securebootai.dll

v10.0.19041.6449 64-bit Windows NT Analyzed
Description
CSI Secure Boot Servicing Plugin
Authors
© Microsoft Corporation. All rights reserved.
File size
434.4 KB
Uploaded
2025-12-01 08:21
Views
39
SHA-256
897add5e830c08db61130313b37e5e00

Exported functions 2

DllCanUnloadNow #1 · 0xb6b0
DllCsiGetHandler #2 · 0xb6d0

Imported DLLs & functions 316

CoCreateInstance 0x180041a80
CoInitializeEx 0x180041a78
CoInitializeSecurity 0x180041a90
CoSetProxyBlanket 0x180041a88
CoUninitialize 0x180041a98
DebugBreak 0x180041aa8
IsDebuggerPresent 0x180041ab0
OutputDebugStringW 0x180041ab8
GetLastError 0x180041ae0
SetLastError 0x180041ac8
SetUnhandledExceptionFilter 0x180041ad0
UnhandledExceptionFilter 0x180041ad8
CreateDirectoryW 0x180041b60
CreateFileW 0x180041b88
DeleteFileW 0x180041af8
FindClose 0x180041b90
FindFirstFileW 0x180041b70
FindFirstVolumeW 0x180041b00
FindNextFileW 0x180041b80
FindNextVolumeW 0x180041b30
FindVolumeClose 0x180041b50
FlushFileBuffers 0x180041b38
GetFileAttributesW 0x180041b28
GetFileInformationByHandle 0x180041b18
GetFileSizeEx 0x180041b78
GetFullPathNameW 0x180041af0
GetVolumeInformationW 0x180041b40
GetVolumePathNameW 0x180041b20
QueryDosDeviceW 0x180041b08
ReadFile 0x180041b68
SetFileAttributesW 0x180041b58
SetFileInformationByHandle 0x180041b10
WriteFile 0x180041b48
GetVolumeNameForVolumeMountPointW 0x180041ba0
CopyFileExW 0x180041bc0
GetFileInformationByHandleEx 0x180041bb0
MoveFileExW 0x180041bb8
CloseHandle 0x180041bd0
GetProcessHeap 0x180041be8
HeapAlloc 0x180041be0
HeapDestroy 0x180041bf8
HeapFree 0x180041bf0
LocalAlloc 0x180041c08
LocalFree 0x180041c10
InitializeSListHead 0x180041c20
DeviceIoControl 0x180041c30
CopyFileW 0x180041c40
FindResourceW 0x180041c50
LoadLibraryW 0x180041c48
DisableThreadLibraryCalls 0x180041c80
FindResourceExW 0x180041ca8
FreeLibrary 0x180041c70
GetModuleFileNameA 0x180041c98
GetModuleHandleExW 0x180041c68
GetModuleHandleW 0x180041c90
GetProcAddress 0x180041c78
LoadLibraryExW 0x180041c60
LoadResource 0x180041c88
SizeofResource 0x180041ca0
FormatMessageW 0x180041cb8
GetLocaleInfoW 0x180041cc0
GetSystemDefaultUILanguage 0x180041cd0
GetUserDefaultUILanguage 0x180041cd8
CreateFileMappingW 0x180041cf0
MapViewOfFile 0x180041ce8
UnmapViewOfFile 0x180041cf8
GetPrivateProfileSectionW 0x180041d08
GetCurrentProcess 0x180041d30
GetCurrentProcessId 0x180041d58
GetCurrentThread 0x180041d38
GetCurrentThreadId 0x180041d48
OpenProcessToken 0x180041d50
OpenThreadToken 0x180041d28
SetThreadToken 0x180041d40
TerminateProcess 0x180041d60
IsProcessorFeaturePresent 0x180041d70
QueryPerformanceCounter 0x180041d80
RegCloseKey 0x180041da0
RegCreateKeyExW 0x180041da8
RegDeleteKeyExW 0x180041d90
RegGetValueW 0x180041d98
RegOpenKeyExW 0x180041dc0
RegQueryValueExW 0x180041db0
RegSetValueExW 0x180041db8
RtlCaptureContext 0x180041dd8
RtlCompareMemory 0x180041de8
RtlLookupFunctionEntry 0x180041de0
RtlVirtualUnwind 0x180041dd0
PathRemoveBackslashW 0x180041df8
StrCmpIW 0x180041e08
StrStrIW 0x180041e10
MultiByteToWideChar 0x180041e20
AcquireSRWLockExclusive 0x180041e58
AcquireSRWLockShared 0x180041e50
CreateMutexExW 0x180041ea0
CreateSemaphoreExW 0x180041e90
DeleteCriticalSection 0x180041e70
EnterCriticalSection 0x180041e38
InitializeCriticalSection 0x180041e88
InitializeCriticalSectionEx 0x180041e40
LeaveCriticalSection 0x180041e98
