securebootai.dll
Description: CSI Secure Boot Servicing Plugin
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.4351
Architecture: 64-bit
Operating System: Windows NT
SHA256: 9337e1b55ab63f42836c9e7ed78afd30
File Size: 349.9 KB
Uploaded At: Dec. 1, 2025, 8:20 a.m.
Views: 25
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0xa090)
- DllCsiGetHandler (Ordinal: 2, Address: 0xa0b0)
Imported DLLs & Functions
api-ms-win-core-com-l1-1-0.dll
- CoCreateInstance (Address: 0x180038200)
- CoInitializeEx (Address: 0x1800381f8)
- CoInitializeSecurity (Address: 0x180038208)
- CoSetProxyBlanket (Address: 0x180038210)
- CoUninitialize (Address: 0x1800381f0)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x180038220)
- IsDebuggerPresent (Address: 0x180038228)
- OutputDebugStringW (Address: 0x180038230)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x180038258)
- SetLastError (Address: 0x180038248)
- SetUnhandledExceptionFilter (Address: 0x180038240)
- UnhandledExceptionFilter (Address: 0x180038250)
api-ms-win-core-file-l1-1-0.dll
- CreateDirectoryW (Address: 0x1800382d0)
- CreateFileW (Address: 0x1800382d8)
- DeleteFileW (Address: 0x1800382c0)
- FindClose (Address: 0x1800382f0)
- FindFirstFileW (Address: 0x180038298)
- FindNextFileW (Address: 0x1800382a8)
- FlushFileBuffers (Address: 0x1800382e8)
- GetFileAttributesW (Address: 0x180038290)
- GetFileInformationByHandle (Address: 0x1800382b0)
- GetFileSizeEx (Address: 0x1800382a0)
- GetFullPathNameW (Address: 0x1800382c8)
- GetVolumeInformationW (Address: 0x180038268)
- GetVolumePathNameW (Address: 0x180038288)
- QueryDosDeviceW (Address: 0x180038270)
- ReadFile (Address: 0x180038280)
- SetFileAttributesW (Address: 0x1800382e0)
- SetFileInformationByHandle (Address: 0x1800382b8)
- WriteFile (Address: 0x180038278)
api-ms-win-core-file-l1-2-0.dll
- GetVolumeNameForVolumeMountPointW (Address: 0x180038300)
api-ms-win-core-file-l2-1-0.dll
- CopyFileExW (Address: 0x180038310)
- GetFileInformationByHandleEx (Address: 0x180038318)
- MoveFileExW (Address: 0x180038320)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x180038330)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x180038348)
- HeapAlloc (Address: 0x180038340)
- HeapDestroy (Address: 0x180038358)
- HeapFree (Address: 0x180038350)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- LocalAlloc (Address: 0x180038368)
- LocalFree (Address: 0x180038370)
api-ms-win-core-io-l1-1-0.dll
- DeviceIoControl (Address: 0x180038380)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- CopyFileW (Address: 0x180038398)
- LoadLibraryW (Address: 0x180038390)
api-ms-win-core-libraryloader-l1-1-0.dll
- DisableThreadLibraryCalls (Address: 0x1800383e8)
- FindResourceExW (Address: 0x1800383b8)
- FreeLibrary (Address: 0x1800383d8)
- GetModuleFileNameA (Address: 0x1800383e0)
- GetModuleHandleExW (Address: 0x1800383c8)
- GetModuleHandleW (Address: 0x1800383b0)
- GetProcAddress (Address: 0x1800383a8)
- LoadLibraryExW (Address: 0x1800383d0)
- LoadResource (Address: 0x1800383c0)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x180038400)
- GetLocaleInfoW (Address: 0x1800383f8)
api-ms-win-core-localization-obsolete-l1-2-0.dll
- GetSystemDefaultUILanguage (Address: 0x180038418)
- GetUserDefaultUILanguage (Address: 0x180038410)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x180038430)
- MapViewOfFile (Address: 0x180038438)
- UnmapViewOfFile (Address: 0x180038428)
api-ms-win-core-privateprofile-l1-1-0.dll
- GetPrivateProfileSectionW (Address: 0x180038448)
api-ms-win-core-processenvironment-l1-1-0.dll
