wbiosrvc.dll

v10.0.19041.5915 64-bit Windows NT Analyzed
Description
Windows Biometric Service
Authors
© Microsoft Corporation. All rights reserved.
File size
865.5 KB
Uploaded
2025-12-01 07:42
Views
81
SHA-256
d4e4cc8b84e8d1f90835a3b73075724f

Exported functions 5

OutOfProcessExceptionEventCallback #1 · 0x60b0
OutOfProcessExceptionEventDebuggerLaunchCallback #2 · 0x6430
OutOfProcessExceptionEventSignatureCallback #3 · 0x6170
ServiceMain #4 · 0x5520
SvchostPushServiceGlobals #5 · 0x5510

Imported DLLs & functions 344

api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x1800a96a0
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1800a96b0
IsDebuggerPresent 0x1800a96c0
OutputDebugStringW 0x1800a96b8
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x1800a96d0
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x1800a96e0
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x1800a9700
SetLastError 0x1800a96f0
SetUnhandledExceptionFilter 0x1800a9708
UnhandledExceptionFilter 0x1800a96f8
api-ms-win-core-file-l1-1-0.dll 9
CompareFileTime 0x1800a9740
CreateDirectoryW 0x1800a9728
CreateFileW 0x1800a9718
FindClose 0x1800a9720
FindFirstFileW 0x1800a9738
FindNextFileW 0x1800a9730
GetFileSize 0x1800a9750
ReadFile 0x1800a9758
WriteFile 0x1800a9748
api-ms-win-core-handle-l1-1-0.dll 2
CloseHandle 0x1800a9770
DuplicateHandle 0x1800a9768
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1800a9790
HeapAlloc 0x1800a9788
HeapFree 0x1800a9780
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x1800a97a8
LocalFree 0x1800a97a0
api-ms-win-core-heap-obsolete-l1-1-0.dll 1
LocalSize 0x1800a97b8
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x1800a97c8
api-ms-win-core-io-l1-1-0.dll 6
CancelIoEx 0x1800a97e0
CreateIoCompletionPort 0x1800a97e8
DeviceIoControl 0x1800a97f8
GetOverlappedResult 0x1800a9800
GetQueuedCompletionStatus 0x1800a97d8
PostQueuedCompletionStatus 0x1800a97f0
api-ms-win-core-io-l1-1-1.dll 1
CancelSynchronousIo 0x1800a9810
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
WTSGetActiveConsoleSessionId 0x1800a9820
api-ms-win-core-libraryloader-l1-2-0.dll 8
FreeLibrary 0x1800a9848
FreeLibraryAndExitThread 0x1800a9860
GetModuleFileNameA 0x1800a9858
GetModuleHandleExW 0x1800a9840
GetModuleHandleW 0x1800a9830
GetProcAddress 0x1800a9868
LoadLibraryExW 0x1800a9838
LoadStringW 0x1800a9850
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x1800a9878
api-ms-win-core-memory-l1-1-0.dll 1
ReadProcessMemory 0x1800a9888
api-ms-win-core-namedpipe-l1-1-0.dll 1
CreatePipe 0x1800a9898
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x1800a98a8
api-ms-win-core-processthreads-l1-1-0.dll 12
CreateThread 0x1800a98e8
GetCurrentProcess 0x1800a98f8
GetCurrentProcessId 0x1800a98b8
GetCurrentThread 0x1800a9900
