securebootai.dll

v10.0.19041.6271 32-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
344.9 KB
Uploaded
2025-12-01 08:40
Views
48
SHA-256
852750d36296fe567b46a36523e08958

Exported functions 2

DllCanUnloadNow #1 · 0x25e50
DllCsiGetHandler #2 · 0x25e70

Imported DLLs & functions 310

api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x1004f08c
CoInitializeEx 0x1004f088
CoInitializeSecurity 0x1004f094
CoSetProxyBlanket 0x1004f090
CoUninitialize 0x1004f098
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1004f0a0
IsDebuggerPresent 0x1004f0a4
OutputDebugStringW 0x1004f0a8
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x1004f0bc
SetLastError 0x1004f0b0
SetUnhandledExceptionFilter 0x1004f0b4
UnhandledExceptionFilter 0x1004f0b8
api-ms-win-core-file-l1-1-0.dll 21
CreateDirectoryW 0x1004f0fc
CreateFileW 0x1004f110
DeleteFileW 0x1004f0c8
FindClose 0x1004f114
FindFirstFileW 0x1004f104
FindFirstVolumeW 0x1004f0cc
FindNextFileW 0x1004f10c
FindNextVolumeW 0x1004f0e4
FindVolumeClose 0x1004f0f4
FlushFileBuffers 0x1004f0e8
GetFileAttributesW 0x1004f0e0
GetFileInformationByHandle 0x1004f0d8
GetFileSizeEx 0x1004f108
GetFullPathNameW 0x1004f0c4
GetVolumeInformationW 0x1004f0ec
GetVolumePathNameW 0x1004f0dc
QueryDosDeviceW 0x1004f0d0
ReadFile 0x1004f100
SetFileAttributesW 0x1004f0f8
SetFileInformationByHandle 0x1004f0d4
WriteFile 0x1004f0f0
api-ms-win-core-file-l1-2-0.dll 1
GetVolumeNameForVolumeMountPointW 0x1004f11c
api-ms-win-core-file-l2-1-0.dll 3
CopyFileExW 0x1004f12c
GetFileInformationByHandleEx 0x1004f124
MoveFileExW 0x1004f128
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1004f134
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x1004f140
HeapAlloc 0x1004f13c
HeapDestroy 0x1004f148
HeapFree 0x1004f144
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x1004f150
LocalFree 0x1004f154
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x1004f15c
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x1004f164
api-ms-win-core-kernel32-legacy-l1-1-0.dll 3
CopyFileW 0x1004f16c
FindResourceW 0x1004f174
LoadLibraryW 0x1004f170
api-ms-win-core-libraryloader-l1-1-0.dll 10
DisableThreadLibraryCalls 0x1004f18c
FindResourceExW 0x1004f1a0
FreeLibrary 0x1004f184
GetModuleFileNameA 0x1004f198
GetModuleHandleExW 0x1004f180
GetModuleHandleW 0x1004f194
GetProcAddress 0x1004f188
LoadLibraryExW 0x1004f17c
LoadResource 0x1004f190
SizeofResource 0x1004f19c
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x1004f1a8
GetLocaleInfoW 0x1004f1ac
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x1004f1b4
GetUserDefaultUILanguage 0x1004f1b8
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x1004f1c4
MapViewOfFile 0x1004f1c0
UnmapViewOfFile 0x1004f1c8
api-ms-win-core-privateprofile-l1-1-0.dll 1
GetPrivateProfileSectionW 0x1004f1d0
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x1004f1d8
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x1004f1e4
GetCurrentProcessId 0x1004f1f8
GetCurrentThread 0x1004f1e8
GetCurrentThreadId 0x1004f1f0
OpenProcessToken 0x1004f1f4
OpenThreadToken 0x1004f1e0
SetThreadToken 0x1004f1ec
TerminateProcess 0x1004f1fc
api-ms-win-core-processthreads-l1-1-1.dll 1
IsProcessorFeaturePresent 0x1004f204
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1004f20c
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x1004f21c
RegCreateKeyExW 0x1004f220
RegDeleteKeyExW 0x1004f214
RegGetValueW 0x1004f218
RegOpenKeyExW 0x1004f22c
RegQueryValueExW 0x1004f224
RegSetValueExW 0x1004f228
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathRemoveBackslashW 0x1004f234
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 2
StrCmpIW 0x1004f240
StrStrIW 0x1004f23c
