securebootai.dll
Description: CSI Secure Boot Servicing Plugin
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5363
Architecture: 64-bit
Operating System: Windows NT
SHA256: 2bcd5b0a62f12536b338c62cb8637389
File Size: 366.0 KB
Uploaded At: Dec. 1, 2025, 8:20 a.m.
Views: 34
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0xa1d0)
- DllCsiGetHandler (Ordinal: 2, Address: 0xa1f0)
Imported DLLs & Functions
api-ms-win-core-com-l1-1-0.dll
- CoCreateInstance (Address: 0x18003a2d8)
- CoInitializeEx (Address: 0x18003a2e8)
- CoInitializeSecurity (Address: 0x18003a2d0)
- CoSetProxyBlanket (Address: 0x18003a2e0)
- CoUninitialize (Address: 0x18003a2f0)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x18003a300)
- IsDebuggerPresent (Address: 0x18003a310)
- OutputDebugStringW (Address: 0x18003a308)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x18003a320)
- SetLastError (Address: 0x18003a328)
- SetUnhandledExceptionFilter (Address: 0x18003a338)
- UnhandledExceptionFilter (Address: 0x18003a330)
api-ms-win-core-file-l1-1-0.dll
- CreateDirectoryW (Address: 0x18003a390)
- CreateFileW (Address: 0x18003a348)
- DeleteFileW (Address: 0x18003a3b8)
- FindClose (Address: 0x18003a360)
- FindFirstFileW (Address: 0x18003a3a0)
- FindNextFileW (Address: 0x18003a380)
- FlushFileBuffers (Address: 0x18003a350)
- GetFileAttributesW (Address: 0x18003a3c8)
- GetFileInformationByHandle (Address: 0x18003a3a8)
- GetFileSizeEx (Address: 0x18003a3d0)
- GetFullPathNameW (Address: 0x18003a368)
- GetVolumeInformationW (Address: 0x18003a398)
- GetVolumePathNameW (Address: 0x18003a378)
- QueryDosDeviceW (Address: 0x18003a358)
- ReadFile (Address: 0x18003a3c0)
- SetFileAttributesW (Address: 0x18003a388)
- SetFileInformationByHandle (Address: 0x18003a3b0)
- WriteFile (Address: 0x18003a370)
api-ms-win-core-file-l1-2-0.dll
- GetVolumeNameForVolumeMountPointW (Address: 0x18003a3e0)
api-ms-win-core-file-l2-1-0.dll
- CopyFileExW (Address: 0x18003a400)
- GetFileInformationByHandleEx (Address: 0x18003a3f0)
- MoveFileExW (Address: 0x18003a3f8)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x18003a410)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x18003a428)
- HeapAlloc (Address: 0x18003a420)
- HeapDestroy (Address: 0x18003a438)
- HeapFree (Address: 0x18003a430)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- LocalAlloc (Address: 0x18003a448)
- LocalFree (Address: 0x18003a450)
api-ms-win-core-io-l1-1-0.dll
- DeviceIoControl (Address: 0x18003a460)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- FindResourceW (Address: 0x18003a478)
- LoadLibraryW (Address: 0x18003a470)
api-ms-win-core-libraryloader-l1-1-0.dll
- DisableThreadLibraryCalls (Address: 0x18003a4a0)
- FindResourceExW (Address: 0x18003a490)
- FreeLibrary (Address: 0x18003a4b0)
- GetModuleFileNameA (Address: 0x18003a4d0)
- GetModuleHandleExW (Address: 0x18003a488)
- GetModuleHandleW (Address: 0x18003a4c8)
- GetProcAddress (Address: 0x18003a4c0)
- LoadLibraryExW (Address: 0x18003a4b8)
- LoadResource (Address: 0x18003a498)
- SizeofResource (Address: 0x18003a4a8)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x18003a4e8)
- GetLocaleInfoW (Address: 0x18003a4e0)
api-ms-win-core-localization-obsolete-l1-2-0.dll
- GetSystemDefaultUILanguage (Address: 0x18003a500)
- GetUserDefaultUILanguage (Address: 0x18003a4f8)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x18003a520)
- MapViewOfFile (Address: 0x18003a518)
- UnmapViewOfFile (Address: 0x18003a510)
api-ms-win-core-privateprofile-l1-1-0.dll
- GetPrivateProfileSectionW (Address: 0x18003a530)
api-ms-win-core-processenvironment-l1-1-0.dll
