bfsvc.dll

v10.0.19041.1 32-bit Windows NT Analyzed
Download
Description
CMI boot file service plug-in
Authors
© Microsoft Corporation. All rights reserved.
File size
188.0 KB
Uploaded
2025-12-01 08:39
Views
23
SHA-256
42667baf1ec03226162d0698a541a724

Exported functions 2

DllCanUnloadNow #1 · 0x109d0
DllCsiGetHandler #2 · 0x109f0

Imported DLLs & functions 211

ADVAPI32.dll 13
AdjustTokenPrivileges 0x1002b008
ConvertSidToStringSidW 0x1002b024
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1002b028
GetSecurityDescriptorControl 0x1002b018
GetSecurityDescriptorDacl 0x1002b00c
GetSecurityDescriptorGroup 0x1002b010
GetSecurityDescriptorOwner 0x1002b01c
GetSecurityDescriptorSacl 0x1002b004
GetTokenInformation 0x1002b030
LookupPrivilegeValueW 0x1002b000
OpenProcessToken 0x1002b020
OpenThreadToken 0x1002b02c
SetNamedSecurityInfoW 0x1002b014
api-ms-win-core-errorhandling-l1-1-0.dll 3
GetLastError 0x1002b0f8
SetUnhandledExceptionFilter 0x1002b0fc
UnhandledExceptionFilter 0x1002b0f4
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1002b104
HeapDestroy 0x1002b10c
HeapFree 0x1002b108
api-ms-win-core-libraryloader-l1-1-0.dll 6
DisableThreadLibraryCalls 0x1002b114
FindResourceExW 0x1002b124
FreeLibrary 0x1002b120
GetModuleHandleExW 0x1002b118
GetProcAddress 0x1002b11c
LoadResource 0x1002b128
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x1002b130
GetUserDefaultUILanguage 0x1002b134
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x1002b13c
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x1002b14c
GetCurrentProcessId 0x1002b144
GetCurrentThreadId 0x1002b150
TerminateProcess 0x1002b148
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1002b158
api-ms-win-core-registry-l1-1-0.dll 3
RegCloseKey 0x1002b168
RegOpenKeyExW 0x1002b164
RegQueryValueExW 0x1002b160
api-ms-win-core-synch-l1-1-0.dll 2
DeleteCriticalSection 0x1002b170
InitializeCriticalSection 0x1002b174
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x1002b17c
api-ms-win-core-sysinfo-l1-1-0.dll 4
GetSystemTimeAsFileTime 0x1002b190
GetSystemWindowsDirectoryW 0x1002b188
GetTickCount 0x1002b18c
GetVersionExW 0x1002b184
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x1002b19c
EventUnregister 0x1002b1a0
EventWriteTransfer 0x1002b198
imagehlp.dll 1
CheckSumMappedFile 0x1002b1a8
KERNEL32.dll 36
CloseHandle 0x1002b094
CopyFileExW 0x1002b058
CreateDirectoryW 0x1002b06c
CreateFileMappingW 0x1002b09c
CreateFileW 0x1002b084
DeleteFileW 0x1002b050
DeviceIoControl 0x1002b07c
FindClose 0x1002b0c0
FindFirstFileW 0x1002b0b0
FindNextFileW 0x1002b0b4
FlushFileBuffers 0x1002b0a4
FormatMessageW 0x1002b038
GetCurrentThread 0x1002b090
GetFileAttributesW 0x1002b0c4
GetFileInformationByHandle 0x1002b044
GetFileInformationByHandleEx 0x1002b03c
GetFileSizeEx 0x1002b074
GetFullPathNameW 0x1002b068
GetLocaleInfoW 0x1002b048
GetModuleHandleW 0x1002b054
GetPrivateProfileSectionW 0x1002b0bc
GetVolumeInformationW 0x1002b0ac
GetVolumeNameForVolumeMountPointW 0x1002b08c
GetVolumePathNameW 0x1002b080
HeapAlloc 0x1002b098
LoadLibraryExW 0x1002b0a8
LoadLibraryW 0x1002b05c
LocalFree 0x1002b040
MapViewOfFile 0x1002b0a0
MoveFileExW 0x1002b060
QueryDosDeviceW 0x1002b070
SetFileAttributesW 0x1002b064
SetFileInformationByHandle 0x1002b04c
SetLastError 0x1002b078
UnmapViewOfFile 0x1002b088
WriteFile 0x1002b0b8
msvcrt.dll 38
__iob_func 0x1002b240
_amsg_exit 0x1002b1b0
_callnewh 0x1002b228
_except_handler4_common 0x1002b1c0
_initterm 0x1002b1b8
_purecall 0x1002b1b4
