bfsvc.dll

v10.0.19041.4467 64-bit Windows NT Analyzed
Download
Description
CMI boot file service plug-in
Authors
© Microsoft Corporation. All rights reserved.
File size
289.9 KB
Uploaded
2025-12-01 08:20
Views
25
SHA-256
f37a01180834e05953026d50f269307e

Exported functions 2

DllCanUnloadNow #1 · 0x92d0
DllCsiGetHandler #2 · 0x92f0

Imported DLLs & functions 258

ADVAPI32.dll 15
AdjustTokenPrivileges 0x18002ff18
ConvertSidToStringSidW 0x18002fee0
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x18002fed8
DuplicateTokenEx 0x18002feb8
GetSecurityDescriptorControl 0x18002fef8
GetSecurityDescriptorDacl 0x18002ff10
GetSecurityDescriptorGroup 0x18002ff08
GetSecurityDescriptorOwner 0x18002fef0
GetSecurityDescriptorSacl 0x18002ff20
GetTokenInformation 0x18002fec0
LookupPrivilegeValueW 0x18002ff28
OpenProcessToken 0x18002fee8
OpenThreadToken 0x18002fec8
SetNamedSecurityInfoW 0x18002ff00
SetThreadToken 0x18002fed0
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1800300c8
IsDebuggerPresent 0x1800300d0
OutputDebugStringW 0x1800300c0
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x1800300e8
SetLastError 0x1800300f8
SetUnhandledExceptionFilter 0x1800300f0
UnhandledExceptionFilter 0x1800300e0
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x180030108
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x180030120
HeapAlloc 0x180030128
HeapDestroy 0x180030130
HeapFree 0x180030118
api-ms-win-core-libraryloader-l1-1-0.dll 8
DisableThreadLibraryCalls 0x180030148
FindResourceExW 0x180030168
FreeLibrary 0x180030158
GetModuleFileNameA 0x180030140
GetModuleHandleExW 0x180030178
GetModuleHandleW 0x180030160
GetProcAddress 0x180030150
LoadResource 0x180030170
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x180030188
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x180030198
GetUserDefaultUILanguage 0x1800301a0
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x1800301b0
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x1800301d8
GetCurrentProcessId 0x1800301d0
GetCurrentThreadId 0x1800301c0
TerminateProcess 0x1800301c8
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800301e8
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x180030218
RegCreateKeyExW 0x180030208
RegOpenKeyExW 0x1800301f8
RegQueryValueExW 0x180030210
RegSetValueExW 0x180030200
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x180030240
RtlCompareMemory 0x180030238
RtlLookupFunctionEntry 0x180030228
RtlVirtualUnwind 0x180030230
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x180030298
AcquireSRWLockShared 0x180030250
CreateMutexExW 0x1800302c8
CreateSemaphoreExW 0x180030270
DeleteCriticalSection 0x1800302b0
EnterCriticalSection 0x180030288
InitializeCriticalSection 0x180030258
InitializeCriticalSectionEx 0x1800302a0
LeaveCriticalSection 0x1800302a8
OpenSemaphoreW 0x1800302c0
ReleaseMutex 0x180030260
ReleaseSemaphore 0x180030268
ReleaseSRWLockExclusive 0x180030290
