securebootai.dll

v10.0.19041.5911 64-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
412.9 KB
Uploaded
2025-12-01 08:20
Views
57
SHA-256
0884d3aefc7f0f1700da648fb6a625dc

Exported functions 2

DllCanUnloadNow #1 · 0xba20
DllCsiGetHandler #2 · 0xba40

Imported DLLs & functions 314

api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x180040450
CoInitializeEx 0x180040448
CoInitializeSecurity 0x180040460
CoSetProxyBlanket 0x180040458
CoUninitialize 0x180040468
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x180040478
IsDebuggerPresent 0x180040480
OutputDebugStringW 0x180040488
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x1800404b0
SetLastError 0x180040498
SetUnhandledExceptionFilter 0x1800404a0
UnhandledExceptionFilter 0x1800404a8
api-ms-win-core-file-l1-1-0.dll 21
CreateDirectoryW 0x180040530
CreateFileW 0x180040550
DeleteFileW 0x1800404c8
FindClose 0x180040558
FindFirstFileW 0x180040540
FindFirstVolumeW 0x1800404d0
FindNextFileW 0x180040560
FindNextVolumeW 0x180040500
FindVolumeClose 0x180040520
FlushFileBuffers 0x180040508
GetFileAttributesW 0x1800404f8
GetFileInformationByHandle 0x1800404e8
GetFileSizeEx 0x180040548
GetFullPathNameW 0x1800404c0
GetVolumeInformationW 0x180040510
GetVolumePathNameW 0x1800404f0
QueryDosDeviceW 0x1800404d8
ReadFile 0x180040538
SetFileAttributesW 0x180040528
SetFileInformationByHandle 0x1800404e0
WriteFile 0x180040518
api-ms-win-core-file-l1-2-0.dll 1
GetVolumeNameForVolumeMountPointW 0x180040570
api-ms-win-core-file-l2-1-0.dll 3
CopyFileExW 0x180040590
GetFileInformationByHandleEx 0x180040580
MoveFileExW 0x180040588
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1800405a0
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x1800405b8
HeapAlloc 0x1800405b0
HeapDestroy 0x1800405c8
HeapFree 0x1800405c0
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x1800405d8
LocalFree 0x1800405e0
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x1800405f0
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x180040600
api-ms-win-core-kernel32-legacy-l1-1-0.dll 2
FindResourceW 0x180040618
LoadLibraryW 0x180040610
api-ms-win-core-libraryloader-l1-1-0.dll 10
DisableThreadLibraryCalls 0x180040668
FindResourceExW 0x180040640
FreeLibrary 0x180040628
GetModuleFileNameA 0x180040660
GetModuleHandleExW 0x180040670
GetModuleHandleW 0x180040658
GetProcAddress 0x180040638
LoadLibraryExW 0x180040630
LoadResource 0x180040650
SizeofResource 0x180040648
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x180040688
GetLocaleInfoW 0x180040680
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x1800406a0
GetUserDefaultUILanguage 0x180040698
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x1800406b0
MapViewOfFile 0x1800406b8
UnmapViewOfFile 0x1800406c0
api-ms-win-core-privateprofile-l1-1-0.dll 1
GetPrivateProfileSectionW 0x1800406d0
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x1800406e0
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x180040718
GetCurrentProcessId 0x180040728
GetCurrentThread 0x180040708
GetCurrentThreadId 0x1800406f8
OpenProcessToken 0x180040720
OpenThreadToken 0x180040700
SetThreadToken 0x180040710
TerminateProcess 0x1800406f0
api-ms-win-core-processthreads-l1-1-1.dll 1
IsProcessorFeaturePresent 0x180040738
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x180040748
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x180040758
RegCreateKeyExW 0x180040760
RegDeleteKeyExW 0x180040780
RegGetValueW 0x180040788
RegOpenKeyExW 0x180040778
RegQueryValueExW 0x180040770
RegSetValueExW 0x180040768
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x1800407a0
RtlCompareMemory 0x1800407b0
RtlLookupFunctionEntry 0x1800407a8
RtlVirtualUnwind 0x180040798
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathRemoveBackslashW 0x1800407c0
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 2
