feclient.dll

v10.0.19041.6328 32-bit Windows NT Analyzed
Download
Description
Windows NT File Encryption Client Interfaces
Authors
© Microsoft Corporation. All rights reserved.
File size
191.5 KB
Uploaded
2025-12-01 07:56
Views
98
SHA-256
f5e6263c82712c8cb2e9af3b6cc81302

Exported functions 54

EfsUtilGetCurrentKey #1 · 0x2b0d6
DpQueryUserProtectorDescriptor #2 · 0x16cd0
DpQueryUserProtectorDescriptorInfo #3 · 0x16db0
EdpAllowFileAccessForProcess #4 · 0x167d0
EdpContainerizeFile #5 · 0x167a0
EdpCredentialCreate #6 · 0x15c90
EdpCredentialDelete #7 · 0x15fc0
EdpCredentialExists #8 · 0x15ed0
EdpCredentialQuery #9 · 0x15db0
EdpDecontainerizeFile #10 · 0x167c0
EdpDplPolicyEnabledForUser #11 · 0x16320
EdpDplStartCredServiceIfDplEnabledForUser #12 · 0x16340
EdpDplUpgradePinInfo #13 · 0x162d0
EdpDplUpgradeVerifyUser #14 · 0x162e0
EdpDplUserCredentialsSet #15 · 0x162f0
EdpDplUserUnlockComplete #16 · 0x16310
EdpDplUserUnlockStart #17 · 0x16300
EdpFree #18 · 0x15ff0
EdpGetContainerIdentity #19 · 0x167b0
EdpGetCredServiceState #20 · 0x162c0
EdpIsConsumerDataProtectionEnforced #21 · 0x168c0
EdpIsConsumerDataProtectionSupported #22 · 0x168a0
EdpPurgeAppLearningEvents #23 · 0x167f0
EdpQueryCredServiceInfo #24 · 0x16380
EdpQueryDplEnforcedPolicyOwnerIds #25 · 0x15fe0
EdpQueryRevokedPolicyOwnerIds #26 · 0x15fd0
EdpRmsClearKeys #27 · 0x16790
EdpSetCredServiceInfo #28 · 0x16580
EdpUnprotectFile #29 · 0x167e0
EdpWriteLogSiteLearningEvents #30 · 0x16800
EfsClientCloseFileRaw #31 · 0x151b0
EfsClientCopyFileRaw #32 · 0x16810
EfsClientDecryptFile #33 · 0x14f30
EfsClientDuplicateEncryptionInfo #34 · 0x15600
EfsClientEncryptFileEx #35 · 0x14e70
EfsClientFileEncryptionStatus #36 · 0x14fc0
EfsClientFreeKeyInfo #37 · 0x15840
EfsClientFreeProtectorList #38 · 0x15570
EfsClientGetEncryptedFileVersion #39 · 0x15880
EfsClientGetKeyInfo #40 · 0x157b0
EfsClientOpenFileRaw #41 · 0x15020
EfsClientQueryProtectors #42 · 0x15450
EfsClientReadFileRaw #43 · 0x15100
EfsClientWriteFileRaw #44 · 0x15130
EfsClientWriteFileWithHeaderRaw #45 · 0x15170
EfsReprotectFile #46 · 0x16840
EfsValidateTokenForConsumer #47 · 0x16a60
EfsValidateUserForConsumer #48 · 0x16900
FeClClearCaches #49 · 0x16780
FeClQueryInfo #50 · 0x16720
FeClientInitialize #51 · 0x14de0
GetLockSessionUnwrappedKey #52 · 0x161d0
GetLockSessionWrappedKey #53 · 0x160e0
OefsCheckSupport #54 · 0x16830