GetCurrentThreadId 0x1800a98f0
GetPriorityClass 0x1800a98d0
OpenProcessToken 0x1800a9910
OpenThreadToken 0x1800a98c8
ProcessIdToSessionId 0x1800a98d8
ResumeThread 0x1800a98e0
SetPriorityClass 0x1800a98c0
TerminateProcess 0x1800a9908
api-ms-win-core-processthreads-l1-1-1.dll 2
IsProcessorFeaturePresent 0x1800a9928
OpenProcess 0x1800a9920
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800a9938
api-ms-win-core-psapi-l1-1-0.dll 2
K32EnumProcesses 0x1800a9950
QueryFullProcessImageNameW 0x1800a9948
api-ms-win-core-registry-l1-1-0.dll 11
RegCloseKey 0x1800a9980
RegCopyTreeW 0x1800a9978
RegCreateKeyExW 0x1800a99b0
RegDeleteTreeW 0x1800a9968
RegDeleteValueW 0x1800a9960
RegEnumKeyExW 0x1800a99a0
RegGetValueW 0x1800a9988
RegOpenKeyExW 0x1800a9990
RegQueryInfoKeyW 0x1800a99a8
RegQueryValueExW 0x1800a9998
RegSetValueExW 0x1800a9970
api-ms-win-core-registry-l1-1-1.dll 1
RegSetKeyValueW 0x1800a99c0
api-ms-win-core-registry-l2-1-0.dll 1
RegDeleteKeyW 0x1800a99d0
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x1800a99e8
RtlLookupFunctionEntry 0x1800a99e0
RtlVirtualUnwind 0x1800a99f0
api-ms-win-core-synch-l1-1-0.dll 25
AcquireSRWLockExclusive 0x1800a9a48
AcquireSRWLockShared 0x1800a9a40
CancelWaitableTimer 0x1800a9aa8
CreateEventExW 0x1800a9a20
CreateEventW 0x1800a9a68
CreateMutexExW 0x1800a9a80
CreateSemaphoreExW 0x1800a9ac0
CreateWaitableTimerExW 0x1800a9a70
DeleteCriticalSection 0x1800a9a00
EnterCriticalSection 0x1800a9a18
InitializeCriticalSectionAndSpinCount 0x1800a9a08
InitializeCriticalSectionEx 0x1800a9a50
InitializeSRWLock 0x1800a9a30
LeaveCriticalSection 0x1800a9a10
OpenEventW 0x1800a9a98
OpenSemaphoreW 0x1800a9a88
ReleaseMutex 0x1800a9aa0
ReleaseSemaphore 0x1800a9ab8
ReleaseSRWLockExclusive 0x1800a9a38
ReleaseSRWLockShared 0x1800a9a58
ResetEvent 0x1800a9a28
SetEvent 0x1800a9a60
SetWaitableTimer 0x1800a9a78
WaitForSingleObject 0x1800a9ab0
WaitForSingleObjectEx 0x1800a9a90
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x1800a9ad0
api-ms-win-core-synch-l1-2-1.dll 2
CreateSemaphoreW 0x1800a9ae0
WaitForMultipleObjects 0x1800a9ae8
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetSystemDirectoryW 0x1800a9b08
GetSystemTime 0x1800a9af8
GetSystemTimeAsFileTime 0x1800a9b18
GetTickCount 0x1800a9b00
GetTickCount64 0x1800a9b10
api-ms-win-core-sysinfo-l1-2-0.dll 1
GetSystemFirmwareTable 0x1800a9b28
api-ms-win-core-threadpool-l1-2-0.dll 5
CloseThreadpoolTimer 0x1800a9b50
CreateThreadpoolTimer 0x1800a9b48
SetThreadpoolTimer 0x1800a9b58
TrySubmitThreadpoolCallback 0x1800a9b38
WaitForThreadpoolTimerCallbacks 0x1800a9b40
api-ms-win-core-timezone-l1-1-0.dll 2
FileTimeToSystemTime 0x1800a9b70
SystemTimeToFileTime 0x1800a9b68
api-ms-win-core-version-l1-1-0.dll 1
GetFileVersionInfoSizeExW 0x1800a9b80
