Import table
advapi32.dll
CloseServiceHandle, RegQueryValueExW, RegSetValueExW, RegCloseKey, OpenSCManagerW, OpenServiceW, CreateServiceW, ChangeServiceConfigW, RegisterEventSourceA, ReportEventA, DeregisterEventSource, GetTokenInformation, IsValidSid, GetLengthSid, ConvertSidToStringSidW, CopySid, RegFlushKey, RegQueryInfoKeyW, RegDeleteKeyW, RegEnumValueW, RegEnumKeyExW, RegDeleteValueW, AdjustTokenPrivileges, LookupPrivilegeValueW, OpenProcessToken, DeleteService, RegCreateKeyExW, RegOpenKeyExW, SetSecurityInfo, GetSidSubAuthority, GetSidIdentifierAuthority, RegConnectRegistryW, GetSidSubAuthorityCount
crypt32.dll
CryptQueryObject, CertFindCertificateInStore, CertCloseStore, CertGetNameStringW, CryptMsgGetParam, CryptMsgClose, CertFreeCertificateContext
gdi32.dll
GetBitmapBits, CreateDCA, CreateCompatibleDC, CreateCompatibleBitmap, SelectObject, GetObjectA, BitBlt, DeleteObject, DeleteDC, GetDeviceCaps
kernel32.dll
DeleteFileW, CreateMutexW, ReleaseMutex, GetWindowsDirectoryW, GetModuleFileNameW, ExpandEnvironmentStringsW, FindClose, WideCharToMultiByte, QueryPerformanceCounter, GetLogicalDriveStringsW, QueryDosDeviceW, GetVersionExW, SetFilePointer, SetEndOfFile, CreateFileA, WriteConsoleW, MultiByteToWideChar, GetLocalTime, LeaveCriticalSection, GlobalMemoryStatus, EnterCriticalSection, DeleteCriticalSection, InitializeCriticalSection, FormatMessageW, GetVersionExA, LoadLibraryA, GetTickCount, GetStdHandle, GetFileType, GetVersion, GetSystemInfo, LocalFree, CreateFileW, GetModuleHandleW, GetLastError, MoveFileExW, HeapValidate, GetProcessHeaps, GetCurrentProcessId, GetCurrentProcess, WriteFile, FlushFileBuffers, LoadLibraryW, TerminateThread, GetQueuedCompletionStatus, Sleep, CreateThread, CreateIoCompletionPort, DeviceIoControl, GetOverlappedResult, CancelIo, WaitForSingleObject, CreateEventW, ReadFile, GetFileSize, CloseHandle, GetConsoleOutputCP, WriteConsoleA, SetEnvironmentVariableA, CompareStringW, CompareStringA, GetStringTypeW, SetLastError, GetProcAddress, InterlockedDecrement, InterlockedIncrement, OutputDebugStringW, FreeLibrary, GetCurrentThreadId, GetStringTypeA, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapAlloc, HeapFree, VirtualProtect, VirtualAlloc, GetModuleHandleA, VirtualQuery, GetCommandLineA, GetProcessHeap, HeapReAlloc, GetSystemTimeAsFileTime, RaiseException, RtlUnwind, GetModuleFileNameA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, HeapSize, ExitProcess, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, LCMapStringA, LCMapStringW, VirtualFree, HeapDestroy, HeapCreate, SetHandleCount, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetConsoleCP, GetConsoleMode, SetStdHandle, GetLocaleInfoA, DllMain
shell32.dll
SHGetFolderPathW, SHGetSpecialFolderPathW, SHGetFileInfoW, SHGetMalloc, SHGetPathFromIDListW, SHGetSpecialFolderLocation, SHAppBarMessage
user32.dll
MessageBoxA, GetUserObjectInformationW, GetProcessWindowStation, GetDesktopWindow, ReleaseDC, SystemParametersInfoW, GetDC, GetWindowRect, FindWindowExA, GetSystemMetrics
userenv.dll
UnloadUserProfile
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW
wintrust.dll
WinVerifyTrust
Export table
DisableKDSDriver
EnableKDSDriver
FixCorruptFltMgrValue
GetIKernel
GetKDSProductEvents
InstallKDSDriver
KDSDriverInstallStatus
ResetKDSProductEvents
SetKDSProductEvents
StartKDSDriver
UninstallKDSDriver
