bfsvc.dll

v10.0.19041.6449 64-bit Windows NT Analyzed
Download
Description
CMI boot file service plug-in
Authors
© Microsoft Corporation. All rights reserved.
File size
281.9 KB
Uploaded
2025-12-01 08:21
Views
25
SHA-256
0e6c4f141513f61e291cbd3fe7dfccb9

Exported functions 2

DllCanUnloadNow #1 · 0x7f70
DllCsiGetHandler #2 · 0x7f90

Imported DLLs & functions 258

ADVAPI32.dll 15
AdjustTokenPrivileges 0x18002dee8
ConvertSidToStringSidW 0x18002df08
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x18002df00
DuplicateTokenEx 0x18002ded0
GetSecurityDescriptorControl 0x18002df18
GetSecurityDescriptorDacl 0x18002df28
GetSecurityDescriptorGroup 0x18002dec0
GetSecurityDescriptorOwner 0x18002df10
GetSecurityDescriptorSacl 0x18002deb8
GetTokenInformation 0x18002def8
LookupPrivilegeValueW 0x18002def0
OpenProcessToken 0x18002dee0
OpenThreadToken 0x18002dec8
SetNamedSecurityInfoW 0x18002df20
SetThreadToken 0x18002ded8
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18002e0d0
IsDebuggerPresent 0x18002e0c8
OutputDebugStringW 0x18002e0c0
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18002e0f0
SetLastError 0x18002e0e8
SetUnhandledExceptionFilter 0x18002e0f8
UnhandledExceptionFilter 0x18002e0e0
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18002e108
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x18002e128
HeapAlloc 0x18002e120
HeapDestroy 0x18002e118
HeapFree 0x18002e130
api-ms-win-core-libraryloader-l1-1-0.dll 8
DisableThreadLibraryCalls 0x18002e158
FindResourceExW 0x18002e178
FreeLibrary 0x18002e160
GetModuleFileNameA 0x18002e140
GetModuleHandleExW 0x18002e168
GetModuleHandleW 0x18002e170
GetProcAddress 0x18002e150
LoadResource 0x18002e148
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18002e188
api-ms-win-core-localization-obsolete-l1-2-0.dll 2
GetSystemDefaultUILanguage 0x18002e1a0
GetUserDefaultUILanguage 0x18002e198
api-ms-win-core-processenvironment-l1-1-0.dll 1
SearchPathW 0x18002e1b0
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x18002e1d8
GetCurrentProcessId 0x18002e1d0
GetCurrentThreadId 0x18002e1c0
TerminateProcess 0x18002e1c8
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18002e1e8
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x18002e1f8
RegCreateKeyExW 0x18002e208
RegOpenKeyExW 0x18002e210
RegQueryValueExW 0x18002e218
RegSetValueExW 0x18002e200
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x18002e228
RtlCompareMemory 0x18002e230
RtlLookupFunctionEntry 0x18002e240
RtlVirtualUnwind 0x18002e238
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x18002e288
AcquireSRWLockShared 0x18002e278
CreateMutexExW 0x18002e2c8
CreateSemaphoreExW 0x18002e2b0
DeleteCriticalSection 0x18002e298
EnterCriticalSection 0x18002e268
InitializeCriticalSection 0x18002e250
InitializeCriticalSectionEx 0x18002e290
LeaveCriticalSection 0x18002e2b8
OpenSemaphoreW 0x18002e2a8
ReleaseMutex 0x18002e2c0
ReleaseSemaphore 0x18002e258
ReleaseSRWLockExclusive 0x18002e280
