vbsapi.dll

Description: Windows VBS HVCI API

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 46738d550888e87b997a2e73217d4963

File Size: 154.5 KB

Uploaded At: Dec. 1, 2025, 7:41 a.m.

Views: 3

Exported Functions

  • HvciGetConfig (Ordinal: 1, Address: 0x3540)
  • HvciGetConfigFromVBSKey (Ordinal: 2, Address: 0x34c0)
  • HvciIncompatibilityScanCancel (Ordinal: 3, Address: 0x32f0)
  • HvciIncompatibilityScanFree (Ordinal: 4, Address: 0x3380)
  • HvciIncompatibilityScanGetResult (Ordinal: 5, Address: 0x3350)
  • HvciIncompatibilityScanInitialize (Ordinal: 6, Address: 0x3170)
  • HvciIncompatibilityScanOverrideDriverCompatDatabase (Ordinal: 7, Address: 0x3210)
  • HvciIncompatibilityScanOverrideServicesKey (Ordinal: 8, Address: 0x3200)
  • HvciIncompatibilityScanStart (Ordinal: 9, Address: 0x3260)
  • HvciIsActive (Ordinal: 10, Address: 0x3450)
  • VbsGetIssues (Ordinal: 11, Address: 0x1080)
  • VbsIsCapable (Ordinal: 12, Address: 0x12f0)
  • VbsIsRecommended (Ordinal: 13, Address: 0x12e0)
  • VbsIsScenarioEnabled (Ordinal: 14, Address: 0x1370)
  • VbsSetScenarioEnable (Ordinal: 15, Address: 0x15e0)
  • VbsSetScenarioEnableToVBSKey (Ordinal: 16, Address: 0x13b0)

