securebootai.dll

v10.0.19041.4351 64-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
349.9 KB
Uploaded
2025-12-01 08:20
Views
43
SHA-256
9337e1b55ab63f42836c9e7ed78afd30

Exported functions 2

DllCanUnloadNow #1 · 0xa090
DllCsiGetHandler #2 · 0xa0b0

Imported DLLs & functions 299

api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x180038200
CoInitializeEx 0x1800381f8
CoInitializeSecurity 0x180038208
CoSetProxyBlanket 0x180038210
CoUninitialize 0x1800381f0
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x180038220
IsDebuggerPresent 0x180038228
OutputDebugStringW 0x180038230
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x180038258
SetLastError 0x180038248
SetUnhandledExceptionFilter 0x180038240
UnhandledExceptionFilter 0x180038250
api-ms-win-core-file-l1-1-0.dll 18
CreateDirectoryW 0x1800382d0
CreateFileW 0x1800382d8
DeleteFileW 0x1800382c0
FindClose 0x1800382f0
FindFirstFileW 0x180038298
FindNextFileW 0x1800382a8
FlushFileBuffers 0x1800382e8
GetFileAttributesW 0x180038290
GetFileInformationByHandle 0x1800382b0
GetFileSizeEx 0x1800382a0
GetFullPathNameW 0x1800382c8
GetVolumeInformationW 0x180038268
GetVolumePathNameW 0x180038288
QueryDosDeviceW 0x180038270
ReadFile 0x180038280
SetFileAttributesW 0x1800382e0
SetFileInformationByHandle 0x1800382b8
WriteFile 0x180038278
api-ms-win-core-file-l1-2-0.dll 1
GetVolumeNameForVolumeMountPointW 0x180038300
api-ms-win-core-file-l2-1-0.dll 3
CopyFileExW 0x180038310
GetFileInformationByHandleEx 0x180038318
MoveFileExW 0x180038320
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x180038330
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x180038348
HeapAlloc 0x180038340
HeapDestroy 0x180038358
HeapFree 0x180038350
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x180038368
LocalFree 0x180038370
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x180038380
api-ms-win-core-kernel32-legacy-l1-1-0.dll 2
CopyFileW 0x180038398
LoadLibraryW 0x180038390
api-ms-win-core-libraryloader-l1-1-0.dll 9
DisableThreadLibraryCalls 0x1800383e8
FindResourceExW 0x1800383b8
FreeLibrary 0x1800383d8
GetModuleFileNameA 0x1800383e0
GetModuleHandleExW 0x1800383c8
GetModuleHandleW 0x1800383b0
GetProcAddress 0x1800383a8
LoadLibraryExW 0x1800383d0
LoadResource 0x1800383c0
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x180038400
GetLocaleInfoW 0x1800383f8
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x180038418
GetUserDefaultUILanguage 0x180038410
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x180038430
MapViewOfFile 0x180038438
UnmapViewOfFile 0x180038428
api-ms-win-core-privateprofile-l1-1-0.dll 1
GetPrivateProfileSectionW 0x180038448
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x180038458
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x180038488
GetCurrentProcessId 0x180038478
GetCurrentThread 0x180038480
GetCurrentThreadId 0x180038498
OpenProcessToken 0x180038468
OpenThreadToken 0x1800384a0
SetThreadToken 0x180038470
TerminateProcess 0x180038490
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800384b0
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x1800384d8
RegCreateKeyExW 0x1800384c0
RegDeleteKeyExW 0x1800384e0
RegGetValueW 0x1800384e8
RegOpenKeyExW 0x1800384f0
RegQueryValueExW 0x1800384c8
RegSetValueExW 0x1800384d0
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x180038510
RtlCompareMemory 0x180038518
RtlLookupFunctionEntry 0x180038500
RtlVirtualUnwind 0x180038508
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathRemoveBackslashW 0x180038528
