securebootai.dll

v10.0.19041.5676 32-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
292.4 KB
Uploaded
2025-12-01 08:40
Views
42
SHA-256
4755ae9f4de5f896b516c6edd23f7595

Exported functions 2

DllCanUnloadNow #1 · 0x1e6a0
DllCsiGetHandler #2 · 0x1e6c0

Imported DLLs & functions 300

api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x10043078
CoInitializeEx 0x10043074
CoInitializeSecurity 0x10043080
CoSetProxyBlanket 0x10043070
CoUninitialize 0x1004307c
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1004308c
IsDebuggerPresent 0x10043090
OutputDebugStringW 0x10043088
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x10043098
SetLastError 0x100430a4
SetUnhandledExceptionFilter 0x100430a0
UnhandledExceptionFilter 0x1004309c
api-ms-win-core-file-l1-1-0.dll 18
CreateDirectoryW 0x100430d4
CreateFileW 0x100430f0
DeleteFileW 0x100430dc
FindClose 0x100430e4
FindFirstFileW 0x100430d0
FindNextFileW 0x100430e0
FlushFileBuffers 0x100430b4
GetFileAttributesW 0x100430b0
GetFileInformationByHandle 0x100430c4
GetFileSizeEx 0x100430d8
GetFullPathNameW 0x100430e8
GetVolumeInformationW 0x100430b8
GetVolumePathNameW 0x100430ec
QueryDosDeviceW 0x100430ac
ReadFile 0x100430cc
SetFileAttributesW 0x100430bc
SetFileInformationByHandle 0x100430c8
WriteFile 0x100430c0
api-ms-win-core-file-l1-2-0.dll 1
GetVolumeNameForVolumeMountPointW 0x100430f8
api-ms-win-core-file-l2-1-0.dll 3
CopyFileExW 0x10043104
GetFileInformationByHandleEx 0x10043100
MoveFileExW 0x10043108
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x10043110
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x1004311c
HeapAlloc 0x10043118
HeapDestroy 0x10043124
HeapFree 0x10043120
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x10043130
LocalFree 0x1004312c
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x10043138
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x10043140
api-ms-win-core-kernel32-legacy-l1-1-0.dll 2
FindResourceW 0x10043148
LoadLibraryW 0x1004314c
api-ms-win-core-libraryloader-l1-1-0.dll 10
DisableThreadLibraryCalls 0x10043164
FindResourceExW 0x1004315c
FreeLibrary 0x10043174
GetModuleFileNameA 0x10043158
GetModuleHandleExW 0x1004316c
GetModuleHandleW 0x10043160
GetProcAddress 0x10043168
LoadLibraryExW 0x10043154
LoadResource 0x10043170
SizeofResource 0x10043178
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x10043180
GetLocaleInfoW 0x10043184
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x1004318c
GetUserDefaultUILanguage 0x10043190
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x100431a0
MapViewOfFile 0x1004319c
UnmapViewOfFile 0x10043198
api-ms-win-core-privateprofile-l1-1-0.dll 1
GetPrivateProfileSectionW 0x100431a8
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x100431b0
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x100431c0
GetCurrentProcessId 0x100431cc
GetCurrentThread 0x100431c8
GetCurrentThreadId 0x100431d4
OpenProcessToken 0x100431b8
OpenThreadToken 0x100431c4
SetThreadToken 0x100431d0
TerminateProcess 0x100431bc
api-ms-win-core-processthreads-l1-1-1.dll 1
IsProcessorFeaturePresent 0x100431dc
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x100431e4
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x100431ec
RegCreateKeyExW 0x100431f8
RegDeleteKeyExW 0x100431f0
RegGetValueW 0x100431f4
RegOpenKeyExW 0x10043200
RegQueryValueExW 0x10043204
RegSetValueExW 0x100431fc
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathRemoveBackslashW 0x1004320c
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 2
StrCmpIW 0x10043214
StrStrIW 0x10043218
