securebootai.dll

v10.0.19041.5071 32-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
294.5 KB
Uploaded
2025-12-01 08:40
Views
50
SHA-256
dc636bd89ebd51b07a96833f1c09f32b

Exported functions 2

DllCanUnloadNow #1 · 0x1f430
DllCsiGetHandler #2 · 0x1f450

Imported DLLs & functions 299

api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x10043078
CoInitializeEx 0x10043080
CoInitializeSecurity 0x10043084
CoSetProxyBlanket 0x10043074
CoUninitialize 0x1004307c
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1004308c
IsDebuggerPresent 0x10043090
OutputDebugStringW 0x10043094
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x100430a8
SetLastError 0x100430a0
SetUnhandledExceptionFilter 0x1004309c
UnhandledExceptionFilter 0x100430a4
api-ms-win-core-file-l1-1-0.dll 18
CreateDirectoryW 0x100430f0
CreateFileW 0x100430f4
DeleteFileW 0x100430e0
FindClose 0x100430e8
FindFirstFileW 0x100430cc
FindNextFileW 0x100430d4
FlushFileBuffers 0x100430b8
GetFileAttributesW 0x100430b4
GetFileInformationByHandle 0x100430d8
GetFileSizeEx 0x100430d0
GetFullPathNameW 0x100430e4
GetVolumeInformationW 0x100430c4
GetVolumePathNameW 0x100430b0
QueryDosDeviceW 0x100430bc
ReadFile 0x100430c0
SetFileAttributesW 0x100430ec
SetFileInformationByHandle 0x100430dc
WriteFile 0x100430c8
api-ms-win-core-file-l1-2-0.dll 1
GetVolumeNameForVolumeMountPointW 0x100430fc
api-ms-win-core-file-l2-1-0.dll 3
CopyFileExW 0x1004310c
GetFileInformationByHandleEx 0x10043104
MoveFileExW 0x10043108
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x10043114
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x10043124
HeapAlloc 0x10043128
HeapDestroy 0x10043120
HeapFree 0x1004311c
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x10043130
LocalFree 0x10043134
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x1004313c
api-ms-win-core-kernel32-legacy-l1-1-0.dll 2
FindResourceW 0x10043144
LoadLibraryW 0x10043148
api-ms-win-core-libraryloader-l1-1-0.dll 10
DisableThreadLibraryCalls 0x10043150
FindResourceExW 0x1004315c
FreeLibrary 0x10043158
GetModuleFileNameA 0x10043170
GetModuleHandleExW 0x10043154
GetModuleHandleW 0x10043174
GetProcAddress 0x1004316c
LoadLibraryExW 0x10043160
LoadResource 0x10043168
SizeofResource 0x10043164
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x1004317c
GetLocaleInfoW 0x10043180
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x1004318c
GetUserDefaultUILanguage 0x10043188
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x10043198
MapViewOfFile 0x1004319c
UnmapViewOfFile 0x10043194
api-ms-win-core-privateprofile-l1-1-0.dll 1
GetPrivateProfileSectionW 0x100431a4
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x100431ac
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x100431c8
GetCurrentProcessId 0x100431bc
GetCurrentThread 0x100431cc
GetCurrentThreadId 0x100431d0
OpenProcessToken 0x100431c0
OpenThreadToken 0x100431c4
SetThreadToken 0x100431b4
TerminateProcess 0x100431b8
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x100431d8
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x100431e8
RegCreateKeyExW 0x100431f8
RegDeleteKeyExW 0x100431ec
RegGetValueW 0x100431e4
RegOpenKeyExW 0x100431f0
RegQueryValueExW 0x100431e0
RegSetValueExW 0x100431f4
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathRemoveBackslashW 0x10043200
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 2
StrCmpIW 0x10043208
StrStrIW 0x1004320c
