Windows.StateRepositoryUpgrade.dll

Description: Windows StateRepository Upgrade

Version: 10.0.19041.6456

Architecture: 64-bit

Operating System: Windows NT

SHA256: 99d82b15b5f7d08b0ec3c93c098821a2

File Size: 271.0 KB

Uploaded At: Dec. 1, 2025, 7:44 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

StateRepository_Migrate (Ordinal: 1, Address: 0x47b0)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-1.dll

GetApplicationUserModelIdFromToken (Address: 0x1800253e8)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1800253f8)
IsDebuggerPresent (Address: 0x180025408)
OutputDebugStringW (Address: 0x180025400)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180025418)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180025428)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180025458)
RaiseException (Address: 0x180025448)
SetLastError (Address: 0x180025440)
SetUnhandledExceptionFilter (Address: 0x180025438)
UnhandledExceptionFilter (Address: 0x180025450)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x180025470)
GetFileAttributesW (Address: 0x180025478)
WriteFile (Address: 0x180025468)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x180025488)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180025498)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800254b8)
HeapAlloc (Address: 0x1800254b0)
HeapFree (Address: 0x1800254a8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1800254d0)
LocalFree (Address: 0x1800254c8)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x1800254f0)
GetModuleFileNameA (Address: 0x1800254e0)
GetModuleHandleExW (Address: 0x180025508)
GetModuleHandleW (Address: 0x1800254f8)
GetProcAddress (Address: 0x180025500)
LoadLibraryExW (Address: 0x1800254e8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180025518)

api-ms-win-core-path-l1-1-0.dll

PathCchCombine (Address: 0x180025528)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180025550)
GetCurrentProcessId (Address: 0x180025578)
GetCurrentThread (Address: 0x180025538)
GetCurrentThreadId (Address: 0x180025560)
OpenProcessToken (Address: 0x180025570)
OpenThreadToken (Address: 0x180025540)
ProcessIdToSessionId (Address: 0x180025568)
SetThreadToken (Address: 0x180025558)
TerminateProcess (Address: 0x180025548)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x180025588)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180025598)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x1800255a8)

api-ms-win-core-realtime-l1-1-0.dll

QueryUnbiasedInterruptTime (Address: 0x1800255b8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800255d8)
RegCreateKeyExW (Address: 0x1800255d0)
RegDeleteTreeW (Address: 0x1800255e0)
RegOpenKeyExW (Address: 0x1800255e8)
RegQueryValueExW (Address: 0x1800255c8)
RegSetValueExW (Address: 0x1800255f0)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180025618)
RtlCaptureStackBackTrace (Address: 0x180025600)
RtlLookupFunctionEntry (Address: 0x180025610)
RtlVirtualUnwind (Address: 0x180025608)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x180025630)
MultiByteToWideChar (Address: 0x180025628)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180025680)
AcquireSRWLockShared (Address: 0x180025670)
CreateMutexExW (Address: 0x180025648)
CreateSemaphoreExW (Address: 0x1800256b0)
DeleteCriticalSection (Address: 0x1800256a8)
EnterCriticalSection (Address: 0x180025650)
InitializeCriticalSectionEx (Address: 0x180025640)
LeaveCriticalSection (Address: 0x180025658)
OpenSemaphoreW (Address: 0x180025668)
ReleaseMutex (Address: 0x180025690)
ReleaseSemaphore (Address: 0x1800256a0)
ReleaseSRWLockExclusive (Address: 0x180025678)
ReleaseSRWLockShared (Address: 0x180025660)
WaitForSingleObject (Address: 0x180025698)
WaitForSingleObjectEx (Address: 0x180025688)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1800256c0)
InitOnceComplete (Address: 0x1800256d0)
Sleep (Address: 0x1800256c8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetLocalTime (Address: 0x1800256e0)
GetSystemTimeAsFileTime (Address: 0x1800256e8)
GetTickCount (Address: 0x1800256f0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180025718)
CreateThreadpoolTimer (Address: 0x180025708)
SetThreadpoolTimer (Address: 0x180025700)
WaitForThreadpoolTimerCallbacks (Address: 0x180025710)

api-ms-win-core-windowserrorreporting-l1-1-1.dll

WerRegisterCustomMetadata (Address: 0x180025728)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x180025738)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateStringReference (Address: 0x180025748)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x180025768)
EventProviderEnabled (Address: 0x180025760)
EventRegister (Address: 0x180025778)
EventSetInformation (Address: 0x180025758)
EventUnregister (Address: 0x180025770)
EventWriteTransfer (Address: 0x180025780)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x180025798)
CreateWellKnownSid (Address: 0x1800257a0)
EqualSid (Address: 0x180025790)
GetLengthSid (Address: 0x1800257a8)
GetTokenInformation (Address: 0x1800257b0)

api-ms-win-security-lsalookup-l1-1-0.dll

LsaLookupClose (Address: 0x1800257c0)
LsaLookupFreeMemory (Address: 0x1800257d0)
LsaLookupGetDomainInfo (Address: 0x1800257d8)
LsaLookupOpenLocalPolicy (Address: 0x1800257c8)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupAccountSidW (Address: 0x1800257e8)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x1800257f8)

