bfsvc.dll

v10.0.19041.5676 64-bit Windows NT Analyzed
Download
Description
CMI boot file service plug-in
Authors
© Microsoft Corporation. All rights reserved.
File size
280.4 KB
Uploaded
2025-12-01 08:20
Views
32
SHA-256
5e1baf1559115ddddf17746e3447ffa8

Exported functions 2

DllCanUnloadNow #1 · 0x7c50
DllCsiGetHandler #2 · 0x7c70

Imported DLLs & functions 257

ADVAPI32.dll 15
AdjustTokenPrivileges 0x18002df10
ConvertSidToStringSidW 0x18002ded8
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x18002ded0
DuplicateTokenEx 0x18002deb8
GetSecurityDescriptorControl 0x18002def0
GetSecurityDescriptorDacl 0x18002df08
GetSecurityDescriptorGroup 0x18002df00
GetSecurityDescriptorOwner 0x18002dee8
GetSecurityDescriptorSacl 0x18002df18
GetTokenInformation 0x18002dec0
LookupPrivilegeValueW 0x18002df20
OpenProcessToken 0x18002dee0
OpenThreadToken 0x18002dec8
SetNamedSecurityInfoW 0x18002def8
SetThreadToken 0x18002df28
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18002e0c8
IsDebuggerPresent 0x18002e0c0
OutputDebugStringW 0x18002e0d0
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18002e0e0
SetLastError 0x18002e0f0
SetUnhandledExceptionFilter 0x18002e0f8
UnhandledExceptionFilter 0x18002e0e8
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18002e108
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x18002e120
HeapAlloc 0x18002e128
HeapDestroy 0x18002e130
HeapFree 0x18002e118
api-ms-win-core-libraryloader-l1-1-0.dll 8
DisableThreadLibraryCalls 0x18002e148
FindResourceExW 0x18002e170
FreeLibrary 0x18002e160
GetModuleFileNameA 0x18002e178
GetModuleHandleExW 0x18002e150
GetModuleHandleW 0x18002e168
GetProcAddress 0x18002e158
LoadResource 0x18002e140
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18002e188
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x18002e1a0
GetUserDefaultUILanguage 0x18002e198
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x18002e1b0
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x18002e1c8
GetCurrentProcessId 0x18002e1d8
GetCurrentThreadId 0x18002e1d0
TerminateProcess 0x18002e1c0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18002e1e8
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x18002e200
RegCreateKeyExW 0x18002e208
RegOpenKeyExW 0x18002e1f8
RegQueryValueExW 0x18002e218
RegSetValueExW 0x18002e210
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x18002e230
RtlCompareMemory 0x18002e240
RtlLookupFunctionEntry 0x18002e228
RtlVirtualUnwind 0x18002e238
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x18002e278
AcquireSRWLockShared 0x18002e268
CreateMutexExW 0x18002e2a0
CreateSemaphoreExW 0x18002e288
DeleteCriticalSection 0x18002e2b8
EnterCriticalSection 0x18002e2a8
InitializeCriticalSection 0x18002e280
InitializeCriticalSectionEx 0x18002e2b0
LeaveCriticalSection 0x18002e290
OpenSemaphoreW 0x18002e2c8
ReleaseMutex 0x18002e258
ReleaseSemaphore 0x18002e250
ReleaseSRWLockExclusive 0x18002e270
