securebootai.dll

v10.0.19041.4467 64-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
352.0 KB
Uploaded
2025-12-01 08:20
Views
55
SHA-256
201967a35964041fae94bee8f5152bb9

Exported functions 2

DllCanUnloadNow #1 · 0xa090
DllCsiGetHandler #2 · 0xa0b0

Imported DLLs & functions 299

api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x180038220
CoInitializeEx 0x180038218
CoInitializeSecurity 0x180038228
CoSetProxyBlanket 0x180038230
CoUninitialize 0x180038210
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x180038240
IsDebuggerPresent 0x180038248
OutputDebugStringW 0x180038250
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x180038278
SetLastError 0x180038268
SetUnhandledExceptionFilter 0x180038260
UnhandledExceptionFilter 0x180038270
api-ms-win-core-file-l1-1-0.dll 18
CreateDirectoryW 0x1800382f0
CreateFileW 0x1800382f8
DeleteFileW 0x1800382e0
FindClose 0x180038310
FindFirstFileW 0x1800382b8
FindNextFileW 0x1800382c8
FlushFileBuffers 0x180038308
GetFileAttributesW 0x1800382b0
GetFileInformationByHandle 0x1800382d0
GetFileSizeEx 0x1800382c0
GetFullPathNameW 0x1800382e8
GetVolumeInformationW 0x180038288
GetVolumePathNameW 0x1800382a8
QueryDosDeviceW 0x180038290
ReadFile 0x1800382a0
SetFileAttributesW 0x180038300
SetFileInformationByHandle 0x1800382d8
WriteFile 0x180038298
api-ms-win-core-file-l1-2-0.dll 1
GetVolumeNameForVolumeMountPointW 0x180038320
api-ms-win-core-file-l2-1-0.dll 3
CopyFileExW 0x180038330
GetFileInformationByHandleEx 0x180038338
MoveFileExW 0x180038340
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x180038350
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x180038368
HeapAlloc 0x180038360
HeapDestroy 0x180038378
HeapFree 0x180038370
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x180038388
LocalFree 0x180038390
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x1800383a0
api-ms-win-core-kernel32-legacy-l1-1-0.dll 2
CopyFileW 0x1800383b8
LoadLibraryW 0x1800383b0
api-ms-win-core-libraryloader-l1-1-0.dll 9
DisableThreadLibraryCalls 0x180038408
FindResourceExW 0x1800383d8
FreeLibrary 0x1800383f8
GetModuleFileNameA 0x180038400
GetModuleHandleExW 0x1800383e8
GetModuleHandleW 0x1800383d0
GetProcAddress 0x1800383c8
LoadLibraryExW 0x1800383f0
LoadResource 0x1800383e0
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x180038420
GetLocaleInfoW 0x180038418
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x180038438
GetUserDefaultUILanguage 0x180038430
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x180038450
MapViewOfFile 0x180038458
UnmapViewOfFile 0x180038448
api-ms-win-core-privateprofile-l1-1-0.dll 1
GetPrivateProfileSectionW 0x180038468
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x180038478
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x1800384a8
GetCurrentProcessId 0x180038498
GetCurrentThread 0x1800384a0
GetCurrentThreadId 0x1800384b8
OpenProcessToken 0x180038488
OpenThreadToken 0x1800384c0
SetThreadToken 0x180038490
TerminateProcess 0x1800384b0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800384d0
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x1800384f8
RegCreateKeyExW 0x1800384e0
RegDeleteKeyExW 0x180038500
RegGetValueW 0x180038508
RegOpenKeyExW 0x180038510
RegQueryValueExW 0x1800384e8
RegSetValueExW 0x1800384f0
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x180038530
RtlCompareMemory 0x180038538
RtlLookupFunctionEntry 0x180038520
RtlVirtualUnwind 0x180038528
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathRemoveBackslashW 0x180038548