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 2
StrCmpIW 0x180038538
StrStrIW 0x180038540
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x180038550
api-ms-win-core-string-obsolete-l1-1-0.dll 1
lstrlenA 0x180038560
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x1800385a8
AcquireSRWLockShared 0x180038598
CreateMutexExW 0x1800385e8
CreateSemaphoreExW 0x1800385c0
DeleteCriticalSection 0x180038580
EnterCriticalSection 0x1800385b0
InitializeCriticalSection 0x1800385c8
InitializeCriticalSectionEx 0x180038578
LeaveCriticalSection 0x1800385b8
OpenSemaphoreW 0x1800385d0
ReleaseMutex 0x180038570
ReleaseSemaphore 0x1800385e0
ReleaseSRWLockExclusive 0x1800385a0
ReleaseSRWLockShared 0x180038590
WaitForSingleObject 0x180038588
WaitForSingleObjectEx 0x1800385d8
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x180038608
InitOnceComplete 0x180038600
Sleep 0x1800385f8
api-ms-win-core-sysinfo-l1-1-0.dll 6
GetSystemDirectoryW 0x180038638
GetSystemInfo 0x180038628
GetSystemTimeAsFileTime 0x180038618
GetTickCount 0x180038640
GetVersionExW 0x180038630
GetWindowsDirectoryW 0x180038620
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x180038660
CreateThreadpoolTimer 0x180038658
SetThreadpoolTimer 0x180038650
WaitForThreadpoolTimerCallbacks 0x180038668
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x180038680
EventUnregister 0x180038678
EventWriteTransfer 0x180038688
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x1800386b8
DuplicateTokenEx 0x1800386c8
GetSecurityDescriptorControl 0x180038698
GetSecurityDescriptorDacl 0x1800386a8
GetSecurityDescriptorGroup 0x1800386b0
GetSecurityDescriptorOwner 0x1800386c0
GetSecurityDescriptorSacl 0x1800386a0
GetTokenInformation 0x1800386d0
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x1800386e0
api-ms-win-security-provider-l1-1-0.dll 1
SetNamedSecurityInfoW 0x1800386f0
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x180038700
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x180038708
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x180038738
BCryptCreateHash 0x180038718
BCryptDestroyHash 0x180038730
BCryptFinishHash 0x180038720
BCryptHash 0x180038748
BCryptHashData 0x180038740
BCryptOpenAlgorithmProvider 0x180038728
CRYPT32.dll 9
CertCloseStore 0x180038128
CertCreateCertificateContext 0x180038130
CertFindCertificateInStore 0x180038118
CertFreeCertificateContext 0x180038108
CertGetCertificateContextProperty 0x180038110
CertGetNameStringW 0x180038140
CryptMsgClose 0x180038138
CryptMsgGetParam 0x180038120
CryptQueryObject 0x180038148
imagehlp.dll 1
CheckSumMappedFile 0x180038758
msvcrt.dll 53
__C_specific_handler 0x180038880
__CxxFrameHandler3 0x1800387c8
__dllonexit 0x180038838
__iob_func 0x180038900
_amsg_exit 0x180038850
_callnewh 0x1800387f0
_CxxThrowException 0x1800388c0
_initterm 0x180038860
_lock 0x180038848
_onexit 0x1800387d8
_purecall 0x180038888
_snwscanf_s 0x1800388e0
_ultow_s 0x1800388f0
_unlock 0x180038828
_vsnprintf_s 0x180038798
_vsnwprintf 0x180038840
_vsnwprintf_s 0x1800387a0
_wcsicmp 0x1800387c0
_wcslwr 0x1800388d8
_wcsnicmp 0x180038768
_wcsupr 0x1800387e8
_wfopen_s 0x180038868
_XcptFilter 0x180038830
??0exception@@QEAA@AEBV0@@Z 0x1800387a8
??0exception@@QEAA@XZ 0x1800387b0
??1exception@@UEAA@XZ 0x1800387b8
??1type_info@@UEAA@XZ 0x180038820
?terminate@@YAXXZ 0x1800388a0
bsearch 0x180038818
fclose 0x180038778
fflush 0x180038800
free 0x180038878
fwprintf 0x1800387e0
malloc 0x180038870
memcmp 0x1800388b8
memcpy 0x1800388b0
memcpy_s 0x180038898
memmove 0x1800388a8
memmove_s 0x180038890
