securebootai.dll

v10.0.19041.6088 64-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
436.4 KB
Uploaded
2025-12-01 08:21
Views
50
SHA-256
e6a70b118b8481d119a7c9cc20b1e0ee

Exported functions 2

DllCanUnloadNow #1 · 0xba20
DllCsiGetHandler #2 · 0xba40

Imported DLLs & functions 314

api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x180041650
CoInitializeEx 0x180041648
CoInitializeSecurity 0x180041660
CoSetProxyBlanket 0x180041658
CoUninitialize 0x180041668
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x180041678
IsDebuggerPresent 0x180041680
OutputDebugStringW 0x180041688
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x1800416b0
SetLastError 0x180041698
SetUnhandledExceptionFilter 0x1800416a0
UnhandledExceptionFilter 0x1800416a8
api-ms-win-core-file-l1-1-0.dll 21
CreateDirectoryW 0x180041730
CreateFileW 0x180041750
DeleteFileW 0x1800416c8
FindClose 0x180041758
FindFirstFileW 0x180041740
FindFirstVolumeW 0x1800416d0
FindNextFileW 0x180041760
FindNextVolumeW 0x180041700
FindVolumeClose 0x180041720
FlushFileBuffers 0x180041708
GetFileAttributesW 0x1800416f8
GetFileInformationByHandle 0x1800416e8
GetFileSizeEx 0x180041748
GetFullPathNameW 0x1800416c0
GetVolumeInformationW 0x180041710
GetVolumePathNameW 0x1800416f0
QueryDosDeviceW 0x1800416d8
ReadFile 0x180041738
SetFileAttributesW 0x180041728
SetFileInformationByHandle 0x1800416e0
WriteFile 0x180041718
api-ms-win-core-file-l1-2-0.dll 1
GetVolumeNameForVolumeMountPointW 0x180041770
api-ms-win-core-file-l2-1-0.dll 3
CopyFileExW 0x180041790
GetFileInformationByHandleEx 0x180041780
MoveFileExW 0x180041788
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1800417a0
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x1800417b8
HeapAlloc 0x1800417b0
HeapDestroy 0x1800417c8
HeapFree 0x1800417c0
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x1800417d8
LocalFree 0x1800417e0
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x1800417f0
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x180041800
api-ms-win-core-kernel32-legacy-l1-1-0.dll 2
FindResourceW 0x180041818
LoadLibraryW 0x180041810
api-ms-win-core-libraryloader-l1-1-0.dll 10
DisableThreadLibraryCalls 0x180041868
FindResourceExW 0x180041840
FreeLibrary 0x180041828
GetModuleFileNameA 0x180041860
GetModuleHandleExW 0x180041870
GetModuleHandleW 0x180041858
GetProcAddress 0x180041838
LoadLibraryExW 0x180041830
LoadResource 0x180041850
SizeofResource 0x180041848
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x180041888
GetLocaleInfoW 0x180041880
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x1800418a0
GetUserDefaultUILanguage 0x180041898
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x1800418b0
MapViewOfFile 0x1800418b8
UnmapViewOfFile 0x1800418c0
api-ms-win-core-privateprofile-l1-1-0.dll 1
GetPrivateProfileSectionW 0x1800418d0
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x1800418e0
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x180041918
GetCurrentProcessId 0x180041928
GetCurrentThread 0x180041908
GetCurrentThreadId 0x1800418f8
OpenProcessToken 0x180041920
OpenThreadToken 0x180041900
SetThreadToken 0x180041910
TerminateProcess 0x1800418f0
api-ms-win-core-processthreads-l1-1-1.dll 1
IsProcessorFeaturePresent 0x180041938
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x180041948
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x180041958
RegCreateKeyExW 0x180041960
RegDeleteKeyExW 0x180041980
RegGetValueW 0x180041988
RegOpenKeyExW 0x180041978
RegQueryValueExW 0x180041970
RegSetValueExW 0x180041968
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x1800419a0
RtlCompareMemory 0x1800419b0
RtlLookupFunctionEntry 0x1800419a8
RtlVirtualUnwind 0x180041998
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathRemoveBackslashW 0x1800419c0
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 2
