securebootai.dll

v10.0.19041.5363 32-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
299.0 KB
Uploaded
2025-12-01 08:40
Views
62
SHA-256
9cedb5d60275595e4420198da7b1d9cd

Exported functions 2

DllCanUnloadNow #1 · 0x20020
DllCsiGetHandler #2 · 0x20040

Imported DLLs & functions 299

api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x10044078
CoInitializeEx 0x10044080
CoInitializeSecurity 0x10044084
CoSetProxyBlanket 0x10044074
CoUninitialize 0x1004407c
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1004408c
IsDebuggerPresent 0x10044090
OutputDebugStringW 0x10044094
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x100440a8
SetLastError 0x100440a0
SetUnhandledExceptionFilter 0x1004409c
UnhandledExceptionFilter 0x100440a4
api-ms-win-core-file-l1-1-0.dll 18
CreateDirectoryW 0x100440f0
CreateFileW 0x100440f4
DeleteFileW 0x100440e0
FindClose 0x100440e8
FindFirstFileW 0x100440cc
FindNextFileW 0x100440d4
FlushFileBuffers 0x100440b8
GetFileAttributesW 0x100440b4
GetFileInformationByHandle 0x100440d8
GetFileSizeEx 0x100440d0
GetFullPathNameW 0x100440e4
GetVolumeInformationW 0x100440c4
GetVolumePathNameW 0x100440b0
QueryDosDeviceW 0x100440bc
ReadFile 0x100440c0
SetFileAttributesW 0x100440ec
SetFileInformationByHandle 0x100440dc
WriteFile 0x100440c8
api-ms-win-core-file-l1-2-0.dll 1
GetVolumeNameForVolumeMountPointW 0x100440fc
api-ms-win-core-file-l2-1-0.dll 3
CopyFileExW 0x1004410c
GetFileInformationByHandleEx 0x10044104
MoveFileExW 0x10044108
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x10044114
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x10044124
HeapAlloc 0x10044128
HeapDestroy 0x10044120
HeapFree 0x1004411c
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x10044130
LocalFree 0x10044134
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x1004413c
api-ms-win-core-kernel32-legacy-l1-1-0.dll 2
FindResourceW 0x10044144
LoadLibraryW 0x10044148
api-ms-win-core-libraryloader-l1-1-0.dll 10
DisableThreadLibraryCalls 0x10044150
FindResourceExW 0x1004415c
FreeLibrary 0x10044158
GetModuleFileNameA 0x10044170
GetModuleHandleExW 0x10044154
GetModuleHandleW 0x10044174
GetProcAddress 0x1004416c
LoadLibraryExW 0x10044160
LoadResource 0x10044168
SizeofResource 0x10044164
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x1004417c
GetLocaleInfoW 0x10044180
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x1004418c
GetUserDefaultUILanguage 0x10044188
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x10044198
MapViewOfFile 0x1004419c
UnmapViewOfFile 0x10044194
api-ms-win-core-privateprofile-l1-1-0.dll 1
GetPrivateProfileSectionW 0x100441a4
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x100441ac
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x100441c8
GetCurrentProcessId 0x100441bc
GetCurrentThread 0x100441cc
GetCurrentThreadId 0x100441d0
OpenProcessToken 0x100441c0
OpenThreadToken 0x100441c4
SetThreadToken 0x100441b4
TerminateProcess 0x100441b8
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x100441d8
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x100441e8
RegCreateKeyExW 0x100441f8
RegDeleteKeyExW 0x100441ec
RegGetValueW 0x100441e4
RegOpenKeyExW 0x100441f0
RegQueryValueExW 0x100441e0
RegSetValueExW 0x100441f4
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathRemoveBackslashW 0x10044200
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 2
StrCmpIW 0x10044208
StrStrIW 0x1004420c
