bfsvc.dll

v10.0.19041.1 64-bit Windows NT Analyzed
Download
Description
CMI boot file service plug-in
Authors
© Microsoft Corporation. All rights reserved.
File size
229.8 KB
Uploaded
2025-12-01 08:20
Views
31
SHA-256
d3d93fabb4ebe3ff70122c9e06eb5041

Exported functions 2

DllCanUnloadNow #1 · 0x1f40
DllCsiGetHandler #2 · 0x1f60

Imported DLLs & functions 213

ADVAPI32.dll 13
AdjustTokenPrivileges 0x180025e98
ConvertSidToStringSidW 0x180025e48
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x180025e60
GetSecurityDescriptorControl 0x180025e78
GetSecurityDescriptorDacl 0x180025e90
GetSecurityDescriptorGroup 0x180025e88
GetSecurityDescriptorOwner 0x180025e70
GetSecurityDescriptorSacl 0x180025ea0
GetTokenInformation 0x180025e50
LookupPrivilegeValueW 0x180025ea8
OpenProcessToken 0x180025e68
OpenThreadToken 0x180025e58
SetNamedSecurityInfoW 0x180025e80
api-ms-win-core-errorhandling-l1-1-0.dll 3
GetLastError 0x180026038
SetUnhandledExceptionFilter 0x180026030
UnhandledExceptionFilter 0x180026040
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x180026058
HeapDestroy 0x180026050
HeapFree 0x180026060
api-ms-win-core-libraryloader-l1-1-0.dll 6
DisableThreadLibraryCalls 0x180026098
FindResourceExW 0x180026078
FreeLibrary 0x180026090
GetModuleHandleExW 0x180026080
GetProcAddress 0x180026070
LoadResource 0x180026088
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x1800260b0
GetUserDefaultUILanguage 0x1800260a8
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x1800260c0
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x1800260e8
GetCurrentProcessId 0x1800260d0
GetCurrentThreadId 0x1800260d8
TerminateProcess 0x1800260e0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800260f8
api-ms-win-core-registry-l1-1-0.dll 3
RegCloseKey 0x180026118
RegOpenKeyExW 0x180026110
RegQueryValueExW 0x180026108
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x180026140
RtlCompareMemory 0x180026130
RtlLookupFunctionEntry 0x180026138
RtlVirtualUnwind 0x180026128
api-ms-win-core-synch-l1-1-0.dll 2
DeleteCriticalSection 0x180026158
InitializeCriticalSection 0x180026150
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x180026168
api-ms-win-core-sysinfo-l1-1-0.dll 4
GetSystemTimeAsFileTime 0x180026190
GetSystemWindowsDirectoryW 0x180026178
GetTickCount 0x180026188
GetVersionExW 0x180026180
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x1800261a8
EventUnregister 0x1800261a0
EventWriteTransfer 0x1800261b0
imagehlp.dll 1
CheckSumMappedFile 0x1800261c0
KERNEL32.dll 36
CloseHandle 0x180025f80
CopyFileExW 0x180025ec0
CreateDirectoryW 0x180025f30
CreateFileMappingW 0x180025f90
CreateFileW 0x180025f60
DeleteFileW 0x180025ed0
DeviceIoControl 0x180025f50
FindClose 0x180025f20
FindFirstFileW 0x180025fb8
FindNextFileW 0x180025fc0
FlushFileBuffers 0x180025fa0
FormatMessageW 0x180025fd0
GetCurrentThread 0x180025f78
GetFileAttributesW 0x180025f18
GetFileInformationByHandle 0x180025ee0
GetFileInformationByHandleEx 0x180025ee8
GetFileSizeEx 0x180025f40
GetFullPathNameW 0x180025eb8
GetLocaleInfoW 0x180025ef0
GetModuleHandleW 0x180025ec8
GetPrivateProfileSectionW 0x180025f28
GetVolumeInformationW 0x180025fb0
GetVolumeNameForVolumeMountPointW 0x180025f70
GetVolumePathNameW 0x180025f58
HeapAlloc 0x180025f88
LoadLibraryExW 0x180025fa8
LoadLibraryW 0x180025f00
LocalFree 0x180025ef8
MapViewOfFile 0x180025f98
MoveFileExW 0x180025f08
QueryDosDeviceW 0x180025f38
SetFileAttributesW 0x180025f10
SetFileInformationByHandle 0x180025ed8
SetLastError 0x180025f48
UnmapViewOfFile 0x180025f68
WriteFile 0x180025fc8
msvcrt.dll 38
__C_specific_handler 0x1800261d0
__iob_func 0x1800262f0
_amsg_exit 0x1800262b8
