bfsvc.dll
Description: CMI boot file service plug-in
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.4467
Architecture: 64-bit
Operating System: Windows NT
SHA256: f37a01180834e05953026d50f269307e
File Size: 289.9 KB
Uploaded At: Dec. 1, 2025, 8:20 a.m.
Views: 15
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x92d0)
- DllCsiGetHandler (Ordinal: 2, Address: 0x92f0)
Imported DLLs & Functions
ADVAPI32.dll
- AdjustTokenPrivileges (Address: 0x18002ff18)
- ConvertSidToStringSidW (Address: 0x18002fee0)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18002fed8)
- DuplicateTokenEx (Address: 0x18002feb8)
- GetSecurityDescriptorControl (Address: 0x18002fef8)
- GetSecurityDescriptorDacl (Address: 0x18002ff10)
- GetSecurityDescriptorGroup (Address: 0x18002ff08)
- GetSecurityDescriptorOwner (Address: 0x18002fef0)
- GetSecurityDescriptorSacl (Address: 0x18002ff20)
- GetTokenInformation (Address: 0x18002fec0)
- LookupPrivilegeValueW (Address: 0x18002ff28)
- OpenProcessToken (Address: 0x18002fee8)
- OpenThreadToken (Address: 0x18002fec8)
- SetNamedSecurityInfoW (Address: 0x18002ff00)
- SetThreadToken (Address: 0x18002fed0)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1800300c8)
- IsDebuggerPresent (Address: 0x1800300d0)
- OutputDebugStringW (Address: 0x1800300c0)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1800300e8)
- SetLastError (Address: 0x1800300f8)
- SetUnhandledExceptionFilter (Address: 0x1800300f0)
- UnhandledExceptionFilter (Address: 0x1800300e0)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x180030108)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x180030120)
- HeapAlloc (Address: 0x180030128)
- HeapDestroy (Address: 0x180030130)
- HeapFree (Address: 0x180030118)
api-ms-win-core-libraryloader-l1-1-0.dll
- DisableThreadLibraryCalls (Address: 0x180030148)
- FindResourceExW (Address: 0x180030168)
- FreeLibrary (Address: 0x180030158)
- GetModuleFileNameA (Address: 0x180030140)
- GetModuleHandleExW (Address: 0x180030178)
- GetModuleHandleW (Address: 0x180030160)
- GetProcAddress (Address: 0x180030150)
- LoadResource (Address: 0x180030170)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x180030188)
api-ms-win-core-localization-obsolete-l1-2-0.dll
- GetSystemDefaultUILanguage (Address: 0x180030198)
- GetUserDefaultUILanguage (Address: 0x1800301a0)
api-ms-win-core-processenvironment-l1-1-0.dll
- SearchPathW (Address: 0x1800301b0)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x1800301d8)
- GetCurrentProcessId (Address: 0x1800301d0)
- GetCurrentThreadId (Address: 0x1800301c0)
- TerminateProcess (Address: 0x1800301c8)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1800301e8)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x180030218)
- RegCreateKeyExW (Address: 0x180030208)
- RegOpenKeyExW (Address: 0x1800301f8)
- RegQueryValueExW (Address: 0x180030210)
- RegSetValueExW (Address: 0x180030200)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x180030240)
- RtlCompareMemory (Address: 0x180030238)
- RtlLookupFunctionEntry (Address: 0x180030228)
- RtlVirtualUnwind (Address: 0x180030230)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x180030298)
- AcquireSRWLockShared (Address: 0x180030250)
- CreateMutexExW (Address: 0x1800302c8)
- CreateSemaphoreExW (Address: 0x180030270)
- DeleteCriticalSection (Address: 0x1800302b0)
- EnterCriticalSection (Address: 0x180030288)
- InitializeCriticalSection (Address: 0x180030258)
- InitializeCriticalSectionEx (Address: 0x1800302a0)
- LeaveCriticalSection (Address: 0x1800302a8)
- OpenSemaphoreW (Address: 0x1800302c0)
- ReleaseMutex (Address: 0x180030260)
- ReleaseSemaphore (Address: 0x180030268)
- ReleaseSRWLockExclusive (Address: 0x180030290)
- ReleaseSRWLockShared (Address: 0x180030280)
- WaitForSingleObject (Address: 0x1800302b8)
- WaitForSingleObjectEx (Address: 0x180030278)
api-ms-win-core-synch-l1-2-0.dll
- Sleep (Address: 0x1800302d8)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x180030300)
- GetSystemWindowsDirectoryW (Address: 0x1800302f8)
