securebootai.dll

v10.0.19041.6449 32-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
356.4 KB
Uploaded
2025-12-01 08:40
Views
55
SHA-256
4b1234fbd1e8008dc94281174fa81dd9

Exported functions 2

DllCanUnloadNow #1 · 0x27320
DllCsiGetHandler #2 · 0x27340

Imported DLLs & functions 312

api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x1005208c
CoInitializeEx 0x10052088
CoInitializeSecurity 0x10052094
CoSetProxyBlanket 0x10052090
CoUninitialize 0x10052098
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x100520a0
IsDebuggerPresent 0x100520a4
OutputDebugStringW 0x100520a8
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x100520bc
SetLastError 0x100520b0
SetUnhandledExceptionFilter 0x100520b4
UnhandledExceptionFilter 0x100520b8
api-ms-win-core-file-l1-1-0.dll 21
CreateDirectoryW 0x100520fc
CreateFileW 0x10052110
DeleteFileW 0x100520c8
FindClose 0x10052114
FindFirstFileW 0x10052104
FindFirstVolumeW 0x100520cc
FindNextFileW 0x1005210c
FindNextVolumeW 0x100520e4
FindVolumeClose 0x100520f4
FlushFileBuffers 0x100520e8
GetFileAttributesW 0x100520e0
GetFileInformationByHandle 0x100520d8
GetFileSizeEx 0x10052108
GetFullPathNameW 0x100520c4
GetVolumeInformationW 0x100520ec
GetVolumePathNameW 0x100520dc
QueryDosDeviceW 0x100520d0
ReadFile 0x10052100
SetFileAttributesW 0x100520f8
SetFileInformationByHandle 0x100520d4
WriteFile 0x100520f0
api-ms-win-core-file-l1-2-0.dll 1
GetVolumeNameForVolumeMountPointW 0x1005211c
api-ms-win-core-file-l2-1-0.dll 3
CopyFileExW 0x1005212c
GetFileInformationByHandleEx 0x10052124
MoveFileExW 0x10052128
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x10052134
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x10052140
HeapAlloc 0x1005213c
HeapDestroy 0x10052148
HeapFree 0x10052144
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x10052150
LocalFree 0x10052154
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x1005215c
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x10052164
api-ms-win-core-kernel32-legacy-l1-1-0.dll 3
CopyFileW 0x1005216c
FindResourceW 0x10052174
LoadLibraryW 0x10052170
api-ms-win-core-libraryloader-l1-1-0.dll 10
DisableThreadLibraryCalls 0x1005218c
FindResourceExW 0x100521a0
FreeLibrary 0x10052184
GetModuleFileNameA 0x10052198
GetModuleHandleExW 0x10052180
GetModuleHandleW 0x10052194
GetProcAddress 0x10052188
LoadLibraryExW 0x1005217c
LoadResource 0x10052190
SizeofResource 0x1005219c
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x100521a8
GetLocaleInfoW 0x100521ac
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x100521b4
GetUserDefaultUILanguage 0x100521b8
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x100521c4
MapViewOfFile 0x100521c0
UnmapViewOfFile 0x100521c8
api-ms-win-core-privateprofile-l1-1-0.dll 1
GetPrivateProfileSectionW 0x100521d0
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x100521d8
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x100521e4
GetCurrentProcessId 0x100521f8
GetCurrentThread 0x100521e8
GetCurrentThreadId 0x100521f0
OpenProcessToken 0x100521f4
OpenThreadToken 0x100521e0
SetThreadToken 0x100521ec
TerminateProcess 0x100521fc
api-ms-win-core-processthreads-l1-1-1.dll 1
IsProcessorFeaturePresent 0x10052204
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1005220c
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x1005221c
RegCreateKeyExW 0x10052220
RegDeleteKeyExW 0x10052214
RegGetValueW 0x10052218
RegOpenKeyExW 0x1005222c
RegQueryValueExW 0x10052224
RegSetValueExW 0x10052228
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathRemoveBackslashW 0x10052234
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 2
StrCmpIW 0x10052240
StrStrIW 0x1005223c