_callnewh 0x1800261f0
_initterm 0x1800262c0
_purecall 0x1800261e0
_snwscanf_s 0x180026278
_ultow_s 0x180026260
_vsnwprintf 0x180026228
_vsnwprintf_s 0x180026210
_wcsicmp 0x180026230
_wcslwr 0x180026280
_wcsnicmp 0x1800262e8
_wcsupr 0x180026258
_wfopen_s 0x180026200
_XcptFilter 0x180026238
bsearch 0x1800262b0
fclose 0x180026208
fflush 0x1800261f8
free 0x1800261d8
fwprintf 0x180026218
malloc 0x1800261e8
memcmp 0x1800262d8
memcpy 0x1800262d0
memmove 0x1800262e0
memset 0x1800262f8
strcpy_s 0x180026298
strncmp 0x1800262a0
swprintf_s 0x180026248
wcscat_s 0x180026240
wcschr 0x180026250
wcscpy_s 0x180026220
wcsncmp 0x1800262a8
wcsncpy_s 0x180026270
wcsnlen 0x180026290
wcsrchr 0x1800262c8
wcsstr 0x180026288
wcstoul 0x180026268
ntdll.dll 81
LdrAccessResource 0x180026370
LdrFindResource_U 0x180026368
LdrGetDllHandle 0x180026528
LdrGetProcedureAddress 0x180026520
NtAdjustPrivilegesToken 0x180026550
NtClose 0x180026580
NtCreateEvent 0x180026330
NtDeviceIoControlFile 0x180026320
NtEnumerateBootEntries 0x180026480
NtOpenDirectoryObject 0x180026470
NtOpenFile 0x180026358
NtOpenKey 0x180026410
NtOpenProcess 0x180026440
NtOpenProcessTokenEx 0x180026558
NtOpenSymbolicLinkObject 0x180026400
NtOpenThreadTokenEx 0x180026560
NtQueryBootEntryOrder 0x180026458
NtQueryBootOptions 0x180026460
NtQueryDirectoryObject 0x180026478
NtQueryInformationFile 0x180026338
NtQueryInformationProcess 0x180026588
NtQueryInformationThread 0x180026340
NtQuerySymbolicLinkObject 0x180026418
NtQuerySystemInformation 0x180026360
NtQueryValueKey 0x180026450
NtReadFile 0x180026310
NtSetInformationFile 0x180026380
NtSetInformationThread 0x180026318
NtTranslateFilePath 0x180026468
NtWaitForSingleObject 0x180026350
NtWriteFile 0x180026570
RtlAddAccessAllowedAceEx 0x180026420
RtlAllocateAndInitializeSid 0x180026428
RtlAllocateHeap 0x180026398
RtlAppendUnicodeToString 0x1800263b0
RtlCreateAcl 0x180026578
RtlCreateSecurityDescriptor 0x180026448
RtlFreeHeap 0x180026390
RtlFreeSid 0x180026438
RtlFreeUnicodeString 0x180026378
RtlGUIDFromString 0x1800263a8
RtlImageNtHeader 0x180026328
RtlImpersonateSelf 0x180026568
RtlInitAnsiString 0x180026538
RtlInitUnicodeString 0x180026308
RtlLengthSecurityDescriptor 0x1800263f0
RtlLengthSid 0x180026430
RtlNtStatusToDosError 0x180026348
RtlSetDaclSecurityDescriptor 0x180026408
RtlSetOwnerSecurityDescriptor 0x1800263f8
RtlStringFromGUID 0x180026388
ZwAllocateUuids 0x1800264f0
ZwClose 0x1800263e8
ZwCreateFile 0x180026488
ZwCreateKey 0x180026490
ZwDeleteKey 0x1800264b8
ZwDeleteValueKey 0x1800264a8
ZwDeviceIoControlFile 0x180026500
ZwEnumerateKey 0x1800264c0
ZwFlushKey 0x1800264a0
ZwLoadKey 0x180026498
ZwOpenDirectoryObject 0x180026518
ZwOpenFile 0x1800263d8
ZwOpenKey 0x1800264e8
ZwOpenMutant 0x1800263e0
ZwOpenProcess 0x180026548
ZwOpenSymbolicLinkObject 0x180026510
ZwQueryAttributesFile 0x1800263b8
ZwQueryDirectoryObject 0x180026508
ZwQueryInformationFile 0x180026540
ZwQueryInformationProcess 0x180026530
ZwQueryKey 0x1800263c8
ZwQuerySymbolicLinkObject 0x1800264f8
ZwQuerySystemInformation 0x1800263a0
ZwQueryValueKey 0x1800264c8
ZwReleaseMutant 0x1800263d0
ZwSaveKey 0x1800264b0
ZwSetSecurityObject 0x1800264d0
ZwSetValueKey 0x1800264e0
ZwUnloadKey 0x1800264d8
ZwWaitForSingleObject 0x1800263c0
RPCRT4.dll 1
UuidCreate 0x180025fe0
SHLWAPI.dll 1
PathRemoveBackslashW 0x180025ff0
WCP.dll 5
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x180026020
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180026010
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x180026008
RtlFreeLUnicodeString 0x180026018
RtlReportErrorOrigination 0x180026000