bfsvc.dll

v10.0.19041.1704 64-bit Windows NT Analyzed
Download
Description
CMI boot file service plug-in
Authors
© Microsoft Corporation. All rights reserved.
File size
274.9 KB
Uploaded
2025-12-01 08:20
Views
42
SHA-256
9c02bf5f3fab04d38e07b3c931723595

Exported functions 2

DllCanUnloadNow #1 · 0x9100
DllCsiGetHandler #2 · 0x9120

Imported DLLs & functions 243

ADVAPI32.dll 13
AdjustTokenPrivileges 0x18002dee8
ConvertSidToStringSidW 0x18002deb0
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x18002dea8
GetSecurityDescriptorControl 0x18002dec8
GetSecurityDescriptorDacl 0x18002dee0
GetSecurityDescriptorGroup 0x18002ded8
GetSecurityDescriptorOwner 0x18002dec0
GetSecurityDescriptorSacl 0x18002def0
GetTokenInformation 0x18002de98
LookupPrivilegeValueW 0x18002def8
OpenProcessToken 0x18002deb8
OpenThreadToken 0x18002dea0
SetNamedSecurityInfoW 0x18002ded0
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18002e060
IsDebuggerPresent 0x18002e058
OutputDebugStringW 0x18002e068
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18002e090
SetLastError 0x18002e078
SetUnhandledExceptionFilter 0x18002e080
UnhandledExceptionFilter 0x18002e088
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18002e0a0
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x18002e0c8
HeapAlloc 0x18002e0b0
HeapDestroy 0x18002e0c0
HeapFree 0x18002e0b8
api-ms-win-core-libraryloader-l1-1-0.dll 8
DisableThreadLibraryCalls 0x18002e100
FindResourceExW 0x18002e0f0
FreeLibrary 0x18002e0e0
GetModuleFileNameA 0x18002e108
GetModuleHandleExW 0x18002e0d8
GetModuleHandleW 0x18002e0f8
GetProcAddress 0x18002e110
LoadResource 0x18002e0e8
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18002e120
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x18002e138
GetUserDefaultUILanguage 0x18002e130
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x18002e148
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x18002e160
GetCurrentProcessId 0x18002e168
GetCurrentThreadId 0x18002e158
TerminateProcess 0x18002e170
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18002e180
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x18002e190
RegCreateKeyExW 0x18002e198
RegOpenKeyExW 0x18002e1a8
RegQueryValueExW 0x18002e1a0
RegSetValueExW 0x18002e1b0
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x18002e1d0
RtlCompareMemory 0x18002e1d8
RtlLookupFunctionEntry 0x18002e1c0
RtlVirtualUnwind 0x18002e1c8
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x18002e1f8
AcquireSRWLockShared 0x18002e1e8
CreateMutexExW 0x18002e228
CreateSemaphoreExW 0x18002e260
DeleteCriticalSection 0x18002e250
EnterCriticalSection 0x18002e238
InitializeCriticalSection 0x18002e218
InitializeCriticalSectionEx 0x18002e240
LeaveCriticalSection 0x18002e220
OpenSemaphoreW 0x18002e248
ReleaseMutex 0x18002e210
ReleaseSemaphore 0x18002e208
ReleaseSRWLockExclusive 0x18002e1f0
ReleaseSRWLockShared 0x18002e200
WaitForSingleObject 0x18002e258
WaitForSingleObjectEx 0x18002e230
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x18002e270
api-ms-win-core-sysinfo-l1-1-0.dll 4
GetSystemTimeAsFileTime 0x18002e288
GetSystemWindowsDirectoryW 0x18002e290
GetTickCount 0x18002e298
GetVersionExW 0x18002e280
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x18002e2c0
CreateThreadpoolTimer 0x18002e2b0
SetThreadpoolTimer 0x18002e2b8
WaitForThreadpoolTimerCallbacks 0x18002e2a8
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x18002e2d0
EventUnregister 0x18002e2d8
EventWriteTransfer 0x18002e2e0
imagehlp.dll 1
CheckSumMappedFile 0x18002e2f0
KERNEL32.dll 31
CopyFileExW 0x18002df70
CreateDirectoryW 0x18002dff8
CreateFileMappingW 0x18002dfb0
CreateFileW 0x18002dfd0
DeleteFileW 0x18002df10
DeviceIoControl 0x18002dfe0
FindClose 0x18002df60
FindFirstFileW 0x18002df88
FindNextFileW 0x18002df80
FlushFileBuffers 0x18002dfa0
GetCurrentThread 0x18002dfb8
GetFileAttributesW 0x18002df58
GetFileInformationByHandle 0x18002df20
GetFileInformationByHandleEx 0x18002df28
GetFileSizeEx 0x18002dfe8
GetFullPathNameW 0x18002df08
GetLocaleInfoW 0x18002df30
GetPrivateProfileSectionW 0x18002df68
GetVolumeInformationW 0x18002df90
GetVolumeNameForVolumeMountPointW 0x18002dfc0