StrCmpIW 0x1800419d0
StrStrIW 0x1800419d8
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x1800419e8
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x180041a20
AcquireSRWLockShared 0x180041a18
CreateMutexExW 0x180041a68
CreateSemaphoreExW 0x180041a58
DeleteCriticalSection 0x180041a38
EnterCriticalSection 0x180041a00
InitializeCriticalSection 0x180041a50
InitializeCriticalSectionEx 0x180041a08
LeaveCriticalSection 0x180041a60
OpenSemaphoreW 0x180041a70
ReleaseMutex 0x180041a28
ReleaseSemaphore 0x180041a48
ReleaseSRWLockExclusive 0x180041a30
ReleaseSRWLockShared 0x180041a10
WaitForSingleObject 0x180041a40
WaitForSingleObjectEx 0x1800419f8
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x180041a80
InitOnceComplete 0x180041a88
Sleep 0x180041a90
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetSystemDirectoryW 0x180041ab0
GetSystemInfo 0x180041aa8
GetSystemTimeAsFileTime 0x180041ac0
GetVersionExW 0x180041ab8
GetWindowsDirectoryW 0x180041aa0
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x180041ad0
CreateThreadpoolTimer 0x180041ae8
SetThreadpoolTimer 0x180041ae0
WaitForThreadpoolTimerCallbacks 0x180041ad8
api-ms-win-crt-private-l1-1-0.dll 48
__C_specific_handler 0x180041c50
__CxxFrameHandler3 0x180041c58
_CxxThrowException 0x180041c60
_o___acrt_iob_func 0x180041c48
_o___std_exception_copy 0x180041c40
_o___std_exception_destroy 0x180041c38
_o___std_type_info_destroy_list 0x180041c30
_o___stdio_common_vfwprintf 0x180041c28
_o___stdio_common_vsnprintf_s 0x180041c20
_o___stdio_common_vsnwprintf_s 0x180041c18
_o___stdio_common_vswprintf 0x180041c10
_o___stdio_common_vswprintf_s 0x180041c08
_o___stdio_common_vswscanf 0x180041c00
_o__callnewh 0x180041bf8
_o__cexit 0x180041bf0
_o__configure_narrow_argv 0x180041bd8
_o__crt_atexit 0x180041bd0
_o__errno 0x180041bc8
_o__execute_onexit_table 0x180041bc0
_o__initialize_narrow_environment 0x180041af8
_o__initialize_onexit_table 0x180041b00
_o__invalid_parameter_noinfo 0x180041b08
_o__purecall 0x180041b10
_o__register_onexit_function 0x180041b18
_o__seh_filter_dll 0x180041b20
_o__ultow_s 0x180041b28
_o__wcsicmp 0x180041b30
_o__wcslwr 0x180041b38
_o__wcsnicmp 0x180041b40
_o__wcsupr 0x180041b48
_o__wfopen_s 0x180041b58
_o_bsearch 0x180041b60
_o_fclose 0x180041b68
_o_fflush 0x180041b70
_o_free 0x180041b78
_o_malloc 0x180041b80
_o_strcpy_s 0x180041b88
_o_wcscat_s 0x180041b90
_o_wcscpy_s 0x180041b98
_o_wcsncpy_s 0x180041ba0
_o_wcstol 0x180041ba8
_o_wcstoul 0x180041bb0
memcmp 0x180041c68
memcpy 0x180041c70
memmove 0x180041b50
wcschr 0x180041be8
wcsrchr 0x180041be0
wcsstr 0x180041bb8
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x180041c80
_initterm_e 0x180041c88
api-ms-win-crt-string-l1-1-0.dll 7
memset 0x180041cb8
strcmp 0x180041cb0
strncmp 0x180041ca0
wcscmp 0x180041c98
wcsncmp 0x180041cc8
wcsncpy 0x180041cc0
wcsnlen 0x180041ca8
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x180041ce8
EventUnregister 0x180041cd8
EventWriteTransfer 0x180041ce0
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x180041d08
DuplicateTokenEx 0x180041d28
GetSecurityDescriptorControl 0x180041d10
GetSecurityDescriptorDacl 0x180041d00
GetSecurityDescriptorGroup 0x180041d30
GetSecurityDescriptorOwner 0x180041d18
GetSecurityDescriptorSacl 0x180041d20
GetTokenInformation 0x180041cf8
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x180041d40
api-ms-win-security-provider-l1-1-0.dll 1
SetNamedSecurityInfoW 0x180041d50
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x180041d68
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x180041d60
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x180041da0
BCryptCreateHash 0x180041d88
BCryptDestroyHash 0x180041d98
BCryptFinishHash 0x180041d80
BCryptHash 0x180041d78
BCryptHashData 0x180041d90
BCryptOpenAlgorithmProvider 0x180041da8
