securebootai.dll

v10.0.19041.5071 64-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
361.0 KB
Uploaded
2025-12-01 08:20
Views
54
SHA-256
3f2827736b067cfd37663b42fa114a7d

Exported functions 2

DllCanUnloadNow #1 · 0xa1d0
DllCsiGetHandler #2 · 0xa1f0

Imported DLLs & functions 302

api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x180039218
CoInitializeEx 0x180039228
CoInitializeSecurity 0x180039210
CoSetProxyBlanket 0x180039220
CoUninitialize 0x180039230
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x180039240
IsDebuggerPresent 0x180039250
OutputDebugStringW 0x180039248
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x180039260
SetLastError 0x180039268
SetUnhandledExceptionFilter 0x180039278
UnhandledExceptionFilter 0x180039270
api-ms-win-core-file-l1-1-0.dll 18
CreateDirectoryW 0x1800392d0
CreateFileW 0x180039288
DeleteFileW 0x1800392f8
FindClose 0x1800392a0
FindFirstFileW 0x1800392e0
FindNextFileW 0x1800392c0
FlushFileBuffers 0x180039290
GetFileAttributesW 0x180039308
GetFileInformationByHandle 0x1800392e8
GetFileSizeEx 0x180039310
GetFullPathNameW 0x1800392a8
GetVolumeInformationW 0x1800392d8
GetVolumePathNameW 0x1800392b8
QueryDosDeviceW 0x180039298
ReadFile 0x180039300
SetFileAttributesW 0x1800392c8
SetFileInformationByHandle 0x1800392f0
WriteFile 0x1800392b0
api-ms-win-core-file-l1-2-0.dll 1
GetVolumeNameForVolumeMountPointW 0x180039320
api-ms-win-core-file-l2-1-0.dll 3
CopyFileExW 0x180039340
GetFileInformationByHandleEx 0x180039330
MoveFileExW 0x180039338
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x180039350
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x180039368
HeapAlloc 0x180039360
HeapDestroy 0x180039378
HeapFree 0x180039370
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x180039388
LocalFree 0x180039390
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x1800393a0
api-ms-win-core-kernel32-legacy-l1-1-0.dll 2
FindResourceW 0x1800393b8
LoadLibraryW 0x1800393b0
api-ms-win-core-libraryloader-l1-1-0.dll 10
DisableThreadLibraryCalls 0x1800393e0
FindResourceExW 0x1800393d0
FreeLibrary 0x1800393f0
GetModuleFileNameA 0x180039410
GetModuleHandleExW 0x1800393c8
GetModuleHandleW 0x180039408
GetProcAddress 0x180039400
LoadLibraryExW 0x1800393f8
LoadResource 0x1800393d8
SizeofResource 0x1800393e8
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x180039428
GetLocaleInfoW 0x180039420
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x180039440
GetUserDefaultUILanguage 0x180039438
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x180039460
MapViewOfFile 0x180039458
UnmapViewOfFile 0x180039450
api-ms-win-core-privateprofile-l1-1-0.dll 1
GetPrivateProfileSectionW 0x180039470
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x180039480
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x1800394a0
GetCurrentProcessId 0x1800394b8
GetCurrentThread 0x180039498
GetCurrentThreadId 0x1800394b0
OpenProcessToken 0x1800394c0
OpenThreadToken 0x1800394a8
SetThreadToken 0x180039490
TerminateProcess 0x1800394c8
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800394d8
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x1800394e8
RegCreateKeyExW 0x180039510
RegDeleteKeyExW 0x180039500
RegGetValueW 0x1800394f0
RegOpenKeyExW 0x180039508
RegQueryValueExW 0x1800394f8
RegSetValueExW 0x180039518
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x180039530
RtlCompareMemory 0x180039538
RtlLookupFunctionEntry 0x180039528
RtlVirtualUnwind 0x180039540
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathRemoveBackslashW 0x180039550
