securebootai.dll

Description: CSI Secure Boot Servicing Plugin

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3989

Architecture: 32-bit

Operating System: Windows NT

SHA256: ddba3ea69b363e3504f209e5de9e159a

File Size: 88.9 KB

Uploaded At: Dec. 1, 2025, 8:40 a.m.

Views: 18

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0xc390)
  • DllCsiGetHandler (Ordinal: 2, Address: 0xc3b0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateInstance (Address: 0x1001305c)
  • CoInitializeEx (Address: 0x10013064)
  • CoInitializeSecurity (Address: 0x10013068)
  • CoSetProxyBlanket (Address: 0x10013060)
  • CoUninitialize (Address: 0x10013058)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x10013078)
  • IsDebuggerPresent (Address: 0x10013070)
  • OutputDebugStringW (Address: 0x10013074)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x10013088)
  • SetLastError (Address: 0x10013084)
  • SetUnhandledExceptionFilter (Address: 0x10013080)
  • UnhandledExceptionFilter (Address: 0x1001308c)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x1001309c)
  • FindClose (Address: 0x10013098)
  • FindFirstFileW (Address: 0x100130a8)
  • FindNextFileW (Address: 0x10013094)
  • GetFileSizeEx (Address: 0x100130a0)
  • ReadFile (Address: 0x100130a4)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x100130b0)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x100130c0)
  • HeapAlloc (Address: 0x100130bc)
  • HeapDestroy (Address: 0x100130c4)
  • HeapFree (Address: 0x100130b8)
api-ms-win-core-heap-obsolete-l1-1-0.dll
  • LocalFree (Address: 0x100130cc)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • CopyFileW (Address: 0x100130d4)
api-ms-win-core-libraryloader-l1-1-0.dll
  • DisableThreadLibraryCalls (Address: 0x100130f4)
  • FreeLibrary (Address: 0x100130dc)
  • GetModuleFileNameA (Address: 0x100130e4)
  • GetModuleHandleExW (Address: 0x100130e0)
  • GetModuleHandleW (Address: 0x100130f0)
  • GetProcAddress (Address: 0x100130ec)
  • LoadLibraryExW (Address: 0x100130e8)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x100130fc)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x10013108)
  • GetCurrentProcessId (Address: 0x10013110)
  • GetCurrentThread (Address: 0x10013114)
  • GetCurrentThreadId (Address: 0x10013118)
  • OpenProcessToken (Address: 0x1001310c)
  • OpenThreadToken (Address: 0x10013104)
  • TerminateProcess (Address: 0x1001311c)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x10013124)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x10013138)
  • RegCreateKeyExW (Address: 0x10013130)
  • RegDeleteKeyExW (Address: 0x1001312c)
  • RegGetValueW (Address: 0x10013134)
  • RegOpenKeyExW (Address: 0x10013144)
  • RegQueryValueExW (Address: 0x10013140)
  • RegSetValueExW (Address: 0x1001313c)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
  • StrCmpIW (Address: 0x1001314c)
  • StrStrIW (Address: 0x10013150)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x10013158)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrlenA (Address: 0x10013160)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x10013190)
  • AcquireSRWLockShared (Address: 0x10013198)
  • CreateMutexExW (Address: 0x10013188)
  • CreateSemaphoreExW (Address: 0x10013180)
  • DeleteCriticalSection (Address: 0x10013170)
  • EnterCriticalSection (Address: 0x1001318c)
  • InitializeCriticalSection (Address: 0x10013178)
  • InitializeCriticalSectionEx (Address: 0x10013174)
  • LeaveCriticalSection (Address: 0x10013184)
  • OpenSemaphoreW (Address: 0x10013168)