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x1004f248
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x1004f28c
AcquireSRWLockShared 0x1004f26c
CreateMutexExW 0x1004f288
CreateSemaphoreExW 0x1004f280
DeleteCriticalSection 0x1004f268
EnterCriticalSection 0x1004f260
InitializeCriticalSection 0x1004f27c
InitializeCriticalSectionEx 0x1004f264
LeaveCriticalSection 0x1004f284
OpenSemaphoreW 0x1004f278
ReleaseMutex 0x1004f258
ReleaseSemaphore 0x1004f254
ReleaseSRWLockExclusive 0x1004f250
ReleaseSRWLockShared 0x1004f270
WaitForSingleObject 0x1004f274
WaitForSingleObjectEx 0x1004f25c
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x1004f294
InitOnceComplete 0x1004f298
Sleep 0x1004f29c
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetSystemDirectoryW 0x1004f2ac
GetSystemInfo 0x1004f2a8
GetSystemTimeAsFileTime 0x1004f2b4
GetVersionExW 0x1004f2b0
GetWindowsDirectoryW 0x1004f2a4
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x1004f2bc
CreateThreadpoolTimer 0x1004f2c8
SetThreadpoolTimer 0x1004f2c4
WaitForThreadpoolTimerCallbacks 0x1004f2c0
api-ms-win-crt-private-l1-1-0.dll 48
__CxxFrameHandler3 0x1004f37c
_CxxThrowException 0x1004f384
_except_handler4_common 0x1004f330
_o___acrt_iob_func 0x1004f378
_o___std_exception_copy 0x1004f374
_o___std_exception_destroy 0x1004f370
_o___std_type_info_destroy_list 0x1004f36c
_o___stdio_common_vfwprintf 0x1004f368
_o___stdio_common_vsnprintf_s 0x1004f364
_o___stdio_common_vsnwprintf_s 0x1004f360
_o___stdio_common_vswprintf 0x1004f35c
_o___stdio_common_vswprintf_s 0x1004f358
_o___stdio_common_vswscanf 0x1004f354
_o__callnewh 0x1004f348
_o__cexit 0x1004f344
_o__configure_narrow_argv 0x1004f340
_o__crt_atexit 0x1004f33c
_o__errno 0x1004f338
_o__execute_onexit_table 0x1004f380
_o__initialize_narrow_environment 0x1004f2d0
_o__initialize_onexit_table 0x1004f2d4
_o__invalid_parameter_noinfo 0x1004f2d8
_o__purecall 0x1004f2dc
_o__register_onexit_function 0x1004f2e0
_o__seh_filter_dll 0x1004f2e4
_o__ultow_s 0x1004f2e8
_o__wcsicmp 0x1004f2ec
_o__wcslwr 0x1004f2f0
_o__wcsnicmp 0x1004f2f4
_o__wcsupr 0x1004f2fc
_o__wfopen_s 0x1004f300
_o_bsearch 0x1004f304
_o_fclose 0x1004f308
_o_fflush 0x1004f30c
_o_free 0x1004f310
_o_malloc 0x1004f314
_o_strcpy_s 0x1004f318
_o_wcscat_s 0x1004f31c
_o_wcscpy_s 0x1004f320
_o_wcsncpy_s 0x1004f324
_o_wcstol 0x1004f328
_o_wcstoul 0x1004f32c
memcmp 0x1004f388
memcpy 0x1004f38c
memmove 0x1004f2f8
wcschr 0x1004f350
wcsrchr 0x1004f34c
wcsstr 0x1004f334
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x1004f398
_initterm_e 0x1004f394
api-ms-win-crt-string-l1-1-0.dll 5
memset 0x1004f3b0
strncmp 0x1004f3a0
wcsncmp 0x1004f3ac
wcsncpy 0x1004f3a8
wcsnlen 0x1004f3a4
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x1004f3c0
EventUnregister 0x1004f3b8
EventWriteTransfer 0x1004f3bc
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x1004f3e0
DuplicateTokenEx 0x1004f3dc
GetSecurityDescriptorControl 0x1004f3e4
GetSecurityDescriptorDacl 0x1004f3c8
GetSecurityDescriptorGroup 0x1004f3cc
GetSecurityDescriptorOwner 0x1004f3d0
GetSecurityDescriptorSacl 0x1004f3d8
GetTokenInformation 0x1004f3d4
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x1004f3ec
api-ms-win-security-provider-l1-1-0.dll 1
SetNamedSecurityInfoW 0x1004f3f4
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x1004f400
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1004f3fc
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x1004f418
BCryptCreateHash 0x1004f414
BCryptDestroyHash 0x1004f420
BCryptFinishHash 0x1004f40c
BCryptHash 0x1004f410
BCryptHashData 0x1004f41c
BCryptOpenAlgorithmProvider 0x1004f408
CRYPT32.dll 11
CertCloseStore 0x1004f028
