securebootai.dll

v10.0.19041.4351 32-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
284.9 KB
Uploaded
2025-12-01 08:40
Views
34
SHA-256
9ee74f158b1c32a11c8a47cc54224ff6

Exported functions 2

DllCanUnloadNow #1 · 0x1e620
DllCsiGetHandler #2 · 0x1e640

Imported DLLs & functions 296

api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x10041078
CoInitializeEx 0x10041080
CoInitializeSecurity 0x10041084
CoSetProxyBlanket 0x10041074
CoUninitialize 0x1004107c
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1004108c
IsDebuggerPresent 0x10041090
OutputDebugStringW 0x10041094
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x100410a8
SetLastError 0x100410a0
SetUnhandledExceptionFilter 0x1004109c
UnhandledExceptionFilter 0x100410a4
api-ms-win-core-file-l1-1-0.dll 18
CreateDirectoryW 0x100410ec
CreateFileW 0x100410f4
DeleteFileW 0x100410e0
FindClose 0x100410e8
FindFirstFileW 0x100410cc
FindNextFileW 0x100410d4
FlushFileBuffers 0x100410f0
GetFileAttributesW 0x100410c4
GetFileInformationByHandle 0x100410d8
GetFileSizeEx 0x100410d0
GetFullPathNameW 0x100410e4
GetVolumeInformationW 0x100410bc
GetVolumePathNameW 0x100410b8
QueryDosDeviceW 0x100410b0
ReadFile 0x100410c0
SetFileAttributesW 0x100410c8
SetFileInformationByHandle 0x100410dc
WriteFile 0x100410b4
api-ms-win-core-file-l1-2-0.dll 1
GetVolumeNameForVolumeMountPointW 0x100410fc
api-ms-win-core-file-l2-1-0.dll 3
CopyFileExW 0x1004110c
GetFileInformationByHandleEx 0x10041104
MoveFileExW 0x10041108
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x10041114
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x1004111c
HeapAlloc 0x10041124
HeapDestroy 0x10041120
HeapFree 0x10041128
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x10041130
LocalFree 0x10041134
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x1004113c
api-ms-win-core-kernel32-legacy-l1-1-0.dll 2
CopyFileW 0x10041144
LoadLibraryW 0x10041148
api-ms-win-core-libraryloader-l1-1-0.dll 9
DisableThreadLibraryCalls 0x10041154
FindResourceExW 0x10041150
FreeLibrary 0x10041158
GetModuleFileNameA 0x1004116c
GetModuleHandleExW 0x1004115c
GetModuleHandleW 0x10041168
GetProcAddress 0x10041160
LoadLibraryExW 0x10041164
LoadResource 0x10041170
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x1004117c
GetLocaleInfoW 0x10041178
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x10041188
GetUserDefaultUILanguage 0x10041184
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x10041190
MapViewOfFile 0x10041194
UnmapViewOfFile 0x10041198
api-ms-win-core-privateprofile-l1-1-0.dll 1
GetPrivateProfileSectionW 0x100411a0
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x100411a8
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x100411c4
GetCurrentProcessId 0x100411c8
GetCurrentThread 0x100411cc
GetCurrentThreadId 0x100411b4
OpenProcessToken 0x100411b0
OpenThreadToken 0x100411b8
SetThreadToken 0x100411bc
TerminateProcess 0x100411c0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x100411d4
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x100411e0
RegCreateKeyExW 0x100411f0
RegDeleteKeyExW 0x100411e4
RegGetValueW 0x100411e8
RegOpenKeyExW 0x100411ec
RegQueryValueExW 0x100411dc
RegSetValueExW 0x100411f4
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathRemoveBackslashW 0x100411fc
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 2
StrCmpIW 0x10041204
StrStrIW 0x10041208