api-ms-win-crt-private-l1-1-0.dll 44
__C_specific_handler 0x1800a9c50
__CxxFrameHandler3 0x1800a9c58
__CxxFrameHandler4 0x1800a9cd8
__std_terminate 0x1800a9cd0
_CxxThrowException 0x1800a9c60
_o___std_exception_copy 0x1800a9cc0
_o___std_exception_destroy 0x1800a9cb8
_o___std_type_info_destroy_list 0x1800a9cb0
_o___stdio_common_vsnprintf_s 0x1800a9ca8
_o___stdio_common_vswprintf 0x1800a9c90
_o___stdio_common_vswprintf_s 0x1800a9c88
_o___stdio_common_vswscanf 0x1800a9c80
_o__beginthreadex 0x1800a9c78
_o__callnewh 0x1800a9c70
_o__cexit 0x1800a9c68
_o__configure_narrow_argv 0x1800a9bd8
_o__crt_atexit 0x1800a9cc8
_o__errno 0x1800a9ca0
_o__execute_onexit_table 0x1800a9c98
_o__initialize_narrow_environment 0x1800a9b90
_o__initialize_onexit_table 0x1800a9b98
_o__invalid_parameter_noinfo 0x1800a9ba0
_o__invalid_parameter_noinfo_noreturn 0x1800a9ba8
_o__purecall 0x1800a9bb0
_o__register_onexit_function 0x1800a9bb8
_o__seh_filter_dll 0x1800a9bc0
_o__set_errno 0x1800a9bc8
_o__strnicmp 0x1800a9bd0
_o__wcsicmp 0x1800a9be0
_o__wcsnicmp 0x1800a9be8
_o_free 0x1800a9bf8
_o_iswalpha 0x1800a9c00
_o_iswdigit 0x1800a9c08
_o_iswupper 0x1800a9c10
_o_iswxdigit 0x1800a9c18
_o_malloc 0x1800a9c20
_o_terminate 0x1800a9c28
_o_toupper 0x1800a9c30
_o_towupper 0x1800a9c38
_o_wcsncpy_s 0x1800a9c40
_o_wcstoul 0x1800a9c48
memcmp 0x1800a9ce0
memcpy 0x1800a9ce8
memmove 0x1800a9bf0
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x1800a9cf8
_initterm_e 0x1800a9d00
api-ms-win-crt-string-l1-1-0.dll 3
memset 0x1800a9d20
strnlen 0x1800a9d18
wcscmp 0x1800a9d10
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x1800a9d40
GetTraceEnableLevel 0x1800a9d38
GetTraceLoggerHandle 0x1800a9d30
RegisterTraceGuidsW 0x1800a9d58
TraceMessage 0x1800a9d48
UnregisterTraceGuids 0x1800a9d50
api-ms-win-eventing-provider-l1-1-0.dll 6
EventActivityIdControl 0x1800a9d78
EventProviderEnabled 0x1800a9d70
EventRegister 0x1800a9d68
EventSetInformation 0x1800a9d90
EventUnregister 0x1800a9d88
EventWriteTransfer 0x1800a9d80
api-ms-win-power-setting-l1-1-0.dll 2
PowerSettingRegisterNotification 0x1800a9da8
PowerSettingUnregisterNotification 0x1800a9da0
api-ms-win-security-base-l1-1-0.dll 22
AccessCheck 0x1800a9e20
AddAccessAllowedAce 0x1800a9e40
AdjustTokenPrivileges 0x1800a9db8
AllocateAndInitializeSid 0x1800a9df0
CopySid 0x1800a9e10
CreateWellKnownSid 0x1800a9e18
EqualDomainSid 0x1800a9dc8
EqualSid 0x1800a9e60
FreeSid 0x1800a9dd0
GetLengthSid 0x1800a9df8
GetSidIdentifierAuthority 0x1800a9dd8
GetSidSubAuthority 0x1800a9de8
GetSidSubAuthorityCount 0x1800a9de0
GetTokenInformation 0x1800a9e08
ImpersonateLoggedOnUser 0x1800a9dc0
InitializeAcl 0x1800a9e00
InitializeSecurityDescriptor 0x1800a9e38
IsValidSecurityDescriptor 0x1800a9e58
IsValidSid 0x1800a9e50
