securebootai.dll

v10.0.19041.5547 64-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
357.9 KB
Uploaded
2025-12-01 08:20
Views
62
SHA-256
48971bf9e7c03310235f13183f001df2

Exported functions 2

DllCanUnloadNow #1 · 0x8ee0
DllCsiGetHandler #2 · 0x8f00

Imported DLLs & functions 303

api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x180038318
CoInitializeEx 0x180038310
CoInitializeSecurity 0x180038328
CoSetProxyBlanket 0x180038308
CoUninitialize 0x180038320
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x180038340
IsDebuggerPresent 0x180038348
OutputDebugStringW 0x180038338
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x180038358
SetLastError 0x180038370
SetUnhandledExceptionFilter 0x180038368
UnhandledExceptionFilter 0x180038360
api-ms-win-core-file-l1-1-0.dll 18
CreateDirectoryW 0x1800383d0
CreateFileW 0x180038408
DeleteFileW 0x1800383e0
FindClose 0x1800383f0
FindFirstFileW 0x1800383c8
FindNextFileW 0x1800383e8
FlushFileBuffers 0x180038390
GetFileAttributesW 0x180038388
GetFileInformationByHandle 0x1800383b0
GetFileSizeEx 0x1800383d8
GetFullPathNameW 0x1800383f8
GetVolumeInformationW 0x180038398
GetVolumePathNameW 0x180038400
QueryDosDeviceW 0x180038380
ReadFile 0x1800383c0
SetFileAttributesW 0x1800383a0
SetFileInformationByHandle 0x1800383b8
WriteFile 0x1800383a8
api-ms-win-core-file-l1-2-0.dll 1
GetVolumeNameForVolumeMountPointW 0x180038418
api-ms-win-core-file-l2-1-0.dll 3
CopyFileExW 0x180038430
GetFileInformationByHandleEx 0x180038428
MoveFileExW 0x180038438
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x180038448
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x180038460
HeapAlloc 0x180038458
HeapDestroy 0x180038470
HeapFree 0x180038468
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x180038488
LocalFree 0x180038480
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x180038498
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x1800384a8
api-ms-win-core-kernel32-legacy-l1-1-0.dll 2
FindResourceW 0x1800384b8
LoadLibraryW 0x1800384c0
api-ms-win-core-libraryloader-l1-1-0.dll 10
DisableThreadLibraryCalls 0x1800384f0
FindResourceExW 0x1800384e0
FreeLibrary 0x180038510
GetModuleFileNameA 0x1800384d8
GetModuleHandleExW 0x180038500
GetModuleHandleW 0x1800384e8
GetProcAddress 0x1800384f8
LoadLibraryExW 0x1800384d0
LoadResource 0x180038508
SizeofResource 0x180038518
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x180038528
GetLocaleInfoW 0x180038530
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x180038540
GetUserDefaultUILanguage 0x180038548
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x180038568
MapViewOfFile 0x180038560
UnmapViewOfFile 0x180038558
api-ms-win-core-privateprofile-l1-1-0.dll 1
GetPrivateProfileSectionW 0x180038578
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x180038588
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x1800385a8
GetCurrentProcessId 0x1800385c0
GetCurrentThread 0x1800385b8
GetCurrentThreadId 0x1800385d0
OpenProcessToken 0x180038598
OpenThreadToken 0x1800385b0
SetThreadToken 0x1800385c8
TerminateProcess 0x1800385a0
api-ms-win-core-processthreads-l1-1-1.dll 1
IsProcessorFeaturePresent 0x1800385e0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800385f0
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x180038600
RegCreateKeyExW 0x180038618
RegDeleteKeyExW 0x180038608
RegGetValueW 0x180038610
RegOpenKeyExW 0x180038628
RegQueryValueExW 0x180038630
RegSetValueExW 0x180038620
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x180038658
RtlCompareMemory 0x180038650
RtlLookupFunctionEntry 0x180038648
RtlVirtualUnwind 0x180038640
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathRemoveBackslashW 0x180038668
