feclient.dll

Description: Windows NT File Encryption Client Interfaces

Version: 10.0.19041.6328

Architecture: 64-bit

Operating System: Windows NT

SHA256: 19dd3b9f02a8c92bf2c8a4984b46523f

File Size: 247.5 KB

Uploaded At: Dec. 1, 2025, 7:28 a.m.

Views: 8

Exported Functions

DpQueryUserProtectorDescriptor (Ordinal: 1, Address: 0x13480)
DpQueryUserProtectorDescriptorInfo (Ordinal: 2, Address: 0x136c0)
EdpAllowFileAccessForProcess (Ordinal: 3, Address: 0x12e80)
EdpContainerizeFile (Ordinal: 4, Address: 0x12e10)
EdpCredentialCreate (Ordinal: 5, Address: 0x11f10)
EdpCredentialDelete (Ordinal: 6, Address: 0x122d0)
EdpCredentialExists (Ordinal: 7, Address: 0x121b0)
EdpCredentialQuery (Ordinal: 8, Address: 0x12060)
EdpDecontainerizeFile (Ordinal: 9, Address: 0x12e60)
EdpDplPolicyEnabledForUser (Ordinal: 10, Address: 0x12880)
EdpDplStartCredServiceIfDplEnabledForUser (Ordinal: 11, Address: 0x12890)
EdpDplUpgradePinInfo (Ordinal: 12, Address: 0x127e0)
EdpDplUpgradeVerifyUser (Ordinal: 13, Address: 0x12810)
EdpDplUserCredentialsSet (Ordinal: 14, Address: 0x12840)
EdpDplUserUnlockComplete (Ordinal: 15, Address: 0x12870)
EdpDplUserUnlockStart (Ordinal: 16, Address: 0x12870)
EdpFree (Ordinal: 17, Address: 0x12340)
EdpGetContainerIdentity (Ordinal: 18, Address: 0x12e40)
EdpGetCredServiceState (Ordinal: 19, Address: 0x12770)
EdpIsConsumerDataProtectionEnforced (Ordinal: 20, Address: 0x12fc0)
EdpIsConsumerDataProtectionSupported (Ordinal: 21, Address: 0x12fb0)
EdpPurgeAppLearningEvents (Ordinal: 22, Address: 0x12ec0)
EdpQueryCredServiceInfo (Ordinal: 23, Address: 0x12910)
EdpQueryDplEnforcedPolicyOwnerIds (Ordinal: 24, Address: 0x12320)
EdpQueryRevokedPolicyOwnerIds (Ordinal: 25, Address: 0x12300)
EdpRmsClearKeys (Ordinal: 26, Address: 0x12e00)
EdpSetCredServiceInfo (Ordinal: 27, Address: 0x12b50)
EdpUnprotectFile (Ordinal: 28, Address: 0x12ea0)
EdpWriteLogSiteLearningEvents (Ordinal: 29, Address: 0x12ed0)
EfsClientCloseFileRaw (Ordinal: 30, Address: 0x10d20)
EfsClientCopyFileRaw (Ordinal: 31, Address: 0x12ee0)
EfsClientDecryptFile (Ordinal: 32, Address: 0x109d0)
EfsClientDuplicateEncryptionInfo (Ordinal: 33, Address: 0x11400)
EfsClientEncryptFileEx (Ordinal: 34, Address: 0x108b0)
EfsClientFileEncryptionStatus (Ordinal: 35, Address: 0x10aa0)
EfsClientFreeKeyInfo (Ordinal: 36, Address: 0x117a0)
EfsClientFreeProtectorList (Ordinal: 37, Address: 0x11320)
EfsClientGetEncryptedFileVersion (Ordinal: 38, Address: 0x11800)
EfsClientGetKeyInfo (Ordinal: 39, Address: 0x116d0)
EfsClientOpenFileRaw (Ordinal: 40, Address: 0x10b30)
EfsClientQueryProtectors (Ordinal: 41, Address: 0x110c0)
EfsClientReadFileRaw (Ordinal: 42, Address: 0x10c70)
EfsClientWriteFileRaw (Ordinal: 43, Address: 0x10c90)
EfsClientWriteFileWithHeaderRaw (Ordinal: 44, Address: 0x10cd0)
EfsReprotectFile (Ordinal: 45, Address: 0x12f10)
EfsUtilGetCurrentKey (Ordinal: 46, Address: 0x399c4)
EfsValidateTokenForConsumer (Ordinal: 47, Address: 0x131b0)
EfsValidateUserForConsumer (Ordinal: 48, Address: 0x12ff0)
FeClClearCaches (Ordinal: 49, Address: 0x12de0)
FeClQueryInfo (Ordinal: 50, Address: 0x12d50)
FeClientInitialize (Ordinal: 51, Address: 0x107f0)
GetLockSessionUnwrappedKey (Ordinal: 52, Address: 0x12620)
GetLockSessionWrappedKey (Ordinal: 53, Address: 0x124c0)
OefsCheckSupport (Ordinal: 54, Address: 0x12ef0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoTaskMemAlloc (Address: 0x18002fd18)
CoTaskMemFree (Address: 0x18002fd10)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18002fd30)
IsDebuggerPresent (Address: 0x18002fd38)
OutputDebugStringW (Address: 0x18002fd28)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18002fd48)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18002fd58)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18002fd88)
RaiseException (Address: 0x18002fd78)
SetLastError (Address: 0x18002fd68)
SetUnhandledExceptionFilter (Address: 0x18002fd70)
UnhandledExceptionFilter (Address: 0x18002fd80)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x18002fdd0)
DeleteFileW (Address: 0x18002fda0)
GetDriveTypeW (Address: 0x18002fdb0)
GetFileAttributesW (Address: 0x18002fdb8)
GetFinalPathNameByHandleW (Address: 0x18002fdc0)
GetVolumePathNameW (Address: 0x18002fda8)
RemoveDirectoryW (Address: 0x18002fd98)
SetFileAttributesW (Address: 0x18002fdc8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18002fde0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18002fe10)
HeapAlloc (Address: 0x18002fe00)
HeapCreate (Address: 0x18002fdf0)
HeapDestroy (Address: 0x18002fe18)
HeapFree (Address: 0x18002fe08)
HeapSetInformation (Address: 0x18002fdf8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18002fe28)
LocalFree (Address: 0x18002fe30)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GetComputerNameW (Address: 0x18002fe40)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x18002fe78)
GetModuleFileNameA (Address: 0x18002fe60)
GetModuleFileNameW (Address: 0x18002fe58)
GetModuleHandleExW (Address: 0x18002fe50)
GetModuleHandleW (Address: 0x18002fe68)
GetProcAddress (Address: 0x18002fe80)
LoadLibraryExW (Address: 0x18002fe70)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18002fe90)
IdnToAscii (Address: 0x18002fe98)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x18002feb0)
VirtualFree (Address: 0x18002fea8)

