wbiosrvc.dll
Description: Windows Biometric Service
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5915
Architecture: 64-bit
Operating System: Windows NT
SHA256: d4e4cc8b84e8d1f90835a3b73075724f
File Size: 865.5 KB
Uploaded At: Dec. 1, 2025, 7:42 a.m.
Views: 5
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- OutOfProcessExceptionEventCallback (Ordinal: 1, Address: 0x60b0)
- OutOfProcessExceptionEventDebuggerLaunchCallback (Ordinal: 2, Address: 0x6430)
- OutOfProcessExceptionEventSignatureCallback (Ordinal: 3, Address: 0x6170)
- ServiceMain (Ordinal: 4, Address: 0x5520)
- SvchostPushServiceGlobals (Ordinal: 5, Address: 0x5510)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x1800a96a0)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1800a96b0)
- IsDebuggerPresent (Address: 0x1800a96c0)
- OutputDebugStringW (Address: 0x1800a96b8)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x1800a96d0)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x1800a96e0)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1800a9700)
- SetLastError (Address: 0x1800a96f0)
- SetUnhandledExceptionFilter (Address: 0x1800a9708)
- UnhandledExceptionFilter (Address: 0x1800a96f8)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x1800a9740)
- CreateDirectoryW (Address: 0x1800a9728)
- CreateFileW (Address: 0x1800a9718)
- FindClose (Address: 0x1800a9720)
- FindFirstFileW (Address: 0x1800a9738)
- FindNextFileW (Address: 0x1800a9730)
- GetFileSize (Address: 0x1800a9750)
- ReadFile (Address: 0x1800a9758)
- WriteFile (Address: 0x1800a9748)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1800a9770)
- DuplicateHandle (Address: 0x1800a9768)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1800a9790)
- HeapAlloc (Address: 0x1800a9788)
- HeapFree (Address: 0x1800a9780)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x1800a97a8)
- LocalFree (Address: 0x1800a97a0)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- LocalSize (Address: 0x1800a97b8)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x1800a97c8)
api-ms-win-core-io-l1-1-0.dll
- CancelIoEx (Address: 0x1800a97e0)
- CreateIoCompletionPort (Address: 0x1800a97e8)
- DeviceIoControl (Address: 0x1800a97f8)
- GetOverlappedResult (Address: 0x1800a9800)
- GetQueuedCompletionStatus (Address: 0x1800a97d8)
- PostQueuedCompletionStatus (Address: 0x1800a97f0)
api-ms-win-core-io-l1-1-1.dll
- CancelSynchronousIo (Address: 0x1800a9810)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- WTSGetActiveConsoleSessionId (Address: 0x1800a9820)
api-ms-win-core-libraryloader-l1-2-0.dll
- FreeLibrary (Address: 0x1800a9848)
- FreeLibraryAndExitThread (Address: 0x1800a9860)
- GetModuleFileNameA (Address: 0x1800a9858)
- GetModuleHandleExW (Address: 0x1800a9840)
- GetModuleHandleW (Address: 0x1800a9830)
- GetProcAddress (Address: 0x1800a9868)
- LoadLibraryExW (Address: 0x1800a9838)
- LoadStringW (Address: 0x1800a9850)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x1800a9878)
api-ms-win-core-memory-l1-1-0.dll
- ReadProcessMemory (Address: 0x1800a9888)
api-ms-win-core-namedpipe-l1-1-0.dll
- CreatePipe (Address: 0x1800a9898)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x1800a98a8)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateThread (Address: 0x1800a98e8)
- GetCurrentProcess (Address: 0x1800a98f8)
- GetCurrentProcessId (Address: 0x1800a98b8)
- GetCurrentThread (Address: 0x1800a9900)
- GetCurrentThreadId (Address: 0x1800a98f0)
- GetPriorityClass (Address: 0x1800a98d0)
- OpenProcessToken (Address: 0x1800a9910)
- OpenThreadToken (Address: 0x1800a98c8)
