Advertisement
Black_Fox

DLL exports

Oct 1st, 2014
239
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Diff 15.27 KB | None | 0 0
  1. Index: dll/ntdll/def/ntdll.spec
  2. ===================================================================
  3. --- dll/ntdll/def/ntdll.spec    (revision 64404)
  4. +++ dll/ntdll/def/ntdll.spec    (working copy)
  5. @@ -55,6 +55,8 @@
  6.  @ stdcall EtwGetTraceLoggerHandle(ptr)
  7.  @ stdcall -stub EtwNotificationRegistrationA(ptr long ptr long long)
  8.  @ stdcall -stub EtwNotificationRegistrationW(ptr long ptr long long)
  9. +@ stub EtwpGetTraceBuffer
  10. +@ stub EtwpSetHWConfigFunction
  11.  @ stdcall EtwQueryAllTracesA(ptr long ptr)
  12.  @ stdcall EtwQueryAllTracesW(ptr long ptr)
  13.  @ stdcall -stub EtwQueryTraceA(double str ptr)
  14. @@ -86,7 +88,7 @@
  15.  @ stdcall LdrAccessOutOfProcessResource(ptr ptr ptr ptr ptr)
  16.  @ stdcall LdrAccessResource(long ptr ptr ptr)
  17.  @ stdcall LdrAddRefDll(long ptr)
  18. -;@ stdcall LdrAlternateResourcesEnabled
  19. +@ stub LdrAlternateResourcesEnabled
  20.  @ stdcall LdrCreateOutOfProcessImage(long ptr ptr ptr)
  21.  @ stdcall LdrDestroyOutOfProcessImage(ptr)
  22.  @ stdcall LdrDisableThreadCalloutsForDll(long)
  23. @@ -95,15 +97,15 @@
  24.  @ stdcall LdrFindCreateProcessManifest(long ptr ptr long ptr) ; 5.1 and 5.2 only
  25.  @ stdcall LdrFindEntryForAddress(ptr ptr)
  26.  @ stdcall LdrFindResourceDirectory_U(long ptr long ptr)
  27. -;@ stdcall LdrFindResourceEx_U ; 5.1 and higher
  28. +@ stub LdrFindResourceEx_U
  29.  @ stdcall LdrFindResource_U(long ptr long ptr)
  30.  @ stdcall LdrFlushAlternateResourceModules()
  31.  @ stdcall LdrGetDllHandle(wstr long ptr ptr)
  32.  @ stdcall LdrGetDllHandleEx(long wstr long ptr ptr)
  33.  @ stdcall LdrGetProcedureAddress(ptr ptr long ptr)
  34. -;@ stdcall LdrHotPatchRoutine
  35. -;@ stdcall LdrInitShimEngineDynamic
  36. +@ stub LdrHotPatchRoutine
  37.  @ stdcall LdrInitializeThunk(long long long long)
  38. +@ stub LdrInitShimEngineDynamic
  39.  @ stdcall LdrLoadAlternateResourceModule(ptr ptr)
  40.  @ stdcall LdrLoadDll(wstr long ptr ptr)
  41.  @ stdcall LdrLockLoaderLock(long ptr ptr)
  42. @@ -110,7 +112,7 @@
  43.  @ stdcall LdrOpenImageFileOptionsKey(ptr long ptr) ; 5.2 SP1 and higher
  44.  @ stdcall LdrProcessRelocationBlock(ptr long ptr long)
  45.  @ stdcall LdrQueryImageFileExecutionOptions(ptr str long ptr long ptr)
  46. -;@ stdcall LdrQueryImageFileExecutionOptionsEx(ptr ptr long ptr long ptr long)
  47. +@ stdcall LdrQueryImageFileExecutionOptionsEx(ptr ptr long ptr long ptr long)
  48.  @ stdcall LdrQueryImageFileKeyOption(ptr ptr long ptr long ptr)
  49.  @ stdcall LdrQueryProcessModuleInformation(ptr long ptr)
  50.  ;@ stdcall LdrSetAppCompatDllRedirectionCallback
  51. Index: dll/win32/lz32/lz32.spec
  52. ===================================================================
  53. --- dll/win32/lz32/lz32.spec    (revision 64404)
