securebootai.dll

Description: CSI Secure Boot Servicing Plugin

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5676

Architecture: 64-bit

Operating System: Windows NT

SHA256: 5ba2200990f7fc52decffe982a4948e8

File Size: 357.9 KB

Uploaded At: Dec. 1, 2025, 8:20 a.m.

Views: 32

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x8ee0)
  • DllCsiGetHandler (Ordinal: 2, Address: 0x8f00)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateInstance (Address: 0x180038318)
  • CoInitializeEx (Address: 0x180038310)
  • CoInitializeSecurity (Address: 0x180038328)
  • CoSetProxyBlanket (Address: 0x180038308)
  • CoUninitialize (Address: 0x180038320)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x180038340)
  • IsDebuggerPresent (Address: 0x180038348)
  • OutputDebugStringW (Address: 0x180038338)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180038358)
  • SetLastError (Address: 0x180038370)
  • SetUnhandledExceptionFilter (Address: 0x180038368)
  • UnhandledExceptionFilter (Address: 0x180038360)
api-ms-win-core-file-l1-1-0.dll
  • CreateDirectoryW (Address: 0x1800383d0)
  • CreateFileW (Address: 0x180038408)
  • DeleteFileW (Address: 0x1800383e0)
  • FindClose (Address: 0x1800383f0)
  • FindFirstFileW (Address: 0x1800383c8)
  • FindNextFileW (Address: 0x1800383e8)
  • FlushFileBuffers (Address: 0x180038390)
  • GetFileAttributesW (Address: 0x180038388)
  • GetFileInformationByHandle (Address: 0x1800383b0)
  • GetFileSizeEx (Address: 0x1800383d8)
  • GetFullPathNameW (Address: 0x1800383f8)
  • GetVolumeInformationW (Address: 0x180038398)
  • GetVolumePathNameW (Address: 0x180038400)
  • QueryDosDeviceW (Address: 0x180038380)
  • ReadFile (Address: 0x1800383c0)
  • SetFileAttributesW (Address: 0x1800383a0)
  • SetFileInformationByHandle (Address: 0x1800383b8)
  • WriteFile (Address: 0x1800383a8)
api-ms-win-core-file-l1-2-0.dll
  • GetVolumeNameForVolumeMountPointW (Address: 0x180038418)
api-ms-win-core-file-l2-1-0.dll
  • CopyFileExW (Address: 0x180038430)
  • GetFileInformationByHandleEx (Address: 0x180038428)
  • MoveFileExW (Address: 0x180038438)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180038448)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180038460)
  • HeapAlloc (Address: 0x180038458)
  • HeapDestroy (Address: 0x180038470)
  • HeapFree (Address: 0x180038468)
api-ms-win-core-heap-obsolete-l1-1-0.dll
  • LocalAlloc (Address: 0x180038488)
  • LocalFree (Address: 0x180038480)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x180038498)
api-ms-win-core-io-l1-1-0.dll
  • DeviceIoControl (Address: 0x1800384a8)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • FindResourceW (Address: 0x1800384b8)
  • LoadLibraryW (Address: 0x1800384c0)
api-ms-win-core-libraryloader-l1-1-0.dll
  • DisableThreadLibraryCalls (Address: 0x1800384f0)
  • FindResourceExW (Address: 0x1800384e0)
  • FreeLibrary (Address: 0x180038510)
  • GetModuleFileNameA (Address: 0x1800384d8)
  • GetModuleHandleExW (Address: 0x180038500)
  • GetModuleHandleW (Address: 0x1800384e8)
  • GetProcAddress (Address: 0x1800384f8)
  • LoadLibraryExW (Address: 0x1800384d0)
  • LoadResource (Address: 0x180038508)
  • SizeofResource (Address: 0x180038518)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x180038528)
  • GetLocaleInfoW (Address: 0x180038530)
api-ms-win-core-localization-obsolete-l1-2-0.dll
  • GetSystemDefaultUILanguage (Address: 0x180038540)
  • GetUserDefaultUILanguage (Address: 0x180038548)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x180038568)
  • MapViewOfFile (Address: 0x180038560)
  • UnmapViewOfFile (Address: 0x180038558)
api-ms-win-core-privateprofile-l1-1-0.dll
  • GetPrivateProfileSectionW (Address: 0x180038578)
api-ms-win-core-processenvironment-l1-1-0.dll
  • SearchPathW (Address: 0x180038588)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1800385a8)