ReleaseSRWLockShared 0x18002e270
WaitForSingleObject 0x18002e2a0
WaitForSingleObjectEx 0x18002e260
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x18002e2d8
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemTimeAsFileTime 0x18002e2f8
GetTickCount 0x18002e2f0
GetVersionExW 0x18002e2e8
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x18002e310
CreateThreadpoolTimer 0x18002e308
SetThreadpoolTimer 0x18002e320
WaitForThreadpoolTimerCallbacks 0x18002e318
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x18002e330
EventUnregister 0x18002e338
EventWriteTransfer 0x18002e340
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x18002e358
BCryptCreateHash 0x18002e370
BCryptDestroyHash 0x18002e360
BCryptFinishHash 0x18002e378
BCryptHash 0x18002e380
BCryptHashData 0x18002e368
BCryptOpenAlgorithmProvider 0x18002e350
CRYPT32.dll 1
CertGetNameStringW 0x18002df38
imagehlp.dll 1
CheckSumMappedFile 0x18002e390
KERNEL32.dll 32
CopyFileExW 0x18002e040
CreateDirectoryW 0x18002e028
CreateFileMappingW 0x18002df80
CreateFileW 0x18002dfd8
DeleteFileW 0x18002df48
DeviceIoControl 0x18002df90
FindClose 0x18002dfe8
FindFirstFileW 0x18002e008
FindNextFileW 0x18002e000
FlushFileBuffers 0x18002df70
GetCurrentThread 0x18002e030
GetFileAttributesW 0x18002dfd0
GetFileInformationByHandle 0x18002df58
GetFileInformationByHandleEx 0x18002df60
GetFileSizeEx 0x18002df98
GetFullPathNameW 0x18002e038
GetLocaleInfoW 0x18002df68
GetPrivateProfileSectionW 0x18002dff0
GetVolumeInformationW 0x18002e010
GetVolumeNameForVolumeMountPointW 0x18002dfc8
GetVolumePathNameW 0x18002dfe0
LoadLibraryExW 0x18002e020
LoadLibraryW 0x18002dfb0
LocalAlloc 0x18002dfa8
LocalFree 0x18002dfa0
MapViewOfFile 0x18002df78
MoveFileExW 0x18002dfb8
QueryDosDeviceW 0x18002e018
SetFileAttributesW 0x18002dfc0
SetFileInformationByHandle 0x18002df50
UnmapViewOfFile 0x18002df88
WriteFile 0x18002dff8
msvcrt.dll 45
__C_specific_handler 0x18002e3a0
__dllonexit 0x18002e4b8
__iob_func 0x18002e4f8
_amsg_exit 0x18002e3e0
_callnewh 0x18002e3a8
_initterm 0x18002e4a0
_lock 0x18002e4a8
_onexit 0x18002e4c0
_purecall 0x18002e3d8
_snwscanf_s 0x18002e478
_ultow_s 0x18002e458
_unlock 0x18002e4b0
_vsnwprintf 0x18002e3c0
_vsnwprintf_s 0x18002e400
_wcsicmp 0x18002e410
_wcslwr 0x18002e480
_wcsnicmp 0x18002e418
_wcsupr 0x18002e450
_wfopen_s 0x18002e3f0
_XcptFilter 0x18002e4d0
bsearch 0x18002e498
fclose 0x18002e3f8
fflush 0x18002e3e8
free 0x18002e3c8
fwprintf 0x18002e408
malloc 0x18002e3d0
memcmp 0x18002e4e0
memcpy 0x18002e4e8
memcpy_s 0x18002e4d8
memmove 0x18002e4f0
memmove_s 0x18002e3b8
memset 0x18002e4c8
strcpy_s 0x18002e468
strncmp 0x18002e490
swprintf_s 0x18002e448
wcscat_s 0x18002e430
wcschr 0x18002e440
wcscmp 0x18002e500
wcscpy_s 0x18002e428
wcsncmp 0x18002e420
wcsncpy_s 0x18002e438
wcsnlen 0x18002e488
wcsrchr 0x18002e3b0
wcsstr 0x18002e470
wcstoul 0x18002e460
ntdll.dll 82
LdrAccessResource 0x18002e578
LdrFindResource_U 0x18002e570
LdrGetDllHandle 0x18002e6e0