ReleaseSRWLockShared 0x18002e260
WaitForSingleObject 0x18002e2c0
WaitForSingleObjectEx 0x18002e298
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x18002e2d8
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemTimeAsFileTime 0x18002e2f0
GetTickCount 0x18002e2e8
GetVersionExW 0x18002e2f8
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x18002e308
CreateThreadpoolTimer 0x18002e320
SetThreadpoolTimer 0x18002e310
WaitForThreadpoolTimerCallbacks 0x18002e318
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x18002e338
EventUnregister 0x18002e330
EventWriteTransfer 0x18002e340
bcrypt.dll 6
BCryptCloseAlgorithmProvider 0x18002e360
BCryptCreateHash 0x18002e350
BCryptDestroyHash 0x18002e370
BCryptFinishHash 0x18002e358
BCryptHashData 0x18002e368
BCryptOpenAlgorithmProvider 0x18002e378
CRYPT32.dll 1
CertGetNameStringW 0x18002df38
imagehlp.dll 1
CheckSumMappedFile 0x18002e388
KERNEL32.dll 32
CopyFileExW 0x18002df48
CreateDirectoryW 0x18002e038
CreateFileMappingW 0x18002df98
CreateFileW 0x18002dfe8
DeleteFileW 0x18002df50
DeviceIoControl 0x18002dfb0
FindClose 0x18002dff8
FindFirstFileW 0x18002e018
FindNextFileW 0x18002e010
FlushFileBuffers 0x18002df88
GetCurrentThread 0x18002dfa0
GetFileAttributesW 0x18002dfe0
GetFileInformationByHandle 0x18002df60
GetFileInformationByHandleEx 0x18002df68
GetFileSizeEx 0x18002dfb8
GetFullPathNameW 0x18002e040
GetLocaleInfoW 0x18002df78
GetPrivateProfileSectionW 0x18002e000
GetVolumeInformationW 0x18002e020
GetVolumeNameForVolumeMountPointW 0x18002dfd8
GetVolumePathNameW 0x18002dff0
LoadLibraryExW 0x18002e030
LoadLibraryW 0x18002dfc0
LocalAlloc 0x18002df70
LocalFree 0x18002df80
MapViewOfFile 0x18002df90
MoveFileExW 0x18002dfc8
QueryDosDeviceW 0x18002e028
SetFileAttributesW 0x18002dfd0
SetFileInformationByHandle 0x18002df58
UnmapViewOfFile 0x18002dfa8
WriteFile 0x18002e008
msvcrt.dll 45
__C_specific_handler 0x18002e398
__dllonexit 0x18002e4b0
__iob_func 0x18002e4f0
_amsg_exit 0x18002e3b8
_callnewh 0x18002e498
_initterm 0x18002e3c8
_lock 0x18002e4a0
_onexit 0x18002e4b8
_purecall 0x18002e4d0
_snwscanf_s 0x18002e468
_ultow_s 0x18002e448
_unlock 0x18002e4a8
_vsnwprintf 0x18002e3c0
_vsnwprintf_s 0x18002e3f0
_wcsicmp 0x18002e400
_wcslwr 0x18002e470
_wcsnicmp 0x18002e408
_wcsupr 0x18002e438
_wfopen_s 0x18002e3e0
_XcptFilter 0x18002e3a0
bsearch 0x18002e488
fclose 0x18002e3e8
fflush 0x18002e3d8
free 0x18002e3d0
fwprintf 0x18002e3f8
malloc 0x18002e418
memcmp 0x18002e4e8
memcpy 0x18002e4d8
memcpy_s 0x18002e4c8
memmove 0x18002e4e0
memmove_s 0x18002e3b0
memset 0x18002e4c0
strcpy_s 0x18002e458
strncmp 0x18002e480
swprintf_s 0x18002e430
wcscat_s 0x18002e420
wcschr 0x18002e428
wcscmp 0x18002e4f8
wcscpy_s 0x18002e490
wcsncmp 0x18002e410
wcsncpy_s 0x18002e440
wcsnlen 0x18002e478
wcsrchr 0x18002e3a8
wcsstr 0x18002e460
wcstoul 0x18002e450
ntdll.dll 82
LdrAccessResource 0x18002e570
LdrFindResource_U 0x18002e568
LdrGetDllHandle 0x18002e6d8
