Windows 10 DLL File Information - bdesvc.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	BDE Service
File Version:	10.0.10130.0 (fbl_impressive.150522-2224)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	299 KB
Total Number of Exported Functions:	2
Total Number of Exported Functions With Names:	2

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	272,896 Bytes	89.1%	Read, Execute	Code
.data	0x00044000	2,048 Bytes	0.7%	Write, Read	Initialized Data
.idata	0x00045000	10,240 Bytes	3.3%	Read	Initialized Data
.didat	0x00048000	512 Bytes	0.2%	Write, Read	Initialized Data
.rsrc	0x00049000	1,536 Bytes	0.5%	Read	Initialized Data
.reloc	0x0004a000	17,920 Bytes	5.9%	Read, Discardable	Initialized Data

Static Linking

bdesvc.dll is statically linked to the following files:

msvcrt.dll
ntdll.dll
api-ms-win-eventing-classicprovider-l1-1-0.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-sysinfo-l1-2-1.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-file-l1-2-1.dll
api-ms-win-core-heap-l2-1-0.dll
RPCRT4.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-timezone-l1-1-0.dll
api-ms-win-eventing-consumer-l1-1-0.dll
api-ms-win-devices-config-l1-1-1.dll
api-ms-win-core-io-l1-1-1.dll
api-ms-win-core-com-l1-1-1.dll
api-ms-win-service-core-l1-1-1.dll
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-core-registry-l1-1-1.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-security-grouppolicy-l1-1-0.dll
api-ms-win-security-lsalookup-l1-1-1.dll
api-ms-win-core-threadpool-legacy-l1-1-0.dll
FVEAPI.dll
wevtapi.dll
bcd.dll
policymanager.dll
dsreg.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-core-winrt-string-l1-1-0.dll
api-ms-win-core-winrt-l1-1-0.dll
api-ms-win-core-delayload-l1-1-1.dll
api-ms-win-security-lsapolicy-l1-1-0.dll

This means that when bdesvc.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, bdesvc.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	5	1,524 Bytes	0.5%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	2	1,096 Bytes	0.4%
Total	7	2,620 Bytes	0.9%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 1000 dialogs)

No dialog resources in this file.

String resources in this dll (up to 1000 strings)

String ID	String Text
100	BitLocker Drive Encryption Service
101	BDESVC hosts the BitLocker Drive Encryption service. BitLocker Drive Encryption provides secure startup for the operating system, as well as full volume encryption for OS, fixed or removable volumes. This service allows BitLocker to prompt users for various actions related to their volumes when mounted, and unlocks volumes automatically without user interaction. Additionally, it stores recovery information to Active Directory, if available, and, if necessary, ensures the most recent recovery certificates are used. Stopping or disabling the service would prevent users from leveraging this functionality.
102	Microsoft Corporation
103	Microsoft Corporation
104	Provides automatic unlocking of data volumes on user sign-in

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

ServiceMain

SvchostPushServiceGlobals

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _CxxThrowException

  _XcptFilter

  __CxxFrameHandler

  __RTDynamicCast

  __dllonexit

  _amsg_exit

  _beginthreadex

  _callnewh

  _except_handler4_common

  _initterm

  _lock

  _onexit

  _purecall

  _unlock

  _vsnwprintf

  _wcsicmp

  free

  iswascii

  malloc

  memcmp

  memcpy

  memmove

  memset

  public: __thiscall exception::exception(char const * const &)

  public: __thiscall exception::exception(char const * const &,int)

  public: __thiscall exception::exception(class exception const &)

  public: __thiscall exception::exception(void)

  public: virtual __thiscall exception::~exception(void)

  public: virtual __thiscall type_info::~type_info(void)

  public: virtual char const * __thiscall exception::what(void)const

  strchr

  void __cdecl operator delete(void *)

  void __cdecl operator delete[](void *)

  wcschr

• ntdll.dll:
  

  CsrIdentifyAlertableThread	NtPowerInformation
  NtQueryWnfStateData	NtSetInformationThread
  RtlCompareMemory	RtlFreeAnsiString
  RtlNtStatusToDosError	RtlPublishWnfStateData
  RtlQueryWnfStateData	RtlSetThreadErrorMode
  RtlStringFromGUID	RtlSubscribeWnfStateChangeNotification
  RtlUnsubscribeWnfNotificationWaitForCompletion	RtlVerifyVersionInfo
  VerSetConditionMask	WinSqmAddToAverageDWORD
  WinSqmAddToStreamEx

• api-ms-win-eventing-classicprovider-l1-1-0.dll:
  

  ntdll!EtwGetTraceEnableFlags	ntdll!EtwGetTraceEnableLevel	ntdll!EtwGetTraceLoggerHandle	ntdll!EtwRegisterTraceGuidsW
  ntdll!EtwTraceMessage	ntdll!EtwUnregisterTraceGuids

