bfsvc.dll
Description: CMI boot file service plug-in
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.3205
Architecture: 32-bit
Operating System: Windows NT
SHA256: 41efef91fae65daf199d3df8ce661779
File Size: 217.8 KB
Uploaded At: Dec. 1, 2025, 8:40 a.m.
Views: 10
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x16850)
- DllCsiGetHandler (Ordinal: 2, Address: 0x16870)
Imported DLLs & Functions
ADVAPI32.dll
- AdjustTokenPrivileges (Address: 0x10032028)
- ConvertSidToStringSidW (Address: 0x1003200c)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x10032008)
- GetSecurityDescriptorControl (Address: 0x10032018)
- GetSecurityDescriptorDacl (Address: 0x10032024)
- GetSecurityDescriptorGroup (Address: 0x10032020)
- GetSecurityDescriptorOwner (Address: 0x10032014)
- GetSecurityDescriptorSacl (Address: 0x1003202c)
- GetTokenInformation (Address: 0x10032000)
- LookupPrivilegeValueW (Address: 0x10032030)
- OpenProcessToken (Address: 0x10032010)
- OpenThreadToken (Address: 0x10032004)
- SetNamedSecurityInfoW (Address: 0x1003201c)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x100320e8)
- IsDebuggerPresent (Address: 0x100320e4)
- OutputDebugStringW (Address: 0x100320e0)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x100320f4)
- SetLastError (Address: 0x100320f0)
- SetUnhandledExceptionFilter (Address: 0x100320f8)
- UnhandledExceptionFilter (Address: 0x100320fc)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x10032104)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x10032114)
- HeapAlloc (Address: 0x1003210c)
- HeapDestroy (Address: 0x10032118)
- HeapFree (Address: 0x10032110)
api-ms-win-core-libraryloader-l1-1-0.dll
- DisableThreadLibraryCalls (Address: 0x10032134)
- FindResourceExW (Address: 0x1003213c)
- FreeLibrary (Address: 0x10032120)
- GetModuleFileNameA (Address: 0x10032128)
- GetModuleHandleExW (Address: 0x10032130)
- GetModuleHandleW (Address: 0x10032138)
- GetProcAddress (Address: 0x10032124)
- LoadResource (Address: 0x1003212c)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x10032144)
api-ms-win-core-localization-obsolete-l1-2-0.dll
- GetSystemDefaultUILanguage (Address: 0x1003214c)
- GetUserDefaultUILanguage (Address: 0x10032150)
api-ms-win-core-processenvironment-l1-1-0.dll
- SearchPathW (Address: 0x10032158)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x10032168)
- GetCurrentProcessId (Address: 0x10032160)
- GetCurrentThreadId (Address: 0x10032164)
- TerminateProcess (Address: 0x1003216c)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x10032174)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x10032180)
- RegCreateKeyExW (Address: 0x1003218c)
- RegOpenKeyExW (Address: 0x10032184)
- RegQueryValueExW (Address: 0x1003217c)
- RegSetValueExW (Address: 0x10032188)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x100321a0)
- AcquireSRWLockShared (Address: 0x10032198)
- CreateMutexExW (Address: 0x100321d0)
- CreateSemaphoreExW (Address: 0x100321b0)
- DeleteCriticalSection (Address: 0x100321c4)
- EnterCriticalSection (Address: 0x100321bc)
- InitializeCriticalSection (Address: 0x100321b4)
- InitializeCriticalSectionEx (Address: 0x100321c0)
- LeaveCriticalSection (Address: 0x100321ac)
- OpenSemaphoreW (Address: 0x100321cc)
- ReleaseMutex (Address: 0x100321a8)
- ReleaseSemaphore (Address: 0x100321a4)
- ReleaseSRWLockExclusive (Address: 0x1003219c)
- ReleaseSRWLockShared (Address: 0x10032194)
- WaitForSingleObject (Address: 0x100321c8)
- WaitForSingleObjectEx (Address: 0x100321b8)
api-ms-win-core-synch-l1-2-0.dll
- Sleep (Address: 0x100321d8)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x100321ec)
