bfsvc.dll
Description: CMI boot file service plug-in
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5911
Architecture: 64-bit
Operating System: Windows NT
SHA256: d1f9c5354f0785aa9716a65d2bebfeff
File Size: 286.9 KB
Uploaded At: Dec. 1, 2025, 8:20 a.m.
Views: 18
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x94a0)
- DllCsiGetHandler (Ordinal: 2, Address: 0x94c0)
Imported DLLs & Functions
ADVAPI32.dll
- AdjustTokenPrivileges (Address: 0x18002eee8)
- ConvertSidToStringSidW (Address: 0x18002ef08)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18002ef00)
- DuplicateTokenEx (Address: 0x18002eed0)
- GetSecurityDescriptorControl (Address: 0x18002ef18)
- GetSecurityDescriptorDacl (Address: 0x18002ef28)
- GetSecurityDescriptorGroup (Address: 0x18002eec0)
- GetSecurityDescriptorOwner (Address: 0x18002ef10)
- GetSecurityDescriptorSacl (Address: 0x18002eeb8)
- GetTokenInformation (Address: 0x18002eef8)
- LookupPrivilegeValueW (Address: 0x18002eef0)
- OpenProcessToken (Address: 0x18002eee0)
- OpenThreadToken (Address: 0x18002eec8)
- SetNamedSecurityInfoW (Address: 0x18002ef20)
- SetThreadToken (Address: 0x18002eed8)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x18002f0d0)
- IsDebuggerPresent (Address: 0x18002f0c8)
- OutputDebugStringW (Address: 0x18002f0c0)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x18002f0f0)
- SetLastError (Address: 0x18002f0e8)
- SetUnhandledExceptionFilter (Address: 0x18002f0f8)
- UnhandledExceptionFilter (Address: 0x18002f0e0)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x18002f108)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x18002f128)
- HeapAlloc (Address: 0x18002f120)
- HeapDestroy (Address: 0x18002f118)
- HeapFree (Address: 0x18002f130)
api-ms-win-core-libraryloader-l1-1-0.dll
- DisableThreadLibraryCalls (Address: 0x18002f158)
- FindResourceExW (Address: 0x18002f178)
- FreeLibrary (Address: 0x18002f160)
- GetModuleFileNameA (Address: 0x18002f140)
- GetModuleHandleExW (Address: 0x18002f168)
- GetModuleHandleW (Address: 0x18002f170)
- GetProcAddress (Address: 0x18002f150)
- LoadResource (Address: 0x18002f148)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x18002f188)
api-ms-win-core-localization-obsolete-l1-2-0.dll
- GetSystemDefaultUILanguage (Address: 0x18002f1a0)
- GetUserDefaultUILanguage (Address: 0x18002f198)
api-ms-win-core-processenvironment-l1-1-0.dll
- SearchPathW (Address: 0x18002f1b0)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x18002f1d8)
- GetCurrentProcessId (Address: 0x18002f1d0)
- GetCurrentThreadId (Address: 0x18002f1c0)
- TerminateProcess (Address: 0x18002f1c8)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x18002f1e8)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x18002f1f8)
- RegCreateKeyExW (Address: 0x18002f208)
- RegOpenKeyExW (Address: 0x18002f210)
- RegQueryValueExW (Address: 0x18002f218)
- RegSetValueExW (Address: 0x18002f200)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x18002f228)
- RtlCompareMemory (Address: 0x18002f230)