api-ms-win-core-memory-l1-1-1.dll

GetProcessWorkingSetSizeEx (Address: 0x18002fec0)
SetProcessWorkingSetSizeEx (Address: 0x18002fed8)
VirtualLock (Address: 0x18002fed0)
VirtualUnlock (Address: 0x18002fec8)

api-ms-win-core-privateprofile-l1-1-0.dll

GetPrivateProfileStringW (Address: 0x18002fee8)
WritePrivateProfileStringW (Address: 0x18002fef0)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x18002ff28)
GetCurrentProcess (Address: 0x18002ff20)
GetCurrentProcessId (Address: 0x18002ff38)
GetCurrentThread (Address: 0x18002ff08)
GetCurrentThreadId (Address: 0x18002ff40)
OpenThreadToken (Address: 0x18002ff00)
ProcessIdToSessionId (Address: 0x18002ff18)
SetThreadToken (Address: 0x18002ff30)
TerminateProcess (Address: 0x18002ff10)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x18002ff50)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18002ff60)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18002ff78)
RegGetValueW (Address: 0x18002ff70)
RegOpenKeyExW (Address: 0x18002ff80)
RegQueryValueExW (Address: 0x18002ff88)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18002ffa8)
RtlCompareMemory (Address: 0x18002ffb0)
RtlLookupFunctionEntry (Address: 0x18002ffa0)
RtlVirtualUnwind (Address: 0x18002ff98)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x18002ffc0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180030060)
AcquireSRWLockShared (Address: 0x180030068)
CreateEventW (Address: 0x180030000)
CreateMutexExW (Address: 0x18002ffd8)
CreateSemaphoreExW (Address: 0x18002ffd0)
DeleteCriticalSection (Address: 0x180030038)
EnterCriticalSection (Address: 0x180030050)
InitializeCriticalSection (Address: 0x18002ffe8)
InitializeCriticalSectionEx (Address: 0x180030028)
InitializeSRWLock (Address: 0x180030010)
LeaveCriticalSection (Address: 0x18002fff8)
OpenSemaphoreW (Address: 0x180030040)
ReleaseMutex (Address: 0x180030070)
ReleaseSemaphore (Address: 0x18002fff0)
ReleaseSRWLockExclusive (Address: 0x180030008)
ReleaseSRWLockShared (Address: 0x18002ffe0)
ResetEvent (Address: 0x180030018)
SetEvent (Address: 0x180030030)
SleepEx (Address: 0x180030020)
WaitForSingleObject (Address: 0x180030048)
WaitForSingleObjectEx (Address: 0x180030058)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x180030080)
InitOnceComplete (Address: 0x180030088)
Sleep (Address: 0x180030090)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x1800300a0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x1800300b8)
GetSystemInfo (Address: 0x1800300c8)
GetSystemTimeAsFileTime (Address: 0x1800300c0)
GetSystemWindowsDirectoryW (Address: 0x1800300d0)
GetTickCount (Address: 0x1800300b0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1800300e0)
CreateThreadpoolTimer (Address: 0x1800300f8)
SetThreadpoolTimer (Address: 0x1800300f0)
WaitForThreadpoolTimerCallbacks (Address: 0x1800300e8)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x180030108)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateStringReference (Address: 0x180030118)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x180030138)
EventRegister (Address: 0x180030148)
EventSetInformation (Address: 0x180030130)
EventUnregister (Address: 0x180030128)
EventWriteTransfer (Address: 0x180030140)