- ProcessIdToSessionId (Address: 0x1800a98d8)
- ResumeThread (Address: 0x1800a98e0)
- SetPriorityClass (Address: 0x1800a98c0)
- TerminateProcess (Address: 0x1800a9908)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x1800a9928)
- OpenProcess (Address: 0x1800a9920)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1800a9938)
api-ms-win-core-psapi-l1-1-0.dll
- K32EnumProcesses (Address: 0x1800a9950)
- QueryFullProcessImageNameW (Address: 0x1800a9948)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1800a9980)
- RegCopyTreeW (Address: 0x1800a9978)
- RegCreateKeyExW (Address: 0x1800a99b0)
- RegDeleteTreeW (Address: 0x1800a9968)
- RegDeleteValueW (Address: 0x1800a9960)
- RegEnumKeyExW (Address: 0x1800a99a0)
- RegGetValueW (Address: 0x1800a9988)
- RegOpenKeyExW (Address: 0x1800a9990)
- RegQueryInfoKeyW (Address: 0x1800a99a8)
- RegQueryValueExW (Address: 0x1800a9998)
- RegSetValueExW (Address: 0x1800a9970)
api-ms-win-core-registry-l1-1-1.dll
- RegSetKeyValueW (Address: 0x1800a99c0)
api-ms-win-core-registry-l2-1-0.dll
- RegDeleteKeyW (Address: 0x1800a99d0)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x1800a99e8)
- RtlLookupFunctionEntry (Address: 0x1800a99e0)
- RtlVirtualUnwind (Address: 0x1800a99f0)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x1800a9a48)
- AcquireSRWLockShared (Address: 0x1800a9a40)
- CancelWaitableTimer (Address: 0x1800a9aa8)
- CreateEventExW (Address: 0x1800a9a20)
- CreateEventW (Address: 0x1800a9a68)
- CreateMutexExW (Address: 0x1800a9a80)
- CreateSemaphoreExW (Address: 0x1800a9ac0)
- CreateWaitableTimerExW (Address: 0x1800a9a70)
- DeleteCriticalSection (Address: 0x1800a9a00)
- EnterCriticalSection (Address: 0x1800a9a18)
- InitializeCriticalSectionAndSpinCount (Address: 0x1800a9a08)
- InitializeCriticalSectionEx (Address: 0x1800a9a50)
- InitializeSRWLock (Address: 0x1800a9a30)
- LeaveCriticalSection (Address: 0x1800a9a10)
- OpenEventW (Address: 0x1800a9a98)
- OpenSemaphoreW (Address: 0x1800a9a88)
- ReleaseMutex (Address: 0x1800a9aa0)
- ReleaseSemaphore (Address: 0x1800a9ab8)
- ReleaseSRWLockExclusive (Address: 0x1800a9a38)
- ReleaseSRWLockShared (Address: 0x1800a9a58)
- ResetEvent (Address: 0x1800a9a28)
- SetEvent (Address: 0x1800a9a60)
- SetWaitableTimer (Address: 0x1800a9a78)
- WaitForSingleObject (Address: 0x1800a9ab0)
- WaitForSingleObjectEx (Address: 0x1800a9a90)
api-ms-win-core-synch-l1-2-0.dll
- Sleep (Address: 0x1800a9ad0)
api-ms-win-core-synch-l1-2-1.dll
- CreateSemaphoreW (Address: 0x1800a9ae0)
- WaitForMultipleObjects (Address: 0x1800a9ae8)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x1800a9b08)
- GetSystemTime (Address: 0x1800a9af8)
- GetSystemTimeAsFileTime (Address: 0x1800a9b18)
- GetTickCount (Address: 0x1800a9b00)
- GetTickCount64 (Address: 0x1800a9b10)
api-ms-win-core-sysinfo-l1-2-0.dll
- GetSystemFirmwareTable (Address: 0x1800a9b28)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x1800a9b50)
- CreateThreadpoolTimer (Address: 0x1800a9b48)
- SetThreadpoolTimer (Address: 0x1800a9b58)
- TrySubmitThreadpoolCallback (Address: 0x1800a9b38)
- WaitForThreadpoolTimerCallbacks (Address: 0x1800a9b40)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x1800a9b70)
- SystemTimeToFileTime (Address: 0x1800a9b68)
api-ms-win-core-version-l1-1-0.dll
- GetFileVersionInfoSizeExW (Address: 0x1800a9b80)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x1800a9c50)
- __CxxFrameHandler3 (Address: 0x1800a9c58)
- __CxxFrameHandler4 (Address: 0x1800a9cd8)
- __std_terminate (Address: 0x1800a9cd0)
- _CxxThrowException (Address: 0x1800a9c60)
- _o___std_exception_copy (Address: 0x1800a9cc0)
