RoamingSecurity.dll

Description: Roaming Security implementation

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: b323ff148550697ffe8cf2aff307fbdb

File Size: 48.5 KB

Uploaded At: Dec. 1, 2025, 7:38 a.m.

Views: 4

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x36f0)
DllGetClassObject (Ordinal: 2, Address: 0x3730)
DllInstall (Ordinal: 3, Address: 0x3750)
DllRegisterServer (Ordinal: 4, Address: 0x3820)
DllUnregisterServer (Ordinal: 5, Address: 0x3880)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x180007318)
StringFromGUID2 (Address: 0x180007320)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180007330)
RaiseException (Address: 0x180007348)
SetUnhandledExceptionFilter (Address: 0x180007338)
UnhandledExceptionFilter (Address: 0x180007340)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x180007358)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180007368)
HeapAlloc (Address: 0x180007378)
HeapDestroy (Address: 0x180007370)
HeapFree (Address: 0x180007388)
HeapReAlloc (Address: 0x180007380)
HeapSize (Address: 0x180007390)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1800073a0)
LocalFree (Address: 0x1800073a8)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x1800073b8)
GetModuleFileNameW (Address: 0x1800073c0)
GetModuleHandleW (Address: 0x1800073d8)
GetProcAddress (Address: 0x1800073c8)
LoadLibraryExA (Address: 0x1800073e0)
LoadLibraryExW (Address: 0x1800073d0)

api-ms-win-core-localization-l1-2-0.dll

GetThreadLocale (Address: 0x1800073f0)
SetThreadLocale (Address: 0x1800073f8)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x180007410)
VirtualProtect (Address: 0x180007408)
VirtualQuery (Address: 0x180007418)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180007448)
GetCurrentProcessId (Address: 0x180007438)
GetCurrentThreadId (Address: 0x180007440)
SetThreadStackGuarantee (Address: 0x180007428)
TerminateProcess (Address: 0x180007430)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180007458)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180007478)
RegOpenKeyExW (Address: 0x180007468)
RegQueryInfoKeyW (Address: 0x180007470)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180007490)
RtlLookupFunctionEntry (Address: 0x180007498)
RtlVirtualUnwind (Address: 0x180007488)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x1800074a8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800074c8)
DeleteCriticalSection (Address: 0x1800074e0)
EnterCriticalSection (Address: 0x1800074d8)
InitializeCriticalSection (Address: 0x1800074c0)
LeaveCriticalSection (Address: 0x1800074b8)
ReleaseSRWLockExclusive (Address: 0x1800074d0)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1800074f0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x180007510)
GetSystemTimeAsFileTime (Address: 0x180007508)
GetTickCount (Address: 0x180007500)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsDeleteString (Address: 0x180007520)
WindowsGetStringRawBuffer (Address: 0x180007530)
WindowsIsStringEmpty (Address: 0x180007528)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x180007540)
GetTraceEnableLevel (Address: 0x180007560)
GetTraceLoggerHandle (Address: 0x180007550)
RegisterTraceGuidsW (Address: 0x180007548)
TraceMessage (Address: 0x180007558)
UnregisterTraceGuids (Address: 0x180007568)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x180007580)
EventSetInformation (Address: 0x180007578)
EventUnregister (Address: 0x180007588)
EventWriteTransfer (Address: 0x180007590)

api-ms-win-shcore-stream-l1-1-0.dll

SHCreateMemStream (Address: 0x1800075a0)

msvcrt.dll

__C_specific_handler (Address: 0x180007628)
__dllonexit (Address: 0x1800075e8)
_amsg_exit (Address: 0x180007600)
_callnewh (Address: 0x180007610)
_initterm (Address: 0x1800075f8)
_lock (Address: 0x1800075b8)
_onexit (Address: 0x1800075f0)
_purecall (Address: 0x1800075c8)
_unlock (Address: 0x1800075e0)
_vscwprintf (Address: 0x1800075c0)
_vsnprintf (Address: 0x1800075d0)
_XcptFilter (Address: 0x180007620)
free (Address: 0x180007640)
malloc (Address: 0x180007608)
memcpy (Address: 0x180007618)
memcpy_s (Address: 0x1800075d8)
memset (Address: 0x180007650)
vswprintf_s (Address: 0x1800075b0)
wcscat_s (Address: 0x180007638)
wcscpy_s (Address: 0x180007648)
wcsncpy_s (Address: 0x180007630)

ncrypt.dll

NCryptCloseProtectionDescriptor (Address: 0x180007670)
NCryptCreateProtectionDescriptor (Address: 0x180007660)
NCryptStreamClose (Address: 0x180007678)
NCryptStreamOpenToProtect (Address: 0x180007688)
NCryptStreamOpenToUnprotect (Address: 0x180007680)
NCryptStreamUpdate (Address: 0x180007690)
NCryptUnprotectSecret (Address: 0x180007668)

NTASN1.dll

(Address: 0x1800072a0)

ntdll.dll

RtlAllocateHeap (Address: 0x1800076b0)
RtlFreeHeap (Address: 0x1800076a8)
RtlImageNtHeader (Address: 0x1800076a0)

OLEAUT32.dll

LoadTypeLib (Address: 0x1800072c0)
RegisterTypeLib (Address: 0x1800072b8)
SysAllocString (Address: 0x1800072e0)
SysAllocStringByteLen (Address: 0x1800072d8)
SysAllocStringLen (Address: 0x1800072b0)
SysFreeString (Address: 0x1800072e8)
SysStringByteLen (Address: 0x1800072c8)
SysStringLen (Address: 0x1800072f0)
UnRegisterTypeLib (Address: 0x1800072d0)

PROPSYS.dll

PSPropertyBag_ReadBSTR (Address: 0x180007308)
PSPropertyBag_ReadUnknown (Address: 0x180007300)