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 2
StrCmpIW 0x180038678
StrStrIW 0x180038680
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x180038690
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x180038718
AcquireSRWLockShared 0x180038708
CreateMutexExW 0x1800386b8
CreateSemaphoreExW 0x1800386a8
DeleteCriticalSection 0x1800386d0
EnterCriticalSection 0x1800386e0
InitializeCriticalSection 0x1800386a0
InitializeCriticalSectionEx 0x1800386d8
LeaveCriticalSection 0x1800386b0
OpenSemaphoreW 0x1800386c0
ReleaseMutex 0x1800386f0
ReleaseSemaphore 0x1800386f8
ReleaseSRWLockExclusive 0x180038710
ReleaseSRWLockShared 0x180038700
WaitForSingleObject 0x1800386c8
WaitForSingleObjectEx 0x1800386e8
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x180038728
InitOnceComplete 0x180038738
Sleep 0x180038730
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetSystemDirectoryW 0x180038750
GetSystemInfo 0x180038748
GetSystemTimeAsFileTime 0x180038760
GetVersionExW 0x180038768
GetWindowsDirectoryW 0x180038758
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x180038778
CreateThreadpoolTimer 0x180038790
SetThreadpoolTimer 0x180038788
WaitForThreadpoolTimerCallbacks 0x180038780
api-ms-win-crt-private-l1-1-0.dll 48
__C_specific_handler 0x180038900
__CxxFrameHandler3 0x180038888
_CxxThrowException 0x180038908
_o___acrt_iob_func 0x1800388f8
_o___std_exception_copy 0x1800388f0
_o___std_exception_destroy 0x1800388e8
_o___std_type_info_destroy_list 0x1800388e0
_o___stdio_common_vfwprintf 0x1800388d8
_o___stdio_common_vsnprintf_s 0x1800388d0
_o___stdio_common_vsnwprintf_s 0x1800388c8
_o___stdio_common_vswprintf 0x1800388c0
_o___stdio_common_vswprintf_s 0x1800388b8
_o___stdio_common_vswscanf 0x1800388b0
_o__callnewh 0x1800388a8
_o__cexit 0x1800388a0
_o__configure_narrow_argv 0x180038880
_o__crt_atexit 0x180038878
_o__errno 0x180038870
_o__execute_onexit_table 0x180038868
_o__initialize_narrow_environment 0x1800387a0
_o__initialize_onexit_table 0x1800387a8
_o__invalid_parameter_noinfo 0x1800387b0
_o__purecall 0x1800387b8
_o__register_onexit_function 0x1800387c0
_o__seh_filter_dll 0x1800387c8
_o__ultow_s 0x1800387d0
_o__wcsicmp 0x1800387d8
_o__wcslwr 0x1800387e0
_o__wcsnicmp 0x1800387e8
_o__wcsupr 0x1800387f0
_o__wfopen_s 0x180038800
_o_bsearch 0x180038808
_o_fclose 0x180038810
_o_fflush 0x180038818
_o_free 0x180038820
_o_malloc 0x180038828
_o_strcpy_s 0x180038830
_o_terminate 0x180038838
_o_wcscat_s 0x180038840
_o_wcscpy_s 0x180038848
_o_wcsncpy_s 0x180038850
_o_wcstoul 0x180038858
memcmp 0x180038910
memcpy 0x180038918
memmove 0x1800387f8
wcschr 0x180038898
wcsrchr 0x180038890
wcsstr 0x180038860
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x180038928
_initterm_e 0x180038930
api-ms-win-crt-string-l1-1-0.dll 5
memset 0x180038950
strncmp 0x180038958
wcscmp 0x180038940
wcsncmp 0x180038960
wcsnlen 0x180038948
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x180038978
EventUnregister 0x180038980
EventWriteTransfer 0x180038970
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x1800389c0
DuplicateTokenEx 0x1800389b0
GetSecurityDescriptorControl 0x1800389c8
GetSecurityDescriptorDacl 0x180038990
GetSecurityDescriptorGroup 0x1800389b8
GetSecurityDescriptorOwner 0x1800389a0
GetSecurityDescriptorSacl 0x180038998
GetTokenInformation 0x1800389a8
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x1800389d8
api-ms-win-security-provider-l1-1-0.dll 1
SetNamedSecurityInfoW 0x1800389e8
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x1800389f8
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x180038a00
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x180038a10
BCryptCreateHash 0x180038a20
BCryptDestroyHash 0x180038a38
BCryptFinishHash 0x180038a40
