fveapibase.dll

Description: Windows BitLocker Drive Encryption Base API

Version: 10.0.19041.6456

Architecture: 64-bit

Operating System: Windows NT

SHA256: e661747051f5022a86e23d2976f9b40e

File Size: 421.5 KB

Uploaded At: Dec. 1, 2025, 7:28 a.m.

Views: 9

Exported Functions

InternalFveIsVolumeEncrypted (Ordinal: 1, Address: 0x35c0)
FveAuthElementFromPassPhraseW (Ordinal: 2, Address: 0x2260)
FveAuthElementFromPinW (Ordinal: 3, Address: 0x2190)
FveAuthElementFromRecoveryPasswordW (Ordinal: 4, Address: 0x2310)
FveAuthElementGetKeyFileNameW (Ordinal: 5, Address: 0x2550)
FveAuthElementReadExternalKeyW (Ordinal: 6, Address: 0x23c0)
FveAuthElementToRecoveryPasswordW (Ordinal: 7, Address: 0x20c0)
FveAuthElementWriteExternalKeyW (Ordinal: 8, Address: 0x24a0)
FveCanPinExceptionPolicyBeApplied (Ordinal: 9, Address: 0x3fe0)
FveClearUserFlags (Ordinal: 10, Address: 0x1b50)
FveCloseHandle (Ordinal: 11, Address: 0x3770)
FveCloseVolume (Ordinal: 12, Address: 0x36c0)
FveCommitChanges (Ordinal: 13, Address: 0x1710)
FveCommitChangesEx (Ordinal: 14, Address: 0x3ff0)
FveConversionDecrypt (Ordinal: 15, Address: 0x2830)
FveConversionDecryptEx (Ordinal: 16, Address: 0x2840)
FveConversionPause (Ordinal: 17, Address: 0x2a30)
FveConversionResume (Ordinal: 18, Address: 0x2b10)
FveConversionStop (Ordinal: 19, Address: 0x2930)
FveConversionStopEx (Ordinal: 20, Address: 0x2940)
FveDiscardChanges (Ordinal: 21, Address: 0x1720)
FveEnableRawAccess (Ordinal: 22, Address: 0x3400)
FveEraseDrive (Ordinal: 23, Address: 0x17e0)
FveFindFirstVolume (Ordinal: 24, Address: 0x38e0)
FveFindNextVolume (Ordinal: 25, Address: 0x3a00)
FveGetAllowKeyExport (Ordinal: 26, Address: 0x31b0)
FveGetAuthMethodGuids (Ordinal: 27, Address: 0x1d30)
FveGetAuthMethodInformation (Ordinal: 28, Address: 0x1c30)
FveGetDataSet (Ordinal: 29, Address: 0x34d0)
FveGetFipsAllowDisabled (Ordinal: 30, Address: 0x3110)
FveGetFveMethod (Ordinal: 31, Address: 0x2ca0)
FveGetFveMethodEDrv (Ordinal: 32, Address: 0x2d70)
FveGetFveMethodEx (Ordinal: 33, Address: 0x2e50)
FveGetIdentity (Ordinal: 34, Address: 0x1e30)
FveGetKeyPackage (Ordinal: 35, Address: 0x32f0)
FveGetStatus (Ordinal: 36, Address: 0x1a60)
FveGetStatusW (Ordinal: 37, Address: 0x1960)
FveGetUserFlags (Ordinal: 38, Address: 0x1b50)
FveGetVolumeNameW (Ordinal: 39, Address: 0x3af0)
FveIsHardwareReadyForConversion (Ordinal: 40, Address: 0x3270)
FveIsRecoveryPasswordGroupValidW (Ordinal: 41, Address: 0x2620)
FveIsRecoveryPasswordValidW (Ordinal: 42, Address: 0x26d0)
FveIsVolumeEncryptable (Ordinal: 43, Address: 0x2bf0)
FveLockVolume (Ordinal: 44, Address: 0x1b60)
FveNotifyVolumeAfterFormat (Ordinal: 45, Address: 0x3830)
FveOpenVolumeByHandle (Ordinal: 46, Address: 0x3db0)
FveOpenVolumeExW (Ordinal: 47, Address: 0x4300)
FveOpenVolumeW (Ordinal: 48, Address: 0x42d0)
FveQuery (Ordinal: 49, Address: 0x4410)
FveRevertVolume (Ordinal: 50, Address: 0x2780)
FveSelectBestRecoveryPasswordByBackupInformation (Ordinal: 51, Address: 0x2000)
FveSetAllowKeyExport (Ordinal: 52, Address: 0x3030)
FveSetFipsAllowDisabled (Ordinal: 53, Address: 0x3020)
FveSetFveMethod (Ordinal: 54, Address: 0x2f60)
FveSetRecoveryPasswordBackupInformation (Ordinal: 55, Address: 0x1f00)
FveSetUserFlags (Ordinal: 56, Address: 0x1b50)
FveUpgradeVolume (Ordinal: 57, Address: 0x18b0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CLSIDFromString (Address: 0x1800548f8)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180054908)
IsDebuggerPresent (Address: 0x180054918)
OutputDebugStringW (Address: 0x180054910)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180054928)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180054938)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180054948)
SetLastError (Address: 0x180054950)
SetUnhandledExceptionFilter (Address: 0x180054960)
UnhandledExceptionFilter (Address: 0x180054958)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x180054970)
DeleteFileW (Address: 0x1800549f0)
FindClose (Address: 0x1800549d8)
FindFirstFileW (Address: 0x1800549a8)
FindFirstVolumeW (Address: 0x1800549a0)
FindNextVolumeW (Address: 0x1800549c8)
FindVolumeClose (Address: 0x1800549b0)
FlushFileBuffers (Address: 0x1800549e0)
GetDiskFreeSpaceW (Address: 0x180054988)
GetDriveTypeW (Address: 0x180054980)
GetFileAttributesW (Address: 0x1800549b8)
GetFileSizeEx (Address: 0x180054978)
GetLogicalDrives (Address: 0x180054990)
GetVolumeInformationW (Address: 0x1800549d0)
ReadFile (Address: 0x1800549c0)
SetFileAttributesW (Address: 0x1800549e8)
SetFilePointerEx (Address: 0x180054998)
WriteFile (Address: 0x1800549f8)