- _o___std_exception_destroy (Address: 0x1800a9cb8)
- _o___std_type_info_destroy_list (Address: 0x1800a9cb0)
- _o___stdio_common_vsnprintf_s (Address: 0x1800a9ca8)
- _o___stdio_common_vswprintf (Address: 0x1800a9c90)
- _o___stdio_common_vswprintf_s (Address: 0x1800a9c88)
- _o___stdio_common_vswscanf (Address: 0x1800a9c80)
- _o__beginthreadex (Address: 0x1800a9c78)
- _o__callnewh (Address: 0x1800a9c70)
- _o__cexit (Address: 0x1800a9c68)
- _o__configure_narrow_argv (Address: 0x1800a9bd8)
- _o__crt_atexit (Address: 0x1800a9cc8)
- _o__errno (Address: 0x1800a9ca0)
- _o__execute_onexit_table (Address: 0x1800a9c98)
- _o__initialize_narrow_environment (Address: 0x1800a9b90)
- _o__initialize_onexit_table (Address: 0x1800a9b98)
- _o__invalid_parameter_noinfo (Address: 0x1800a9ba0)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x1800a9ba8)
- _o__purecall (Address: 0x1800a9bb0)
- _o__register_onexit_function (Address: 0x1800a9bb8)
- _o__seh_filter_dll (Address: 0x1800a9bc0)
- _o__set_errno (Address: 0x1800a9bc8)
- _o__strnicmp (Address: 0x1800a9bd0)
- _o__wcsicmp (Address: 0x1800a9be0)
- _o__wcsnicmp (Address: 0x1800a9be8)
- _o_free (Address: 0x1800a9bf8)
- _o_iswalpha (Address: 0x1800a9c00)
- _o_iswdigit (Address: 0x1800a9c08)
- _o_iswupper (Address: 0x1800a9c10)
- _o_iswxdigit (Address: 0x1800a9c18)
- _o_malloc (Address: 0x1800a9c20)
- _o_terminate (Address: 0x1800a9c28)
- _o_toupper (Address: 0x1800a9c30)
- _o_towupper (Address: 0x1800a9c38)
- _o_wcsncpy_s (Address: 0x1800a9c40)
- _o_wcstoul (Address: 0x1800a9c48)
- memcmp (Address: 0x1800a9ce0)
- memcpy (Address: 0x1800a9ce8)
- memmove (Address: 0x1800a9bf0)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x1800a9cf8)
- _initterm_e (Address: 0x1800a9d00)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x1800a9d20)
- strnlen (Address: 0x1800a9d18)
- wcscmp (Address: 0x1800a9d10)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- GetTraceEnableFlags (Address: 0x1800a9d40)
- GetTraceEnableLevel (Address: 0x1800a9d38)
- GetTraceLoggerHandle (Address: 0x1800a9d30)
- RegisterTraceGuidsW (Address: 0x1800a9d58)
- TraceMessage (Address: 0x1800a9d48)
- UnregisterTraceGuids (Address: 0x1800a9d50)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x1800a9d78)
- EventProviderEnabled (Address: 0x1800a9d70)
- EventRegister (Address: 0x1800a9d68)
- EventSetInformation (Address: 0x1800a9d90)
- EventUnregister (Address: 0x1800a9d88)
- EventWriteTransfer (Address: 0x1800a9d80)
api-ms-win-power-setting-l1-1-0.dll
- PowerSettingRegisterNotification (Address: 0x1800a9da8)
- PowerSettingUnregisterNotification (Address: 0x1800a9da0)
api-ms-win-security-base-l1-1-0.dll
- AccessCheck (Address: 0x1800a9e20)
- AddAccessAllowedAce (Address: 0x1800a9e40)
- AdjustTokenPrivileges (Address: 0x1800a9db8)
- AllocateAndInitializeSid (Address: 0x1800a9df0)
- CopySid (Address: 0x1800a9e10)
- CreateWellKnownSid (Address: 0x1800a9e18)
- EqualDomainSid (Address: 0x1800a9dc8)
- EqualSid (Address: 0x1800a9e60)
- FreeSid (Address: 0x1800a9dd0)
- GetLengthSid (Address: 0x1800a9df8)
- GetSidIdentifierAuthority (Address: 0x1800a9dd8)
- GetSidSubAuthority (Address: 0x1800a9de8)
- GetSidSubAuthorityCount (Address: 0x1800a9de0)
- GetTokenInformation (Address: 0x1800a9e08)
- ImpersonateLoggedOnUser (Address: 0x1800a9dc0)
- InitializeAcl (Address: 0x1800a9e00)
- InitializeSecurityDescriptor (Address: 0x1800a9e38)
- IsValidSecurityDescriptor (Address: 0x1800a9e58)
- IsValidSid (Address: 0x1800a9e50)
- SetSecurityDescriptorDacl (Address: 0x1800a9e48)
- SetSecurityDescriptorGroup (Address: 0x1800a9e30)