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x10052248
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x1005228c
AcquireSRWLockShared 0x1005226c
CreateMutexExW 0x10052288
CreateSemaphoreExW 0x10052280
DeleteCriticalSection 0x10052268
EnterCriticalSection 0x10052260
InitializeCriticalSection 0x1005227c
InitializeCriticalSectionEx 0x10052264
LeaveCriticalSection 0x10052284
OpenSemaphoreW 0x10052278
ReleaseMutex 0x10052258
ReleaseSemaphore 0x10052254
ReleaseSRWLockExclusive 0x10052250
ReleaseSRWLockShared 0x10052270
WaitForSingleObject 0x10052274
WaitForSingleObjectEx 0x1005225c
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x10052294
InitOnceComplete 0x10052298
Sleep 0x1005229c
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetSystemDirectoryW 0x100522ac
GetSystemInfo 0x100522a8
GetSystemTimeAsFileTime 0x100522b4
GetVersionExW 0x100522b0
GetWindowsDirectoryW 0x100522a4
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x100522bc
CreateThreadpoolTimer 0x100522c8
SetThreadpoolTimer 0x100522c4
WaitForThreadpoolTimerCallbacks 0x100522c0
api-ms-win-crt-private-l1-1-0.dll 50
__CxxFrameHandler3 0x10052384
_CxxThrowException 0x1005238c
_except_handler4_common 0x10052338
_o___acrt_iob_func 0x10052380
_o___std_exception_copy 0x1005237c
_o___std_exception_destroy 0x10052378
_o___std_type_info_destroy_list 0x10052374
_o___stdio_common_vfwprintf 0x10052370
_o___stdio_common_vsnprintf_s 0x1005236c
_o___stdio_common_vsnwprintf_s 0x10052368
_o___stdio_common_vswprintf 0x10052364
_o___stdio_common_vswprintf_s 0x10052360
_o___stdio_common_vswscanf 0x1005235c
_o__callnewh 0x10052350
_o__cexit 0x1005234c
_o__configure_narrow_argv 0x10052348
_o__crt_atexit 0x10052344
_o__errno 0x10052340
_o__execute_onexit_table 0x10052388
_o__initialize_narrow_environment 0x100522d0
_o__initialize_onexit_table 0x100522d4
_o__invalid_parameter_noinfo 0x100522d8
_o__purecall 0x100522dc
_o__register_onexit_function 0x100522e0
_o__seh_filter_dll 0x100522e4
_o__ultow_s 0x100522e8
_o__wcsicmp 0x100522ec
_o__wcslwr 0x100522f0
_o__wcsnicmp 0x100522f4
_o__wcsupr 0x100522fc
_o__wfopen_s 0x10052300
_o_bsearch 0x10052304
_o_fclose 0x10052308
_o_fflush 0x1005230c
_o_free 0x10052310
_o_iswspace 0x10052314
_o_malloc 0x10052318
_o_strcpy_s 0x1005231c
_o_towupper 0x10052320
_o_wcscat_s 0x10052324
_o_wcscpy_s 0x10052328
_o_wcsncpy_s 0x1005232c
_o_wcstol 0x10052330
_o_wcstoul 0x10052334
memcmp 0x10052390
memcpy 0x10052394
memmove 0x100522f8
wcschr 0x10052358
wcsrchr 0x10052354
wcsstr 0x1005233c
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x100523a0
_initterm_e 0x1005239c
api-ms-win-crt-string-l1-1-0.dll 5
memset 0x100523b8
strncmp 0x100523a8
wcsncmp 0x100523b4
wcsncpy 0x100523b0
wcsnlen 0x100523ac
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x100523c8
EventUnregister 0x100523c0
EventWriteTransfer 0x100523c4
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x100523e8
DuplicateTokenEx 0x100523e4
GetSecurityDescriptorControl 0x100523ec
GetSecurityDescriptorDacl 0x100523d0
GetSecurityDescriptorGroup 0x100523d4
GetSecurityDescriptorOwner 0x100523d8
GetSecurityDescriptorSacl 0x100523e0
GetTokenInformation 0x100523dc
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x100523f4
api-ms-win-security-provider-l1-1-0.dll 1
SetNamedSecurityInfoW 0x100523fc
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x10052408
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x10052404
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x10052420
BCryptCreateHash 0x1005241c
BCryptDestroyHash 0x10052428
BCryptFinishHash 0x10052414
BCryptHash 0x10052418
BCryptHashData 0x10052424
BCryptOpenAlgorithmProvider 0x10052410
CRYPT32.dll 11
CertCloseStore 0x10052028
