bfsvc.dll

v10.0.19041.6088 64-bit Windows NT Analyzed
Download
Description
CMI boot file service plug-in
Authors
© Microsoft Corporation. All rights reserved.
File size
286.9 KB
Uploaded
2025-12-01 08:20
Views
29
SHA-256
d3275c218ef6d3ec56c4ef527e183805

Exported functions 2

DllCanUnloadNow #1 · 0x94a0
DllCsiGetHandler #2 · 0x94c0

Imported DLLs & functions 258

ADVAPI32.dll 15
AdjustTokenPrivileges 0x18002eee8
ConvertSidToStringSidW 0x18002ef08
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x18002ef00
DuplicateTokenEx 0x18002eed0
GetSecurityDescriptorControl 0x18002ef18
GetSecurityDescriptorDacl 0x18002ef28
GetSecurityDescriptorGroup 0x18002eec0
GetSecurityDescriptorOwner 0x18002ef10
GetSecurityDescriptorSacl 0x18002eeb8
GetTokenInformation 0x18002eef8
LookupPrivilegeValueW 0x18002eef0
OpenProcessToken 0x18002eee0
OpenThreadToken 0x18002eec8
SetNamedSecurityInfoW 0x18002ef20
SetThreadToken 0x18002eed8
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18002f0d0
IsDebuggerPresent 0x18002f0c8
OutputDebugStringW 0x18002f0c0
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18002f0f0
SetLastError 0x18002f0e8
SetUnhandledExceptionFilter 0x18002f0f8
UnhandledExceptionFilter 0x18002f0e0
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18002f108
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x18002f128
HeapAlloc 0x18002f120
HeapDestroy 0x18002f118
HeapFree 0x18002f130
api-ms-win-core-libraryloader-l1-1-0.dll 8
DisableThreadLibraryCalls 0x18002f158
FindResourceExW 0x18002f178
FreeLibrary 0x18002f160
GetModuleFileNameA 0x18002f140
GetModuleHandleExW 0x18002f168
GetModuleHandleW 0x18002f170
GetProcAddress 0x18002f150
LoadResource 0x18002f148
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18002f188
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x18002f1a0
GetUserDefaultUILanguage 0x18002f198
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x18002f1b0
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x18002f1d8
GetCurrentProcessId 0x18002f1d0
GetCurrentThreadId 0x18002f1c0
TerminateProcess 0x18002f1c8
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18002f1e8
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x18002f1f8
RegCreateKeyExW 0x18002f208
RegOpenKeyExW 0x18002f210
RegQueryValueExW 0x18002f218
RegSetValueExW 0x18002f200
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x18002f228
RtlCompareMemory 0x18002f230
RtlLookupFunctionEntry 0x18002f240
RtlVirtualUnwind 0x18002f238
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x18002f288
AcquireSRWLockShared 0x18002f278
CreateMutexExW 0x18002f2c8
CreateSemaphoreExW 0x18002f2b0
DeleteCriticalSection 0x18002f298
EnterCriticalSection 0x18002f268
InitializeCriticalSection 0x18002f250
InitializeCriticalSectionEx 0x18002f290
LeaveCriticalSection 0x18002f2b8
OpenSemaphoreW 0x18002f2a8
ReleaseMutex 0x18002f2c0
ReleaseSemaphore 0x18002f258
ReleaseSRWLockExclusive 0x18002f280
