securebootai.dll

v10.0.19041.6088 32-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
359.4 KB
Uploaded
2025-12-01 08:40
Views
50
SHA-256
4bf0f63d2a60bb991853e1ea820d51ac

Exported functions 2

DllCanUnloadNow #1 · 0x279c0
DllCsiGetHandler #2 · 0x279e0

Imported DLLs & functions 310

api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x1005208c
CoInitializeEx 0x10052088
CoInitializeSecurity 0x10052094
CoSetProxyBlanket 0x10052090
CoUninitialize 0x10052098
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x100520a0
IsDebuggerPresent 0x100520a4
OutputDebugStringW 0x100520a8
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x100520bc
SetLastError 0x100520b0
SetUnhandledExceptionFilter 0x100520b4
UnhandledExceptionFilter 0x100520b8
api-ms-win-core-file-l1-1-0.dll 21
CreateDirectoryW 0x100520fc
CreateFileW 0x1005210c
DeleteFileW 0x100520c8
FindClose 0x10052110
FindFirstFileW 0x10052104
FindFirstVolumeW 0x100520cc
FindNextFileW 0x10052114
FindNextVolumeW 0x100520e4
FindVolumeClose 0x100520f4
FlushFileBuffers 0x100520e8
GetFileAttributesW 0x100520e0
GetFileInformationByHandle 0x100520d8
GetFileSizeEx 0x10052108
GetFullPathNameW 0x100520c4
GetVolumeInformationW 0x100520ec
GetVolumePathNameW 0x100520dc
QueryDosDeviceW 0x100520d0
ReadFile 0x10052100
SetFileAttributesW 0x100520f8
SetFileInformationByHandle 0x100520d4
WriteFile 0x100520f0
api-ms-win-core-file-l1-2-0.dll 1
GetVolumeNameForVolumeMountPointW 0x1005211c
api-ms-win-core-file-l2-1-0.dll 3
CopyFileExW 0x1005212c
GetFileInformationByHandleEx 0x10052124
MoveFileExW 0x10052128
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x10052134
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x10052140
HeapAlloc 0x1005213c
HeapDestroy 0x10052148
HeapFree 0x10052144
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x10052150
LocalFree 0x10052154
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x1005215c
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x10052164
api-ms-win-core-kernel32-legacy-l1-1-0.dll 2
FindResourceW 0x10052170
LoadLibraryW 0x1005216c
api-ms-win-core-libraryloader-l1-1-0.dll 10
DisableThreadLibraryCalls 0x10052198
FindResourceExW 0x10052184
FreeLibrary 0x10052178
GetModuleFileNameA 0x10052194
GetModuleHandleExW 0x1005219c
GetModuleHandleW 0x10052190
GetProcAddress 0x10052180
LoadLibraryExW 0x1005217c
LoadResource 0x1005218c
SizeofResource 0x10052188
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x100521a8
GetLocaleInfoW 0x100521a4
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x100521b4
GetUserDefaultUILanguage 0x100521b0
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x100521bc
MapViewOfFile 0x100521c0
UnmapViewOfFile 0x100521c4
api-ms-win-core-privateprofile-l1-1-0.dll 1
GetPrivateProfileSectionW 0x100521cc
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x100521d4
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x100521f0
GetCurrentProcessId 0x100521f8
GetCurrentThread 0x100521e8
GetCurrentThreadId 0x100521e0
OpenProcessToken 0x100521f4
OpenThreadToken 0x100521e4
SetThreadToken 0x100521ec
TerminateProcess 0x100521dc
api-ms-win-core-processthreads-l1-1-1.dll 1
IsProcessorFeaturePresent 0x10052200
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x10052208
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x10052210
RegCreateKeyExW 0x10052214
RegDeleteKeyExW 0x10052224
RegGetValueW 0x10052228
RegOpenKeyExW 0x10052220
RegQueryValueExW 0x1005221c
RegSetValueExW 0x10052218
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathRemoveBackslashW 0x10052230
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 2
StrCmpIW 0x1005223c
StrStrIW 0x10052238