LdrGetProcedureAddress 0x18002e6d8
NtAdjustPrivilegesToken 0x18002e708
NtClose 0x18002e790
NtCreateEvent 0x18002e548
NtDeviceIoControlFile 0x18002e538
NtEnumerateBootEntries 0x18002e770
NtOpenDirectoryObject 0x18002e760
NtOpenFile 0x18002e568
NtOpenKey 0x18002e730
NtOpenProcess 0x18002e520
NtOpenProcessTokenEx 0x18002e710
NtOpenSymbolicLinkObject 0x18002e728
NtOpenThreadTokenEx 0x18002e718
NtQueryBootEntryOrder 0x18002e748
NtQueryBootOptions 0x18002e750
NtQueryDirectoryObject 0x18002e768
NtQueryInformationFile 0x18002e550
NtQueryInformationProcess 0x18002e518
NtQueryInformationThread 0x18002e558
NtQuerySymbolicLinkObject 0x18002e738
NtQuerySystemEnvironmentValueEx 0x18002e798
NtQuerySystemInformation 0x18002e788
NtQueryValueKey 0x18002e740
NtReadFile 0x18002e528
NtSetInformationFile 0x18002e588
NtSetInformationThread 0x18002e530
NtTranslateFilePath 0x18002e758
NtWaitForSingleObject 0x18002e560
NtWriteFile 0x18002e648
RtlAddAccessAllowedAceEx 0x18002e628
RtlAllocateAndInitializeSid 0x18002e630
RtlAllocateHeap 0x18002e5a0
RtlAppendUnicodeToString 0x18002e5b8
RtlCreateAcl 0x18002e678
RtlCreateSecurityDescriptor 0x18002e690
RtlFreeHeap 0x18002e598
RtlFreeSid 0x18002e658
RtlFreeUnicodeString 0x18002e580
RtlGUIDFromString 0x18002e5b0
RtlImageNtHeader 0x18002e540
RtlImpersonateSelf 0x18002e720
RtlInitAnsiString 0x18002e6f0
RtlInitUnicodeString 0x18002e778
RtlLengthSecurityDescriptor 0x18002e5f8
RtlLengthSid 0x18002e638
RtlNtStatusToDosError 0x18002e510
RtlSetDaclSecurityDescriptor 0x18002e608
RtlSetOwnerSecurityDescriptor 0x18002e600
RtlStringFromGUID 0x18002e590
ZwAllocateUuids 0x18002e6a8
ZwClose 0x18002e5f0
ZwCreateFile 0x18002e610
ZwCreateKey 0x18002e618
ZwDeleteKey 0x18002e660
ZwDeleteValueKey 0x18002e780
ZwDeviceIoControlFile 0x18002e6b8
ZwEnumerateKey 0x18002e668
ZwFlushKey 0x18002e640
ZwLoadKey 0x18002e620
ZwOpenDirectoryObject 0x18002e6d0
ZwOpenFile 0x18002e5e0
ZwOpenKey 0x18002e6a0
ZwOpenMutant 0x18002e5e8
ZwOpenProcess 0x18002e700
ZwOpenSymbolicLinkObject 0x18002e6c8
ZwQueryAttributesFile 0x18002e5c0
ZwQueryDirectoryObject 0x18002e6c0
ZwQueryInformationFile 0x18002e6f8
ZwQueryInformationProcess 0x18002e6e8
ZwQueryKey 0x18002e5d0
ZwQuerySymbolicLinkObject 0x18002e6b0
ZwQuerySystemInformation 0x18002e5a8
ZwQueryValueKey 0x18002e670
ZwReleaseMutant 0x18002e5d8
ZwSaveKey 0x18002e650
ZwSetSecurityObject 0x18002e680
ZwSetValueKey 0x18002e698
ZwUnloadKey 0x18002e688
ZwWaitForSingleObject 0x18002e5c8
RPCRT4.dll 1
UuidCreate 0x18002e050
SHLWAPI.dll 1
PathRemoveBackslashW 0x18002e060
WCP.dll 5
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x18002e088
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x18002e080
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x18002e070
RtlFreeLUnicodeString 0x18002e090
RtlReportErrorOrigination 0x18002e078
WINTRUST.dll 3
WinVerifyTrust 0x18002e0b0
WTHelperGetProvSignerFromChain 0x18002e0a8
WTHelperProvDataFromStateData 0x18002e0a0