- RtlLookupFunctionEntry (Address: 0x18002f240)
- RtlVirtualUnwind (Address: 0x18002f238)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x18002f288)
- AcquireSRWLockShared (Address: 0x18002f278)
- CreateMutexExW (Address: 0x18002f2c8)
- CreateSemaphoreExW (Address: 0x18002f2b0)
- DeleteCriticalSection (Address: 0x18002f298)
- EnterCriticalSection (Address: 0x18002f268)
- InitializeCriticalSection (Address: 0x18002f250)
- InitializeCriticalSectionEx (Address: 0x18002f290)
- LeaveCriticalSection (Address: 0x18002f2b8)
- OpenSemaphoreW (Address: 0x18002f2a8)
- ReleaseMutex (Address: 0x18002f2c0)
- ReleaseSemaphore (Address: 0x18002f258)
- ReleaseSRWLockExclusive (Address: 0x18002f280)
- ReleaseSRWLockShared (Address: 0x18002f270)
- WaitForSingleObject (Address: 0x18002f2a0)
- WaitForSingleObjectEx (Address: 0x18002f260)
api-ms-win-core-synch-l1-2-0.dll
- Sleep (Address: 0x18002f2d8)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x18002f2f8)
- GetTickCount (Address: 0x18002f2f0)
- GetVersionExW (Address: 0x18002f2e8)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x18002f310)
- CreateThreadpoolTimer (Address: 0x18002f308)
- SetThreadpoolTimer (Address: 0x18002f320)
- WaitForThreadpoolTimerCallbacks (Address: 0x18002f318)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x18002f330)
- EventUnregister (Address: 0x18002f338)
- EventWriteTransfer (Address: 0x18002f340)
bcrypt.dll
- BCryptCloseAlgorithmProvider (Address: 0x18002f358)
- BCryptCreateHash (Address: 0x18002f370)
- BCryptDestroyHash (Address: 0x18002f360)
- BCryptFinishHash (Address: 0x18002f378)
- BCryptHash (Address: 0x18002f380)
- BCryptHashData (Address: 0x18002f368)
- BCryptOpenAlgorithmProvider (Address: 0x18002f350)
CRYPT32.dll
- CertGetNameStringW (Address: 0x18002ef38)
imagehlp.dll
- CheckSumMappedFile (Address: 0x18002f390)
KERNEL32.dll
- CopyFileExW (Address: 0x18002f040)
- CreateDirectoryW (Address: 0x18002f028)
- CreateFileMappingW (Address: 0x18002ef80)
- CreateFileW (Address: 0x18002efd8)
- DeleteFileW (Address: 0x18002ef48)
- DeviceIoControl (Address: 0x18002ef90)
- FindClose (Address: 0x18002efe8)
- FindFirstFileW (Address: 0x18002f008)
- FindNextFileW (Address: 0x18002f000)
- FlushFileBuffers (Address: 0x18002ef70)
- GetCurrentThread (Address: 0x18002f030)
- GetFileAttributesW (Address: 0x18002efd0)
- GetFileInformationByHandle (Address: 0x18002ef58)
- GetFileInformationByHandleEx (Address: 0x18002ef60)
- GetFileSizeEx (Address: 0x18002ef98)
- GetFullPathNameW (Address: 0x18002f038)
- GetLocaleInfoW (Address: 0x18002ef68)
- GetPrivateProfileSectionW (Address: 0x18002eff0)
- GetVolumeInformationW (Address: 0x18002f010)
- GetVolumeNameForVolumeMountPointW (Address: 0x18002efc8)
- GetVolumePathNameW (Address: 0x18002efe0)
- LoadLibraryExW (Address: 0x18002f020)
- LoadLibraryW (Address: 0x18002efb0)
- LocalAlloc (Address: 0x18002efa8)
- LocalFree (Address: 0x18002efa0)
- MapViewOfFile (Address: 0x18002ef78)
- MoveFileExW (Address: 0x18002efb8)