memset 0x1800387f8
strcpy_s 0x1800388e8
strncmp 0x1800388c8
swprintf_s 0x180038808
wcscat_s 0x180038770
wcschr 0x180038810
wcscmp 0x180038908
wcscpy_s 0x180038858
wcsncmp 0x1800387d0
wcsncpy_s 0x180038780
wcsnlen 0x1800388d0
wcsrchr 0x180038788
wcsstr 0x180038790
wcstoul 0x1800388f8
ntdll.dll 83
LdrAccessResource 0x180038978
LdrFindResource_U 0x180038970
LdrGetDllHandle 0x180038a90
LdrGetProcedureAddress 0x180038a88
NtAdjustPrivilegesToken 0x180038ae8
NtClose 0x180038b70
NtCreateEvent 0x180038928
NtDeviceIoControlFile 0x180038918
NtEnumerateBootEntries 0x180038b50
NtOpenDirectoryObject 0x180038b40
NtOpenFile 0x180038948
NtOpenKey 0x180038b10
NtOpenProcess 0x180038b60
NtOpenProcessTokenEx 0x180038af0
NtOpenSymbolicLinkObject 0x180038b08
NtOpenThreadTokenEx 0x180038af8
NtQueryBootEntryOrder 0x180038b28
NtQueryBootOptions 0x180038b30
NtQueryDirectoryObject 0x180038b48
NtQueryInformationFile 0x180038930
NtQueryInformationProcess 0x180038b68
NtQueryInformationThread 0x180038938
NtQuerySymbolicLinkObject 0x180038b18
NtQuerySystemEnvironmentValueEx 0x180038b88
NtQuerySystemInformation 0x180038ba0
NtQueryValueKey 0x180038b20
NtReadFile 0x180038ba8
NtSetInformationFile 0x180038958
NtSetInformationThread 0x180038a40
NtSetSystemEnvironmentValueEx 0x180038b90
NtTranslateFilePath 0x180038b38
NtWaitForSingleObject 0x180038940
NtWriteFile 0x180038b78
RtlAddAccessAllowedAceEx 0x180038a08
RtlAllocateAndInitializeSid 0x180038a10
RtlAllocateHeap 0x180038980
RtlAppendUnicodeToString 0x1800389c8
RtlCreateAcl 0x180038a58
RtlCreateSecurityDescriptor 0x180038a70
RtlFreeHeap 0x180038968
RtlFreeSid 0x180038a38
RtlFreeUnicodeString 0x180038950
RtlGUIDFromString 0x1800389c0
RtlImageNtHeader 0x180038920
RtlImpersonateSelf 0x180038b00
RtlInitAnsiString 0x180038aa0
RtlInitUnicodeString 0x180038b98
RtlLengthSecurityDescriptor 0x1800389d8
RtlLengthSid 0x180038a18
RtlNtStatusToDosError 0x180038b80
RtlSetDaclSecurityDescriptor 0x1800389e8
RtlSetOwnerSecurityDescriptor 0x1800389e0
RtlStringFromGUID 0x180038960
ZwAllocateUuids 0x180038ae0
ZwClose 0x1800389b0
ZwCreateFile 0x1800389f0
ZwCreateKey 0x1800389f8
ZwDeleteKey 0x180038b58
ZwDeleteValueKey 0x180038a28
ZwDeviceIoControlFile 0x180038ac0
ZwEnumerateKey 0x180038a48
ZwFlushKey 0x180038a20
ZwLoadKey 0x180038a00
ZwOpenDirectoryObject 0x180038ad8
ZwOpenFile 0x1800389a0
ZwOpenKey 0x180038a80
ZwOpenMutant 0x1800389a8
ZwOpenProcess 0x180038ab0
ZwOpenSymbolicLinkObject 0x180038ad0
ZwQueryAttributesFile 0x1800389d0
ZwQueryDirectoryObject 0x180038ac8
ZwQueryInformationFile 0x180038aa8
ZwQueryInformationProcess 0x180038a98
ZwQueryKey 0x180038990
ZwQuerySymbolicLinkObject 0x180038ab8
ZwQuerySystemInformation 0x1800389b8
ZwQueryValueKey 0x180038a50
ZwReleaseMutant 0x180038998
ZwSaveKey 0x180038a30
ZwSetSecurityObject 0x180038a60
ZwSetValueKey 0x180038a78
ZwUnloadKey 0x180038a68
ZwWaitForSingleObject 0x180038988
OLEAUT32.dll 4
SysAllocString 0x180038160
SysFreeString 0x180038170
VariantClear 0x180038168
VariantInit 0x180038158
RPCRT4.dll 1
UuidCreate 0x180038180
WCP.dll 7
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x1800381c0
?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180038198
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180038190
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x1800381b0
ConvertNtStatusToHResult 0x1800381a0
RtlFreeLBlob 0x1800381b8
RtlReportErrorOrigination 0x1800381a8
WINTRUST.dll 3
WinVerifyTrust 0x1800381e0
WTHelperGetProvSignerFromChain 0x1800381d0
WTHelperProvDataFromStateData 0x1800381d8