ReleaseSRWLockShared 0x18002f270
WaitForSingleObject 0x18002f2a0
WaitForSingleObjectEx 0x18002f260
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x18002f2d8
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemTimeAsFileTime 0x18002f2f8
GetTickCount 0x18002f2f0
GetVersionExW 0x18002f2e8
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x18002f310
CreateThreadpoolTimer 0x18002f308
SetThreadpoolTimer 0x18002f320
WaitForThreadpoolTimerCallbacks 0x18002f318
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x18002f330
EventUnregister 0x18002f338
EventWriteTransfer 0x18002f340
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x18002f358
BCryptCreateHash 0x18002f370
BCryptDestroyHash 0x18002f360
BCryptFinishHash 0x18002f378
BCryptHash 0x18002f380
BCryptHashData 0x18002f368
BCryptOpenAlgorithmProvider 0x18002f350
CRYPT32.dll 1
CertGetNameStringW 0x18002ef38
imagehlp.dll 1
CheckSumMappedFile 0x18002f390
KERNEL32.dll 32
CopyFileExW 0x18002f040
CreateDirectoryW 0x18002f028
CreateFileMappingW 0x18002ef80
CreateFileW 0x18002efd8
DeleteFileW 0x18002ef48
DeviceIoControl 0x18002ef90
FindClose 0x18002efe8
FindFirstFileW 0x18002f008
FindNextFileW 0x18002f000
FlushFileBuffers 0x18002ef70
GetCurrentThread 0x18002f030
GetFileAttributesW 0x18002efd0
GetFileInformationByHandle 0x18002ef58
GetFileInformationByHandleEx 0x18002ef60
GetFileSizeEx 0x18002ef98
GetFullPathNameW 0x18002f038
GetLocaleInfoW 0x18002ef68
GetPrivateProfileSectionW 0x18002eff0
GetVolumeInformationW 0x18002f010
GetVolumeNameForVolumeMountPointW 0x18002efc8
GetVolumePathNameW 0x18002efe0
LoadLibraryExW 0x18002f020
LoadLibraryW 0x18002efb0
LocalAlloc 0x18002efa8
LocalFree 0x18002efa0
MapViewOfFile 0x18002ef78
MoveFileExW 0x18002efb8
QueryDosDeviceW 0x18002f018
SetFileAttributesW 0x18002efc0
SetFileInformationByHandle 0x18002ef50
UnmapViewOfFile 0x18002ef88
WriteFile 0x18002eff8
msvcrt.dll 45
__C_specific_handler 0x18002f3a0
__dllonexit 0x18002f4b8
__iob_func 0x18002f4f8
_amsg_exit 0x18002f3e0
_callnewh 0x18002f3a8
_initterm 0x18002f4a0
_lock 0x18002f4a8
_onexit 0x18002f4c0
_purecall 0x18002f3d8
_snwscanf_s 0x18002f478
_ultow_s 0x18002f458
_unlock 0x18002f4b0
_vsnwprintf 0x18002f3c0
_vsnwprintf_s 0x18002f400
_wcsicmp 0x18002f410
_wcslwr 0x18002f480
_wcsnicmp 0x18002f418
_wcsupr 0x18002f450
_wfopen_s 0x18002f3f0
_XcptFilter 0x18002f4d0
bsearch 0x18002f498
fclose 0x18002f3f8
fflush 0x18002f3e8
free 0x18002f3c8
fwprintf 0x18002f408
malloc 0x18002f3d0
memcmp 0x18002f4e0
memcpy 0x18002f4e8
memcpy_s 0x18002f4d8
memmove 0x18002f4f0
memmove_s 0x18002f3b8
memset 0x18002f4c8
strcpy_s 0x18002f468
strncmp 0x18002f490
swprintf_s 0x18002f448
wcscat_s 0x18002f430
wcschr 0x18002f440
wcscmp 0x18002f500
wcscpy_s 0x18002f428
wcsncmp 0x18002f420
wcsncpy_s 0x18002f438
wcsnlen 0x18002f488
wcsrchr 0x18002f3b0
wcsstr 0x18002f470
wcstoul 0x18002f460
ntdll.dll 82
LdrAccessResource 0x18002f578
LdrFindResource_U 0x18002f570
LdrGetDllHandle 0x18002f6e0
