bfsvc.dll

v10.0.19041.5071 64-bit Windows NT Analyzed
Download
Description
CMI boot file service plug-in
Authors
© Microsoft Corporation. All rights reserved.
File size
285.5 KB
Uploaded
2025-12-01 08:20
Views
30
SHA-256
2826f854dea51be9dbbc3638ac4b1691

Exported functions 2

DllCanUnloadNow #1 · 0x86c0
DllCsiGetHandler #2 · 0x86e0

Imported DLLs & functions 257

ADVAPI32.dll 15
AdjustTokenPrivileges 0x18002ef10
ConvertSidToStringSidW 0x18002eed8
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x18002eed0
DuplicateTokenEx 0x18002eeb8
GetSecurityDescriptorControl 0x18002eef0
GetSecurityDescriptorDacl 0x18002ef08
GetSecurityDescriptorGroup 0x18002ef00
GetSecurityDescriptorOwner 0x18002eee8
GetSecurityDescriptorSacl 0x18002ef18
GetTokenInformation 0x18002eec0
LookupPrivilegeValueW 0x18002ef20
OpenProcessToken 0x18002eee0
OpenThreadToken 0x18002eec8
SetNamedSecurityInfoW 0x18002eef8
SetThreadToken 0x18002ef28
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18002f0d0
IsDebuggerPresent 0x18002f0c0
OutputDebugStringW 0x18002f0c8
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18002f0e8
SetLastError 0x18002f0f8
SetUnhandledExceptionFilter 0x18002f0e0
UnhandledExceptionFilter 0x18002f0f0
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18002f108
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x18002f128
HeapAlloc 0x18002f118
HeapDestroy 0x18002f130
HeapFree 0x18002f120
api-ms-win-core-libraryloader-l1-1-0.dll 8
DisableThreadLibraryCalls 0x18002f178
FindResourceExW 0x18002f160
FreeLibrary 0x18002f158
GetModuleFileNameA 0x18002f170
GetModuleHandleExW 0x18002f148
GetModuleHandleW 0x18002f168
GetProcAddress 0x18002f150
LoadResource 0x18002f140
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18002f188
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x18002f1a0
GetUserDefaultUILanguage 0x18002f198
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x18002f1b0
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x18002f1c8
GetCurrentProcessId 0x18002f1d8
GetCurrentThreadId 0x18002f1d0
TerminateProcess 0x18002f1c0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18002f1e8
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x18002f210
RegCreateKeyExW 0x18002f218
RegOpenKeyExW 0x18002f200
RegQueryValueExW 0x18002f1f8
RegSetValueExW 0x18002f208
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x18002f240
RtlCompareMemory 0x18002f230
RtlLookupFunctionEntry 0x18002f238
RtlVirtualUnwind 0x18002f228
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x18002f290
AcquireSRWLockShared 0x18002f280
CreateMutexExW 0x18002f2c8
CreateSemaphoreExW 0x18002f2b8
DeleteCriticalSection 0x18002f2a0
EnterCriticalSection 0x18002f270
InitializeCriticalSection 0x18002f250
InitializeCriticalSectionEx 0x18002f298
LeaveCriticalSection 0x18002f2c0
OpenSemaphoreW 0x18002f2b0
ReleaseMutex 0x18002f258
ReleaseSemaphore 0x18002f260
ReleaseSRWLockExclusive 0x18002f288
