securebootai.dll

v10.0.19041.3989 32-bit Windows NT Analyzed
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
88.9 KB
Uploaded
2025-12-01 08:40
Views
45
SHA-256
ddba3ea69b363e3504f209e5de9e159a

Exported functions 2

DllCanUnloadNow #1 · 0xc390
DllCsiGetHandler #2 · 0xc3b0

Imported DLLs & functions 135

CoCreateInstance 0x1001305c
CoInitializeEx 0x10013064
CoInitializeSecurity 0x10013068
CoSetProxyBlanket 0x10013060
CoUninitialize 0x10013058
DebugBreak 0x10013078
IsDebuggerPresent 0x10013070
OutputDebugStringW 0x10013074
GetLastError 0x10013088
SetLastError 0x10013084
SetUnhandledExceptionFilter 0x10013080
UnhandledExceptionFilter 0x1001308c
CreateFileW 0x1001309c
FindClose 0x10013098
FindFirstFileW 0x100130a8
FindNextFileW 0x10013094
GetFileSizeEx 0x100130a0
ReadFile 0x100130a4
CloseHandle 0x100130b0
GetProcessHeap 0x100130c0
HeapAlloc 0x100130bc
HeapDestroy 0x100130c4
HeapFree 0x100130b8
DisableThreadLibraryCalls 0x100130f4
FreeLibrary 0x100130dc
GetModuleFileNameA 0x100130e4
GetModuleHandleExW 0x100130e0
GetModuleHandleW 0x100130f0
GetProcAddress 0x100130ec
LoadLibraryExW 0x100130e8
FormatMessageW 0x100130fc
GetCurrentProcess 0x10013108
GetCurrentProcessId 0x10013110
GetCurrentThread 0x10013114
GetCurrentThreadId 0x10013118
OpenProcessToken 0x1001310c
OpenThreadToken 0x10013104
TerminateProcess 0x1001311c
QueryPerformanceCounter 0x10013124
RegCloseKey 0x10013138
RegCreateKeyExW 0x10013130
RegDeleteKeyExW 0x1001312c
RegGetValueW 0x10013134
RegOpenKeyExW 0x10013144
RegQueryValueExW 0x10013140
RegSetValueExW 0x1001313c
StrCmpIW 0x1001314c
StrStrIW 0x10013150
MultiByteToWideChar 0x10013158
AcquireSRWLockExclusive 0x10013190
AcquireSRWLockShared 0x10013198
CreateMutexExW 0x10013188
CreateSemaphoreExW 0x10013180
DeleteCriticalSection 0x10013170
EnterCriticalSection 0x1001318c
InitializeCriticalSection 0x10013178
InitializeCriticalSectionEx 0x10013174
LeaveCriticalSection 0x10013184
OpenSemaphoreW 0x10013168
ReleaseMutex 0x100131a4
ReleaseSemaphore 0x100131a0
ReleaseSRWLockExclusive 0x10013194
ReleaseSRWLockShared 0x1001319c
WaitForSingleObject 0x1001316c
WaitForSingleObjectEx 0x1001317c
InitOnceBeginInitialize 0x100131b4
InitOnceComplete 0x100131b0
Sleep 0x100131ac
GetSystemDirectoryW 0x100131c4
GetSystemInfo 0x100131c8
GetSystemTimeAsFileTime 0x100131bc
GetTickCount 0x100131c0
CloseThreadpoolTimer 0x100131d8
CreateThreadpoolTimer 0x100131d4
SetThreadpoolTimer 0x100131d0
WaitForThreadpoolTimerCallbacks 0x100131dc
EventRegister 0x100131ec
EventUnregister 0x100131e8
EventWriteTransfer 0x100131e4
AdjustTokenPrivileges 0x100131f4
LookupPrivilegeValueW 0x100131fc
CertCloseStore 0x1001300c
CertCreateCertificateContext 0x1001301c
CertFindCertificateInStore 0x10013014
CertFreeCertificateContext 0x10013000
CertGetCertificateContextProperty 0x10013018
CryptMsgClose 0x10013004
CryptMsgGetParam 0x10013010
CryptQueryObject 0x10013008
__CxxFrameHandler3 0x10013234
__dllonexit 0x10013218
_amsg_exit 0x10013240
_callnewh 0x1001324c
_CxxThrowException 0x1001326c
_except_handler4_common 0x10013238
_initterm 0x10013230
_lock 0x10013220
_onexit 0x10013214
_purecall 0x10013258
_unlock 0x10013264
_vsnprintf_s 0x10013208
_vsnwprintf 0x1001323c
_vsnwprintf_s 0x1001320c
_wcsicmp 0x1001322c
_XcptFilter 0x1001321c
??0exception@@QAE@ABV0@@Z 0x10013210
??0exception@@QAE@XZ 0x10013248
??1exception@@UAE@XZ 0x10013228
??1type_info@@UAE@XZ 0x10013244
?terminate@@YAXXZ 0x10013224
free 0x10013254
malloc 0x10013250
memcmp 0x10013268
memcpy_s 0x10013260
memmove_s 0x1001325c
memset 0x10013270
wcsstr 0x10013204
NtQuerySystemInformation 0x10013280
NtSetSystemEnvironmentValueEx 0x10013284
RtlInitUnicodeString 0x1001327c
RtlNtStatusToDosError 0x10013278
SysAllocString 0x10013028
SysFreeString 0x10013030
VariantClear 0x1001302c
VariantInit 0x10013024
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z 0x10013044
?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10013038
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x1001303c
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z 0x10013040
ConvertNtStatusToHResult 0x10013050
RtlFreeLBlob 0x10013048
RtlReportErrorOrigination 0x1001304c