  • GetCurrentProcessId (Address: 0x1800385c0)
  • GetCurrentThread (Address: 0x1800385b8)
  • GetCurrentThreadId (Address: 0x1800385d0)
  • OpenProcessToken (Address: 0x180038598)
  • OpenThreadToken (Address: 0x1800385b0)
  • SetThreadToken (Address: 0x1800385c8)
  • TerminateProcess (Address: 0x1800385a0)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x1800385e0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800385f0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x180038600)
  • RegCreateKeyExW (Address: 0x180038618)
  • RegDeleteKeyExW (Address: 0x180038608)
  • RegGetValueW (Address: 0x180038610)
  • RegOpenKeyExW (Address: 0x180038628)
  • RegQueryValueExW (Address: 0x180038630)
  • RegSetValueExW (Address: 0x180038620)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x180038658)
  • RtlCompareMemory (Address: 0x180038650)
  • RtlLookupFunctionEntry (Address: 0x180038648)
  • RtlVirtualUnwind (Address: 0x180038640)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathRemoveBackslashW (Address: 0x180038668)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
  • StrCmpIW (Address: 0x180038678)
  • StrStrIW (Address: 0x180038680)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x180038690)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180038718)
  • AcquireSRWLockShared (Address: 0x180038708)
  • CreateMutexExW (Address: 0x1800386b8)
  • CreateSemaphoreExW (Address: 0x1800386a8)
  • DeleteCriticalSection (Address: 0x1800386d0)
  • EnterCriticalSection (Address: 0x1800386e0)
  • InitializeCriticalSection (Address: 0x1800386a0)
  • InitializeCriticalSectionEx (Address: 0x1800386d8)
  • LeaveCriticalSection (Address: 0x1800386b0)
  • OpenSemaphoreW (Address: 0x1800386c0)
  • ReleaseMutex (Address: 0x1800386f0)
  • ReleaseSemaphore (Address: 0x1800386f8)
  • ReleaseSRWLockExclusive (Address: 0x180038710)
  • ReleaseSRWLockShared (Address: 0x180038700)
  • WaitForSingleObject (Address: 0x1800386c8)
  • WaitForSingleObjectEx (Address: 0x1800386e8)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x180038728)
  • InitOnceComplete (Address: 0x180038738)
  • Sleep (Address: 0x180038730)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x180038750)
  • GetSystemInfo (Address: 0x180038748)
  • GetSystemTimeAsFileTime (Address: 0x180038760)
  • GetVersionExW (Address: 0x180038768)
  • GetWindowsDirectoryW (Address: 0x180038758)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x180038778)
  • CreateThreadpoolTimer (Address: 0x180038790)
  • SetThreadpoolTimer (Address: 0x180038788)
  • WaitForThreadpoolTimerCallbacks (Address: 0x180038780)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x180038900)
  • __CxxFrameHandler3 (Address: 0x180038888)
  • _CxxThrowException (Address: 0x180038908)
  • _o___acrt_iob_func (Address: 0x1800388f8)
  • _o___std_exception_copy (Address: 0x1800388f0)
  • _o___std_exception_destroy (Address: 0x1800388e8)
  • _o___std_type_info_destroy_list (Address: 0x1800388e0)
  • _o___stdio_common_vfwprintf (Address: 0x1800388d8)
  • _o___stdio_common_vsnprintf_s (Address: 0x1800388d0)
  • _o___stdio_common_vsnwprintf_s (Address: 0x1800388c8)
  • _o___stdio_common_vswprintf (Address: 0x1800388c0)
  • _o___stdio_common_vswprintf_s (Address: 0x1800388b8)
  • _o___stdio_common_vswscanf (Address: 0x1800388b0)
  • _o__callnewh (Address: 0x1800388a8)
  • _o__cexit (Address: 0x1800388a0)
  • _o__configure_narrow_argv (Address: 0x180038880)
  • _o__crt_atexit (Address: 0x180038878)
  • _o__errno (Address: 0x180038870)
  • _o__execute_onexit_table (Address: 0x180038868)
  • _o__initialize_narrow_environment (Address: 0x1800387a0)
  • _o__initialize_onexit_table (Address: 0x1800387a8)
  • _o__invalid_parameter_noinfo (Address: 0x1800387b0)
  • _o__purecall (Address: 0x1800387b8)
  • _o__register_onexit_function (Address: 0x1800387c0)