ReleaseSRWLockShared 0x18002f278
WaitForSingleObject 0x18002f2a8
WaitForSingleObjectEx 0x18002f268
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x18002f2d8
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemTimeAsFileTime 0x18002f2e8
GetTickCount 0x18002f2f0
GetVersionExW 0x18002f2f8
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x18002f310
CreateThreadpoolTimer 0x18002f320
SetThreadpoolTimer 0x18002f318
WaitForThreadpoolTimerCallbacks 0x18002f308
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x18002f338
EventUnregister 0x18002f340
EventWriteTransfer 0x18002f330
bcrypt.dll 6
BCryptCloseAlgorithmProvider 0x18002f360
BCryptCreateHash 0x18002f350
BCryptDestroyHash 0x18002f378
BCryptFinishHash 0x18002f358
BCryptHashData 0x18002f368
BCryptOpenAlgorithmProvider 0x18002f370
CRYPT32.dll 1
CertGetNameStringW 0x18002ef38
imagehlp.dll 1
CheckSumMappedFile 0x18002f388
KERNEL32.dll 32
CopyFileExW 0x18002ef48
CreateDirectoryW 0x18002f038
CreateFileMappingW 0x18002ef98
CreateFileW 0x18002efe8
DeleteFileW 0x18002ef50
DeviceIoControl 0x18002efb0
FindClose 0x18002eff8
FindFirstFileW 0x18002f018
FindNextFileW 0x18002f010
FlushFileBuffers 0x18002ef88
GetCurrentThread 0x18002efa0
GetFileAttributesW 0x18002efe0
GetFileInformationByHandle 0x18002ef60
GetFileInformationByHandleEx 0x18002ef68
GetFileSizeEx 0x18002efb8
GetFullPathNameW 0x18002f040
GetLocaleInfoW 0x18002ef78
GetPrivateProfileSectionW 0x18002f000
GetVolumeInformationW 0x18002f020
GetVolumeNameForVolumeMountPointW 0x18002efd8
GetVolumePathNameW 0x18002eff0
LoadLibraryExW 0x18002f030
LoadLibraryW 0x18002efc0
LocalAlloc 0x18002ef70
LocalFree 0x18002ef80
MapViewOfFile 0x18002ef90
MoveFileExW 0x18002efc8
QueryDosDeviceW 0x18002f028
SetFileAttributesW 0x18002efd0
SetFileInformationByHandle 0x18002ef58
UnmapViewOfFile 0x18002efa8
WriteFile 0x18002f008
msvcrt.dll 45
__C_specific_handler 0x18002f398
__dllonexit 0x18002f4b0
__iob_func 0x18002f4f0
_amsg_exit 0x18002f3c8
_callnewh 0x18002f498
_initterm 0x18002f3d8
_lock 0x18002f4a0
_onexit 0x18002f4b8
_purecall 0x18002f3a0
_snwscanf_s 0x18002f468
_ultow_s 0x18002f448
_unlock 0x18002f4a8
_vsnwprintf 0x18002f4d0
_vsnwprintf_s 0x18002f3f0
_wcsicmp 0x18002f400
_wcslwr 0x18002f470
_wcsnicmp 0x18002f408
_wcsupr 0x18002f438
_wfopen_s 0x18002f3e0
_XcptFilter 0x18002f3b8
bsearch 0x18002f488
fclose 0x18002f3e8
fflush 0x18002f4c8
free 0x18002f3d0
fwprintf 0x18002f3f8
malloc 0x18002f418
memcmp 0x18002f4e8
memcpy 0x18002f4d8
memcpy_s 0x18002f3c0
memmove 0x18002f4e0
memmove_s 0x18002f3b0
memset 0x18002f4c0
strcpy_s 0x18002f458
strncmp 0x18002f480
swprintf_s 0x18002f430
wcscat_s 0x18002f420
wcschr 0x18002f428
wcscmp 0x18002f4f8
wcscpy_s 0x18002f490
wcsncmp 0x18002f410
wcsncpy_s 0x18002f440
wcsnlen 0x18002f478
wcsrchr 0x18002f3a8
wcsstr 0x18002f460
wcstoul 0x18002f450
ntdll.dll 82
LdrAccessResource 0x18002f570
LdrFindResource_U 0x18002f568
LdrGetDllHandle 0x18002f6d8