CertComparePublicKeyInfo 0x1004f018
CertCreateCertificateContext 0x1004f000
CertEnumCertificatesInStore 0x1004f00c
CertFindCertificateInStore 0x1004f014
CertFreeCertificateContext 0x1004f010
CertGetCertificateContextProperty 0x1004f01c
CertGetNameStringW 0x1004f024
CryptMsgClose 0x1004f020
CryptMsgGetParam 0x1004f004
CryptQueryObject 0x1004f008
imagehlp.dll 1
CheckSumMappedFile 0x1004f428
ntdll.dll 86
LdrAccessResource 0x1004f478
LdrFindResource_U 0x1004f474
LdrGetDllHandle 0x1004f530
LdrGetProcedureAddress 0x1004f52c
NtAdjustPrivilegesToken 0x1004f560
NtClose 0x1004f448
NtCreateEvent 0x1004f44c
NtDeviceIoControlFile 0x1004f440
NtEnumerateBootEntries 0x1004f4f4
NtOpenDirectoryObject 0x1004f4ec
NtOpenFile 0x1004f45c
NtOpenKey 0x1004f4bc
NtOpenProcess 0x1004f434
NtOpenProcessTokenEx 0x1004f564
NtOpenSymbolicLinkObject 0x1004f4b4
NtOpenThreadTokenEx 0x1004f568
NtQueryBootEntryOrder 0x1004f4e0
NtQueryBootOptions 0x1004f4e4
NtQueryDirectoryObject 0x1004f4f0
NtQueryInformationFile 0x1004f450
NtQueryInformationProcess 0x1004f430
NtQueryInformationThread 0x1004f454
NtQuerySymbolicLinkObject 0x1004f4c0
NtQuerySystemEnvironmentValueEx 0x1004f574
NtQuerySystemInformation 0x1004f580
NtQueryValueKey 0x1004f4dc
NtReadFile 0x1004f438
NtSetInformationFile 0x1004f464
NtSetInformationThread 0x1004f43c
NtSetSystemEnvironmentValueEx 0x1004f578
NtTranslateFilePath 0x1004f4e8
NtWaitForSingleObject 0x1004f458
NtWriteFile 0x1004f480
RtlAddAccessAllowedAceEx 0x1004f4c4
RtlAllocateAndInitializeSid 0x1004f584
RtlAllocateHeap 0x1004f47c
RtlAppendUnicodeToString 0x1004f4a4
RtlCompareMemory 0x1004f470
RtlCreateAcl 0x1004f4d4
RtlCreateSecurityDescriptor 0x1004f4d8
RtlFreeHeap 0x1004f46c
RtlFreeSid 0x1004f4d0
RtlFreeUnicodeString 0x1004f460
RtlGetVersion 0x1004f554
RtlGUIDFromString 0x1004f4a0
RtlImageNtHeader 0x1004f444
RtlImageNtHeaderEx 0x1004f4c8
RtlImpersonateSelf 0x1004f56c
RtlInitAnsiString 0x1004f538
RtlInitUnicodeString 0x1004f57c
RtlLengthSecurityDescriptor 0x1004f4ac
RtlLengthSid 0x1004f4cc
RtlNtStatusToDosError 0x1004f570
RtlSetDaclSecurityDescriptor 0x1004f4b8
RtlSetOwnerSecurityDescriptor 0x1004f4b0
RtlStringFromGUID 0x1004f468
ZwAllocateUuids 0x1004f55c
ZwClose 0x1004f498
ZwCreateFile 0x1004f4f8
ZwCreateKey 0x1004f4fc
ZwDeleteKey 0x1004f510
ZwDeleteValueKey 0x1004f508
ZwDeviceIoControlFile 0x1004f548
ZwEnumerateKey 0x1004f514
ZwFlushKey 0x1004f504
ZwLoadKey 0x1004f500
ZwOpenDirectoryObject 0x1004f558
ZwOpenFile 0x1004f490
ZwOpenKey 0x1004f528
ZwOpenMutant 0x1004f494
ZwOpenProcess 0x1004f540
ZwOpenSymbolicLinkObject 0x1004f550
ZwQueryAttributesFile 0x1004f4a8
ZwQueryDirectoryObject 0x1004f54c
ZwQueryInformationFile 0x1004f53c
ZwQueryInformationProcess 0x1004f534
ZwQueryKey 0x1004f488
ZwQuerySymbolicLinkObject 0x1004f544
ZwQuerySystemInformation 0x1004f49c
ZwQueryValueKey 0x1004f518
ZwReleaseMutant 0x1004f48c
ZwSaveKey 0x1004f50c
ZwSetSecurityObject 0x1004f51c
ZwSetValueKey 0x1004f524
ZwUnloadKey 0x1004f520
ZwWaitForSingleObject 0x1004f484
OLEAUT32.dll 8
SafeArrayGetElement 0x1004f030
SafeArrayGetLBound 0x1004f034
SafeArrayGetUBound 0x1004f044
SysAllocString 0x1004f038
SysFreeString 0x1004f04c
SysStringLen 0x1004f03c
VariantClear 0x1004f040
VariantInit 0x1004f048
RPCRT4.dll 1
UuidCreate 0x1004f054
WCP.dll 6
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z 0x1004f05c
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x1004f070
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z 0x1004f06c
ConvertNtStatusToHResult 0x1004f060
RtlFreeLBlob 0x1004f068
RtlReportErrorOrigination 0x1004f064
WINTRUST.dll 3
WinVerifyTrust 0x1004f078
WTHelperGetProvSignerFromChain 0x1004f080
WTHelperProvDataFromStateData 0x1004f07c