securebootai.dll

Description: CSI Secure Boot Servicing Plugin

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.1704

Architecture: 64-bit

Operating System: Windows NT

SHA256: a37a22da94f3e1b7457d4f0fe7eacb02

File Size: 89.9 KB

Uploaded At: Dec. 1, 2025, 8:20 a.m.

Views: 25

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x9430)
  • DllCsiGetHandler (Ordinal: 2, Address: 0x9450)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x18000f2b8)
  • IsDebuggerPresent (Address: 0x18000f2c8)
  • OutputDebugStringW (Address: 0x18000f2c0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18000f2d8)
  • SetLastError (Address: 0x18000f2f0)
  • SetUnhandledExceptionFilter (Address: 0x18000f2e8)
  • UnhandledExceptionFilter (Address: 0x18000f2e0)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x18000f320)
  • FindClose (Address: 0x18000f318)
  • FindFirstFileW (Address: 0x18000f308)
  • FindNextFileW (Address: 0x18000f310)
  • GetFileSizeEx (Address: 0x18000f328)
  • ReadFile (Address: 0x18000f300)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18000f338)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18000f360)
  • HeapAlloc (Address: 0x18000f358)
  • HeapDestroy (Address: 0x18000f348)
  • HeapFree (Address: 0x18000f350)
api-ms-win-core-libraryloader-l1-1-0.dll
  • DisableThreadLibraryCalls (Address: 0x18000f398)
  • FreeLibrary (Address: 0x18000f378)
  • GetModuleFileNameA (Address: 0x18000f390)
  • GetModuleHandleExW (Address: 0x18000f370)
  • GetModuleHandleW (Address: 0x18000f3a0)
  • GetProcAddress (Address: 0x18000f388)
  • LoadLibraryExW (Address: 0x18000f380)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x18000f3b0)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x18000f3e0)
  • GetCurrentProcessId (Address: 0x18000f3f0)
  • GetCurrentThread (Address: 0x18000f3d8)
  • GetCurrentThreadId (Address: 0x18000f3d0)
  • OpenProcessToken (Address: 0x18000f3c0)
  • OpenThreadToken (Address: 0x18000f3c8)
  • TerminateProcess (Address: 0x18000f3e8)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18000f400)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18000f428)
  • RegCreateKeyExW (Address: 0x18000f438)
  • RegGetValueW (Address: 0x18000f418)
  • RegOpenKeyExW (Address: 0x18000f410)
  • RegQueryValueExW (Address: 0x18000f420)
  • RegSetValueExW (Address: 0x18000f430)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x18000f450)
  • RtlLookupFunctionEntry (Address: 0x18000f448)
  • RtlVirtualUnwind (Address: 0x18000f458)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18000f4c8)
  • AcquireSRWLockShared (Address: 0x18000f4e0)
  • CreateMutexExW (Address: 0x18000f4a8)
  • CreateSemaphoreExW (Address: 0x18000f478)
  • DeleteCriticalSection (Address: 0x18000f480)
  • EnterCriticalSection (Address: 0x18000f490)
  • InitializeCriticalSection (Address: 0x18000f468)
  • InitializeCriticalSectionEx (Address: 0x18000f488)
  • LeaveCriticalSection (Address: 0x18000f4a0)
  • OpenSemaphoreW (Address: 0x18000f470)
  • ReleaseMutex (Address: 0x18000f4b8)
  • ReleaseSemaphore (Address: 0x18000f4c0)
  • ReleaseSRWLockExclusive (Address: 0x18000f4d0)
  • ReleaseSRWLockShared (Address: 0x18000f4d8)
  • WaitForSingleObject (Address: 0x18000f4b0)
  • WaitForSingleObjectEx (Address: 0x18000f498)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x18000f4f0)
  • InitOnceComplete (Address: 0x18000f500)
  • Sleep (Address: 0x18000f4f8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x18000f528)
  • GetSystemTimeAsFileTime (Address: 0x18000f510)
  • GetSystemWindowsDirectoryW (Address: 0x18000f520)
  • GetTickCount (Address: 0x18000f518)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x18000f538)
  • CreateThreadpoolTimer (Address: 0x18000f548)
  • SetThreadpoolTimer (Address: 0x18000f540)
  • WaitForThreadpoolTimerCallbacks (Address: 0x18000f550)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x18000f568)
  • EventUnregister (Address: 0x18000f560)
  • EventWriteTransfer (Address: 0x18000f570)
api-ms-win-security-base-l1-1-0.dll
  • AdjustTokenPrivileges (Address: 0x18000f580)
api-ms-win-security-lsalookup-l2-1-0.dll
  • LookupPrivilegeValueW (Address: 0x18000f590)
CRYPT32.dll
  • CertCloseStore (Address: 0x18000f268)
  • CertCreateCertificateContext (Address: 0x18000f238)
  • CertFindCertificateInStore (Address: 0x18000f258)
  • CertFreeCertificateContext (Address: 0x18000f248)
  • CertGetCertificateContextProperty (Address: 0x18000f250)
  • CryptMsgClose (Address: 0x18000f240)
  • CryptMsgGetParam (Address: 0x18000f260)
  • CryptQueryObject (Address: 0x18000f270)
msvcrt.dll
  • __C_specific_handler (Address: 0x18000f608)
  • __CxxFrameHandler3 (Address: 0x18000f638)
  • __dllonexit (Address: 0x18000f650)
  • _amsg_exit (Address: 0x18000f5c8)
  • _callnewh (Address: 0x18000f5e0)
  • _CxxThrowException (Address: 0x18000f660)
  • _initterm (Address: 0x18000f5c0)
  • _lock (Address: 0x18000f5b8)
  • _onexit (Address: 0x18000f5a8)
  • _purecall (Address: 0x18000f628)
  • _unlock (Address: 0x18000f5b0)
  • _vsnprintf_s (Address: 0x18000f5f0)
  • _vsnwprintf (Address: 0x18000f648)
  • _wcsicmp (Address: 0x18000f620)
  • _XcptFilter (Address: 0x18000f5d0)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x18000f600)
  • ??0exception@@QEAA@XZ (Address: 0x18000f610)
  • ??1exception@@UEAA@XZ (Address: 0x18000f618)
  • ??1type_info@@UEAA@XZ (Address: 0x18000f5a0)
  • free (Address: 0x18000f5f8)
  • malloc (Address: 0x18000f5e8)
  • memcmp (Address: 0x18000f658)
  • memcpy_s (Address: 0x18000f640)
  • memmove_s (Address: 0x18000f630)
  • memset (Address: 0x18000f668)
  • wcsstr (Address: 0x18000f5d8)
ntdll.dll
  • NtQuerySystemInformation (Address: 0x18000f688)
  • NtSetSystemEnvironmentValueEx (Address: 0x18000f690)
  • RtlInitUnicodeString (Address: 0x18000f680)
  • RtlNtStatusToDosError (Address: 0x18000f678)
WCP.dll
  • ?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z (Address: 0x18000f298)
  • ?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x18000f280)
  • ?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z (Address: 0x18000f290)
  • ConvertNtStatusToHResult (Address: 0x18000f288)
  • RtlFreeLBlob (Address: 0x18000f2a8)
  • RtlReportErrorOrigination (Address: 0x18000f2a0)