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x10041210
api-ms-win-core-string-obsolete-l1-1-0.dll 1
lstrlenA 0x10041218
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x10041250
AcquireSRWLockShared 0x10041244
CreateMutexExW 0x10041240
CreateSemaphoreExW 0x1004122c
DeleteCriticalSection 0x10041230
EnterCriticalSection 0x10041258
InitializeCriticalSection 0x10041224
InitializeCriticalSectionEx 0x10041234
LeaveCriticalSection 0x1004125c
OpenSemaphoreW 0x10041254
ReleaseMutex 0x10041220
ReleaseSemaphore 0x10041228
ReleaseSRWLockExclusive 0x10041248
ReleaseSRWLockShared 0x1004123c
WaitForSingleObject 0x10041238
WaitForSingleObjectEx 0x1004124c
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x1004126c
InitOnceComplete 0x10041268
Sleep 0x10041264
api-ms-win-core-sysinfo-l1-1-0.dll 6
GetSystemDirectoryW 0x10041274
GetSystemInfo 0x10041288
GetSystemTimeAsFileTime 0x1004127c
GetTickCount 0x10041278
GetVersionExW 0x10041280
GetWindowsDirectoryW 0x10041284
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x10041298
CreateThreadpoolTimer 0x10041290
SetThreadpoolTimer 0x1004129c
WaitForThreadpoolTimerCallbacks 0x10041294
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x100412a8
EventUnregister 0x100412a4
EventWriteTransfer 0x100412ac
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x100412c8
DuplicateTokenEx 0x100412d0
GetSecurityDescriptorControl 0x100412b8
GetSecurityDescriptorDacl 0x100412b4
GetSecurityDescriptorGroup 0x100412c0
GetSecurityDescriptorOwner 0x100412bc
GetSecurityDescriptorSacl 0x100412c4
GetTokenInformation 0x100412cc
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x100412d8
api-ms-win-security-provider-l1-1-0.dll 1
SetNamedSecurityInfoW 0x100412e0
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x100412ec
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x100412e8
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x10041300
BCryptCreateHash 0x10041304
BCryptDestroyHash 0x1004130c
BCryptFinishHash 0x100412fc
BCryptHash 0x100412f4
BCryptHashData 0x10041308
BCryptOpenAlgorithmProvider 0x100412f8
CRYPT32.dll 9
CertCloseStore 0x10041010
CertCreateCertificateContext 0x10041014
CertFindCertificateInStore 0x10041008
CertFreeCertificateContext 0x10041000
CertGetCertificateContextProperty 0x10041004
CertGetNameStringW 0x1004101c
CryptMsgClose 0x10041018
CryptMsgGetParam 0x1004100c
CryptQueryObject 0x10041020
imagehlp.dll 1
CheckSumMappedFile 0x10041314
msvcrt.dll 52
__CxxFrameHandler3 0x10041320
__dllonexit 0x10041360
__iob_func 0x100413e4
_amsg_exit 0x1004132c
_callnewh 0x100413a0
_CxxThrowException 0x100413c4
_except_handler4_common 0x10041368
_initterm 0x10041348
_lock 0x1004134c
_onexit 0x10041364
_purecall 0x100413ac
_snwscanf_s 0x100413d4
_ultow_s 0x100413dc
_unlock 0x10041350
_vsnprintf_s 0x10041378
_vsnwprintf 0x10041384
_vsnwprintf_s 0x10041374
_wcsicmp 0x100413b8
_wcslwr 0x100413d0
_wcsnicmp 0x10041358
_wcsupr 0x1004131c
_wfopen_s 0x10041394
_XcptFilter 0x10041354
??0exception@@QAE@ABV0@@Z 0x1004136c
??0exception@@QAE@XZ 0x1004135c
??1exception@@UAE@XZ 0x10041344
??1type_info@@UAE@XZ 0x1004133c
?terminate@@YAXXZ 0x1004139c
bsearch 0x10041334
fclose 0x10041388
fflush 0x10041330
free 0x100413a8
fwprintf 0x10041338
malloc 0x100413a4
memcmp 0x100413c0
memcpy 0x100413bc
memcpy_s 0x100413b4
memmove 0x10041370
memmove_s 0x100413b0
memset 0x100413e8
strcpy_s 0x100413d8
strncmp 0x100413c8
