feclient.dll

v10.0.19041.6328 64-bit Windows NT Analyzed
Description
Windows NT File Encryption Client Interfaces
Authors
© Microsoft Corporation. All rights reserved.
File size
247.5 KB
Uploaded
2025-12-01 07:28
Views
134
SHA-256
19dd3b9f02a8c92bf2c8a4984b46523f

Exported functions 54

DpQueryUserProtectorDescriptor #1 · 0x13480
DpQueryUserProtectorDescriptorInfo #2 · 0x136c0
EdpAllowFileAccessForProcess #3 · 0x12e80
EdpContainerizeFile #4 · 0x12e10
EdpCredentialCreate #5 · 0x11f10
EdpCredentialDelete #6 · 0x122d0
EdpCredentialExists #7 · 0x121b0
EdpCredentialQuery #8 · 0x12060
EdpDecontainerizeFile #9 · 0x12e60
EdpDplPolicyEnabledForUser #10 · 0x12880
EdpDplStartCredServiceIfDplEnabledForUser #11 · 0x12890
EdpDplUpgradePinInfo #12 · 0x127e0
EdpDplUpgradeVerifyUser #13 · 0x12810
EdpDplUserCredentialsSet #14 · 0x12840
EdpDplUserUnlockComplete #15 · 0x12870
EdpDplUserUnlockStart #16 · 0x12870
EdpFree #17 · 0x12340
EdpGetContainerIdentity #18 · 0x12e40
EdpGetCredServiceState #19 · 0x12770
EdpIsConsumerDataProtectionEnforced #20 · 0x12fc0
EdpIsConsumerDataProtectionSupported #21 · 0x12fb0
EdpPurgeAppLearningEvents #22 · 0x12ec0
EdpQueryCredServiceInfo #23 · 0x12910
EdpQueryDplEnforcedPolicyOwnerIds #24 · 0x12320
EdpQueryRevokedPolicyOwnerIds #25 · 0x12300
EdpRmsClearKeys #26 · 0x12e00
EdpSetCredServiceInfo #27 · 0x12b50
EdpUnprotectFile #28 · 0x12ea0
EdpWriteLogSiteLearningEvents #29 · 0x12ed0
EfsClientCloseFileRaw #30 · 0x10d20
EfsClientCopyFileRaw #31 · 0x12ee0
EfsClientDecryptFile #32 · 0x109d0
EfsClientDuplicateEncryptionInfo #33 · 0x11400
EfsClientEncryptFileEx #34 · 0x108b0
EfsClientFileEncryptionStatus #35 · 0x10aa0
EfsClientFreeKeyInfo #36 · 0x117a0
EfsClientFreeProtectorList #37 · 0x11320
EfsClientGetEncryptedFileVersion #38 · 0x11800
EfsClientGetKeyInfo #39 · 0x116d0
EfsClientOpenFileRaw #40 · 0x10b30
EfsClientQueryProtectors #41 · 0x110c0
EfsClientReadFileRaw #42 · 0x10c70
EfsClientWriteFileRaw #43 · 0x10c90
EfsClientWriteFileWithHeaderRaw #44 · 0x10cd0
EfsReprotectFile #45 · 0x12f10
EfsUtilGetCurrentKey #46 · 0x399c4
EfsValidateTokenForConsumer #47 · 0x131b0
EfsValidateUserForConsumer #48 · 0x12ff0
FeClClearCaches #49 · 0x12de0
FeClQueryInfo #50 · 0x12d50
FeClientInitialize #51 · 0x107f0
GetLockSessionUnwrappedKey #52 · 0x12620
GetLockSessionWrappedKey #53 · 0x124c0
OefsCheckSupport #54 · 0x12ef0