- SearchPathW (Address: 0x18003a540)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x18003a560)
- GetCurrentProcessId (Address: 0x18003a578)
- GetCurrentThread (Address: 0x18003a558)
- GetCurrentThreadId (Address: 0x18003a570)
- OpenProcessToken (Address: 0x18003a580)
- OpenThreadToken (Address: 0x18003a568)
- SetThreadToken (Address: 0x18003a550)
- TerminateProcess (Address: 0x18003a588)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x18003a598)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x18003a5a8)
- RegCreateKeyExW (Address: 0x18003a5d0)
- RegDeleteKeyExW (Address: 0x18003a5c0)
- RegGetValueW (Address: 0x18003a5b0)
- RegOpenKeyExW (Address: 0x18003a5c8)
- RegQueryValueExW (Address: 0x18003a5b8)
- RegSetValueExW (Address: 0x18003a5d8)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x18003a5f0)
- RtlCompareMemory (Address: 0x18003a5f8)
- RtlLookupFunctionEntry (Address: 0x18003a5e8)
- RtlVirtualUnwind (Address: 0x18003a600)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathRemoveBackslashW (Address: 0x18003a610)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
- StrCmpIW (Address: 0x18003a628)
- StrStrIW (Address: 0x18003a620)
api-ms-win-core-string-l1-1-0.dll
- MultiByteToWideChar (Address: 0x18003a638)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrlenA (Address: 0x18003a648)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x18003a690)
- AcquireSRWLockShared (Address: 0x18003a668)
- CreateMutexExW (Address: 0x18003a660)
- CreateSemaphoreExW (Address: 0x18003a6c0)
- DeleteCriticalSection (Address: 0x18003a678)
- EnterCriticalSection (Address: 0x18003a698)
- InitializeCriticalSection (Address: 0x18003a6b0)
- InitializeCriticalSectionEx (Address: 0x18003a680)
- LeaveCriticalSection (Address: 0x18003a6c8)
- OpenSemaphoreW (Address: 0x18003a6a8)
- ReleaseMutex (Address: 0x18003a670)
- ReleaseSemaphore (Address: 0x18003a658)
- ReleaseSRWLockExclusive (Address: 0x18003a688)
- ReleaseSRWLockShared (Address: 0x18003a6d0)
- WaitForSingleObject (Address: 0x18003a6a0)
- WaitForSingleObjectEx (Address: 0x18003a6b8)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x18003a6e8)
- InitOnceComplete (Address: 0x18003a6f0)
- Sleep (Address: 0x18003a6e0)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x18003a700)
- GetSystemInfo (Address: 0x18003a708)
- GetSystemTimeAsFileTime (Address: 0x18003a720)
- GetTickCount (Address: 0x18003a718)
- GetVersionExW (Address: 0x18003a710)
- GetWindowsDirectoryW (Address: 0x18003a728)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x18003a748)
- CreateThreadpoolTimer (Address: 0x18003a738)
- SetThreadpoolTimer (Address: 0x18003a740)
- WaitForThreadpoolTimerCallbacks (Address: 0x18003a750)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x18003a770)
- EventUnregister (Address: 0x18003a760)
- EventWriteTransfer (Address: 0x18003a768)
api-ms-win-security-base-l1-1-0.dll
- AdjustTokenPrivileges (Address: 0x18003a7b8)
- DuplicateTokenEx (Address: 0x18003a7b0)
- GetSecurityDescriptorControl (Address: 0x18003a788)
- GetSecurityDescriptorDacl (Address: 0x18003a7a0)
- GetSecurityDescriptorGroup (Address: 0x18003a798)
- GetSecurityDescriptorOwner (Address: 0x18003a790)
- GetSecurityDescriptorSacl (Address: 0x18003a7a8)
- GetTokenInformation (Address: 0x18003a780)
api-ms-win-security-lsalookup-l2-1-0.dll
- LookupPrivilegeValueW (Address: 0x18003a7c8)
api-ms-win-security-provider-l1-1-0.dll
- SetNamedSecurityInfoW (Address: 0x18003a7d8)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x18003a7e8)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18003a7f0)
bcrypt.dll
- BCryptCloseAlgorithmProvider (Address: 0x18003a808)
