bfsvc.dll
Description: CMI boot file service plug-in
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.1
Architecture: 32-bit
Operating System: Windows NT
SHA256: 42667baf1ec03226162d0698a541a724
File Size: 188.0 KB
Uploaded At: Dec. 1, 2025, 8:39 a.m.
Views: 12
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x109d0)
- DllCsiGetHandler (Ordinal: 2, Address: 0x109f0)
Imported DLLs & Functions
ADVAPI32.dll
- AdjustTokenPrivileges (Address: 0x1002b008)
- ConvertSidToStringSidW (Address: 0x1002b024)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1002b028)
- GetSecurityDescriptorControl (Address: 0x1002b018)
- GetSecurityDescriptorDacl (Address: 0x1002b00c)
- GetSecurityDescriptorGroup (Address: 0x1002b010)
- GetSecurityDescriptorOwner (Address: 0x1002b01c)
- GetSecurityDescriptorSacl (Address: 0x1002b004)
- GetTokenInformation (Address: 0x1002b030)
- LookupPrivilegeValueW (Address: 0x1002b000)
- OpenProcessToken (Address: 0x1002b020)
- OpenThreadToken (Address: 0x1002b02c)
- SetNamedSecurityInfoW (Address: 0x1002b014)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1002b0f8)
- SetUnhandledExceptionFilter (Address: 0x1002b0fc)
- UnhandledExceptionFilter (Address: 0x1002b0f4)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1002b104)
- HeapDestroy (Address: 0x1002b10c)
- HeapFree (Address: 0x1002b108)
api-ms-win-core-libraryloader-l1-1-0.dll
- DisableThreadLibraryCalls (Address: 0x1002b114)
- FindResourceExW (Address: 0x1002b124)
- FreeLibrary (Address: 0x1002b120)
- GetModuleHandleExW (Address: 0x1002b118)
- GetProcAddress (Address: 0x1002b11c)
- LoadResource (Address: 0x1002b128)
api-ms-win-core-localization-obsolete-l1-2-0.dll
- GetSystemDefaultUILanguage (Address: 0x1002b130)
- GetUserDefaultUILanguage (Address: 0x1002b134)
api-ms-win-core-processenvironment-l1-1-0.dll
- SearchPathW (Address: 0x1002b13c)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x1002b14c)
- GetCurrentProcessId (Address: 0x1002b144)
- GetCurrentThreadId (Address: 0x1002b150)
- TerminateProcess (Address: 0x1002b148)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1002b158)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1002b168)
- RegOpenKeyExW (Address: 0x1002b164)
- RegQueryValueExW (Address: 0x1002b160)
api-ms-win-core-synch-l1-1-0.dll
- DeleteCriticalSection (Address: 0x1002b170)
- InitializeCriticalSection (Address: 0x1002b174)
api-ms-win-core-synch-l1-2-0.dll
- Sleep (Address: 0x1002b17c)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x1002b190)
- GetSystemWindowsDirectoryW (Address: 0x1002b188)
- GetTickCount (Address: 0x1002b18c)
- GetVersionExW (Address: 0x1002b184)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x1002b19c)
- EventUnregister (Address: 0x1002b1a0)
- EventWriteTransfer (Address: 0x1002b198)
imagehlp.dll
- CheckSumMappedFile (Address: 0x1002b1a8)
KERNEL32.dll
- CloseHandle (Address: 0x1002b094)
- CopyFileExW (Address: 0x1002b058)
- CreateDirectoryW (Address: 0x1002b06c)
- CreateFileMappingW (Address: 0x1002b09c)
- CreateFileW (Address: 0x1002b084)
- DeleteFileW (Address: 0x1002b050)
- DeviceIoControl (Address: 0x1002b07c)
- FindClose (Address: 0x1002b0c0)
- FindFirstFileW (Address: 0x1002b0b0)