OpenSemaphoreW 0x180041ea8
ReleaseMutex 0x180041e60
ReleaseSemaphore 0x180041e80
ReleaseSRWLockExclusive 0x180041e68
ReleaseSRWLockShared 0x180041e48
WaitForSingleObject 0x180041e78
WaitForSingleObjectEx 0x180041e30
InitOnceBeginInitialize 0x180041eb8
InitOnceComplete 0x180041ec0
Sleep 0x180041ec8
GetSystemDirectoryW 0x180041ee8
GetSystemInfo 0x180041ee0
GetSystemTimeAsFileTime 0x180041ef8
GetVersionExW 0x180041ef0
GetWindowsDirectoryW 0x180041ed8
CloseThreadpoolTimer 0x180041f08
CreateThreadpoolTimer 0x180041f20
SetThreadpoolTimer 0x180041f18
WaitForThreadpoolTimerCallbacks 0x180041f10
__C_specific_handler 0x180042090
__CxxFrameHandler3 0x180042098
_CxxThrowException 0x1800420a8
_o___acrt_iob_func 0x180042088
_o___std_exception_copy 0x180042080
_o___std_exception_destroy 0x180042078
_o___std_type_info_destroy_list 0x180042070
_o___stdio_common_vfwprintf 0x180042068
_o___stdio_common_vsnprintf_s 0x180042060
_o___stdio_common_vsnwprintf_s 0x180042058
_o___stdio_common_vswprintf 0x180042050
_o___stdio_common_vswprintf_s 0x180042048
_o___stdio_common_vswscanf 0x180042040
_o__callnewh 0x180042038
_o__cexit 0x180042030
_o__configure_narrow_argv 0x180042018
_o__crt_atexit 0x180042010
_o__errno 0x180042008
_o__execute_onexit_table 0x180042000
_o__initialize_narrow_environment 0x180041f30
_o__initialize_onexit_table 0x180041f38
_o__invalid_parameter_noinfo 0x180041f40
_o__purecall 0x180041f48
_o__register_onexit_function 0x180041f50
_o__seh_filter_dll 0x180041f58
_o__ultow_s 0x180041f60
_o__wcsicmp 0x180041f68
_o__wcslwr 0x180041f70
_o__wcsnicmp 0x180041f78
_o__wcsupr 0x180041f80
_o__wfopen_s 0x1800420a0
_o_bsearch 0x180041f90
_o_fclose 0x180041f98
_o_fflush 0x180041fa0
_o_free 0x180041fa8
_o_iswspace 0x180041fb0
_o_malloc 0x180041fb8
_o_strcpy_s 0x180041fc0
_o_towupper 0x180041fc8
_o_wcscat_s 0x180041fd0
_o_wcscpy_s 0x180041fd8
_o_wcsncpy_s 0x180041fe0
_o_wcstol 0x180041fe8
_o_wcstoul 0x180041ff0
memcmp 0x1800420b0
memcpy 0x1800420b8
memmove 0x180041f88
wcschr 0x180042028
wcsrchr 0x180042020
wcsstr 0x180041ff8
_initterm 0x1800420c8
_initterm_e 0x1800420d0
memset 0x180042100
strcmp 0x1800420f8
strncmp 0x1800420e8
wcscmp 0x1800420e0
wcsncmp 0x180042110
wcsncpy 0x180042108
wcsnlen 0x1800420f0
EventRegister 0x180042130
EventUnregister 0x180042128
EventWriteTransfer 0x180042120
AdjustTokenPrivileges 0x180042178
DuplicateTokenEx 0x180042148
GetSecurityDescriptorControl 0x180042158
GetSecurityDescriptorDacl 0x180042150
GetSecurityDescriptorGroup 0x180042140
GetSecurityDescriptorOwner 0x180042170
GetSecurityDescriptorSacl 0x180042160
GetTokenInformation 0x180042168
LookupPrivilegeValueW 0x180042188
SetNamedSecurityInfoW 0x180042198
ConvertSidToStringSidW 0x1800421b0
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1800421a8
BCryptCloseAlgorithmProvider 0x1800421e8
BCryptCreateHash 0x1800421d0
BCryptDestroyHash 0x1800421e0
BCryptFinishHash 0x1800421c8
BCryptHash 0x1800421c0
BCryptHashData 0x1800421d8
BCryptOpenAlgorithmProvider 0x1800421f0
CertCloseStore 0x1800419b8
CertComparePublicKeyInfo 0x180041998
CertCreateCertificateContext 0x180041968
CertEnumCertificatesInStore 0x180041980
CertFindCertificateInStore 0x180041990
CertFreeCertificateContext 0x180041988
CertGetCertificateContextProperty 0x1800419a0
CertGetNameStringW 0x1800419b0
CryptMsgClose 0x1800419a8
