bfsvc.dll

v10.0.19041.1940 32-bit Windows NT Analyzed
Download
Description
CMI boot file service plug-in
Authors
© Microsoft Corporation. All rights reserved.
File size
222.4 KB
Uploaded
2025-12-01 08:39
Views
22
SHA-256
2fffd45554f03ff63e77931c419a702c

Exported functions 2

DllCanUnloadNow #1 · 0x17970
DllCsiGetHandler #2 · 0x17990

Imported DLLs & functions 241

ADVAPI32.dll 13
AdjustTokenPrivileges 0x10033028
ConvertSidToStringSidW 0x1003300c
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x10033008
GetSecurityDescriptorControl 0x10033018
GetSecurityDescriptorDacl 0x10033024
GetSecurityDescriptorGroup 0x10033020
GetSecurityDescriptorOwner 0x10033014
GetSecurityDescriptorSacl 0x1003302c
GetTokenInformation 0x10033000
LookupPrivilegeValueW 0x10033030
OpenProcessToken 0x10033010
OpenThreadToken 0x10033004
SetNamedSecurityInfoW 0x1003301c
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x100330e8
IsDebuggerPresent 0x100330e4
OutputDebugStringW 0x100330e0
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x100330f4
SetLastError 0x100330f0
SetUnhandledExceptionFilter 0x100330f8
UnhandledExceptionFilter 0x100330fc
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x10033104
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x10033114
HeapAlloc 0x1003310c
HeapDestroy 0x10033118
HeapFree 0x10033110
api-ms-win-core-libraryloader-l1-1-0.dll 8
DisableThreadLibraryCalls 0x10033134
FindResourceExW 0x1003313c
FreeLibrary 0x10033120
GetModuleFileNameA 0x10033128
GetModuleHandleExW 0x10033130
GetModuleHandleW 0x10033138
GetProcAddress 0x10033124
LoadResource 0x1003312c
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x10033144
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x1003314c
GetUserDefaultUILanguage 0x10033150
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x10033158
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x10033168
GetCurrentProcessId 0x10033160
GetCurrentThreadId 0x10033164
TerminateProcess 0x1003316c
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x10033174
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x10033180
RegCreateKeyExW 0x1003318c
RegOpenKeyExW 0x10033184
RegQueryValueExW 0x1003317c
RegSetValueExW 0x10033188
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x100331a0
AcquireSRWLockShared 0x10033198
CreateMutexExW 0x100331d0
CreateSemaphoreExW 0x100331b0
DeleteCriticalSection 0x100331c4
EnterCriticalSection 0x100331bc
InitializeCriticalSection 0x100331b4
InitializeCriticalSectionEx 0x100331c0
LeaveCriticalSection 0x100331ac
OpenSemaphoreW 0x100331cc
ReleaseMutex 0x100331a8
ReleaseSemaphore 0x100331a4
ReleaseSRWLockExclusive 0x1003319c
ReleaseSRWLockShared 0x10033194
WaitForSingleObject 0x100331c8
WaitForSingleObjectEx 0x100331b8
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x100331d8
api-ms-win-core-sysinfo-l1-1-0.dll 4
GetSystemTimeAsFileTime 0x100331ec
GetSystemWindowsDirectoryW 0x100331e4
GetTickCount 0x100331e8
GetVersionExW 0x100331e0
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x100331f8
CreateThreadpoolTimer 0x100331f4
SetThreadpoolTimer 0x10033200
WaitForThreadpoolTimerCallbacks 0x100331fc
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x1003320c
EventUnregister 0x10033210
EventWriteTransfer 0x10033208
imagehlp.dll 1
CheckSumMappedFile 0x10033218
KERNEL32.dll 31
CopyFileExW 0x1003306c
CreateDirectoryW 0x100330b0
CreateFileMappingW 0x1003308c
CreateFileW 0x1003309c
DeleteFileW 0x1003303c
DeviceIoControl 0x100330a4
FindClose 0x10033064
FindFirstFileW 0x10033078
FindNextFileW 0x10033074
FlushFileBuffers 0x10033084
GetCurrentThread 0x10033090
GetFileAttributesW 0x10033060
GetFileInformationByHandle 0x10033044
GetFileInformationByHandleEx 0x10033048
GetFileSizeEx 0x100330a8
GetFullPathNameW 0x10033038
GetLocaleInfoW 0x1003304c
GetPrivateProfileSectionW 0x10033068
GetVolumeInformationW 0x1003307c
GetVolumeNameForVolumeMountPointW 0x10033094
GetVolumePathNameW 0x100330a0
LoadLibraryExW 0x10033080
