bfsvc.dll

v10.0.19041.3745 64-bit Windows NT Analyzed
Download
Description
CMI boot file service plug-in
Authors
© Microsoft Corporation. All rights reserved.
File size
282.5 KB
Uploaded
2025-12-01 08:20
Views
26
SHA-256
65e3fca505493e7bbcdbceab619f47c0

Exported functions 2

DllCanUnloadNow #1 · 0x9150
DllCsiGetHandler #2 · 0x9170

Imported DLLs & functions 243

ADVAPI32.dll 13
AdjustTokenPrivileges 0x18002eee8
ConvertSidToStringSidW 0x18002eeb0
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x18002eea8
GetSecurityDescriptorControl 0x18002eec8
GetSecurityDescriptorDacl 0x18002eee0
GetSecurityDescriptorGroup 0x18002eed8
GetSecurityDescriptorOwner 0x18002eec0
GetSecurityDescriptorSacl 0x18002eef0
GetTokenInformation 0x18002ee98
LookupPrivilegeValueW 0x18002eef8
OpenProcessToken 0x18002eeb8
OpenThreadToken 0x18002eea0
SetNamedSecurityInfoW 0x18002eed0
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18002f060
IsDebuggerPresent 0x18002f058
OutputDebugStringW 0x18002f068
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18002f090
SetLastError 0x18002f078
SetUnhandledExceptionFilter 0x18002f080
UnhandledExceptionFilter 0x18002f088
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18002f0a0
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x18002f0c8
HeapAlloc 0x18002f0b0
HeapDestroy 0x18002f0c0
HeapFree 0x18002f0b8
api-ms-win-core-libraryloader-l1-1-0.dll 8
DisableThreadLibraryCalls 0x18002f100
FindResourceExW 0x18002f0f0
FreeLibrary 0x18002f0e0
GetModuleFileNameA 0x18002f108
GetModuleHandleExW 0x18002f0d8
GetModuleHandleW 0x18002f0f8
GetProcAddress 0x18002f110
LoadResource 0x18002f0e8
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18002f120
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x18002f138
GetUserDefaultUILanguage 0x18002f130
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x18002f148
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x18002f160
GetCurrentProcessId 0x18002f168
GetCurrentThreadId 0x18002f158
TerminateProcess 0x18002f170
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18002f180
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x18002f190
RegCreateKeyExW 0x18002f198
RegOpenKeyExW 0x18002f1a8
RegQueryValueExW 0x18002f1a0
RegSetValueExW 0x18002f1b0
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x18002f1d0
RtlCompareMemory 0x18002f1d8
RtlLookupFunctionEntry 0x18002f1c0
RtlVirtualUnwind 0x18002f1c8
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x18002f1f8
AcquireSRWLockShared 0x18002f1e8
CreateMutexExW 0x18002f228
CreateSemaphoreExW 0x18002f260
DeleteCriticalSection 0x18002f250
EnterCriticalSection 0x18002f238
InitializeCriticalSection 0x18002f218
InitializeCriticalSectionEx 0x18002f240
LeaveCriticalSection 0x18002f220
OpenSemaphoreW 0x18002f248
ReleaseMutex 0x18002f210
ReleaseSemaphore 0x18002f208
ReleaseSRWLockExclusive 0x18002f1f0
ReleaseSRWLockShared 0x18002f200
WaitForSingleObject 0x18002f258
WaitForSingleObjectEx 0x18002f230
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x18002f270
api-ms-win-core-sysinfo-l1-1-0.dll 4
GetSystemTimeAsFileTime 0x18002f288
GetSystemWindowsDirectoryW 0x18002f290
GetTickCount 0x18002f298
GetVersionExW 0x18002f280
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x18002f2c0
CreateThreadpoolTimer 0x18002f2b0
SetThreadpoolTimer 0x18002f2b8
WaitForThreadpoolTimerCallbacks 0x18002f2a8
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x18002f2d0
EventUnregister 0x18002f2d8
EventWriteTransfer 0x18002f2e0
imagehlp.dll 1
CheckSumMappedFile 0x18002f2f0
KERNEL32.dll 31
CopyFileExW 0x18002ef70
CreateDirectoryW 0x18002eff8
CreateFileMappingW 0x18002efa8
CreateFileW 0x18002efc8
DeleteFileW 0x18002ef10
DeviceIoControl 0x18002efd8
FindClose 0x18002ef60
FindFirstFileW 0x18002ef88
FindNextFileW 0x18002ef80
FlushFileBuffers 0x18002ef98
GetCurrentThread 0x18002efb0
GetFileAttributesW 0x18002ef58
GetFileInformationByHandle 0x18002ef20
GetFileInformationByHandleEx 0x18002ef28
GetFileSizeEx 0x18002efe0
GetFullPathNameW 0x18002ef08
GetLocaleInfoW 0x18002ef30
GetPrivateProfileSectionW 0x18002ef68
GetVolumeInformationW 0x18002ef90
GetVolumeNameForVolumeMountPointW 0x18002efb8
