bdeui.dll

  • File Path: C:\Windows\system32\bdeui.dll
  • Description: Windows BitLocker Drive Encryption User Interface

Hashes

Type Hash
MD5 29EA122E0C4AD2A5A2D004DEB0C82697
SHA1 BA4CD3ED3BDC55BD30F08D9464AACB8E04DA6F79
SHA256 4F41351146C6E14B439ABE5C0A7C53082CD7C72ADD996EC5AB92DF45A32F78F2
SHA384 3F35D28A0FBA063A7F540BD2C39E803D07898ACCC567E06D42592248FF390F61EA16BF42008CBABCB6072AFF6E73D7C3
SHA512 7D016C1C7D7FE833DA6827DCA2A207200D5977D34FD26FC27EDEE6336333FB023F558F02A8856713617F08A66223A1F0A6D821ECA22E22D24E9CD460E752A77C
SSDEEP 768:ZIpPCcX45a/bjk3KmInKWnflpPw/CSmGCjuScB8r:epPCcTbjkalln9p4/jXCCScB8r
IMP 9311C1BFFD099E5E16E604E7B1771CF3
PESHA1 E1EAA0F144AD6EB2A7436C33251981997E4F1E13
PE256 BD4164D223110936F43FA8355257CA59A1F984699A432FBA82E903FA2CED2223

DLL Exports:

Function Name Ordinal Type
VolumeFveStatus::NeedsRestart 85 Exported Function
VolumeFveStatus::IsWiping 79 Exported Function
VolumeFveStatus::operator 7 Exported Function
BuiVolume::operator 6 Exported Function
VolumeFveStatus::IsRoamingDevice 76 Exported Function
VolumeFveStatus::IsPreProvisioned 75 Exported Function
VolumeFveStatus::IsUnknownFveVersion 78 Exported Function
VolumeFveStatus::IsSecure 77 Exported Function
BuiVolume::Decrypt 23 Exported Function
BuiVolume::AttemptAutoUnlock 11 Exported Function
BuiVolume::DisableAutoUnlock 26 Exported Function
BuiVolume::Disable 25 Exported Function
BuiVolume::GetConvertedPercent 34 Exported Function
VolumeFveStatus::operator 8 Exported Function
BuiVolume::AddSmartCard 9 Exported Function
BuiVolume::GetWipedPercent 43 Exported Function
VolumeFveStatus::IsDecrypting 63 Exported Function
VolumeFveStatus::IsDecrypted 62 Exported Function
VolumeFveStatus::IsEDriveVolume 65 Exported Function
VolumeFveStatus::IsDisabled 64 Exported Function
VolumeFveStatus::IsConverting 58 Exported Function
VolumeFveStatus::HasTpmProtector 53 Exported Function
VolumeFveStatus::IsDEAutoProvisioned 61 Exported Function
VolumeFveStatus::IsCsvMetadataVolume 59 Exported Function
VolumeFveStatus::IsOsVolume 72 Exported Function
VolumeFveStatus::IsOsCriticalVolume 71 Exported Function
VolumeFveStatus::IsPaused 74 Exported Function
VolumeFveStatus::IsPartiallyConverted 73 Exported Function
VolumeFveStatus::IsEncrypting 67 Exported Function
VolumeFveStatus::IsEncrypted 66 Exported Function
VolumeFveStatus::IsOn 70 Exported Function
VolumeFveStatus::IsLocked 69 Exported Function
BuiVolume::EnableAutoUnlock 29 Exported Function
BuiVolume::GetAllVolumes 33 Exported Function
VolumeFveStatus::GetLastConvertStatus 37 Exported Function
BuiVolume::NO_DRIVE_LETTER 83 Exported Function
BuiVolume::GetOsVolume 38 Exported Function
BuiVolume::UnlockWithPassword 124 Exported Function
BuiVolume::UnlockWithPassphrase 123 Exported Function
BuiVolume::UpgradeVolume 126 Exported Function
BuiVolume::UnlockWithSmartCard 125 Exported Function
BuiVolume::ResumeStatusRefreshing 117 Exported Function
BuiVolume::ClearProxyObject 22 Exported Function
BuiVolume::SuspendStatusRefreshing 120 Exported Function
BuiVolume::SetProxyObject 119 Exported Function
VolumeFveStatus::GetExtendedFlags 36 Exported Function
BuiVolume::DeleteVolumeList 24 Exported Function
VolumeFveStatus::GetStatusFlags 41 Exported Function
BuiVolume::GetWipeCount 42 Exported Function
BuiVolume::IsCurrentPINEnhanced 60 Exported Function
BuiVolume::Init 55 Exported Function
BuiVolume::LaunchWizard 81 Exported Function
BuiVolume::LaunchUpdate 80 Exported Function
BuiVolume::GetPasswordBackupTypes 39 Exported Function
BuiVolume::GetDescription 35 Exported Function
BuiVolume::ImplicitPauseConversion 54 Exported Function
BuiVolume::GetPasswordId 40 Exported Function
BuiVolume::ResumeConversion 116 Exported Function
BuiVolume::RemoveSmartCard 115 Exported Function
BuiVolume::UnlockWithKey 122 Exported Function
BuiVolume::ServiceDiscoveryVolume 118 Exported Function
BuiVolume::PauseConversion 86 Exported Function
BuiVolume::NeedsDiscoveryVolumeUpdate 84 Exported Function
BuiVolume::RemovePassphrase 114 Exported Function
BuiVolume::RefreshStatus 113 Exported Function
VolumeFveStatus::HasStartupKeyProtector 52 Exported Function
BuiVolume::ProxyAttemptAutoUnlock 89 Exported Function
BuiVolume::ProxyAreVolumesBound 88 Exported Function
BuiVolume::ProxyDisable 91 Exported Function
BuiVolume::ProxyDecrypt 90 Exported Function
BuiVolume::FindMountPoint 31 Exported Function
BuiVolume::Dispatch 28 Exported Function
BuiVolume::ProxyAddSmartCard 87 Exported Function
BuiVolume::FormatNameAndMountPoint 32 Exported Function
BuiVolume::ProxyGetProcessId 97 Exported Function
BuiVolume::ProxyGetPasswordId 96 Exported Function
BuiVolume::ProxyIsAutoUnlockEnabled 99 Exported Function
BuiVolume::ProxyImplicitPauseConversion 98 Exported Function
BuiVolume::ProxyEnableAutoUnlock 93 Exported Function
BuiVolume::ProxyDisableAutoUnlock 92 Exported Function
BuiVolume::ProxyGetPasswordBackupTypes 95 Exported Function
BuiVolume::ProxyGetDescription 94 Exported Function
BuiVolume::CanRefreshStatus 21 Exported Function
BuisIsHardwareReadyForConversion 131 Exported Function
BuiVolume::BasicDispatch 12 Exported Function
BuiVolume::AllowForegroundWindowDisplay 10 Exported Function
BuisCreateProxyObject 128 Exported Function
BuisCreateElevatedProxyObject 127 Exported Function
BuisIsFipsEnabled 130 Exported Function
BuisDetectExistingWizard 129 Exported Function
BuiVolume::BasicDispatch 14 Exported Function
BuiVolume::BasicDispatch 13 Exported Function
BuiVolume::Dispatch 27 Exported Function
BuiVolume::BasicDispatch 15 Exported Function
BuiVolume::BasicDispatch 17 Exported Function
BuiVolume::BasicDispatch 16 Exported Function
BuiVolume::BasicDispatch 18 Exported Function
BuiVolume::BasicDispatch 19 Exported Function
BuiVolume::ProxyLaunchUpdate 100 Exported Function
BuiVolume::IsFveNotifyNecessary 68 Exported Function
BuiVolume::IsAutoUnlockEnabled 57 Exported Function
BuiVolume::UnlockRequiresElevation 121 Exported Function
BuiVolume::ManagementRequiresElevation 82 Exported Function
VolumeFveStatus::VolumeFveStatus 4 Exported Function
public: __cdecl BuiVolume::~BuiVolume(void) __ptr64 5 Exported Function
BuiVolume::HasAutoUnlockVolumesBound 44 Exported Function
BuiVolume::CanBeResumed 20 Exported Function
VolumeFveStatus::HasRecoveryData 49 Exported Function
VolumeFveStatus::HasPinProtector 48 Exported Function
VolumeFveStatus::HasSmartCardProtector 51 Exported Function
VolumeFveStatus::HasRecoveryPassword 50 Exported Function
VolumeFveStatus::HasExternalKey 45 Exported Function
VolumeFveStatus::FailedDryRun 30 Exported Function
VolumeFveStatus::HasPBKDF2RecoveryPassword 46 Exported Function
VolumeFveStatus::HasPassphraseProtector 47 Exported Function
BuiVolume::ProxyResumeConversion 106 Exported Function
BuiVolume::ProxyRemoveSmartCard 105 Exported Function
BuiVolume::ProxyUnlockVolumeWithKey 108 Exported Function
BuiVolume::ProxyServiceDiscoveryVolume 107 Exported Function
BuiVolume::ProxyNeedsDiscoveryVolumeUpdate 102 Exported Function
BuiVolume::ProxyLaunchWizard 101 Exported Function
BuiVolume::ProxyRemovePassphrase 104 Exported Function
BuiVolume::ProxyPauseConversion 103 Exported Function
VolumeFveStatus::VolumeFveStatus 3 Exported Function
BuiVolume::InitMembers 56 Exported Function
BuiVolume::BuiVolume 1 Exported Function
BuiVolume::BuiVolume 2 Exported Function
BuiVolume::ProxyUnlockVolumeWithPassword 110 Exported Function
BuiVolume::ProxyUnlockVolumeWithPassphrase 109 Exported Function
BuiVolume::ProxyUpgradeVolume 112 Exported Function
BuiVolume::ProxyUnlockVolumeWithSmartCard 111 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: BdeUi.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/66
  • VirusTotal Link: https://www.virustotal.com/gui/file/4f41351146c6e14b439abe5c0a7c53082cd7c72add996ec5ab92df45a32f78f2/detection/

MIT License. Copyright (c) 2020-2021 Strontic.