SetSecurityDescriptorDacl 0x1800a9e48
SetSecurityDescriptorGroup 0x1800a9e30
SetSecurityDescriptorOwner 0x1800a9e28
api-ms-win-security-base-l1-2-0.dll 2
GetCachedSigningLevel 0x1800a9e78
SetCachedSigningLevel 0x1800a9e70
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x1800a9e88
api-ms-win-security-lsapolicy-l1-1-0.dll 4
LsaClose 0x1800a9eb0
LsaFreeMemory 0x1800a9ea0
LsaOpenPolicy 0x1800a9e98
LsaQueryInformationPolicy 0x1800a9ea8
api-ms-win-security-sddl-l1-1-0.dll 3
ConvertSidToStringSidW 0x1800a9ec0
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1800a9ec8
ConvertStringSidToSidW 0x1800a9ed0
api-ms-win-service-core-l1-1-0.dll 2
RegisterServiceCtrlHandlerExW 0x1800a9ee8
SetServiceStatus 0x1800a9ee0
api-ms-win-service-core-l1-1-4.dll 1
GetServiceDirectory 0x1800a9ef8
api-ms-win-service-management-l1-1-0.dll 3
CloseServiceHandle 0x1800a9f18
OpenSCManagerW 0x1800a9f10
OpenServiceW 0x1800a9f08
api-ms-win-service-management-l2-1-0.dll 2
ChangeServiceConfigW 0x1800a9f28
QueryServiceConfigW 0x1800a9f30
api-ms-win-service-private-l1-1-0.dll 2
I_ScRegisterDeviceNotification 0x1800a9f40
I_ScUnregisterDeviceNotification 0x1800a9f48
api-ms-win-service-winsvc-l1-1-0.dll 1
QueryServiceStatus 0x1800a9f58
api-ms-win-stateseparation-helpers-l1-1-0.dll 1
GetPersistedRegistryLocationW 0x1800a9f68
bcrypt.dll 15
BCryptCloseAlgorithmProvider 0x1800a9fb8
BCryptCreateHash 0x1800a9fd0
BCryptDecrypt 0x1800a9fb0
BCryptDestroyHash 0x1800a9fc8
BCryptDestroyKey 0x1800a9f88
BCryptEncrypt 0x1800a9fa8
BCryptExportKey 0x1800a9fe0
BCryptFinishHash 0x1800a9fe8
BCryptGenerateSymmetricKey 0x1800a9f90
BCryptGenRandom 0x1800a9fa0
BCryptGetProperty 0x1800a9f80
BCryptHashData 0x1800a9fc0
BCryptImportKey 0x1800a9f98
BCryptOpenAlgorithmProvider 0x1800a9fd8
BCryptSetProperty 0x1800a9f78
msvcp_win.dll 35
_Cnd_broadcast 0x1800aa080
_Cnd_destroy_in_situ 0x1800aa020
_Cnd_do_broadcast_at_thread_exit 0x1800aa0b8
_Cnd_init_in_situ 0x1800aa048
_Cnd_register_at_thread_exit 0x1800aa088
_Cnd_timedwait 0x1800aa060
_Cnd_unregister_at_thread_exit 0x1800aa028
_Cnd_wait 0x1800aa018
_Mtx_current_owns 0x1800aa068
_Mtx_destroy_in_situ 0x1800aa0b0
_Mtx_init_in_situ 0x1800aa0a8
_Mtx_lock 0x1800aa010
_Mtx_unlock 0x1800aa108
_Query_perf_counter 0x1800aa050
_Query_perf_frequency 0x1800aa058
_Thrd_detach 0x1800aa0c8
_Thrd_id 0x1800aa0d0
_Thrd_join 0x1800aa0d8
_Xtime_get_ticks 0x1800aa078
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z 0x1800aa040
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z 0x1800aa008
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z 0x1800aa030
?__ExceptionPtrCreate@@YAXPEAX@Z 0x1800aa038
?__ExceptionPtrCurrentException@@YAXPEAX@Z 0x1800aa070
?__ExceptionPtrDestroy@@YAXPEAX@Z 0x1800aa100