- BCryptCreateHash (Address: 0x18003a830)
- BCryptDestroyHash (Address: 0x18003a810)
- BCryptFinishHash (Address: 0x18003a820)
- BCryptHash (Address: 0x18003a828)
- BCryptHashData (Address: 0x18003a818)
- BCryptOpenAlgorithmProvider (Address: 0x18003a800)
CRYPT32.dll
- CertCloseStore (Address: 0x18003a208)
- CertCreateCertificateContext (Address: 0x18003a210)
- CertFindCertificateInStore (Address: 0x18003a1f8)
- CertFreeCertificateContext (Address: 0x18003a1e8)
- CertGetCertificateContextProperty (Address: 0x18003a1f0)
- CertGetNameStringW (Address: 0x18003a220)
- CryptMsgClose (Address: 0x18003a218)
- CryptMsgGetParam (Address: 0x18003a200)
- CryptQueryObject (Address: 0x18003a228)
imagehlp.dll
- CheckSumMappedFile (Address: 0x18003a840)
msvcrt.dll
- __C_specific_handler (Address: 0x18003a960)
- __CxxFrameHandler3 (Address: 0x18003a888)
- __dllonexit (Address: 0x18003a8f0)
- __iob_func (Address: 0x18003a9e8)
- _amsg_exit (Address: 0x18003a918)
- _callnewh (Address: 0x18003a948)
- _CxxThrowException (Address: 0x18003a9a0)
- _initterm (Address: 0x18003a910)
- _lock (Address: 0x18003a908)
- _onexit (Address: 0x18003a8e8)
- _purecall (Address: 0x18003a968)
- _snwscanf_s (Address: 0x18003a9d0)
- _ultow_s (Address: 0x18003a9d8)
- _unlock (Address: 0x18003a900)
- _vsnprintf_s (Address: 0x18003a858)
- _vsnwprintf (Address: 0x18003a928)
- _vsnwprintf_s (Address: 0x18003a938)
- _wcsicmp (Address: 0x18003a880)
- _wcslwr (Address: 0x18003a9c8)
- _wcsnicmp (Address: 0x18003a8a0)
- _wcsupr (Address: 0x18003a8a8)
- _wfopen_s (Address: 0x18003a8c0)
- _XcptFilter (Address: 0x18003a940)
- ??0exception@@QEAA@AEBV0@@Z (Address: 0x18003a868)
- ??0exception@@QEAA@XZ (Address: 0x18003a870)
- ??1exception@@UEAA@XZ (Address: 0x18003a878)
- ??1type_info@@UEAA@XZ (Address: 0x18003a920)
- ?terminate@@YAXXZ (Address: 0x18003a980)
- bsearch (Address: 0x18003a8f8)
- fclose (Address: 0x18003a8d8)
- fflush (Address: 0x18003a8b8)
- free (Address: 0x18003a958)
- fwprintf (Address: 0x18003a930)
- malloc (Address: 0x18003a950)
- memcmp (Address: 0x18003a998)
- memcpy (Address: 0x18003a990)
- memcpy_s (Address: 0x18003a978)
- memmove (Address: 0x18003a988)
- memmove_s (Address: 0x18003a970)
- memset (Address: 0x18003a8e0)
- strcpy_s (Address: 0x18003a9b0)
- strncmp (Address: 0x18003a9a8)
- swprintf_s (Address: 0x18003a8c8)
- wcscat_s (Address: 0x18003a8d0)
- wcschr (Address: 0x18003a860)
- wcscmp (Address: 0x18003a9f0)
- wcscpy_s (Address: 0x18003a890)
- wcsncmp (Address: 0x18003a8b0)
- wcsncpy_s (Address: 0x18003a898)
- wcsnlen (Address: 0x18003a9b8)
- wcsrchr (Address: 0x18003a850)
- wcsstr (Address: 0x18003a9c0)
- wcstoul (Address: 0x18003a9e0)
ntdll.dll
- LdrAccessResource (Address: 0x18003aa60)
- LdrFindResource_U (Address: 0x18003aa58)
- LdrGetDllHandle (Address: 0x18003abb8)
- LdrGetProcedureAddress (Address: 0x18003abb0)
- NtAdjustPrivilegesToken (Address: 0x18003ac10)
- NtClose (Address: 0x18003aa08)
- NtCreateEvent (Address: 0x18003aa10)
- NtDeviceIoControlFile (Address: 0x18003ab18)
- NtEnumerateBootEntries (Address: 0x18003ac58)
- NtOpenDirectoryObject (Address: 0x18003ab38)
- NtOpenFile (Address: 0x18003aa30)
- NtOpenKey (Address: 0x18003aae0)
- NtOpenProcess (Address: 0x18003ac40)
- NtOpenProcessTokenEx (Address: 0x18003ac18)
- NtOpenSymbolicLinkObject (Address: 0x18003aad0)
- NtOpenThreadTokenEx (Address: 0x18003ac20)
- NtQueryBootEntryOrder (Address: 0x18003ab28)
- NtQueryBootOptions (Address: 0x18003ab30)
- NtQueryDirectoryObject (Address: 0x18003ab40)
- NtQueryInformationFile (Address: 0x18003aa18)
- NtQueryInformationProcess (Address: 0x18003ac48)
