VaultRoaming.dll

Description: Vault Roaming

Version: 1.0.0.1

Architecture: 64-bit

Operating System: Windows

SHA256: c171e1c0f96c5dea69323e6908ffba49

File Size: 117.0 KB

Uploaded At: Dec. 1, 2025, 7:41 a.m.

Views: 3

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x3be0)
DllGetClassObject (Ordinal: 2, Address: 0x3c20)
DllInstall (Ordinal: 3, Address: 0x3c40)
DllRegisterServer (Ordinal: 4, Address: 0x3d10)
DllUnregisterServer (Ordinal: 5, Address: 0x3d70)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x180016f08)
CoCreateInstance (Address: 0x180016f28)
CoTaskMemAlloc (Address: 0x180016f18)
CoTaskMemFree (Address: 0x180016f30)
CoWaitForMultipleHandles (Address: 0x180016f10)
StringFromCLSID (Address: 0x180016f38)
StringFromGUID2 (Address: 0x180016f20)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180016f48)
IsDebuggerPresent (Address: 0x180016f50)
OutputDebugStringW (Address: 0x180016f58)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180016f80)
RaiseException (Address: 0x180016f78)
SetLastError (Address: 0x180016f68)
SetUnhandledExceptionFilter (Address: 0x180016f88)
UnhandledExceptionFilter (Address: 0x180016f70)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x180016f98)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180016fa8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180016fc0)
HeapAlloc (Address: 0x180016fc8)
HeapFree (Address: 0x180016fb8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180016fe0)
LocalFree (Address: 0x180016fd8)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x180017018)
GetModuleFileNameA (Address: 0x180017028)
GetModuleFileNameW (Address: 0x180017020)
GetModuleHandleExW (Address: 0x180017000)
GetModuleHandleW (Address: 0x180017008)
GetProcAddress (Address: 0x180016ff0)
LoadLibraryExA (Address: 0x180017010)
LoadLibraryExW (Address: 0x180016ff8)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x180017038)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180017058)
GetThreadLocale (Address: 0x180017050)
SetThreadLocale (Address: 0x180017048)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x180017068)
VirtualProtect (Address: 0x180017070)
VirtualQuery (Address: 0x180017078)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180017088)
GetCurrentProcessId (Address: 0x1800170c0)
GetCurrentThread (Address: 0x1800170b8)
GetCurrentThreadId (Address: 0x180017090)
OpenProcessToken (Address: 0x1800170b0)
OpenThreadToken (Address: 0x180017098)
SetThreadStackGuarantee (Address: 0x1800170a8)
TerminateProcess (Address: 0x1800170a0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800170d0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800170e0)
RegDeleteValueW (Address: 0x1800170f0)
RegGetValueW (Address: 0x1800170e8)
RegOpenKeyExW (Address: 0x1800170f8)
RegQueryInfoKeyW (Address: 0x180017108)
RegSetValueExW (Address: 0x180017100)

api-ms-win-core-registry-l2-1-0.dll

RegCreateKeyW (Address: 0x180017118)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180017138)
RtlLookupFunctionEntry (Address: 0x180017128)
RtlVirtualUnwind (Address: 0x180017130)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x180017148)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x180017158)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800171b0)
AcquireSRWLockShared (Address: 0x1800171b8)
CreateEventExW (Address: 0x180017178)
CreateMutexExW (Address: 0x180017168)
CreateSemaphoreExW (Address: 0x180017170)
DeleteCriticalSection (Address: 0x1800171d8)
EnterCriticalSection (Address: 0x1800171f0)
InitializeCriticalSection (Address: 0x180017190)
InitializeSRWLock (Address: 0x1800171a0)
LeaveCriticalSection (Address: 0x1800171a8)
OpenSemaphoreW (Address: 0x1800171e0)
ReleaseMutex (Address: 0x1800171d0)
ReleaseSemaphore (Address: 0x180017180)
ReleaseSRWLockExclusive (Address: 0x180017188)
ReleaseSRWLockShared (Address: 0x1800171c0)
SetEvent (Address: 0x1800171c8)
WaitForSingleObject (Address: 0x1800171e8)
WaitForSingleObjectEx (Address: 0x180017198)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x180017200)