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x10044214
api-ms-win-core-string-obsolete-l1-1-0.dll 1
lstrlenA 0x1004421c
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x10044258
AcquireSRWLockShared 0x10044250
CreateMutexExW 0x10044224
CreateSemaphoreExW 0x10044234
DeleteCriticalSection 0x10044240
EnterCriticalSection 0x1004423c
InitializeCriticalSection 0x10044238
InitializeCriticalSectionEx 0x1004422c
LeaveCriticalSection 0x10044230
OpenSemaphoreW 0x10044244
ReleaseMutex 0x10044228
ReleaseSemaphore 0x1004424c
ReleaseSRWLockExclusive 0x10044254
ReleaseSRWLockShared 0x10044248
WaitForSingleObject 0x1004425c
WaitForSingleObjectEx 0x10044260
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x1004426c
InitOnceComplete 0x10044268
Sleep 0x10044270
api-ms-win-core-sysinfo-l1-1-0.dll 6
GetSystemDirectoryW 0x1004428c
GetSystemInfo 0x10044288
GetSystemTimeAsFileTime 0x10044284
GetTickCount 0x1004427c
GetVersionExW 0x10044280
GetWindowsDirectoryW 0x10044278
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x10044294
CreateThreadpoolTimer 0x10044298
SetThreadpoolTimer 0x100442a0
WaitForThreadpoolTimerCallbacks 0x1004429c
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x100442a8
EventUnregister 0x100442ac
EventWriteTransfer 0x100442b0
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x100442b8
DuplicateTokenEx 0x100442d0
GetSecurityDescriptorControl 0x100442d4
GetSecurityDescriptorDacl 0x100442c8
GetSecurityDescriptorGroup 0x100442cc
GetSecurityDescriptorOwner 0x100442c0
GetSecurityDescriptorSacl 0x100442c4
GetTokenInformation 0x100442bc
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x100442dc
api-ms-win-security-provider-l1-1-0.dll 1
SetNamedSecurityInfoW 0x100442e4
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x100442f0
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x100442ec
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x100442f8
BCryptCreateHash 0x1004430c
BCryptDestroyHash 0x10044304
BCryptFinishHash 0x10044300
BCryptHash 0x10044310
BCryptHashData 0x10044308
BCryptOpenAlgorithmProvider 0x100442fc
CRYPT32.dll 9
CertCloseStore 0x10044010
CertCreateCertificateContext 0x10044014
CertFindCertificateInStore 0x10044008
CertFreeCertificateContext 0x10044000
CertGetCertificateContextProperty 0x10044004
CertGetNameStringW 0x1004401c
CryptMsgClose 0x10044018
CryptMsgGetParam 0x1004400c
CryptQueryObject 0x10044020
imagehlp.dll 1
CheckSumMappedFile 0x10044318
msvcrt.dll 52
__CxxFrameHandler3 0x10044320
__dllonexit 0x1004436c
__iob_func 0x100443e8
_amsg_exit 0x10044328
_callnewh 0x100443a0
_CxxThrowException 0x100443c4
_except_handler4_common 0x10044378
_initterm 0x10044348
_lock 0x10044354
_onexit 0x10044370
_purecall 0x100443ac
_snwscanf_s 0x100443dc
_ultow_s 0x100443e0
_unlock 0x10044358
_vsnprintf_s 0x10044350
_vsnwprintf 0x1004439c
_vsnwprintf_s 0x10044344
_wcsicmp 0x10044324
_wcslwr 0x100443d8
_wcsnicmp 0x10044334
_wcsupr 0x10044390
_wfopen_s 0x1004438c
_XcptFilter 0x10044360
??0exception@@QAE@ABV0@@Z 0x10044330
??0exception@@QAE@XZ 0x10044368
??1exception@@UAE@XZ 0x1004433c
??1type_info@@UAE@XZ 0x10044398
?terminate@@YAXXZ 0x10044384
bsearch 0x10044380
fclose 0x10044394
fflush 0x10044388
free 0x100443a8
fwprintf 0x1004435c
malloc 0x100443a4
memcmp 0x100443c0
memcpy 0x100443bc
memcpy_s 0x100443b4
memmove 0x1004437c
memmove_s 0x100443b0
memset 0x100443ec
strcpy_s 0x100443cc
strncmp 0x100443c8
swprintf_s 0x1004432c