- QueryDosDeviceW (Address: 0x18002f018)
- SetFileAttributesW (Address: 0x18002efc0)
- SetFileInformationByHandle (Address: 0x18002ef50)
- UnmapViewOfFile (Address: 0x18002ef88)
- WriteFile (Address: 0x18002eff8)
msvcrt.dll
- __C_specific_handler (Address: 0x18002f3a0)
- __dllonexit (Address: 0x18002f4b8)
- __iob_func (Address: 0x18002f4f8)
- _amsg_exit (Address: 0x18002f3e0)
- _callnewh (Address: 0x18002f3a8)
- _initterm (Address: 0x18002f4a0)
- _lock (Address: 0x18002f4a8)
- _onexit (Address: 0x18002f4c0)
- _purecall (Address: 0x18002f3d8)
- _snwscanf_s (Address: 0x18002f478)
- _ultow_s (Address: 0x18002f458)
- _unlock (Address: 0x18002f4b0)
- _vsnwprintf (Address: 0x18002f3c0)
- _vsnwprintf_s (Address: 0x18002f400)
- _wcsicmp (Address: 0x18002f410)
- _wcslwr (Address: 0x18002f480)
- _wcsnicmp (Address: 0x18002f418)
- _wcsupr (Address: 0x18002f450)
- _wfopen_s (Address: 0x18002f3f0)
- _XcptFilter (Address: 0x18002f4d0)
- bsearch (Address: 0x18002f498)
- fclose (Address: 0x18002f3f8)
- fflush (Address: 0x18002f3e8)
- free (Address: 0x18002f3c8)
- fwprintf (Address: 0x18002f408)
- malloc (Address: 0x18002f3d0)
- memcmp (Address: 0x18002f4e0)
- memcpy (Address: 0x18002f4e8)
- memcpy_s (Address: 0x18002f4d8)
- memmove (Address: 0x18002f4f0)
- memmove_s (Address: 0x18002f3b8)
- memset (Address: 0x18002f4c8)
- strcpy_s (Address: 0x18002f468)
- strncmp (Address: 0x18002f490)
- swprintf_s (Address: 0x18002f448)
- wcscat_s (Address: 0x18002f430)
- wcschr (Address: 0x18002f440)
- wcscmp (Address: 0x18002f500)
- wcscpy_s (Address: 0x18002f428)
- wcsncmp (Address: 0x18002f420)
- wcsncpy_s (Address: 0x18002f438)
- wcsnlen (Address: 0x18002f488)
- wcsrchr (Address: 0x18002f3b0)
- wcsstr (Address: 0x18002f470)
- wcstoul (Address: 0x18002f460)
ntdll.dll
- LdrAccessResource (Address: 0x18002f578)
- LdrFindResource_U (Address: 0x18002f570)
- LdrGetDllHandle (Address: 0x18002f6e0)
- LdrGetProcedureAddress (Address: 0x18002f6d8)
- NtAdjustPrivilegesToken (Address: 0x18002f708)
- NtClose (Address: 0x18002f790)
- NtCreateEvent (Address: 0x18002f548)
- NtDeviceIoControlFile (Address: 0x18002f538)
- NtEnumerateBootEntries (Address: 0x18002f770)
- NtOpenDirectoryObject (Address: 0x18002f760)
- NtOpenFile (Address: 0x18002f568)
- NtOpenKey (Address: 0x18002f730)
- NtOpenProcess (Address: 0x18002f520)
- NtOpenProcessTokenEx (Address: 0x18002f710)
- NtOpenSymbolicLinkObject (Address: 0x18002f728)
- NtOpenThreadTokenEx (Address: 0x18002f718)
- NtQueryBootEntryOrder (Address: 0x18002f748)
- NtQueryBootOptions (Address: 0x18002f750)
- NtQueryDirectoryObject (Address: 0x18002f768)
- NtQueryInformationFile (Address: 0x18002f550)
- NtQueryInformationProcess (Address: 0x18002f518)
- NtQueryInformationThread (Address: 0x18002f558)
- NtQuerySymbolicLinkObject (Address: 0x18002f738)
- NtQuerySystemEnvironmentValueEx (Address: 0x18002f798)
- NtQuerySystemInformation (Address: 0x18002f788)
- NtQueryValueKey (Address: 0x18002f740)
- NtReadFile (Address: 0x18002f528)
