securebootai.dll

Description: CSI Secure Boot Servicing Plugin

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3684

Architecture: 32-bit

Operating System: Windows NT

SHA256: d086a61d13c49146160b3de069ef07fc

File Size: 80.4 KB

Uploaded At: Dec. 1, 2025, 8:40 a.m.

Views: 11

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0xa360)
  • DllCsiGetHandler (Ordinal: 2, Address: 0xa380)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1001104c)
  • IsDebuggerPresent (Address: 0x10011048)
  • OutputDebugStringW (Address: 0x10011044)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x10011054)
  • SetLastError (Address: 0x10011060)
  • SetUnhandledExceptionFilter (Address: 0x10011058)
  • UnhandledExceptionFilter (Address: 0x1001105c)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x10011068)
  • FindClose (Address: 0x1001106c)
  • FindFirstFileW (Address: 0x10011078)
  • FindNextFileW (Address: 0x10011070)
  • GetFileSizeEx (Address: 0x1001107c)
  • ReadFile (Address: 0x10011074)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x10011084)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x10011094)
  • HeapAlloc (Address: 0x10011098)
  • HeapDestroy (Address: 0x10011090)
  • HeapFree (Address: 0x1001108c)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • CopyFileW (Address: 0x100110a0)
api-ms-win-core-libraryloader-l1-1-0.dll
  • DisableThreadLibraryCalls (Address: 0x100110c0)
  • FreeLibrary (Address: 0x100110bc)
  • GetModuleFileNameA (Address: 0x100110b0)
  • GetModuleHandleExW (Address: 0x100110ac)
  • GetModuleHandleW (Address: 0x100110b4)
  • GetProcAddress (Address: 0x100110b8)
  • LoadLibraryExW (Address: 0x100110a8)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x100110c8)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x100110d8)
  • GetCurrentProcessId (Address: 0x100110d4)
  • GetCurrentThread (Address: 0x100110e4)
  • GetCurrentThreadId (Address: 0x100110e8)
  • OpenProcessToken (Address: 0x100110e0)
  • OpenThreadToken (Address: 0x100110d0)
  • TerminateProcess (Address: 0x100110dc)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x100110f0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x100110fc)
  • RegCreateKeyExW (Address: 0x1001110c)
  • RegDeleteKeyExW (Address: 0x10011100)
  • RegGetValueW (Address: 0x10011110)
  • RegOpenKeyExW (Address: 0x10011104)
  • RegQueryValueExW (Address: 0x10011108)
  • RegSetValueExW (Address: 0x100110f8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x10011118)
  • AcquireSRWLockShared (Address: 0x10011144)
  • CreateMutexExW (Address: 0x10011154)
  • CreateSemaphoreExW (Address: 0x1001111c)
  • DeleteCriticalSection (Address: 0x10011134)
  • EnterCriticalSection (Address: 0x1001113c)
  • InitializeCriticalSection (Address: 0x10011124)
  • InitializeCriticalSectionEx (Address: 0x10011138)
  • LeaveCriticalSection (Address: 0x10011128)
  • OpenSemaphoreW (Address: 0x1001112c)
  • ReleaseMutex (Address: 0x10011150)
  • ReleaseSemaphore (Address: 0x1001114c)
  • ReleaseSRWLockExclusive (Address: 0x10011120)
  • ReleaseSRWLockShared (Address: 0x10011148)
  • WaitForSingleObject (Address: 0x10011130)
  • WaitForSingleObjectEx (Address: 0x10011140)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1001115c)
  • InitOnceComplete (Address: 0x10011160)
  • Sleep (Address: 0x10011164)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x10011174)
  • GetSystemTimeAsFileTime (Address: 0x10011170)
  • GetSystemWindowsDirectoryW (Address: 0x10011178)
  • GetTickCount (Address: 0x1001116c)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x10011180)
  • CreateThreadpoolTimer (Address: 0x1001118c)
  • SetThreadpoolTimer (Address: 0x10011184)
  • WaitForThreadpoolTimerCallbacks (Address: 0x10011188)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x1001119c)
  • EventUnregister (Address: 0x10011198)
  • EventWriteTransfer (Address: 0x10011194)
api-ms-win-security-base-l1-1-0.dll
  • AdjustTokenPrivileges (Address: 0x100111a4)
api-ms-win-security-lsalookup-l2-1-0.dll
  • LookupPrivilegeValueW (Address: 0x100111ac)
CRYPT32.dll
  • CertCloseStore (Address: 0x10011008)
  • CertCreateCertificateContext (Address: 0x10011000)
  • CertFindCertificateInStore (Address: 0x10011004)
  • CertFreeCertificateContext (Address: 0x10011014)
  • CertGetCertificateContextProperty (Address: 0x1001100c)
  • CryptMsgClose (Address: 0x10011018)
  • CryptMsgGetParam (Address: 0x1001101c)
  • CryptQueryObject (Address: 0x10011010)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x100111b8)
  • __dllonexit (Address: 0x100111d4)
  • _amsg_exit (Address: 0x100111e4)
  • _callnewh (Address: 0x100111ec)
  • _CxxThrowException (Address: 0x10011218)
  • _except_handler4_common (Address: 0x1001120c)
  • _initterm (Address: 0x100111e0)
  • _lock (Address: 0x100111dc)
  • _onexit (Address: 0x100111d0)
  • _purecall (Address: 0x10011200)
  • _unlock (Address: 0x100111d8)
  • _vsnprintf_s (Address: 0x100111f8)
  • _vsnwprintf (Address: 0x100111c0)
  • _wcsicmp (Address: 0x100111b4)
  • _XcptFilter (Address: 0x100111e8)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x10011210)
  • ??0exception@@QAE@XZ (Address: 0x100111c4)
  • ??1exception@@UAE@XZ (Address: 0x100111bc)
  • ??1type_info@@UAE@XZ (Address: 0x100111c8)
  • ?terminate@@YAXXZ (Address: 0x100111cc)
  • free (Address: 0x100111fc)
  • malloc (Address: 0x100111f0)
  • memcmp (Address: 0x10011214)
  • memcpy_s (Address: 0x10011208)
  • memmove_s (Address: 0x10011204)
  • memset (Address: 0x1001121c)
  • wcsstr (Address: 0x100111f4)
ntdll.dll
  • NtQuerySystemInformation (Address: 0x1001122c)
  • NtSetSystemEnvironmentValueEx (Address: 0x10011230)
  • RtlInitUnicodeString (Address: 0x10011228)
  • RtlNtStatusToDosError (Address: 0x10011224)
WCP.dll
  • ?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z (Address: 0x10011030)
  • ?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z (Address: 0x1001102c)
  • ?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z (Address: 0x10011024)
  • ?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z (Address: 0x10011028)
  • ConvertNtStatusToHResult (Address: 0x1001103c)
  • RtlFreeLBlob (Address: 0x10011038)
  • RtlReportErrorOrigination (Address: 0x10011034)