bfsvc.dll
Description: CMI boot file service plug-in
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.1
Architecture: 64-bit
Operating System: Windows NT
SHA256: d3d93fabb4ebe3ff70122c9e06eb5041
File Size: 229.8 KB
Uploaded At: Dec. 1, 2025, 8:20 a.m.
Views: 16
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x1f40)
- DllCsiGetHandler (Ordinal: 2, Address: 0x1f60)
Imported DLLs & Functions
ADVAPI32.dll
- AdjustTokenPrivileges (Address: 0x180025e98)
- ConvertSidToStringSidW (Address: 0x180025e48)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180025e60)
- GetSecurityDescriptorControl (Address: 0x180025e78)
- GetSecurityDescriptorDacl (Address: 0x180025e90)
- GetSecurityDescriptorGroup (Address: 0x180025e88)
- GetSecurityDescriptorOwner (Address: 0x180025e70)
- GetSecurityDescriptorSacl (Address: 0x180025ea0)
- GetTokenInformation (Address: 0x180025e50)
- LookupPrivilegeValueW (Address: 0x180025ea8)
- OpenProcessToken (Address: 0x180025e68)
- OpenThreadToken (Address: 0x180025e58)
- SetNamedSecurityInfoW (Address: 0x180025e80)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x180026038)
- SetUnhandledExceptionFilter (Address: 0x180026030)
- UnhandledExceptionFilter (Address: 0x180026040)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x180026058)
- HeapDestroy (Address: 0x180026050)
- HeapFree (Address: 0x180026060)
api-ms-win-core-libraryloader-l1-1-0.dll
- DisableThreadLibraryCalls (Address: 0x180026098)
- FindResourceExW (Address: 0x180026078)
- FreeLibrary (Address: 0x180026090)
- GetModuleHandleExW (Address: 0x180026080)
- GetProcAddress (Address: 0x180026070)
- LoadResource (Address: 0x180026088)
api-ms-win-core-localization-obsolete-l1-2-0.dll
- GetSystemDefaultUILanguage (Address: 0x1800260b0)
- GetUserDefaultUILanguage (Address: 0x1800260a8)
api-ms-win-core-processenvironment-l1-1-0.dll
- SearchPathW (Address: 0x1800260c0)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x1800260e8)
- GetCurrentProcessId (Address: 0x1800260d0)
- GetCurrentThreadId (Address: 0x1800260d8)
- TerminateProcess (Address: 0x1800260e0)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1800260f8)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x180026118)
- RegOpenKeyExW (Address: 0x180026110)
- RegQueryValueExW (Address: 0x180026108)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x180026140)
- RtlCompareMemory (Address: 0x180026130)
- RtlLookupFunctionEntry (Address: 0x180026138)
- RtlVirtualUnwind (Address: 0x180026128)
api-ms-win-core-synch-l1-1-0.dll
- DeleteCriticalSection (Address: 0x180026158)
- InitializeCriticalSection (Address: 0x180026150)
api-ms-win-core-synch-l1-2-0.dll
- Sleep (Address: 0x180026168)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x180026190)
- GetSystemWindowsDirectoryW (Address: 0x180026178)
- GetTickCount (Address: 0x180026188)
- GetVersionExW (Address: 0x180026180)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x1800261a8)
- EventUnregister (Address: 0x1800261a0)
- EventWriteTransfer (Address: 0x1800261b0)
imagehlp.dll
- CheckSumMappedFile (Address: 0x1800261c0)
KERNEL32.dll
- CloseHandle (Address: 0x180025f80)
- CopyFileExW (Address: 0x180025ec0)
- CreateDirectoryW (Address: 0x180025f30)
- CreateFileMappingW (Address: 0x180025f90)
- CreateFileW (Address: 0x180025f60)