CryptMsgGetParam 0x180041970
CryptQueryObject 0x180041978
CheckSumMappedFile 0x180042200
LdrAccessResource 0x180042288
LdrFindResource_U 0x180042280
LdrGetDllHandle 0x1800423f8
LdrGetProcedureAddress 0x1800423f0
NtAdjustPrivilegesToken 0x180042450
NtClose 0x180042230
NtCreateEvent 0x180042238
NtDeviceIoControlFile 0x180042220
NtEnumerateBootEntries 0x180042380
NtOpenDirectoryObject 0x180042370
NtOpenFile 0x180042258
NtOpenKey 0x180042310
NtOpenProcess 0x180042298
NtOpenProcessTokenEx 0x180042458
NtOpenSymbolicLinkObject 0x180042300
NtOpenThreadTokenEx 0x180042460
NtQueryBootEntryOrder 0x180042358
NtQueryBootOptions 0x180042360
NtQueryDirectoryObject 0x180042378
NtQueryInformationFile 0x180042240
NtQueryInformationProcess 0x180042338
NtQueryInformationThread 0x180042248
NtQuerySymbolicLinkObject 0x180042318
NtQuerySystemEnvironmentValueEx 0x180042488
NtQuerySystemInformation 0x1800424a0
NtQueryValueKey 0x180042350
NtReadFile 0x180042210
NtSetInformationFile 0x180042268
NtSetInformationThread 0x180042218
NtSetSystemEnvironmentValueEx 0x180042490
NtTranslateFilePath 0x180042368
NtWaitForSingleObject 0x180042250
NtWriteFile 0x180042470
RtlAddAccessAllowedAceEx 0x180042320
RtlAllocateAndInitializeSid 0x180042328
RtlAllocateHeap 0x180042290
RtlAppendUnicodeToString 0x1800422e0
RtlCreateAcl 0x180042340
RtlCreateSecurityDescriptor 0x180042348
RtlFreeHeap 0x180042278
RtlFreeSid 0x1800424a8
RtlFreeUnicodeString 0x180042260
RtlGUIDFromString 0x1800422d8
RtlImageNtHeader 0x180042228
RtlImageNtHeaderEx 0x180042478
RtlImpersonateSelf 0x180042468
RtlInitAnsiString 0x180042408
RtlInitUnicodeString 0x180042498
RtlLengthSecurityDescriptor 0x1800422f0
RtlLengthSid 0x180042330
RtlNtStatusToDosError 0x180042480
RtlSetDaclSecurityDescriptor 0x180042308
RtlSetOwnerSecurityDescriptor 0x1800422f8
RtlStringFromGUID 0x180042270
ZwAllocateUuids 0x180042448
ZwClose 0x1800422c8
ZwCreateFile 0x180042388
ZwCreateKey 0x180042390
ZwDeleteKey 0x1800423b8
ZwDeleteValueKey 0x1800423a8
ZwDeviceIoControlFile 0x180042428
ZwEnumerateKey 0x1800423c0
ZwFlushKey 0x1800423a0
ZwLoadKey 0x180042398
ZwOpenDirectoryObject 0x180042440
ZwOpenFile 0x1800422b8
ZwOpenKey 0x1800423e8
ZwOpenMutant 0x1800422c0
ZwOpenProcess 0x180042418
ZwOpenSymbolicLinkObject 0x180042438
ZwQueryAttributesFile 0x1800422e8
ZwQueryDirectoryObject 0x180042430
ZwQueryInformationFile 0x180042410
ZwQueryInformationProcess 0x180042400
ZwQueryKey 0x1800422a8
ZwQuerySymbolicLinkObject 0x180042420
ZwQuerySystemInformation 0x1800422d0
ZwQueryValueKey 0x1800423c8
ZwReleaseMutant 0x1800422b0
ZwSaveKey 0x1800423b0
ZwSetSecurityObject 0x1800423d0
ZwSetValueKey 0x1800423e0
ZwUnloadKey 0x1800423d8
ZwWaitForSingleObject 0x1800422a0
SafeArrayGetElement 0x1800419c8
SafeArrayGetLBound 0x1800419d0
SafeArrayGetUBound 0x1800419f0
SysAllocString 0x1800419d8
SysFreeString 0x180041a00
SysStringLen 0x1800419e0
VariantClear 0x1800419e8
VariantInit 0x1800419f8
UuidCreate 0x180041a10
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x180041a20
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180041a48
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x180041a40
ConvertNtStatusToHResult 0x180041a28
RtlFreeLBlob 0x180041a38
RtlReportErrorOrigination 0x180041a30
WinVerifyTrust 0x180041a58
WTHelperGetProvSignerFromChain 0x180041a68
WTHelperProvDataFromStateData 0x180041a60