  • _o__seh_filter_dll (Address: 0x1800387c8)
  • _o__ultow_s (Address: 0x1800387d0)
  • _o__wcsicmp (Address: 0x1800387d8)
  • _o__wcslwr (Address: 0x1800387e0)
  • _o__wcsnicmp (Address: 0x1800387e8)
  • _o__wcsupr (Address: 0x1800387f0)
  • _o__wfopen_s (Address: 0x180038800)
  • _o_bsearch (Address: 0x180038808)
  • _o_fclose (Address: 0x180038810)
  • _o_fflush (Address: 0x180038818)
  • _o_free (Address: 0x180038820)
  • _o_malloc (Address: 0x180038828)
  • _o_strcpy_s (Address: 0x180038830)
  • _o_terminate (Address: 0x180038838)
  • _o_wcscat_s (Address: 0x180038840)
  • _o_wcscpy_s (Address: 0x180038848)
  • _o_wcsncpy_s (Address: 0x180038850)
  • _o_wcstoul (Address: 0x180038858)
  • memcmp (Address: 0x180038910)
  • memcpy (Address: 0x180038918)
  • memmove (Address: 0x1800387f8)
  • wcschr (Address: 0x180038898)
  • wcsrchr (Address: 0x180038890)
  • wcsstr (Address: 0x180038860)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x180038928)
  • _initterm_e (Address: 0x180038930)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x180038950)
  • strncmp (Address: 0x180038958)
  • wcscmp (Address: 0x180038940)
  • wcsncmp (Address: 0x180038960)
  • wcsnlen (Address: 0x180038948)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x180038978)
  • EventUnregister (Address: 0x180038980)
  • EventWriteTransfer (Address: 0x180038970)
api-ms-win-security-base-l1-1-0.dll
  • AdjustTokenPrivileges (Address: 0x1800389c0)
  • DuplicateTokenEx (Address: 0x1800389b0)
  • GetSecurityDescriptorControl (Address: 0x1800389c8)
  • GetSecurityDescriptorDacl (Address: 0x180038990)
  • GetSecurityDescriptorGroup (Address: 0x1800389b8)
  • GetSecurityDescriptorOwner (Address: 0x1800389a0)
  • GetSecurityDescriptorSacl (Address: 0x180038998)
  • GetTokenInformation (Address: 0x1800389a8)
api-ms-win-security-lsalookup-l2-1-0.dll
  • LookupPrivilegeValueW (Address: 0x1800389d8)
api-ms-win-security-provider-l1-1-0.dll
  • SetNamedSecurityInfoW (Address: 0x1800389e8)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x1800389f8)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180038a00)
bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x180038a10)
  • BCryptCreateHash (Address: 0x180038a20)
  • BCryptDestroyHash (Address: 0x180038a38)
  • BCryptFinishHash (Address: 0x180038a40)
  • BCryptHash (Address: 0x180038a30)
  • BCryptHashData (Address: 0x180038a28)
  • BCryptOpenAlgorithmProvider (Address: 0x180038a18)
CRYPT32.dll
  • CertCloseStore (Address: 0x180038260)
  • CertCreateCertificateContext (Address: 0x180038258)
  • CertFindCertificateInStore (Address: 0x180038230)
  • CertFreeCertificateContext (Address: 0x180038248)
  • CertGetCertificateContextProperty (Address: 0x180038238)
  • CertGetNameStringW (Address: 0x180038268)
  • CryptMsgClose (Address: 0x180038240)
  • CryptMsgGetParam (Address: 0x180038228)
  • CryptQueryObject (Address: 0x180038250)
imagehlp.dll
  • CheckSumMappedFile (Address: 0x180038a50)
ntdll.dll
  • LdrAccessResource (Address: 0x180038af8)
  • LdrFindResource_U (Address: 0x180038af0)
  • LdrGetDllHandle (Address: 0x180038c50)
  • LdrGetProcedureAddress (Address: 0x180038c48)
  • NtAdjustPrivilegesToken (Address: 0x180038ca8)
  • NtClose (Address: 0x180038aa0)
  • NtCreateEvent (Address: 0x180038aa8)
  • NtDeviceIoControlFile (Address: 0x180038a90)
  • NtEnumerateBootEntries (Address: 0x180038a60)
  • NtOpenDirectoryObject (Address: 0x180038bd0)
  • NtOpenFile (Address: 0x180038ac8)
  • NtOpenKey (Address: 0x180038b78)
  • NtOpenProcess (Address: 0x180038a78)
  • NtOpenProcessTokenEx (Address: 0x180038cb0)
  • NtOpenSymbolicLinkObject (Address: 0x180038b68)
  • NtOpenThreadTokenEx (Address: 0x180038cb8)
  • NtQueryBootEntryOrder (Address: 0x180038bc0)
  • NtQueryBootOptions (Address: 0x180038bc8)
  • NtQueryDirectoryObject (Address: 0x180038bd8)