- GetTickCount (Address: 0x1800302e8)
- GetVersionExW (Address: 0x1800302f0)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x180030320)
- CreateThreadpoolTimer (Address: 0x180030318)
- SetThreadpoolTimer (Address: 0x180030328)
- WaitForThreadpoolTimerCallbacks (Address: 0x180030310)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x180030338)
- EventUnregister (Address: 0x180030348)
- EventWriteTransfer (Address: 0x180030340)
bcrypt.dll
- BCryptCloseAlgorithmProvider (Address: 0x180030368)
- BCryptCreateHash (Address: 0x180030358)
- BCryptDestroyHash (Address: 0x180030380)
- BCryptFinishHash (Address: 0x180030370)
- BCryptHashData (Address: 0x180030378)
- BCryptOpenAlgorithmProvider (Address: 0x180030360)
CRYPT32.dll
- CertGetNameStringW (Address: 0x18002ff38)
imagehlp.dll
- CheckSumMappedFile (Address: 0x180030390)
KERNEL32.dll
- CopyFileExW (Address: 0x18002ff48)
- CreateDirectoryW (Address: 0x180030040)
- CreateFileMappingW (Address: 0x18002ffe8)
- CreateFileW (Address: 0x180030010)
- DeleteFileW (Address: 0x18002ff50)
- DeviceIoControl (Address: 0x180030020)
- FindClose (Address: 0x18002ffa8)
- FindFirstFileW (Address: 0x18002ffc8)
- FindNextFileW (Address: 0x18002ffc0)
- FlushFileBuffers (Address: 0x18002ffd8)
- GetCurrentThread (Address: 0x18002fff0)
- GetFileAttributesW (Address: 0x180030008)
- GetFileInformationByHandle (Address: 0x18002ff60)
- GetFileInformationByHandleEx (Address: 0x18002ff68)
- GetFileSizeEx (Address: 0x180030028)
- GetFullPathNameW (Address: 0x18002ff78)
- GetLocaleInfoW (Address: 0x18002ff88)
- GetPrivateProfileSectionW (Address: 0x18002ffb0)
- GetVolumeInformationW (Address: 0x18002ffd0)
- GetVolumeNameForVolumeMountPointW (Address: 0x18002fff8)
- GetVolumePathNameW (Address: 0x180030018)
- LoadLibraryExW (Address: 0x180030038)
- LoadLibraryW (Address: 0x18002ff90)
- LocalAlloc (Address: 0x18002ff70)
- LocalFree (Address: 0x18002ff80)
- MapViewOfFile (Address: 0x18002ffe0)
- MoveFileExW (Address: 0x18002ff98)
- QueryDosDeviceW (Address: 0x180030030)
- SetFileAttributesW (Address: 0x18002ffa0)
- SetFileInformationByHandle (Address: 0x18002ff58)
- UnmapViewOfFile (Address: 0x180030000)
- WriteFile (Address: 0x18002ffb8)
msvcrt.dll
- __C_specific_handler (Address: 0x1800303c8)
- __dllonexit (Address: 0x1800304b0)
- __iob_func (Address: 0x1800304f8)
- _amsg_exit (Address: 0x1800303b8)
- _callnewh (Address: 0x180030498)
- _initterm (Address: 0x180030410)
- _lock (Address: 0x1800304a0)
- _onexit (Address: 0x1800304c0)
- _purecall (Address: 0x1800304e8)
- _snwscanf_s (Address: 0x180030460)
- _ultow_s (Address: 0x180030450)
- _unlock (Address: 0x1800304a8)
- _vsnwprintf (Address: 0x1800304b8)
- _vsnwprintf_s (Address: 0x1800303f8)
- _wcsicmp (Address: 0x1800304d0)
- _wcslwr (Address: 0x180030468)
- _wcsnicmp (Address: 0x180030418)
- _wcsupr (Address: 0x180030440)
- _wfopen_s (Address: 0x1800303e8)
- _XcptFilter (Address: 0x1800303a0)
- bsearch (Address: 0x180030490)
- fclose (Address: 0x1800303f0)
- fflush (Address: 0x1800303e0)
- free (Address: 0x1800303d0)
- fwprintf (Address: 0x180030400)
- malloc (Address: 0x1800303a8)
- memcmp (Address: 0x1800304f0)
- memcpy (Address: 0x1800304d8)
- memcpy_s (Address: 0x1800303c0)
- memmove (Address: 0x1800304e0)
- memmove_s (Address: 0x1800303b0)
- memset (Address: 0x1800304c8)
- strcpy_s (Address: 0x180030480)
- strncmp (Address: 0x180030488)
- swprintf_s (Address: 0x180030430)
- wcscat_s (Address: 0x180030428)
- wcschr (Address: 0x180030438)
- wcscmp (Address: 0x180030500)
- wcscpy_s (Address: 0x180030408)
- wcsncmp (Address: 0x180030420)
- wcsncpy_s (Address: 0x180030448)
- wcsnlen (Address: 0x180030478)
- wcsrchr (Address: 0x1800303d8)
- wcsstr (Address: 0x180030470)
- wcstoul (Address: 0x180030458)
ntdll.dll
- LdrAccessResource (Address: 0x180030570)
- LdrFindResource_U (Address: 0x180030568)
- LdrGetDllHandle (Address: 0x180030730)
- LdrGetProcedureAddress (Address: 0x180030728)
- NtAdjustPrivilegesToken (Address: 0x180030758)