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x10043220
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x10043264
AcquireSRWLockShared 0x1004325c
CreateMutexExW 0x10043234
CreateSemaphoreExW 0x1004322c
DeleteCriticalSection 0x10043240
EnterCriticalSection 0x10043248
InitializeCriticalSection 0x10043228
InitializeCriticalSectionEx 0x10043244
LeaveCriticalSection 0x10043230
OpenSemaphoreW 0x10043238
ReleaseMutex 0x10043250
ReleaseSemaphore 0x10043254
ReleaseSRWLockExclusive 0x10043260
ReleaseSRWLockShared 0x10043258
WaitForSingleObject 0x1004323c
WaitForSingleObjectEx 0x1004324c
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x1004326c
InitOnceComplete 0x10043274
Sleep 0x10043270
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetSystemDirectoryW 0x10043280
GetSystemInfo 0x1004327c
GetSystemTimeAsFileTime 0x10043288
GetVersionExW 0x1004328c
GetWindowsDirectoryW 0x10043284
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x10043294
CreateThreadpoolTimer 0x100432a0
SetThreadpoolTimer 0x1004329c
WaitForThreadpoolTimerCallbacks 0x10043298
api-ms-win-crt-private-l1-1-0.dll 48
__CxxFrameHandler3 0x10043320
_CxxThrowException 0x1004335c
_except_handler4_common 0x10043308
_o___acrt_iob_func 0x10043354
_o___std_exception_copy 0x1004334c
_o___std_exception_destroy 0x10043348
_o___std_type_info_destroy_list 0x10043344
_o___stdio_common_vfwprintf 0x10043340
_o___stdio_common_vsnprintf_s 0x1004333c
_o___stdio_common_vsnwprintf_s 0x10043338
_o___stdio_common_vswprintf 0x10043334
_o___stdio_common_vswprintf_s 0x10043330
_o___stdio_common_vswscanf 0x1004332c
_o__callnewh 0x1004331c
_o__cexit 0x10043318
_o__configure_narrow_argv 0x10043314
_o__crt_atexit 0x10043310
_o__errno 0x10043358
_o__execute_onexit_table 0x10043350
_o__initialize_narrow_environment 0x100432a8
_o__initialize_onexit_table 0x100432ac
_o__invalid_parameter_noinfo 0x100432b0
_o__purecall 0x100432b4
_o__register_onexit_function 0x100432b8
_o__seh_filter_dll 0x100432bc
_o__ultow_s 0x100432c0
_o__wcsicmp 0x100432c4
_o__wcslwr 0x100432c8
_o__wcsnicmp 0x100432cc
_o__wcsupr 0x100432d4
_o__wfopen_s 0x100432d8
_o_bsearch 0x100432dc
_o_fclose 0x100432e0
_o_fflush 0x100432e4
_o_free 0x100432e8
_o_malloc 0x100432ec
_o_strcpy_s 0x100432f0
_o_terminate 0x100432f4
_o_wcscat_s 0x100432f8
_o_wcscpy_s 0x100432fc
_o_wcsncpy_s 0x10043300
_o_wcstoul 0x10043304
memcmp 0x10043360
memcpy 0x10043364
memmove 0x100432d0
wcschr 0x10043328
wcsrchr 0x10043324
wcsstr 0x1004330c
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x10043370
_initterm_e 0x1004336c
api-ms-win-crt-string-l1-1-0.dll 4
memset 0x10043378
strncmp 0x1004337c
wcsncmp 0x10043384
wcsnlen 0x10043380
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x10043394
EventUnregister 0x1004338c
EventWriteTransfer 0x10043390
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x100433a4
DuplicateTokenEx 0x100433b0
GetSecurityDescriptorControl 0x100433a0
GetSecurityDescriptorDacl 0x100433b8
GetSecurityDescriptorGroup 0x100433b4
GetSecurityDescriptorOwner 0x100433a8
GetSecurityDescriptorSacl 0x1004339c
GetTokenInformation 0x100433ac
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x100433c0
api-ms-win-security-provider-l1-1-0.dll 1
SetNamedSecurityInfoW 0x100433c8
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x100433d0
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x100433d4
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x100433e8
BCryptCreateHash 0x100433e4
BCryptDestroyHash 0x100433f4
BCryptFinishHash 0x100433e0
BCryptHash 0x100433ec
BCryptHashData 0x100433f0
BCryptOpenAlgorithmProvider 0x100433dc