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 2
StrCmpIW 0x180038558
StrStrIW 0x180038560
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x180038570
api-ms-win-core-string-obsolete-l1-1-0.dll 1
lstrlenA 0x180038580
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x1800385c8
AcquireSRWLockShared 0x1800385b8
CreateMutexExW 0x180038608
CreateSemaphoreExW 0x1800385e0
DeleteCriticalSection 0x1800385a0
EnterCriticalSection 0x1800385d0
InitializeCriticalSection 0x1800385e8
InitializeCriticalSectionEx 0x180038598
LeaveCriticalSection 0x1800385d8
OpenSemaphoreW 0x1800385f0
ReleaseMutex 0x180038590
ReleaseSemaphore 0x180038600
ReleaseSRWLockExclusive 0x1800385c0
ReleaseSRWLockShared 0x1800385b0
WaitForSingleObject 0x1800385a8
WaitForSingleObjectEx 0x1800385f8
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x180038628
InitOnceComplete 0x180038620
Sleep 0x180038618
api-ms-win-core-sysinfo-l1-1-0.dll 6
GetSystemDirectoryW 0x180038658
GetSystemInfo 0x180038648
GetSystemTimeAsFileTime 0x180038638
GetTickCount 0x180038660
GetVersionExW 0x180038650
GetWindowsDirectoryW 0x180038640
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x180038680
CreateThreadpoolTimer 0x180038678
SetThreadpoolTimer 0x180038670
WaitForThreadpoolTimerCallbacks 0x180038688
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x1800386a0
EventUnregister 0x180038698
EventWriteTransfer 0x1800386a8
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x1800386d8
DuplicateTokenEx 0x1800386e8
GetSecurityDescriptorControl 0x1800386b8
GetSecurityDescriptorDacl 0x1800386c8
GetSecurityDescriptorGroup 0x1800386d0
GetSecurityDescriptorOwner 0x1800386e0
GetSecurityDescriptorSacl 0x1800386c0
GetTokenInformation 0x1800386f0
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x180038700
api-ms-win-security-provider-l1-1-0.dll 1
SetNamedSecurityInfoW 0x180038710
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x180038720
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x180038728
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x180038758
BCryptCreateHash 0x180038738
BCryptDestroyHash 0x180038750
BCryptFinishHash 0x180038740
BCryptHash 0x180038768
BCryptHashData 0x180038760
BCryptOpenAlgorithmProvider 0x180038748
CRYPT32.dll 9
CertCloseStore 0x180038148
CertCreateCertificateContext 0x180038150
CertFindCertificateInStore 0x180038138
CertFreeCertificateContext 0x180038128
CertGetCertificateContextProperty 0x180038130
CertGetNameStringW 0x180038160
CryptMsgClose 0x180038158
CryptMsgGetParam 0x180038140
CryptQueryObject 0x180038168
imagehlp.dll 1
CheckSumMappedFile 0x180038778
msvcrt.dll 53
__C_specific_handler 0x1800388a0
__CxxFrameHandler3 0x1800387e8
__dllonexit 0x180038858
__iob_func 0x180038920
_amsg_exit 0x180038870
_callnewh 0x180038810
_CxxThrowException 0x1800388e0
_initterm 0x180038880
_lock 0x180038868
_onexit 0x1800387f8
_purecall 0x1800388a8
_snwscanf_s 0x180038900
_ultow_s 0x180038910
_unlock 0x180038848
_vsnprintf_s 0x1800387b8
_vsnwprintf 0x180038860
_vsnwprintf_s 0x1800387c0
_wcsicmp 0x1800387e0
_wcslwr 0x1800388f8
_wcsnicmp 0x180038788
_wcsupr 0x180038808
_wfopen_s 0x180038888
_XcptFilter 0x180038850
??0exception@@QEAA@AEBV0@@Z 0x1800387c8
??0exception@@QEAA@XZ 0x1800387d0
??1exception@@UEAA@XZ 0x1800387d8
??1type_info@@UEAA@XZ 0x180038840
?terminate@@YAXXZ 0x1800388c0
bsearch 0x180038838
fclose 0x180038798
fflush 0x180038820
free 0x180038898
fwprintf 0x180038800
malloc 0x180038890
memcmp 0x1800388d8
memcpy 0x1800388d0
memcpy_s 0x1800388b8
memmove 0x1800388c8
memmove_s 0x1800388b0
