securebootai.dll

v10.0.19041.5911 32-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
339.4 KB
Uploaded
2025-12-01 08:40
Views
59
SHA-256
011289ea0e7bdeaa17811228639230f4

Exported functions 2

DllCanUnloadNow #1 · 0x236a0
DllCsiGetHandler #2 · 0x236c0

Imported DLLs & functions 310

api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x1004e08c
CoInitializeEx 0x1004e088
CoInitializeSecurity 0x1004e094
CoSetProxyBlanket 0x1004e090
CoUninitialize 0x1004e098
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1004e0a0
IsDebuggerPresent 0x1004e0a4
OutputDebugStringW 0x1004e0a8
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x1004e0bc
SetLastError 0x1004e0b0
SetUnhandledExceptionFilter 0x1004e0b4
UnhandledExceptionFilter 0x1004e0b8
api-ms-win-core-file-l1-1-0.dll 21
CreateDirectoryW 0x1004e0fc
CreateFileW 0x1004e10c
DeleteFileW 0x1004e0c8
FindClose 0x1004e110
FindFirstFileW 0x1004e104
FindFirstVolumeW 0x1004e0cc
FindNextFileW 0x1004e114
FindNextVolumeW 0x1004e0e4
FindVolumeClose 0x1004e0f4
FlushFileBuffers 0x1004e0e8
GetFileAttributesW 0x1004e0e0
GetFileInformationByHandle 0x1004e0d8
GetFileSizeEx 0x1004e108
GetFullPathNameW 0x1004e0c4
GetVolumeInformationW 0x1004e0ec
GetVolumePathNameW 0x1004e0dc
QueryDosDeviceW 0x1004e0d0
ReadFile 0x1004e100
SetFileAttributesW 0x1004e0f8
SetFileInformationByHandle 0x1004e0d4
WriteFile 0x1004e0f0
api-ms-win-core-file-l1-2-0.dll 1
GetVolumeNameForVolumeMountPointW 0x1004e11c
api-ms-win-core-file-l2-1-0.dll 3
CopyFileExW 0x1004e12c
GetFileInformationByHandleEx 0x1004e124
MoveFileExW 0x1004e128
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1004e134
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x1004e140
HeapAlloc 0x1004e13c
HeapDestroy 0x1004e148
HeapFree 0x1004e144
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x1004e150
LocalFree 0x1004e154
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x1004e15c
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x1004e164
api-ms-win-core-kernel32-legacy-l1-1-0.dll 2
FindResourceW 0x1004e170
LoadLibraryW 0x1004e16c
api-ms-win-core-libraryloader-l1-1-0.dll 10
DisableThreadLibraryCalls 0x1004e198
FindResourceExW 0x1004e184
FreeLibrary 0x1004e178
GetModuleFileNameA 0x1004e194
GetModuleHandleExW 0x1004e19c
GetModuleHandleW 0x1004e190
GetProcAddress 0x1004e180
LoadLibraryExW 0x1004e17c
LoadResource 0x1004e18c
SizeofResource 0x1004e188
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x1004e1a8
GetLocaleInfoW 0x1004e1a4
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x1004e1b4
GetUserDefaultUILanguage 0x1004e1b0
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x1004e1bc
MapViewOfFile 0x1004e1c0
UnmapViewOfFile 0x1004e1c4
api-ms-win-core-privateprofile-l1-1-0.dll 1
GetPrivateProfileSectionW 0x1004e1cc
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x1004e1d4
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x1004e1f0
GetCurrentProcessId 0x1004e1f8
GetCurrentThread 0x1004e1e8
GetCurrentThreadId 0x1004e1e0
OpenProcessToken 0x1004e1f4
OpenThreadToken 0x1004e1e4
SetThreadToken 0x1004e1ec
TerminateProcess 0x1004e1dc
api-ms-win-core-processthreads-l1-1-1.dll 1
IsProcessorFeaturePresent 0x1004e200
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1004e208
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x1004e210
RegCreateKeyExW 0x1004e214
RegDeleteKeyExW 0x1004e224
RegGetValueW 0x1004e228
RegOpenKeyExW 0x1004e220
RegQueryValueExW 0x1004e21c
RegSetValueExW 0x1004e218
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathRemoveBackslashW 0x1004e230
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 2
StrCmpIW 0x1004e23c
StrStrIW 0x1004e238