Imported DLLs & functions 192

api-ms-win-core-com-l1-1-0.dll 2
CoTaskMemAlloc 0x5ad2d03c
CoTaskMemFree 0x5ad2d040
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x5ad2d048
IsDebuggerPresent 0x5ad2d050
OutputDebugStringW 0x5ad2d04c
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x5ad2d058
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x5ad2d060
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x5ad2d074
RaiseException 0x5ad2d068
SetLastError 0x5ad2d070
SetUnhandledExceptionFilter 0x5ad2d078
UnhandledExceptionFilter 0x5ad2d06c
api-ms-win-core-file-l1-1-0.dll 8
CreateFileW 0x5ad2d098
DeleteFileW 0x5ad2d08c
GetDriveTypeW 0x5ad2d09c
GetFileAttributesW 0x5ad2d080
GetFinalPathNameByHandleW 0x5ad2d090
GetVolumePathNameW 0x5ad2d094
RemoveDirectoryW 0x5ad2d088
SetFileAttributesW 0x5ad2d084
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x5ad2d0a4
api-ms-win-core-heap-l1-1-0.dll 6
GetProcessHeap 0x5ad2d0b0
HeapAlloc 0x5ad2d0ac
HeapCreate 0x5ad2d0b8
HeapDestroy 0x5ad2d0c0
HeapFree 0x5ad2d0b4
HeapSetInformation 0x5ad2d0bc
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x5ad2d0c8
LocalFree 0x5ad2d0cc
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
GetComputerNameW 0x5ad2d0d4
api-ms-win-core-libraryloader-l1-2-0.dll 7
FreeLibrary 0x5ad2d0f4
GetModuleFileNameA 0x5ad2d0e4
GetModuleFileNameW 0x5ad2d0ec
GetModuleHandleExW 0x5ad2d0dc
GetModuleHandleW 0x5ad2d0e8
GetProcAddress 0x5ad2d0f0
LoadLibraryExW 0x5ad2d0e0
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x5ad2d100
IdnToAscii 0x5ad2d0fc
api-ms-win-core-memory-l1-1-0.dll 2
VirtualAlloc 0x5ad2d108
VirtualFree 0x5ad2d10c
api-ms-win-core-memory-l1-1-1.dll 4
GetProcessWorkingSetSizeEx 0x5ad2d11c
SetProcessWorkingSetSizeEx 0x5ad2d114
VirtualLock 0x5ad2d120
VirtualUnlock 0x5ad2d118
api-ms-win-core-privateprofile-l1-1-0.dll 2
GetPrivateProfileStringW 0x5ad2d128
WritePrivateProfileStringW 0x5ad2d12c
api-ms-win-core-processthreads-l1-1-0.dll 9
CreateThread 0x5ad2d134
GetCurrentProcess 0x5ad2d150
GetCurrentProcessId 0x5ad2d14c
GetCurrentThread 0x5ad2d138
GetCurrentThreadId 0x5ad2d13c
OpenThreadToken 0x5ad2d148
ProcessIdToSessionId 0x5ad2d140
SetThreadToken 0x5ad2d144
TerminateProcess 0x5ad2d154
api-ms-win-core-processthreads-l1-1-1.dll 1
GetProcessMitigationPolicy 0x5ad2d15c
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x5ad2d164
api-ms-win-core-registry-l1-1-0.dll 4
RegCloseKey 0x5ad2d174
RegGetValueW 0x5ad2d178
RegOpenKeyExW 0x5ad2d16c
RegQueryValueExW 0x5ad2d170
api-ms-win-core-rtlsupport-l1-2-0.dll 1
RtlCompareMemory 0x5ad2d180
api-ms-win-core-string-l1-1-0.dll 1
CompareStringOrdinal 0x5ad2d188
api-ms-win-core-synch-l1-1-0.dll 21
AcquireSRWLockExclusive 0x5ad2d1cc
AcquireSRWLockShared 0x5ad2d1e0
CreateEventW 0x5ad2d1b8
CreateMutexExW 0x5ad2d1d4
CreateSemaphoreExW 0x5ad2d1d8
DeleteCriticalSection 0x5ad2d1d0
EnterCriticalSection 0x5ad2d1b0
InitializeCriticalSection 0x5ad2d1dc
InitializeCriticalSectionEx 0x5ad2d1c4
InitializeSRWLock 0x5ad2d19c
LeaveCriticalSection 0x5ad2d1ac
OpenSemaphoreW 0x5ad2d1a4
ReleaseMutex 0x5ad2d1bc
ReleaseSemaphore 0x5ad2d1c0
ReleaseSRWLockExclusive 0x5ad2d194
ReleaseSRWLockShared 0x5ad2d1c8
ResetEvent 0x5ad2d1a0
SetEvent 0x5ad2d1b4
SleepEx 0x5ad2d190
WaitForSingleObject 0x5ad2d1a8
WaitForSingleObjectEx 0x5ad2d198
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x5ad2d1ec
InitOnceComplete 0x5ad2d1f0
Sleep 0x5ad2d1e8
api-ms-win-core-synch-l1-2-1.dll 1