GetVolumePathNameW 0x18002dfd8
LoadLibraryExW 0x18002df98
LoadLibraryW 0x18002df40
LocalFree 0x18002df38
MapViewOfFile 0x18002dfa8
MoveFileExW 0x18002df48
QueryDosDeviceW 0x18002dff0
SetFileAttributesW 0x18002df50
SetFileInformationByHandle 0x18002df18
UnmapViewOfFile 0x18002dfc8
WriteFile 0x18002df78
msvcrt.dll 44
__C_specific_handler 0x18002e300
__dllonexit 0x18002e330
__iob_func 0x18002e450
_amsg_exit 0x18002e418
_callnewh 0x18002e400
_initterm 0x18002e438
_lock 0x18002e320
_onexit 0x18002e338
_purecall 0x18002e308
_snwscanf_s 0x18002e3b8
_ultow_s 0x18002e3a0
_unlock 0x18002e328
_vsnwprintf 0x18002e440
_vsnwprintf_s 0x18002e358
_wcsicmp 0x18002e370
_wcslwr 0x18002e3c0
_wcsnicmp 0x18002e378
_wcsupr 0x18002e398
_wfopen_s 0x18002e348
_XcptFilter 0x18002e408
bsearch 0x18002e3f0
fclose 0x18002e350
fflush 0x18002e340
free 0x18002e410
fwprintf 0x18002e360
malloc 0x18002e388
memcmp 0x18002e428
memcpy 0x18002e430
memcpy_s 0x18002e448
memmove 0x18002e3f8
memmove_s 0x18002e318
memset 0x18002e458
strcpy_s 0x18002e3d8
strncmp 0x18002e3e0
swprintf_s 0x18002e420
wcscat_s 0x18002e380
wcschr 0x18002e390
wcscpy_s 0x18002e368
wcsncmp 0x18002e3e8
wcsncpy_s 0x18002e3b0
wcsnlen 0x18002e3d0
wcsrchr 0x18002e310
wcsstr 0x18002e3c8
wcstoul 0x18002e3a8
ntdll.dll 81
LdrAccessResource 0x18002e4d0
LdrFindResource_U 0x18002e4c8
LdrGetDllHandle 0x18002e688
LdrGetProcedureAddress 0x18002e680
NtAdjustPrivilegesToken 0x18002e6b0
NtClose 0x18002e6e0
NtCreateEvent 0x18002e490
NtDeviceIoControlFile 0x18002e480
NtEnumerateBootEntries 0x18002e5e0
NtOpenDirectoryObject 0x18002e5d0
NtOpenFile 0x18002e4b8
NtOpenKey 0x18002e570
NtOpenProcess 0x18002e5a0
NtOpenProcessTokenEx 0x18002e6b8
NtOpenSymbolicLinkObject 0x18002e560
NtOpenThreadTokenEx 0x18002e6c0
NtQueryBootEntryOrder 0x18002e5b8
NtQueryBootOptions 0x18002e5c0
NtQueryDirectoryObject 0x18002e5d8
NtQueryInformationFile 0x18002e498
NtQueryInformationProcess 0x18002e6e8
NtQueryInformationThread 0x18002e4a0
NtQuerySymbolicLinkObject 0x18002e578
NtQuerySystemInformation 0x18002e4c0
NtQueryValueKey 0x18002e5b0
NtReadFile 0x18002e470
NtSetInformationFile 0x18002e4e0
NtSetInformationThread 0x18002e478
NtTranslateFilePath 0x18002e5c8
NtWaitForSingleObject 0x18002e4b0
NtWriteFile 0x18002e6d0
RtlAddAccessAllowedAceEx 0x18002e580
RtlAllocateAndInitializeSid 0x18002e588
RtlAllocateHeap 0x18002e4f8
RtlAppendUnicodeToString 0x18002e510
RtlCreateAcl 0x18002e6d8
RtlCreateSecurityDescriptor 0x18002e5a8
RtlFreeHeap 0x18002e4f0
RtlFreeSid 0x18002e598
RtlFreeUnicodeString 0x18002e4d8
RtlGUIDFromString 0x18002e508
RtlImageNtHeader 0x18002e488
RtlImpersonateSelf 0x18002e6c8
RtlInitAnsiString 0x18002e698
RtlInitUnicodeString 0x18002e468
RtlLengthSecurityDescriptor 0x18002e550
RtlLengthSid 0x18002e590
RtlNtStatusToDosError 0x18002e4a8
RtlSetDaclSecurityDescriptor 0x18002e568
RtlSetOwnerSecurityDescriptor 0x18002e558
RtlStringFromGUID 0x18002e4e8
ZwAllocateUuids 0x18002e650
ZwClose 0x18002e548
ZwCreateFile 0x18002e5e8
ZwCreateKey 0x18002e5f0
ZwDeleteKey 0x18002e618
ZwDeleteValueKey 0x18002e608
ZwDeviceIoControlFile 0x18002e660
ZwEnumerateKey 0x18002e620
ZwFlushKey 0x18002e600
ZwLoadKey 0x18002e5f8
ZwOpenDirectoryObject 0x18002e678
ZwOpenFile 0x18002e538
ZwOpenKey 0x18002e648
ZwOpenMutant 0x18002e540
ZwOpenProcess 0x18002e6a8
ZwOpenSymbolicLinkObject 0x18002e670
ZwQueryAttributesFile 0x18002e518
ZwQueryDirectoryObject 0x18002e668
ZwQueryInformationFile 0x18002e6a0
ZwQueryInformationProcess 0x18002e690
ZwQueryKey 0x18002e528
ZwQuerySymbolicLinkObject 0x18002e658
ZwQuerySystemInformation 0x18002e500
ZwQueryValueKey 0x18002e628
ZwReleaseMutant 0x18002e530
ZwSaveKey 0x18002e610
ZwSetSecurityObject 0x18002e630
ZwSetValueKey 0x18002e640
ZwUnloadKey 0x18002e638
ZwWaitForSingleObject 0x18002e520
RPCRT4.dll 1
UuidCreate 0x18002e008
SHLWAPI.dll 1
PathRemoveBackslashW 0x18002e018
WCP.dll 5
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x18002e038
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x18002e028
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x18002e030
RtlFreeLUnicodeString 0x18002e048
RtlReportErrorOrigination 0x18002e040