fveapibase.dll

Description: Windows BitLocker Drive Encryption Base API

Version: 10.0.19041.6456

Architecture: 32-bit

Operating System: Windows NT

SHA256: 10326ab854df5bc8e797a84e674f474e

File Size: 353.0 KB

Uploaded At: Dec. 1, 2025, 7:56 a.m.

Views: 6

Exported Functions

InternalFveIsVolumeEncrypted (Ordinal: 1, Address: 0xf810)
FveAuthElementFromPassPhraseW (Ordinal: 2, Address: 0xe4b0)
FveAuthElementFromPinW (Ordinal: 3, Address: 0xe3e0)
FveAuthElementFromRecoveryPasswordW (Ordinal: 4, Address: 0xe570)
FveAuthElementGetKeyFileNameW (Ordinal: 5, Address: 0xe7c0)
FveAuthElementReadExternalKeyW (Ordinal: 6, Address: 0xe630)
FveAuthElementToRecoveryPasswordW (Ordinal: 7, Address: 0xe320)
FveAuthElementWriteExternalKeyW (Ordinal: 8, Address: 0xe700)
FveCanPinExceptionPolicyBeApplied (Ordinal: 9, Address: 0x100f0)
FveClearUserFlags (Ordinal: 10, Address: 0xde30)
FveCloseHandle (Ordinal: 11, Address: 0xf9a0)
FveCloseVolume (Ordinal: 12, Address: 0xf900)
FveCommitChanges (Ordinal: 13, Address: 0xd9e0)
FveCommitChangesEx (Ordinal: 14, Address: 0x10110)
FveConversionDecrypt (Ordinal: 15, Address: 0xeac0)
FveConversionDecryptEx (Ordinal: 16, Address: 0xeae0)
FveConversionPause (Ordinal: 17, Address: 0xecc0)
FveConversionResume (Ordinal: 18, Address: 0xeda0)
FveConversionStop (Ordinal: 19, Address: 0xebc0)
FveConversionStopEx (Ordinal: 20, Address: 0xebe0)
FveDiscardChanges (Ordinal: 21, Address: 0xda00)
FveEnableRawAccess (Ordinal: 22, Address: 0xf660)
FveEraseDrive (Ordinal: 23, Address: 0xdac0)
FveFindFirstVolume (Ordinal: 24, Address: 0xfb30)
FveFindNextVolume (Ordinal: 25, Address: 0xfc30)
FveGetAllowKeyExport (Ordinal: 26, Address: 0xf430)
FveGetAuthMethodGuids (Ordinal: 27, Address: 0xdfe0)
FveGetAuthMethodInformation (Ordinal: 28, Address: 0xdf00)
FveGetDataSet (Ordinal: 29, Address: 0xf740)
FveGetFipsAllowDisabled (Ordinal: 30, Address: 0xf380)
FveGetFveMethod (Ordinal: 31, Address: 0xef40)
FveGetFveMethodEDrv (Ordinal: 32, Address: 0xf010)
FveGetFveMethodEx (Ordinal: 33, Address: 0xf0e0)
FveGetIdentity (Ordinal: 34, Address: 0xe0c0)
FveGetKeyPackage (Ordinal: 35, Address: 0xf580)
FveGetStatus (Ordinal: 36, Address: 0xdd40)
FveGetStatusW (Ordinal: 37, Address: 0xdc40)
FveGetUserFlags (Ordinal: 38, Address: 0xde30)
FveGetVolumeNameW (Ordinal: 39, Address: 0xfcf0)
FveIsHardwareReadyForConversion (Ordinal: 40, Address: 0xf4f0)
FveIsRecoveryPasswordGroupValidW (Ordinal: 41, Address: 0xe880)
FveIsRecoveryPasswordValidW (Ordinal: 42, Address: 0xe940)
FveIsVolumeEncryptable (Ordinal: 43, Address: 0xee80)
FveLockVolume (Ordinal: 44, Address: 0xde40)
FveNotifyVolumeAfterFormat (Ordinal: 45, Address: 0xfa70)
FveOpenVolumeByHandle (Ordinal: 46, Address: 0xfef0)
FveOpenVolumeExW (Ordinal: 47, Address: 0x103d0)
FveOpenVolumeW (Ordinal: 48, Address: 0x103a0)
FveQuery (Ordinal: 49, Address: 0x104b0)
FveRevertVolume (Ordinal: 50, Address: 0xea00)
FveSelectBestRecoveryPasswordByBackupInformation (Ordinal: 51, Address: 0xe260)
FveSetAllowKeyExport (Ordinal: 52, Address: 0xf2a0)
FveSetFipsAllowDisabled (Ordinal: 53, Address: 0xf290)
FveSetFveMethod (Ordinal: 54, Address: 0xf1d0)
FveSetRecoveryPasswordBackupInformation (Ordinal: 55, Address: 0xe190)
FveSetUserFlags (Ordinal: 56, Address: 0xde30)
FveUpgradeVolume (Ordinal: 57, Address: 0xdb80)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CLSIDFromString (Address: 0x10054020)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x10054030)
IsDebuggerPresent (Address: 0x10054028)
OutputDebugStringW (Address: 0x1005402c)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x10054038)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x10054040)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x10054048)
SetLastError (Address: 0x10054054)
SetUnhandledExceptionFilter (Address: 0x10054050)
UnhandledExceptionFilter (Address: 0x1005404c)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x10054064)
DeleteFileW (Address: 0x10054060)
FindClose (Address: 0x1005406c)
FindFirstFileW (Address: 0x10054094)
FindFirstVolumeW (Address: 0x10054078)
FindNextVolumeW (Address: 0x10054080)
FindVolumeClose (Address: 0x1005408c)
FlushFileBuffers (Address: 0x10054084)
GetDiskFreeSpaceW (Address: 0x10054068)
GetDriveTypeW (Address: 0x10054088)
GetFileAttributesW (Address: 0x10054090)
GetFileSizeEx (Address: 0x10054070)
GetLogicalDrives (Address: 0x10054074)
GetVolumeInformationW (Address: 0x1005407c)
ReadFile (Address: 0x10054098)
SetFileAttributesW (Address: 0x1005409c)
SetFilePointerEx (Address: 0x1005405c)
WriteFile (Address: 0x100540a0)