CRYPT32.dll 11
CertCloseStore 0x180041588
CertComparePublicKeyInfo 0x180041568
CertCreateCertificateContext 0x180041538
CertEnumCertificatesInStore 0x180041550
CertFindCertificateInStore 0x180041560
CertFreeCertificateContext 0x180041558
CertGetCertificateContextProperty 0x180041570
CertGetNameStringW 0x180041580
CryptMsgClose 0x180041578
CryptMsgGetParam 0x180041540
CryptQueryObject 0x180041548
imagehlp.dll 1
CheckSumMappedFile 0x180041db8
ntdll.dll 85
LdrAccessResource 0x180041e58
LdrFindResource_U 0x180041e50
LdrGetDllHandle 0x180041fb0
LdrGetProcedureAddress 0x180041fa8
NtAdjustPrivilegesToken 0x180042008
NtClose 0x180041e00
NtCreateEvent 0x180041e08
NtDeviceIoControlFile 0x180041df0
NtEnumerateBootEntries 0x180041e60
NtOpenDirectoryObject 0x180041f30
NtOpenFile 0x180041e28
NtOpenKey 0x180041ed8
NtOpenProcess 0x180041dd8
NtOpenProcessTokenEx 0x180042010
NtOpenSymbolicLinkObject 0x180041ec8
NtOpenThreadTokenEx 0x180042018
NtQueryBootEntryOrder 0x180041f20
NtQueryBootOptions 0x180041f28
NtQueryDirectoryObject 0x180041f38
NtQueryInformationFile 0x180041e10
NtQueryInformationProcess 0x180041dd0
NtQueryInformationThread 0x180041e18
NtQuerySymbolicLinkObject 0x180041ee0
NtQuerySystemEnvironmentValueEx 0x180042040
NtQuerySystemInformation 0x180042058
NtQueryValueKey 0x180041f18
NtReadFile 0x180041de0
NtSetInformationFile 0x180041e38
NtSetInformationThread 0x180041de8
NtSetSystemEnvironmentValueEx 0x180042048
NtTranslateFilePath 0x180042030
NtWaitForSingleObject 0x180041e20
NtWriteFile 0x180041dc8
RtlAddAccessAllowedAceEx 0x180041ee8
RtlAdjustPrivilege 0x180042028
RtlAllocateAndInitializeSid 0x180042060
RtlAllocateHeap 0x180042068
RtlAppendUnicodeToString 0x180041ea8
RtlCreateAcl 0x180041f08
RtlCreateSecurityDescriptor 0x180041f10
RtlFreeHeap 0x180041e48
RtlFreeSid 0x180041f00
RtlFreeUnicodeString 0x180041e30
RtlGUIDFromString 0x180041ea0
RtlImageNtHeader 0x180041df8
RtlImageNtHeaderEx 0x180041ef0
RtlImpersonateSelf 0x180042020
RtlInitAnsiString 0x180041fc0
RtlInitUnicodeString 0x180042050
RtlLengthSecurityDescriptor 0x180041eb8
RtlLengthSid 0x180041ef8
RtlNtStatusToDosError 0x180042038
RtlSetDaclSecurityDescriptor 0x180041ed0
RtlSetOwnerSecurityDescriptor 0x180041ec0
RtlStringFromGUID 0x180041e40
ZwAllocateUuids 0x180042000
ZwClose 0x180041e90
ZwCreateFile 0x180041f40
ZwCreateKey 0x180041f48
ZwDeleteKey 0x180041f70
ZwDeleteValueKey 0x180041f60
ZwDeviceIoControlFile 0x180041fe0
ZwEnumerateKey 0x180041f78
ZwFlushKey 0x180041f58
ZwLoadKey 0x180041f50
ZwOpenDirectoryObject 0x180041ff8
ZwOpenFile 0x180041e80
ZwOpenKey 0x180041fa0
ZwOpenMutant 0x180041e88
ZwOpenProcess 0x180041fd0
ZwOpenSymbolicLinkObject 0x180041ff0
ZwQueryAttributesFile 0x180041eb0
ZwQueryDirectoryObject 0x180041fe8
ZwQueryInformationFile 0x180041fc8
ZwQueryInformationProcess 0x180041fb8
ZwQueryKey 0x180041e70
ZwQuerySymbolicLinkObject 0x180041fd8
ZwQuerySystemInformation 0x180041e98
ZwQueryValueKey 0x180041f80
ZwReleaseMutant 0x180041e78
ZwSaveKey 0x180041f68
ZwSetSecurityObject 0x180041f88
ZwSetValueKey 0x180041f98
ZwUnloadKey 0x180041f90
ZwWaitForSingleObject 0x180041e68
OLEAUT32.dll 8
SafeArrayGetElement 0x180041598
SafeArrayGetLBound 0x1800415a0
SafeArrayGetUBound 0x1800415c0
SysAllocString 0x1800415a8
SysFreeString 0x1800415d0
SysStringLen 0x1800415b0
VariantClear 0x1800415b8
VariantInit 0x1800415c8
RPCRT4.dll 1
UuidCreate 0x1800415e0
WCP.dll 6
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x1800415f0
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180041618
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x180041610
ConvertNtStatusToHResult 0x1800415f8
RtlFreeLBlob 0x180041608
RtlReportErrorOrigination 0x180041600
WINTRUST.dll 3
WinVerifyTrust 0x180041628
WTHelperGetProvSignerFromChain 0x180041638
WTHelperProvDataFromStateData 0x180041630