bfsvc.dll

v10.0.19041.3025 64-bit Windows NT Analyzed
Download
Description
CMI boot file service plug-in
Authors
© Microsoft Corporation. All rights reserved.
File size
268.3 KB
Uploaded
2025-12-01 08:20
Views
32
SHA-256
e5fff8ebdb887dbbd1f3ad480d18758b

Exported functions 2

DllCanUnloadNow #1 · 0x7bb0
DllCsiGetHandler #2 · 0x7bd0

Imported DLLs & functions 243

ADVAPI32.dll 13
AdjustTokenPrivileges 0x18002bee8
ConvertSidToStringSidW 0x18002beb0
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x18002bea8
GetSecurityDescriptorControl 0x18002bec8
GetSecurityDescriptorDacl 0x18002bee0
GetSecurityDescriptorGroup 0x18002bed8
GetSecurityDescriptorOwner 0x18002bec0
GetSecurityDescriptorSacl 0x18002bef0
GetTokenInformation 0x18002be98
LookupPrivilegeValueW 0x18002bef8
OpenProcessToken 0x18002beb8
OpenThreadToken 0x18002bea0
SetNamedSecurityInfoW 0x18002bed0
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18002c060
IsDebuggerPresent 0x18002c058
OutputDebugStringW 0x18002c068
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18002c090
SetLastError 0x18002c078
SetUnhandledExceptionFilter 0x18002c080
UnhandledExceptionFilter 0x18002c088
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18002c0a0
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x18002c0c8
HeapAlloc 0x18002c0b0
HeapDestroy 0x18002c0c0
HeapFree 0x18002c0b8
api-ms-win-core-libraryloader-l1-1-0.dll 8
DisableThreadLibraryCalls 0x18002c100
FindResourceExW 0x18002c0f0
FreeLibrary 0x18002c0e0
GetModuleFileNameA 0x18002c108
GetModuleHandleExW 0x18002c0d8
GetModuleHandleW 0x18002c0f8
GetProcAddress 0x18002c110
LoadResource 0x18002c0e8
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18002c120
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x18002c138
GetUserDefaultUILanguage 0x18002c130
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x18002c148
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x18002c160
GetCurrentProcessId 0x18002c168
GetCurrentThreadId 0x18002c158
TerminateProcess 0x18002c170
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18002c180
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x18002c190
RegCreateKeyExW 0x18002c198
RegOpenKeyExW 0x18002c1a8
RegQueryValueExW 0x18002c1a0
RegSetValueExW 0x18002c1b0
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x18002c1d0
RtlCompareMemory 0x18002c1d8
RtlLookupFunctionEntry 0x18002c1c0
RtlVirtualUnwind 0x18002c1c8
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x18002c1f8
AcquireSRWLockShared 0x18002c1e8
CreateMutexExW 0x18002c228
CreateSemaphoreExW 0x18002c260
DeleteCriticalSection 0x18002c250
EnterCriticalSection 0x18002c238
InitializeCriticalSection 0x18002c218
InitializeCriticalSectionEx 0x18002c240
LeaveCriticalSection 0x18002c220
OpenSemaphoreW 0x18002c248
ReleaseMutex 0x18002c210
ReleaseSemaphore 0x18002c208
ReleaseSRWLockExclusive 0x18002c1f0
ReleaseSRWLockShared 0x18002c200
WaitForSingleObject 0x18002c258
WaitForSingleObjectEx 0x18002c230
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x18002c270
api-ms-win-core-sysinfo-l1-1-0.dll 4
GetSystemTimeAsFileTime 0x18002c288
GetSystemWindowsDirectoryW 0x18002c290
GetTickCount 0x18002c298
GetVersionExW 0x18002c280
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x18002c2c0
CreateThreadpoolTimer 0x18002c2b0
SetThreadpoolTimer 0x18002c2b8
WaitForThreadpoolTimerCallbacks 0x18002c2a8
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x18002c2d0
EventUnregister 0x18002c2d8
EventWriteTransfer 0x18002c2e0
imagehlp.dll 1
CheckSumMappedFile 0x18002c2f0
KERNEL32.dll 31
CopyFileExW 0x18002bf70
CreateDirectoryW 0x18002bff8
CreateFileMappingW 0x18002bfb0
CreateFileW 0x18002bfd0
DeleteFileW 0x18002bf10
DeviceIoControl 0x18002bfe0
FindClose 0x18002bf60
FindFirstFileW 0x18002bf88
FindNextFileW 0x18002bf80
FlushFileBuffers 0x18002bfa0
GetCurrentThread 0x18002bfb8
GetFileAttributesW 0x18002bf58
GetFileInformationByHandle 0x18002bf20
GetFileInformationByHandleEx 0x18002bf28
GetFileSizeEx 0x18002bfe8
GetFullPathNameW 0x18002bf08
GetLocaleInfoW 0x18002bf30
GetPrivateProfileSectionW 0x18002bf68
GetVolumeInformationW 0x18002bf90
GetVolumeNameForVolumeMountPointW 0x18002bfc0