- NtSetInformationFile (Address: 0x18002f588)
- NtSetInformationThread (Address: 0x18002f530)
- NtTranslateFilePath (Address: 0x18002f758)
- NtWaitForSingleObject (Address: 0x18002f560)
- NtWriteFile (Address: 0x18002f648)
- RtlAddAccessAllowedAceEx (Address: 0x18002f628)
- RtlAllocateAndInitializeSid (Address: 0x18002f630)
- RtlAllocateHeap (Address: 0x18002f5a0)
- RtlAppendUnicodeToString (Address: 0x18002f5b8)
- RtlCreateAcl (Address: 0x18002f678)
- RtlCreateSecurityDescriptor (Address: 0x18002f690)
- RtlFreeHeap (Address: 0x18002f598)
- RtlFreeSid (Address: 0x18002f658)
- RtlFreeUnicodeString (Address: 0x18002f580)
- RtlGUIDFromString (Address: 0x18002f5b0)
- RtlImageNtHeader (Address: 0x18002f540)
- RtlImpersonateSelf (Address: 0x18002f720)
- RtlInitAnsiString (Address: 0x18002f6f0)
- RtlInitUnicodeString (Address: 0x18002f778)
- RtlLengthSecurityDescriptor (Address: 0x18002f5f8)
- RtlLengthSid (Address: 0x18002f638)
- RtlNtStatusToDosError (Address: 0x18002f510)
- RtlSetDaclSecurityDescriptor (Address: 0x18002f608)
- RtlSetOwnerSecurityDescriptor (Address: 0x18002f600)
- RtlStringFromGUID (Address: 0x18002f590)
- ZwAllocateUuids (Address: 0x18002f6a8)
- ZwClose (Address: 0x18002f5f0)
- ZwCreateFile (Address: 0x18002f610)
- ZwCreateKey (Address: 0x18002f618)
- ZwDeleteKey (Address: 0x18002f660)
- ZwDeleteValueKey (Address: 0x18002f780)
- ZwDeviceIoControlFile (Address: 0x18002f6b8)
- ZwEnumerateKey (Address: 0x18002f668)
- ZwFlushKey (Address: 0x18002f640)
- ZwLoadKey (Address: 0x18002f620)
- ZwOpenDirectoryObject (Address: 0x18002f6d0)
- ZwOpenFile (Address: 0x18002f5e0)
- ZwOpenKey (Address: 0x18002f6a0)
- ZwOpenMutant (Address: 0x18002f5e8)
- ZwOpenProcess (Address: 0x18002f700)
- ZwOpenSymbolicLinkObject (Address: 0x18002f6c8)
- ZwQueryAttributesFile (Address: 0x18002f5c0)
- ZwQueryDirectoryObject (Address: 0x18002f6c0)
- ZwQueryInformationFile (Address: 0x18002f6f8)
- ZwQueryInformationProcess (Address: 0x18002f6e8)
- ZwQueryKey (Address: 0x18002f5d0)
- ZwQuerySymbolicLinkObject (Address: 0x18002f6b0)
- ZwQuerySystemInformation (Address: 0x18002f5a8)
- ZwQueryValueKey (Address: 0x18002f670)
- ZwReleaseMutant (Address: 0x18002f5d8)
- ZwSaveKey (Address: 0x18002f650)
- ZwSetSecurityObject (Address: 0x18002f680)
- ZwSetValueKey (Address: 0x18002f698)
- ZwUnloadKey (Address: 0x18002f688)
- ZwWaitForSingleObject (Address: 0x18002f5c8)
RPCRT4.dll
- UuidCreate (Address: 0x18002f050)
SHLWAPI.dll
- PathRemoveBackslashW (Address: 0x18002f060)
WCP.dll
- ?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z (Address: 0x18002f088)
- ?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x18002f080)
- ?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z (Address: 0x18002f070)
- RtlFreeLUnicodeString (Address: 0x18002f090)
- RtlReportErrorOrigination (Address: 0x18002f078)
WINTRUST.dll
- WinVerifyTrust (Address: 0x18002f0b0)
- WTHelperGetProvSignerFromChain (Address: 0x18002f0a8)
- WTHelperProvDataFromStateData (Address: 0x18002f0a0)