- SearchPathW (Address: 0x180038458)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x180038488)
- GetCurrentProcessId (Address: 0x180038478)
- GetCurrentThread (Address: 0x180038480)
- GetCurrentThreadId (Address: 0x180038498)
- OpenProcessToken (Address: 0x180038468)
- OpenThreadToken (Address: 0x1800384a0)
- SetThreadToken (Address: 0x180038470)
- TerminateProcess (Address: 0x180038490)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1800384b0)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1800384d8)
- RegCreateKeyExW (Address: 0x1800384c0)
- RegDeleteKeyExW (Address: 0x1800384e0)
- RegGetValueW (Address: 0x1800384e8)
- RegOpenKeyExW (Address: 0x1800384f0)
- RegQueryValueExW (Address: 0x1800384c8)
- RegSetValueExW (Address: 0x1800384d0)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x180038510)
- RtlCompareMemory (Address: 0x180038518)
- RtlLookupFunctionEntry (Address: 0x180038500)
- RtlVirtualUnwind (Address: 0x180038508)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathRemoveBackslashW (Address: 0x180038528)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
- StrCmpIW (Address: 0x180038538)
- StrStrIW (Address: 0x180038540)
api-ms-win-core-string-l1-1-0.dll
- MultiByteToWideChar (Address: 0x180038550)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrlenA (Address: 0x180038560)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x1800385a8)
- AcquireSRWLockShared (Address: 0x180038598)
- CreateMutexExW (Address: 0x1800385e8)
- CreateSemaphoreExW (Address: 0x1800385c0)
- DeleteCriticalSection (Address: 0x180038580)
- EnterCriticalSection (Address: 0x1800385b0)
- InitializeCriticalSection (Address: 0x1800385c8)
- InitializeCriticalSectionEx (Address: 0x180038578)
- LeaveCriticalSection (Address: 0x1800385b8)
- OpenSemaphoreW (Address: 0x1800385d0)
- ReleaseMutex (Address: 0x180038570)
- ReleaseSemaphore (Address: 0x1800385e0)
- ReleaseSRWLockExclusive (Address: 0x1800385a0)
- ReleaseSRWLockShared (Address: 0x180038590)
- WaitForSingleObject (Address: 0x180038588)
- WaitForSingleObjectEx (Address: 0x1800385d8)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x180038608)
- InitOnceComplete (Address: 0x180038600)
- Sleep (Address: 0x1800385f8)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x180038638)
- GetSystemInfo (Address: 0x180038628)
- GetSystemTimeAsFileTime (Address: 0x180038618)
- GetTickCount (Address: 0x180038640)
- GetVersionExW (Address: 0x180038630)
- GetWindowsDirectoryW (Address: 0x180038620)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x180038660)
- CreateThreadpoolTimer (Address: 0x180038658)
- SetThreadpoolTimer (Address: 0x180038650)
- WaitForThreadpoolTimerCallbacks (Address: 0x180038668)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x180038680)
- EventUnregister (Address: 0x180038678)
- EventWriteTransfer (Address: 0x180038688)
api-ms-win-security-base-l1-1-0.dll
- AdjustTokenPrivileges (Address: 0x1800386b8)
- DuplicateTokenEx (Address: 0x1800386c8)
- GetSecurityDescriptorControl (Address: 0x180038698)
- GetSecurityDescriptorDacl (Address: 0x1800386a8)
- GetSecurityDescriptorGroup (Address: 0x1800386b0)
- GetSecurityDescriptorOwner (Address: 0x1800386c0)
- GetSecurityDescriptorSacl (Address: 0x1800386a0)
- GetTokenInformation (Address: 0x1800386d0)
api-ms-win-security-lsalookup-l2-1-0.dll
- LookupPrivilegeValueW (Address: 0x1800386e0)
api-ms-win-security-provider-l1-1-0.dll
- SetNamedSecurityInfoW (Address: 0x1800386f0)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x180038700)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180038708)
bcrypt.dll
