SeSinglePrivilegeCheck undef +ntoskrnl.exe FsRtlProcessFileLock undef +ntoskrnl.exe FsRtlPrivateLock undef +ntoskrnl.exe FsRtlFastUnlockSingle undef +ntoskrnl.exe FsRtlFastUnlockAllByKey undef +ntoskrnl.exe FsRtlIsNameInExpression undef +ntoskrnl.exe CcMdlRead undef +ntoskrnl.exe CcSetReadAheadGranularity +ntoskrnl.exe FsRtlAllocateFileLock undef +ntoskrnl.exe FsRtlUninitializeOplock undef +ntoskrnl.exe FsRtlFreeFileLock undef +ntoskrnl.exe IoVerifyVolume undef +ntoskrnl.exe _allshr undef +ntoskrnl.exe ExQueueWorkItem undef +ntoskrnl.exe _except_handler3 undef +ntoskrnl.exe _allshl undef +ntoskrnl.exe DbgBreakPoint undef +ntoskrnl.exe FsRtlAllocatePool undef +ntoskrnl.exe CcGetFileObjectFromBcb undef +ntoskrnl.exe FsRtlUninitializeFileLock undef +ntoskrnl.exe FsRtlFastCheckLockForWrite undef +ntoskrnl.exe CcFlushCache undef +ntoskrnl.exe FsRtlGetNextFileLock undef +ntoskrnl.exe MmCanFileBeTruncated undef +ntoskrnl.exe IoDeleteSymbolicLink undef +ntoskrnl.exe IoCreateSymbolicLink undef +ntoskrnl.exe FsRtlCopyWrite undef +ntoskrnl.exe CcZeroData undef +ntoskrnl.exe CcPreparePinWrite undef +ntoskrnl.exe CcPrepareMdlWrite undef +ntoskrnl.exe CcCopyWrite +ntoskrnl.exe CcMdlWriteComplete undef +ntoskrnl.exe CcDeferWrite undef +ntoskrnl.exe CcIsThereDirtyData undef +ntoskrnl.exe CcSetAdditionalCacheAttributes undef +ntoskrnl.exe DbgPrintEx undef +ntoskrnl.exe ExAcquireSharedWaitForExclusive undef +ntoskrnl.exe ExAllocatePoolWithQuotaTag undef +ntoskrnl.exe ExGetExclusiveWaiterCount undef +ntoskrnl.exe ExGetSharedWaiterCount undef +ntoskrnl.exe ExfInterlockedAddUlong undef +ntoskrnl.exe FsRtlIsDbcsInExpression undef +ntoskrnl.exe FsRtlIsTotalDeviceFailure undef +ntoskrnl.exe FsRtlPostPagingFileStackOverflow undef +ntoskrnl.exe FsRtlPostStackOverflow undef +ntoskrnl.exe IoBuildAsynchronousFsdRequest undef +ntoskrnl.exe IoCheckEaBufferValidity undef +ntoskrnl.exe IoGetFileObjectGenericMapping undef +ntoskrnl.exe IoIsSystemThread undef +ntoskrnl.exe IoRaiseInformationalHardError undef +ntoskrnl.exe KeDelayExecutionThread undef +ntoskrnl.exe KeSetTimer undef +ntoskrnl.exe ProbeForRead undef +ntoskrnl.exe ProbeForWrite undef +ntoskrnl.exe SeAccessCheck undef ntoskrnl.exe SeFilterToken undef ntoskrnl.exe SeLockSubjectContext undef ntoskrnl.exe SePrivilegeCheck undef ntoskrnl.exe SeReleaseSubjectContext undef ntoskrnl.exe SeUnlockSubjectContext undef -ntoskrnl.exe ZwClose -ntoskrnl.exe ZwOpenKey ntoskrnl.exe ZwQueryValueKey undef hal.dll KfReleaseSpinLock undef @@ -272,3 +278,83 @@ hal.dll KeGetCurrentIrql hal.dll ExAcquireFastMutex hal.dll ExReleaseFastMutex hal.dll KfAcquireSpinLock undef + +hal.dll HalReportResourceUsage undef +hal.dll HalAllProcessorsStarted