Imported DLLs & functions 196

CoTaskMemAlloc 0x18002fd18
CoTaskMemFree 0x18002fd10
DebugBreak 0x18002fd30
IsDebuggerPresent 0x18002fd38
OutputDebugStringW 0x18002fd28
DelayLoadFailureHook 0x18002fd48
ResolveDelayLoadedAPI 0x18002fd58
GetLastError 0x18002fd88
RaiseException 0x18002fd78
SetLastError 0x18002fd68
SetUnhandledExceptionFilter 0x18002fd70
UnhandledExceptionFilter 0x18002fd80
CreateFileW 0x18002fdd0
DeleteFileW 0x18002fda0
GetDriveTypeW 0x18002fdb0
GetFileAttributesW 0x18002fdb8
GetFinalPathNameByHandleW 0x18002fdc0
GetVolumePathNameW 0x18002fda8
RemoveDirectoryW 0x18002fd98
SetFileAttributesW 0x18002fdc8
CloseHandle 0x18002fde0
GetProcessHeap 0x18002fe10
HeapAlloc 0x18002fe00
HeapCreate 0x18002fdf0
HeapDestroy 0x18002fe18
HeapFree 0x18002fe08
HeapSetInformation 0x18002fdf8
LocalAlloc 0x18002fe28
LocalFree 0x18002fe30
GetComputerNameW 0x18002fe40
FreeLibrary 0x18002fe78
GetModuleFileNameA 0x18002fe60
GetModuleFileNameW 0x18002fe58
GetModuleHandleExW 0x18002fe50
GetModuleHandleW 0x18002fe68
GetProcAddress 0x18002fe80
LoadLibraryExW 0x18002fe70
FormatMessageW 0x18002fe90
IdnToAscii 0x18002fe98
VirtualAlloc 0x18002feb0
VirtualFree 0x18002fea8
GetProcessWorkingSetSizeEx 0x18002fec0
SetProcessWorkingSetSizeEx 0x18002fed8
VirtualLock 0x18002fed0
VirtualUnlock 0x18002fec8
GetPrivateProfileStringW 0x18002fee8
WritePrivateProfileStringW 0x18002fef0
CreateThread 0x18002ff28
GetCurrentProcess 0x18002ff20
GetCurrentProcessId 0x18002ff38
GetCurrentThread 0x18002ff08
GetCurrentThreadId 0x18002ff40
OpenThreadToken 0x18002ff00
ProcessIdToSessionId 0x18002ff18
SetThreadToken 0x18002ff30
TerminateProcess 0x18002ff10
GetProcessMitigationPolicy 0x18002ff50
QueryPerformanceCounter 0x18002ff60
RegCloseKey 0x18002ff78
RegGetValueW 0x18002ff70
RegOpenKeyExW 0x18002ff80
RegQueryValueExW 0x18002ff88
RtlCaptureContext 0x18002ffa8
RtlCompareMemory 0x18002ffb0
RtlLookupFunctionEntry 0x18002ffa0
RtlVirtualUnwind 0x18002ff98
CompareStringOrdinal 0x18002ffc0
AcquireSRWLockExclusive 0x180030060
AcquireSRWLockShared 0x180030068
CreateEventW 0x180030000
CreateMutexExW 0x18002ffd8
CreateSemaphoreExW 0x18002ffd0
DeleteCriticalSection 0x180030038
EnterCriticalSection 0x180030050
InitializeCriticalSection 0x18002ffe8
InitializeCriticalSectionEx 0x180030028
InitializeSRWLock 0x180030010
LeaveCriticalSection 0x18002fff8
OpenSemaphoreW 0x180030040
ReleaseMutex 0x180030070
ReleaseSemaphore 0x18002fff0
ReleaseSRWLockExclusive 0x180030008
ReleaseSRWLockShared 0x18002ffe0
ResetEvent 0x180030018
SetEvent 0x180030030
SleepEx 0x180030020
WaitForSingleObject 0x180030048
WaitForSingleObjectEx 0x180030058
InitOnceBeginInitialize 0x180030080
InitOnceComplete 0x180030088
Sleep 0x180030090
WaitForMultipleObjects 0x1800300a0
GetComputerNameExW 0x1800300b8
GetSystemInfo 0x1800300c8
GetSystemTimeAsFileTime 0x1800300c0
GetSystemWindowsDirectoryW 0x1800300d0
GetTickCount 0x1800300b0
CloseThreadpoolTimer 0x1800300e0
