securebootai.dll

v10.0.19041.6271 64-bit Windows NT Analyzed
Download
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
420.9 KB
Uploaded
2025-12-01 08:21
Views
48
SHA-256
f03b3fe138422ea84afd8247c0d999c3

Exported functions 2

DllCanUnloadNow #1 · 0xb3c0
DllCsiGetHandler #2 · 0xb3e0

Imported DLLs & functions 314

api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x18003f640
CoInitializeEx 0x18003f638
CoInitializeSecurity 0x18003f650
CoSetProxyBlanket 0x18003f648
CoUninitialize 0x18003f658
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18003f668
IsDebuggerPresent 0x18003f670
OutputDebugStringW 0x18003f678
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18003f6a0
SetLastError 0x18003f688
SetUnhandledExceptionFilter 0x18003f690
UnhandledExceptionFilter 0x18003f698
api-ms-win-core-file-l1-1-0.dll 21
CreateDirectoryW 0x18003f720
CreateFileW 0x18003f748
DeleteFileW 0x18003f6b8
FindClose 0x18003f750
FindFirstFileW 0x18003f730
FindFirstVolumeW 0x18003f6c0
FindNextFileW 0x18003f740
FindNextVolumeW 0x18003f6f0
FindVolumeClose 0x18003f710
FlushFileBuffers 0x18003f6f8
GetFileAttributesW 0x18003f6e8
GetFileInformationByHandle 0x18003f6d8
GetFileSizeEx 0x18003f738
GetFullPathNameW 0x18003f6b0
GetVolumeInformationW 0x18003f700
GetVolumePathNameW 0x18003f6e0
QueryDosDeviceW 0x18003f6c8
ReadFile 0x18003f728
SetFileAttributesW 0x18003f718
SetFileInformationByHandle 0x18003f6d0
WriteFile 0x18003f708
api-ms-win-core-file-l1-2-0.dll 1
GetVolumeNameForVolumeMountPointW 0x18003f760
api-ms-win-core-file-l2-1-0.dll 3
CopyFileExW 0x18003f780
GetFileInformationByHandleEx 0x18003f770
MoveFileExW 0x18003f778
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18003f790
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x18003f7a8
HeapAlloc 0x18003f7a0
HeapDestroy 0x18003f7b8
HeapFree 0x18003f7b0
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x18003f7c8
LocalFree 0x18003f7d0
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x18003f7e0
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x18003f7f0
api-ms-win-core-kernel32-legacy-l1-1-0.dll 3
CopyFileW 0x18003f800
FindResourceW 0x18003f810
LoadLibraryW 0x18003f808
api-ms-win-core-libraryloader-l1-1-0.dll 10
DisableThreadLibraryCalls 0x18003f840
FindResourceExW 0x18003f868
FreeLibrary 0x18003f830
GetModuleFileNameA 0x18003f858
GetModuleHandleExW 0x18003f828
GetModuleHandleW 0x18003f850
GetProcAddress 0x18003f838
LoadLibraryExW 0x18003f820
LoadResource 0x18003f848
SizeofResource 0x18003f860
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x18003f878
GetLocaleInfoW 0x18003f880
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x18003f890
GetUserDefaultUILanguage 0x18003f898
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x18003f8b0
MapViewOfFile 0x18003f8a8
UnmapViewOfFile 0x18003f8b8
api-ms-win-core-privateprofile-l1-1-0.dll 1
GetPrivateProfileSectionW 0x18003f8c8
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x18003f8d8
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x18003f8f0
GetCurrentProcessId 0x18003f918
GetCurrentThread 0x18003f8f8
GetCurrentThreadId 0x18003f908
OpenProcessToken 0x18003f910
OpenThreadToken 0x18003f8e8
SetThreadToken 0x18003f900
TerminateProcess 0x18003f920
api-ms-win-core-processthreads-l1-1-1.dll 1
IsProcessorFeaturePresent 0x18003f930
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18003f940
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x18003f960
RegCreateKeyExW 0x18003f968
RegDeleteKeyExW 0x18003f950
RegGetValueW 0x18003f958
RegOpenKeyExW 0x18003f980
RegQueryValueExW 0x18003f970
RegSetValueExW 0x18003f978
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x18003f998
RtlCompareMemory 0x18003f9a8
RtlLookupFunctionEntry 0x18003f9a0
RtlVirtualUnwind 0x18003f990
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathRemoveBackslashW 0x18003f9b8