wcscat_s 0x10044338
wcschr 0x10044340
wcscpy_s 0x1004434c
wcsncmp 0x10044374
wcsncpy_s 0x10044364
wcsnlen 0x100443d0
wcsrchr 0x100443b8
wcsstr 0x100443d4
wcstoul 0x100443e4
ntdll.dll 87
LdrAccessResource 0x1004442c
LdrFindResource_U 0x10044428
LdrGetDllHandle 0x100444d8
LdrGetProcedureAddress 0x100444d4
NtAdjustPrivilegesToken 0x10044508
NtClose 0x100443fc
NtCreateEvent 0x10044400
NtDeviceIoControlFile 0x100443f4
NtEnumerateBootEntries 0x10044528
NtOpenDirectoryObject 0x10044498
NtOpenFile 0x10044410
NtOpenKey 0x1004446c
NtOpenProcess 0x1004451c
NtOpenProcessTokenEx 0x1004450c
NtOpenSymbolicLinkObject 0x10044464
NtOpenThreadTokenEx 0x10044510
NtQueryBootEntryOrder 0x10044490
NtQueryBootOptions 0x10044494
NtQueryDirectoryObject 0x1004449c
NtQueryInformationFile 0x10044404
NtQueryInformationProcess 0x10044520
NtQueryInformationThread 0x10044408
NtQuerySymbolicLinkObject 0x10044470
NtQuerySystemEnvironmentValueEx 0x1004453c
NtQuerySystemInformation 0x10044548
NtQueryValueKey 0x1004448c
NtReadFile 0x1004454c
NtSetInformationFile 0x10044418
NtSetInformationThread 0x10044484
NtSetSystemEnvironmentValueEx 0x10044540
NtTranslateFilePath 0x10044534
NtWaitForSingleObject 0x1004440c
NtWriteFile 0x10044524
RtlAddAccessAllowedAceEx 0x10044474
RtlAdjustPrivilege 0x10044530
RtlAllocateAndInitializeSid 0x10044478
RtlAllocateHeap 0x10044430
RtlAppendUnicodeToString 0x10044454
RtlCompareMemory 0x10044424
RtlCreateAcl 0x10044518
RtlCreateSecurityDescriptor 0x10044488
RtlFreeHeap 0x10044420
RtlFreeSid 0x10044480
RtlFreeUnicodeString 0x10044414
RtlGetVersion 0x100444fc
RtlGUIDFromString 0x10044450
RtlImageNtHeader 0x100443f8
RtlImageNtHeaderEx 0x1004452c
RtlImpersonateSelf 0x10044514
RtlInitAnsiString 0x100444e0
RtlInitUnicodeString 0x10044544
RtlLengthSecurityDescriptor 0x1004445c
RtlLengthSid 0x1004447c
RtlNtStatusToDosError 0x10044538
RtlSetDaclSecurityDescriptor 0x10044468
RtlSetOwnerSecurityDescriptor 0x10044460
RtlStringFromGUID 0x1004441c
ZwAllocateUuids 0x10044504
ZwClose 0x10044448
ZwCreateFile 0x100444a0
ZwCreateKey 0x100444a4
ZwDeleteKey 0x100444b8
ZwDeleteValueKey 0x100444b0
ZwDeviceIoControlFile 0x100444f0
ZwEnumerateKey 0x100444bc
ZwFlushKey 0x100444ac
ZwLoadKey 0x100444a8
ZwOpenDirectoryObject 0x10044500
ZwOpenFile 0x10044440
ZwOpenKey 0x100444d0
ZwOpenMutant 0x10044444
ZwOpenProcess 0x100444e8
ZwOpenSymbolicLinkObject 0x100444f8
ZwQueryAttributesFile 0x10044458
ZwQueryDirectoryObject 0x100444f4
ZwQueryInformationFile 0x100444e4
ZwQueryInformationProcess 0x100444dc
ZwQueryKey 0x10044438
ZwQuerySymbolicLinkObject 0x100444ec
ZwQuerySystemInformation 0x1004444c
ZwQueryValueKey 0x100444c0
ZwReleaseMutant 0x1004443c
ZwSaveKey 0x100444b4
ZwSetSecurityObject 0x100444c4
ZwSetValueKey 0x100444cc
ZwUnloadKey 0x100444c8
ZwWaitForSingleObject 0x10044434
OLEAUT32.dll 4
SysAllocString 0x1004402c
SysFreeString 0x10044034
VariantClear 0x10044030
VariantInit 0x10044028
RPCRT4.dll 1
UuidCreate 0x1004403c
WCP.dll 7
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z 0x1004405c
?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10044048
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10044044
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z 0x10044054
ConvertNtStatusToHResult 0x1004404c
RtlFreeLBlob 0x10044058
RtlReportErrorOrigination 0x10044050
WINTRUST.dll 3
WinVerifyTrust 0x1004406c
WTHelperGetProvSignerFromChain 0x10044064
WTHelperProvDataFromStateData 0x10044068