- NtQueryInformationThread (Address: 0x18003aa20)
- NtQuerySymbolicLinkObject (Address: 0x18003aae8)
- NtQuerySystemEnvironmentValueEx (Address: 0x18003ac80)
- NtQuerySystemInformation (Address: 0x18003ac98)
- NtQueryValueKey (Address: 0x18003ab20)
- NtReadFile (Address: 0x18003ac38)
- NtSetInformationFile (Address: 0x18003aa40)
- NtSetInformationThread (Address: 0x18003aca0)
- NtSetSystemEnvironmentValueEx (Address: 0x18003ac88)
- NtTranslateFilePath (Address: 0x18003ac70)
- NtWaitForSingleObject (Address: 0x18003aa28)
- NtWriteFile (Address: 0x18003ac50)
- RtlAddAccessAllowedAceEx (Address: 0x18003aaf0)
- RtlAdjustPrivilege (Address: 0x18003ac68)
- RtlAllocateAndInitializeSid (Address: 0x18003aaf8)
- RtlAllocateHeap (Address: 0x18003aa68)
- RtlAppendUnicodeToString (Address: 0x18003aab0)
- RtlCreateAcl (Address: 0x18003ab10)
- RtlCreateSecurityDescriptor (Address: 0x18003ac30)
- RtlFreeHeap (Address: 0x18003aa50)
- RtlFreeSid (Address: 0x18003ab08)
- RtlFreeUnicodeString (Address: 0x18003aa38)
- RtlGUIDFromString (Address: 0x18003aaa8)
- RtlImageNtHeader (Address: 0x18003aa00)
- RtlImageNtHeaderEx (Address: 0x18003ac60)
- RtlImpersonateSelf (Address: 0x18003ac28)
- RtlInitAnsiString (Address: 0x18003abc8)
- RtlInitUnicodeString (Address: 0x18003ac90)
- RtlLengthSecurityDescriptor (Address: 0x18003aac0)
- RtlLengthSid (Address: 0x18003ab00)
- RtlNtStatusToDosError (Address: 0x18003ac78)
- RtlSetDaclSecurityDescriptor (Address: 0x18003aad8)
- RtlSetOwnerSecurityDescriptor (Address: 0x18003aac8)
- RtlStringFromGUID (Address: 0x18003aa48)
- ZwAllocateUuids (Address: 0x18003ac08)
- ZwClose (Address: 0x18003aa98)
- ZwCreateFile (Address: 0x18003ab48)
- ZwCreateKey (Address: 0x18003ab50)
- ZwDeleteKey (Address: 0x18003ab78)
- ZwDeleteValueKey (Address: 0x18003ab68)
- ZwDeviceIoControlFile (Address: 0x18003abe8)
- ZwEnumerateKey (Address: 0x18003ab80)
- ZwFlushKey (Address: 0x18003ab60)
- ZwLoadKey (Address: 0x18003ab58)
- ZwOpenDirectoryObject (Address: 0x18003ac00)
- ZwOpenFile (Address: 0x18003aa88)
- ZwOpenKey (Address: 0x18003aba8)
- ZwOpenMutant (Address: 0x18003aa90)
- ZwOpenProcess (Address: 0x18003abd8)
- ZwOpenSymbolicLinkObject (Address: 0x18003abf8)
- ZwQueryAttributesFile (Address: 0x18003aab8)
- ZwQueryDirectoryObject (Address: 0x18003abf0)
- ZwQueryInformationFile (Address: 0x18003abd0)
- ZwQueryInformationProcess (Address: 0x18003abc0)
- ZwQueryKey (Address: 0x18003aa78)
- ZwQuerySymbolicLinkObject (Address: 0x18003abe0)
- ZwQuerySystemInformation (Address: 0x18003aaa0)
- ZwQueryValueKey (Address: 0x18003ab88)
- ZwReleaseMutant (Address: 0x18003aa80)
- ZwSaveKey (Address: 0x18003ab70)
- ZwSetSecurityObject (Address: 0x18003ab90)
- ZwSetValueKey (Address: 0x18003aba0)
- ZwUnloadKey (Address: 0x18003ab98)
- ZwWaitForSingleObject (Address: 0x18003aa70)
OLEAUT32.dll
- SysAllocString (Address: 0x18003a240)
- SysFreeString (Address: 0x18003a250)
- VariantClear (Address: 0x18003a248)
- VariantInit (Address: 0x18003a238)
RPCRT4.dll
- UuidCreate (Address: 0x18003a260)
WCP.dll
- ?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z (Address: 0x18003a278)
- ?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x18003a298)
- ?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x18003a270)
- ?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z (Address: 0x18003a2a0)
- ConvertNtStatusToHResult (Address: 0x18003a280)
- RtlFreeLBlob (Address: 0x18003a290)
- RtlReportErrorOrigination (Address: 0x18003a288)
WINTRUST.dll
- WinVerifyTrust (Address: 0x18003a2c0)
- WTHelperGetProvSignerFromChain (Address: 0x18003a2b0)
- WTHelperProvDataFromStateData (Address: 0x18003a2b8)