tbs.dll

Description: TBS

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: c9ee6a887a5459935bf0ba9e9815b674

File Size: 74.7 KB

Uploaded At: Dec. 1, 2025, 8:05 a.m.

Views: 7

Exported Functions

Tbsi_Create_Attestation_From_Log (Ordinal: 1, Address: 0xd050)
Tbsi_Get_TCG_Logs (Ordinal: 2, Address: 0xaed0)
GetDeviceID (Ordinal: 3, Address: 0xd6d0)
GetDeviceIDString (Ordinal: 4, Address: 0x4eb0)
GetDeviceIDWithTimeout (Ordinal: 5, Address: 0x50d0)
Tbsi_Context_Create (Ordinal: 6, Address: 0xbee0)
Tbsi_Create_Windows_Key (Ordinal: 7, Address: 0xbfb0)
Tbsi_FilterLog (Ordinal: 8, Address: 0xd8b0)
Tbsi_GetDeviceInfo (Ordinal: 9, Address: 0xc050)
Tbsi_Get_OwnerAuth (Ordinal: 10, Address: 0xc0d0)
Tbsi_Get_TCG_Log (Ordinal: 11, Address: 0xc620)
Tbsi_Get_TCG_Log_Ex (Ordinal: 12, Address: 0xc670)
Tbsi_Physical_Presence_Command (Ordinal: 13, Address: 0xc710)
Tbsi_Revoke_Attestation (Ordinal: 14, Address: 0xc780)
Tbsi_ShaHash (Ordinal: 15, Address: 0xdb30)
Tbsip_Cancel_Commands (Ordinal: 16, Address: 0xc800)
Tbsip_Context_Close (Ordinal: 17, Address: 0xc840)
Tbsip_Submit_Command (Ordinal: 18, Address: 0xc880)
Tbsip_Submit_Command_NonBlocking (Ordinal: 19, Address: 0xc8b0)
Tbsip_TestInterruptInformation (Ordinal: 20, Address: 0xc8e0)
Tbsip_TestMorBit (Ordinal: 21, Address: 0xc980)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x10010000)
IsDebuggerPresent (Address: 0x10010004)
OutputDebugStringW (Address: 0x10010008)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x10010018)
SetLastError (Address: 0x10010010)
SetUnhandledExceptionFilter (Address: 0x10010014)
UnhandledExceptionFilter (Address: 0x1001001c)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x1001002c)
GetFileSize (Address: 0x10010024)
ReadFile (Address: 0x10010028)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x10010034)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1001003c)
HeapAlloc (Address: 0x10010044)
HeapFree (Address: 0x10010040)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x10010054)
GetModuleHandleExW (Address: 0x10010050)
GetModuleHandleW (Address: 0x1001004c)
GetProcAddress (Address: 0x10010058)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10010060)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x10010068)
GetCurrentProcessId (Address: 0x1001006c)
GetCurrentThread (Address: 0x10010078)
GetCurrentThreadId (Address: 0x10010074)
TerminateProcess (Address: 0x10010070)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x10010080)

api-ms-win-core-registry-l1-1-0.dll

RegGetValueW (Address: 0x10010088)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x10010090)

api-ms-win-core-rtlsupport-l1-2-0.dll

RtlCompareMemory (Address: 0x10010098)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100100dc)
AcquireSRWLockShared (Address: 0x100100c8)
CreateEventW (Address: 0x100100b4)
CreateMutexExW (Address: 0x100100d8)
CreateSemaphoreExW (Address: 0x100100e0)
DeleteCriticalSection (Address: 0x100100a4)
EnterCriticalSection (Address: 0x100100b0)
InitializeCriticalSectionEx (Address: 0x100100a0)
LeaveCriticalSection (Address: 0x100100d0)
OpenSemaphoreW (Address: 0x100100ac)
ReleaseMutex (Address: 0x100100b8)
ReleaseSemaphore (Address: 0x100100bc)
ReleaseSRWLockExclusive (Address: 0x100100cc)
ReleaseSRWLockShared (Address: 0x100100c4)
SetEvent (Address: 0x100100c0)
WaitForSingleObject (Address: 0x100100a8)
WaitForSingleObjectEx (Address: 0x100100d4)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x100100e8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x100100fc)
GetSystemWindowsDirectoryW (Address: 0x100100f4)
GetTickCount (Address: 0x100100f8)
GetTickCount64 (Address: 0x100100f0)

api-ms-win-core-sysinfo-l1-2-0.dll

GetNativeSystemInfo (Address: 0x10010104)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x10010118)
CreateThreadpoolTimer (Address: 0x1001010c)
SetThreadpoolTimer (Address: 0x10010114)
WaitForThreadpoolTimerCallbacks (Address: 0x10010110)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x10010124)
EventSetInformation (Address: 0x10010128)
EventUnregister (Address: 0x10010120)
EventWriteTransfer (Address: 0x1001012c)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x1001013c)
BCryptCreateHash (Address: 0x10010148)
BCryptDestroyHash (Address: 0x10010138)
BCryptFinishHash (Address: 0x10010134)
BCryptGetProperty (Address: 0x10010140)
BCryptHashData (Address: 0x10010144)
BCryptOpenAlgorithmProvider (Address: 0x1001014c)

imagehlp.dll

StackWalk64 (Address: 0x10010160)
SymCleanup (Address: 0x10010168)
SymFunctionTableAccess64 (Address: 0x1001015c)
SymGetModuleBase64 (Address: 0x10010154)
SymGetModuleInfo64 (Address: 0x10010158)
SymInitialize (Address: 0x10010164)

msvcrt.dll

__dllonexit (Address: 0x10010180)
_amsg_exit (Address: 0x10010190)
_callnewh (Address: 0x10010198)
_except_handler4_common (Address: 0x10010178)
_initterm (Address: 0x1001018c)
_lock (Address: 0x10010188)
_onexit (Address: 0x1001017c)
_purecall (Address: 0x100101a4)
_unlock (Address: 0x10010184)
_vsnwprintf (Address: 0x10010174)
_XcptFilter (Address: 0x10010194)
free (Address: 0x100101a0)
malloc (Address: 0x1001019c)
memcmp (Address: 0x10010170)
memcpy (Address: 0x100101b4)
memcpy_s (Address: 0x100101b0)
memmove_s (Address: 0x100101a8)
memset (Address: 0x100101b8)
sprintf_s (Address: 0x100101ac)

ntdll.dll

NtClose (Address: 0x100101ec)
NtCreateEvent (Address: 0x100101d4)
NtCreateFile (Address: 0x100101fc)
NtDeviceIoControlFile (Address: 0x100101d0)
NtOpenKey (Address: 0x100101f4)
NtQueryInformationFile (Address: 0x100101e0)
NtQuerySystemInformation (Address: 0x100101e4)
NtQueryValueKey (Address: 0x100101f0)
NtWaitForSingleObject (Address: 0x100101cc)
RtlGetPersistedStateLocation (Address: 0x100101e8)
RtlInitUnicodeString (Address: 0x100101f8)
RtlNtStatusToDosError (Address: 0x100101d8)
RtlPublishWnfStateData (Address: 0x100101c4)
RtlQueryWnfStateData (Address: 0x100101c8)
RtlSubscribeWnfStateChangeNotification (Address: 0x100101c0)
RtlUnsubscribeWnfStateChangeNotification (Address: 0x100101dc)