- FindNextFileW (Address: 0x1002b0b4)
- FlushFileBuffers (Address: 0x1002b0a4)
- FormatMessageW (Address: 0x1002b038)
- GetCurrentThread (Address: 0x1002b090)
- GetFileAttributesW (Address: 0x1002b0c4)
- GetFileInformationByHandle (Address: 0x1002b044)
- GetFileInformationByHandleEx (Address: 0x1002b03c)
- GetFileSizeEx (Address: 0x1002b074)
- GetFullPathNameW (Address: 0x1002b068)
- GetLocaleInfoW (Address: 0x1002b048)
- GetModuleHandleW (Address: 0x1002b054)
- GetPrivateProfileSectionW (Address: 0x1002b0bc)
- GetVolumeInformationW (Address: 0x1002b0ac)
- GetVolumeNameForVolumeMountPointW (Address: 0x1002b08c)
- GetVolumePathNameW (Address: 0x1002b080)
- HeapAlloc (Address: 0x1002b098)
- LoadLibraryExW (Address: 0x1002b0a8)
- LoadLibraryW (Address: 0x1002b05c)
- LocalFree (Address: 0x1002b040)
- MapViewOfFile (Address: 0x1002b0a0)
- MoveFileExW (Address: 0x1002b060)
- QueryDosDeviceW (Address: 0x1002b070)
- SetFileAttributesW (Address: 0x1002b064)
- SetFileInformationByHandle (Address: 0x1002b04c)
- SetLastError (Address: 0x1002b078)
- UnmapViewOfFile (Address: 0x1002b088)
- WriteFile (Address: 0x1002b0b8)
msvcrt.dll
- __iob_func (Address: 0x1002b240)
- _amsg_exit (Address: 0x1002b1b0)
- _callnewh (Address: 0x1002b228)
- _except_handler4_common (Address: 0x1002b1c0)
- _initterm (Address: 0x1002b1b8)
- _purecall (Address: 0x1002b1b4)
- _snwscanf_s (Address: 0x1002b208)
- _ultow_s (Address: 0x1002b1fc)
- _vsnwprintf (Address: 0x1002b1dc)
- _vsnwprintf_s (Address: 0x1002b1d0)
- _wcsicmp (Address: 0x1002b1e0)
- _wcslwr (Address: 0x1002b20c)
- _wcsnicmp (Address: 0x1002b1e4)
- _wcsupr (Address: 0x1002b1f4)
- _wfopen_s (Address: 0x1002b1c8)
- _XcptFilter (Address: 0x1002b238)
- bsearch (Address: 0x1002b224)
- fclose (Address: 0x1002b1cc)
- fflush (Address: 0x1002b1c4)
- free (Address: 0x1002b23c)
- fwprintf (Address: 0x1002b1d4)
- malloc (Address: 0x1002b1f8)
- memcmp (Address: 0x1002b234)
- memcpy (Address: 0x1002b230)
- memmove (Address: 0x1002b22c)
- memset (Address: 0x1002b244)
- strcpy_s (Address: 0x1002b218)
- strncmp (Address: 0x1002b21c)
- swprintf_s (Address: 0x1002b1ec)
- wcscat_s (Address: 0x1002b1e8)
- wcschr (Address: 0x1002b1f0)
- wcscpy_s (Address: 0x1002b1d8)
- wcsncmp (Address: 0x1002b220)
- wcsncpy_s (Address: 0x1002b204)
- wcsnlen (Address: 0x1002b214)
- wcsrchr (Address: 0x1002b1bc)
- wcsstr (Address: 0x1002b210)
- wcstoul (Address: 0x1002b200)
ntdll.dll
- LdrAccessResource (Address: 0x1002b280)
- LdrFindResource_U (Address: 0x1002b27c)
- LdrGetDllHandle (Address: 0x1002b364)
- LdrGetProcedureAddress (Address: 0x1002b360)
- NtAdjustPrivilegesToken (Address: 0x1002b378)
- NtClose (Address: 0x1002b390)
- NtCreateEvent (Address: 0x1002b260)
- NtDeviceIoControlFile (Address: 0x1002b258)
- NtEnumerateBootEntries (Address: 0x1002b30c)
- NtOpenDirectoryObject (Address: 0x1002b304)
- NtOpenFile (Address: 0x1002b274)
- NtOpenKey (Address: 0x1002b2d4)
- NtOpenProcess (Address: 0x1002b2ec)
- NtOpenProcessTokenEx (Address: 0x1002b37c)
- NtOpenSymbolicLinkObject (Address: 0x1002b2cc)
- NtOpenThreadTokenEx (Address: 0x1002b380)
- NtQueryBootEntryOrder (Address: 0x1002b2f8)
- NtQueryBootOptions (Address: 0x1002b2fc)
- NtQueryDirectoryObject (Address: 0x1002b308)