Imported DLLs & Functions

api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x18001b328)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x18001b338)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18001b358)
  • SetLastError (Address: 0x18001b360)
  • SetUnhandledExceptionFilter (Address: 0x18001b350)
  • UnhandledExceptionFilter (Address: 0x18001b348)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x18001b378)
  • FindClose (Address: 0x18001b370)
  • FindFirstFileW (Address: 0x18001b390)
  • FindNextFileW (Address: 0x18001b380)
  • GetFileSizeEx (Address: 0x18001b388)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18001b3a0)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18001b3b0)
  • HeapAlloc (Address: 0x18001b3b8)
  • HeapFree (Address: 0x18001b3c0)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FreeLibrary (Address: 0x18001b3e0)
  • GetModuleHandleW (Address: 0x18001b3d0)
  • GetProcAddress (Address: 0x18001b3d8)
  • LoadLibraryExW (Address: 0x18001b3e8)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x18001b408)
  • MapViewOfFile (Address: 0x18001b400)
  • UnmapViewOfFile (Address: 0x18001b3f8)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x18001b418)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x18001b450)
  • GetCurrentProcess (Address: 0x18001b430)
  • GetCurrentProcessId (Address: 0x18001b428)
  • GetCurrentThreadId (Address: 0x18001b440)
  • OpenProcessToken (Address: 0x18001b438)
  • TerminateProcess (Address: 0x18001b448)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x18001b460)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18001b470)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18001b488)
  • RegCreateKeyExW (Address: 0x18001b4a0)
  • RegEnumKeyExW (Address: 0x18001b498)
  • RegGetValueW (Address: 0x18001b490)
  • RegOpenKeyExW (Address: 0x18001b480)
api-ms-win-core-registry-l1-1-1.dll
  • RegDeleteKeyValueW (Address: 0x18001b4b0)
  • RegSetKeyValueW (Address: 0x18001b4b8)
api-ms-win-core-synch-l1-1-0.dll
  • CreateMutexW (Address: 0x18001b4d8)
  • ReleaseMutex (Address: 0x18001b4c8)
  • WaitForSingleObject (Address: 0x18001b4d0)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x18001b4e8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x18001b4f8)
  • GetTickCount (Address: 0x18001b500)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetNativeSystemInfo (Address: 0x18001b518)
  • GetSystemFirmwareTable (Address: 0x18001b510)
api-ms-win-core-sysinfo-l1-2-1.dll
  • GetPhysicallyInstalledSystemMemory (Address: 0x18001b528)
api-ms-win-security-base-l1-1-0.dll
  • AdjustTokenPrivileges (Address: 0x18001b538)
api-ms-win-security-lsalookup-l2-1-0.dll
  • LookupPrivilegeValueW (Address: 0x18001b548)
msvcrt.dll
  • __C_specific_handler (Address: 0x18001b5d0)
  • __CxxFrameHandler3 (Address: 0x18001b5d8)
  • __dllonexit (Address: 0x18001b598)
  • _amsg_exit (Address: 0x18001b600)
  • _callnewh (Address: 0x18001b608)
  • _CxxThrowException (Address: 0x18001b5a8)
  • _initterm (Address: 0x18001b5a0)
  • _lock (Address: 0x18001b588)
  • _onexit (Address: 0x18001b640)
  • _purecall (Address: 0x18001b578)
  • _stricmp (Address: 0x18001b5f8)
  • _unlock (Address: 0x18001b590)
  • _vsnwprintf (Address: 0x18001b610)
  • _wcsicmp (Address: 0x18001b5c0)
  • _wcsnicmp (Address: 0x18001b648)
  • _XcptFilter (Address: 0x18001b5f0)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x18001b560)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18001b570)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x18001b5c8)
  • ??1exception@@UEAA@XZ (Address: 0x18001b580)
  • ??1type_info@@UEAA@XZ (Address: 0x18001b638)
  • ??3@YAXPEAX@Z (Address: 0x18001b5b8)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x18001b558)
  • free (Address: 0x18001b658)
  • malloc (Address: 0x18001b5e8)
  • memcmp (Address: 0x18001b630)
  • memcpy (Address: 0x18001b5b0)
  • memmove (Address: 0x18001b5e0)
  • memset (Address: 0x18001b660)
  • strncmp (Address: 0x18001b628)
  • toupper (Address: 0x18001b620)
  • wcschr (Address: 0x18001b618)
  • wcsncmp (Address: 0x18001b568)
  • wcsrchr (Address: 0x18001b650)
ntdll.dll
  • LdrResSearchResource (Address: 0x18001b738)
  • NtQuerySystemEnvironmentValueEx (Address: 0x18001b7b8)
  • NtQuerySystemInformation (Address: 0x18001b7c8)
  • RtlAllocateHeap (Address: 0x18001b7d0)
  • RtlAnsiStringToUnicodeString (Address: 0x18001b728)
  • RtlAppendUnicodeStringToString (Address: 0x18001b688)
  • RtlAppendUnicodeToString (Address: 0x18001b680)
  • RtlCaptureContext (Address: 0x18001b7a0)
  • RtlCopyUnicodeString (Address: 0x18001b670)
  • RtlDoesFileExists_U (Address: 0x18001b7a8)
  • RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x18001b690)
  • RtlFormatCurrentUserKeyPath (Address: 0x18001b6b8)
  • RtlFreeHeap (Address: 0x18001b760)
  • RtlFreeUnicodeString (Address: 0x18001b6a0)
  • RtlGetNativeSystemInformation (Address: 0x18001b710)
  • RtlGetVersion (Address: 0x18001b768)
  • RtlImageDirectoryEntryToData (Address: 0x18001b750)
  • RtlImageNtHeaderEx (Address: 0x18001b7b0)
  • RtlInitString (Address: 0x18001b718)
  • RtlInitUnicodeString (Address: 0x18001b7c0)
  • RtlInitUnicodeStringEx (Address: 0x18001b6b0)
  • RtlLookupFunctionEntry (Address: 0x18001b798)
  • RtlNtPathNameToDosPathName (Address: 0x18001b700)
  • RtlpEnsureBufferSize (Address: 0x18001b6f8)
  • RtlReAllocateHeap (Address: 0x18001b758)
  • RtlRunOnceExecuteOnce (Address: 0x18001b6d8)
  • RtlUnicodeStringToAnsiString (Address: 0x18001b730)
  • RtlUpcaseUnicodeChar (Address: 0x18001b708)
  • RtlUpcaseUnicodeString (Address: 0x18001b678)
  • RtlVerifyVersionInfo (Address: 0x18001b748)
  • RtlVirtualUnwind (Address: 0x18001b790)
  • RtlxAnsiStringToUnicodeSize (Address: 0x18001b720)
  • VerSetConditionMask (Address: 0x18001b740)
  • ZwClose (Address: 0x18001b770)
  • ZwCreateFile (Address: 0x18001b6c0)
  • ZwCreateSection (Address: 0x18001b6d0)
  • ZwEnumerateKey (Address: 0x18001b6a8)
  • ZwMapViewOfSection (Address: 0x18001b6e8)
  • ZwOpenFile (Address: 0x18001b698)
  • ZwOpenKey (Address: 0x18001b780)
  • ZwQueryDirectoryFile (Address: 0x18001b6f0)
  • ZwQueryInformationFile (Address: 0x18001b6c8)
  • ZwQuerySystemInformation (Address: 0x18001b778)
  • ZwQueryValueKey (Address: 0x18001b788)
  • ZwUnmapViewOfSection (Address: 0x18001b6e0)