securebootai.dll

v10.0.19041.5363 64-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
366.0 KB
Uploaded
2025-12-01 08:20
Views
56
SHA-256
2bcd5b0a62f12536b338c62cb8637389

Exported functions 2

DllCanUnloadNow #1 · 0xa1d0
DllCsiGetHandler #2 · 0xa1f0

Imported DLLs & functions 302

api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x18003a2d8
CoInitializeEx 0x18003a2e8
CoInitializeSecurity 0x18003a2d0
CoSetProxyBlanket 0x18003a2e0
CoUninitialize 0x18003a2f0
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18003a300
IsDebuggerPresent 0x18003a310
OutputDebugStringW 0x18003a308
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18003a320
SetLastError 0x18003a328
SetUnhandledExceptionFilter 0x18003a338
UnhandledExceptionFilter 0x18003a330
api-ms-win-core-file-l1-1-0.dll 18
CreateDirectoryW 0x18003a390
CreateFileW 0x18003a348
DeleteFileW 0x18003a3b8
FindClose 0x18003a360
FindFirstFileW 0x18003a3a0
FindNextFileW 0x18003a380
FlushFileBuffers 0x18003a350
GetFileAttributesW 0x18003a3c8
GetFileInformationByHandle 0x18003a3a8
GetFileSizeEx 0x18003a3d0
GetFullPathNameW 0x18003a368
GetVolumeInformationW 0x18003a398
GetVolumePathNameW 0x18003a378
QueryDosDeviceW 0x18003a358
ReadFile 0x18003a3c0
SetFileAttributesW 0x18003a388
SetFileInformationByHandle 0x18003a3b0
WriteFile 0x18003a370
api-ms-win-core-file-l1-2-0.dll 1
GetVolumeNameForVolumeMountPointW 0x18003a3e0
api-ms-win-core-file-l2-1-0.dll 3
CopyFileExW 0x18003a400
GetFileInformationByHandleEx 0x18003a3f0
MoveFileExW 0x18003a3f8
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18003a410
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x18003a428
HeapAlloc 0x18003a420
HeapDestroy 0x18003a438
HeapFree 0x18003a430
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x18003a448
LocalFree 0x18003a450
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x18003a460
api-ms-win-core-kernel32-legacy-l1-1-0.dll 2
FindResourceW 0x18003a478
LoadLibraryW 0x18003a470
api-ms-win-core-libraryloader-l1-1-0.dll 10
DisableThreadLibraryCalls 0x18003a4a0
FindResourceExW 0x18003a490
FreeLibrary 0x18003a4b0
GetModuleFileNameA 0x18003a4d0
GetModuleHandleExW 0x18003a488
GetModuleHandleW 0x18003a4c8
GetProcAddress 0x18003a4c0
LoadLibraryExW 0x18003a4b8
LoadResource 0x18003a498
SizeofResource 0x18003a4a8
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x18003a4e8
GetLocaleInfoW 0x18003a4e0
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x18003a500
GetUserDefaultUILanguage 0x18003a4f8
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x18003a520
MapViewOfFile 0x18003a518
UnmapViewOfFile 0x18003a510
api-ms-win-core-privateprofile-l1-1-0.dll 1
GetPrivateProfileSectionW 0x18003a530
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x18003a540
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x18003a560
GetCurrentProcessId 0x18003a578
GetCurrentThread 0x18003a558
GetCurrentThreadId 0x18003a570
OpenProcessToken 0x18003a580
OpenThreadToken 0x18003a568
SetThreadToken 0x18003a550
TerminateProcess 0x18003a588
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18003a598
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x18003a5a8
RegCreateKeyExW 0x18003a5d0
RegDeleteKeyExW 0x18003a5c0
RegGetValueW 0x18003a5b0
RegOpenKeyExW 0x18003a5c8
RegQueryValueExW 0x18003a5b8
RegSetValueExW 0x18003a5d8
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x18003a5f0
RtlCompareMemory 0x18003a5f8
RtlLookupFunctionEntry 0x18003a5e8
RtlVirtualUnwind 0x18003a600
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathRemoveBackslashW 0x18003a610
