wuapi.dll
Description: Windows Update Client API
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6093
Architecture: 32-bit
Operating System: Windows NT
SHA256: 4b6913617273b0bdecf6549b76a2db6a
File Size: 754.0 KB
Uploaded At: Dec. 1, 2025, 8:08 a.m.
Views: 16
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x26620)
- DllGetClassObject (Ordinal: 2, Address: 0x264b0)
- DllRegisterServer (Ordinal: 3, Address: 0x52ab0)
- DllUnregisterServer (Ordinal: 4, Address: 0x52ac0)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x1009d0a8)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
- CStdStubBuffer2_Connect (Address: 0x1009d0e0)
- CStdStubBuffer2_CountRefs (Address: 0x1009d12c)
- CStdStubBuffer2_Disconnect (Address: 0x1009d0f8)
- CStdStubBuffer2_QueryInterface (Address: 0x1009d134)
- NdrProxyForwardingFunction10 (Address: 0x1009d0bc)
- NdrProxyForwardingFunction11 (Address: 0x1009d0ec)
- NdrProxyForwardingFunction12 (Address: 0x1009d0d0)
- NdrProxyForwardingFunction13 (Address: 0x1009d0c0)
- NdrProxyForwardingFunction14 (Address: 0x1009d148)
- NdrProxyForwardingFunction15 (Address: 0x1009d138)
- NdrProxyForwardingFunction16 (Address: 0x1009d10c)
- NdrProxyForwardingFunction17 (Address: 0x1009d124)
- NdrProxyForwardingFunction18 (Address: 0x1009d114)
- NdrProxyForwardingFunction19 (Address: 0x1009d100)
- NdrProxyForwardingFunction20 (Address: 0x1009d13c)
- NdrProxyForwardingFunction21 (Address: 0x1009d0d4)
- NdrProxyForwardingFunction3 (Address: 0x1009d0d8)
- NdrProxyForwardingFunction4 (Address: 0x1009d0b0)
- NdrProxyForwardingFunction5 (Address: 0x1009d0b4)
- NdrProxyForwardingFunction6 (Address: 0x1009d0fc)
- NdrProxyForwardingFunction7 (Address: 0x1009d0dc)
- NdrProxyForwardingFunction8 (Address: 0x1009d128)
- NdrProxyForwardingFunction9 (Address: 0x1009d0cc)
- ObjectStublessClient10 (Address: 0x1009d0c8)
- ObjectStublessClient11 (Address: 0x1009d130)
- ObjectStublessClient12 (Address: 0x1009d11c)
- ObjectStublessClient13 (Address: 0x1009d140)
- ObjectStublessClient14 (Address: 0x1009d144)
- ObjectStublessClient15 (Address: 0x1009d108)
- ObjectStublessClient18 (Address: 0x1009d110)
- ObjectStublessClient19 (Address: 0x1009d0f0)
- ObjectStublessClient22 (Address: 0x1009d120)
- ObjectStublessClient23 (Address: 0x1009d104)
- ObjectStublessClient24 (Address: 0x1009d0e4)
- ObjectStublessClient3 (Address: 0x1009d118)
- ObjectStublessClient4 (Address: 0x1009d0e8)
- ObjectStublessClient7 (Address: 0x1009d0f4)
- ObjectStublessClient8 (Address: 0x1009d0b8)
- ObjectStublessClient9 (Address: 0x1009d0c4)
api-ms-win-core-datetime-l1-1-1.dll
- GetDateFormatEx (Address: 0x1009d150)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1009d160)
- IsDebuggerPresent (Address: 0x1009d15c)
- OutputDebugStringW (Address: 0x1009d158)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x1009d168)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x1009d170)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1009d188)
- RaiseException (Address: 0x1009d180)
- SetLastError (Address: 0x1009d184)
- SetUnhandledExceptionFilter (Address: 0x1009d178)
- UnhandledExceptionFilter (Address: 0x1009d17c)
api-ms-win-core-file-l1-1-0.dll
- CreateDirectoryW (Address: 0x1009d1b4)
- CreateFileW (Address: 0x1009d1a4)
- GetDriveTypeW (Address: 0x1009d1ac)
- GetFileAttributesW (Address: 0x1009d1bc)
