securebootai.dll

v10.0.19041.3562 64-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
90.0 KB
Uploaded
2025-12-01 08:20
Views
37
SHA-256
a1d5eb3b5fa0053bb92fa1068cec6daa

Exported functions 2

DllCanUnloadNow #1 · 0x8510
DllCsiGetHandler #2 · 0x8530

Imported DLLs & functions 123

api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18000f388
IsDebuggerPresent 0x18000f390
OutputDebugStringW 0x18000f380
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18000f3b8
SetLastError 0x18000f3a0
SetUnhandledExceptionFilter 0x18000f3a8
UnhandledExceptionFilter 0x18000f3b0
api-ms-win-core-file-l1-1-0.dll 6
CreateFileW 0x18000f3d8
FindClose 0x18000f3f0
FindFirstFileW 0x18000f3c8
FindNextFileW 0x18000f3e8
GetFileSizeEx 0x18000f3e0
ReadFile 0x18000f3d0
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18000f400
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x18000f418
HeapAlloc 0x18000f420
HeapDestroy 0x18000f410
HeapFree 0x18000f428
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
CopyFileW 0x18000f438
api-ms-win-core-libraryloader-l1-1-0.dll 7
DisableThreadLibraryCalls 0x18000f478
FreeLibrary 0x18000f470
GetModuleFileNameA 0x18000f450
GetModuleHandleExW 0x18000f448
GetModuleHandleW 0x18000f460
GetProcAddress 0x18000f458
LoadLibraryExW 0x18000f468
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18000f488
api-ms-win-core-processthreads-l1-1-0.dll 7
GetCurrentProcess 0x18000f4c8
GetCurrentProcessId 0x18000f4b0
GetCurrentThread 0x18000f498
GetCurrentThreadId 0x18000f4a0
OpenProcessToken 0x18000f4b8
OpenThreadToken 0x18000f4a8
TerminateProcess 0x18000f4c0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18000f4d8
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x18000f4f8
RegCreateKeyExW 0x18000f508
RegDeleteKeyExW 0x18000f4e8
RegGetValueW 0x18000f500
RegOpenKeyExW 0x18000f4f0
RegQueryValueExW 0x18000f510
RegSetValueExW 0x18000f518
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x18000f538
RtlLookupFunctionEntry 0x18000f530
RtlVirtualUnwind 0x18000f528
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x18000f5a8
AcquireSRWLockShared 0x18000f598
CreateMutexExW 0x18000f560
CreateSemaphoreExW 0x18000f568
DeleteCriticalSection 0x18000f5c0
EnterCriticalSection 0x18000f548
InitializeCriticalSection 0x18000f5b8
InitializeCriticalSectionEx 0x18000f570
LeaveCriticalSection 0x18000f550
OpenSemaphoreW 0x18000f5b0
ReleaseMutex 0x18000f580
ReleaseSemaphore 0x18000f588
ReleaseSRWLockExclusive 0x18000f5a0
ReleaseSRWLockShared 0x18000f590
WaitForSingleObject 0x18000f578
WaitForSingleObjectEx 0x18000f558
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x18000f5e0
InitOnceComplete 0x18000f5d8
Sleep 0x18000f5d0
api-ms-win-core-sysinfo-l1-1-0.dll 4
GetSystemDirectoryW 0x18000f5f8
GetSystemTimeAsFileTime 0x18000f600
GetSystemWindowsDirectoryW 0x18000f5f0
GetTickCount 0x18000f608
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x18000f618
CreateThreadpoolTimer 0x18000f630
SetThreadpoolTimer 0x18000f620
WaitForThreadpoolTimerCallbacks 0x18000f628
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x18000f648
EventUnregister 0x18000f640
EventWriteTransfer 0x18000f650
api-ms-win-security-base-l1-1-0.dll 1
AdjustTokenPrivileges 0x18000f660
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x18000f670
CRYPT32.dll 8
CertCloseStore 0x18000f300
CertCreateCertificateContext 0x18000f310
CertFindCertificateInStore 0x18000f2f8
CertFreeCertificateContext 0x18000f320
CertGetCertificateContextProperty 0x18000f330
CryptMsgClose 0x18000f318
CryptMsgGetParam 0x18000f328
CryptQueryObject 0x18000f308
msvcrt.dll 27
__C_specific_handler 0x18000f698
__CxxFrameHandler3 0x18000f738
__dllonexit 0x18000f700
_amsg_exit 0x18000f6e0
_callnewh 0x18000f710
_CxxThrowException 0x18000f748
_initterm 0x18000f6e8
_lock 0x18000f6f0
_onexit 0x18000f708
_purecall 0x18000f6c0
_unlock 0x18000f6f8
_vsnprintf_s 0x18000f690
_vsnwprintf 0x18000f730
_wcsicmp 0x18000f6b8
_XcptFilter 0x18000f6d8
??0exception@@QEAA@AEBV0@@Z 0x18000f6a0
??0exception@@QEAA@XZ 0x18000f6a8
??1exception@@UEAA@XZ 0x18000f6b0
??1type_info@@UEAA@XZ 0x18000f718
?terminate@@YAXXZ 0x18000f728
free 0x18000f680
malloc 0x18000f6d0
memcmp 0x18000f740
memcpy_s 0x18000f720
memmove_s 0x18000f6c8
memset 0x18000f750
wcsstr 0x18000f688
ntdll.dll 4
NtQuerySystemInformation 0x18000f770
NtSetSystemEnvironmentValueEx 0x18000f778
RtlInitUnicodeString 0x18000f768
RtlNtStatusToDosError 0x18000f760
WCP.dll 7
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x18000f350
?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x18000f340
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x18000f370
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x18000f358
ConvertNtStatusToHResult 0x18000f360
RtlFreeLBlob 0x18000f348
RtlReportErrorOrigination 0x18000f368