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x10043214
api-ms-win-core-string-obsolete-l1-1-0.dll 1
lstrlenA 0x1004321c
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x10043258
AcquireSRWLockShared 0x10043250
CreateMutexExW 0x10043224
CreateSemaphoreExW 0x10043234
DeleteCriticalSection 0x10043240
EnterCriticalSection 0x1004323c
InitializeCriticalSection 0x10043238
InitializeCriticalSectionEx 0x1004322c
LeaveCriticalSection 0x10043230
OpenSemaphoreW 0x10043244
ReleaseMutex 0x10043228
ReleaseSemaphore 0x1004324c
ReleaseSRWLockExclusive 0x10043254
ReleaseSRWLockShared 0x10043248
WaitForSingleObject 0x1004325c
WaitForSingleObjectEx 0x10043260
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x1004326c
InitOnceComplete 0x10043268
Sleep 0x10043270
api-ms-win-core-sysinfo-l1-1-0.dll 6
GetSystemDirectoryW 0x1004328c
GetSystemInfo 0x10043288
GetSystemTimeAsFileTime 0x10043284
GetTickCount 0x1004327c
GetVersionExW 0x10043280
GetWindowsDirectoryW 0x10043278
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x10043294
CreateThreadpoolTimer 0x10043298
SetThreadpoolTimer 0x100432a0
WaitForThreadpoolTimerCallbacks 0x1004329c
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x100432a8
EventUnregister 0x100432ac
EventWriteTransfer 0x100432b0
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x100432b8
DuplicateTokenEx 0x100432d0
GetSecurityDescriptorControl 0x100432d4
GetSecurityDescriptorDacl 0x100432c8
GetSecurityDescriptorGroup 0x100432cc
GetSecurityDescriptorOwner 0x100432c0
GetSecurityDescriptorSacl 0x100432c4
GetTokenInformation 0x100432bc
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x100432dc
api-ms-win-security-provider-l1-1-0.dll 1
SetNamedSecurityInfoW 0x100432e4
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x100432f0
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x100432ec
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x100432f8
BCryptCreateHash 0x1004330c
BCryptDestroyHash 0x10043304
BCryptFinishHash 0x10043300
BCryptHash 0x10043310
BCryptHashData 0x10043308
BCryptOpenAlgorithmProvider 0x100432fc
CRYPT32.dll 9
CertCloseStore 0x10043010
CertCreateCertificateContext 0x10043014
CertFindCertificateInStore 0x10043008
CertFreeCertificateContext 0x10043000
CertGetCertificateContextProperty 0x10043004
CertGetNameStringW 0x1004301c
CryptMsgClose 0x10043018
CryptMsgGetParam 0x1004300c
CryptQueryObject 0x10043020
imagehlp.dll 1
CheckSumMappedFile 0x10043318
msvcrt.dll 52
__CxxFrameHandler3 0x10043320
__dllonexit 0x1004336c
__iob_func 0x100433e8
_amsg_exit 0x10043328
_callnewh 0x100433a0
_CxxThrowException 0x100433c4
_except_handler4_common 0x10043378
_initterm 0x10043348
_lock 0x10043354
_onexit 0x10043370
_purecall 0x100433ac
_snwscanf_s 0x100433dc
_ultow_s 0x100433e0
_unlock 0x10043358
_vsnprintf_s 0x10043350
_vsnwprintf 0x1004339c
_vsnwprintf_s 0x10043344
_wcsicmp 0x10043324
_wcslwr 0x100433d8
_wcsnicmp 0x10043334
_wcsupr 0x10043390
_wfopen_s 0x1004338c
_XcptFilter 0x10043360
??0exception@@QAE@ABV0@@Z 0x10043330
??0exception@@QAE@XZ 0x10043368
??1exception@@UAE@XZ 0x1004333c
??1type_info@@UAE@XZ 0x10043398
?terminate@@YAXXZ 0x10043384
bsearch 0x10043380
fclose 0x10043394
fflush 0x10043388
free 0x100433a8
fwprintf 0x1004335c
malloc 0x100433a4
memcmp 0x100433c0
memcpy 0x100433bc
memcpy_s 0x100433b4
memmove 0x1004337c
memmove_s 0x100433b0
memset 0x100433ec
strcpy_s 0x100433cc
strncmp 0x100433c8
swprintf_s 0x1004332c