LdrGetProcedureAddress 0x18002e6d0
NtAdjustPrivilegesToken 0x18002e700
NtClose 0x18002e788
NtCreateEvent 0x18002e540
NtDeviceIoControlFile 0x18002e530
NtEnumerateBootEntries 0x18002e768
NtOpenDirectoryObject 0x18002e758
NtOpenFile 0x18002e560
NtOpenKey 0x18002e728
NtOpenProcess 0x18002e518
NtOpenProcessTokenEx 0x18002e708
NtOpenSymbolicLinkObject 0x18002e720
NtOpenThreadTokenEx 0x18002e710
NtQueryBootEntryOrder 0x18002e740
NtQueryBootOptions 0x18002e748
NtQueryDirectoryObject 0x18002e760
NtQueryInformationFile 0x18002e548
NtQueryInformationProcess 0x18002e510
NtQueryInformationThread 0x18002e550
NtQuerySymbolicLinkObject 0x18002e730
NtQuerySystemEnvironmentValueEx 0x18002e598
NtQuerySystemInformation 0x18002e778
NtQueryValueKey 0x18002e738
NtReadFile 0x18002e520
NtSetInformationFile 0x18002e580
NtSetInformationThread 0x18002e528
NtTranslateFilePath 0x18002e750
NtWaitForSingleObject 0x18002e558
NtWriteFile 0x18002e770
RtlAddAccessAllowedAceEx 0x18002e628
RtlAllocateAndInitializeSid 0x18002e630
RtlAllocateHeap 0x18002e5a0
RtlAppendUnicodeToString 0x18002e5b8
RtlCreateAcl 0x18002e670
RtlCreateSecurityDescriptor 0x18002e688
RtlFreeHeap 0x18002e590
RtlFreeSid 0x18002e650
RtlFreeUnicodeString 0x18002e578
RtlGUIDFromString 0x18002e5b0
RtlImageNtHeader 0x18002e538
RtlImpersonateSelf 0x18002e718
RtlInitAnsiString 0x18002e6e8
RtlInitUnicodeString 0x18002e790
RtlLengthSecurityDescriptor 0x18002e5f8
RtlLengthSid 0x18002e638
RtlNtStatusToDosError 0x18002e508
RtlSetDaclSecurityDescriptor 0x18002e608
RtlSetOwnerSecurityDescriptor 0x18002e600
RtlStringFromGUID 0x18002e588
ZwAllocateUuids 0x18002e6a0
ZwClose 0x18002e5f0
ZwCreateFile 0x18002e610
ZwCreateKey 0x18002e618
ZwDeleteKey 0x18002e658
ZwDeleteValueKey 0x18002e780
ZwDeviceIoControlFile 0x18002e6b0
ZwEnumerateKey 0x18002e660
ZwFlushKey 0x18002e640
ZwLoadKey 0x18002e620
ZwOpenDirectoryObject 0x18002e6c8
ZwOpenFile 0x18002e5e0
ZwOpenKey 0x18002e698
ZwOpenMutant 0x18002e5e8
ZwOpenProcess 0x18002e6f8
ZwOpenSymbolicLinkObject 0x18002e6c0
ZwQueryAttributesFile 0x18002e5c0
ZwQueryDirectoryObject 0x18002e6b8
ZwQueryInformationFile 0x18002e6f0
ZwQueryInformationProcess 0x18002e6e0
ZwQueryKey 0x18002e5d0
ZwQuerySymbolicLinkObject 0x18002e6a8
ZwQuerySystemInformation 0x18002e5a8
ZwQueryValueKey 0x18002e668
ZwReleaseMutant 0x18002e5d8
ZwSaveKey 0x18002e648
ZwSetSecurityObject 0x18002e678
ZwSetValueKey 0x18002e690
ZwUnloadKey 0x18002e680
ZwWaitForSingleObject 0x18002e5c8
RPCRT4.dll 1
UuidCreate 0x18002e050
SHLWAPI.dll 1
PathRemoveBackslashW 0x18002e060
WCP.dll 5
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x18002e080
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x18002e078
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x18002e090
RtlFreeLUnicodeString 0x18002e070
RtlReportErrorOrigination 0x18002e088
WINTRUST.dll 3
WinVerifyTrust 0x18002e0a0
WTHelperGetProvSignerFromChain 0x18002e0b0
WTHelperProvDataFromStateData 0x18002e0a8