undef +hal.dll HalQueryRealTimeClock undef +hal.dll HalAllocateAdapterChannel undef +hal.dll KeStallExecutionProcessor undef +hal.dll HalTranslateBusAddress undef +hal.dll HalGetBusDataByOffset undef +hal.dll HalSetBusDataByOffset undef +hal.dll KeQueryPerformanceCounter undef +hal.dll HalReturnToFirmware undef +hal.dll READ_PORT_UCHAR undef +hal.dll READ_PORT_USHORT undef +hal.dll READ_PORT_ULONG undef +hal.dll WRITE_PORT_UCHAR undef +hal.dll WRITE_PORT_USHORT undef +hal.dll WRITE_PORT_ULONG undef +hal.dll HalInitializeProcessor undef +hal.dll HalCalibratePerformanceCounter undef +hal.dll HalSetRealTimeClock undef +hal.dll HalHandleNMI undef +hal.dll HalBeginSystemInterrupt undef +hal.dll HalEndSystemInterrupt undef +hal.dll KeRaiseIrqlToSynchLevel undef +hal.dll KeAcquireInStackQueuedSpinLockRaiseToSynch undef +hal.dll HalInitSystem undef +hal.dll HalDisableSystemInterrupt undef +hal.dll HalEnableSystemInterrupt undef +hal.dll KeRaiseIrql +hal.dll KeLowerIrql +hal.dll HalClearSoftwareInterrupt undef +hal.dll KeReleaseSpinLock +hal.dll KeAcquireSpinLock +hal.dll ExTryToAcquireFastMutex +hal.dll KeAcquireSpinLockRaiseToSynch undef +hal.dll KeFlushWriteBuffer undef +hal.dll HalProcessorIdle undef +hal.dll HalReadDmaCounter undef +hal.dll IoMapTransfer undef +hal.dll IoFreeMapRegisters undef +hal.dll IoFreeAdapterChannel undef +hal.dll IoFlushAdapterBuffers undef +hal.dll HalFreeCommonBuffer undef +hal.dll HalAllocateCommonBuffer undef +hal.dll HalAllocateCrashDumpRegisters undef +hal.dll HalGetAdapter undef +hal.dll HalSetTimeIncrement undef +hal.dll HalGetEnvironmentVariable undef +hal.dll HalSetEnvironmentVariable undef +hal.dll KfRaiseIrql +hal.dll HalGetInterruptVector undef +hal.dll HalRequestSoftwareInterrupt undef +hal.dll KeAcquireInStackQueuedSpinLock undef +hal.dll KeReleaseInStackQueuedSpinLock undef +hal.dll KeRaiseIrqlToDpcLevel undef +hal.dll HalSystemVectorDispatchEntry undef +hal.dll KfLowerIrql +hal.dll HalStartProfileInterrupt undef +hal.dll HalSetProfileInterval undef +hal.dll HalStopProfileInterrupt undef + +bootvid.dll VidInitialize undef +bootvid.dll VidDisplayString undef +bootvid.dll VidSetTextColor undef +bootvid.dll VidSolidColorFill undef +bootvid.dll VidBitBlt undef +bootvid.dll VidBufferToScreenBlt undef +bootvid.dll VidScreenToBufferBlt undef +bootvid.dll VidResetDisplay undef +bootvid.dll VidCleanUp undef +bootvid.dll VidSetScrollRegion undef + +kdcom.dll KdD0Transition undef +kdcom.dll KdD3Transition undef +kdcom.dll KdRestore undef +kdcom.dll KdReceivePacket undef +kdcom.dll KdDebuggerInitialize0 undef +kdcom.dll KdSave undef +kdcom.dll KdDebuggerInitialize1 undef +kdcom.dll KdSendPacket undef -- 1.8.3.1