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x1004e244
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x1004e288
AcquireSRWLockShared 0x1004e268
CreateMutexExW 0x1004e284
CreateSemaphoreExW 0x1004e27c
DeleteCriticalSection 0x1004e264
EnterCriticalSection 0x1004e25c
InitializeCriticalSection 0x1004e278
InitializeCriticalSectionEx 0x1004e260
LeaveCriticalSection 0x1004e280
OpenSemaphoreW 0x1004e274
ReleaseMutex 0x1004e254
ReleaseSemaphore 0x1004e250
ReleaseSRWLockExclusive 0x1004e24c
ReleaseSRWLockShared 0x1004e26c
WaitForSingleObject 0x1004e270
WaitForSingleObjectEx 0x1004e258
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x1004e290
InitOnceComplete 0x1004e294
Sleep 0x1004e298
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetSystemDirectoryW 0x1004e2a8
GetSystemInfo 0x1004e2a4
GetSystemTimeAsFileTime 0x1004e2b0
GetVersionExW 0x1004e2ac
GetWindowsDirectoryW 0x1004e2a0
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x1004e2b8
CreateThreadpoolTimer 0x1004e2c4
SetThreadpoolTimer 0x1004e2c0
WaitForThreadpoolTimerCallbacks 0x1004e2bc
api-ms-win-crt-private-l1-1-0.dll 48
__CxxFrameHandler3 0x1004e378
_CxxThrowException 0x1004e380
_except_handler4_common 0x1004e32c
_o___acrt_iob_func 0x1004e370
_o___std_exception_copy 0x1004e36c
_o___std_exception_destroy 0x1004e368
_o___std_type_info_destroy_list 0x1004e364
_o___stdio_common_vfwprintf 0x1004e360
_o___stdio_common_vsnprintf_s 0x1004e35c
_o___stdio_common_vsnwprintf_s 0x1004e358
_o___stdio_common_vswprintf 0x1004e354
_o___stdio_common_vswprintf_s 0x1004e350
_o___stdio_common_vswscanf 0x1004e34c
_o__callnewh 0x1004e340
_o__cexit 0x1004e33c
_o__configure_narrow_argv 0x1004e338
_o__crt_atexit 0x1004e334
_o__errno 0x1004e2e4
_o__execute_onexit_table 0x1004e374
_o__initialize_narrow_environment 0x1004e2cc
_o__initialize_onexit_table 0x1004e2d0
_o__invalid_parameter_noinfo 0x1004e2d4
_o__purecall 0x1004e2d8
_o__register_onexit_function 0x1004e2dc
_o__seh_filter_dll 0x1004e2e0
_o__ultow_s 0x1004e2e8
_o__wcsicmp 0x1004e2ec
_o__wcslwr 0x1004e2f0
_o__wcsnicmp 0x1004e2f4
_o__wcsupr 0x1004e37c
_o__wfopen_s 0x1004e2fc
_o_bsearch 0x1004e300
_o_fclose 0x1004e304
_o_fflush 0x1004e308
_o_free 0x1004e30c
_o_malloc 0x1004e310
_o_strcpy_s 0x1004e314
_o_wcscat_s 0x1004e318
_o_wcscpy_s 0x1004e31c
_o_wcsncpy_s 0x1004e320
_o_wcstol 0x1004e324
_o_wcstoul 0x1004e328
memcmp 0x1004e384
memcpy 0x1004e388
memmove 0x1004e2f8
wcschr 0x1004e348
wcsrchr 0x1004e344
wcsstr 0x1004e330
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x1004e394
_initterm_e 0x1004e390
api-ms-win-crt-string-l1-1-0.dll 5
memset 0x1004e3ac
strncmp 0x1004e39c
wcsncmp 0x1004e3a8
wcsncpy 0x1004e3a4
wcsnlen 0x1004e3a0
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x1004e3bc
EventUnregister 0x1004e3b4
EventWriteTransfer 0x1004e3b8
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x1004e3dc
DuplicateTokenEx 0x1004e3d0
GetSecurityDescriptorControl 0x1004e3cc
GetSecurityDescriptorDacl 0x1004e3c4
GetSecurityDescriptorGroup 0x1004e3c8
GetSecurityDescriptorOwner 0x1004e3d4
GetSecurityDescriptorSacl 0x1004e3d8
GetTokenInformation 0x1004e3e0
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x1004e3e8
api-ms-win-security-provider-l1-1-0.dll 1
SetNamedSecurityInfoW 0x1004e3f0
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x1004e3fc
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1004e3f8
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x1004e414
BCryptCreateHash 0x1004e410
BCryptDestroyHash 0x1004e41c
BCryptFinishHash 0x1004e408
BCryptHash 0x1004e40c
BCryptHashData 0x1004e418
BCryptOpenAlgorithmProvider 0x1004e404
CRYPT32.dll 11
CertCloseStore 0x1004e028
CertComparePublicKeyInfo 0x1004e018