- NtClose (Address: 0x180030790)
- NtCreateEvent (Address: 0x180030530)
- NtDeviceIoControlFile (Address: 0x180030520)
- NtEnumerateBootEntries (Address: 0x180030688)
- NtOpenDirectoryObject (Address: 0x180030678)
- NtOpenFile (Address: 0x180030558)
- NtOpenKey (Address: 0x180030618)
- NtOpenProcess (Address: 0x180030798)
- NtOpenProcessTokenEx (Address: 0x180030760)
- NtOpenSymbolicLinkObject (Address: 0x180030608)
- NtOpenThreadTokenEx (Address: 0x180030768)
- NtQueryBootEntryOrder (Address: 0x180030660)
- NtQueryBootOptions (Address: 0x180030668)
- NtQueryDirectoryObject (Address: 0x180030680)
- NtQueryInformationFile (Address: 0x180030538)
- NtQueryInformationProcess (Address: 0x180030778)
- NtQueryInformationThread (Address: 0x180030540)
- NtQuerySymbolicLinkObject (Address: 0x180030620)
- NtQuerySystemEnvironmentValueEx (Address: 0x180030598)
- NtQuerySystemInformation (Address: 0x180030560)
- NtQueryValueKey (Address: 0x180030658)
- NtReadFile (Address: 0x180030510)
- NtSetInformationFile (Address: 0x180030580)
- NtSetInformationThread (Address: 0x180030518)
- NtTranslateFilePath (Address: 0x180030670)
- NtWaitForSingleObject (Address: 0x180030550)
- NtWriteFile (Address: 0x180030780)
- RtlAddAccessAllowedAceEx (Address: 0x180030628)
- RtlAllocateAndInitializeSid (Address: 0x180030630)
- RtlAllocateHeap (Address: 0x1800305a0)
- RtlAppendUnicodeToString (Address: 0x1800305b8)
- RtlCreateAcl (Address: 0x180030788)
- RtlCreateSecurityDescriptor (Address: 0x180030650)
- RtlFreeHeap (Address: 0x180030590)
- RtlFreeSid (Address: 0x180030640)
- RtlFreeUnicodeString (Address: 0x180030578)
- RtlGUIDFromString (Address: 0x1800305b0)
- RtlImageNtHeader (Address: 0x180030528)
- RtlImpersonateSelf (Address: 0x180030770)
- RtlInitAnsiString (Address: 0x180030740)
- RtlInitUnicodeString (Address: 0x180030648)
- RtlLengthSecurityDescriptor (Address: 0x1800305f8)
- RtlLengthSid (Address: 0x180030638)
- RtlNtStatusToDosError (Address: 0x180030548)
- RtlSetDaclSecurityDescriptor (Address: 0x180030610)
- RtlSetOwnerSecurityDescriptor (Address: 0x180030600)
- RtlStringFromGUID (Address: 0x180030588)
- ZwAllocateUuids (Address: 0x1800306f8)
- ZwClose (Address: 0x1800305f0)
- ZwCreateFile (Address: 0x180030690)
- ZwCreateKey (Address: 0x180030698)
- ZwDeleteKey (Address: 0x1800306c0)
- ZwDeleteValueKey (Address: 0x1800306b0)
- ZwDeviceIoControlFile (Address: 0x180030708)
- ZwEnumerateKey (Address: 0x1800306c8)
- ZwFlushKey (Address: 0x1800306a8)
- ZwLoadKey (Address: 0x1800306a0)
- ZwOpenDirectoryObject (Address: 0x180030720)
- ZwOpenFile (Address: 0x1800305e0)
- ZwOpenKey (Address: 0x1800306f0)
- ZwOpenMutant (Address: 0x1800305e8)
- ZwOpenProcess (Address: 0x180030750)
- ZwOpenSymbolicLinkObject (Address: 0x180030718)
- ZwQueryAttributesFile (Address: 0x1800305c0)
- ZwQueryDirectoryObject (Address: 0x180030710)
- ZwQueryInformationFile (Address: 0x180030748)
- ZwQueryInformationProcess (Address: 0x180030738)
- ZwQueryKey (Address: 0x1800305d0)
- ZwQuerySymbolicLinkObject (Address: 0x180030700)
- ZwQuerySystemInformation (Address: 0x1800305a8)
- ZwQueryValueKey (Address: 0x1800306d0)
- ZwReleaseMutant (Address: 0x1800305d8)
- ZwSaveKey (Address: 0x1800306b8)
- ZwSetSecurityObject (Address: 0x1800306d8)
- ZwSetValueKey (Address: 0x1800306e8)
- ZwUnloadKey (Address: 0x1800306e0)
- ZwWaitForSingleObject (Address: 0x1800305c8)
RPCRT4.dll
- UuidCreate (Address: 0x180030050)
SHLWAPI.dll
- PathRemoveBackslashW (Address: 0x180030060)
WCP.dll
- ?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z (Address: 0x180030088)
- ?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x180030070)
- ?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z (Address: 0x180030090)
- RtlFreeLUnicodeString (Address: 0x180030078)
- RtlReportErrorOrigination (Address: 0x180030080)
WINTRUST.dll
- WinVerifyTrust (Address: 0x1800300a8)
- WTHelperGetProvSignerFromChain (Address: 0x1800300b0)
- WTHelperProvDataFromStateData (Address: 0x1800300a0)