  54. +++ dll/win32/lz32/lz32.spec    (working copy)
  55. @@ -2,7 +2,9 @@
  56.  @ stdcall GetExpandedNameA(str ptr) kernel32.GetExpandedNameA
  57.  @ stdcall GetExpandedNameW(wstr ptr) kernel32.GetExpandedNameW
  58.  @ stdcall LZClose(long) kernel32.LZClose
  59. +@ stdcall LZCloseFile(long) kernel32.LZCloseFile
  60.  @ stdcall LZCopy(long long) kernel32.LZCopy
  61. +@ stdcall LZCreateFileW(ptr long long long ptr) kernel32.LZCreateFileW
  62.  @ stdcall LZDone() kernel32.LZDone
  63.  @ stdcall LZInit(long) kernel32.LZInit
  64.  @ stdcall LZOpenFileA(str ptr long) kernel32.LZOpenFileA
  65. Index: dll/win32/rpcrt4/rpcrt4.spec
  66. ===================================================================
  67. --- dll/win32/rpcrt4/rpcrt4.spec    (revision 64404)
  68. +++ dll/win32/rpcrt4/rpcrt4.spec    (working copy)
  69. @@ -1,6 +1,6 @@
  70.  @ stdcall CreateProxyFromTypeInfo(ptr ptr ptr ptr ptr)
  71.  @ stdcall CreateStubFromTypeInfo(ptr ptr ptr ptr)
  72. -# I_RpcServerTurnOnOffKeepalives
  73. +@ stub I_RpcServerTurnOnOffKeepalives
  74.  @ stdcall CStdStubBuffer_AddRef(ptr)
  75.  @ stdcall CStdStubBuffer_Connect(ptr ptr)
  76.  @ stdcall CStdStubBuffer_CountRefs(ptr)
  77. @@ -12,8 +12,8 @@
  78.  @ stdcall CStdStubBuffer_QueryInterface(ptr ptr ptr)
  79.  @ stdcall DceErrorInqTextA (long ptr)
  80.  @ stdcall DceErrorInqTextW (long ptr)
  81. -# DllGetClassObject
  82. -# DllInstall
  83. +@ stub DllGetClassObject
  84. +@ stub DllInstall
  85.  @ stdcall -private DllRegisterServer()
  86.  @ stub GlobalMutexClearExternal
  87.  @ stub GlobalMutexRequestExternal
  88. @@ -27,13 +27,13 @@
  89.  @ stub I_RpcBCacheAllocate
  90.  @ stub I_RpcBCacheFree
  91.  @ stub I_RpcBindingCopy
  92. -# I_RpcBindingHandleToAsyncHandle
  93. +@ stub I_RpcBindingHandleToAsyncHandle
  94.  @ stub I_RpcBindingInqConnId
  95.  @ stub I_RpcBindingInqDynamicEndPoint
  96.  @ stub I_RpcBindingInqDynamicEndPointA
  97.  @ stub I_RpcBindingInqDynamicEndPointW
  98.  @ stub I_RpcBindingInqLocalClientPID # wxp
  99. -# I_RpcBindingInqMarshalledTargetInfo
  100. +@ stub I_RpcBindingInqMarshalledTargetInfo
  101.  @ stub I_RpcBindingInqSecurityContext
  102.  @ stdcall I_RpcBindingInqTransportType(ptr ptr)
  103.  @ stub I_RpcBindingInqWireIdForSnego
  104. @@ -55,8 +55,8 @@
  105.  @ stub I_RpcIfInqTransferSyntaxes
  106.  @ stub I_RpcLogEvent
  107.  @ stdcall I_RpcMapWin32Status(long)
  108. -# I_RpcNDRCGetWireRepresentation
  109. -# I_RpcNDRSContextEmergencyCleanup
  110. +@ stub I_RpcNDRCGetWireRepresentation
  111. +@ stub I_RpcNDRSContextEmergencyCleanup
  112.  @ stdcall I_RpcNegotiateTransferSyntax(ptr)
  113.  @ stub I_RpcNsBindingSetEntryName
  114.  @ stub I_RpcNsBindingSetEntryNameA
  115. @@ -68,18 +68,18 @@
  116.  @ stub I_RpcProxyNewConnection # wxp
  117.  @ stub I_RpcReallocPipeBuffer
  118.  @ stdcall I_RpcReceive(ptr)
  119. -# I_RpcRecordCalloutFailure