GetVolumePathNameW 0x18002efd0
LoadLibraryExW 0x18002eff0
LoadLibraryW 0x18002ef40
LocalFree 0x18002ef38
MapViewOfFile 0x18002efa0
MoveFileExW 0x18002ef48
QueryDosDeviceW 0x18002efe8
SetFileAttributesW 0x18002ef50
SetFileInformationByHandle 0x18002ef18
UnmapViewOfFile 0x18002efc0
WriteFile 0x18002ef78
msvcrt.dll 44
__C_specific_handler 0x18002f300
__dllonexit 0x18002f330
__iob_func 0x18002f450
_amsg_exit 0x18002f418
_callnewh 0x18002f400
_initterm 0x18002f438
_lock 0x18002f320
_onexit 0x18002f338
_purecall 0x18002f308
_snwscanf_s 0x18002f3b8
_ultow_s 0x18002f3a0
_unlock 0x18002f328
_vsnwprintf 0x18002f440
_vsnwprintf_s 0x18002f358
_wcsicmp 0x18002f370
_wcslwr 0x18002f3c0
_wcsnicmp 0x18002f378
_wcsupr 0x18002f398
_wfopen_s 0x18002f348
_XcptFilter 0x18002f408
bsearch 0x18002f3f0
fclose 0x18002f350
fflush 0x18002f340
free 0x18002f410
fwprintf 0x18002f360
malloc 0x18002f388
memcmp 0x18002f428
memcpy 0x18002f430
memcpy_s 0x18002f448
memmove 0x18002f3f8
memmove_s 0x18002f318
memset 0x18002f458
strcpy_s 0x18002f3d8
strncmp 0x18002f3e0
swprintf_s 0x18002f420
wcscat_s 0x18002f380
wcschr 0x18002f390
wcscpy_s 0x18002f368
wcsncmp 0x18002f3e8
wcsncpy_s 0x18002f3b0
wcsnlen 0x18002f3d0
wcsrchr 0x18002f310
wcsstr 0x18002f3c8
wcstoul 0x18002f3a8
ntdll.dll 81
LdrAccessResource 0x18002f4d0
LdrFindResource_U 0x18002f4c8
LdrGetDllHandle 0x18002f688
LdrGetProcedureAddress 0x18002f680
NtAdjustPrivilegesToken 0x18002f6b0
NtClose 0x18002f6e0
NtCreateEvent 0x18002f490
NtDeviceIoControlFile 0x18002f480
NtEnumerateBootEntries 0x18002f5e0
NtOpenDirectoryObject 0x18002f5d0
NtOpenFile 0x18002f4b8
NtOpenKey 0x18002f570
NtOpenProcess 0x18002f5a0
NtOpenProcessTokenEx 0x18002f6b8
NtOpenSymbolicLinkObject 0x18002f560
NtOpenThreadTokenEx 0x18002f6c0
NtQueryBootEntryOrder 0x18002f5b8
NtQueryBootOptions 0x18002f5c0
NtQueryDirectoryObject 0x18002f5d8
NtQueryInformationFile 0x18002f498
NtQueryInformationProcess 0x18002f6e8
NtQueryInformationThread 0x18002f4a0
NtQuerySymbolicLinkObject 0x18002f578
NtQuerySystemInformation 0x18002f4c0
NtQueryValueKey 0x18002f5b0
NtReadFile 0x18002f470
NtSetInformationFile 0x18002f4e0
NtSetInformationThread 0x18002f478
NtTranslateFilePath 0x18002f5c8
NtWaitForSingleObject 0x18002f4b0
NtWriteFile 0x18002f6d0
RtlAddAccessAllowedAceEx 0x18002f580
RtlAllocateAndInitializeSid 0x18002f588
RtlAllocateHeap 0x18002f4f8
RtlAppendUnicodeToString 0x18002f510
RtlCreateAcl 0x18002f6d8
RtlCreateSecurityDescriptor 0x18002f5a8
RtlFreeHeap 0x18002f4f0
RtlFreeSid 0x18002f598
RtlFreeUnicodeString 0x18002f4d8
RtlGUIDFromString 0x18002f508
RtlImageNtHeader 0x18002f488
RtlImpersonateSelf 0x18002f6c8
RtlInitAnsiString 0x18002f698
RtlInitUnicodeString 0x18002f468
RtlLengthSecurityDescriptor 0x18002f550
RtlLengthSid 0x18002f590
RtlNtStatusToDosError 0x18002f4a8
RtlSetDaclSecurityDescriptor 0x18002f568
RtlSetOwnerSecurityDescriptor 0x18002f558
RtlStringFromGUID 0x18002f4e8
ZwAllocateUuids 0x18002f650
ZwClose 0x18002f548
ZwCreateFile 0x18002f5e8
ZwCreateKey 0x18002f5f0
ZwDeleteKey 0x18002f618
ZwDeleteValueKey 0x18002f608
ZwDeviceIoControlFile 0x18002f660
ZwEnumerateKey 0x18002f620
ZwFlushKey 0x18002f600
ZwLoadKey 0x18002f5f8
ZwOpenDirectoryObject 0x18002f678
ZwOpenFile 0x18002f538
ZwOpenKey 0x18002f648
ZwOpenMutant 0x18002f540
ZwOpenProcess 0x18002f6a8
ZwOpenSymbolicLinkObject 0x18002f670
ZwQueryAttributesFile 0x18002f518
ZwQueryDirectoryObject 0x18002f668
ZwQueryInformationFile 0x18002f6a0
ZwQueryInformationProcess 0x18002f690
ZwQueryKey 0x18002f528
ZwQuerySymbolicLinkObject 0x18002f658
ZwQuerySystemInformation 0x18002f500
ZwQueryValueKey 0x18002f628
ZwReleaseMutant 0x18002f530
ZwSaveKey 0x18002f610
ZwSetSecurityObject 0x18002f630
ZwSetValueKey 0x18002f640
ZwUnloadKey 0x18002f638
ZwWaitForSingleObject 0x18002f520
RPCRT4.dll 1
UuidCreate 0x18002f008
SHLWAPI.dll 1
PathRemoveBackslashW 0x18002f018
WCP.dll 5
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x18002f038
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x18002f028
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x18002f030
RtlFreeLUnicodeString 0x18002f048
RtlReportErrorOrigination 0x18002f040