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 2
StrCmpIW 0x18003a628
StrStrIW 0x18003a620
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x18003a638
api-ms-win-core-string-obsolete-l1-1-0.dll 1
lstrlenA 0x18003a648
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x18003a690
AcquireSRWLockShared 0x18003a668
CreateMutexExW 0x18003a660
CreateSemaphoreExW 0x18003a6c0
DeleteCriticalSection 0x18003a678
EnterCriticalSection 0x18003a698
InitializeCriticalSection 0x18003a6b0
InitializeCriticalSectionEx 0x18003a680
LeaveCriticalSection 0x18003a6c8
OpenSemaphoreW 0x18003a6a8
ReleaseMutex 0x18003a670
ReleaseSemaphore 0x18003a658
ReleaseSRWLockExclusive 0x18003a688
ReleaseSRWLockShared 0x18003a6d0
WaitForSingleObject 0x18003a6a0
WaitForSingleObjectEx 0x18003a6b8
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x18003a6e8
InitOnceComplete 0x18003a6f0
Sleep 0x18003a6e0
api-ms-win-core-sysinfo-l1-1-0.dll 6
GetSystemDirectoryW 0x18003a700
GetSystemInfo 0x18003a708
GetSystemTimeAsFileTime 0x18003a720
GetTickCount 0x18003a718
GetVersionExW 0x18003a710
GetWindowsDirectoryW 0x18003a728
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x18003a748
CreateThreadpoolTimer 0x18003a738
SetThreadpoolTimer 0x18003a740
WaitForThreadpoolTimerCallbacks 0x18003a750
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x18003a770
EventUnregister 0x18003a760
EventWriteTransfer 0x18003a768
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x18003a7b8
DuplicateTokenEx 0x18003a7b0
GetSecurityDescriptorControl 0x18003a788
GetSecurityDescriptorDacl 0x18003a7a0
GetSecurityDescriptorGroup 0x18003a798
GetSecurityDescriptorOwner 0x18003a790
GetSecurityDescriptorSacl 0x18003a7a8
GetTokenInformation 0x18003a780
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x18003a7c8
api-ms-win-security-provider-l1-1-0.dll 1
SetNamedSecurityInfoW 0x18003a7d8
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x18003a7e8
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x18003a7f0
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x18003a808
BCryptCreateHash 0x18003a830
BCryptDestroyHash 0x18003a810
BCryptFinishHash 0x18003a820
BCryptHash 0x18003a828
BCryptHashData 0x18003a818
BCryptOpenAlgorithmProvider 0x18003a800
CRYPT32.dll 9
CertCloseStore 0x18003a208
CertCreateCertificateContext 0x18003a210
CertFindCertificateInStore 0x18003a1f8
CertFreeCertificateContext 0x18003a1e8
CertGetCertificateContextProperty 0x18003a1f0
CertGetNameStringW 0x18003a220
CryptMsgClose 0x18003a218
CryptMsgGetParam 0x18003a200
CryptQueryObject 0x18003a228
imagehlp.dll 1
CheckSumMappedFile 0x18003a840
msvcrt.dll 53
__C_specific_handler 0x18003a960
__CxxFrameHandler3 0x18003a888
__dllonexit 0x18003a8f0
__iob_func 0x18003a9e8
_amsg_exit 0x18003a918
_callnewh 0x18003a948
_CxxThrowException 0x18003a9a0
_initterm 0x18003a910
_lock 0x18003a908
_onexit 0x18003a8e8
_purecall 0x18003a968
_snwscanf_s 0x18003a9d0
_ultow_s 0x18003a9d8
_unlock 0x18003a900
_vsnprintf_s 0x18003a858
_vsnwprintf 0x18003a928
_vsnwprintf_s 0x18003a938
_wcsicmp 0x18003a880
_wcslwr 0x18003a9c8
_wcsnicmp 0x18003a8a0
_wcsupr 0x18003a8a8
_wfopen_s 0x18003a8c0
_XcptFilter 0x18003a940
??0exception@@QEAA@AEBV0@@Z 0x18003a868
??0exception@@QEAA@XZ 0x18003a870
??1exception@@UEAA@XZ 0x18003a878
??1type_info@@UEAA@XZ 0x18003a920
?terminate@@YAXXZ 0x18003a980
bsearch 0x18003a8f8
fclose 0x18003a8d8
fflush 0x18003a8b8
free 0x18003a958
fwprintf 0x18003a930
malloc 0x18003a950
memcmp 0x18003a998
memcpy 0x18003a990
memcpy_s 0x18003a978
memmove 0x18003a988
memmove_s 0x18003a970
memset 0x18003a8e0