- BCryptCloseAlgorithmProvider (Address: 0x180038738)
- BCryptCreateHash (Address: 0x180038718)
- BCryptDestroyHash (Address: 0x180038730)
- BCryptFinishHash (Address: 0x180038720)
- BCryptHash (Address: 0x180038748)
- BCryptHashData (Address: 0x180038740)
- BCryptOpenAlgorithmProvider (Address: 0x180038728)
CRYPT32.dll
- CertCloseStore (Address: 0x180038128)
- CertCreateCertificateContext (Address: 0x180038130)
- CertFindCertificateInStore (Address: 0x180038118)
- CertFreeCertificateContext (Address: 0x180038108)
- CertGetCertificateContextProperty (Address: 0x180038110)
- CertGetNameStringW (Address: 0x180038140)
- CryptMsgClose (Address: 0x180038138)
- CryptMsgGetParam (Address: 0x180038120)
- CryptQueryObject (Address: 0x180038148)
imagehlp.dll
- CheckSumMappedFile (Address: 0x180038758)
msvcrt.dll
- __C_specific_handler (Address: 0x180038880)
- __CxxFrameHandler3 (Address: 0x1800387c8)
- __dllonexit (Address: 0x180038838)
- __iob_func (Address: 0x180038900)
- _amsg_exit (Address: 0x180038850)
- _callnewh (Address: 0x1800387f0)
- _CxxThrowException (Address: 0x1800388c0)
- _initterm (Address: 0x180038860)
- _lock (Address: 0x180038848)
- _onexit (Address: 0x1800387d8)
- _purecall (Address: 0x180038888)
- _snwscanf_s (Address: 0x1800388e0)
- _ultow_s (Address: 0x1800388f0)
- _unlock (Address: 0x180038828)
- _vsnprintf_s (Address: 0x180038798)
- _vsnwprintf (Address: 0x180038840)
- _vsnwprintf_s (Address: 0x1800387a0)
- _wcsicmp (Address: 0x1800387c0)
- _wcslwr (Address: 0x1800388d8)
- _wcsnicmp (Address: 0x180038768)
- _wcsupr (Address: 0x1800387e8)
- _wfopen_s (Address: 0x180038868)
- _XcptFilter (Address: 0x180038830)
- ??0exception@@QEAA@AEBV0@@Z (Address: 0x1800387a8)
- ??0exception@@QEAA@XZ (Address: 0x1800387b0)
- ??1exception@@UEAA@XZ (Address: 0x1800387b8)
- ??1type_info@@UEAA@XZ (Address: 0x180038820)
- ?terminate@@YAXXZ (Address: 0x1800388a0)
- bsearch (Address: 0x180038818)
- fclose (Address: 0x180038778)
- fflush (Address: 0x180038800)
- free (Address: 0x180038878)
- fwprintf (Address: 0x1800387e0)
- malloc (Address: 0x180038870)
- memcmp (Address: 0x1800388b8)
- memcpy (Address: 0x1800388b0)
- memcpy_s (Address: 0x180038898)
- memmove (Address: 0x1800388a8)
- memmove_s (Address: 0x180038890)
- memset (Address: 0x1800387f8)
- strcpy_s (Address: 0x1800388e8)
- strncmp (Address: 0x1800388c8)
- swprintf_s (Address: 0x180038808)
- wcscat_s (Address: 0x180038770)
- wcschr (Address: 0x180038810)
- wcscmp (Address: 0x180038908)
- wcscpy_s (Address: 0x180038858)
- wcsncmp (Address: 0x1800387d0)
- wcsncpy_s (Address: 0x180038780)
- wcsnlen (Address: 0x1800388d0)
- wcsrchr (Address: 0x180038788)
- wcsstr (Address: 0x180038790)
- wcstoul (Address: 0x1800388f8)
ntdll.dll
- LdrAccessResource (Address: 0x180038978)
- LdrFindResource_U (Address: 0x180038970)
- LdrGetDllHandle (Address: 0x180038a90)
- LdrGetProcedureAddress (Address: 0x180038a88)
- NtAdjustPrivilegesToken (Address: 0x180038ae8)
- NtClose (Address: 0x180038b70)
- NtCreateEvent (Address: 0x180038928)
- NtDeviceIoControlFile (Address: 0x180038918)
- NtEnumerateBootEntries (Address: 0x180038b50)
- NtOpenDirectoryObject (Address: 0x180038b40)
- NtOpenFile (Address: 0x180038948)
- NtOpenKey (Address: 0x180038b10)
- NtOpenProcess (Address: 0x180038b60)
- NtOpenProcessTokenEx (Address: 0x180038af0)
- NtOpenSymbolicLinkObject (Address: 0x180038b08)
- NtOpenThreadTokenEx (Address: 0x180038af8)
- NtQueryBootEntryOrder (Address: 0x180038b28)
- NtQueryBootOptions (Address: 0x180038b30)
- NtQueryDirectoryObject (Address: 0x180038b48)
- NtQueryInformationFile (Address: 0x180038930)
