securebootai.dll

v10.0.19041.1704 64-bit Windows NT Analyzed
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
89.9 KB
Uploaded
2025-12-01 08:20
Views
64
SHA-256
a37a22da94f3e1b7457d4f0fe7eacb02

Exported functions 2

DllCanUnloadNow #1 · 0x9430
DllCsiGetHandler #2 · 0x9450

Imported DLLs & functions 119

DebugBreak 0x18000f2b8
IsDebuggerPresent 0x18000f2c8
OutputDebugStringW 0x18000f2c0
GetLastError 0x18000f2d8
SetLastError 0x18000f2f0
SetUnhandledExceptionFilter 0x18000f2e8
UnhandledExceptionFilter 0x18000f2e0
CreateFileW 0x18000f320
FindClose 0x18000f318
FindFirstFileW 0x18000f308
FindNextFileW 0x18000f310
GetFileSizeEx 0x18000f328
ReadFile 0x18000f300
CloseHandle 0x18000f338
GetProcessHeap 0x18000f360
HeapAlloc 0x18000f358
HeapDestroy 0x18000f348
HeapFree 0x18000f350
DisableThreadLibraryCalls 0x18000f398
FreeLibrary 0x18000f378
GetModuleFileNameA 0x18000f390
GetModuleHandleExW 0x18000f370
GetModuleHandleW 0x18000f3a0
GetProcAddress 0x18000f388
LoadLibraryExW 0x18000f380
FormatMessageW 0x18000f3b0
GetCurrentProcess 0x18000f3e0
GetCurrentProcessId 0x18000f3f0
GetCurrentThread 0x18000f3d8
GetCurrentThreadId 0x18000f3d0
OpenProcessToken 0x18000f3c0
OpenThreadToken 0x18000f3c8
TerminateProcess 0x18000f3e8
QueryPerformanceCounter 0x18000f400
RegCloseKey 0x18000f428
RegCreateKeyExW 0x18000f438
RegGetValueW 0x18000f418
RegOpenKeyExW 0x18000f410
RegQueryValueExW 0x18000f420
RegSetValueExW 0x18000f430
RtlCaptureContext 0x18000f450
RtlLookupFunctionEntry 0x18000f448
RtlVirtualUnwind 0x18000f458
AcquireSRWLockExclusive 0x18000f4c8
AcquireSRWLockShared 0x18000f4e0
CreateMutexExW 0x18000f4a8
CreateSemaphoreExW 0x18000f478
DeleteCriticalSection 0x18000f480
EnterCriticalSection 0x18000f490
InitializeCriticalSection 0x18000f468
InitializeCriticalSectionEx 0x18000f488
LeaveCriticalSection 0x18000f4a0
OpenSemaphoreW 0x18000f470
ReleaseMutex 0x18000f4b8
ReleaseSemaphore 0x18000f4c0
ReleaseSRWLockExclusive 0x18000f4d0
ReleaseSRWLockShared 0x18000f4d8
WaitForSingleObject 0x18000f4b0
WaitForSingleObjectEx 0x18000f498
InitOnceBeginInitialize 0x18000f4f0
InitOnceComplete 0x18000f500
Sleep 0x18000f4f8
GetSystemDirectoryW 0x18000f528
GetSystemTimeAsFileTime 0x18000f510
GetSystemWindowsDirectoryW 0x18000f520
GetTickCount 0x18000f518
CloseThreadpoolTimer 0x18000f538
CreateThreadpoolTimer 0x18000f548
SetThreadpoolTimer 0x18000f540
WaitForThreadpoolTimerCallbacks 0x18000f550
EventRegister 0x18000f568
EventUnregister 0x18000f560
EventWriteTransfer 0x18000f570
AdjustTokenPrivileges 0x18000f580
LookupPrivilegeValueW 0x18000f590
CertCloseStore 0x18000f268
CertCreateCertificateContext 0x18000f238
CertFindCertificateInStore 0x18000f258
CertFreeCertificateContext 0x18000f248
CertGetCertificateContextProperty 0x18000f250
CryptMsgClose 0x18000f240
CryptMsgGetParam 0x18000f260
CryptQueryObject 0x18000f270
__C_specific_handler 0x18000f608
__CxxFrameHandler3 0x18000f638
__dllonexit 0x18000f650
_amsg_exit 0x18000f5c8
_callnewh 0x18000f5e0
_CxxThrowException 0x18000f660
_initterm 0x18000f5c0
_lock 0x18000f5b8
_onexit 0x18000f5a8
_purecall 0x18000f628
_unlock 0x18000f5b0
_vsnprintf_s 0x18000f5f0
_vsnwprintf 0x18000f648
_wcsicmp 0x18000f620
_XcptFilter 0x18000f5d0
??0exception@@QEAA@AEBV0@@Z 0x18000f600
??0exception@@QEAA@XZ 0x18000f610
??1exception@@UEAA@XZ 0x18000f618
??1type_info@@UEAA@XZ 0x18000f5a0
free 0x18000f5f8
malloc 0x18000f5e8
memcmp 0x18000f658
memcpy_s 0x18000f640
memmove_s 0x18000f630
memset 0x18000f668
wcsstr 0x18000f5d8
NtQuerySystemInformation 0x18000f688
NtSetSystemEnvironmentValueEx 0x18000f690
RtlInitUnicodeString 0x18000f680
RtlNtStatusToDosError 0x18000f678
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x18000f298
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x18000f280
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x18000f290
ConvertNtStatusToHResult 0x18000f288
RtlFreeLBlob 0x18000f2a8
RtlReportErrorOrigination 0x18000f2a0