LoadLibraryW 0x10033054
LocalFree 0x10033050
MapViewOfFile 0x10033088
MoveFileExW 0x10033058
QueryDosDeviceW 0x100330ac
SetFileAttributesW 0x1003305c
SetFileInformationByHandle 0x10033040
UnmapViewOfFile 0x10033098
WriteFile 0x10033070
msvcrt.dll 44
__dllonexit 0x100332a4
__iob_func 0x100332c8
_amsg_exit 0x1003323c
_callnewh 0x100332b4
_except_handler4_common 0x100332b0
_initterm 0x10033240
_lock 0x10033258
_onexit 0x100332ac
_purecall 0x10033228
_snwscanf_s 0x10033280
_ultow_s 0x10033274
_unlock 0x100332a0
_vsnwprintf 0x100332a8
_vsnwprintf_s 0x10033250
_wcsicmp 0x1003325c
_wcslwr 0x10033284
_wcsnicmp 0x10033260
_wcsupr 0x10033270
_wfopen_s 0x10033248
_XcptFilter 0x10033234
bsearch 0x1003329c
fclose 0x1003324c
fflush 0x10033244
free 0x10033224
fwprintf 0x10033254
malloc 0x10033220
memcmp 0x100332bc
memcpy 0x100332c0
memcpy_s 0x10033238
memmove 0x100332b8
memmove_s 0x10033230
memset 0x100332cc
strcpy_s 0x10033290
strncmp 0x10033294
swprintf_s 0x10033268
wcscat_s 0x10033264
wcschr 0x1003326c
wcscpy_s 0x100332c4
wcsncmp 0x10033298
wcsncpy_s 0x1003327c
wcsnlen 0x1003328c
wcsrchr 0x1003322c
wcsstr 0x10033288
wcstoul 0x10033278
ntdll.dll 83
LdrAccessResource 0x10033308
LdrFindResource_U 0x10033304
LdrGetDllHandle 0x100333ec
LdrGetProcedureAddress 0x100333e8
NtAdjustPrivilegesToken 0x10033400
NtClose 0x10033418
NtCreateEvent 0x100332e8
NtDeviceIoControlFile 0x100332e0
NtEnumerateBootEntries 0x10033394
NtOpenDirectoryObject 0x1003338c
NtOpenFile 0x100332fc
NtOpenKey 0x1003335c
NtOpenProcess 0x10033374
NtOpenProcessTokenEx 0x10033404
NtOpenSymbolicLinkObject 0x10033354
NtOpenThreadTokenEx 0x10033408
NtQueryBootEntryOrder 0x10033380
NtQueryBootOptions 0x10033384
NtQueryDirectoryObject 0x10033390
NtQueryInformationFile 0x100332ec
NtQueryInformationProcess 0x1003341c
NtQueryInformationThread 0x100332f0
NtQuerySymbolicLinkObject 0x10033360
NtQuerySystemInformation 0x10033300
NtQueryValueKey 0x1003337c
NtReadFile 0x100332d8
NtSetInformationFile 0x10033310
NtSetInformationThread 0x100332dc
NtTranslateFilePath 0x10033388
NtWaitForSingleObject 0x100332f8
NtWriteFile 0x10033410
RtlAddAccessAllowedAceEx 0x10033364
RtlAllocateAndInitializeSid 0x10033368
RtlAllocateHeap 0x10033320
RtlAppendUnicodeToString 0x1003332c
RtlCompareMemory 0x1003331c
RtlCreateAcl 0x10033414
RtlCreateSecurityDescriptor 0x10033378
RtlFreeHeap 0x10033318
RtlFreeSid 0x10033370
RtlFreeUnicodeString 0x1003330c
RtlGetVersion 0x100333e0
RtlGUIDFromString 0x10033328
RtlImageNtHeader 0x100332e4
RtlImpersonateSelf 0x1003340c
RtlInitAnsiString 0x100333f4
RtlInitUnicodeString 0x100332d4
RtlLengthSecurityDescriptor 0x1003334c
RtlLengthSid 0x1003336c
RtlNtStatusToDosError 0x100332f4
RtlSetDaclSecurityDescriptor 0x10033358
RtlSetOwnerSecurityDescriptor 0x10033350
RtlStringFromGUID 0x10033314
ZwAllocateUuids 0x100333cc
ZwClose 0x10033348
ZwCreateFile 0x10033398
ZwCreateKey 0x1003339c
ZwDeleteKey 0x100333b0
ZwDeleteValueKey 0x100333a8
ZwDeviceIoControlFile 0x100333d4
ZwEnumerateKey 0x100333b4
ZwFlushKey 0x100333a4
ZwLoadKey 0x100333a0
ZwOpenDirectoryObject 0x100333e4
ZwOpenFile 0x10033340
ZwOpenKey 0x100333c8
ZwOpenMutant 0x10033344
ZwOpenProcess 0x100333fc
ZwOpenSymbolicLinkObject 0x100333dc
ZwQueryAttributesFile 0x10033330
ZwQueryDirectoryObject 0x100333d8
ZwQueryInformationFile 0x100333f8
ZwQueryInformationProcess 0x100333f0
ZwQueryKey 0x10033338
ZwQuerySymbolicLinkObject 0x100333d0
ZwQuerySystemInformation 0x10033324
ZwQueryValueKey 0x100333b8
ZwReleaseMutant 0x1003333c
ZwSaveKey 0x100333ac
ZwSetSecurityObject 0x100333bc
ZwSetValueKey 0x100333c4
ZwUnloadKey 0x100333c0
ZwWaitForSingleObject 0x10033334
RPCRT4.dll 1
UuidCreate 0x100330b8
SHLWAPI.dll 1
PathRemoveBackslashW 0x100330c0
WCP.dll 5
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z 0x100330cc
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x100330d4
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z 0x100330d8
RtlFreeLUnicodeString 0x100330d0
RtlReportErrorOrigination 0x100330c8