tbs.dll

Description: TBS

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 89484c93d2e3ac9ca7378b179a995cfb

File Size: 95.0 KB

Uploaded At: Dec. 1, 2025, 7:40 a.m.

Views: 6

Exported Functions

Tbsi_Create_Attestation_From_Log (Ordinal: 1, Address: 0xe720)
Tbsi_Get_TCG_Logs (Ordinal: 2, Address: 0xc820)
GetDeviceID (Ordinal: 3, Address: 0xee30)
GetDeviceIDString (Ordinal: 4, Address: 0x51d0)
GetDeviceIDWithTimeout (Ordinal: 5, Address: 0x5440)
Tbsi_Context_Create (Ordinal: 6, Address: 0x3200)
Tbsi_Create_Windows_Key (Ordinal: 7, Address: 0xd660)
Tbsi_FilterLog (Ordinal: 8, Address: 0xf040)
Tbsi_GetDeviceInfo (Ordinal: 9, Address: 0x3480)
Tbsi_Get_OwnerAuth (Ordinal: 10, Address: 0xd710)
Tbsi_Get_TCG_Log (Ordinal: 11, Address: 0xdeb0)
Tbsi_Get_TCG_Log_Ex (Ordinal: 12, Address: 0x1510)
Tbsi_Physical_Presence_Command (Ordinal: 13, Address: 0x2590)
Tbsi_Revoke_Attestation (Ordinal: 14, Address: 0xdef0)
Tbsi_ShaHash (Ordinal: 15, Address: 0xf300)
Tbsip_Cancel_Commands (Ordinal: 16, Address: 0xdf80)
Tbsip_Context_Close (Ordinal: 17, Address: 0x5930)
Tbsip_Submit_Command (Ordinal: 18, Address: 0x2790)
Tbsip_Submit_Command_NonBlocking (Ordinal: 19, Address: 0x1150)
Tbsip_TestInterruptInformation (Ordinal: 20, Address: 0xdfc0)
Tbsip_TestMorBit (Ordinal: 21, Address: 0xe080)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180011180)
IsDebuggerPresent (Address: 0x180011178)
OutputDebugStringW (Address: 0x180011188)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800111b0)
SetLastError (Address: 0x180011198)
SetUnhandledExceptionFilter (Address: 0x1800111a8)
UnhandledExceptionFilter (Address: 0x1800111a0)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x1800111c0)
GetFileSize (Address: 0x1800111c8)
ReadFile (Address: 0x1800111d0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800111e0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800111f0)
HeapAlloc (Address: 0x1800111f8)
HeapFree (Address: 0x180011200)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x180011228)
GetModuleHandleExW (Address: 0x180011220)
GetModuleHandleW (Address: 0x180011218)
GetProcAddress (Address: 0x180011210)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180011238)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180011258)
GetCurrentProcessId (Address: 0x180011248)
GetCurrentThread (Address: 0x180011250)
GetCurrentThreadId (Address: 0x180011260)
TerminateProcess (Address: 0x180011268)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180011278)

api-ms-win-core-registry-l1-1-0.dll

RegGetValueW (Address: 0x180011288)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800112b0)
RtlCompareMemory (Address: 0x1800112a8)
RtlLookupFunctionEntry (Address: 0x1800112a0)
RtlVirtualUnwind (Address: 0x180011298)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180011320)
AcquireSRWLockShared (Address: 0x180011318)
CreateEventW (Address: 0x180011330)
CreateMutexExW (Address: 0x180011308)
CreateSemaphoreExW (Address: 0x1800112d8)
DeleteCriticalSection (Address: 0x1800112c0)
EnterCriticalSection (Address: 0x1800112e8)
InitializeCriticalSectionEx (Address: 0x1800112e0)
LeaveCriticalSection (Address: 0x1800112f8)
OpenSemaphoreW (Address: 0x1800112d0)
ReleaseMutex (Address: 0x180011300)
ReleaseSemaphore (Address: 0x180011338)
ReleaseSRWLockExclusive (Address: 0x180011340)
ReleaseSRWLockShared (Address: 0x180011310)
SetEvent (Address: 0x180011328)
WaitForSingleObject (Address: 0x1800112c8)
WaitForSingleObjectEx (Address: 0x1800112f0)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x180011350)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x180011368)
GetSystemWindowsDirectoryW (Address: 0x180011370)
GetTickCount (Address: 0x180011360)
GetTickCount64 (Address: 0x180011378)

api-ms-win-core-sysinfo-l1-2-0.dll

GetNativeSystemInfo (Address: 0x180011388)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1800113a8)
CreateThreadpoolTimer (Address: 0x180011398)
SetThreadpoolTimer (Address: 0x1800113a0)
WaitForThreadpoolTimerCallbacks (Address: 0x1800113b0)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1800113d0)
EventSetInformation (Address: 0x1800113c0)
EventUnregister (Address: 0x1800113d8)
EventWriteTransfer (Address: 0x1800113c8)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x1800113f0)
BCryptCreateHash (Address: 0x1800113f8)
BCryptDestroyHash (Address: 0x1800113e8)
BCryptFinishHash (Address: 0x180011410)
BCryptGetProperty (Address: 0x180011400)
BCryptHashData (Address: 0x180011418)
BCryptOpenAlgorithmProvider (Address: 0x180011408)

imagehlp.dll

StackWalk64 (Address: 0x180011448)
SymCleanup (Address: 0x180011428)
SymFunctionTableAccess64 (Address: 0x180011450)
SymGetModuleBase64 (Address: 0x180011430)
SymGetModuleInfo64 (Address: 0x180011438)
SymInitialize (Address: 0x180011440)

msvcrt.dll

__C_specific_handler (Address: 0x1800114a8)
__dllonexit (Address: 0x180011490)
_amsg_exit (Address: 0x1800114b8)
_callnewh (Address: 0x1800114c8)
_initterm (Address: 0x1800114b0)
_lock (Address: 0x1800114a0)
_onexit (Address: 0x180011488)
_purecall (Address: 0x1800114e0)
_unlock (Address: 0x180011498)
_vsnwprintf (Address: 0x1800114f8)
_XcptFilter (Address: 0x1800114c0)
free (Address: 0x1800114d8)
malloc (Address: 0x1800114d0)
memcmp (Address: 0x180011470)
memcpy (Address: 0x180011478)
memcpy_s (Address: 0x1800114f0)
memmove_s (Address: 0x1800114e8)
memset (Address: 0x180011480)
sprintf_s (Address: 0x180011460)
wcscmp (Address: 0x180011468)

ntdll.dll

NtClose (Address: 0x180011560)
NtCreateEvent (Address: 0x180011538)
NtCreateFile (Address: 0x180011548)
NtDeviceIoControlFile (Address: 0x180011530)
NtOpenKey (Address: 0x180011570)
NtQueryInformationFile (Address: 0x180011580)
NtQuerySystemInformation (Address: 0x180011550)
NtQueryValueKey (Address: 0x180011568)
NtWaitForSingleObject (Address: 0x180011528)
RtlGetPersistedStateLocation (Address: 0x180011558)
RtlInitUnicodeString (Address: 0x180011578)
RtlNtStatusToDosError (Address: 0x180011540)
RtlPublishWnfStateData (Address: 0x180011518)
RtlQueryWnfStateData (Address: 0x180011520)
RtlSubscribeWnfStateChangeNotification (Address: 0x180011510)
RtlUnsubscribeWnfStateChangeNotification (Address: 0x180011508)