?__ExceptionPtrToBool@@YA_NPEBX@Z 0x1800a9ff8
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z 0x1800aa090
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z 0x1800aa000
?_Syserror_map@std@@YAPEBDH@Z 0x1800aa098
?_Throw_C_error@std@@YAXH@Z 0x1800aa0c0
?_Throw_Cpp_error@std@@YAXH@Z 0x1800aa0e0
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z 0x1800aa0a0
?_Xbad_function_call@std@@YAXXZ 0x1800aa0f8
?_Xlength_error@std@@YAXPEBD@Z 0x1800aa0f0
?_Xout_of_range@std@@YAXPEBD@Z 0x1800aa0e8
ncrypt.dll 10
NCryptCreatePersistedKey 0x1800aa130
NCryptDecrypt 0x1800aa158
NCryptDeleteKey 0x1800aa140
NCryptEncrypt 0x1800aa160
NCryptFinalizeKey 0x1800aa120
NCryptFreeObject 0x1800aa150
NCryptGetProperty 0x1800aa118
NCryptOpenKey 0x1800aa148
NCryptOpenStorageProvider 0x1800aa138
NCryptSetProperty 0x1800aa128
ntdll.dll 18
NtCreateUserProcess 0x1800aa1c8
NtGetDevicePowerState 0x1800aa188
NtQueryInformationProcess 0x1800aa1d8
NtQuerySystemInformation 0x1800aa1b0
NtTerminateProcess 0x1800aa1d0
RtlAllocateWnfSerializationGroup 0x1800aa178
RtlCreateProcessParametersEx 0x1800aa1f8
RtlDosPathNameToNtPathName_U_WithStatus 0x1800aa1c0
RtlEqualSid 0x1800aa1f0
RtlFreeUnicodeString 0x1800aa1b8
RtlGetNtProductType 0x1800aa1e0
RtlImageNtHeader 0x1800aa1a0
RtlIsMultiSessionSku 0x1800aa190
RtlIsStateSeparationEnabled 0x1800aa1e8
RtlNtStatusToDosError 0x1800aa198
RtlPublishWnfStateData 0x1800aa1a8
RtlSubscribeWnfStateChangeNotification 0x1800aa180
RtlUnsubscribeWnfNotificationWaitForCompletion 0x1800aa170
profapi.dll 1
0x1800aa208
RPCRT4.dll 31
I_RpcExceptionFilter 0x1800a9588
I_RpcMapWin32Status 0x1800a9610
Ndr64AsyncServerCallAll 0x1800a95f0
NdrAsyncServerCall 0x1800a9600
NdrClientCall3 0x1800a9570
NdrServerCall2 0x1800a9608
NdrServerCallAll 0x1800a95f8
RpcAsyncCompleteCall 0x1800a9660
RpcBindingBind 0x1800a95c0
RpcBindingCreateW 0x1800a95e0
RpcBindingFree 0x1800a95b0
RpcBindingFromStringBindingW 0x1800a95a0
RpcBindingSetAuthInfoExW 0x1800a9590
RpcEpResolveBinding 0x1800a9598
RpcExceptionFilter 0x1800a9580
RpcImpersonateClient 0x1800a9658
RpcRevertToSelf 0x1800a9650
RpcRevertToSelfEx 0x1800a95d8
RpcServerInqCallAttributesW 0x1800a95c8
RpcServerInterfaceGroupActivate 0x1800a9630
RpcServerInterfaceGroupClose 0x1800a9638
RpcServerInterfaceGroupCreateW 0x1800a9640
RpcServerInterfaceGroupDeactivate 0x1800a9628
RpcServerSubscribeForNotification 0x1800a9620
RpcServerTestCancel 0x1800a95d0
RpcServerUnsubscribeForNotification 0x1800a9578
RpcStringBindingComposeW 0x1800a95a8
RpcStringFreeW 0x1800a95b8
UuidCreate 0x1800a95e8
UuidEqual 0x1800a9648
UuidToStringW 0x1800a9618
UMPDC.dll 3
PdcSignalClientPulse 0x1800a9678
PdcSignalClientRegister 0x1800a9670
PdcSignalClientUnregister 0x1800a9680
WINTRUST.dll 1
WTGetBioSignatureInfo 0x1800a9690