swprintf_s 0x10041390
wcscat_s 0x10041328
wcschr 0x10041324
wcscpy_s 0x10041398
wcsncmp 0x10041340
wcsncpy_s 0x1004138c
wcsnlen 0x100413cc
wcsrchr 0x10041380
wcsstr 0x1004137c
wcstoul 0x100413e0
ntdll.dll 85
LdrAccessResource 0x10041428
LdrFindResource_U 0x10041424
LdrGetDllHandle 0x100414b4
LdrGetProcedureAddress 0x100414b0
NtAdjustPrivilegesToken 0x100414e4
NtClose 0x10041524
NtCreateEvent 0x100413fc
NtDeviceIoControlFile 0x100413f4
NtEnumerateBootEntries 0x10041518
NtOpenDirectoryObject 0x10041510
NtOpenFile 0x1004140c
NtOpenKey 0x100414f8
NtOpenProcess 0x10041540
NtOpenProcessTokenEx 0x100414e8
NtOpenSymbolicLinkObject 0x100414f4
NtOpenThreadTokenEx 0x100414ec
NtQueryBootEntryOrder 0x10041504
NtQueryBootOptions 0x10041508
NtQueryDirectoryObject 0x10041514
NtQueryInformationFile 0x10041400
NtQueryInformationProcess 0x10041520
NtQueryInformationThread 0x10041404
NtQuerySymbolicLinkObject 0x100414fc
NtQuerySystemEnvironmentValueEx 0x10041530
NtQuerySystemInformation 0x1004153c
NtQueryValueKey 0x10041500
NtReadFile 0x1004148c
NtSetInformationFile 0x10041414
NtSetInformationThread 0x100413f0
NtSetSystemEnvironmentValueEx 0x10041534
NtTranslateFilePath 0x1004150c
NtWaitForSingleObject 0x10041408
NtWriteFile 0x10041528
RtlAddAccessAllowedAceEx 0x10041470
RtlAllocateAndInitializeSid 0x10041474
RtlAllocateHeap 0x1004142c
RtlAppendUnicodeToString 0x10041450
RtlCompareMemory 0x10041420
RtlCreateAcl 0x10041498
RtlCreateSecurityDescriptor 0x100414a4
RtlFreeHeap 0x1004141c
RtlFreeSid 0x10041488
RtlFreeUnicodeString 0x10041410
RtlGetVersion 0x100414d8
RtlGUIDFromString 0x1004144c
RtlImageNtHeader 0x100413f8
RtlImpersonateSelf 0x100414f0
RtlInitAnsiString 0x100414bc
RtlInitUnicodeString 0x10041538
RtlLengthSecurityDescriptor 0x10041458
RtlLengthSid 0x10041478
RtlNtStatusToDosError 0x1004152c
RtlSetDaclSecurityDescriptor 0x10041460
RtlSetOwnerSecurityDescriptor 0x1004145c
RtlStringFromGUID 0x10041418
ZwAllocateUuids 0x100414e0
ZwClose 0x10041444
ZwCreateFile 0x10041464
ZwCreateKey 0x10041468
ZwDeleteKey 0x1004151c
ZwDeleteValueKey 0x10041480
ZwDeviceIoControlFile 0x100414cc
ZwEnumerateKey 0x10041490
ZwFlushKey 0x1004147c
ZwLoadKey 0x1004146c
ZwOpenDirectoryObject 0x100414dc
ZwOpenFile 0x1004143c
ZwOpenKey 0x100414ac
ZwOpenMutant 0x10041440
ZwOpenProcess 0x100414c4
ZwOpenSymbolicLinkObject 0x100414d4
ZwQueryAttributesFile 0x10041454
ZwQueryDirectoryObject 0x100414d0
ZwQueryInformationFile 0x100414c0
ZwQueryInformationProcess 0x100414b8
ZwQueryKey 0x10041434
ZwQuerySymbolicLinkObject 0x100414c8
ZwQuerySystemInformation 0x10041448
ZwQueryValueKey 0x10041494
ZwReleaseMutant 0x10041438
ZwSaveKey 0x10041484
ZwSetSecurityObject 0x1004149c
ZwSetValueKey 0x100414a8
ZwUnloadKey 0x100414a0
ZwWaitForSingleObject 0x10041430
OLEAUT32.dll 4
SysAllocString 0x1004102c
SysFreeString 0x10041034
VariantClear 0x10041030
VariantInit 0x10041028
RPCRT4.dll 1
UuidCreate 0x1004103c
WCP.dll 7
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z 0x1004105c
?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10041048
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10041044
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z 0x10041054
ConvertNtStatusToHResult 0x1004104c
RtlFreeLBlob 0x10041058
RtlReportErrorOrigination 0x10041050
WINTRUST.dll 3
WinVerifyTrust 0x1004106c
WTHelperGetProvSignerFromChain 0x10041064
WTHelperProvDataFromStateData 0x10041068