BCryptHash 0x180038a30
BCryptHashData 0x180038a28
BCryptOpenAlgorithmProvider 0x180038a18
CRYPT32.dll 9
CertCloseStore 0x180038260
CertCreateCertificateContext 0x180038258
CertFindCertificateInStore 0x180038230
CertFreeCertificateContext 0x180038248
CertGetCertificateContextProperty 0x180038238
CertGetNameStringW 0x180038268
CryptMsgClose 0x180038240
CryptMsgGetParam 0x180038228
CryptQueryObject 0x180038250
imagehlp.dll 1
CheckSumMappedFile 0x180038a50
ntdll.dll 85
LdrAccessResource 0x180038af8
LdrFindResource_U 0x180038af0
LdrGetDllHandle 0x180038c50
LdrGetProcedureAddress 0x180038c48
NtAdjustPrivilegesToken 0x180038ca8
NtClose 0x180038aa0
NtCreateEvent 0x180038aa8
NtDeviceIoControlFile 0x180038a90
NtEnumerateBootEntries 0x180038a60
NtOpenDirectoryObject 0x180038bd0
NtOpenFile 0x180038ac8
NtOpenKey 0x180038b78
NtOpenProcess 0x180038a78
NtOpenProcessTokenEx 0x180038cb0
NtOpenSymbolicLinkObject 0x180038b68
NtOpenThreadTokenEx 0x180038cb8
NtQueryBootEntryOrder 0x180038bc0
NtQueryBootOptions 0x180038bc8
NtQueryDirectoryObject 0x180038bd8
NtQueryInformationFile 0x180038ab0
NtQueryInformationProcess 0x180038a70
NtQueryInformationThread 0x180038ab8
NtQuerySymbolicLinkObject 0x180038b80
NtQuerySystemEnvironmentValueEx 0x180038cd8
NtQuerySystemInformation 0x180038cf0
NtQueryValueKey 0x180038bb8
NtReadFile 0x180038a80
NtSetInformationFile 0x180038ad8
NtSetInformationThread 0x180038a88
NtSetSystemEnvironmentValueEx 0x180038ce0
NtTranslateFilePath 0x180038b88
NtWaitForSingleObject 0x180038ac0
NtWriteFile 0x180038a68
RtlAddAccessAllowedAceEx 0x180038cf8
RtlAdjustPrivilege 0x180038b00
RtlAllocateAndInitializeSid 0x180038b90
RtlAllocateHeap 0x180038d00
RtlAppendUnicodeToString 0x180038b48
RtlCreateAcl 0x180038ba8
RtlCreateSecurityDescriptor 0x180038bb0
RtlFreeHeap 0x180038ae8
RtlFreeSid 0x180038ba0
RtlFreeUnicodeString 0x180038ad0
RtlGUIDFromString 0x180038b40
RtlImageNtHeader 0x180038a98
RtlImageNtHeaderEx 0x180038cc8
RtlImpersonateSelf 0x180038cc0
RtlInitAnsiString 0x180038c60
RtlInitUnicodeString 0x180038ce8
RtlLengthSecurityDescriptor 0x180038b58
RtlLengthSid 0x180038b98
RtlNtStatusToDosError 0x180038cd0
RtlSetDaclSecurityDescriptor 0x180038b70
RtlSetOwnerSecurityDescriptor 0x180038b60
RtlStringFromGUID 0x180038ae0
ZwAllocateUuids 0x180038ca0
ZwClose 0x180038b30
ZwCreateFile 0x180038be0
ZwCreateKey 0x180038be8
ZwDeleteKey 0x180038c10
ZwDeleteValueKey 0x180038c00
ZwDeviceIoControlFile 0x180038c80
ZwEnumerateKey 0x180038c18
ZwFlushKey 0x180038bf8
ZwLoadKey 0x180038bf0
ZwOpenDirectoryObject 0x180038c98
ZwOpenFile 0x180038b20
ZwOpenKey 0x180038c40
ZwOpenMutant 0x180038b28
ZwOpenProcess 0x180038c70
ZwOpenSymbolicLinkObject 0x180038c90
ZwQueryAttributesFile 0x180038b50
ZwQueryDirectoryObject 0x180038c88
ZwQueryInformationFile 0x180038c68
ZwQueryInformationProcess 0x180038c58
ZwQueryKey 0x180038b10
ZwQuerySymbolicLinkObject 0x180038c78
ZwQuerySystemInformation 0x180038b38
ZwQueryValueKey 0x180038c20
ZwReleaseMutant 0x180038b18
ZwSaveKey 0x180038c08
ZwSetSecurityObject 0x180038c28
ZwSetValueKey 0x180038c38
ZwUnloadKey 0x180038c30
ZwWaitForSingleObject 0x180038b08
OLEAUT32.dll 4
SysAllocString 0x180038280
SysFreeString 0x180038290
VariantClear 0x180038288
VariantInit 0x180038278
RPCRT4.dll 1
UuidCreate 0x1800382a0
WCP.dll 6
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x1800382b0
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x1800382d8
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x1800382c0
ConvertNtStatusToHResult 0x1800382d0
RtlFreeLBlob 0x1800382b8
RtlReportErrorOrigination 0x1800382c8
WINTRUST.dll 3
WinVerifyTrust 0x1800382f8
WTHelperGetProvSignerFromChain 0x1800382f0
WTHelperProvDataFromStateData 0x1800382e8