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x10052244
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x10052288
AcquireSRWLockShared 0x10052268
CreateMutexExW 0x10052284
CreateSemaphoreExW 0x1005227c
DeleteCriticalSection 0x10052264
EnterCriticalSection 0x1005225c
InitializeCriticalSection 0x10052278
InitializeCriticalSectionEx 0x10052260
LeaveCriticalSection 0x10052280
OpenSemaphoreW 0x10052274
ReleaseMutex 0x10052254
ReleaseSemaphore 0x10052250
ReleaseSRWLockExclusive 0x1005224c
ReleaseSRWLockShared 0x1005226c
WaitForSingleObject 0x10052270
WaitForSingleObjectEx 0x10052258
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x10052290
InitOnceComplete 0x10052294
Sleep 0x10052298
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetSystemDirectoryW 0x100522a8
GetSystemInfo 0x100522a4
GetSystemTimeAsFileTime 0x100522b0
GetVersionExW 0x100522ac
GetWindowsDirectoryW 0x100522a0
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x100522b8
CreateThreadpoolTimer 0x100522c4
SetThreadpoolTimer 0x100522c0
WaitForThreadpoolTimerCallbacks 0x100522bc
api-ms-win-crt-private-l1-1-0.dll 48
__CxxFrameHandler3 0x10052378
_CxxThrowException 0x10052380
_except_handler4_common 0x1005232c
_o___acrt_iob_func 0x10052370
_o___std_exception_copy 0x1005236c
_o___std_exception_destroy 0x10052368
_o___std_type_info_destroy_list 0x10052364
_o___stdio_common_vfwprintf 0x10052360
_o___stdio_common_vsnprintf_s 0x1005235c
_o___stdio_common_vsnwprintf_s 0x10052358
_o___stdio_common_vswprintf 0x10052354
_o___stdio_common_vswprintf_s 0x10052350
_o___stdio_common_vswscanf 0x1005234c
_o__callnewh 0x10052340
_o__cexit 0x1005233c
_o__configure_narrow_argv 0x10052338
_o__crt_atexit 0x10052334
_o__errno 0x100522e4
_o__execute_onexit_table 0x10052374
_o__initialize_narrow_environment 0x100522cc
_o__initialize_onexit_table 0x100522d0
_o__invalid_parameter_noinfo 0x100522d4
_o__purecall 0x100522d8
_o__register_onexit_function 0x100522dc
_o__seh_filter_dll 0x100522e0
_o__ultow_s 0x100522e8
_o__wcsicmp 0x100522ec
_o__wcslwr 0x100522f0
_o__wcsnicmp 0x100522f4
_o__wcsupr 0x1005237c
_o__wfopen_s 0x100522fc
_o_bsearch 0x10052300
_o_fclose 0x10052304
_o_fflush 0x10052308
_o_free 0x1005230c
_o_malloc 0x10052310
_o_strcpy_s 0x10052314
_o_wcscat_s 0x10052318
_o_wcscpy_s 0x1005231c
_o_wcsncpy_s 0x10052320
_o_wcstol 0x10052324
_o_wcstoul 0x10052328
memcmp 0x10052384
memcpy 0x10052388
memmove 0x100522f8
wcschr 0x10052348
wcsrchr 0x10052344
wcsstr 0x10052330
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x10052394
_initterm_e 0x10052390
api-ms-win-crt-string-l1-1-0.dll 5
memset 0x100523ac
strncmp 0x1005239c
wcsncmp 0x100523a8
wcsncpy 0x100523a4
wcsnlen 0x100523a0
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x100523bc
EventUnregister 0x100523b4
EventWriteTransfer 0x100523b8
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x100523dc
DuplicateTokenEx 0x100523d0
GetSecurityDescriptorControl 0x100523cc
GetSecurityDescriptorDacl 0x100523c4
GetSecurityDescriptorGroup 0x100523c8
GetSecurityDescriptorOwner 0x100523d4
GetSecurityDescriptorSacl 0x100523d8
GetTokenInformation 0x100523e0
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x100523e8
api-ms-win-security-provider-l1-1-0.dll 1
SetNamedSecurityInfoW 0x100523f0
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x100523fc
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x100523f8
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x10052414
BCryptCreateHash 0x10052410
BCryptDestroyHash 0x1005241c
BCryptFinishHash 0x10052408
BCryptHash 0x1005240c
BCryptHashData 0x10052418
BCryptOpenAlgorithmProvider 0x10052404
CRYPT32.dll 11
CertCloseStore 0x10052028
CertComparePublicKeyInfo 0x10052018