GetVolumePathNameW 0x18002bfd8
LoadLibraryExW 0x18002bf98
LoadLibraryW 0x18002bf40
LocalFree 0x18002bf38
MapViewOfFile 0x18002bfa8
MoveFileExW 0x18002bf48
QueryDosDeviceW 0x18002bff0
SetFileAttributesW 0x18002bf50
SetFileInformationByHandle 0x18002bf18
UnmapViewOfFile 0x18002bfc8
WriteFile 0x18002bf78
msvcrt.dll 44
__C_specific_handler 0x18002c300
__dllonexit 0x18002c330
__iob_func 0x18002c450
_amsg_exit 0x18002c418
_callnewh 0x18002c400
_initterm 0x18002c438
_lock 0x18002c320
_onexit 0x18002c338
_purecall 0x18002c308
_snwscanf_s 0x18002c3b8
_ultow_s 0x18002c3a0
_unlock 0x18002c328
_vsnwprintf 0x18002c440
_vsnwprintf_s 0x18002c358
_wcsicmp 0x18002c370
_wcslwr 0x18002c3c0
_wcsnicmp 0x18002c378
_wcsupr 0x18002c398
_wfopen_s 0x18002c348
_XcptFilter 0x18002c408
bsearch 0x18002c3f0
fclose 0x18002c350
fflush 0x18002c340
free 0x18002c410
fwprintf 0x18002c360
malloc 0x18002c388
memcmp 0x18002c428
memcpy 0x18002c430
memcpy_s 0x18002c448
memmove 0x18002c3f8
memmove_s 0x18002c318
memset 0x18002c458
strcpy_s 0x18002c3d8
strncmp 0x18002c3e0
swprintf_s 0x18002c420
wcscat_s 0x18002c380
wcschr 0x18002c390
wcscpy_s 0x18002c368
wcsncmp 0x18002c3e8
wcsncpy_s 0x18002c3b0
wcsnlen 0x18002c3d0
wcsrchr 0x18002c310
wcsstr 0x18002c3c8
wcstoul 0x18002c3a8
ntdll.dll 81
LdrAccessResource 0x18002c4d0
LdrFindResource_U 0x18002c4c8
LdrGetDllHandle 0x18002c688
LdrGetProcedureAddress 0x18002c680
NtAdjustPrivilegesToken 0x18002c6b0
NtClose 0x18002c6e0
NtCreateEvent 0x18002c490
NtDeviceIoControlFile 0x18002c480
NtEnumerateBootEntries 0x18002c5e0
NtOpenDirectoryObject 0x18002c5d0
NtOpenFile 0x18002c4b8
NtOpenKey 0x18002c570
NtOpenProcess 0x18002c5a0
NtOpenProcessTokenEx 0x18002c6b8
NtOpenSymbolicLinkObject 0x18002c560
NtOpenThreadTokenEx 0x18002c6c0
NtQueryBootEntryOrder 0x18002c5b8
NtQueryBootOptions 0x18002c5c0
NtQueryDirectoryObject 0x18002c5d8
NtQueryInformationFile 0x18002c498
NtQueryInformationProcess 0x18002c6e8
NtQueryInformationThread 0x18002c4a0
NtQuerySymbolicLinkObject 0x18002c578
NtQuerySystemInformation 0x18002c4c0
NtQueryValueKey 0x18002c5b0
NtReadFile 0x18002c470
NtSetInformationFile 0x18002c4e0
NtSetInformationThread 0x18002c478
NtTranslateFilePath 0x18002c5c8
NtWaitForSingleObject 0x18002c4b0
NtWriteFile 0x18002c6d0
RtlAddAccessAllowedAceEx 0x18002c580
RtlAllocateAndInitializeSid 0x18002c588
RtlAllocateHeap 0x18002c4f8
RtlAppendUnicodeToString 0x18002c510
RtlCreateAcl 0x18002c6d8
RtlCreateSecurityDescriptor 0x18002c5a8
RtlFreeHeap 0x18002c4f0
RtlFreeSid 0x18002c598
RtlFreeUnicodeString 0x18002c4d8
RtlGUIDFromString 0x18002c508
RtlImageNtHeader 0x18002c488
RtlImpersonateSelf 0x18002c6c8
RtlInitAnsiString 0x18002c698
RtlInitUnicodeString 0x18002c468
RtlLengthSecurityDescriptor 0x18002c550
RtlLengthSid 0x18002c590
RtlNtStatusToDosError 0x18002c4a8
RtlSetDaclSecurityDescriptor 0x18002c568
RtlSetOwnerSecurityDescriptor 0x18002c558
RtlStringFromGUID 0x18002c4e8
ZwAllocateUuids 0x18002c650
ZwClose 0x18002c548
ZwCreateFile 0x18002c5e8
ZwCreateKey 0x18002c5f0
ZwDeleteKey 0x18002c618
ZwDeleteValueKey 0x18002c608
ZwDeviceIoControlFile 0x18002c660
ZwEnumerateKey 0x18002c620
ZwFlushKey 0x18002c600
ZwLoadKey 0x18002c5f8
ZwOpenDirectoryObject 0x18002c678
ZwOpenFile 0x18002c538
ZwOpenKey 0x18002c648
ZwOpenMutant 0x18002c540
ZwOpenProcess 0x18002c6a8
ZwOpenSymbolicLinkObject 0x18002c670
ZwQueryAttributesFile 0x18002c518
ZwQueryDirectoryObject 0x18002c668
ZwQueryInformationFile 0x18002c6a0
ZwQueryInformationProcess 0x18002c690
ZwQueryKey 0x18002c528
ZwQuerySymbolicLinkObject 0x18002c658
ZwQuerySystemInformation 0x18002c500
ZwQueryValueKey 0x18002c628
ZwReleaseMutant 0x18002c530
ZwSaveKey 0x18002c610
ZwSetSecurityObject 0x18002c630
ZwSetValueKey 0x18002c640
ZwUnloadKey 0x18002c638
ZwWaitForSingleObject 0x18002c520
RPCRT4.dll 1
UuidCreate 0x18002c008
SHLWAPI.dll 1
PathRemoveBackslashW 0x18002c018
WCP.dll 5
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x18002c038
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x18002c028
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x18002c030
RtlFreeLUnicodeString 0x18002c048
RtlReportErrorOrigination 0x18002c040