+SeAccessCheck()

+SePrivilegeCheck()
+SeAuditingFileEvents()
+CcRemapBcb()
+KeAcquireInStackQueuedSpinLock()
+KeReleaseInStackQueuedSpinLock()

diff --git a/src/libcaptive/ke/exports.captivesym b/src/libcaptive/ke/exports.captivesym
index 0cd2c84..c3f878b 100644 (file)
--- a/src/libcaptive/ke/exports.captivesym
+++ b/src/libcaptive/ke/exports.captivesym
@@ -280,10 +280,10 @@ ntoskrnl.exe      KeDelayExecutionThread  undef
 ntoskrnl.exe   KeSetTimer
 ntoskrnl.exe   ProbeForRead    undef
 ntoskrnl.exe   ProbeForWrite   undef
-ntoskrnl.exe   SeAccessCheck   undef
+ntoskrnl.exe   SeAccessCheck
 ntoskrnl.exe   SeFilterToken   undef
 ntoskrnl.exe   SeLockSubjectContext
-ntoskrnl.exe   SePrivilegeCheck        undef
+ntoskrnl.exe   SePrivilegeCheck
 ntoskrnl.exe   SeReleaseSubjectContext
 ntoskrnl.exe   SeUnlockSubjectContext
 ntoskrnl.exe   ZwQueryValueKey undef
@@ -322,6 +322,8 @@ ntoskrnl.exe        RtlFindClearRuns        pass
 ntoskrnl.exe   RtlFindLastBackwardRunClear     pass
 ntoskrnl.exe   ObQueryNameString
 ntoskrnl.exe   RtlLengthSid
+ntoskrnl.exe   SeAuditingFileEvents
+ntoskrnl.exe   CcRemapBcb
 
 hal.dll        KfReleaseSpinLock
 hal.dll        KeGetCurrentIrql
@@ -379,8 +381,8 @@ hal.dll     HalSetEnvironmentVariable       undef
 hal.dll        KfRaiseIrql
 hal.dll        HalGetInterruptVector   undef
 hal.dll        HalRequestSoftwareInterrupt     undef
-hal.dll        KeAcquireInStackQueuedSpinLock  undef
-hal.dll        KeReleaseInStackQueuedSpinLock  undef
+hal.dll        KeAcquireInStackQueuedSpinLock
+hal.dll        KeReleaseInStackQueuedSpinLock
 hal.dll        KeRaiseIrqlToDpcLevel   undef
 hal.dll        HalSystemVectorDispatchEntry    undef
 hal.dll        KfLowerIrql