securebootai.dll

Description: CSI Secure Boot Servicing Plugin

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3989

Architecture: 64-bit

Operating System: Windows NT

SHA256: cf134514d32610badb2a6564dcc053eb

File Size: 112.5 KB

Uploaded At: Dec. 1, 2025, 8:20 a.m.

Views: 27

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x9e30)
  • DllCsiGetHandler (Ordinal: 2, Address: 0x9e50)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateInstance (Address: 0x180012550)
  • CoInitializeEx (Address: 0x180012568)
  • CoInitializeSecurity (Address: 0x180012560)
  • CoSetProxyBlanket (Address: 0x180012558)
  • CoUninitialize (Address: 0x180012548)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x180012578)
  • IsDebuggerPresent (Address: 0x180012580)
  • OutputDebugStringW (Address: 0x180012588)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800125b0)
  • SetLastError (Address: 0x180012598)
  • SetUnhandledExceptionFilter (Address: 0x1800125a0)
  • UnhandledExceptionFilter (Address: 0x1800125a8)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x1800125d0)
  • FindClose (Address: 0x1800125c8)
  • FindFirstFileW (Address: 0x1800125c0)
  • FindNextFileW (Address: 0x1800125e0)
  • GetFileSizeEx (Address: 0x1800125e8)
  • ReadFile (Address: 0x1800125d8)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800125f8)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180012610)
  • HeapAlloc (Address: 0x180012608)
  • HeapDestroy (Address: 0x180012620)
  • HeapFree (Address: 0x180012618)
api-ms-win-core-heap-obsolete-l1-1-0.dll
  • LocalFree (Address: 0x180012630)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • CopyFileW (Address: 0x180012640)
api-ms-win-core-libraryloader-l1-1-0.dll
  • DisableThreadLibraryCalls (Address: 0x180012670)
  • FreeLibrary (Address: 0x180012650)
  • GetModuleFileNameA (Address: 0x180012660)
  • GetModuleHandleExW (Address: 0x180012680)
  • GetModuleHandleW (Address: 0x180012658)
  • GetProcAddress (Address: 0x180012678)
  • LoadLibraryExW (Address: 0x180012668)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x180012690)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1800126b8)
  • GetCurrentProcessId (Address: 0x1800126a8)
  • GetCurrentThread (Address: 0x1800126c8)
  • GetCurrentThreadId (Address: 0x1800126c0)
  • OpenProcessToken (Address: 0x1800126d0)
  • OpenThreadToken (Address: 0x1800126a0)
  • TerminateProcess (Address: 0x1800126b0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800126e0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x180012720)
  • RegCreateKeyExW (Address: 0x1800126f8)
  • RegDeleteKeyExW (Address: 0x1800126f0)
  • RegGetValueW (Address: 0x180012718)
  • RegOpenKeyExW (Address: 0x180012700)
  • RegQueryValueExW (Address: 0x180012708)
  • RegSetValueExW (Address: 0x180012710)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x180012730)
  • RtlLookupFunctionEntry (Address: 0x180012738)
  • RtlVirtualUnwind (Address: 0x180012740)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
  • StrCmpIW (Address: 0x180012750)
  • StrStrIW (Address: 0x180012758)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x180012768)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrlenA (Address: 0x180012778)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180012790)
  • AcquireSRWLockShared (Address: 0x180012800)
  • CreateMutexExW (Address: 0x1800127b0)
  • CreateSemaphoreExW (Address: 0x1800127a0)
  • DeleteCriticalSection (Address: 0x1800127e0)
  • EnterCriticalSection (Address: 0x1800127f8)
  • InitializeCriticalSection (Address: 0x1800127e8)
  • InitializeCriticalSectionEx (Address: 0x1800127c0)