CRYPT32.dll 9
CertCloseStore 0x1004301c
CertCreateCertificateContext 0x10043018
CertFindCertificateInStore 0x10043004
CertFreeCertificateContext 0x10043010
CertGetCertificateContextProperty 0x10043008
CertGetNameStringW 0x10043020
CryptMsgClose 0x1004300c
CryptMsgGetParam 0x10043000
CryptQueryObject 0x10043014
imagehlp.dll 1
CheckSumMappedFile 0x100433fc
ntdll.dll 87
LdrAccessResource 0x10043458
LdrFindResource_U 0x10043454
LdrGetDllHandle 0x10043504
LdrGetProcedureAddress 0x10043500
NtAdjustPrivilegesToken 0x10043534
NtClose 0x10043428
NtCreateEvent 0x1004342c
NtDeviceIoControlFile 0x10043420
NtEnumerateBootEntries 0x10043408
NtOpenDirectoryObject 0x100434c4
NtOpenFile 0x1004343c
NtOpenKey 0x10043498
NtOpenProcess 0x10043414
NtOpenProcessTokenEx 0x10043538
NtOpenSymbolicLinkObject 0x10043490
NtOpenThreadTokenEx 0x1004353c
NtQueryBootEntryOrder 0x100434bc
NtQueryBootOptions 0x100434c0
NtQueryDirectoryObject 0x100434c8
NtQueryInformationFile 0x10043430
NtQueryInformationProcess 0x10043410
NtQueryInformationThread 0x10043434
NtQuerySymbolicLinkObject 0x10043558
NtQuerySystemEnvironmentValueEx 0x10043548
NtQuerySystemInformation 0x10043554
NtQueryValueKey 0x100434b8
NtReadFile 0x10043418
NtSetInformationFile 0x10043444
NtSetInformationThread 0x1004341c
NtSetSystemEnvironmentValueEx 0x1004354c
NtTranslateFilePath 0x1004345c
NtWaitForSingleObject 0x10043438
NtWriteFile 0x1004340c
RtlAddAccessAllowedAceEx 0x100434a0
RtlAdjustPrivilege 0x10043544
RtlAllocateAndInitializeSid 0x100434a4
RtlAllocateHeap 0x1004355c
RtlAppendUnicodeToString 0x10043480
RtlCompareMemory 0x10043450
RtlCreateAcl 0x100434b0
RtlCreateSecurityDescriptor 0x100434b4
RtlFreeHeap 0x1004344c
RtlFreeSid 0x100434ac
RtlFreeUnicodeString 0x10043440
RtlGetVersion 0x10043528
RtlGUIDFromString 0x1004347c
RtlImageNtHeader 0x10043424
RtlImageNtHeaderEx 0x10043404
RtlImpersonateSelf 0x10043540
RtlInitAnsiString 0x1004350c
RtlInitUnicodeString 0x10043550
RtlLengthSecurityDescriptor 0x10043488
RtlLengthSid 0x100434a8
RtlNtStatusToDosError 0x1004349c
RtlSetDaclSecurityDescriptor 0x10043494
RtlSetOwnerSecurityDescriptor 0x1004348c
RtlStringFromGUID 0x10043448
ZwAllocateUuids 0x10043530
ZwClose 0x10043474
ZwCreateFile 0x100434cc
ZwCreateKey 0x100434d0
ZwDeleteKey 0x100434e4
ZwDeleteValueKey 0x100434dc
ZwDeviceIoControlFile 0x1004351c
ZwEnumerateKey 0x100434e8
ZwFlushKey 0x100434d8
ZwLoadKey 0x100434d4
ZwOpenDirectoryObject 0x1004352c
ZwOpenFile 0x1004346c
ZwOpenKey 0x100434fc
ZwOpenMutant 0x10043470
ZwOpenProcess 0x10043514
ZwOpenSymbolicLinkObject 0x10043524
ZwQueryAttributesFile 0x10043484
ZwQueryDirectoryObject 0x10043520
ZwQueryInformationFile 0x10043510
ZwQueryInformationProcess 0x10043508
ZwQueryKey 0x10043464
ZwQuerySymbolicLinkObject 0x10043518
ZwQuerySystemInformation 0x10043478
ZwQueryValueKey 0x100434ec
ZwReleaseMutant 0x10043468
ZwSaveKey 0x100434e0
ZwSetSecurityObject 0x100434f0
ZwSetValueKey 0x100434f8
ZwUnloadKey 0x100434f4
ZwWaitForSingleObject 0x10043460
OLEAUT32.dll 4
SysAllocString 0x1004302c
SysFreeString 0x10043034
VariantClear 0x10043030
VariantInit 0x10043028
RPCRT4.dll 1
UuidCreate 0x1004303c
WCP.dll 6
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z 0x10043044
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10043058
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z 0x1004304c
ConvertNtStatusToHResult 0x10043054
RtlFreeLBlob 0x10043048
RtlReportErrorOrigination 0x10043050
WINTRUST.dll 3
WinVerifyTrust 0x10043068
WTHelperGetProvSignerFromChain 0x10043064
WTHelperProvDataFromStateData 0x10043060