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 2
StrCmpIW 0x18003f9c8
StrStrIW 0x18003f9d0
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x18003f9e0
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x18003fa18
AcquireSRWLockShared 0x18003fa10
CreateMutexExW 0x18003fa60
CreateSemaphoreExW 0x18003fa50
DeleteCriticalSection 0x18003fa30
EnterCriticalSection 0x18003f9f8
InitializeCriticalSection 0x18003fa48
InitializeCriticalSectionEx 0x18003fa00
LeaveCriticalSection 0x18003fa58
OpenSemaphoreW 0x18003fa68
ReleaseMutex 0x18003fa20
ReleaseSemaphore 0x18003fa40
ReleaseSRWLockExclusive 0x18003fa28
ReleaseSRWLockShared 0x18003fa08
WaitForSingleObject 0x18003fa38
WaitForSingleObjectEx 0x18003f9f0
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x18003fa78
InitOnceComplete 0x18003fa80
Sleep 0x18003fa88
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetSystemDirectoryW 0x18003faa8
GetSystemInfo 0x18003faa0
GetSystemTimeAsFileTime 0x18003fab8
GetVersionExW 0x18003fab0
GetWindowsDirectoryW 0x18003fa98
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x18003fac8
CreateThreadpoolTimer 0x18003fae0
SetThreadpoolTimer 0x18003fad8
WaitForThreadpoolTimerCallbacks 0x18003fad0
api-ms-win-crt-private-l1-1-0.dll 48
__C_specific_handler 0x18003fc40
__CxxFrameHandler3 0x18003fc48
_CxxThrowException 0x18003fc58
_o___acrt_iob_func 0x18003fc38
_o___std_exception_copy 0x18003fc30
_o___std_exception_destroy 0x18003fc28
_o___std_type_info_destroy_list 0x18003fc20
_o___stdio_common_vfwprintf 0x18003fc18
_o___stdio_common_vsnprintf_s 0x18003fc10
_o___stdio_common_vsnwprintf_s 0x18003fc08
_o___stdio_common_vswprintf 0x18003fc00
_o___stdio_common_vswprintf_s 0x18003fbf8
_o___stdio_common_vswscanf 0x18003fbf0
_o__callnewh 0x18003fbe8
_o__cexit 0x18003fbe0
_o__configure_narrow_argv 0x18003fbc8
_o__crt_atexit 0x18003fbc0
_o__errno 0x18003fbb8
_o__execute_onexit_table 0x18003fbb0
_o__initialize_narrow_environment 0x18003faf0
_o__initialize_onexit_table 0x18003faf8
_o__invalid_parameter_noinfo 0x18003fb00
_o__purecall 0x18003fb08
_o__register_onexit_function 0x18003fb10
_o__seh_filter_dll 0x18003fb18
_o__ultow_s 0x18003fb20
_o__wcsicmp 0x18003fb28
_o__wcslwr 0x18003fb30
_o__wcsnicmp 0x18003fb38
_o__wcsupr 0x18003fb40
_o__wfopen_s 0x18003fc50
_o_bsearch 0x18003fb50
_o_fclose 0x18003fb58
_o_fflush 0x18003fb60
_o_free 0x18003fb68
_o_malloc 0x18003fb70
_o_strcpy_s 0x18003fb78
_o_wcscat_s 0x18003fb80
_o_wcscpy_s 0x18003fb88
_o_wcsncpy_s 0x18003fb90
_o_wcstol 0x18003fb98
_o_wcstoul 0x18003fba0
memcmp 0x18003fc60
memcpy 0x18003fc68
memmove 0x18003fb48
wcschr 0x18003fbd8
wcsrchr 0x18003fbd0
wcsstr 0x18003fba8
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x18003fc78
_initterm_e 0x18003fc80
api-ms-win-crt-string-l1-1-0.dll 7
memset 0x18003fcb0
strcmp 0x18003fca8
strncmp 0x18003fc98
wcscmp 0x18003fc90
wcsncmp 0x18003fcc0
wcsncpy 0x18003fcb8
wcsnlen 0x18003fca0
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x18003fce0
EventUnregister 0x18003fcd8
EventWriteTransfer 0x18003fcd0
api-ms-win-security-base-l1-1-0.dll 8
AdjustTokenPrivileges 0x18003fd28
DuplicateTokenEx 0x18003fcf8
GetSecurityDescriptorControl 0x18003fd08
GetSecurityDescriptorDacl 0x18003fd00
GetSecurityDescriptorGroup 0x18003fcf0
GetSecurityDescriptorOwner 0x18003fd20
GetSecurityDescriptorSacl 0x18003fd10
GetTokenInformation 0x18003fd18
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x18003fd38
api-ms-win-security-provider-l1-1-0.dll 1
SetNamedSecurityInfoW 0x18003fd48
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x18003fd60
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x18003fd58
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x18003fd98
BCryptCreateHash 0x18003fd80
BCryptDestroyHash 0x18003fd90
BCryptFinishHash 0x18003fd78
BCryptHash 0x18003fd70