- NtQueryInformationFile (Address: 0x1002b264)
- NtQueryInformationProcess (Address: 0x1002b394)
- NtQueryInformationThread (Address: 0x1002b268)
- NtQuerySymbolicLinkObject (Address: 0x1002b2d8)
- NtQuerySystemInformation (Address: 0x1002b278)
- NtQueryValueKey (Address: 0x1002b2f4)
- NtReadFile (Address: 0x1002b250)
- NtSetInformationFile (Address: 0x1002b288)
- NtSetInformationThread (Address: 0x1002b254)
- NtTranslateFilePath (Address: 0x1002b300)
- NtWaitForSingleObject (Address: 0x1002b270)
- NtWriteFile (Address: 0x1002b388)
- RtlAddAccessAllowedAceEx (Address: 0x1002b2dc)
- RtlAllocateAndInitializeSid (Address: 0x1002b2e0)
- RtlAllocateHeap (Address: 0x1002b298)
- RtlAppendUnicodeToString (Address: 0x1002b2a4)
- RtlCompareMemory (Address: 0x1002b294)
- RtlCreateAcl (Address: 0x1002b38c)
- RtlCreateSecurityDescriptor (Address: 0x1002b2f0)
- RtlFreeHeap (Address: 0x1002b290)
- RtlFreeSid (Address: 0x1002b2e8)
- RtlFreeUnicodeString (Address: 0x1002b284)
- RtlGetVersion (Address: 0x1002b358)
- RtlGUIDFromString (Address: 0x1002b2a0)
- RtlImageNtHeader (Address: 0x1002b25c)
- RtlImpersonateSelf (Address: 0x1002b384)
- RtlInitAnsiString (Address: 0x1002b36c)
- RtlInitUnicodeString (Address: 0x1002b24c)
- RtlLengthSecurityDescriptor (Address: 0x1002b2c4)
- RtlLengthSid (Address: 0x1002b2e4)
- RtlNtStatusToDosError (Address: 0x1002b26c)
- RtlSetDaclSecurityDescriptor (Address: 0x1002b2d0)
- RtlSetOwnerSecurityDescriptor (Address: 0x1002b2c8)
- RtlStringFromGUID (Address: 0x1002b28c)
- ZwAllocateUuids (Address: 0x1002b344)
- ZwClose (Address: 0x1002b2c0)
- ZwCreateFile (Address: 0x1002b310)
- ZwCreateKey (Address: 0x1002b314)
- ZwDeleteKey (Address: 0x1002b328)
- ZwDeleteValueKey (Address: 0x1002b320)
- ZwDeviceIoControlFile (Address: 0x1002b34c)
- ZwEnumerateKey (Address: 0x1002b32c)
- ZwFlushKey (Address: 0x1002b31c)
- ZwLoadKey (Address: 0x1002b318)
- ZwOpenDirectoryObject (Address: 0x1002b35c)
- ZwOpenFile (Address: 0x1002b2b8)
- ZwOpenKey (Address: 0x1002b340)
- ZwOpenMutant (Address: 0x1002b2bc)
- ZwOpenProcess (Address: 0x1002b374)
- ZwOpenSymbolicLinkObject (Address: 0x1002b354)
- ZwQueryAttributesFile (Address: 0x1002b2a8)
- ZwQueryDirectoryObject (Address: 0x1002b350)
- ZwQueryInformationFile (Address: 0x1002b370)
- ZwQueryInformationProcess (Address: 0x1002b368)
- ZwQueryKey (Address: 0x1002b2b0)
- ZwQuerySymbolicLinkObject (Address: 0x1002b348)
- ZwQuerySystemInformation (Address: 0x1002b29c)
- ZwQueryValueKey (Address: 0x1002b330)
- ZwReleaseMutant (Address: 0x1002b2b4)
- ZwSaveKey (Address: 0x1002b324)
- ZwSetSecurityObject (Address: 0x1002b334)
- ZwSetValueKey (Address: 0x1002b33c)
- ZwUnloadKey (Address: 0x1002b338)
- ZwWaitForSingleObject (Address: 0x1002b2ac)
RPCRT4.dll
- UuidCreate (Address: 0x1002b0cc)
SHLWAPI.dll
- PathRemoveBackslashW (Address: 0x1002b0d4)
WCP.dll
- ?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z (Address: 0x1002b0ec)
- ?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z (Address: 0x1002b0e4)
- ?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z (Address: 0x1002b0e8)
- RtlFreeLUnicodeString (Address: 0x1002b0dc)
- RtlReportErrorOrigination (Address: 0x1002b0e0)