CertComparePublicKeyInfo 0x10052018
CertCreateCertificateContext 0x10052000
CertEnumCertificatesInStore 0x1005200c
CertFindCertificateInStore 0x10052014
CertFreeCertificateContext 0x10052010
CertGetCertificateContextProperty 0x1005201c
CertGetNameStringW 0x10052024
CryptMsgClose 0x10052020
CryptMsgGetParam 0x10052004
CryptQueryObject 0x10052008
imagehlp.dll 1
CheckSumMappedFile 0x10052430
ntdll.dll 86
LdrAccessResource 0x10052480
LdrFindResource_U 0x1005247c
LdrGetDllHandle 0x10052538
LdrGetProcedureAddress 0x10052534
NtAdjustPrivilegesToken 0x10052568
NtClose 0x10052450
NtCreateEvent 0x10052454
NtDeviceIoControlFile 0x10052448
NtEnumerateBootEntries 0x100524fc
NtOpenDirectoryObject 0x100524f4
NtOpenFile 0x10052464
NtOpenKey 0x100524c4
NtOpenProcess 0x1005243c
NtOpenProcessTokenEx 0x1005256c
NtOpenSymbolicLinkObject 0x100524bc
NtOpenThreadTokenEx 0x10052570
NtQueryBootEntryOrder 0x100524e8
NtQueryBootOptions 0x100524ec
NtQueryDirectoryObject 0x100524f8
NtQueryInformationFile 0x10052458
NtQueryInformationProcess 0x10052438
NtQueryInformationThread 0x1005245c
NtQuerySymbolicLinkObject 0x100524c8
NtQuerySystemEnvironmentValueEx 0x1005257c
NtQuerySystemInformation 0x10052588
NtQueryValueKey 0x100524e4
NtReadFile 0x10052440
NtSetInformationFile 0x1005246c
NtSetInformationThread 0x10052444
NtSetSystemEnvironmentValueEx 0x10052580
NtTranslateFilePath 0x100524f0
NtWaitForSingleObject 0x10052460
NtWriteFile 0x10052488
RtlAddAccessAllowedAceEx 0x100524cc
RtlAllocateAndInitializeSid 0x1005258c
RtlAllocateHeap 0x10052484
RtlAppendUnicodeToString 0x100524ac
RtlCompareMemory 0x10052478
RtlCreateAcl 0x100524dc
RtlCreateSecurityDescriptor 0x100524e0
RtlFreeHeap 0x10052474
RtlFreeSid 0x100524d8
RtlFreeUnicodeString 0x10052468
RtlGetVersion 0x1005255c
RtlGUIDFromString 0x100524a8
RtlImageNtHeader 0x1005244c
RtlImageNtHeaderEx 0x100524d0
RtlImpersonateSelf 0x10052574
RtlInitAnsiString 0x10052540
RtlInitUnicodeString 0x10052584
RtlLengthSecurityDescriptor 0x100524b4
RtlLengthSid 0x100524d4
RtlNtStatusToDosError 0x10052578
RtlSetDaclSecurityDescriptor 0x100524c0
RtlSetOwnerSecurityDescriptor 0x100524b8
RtlStringFromGUID 0x10052470
ZwAllocateUuids 0x10052564
ZwClose 0x100524a0
ZwCreateFile 0x10052500
ZwCreateKey 0x10052504
ZwDeleteKey 0x10052518
ZwDeleteValueKey 0x10052510
ZwDeviceIoControlFile 0x10052550
ZwEnumerateKey 0x1005251c
ZwFlushKey 0x1005250c
ZwLoadKey 0x10052508
ZwOpenDirectoryObject 0x10052560
ZwOpenFile 0x10052498
ZwOpenKey 0x10052530
ZwOpenMutant 0x1005249c
ZwOpenProcess 0x10052548
ZwOpenSymbolicLinkObject 0x10052558
ZwQueryAttributesFile 0x100524b0
ZwQueryDirectoryObject 0x10052554
ZwQueryInformationFile 0x10052544
ZwQueryInformationProcess 0x1005253c
ZwQueryKey 0x10052490
ZwQuerySymbolicLinkObject 0x1005254c
ZwQuerySystemInformation 0x100524a4
ZwQueryValueKey 0x10052520
ZwReleaseMutant 0x10052494
ZwSaveKey 0x10052514
ZwSetSecurityObject 0x10052524
ZwSetValueKey 0x1005252c
ZwUnloadKey 0x10052528
ZwWaitForSingleObject 0x1005248c
OLEAUT32.dll 8
SafeArrayGetElement 0x10052030
SafeArrayGetLBound 0x10052034
SafeArrayGetUBound 0x10052044
SysAllocString 0x10052038
SysFreeString 0x1005204c
SysStringLen 0x1005203c
VariantClear 0x10052040
VariantInit 0x10052048
RPCRT4.dll 1
UuidCreate 0x10052054
WCP.dll 6
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z 0x1005205c
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10052070
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z 0x1005206c
ConvertNtStatusToHResult 0x10052060
RtlFreeLBlob 0x10052068
RtlReportErrorOrigination 0x10052064
WINTRUST.dll 3
WinVerifyTrust 0x10052078
WTHelperGetProvSignerFromChain 0x10052080
WTHelperProvDataFromStateData 0x1005207c