CertCreateCertificateContext 0x1004e000
CertEnumCertificatesInStore 0x1004e00c
CertFindCertificateInStore 0x1004e014
CertFreeCertificateContext 0x1004e010
CertGetCertificateContextProperty 0x1004e01c
CertGetNameStringW 0x1004e024
CryptMsgClose 0x1004e020
CryptMsgGetParam 0x1004e004
CryptQueryObject 0x1004e008
imagehlp.dll 1
CheckSumMappedFile 0x1004e424
ntdll.dll 87
LdrAccessResource 0x1004e584
LdrFindResource_U 0x1004e47c
LdrGetDllHandle 0x1004e52c
LdrGetProcedureAddress 0x1004e528
NtAdjustPrivilegesToken 0x1004e55c
NtClose 0x1004e450
NtCreateEvent 0x1004e454
NtDeviceIoControlFile 0x1004e448
NtEnumerateBootEntries 0x1004e430
NtOpenDirectoryObject 0x1004e4ec
NtOpenFile 0x1004e464
NtOpenKey 0x1004e4c0
NtOpenProcess 0x1004e43c
NtOpenProcessTokenEx 0x1004e560
NtOpenSymbolicLinkObject 0x1004e4b8
NtOpenThreadTokenEx 0x1004e564
NtQueryBootEntryOrder 0x1004e4e4
NtQueryBootOptions 0x1004e4e8
NtQueryDirectoryObject 0x1004e4f0
NtQueryInformationFile 0x1004e458
NtQueryInformationProcess 0x1004e438
NtQueryInformationThread 0x1004e45c
NtQuerySymbolicLinkObject 0x1004e580
NtQuerySystemEnvironmentValueEx 0x1004e570
NtQuerySystemInformation 0x1004e57c
NtQueryValueKey 0x1004e4e0
NtReadFile 0x1004e440
NtSetInformationFile 0x1004e46c
NtSetInformationThread 0x1004e444
NtSetSystemEnvironmentValueEx 0x1004e574
NtTranslateFilePath 0x1004e4c4
NtWaitForSingleObject 0x1004e460
NtWriteFile 0x1004e434
RtlAddAccessAllowedAceEx 0x1004e4c8
RtlAdjustPrivilege 0x1004e480
RtlAllocateAndInitializeSid 0x1004e4cc
RtlAllocateHeap 0x1004e484
RtlAppendUnicodeToString 0x1004e4a8
RtlCompareMemory 0x1004e478
RtlCreateAcl 0x1004e4d8
RtlCreateSecurityDescriptor 0x1004e4dc
RtlFreeHeap 0x1004e474
RtlFreeSid 0x1004e4d4
RtlFreeUnicodeString 0x1004e468
RtlGetVersion 0x1004e550
RtlGUIDFromString 0x1004e4a4
RtlImageNtHeader 0x1004e44c
RtlImageNtHeaderEx 0x1004e42c
RtlImpersonateSelf 0x1004e568
RtlInitAnsiString 0x1004e534
RtlInitUnicodeString 0x1004e578
RtlLengthSecurityDescriptor 0x1004e4b0
RtlLengthSid 0x1004e4d0
RtlNtStatusToDosError 0x1004e56c
RtlSetDaclSecurityDescriptor 0x1004e4bc
RtlSetOwnerSecurityDescriptor 0x1004e4b4
RtlStringFromGUID 0x1004e470
ZwAllocateUuids 0x1004e558
ZwClose 0x1004e49c
ZwCreateFile 0x1004e4f4
ZwCreateKey 0x1004e4f8
ZwDeleteKey 0x1004e50c
ZwDeleteValueKey 0x1004e504
ZwDeviceIoControlFile 0x1004e544
ZwEnumerateKey 0x1004e510
ZwFlushKey 0x1004e500
ZwLoadKey 0x1004e4fc
ZwOpenDirectoryObject 0x1004e554
ZwOpenFile 0x1004e494
ZwOpenKey 0x1004e524
ZwOpenMutant 0x1004e498
ZwOpenProcess 0x1004e53c
ZwOpenSymbolicLinkObject 0x1004e54c
ZwQueryAttributesFile 0x1004e4ac
ZwQueryDirectoryObject 0x1004e548
ZwQueryInformationFile 0x1004e538
ZwQueryInformationProcess 0x1004e530
ZwQueryKey 0x1004e48c
ZwQuerySymbolicLinkObject 0x1004e540
ZwQuerySystemInformation 0x1004e4a0
ZwQueryValueKey 0x1004e514
ZwReleaseMutant 0x1004e490
ZwSaveKey 0x1004e508
ZwSetSecurityObject 0x1004e518
ZwSetValueKey 0x1004e520
ZwUnloadKey 0x1004e51c
ZwWaitForSingleObject 0x1004e488
OLEAUT32.dll 8
SafeArrayGetElement 0x1004e030
SafeArrayGetLBound 0x1004e034
SafeArrayGetUBound 0x1004e044
SysAllocString 0x1004e038
SysFreeString 0x1004e04c
SysStringLen 0x1004e03c
VariantClear 0x1004e040
VariantInit 0x1004e048
RPCRT4.dll 1
UuidCreate 0x1004e054
WCP.dll 6
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z 0x1004e05c
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x1004e070
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z 0x1004e06c
ConvertNtStatusToHResult 0x1004e060
RtlFreeLBlob 0x1004e068
RtlReportErrorOrigination 0x1004e064
WINTRUST.dll 3
WinVerifyTrust 0x1004e078
WTHelperGetProvSignerFromChain 0x1004e080
WTHelperProvDataFromStateData 0x1004e07c