securebootai.dll
Description: CSI Secure Boot Servicing Plugin
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5911
Architecture: 64-bit
Operating System: Windows NT
SHA256: 0884d3aefc7f0f1700da648fb6a625dc
File Size: 412.9 KB
Uploaded At: Dec. 1, 2025, 8:20 a.m.
Views: 33
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0xba20)
- DllCsiGetHandler (Ordinal: 2, Address: 0xba40)
Imported DLLs & Functions
api-ms-win-core-com-l1-1-0.dll
- CoCreateInstance (Address: 0x180040450)
- CoInitializeEx (Address: 0x180040448)
- CoInitializeSecurity (Address: 0x180040460)
- CoSetProxyBlanket (Address: 0x180040458)
- CoUninitialize (Address: 0x180040468)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x180040478)
- IsDebuggerPresent (Address: 0x180040480)
- OutputDebugStringW (Address: 0x180040488)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1800404b0)
- SetLastError (Address: 0x180040498)
- SetUnhandledExceptionFilter (Address: 0x1800404a0)
- UnhandledExceptionFilter (Address: 0x1800404a8)
api-ms-win-core-file-l1-1-0.dll
- CreateDirectoryW (Address: 0x180040530)
- CreateFileW (Address: 0x180040550)
- DeleteFileW (Address: 0x1800404c8)
- FindClose (Address: 0x180040558)
- FindFirstFileW (Address: 0x180040540)
- FindFirstVolumeW (Address: 0x1800404d0)
- FindNextFileW (Address: 0x180040560)
- FindNextVolumeW (Address: 0x180040500)
- FindVolumeClose (Address: 0x180040520)
- FlushFileBuffers (Address: 0x180040508)
- GetFileAttributesW (Address: 0x1800404f8)
- GetFileInformationByHandle (Address: 0x1800404e8)
- GetFileSizeEx (Address: 0x180040548)
- GetFullPathNameW (Address: 0x1800404c0)
- GetVolumeInformationW (Address: 0x180040510)
- GetVolumePathNameW (Address: 0x1800404f0)
- QueryDosDeviceW (Address: 0x1800404d8)
- ReadFile (Address: 0x180040538)
- SetFileAttributesW (Address: 0x180040528)
- SetFileInformationByHandle (Address: 0x1800404e0)
- WriteFile (Address: 0x180040518)
api-ms-win-core-file-l1-2-0.dll
- GetVolumeNameForVolumeMountPointW (Address: 0x180040570)
api-ms-win-core-file-l2-1-0.dll
- CopyFileExW (Address: 0x180040590)
- GetFileInformationByHandleEx (Address: 0x180040580)
- MoveFileExW (Address: 0x180040588)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1800405a0)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1800405b8)
- HeapAlloc (Address: 0x1800405b0)
- HeapDestroy (Address: 0x1800405c8)
- HeapFree (Address: 0x1800405c0)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- LocalAlloc (Address: 0x1800405d8)
- LocalFree (Address: 0x1800405e0)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x1800405f0)
api-ms-win-core-io-l1-1-0.dll
- DeviceIoControl (Address: 0x180040600)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- FindResourceW (Address: 0x180040618)
- LoadLibraryW (Address: 0x180040610)
api-ms-win-core-libraryloader-l1-1-0.dll
- DisableThreadLibraryCalls (Address: 0x180040668)
- FindResourceExW (Address: 0x180040640)
- FreeLibrary (Address: 0x180040628)
- GetModuleFileNameA (Address: 0x180040660)
- GetModuleHandleExW (Address: 0x180040670)
- GetModuleHandleW (Address: 0x180040658)
- GetProcAddress (Address: 0x180040638)
- LoadLibraryExW (Address: 0x180040630)
- LoadResource (Address: 0x180040650)
- SizeofResource (Address: 0x180040648)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x180040688)
- GetLocaleInfoW (Address: 0x180040680)
api-ms-win-core-localization-obsolete-l1-2-0.dll
- GetSystemDefaultUILanguage (Address: 0x1800406a0)
- GetUserDefaultUILanguage (Address: 0x180040698)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x1800406b0)
- MapViewOfFile (Address: 0x1800406b8)
- UnmapViewOfFile (Address: 0x1800406c0)
api-ms-win-core-privateprofile-l1-1-0.dll
- GetPrivateProfileSectionW (Address: 0x1800406d0)
api-ms-win-core-processenvironment-l1-1-0.dll
- SearchPathW (Address: 0x1800406e0)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x180040718)
- GetCurrentProcessId (Address: 0x180040728)
- GetCurrentThread (Address: 0x180040708)
- GetCurrentThreadId (Address: 0x1800406f8)
- OpenProcessToken (Address: 0x180040720)
- OpenThreadToken (Address: 0x180040700)
- SetThreadToken (Address: 0x180040710)
- TerminateProcess (Address: 0x1800406f0)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x180040738)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x180040748)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x180040758)
- RegCreateKeyExW (Address: 0x180040760)
- RegDeleteKeyExW (Address: 0x180040780)
- RegGetValueW (Address: 0x180040788)
- RegOpenKeyExW (Address: 0x180040778)
- RegQueryValueExW (Address: 0x180040770)
- RegSetValueExW (Address: 0x180040768)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x1800407a0)
- RtlCompareMemory (Address: 0x1800407b0)
- RtlLookupFunctionEntry (Address: 0x1800407a8)
- RtlVirtualUnwind (Address: 0x180040798)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathRemoveBackslashW (Address: 0x1800407c0)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
- StrCmpIW (Address: 0x1800407d0)
- StrStrIW (Address: 0x1800407d8)
api-ms-win-core-string-l1-1-0.dll
- MultiByteToWideChar (Address: 0x1800407e8)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x180040820)
- AcquireSRWLockShared (Address: 0x180040818)
- CreateMutexExW (Address: 0x180040868)
- CreateSemaphoreExW (Address: 0x180040858)
- DeleteCriticalSection (Address: 0x180040838)
- EnterCriticalSection (Address: 0x180040800)
- InitializeCriticalSection (Address: 0x180040850)
- InitializeCriticalSectionEx (Address: 0x180040808)
- LeaveCriticalSection (Address: 0x180040860)
- OpenSemaphoreW (Address: 0x180040870)
- ReleaseMutex (Address: 0x180040828)
- ReleaseSemaphore (Address: 0x180040848)
- ReleaseSRWLockExclusive (Address: 0x180040830)
- ReleaseSRWLockShared (Address: 0x180040810)
- WaitForSingleObject (Address: 0x180040840)
- WaitForSingleObjectEx (Address: 0x1800407f8)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x180040880)
- InitOnceComplete (Address: 0x180040888)
- Sleep (Address: 0x180040890)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x1800408b0)
- GetSystemInfo (Address: 0x1800408a8)
- GetSystemTimeAsFileTime (Address: 0x1800408c0)
- GetVersionExW (Address: 0x1800408b8)
- GetWindowsDirectoryW (Address: 0x1800408a0)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x1800408d0)
- CreateThreadpoolTimer (Address: 0x1800408e8)
- SetThreadpoolTimer (Address: 0x1800408e0)
- WaitForThreadpoolTimerCallbacks (Address: 0x1800408d8)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x180040a50)
- __CxxFrameHandler3 (Address: 0x180040a58)
- _CxxThrowException (Address: 0x180040a60)
- _o___acrt_iob_func (Address: 0x180040a48)
- _o___std_exception_copy (Address: 0x180040a40)
- _o___std_exception_destroy (Address: 0x180040a38)
- _o___std_type_info_destroy_list (Address: 0x180040a30)
- _o___stdio_common_vfwprintf (Address: 0x180040a28)
- _o___stdio_common_vsnprintf_s (Address: 0x180040a20)
- _o___stdio_common_vsnwprintf_s (Address: 0x180040a18)
- _o___stdio_common_vswprintf (Address: 0x180040a10)
- _o___stdio_common_vswprintf_s (Address: 0x180040a08)
- _o___stdio_common_vswscanf (Address: 0x180040a00)
- _o__callnewh (Address: 0x1800409f8)
- _o__cexit (Address: 0x1800409f0)
- _o__configure_narrow_argv (Address: 0x1800409d8)
- _o__crt_atexit (Address: 0x1800409d0)
- _o__errno (Address: 0x1800409c8)
- _o__execute_onexit_table (Address: 0x1800409c0)
- _o__initialize_narrow_environment (Address: 0x1800408f8)
- _o__initialize_onexit_table (Address: 0x180040900)
- _o__invalid_parameter_noinfo (Address: 0x180040908)
- _o__purecall (Address: 0x180040910)
- _o__register_onexit_function (Address: 0x180040918)
- _o__seh_filter_dll (Address: 0x180040920)
- _o__ultow_s (Address: 0x180040928)
- _o__wcsicmp (Address: 0x180040930)
- _o__wcslwr (Address: 0x180040938)
- _o__wcsnicmp (Address: 0x180040940)
- _o__wcsupr (Address: 0x180040948)
- _o__wfopen_s (Address: 0x180040958)
- _o_bsearch (Address: 0x180040960)
- _o_fclose (Address: 0x180040968)
- _o_fflush (Address: 0x180040970)
- _o_free (Address: 0x180040978)
- _o_malloc (Address: 0x180040980)
- _o_strcpy_s (Address: 0x180040988)
- _o_wcscat_s (Address: 0x180040990)
- _o_wcscpy_s (Address: 0x180040998)
- _o_wcsncpy_s (Address: 0x1800409a0)
- _o_wcstol (Address: 0x1800409a8)
- _o_wcstoul (Address: 0x1800409b0)
- memcmp (Address: 0x180040a68)
- memcpy (Address: 0x180040a70)
- memmove (Address: 0x180040950)
- wcschr (Address: 0x1800409e8)
- wcsrchr (Address: 0x1800409e0)
- wcsstr (Address: 0x1800409b8)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x180040a80)
- _initterm_e (Address: 0x180040a88)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x180040ab8)
- strcmp (Address: 0x180040ab0)
- strncmp (Address: 0x180040aa0)
- wcscmp (Address: 0x180040a98)
- wcsncmp (Address: 0x180040ac8)
- wcsncpy (Address: 0x180040ac0)
- wcsnlen (Address: 0x180040aa8)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x180040ae8)
- EventUnregister (Address: 0x180040ad8)
- EventWriteTransfer (Address: 0x180040ae0)
api-ms-win-security-base-l1-1-0.dll
- AdjustTokenPrivileges (Address: 0x180040b08)
- DuplicateTokenEx (Address: 0x180040b28)
- GetSecurityDescriptorControl (Address: 0x180040b10)
- GetSecurityDescriptorDacl (Address: 0x180040b00)
- GetSecurityDescriptorGroup (Address: 0x180040b30)
- GetSecurityDescriptorOwner (Address: 0x180040b18)
- GetSecurityDescriptorSacl (Address: 0x180040b20)
- GetTokenInformation (Address: 0x180040af8)
api-ms-win-security-lsalookup-l2-1-0.dll
- LookupPrivilegeValueW (Address: 0x180040b40)
api-ms-win-security-provider-l1-1-0.dll
- SetNamedSecurityInfoW (Address: 0x180040b50)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x180040b68)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180040b60)
bcrypt.dll
- BCryptCloseAlgorithmProvider (Address: 0x180040ba0)
- BCryptCreateHash (Address: 0x180040b88)
- BCryptDestroyHash (Address: 0x180040b98)
- BCryptFinishHash (Address: 0x180040b80)
- BCryptHash (Address: 0x180040b78)
- BCryptHashData (Address: 0x180040b90)
- BCryptOpenAlgorithmProvider (Address: 0x180040ba8)
CRYPT32.dll
- CertCloseStore (Address: 0x180040388)
- CertComparePublicKeyInfo (Address: 0x180040368)
- CertCreateCertificateContext (Address: 0x180040338)
- CertEnumCertificatesInStore (Address: 0x180040350)
- CertFindCertificateInStore (Address: 0x180040360)
- CertFreeCertificateContext (Address: 0x180040358)
- CertGetCertificateContextProperty (Address: 0x180040370)
- CertGetNameStringW (Address: 0x180040380)
- CryptMsgClose (Address: 0x180040378)
- CryptMsgGetParam (Address: 0x180040340)
- CryptQueryObject (Address: 0x180040348)
imagehlp.dll
- CheckSumMappedFile (Address: 0x180040bb8)
ntdll.dll
- LdrAccessResource (Address: 0x180040c58)
- LdrFindResource_U (Address: 0x180040c50)
- LdrGetDllHandle (Address: 0x180040db0)
- LdrGetProcedureAddress (Address: 0x180040da8)
- NtAdjustPrivilegesToken (Address: 0x180040e08)
- NtClose (Address: 0x180040c00)
- NtCreateEvent (Address: 0x180040c08)
- NtDeviceIoControlFile (Address: 0x180040bf0)
- NtEnumerateBootEntries (Address: 0x180040c60)
- NtOpenDirectoryObject (Address: 0x180040d30)
- NtOpenFile (Address: 0x180040c28)
- NtOpenKey (Address: 0x180040cd8)
- NtOpenProcess (Address: 0x180040bd8)
- NtOpenProcessTokenEx (Address: 0x180040e10)
- NtOpenSymbolicLinkObject (Address: 0x180040cc8)
- NtOpenThreadTokenEx (Address: 0x180040e18)
- NtQueryBootEntryOrder (Address: 0x180040d20)
- NtQueryBootOptions (Address: 0x180040d28)
- NtQueryDirectoryObject (Address: 0x180040d38)
- NtQueryInformationFile (Address: 0x180040c10)
- NtQueryInformationProcess (Address: 0x180040bd0)
- NtQueryInformationThread (Address: 0x180040c18)
- NtQuerySymbolicLinkObject (Address: 0x180040ce0)
- NtQuerySystemEnvironmentValueEx (Address: 0x180040e40)
- NtQuerySystemInformation (Address: 0x180040e58)
- NtQueryValueKey (Address: 0x180040d18)
- NtReadFile (Address: 0x180040be0)
- NtSetInformationFile (Address: 0x180040c38)
- NtSetInformationThread (Address: 0x180040be8)
- NtSetSystemEnvironmentValueEx (Address: 0x180040e48)
- NtTranslateFilePath (Address: 0x180040e30)
- NtWaitForSingleObject (Address: 0x180040c20)
- NtWriteFile (Address: 0x180040bc8)
- RtlAddAccessAllowedAceEx (Address: 0x180040ce8)
- RtlAdjustPrivilege (Address: 0x180040e28)
- RtlAllocateAndInitializeSid (Address: 0x180040e60)
- RtlAllocateHeap (Address: 0x180040e68)
- RtlAppendUnicodeToString (Address: 0x180040ca8)
- RtlCreateAcl (Address: 0x180040d08)
- RtlCreateSecurityDescriptor (Address: 0x180040d10)
- RtlFreeHeap (Address: 0x180040c48)
- RtlFreeSid (Address: 0x180040d00)
- RtlFreeUnicodeString (Address: 0x180040c30)
- RtlGUIDFromString (Address: 0x180040ca0)
- RtlImageNtHeader (Address: 0x180040bf8)
- RtlImageNtHeaderEx (Address: 0x180040cf0)
- RtlImpersonateSelf (Address: 0x180040e20)
- RtlInitAnsiString (Address: 0x180040dc0)
- RtlInitUnicodeString (Address: 0x180040e50)
- RtlLengthSecurityDescriptor (Address: 0x180040cb8)
- RtlLengthSid (Address: 0x180040cf8)
- RtlNtStatusToDosError (Address: 0x180040e38)
- RtlSetDaclSecurityDescriptor (Address: 0x180040cd0)
- RtlSetOwnerSecurityDescriptor (Address: 0x180040cc0)
- RtlStringFromGUID (Address: 0x180040c40)
- ZwAllocateUuids (Address: 0x180040e00)
- ZwClose (Address: 0x180040c90)
- ZwCreateFile (Address: 0x180040d40)
- ZwCreateKey (Address: 0x180040d48)
- ZwDeleteKey (Address: 0x180040d70)
- ZwDeleteValueKey (Address: 0x180040d60)
- ZwDeviceIoControlFile (Address: 0x180040de0)
- ZwEnumerateKey (Address: 0x180040d78)
- ZwFlushKey (Address: 0x180040d58)
- ZwLoadKey (Address: 0x180040d50)
- ZwOpenDirectoryObject (Address: 0x180040df8)
- ZwOpenFile (Address: 0x180040c80)
- ZwOpenKey (Address: 0x180040da0)
- ZwOpenMutant (Address: 0x180040c88)
- ZwOpenProcess (Address: 0x180040dd0)
- ZwOpenSymbolicLinkObject (Address: 0x180040df0)
- ZwQueryAttributesFile (Address: 0x180040cb0)
- ZwQueryDirectoryObject (Address: 0x180040de8)
- ZwQueryInformationFile (Address: 0x180040dc8)
- ZwQueryInformationProcess (Address: 0x180040db8)
- ZwQueryKey (Address: 0x180040c70)
- ZwQuerySymbolicLinkObject (Address: 0x180040dd8)
- ZwQuerySystemInformation (Address: 0x180040c98)
- ZwQueryValueKey (Address: 0x180040d80)
- ZwReleaseMutant (Address: 0x180040c78)
- ZwSaveKey (Address: 0x180040d68)
- ZwSetSecurityObject (Address: 0x180040d88)
- ZwSetValueKey (Address: 0x180040d98)
- ZwUnloadKey (Address: 0x180040d90)
- ZwWaitForSingleObject (Address: 0x180040c68)
OLEAUT32.dll
- SafeArrayGetElement (Address: 0x180040398)
- SafeArrayGetLBound (Address: 0x1800403a0)
- SafeArrayGetUBound (Address: 0x1800403c0)
- SysAllocString (Address: 0x1800403a8)
- SysFreeString (Address: 0x1800403d0)
- SysStringLen (Address: 0x1800403b0)
- VariantClear (Address: 0x1800403b8)
- VariantInit (Address: 0x1800403c8)
RPCRT4.dll
- UuidCreate (Address: 0x1800403e0)
WCP.dll
- ?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z (Address: 0x1800403f0)
- ?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x180040418)
- ?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z (Address: 0x180040410)
- ConvertNtStatusToHResult (Address: 0x1800403f8)
- RtlFreeLBlob (Address: 0x180040408)
- RtlReportErrorOrigination (Address: 0x180040400)
WINTRUST.dll
- WinVerifyTrust (Address: 0x180040428)
- WTHelperGetProvSignerFromChain (Address: 0x180040438)
- WTHelperProvDataFromStateData (Address: 0x180040430)