api-ms-win-security-base-l1-1-0.dll

AdjustTokenPrivileges (Address: 0x180030170)
GetTokenInformation (Address: 0x180030168)
ImpersonateSelf (Address: 0x180030158)
RevertToSelf (Address: 0x180030160)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x180030188)
ConvertStringSidToSidW (Address: 0x180030180)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x180030198)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x1800301c8)
BCryptDecrypt (Address: 0x1800301a8)
BCryptDestroyKey (Address: 0x1800301d8)
BCryptEncrypt (Address: 0x1800301e8)
BCryptGenerateSymmetricKey (Address: 0x1800301d0)
BCryptGenRandom (Address: 0x1800301c0)
BCryptGetProperty (Address: 0x1800301e0)
BCryptOpenAlgorithmProvider (Address: 0x1800301b0)
BCryptSetProperty (Address: 0x1800301b8)

iertutil.dll

CreateUri (Address: 0x1800301f8)

msvcrt.dll

__C_specific_handler (Address: 0x180030330)
__CxxFrameHandler3 (Address: 0x1800302e8)
__dllonexit (Address: 0x1800302d8)
_amsg_exit (Address: 0x180030238)
_callnewh (Address: 0x180030270)
_CxxThrowException (Address: 0x180030290)
_initterm (Address: 0x1800302b0)
_lock (Address: 0x1800302c8)
_onexit (Address: 0x1800302e0)
_purecall (Address: 0x180030210)
_unlock (Address: 0x1800302d0)
_vsnprintf_s (Address: 0x1800302f8)
_vsnwprintf (Address: 0x180030318)
_wcsicmp (Address: 0x180030250)
_wcsnicmp (Address: 0x180030208)
_XcptFilter (Address: 0x180030230)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x180030278)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180030280)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180030220)
??0exception@@QEAA@XZ (Address: 0x1800302f0)
??1exception@@UEAA@XZ (Address: 0x180030328)
??1type_info@@UEAA@XZ (Address: 0x1800302c0)
??3@YAXPEAX@Z (Address: 0x180030320)
?terminate@@YAXXZ (Address: 0x1800302b8)
?what@exception@@UEBAPEBDXZ (Address: 0x180030288)
free (Address: 0x180030228)
malloc (Address: 0x1800302a8)
memcmp (Address: 0x180030308)
memcpy (Address: 0x180030298)
memcpy_s (Address: 0x180030310)
memmove (Address: 0x1800302a0)
memmove_s (Address: 0x180030218)
memset (Address: 0x180030300)
toupper (Address: 0x180030268)
wcschr (Address: 0x180030260)
wcscmp (Address: 0x180030338)
wcsncmp (Address: 0x180030240)
wcsnlen (Address: 0x180030258)
wcstoul (Address: 0x180030248)

ntdll.dll

NtCreateFile (Address: 0x1800303b0)
NtFsControlFile (Address: 0x180030360)
NtQueryInformationFile (Address: 0x1800303b8)
NtQuerySecurityAttributesToken (Address: 0x1800303c8)
NtQueryWnfStateData (Address: 0x180030358)
RtlAllocateHeap (Address: 0x180030398)
RtlCompareUnicodeString (Address: 0x1800303c0)
RtlDosPathNameToNtPathName_U (Address: 0x1800303a8)
RtlFreeHeap (Address: 0x1800303d0)
RtlGetFullPathName_U (Address: 0x180030388)
RtlInitUnicodeString (Address: 0x1800303d8)
RtlLengthSecurityDescriptor (Address: 0x180030370)
RtlMakeSelfRelativeSD (Address: 0x180030368)
RtlNtStatusToDosError (Address: 0x180030380)
RtlQueryPackageClaims (Address: 0x1800303a0)
RtlSubscribeWnfStateChangeNotification (Address: 0x180030350)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180030348)
RtlValidSecurityDescriptor (Address: 0x180030378)
ZwQueryWnfStateData (Address: 0x180030390)

OLEAUT32.dll

SysFreeString (Address: 0x18002fc98)

RPCRT4.dll

I_RpcExceptionFilter (Address: 0x18002fce0)
NdrClientCall3 (Address: 0x18002fcc8)
RpcBindingBind (Address: 0x18002fcf8)
RpcBindingCreateW (Address: 0x18002fd00)
RpcBindingFree (Address: 0x18002fcf0)
RpcBindingFromStringBindingW (Address: 0x18002fca8)
RpcBindingSetAuthInfoW (Address: 0x18002fce8)
RpcBindingUnbind (Address: 0x18002fcd0)
RpcExceptionFilter (Address: 0x18002fcd8)
RpcStringBindingComposeW (Address: 0x18002fcb0)
RpcStringFreeW (Address: 0x18002fcc0)
UuidFromStringW (Address: 0x18002fcb8)