- GetSystemWindowsDirectoryW (Address: 0x100321e4)
- GetTickCount (Address: 0x100321e8)
- GetVersionExW (Address: 0x100321e0)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x100321f8)
- CreateThreadpoolTimer (Address: 0x100321f4)
- SetThreadpoolTimer (Address: 0x10032200)
- WaitForThreadpoolTimerCallbacks (Address: 0x100321fc)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x1003220c)
- EventUnregister (Address: 0x10032210)
- EventWriteTransfer (Address: 0x10032208)
imagehlp.dll
- CheckSumMappedFile (Address: 0x10032218)
KERNEL32.dll
- CopyFileExW (Address: 0x1003206c)
- CreateDirectoryW (Address: 0x100320b0)
- CreateFileMappingW (Address: 0x1003208c)
- CreateFileW (Address: 0x1003209c)
- DeleteFileW (Address: 0x1003203c)
- DeviceIoControl (Address: 0x100320a4)
- FindClose (Address: 0x10032064)
- FindFirstFileW (Address: 0x10032078)
- FindNextFileW (Address: 0x10032074)
- FlushFileBuffers (Address: 0x10032084)
- GetCurrentThread (Address: 0x10032090)
- GetFileAttributesW (Address: 0x10032060)
- GetFileInformationByHandle (Address: 0x10032044)
- GetFileInformationByHandleEx (Address: 0x10032048)
- GetFileSizeEx (Address: 0x100320a8)
- GetFullPathNameW (Address: 0x10032038)
- GetLocaleInfoW (Address: 0x1003204c)
- GetPrivateProfileSectionW (Address: 0x10032068)
- GetVolumeInformationW (Address: 0x1003207c)
- GetVolumeNameForVolumeMountPointW (Address: 0x10032094)
- GetVolumePathNameW (Address: 0x100320a0)
- LoadLibraryExW (Address: 0x10032080)
- LoadLibraryW (Address: 0x10032054)
- LocalFree (Address: 0x10032050)
- MapViewOfFile (Address: 0x10032088)
- MoveFileExW (Address: 0x10032058)
- QueryDosDeviceW (Address: 0x100320ac)
- SetFileAttributesW (Address: 0x1003205c)
- SetFileInformationByHandle (Address: 0x10032040)
- UnmapViewOfFile (Address: 0x10032098)
- WriteFile (Address: 0x10032070)
msvcrt.dll
- __dllonexit (Address: 0x100322a4)
- __iob_func (Address: 0x100322c8)
- _amsg_exit (Address: 0x1003223c)
- _callnewh (Address: 0x100322b4)
- _except_handler4_common (Address: 0x100322b0)
- _initterm (Address: 0x10032240)
- _lock (Address: 0x10032258)
- _onexit (Address: 0x100322ac)
- _purecall (Address: 0x10032228)
- _snwscanf_s (Address: 0x10032280)
- _ultow_s (Address: 0x10032274)
- _unlock (Address: 0x100322a0)
- _vsnwprintf (Address: 0x100322a8)
- _vsnwprintf_s (Address: 0x10032250)
- _wcsicmp (Address: 0x1003225c)
- _wcslwr (Address: 0x10032284)
- _wcsnicmp (Address: 0x10032260)
- _wcsupr (Address: 0x10032270)
- _wfopen_s (Address: 0x10032248)
- _XcptFilter (Address: 0x10032234)
- bsearch (Address: 0x1003229c)
- fclose (Address: 0x1003224c)
- fflush (Address: 0x10032244)
- free (Address: 0x10032224)
- fwprintf (Address: 0x10032254)
- malloc (Address: 0x10032220)
- memcmp (Address: 0x100322bc)
- memcpy (Address: 0x100322c0)
- memcpy_s (Address: 0x10032238)
- memmove (Address: 0x100322b8)
- memmove_s (Address: 0x10032230)
- memset (Address: 0x100322cc)
- strcpy_s (Address: 0x10032290)
- strncmp (Address: 0x10032294)
- swprintf_s (Address: 0x10032268)
- wcscat_s (Address: 0x10032264)
- wcschr (Address: 0x1003226c)
- wcscpy_s (Address: 0x100322c4)
- wcsncmp (Address: 0x10032298)
- wcsncpy_s (Address: 0x1003227c)
- wcsnlen (Address: 0x1003228c)
- wcsrchr (Address: 0x1003222c)
- wcsstr (Address: 0x10032288)
- wcstoul (Address: 0x10032278)
ntdll.dll
- LdrAccessResource (Address: 0x10032308)
- LdrFindResource_U (Address: 0x10032304)
- LdrGetDllHandle (Address: 0x100323ec)
- LdrGetProcedureAddress (Address: 0x100323e8)
- NtAdjustPrivilegesToken (Address: 0x10032400)
- NtClose (Address: 0x10032418)
- NtCreateEvent (Address: 0x100322e8)
- NtDeviceIoControlFile (Address: 0x100322e0)