  120. -# I_RpcReplyToClientWithStatus
  121. +@ stub I_RpcRecordCalloutFailure
  122. +@ stub I_RpcReplyToClientWithStatus
  123.  @ stub I_RpcRequestMutex
  124. -# I_RpcSNCHOption
  125. +@ stub I_RpcSNCHOption
  126.  @ stdcall I_RpcSend(ptr)
  127.  @ stdcall I_RpcSendReceive(ptr)
  128.  @ stub I_RpcServerAllocateIpPort
  129. -# I_RpcServerCheckClientRestriction
  130. +@ stub I_RpcServerCheckClientRestriction
  131.  @ stub I_RpcServerInqAddressChangeFn
  132.  @ stub I_RpcServerInqLocalConnAddress # wxp
  133.  @ stub I_RpcServerInqTransportType
  134. -# I_RpcServerIsClientDisconnected
  135. +@ stub I_RpcServerIsClientDisconnected
  136.  @ stub I_RpcServerRegisterForwardFunction
  137.  @ stub I_RpcServerSetAddressChangeFn
  138.  @ stub I_RpcServerUseProtseq2A
  139. @@ -86,7 +86,7 @@
  140.  @ stub I_RpcServerUseProtseq2W
  141.  @ stub I_RpcServerUseProtseqEp2A
  142.  @ stub I_RpcServerUseProtseqEp2W
  143. -# I_RpcSessionStrictContextHandle
  144. +@ stub I_RpcSessionStrictContextHandle
  145.  @ stub I_RpcSetAsyncHandle
  146.  @ stub I_RpcSsDontSerializeContext
  147.  @ stub I_RpcSystemFunction001 # wxp (oh, brother!)
  148. @@ -179,7 +179,7 @@
  149.  @ stdcall NdrCorrelationFree(ptr)
  150.  @ stdcall NdrCorrelationInitialize(ptr ptr long long)
  151.  @ stdcall NdrCorrelationPass(ptr)
  152. -# NdrCreateServerInterfaceFromStub
  153. +@ stub NdrCreateServerInterfaceFromStub
  154.  @ stub NdrDcomAsyncClientCall
  155.  @ stub NdrDcomAsyncStubCall
  156.  @ stdcall NdrDllCanUnloadNow(ptr)
  157. @@ -202,7 +202,7 @@
  158.  @ stdcall NdrFullPointerQueryPointer(ptr ptr long ptr)
  159.  @ stdcall NdrFullPointerQueryRefId(ptr long long ptr)
  160.  @ stdcall NdrFullPointerXlatFree(ptr)
  161. -@ stdcall NdrFullPointerXlatInit(long long)
  162. +@ stdcall NdrFullPointerXlatInit(long long)
  163.  @ stdcall NdrGetBuffer(ptr long ptr)
  164.  @ stub NdrGetDcomProtocolVersion
  165.  @ stub NdrGetSimpleTypeBufferAlignment # wxp
  166. @@ -371,7 +371,7 @@
  167.  @ stub RpcErrorClearInformation # wxp
  168.  @ stdcall RpcErrorEndEnumeration(ptr)
  169.  @ stdcall RpcErrorGetNextRecord(ptr long ptr)
  170. -# RpcErrorGetNumberOfRecords
  171. +@ stub RpcErrorGetNumberOfRecords
  172.  @ stdcall RpcErrorLoadErrorInfo(ptr long ptr)
  173.  @ stub RpcErrorResetEnumeration # wxp
  174.  @ stdcall RpcErrorSaveErrorInfo(ptr ptr ptr)
  175. @@ -378,7 +378,7 @@
  176.  @ stdcall RpcErrorStartEnumeration(ptr)
  177.  @ stub RpcFreeAuthorizationContext # wxp
  178.  @ stdcall RpcGetAsyncCallStatus(ptr) RpcAsyncGetCallStatus
  179. -# RpcGetAuthorizationContextForClient
  180. +@ stub RpcGetAuthorizationContextForClient
  181.  @ stub RpcIfIdVectorFree
  182.  @ stub RpcIfInqId
  183.  @ stdcall RpcImpersonateClient(ptr)
  184. Index: dll/win32/schannel/schannel.spec
  185. ===================================================================
  186. --- dll/win32/schannel/schannel.spec    (revision 64404)