  • LeaveCriticalSection (Address: 0x1800127a8)
  • OpenSemaphoreW (Address: 0x1800127d0)
  • ReleaseMutex (Address: 0x1800127c8)
  • ReleaseSemaphore (Address: 0x1800127b8)
  • ReleaseSRWLockExclusive (Address: 0x180012798)
  • ReleaseSRWLockShared (Address: 0x1800127d8)
  • WaitForSingleObject (Address: 0x180012788)
  • WaitForSingleObjectEx (Address: 0x1800127f0)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x180012810)
  • InitOnceComplete (Address: 0x180012818)
  • Sleep (Address: 0x180012820)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x180012830)
  • GetSystemInfo (Address: 0x180012848)
  • GetSystemTimeAsFileTime (Address: 0x180012840)
  • GetTickCount (Address: 0x180012838)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x180012858)
  • CreateThreadpoolTimer (Address: 0x180012868)
  • SetThreadpoolTimer (Address: 0x180012870)
  • WaitForThreadpoolTimerCallbacks (Address: 0x180012860)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x180012888)
  • EventUnregister (Address: 0x180012880)
  • EventWriteTransfer (Address: 0x180012890)
api-ms-win-security-base-l1-1-0.dll
  • AdjustTokenPrivileges (Address: 0x1800128a0)
api-ms-win-security-lsalookup-l2-1-0.dll
  • LookupPrivilegeValueW (Address: 0x1800128b0)
CRYPT32.dll
  • CertCloseStore (Address: 0x1800124b0)
  • CertCreateCertificateContext (Address: 0x1800124d0)
  • CertFindCertificateInStore (Address: 0x1800124c0)
  • CertFreeCertificateContext (Address: 0x1800124a0)
  • CertGetCertificateContextProperty (Address: 0x1800124c8)
  • CryptMsgClose (Address: 0x180012498)
  • CryptMsgGetParam (Address: 0x1800124b8)
  • CryptQueryObject (Address: 0x1800124a8)
msvcrt.dll
  • __C_specific_handler (Address: 0x180012960)
  • __CxxFrameHandler3 (Address: 0x1800128f0)
  • __dllonexit (Address: 0x180012920)
  • _amsg_exit (Address: 0x180012908)
  • _callnewh (Address: 0x1800128f8)
  • _CxxThrowException (Address: 0x180012990)
  • _initterm (Address: 0x180012910)
  • _lock (Address: 0x180012918)
  • _onexit (Address: 0x180012928)
  • _purecall (Address: 0x180012968)
  • _unlock (Address: 0x180012980)
  • _vsnprintf_s (Address: 0x1800128c8)
  • _vsnwprintf (Address: 0x180012940)
  • _vsnwprintf_s (Address: 0x1800128d0)
  • _wcsicmp (Address: 0x180012938)
  • _XcptFilter (Address: 0x180012900)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x1800128d8)
  • ??0exception@@QEAA@XZ (Address: 0x1800128e0)
  • ??1exception@@UEAA@XZ (Address: 0x1800128e8)
  • ??1type_info@@UEAA@XZ (Address: 0x180012948)
  • ?terminate@@YAXXZ (Address: 0x180012930)
  • free (Address: 0x180012958)
  • malloc (Address: 0x180012950)
  • memcmp (Address: 0x180012988)
  • memcpy_s (Address: 0x180012978)
  • memmove_s (Address: 0x180012970)
  • memset (Address: 0x180012998)
  • wcsstr (Address: 0x1800128c0)
ntdll.dll
  • NtQuerySystemInformation (Address: 0x1800129b8)
  • NtSetSystemEnvironmentValueEx (Address: 0x1800129c0)
  • RtlInitUnicodeString (Address: 0x1800129b0)
  • RtlNtStatusToDosError (Address: 0x1800129a8)
OLEAUT32.dll
  • SysAllocString (Address: 0x1800124e8)
  • SysFreeString (Address: 0x1800124f8)
  • VariantClear (Address: 0x1800124f0)
  • VariantInit (Address: 0x1800124e0)
WCP.dll
  • ?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z (Address: 0x180012538)
  • ?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x180012528)
  • ?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x180012530)
  • ?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z (Address: 0x180012508)
  • ConvertNtStatusToHResult (Address: 0x180012520)
  • RtlFreeLBlob (Address: 0x180012510)
  • RtlReportErrorOrigination (Address: 0x180012518)