StrCmpIW 0x1800407d0
StrStrIW 0x1800407d8
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x1800407e8
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x180040820
AcquireSRWLockShared 0x180040818
CreateMutexExW 0x180040868
CreateSemaphoreExW 0x180040858
DeleteCriticalSection 0x180040838
EnterCriticalSection 0x180040800
InitializeCriticalSection 0x180040850
InitializeCriticalSectionEx 0x180040808
LeaveCriticalSection 0x180040860
OpenSemaphoreW 0x180040870
ReleaseMutex 0x180040828
ReleaseSemaphore 0x180040848
ReleaseSRWLockExclusive 0x180040830
ReleaseSRWLockShared 0x180040810
WaitForSingleObject 0x180040840
WaitForSingleObjectEx 0x1800407f8
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x180040880
InitOnceComplete 0x180040888
Sleep 0x180040890
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetSystemDirectoryW 0x1800408b0
GetSystemInfo 0x1800408a8
GetSystemTimeAsFileTime 0x1800408c0
GetVersionExW 0x1800408b8
GetWindowsDirectoryW 0x1800408a0
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x1800408d0
CreateThreadpoolTimer 0x1800408e8
SetThreadpoolTimer 0x1800408e0
WaitForThreadpoolTimerCallbacks 0x1800408d8
api-ms-win-crt-private-l1-1-0.dll 48
__C_specific_handler 0x180040a50
__CxxFrameHandler3 0x180040a58
_CxxThrowException 0x180040a60
_o___acrt_iob_func 0x180040a48
_o___std_exception_copy 0x180040a40
_o___std_exception_destroy 0x180040a38
_o___std_type_info_destroy_list 0x180040a30
_o___stdio_common_vfwprintf 0x180040a28
_o___stdio_common_vsnprintf_s 0x180040a20
_o___stdio_common_vsnwprintf_s 0x180040a18
_o___stdio_common_vswprintf 0x180040a10
_o___stdio_common_vswprintf_s 0x180040a08
_o___stdio_common_vswscanf 0x180040a00
_o__callnewh 0x1800409f8
_o__cexit 0x1800409f0
_o__configure_narrow_argv 0x1800409d8
_o__crt_atexit 0x1800409d0
_o__errno 0x1800409c8
_o__execute_onexit_table 0x1800409c0
_o__initialize_narrow_environment 0x1800408f8
_o__initialize_onexit_table 0x180040900
_o__invalid_parameter_noinfo 0x180040908
_o__purecall 0x180040910
_o__register_onexit_function 0x180040918
_o__seh_filter_dll 0x180040920
_o__ultow_s 0x180040928
_o__wcsicmp 0x180040930
_o__wcslwr 0x180040938
_o__wcsnicmp 0x180040940
_o__wcsupr 0x180040948
_o__wfopen_s 0x180040958
_o_bsearch 0x180040960
_o_fclose 0x180040968
_o_fflush 0x180040970
_o_free 0x180040978
_o_malloc 0x180040980
_o_strcpy_s 0x180040988
_o_wcscat_s 0x180040990
_o_wcscpy_s 0x180040998
_o_wcsncpy_s 0x1800409a0
_o_wcstol 0x1800409a8
_o_wcstoul 0x1800409b0
memcmp 0x180040a68
memcpy 0x180040a70
memmove 0x180040950
wcschr 0x1800409e8
wcsrchr 0x1800409e0
wcsstr 0x1800409b8
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x180040a80
_initterm_e 0x180040a88
api-ms-win-crt-string-l1-1-0.dll 7
memset 0x180040ab8
strcmp 0x180040ab0
strncmp 0x180040aa0
wcscmp 0x180040a98
wcsncmp 0x180040ac8
wcsncpy 0x180040ac0
wcsnlen 0x180040aa8
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x180040ae8
EventUnregister 0x180040ad8
EventWriteTransfer 0x180040ae0
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x180040b08
DuplicateTokenEx 0x180040b28
GetSecurityDescriptorControl 0x180040b10
GetSecurityDescriptorDacl 0x180040b00
GetSecurityDescriptorGroup 0x180040b30
GetSecurityDescriptorOwner 0x180040b18
GetSecurityDescriptorSacl 0x180040b20
GetTokenInformation 0x180040af8
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x180040b40
api-ms-win-security-provider-l1-1-0.dll 1
SetNamedSecurityInfoW 0x180040b50
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x180040b68
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x180040b60
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x180040ba0
BCryptCreateHash 0x180040b88
BCryptDestroyHash 0x180040b98
BCryptFinishHash 0x180040b80
BCryptHash 0x180040b78
BCryptHashData 0x180040b90
BCryptOpenAlgorithmProvider 0x180040ba8