  187. +++ dll/win32/schannel/schannel.spec    (working copy)
  188. @@ -1,20 +1,20 @@
  189. -@ stdcall AcceptSecurityContext(ptr ptr ptr long long ptr ptr ptr ptr) schan_AcceptSecurityContext
  190. -@ stdcall AcquireCredentialsHandleA(str str long ptr ptr ptr ptr ptr ptr) schan_AcquireCredentialsHandleA
  191. -@ stdcall AcquireCredentialsHandleW(wstr wstr long ptr ptr ptr ptr ptr ptr) schan_AcquireCredentialsHandleW
  192. -@ stdcall ApplyControlToken(ptr ptr) schan_ApplyControlToken
  193. +@ stdcall AcceptSecurityContext(ptr ptr ptr long long ptr ptr ptr ptr) secur32.AcceptSecurityContext
  194. +@ stdcall AcquireCredentialsHandleA(str str long ptr ptr ptr ptr ptr ptr) secur32.AcquireCredentialsHandleA
  195. +@ stdcall AcquireCredentialsHandleW(wstr wstr long ptr ptr ptr ptr ptr ptr) secur32.AcquireCredentialsHandleW
  196. +@ stdcall ApplyControlToken(ptr ptr) secur32.ApplyControlToken
  197.  @ stub CloseSslPerformanceData
  198.  @ stub CollectSslPerformanceData
  199. -@ stdcall CompleteAuthToken(ptr ptr) schan_CompleteAuthToken
  200. -@ stdcall DeleteSecurityContext(ptr) schan_DeleteSecurityContext
  201. -@ stdcall EnumerateSecurityPackagesA(ptr ptr) schan_EnumerateSecurityPackagesA
  202. -@ stdcall EnumerateSecurityPackagesW(ptr ptr) schan_EnumerateSecurityPackagesW
  203. -@ stdcall FreeContextBuffer(ptr) schan_FreeContextBuffer
  204. -@ stdcall FreeCredentialsHandle(ptr) schan_FreeCredentialsHandle
  205. -@ stdcall ImpersonateSecurityContext(ptr) schan_ImpersonateSecurityContext
  206. -@ stdcall InitSecurityInterfaceA() schan_InitSecurityInterfaceA
  207. -@ stdcall InitSecurityInterfaceW() schan_InitSecurityInterfaceW
  208. -@ stdcall InitializeSecurityContextA(ptr ptr str long long long ptr long ptr ptr ptr ptr) schan_InitializeSecurityContextA
  209. -@ stdcall InitializeSecurityContextW(ptr ptr wstr long long long ptr long ptr ptr ptr ptr) schan_InitializeSecurityContextW
  210. +@ stdcall CompleteAuthToken(ptr ptr) secur32.CompleteAuthToken
  211. +@ stdcall DeleteSecurityContext(ptr) secur32.DeleteSecurityContext
  212. +@ stdcall EnumerateSecurityPackagesA(ptr ptr) secur32.EnumerateSecurityPackagesA
  213. +@ stdcall EnumerateSecurityPackagesW(ptr ptr) secur32.EnumerateSecurityPackagesW
  214. +@ stdcall FreeContextBuffer(ptr) secur32.FreeContextBuffer
  215. +@ stdcall FreeCredentialsHandle(ptr) secur32.FreeCredentialsHandle
  216. +@ stdcall ImpersonateSecurityContext(ptr) secur32.ImpersonateSecurityContext
  217. +@ stdcall InitSecurityInterfaceA() secur32.InitSecurityInterfaceA
  218. +@ stdcall InitSecurityInterfaceW() secur32.InitSecurityInterfaceW
  219. +@ stdcall InitializeSecurityContextA(ptr ptr str long long long ptr long ptr ptr ptr ptr) secur32.InitializeSecurityContextA
  220. +@ stdcall InitializeSecurityContextW(ptr ptr wstr long long long ptr long ptr ptr ptr ptr) secur32.InitializeSecurityContextW