- GetFileSizeEx (Address: 0x1009d198)
- GetFileType (Address: 0x1009d190)
- GetVolumePathNameW (Address: 0x1009d1a8)
- LocalFileTimeToFileTime (Address: 0x1009d19c)
- ReadFile (Address: 0x1009d1b8)
- SetFilePointer (Address: 0x1009d1b0)
- SetFileTime (Address: 0x1009d1a0)
- WriteFile (Address: 0x1009d194)
api-ms-win-core-file-l1-2-0.dll
- GetVolumeNameForVolumeMountPointW (Address: 0x1009d1c4)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1009d1cc)
- DuplicateHandle (Address: 0x1009d1d0)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1009d1e0)
- HeapAlloc (Address: 0x1009d1dc)
- HeapFree (Address: 0x1009d1d8)
- HeapReAlloc (Address: 0x1009d1e4)
api-ms-win-core-heap-l2-1-0.dll
- GlobalAlloc (Address: 0x1009d1f0)
- GlobalFree (Address: 0x1009d1f8)
- LocalAlloc (Address: 0x1009d1ec)
- LocalFree (Address: 0x1009d1f4)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x1009d200)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- DosDateTimeToFileTime (Address: 0x1009d208)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x1009d230)
- FindResourceExW (Address: 0x1009d228)
- FreeLibrary (Address: 0x1009d214)
- GetModuleFileNameA (Address: 0x1009d23c)
- GetModuleFileNameW (Address: 0x1009d22c)
- GetModuleHandleExW (Address: 0x1009d240)
- GetModuleHandleW (Address: 0x1009d21c)
- GetProcAddress (Address: 0x1009d224)
- LoadLibraryExW (Address: 0x1009d210)
- LoadResource (Address: 0x1009d220)
- LoadStringW (Address: 0x1009d238)
- LockResource (Address: 0x1009d218)
- SizeofResource (Address: 0x1009d234)
api-ms-win-core-libraryloader-l1-2-1.dll
- FindResourceW (Address: 0x1009d248)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x1009d254)
- GetThreadLocale (Address: 0x1009d258)
- SetThreadLocale (Address: 0x1009d250)
api-ms-win-core-localization-obsolete-l1-2-0.dll
- CompareStringA (Address: 0x1009d268)
- GetNumberFormatW (Address: 0x1009d260)
- GetUserDefaultUILanguage (Address: 0x1009d264)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x1009d27c)
- MapViewOfFile (Address: 0x1009d274)
- MapViewOfFileEx (Address: 0x1009d270)
- UnmapViewOfFile (Address: 0x1009d278)
api-ms-win-core-privateprofile-l1-1-0.dll
- GetPrivateProfileStringW (Address: 0x1009d284)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x1009d28c)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessW (Address: 0x1009d2a8)
- CreateThread (Address: 0x1009d2a4)
- GetCurrentProcess (Address: 0x1009d2b0)
- GetCurrentProcessId (Address: 0x1009d2a0)
- GetCurrentThread (Address: 0x1009d294)
- GetCurrentThreadId (Address: 0x1009d2ac)
- OpenProcessToken (Address: 0x1009d29c)
- OpenThreadToken (Address: 0x1009d298)
- TerminateProcess (Address: 0x1009d2b4)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x1009d2bc)
- OpenProcess (Address: 0x1009d2c0)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1009d2c8)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1009d2f0)
- RegCreateKeyExW (Address: 0x1009d2ec)
- RegDeleteValueW (Address: 0x1009d2d4)
- RegEnumKeyExW (Address: 0x1009d2e4)
- RegOpenCurrentUser (Address: 0x1009d2d0)
- RegOpenKeyExW (Address: 0x1009d2e0)
- RegQueryInfoKeyW (Address: 0x1009d2e8)
- RegQueryValueExW (Address: 0x1009d2d8)
- RegSetValueExW (Address: 0x1009d2dc)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathFindFileNameW (Address: 0x1009d2fc)