api-ms-win-core-sysinfo-l1-1-0.dll

GetLocalTime (Address: 0x180017228)
GetSystemInfo (Address: 0x180017220)
GetSystemTimeAsFileTime (Address: 0x180017218)
GetTickCount (Address: 0x180017210)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x180017238)
SystemTimeToFileTime (Address: 0x180017240)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x180017250)
RoTransformError (Address: 0x180017258)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x180017268)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x180017290)
WindowsCreateStringReference (Address: 0x180017278)
WindowsDeleteString (Address: 0x180017298)
WindowsGetStringRawBuffer (Address: 0x180017280)
WindowsIsStringEmpty (Address: 0x180017288)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x1800172c8)
GetTraceEnableLevel (Address: 0x1800172a8)
GetTraceLoggerHandle (Address: 0x1800172b8)
RegisterTraceGuidsW (Address: 0x1800172c0)
TraceMessage (Address: 0x1800172d0)
UnregisterTraceGuids (Address: 0x1800172b0)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1800172f0)
EventSetInformation (Address: 0x1800172e8)
EventUnregister (Address: 0x1800172f8)
EventWriteTransfer (Address: 0x1800172e0)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x180017308)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x180017318)

msvcrt.dll

__C_specific_handler (Address: 0x180017390)
__CxxFrameHandler3 (Address: 0x1800173d0)
__dllonexit (Address: 0x180017370)
_amsg_exit (Address: 0x180017350)
_callnewh (Address: 0x180017328)
_initterm (Address: 0x180017358)
_lock (Address: 0x180017360)
_onexit (Address: 0x180017380)
_purecall (Address: 0x180017398)
_unlock (Address: 0x180017368)
_vsnprintf (Address: 0x1800173d8)
_vsnwprintf (Address: 0x1800173a8)
_wcsicmp (Address: 0x1800173a0)
_XcptFilter (Address: 0x180017348)
free (Address: 0x1800173c0)
malloc (Address: 0x180017388)
memcpy (Address: 0x180017378)
memcpy_s (Address: 0x180017330)
memmove_s (Address: 0x180017338)
memset (Address: 0x1800173e0)
realloc (Address: 0x180017340)
wcscat_s (Address: 0x1800173b8)
wcscmp (Address: 0x1800173e8)
wcscpy_s (Address: 0x1800173c8)
wcsncpy_s (Address: 0x1800173b0)

ntdll.dll

RtlAllocateHeap (Address: 0x1800173f8)
RtlFreeHeap (Address: 0x180017408)
RtlImageNtHeader (Address: 0x180017400)

OLEAUT32.dll

LoadTypeLib (Address: 0x180016e78)
RegisterTypeLib (Address: 0x180016e88)
SysAllocString (Address: 0x180016e70)
SysAllocStringLen (Address: 0x180016ea0)
SysFreeString (Address: 0x180016e90)
SysStringLen (Address: 0x180016e80)
UnRegisterTypeLib (Address: 0x180016e68)
VariantClear (Address: 0x180016e60)
VariantInit (Address: 0x180016e98)

PROPSYS.dll

PSPropertyBag_ReadBOOL (Address: 0x180016eb8)
PSPropertyBag_ReadBSTR (Address: 0x180016ec0)
PSPropertyBag_ReadDWORD (Address: 0x180016ec8)
PSPropertyBag_WriteBOOL (Address: 0x180016ed8)
PSPropertyBag_WriteBSTR (Address: 0x180016eb0)
PSPropertyBag_WriteDWORD (Address: 0x180016ed0)

RPCRT4.dll

UuidEqual (Address: 0x180016ee8)

SspiCli.dll

GetUserNameExW (Address: 0x180016ef8)