memset 0x180038818
strcpy_s 0x180038908
strncmp 0x1800388e8
swprintf_s 0x180038828
wcscat_s 0x180038790
wcschr 0x180038830
wcscmp 0x180038928
wcscpy_s 0x180038878
wcsncmp 0x1800387f0
wcsncpy_s 0x1800387a0
wcsnlen 0x1800388f0
wcsrchr 0x1800387a8
wcsstr 0x1800387b0
wcstoul 0x180038918
ntdll.dll 83
LdrAccessResource 0x180038998
LdrFindResource_U 0x180038990
LdrGetDllHandle 0x180038ab0
LdrGetProcedureAddress 0x180038aa8
NtAdjustPrivilegesToken 0x180038b08
NtClose 0x180038b90
NtCreateEvent 0x180038948
NtDeviceIoControlFile 0x180038938
NtEnumerateBootEntries 0x180038b70
NtOpenDirectoryObject 0x180038b60
NtOpenFile 0x180038968
NtOpenKey 0x180038b30
NtOpenProcess 0x180038b80
NtOpenProcessTokenEx 0x180038b10
NtOpenSymbolicLinkObject 0x180038b28
NtOpenThreadTokenEx 0x180038b18
NtQueryBootEntryOrder 0x180038b48
NtQueryBootOptions 0x180038b50
NtQueryDirectoryObject 0x180038b68
NtQueryInformationFile 0x180038950
NtQueryInformationProcess 0x180038b88
NtQueryInformationThread 0x180038958
NtQuerySymbolicLinkObject 0x180038b38
NtQuerySystemEnvironmentValueEx 0x180038ba8
NtQuerySystemInformation 0x180038bc0
NtQueryValueKey 0x180038b40
NtReadFile 0x180038bc8
NtSetInformationFile 0x180038978
NtSetInformationThread 0x180038a60
NtSetSystemEnvironmentValueEx 0x180038bb0
NtTranslateFilePath 0x180038b58
NtWaitForSingleObject 0x180038960
NtWriteFile 0x180038b98
RtlAddAccessAllowedAceEx 0x180038a28
RtlAllocateAndInitializeSid 0x180038a30
RtlAllocateHeap 0x1800389a0
RtlAppendUnicodeToString 0x1800389e8
RtlCreateAcl 0x180038a78
RtlCreateSecurityDescriptor 0x180038a90
RtlFreeHeap 0x180038988
RtlFreeSid 0x180038a58
RtlFreeUnicodeString 0x180038970
RtlGUIDFromString 0x1800389e0
RtlImageNtHeader 0x180038940
RtlImpersonateSelf 0x180038b20
RtlInitAnsiString 0x180038ac0
RtlInitUnicodeString 0x180038bb8
RtlLengthSecurityDescriptor 0x1800389f8
RtlLengthSid 0x180038a38
RtlNtStatusToDosError 0x180038ba0
RtlSetDaclSecurityDescriptor 0x180038a08
RtlSetOwnerSecurityDescriptor 0x180038a00
RtlStringFromGUID 0x180038980
ZwAllocateUuids 0x180038b00
ZwClose 0x1800389d0
ZwCreateFile 0x180038a10
ZwCreateKey 0x180038a18
ZwDeleteKey 0x180038b78
ZwDeleteValueKey 0x180038a48
ZwDeviceIoControlFile 0x180038ae0
ZwEnumerateKey 0x180038a68
ZwFlushKey 0x180038a40
ZwLoadKey 0x180038a20
ZwOpenDirectoryObject 0x180038af8
ZwOpenFile 0x1800389c0
ZwOpenKey 0x180038aa0
ZwOpenMutant 0x1800389c8
ZwOpenProcess 0x180038ad0
ZwOpenSymbolicLinkObject 0x180038af0
ZwQueryAttributesFile 0x1800389f0
ZwQueryDirectoryObject 0x180038ae8
ZwQueryInformationFile 0x180038ac8
ZwQueryInformationProcess 0x180038ab8
ZwQueryKey 0x1800389b0
ZwQuerySymbolicLinkObject 0x180038ad8
ZwQuerySystemInformation 0x1800389d8
ZwQueryValueKey 0x180038a70
ZwReleaseMutant 0x1800389b8
ZwSaveKey 0x180038a50
ZwSetSecurityObject 0x180038a80
ZwSetValueKey 0x180038a98
ZwUnloadKey 0x180038a88
ZwWaitForSingleObject 0x1800389a8
OLEAUT32.dll 4
SysAllocString 0x180038180
SysFreeString 0x180038190
VariantClear 0x180038188
VariantInit 0x180038178
RPCRT4.dll 1
UuidCreate 0x1800381a0
WCP.dll 7
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x1800381e0
?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x1800381b8
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x1800381b0
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x1800381d0
ConvertNtStatusToHResult 0x1800381c0
RtlFreeLBlob 0x1800381d8
RtlReportErrorOrigination 0x1800381c8
WINTRUST.dll 3
WinVerifyTrust 0x180038200
WTHelperGetProvSignerFromChain 0x1800381f0
WTHelperProvDataFromStateData 0x1800381f8