KeyboardFilterWmi.dll

Description: Keyboard Filter WMI Provider

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 789a243d9bee334513c2e2444b33e1a4

File Size: 56.4 KB

Uploaded At: Dec. 1, 2025, 8:31 a.m.

Views: 14

Exported Functions

  • BlockAdminKeyboard (Ordinal: 1, Address: 0x68d0)
  • BlockPredefinedKey (Ordinal: 2, Address: 0x5be0)
  • DllCanUnloadNow (Ordinal: 3, Address: 0x4f80)
  • DllGetClassObject (Ordinal: 4, Address: 0x4fb0)
  • DllMain (Ordinal: 5, Address: 0x4d40)
  • DllRegisterServer (Ordinal: 6, Address: 0x4ef0)
  • DllUnregisterServer (Ordinal: 7, Address: 0x4f40)
  • GetProviderClassID (Ordinal: 8, Address: 0x4d90)
  • IsAdminUnblocked (Ordinal: 9, Address: 0x6900)
  • IsPredefinedKeyBlocked (Ordinal: 10, Address: 0x5c00)
  • KBF_DisableService (Ordinal: 11, Address: 0x7d70)
  • KBF_EnableService (Ordinal: 12, Address: 0x7d50)
  • KBF_QueryService (Ordinal: 13, Address: 0x7d90)
  • MI_Main (Ordinal: 14, Address: 0x5060)

Imported DLLs & Functions

ADVAPI32.dll
  • RegCloseKey (Address: 0x1000c018)
  • RegCreateKeyExW (Address: 0x1000c008)
  • RegDeleteValueW (Address: 0x1000c014)
  • RegEnumValueW (Address: 0x1000c004)
  • RegGetValueW (Address: 0x1000c00c)
  • RegNotifyChangeKeyValue (Address: 0x1000c000)
  • RegOpenKeyExW (Address: 0x1000c01c)
  • RegQueryValueExW (Address: 0x1000c020)
  • RegSetValueExW (Address: 0x1000c010)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1000c0f0)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateStringReference (Address: 0x1000c0f8)
KERNEL32.dll
  • CloseHandle (Address: 0x1000c0bc)
  • CreateMutexExW (Address: 0x1000c0c8)
  • CreateSemaphoreExW (Address: 0x1000c08c)
  • DebugBreak (Address: 0x1000c0d8)
  • DeleteCriticalSection (Address: 0x1000c030)
  • DisableThreadLibraryCalls (Address: 0x1000c078)
  • EnterCriticalSection (Address: 0x1000c02c)
  • FindResourceExW (Address: 0x1000c040)
  • FormatMessageW (Address: 0x1000c0ac)
  • FreeLibrary (Address: 0x1000c080)
  • GetCurrentProcess (Address: 0x1000c054)
  • GetCurrentProcessId (Address: 0x1000c0cc)
  • GetCurrentThreadId (Address: 0x1000c06c)
  • GetLastError (Address: 0x1000c074)
  • GetModuleFileNameA (Address: 0x1000c088)
  • GetModuleHandleExW (Address: 0x1000c09c)
  • GetModuleHandleW (Address: 0x1000c0d4)
  • GetProcAddress (Address: 0x1000c07c)
  • GetProcessHeap (Address: 0x1000c0d0)
  • GetSystemDirectoryW (Address: 0x1000c070)
  • GetSystemTimeAsFileTime (Address: 0x1000c060)
  • GetTickCount (Address: 0x1000c064)
  • HeapAlloc (Address: 0x1000c0c4)
  • HeapDestroy (Address: 0x1000c034)
  • HeapFree (Address: 0x1000c090)
  • HeapReAlloc (Address: 0x1000c038)
  • HeapSize (Address: 0x1000c03c)
  • InitializeCriticalSection (Address: 0x1000c068)
  • IsDebuggerPresent (Address: 0x1000c0dc)
  • LeaveCriticalSection (Address: 0x1000c028)
  • LoadLibraryExW (Address: 0x1000c084)
  • LoadResource (Address: 0x1000c044)
  • LockResource (Address: 0x1000c0a4)
  • OpenSemaphoreW (Address: 0x1000c0b8)
  • OutputDebugStringW (Address: 0x1000c0b0)
  • QueryPerformanceCounter (Address: 0x1000c05c)
  • RaiseException (Address: 0x1000c0c0)
  • ReleaseMutex (Address: 0x1000c0a8)
  • ReleaseSemaphore (Address: 0x1000c098)
  • SetLastError (Address: 0x1000c094)
  • SetUnhandledExceptionFilter (Address: 0x1000c050)
  • SizeofResource (Address: 0x1000c0e0)
  • Sleep (Address: 0x1000c048)
  • TerminateProcess (Address: 0x1000c058)
  • UnhandledExceptionFilter (Address: 0x1000c04c)
  • WaitForSingleObject (Address: 0x1000c0a0)
  • WaitForSingleObjectEx (Address: 0x1000c0b4)
msvcrt.dll
  • __dllonexit (Address: 0x1000c144)
  • _amsg_exit (Address: 0x1000c134)
  • _except_handler4_common (Address: 0x1000c14c)
  • _initterm (Address: 0x1000c138)
  • _lock (Address: 0x1000c13c)
  • _ltow_s (Address: 0x1000c150)
  • _onexit (Address: 0x1000c148)
  • _purecall (Address: 0x1000c110)
  • _unlock (Address: 0x1000c140)
  • _vscwprintf (Address: 0x1000c104)
  • _vsnwprintf (Address: 0x1000c120)
  • _wcsicmp (Address: 0x1000c128)
  • _wcsnicmp (Address: 0x1000c114)
  • _wtoi (Address: 0x1000c124)
  • _XcptFilter (Address: 0x1000c130)
  • free (Address: 0x1000c158)
  • iswspace (Address: 0x1000c118)
  • malloc (Address: 0x1000c12c)
  • memcpy_s (Address: 0x1000c11c)
  • memmove_s (Address: 0x1000c154)
  • memset (Address: 0x1000c160)
  • swprintf_s (Address: 0x1000c15c)
  • vswprintf_s (Address: 0x1000c100)
  • wcsrchr (Address: 0x1000c10c)
  • wcstoul (Address: 0x1000c108)
USER32.dll
  • UnregisterClassA (Address: 0x1000c0e8)