LdrGetProcedureAddress 0x18002f6d8
NtAdjustPrivilegesToken 0x18002f708
NtClose 0x18002f790
NtCreateEvent 0x18002f548
NtDeviceIoControlFile 0x18002f538
NtEnumerateBootEntries 0x18002f770
NtOpenDirectoryObject 0x18002f760
NtOpenFile 0x18002f568
NtOpenKey 0x18002f730
NtOpenProcess 0x18002f520
NtOpenProcessTokenEx 0x18002f710
NtOpenSymbolicLinkObject 0x18002f728
NtOpenThreadTokenEx 0x18002f718
NtQueryBootEntryOrder 0x18002f748
NtQueryBootOptions 0x18002f750
NtQueryDirectoryObject 0x18002f768
NtQueryInformationFile 0x18002f550
NtQueryInformationProcess 0x18002f518
NtQueryInformationThread 0x18002f558
NtQuerySymbolicLinkObject 0x18002f738
NtQuerySystemEnvironmentValueEx 0x18002f798
NtQuerySystemInformation 0x18002f788
NtQueryValueKey 0x18002f740
NtReadFile 0x18002f528
NtSetInformationFile 0x18002f588
NtSetInformationThread 0x18002f530
NtTranslateFilePath 0x18002f758
NtWaitForSingleObject 0x18002f560
NtWriteFile 0x18002f648
RtlAddAccessAllowedAceEx 0x18002f628
RtlAllocateAndInitializeSid 0x18002f630
RtlAllocateHeap 0x18002f5a0
RtlAppendUnicodeToString 0x18002f5b8
RtlCreateAcl 0x18002f678
RtlCreateSecurityDescriptor 0x18002f690
RtlFreeHeap 0x18002f598
RtlFreeSid 0x18002f658
RtlFreeUnicodeString 0x18002f580
RtlGUIDFromString 0x18002f5b0
RtlImageNtHeader 0x18002f540
RtlImpersonateSelf 0x18002f720
RtlInitAnsiString 0x18002f6f0
RtlInitUnicodeString 0x18002f778
RtlLengthSecurityDescriptor 0x18002f5f8
RtlLengthSid 0x18002f638
RtlNtStatusToDosError 0x18002f510
RtlSetDaclSecurityDescriptor 0x18002f608
RtlSetOwnerSecurityDescriptor 0x18002f600
RtlStringFromGUID 0x18002f590
ZwAllocateUuids 0x18002f6a8
ZwClose 0x18002f5f0
ZwCreateFile 0x18002f610
ZwCreateKey 0x18002f618
ZwDeleteKey 0x18002f660
ZwDeleteValueKey 0x18002f780
ZwDeviceIoControlFile 0x18002f6b8
ZwEnumerateKey 0x18002f668
ZwFlushKey 0x18002f640
ZwLoadKey 0x18002f620
ZwOpenDirectoryObject 0x18002f6d0
ZwOpenFile 0x18002f5e0
ZwOpenKey 0x18002f6a0
ZwOpenMutant 0x18002f5e8
ZwOpenProcess 0x18002f700
ZwOpenSymbolicLinkObject 0x18002f6c8
ZwQueryAttributesFile 0x18002f5c0
ZwQueryDirectoryObject 0x18002f6c0
ZwQueryInformationFile 0x18002f6f8
ZwQueryInformationProcess 0x18002f6e8
ZwQueryKey 0x18002f5d0
ZwQuerySymbolicLinkObject 0x18002f6b0
ZwQuerySystemInformation 0x18002f5a8
ZwQueryValueKey 0x18002f670
ZwReleaseMutant 0x18002f5d8
ZwSaveKey 0x18002f650
ZwSetSecurityObject 0x18002f680
ZwSetValueKey 0x18002f698
ZwUnloadKey 0x18002f688
ZwWaitForSingleObject 0x18002f5c8
RPCRT4.dll 1
UuidCreate 0x18002f050
SHLWAPI.dll 1
PathRemoveBackslashW 0x18002f060
WCP.dll 5
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x18002f088
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x18002f080
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x18002f070
RtlFreeLUnicodeString 0x18002f090
RtlReportErrorOrigination 0x18002f078
WINTRUST.dll 3
WinVerifyTrust 0x18002f0b0
WTHelperGetProvSignerFromChain 0x18002f0a8
WTHelperProvDataFromStateData 0x18002f0a0