fveskybackup.dll

Description: Windows BitLocker Drive Encryption OneDrive Backup

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 27ec9c1217839f62f000c1b1211c4800

File Size: 99.0 KB

Uploaded At: Dec. 1, 2025, 7:28 a.m.

Views: 7

Exported Functions

FveBackupRecoveryPasswordToCloudDomain (Ordinal: 1, Address: 0x3630)
FveBackupRecoveryPasswordToSkyDrive (Ordinal: 2, Address: 0x1450)
FveDeleteRecoveryPasswordsFromCloudDomain (Ordinal: 3, Address: 0x6260)
FveGetAllRecoveryPasswordsFromCloudDomain (Ordinal: 4, Address: 0x6bc0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateGuid (Address: 0x180015748)
CoDecrementMTAUsage (Address: 0x180015758)
CoGetApartmentType (Address: 0x180015740)
CoIncrementMTAUsage (Address: 0x180015750)
CoTaskMemAlloc (Address: 0x180015760)
CoWaitForMultipleObjects (Address: 0x180015730)
StringFromGUID2 (Address: 0x180015738)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180015770)
RaiseException (Address: 0x180015788)
SetUnhandledExceptionFilter (Address: 0x180015780)
UnhandledExceptionFilter (Address: 0x180015778)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180015798)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800157a8)
HeapAlloc (Address: 0x1800157c0)
HeapFree (Address: 0x1800157b0)
HeapSize (Address: 0x1800157b8)

api-ms-win-core-heap-l2-1-0.dll

GlobalFree (Address: 0x1800157d0)
LocalAlloc (Address: 0x1800157d8)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x1800157e8)

api-ms-win-core-localization-l1-2-0.dll

GetLocaleInfoEx (Address: 0x180015800)
GetUserPreferredUILanguages (Address: 0x1800157f8)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180015828)
GetCurrentProcessId (Address: 0x180015820)
GetCurrentThreadId (Address: 0x180015810)
TerminateProcess (Address: 0x180015818)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180015838)

api-ms-win-core-registry-l1-1-0.dll

RegGetValueW (Address: 0x180015848)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x180015860)
WideCharToMultiByte (Address: 0x180015858)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800158b8)
AcquireSRWLockShared (Address: 0x1800158a0)
CreateEventExW (Address: 0x180015878)
CreateMutexW (Address: 0x1800158b0)
InitializeSRWLock (Address: 0x180015880)
ReleaseMutex (Address: 0x180015870)
ReleaseSRWLockExclusive (Address: 0x1800158a8)
ReleaseSRWLockShared (Address: 0x180015898)
SetEvent (Address: 0x180015890)
WaitForSingleObject (Address: 0x180015888)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1800158c8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x1800158f0)
GetSystemTimeAsFileTime (Address: 0x1800158e0)
GetTickCount (Address: 0x1800158d8)
GetVersionExW (Address: 0x1800158e8)

api-ms-win-core-url-l1-1-0.dll

GetAcceptLanguagesW (Address: 0x180015900)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x180015918)
RoTransformError (Address: 0x180015910)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x180015930)
RoGetActivationFactory (Address: 0x180015940)
RoInitialize (Address: 0x180015938)
RoUninitialize (Address: 0x180015928)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCompareStringOrdinal (Address: 0x180015968)
WindowsConcatString (Address: 0x180015978)
WindowsCreateString (Address: 0x180015980)
WindowsCreateStringReference (Address: 0x180015988)
WindowsDeleteString (Address: 0x180015970)
WindowsGetStringLen (Address: 0x180015958)
WindowsGetStringRawBuffer (Address: 0x180015950)
WindowsStringHasEmbeddedNull (Address: 0x180015960)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x180015998)
GetTraceEnableLevel (Address: 0x1800159b8)
GetTraceLoggerHandle (Address: 0x1800159a8)
RegisterTraceGuidsW (Address: 0x1800159b0)
TraceMessage (Address: 0x1800159a0)
UnregisterTraceGuids (Address: 0x1800159c0)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x1800159d0)
EventRegister (Address: 0x1800159e0)
EventSetInformation (Address: 0x1800159f0)
EventUnregister (Address: 0x1800159d8)
EventWriteTransfer (Address: 0x1800159e8)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAce (Address: 0x180015a18)
AllocateAndInitializeSid (Address: 0x180015a00)
GetLengthSid (Address: 0x180015a08)
InitializeAcl (Address: 0x180015a10)
InitializeSecurityDescriptor (Address: 0x180015a28)
SetSecurityDescriptorDacl (Address: 0x180015a20)

dsreg.dll

DsrFreeJoinInfoEx (Address: 0x180015a38)
DsrGetJoinInfoEx (Address: 0x180015a40)

FVEAPI.dll

FveAuthElementToRecoveryPasswordW (Address: 0x180015668)
FveCloseVolume (Address: 0x180015670)
FveCommitChanges (Address: 0x180015678)
FveOpenVolumeByHandle (Address: 0x180015690)
FveSaveRecoveryPasswordBackupFlag (Address: 0x180015680)
FveSetRecoveryPasswordBackupInformation (Address: 0x180015688)

msvcrt.dll

__C_specific_handler (Address: 0x180015a88)
__CxxFrameHandler3 (Address: 0x180015ab0)
_amsg_exit (Address: 0x180015a70)
_callnewh (Address: 0x180015aa8)
_initterm (Address: 0x180015a80)
_purecall (Address: 0x180015a58)
_vsnwprintf (Address: 0x180015ac8)
_XcptFilter (Address: 0x180015a68)
free (Address: 0x180015ab8)
malloc (Address: 0x180015a78)
memmove (Address: 0x180015aa0)
memmove_s (Address: 0x180015a50)
memset (Address: 0x180015a98)
realloc (Address: 0x180015a60)
toupper (Address: 0x180015a90)
wcscmp (Address: 0x180015ad0)
wcstok_s (Address: 0x180015ac0)

ntdll.dll

RtlCaptureContext (Address: 0x180015af0)
RtlLookupFunctionEntry (Address: 0x180015ae8)
RtlVirtualUnwind (Address: 0x180015ae0)

RPCRT4.dll

UuidFromStringW (Address: 0x1800156a0)

WINHTTP.dll

WinHttpAddRequestHeaders (Address: 0x1800156d0)
WinHttpCloseHandle (Address: 0x180015720)
WinHttpConnect (Address: 0x1800156b8)
WinHttpCrackUrl (Address: 0x180015710)
WinHttpGetDefaultProxyConfiguration (Address: 0x180015700)
WinHttpGetIEProxyConfigForCurrentUser (Address: 0x180015708)
WinHttpGetProxyForUrl (Address: 0x180015718)
WinHttpOpen (Address: 0x1800156b0)
WinHttpOpenRequest (Address: 0x1800156c0)
WinHttpQueryDataAvailable (Address: 0x1800156f0)
WinHttpQueryHeaders (Address: 0x1800156e8)
WinHttpReadData (Address: 0x1800156f8)
WinHttpReceiveResponse (Address: 0x1800156e0)
WinHttpSendRequest (Address: 0x1800156d8)
WinHttpSetOption (Address: 0x1800156c8)