• api-ms-win-core-heap-l1-2-0.dll:
  

  KernelBase!GetProcessHeap	ntdll!RtlAllocateHeap	ntdll!RtlFreeHeap	ntdll!RtlReAllocateHeap
  ntdll!RtlSizeHeap

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError	KernelBase!RaiseException	KernelBase!SetUnhandledExceptionFilter
  KernelBase!UnhandledExceptionFilter	ntdll!RtlRestoreLastWin32Error

• api-ms-win-core-sysinfo-l1-2-1.dll:
  

  KernelBase!GetSystemTime	KernelBase!GetSystemTimeAsFileTime	KernelBase!GetSystemWindowsDirectoryW
  KernelBase!GetTickCount	KernelBase!GetTickCount64

• api-ms-win-eventing-provider-l1-1-0.dll:
  

  ntdll!EtwEventRegister	ntdll!EtwEventSetInformation	ntdll!EtwEventUnregister	ntdll!EtwEventWrite
  ntdll!EtwEventWriteTransfer

• api-ms-win-core-file-l1-2-1.dll:
  

  KernelBase!CreateFileW	KernelBase!DeleteFileW
  KernelBase!GetFileAttributesW	KernelBase!GetVolumeInformationW
  KernelBase!GetVolumePathNameW	KernelBase!GetVolumePathNamesForVolumeNameW

• api-ms-win-core-heap-l2-1-0.dll:
  

  KernelBase!LocalAlloc

  KernelBase!LocalFree

• RPCRT4.dll:
  

  NdrServerCall2	RpcBindingVectorFree	RpcEpRegisterW	RpcEpUnregister
  RpcImpersonateClient	RpcRevertToSelf	RpcServerInqBindings	RpcServerListen
  RpcServerRegisterAuthInfoW	RpcServerRegisterIfEx	RpcServerUnregisterIfEx	RpcServerUseProtseqW

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventW	KernelBase!InitOnceExecuteOnce	KernelBase!InitializeCriticalSectionEx
  KernelBase!ResetEvent	KernelBase!SetEvent	KernelBase!Sleep
  KernelBase!WaitForMultipleObjectsEx	KernelBase!WaitForSingleObject	ntdll!RtlAcquireSRWLockExclusive
  ntdll!RtlAcquireSRWLockShared	ntdll!RtlDeleteCriticalSection	ntdll!RtlEnterCriticalSection
  ntdll!RtlInitializeConditionVariable	ntdll!RtlInitializeCriticalSection	ntdll!RtlLeaveCriticalSection
  ntdll!RtlReleaseSRWLockExclusive	ntdll!RtlReleaseSRWLockShared

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

• api-ms-win-core-threadpool-l1-2-0.dll:
  

  KernelBase!CreateThreadpoolCleanupGroup	KernelBase!TrySubmitThreadpoolCallback	ntdll!TpCallbackSetEventOnCompletion
  ntdll!TpReleaseCleanupGroup	ntdll!TpReleaseCleanupGroupMembers

• api-ms-win-core-processthreads-l1-1-2.dll:
  

  KernelBase!OpenProcessToken	KernelBase!OpenThreadToken	KernelBase!SetThreadToken	kernel32!CreateProcessAsUserW
  kernel32!GetCurrentProcess	kernel32!GetCurrentProcessId	kernel32!GetCurrentThread	kernel32!GetCurrentThreadId
  kernel32!GetExitCodeProcess	kernel32!ResumeThread	kernel32!SetThreadPriority	kernel32!TerminateProcess

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegCreateKeyExW	KernelBase!RegDeleteTreeW	KernelBase!RegGetValueW
  KernelBase!RegLoadKeyW	KernelBase!RegOpenCurrentUser	KernelBase!RegOpenKeyExW	KernelBase!RegSetValueExW
  KernelBase!RegUnLoadKeyW

• api-ms-win-core-timezone-l1-1-0.dll:
  

  KernelBase!FileTimeToSystemTime	KernelBase!GetTimeZoneInformation
  KernelBase!SystemTimeToFileTime	KernelBase!SystemTimeToTzSpecificLocalTime

• api-ms-win-eventing-consumer-l1-1-0.dll:
  

  sechost!CloseTrace

  sechost!OpenTraceW

  sechost!ProcessTrace

• api-ms-win-devices-config-l1-1-1.dll:
  

  cfgmgr32!CM_Register_Notification

  cfgmgr32!CM_Unregister_Notification

• api-ms-win-core-io-l1-1-1.dll:
  

  kernel32!DeviceIoControl

• api-ms-win-core-com-l1-1-1.dll:
  

  combase!CoCreateInstance	combase!CoInitializeEx	combase!CoTaskMemAlloc
  combase!CoTaskMemFree	combase!CoUninitialize	combase!CoWaitForMultipleHandles