_snwscanf_s 0x1002b208
_ultow_s 0x1002b1fc
_vsnwprintf 0x1002b1dc
_vsnwprintf_s 0x1002b1d0
_wcsicmp 0x1002b1e0
_wcslwr 0x1002b20c
_wcsnicmp 0x1002b1e4
_wcsupr 0x1002b1f4
_wfopen_s 0x1002b1c8
_XcptFilter 0x1002b238
bsearch 0x1002b224
fclose 0x1002b1cc
fflush 0x1002b1c4
free 0x1002b23c
fwprintf 0x1002b1d4
malloc 0x1002b1f8
memcmp 0x1002b234
memcpy 0x1002b230
memmove 0x1002b22c
memset 0x1002b244
strcpy_s 0x1002b218
strncmp 0x1002b21c
swprintf_s 0x1002b1ec
wcscat_s 0x1002b1e8
wcschr 0x1002b1f0
wcscpy_s 0x1002b1d8
wcsncmp 0x1002b220
wcsncpy_s 0x1002b204
wcsnlen 0x1002b214
wcsrchr 0x1002b1bc
wcsstr 0x1002b210
wcstoul 0x1002b200
ntdll.dll 83
LdrAccessResource 0x1002b280
LdrFindResource_U 0x1002b27c
LdrGetDllHandle 0x1002b364
LdrGetProcedureAddress 0x1002b360
NtAdjustPrivilegesToken 0x1002b378
NtClose 0x1002b390
NtCreateEvent 0x1002b260
NtDeviceIoControlFile 0x1002b258
NtEnumerateBootEntries 0x1002b30c
NtOpenDirectoryObject 0x1002b304
NtOpenFile 0x1002b274
NtOpenKey 0x1002b2d4
NtOpenProcess 0x1002b2ec
NtOpenProcessTokenEx 0x1002b37c
NtOpenSymbolicLinkObject 0x1002b2cc
NtOpenThreadTokenEx 0x1002b380
NtQueryBootEntryOrder 0x1002b2f8
NtQueryBootOptions 0x1002b2fc
NtQueryDirectoryObject 0x1002b308
NtQueryInformationFile 0x1002b264
NtQueryInformationProcess 0x1002b394
NtQueryInformationThread 0x1002b268
NtQuerySymbolicLinkObject 0x1002b2d8
NtQuerySystemInformation 0x1002b278
NtQueryValueKey 0x1002b2f4
NtReadFile 0x1002b250
NtSetInformationFile 0x1002b288
NtSetInformationThread 0x1002b254
NtTranslateFilePath 0x1002b300
NtWaitForSingleObject 0x1002b270
NtWriteFile 0x1002b388
RtlAddAccessAllowedAceEx 0x1002b2dc
RtlAllocateAndInitializeSid 0x1002b2e0
RtlAllocateHeap 0x1002b298
RtlAppendUnicodeToString 0x1002b2a4
RtlCompareMemory 0x1002b294
RtlCreateAcl 0x1002b38c
RtlCreateSecurityDescriptor 0x1002b2f0
RtlFreeHeap 0x1002b290
RtlFreeSid 0x1002b2e8
RtlFreeUnicodeString 0x1002b284
RtlGetVersion 0x1002b358
RtlGUIDFromString 0x1002b2a0
RtlImageNtHeader 0x1002b25c
RtlImpersonateSelf 0x1002b384
RtlInitAnsiString 0x1002b36c
RtlInitUnicodeString 0x1002b24c
RtlLengthSecurityDescriptor 0x1002b2c4
RtlLengthSid 0x1002b2e4
RtlNtStatusToDosError 0x1002b26c
RtlSetDaclSecurityDescriptor 0x1002b2d0
RtlSetOwnerSecurityDescriptor 0x1002b2c8
RtlStringFromGUID 0x1002b28c
ZwAllocateUuids 0x1002b344
ZwClose 0x1002b2c0
ZwCreateFile 0x1002b310
ZwCreateKey 0x1002b314
ZwDeleteKey 0x1002b328
ZwDeleteValueKey 0x1002b320
ZwDeviceIoControlFile 0x1002b34c
ZwEnumerateKey 0x1002b32c
ZwFlushKey 0x1002b31c
ZwLoadKey 0x1002b318
ZwOpenDirectoryObject 0x1002b35c
ZwOpenFile 0x1002b2b8
ZwOpenKey 0x1002b340
ZwOpenMutant 0x1002b2bc
ZwOpenProcess 0x1002b374
ZwOpenSymbolicLinkObject 0x1002b354
ZwQueryAttributesFile 0x1002b2a8
ZwQueryDirectoryObject 0x1002b350
ZwQueryInformationFile 0x1002b370
ZwQueryInformationProcess 0x1002b368
ZwQueryKey 0x1002b2b0
ZwQuerySymbolicLinkObject 0x1002b348
ZwQuerySystemInformation 0x1002b29c
ZwQueryValueKey 0x1002b330
ZwReleaseMutant 0x1002b2b4
ZwSaveKey 0x1002b324
ZwSetSecurityObject 0x1002b334
ZwSetValueKey 0x1002b33c
ZwUnloadKey 0x1002b338
ZwWaitForSingleObject 0x1002b2ac
RPCRT4.dll 1
UuidCreate 0x1002b0cc
SHLWAPI.dll 1
PathRemoveBackslashW 0x1002b0d4
WCP.dll 5
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z 0x1002b0ec
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x1002b0e4
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z 0x1002b0e8
RtlFreeLUnicodeString 0x1002b0dc
RtlReportErrorOrigination 0x1002b0e0