ReleaseSRWLockShared 0x180030280
WaitForSingleObject 0x1800302b8
WaitForSingleObjectEx 0x180030278
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x1800302d8
api-ms-win-core-sysinfo-l1-1-0.dll 4
GetSystemTimeAsFileTime 0x180030300
GetSystemWindowsDirectoryW 0x1800302f8
GetTickCount 0x1800302e8
GetVersionExW 0x1800302f0
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x180030320
CreateThreadpoolTimer 0x180030318
SetThreadpoolTimer 0x180030328
WaitForThreadpoolTimerCallbacks 0x180030310
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x180030338
EventUnregister 0x180030348
EventWriteTransfer 0x180030340
bcrypt.dll 6
BCryptCloseAlgorithmProvider 0x180030368
BCryptCreateHash 0x180030358
BCryptDestroyHash 0x180030380
BCryptFinishHash 0x180030370
BCryptHashData 0x180030378
BCryptOpenAlgorithmProvider 0x180030360
CRYPT32.dll 1
CertGetNameStringW 0x18002ff38
imagehlp.dll 1
CheckSumMappedFile 0x180030390
KERNEL32.dll 32
CopyFileExW 0x18002ff48
CreateDirectoryW 0x180030040
CreateFileMappingW 0x18002ffe8
CreateFileW 0x180030010
DeleteFileW 0x18002ff50
DeviceIoControl 0x180030020
FindClose 0x18002ffa8
FindFirstFileW 0x18002ffc8
FindNextFileW 0x18002ffc0
FlushFileBuffers 0x18002ffd8
GetCurrentThread 0x18002fff0
GetFileAttributesW 0x180030008
GetFileInformationByHandle 0x18002ff60
GetFileInformationByHandleEx 0x18002ff68
GetFileSizeEx 0x180030028
GetFullPathNameW 0x18002ff78
GetLocaleInfoW 0x18002ff88
GetPrivateProfileSectionW 0x18002ffb0
GetVolumeInformationW 0x18002ffd0
GetVolumeNameForVolumeMountPointW 0x18002fff8
GetVolumePathNameW 0x180030018
LoadLibraryExW 0x180030038
LoadLibraryW 0x18002ff90
LocalAlloc 0x18002ff70
LocalFree 0x18002ff80
MapViewOfFile 0x18002ffe0
MoveFileExW 0x18002ff98
QueryDosDeviceW 0x180030030
SetFileAttributesW 0x18002ffa0
SetFileInformationByHandle 0x18002ff58
UnmapViewOfFile 0x180030000
WriteFile 0x18002ffb8
msvcrt.dll 45
__C_specific_handler 0x1800303c8
__dllonexit 0x1800304b0
__iob_func 0x1800304f8
_amsg_exit 0x1800303b8
_callnewh 0x180030498
_initterm 0x180030410
_lock 0x1800304a0
_onexit 0x1800304c0
_purecall 0x1800304e8
_snwscanf_s 0x180030460
_ultow_s 0x180030450
_unlock 0x1800304a8
_vsnwprintf 0x1800304b8
_vsnwprintf_s 0x1800303f8
_wcsicmp 0x1800304d0
_wcslwr 0x180030468
_wcsnicmp 0x180030418
_wcsupr 0x180030440
_wfopen_s 0x1800303e8
_XcptFilter 0x1800303a0
bsearch 0x180030490
fclose 0x1800303f0
fflush 0x1800303e0
free 0x1800303d0
fwprintf 0x180030400
malloc 0x1800303a8
memcmp 0x1800304f0
memcpy 0x1800304d8
memcpy_s 0x1800303c0
memmove 0x1800304e0
memmove_s 0x1800303b0
memset 0x1800304c8
strcpy_s 0x180030480
strncmp 0x180030488
swprintf_s 0x180030430
wcscat_s 0x180030428
wcschr 0x180030438
wcscmp 0x180030500
wcscpy_s 0x180030408
wcsncmp 0x180030420
wcsncpy_s 0x180030448
wcsnlen 0x180030478
wcsrchr 0x1800303d8
wcsstr 0x180030470
wcstoul 0x180030458
ntdll.dll 82
LdrAccessResource 0x180030570
LdrFindResource_U 0x180030568
LdrGetDllHandle 0x180030730