api-ms-win-core-file-l1-2-0.dll

GetVolumeNameForVolumeMountPointW (Address: 0x100540ac)
GetVolumePathNamesForVolumeNameW (Address: 0x100540a8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100540b4)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100540c8)
HeapAlloc (Address: 0x100540bc)
HeapFree (Address: 0x100540c0)
HeapSize (Address: 0x100540c4)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x100540d4)
LocalFree (Address: 0x100540d0)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x100540dc)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x100540f0)
GetModuleFileNameA (Address: 0x100540f8)
GetModuleFileNameW (Address: 0x100540e8)
GetModuleHandleExW (Address: 0x100540f4)
GetModuleHandleW (Address: 0x100540e4)
GetProcAddress (Address: 0x100540ec)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10054100)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x10054108)
VirtualFree (Address: 0x1005410c)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x10054118)
GetCurrentProcessId (Address: 0x1005412c)
GetCurrentThread (Address: 0x10054130)
GetCurrentThreadId (Address: 0x10054120)
OpenProcessToken (Address: 0x1005411c)
OpenThreadToken (Address: 0x1005413c)
SetThreadToken (Address: 0x10054138)
TerminateProcess (Address: 0x10054134)
TlsAlloc (Address: 0x10054114)
TlsFree (Address: 0x10054140)
TlsGetValue (Address: 0x10054124)
TlsSetValue (Address: 0x10054128)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x10054148)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x10054150)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x10054160)
RegCreateKeyExW (Address: 0x10054158)
RegDeleteValueW (Address: 0x10054188)
RegEnumKeyExW (Address: 0x10054170)
RegEnumValueW (Address: 0x10054178)
RegGetValueA (Address: 0x10054174)
RegGetValueW (Address: 0x10054180)
RegLoadKeyW (Address: 0x10054184)
RegOpenKeyExW (Address: 0x10054168)
RegQueryInfoKeyW (Address: 0x1005417c)
RegQueryValueExW (Address: 0x10054164)
RegSetValueExW (Address: 0x1005415c)
RegUnLoadKeyW (Address: 0x1005416c)