WaitForMultipleObjects 0x5ad2d1f8
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetComputerNameExW 0x5ad2d204
GetSystemInfo 0x5ad2d208
GetSystemTimeAsFileTime 0x5ad2d20c
GetSystemWindowsDirectoryW 0x5ad2d210
GetTickCount 0x5ad2d200
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x5ad2d21c
CreateThreadpoolTimer 0x5ad2d218
SetThreadpoolTimer 0x5ad2d224
WaitForThreadpoolTimerCallbacks 0x5ad2d220
api-ms-win-core-winrt-l1-1-0.dll 1
RoGetActivationFactory 0x5ad2d22c
api-ms-win-core-winrt-string-l1-1-0.dll 1
WindowsCreateStringReference 0x5ad2d234
api-ms-win-eventing-provider-l1-1-0.dll 5
EventProviderEnabled 0x5ad2d244
EventRegister 0x5ad2d240
EventSetInformation 0x5ad2d23c
EventUnregister 0x5ad2d248
EventWriteTransfer 0x5ad2d24c
api-ms-win-security-base-l1-1-0.dll 4
AdjustTokenPrivileges 0x5ad2d260
GetTokenInformation 0x5ad2d258
ImpersonateSelf 0x5ad2d25c
RevertToSelf 0x5ad2d254
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x5ad2d26c
ConvertStringSidToSidW 0x5ad2d268
api-ms-win-stateseparation-helpers-l1-1-0.dll 1
GetPersistedRegistryLocationW 0x5ad2d274
bcrypt.dll 9
BCryptCloseAlgorithmProvider 0x5ad2d280
BCryptDecrypt 0x5ad2d284
BCryptDestroyKey 0x5ad2d294
BCryptEncrypt 0x5ad2d298
BCryptGenerateSymmetricKey 0x5ad2d288
BCryptGenRandom 0x5ad2d29c
BCryptGetProperty 0x5ad2d27c
BCryptOpenAlgorithmProvider 0x5ad2d290
BCryptSetProperty 0x5ad2d28c
iertutil.dll 1
CreateUri 0x5ad2d2a4
msvcrt.dll 38
__CxxFrameHandler3 0x5ad2d314
__dllonexit 0x5ad2d318
_amsg_exit 0x5ad2d2c0
_callnewh 0x5ad2d2dc
_CxxThrowException 0x5ad2d2ec
_except_handler4_common 0x5ad2d310
_initterm 0x5ad2d2f8
_lock 0x5ad2d304
_onexit 0x5ad2d328
_purecall 0x5ad2d2ac
_unlock 0x5ad2d308
_vsnprintf_s 0x5ad2d320
_vsnwprintf 0x5ad2d330
_wcsicmp 0x5ad2d2cc
_wcsnicmp 0x5ad2d2b8
_XcptFilter 0x5ad2d33c
??0exception@@QAE@ABQBD@Z 0x5ad2d2e0
??0exception@@QAE@ABQBDH@Z 0x5ad2d2e4
??0exception@@QAE@ABV0@@Z 0x5ad2d2b4
??0exception@@QAE@XZ 0x5ad2d31c
??1exception@@UAE@XZ 0x5ad2d338
??1type_info@@UAE@XZ 0x5ad2d300
??3@YAXPAX@Z 0x5ad2d334
?terminate@@YAXXZ 0x5ad2d2fc
?what@exception@@UBEPBDXZ 0x5ad2d2e8
free 0x5ad2d2bc
malloc 0x5ad2d2c8
memcmp 0x5ad2d30c
memcpy 0x5ad2d2f0
memcpy_s 0x5ad2d32c
memmove 0x5ad2d2f4
memmove_s 0x5ad2d2b0
memset 0x5ad2d340
toupper 0x5ad2d2d8
wcschr 0x5ad2d2d4
wcsncmp 0x5ad2d2c4
wcsnlen 0x5ad2d2d0
wcstoul 0x5ad2d324
ntdll.dll 19
NtCreateFile 0x5ad2d380
NtFsControlFile 0x5ad2d354
NtQueryInformationFile 0x5ad2d384
NtQuerySecurityAttributesToken 0x5ad2d38c
NtQueryWnfStateData 0x5ad2d350
RtlAllocateHeap 0x5ad2d370
RtlCompareUnicodeString 0x5ad2d388
RtlDosPathNameToNtPathName_U 0x5ad2d37c
RtlFreeHeap 0x5ad2d374
RtlGetFullPathName_U 0x5ad2d368
RtlInitUnicodeString 0x5ad2d390
RtlLengthSecurityDescriptor 0x5ad2d35c
RtlMakeSelfRelativeSD 0x5ad2d358
RtlNtStatusToDosError 0x5ad2d364
RtlQueryPackageClaims 0x5ad2d378
RtlSubscribeWnfStateChangeNotification 0x5ad2d34c
RtlUnsubscribeWnfNotificationWaitForCompletion 0x5ad2d348
RtlValidSecurityDescriptor 0x5ad2d360
ZwQueryWnfStateData 0x5ad2d36c
OLEAUT32.dll 1
SysFreeString 0x5ad2d000
RPCRT4.dll 12
I_RpcExceptionFilter 0x5ad2d024
NdrClientCall4 0x5ad2d018
RpcBindingBind 0x5ad2d030
RpcBindingCreateW 0x5ad2d02c
RpcBindingFree 0x5ad2d034
RpcBindingFromStringBindingW 0x5ad2d008
RpcBindingSetAuthInfoW 0x5ad2d028
RpcBindingUnbind 0x5ad2d01c
RpcExceptionFilter 0x5ad2d020
RpcStringBindingComposeW 0x5ad2d00c
RpcStringFreeW 0x5ad2d014
UuidFromStringW 0x5ad2d010