LdrGetProcedureAddress 0x180030728
NtAdjustPrivilegesToken 0x180030758
NtClose 0x180030790
NtCreateEvent 0x180030530
NtDeviceIoControlFile 0x180030520
NtEnumerateBootEntries 0x180030688
NtOpenDirectoryObject 0x180030678
NtOpenFile 0x180030558
NtOpenKey 0x180030618
NtOpenProcess 0x180030798
NtOpenProcessTokenEx 0x180030760
NtOpenSymbolicLinkObject 0x180030608
NtOpenThreadTokenEx 0x180030768
NtQueryBootEntryOrder 0x180030660
NtQueryBootOptions 0x180030668
NtQueryDirectoryObject 0x180030680
NtQueryInformationFile 0x180030538
NtQueryInformationProcess 0x180030778
NtQueryInformationThread 0x180030540
NtQuerySymbolicLinkObject 0x180030620
NtQuerySystemEnvironmentValueEx 0x180030598
NtQuerySystemInformation 0x180030560
NtQueryValueKey 0x180030658
NtReadFile 0x180030510
NtSetInformationFile 0x180030580
NtSetInformationThread 0x180030518
NtTranslateFilePath 0x180030670
NtWaitForSingleObject 0x180030550
NtWriteFile 0x180030780
RtlAddAccessAllowedAceEx 0x180030628
RtlAllocateAndInitializeSid 0x180030630
RtlAllocateHeap 0x1800305a0
RtlAppendUnicodeToString 0x1800305b8
RtlCreateAcl 0x180030788
RtlCreateSecurityDescriptor 0x180030650
RtlFreeHeap 0x180030590
RtlFreeSid 0x180030640
RtlFreeUnicodeString 0x180030578
RtlGUIDFromString 0x1800305b0
RtlImageNtHeader 0x180030528
RtlImpersonateSelf 0x180030770
RtlInitAnsiString 0x180030740
RtlInitUnicodeString 0x180030648
RtlLengthSecurityDescriptor 0x1800305f8
RtlLengthSid 0x180030638
RtlNtStatusToDosError 0x180030548
RtlSetDaclSecurityDescriptor 0x180030610
RtlSetOwnerSecurityDescriptor 0x180030600
RtlStringFromGUID 0x180030588
ZwAllocateUuids 0x1800306f8
ZwClose 0x1800305f0
ZwCreateFile 0x180030690
ZwCreateKey 0x180030698
ZwDeleteKey 0x1800306c0
ZwDeleteValueKey 0x1800306b0
ZwDeviceIoControlFile 0x180030708
ZwEnumerateKey 0x1800306c8
ZwFlushKey 0x1800306a8
ZwLoadKey 0x1800306a0
ZwOpenDirectoryObject 0x180030720
ZwOpenFile 0x1800305e0
ZwOpenKey 0x1800306f0
ZwOpenMutant 0x1800305e8
ZwOpenProcess 0x180030750
ZwOpenSymbolicLinkObject 0x180030718
ZwQueryAttributesFile 0x1800305c0
ZwQueryDirectoryObject 0x180030710
ZwQueryInformationFile 0x180030748
ZwQueryInformationProcess 0x180030738
ZwQueryKey 0x1800305d0
ZwQuerySymbolicLinkObject 0x180030700
ZwQuerySystemInformation 0x1800305a8
ZwQueryValueKey 0x1800306d0
ZwReleaseMutant 0x1800305d8
ZwSaveKey 0x1800306b8
ZwSetSecurityObject 0x1800306d8
ZwSetValueKey 0x1800306e8
ZwUnloadKey 0x1800306e0
ZwWaitForSingleObject 0x1800305c8
RPCRT4.dll 1
UuidCreate 0x180030050
SHLWAPI.dll 1
PathRemoveBackslashW 0x180030060
WCP.dll 5
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x180030088
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180030070
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x180030090
RtlFreeLUnicodeString 0x180030078
RtlReportErrorOrigination 0x180030080
WINTRUST.dll 3
WinVerifyTrust 0x1800300a8
WTHelperGetProvSignerFromChain 0x1800300b0
WTHelperProvDataFromStateData 0x1800300a0