  • ReleaseMutex (Address: 0x100131a4)
  • ReleaseSemaphore (Address: 0x100131a0)
  • ReleaseSRWLockExclusive (Address: 0x10013194)
  • ReleaseSRWLockShared (Address: 0x1001319c)
  • WaitForSingleObject (Address: 0x1001316c)
  • WaitForSingleObjectEx (Address: 0x1001317c)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x100131b4)
  • InitOnceComplete (Address: 0x100131b0)
  • Sleep (Address: 0x100131ac)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x100131c4)
  • GetSystemInfo (Address: 0x100131c8)
  • GetSystemTimeAsFileTime (Address: 0x100131bc)
  • GetTickCount (Address: 0x100131c0)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x100131d8)
  • CreateThreadpoolTimer (Address: 0x100131d4)
  • SetThreadpoolTimer (Address: 0x100131d0)
  • WaitForThreadpoolTimerCallbacks (Address: 0x100131dc)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x100131ec)
  • EventUnregister (Address: 0x100131e8)
  • EventWriteTransfer (Address: 0x100131e4)
api-ms-win-security-base-l1-1-0.dll
  • AdjustTokenPrivileges (Address: 0x100131f4)
api-ms-win-security-lsalookup-l2-1-0.dll
  • LookupPrivilegeValueW (Address: 0x100131fc)
CRYPT32.dll
  • CertCloseStore (Address: 0x1001300c)
  • CertCreateCertificateContext (Address: 0x1001301c)
  • CertFindCertificateInStore (Address: 0x10013014)
  • CertFreeCertificateContext (Address: 0x10013000)
  • CertGetCertificateContextProperty (Address: 0x10013018)
  • CryptMsgClose (Address: 0x10013004)
  • CryptMsgGetParam (Address: 0x10013010)
  • CryptQueryObject (Address: 0x10013008)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x10013234)
  • __dllonexit (Address: 0x10013218)
  • _amsg_exit (Address: 0x10013240)
  • _callnewh (Address: 0x1001324c)
  • _CxxThrowException (Address: 0x1001326c)
  • _except_handler4_common (Address: 0x10013238)
  • _initterm (Address: 0x10013230)
  • _lock (Address: 0x10013220)
  • _onexit (Address: 0x10013214)
  • _purecall (Address: 0x10013258)
  • _unlock (Address: 0x10013264)
  • _vsnprintf_s (Address: 0x10013208)
  • _vsnwprintf (Address: 0x1001323c)
  • _vsnwprintf_s (Address: 0x1001320c)
  • _wcsicmp (Address: 0x1001322c)
  • _XcptFilter (Address: 0x1001321c)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x10013210)
  • ??0exception@@QAE@XZ (Address: 0x10013248)
  • ??1exception@@UAE@XZ (Address: 0x10013228)
  • ??1type_info@@UAE@XZ (Address: 0x10013244)
  • ?terminate@@YAXXZ (Address: 0x10013224)
  • free (Address: 0x10013254)
  • malloc (Address: 0x10013250)
  • memcmp (Address: 0x10013268)
  • memcpy_s (Address: 0x10013260)
  • memmove_s (Address: 0x1001325c)
  • memset (Address: 0x10013270)
  • wcsstr (Address: 0x10013204)
ntdll.dll
  • NtQuerySystemInformation (Address: 0x10013280)
  • NtSetSystemEnvironmentValueEx (Address: 0x10013284)
  • RtlInitUnicodeString (Address: 0x1001327c)
  • RtlNtStatusToDosError (Address: 0x10013278)
OLEAUT32.dll
  • SysAllocString (Address: 0x10013028)
  • SysFreeString (Address: 0x10013030)
  • VariantClear (Address: 0x1001302c)
  • VariantInit (Address: 0x10013024)
WCP.dll
  • ?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z (Address: 0x10013044)
  • ?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z (Address: 0x10013038)
  • ?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z (Address: 0x1001303c)
  • ?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z (Address: 0x10013040)
  • ConvertNtStatusToHResult (Address: 0x10013050)
  • RtlFreeLBlob (Address: 0x10013048)
  • RtlReportErrorOrigination (Address: 0x1001304c)