strcpy_s 0x18003a9b0
strncmp 0x18003a9a8
swprintf_s 0x18003a8c8
wcscat_s 0x18003a8d0
wcschr 0x18003a860
wcscmp 0x18003a9f0
wcscpy_s 0x18003a890
wcsncmp 0x18003a8b0
wcsncpy_s 0x18003a898
wcsnlen 0x18003a9b8
wcsrchr 0x18003a850
wcsstr 0x18003a9c0
wcstoul 0x18003a9e0
ntdll.dll 85
LdrAccessResource 0x18003aa60
LdrFindResource_U 0x18003aa58
LdrGetDllHandle 0x18003abb8
LdrGetProcedureAddress 0x18003abb0
NtAdjustPrivilegesToken 0x18003ac10
NtClose 0x18003aa08
NtCreateEvent 0x18003aa10
NtDeviceIoControlFile 0x18003ab18
NtEnumerateBootEntries 0x18003ac58
NtOpenDirectoryObject 0x18003ab38
NtOpenFile 0x18003aa30
NtOpenKey 0x18003aae0
NtOpenProcess 0x18003ac40
NtOpenProcessTokenEx 0x18003ac18
NtOpenSymbolicLinkObject 0x18003aad0
NtOpenThreadTokenEx 0x18003ac20
NtQueryBootEntryOrder 0x18003ab28
NtQueryBootOptions 0x18003ab30
NtQueryDirectoryObject 0x18003ab40
NtQueryInformationFile 0x18003aa18
NtQueryInformationProcess 0x18003ac48
NtQueryInformationThread 0x18003aa20
NtQuerySymbolicLinkObject 0x18003aae8
NtQuerySystemEnvironmentValueEx 0x18003ac80
NtQuerySystemInformation 0x18003ac98
NtQueryValueKey 0x18003ab20
NtReadFile 0x18003ac38
NtSetInformationFile 0x18003aa40
NtSetInformationThread 0x18003aca0
NtSetSystemEnvironmentValueEx 0x18003ac88
NtTranslateFilePath 0x18003ac70
NtWaitForSingleObject 0x18003aa28
NtWriteFile 0x18003ac50
RtlAddAccessAllowedAceEx 0x18003aaf0
RtlAdjustPrivilege 0x18003ac68
RtlAllocateAndInitializeSid 0x18003aaf8
RtlAllocateHeap 0x18003aa68
RtlAppendUnicodeToString 0x18003aab0
RtlCreateAcl 0x18003ab10
RtlCreateSecurityDescriptor 0x18003ac30
RtlFreeHeap 0x18003aa50
RtlFreeSid 0x18003ab08
RtlFreeUnicodeString 0x18003aa38
RtlGUIDFromString 0x18003aaa8
RtlImageNtHeader 0x18003aa00
RtlImageNtHeaderEx 0x18003ac60
RtlImpersonateSelf 0x18003ac28
RtlInitAnsiString 0x18003abc8
RtlInitUnicodeString 0x18003ac90
RtlLengthSecurityDescriptor 0x18003aac0
RtlLengthSid 0x18003ab00
RtlNtStatusToDosError 0x18003ac78
RtlSetDaclSecurityDescriptor 0x18003aad8
RtlSetOwnerSecurityDescriptor 0x18003aac8
RtlStringFromGUID 0x18003aa48
ZwAllocateUuids 0x18003ac08
ZwClose 0x18003aa98
ZwCreateFile 0x18003ab48
ZwCreateKey 0x18003ab50
ZwDeleteKey 0x18003ab78
ZwDeleteValueKey 0x18003ab68
ZwDeviceIoControlFile 0x18003abe8
ZwEnumerateKey 0x18003ab80
ZwFlushKey 0x18003ab60
ZwLoadKey 0x18003ab58
ZwOpenDirectoryObject 0x18003ac00
ZwOpenFile 0x18003aa88
ZwOpenKey 0x18003aba8
ZwOpenMutant 0x18003aa90
ZwOpenProcess 0x18003abd8
ZwOpenSymbolicLinkObject 0x18003abf8
ZwQueryAttributesFile 0x18003aab8
ZwQueryDirectoryObject 0x18003abf0
ZwQueryInformationFile 0x18003abd0
ZwQueryInformationProcess 0x18003abc0
ZwQueryKey 0x18003aa78
ZwQuerySymbolicLinkObject 0x18003abe0
ZwQuerySystemInformation 0x18003aaa0
ZwQueryValueKey 0x18003ab88
ZwReleaseMutant 0x18003aa80
ZwSaveKey 0x18003ab70
ZwSetSecurityObject 0x18003ab90
ZwSetValueKey 0x18003aba0
ZwUnloadKey 0x18003ab98
ZwWaitForSingleObject 0x18003aa70
OLEAUT32.dll 4
SysAllocString 0x18003a240
SysFreeString 0x18003a250
VariantClear 0x18003a248
VariantInit 0x18003a238
RPCRT4.dll 1
UuidCreate 0x18003a260
WCP.dll 7
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x18003a278
?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x18003a298
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x18003a270
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x18003a2a0
ConvertNtStatusToHResult 0x18003a280
RtlFreeLBlob 0x18003a290
RtlReportErrorOrigination 0x18003a288
WINTRUST.dll 3
WinVerifyTrust 0x18003a2c0
WTHelperGetProvSignerFromChain 0x18003a2b0
WTHelperProvDataFromStateData 0x18003a2b8