  221.  @ stdcall MakeSignature(ptr long ptr long) secur32.MakeSignature
  222.  @ stub OpenSslPerformanceData
  223.  @ stdcall QueryContextAttributesA(ptr long ptr) secur32.QueryContextAttributesA
  224. Index: dll/win32/secur32/secur32.spec
  225. ===================================================================
  226. --- dll/win32/secur32/secur32.spec  (revision 64404)
  227. +++ dll/win32/secur32/secur32.spec  (working copy)
  228. @@ -54,6 +54,7 @@
  229.  @ stub SaslAcceptSecurityContext
  230.  @ stub SaslEnumerateProfilesA
  231.  @ stub SaslEnumerateProfilesW
  232. +@ stub SaslGetContextOption
  233.  @ stub SaslGetProfilePackageA
  234.  @ stub SaslGetProfilePackageW
  235.  @ stub SaslIdentifyPackageA
  236. @@ -60,16 +61,20 @@
  237.  @ stub SaslIdentifyPackageW
  238.  @ stub SaslInitializeSecurityContextA
  239.  @ stub SaslInitializeSecurityContextW
  240. +@ stub SaslSetContextOption
  241.  @ stdcall SealMessage(ptr long ptr long) EncryptMessage
  242.  @ stub SecCacheSspiPackages
  243.  @ stub SecDeleteUserModeContext
  244. -@ stub SecGetLocaleSpecificEncryptionRules # not on win32k3 x64
  245. +@ stub SecGetLocaleSpecificEncryptionRules # not on win32k3 x64 or SP1
  246.  @ stub SecInitUserModeContext
  247.  @ stub SecpFreeMemory
  248. +@ stub SecpSetIPAddress
  249.  @ stub SecpTranslateName
  250.  @ stub SecpTranslateNameEx
  251.  @ stdcall SetContextAttributesA(ptr long ptr long)
  252.  @ stdcall SetContextAttributesW(ptr long ptr long)
  253. +@ stub SetCredentialsAttributesA
  254. +@ stub SetCredentialsAttributesW
  255.  @ stdcall TranslateNameA(str long long ptr ptr)
  256.  @ stdcall TranslateNameW(wstr long long ptr ptr)
  257.  @ stdcall UnsealMessage(ptr ptr long ptr) DecryptMessage
  258. Index: dll/win32/wmi/wmi.spec
  259. ===================================================================
  260. --- dll/win32/wmi/wmi.spec  (revision 64404)
  261. +++ dll/win32/wmi/wmi.spec  (working copy)
  262. @@ -1,25 +1,25 @@
  263.  @ stdcall CloseTrace(int64) advapi32.CloseTrace
  264. -@ stdcall ControlTraceA(int64 str ptr long) advapi32.ControlTraceA
  265. -@ stdcall ControlTraceW(int64 wstr ptr long) advapi32.ControlTraceW
  266. -@ stdcall CreateTraceInstanceId(long ptr) advapi32.CreateTraceInstanceId
  267. -@ stdcall EnableTrace(long long long ptr int64) advapi32.EnableTrace
  268. -@ stdcall GetTraceEnableFlags(int64) advapi32.GetTraceEnableFlags
  269. -@ stdcall GetTraceEnableLevel(int64) advapi32.GetTraceEnableLevel
  270. -@ stdcall -ret64 GetTraceLoggerHandle(ptr) advapi32.GetTraceLoggerHandle
  271. +@ stdcall ControlTraceA(int64 str ptr long) ntdll.EtwControlTraceA
  272. +@ stdcall ControlTraceW(int64 wstr ptr long) ntdll.EtwControlTraceW
  273. +@ stdcall CreateTraceInstanceId(long ptr) ntdll.EtwCreateTraceInstanceId
  274. +@ stdcall EnableTrace(long long long ptr int64) ntdll.EtwEnableTrace
  275. +@ stdcall GetTraceEnableFlags(int64) ntdll.EtwGetTraceEnableFlags