- NtEnumerateBootEntries (Address: 0x10032394)
- NtOpenDirectoryObject (Address: 0x1003238c)
- NtOpenFile (Address: 0x100322fc)
- NtOpenKey (Address: 0x1003235c)
- NtOpenProcess (Address: 0x10032374)
- NtOpenProcessTokenEx (Address: 0x10032404)
- NtOpenSymbolicLinkObject (Address: 0x10032354)
- NtOpenThreadTokenEx (Address: 0x10032408)
- NtQueryBootEntryOrder (Address: 0x10032380)
- NtQueryBootOptions (Address: 0x10032384)
- NtQueryDirectoryObject (Address: 0x10032390)
- NtQueryInformationFile (Address: 0x100322ec)
- NtQueryInformationProcess (Address: 0x1003241c)
- NtQueryInformationThread (Address: 0x100322f0)
- NtQuerySymbolicLinkObject (Address: 0x10032360)
- NtQuerySystemInformation (Address: 0x10032300)
- NtQueryValueKey (Address: 0x1003237c)
- NtReadFile (Address: 0x100322d8)
- NtSetInformationFile (Address: 0x10032310)
- NtSetInformationThread (Address: 0x100322dc)
- NtTranslateFilePath (Address: 0x10032388)
- NtWaitForSingleObject (Address: 0x100322f8)
- NtWriteFile (Address: 0x10032410)
- RtlAddAccessAllowedAceEx (Address: 0x10032364)
- RtlAllocateAndInitializeSid (Address: 0x10032368)
- RtlAllocateHeap (Address: 0x10032320)
- RtlAppendUnicodeToString (Address: 0x1003232c)
- RtlCompareMemory (Address: 0x1003231c)
- RtlCreateAcl (Address: 0x10032414)
- RtlCreateSecurityDescriptor (Address: 0x10032378)
- RtlFreeHeap (Address: 0x10032318)
- RtlFreeSid (Address: 0x10032370)
- RtlFreeUnicodeString (Address: 0x1003230c)
- RtlGetVersion (Address: 0x100323e0)
- RtlGUIDFromString (Address: 0x10032328)
- RtlImageNtHeader (Address: 0x100322e4)
- RtlImpersonateSelf (Address: 0x1003240c)
- RtlInitAnsiString (Address: 0x100323f4)
- RtlInitUnicodeString (Address: 0x100322d4)
- RtlLengthSecurityDescriptor (Address: 0x1003234c)
- RtlLengthSid (Address: 0x1003236c)
- RtlNtStatusToDosError (Address: 0x100322f4)
- RtlSetDaclSecurityDescriptor (Address: 0x10032358)
- RtlSetOwnerSecurityDescriptor (Address: 0x10032350)
- RtlStringFromGUID (Address: 0x10032314)
- ZwAllocateUuids (Address: 0x100323cc)
- ZwClose (Address: 0x10032348)
- ZwCreateFile (Address: 0x10032398)
- ZwCreateKey (Address: 0x1003239c)
- ZwDeleteKey (Address: 0x100323b0)
- ZwDeleteValueKey (Address: 0x100323a8)
- ZwDeviceIoControlFile (Address: 0x100323d4)
- ZwEnumerateKey (Address: 0x100323b4)
- ZwFlushKey (Address: 0x100323a4)
- ZwLoadKey (Address: 0x100323a0)
- ZwOpenDirectoryObject (Address: 0x100323e4)
- ZwOpenFile (Address: 0x10032340)
- ZwOpenKey (Address: 0x100323c8)
- ZwOpenMutant (Address: 0x10032344)
- ZwOpenProcess (Address: 0x100323fc)
- ZwOpenSymbolicLinkObject (Address: 0x100323dc)
- ZwQueryAttributesFile (Address: 0x10032330)
- ZwQueryDirectoryObject (Address: 0x100323d8)
- ZwQueryInformationFile (Address: 0x100323f8)
- ZwQueryInformationProcess (Address: 0x100323f0)
- ZwQueryKey (Address: 0x10032338)
- ZwQuerySymbolicLinkObject (Address: 0x100323d0)
- ZwQuerySystemInformation (Address: 0x10032324)
- ZwQueryValueKey (Address: 0x100323b8)
- ZwReleaseMutant (Address: 0x1003233c)
- ZwSaveKey (Address: 0x100323ac)
- ZwSetSecurityObject (Address: 0x100323bc)
- ZwSetValueKey (Address: 0x100323c4)
- ZwUnloadKey (Address: 0x100323c0)
- ZwWaitForSingleObject (Address: 0x10032334)
RPCRT4.dll
- UuidCreate (Address: 0x100320b8)
SHLWAPI.dll
- PathRemoveBackslashW (Address: 0x100320c0)
WCP.dll
- ?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z (Address: 0x100320cc)
- ?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z (Address: 0x100320d4)
- ?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z (Address: 0x100320d8)
- RtlFreeLUnicodeString (Address: 0x100320d0)
- RtlReportErrorOrigination (Address: 0x100320c8)