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 2
StrCmpIW 0x180039568
StrStrIW 0x180039560
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x180039578
api-ms-win-core-string-obsolete-l1-1-0.dll 1
lstrlenA 0x180039588
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x1800395d0
AcquireSRWLockShared 0x1800395a8
CreateMutexExW 0x1800395a0
CreateSemaphoreExW 0x180039600
DeleteCriticalSection 0x1800395b8
EnterCriticalSection 0x1800395d8
InitializeCriticalSection 0x1800395f0
InitializeCriticalSectionEx 0x1800395c0
LeaveCriticalSection 0x180039608
OpenSemaphoreW 0x1800395e8
ReleaseMutex 0x1800395b0
ReleaseSemaphore 0x180039598
ReleaseSRWLockExclusive 0x1800395c8
ReleaseSRWLockShared 0x180039610
WaitForSingleObject 0x1800395e0
WaitForSingleObjectEx 0x1800395f8
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x180039628
InitOnceComplete 0x180039630
Sleep 0x180039620
api-ms-win-core-sysinfo-l1-1-0.dll 6
GetSystemDirectoryW 0x180039640
GetSystemInfo 0x180039648
GetSystemTimeAsFileTime 0x180039660
GetTickCount 0x180039658
GetVersionExW 0x180039650
GetWindowsDirectoryW 0x180039668
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x180039688
CreateThreadpoolTimer 0x180039678
SetThreadpoolTimer 0x180039680
WaitForThreadpoolTimerCallbacks 0x180039690
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x1800396b0
EventUnregister 0x1800396a0
EventWriteTransfer 0x1800396a8
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x1800396f8
DuplicateTokenEx 0x1800396f0
GetSecurityDescriptorControl 0x1800396c8
GetSecurityDescriptorDacl 0x1800396e0
GetSecurityDescriptorGroup 0x1800396d8
GetSecurityDescriptorOwner 0x1800396d0
GetSecurityDescriptorSacl 0x1800396e8
GetTokenInformation 0x1800396c0
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x180039708
api-ms-win-security-provider-l1-1-0.dll 1
SetNamedSecurityInfoW 0x180039718
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x180039728
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x180039730
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x180039748
BCryptCreateHash 0x180039770
BCryptDestroyHash 0x180039750
BCryptFinishHash 0x180039760
BCryptHash 0x180039768
BCryptHashData 0x180039758
BCryptOpenAlgorithmProvider 0x180039740
CRYPT32.dll 9
CertCloseStore 0x180039148
CertCreateCertificateContext 0x180039150
CertFindCertificateInStore 0x180039138
CertFreeCertificateContext 0x180039128
CertGetCertificateContextProperty 0x180039130
CertGetNameStringW 0x180039160
CryptMsgClose 0x180039158
CryptMsgGetParam 0x180039140
CryptQueryObject 0x180039168
imagehlp.dll 1
CheckSumMappedFile 0x180039780
msvcrt.dll 53
__C_specific_handler 0x1800398a0
__CxxFrameHandler3 0x1800397c8
__dllonexit 0x180039830
__iob_func 0x180039928
_amsg_exit 0x180039858
_callnewh 0x180039888
_CxxThrowException 0x1800398e0
_initterm 0x180039850
_lock 0x180039848
_onexit 0x180039828
_purecall 0x1800398a8
_snwscanf_s 0x180039910
_ultow_s 0x180039918
_unlock 0x180039840
_vsnprintf_s 0x180039798
_vsnwprintf 0x180039868
_vsnwprintf_s 0x180039878
_wcsicmp 0x1800397c0
_wcslwr 0x180039908
_wcsnicmp 0x1800397e0
_wcsupr 0x1800397e8
_wfopen_s 0x180039800
_XcptFilter 0x180039880
??0exception@@QEAA@AEBV0@@Z 0x1800397a8
??0exception@@QEAA@XZ 0x1800397b0
??1exception@@UEAA@XZ 0x1800397b8
??1type_info@@UEAA@XZ 0x180039860
?terminate@@YAXXZ 0x1800398c0
bsearch 0x180039838
fclose 0x180039818
fflush 0x1800397f8
free 0x180039898
fwprintf 0x180039870
malloc 0x180039890
memcmp 0x1800398d8
memcpy 0x1800398d0
memcpy_s 0x1800398b8
memmove 0x1800398c8
memmove_s 0x1800398b0
memset 0x180039820