BCryptHashData 0x18003fd88
BCryptOpenAlgorithmProvider 0x18003fda0
CRYPT32.dll 11
CertCloseStore 0x18003f578
CertComparePublicKeyInfo 0x18003f558
CertCreateCertificateContext 0x18003f528
CertEnumCertificatesInStore 0x18003f540
CertFindCertificateInStore 0x18003f550
CertFreeCertificateContext 0x18003f548
CertGetCertificateContextProperty 0x18003f560
CertGetNameStringW 0x18003f570
CryptMsgClose 0x18003f568
CryptMsgGetParam 0x18003f530
CryptQueryObject 0x18003f538
imagehlp.dll 1
CheckSumMappedFile 0x18003fdb0
ntdll.dll 84
LdrAccessResource 0x18003fe38
LdrFindResource_U 0x18003fe30
LdrGetDllHandle 0x18003ffa8
LdrGetProcedureAddress 0x18003ffa0
NtAdjustPrivilegesToken 0x180040000
NtClose 0x18003fde0
NtCreateEvent 0x18003fde8
NtDeviceIoControlFile 0x18003fdd0
NtEnumerateBootEntries 0x18003ff30
NtOpenDirectoryObject 0x18003ff20
NtOpenFile 0x18003fe08
NtOpenKey 0x18003fec0
NtOpenProcess 0x18003fe48
NtOpenProcessTokenEx 0x180040008
NtOpenSymbolicLinkObject 0x18003feb0
NtOpenThreadTokenEx 0x180040010
NtQueryBootEntryOrder 0x18003ff08
NtQueryBootOptions 0x18003ff10
NtQueryDirectoryObject 0x18003ff28
NtQueryInformationFile 0x18003fdf0
NtQueryInformationProcess 0x18003fee8
NtQueryInformationThread 0x18003fdf8
NtQuerySymbolicLinkObject 0x18003fec8
NtQuerySystemEnvironmentValueEx 0x180040038
NtQuerySystemInformation 0x180040050
NtQueryValueKey 0x18003ff00
NtReadFile 0x18003fdc0
NtSetInformationFile 0x18003fe18
NtSetInformationThread 0x18003fdc8
NtSetSystemEnvironmentValueEx 0x180040040
NtTranslateFilePath 0x18003ff18
NtWaitForSingleObject 0x18003fe00
NtWriteFile 0x180040020
RtlAddAccessAllowedAceEx 0x18003fed0
RtlAllocateAndInitializeSid 0x18003fed8
RtlAllocateHeap 0x18003fe40
RtlAppendUnicodeToString 0x18003fe90
RtlCreateAcl 0x18003fef0
RtlCreateSecurityDescriptor 0x18003fef8
RtlFreeHeap 0x18003fe28
RtlFreeSid 0x180040058
RtlFreeUnicodeString 0x18003fe10
RtlGUIDFromString 0x18003fe88
RtlImageNtHeader 0x18003fdd8
RtlImageNtHeaderEx 0x180040028
RtlImpersonateSelf 0x180040018
RtlInitAnsiString 0x18003ffb8
RtlInitUnicodeString 0x180040048
RtlLengthSecurityDescriptor 0x18003fea0
RtlLengthSid 0x18003fee0
RtlNtStatusToDosError 0x180040030
RtlSetDaclSecurityDescriptor 0x18003feb8
RtlSetOwnerSecurityDescriptor 0x18003fea8
RtlStringFromGUID 0x18003fe20
ZwAllocateUuids 0x18003fff8
ZwClose 0x18003fe78
ZwCreateFile 0x18003ff38
ZwCreateKey 0x18003ff40
ZwDeleteKey 0x18003ff68
ZwDeleteValueKey 0x18003ff58
ZwDeviceIoControlFile 0x18003ffd8
ZwEnumerateKey 0x18003ff70
ZwFlushKey 0x18003ff50
ZwLoadKey 0x18003ff48
ZwOpenDirectoryObject 0x18003fff0
ZwOpenFile 0x18003fe68
ZwOpenKey 0x18003ff98
ZwOpenMutant 0x18003fe70
ZwOpenProcess 0x18003ffc8
ZwOpenSymbolicLinkObject 0x18003ffe8
ZwQueryAttributesFile 0x18003fe98
ZwQueryDirectoryObject 0x18003ffe0
ZwQueryInformationFile 0x18003ffc0
ZwQueryInformationProcess 0x18003ffb0
ZwQueryKey 0x18003fe58
ZwQuerySymbolicLinkObject 0x18003ffd0
ZwQuerySystemInformation 0x18003fe80
ZwQueryValueKey 0x18003ff78
ZwReleaseMutant 0x18003fe60
ZwSaveKey 0x18003ff60
ZwSetSecurityObject 0x18003ff80
ZwSetValueKey 0x18003ff90
ZwUnloadKey 0x18003ff88
ZwWaitForSingleObject 0x18003fe50
OLEAUT32.dll 8
SafeArrayGetElement 0x18003f588
SafeArrayGetLBound 0x18003f590
SafeArrayGetUBound 0x18003f5b0
SysAllocString 0x18003f598
SysFreeString 0x18003f5c0
SysStringLen 0x18003f5a0
VariantClear 0x18003f5a8
VariantInit 0x18003f5b8
RPCRT4.dll 1
UuidCreate 0x18003f5d0
WCP.dll 6
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x18003f5e0
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x18003f608
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x18003f600
ConvertNtStatusToHResult 0x18003f5e8
RtlFreeLBlob 0x18003f5f8
RtlReportErrorOrigination 0x18003f5f0
WINTRUST.dll 3
WinVerifyTrust 0x18003f618
WTHelperGetProvSignerFromChain 0x18003f628
WTHelperProvDataFromStateData 0x18003f620