CreateThreadpoolTimer 0x1800300f8
SetThreadpoolTimer 0x1800300f0
WaitForThreadpoolTimerCallbacks 0x1800300e8
RoGetActivationFactory 0x180030108
WindowsCreateStringReference 0x180030118
EventProviderEnabled 0x180030138
EventRegister 0x180030148
EventSetInformation 0x180030130
EventUnregister 0x180030128
EventWriteTransfer 0x180030140
AdjustTokenPrivileges 0x180030170
GetTokenInformation 0x180030168
ImpersonateSelf 0x180030158
RevertToSelf 0x180030160
ConvertSidToStringSidW 0x180030188
ConvertStringSidToSidW 0x180030180
GetPersistedRegistryLocationW 0x180030198
BCryptCloseAlgorithmProvider 0x1800301c8
BCryptDecrypt 0x1800301a8
BCryptDestroyKey 0x1800301d8
BCryptEncrypt 0x1800301e8
BCryptGenerateSymmetricKey 0x1800301d0
BCryptGenRandom 0x1800301c0
BCryptGetProperty 0x1800301e0
BCryptOpenAlgorithmProvider 0x1800301b0
BCryptSetProperty 0x1800301b8
CreateUri 0x1800301f8
__C_specific_handler 0x180030330
__CxxFrameHandler3 0x1800302e8
__dllonexit 0x1800302d8
_amsg_exit 0x180030238
_callnewh 0x180030270
_CxxThrowException 0x180030290
_initterm 0x1800302b0
_lock 0x1800302c8
_onexit 0x1800302e0
_purecall 0x180030210
_unlock 0x1800302d0
_vsnprintf_s 0x1800302f8
_vsnwprintf 0x180030318
_wcsicmp 0x180030250
_wcsnicmp 0x180030208
_XcptFilter 0x180030230
??0exception@@QEAA@AEBQEBD@Z 0x180030278
??0exception@@QEAA@AEBQEBDH@Z 0x180030280
??0exception@@QEAA@AEBV0@@Z 0x180030220
??0exception@@QEAA@XZ 0x1800302f0
??1exception@@UEAA@XZ 0x180030328
??1type_info@@UEAA@XZ 0x1800302c0
??3@YAXPEAX@Z 0x180030320
?terminate@@YAXXZ 0x1800302b8
?what@exception@@UEBAPEBDXZ 0x180030288
free 0x180030228
malloc 0x1800302a8
memcmp 0x180030308
memcpy 0x180030298
memcpy_s 0x180030310
memmove 0x1800302a0
memmove_s 0x180030218
memset 0x180030300
toupper 0x180030268
wcschr 0x180030260
wcscmp 0x180030338
wcsncmp 0x180030240
wcsnlen 0x180030258
wcstoul 0x180030248
NtCreateFile 0x1800303b0
NtFsControlFile 0x180030360
NtQueryInformationFile 0x1800303b8
NtQuerySecurityAttributesToken 0x1800303c8
NtQueryWnfStateData 0x180030358
RtlAllocateHeap 0x180030398
RtlCompareUnicodeString 0x1800303c0
RtlDosPathNameToNtPathName_U 0x1800303a8
RtlFreeHeap 0x1800303d0
RtlGetFullPathName_U 0x180030388
RtlInitUnicodeString 0x1800303d8
RtlLengthSecurityDescriptor 0x180030370
RtlMakeSelfRelativeSD 0x180030368
RtlNtStatusToDosError 0x180030380
RtlQueryPackageClaims 0x1800303a0
RtlSubscribeWnfStateChangeNotification 0x180030350
RtlUnsubscribeWnfNotificationWaitForCompletion 0x180030348
RtlValidSecurityDescriptor 0x180030378
ZwQueryWnfStateData 0x180030390
SysFreeString 0x18002fc98
I_RpcExceptionFilter 0x18002fce0
NdrClientCall3 0x18002fcc8
RpcBindingBind 0x18002fcf8
RpcBindingCreateW 0x18002fd00
RpcBindingFree 0x18002fcf0
RpcBindingFromStringBindingW 0x18002fca8
RpcBindingSetAuthInfoW 0x18002fce8
RpcBindingUnbind 0x18002fcd0
RpcExceptionFilter 0x18002fcd8
RpcStringBindingComposeW 0x18002fcb0
RpcStringFreeW 0x18002fcc0
UuidFromStringW 0x18002fcb8