strcpy_s 0x1800398f0
strncmp 0x1800398e8
swprintf_s 0x180039808
wcscat_s 0x180039810
wcschr 0x1800397a0
wcscmp 0x180039930
wcscpy_s 0x1800397d0
wcsncmp 0x1800397f0
wcsncpy_s 0x1800397d8
wcsnlen 0x1800398f8
wcsrchr 0x180039790
wcsstr 0x180039900
wcstoul 0x180039920
ntdll.dll 85
LdrAccessResource 0x1800399a0
LdrFindResource_U 0x180039998
LdrGetDllHandle 0x180039af8
LdrGetProcedureAddress 0x180039af0
NtAdjustPrivilegesToken 0x180039b50
NtClose 0x180039948
NtCreateEvent 0x180039950
NtDeviceIoControlFile 0x180039a58
NtEnumerateBootEntries 0x180039b98
NtOpenDirectoryObject 0x180039a78
NtOpenFile 0x180039970
NtOpenKey 0x180039a20
NtOpenProcess 0x180039b80
NtOpenProcessTokenEx 0x180039b58
NtOpenSymbolicLinkObject 0x180039a10
NtOpenThreadTokenEx 0x180039b60
NtQueryBootEntryOrder 0x180039a68
NtQueryBootOptions 0x180039a70
NtQueryDirectoryObject 0x180039a80
NtQueryInformationFile 0x180039958
NtQueryInformationProcess 0x180039b88
NtQueryInformationThread 0x180039960
NtQuerySymbolicLinkObject 0x180039a28
NtQuerySystemEnvironmentValueEx 0x180039bc0
NtQuerySystemInformation 0x180039bd8
NtQueryValueKey 0x180039a60
NtReadFile 0x180039b78
NtSetInformationFile 0x180039980
NtSetInformationThread 0x180039be0
NtSetSystemEnvironmentValueEx 0x180039bc8
NtTranslateFilePath 0x180039bb0
NtWaitForSingleObject 0x180039968
NtWriteFile 0x180039b90
RtlAddAccessAllowedAceEx 0x180039a30
RtlAdjustPrivilege 0x180039ba8
RtlAllocateAndInitializeSid 0x180039a38
RtlAllocateHeap 0x1800399a8
RtlAppendUnicodeToString 0x1800399f0
RtlCreateAcl 0x180039a50
RtlCreateSecurityDescriptor 0x180039b70
RtlFreeHeap 0x180039990
RtlFreeSid 0x180039a48
RtlFreeUnicodeString 0x180039978
RtlGUIDFromString 0x1800399e8
RtlImageNtHeader 0x180039940
RtlImageNtHeaderEx 0x180039ba0
RtlImpersonateSelf 0x180039b68
RtlInitAnsiString 0x180039b08
RtlInitUnicodeString 0x180039bd0
RtlLengthSecurityDescriptor 0x180039a00
RtlLengthSid 0x180039a40
RtlNtStatusToDosError 0x180039bb8
RtlSetDaclSecurityDescriptor 0x180039a18
RtlSetOwnerSecurityDescriptor 0x180039a08
RtlStringFromGUID 0x180039988
ZwAllocateUuids 0x180039b48
ZwClose 0x1800399d8
ZwCreateFile 0x180039a88
ZwCreateKey 0x180039a90
ZwDeleteKey 0x180039ab8
ZwDeleteValueKey 0x180039aa8
ZwDeviceIoControlFile 0x180039b28
ZwEnumerateKey 0x180039ac0
ZwFlushKey 0x180039aa0
ZwLoadKey 0x180039a98
ZwOpenDirectoryObject 0x180039b40
ZwOpenFile 0x1800399c8
ZwOpenKey 0x180039ae8
ZwOpenMutant 0x1800399d0
ZwOpenProcess 0x180039b18
ZwOpenSymbolicLinkObject 0x180039b38
ZwQueryAttributesFile 0x1800399f8
ZwQueryDirectoryObject 0x180039b30
ZwQueryInformationFile 0x180039b10
ZwQueryInformationProcess 0x180039b00
ZwQueryKey 0x1800399b8
ZwQuerySymbolicLinkObject 0x180039b20
ZwQuerySystemInformation 0x1800399e0
ZwQueryValueKey 0x180039ac8
ZwReleaseMutant 0x1800399c0
ZwSaveKey 0x180039ab0
ZwSetSecurityObject 0x180039ad0
ZwSetValueKey 0x180039ae0
ZwUnloadKey 0x180039ad8
ZwWaitForSingleObject 0x1800399b0
OLEAUT32.dll 4
SysAllocString 0x180039180
SysFreeString 0x180039190
VariantClear 0x180039188
VariantInit 0x180039178
RPCRT4.dll 1
UuidCreate 0x1800391a0
WCP.dll 7
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x1800391b8
?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x1800391d8
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x1800391b0
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x1800391e0
ConvertNtStatusToHResult 0x1800391c0
RtlFreeLBlob 0x1800391d0
RtlReportErrorOrigination 0x1800391c8
WINTRUST.dll 3
WinVerifyTrust 0x180039200
WTHelperGetProvSignerFromChain 0x1800391f0
WTHelperProvDataFromStateData 0x1800391f8