- SetSecurityDescriptorOwner (Address: 0x1800a9e28)
api-ms-win-security-base-l1-2-0.dll
- GetCachedSigningLevel (Address: 0x1800a9e78)
- SetCachedSigningLevel (Address: 0x1800a9e70)
api-ms-win-security-lsalookup-l2-1-0.dll
- LookupPrivilegeValueW (Address: 0x1800a9e88)
api-ms-win-security-lsapolicy-l1-1-0.dll
- LsaClose (Address: 0x1800a9eb0)
- LsaFreeMemory (Address: 0x1800a9ea0)
- LsaOpenPolicy (Address: 0x1800a9e98)
- LsaQueryInformationPolicy (Address: 0x1800a9ea8)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x1800a9ec0)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800a9ec8)
- ConvertStringSidToSidW (Address: 0x1800a9ed0)
api-ms-win-service-core-l1-1-0.dll
- RegisterServiceCtrlHandlerExW (Address: 0x1800a9ee8)
- SetServiceStatus (Address: 0x1800a9ee0)
api-ms-win-service-core-l1-1-4.dll
- GetServiceDirectory (Address: 0x1800a9ef8)
api-ms-win-service-management-l1-1-0.dll
- CloseServiceHandle (Address: 0x1800a9f18)
- OpenSCManagerW (Address: 0x1800a9f10)
- OpenServiceW (Address: 0x1800a9f08)
api-ms-win-service-management-l2-1-0.dll
- ChangeServiceConfigW (Address: 0x1800a9f28)
- QueryServiceConfigW (Address: 0x1800a9f30)
api-ms-win-service-private-l1-1-0.dll
- I_ScRegisterDeviceNotification (Address: 0x1800a9f40)
- I_ScUnregisterDeviceNotification (Address: 0x1800a9f48)
api-ms-win-service-winsvc-l1-1-0.dll
- QueryServiceStatus (Address: 0x1800a9f58)
api-ms-win-stateseparation-helpers-l1-1-0.dll
- GetPersistedRegistryLocationW (Address: 0x1800a9f68)
bcrypt.dll
- BCryptCloseAlgorithmProvider (Address: 0x1800a9fb8)
- BCryptCreateHash (Address: 0x1800a9fd0)
- BCryptDecrypt (Address: 0x1800a9fb0)
- BCryptDestroyHash (Address: 0x1800a9fc8)
- BCryptDestroyKey (Address: 0x1800a9f88)
- BCryptEncrypt (Address: 0x1800a9fa8)
- BCryptExportKey (Address: 0x1800a9fe0)
- BCryptFinishHash (Address: 0x1800a9fe8)
- BCryptGenerateSymmetricKey (Address: 0x1800a9f90)
- BCryptGenRandom (Address: 0x1800a9fa0)
- BCryptGetProperty (Address: 0x1800a9f80)
- BCryptHashData (Address: 0x1800a9fc0)
- BCryptImportKey (Address: 0x1800a9f98)
- BCryptOpenAlgorithmProvider (Address: 0x1800a9fd8)
- BCryptSetProperty (Address: 0x1800a9f78)
msvcp_win.dll
- _Cnd_broadcast (Address: 0x1800aa080)
- _Cnd_destroy_in_situ (Address: 0x1800aa020)
- _Cnd_do_broadcast_at_thread_exit (Address: 0x1800aa0b8)
- _Cnd_init_in_situ (Address: 0x1800aa048)
- _Cnd_register_at_thread_exit (Address: 0x1800aa088)
- _Cnd_timedwait (Address: 0x1800aa060)
- _Cnd_unregister_at_thread_exit (Address: 0x1800aa028)
- _Cnd_wait (Address: 0x1800aa018)
- _Mtx_current_owns (Address: 0x1800aa068)
- _Mtx_destroy_in_situ (Address: 0x1800aa0b0)
- _Mtx_init_in_situ (Address: 0x1800aa0a8)
- _Mtx_lock (Address: 0x1800aa010)
- _Mtx_unlock (Address: 0x1800aa108)
- _Query_perf_counter (Address: 0x1800aa050)
- _Query_perf_frequency (Address: 0x1800aa058)
- _Thrd_detach (Address: 0x1800aa0c8)
- _Thrd_id (Address: 0x1800aa0d0)
- _Thrd_join (Address: 0x1800aa0d8)
- _Xtime_get_ticks (Address: 0x1800aa078)
- ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x1800aa040)
- ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x1800aa008)
- ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x1800aa030)
- ?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x1800aa038)
- ?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x1800aa070)
- ?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x1800aa100)
- ?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x1800a9ff8)
- ?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z (Address: 0x1800aa090)