  276. +@ stdcall GetTraceEnableLevel(int64) ntdll.EtwGetTraceEnableLevel
  277. +@ stdcall -ret64 GetTraceLoggerHandle(ptr) ntdll.EtwGetTraceLoggerHandle
  278.  @ stdcall -ret64 OpenTraceA(ptr) advapi32.OpenTraceA
  279.  @ stdcall -ret64 OpenTraceW(ptr) advapi32.OpenTraceW
  280.  @ stdcall ProcessTrace(ptr long ptr ptr) advapi32.ProcessTrace
  281. -@ stdcall QueryAllTracesA(ptr long ptr) advapi32.QueryAllTracesA
  282. -@ stdcall QueryAllTracesW(ptr long ptr) advapi32.QueryAllTracesW
  283. -@ stdcall RegisterTraceGuidsA(ptr ptr ptr long ptr str str ptr) advapi32.RegisterTraceGuidsA
  284. -@ stdcall RegisterTraceGuidsW(ptr ptr ptr long ptr wstr wstr ptr) advapi32.RegisterTraceGuidsW
  285. +@ stdcall QueryAllTracesA(ptr long ptr) ntdll.EtwQueryAllTracesA
  286. +@ stdcall QueryAllTracesW(ptr long ptr) ntdll.EtwQueryAllTracesW
  287. +@ stdcall RegisterTraceGuidsA(ptr ptr ptr long ptr str str ptr) ntdll.EtwRegisterTraceGuidsA
  288. +@ stdcall RegisterTraceGuidsW(ptr ptr ptr long ptr wstr wstr ptr) ntdll.EtwRegisterTraceGuidsW
  289.  @ stdcall RemoveTraceCallback(ptr) advapi32.RemoveTraceCallback
  290.  @ stdcall SetTraceCallback(ptr ptr) advapi32.SetTraceCallback
  291. -@ stdcall StartTraceA(ptr str ptr) advapi32.StartTraceA
  292. -@ stdcall StartTraceW(ptr wstr ptr) advapi32.StartTraceW
  293. -@ stdcall TraceEvent(int64 ptr) advapi32.TraceEvent
  294. -@ stdcall TraceEventInstance(int64 ptr ptr ptr) advapi32.TraceEventInstance
  295. -@ stdcall UnregisterTraceGuids(int64) advapi32.UnregisterTraceGuids
  296. +@ stdcall StartTraceA(ptr str ptr) ntdll.EtwStartTraceA
  297. +@ stdcall StartTraceW(ptr wstr ptr) ntdll.EtwStartTraceW
  298. +@ stdcall TraceEvent(int64 ptr) ntdll.EtwTraceEvent
  299. +@ stdcall TraceEventInstance(int64 ptr ptr ptr) ntdll.EtwTraceEventInstance
  300. +@ stdcall UnregisterTraceGuids(int64) ntdll.EtwUnregisterTraceGuids
  301.  @ stdcall WmiCloseBlock() advapi32.WmiCloseBlock
  302.  @ stdcall WmiDevInstToInstanceNameA() advapi32.WmiDevInstToInstanceNameA
  303.  @ stdcall WmiDevInstToInstanceNameW() advapi32.WmiDevInstToInstanceNameW
  304. @@ -31,8 +31,8 @@
  305.  @ stdcall WmiFreeBuffer() advapi32.WmiFreeBuffer
  306.  @ stdcall WmiMofEnumerateResourcesA() advapi32.WmiMofEnumerateResourcesA
  307.  @ stdcall WmiMofEnumerateResourcesW() advapi32.WmiMofEnumerateResourcesW
  308. -@ stdcall WmiNotificationRegistrationA() advapi32.WmiNotificationRegistrationA
  309. -@ stdcall WmiNotificationRegistrationW() advapi32.WmiNotificationRegistrationW
  310. +@ stdcall WmiNotificationRegistrationA() ntdll.EtwWmiNotificationRegistrationA
  311. +@ stdcall WmiNotificationRegistrationW() ntdll.EtwWmiNotificationRegistrationW
  312.  @ stdcall WmiOpenBlock() advapi32.WmiOpenBlock
  313.  @ stdcall WmiQueryAllDataA() advapi32.WmiQueryAllDataA
  314.  @ stdcall WmiQueryAllDataW() advapi32.WmiQueryAllDataW
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement