securebootai.dll
Description: CSI Secure Boot Servicing Plugin
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6151
Architecture: 64-bit
Operating System: Windows NT
SHA256: b14ca9b4f1f06ea88b780bcb47d871cf
File Size: 436.4 KB
Uploaded At: Dec. 1, 2025, 8:21 a.m.
Views: 27
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0xba20)
- DllCsiGetHandler (Ordinal: 2, Address: 0xba40)
Imported DLLs & Functions
api-ms-win-core-com-l1-1-0.dll
- CoCreateInstance (Address: 0x180041650)
- CoInitializeEx (Address: 0x180041648)
- CoInitializeSecurity (Address: 0x180041660)
- CoSetProxyBlanket (Address: 0x180041658)
- CoUninitialize (Address: 0x180041668)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x180041678)
- IsDebuggerPresent (Address: 0x180041680)
- OutputDebugStringW (Address: 0x180041688)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1800416b0)
- SetLastError (Address: 0x180041698)
- SetUnhandledExceptionFilter (Address: 0x1800416a0)
- UnhandledExceptionFilter (Address: 0x1800416a8)
api-ms-win-core-file-l1-1-0.dll
- CreateDirectoryW (Address: 0x180041730)
- CreateFileW (Address: 0x180041750)
- DeleteFileW (Address: 0x1800416c8)
- FindClose (Address: 0x180041758)
- FindFirstFileW (Address: 0x180041740)
- FindFirstVolumeW (Address: 0x1800416d0)
- FindNextFileW (Address: 0x180041760)
- FindNextVolumeW (Address: 0x180041700)
- FindVolumeClose (Address: 0x180041720)
- FlushFileBuffers (Address: 0x180041708)
- GetFileAttributesW (Address: 0x1800416f8)
- GetFileInformationByHandle (Address: 0x1800416e8)
- GetFileSizeEx (Address: 0x180041748)
- GetFullPathNameW (Address: 0x1800416c0)
- GetVolumeInformationW (Address: 0x180041710)
- GetVolumePathNameW (Address: 0x1800416f0)
- QueryDosDeviceW (Address: 0x1800416d8)
- ReadFile (Address: 0x180041738)
- SetFileAttributesW (Address: 0x180041728)
- SetFileInformationByHandle (Address: 0x1800416e0)
- WriteFile (Address: 0x180041718)
api-ms-win-core-file-l1-2-0.dll
- GetVolumeNameForVolumeMountPointW (Address: 0x180041770)
api-ms-win-core-file-l2-1-0.dll
- CopyFileExW (Address: 0x180041790)
- GetFileInformationByHandleEx (Address: 0x180041780)
- MoveFileExW (Address: 0x180041788)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1800417a0)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1800417b8)
- HeapAlloc (Address: 0x1800417b0)
- HeapDestroy (Address: 0x1800417c8)
- HeapFree (Address: 0x1800417c0)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- LocalAlloc (Address: 0x1800417d8)
- LocalFree (Address: 0x1800417e0)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x1800417f0)
api-ms-win-core-io-l1-1-0.dll
- DeviceIoControl (Address: 0x180041800)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- FindResourceW (Address: 0x180041818)
- LoadLibraryW (Address: 0x180041810)
api-ms-win-core-libraryloader-l1-1-0.dll
- DisableThreadLibraryCalls (Address: 0x180041868)
- FindResourceExW (Address: 0x180041840)
- FreeLibrary (Address: 0x180041828)
- GetModuleFileNameA (Address: 0x180041860)
- GetModuleHandleExW (Address: 0x180041870)
- GetModuleHandleW (Address: 0x180041858)
- GetProcAddress (Address: 0x180041838)
- LoadLibraryExW (Address: 0x180041830)
- LoadResource (Address: 0x180041850)
- SizeofResource (Address: 0x180041848)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x180041888)
- GetLocaleInfoW (Address: 0x180041880)
api-ms-win-core-localization-obsolete-l1-2-0.dll
- GetSystemDefaultUILanguage (Address: 0x1800418a0)
- GetUserDefaultUILanguage (Address: 0x180041898)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x1800418b0)
- MapViewOfFile (Address: 0x1800418b8)
- UnmapViewOfFile (Address: 0x1800418c0)
api-ms-win-core-privateprofile-l1-1-0.dll
- GetPrivateProfileSectionW (Address: 0x1800418d0)
api-ms-win-core-processenvironment-l1-1-0.dll
- SearchPathW (Address: 0x1800418e0)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x180041918)
- GetCurrentProcessId (Address: 0x180041928)
- GetCurrentThread (Address: 0x180041908)
- GetCurrentThreadId (Address: 0x1800418f8)
- OpenProcessToken (Address: 0x180041920)
- OpenThreadToken (Address: 0x180041900)
- SetThreadToken (Address: 0x180041910)
- TerminateProcess (Address: 0x1800418f0)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x180041938)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x180041948)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x180041958)
- RegCreateKeyExW (Address: 0x180041960)
- RegDeleteKeyExW (Address: 0x180041980)
- RegGetValueW (Address: 0x180041988)
- RegOpenKeyExW (Address: 0x180041978)
- RegQueryValueExW (Address: 0x180041970)
- RegSetValueExW (Address: 0x180041968)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x1800419a0)
- RtlCompareMemory (Address: 0x1800419b0)
- RtlLookupFunctionEntry (Address: 0x1800419a8)
- RtlVirtualUnwind (Address: 0x180041998)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathRemoveBackslashW (Address: 0x1800419c0)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
- StrCmpIW (Address: 0x1800419d0)
- StrStrIW (Address: 0x1800419d8)
api-ms-win-core-string-l1-1-0.dll
- MultiByteToWideChar (Address: 0x1800419e8)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x180041a20)
- AcquireSRWLockShared (Address: 0x180041a18)
- CreateMutexExW (Address: 0x180041a68)
- CreateSemaphoreExW (Address: 0x180041a58)
- DeleteCriticalSection (Address: 0x180041a38)
- EnterCriticalSection (Address: 0x180041a00)
- InitializeCriticalSection (Address: 0x180041a50)
- InitializeCriticalSectionEx (Address: 0x180041a08)
- LeaveCriticalSection (Address: 0x180041a60)
- OpenSemaphoreW (Address: 0x180041a70)
- ReleaseMutex (Address: 0x180041a28)
- ReleaseSemaphore (Address: 0x180041a48)
- ReleaseSRWLockExclusive (Address: 0x180041a30)
- ReleaseSRWLockShared (Address: 0x180041a10)
- WaitForSingleObject (Address: 0x180041a40)
- WaitForSingleObjectEx (Address: 0x1800419f8)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x180041a80)
- InitOnceComplete (Address: 0x180041a88)
- Sleep (Address: 0x180041a90)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x180041ab0)
- GetSystemInfo (Address: 0x180041aa8)
- GetSystemTimeAsFileTime (Address: 0x180041ac0)
- GetVersionExW (Address: 0x180041ab8)
- GetWindowsDirectoryW (Address: 0x180041aa0)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x180041ad0)
- CreateThreadpoolTimer (Address: 0x180041ae8)
- SetThreadpoolTimer (Address: 0x180041ae0)
- WaitForThreadpoolTimerCallbacks (Address: 0x180041ad8)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x180041c50)
- __CxxFrameHandler3 (Address: 0x180041c58)
- _CxxThrowException (Address: 0x180041c60)
- _o___acrt_iob_func (Address: 0x180041c48)
- _o___std_exception_copy (Address: 0x180041c40)
- _o___std_exception_destroy (Address: 0x180041c38)
- _o___std_type_info_destroy_list (Address: 0x180041c30)
- _o___stdio_common_vfwprintf (Address: 0x180041c28)
- _o___stdio_common_vsnprintf_s (Address: 0x180041c20)
- _o___stdio_common_vsnwprintf_s (Address: 0x180041c18)
- _o___stdio_common_vswprintf (Address: 0x180041c10)
- _o___stdio_common_vswprintf_s (Address: 0x180041c08)
- _o___stdio_common_vswscanf (Address: 0x180041c00)
- _o__callnewh (Address: 0x180041bf8)
- _o__cexit (Address: 0x180041bf0)
- _o__configure_narrow_argv (Address: 0x180041bd8)
- _o__crt_atexit (Address: 0x180041bd0)
- _o__errno (Address: 0x180041bc8)
- _o__execute_onexit_table (Address: 0x180041bc0)
- _o__initialize_narrow_environment (Address: 0x180041af8)
- _o__initialize_onexit_table (Address: 0x180041b00)
- _o__invalid_parameter_noinfo (Address: 0x180041b08)
- _o__purecall (Address: 0x180041b10)
- _o__register_onexit_function (Address: 0x180041b18)
- _o__seh_filter_dll (Address: 0x180041b20)
- _o__ultow_s (Address: 0x180041b28)
- _o__wcsicmp (Address: 0x180041b30)
- _o__wcslwr (Address: 0x180041b38)
- _o__wcsnicmp (Address: 0x180041b40)
- _o__wcsupr (Address: 0x180041b48)
- _o__wfopen_s (Address: 0x180041b58)
- _o_bsearch (Address: 0x180041b60)
- _o_fclose (Address: 0x180041b68)
- _o_fflush (Address: 0x180041b70)
- _o_free (Address: 0x180041b78)
- _o_malloc (Address: 0x180041b80)
- _o_strcpy_s (Address: 0x180041b88)
- _o_wcscat_s (Address: 0x180041b90)
- _o_wcscpy_s (Address: 0x180041b98)
- _o_wcsncpy_s (Address: 0x180041ba0)
- _o_wcstol (Address: 0x180041ba8)
- _o_wcstoul (Address: 0x180041bb0)
- memcmp (Address: 0x180041c68)
- memcpy (Address: 0x180041c70)
- memmove (Address: 0x180041b50)
- wcschr (Address: 0x180041be8)
- wcsrchr (Address: 0x180041be0)
- wcsstr (Address: 0x180041bb8)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x180041c80)
- _initterm_e (Address: 0x180041c88)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x180041cb8)
- strcmp (Address: 0x180041cb0)
- strncmp (Address: 0x180041ca0)
- wcscmp (Address: 0x180041c98)
- wcsncmp (Address: 0x180041cc8)
- wcsncpy (Address: 0x180041cc0)
- wcsnlen (Address: 0x180041ca8)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x180041ce8)
- EventUnregister (Address: 0x180041cd8)
- EventWriteTransfer (Address: 0x180041ce0)
api-ms-win-security-base-l1-1-0.dll
- AdjustTokenPrivileges (Address: 0x180041d08)
- DuplicateTokenEx (Address: 0x180041d28)
- GetSecurityDescriptorControl (Address: 0x180041d10)
- GetSecurityDescriptorDacl (Address: 0x180041d00)
- GetSecurityDescriptorGroup (Address: 0x180041d30)
- GetSecurityDescriptorOwner (Address: 0x180041d18)
- GetSecurityDescriptorSacl (Address: 0x180041d20)
- GetTokenInformation (Address: 0x180041cf8)
api-ms-win-security-lsalookup-l2-1-0.dll
- LookupPrivilegeValueW (Address: 0x180041d40)
api-ms-win-security-provider-l1-1-0.dll
- SetNamedSecurityInfoW (Address: 0x180041d50)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x180041d68)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180041d60)
bcrypt.dll
- BCryptCloseAlgorithmProvider (Address: 0x180041da0)
- BCryptCreateHash (Address: 0x180041d88)
- BCryptDestroyHash (Address: 0x180041d98)
- BCryptFinishHash (Address: 0x180041d80)
- BCryptHash (Address: 0x180041d78)
- BCryptHashData (Address: 0x180041d90)
- BCryptOpenAlgorithmProvider (Address: 0x180041da8)
CRYPT32.dll
- CertCloseStore (Address: 0x180041588)
- CertComparePublicKeyInfo (Address: 0x180041568)
- CertCreateCertificateContext (Address: 0x180041538)
- CertEnumCertificatesInStore (Address: 0x180041550)
- CertFindCertificateInStore (Address: 0x180041560)
- CertFreeCertificateContext (Address: 0x180041558)
- CertGetCertificateContextProperty (Address: 0x180041570)
- CertGetNameStringW (Address: 0x180041580)
- CryptMsgClose (Address: 0x180041578)
- CryptMsgGetParam (Address: 0x180041540)
- CryptQueryObject (Address: 0x180041548)
imagehlp.dll
- CheckSumMappedFile (Address: 0x180041db8)
ntdll.dll
- LdrAccessResource (Address: 0x180041e58)
- LdrFindResource_U (Address: 0x180041e50)
- LdrGetDllHandle (Address: 0x180041fb0)
- LdrGetProcedureAddress (Address: 0x180041fa8)
- NtAdjustPrivilegesToken (Address: 0x180042008)
- NtClose (Address: 0x180041e00)
- NtCreateEvent (Address: 0x180041e08)
- NtDeviceIoControlFile (Address: 0x180041df0)
- NtEnumerateBootEntries (Address: 0x180041e60)
- NtOpenDirectoryObject (Address: 0x180041f30)
- NtOpenFile (Address: 0x180041e28)
- NtOpenKey (Address: 0x180041ed8)
- NtOpenProcess (Address: 0x180041dd8)
- NtOpenProcessTokenEx (Address: 0x180042010)
- NtOpenSymbolicLinkObject (Address: 0x180041ec8)
- NtOpenThreadTokenEx (Address: 0x180042018)
- NtQueryBootEntryOrder (Address: 0x180041f20)
- NtQueryBootOptions (Address: 0x180041f28)
- NtQueryDirectoryObject (Address: 0x180041f38)
- NtQueryInformationFile (Address: 0x180041e10)
- NtQueryInformationProcess (Address: 0x180041dd0)
- NtQueryInformationThread (Address: 0x180041e18)
- NtQuerySymbolicLinkObject (Address: 0x180041ee0)
- NtQuerySystemEnvironmentValueEx (Address: 0x180042040)
- NtQuerySystemInformation (Address: 0x180042058)
- NtQueryValueKey (Address: 0x180041f18)
- NtReadFile (Address: 0x180041de0)
- NtSetInformationFile (Address: 0x180041e38)
- NtSetInformationThread (Address: 0x180041de8)
- NtSetSystemEnvironmentValueEx (Address: 0x180042048)
- NtTranslateFilePath (Address: 0x180042030)
- NtWaitForSingleObject (Address: 0x180041e20)
- NtWriteFile (Address: 0x180041dc8)
- RtlAddAccessAllowedAceEx (Address: 0x180041ee8)
- RtlAdjustPrivilege (Address: 0x180042028)
- RtlAllocateAndInitializeSid (Address: 0x180042060)
- RtlAllocateHeap (Address: 0x180042068)
- RtlAppendUnicodeToString (Address: 0x180041ea8)
- RtlCreateAcl (Address: 0x180041f08)
- RtlCreateSecurityDescriptor (Address: 0x180041f10)
- RtlFreeHeap (Address: 0x180041e48)
- RtlFreeSid (Address: 0x180041f00)
- RtlFreeUnicodeString (Address: 0x180041e30)
- RtlGUIDFromString (Address: 0x180041ea0)
- RtlImageNtHeader (Address: 0x180041df8)
- RtlImageNtHeaderEx (Address: 0x180041ef0)
- RtlImpersonateSelf (Address: 0x180042020)
- RtlInitAnsiString (Address: 0x180041fc0)
- RtlInitUnicodeString (Address: 0x180042050)
- RtlLengthSecurityDescriptor (Address: 0x180041eb8)
- RtlLengthSid (Address: 0x180041ef8)
- RtlNtStatusToDosError (Address: 0x180042038)
- RtlSetDaclSecurityDescriptor (Address: 0x180041ed0)
- RtlSetOwnerSecurityDescriptor (Address: 0x180041ec0)
- RtlStringFromGUID (Address: 0x180041e40)
- ZwAllocateUuids (Address: 0x180042000)
- ZwClose (Address: 0x180041e90)
- ZwCreateFile (Address: 0x180041f40)
- ZwCreateKey (Address: 0x180041f48)
- ZwDeleteKey (Address: 0x180041f70)
- ZwDeleteValueKey (Address: 0x180041f60)
- ZwDeviceIoControlFile (Address: 0x180041fe0)
- ZwEnumerateKey (Address: 0x180041f78)
- ZwFlushKey (Address: 0x180041f58)
- ZwLoadKey (Address: 0x180041f50)
- ZwOpenDirectoryObject (Address: 0x180041ff8)
- ZwOpenFile (Address: 0x180041e80)
- ZwOpenKey (Address: 0x180041fa0)
- ZwOpenMutant (Address: 0x180041e88)
- ZwOpenProcess (Address: 0x180041fd0)
- ZwOpenSymbolicLinkObject (Address: 0x180041ff0)
- ZwQueryAttributesFile (Address: 0x180041eb0)
- ZwQueryDirectoryObject (Address: 0x180041fe8)
- ZwQueryInformationFile (Address: 0x180041fc8)
- ZwQueryInformationProcess (Address: 0x180041fb8)
- ZwQueryKey (Address: 0x180041e70)
- ZwQuerySymbolicLinkObject (Address: 0x180041fd8)
- ZwQuerySystemInformation (Address: 0x180041e98)
- ZwQueryValueKey (Address: 0x180041f80)
- ZwReleaseMutant (Address: 0x180041e78)
- ZwSaveKey (Address: 0x180041f68)
- ZwSetSecurityObject (Address: 0x180041f88)
- ZwSetValueKey (Address: 0x180041f98)
- ZwUnloadKey (Address: 0x180041f90)
- ZwWaitForSingleObject (Address: 0x180041e68)
OLEAUT32.dll
- SafeArrayGetElement (Address: 0x180041598)
- SafeArrayGetLBound (Address: 0x1800415a0)
- SafeArrayGetUBound (Address: 0x1800415c0)
- SysAllocString (Address: 0x1800415a8)
- SysFreeString (Address: 0x1800415d0)
- SysStringLen (Address: 0x1800415b0)
- VariantClear (Address: 0x1800415b8)
- VariantInit (Address: 0x1800415c8)
RPCRT4.dll
- UuidCreate (Address: 0x1800415e0)
WCP.dll
- ?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z (Address: 0x1800415f0)
- ?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x180041618)
- ?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z (Address: 0x180041610)
- ConvertNtStatusToHResult (Address: 0x1800415f8)
- RtlFreeLBlob (Address: 0x180041608)
- RtlReportErrorOrigination (Address: 0x180041600)
WINTRUST.dll
- WinVerifyTrust (Address: 0x180041628)
- WTHelperGetProvSignerFromChain (Address: 0x180041638)
- WTHelperProvDataFromStateData (Address: 0x180041630)