LdrGetProcedureAddress 0x18002f6d0
NtAdjustPrivilegesToken 0x18002f700
NtClose 0x18002f788
NtCreateEvent 0x18002f540
NtDeviceIoControlFile 0x18002f530
NtEnumerateBootEntries 0x18002f768
NtOpenDirectoryObject 0x18002f758
NtOpenFile 0x18002f560
NtOpenKey 0x18002f728
NtOpenProcess 0x18002f518
NtOpenProcessTokenEx 0x18002f708
NtOpenSymbolicLinkObject 0x18002f720
NtOpenThreadTokenEx 0x18002f710
NtQueryBootEntryOrder 0x18002f740
NtQueryBootOptions 0x18002f748
NtQueryDirectoryObject 0x18002f760
NtQueryInformationFile 0x18002f548
NtQueryInformationProcess 0x18002f510
NtQueryInformationThread 0x18002f550
NtQuerySymbolicLinkObject 0x18002f730
NtQuerySystemEnvironmentValueEx 0x18002f598
NtQuerySystemInformation 0x18002f778
NtQueryValueKey 0x18002f738
NtReadFile 0x18002f520
NtSetInformationFile 0x18002f580
NtSetInformationThread 0x18002f528
NtTranslateFilePath 0x18002f750
NtWaitForSingleObject 0x18002f558
NtWriteFile 0x18002f770
RtlAddAccessAllowedAceEx 0x18002f628
RtlAllocateAndInitializeSid 0x18002f630
RtlAllocateHeap 0x18002f5a0
RtlAppendUnicodeToString 0x18002f5b8
RtlCreateAcl 0x18002f670
RtlCreateSecurityDescriptor 0x18002f688
RtlFreeHeap 0x18002f590
RtlFreeSid 0x18002f650
RtlFreeUnicodeString 0x18002f578
RtlGUIDFromString 0x18002f5b0
RtlImageNtHeader 0x18002f538
RtlImpersonateSelf 0x18002f718
RtlInitAnsiString 0x18002f6e8
RtlInitUnicodeString 0x18002f790
RtlLengthSecurityDescriptor 0x18002f5f8
RtlLengthSid 0x18002f638
RtlNtStatusToDosError 0x18002f508
RtlSetDaclSecurityDescriptor 0x18002f608
RtlSetOwnerSecurityDescriptor 0x18002f600
RtlStringFromGUID 0x18002f588
ZwAllocateUuids 0x18002f6a0
ZwClose 0x18002f5f0
ZwCreateFile 0x18002f610
ZwCreateKey 0x18002f618
ZwDeleteKey 0x18002f658
ZwDeleteValueKey 0x18002f780
ZwDeviceIoControlFile 0x18002f6b0
ZwEnumerateKey 0x18002f660
ZwFlushKey 0x18002f640
ZwLoadKey 0x18002f620
ZwOpenDirectoryObject 0x18002f6c8
ZwOpenFile 0x18002f5e0
ZwOpenKey 0x18002f698
ZwOpenMutant 0x18002f5e8
ZwOpenProcess 0x18002f6f8
ZwOpenSymbolicLinkObject 0x18002f6c0
ZwQueryAttributesFile 0x18002f5c0
ZwQueryDirectoryObject 0x18002f6b8
ZwQueryInformationFile 0x18002f6f0
ZwQueryInformationProcess 0x18002f6e0
ZwQueryKey 0x18002f5d0
ZwQuerySymbolicLinkObject 0x18002f6a8
ZwQuerySystemInformation 0x18002f5a8
ZwQueryValueKey 0x18002f668
ZwReleaseMutant 0x18002f5d8
ZwSaveKey 0x18002f648
ZwSetSecurityObject 0x18002f678
ZwSetValueKey 0x18002f690
ZwUnloadKey 0x18002f680
ZwWaitForSingleObject 0x18002f5c8
RPCRT4.dll 1
UuidCreate 0x18002f050
SHLWAPI.dll 1
PathRemoveBackslashW 0x18002f060
WCP.dll 5
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x18002f088
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x18002f080
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x18002f090
RtlFreeLUnicodeString 0x18002f070
RtlReportErrorOrigination 0x18002f078
WINTRUST.dll 3
WinVerifyTrust 0x18002f0a8
WTHelperGetProvSignerFromChain 0x18002f0b0
WTHelperProvDataFromStateData 0x18002f0a0