wcscat_s 0x10043338
wcschr 0x10043340
wcscpy_s 0x1004334c
wcsncmp 0x10043374
wcsncpy_s 0x10043364
wcsnlen 0x100433d0
wcsrchr 0x100433b8
wcsstr 0x100433d4
wcstoul 0x100433e4
ntdll.dll 87
LdrAccessResource 0x1004342c
LdrFindResource_U 0x10043428
LdrGetDllHandle 0x100434d8
LdrGetProcedureAddress 0x100434d4
NtAdjustPrivilegesToken 0x10043508
NtClose 0x100433fc
NtCreateEvent 0x10043400
NtDeviceIoControlFile 0x100433f4
NtEnumerateBootEntries 0x10043528
NtOpenDirectoryObject 0x10043498
NtOpenFile 0x10043410
NtOpenKey 0x1004346c
NtOpenProcess 0x1004351c
NtOpenProcessTokenEx 0x1004350c
NtOpenSymbolicLinkObject 0x10043464
NtOpenThreadTokenEx 0x10043510
NtQueryBootEntryOrder 0x10043490
NtQueryBootOptions 0x10043494
NtQueryDirectoryObject 0x1004349c
NtQueryInformationFile 0x10043404
NtQueryInformationProcess 0x10043520
NtQueryInformationThread 0x10043408
NtQuerySymbolicLinkObject 0x10043470
NtQuerySystemEnvironmentValueEx 0x1004353c
NtQuerySystemInformation 0x10043548
NtQueryValueKey 0x1004348c
NtReadFile 0x1004354c
NtSetInformationFile 0x10043418
NtSetInformationThread 0x10043484
NtSetSystemEnvironmentValueEx 0x10043540
NtTranslateFilePath 0x10043534
NtWaitForSingleObject 0x1004340c
NtWriteFile 0x10043524
RtlAddAccessAllowedAceEx 0x10043474
RtlAdjustPrivilege 0x10043530
RtlAllocateAndInitializeSid 0x10043478
RtlAllocateHeap 0x10043430
RtlAppendUnicodeToString 0x10043454
RtlCompareMemory 0x10043424
RtlCreateAcl 0x10043518
RtlCreateSecurityDescriptor 0x10043488
RtlFreeHeap 0x10043420
RtlFreeSid 0x10043480
RtlFreeUnicodeString 0x10043414
RtlGetVersion 0x100434fc
RtlGUIDFromString 0x10043450
RtlImageNtHeader 0x100433f8
RtlImageNtHeaderEx 0x1004352c
RtlImpersonateSelf 0x10043514
RtlInitAnsiString 0x100434e0
RtlInitUnicodeString 0x10043544
RtlLengthSecurityDescriptor 0x1004345c
RtlLengthSid 0x1004347c
RtlNtStatusToDosError 0x10043538
RtlSetDaclSecurityDescriptor 0x10043468
RtlSetOwnerSecurityDescriptor 0x10043460
RtlStringFromGUID 0x1004341c
ZwAllocateUuids 0x10043504
ZwClose 0x10043448
ZwCreateFile 0x100434a0
ZwCreateKey 0x100434a4
ZwDeleteKey 0x100434b8
ZwDeleteValueKey 0x100434b0
ZwDeviceIoControlFile 0x100434f0
ZwEnumerateKey 0x100434bc
ZwFlushKey 0x100434ac
ZwLoadKey 0x100434a8
ZwOpenDirectoryObject 0x10043500
ZwOpenFile 0x10043440
ZwOpenKey 0x100434d0
ZwOpenMutant 0x10043444
ZwOpenProcess 0x100434e8
ZwOpenSymbolicLinkObject 0x100434f8
ZwQueryAttributesFile 0x10043458
ZwQueryDirectoryObject 0x100434f4
ZwQueryInformationFile 0x100434e4
ZwQueryInformationProcess 0x100434dc
ZwQueryKey 0x10043438
ZwQuerySymbolicLinkObject 0x100434ec
ZwQuerySystemInformation 0x1004344c
ZwQueryValueKey 0x100434c0
ZwReleaseMutant 0x1004343c
ZwSaveKey 0x100434b4
ZwSetSecurityObject 0x100434c4
ZwSetValueKey 0x100434cc
ZwUnloadKey 0x100434c8
ZwWaitForSingleObject 0x10043434
OLEAUT32.dll 4
SysAllocString 0x1004302c
SysFreeString 0x10043034
VariantClear 0x10043030
VariantInit 0x10043028
RPCRT4.dll 1
UuidCreate 0x1004303c
WCP.dll 7
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z 0x1004305c
?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10043048
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10043044
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z 0x10043054
ConvertNtStatusToHResult 0x1004304c
RtlFreeLBlob 0x10043058
RtlReportErrorOrigination 0x10043050
WINTRUST.dll 3
WinVerifyTrust 0x1004306c
WTHelperGetProvSignerFromChain 0x10043064
WTHelperProvDataFromStateData 0x10043068