api-ms-win-core-registry-l1-1-1.dll

RegSetKeyValueW (Address: 0x10054190)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x10054198)
MultiByteToWideChar (Address: 0x1005419c)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100541d4)
AcquireSRWLockShared (Address: 0x100541e4)
CreateEventW (Address: 0x100541a8)
CreateMutexExW (Address: 0x100541d8)
CreateSemaphoreExW (Address: 0x100541dc)
DeleteCriticalSection (Address: 0x100541c8)
EnterCriticalSection (Address: 0x100541ac)
InitializeCriticalSection (Address: 0x100541e0)
InitializeCriticalSectionEx (Address: 0x100541c4)
LeaveCriticalSection (Address: 0x100541e8)
OpenSemaphoreW (Address: 0x100541d0)
ReleaseMutex (Address: 0x100541b4)
ReleaseSemaphore (Address: 0x100541bc)
ReleaseSRWLockExclusive (Address: 0x100541c0)
ReleaseSRWLockShared (Address: 0x100541b8)
SetEvent (Address: 0x100541a4)
WaitForSingleObject (Address: 0x100541cc)
WaitForSingleObjectEx (Address: 0x100541b0)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x100541f4)
Sleep (Address: 0x100541f0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTime (Address: 0x10054200)
GetSystemTimeAsFileTime (Address: 0x100541fc)
GetSystemWindowsDirectoryW (Address: 0x1005420c)
GetTickCount (Address: 0x10054204)
GetTickCount64 (Address: 0x10054208)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x10054214)
CreateThreadpoolTimer (Address: 0x10054220)
SetThreadpoolTimer (Address: 0x1005421c)
WaitForThreadpoolTimerCallbacks (Address: 0x10054218)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x10054228)

api-ms-win-eventing-classicprovider-l1-1-0.dll

TraceMessage (Address: 0x10054230)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x10054240)
EnableTraceEx2 (Address: 0x10054238)
StartTraceW (Address: 0x1005423c)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x1005424c)
EventRegister (Address: 0x10054258)
EventSetInformation (Address: 0x10054254)
EventUnregister (Address: 0x10054250)
EventWriteTransfer (Address: 0x10054248)

api-ms-win-security-base-l1-1-0.dll

AdjustTokenPrivileges (Address: 0x10054264)
DuplicateTokenEx (Address: 0x10054260)
RevertToSelf (Address: 0x10054268)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x10054270)

bcd.dll

BcdCloseObject (Address: 0x10054280)
BcdCloseStore (Address: 0x1005428c)
BcdGetElementData (Address: 0x10054278)
BcdOpenObject (Address: 0x10054284)
BcdOpenSystemStore (Address: 0x10054288)
BcdQueryObject (Address: 0x10054290)
SyspartGetSystemPartition (Address: 0x1005427c)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x100542a0)
BCryptCreateHash (Address: 0x100542c0)
BCryptDecrypt (Address: 0x100542c4)
BCryptDestroyHash (Address: 0x100542b8)
BCryptDestroyKey (Address: 0x1005429c)
BCryptEncrypt (Address: 0x100542ac)
BCryptFinishHash (Address: 0x100542b4)
BCryptGenerateSymmetricKey (Address: 0x100542cc)
BCryptGenRandom (Address: 0x100542a4)
BCryptGetFipsAlgorithmMode (Address: 0x10054298)
BCryptGetProperty (Address: 0x100542b0)
BCryptHashData (Address: 0x100542bc)
BCryptOpenAlgorithmProvider (Address: 0x100542a8)
BCryptSetProperty (Address: 0x100542c8)