api-ms-win-core-file-l1-2-0.dll

GetVolumeNameForVolumeMountPointW (Address: 0x180054a08)
GetVolumePathNamesForVolumeNameW (Address: 0x180054a10)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180054a20)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180054a40)
HeapAlloc (Address: 0x180054a38)
HeapFree (Address: 0x180054a30)
HeapSize (Address: 0x180054a48)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180054a58)
LocalFree (Address: 0x180054a60)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x180054a70)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x180054aa0)
GetModuleFileNameA (Address: 0x180054a88)
GetModuleFileNameW (Address: 0x180054a80)
GetModuleHandleExW (Address: 0x180054aa8)
GetModuleHandleW (Address: 0x180054a98)
GetProcAddress (Address: 0x180054a90)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180054ab8)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x180054ad0)
VirtualFree (Address: 0x180054ac8)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180054b28)
GetCurrentProcessId (Address: 0x180054ae8)
GetCurrentThread (Address: 0x180054af0)
GetCurrentThreadId (Address: 0x180054b38)
OpenProcessToken (Address: 0x180054b20)
OpenThreadToken (Address: 0x180054af8)
SetThreadToken (Address: 0x180054ae0)
TerminateProcess (Address: 0x180054b30)
TlsAlloc (Address: 0x180054b18)
TlsFree (Address: 0x180054b10)
TlsGetValue (Address: 0x180054b08)
TlsSetValue (Address: 0x180054b00)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x180054b48)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180054b58)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180054b78)
RegCreateKeyExW (Address: 0x180054bc0)
RegDeleteValueW (Address: 0x180054ba0)
RegEnumKeyExW (Address: 0x180054b88)
RegEnumValueW (Address: 0x180054bb8)
RegGetValueA (Address: 0x180054bb0)
RegGetValueW (Address: 0x180054b80)
RegLoadKeyW (Address: 0x180054b68)
RegOpenKeyExW (Address: 0x180054bc8)
RegQueryInfoKeyW (Address: 0x180054b90)
RegQueryValueExW (Address: 0x180054b98)
RegSetValueExW (Address: 0x180054ba8)
RegUnLoadKeyW (Address: 0x180054b70)