msvcrt.dll

__C_specific_handler (Address: 0x180025858)
__CxxFrameHandler3 (Address: 0x1800258b0)
__dllonexit (Address: 0x180025870)
_amsg_exit (Address: 0x180025848)
_callnewh (Address: 0x1800258a0)
_initterm (Address: 0x1800258c0)
_lock (Address: 0x180025860)
_onexit (Address: 0x180025878)
_purecall (Address: 0x180025830)
_unlock (Address: 0x180025868)
_vsnprintf (Address: 0x180025818)
_vsnwprintf (Address: 0x180025888)
_XcptFilter (Address: 0x180025840)
free (Address: 0x180025838)
malloc (Address: 0x180025850)
memcmp (Address: 0x1800258a8)
memcpy (Address: 0x180025898)
memcpy_s (Address: 0x1800258b8)
memmove (Address: 0x180025890)
memmove_s (Address: 0x180025820)
memset (Address: 0x180025880)
realloc (Address: 0x180025808)
strcmp (Address: 0x1800258c8)
toupper (Address: 0x180025828)
wcschr (Address: 0x180025810)

ntdll.dll

NtQueryInformationFile (Address: 0x180025960)
NtQueryInformationProcess (Address: 0x180025950)
NtQueryInformationThread (Address: 0x180025928)
RtlAcquireSRWLockExclusive (Address: 0x180025900)
RtlAcquireSRWLockShared (Address: 0x180025970)
RtlAllocateHeap (Address: 0x180025968)
RtlCompareUnicodeString (Address: 0x180025920)
RtlConvertSidToUnicodeString (Address: 0x1800258e0)
RtlDeleteCriticalSection (Address: 0x180025940)
RtlDeriveCapabilitySidsFromName (Address: 0x180025978)
RtlDetermineDosPathNameType_U (Address: 0x180025998)
RtlEnterCriticalSection (Address: 0x180025938)
RtlExpandEnvironmentStrings (Address: 0x180025910)
RtlFreeHeap (Address: 0x180025990)
RtlFreeUnicodeString (Address: 0x1800258d8)
RtlGetDeviceFamilyInfoEnum (Address: 0x180025988)
RtlInitializeCriticalSection (Address: 0x180025948)
RtlInitializeGenericTableAvl (Address: 0x1800258f0)
RtlInitUnicodeString (Address: 0x180025980)
RtlInsertElementGenericTableAvl (Address: 0x1800258f8)
RtlLeaveCriticalSection (Address: 0x180025930)
RtlLookupElementGenericTableAvl (Address: 0x1800258e8)
RtlNtStatusToDosErrorNoTeb (Address: 0x180025958)
RtlReleaseSRWLockExclusive (Address: 0x180025908)
RtlReleaseSRWLockShared (Address: 0x180025918)

StateRepository.Core.dll

sqlite3_bind_blob (Address: 0x180025320)
sqlite3_bind_int (Address: 0x180025330)
sqlite3_bind_int64 (Address: 0x1800252a8)
sqlite3_bind_text16 (Address: 0x180025328)
sqlite3_changes (Address: 0x180025390)
sqlite3_clear_bindings (Address: 0x180025338)
sqlite3_close (Address: 0x1800253b0)
sqlite3_column_blob (Address: 0x1800252f8)
sqlite3_column_bytes (Address: 0x180025308)
sqlite3_column_int (Address: 0x180025318)
sqlite3_column_int64 (Address: 0x180025310)
sqlite3_column_text16 (Address: 0x180025300)
sqlite3_config (Address: 0x1800252d0)
sqlite3_db_filename (Address: 0x180025380)
sqlite3_db_handle (Address: 0x180025340)
sqlite3_db_status (Address: 0x180025378)
sqlite3_errcode (Address: 0x180025368)
sqlite3_errmsg (Address: 0x1800253a8)
sqlite3_exec (Address: 0x180025348)
sqlite3_expanded_sql (Address: 0x1800252c0)
sqlite3_finalize (Address: 0x1800252e8)
sqlite3_free (Address: 0x180025360)
sqlite3_get_autocommit (Address: 0x180025398)
sqlite3_last_insert_rowid (Address: 0x180025388)
sqlite3_log (Address: 0x1800253a0)
sqlite3_next_stmt (Address: 0x180025370)
sqlite3_prepare_v2 (Address: 0x180025358)
sqlite3_reset (Address: 0x1800252e0)
sqlite3_shutdown (Address: 0x1800253b8)
sqlite3_snprintf (Address: 0x1800252c8)
sqlite3_sql (Address: 0x1800252f0)
sqlite3_status (Address: 0x1800252b8)
sqlite3_step (Address: 0x1800252d8)
sqlite3_stmt_busy (Address: 0x180025350)
sqlite3_vfs_unregister (Address: 0x1800252b0)

Windows.StateRepository.dll

StateRepository_DataAccessLayer_DatabaseCache_Add (Address: 0x1800253c8)
StateRepository_DataAccessLayer_DatabaseCache_Get (Address: 0x1800253d8)
StateRepository_Service_UpdateStatus (Address: 0x1800253d0)