CRYPT32.dll

CertGetEnhancedKeyUsage (Address: 0x10054004)
CertVerifyCertificateChainPolicy (Address: 0x10054008)
CryptDecodeObjectEx (Address: 0x10054000)

FVEAPI.dll

FveGetSecureBootBindingState (Address: 0x10054010)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x100542f8)
__dllonexit (Address: 0x1005430c)
_amsg_exit (Address: 0x1005432c)
_callnewh (Address: 0x10054334)
_except_handler4_common (Address: 0x10054318)
_initterm (Address: 0x10054320)
_lock (Address: 0x10054314)
_onexit (Address: 0x10054308)
_purecall (Address: 0x1005433c)
_stricmp (Address: 0x100542ec)
_strnicmp (Address: 0x100542e8)
_unlock (Address: 0x10054310)
_vsnwprintf (Address: 0x100542d8)
_wcsicmp (Address: 0x100542dc)
_XcptFilter (Address: 0x10054330)
??1type_info@@UAE@XZ (Address: 0x100542fc)
free (Address: 0x10054324)
iswdigit (Address: 0x100542e0)
malloc (Address: 0x10054338)
memcmp (Address: 0x1005431c)
memcpy (Address: 0x10054300)
memcpy_s (Address: 0x10054328)
memmove (Address: 0x10054304)
memmove_s (Address: 0x100542d4)
memset (Address: 0x10054340)
toupper (Address: 0x100542f4)
wcschr (Address: 0x100542f0)
wcstoul (Address: 0x100542e4)

ncrypt.dll

NCryptCloseProtectionDescriptor (Address: 0x1005434c)
NCryptCreateProtectionDescriptor (Address: 0x10054354)
NCryptGetProtectionDescriptorInfo (Address: 0x10054358)
NCryptProtectSecret (Address: 0x10054350)
NCryptUnprotectSecret (Address: 0x10054348)

ntdll.dll

EtwEventRegister (Address: 0x10054394)
EtwEventUnregister (Address: 0x10054390)
EtwEventWrite (Address: 0x1005438c)
NtClose (Address: 0x10054380)
NtOpenKey (Address: 0x10054388)
NtPowerInformation (Address: 0x10054360)
NtQuerySystemEnvironmentValueEx (Address: 0x10054368)
NtQuerySystemInformation (Address: 0x100543a4)
NtQueryValueKey (Address: 0x10054384)
NtQueryVolumeInformationFile (Address: 0x100543a0)
NtQueryWnfStateData (Address: 0x1005439c)
RtlCheckPortableOperatingSystem (Address: 0x10054364)
RtlCompareMemory (Address: 0x10054370)
RtlFreeUnicodeString (Address: 0x10054378)
RtlInitUnicodeString (Address: 0x1005436c)
RtlNtStatusToDosError (Address: 0x100543ac)
RtlPublishWnfStateData (Address: 0x10054398)
RtlSetThreadErrorMode (Address: 0x100543a8)
RtlStringFromGUID (Address: 0x1005437c)
RtlSubscribeWnfStateChangeNotification (Address: 0x10054374)
RtlUnsubscribeWnfStateChangeNotification (Address: 0x100543b0)

RPCRT4.dll

UuidCreate (Address: 0x10054018)

tbs.dll

Tbsi_Context_Create (Address: 0x100543c0)
Tbsi_Get_TCG_Log (Address: 0x100543bc)
Tbsi_GetDeviceInfo (Address: 0x100543b8)
Tbsip_Context_Close (Address: 0x100543c4)
Tbsip_Submit_Command_NonBlocking (Address: 0x100543c8)