  • NtQueryInformationFile (Address: 0x180038ab0)
  • NtQueryInformationProcess (Address: 0x180038a70)
  • NtQueryInformationThread (Address: 0x180038ab8)
  • NtQuerySymbolicLinkObject (Address: 0x180038b80)
  • NtQuerySystemEnvironmentValueEx (Address: 0x180038cd8)
  • NtQuerySystemInformation (Address: 0x180038cf0)
  • NtQueryValueKey (Address: 0x180038bb8)
  • NtReadFile (Address: 0x180038a80)
  • NtSetInformationFile (Address: 0x180038ad8)
  • NtSetInformationThread (Address: 0x180038a88)
  • NtSetSystemEnvironmentValueEx (Address: 0x180038ce0)
  • NtTranslateFilePath (Address: 0x180038b88)
  • NtWaitForSingleObject (Address: 0x180038ac0)
  • NtWriteFile (Address: 0x180038a68)
  • RtlAddAccessAllowedAceEx (Address: 0x180038cf8)
  • RtlAdjustPrivilege (Address: 0x180038b00)
  • RtlAllocateAndInitializeSid (Address: 0x180038b90)
  • RtlAllocateHeap (Address: 0x180038d00)
  • RtlAppendUnicodeToString (Address: 0x180038b48)
  • RtlCreateAcl (Address: 0x180038ba8)
  • RtlCreateSecurityDescriptor (Address: 0x180038bb0)
  • RtlFreeHeap (Address: 0x180038ae8)
  • RtlFreeSid (Address: 0x180038ba0)
  • RtlFreeUnicodeString (Address: 0x180038ad0)
  • RtlGUIDFromString (Address: 0x180038b40)
  • RtlImageNtHeader (Address: 0x180038a98)
  • RtlImageNtHeaderEx (Address: 0x180038cc8)
  • RtlImpersonateSelf (Address: 0x180038cc0)
  • RtlInitAnsiString (Address: 0x180038c60)
  • RtlInitUnicodeString (Address: 0x180038ce8)
  • RtlLengthSecurityDescriptor (Address: 0x180038b58)
  • RtlLengthSid (Address: 0x180038b98)
  • RtlNtStatusToDosError (Address: 0x180038cd0)
  • RtlSetDaclSecurityDescriptor (Address: 0x180038b70)
  • RtlSetOwnerSecurityDescriptor (Address: 0x180038b60)
  • RtlStringFromGUID (Address: 0x180038ae0)
  • ZwAllocateUuids (Address: 0x180038ca0)
  • ZwClose (Address: 0x180038b30)
  • ZwCreateFile (Address: 0x180038be0)
  • ZwCreateKey (Address: 0x180038be8)
  • ZwDeleteKey (Address: 0x180038c10)
  • ZwDeleteValueKey (Address: 0x180038c00)
  • ZwDeviceIoControlFile (Address: 0x180038c80)
  • ZwEnumerateKey (Address: 0x180038c18)
  • ZwFlushKey (Address: 0x180038bf8)
  • ZwLoadKey (Address: 0x180038bf0)
  • ZwOpenDirectoryObject (Address: 0x180038c98)
  • ZwOpenFile (Address: 0x180038b20)
  • ZwOpenKey (Address: 0x180038c40)
  • ZwOpenMutant (Address: 0x180038b28)
  • ZwOpenProcess (Address: 0x180038c70)
  • ZwOpenSymbolicLinkObject (Address: 0x180038c90)
  • ZwQueryAttributesFile (Address: 0x180038b50)
  • ZwQueryDirectoryObject (Address: 0x180038c88)
  • ZwQueryInformationFile (Address: 0x180038c68)
  • ZwQueryInformationProcess (Address: 0x180038c58)
  • ZwQueryKey (Address: 0x180038b10)
  • ZwQuerySymbolicLinkObject (Address: 0x180038c78)
  • ZwQuerySystemInformation (Address: 0x180038b38)
  • ZwQueryValueKey (Address: 0x180038c20)
  • ZwReleaseMutant (Address: 0x180038b18)
  • ZwSaveKey (Address: 0x180038c08)
  • ZwSetSecurityObject (Address: 0x180038c28)
  • ZwSetValueKey (Address: 0x180038c38)
  • ZwUnloadKey (Address: 0x180038c30)
  • ZwWaitForSingleObject (Address: 0x180038b08)
OLEAUT32.dll
  • SysAllocString (Address: 0x180038280)
  • SysFreeString (Address: 0x180038290)
  • VariantClear (Address: 0x180038288)
  • VariantInit (Address: 0x180038278)
RPCRT4.dll
  • UuidCreate (Address: 0x1800382a0)
WCP.dll
  • ?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z (Address: 0x1800382b0)
  • ?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x1800382d8)
  • ?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z (Address: 0x1800382c0)
  • ConvertNtStatusToHResult (Address: 0x1800382d0)
  • RtlFreeLBlob (Address: 0x1800382b8)
  • RtlReportErrorOrigination (Address: 0x1800382c8)
WINTRUST.dll
  • WinVerifyTrust (Address: 0x1800382f8)
  • WTHelperGetProvSignerFromChain (Address: 0x1800382f0)
  • WTHelperProvDataFromStateData (Address: 0x1800382e8)