- DeleteFileW (Address: 0x180025ed0)
- DeviceIoControl (Address: 0x180025f50)
- FindClose (Address: 0x180025f20)
- FindFirstFileW (Address: 0x180025fb8)
- FindNextFileW (Address: 0x180025fc0)
- FlushFileBuffers (Address: 0x180025fa0)
- FormatMessageW (Address: 0x180025fd0)
- GetCurrentThread (Address: 0x180025f78)
- GetFileAttributesW (Address: 0x180025f18)
- GetFileInformationByHandle (Address: 0x180025ee0)
- GetFileInformationByHandleEx (Address: 0x180025ee8)
- GetFileSizeEx (Address: 0x180025f40)
- GetFullPathNameW (Address: 0x180025eb8)
- GetLocaleInfoW (Address: 0x180025ef0)
- GetModuleHandleW (Address: 0x180025ec8)
- GetPrivateProfileSectionW (Address: 0x180025f28)
- GetVolumeInformationW (Address: 0x180025fb0)
- GetVolumeNameForVolumeMountPointW (Address: 0x180025f70)
- GetVolumePathNameW (Address: 0x180025f58)
- HeapAlloc (Address: 0x180025f88)
- LoadLibraryExW (Address: 0x180025fa8)
- LoadLibraryW (Address: 0x180025f00)
- LocalFree (Address: 0x180025ef8)
- MapViewOfFile (Address: 0x180025f98)
- MoveFileExW (Address: 0x180025f08)
- QueryDosDeviceW (Address: 0x180025f38)
- SetFileAttributesW (Address: 0x180025f10)
- SetFileInformationByHandle (Address: 0x180025ed8)
- SetLastError (Address: 0x180025f48)
- UnmapViewOfFile (Address: 0x180025f68)
- WriteFile (Address: 0x180025fc8)
msvcrt.dll
- __C_specific_handler (Address: 0x1800261d0)
- __iob_func (Address: 0x1800262f0)
- _amsg_exit (Address: 0x1800262b8)
- _callnewh (Address: 0x1800261f0)
- _initterm (Address: 0x1800262c0)
- _purecall (Address: 0x1800261e0)
- _snwscanf_s (Address: 0x180026278)
- _ultow_s (Address: 0x180026260)
- _vsnwprintf (Address: 0x180026228)
- _vsnwprintf_s (Address: 0x180026210)
- _wcsicmp (Address: 0x180026230)
- _wcslwr (Address: 0x180026280)
- _wcsnicmp (Address: 0x1800262e8)
- _wcsupr (Address: 0x180026258)
- _wfopen_s (Address: 0x180026200)
- _XcptFilter (Address: 0x180026238)
- bsearch (Address: 0x1800262b0)
- fclose (Address: 0x180026208)
- fflush (Address: 0x1800261f8)
- free (Address: 0x1800261d8)
- fwprintf (Address: 0x180026218)
- malloc (Address: 0x1800261e8)
- memcmp (Address: 0x1800262d8)
- memcpy (Address: 0x1800262d0)
- memmove (Address: 0x1800262e0)
- memset (Address: 0x1800262f8)
- strcpy_s (Address: 0x180026298)
- strncmp (Address: 0x1800262a0)
- swprintf_s (Address: 0x180026248)
- wcscat_s (Address: 0x180026240)
- wcschr (Address: 0x180026250)
- wcscpy_s (Address: 0x180026220)
- wcsncmp (Address: 0x1800262a8)
- wcsncpy_s (Address: 0x180026270)
- wcsnlen (Address: 0x180026290)
- wcsrchr (Address: 0x1800262c8)
- wcsstr (Address: 0x180026288)
- wcstoul (Address: 0x180026268)
ntdll.dll
- LdrAccessResource (Address: 0x180026370)
- LdrFindResource_U (Address: 0x180026368)
- LdrGetDllHandle (Address: 0x180026528)
- LdrGetProcedureAddress (Address: 0x180026520)
- NtAdjustPrivilegesToken (Address: 0x180026550)
- NtClose (Address: 0x180026580)
- NtCreateEvent (Address: 0x180026330)
- NtDeviceIoControlFile (Address: 0x180026320)
- NtEnumerateBootEntries (Address: 0x180026480)
- NtOpenDirectoryObject (Address: 0x180026470)
- NtOpenFile (Address: 0x180026358)
- NtOpenKey (Address: 0x180026410)
- NtOpenProcess (Address: 0x180026440)
- NtOpenProcessTokenEx (Address: 0x180026558)
- NtOpenSymbolicLinkObject (Address: 0x180026400)
- NtOpenThreadTokenEx (Address: 0x180026560)