api-ms-win-core-registry-l1-1-1.dll

RegSetKeyValueW (Address: 0x180054bd8)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x180054be8)
MultiByteToWideChar (Address: 0x180054bf0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180054c00)
AcquireSRWLockShared (Address: 0x180054c60)
CreateEventW (Address: 0x180054c80)
CreateMutexExW (Address: 0x180054c20)
CreateSemaphoreExW (Address: 0x180054c40)
DeleteCriticalSection (Address: 0x180054c30)
EnterCriticalSection (Address: 0x180054c08)
InitializeCriticalSection (Address: 0x180054c48)
InitializeCriticalSectionEx (Address: 0x180054c18)
LeaveCriticalSection (Address: 0x180054c38)
OpenSemaphoreW (Address: 0x180054c10)
ReleaseMutex (Address: 0x180054c28)
ReleaseSemaphore (Address: 0x180054c70)
ReleaseSRWLockExclusive (Address: 0x180054c58)
ReleaseSRWLockShared (Address: 0x180054c68)
SetEvent (Address: 0x180054c78)
WaitForSingleObject (Address: 0x180054c88)
WaitForSingleObjectEx (Address: 0x180054c50)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x180054c98)
Sleep (Address: 0x180054ca0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTime (Address: 0x180054cc0)
GetSystemTimeAsFileTime (Address: 0x180054cc8)
GetSystemWindowsDirectoryW (Address: 0x180054cd0)
GetTickCount (Address: 0x180054cb0)
GetTickCount64 (Address: 0x180054cb8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180054ce8)
CreateThreadpoolTimer (Address: 0x180054ce0)
SetThreadpoolTimer (Address: 0x180054cf0)
WaitForThreadpoolTimerCallbacks (Address: 0x180054cf8)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x180054d08)

api-ms-win-eventing-classicprovider-l1-1-0.dll

TraceMessage (Address: 0x180054d18)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x180054d30)
EnableTraceEx2 (Address: 0x180054d38)
StartTraceW (Address: 0x180054d28)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x180054d48)
EventRegister (Address: 0x180054d60)
EventSetInformation (Address: 0x180054d58)
EventUnregister (Address: 0x180054d50)
EventWriteTransfer (Address: 0x180054d68)

api-ms-win-security-base-l1-1-0.dll

AdjustTokenPrivileges (Address: 0x180054d80)
DuplicateTokenEx (Address: 0x180054d88)
RevertToSelf (Address: 0x180054d78)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x180054d98)

bcd.dll

BcdCloseObject (Address: 0x180054dc0)
BcdCloseStore (Address: 0x180054dc8)
BcdGetElementData (Address: 0x180054db8)
BcdOpenObject (Address: 0x180054db0)
BcdOpenSystemStore (Address: 0x180054da8)
BcdQueryObject (Address: 0x180054dd0)
SyspartGetSystemPartition (Address: 0x180054dd8)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x180054df8)
BCryptCreateHash (Address: 0x180054e08)
BCryptDecrypt (Address: 0x180054df0)
BCryptDestroyHash (Address: 0x180054e38)
BCryptDestroyKey (Address: 0x180054e10)
BCryptEncrypt (Address: 0x180054de8)
BCryptFinishHash (Address: 0x180054e30)
BCryptGenerateSymmetricKey (Address: 0x180054e28)
BCryptGenRandom (Address: 0x180054e00)
BCryptGetFipsAlgorithmMode (Address: 0x180054e50)
BCryptGetProperty (Address: 0x180054e18)
BCryptHashData (Address: 0x180054e40)
BCryptOpenAlgorithmProvider (Address: 0x180054e48)
BCryptSetProperty (Address: 0x180054e20)