- ?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z (Address: 0x1800aa000)
- ?_Syserror_map@std@@YAPEBDH@Z (Address: 0x1800aa098)
- ?_Throw_C_error@std@@YAXH@Z (Address: 0x1800aa0c0)
- ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x1800aa0e0)
- ?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z (Address: 0x1800aa0a0)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x1800aa0f8)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800aa0f0)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1800aa0e8)
ncrypt.dll
- NCryptCreatePersistedKey (Address: 0x1800aa130)
- NCryptDecrypt (Address: 0x1800aa158)
- NCryptDeleteKey (Address: 0x1800aa140)
- NCryptEncrypt (Address: 0x1800aa160)
- NCryptFinalizeKey (Address: 0x1800aa120)
- NCryptFreeObject (Address: 0x1800aa150)
- NCryptGetProperty (Address: 0x1800aa118)
- NCryptOpenKey (Address: 0x1800aa148)
- NCryptOpenStorageProvider (Address: 0x1800aa138)
- NCryptSetProperty (Address: 0x1800aa128)
ntdll.dll
- NtCreateUserProcess (Address: 0x1800aa1c8)
- NtGetDevicePowerState (Address: 0x1800aa188)
- NtQueryInformationProcess (Address: 0x1800aa1d8)
- NtQuerySystemInformation (Address: 0x1800aa1b0)
- NtTerminateProcess (Address: 0x1800aa1d0)
- RtlAllocateWnfSerializationGroup (Address: 0x1800aa178)
- RtlCreateProcessParametersEx (Address: 0x1800aa1f8)
- RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x1800aa1c0)
- RtlEqualSid (Address: 0x1800aa1f0)
- RtlFreeUnicodeString (Address: 0x1800aa1b8)
- RtlGetNtProductType (Address: 0x1800aa1e0)
- RtlImageNtHeader (Address: 0x1800aa1a0)
- RtlIsMultiSessionSku (Address: 0x1800aa190)
- RtlIsStateSeparationEnabled (Address: 0x1800aa1e8)
- RtlNtStatusToDosError (Address: 0x1800aa198)
- RtlPublishWnfStateData (Address: 0x1800aa1a8)
- RtlSubscribeWnfStateChangeNotification (Address: 0x1800aa180)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800aa170)
profapi.dll
- (Address: 0x1800aa208)
RPCRT4.dll
- I_RpcExceptionFilter (Address: 0x1800a9588)
- I_RpcMapWin32Status (Address: 0x1800a9610)
- Ndr64AsyncServerCallAll (Address: 0x1800a95f0)
- NdrAsyncServerCall (Address: 0x1800a9600)
- NdrClientCall3 (Address: 0x1800a9570)
- NdrServerCall2 (Address: 0x1800a9608)
- NdrServerCallAll (Address: 0x1800a95f8)
- RpcAsyncCompleteCall (Address: 0x1800a9660)
- RpcBindingBind (Address: 0x1800a95c0)
- RpcBindingCreateW (Address: 0x1800a95e0)
- RpcBindingFree (Address: 0x1800a95b0)
- RpcBindingFromStringBindingW (Address: 0x1800a95a0)
- RpcBindingSetAuthInfoExW (Address: 0x1800a9590)
- RpcEpResolveBinding (Address: 0x1800a9598)
- RpcExceptionFilter (Address: 0x1800a9580)
- RpcImpersonateClient (Address: 0x1800a9658)
- RpcRevertToSelf (Address: 0x1800a9650)
- RpcRevertToSelfEx (Address: 0x1800a95d8)
- RpcServerInqCallAttributesW (Address: 0x1800a95c8)
- RpcServerInterfaceGroupActivate (Address: 0x1800a9630)
- RpcServerInterfaceGroupClose (Address: 0x1800a9638)
- RpcServerInterfaceGroupCreateW (Address: 0x1800a9640)
- RpcServerInterfaceGroupDeactivate (Address: 0x1800a9628)
- RpcServerSubscribeForNotification (Address: 0x1800a9620)
- RpcServerTestCancel (Address: 0x1800a95d0)
- RpcServerUnsubscribeForNotification (Address: 0x1800a9578)
- RpcStringBindingComposeW (Address: 0x1800a95a8)
- RpcStringFreeW (Address: 0x1800a95b8)
- UuidCreate (Address: 0x1800a95e8)
- UuidEqual (Address: 0x1800a9648)
- UuidToStringW (Address: 0x1800a9618)
UMPDC.dll
- PdcSignalClientPulse (Address: 0x1800a9678)
- PdcSignalClientRegister (Address: 0x1800a9670)
- PdcSignalClientUnregister (Address: 0x1800a9680)
WINTRUST.dll
- WTGetBioSignatureInfo (Address: 0x1800a9690)