CertCreateCertificateContext 0x10052000
CertEnumCertificatesInStore 0x1005200c
CertFindCertificateInStore 0x10052014
CertFreeCertificateContext 0x10052010
CertGetCertificateContextProperty 0x1005201c
CertGetNameStringW 0x10052024
CryptMsgClose 0x10052020
CryptMsgGetParam 0x10052004
CryptQueryObject 0x10052008
imagehlp.dll 1
CheckSumMappedFile 0x10052424
ntdll.dll 87
LdrAccessResource 0x10052584
LdrFindResource_U 0x1005247c
LdrGetDllHandle 0x1005252c
LdrGetProcedureAddress 0x10052528
NtAdjustPrivilegesToken 0x1005255c
NtClose 0x10052450
NtCreateEvent 0x10052454
NtDeviceIoControlFile 0x10052448
NtEnumerateBootEntries 0x10052430
NtOpenDirectoryObject 0x100524ec
NtOpenFile 0x10052464
NtOpenKey 0x100524c0
NtOpenProcess 0x1005243c
NtOpenProcessTokenEx 0x10052560
NtOpenSymbolicLinkObject 0x100524b8
NtOpenThreadTokenEx 0x10052564
NtQueryBootEntryOrder 0x100524e4
NtQueryBootOptions 0x100524e8
NtQueryDirectoryObject 0x100524f0
NtQueryInformationFile 0x10052458
NtQueryInformationProcess 0x10052438
NtQueryInformationThread 0x1005245c
NtQuerySymbolicLinkObject 0x10052580
NtQuerySystemEnvironmentValueEx 0x10052570
NtQuerySystemInformation 0x1005257c
NtQueryValueKey 0x100524e0
NtReadFile 0x10052440
NtSetInformationFile 0x1005246c
NtSetInformationThread 0x10052444
NtSetSystemEnvironmentValueEx 0x10052574
NtTranslateFilePath 0x100524c4
NtWaitForSingleObject 0x10052460
NtWriteFile 0x10052434
RtlAddAccessAllowedAceEx 0x100524c8
RtlAdjustPrivilege 0x10052480
RtlAllocateAndInitializeSid 0x100524cc
RtlAllocateHeap 0x10052484
RtlAppendUnicodeToString 0x100524a8
RtlCompareMemory 0x10052478
RtlCreateAcl 0x100524d8
RtlCreateSecurityDescriptor 0x100524dc
RtlFreeHeap 0x10052474
RtlFreeSid 0x100524d4
RtlFreeUnicodeString 0x10052468
RtlGetVersion 0x10052550
RtlGUIDFromString 0x100524a4
RtlImageNtHeader 0x1005244c
RtlImageNtHeaderEx 0x1005242c
RtlImpersonateSelf 0x10052568
RtlInitAnsiString 0x10052534
RtlInitUnicodeString 0x10052578
RtlLengthSecurityDescriptor 0x100524b0
RtlLengthSid 0x100524d0
RtlNtStatusToDosError 0x1005256c
RtlSetDaclSecurityDescriptor 0x100524bc
RtlSetOwnerSecurityDescriptor 0x100524b4
RtlStringFromGUID 0x10052470
ZwAllocateUuids 0x10052558
ZwClose 0x1005249c
ZwCreateFile 0x100524f4
ZwCreateKey 0x100524f8
ZwDeleteKey 0x1005250c
ZwDeleteValueKey 0x10052504
ZwDeviceIoControlFile 0x10052544
ZwEnumerateKey 0x10052510
ZwFlushKey 0x10052500
ZwLoadKey 0x100524fc
ZwOpenDirectoryObject 0x10052554
ZwOpenFile 0x10052494
ZwOpenKey 0x10052524
ZwOpenMutant 0x10052498
ZwOpenProcess 0x1005253c
ZwOpenSymbolicLinkObject 0x1005254c
ZwQueryAttributesFile 0x100524ac
ZwQueryDirectoryObject 0x10052548
ZwQueryInformationFile 0x10052538
ZwQueryInformationProcess 0x10052530
ZwQueryKey 0x1005248c
ZwQuerySymbolicLinkObject 0x10052540
ZwQuerySystemInformation 0x100524a0
ZwQueryValueKey 0x10052514
ZwReleaseMutant 0x10052490
ZwSaveKey 0x10052508
ZwSetSecurityObject 0x10052518
ZwSetValueKey 0x10052520
ZwUnloadKey 0x1005251c
ZwWaitForSingleObject 0x10052488
OLEAUT32.dll 8
SafeArrayGetElement 0x10052030
SafeArrayGetLBound 0x10052034
SafeArrayGetUBound 0x10052044
SysAllocString 0x10052038
SysFreeString 0x1005204c
SysStringLen 0x1005203c
VariantClear 0x10052040
VariantInit 0x10052048
RPCRT4.dll 1
UuidCreate 0x10052054
WCP.dll 6
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z 0x1005205c
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10052070
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z 0x1005206c
ConvertNtStatusToHResult 0x10052060
RtlFreeLBlob 0x10052068
RtlReportErrorOrigination 0x10052064
WINTRUST.dll 3
WinVerifyTrust 0x10052078
WTHelperGetProvSignerFromChain 0x10052080
WTHelperProvDataFromStateData 0x1005207c