- NtQueryBootEntryOrder (Address: 0x180026458)
- NtQueryBootOptions (Address: 0x180026460)
- NtQueryDirectoryObject (Address: 0x180026478)
- NtQueryInformationFile (Address: 0x180026338)
- NtQueryInformationProcess (Address: 0x180026588)
- NtQueryInformationThread (Address: 0x180026340)
- NtQuerySymbolicLinkObject (Address: 0x180026418)
- NtQuerySystemInformation (Address: 0x180026360)
- NtQueryValueKey (Address: 0x180026450)
- NtReadFile (Address: 0x180026310)
- NtSetInformationFile (Address: 0x180026380)
- NtSetInformationThread (Address: 0x180026318)
- NtTranslateFilePath (Address: 0x180026468)
- NtWaitForSingleObject (Address: 0x180026350)
- NtWriteFile (Address: 0x180026570)
- RtlAddAccessAllowedAceEx (Address: 0x180026420)
- RtlAllocateAndInitializeSid (Address: 0x180026428)
- RtlAllocateHeap (Address: 0x180026398)
- RtlAppendUnicodeToString (Address: 0x1800263b0)
- RtlCreateAcl (Address: 0x180026578)
- RtlCreateSecurityDescriptor (Address: 0x180026448)
- RtlFreeHeap (Address: 0x180026390)
- RtlFreeSid (Address: 0x180026438)
- RtlFreeUnicodeString (Address: 0x180026378)
- RtlGUIDFromString (Address: 0x1800263a8)
- RtlImageNtHeader (Address: 0x180026328)
- RtlImpersonateSelf (Address: 0x180026568)
- RtlInitAnsiString (Address: 0x180026538)
- RtlInitUnicodeString (Address: 0x180026308)
- RtlLengthSecurityDescriptor (Address: 0x1800263f0)
- RtlLengthSid (Address: 0x180026430)
- RtlNtStatusToDosError (Address: 0x180026348)
- RtlSetDaclSecurityDescriptor (Address: 0x180026408)
- RtlSetOwnerSecurityDescriptor (Address: 0x1800263f8)
- RtlStringFromGUID (Address: 0x180026388)
- ZwAllocateUuids (Address: 0x1800264f0)
- ZwClose (Address: 0x1800263e8)
- ZwCreateFile (Address: 0x180026488)
- ZwCreateKey (Address: 0x180026490)
- ZwDeleteKey (Address: 0x1800264b8)
- ZwDeleteValueKey (Address: 0x1800264a8)
- ZwDeviceIoControlFile (Address: 0x180026500)
- ZwEnumerateKey (Address: 0x1800264c0)
- ZwFlushKey (Address: 0x1800264a0)
- ZwLoadKey (Address: 0x180026498)
- ZwOpenDirectoryObject (Address: 0x180026518)
- ZwOpenFile (Address: 0x1800263d8)
- ZwOpenKey (Address: 0x1800264e8)
- ZwOpenMutant (Address: 0x1800263e0)
- ZwOpenProcess (Address: 0x180026548)
- ZwOpenSymbolicLinkObject (Address: 0x180026510)
- ZwQueryAttributesFile (Address: 0x1800263b8)
- ZwQueryDirectoryObject (Address: 0x180026508)
- ZwQueryInformationFile (Address: 0x180026540)
- ZwQueryInformationProcess (Address: 0x180026530)
- ZwQueryKey (Address: 0x1800263c8)
- ZwQuerySymbolicLinkObject (Address: 0x1800264f8)
- ZwQuerySystemInformation (Address: 0x1800263a0)
- ZwQueryValueKey (Address: 0x1800264c8)
- ZwReleaseMutant (Address: 0x1800263d0)
- ZwSaveKey (Address: 0x1800264b0)
- ZwSetSecurityObject (Address: 0x1800264d0)
- ZwSetValueKey (Address: 0x1800264e0)
- ZwUnloadKey (Address: 0x1800264d8)
- ZwWaitForSingleObject (Address: 0x1800263c0)
RPCRT4.dll
- UuidCreate (Address: 0x180025fe0)
SHLWAPI.dll
- PathRemoveBackslashW (Address: 0x180025ff0)
WCP.dll
- ?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z (Address: 0x180026020)
- ?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x180026010)
- ?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z (Address: 0x180026008)
- RtlFreeLUnicodeString (Address: 0x180026018)
- RtlReportErrorOrigination (Address: 0x180026000)