CRYPT32.dll 11
CertCloseStore 0x180040388
CertComparePublicKeyInfo 0x180040368
CertCreateCertificateContext 0x180040338
CertEnumCertificatesInStore 0x180040350
CertFindCertificateInStore 0x180040360
CertFreeCertificateContext 0x180040358
CertGetCertificateContextProperty 0x180040370
CertGetNameStringW 0x180040380
CryptMsgClose 0x180040378
CryptMsgGetParam 0x180040340
CryptQueryObject 0x180040348
imagehlp.dll 1
CheckSumMappedFile 0x180040bb8
ntdll.dll 85
LdrAccessResource 0x180040c58
LdrFindResource_U 0x180040c50
LdrGetDllHandle 0x180040db0
LdrGetProcedureAddress 0x180040da8
NtAdjustPrivilegesToken 0x180040e08
NtClose 0x180040c00
NtCreateEvent 0x180040c08
NtDeviceIoControlFile 0x180040bf0
NtEnumerateBootEntries 0x180040c60
NtOpenDirectoryObject 0x180040d30
NtOpenFile 0x180040c28
NtOpenKey 0x180040cd8
NtOpenProcess 0x180040bd8
NtOpenProcessTokenEx 0x180040e10
NtOpenSymbolicLinkObject 0x180040cc8
NtOpenThreadTokenEx 0x180040e18
NtQueryBootEntryOrder 0x180040d20
NtQueryBootOptions 0x180040d28
NtQueryDirectoryObject 0x180040d38
NtQueryInformationFile 0x180040c10
NtQueryInformationProcess 0x180040bd0
NtQueryInformationThread 0x180040c18
NtQuerySymbolicLinkObject 0x180040ce0
NtQuerySystemEnvironmentValueEx 0x180040e40
NtQuerySystemInformation 0x180040e58
NtQueryValueKey 0x180040d18
NtReadFile 0x180040be0
NtSetInformationFile 0x180040c38
NtSetInformationThread 0x180040be8
NtSetSystemEnvironmentValueEx 0x180040e48
NtTranslateFilePath 0x180040e30
NtWaitForSingleObject 0x180040c20
NtWriteFile 0x180040bc8
RtlAddAccessAllowedAceEx 0x180040ce8
RtlAdjustPrivilege 0x180040e28
RtlAllocateAndInitializeSid 0x180040e60
RtlAllocateHeap 0x180040e68
RtlAppendUnicodeToString 0x180040ca8
RtlCreateAcl 0x180040d08
RtlCreateSecurityDescriptor 0x180040d10
RtlFreeHeap 0x180040c48
RtlFreeSid 0x180040d00
RtlFreeUnicodeString 0x180040c30
RtlGUIDFromString 0x180040ca0
RtlImageNtHeader 0x180040bf8
RtlImageNtHeaderEx 0x180040cf0
RtlImpersonateSelf 0x180040e20
RtlInitAnsiString 0x180040dc0
RtlInitUnicodeString 0x180040e50
RtlLengthSecurityDescriptor 0x180040cb8
RtlLengthSid 0x180040cf8
RtlNtStatusToDosError 0x180040e38
RtlSetDaclSecurityDescriptor 0x180040cd0
RtlSetOwnerSecurityDescriptor 0x180040cc0
RtlStringFromGUID 0x180040c40
ZwAllocateUuids 0x180040e00
ZwClose 0x180040c90
ZwCreateFile 0x180040d40
ZwCreateKey 0x180040d48
ZwDeleteKey 0x180040d70
ZwDeleteValueKey 0x180040d60
ZwDeviceIoControlFile 0x180040de0
ZwEnumerateKey 0x180040d78
ZwFlushKey 0x180040d58
ZwLoadKey 0x180040d50
ZwOpenDirectoryObject 0x180040df8
ZwOpenFile 0x180040c80
ZwOpenKey 0x180040da0
ZwOpenMutant 0x180040c88
ZwOpenProcess 0x180040dd0
ZwOpenSymbolicLinkObject 0x180040df0
ZwQueryAttributesFile 0x180040cb0
ZwQueryDirectoryObject 0x180040de8
ZwQueryInformationFile 0x180040dc8
ZwQueryInformationProcess 0x180040db8
ZwQueryKey 0x180040c70
ZwQuerySymbolicLinkObject 0x180040dd8
ZwQuerySystemInformation 0x180040c98
ZwQueryValueKey 0x180040d80
ZwReleaseMutant 0x180040c78
ZwSaveKey 0x180040d68
ZwSetSecurityObject 0x180040d88
ZwSetValueKey 0x180040d98
ZwUnloadKey 0x180040d90
ZwWaitForSingleObject 0x180040c68
OLEAUT32.dll 8
SafeArrayGetElement 0x180040398
SafeArrayGetLBound 0x1800403a0
SafeArrayGetUBound 0x1800403c0
SysAllocString 0x1800403a8
SysFreeString 0x1800403d0
SysStringLen 0x1800403b0
VariantClear 0x1800403b8
VariantInit 0x1800403c8
RPCRT4.dll 1
UuidCreate 0x1800403e0
WCP.dll 6
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x1800403f0
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180040418
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x180040410
ConvertNtStatusToHResult 0x1800403f8
RtlFreeLBlob 0x180040408
RtlReportErrorOrigination 0x180040400
WINTRUST.dll 3
WinVerifyTrust 0x180040428
WTHelperGetProvSignerFromChain 0x180040438
WTHelperProvDataFromStateData 0x180040430