- NtQueryInformationProcess (Address: 0x180038b68)
- NtQueryInformationThread (Address: 0x180038938)
- NtQuerySymbolicLinkObject (Address: 0x180038b18)
- NtQuerySystemEnvironmentValueEx (Address: 0x180038b88)
- NtQuerySystemInformation (Address: 0x180038ba0)
- NtQueryValueKey (Address: 0x180038b20)
- NtReadFile (Address: 0x180038ba8)
- NtSetInformationFile (Address: 0x180038958)
- NtSetInformationThread (Address: 0x180038a40)
- NtSetSystemEnvironmentValueEx (Address: 0x180038b90)
- NtTranslateFilePath (Address: 0x180038b38)
- NtWaitForSingleObject (Address: 0x180038940)
- NtWriteFile (Address: 0x180038b78)
- RtlAddAccessAllowedAceEx (Address: 0x180038a08)
- RtlAllocateAndInitializeSid (Address: 0x180038a10)
- RtlAllocateHeap (Address: 0x180038980)
- RtlAppendUnicodeToString (Address: 0x1800389c8)
- RtlCreateAcl (Address: 0x180038a58)
- RtlCreateSecurityDescriptor (Address: 0x180038a70)
- RtlFreeHeap (Address: 0x180038968)
- RtlFreeSid (Address: 0x180038a38)
- RtlFreeUnicodeString (Address: 0x180038950)
- RtlGUIDFromString (Address: 0x1800389c0)
- RtlImageNtHeader (Address: 0x180038920)
- RtlImpersonateSelf (Address: 0x180038b00)
- RtlInitAnsiString (Address: 0x180038aa0)
- RtlInitUnicodeString (Address: 0x180038b98)
- RtlLengthSecurityDescriptor (Address: 0x1800389d8)
- RtlLengthSid (Address: 0x180038a18)
- RtlNtStatusToDosError (Address: 0x180038b80)
- RtlSetDaclSecurityDescriptor (Address: 0x1800389e8)
- RtlSetOwnerSecurityDescriptor (Address: 0x1800389e0)
- RtlStringFromGUID (Address: 0x180038960)
- ZwAllocateUuids (Address: 0x180038ae0)
- ZwClose (Address: 0x1800389b0)
- ZwCreateFile (Address: 0x1800389f0)
- ZwCreateKey (Address: 0x1800389f8)
- ZwDeleteKey (Address: 0x180038b58)
- ZwDeleteValueKey (Address: 0x180038a28)
- ZwDeviceIoControlFile (Address: 0x180038ac0)
- ZwEnumerateKey (Address: 0x180038a48)
- ZwFlushKey (Address: 0x180038a20)
- ZwLoadKey (Address: 0x180038a00)
- ZwOpenDirectoryObject (Address: 0x180038ad8)
- ZwOpenFile (Address: 0x1800389a0)
- ZwOpenKey (Address: 0x180038a80)
- ZwOpenMutant (Address: 0x1800389a8)
- ZwOpenProcess (Address: 0x180038ab0)
- ZwOpenSymbolicLinkObject (Address: 0x180038ad0)
- ZwQueryAttributesFile (Address: 0x1800389d0)
- ZwQueryDirectoryObject (Address: 0x180038ac8)
- ZwQueryInformationFile (Address: 0x180038aa8)
- ZwQueryInformationProcess (Address: 0x180038a98)
- ZwQueryKey (Address: 0x180038990)
- ZwQuerySymbolicLinkObject (Address: 0x180038ab8)
- ZwQuerySystemInformation (Address: 0x1800389b8)
- ZwQueryValueKey (Address: 0x180038a50)
- ZwReleaseMutant (Address: 0x180038998)
- ZwSaveKey (Address: 0x180038a30)
- ZwSetSecurityObject (Address: 0x180038a60)
- ZwSetValueKey (Address: 0x180038a78)
- ZwUnloadKey (Address: 0x180038a68)
- ZwWaitForSingleObject (Address: 0x180038988)
OLEAUT32.dll
- SysAllocString (Address: 0x180038160)
- SysFreeString (Address: 0x180038170)
- VariantClear (Address: 0x180038168)
- VariantInit (Address: 0x180038158)
RPCRT4.dll
- UuidCreate (Address: 0x180038180)
WCP.dll
- ?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z (Address: 0x1800381c0)
- ?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x180038198)
- ?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x180038190)
- ?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z (Address: 0x1800381b0)
- ConvertNtStatusToHResult (Address: 0x1800381a0)
- RtlFreeLBlob (Address: 0x1800381b8)
- RtlReportErrorOrigination (Address: 0x1800381a8)
WINTRUST.dll
- WinVerifyTrust (Address: 0x1800381e0)
- WTHelperGetProvSignerFromChain (Address: 0x1800381d0)
- WTHelperProvDataFromStateData (Address: 0x1800381d8)