CRYPT32.dll

CertGetEnhancedKeyUsage (Address: 0x1800548c0)
CertVerifyCertificateChainPolicy (Address: 0x1800548b8)
CryptDecodeObjectEx (Address: 0x1800548c8)

FVEAPI.dll

FveGetSecureBootBindingState (Address: 0x1800548d8)

msvcrt.dll

__C_specific_handler (Address: 0x180054e78)
__CxxFrameHandler3 (Address: 0x180054e68)
__dllonexit (Address: 0x180054ee8)
_amsg_exit (Address: 0x180054f18)
_callnewh (Address: 0x180054f30)
_initterm (Address: 0x180054f00)
_lock (Address: 0x180054ef8)
_onexit (Address: 0x180054ee0)
_purecall (Address: 0x180054f40)
_stricmp (Address: 0x180054eb8)
_strnicmp (Address: 0x180054ec0)
_unlock (Address: 0x180054ef0)
_vsnwprintf (Address: 0x180054e88)
_wcsicmp (Address: 0x180054f20)
_XcptFilter (Address: 0x180054f28)
??1type_info@@UEAA@XZ (Address: 0x180054e60)
free (Address: 0x180054f10)
iswdigit (Address: 0x180054f08)
malloc (Address: 0x180054f38)
memcmp (Address: 0x180054e90)
memcpy (Address: 0x180054e98)
memcpy_s (Address: 0x180054ea8)
memmove (Address: 0x180054ea0)
memmove_s (Address: 0x180054eb0)
memset (Address: 0x180054ed0)
strcmp (Address: 0x180054ed8)
toupper (Address: 0x180054e70)
wcschr (Address: 0x180054e80)
wcscmp (Address: 0x180054f48)
wcstoul (Address: 0x180054ec8)

ncrypt.dll

NCryptCloseProtectionDescriptor (Address: 0x180054f60)
NCryptCreateProtectionDescriptor (Address: 0x180054f70)
NCryptGetProtectionDescriptorInfo (Address: 0x180054f78)
NCryptProtectSecret (Address: 0x180054f68)
NCryptUnprotectSecret (Address: 0x180054f58)

ntdll.dll

EtwEventRegister (Address: 0x180054ff8)
EtwEventUnregister (Address: 0x180054ff0)
EtwEventWrite (Address: 0x180054fe8)
NtClose (Address: 0x180054fd0)
NtOpenKey (Address: 0x180054fe0)
NtPowerInformation (Address: 0x180054f88)
NtQuerySystemEnvironmentValueEx (Address: 0x180054f98)
NtQuerySystemInformation (Address: 0x180055018)
NtQueryValueKey (Address: 0x180054fd8)
NtQueryVolumeInformationFile (Address: 0x180055010)
NtQueryWnfStateData (Address: 0x180055008)
RtlCaptureContext (Address: 0x180055030)
RtlCheckPortableOperatingSystem (Address: 0x180054f90)
RtlCompareMemory (Address: 0x180054fa8)
RtlFreeUnicodeString (Address: 0x180054fc0)
RtlInitUnicodeString (Address: 0x180054fa0)
RtlLookupFunctionEntry (Address: 0x180055038)
RtlNtStatusToDosError (Address: 0x180055028)
RtlPublishWnfStateData (Address: 0x180055000)
RtlSetThreadErrorMode (Address: 0x180055020)
RtlStringFromGUID (Address: 0x180054fc8)
RtlSubscribeWnfStateChangeNotification (Address: 0x180054fb8)
RtlUnsubscribeWnfStateChangeNotification (Address: 0x180054fb0)
RtlVirtualUnwind (Address: 0x180055040)

RPCRT4.dll

UuidCreate (Address: 0x1800548e8)

tbs.dll

Tbsi_Context_Create (Address: 0x180055058)
Tbsi_Get_TCG_Log (Address: 0x180055070)
Tbsi_GetDeviceInfo (Address: 0x180055060)
Tbsip_Context_Close (Address: 0x180055050)
Tbsip_Submit_Command_NonBlocking (Address: 0x180055068)