• api-ms-win-service-core-l1-1-1.dll:
  

  sechost!RegisterServiceCtrlHandlerExW

  sechost!SetServiceStatus

• api-ms-win-core-libraryloader-l1-2-0.dll:
  

  KernelBase!DisableThreadLibraryCalls	KernelBase!FreeLibrary	KernelBase!GetModuleFileNameW
  KernelBase!GetModuleHandleExW	KernelBase!GetModuleHandleW	KernelBase!GetProcAddress
  KernelBase!LoadLibraryExW

• api-ms-win-core-registry-l1-1-1.dll:
  

  KernelBase!RegSetKeyValueW

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!AdjustTokenPrivileges	KernelBase!CheckTokenMembership	KernelBase!CreateRestrictedToken
  KernelBase!CreateWellKnownSid	KernelBase!DuplicateTokenEx	KernelBase!GetSidSubAuthority
  KernelBase!GetSidSubAuthorityCount	KernelBase!GetTokenInformation	KernelBase!ImpersonateLoggedOnUser
  KernelBase!RevertToSelf

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-security-grouppolicy-l1-1-0.dll:
  

  KernelBase!RegisterGPNotificationInternal

  KernelBase!UnregisterGPNotificationInternal

• api-ms-win-security-lsalookup-l1-1-1.dll:
  

  sechost!EnumerateIdentityProviders	sechost!GetDefaultIdentityProvider
  sechost!GetIdentityProviderInfoByGUID	sechost!ReleaseIdentityProviderEnumContext

• api-ms-win-core-threadpool-legacy-l1-1-0.dll:
  

  KernelBase!UnregisterWaitEx

• FVEAPI.dll:
  

  FveAddAuthMethodInformation	FveApplyGroupPolicy	FveApplyNkpCertChanges
  FveAttemptAutoUnlock	FveAuthElementFromPassPhraseW	FveBackupRecoveryInformationToAD
  FveBindDataVolume	FveCheckTpmCapability	FveCloseVolume
  FveCommitChanges	FveConversionEncryptEx	FveConversionEncryptPendingRebootEx
  FveDecrementClearKeyCounter	FveDeleteAuthMethod	FveFindFirstVolume
  FveFindNextVolume	FveGenerateNkpSessionKeys	FveGetAuthMethodInformation
  FveGetAuthMethodSid	FveGetAuthMethodSidInformation	FveGetClearKeyCounter
  FveGetFveMethod	FveGetIdentity	FveGetSecureBootBindingState
  FveGetStatus	FveGetStatusW	FveGetVolumeNameW
  FveInitializeDeviceEncryption2	FveIsAnyDataVolumeBoundToOSVolume	FveIsBoundDataVolumeToOSVolume
  FveIsDeviceLockedOut	FveIsHybridVolumeW	FveIsSchemaExtInstalled
  FveIsVolumeEncryptable	FveKeyManagement	FveOpenVolumeByHandle
  FveOpenVolumeW	FveSetAllowKeyExport	FveSysCloseVolume
  FveSysGetUserFlags	FveSysSetUserFlags	FveUnlockVolumeAuthMethodSid
  FveUpdateBandIdBcd	FveUpdatePinW	FveValidateExistingPassphraseW
  FveValidateExistingPinW

• wevtapi.dll:
  

  EvtClose	EvtCreateRenderContext	EvtNext	EvtQuery
  EvtRender

• bcd.dll:
  

  BcdCloseObject	BcdCloseStore	BcdDeleteElement	BcdEnumerateAndUnpackElements
  BcdEnumerateObjects	BcdGetElementData	BcdOpenObject	BcdOpenSystemStore
  BcdSetElementData

• policymanager.dll:
  

  PolicyManager_GetPolicyInt

• dsreg.dll:
  

  DsrIsDeviceJoined

• api-ms-win-core-string-l1-1-0.dll:
  

  KernelBase!CompareStringOrdinal

• api-ms-win-core-winrt-string-l1-1-0.dll:
  

  combase!WindowsCreateStringReference

• api-ms-win-core-winrt-l1-1-0.dll:
  

  combase!RoGetActivationFactory

• api-ms-win-core-delayload-l1-1-1.dll:
  

  KernelBase!DelayLoadFailureHook

  KernelBase!ResolveDelayLoadedAPI

• api-ms-win-security-lsapolicy-l1-1-0.dll:
  

  sechost!LsaClose	sechost!LsaFreeMemory	sechost!LsaOpenPolicy
  sechost!LsaQueryInformationPolicy