- PathIsRelativeW (Address: 0x1009d304)
- PathIsRootW (Address: 0x1009d2f8)
- PathIsUNCW (Address: 0x1009d308)
- PathStripToRootW (Address: 0x1009d300)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
- StrChrW (Address: 0x1009d314)
- StrRChrW (Address: 0x1009d310)
api-ms-win-core-sidebyside-l1-1-0.dll
- ActivateActCtx (Address: 0x1009d320)
- CreateActCtxW (Address: 0x1009d31c)
- DeactivateActCtx (Address: 0x1009d328)
- ReleaseActCtx (Address: 0x1009d324)
api-ms-win-core-string-l1-1-0.dll
- CompareStringW (Address: 0x1009d334)
- MultiByteToWideChar (Address: 0x1009d338)
- WideCharToMultiByte (Address: 0x1009d330)
api-ms-win-core-string-l2-1-0.dll
- CharNextW (Address: 0x1009d340)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpiW (Address: 0x1009d348)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x1009d38c)
- AcquireSRWLockShared (Address: 0x1009d364)
- CreateEventW (Address: 0x1009d35c)
- CreateMutexExW (Address: 0x1009d36c)
- CreateSemaphoreExW (Address: 0x1009d390)
- DeleteCriticalSection (Address: 0x1009d358)
- EnterCriticalSection (Address: 0x1009d398)
- InitializeCriticalSection (Address: 0x1009d354)
- InitializeCriticalSectionEx (Address: 0x1009d378)
- LeaveCriticalSection (Address: 0x1009d388)
- OpenEventW (Address: 0x1009d370)
- OpenSemaphoreW (Address: 0x1009d380)
- ReleaseMutex (Address: 0x1009d368)
- ReleaseSemaphore (Address: 0x1009d394)
- ReleaseSRWLockExclusive (Address: 0x1009d39c)
- ReleaseSRWLockShared (Address: 0x1009d37c)
- ResetEvent (Address: 0x1009d374)
- SetEvent (Address: 0x1009d360)
- WaitForSingleObject (Address: 0x1009d350)
- WaitForSingleObjectEx (Address: 0x1009d384)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x1009d3a8)
- InitOnceComplete (Address: 0x1009d3a4)
- Sleep (Address: 0x1009d3ac)
api-ms-win-core-synch-l1-2-1.dll
- WaitForMultipleObjects (Address: 0x1009d3b4)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x1009d3bc)
- GetSystemTimeAsFileTime (Address: 0x1009d3c4)
- GetSystemWindowsDirectoryW (Address: 0x1009d3c0)
- GetTickCount (Address: 0x1009d3c8)
api-ms-win-core-sysinfo-l1-2-0.dll
- GetNativeSystemInfo (Address: 0x1009d3d0)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x1009d3e0)
- CreateThreadpoolTimer (Address: 0x1009d3dc)
- SetThreadpoolTimer (Address: 0x1009d3e4)
- WaitForThreadpoolTimerCallbacks (Address: 0x1009d3d8)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- CreateTimerQueueTimer (Address: 0x1009d3ec)
- DeleteTimerQueueTimer (Address: 0x1009d3f0)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x1009d3f8)
- SystemTimeToFileTime (Address: 0x1009d3fc)
api-ms-win-core-version-l1-1-0.dll
- GetFileVersionInfoExW (Address: 0x1009d404)
- GetFileVersionInfoSizeExW (Address: 0x1009d408)
- VerQueryValueW (Address: 0x1009d40c)
api-ms-win-core-wow64-l1-1-0.dll
- IsWow64Process (Address: 0x1009d418)
- Wow64DisableWow64FsRedirection (Address: 0x1009d414)
- Wow64RevertWow64FsRedirection (Address: 0x1009d41c)
api-ms-win-crt-private-l1-1-0.dll
- __CxxFrameHandler3 (Address: 0x1009d4dc)
- __std_terminate (Address: 0x1009d4d8)
- _CxxThrowException (Address: 0x1009d47c)
- _except_handler4_common (Address: 0x1009d478)
- _o___std_exception_copy (Address: 0x1009d4c4)
- _o___std_exception_destroy (Address: 0x1009d4c0)
- _o___std_type_info_destroy_list (Address: 0x1009d4bc)
- _o___stdio_common_vsnprintf_s (Address: 0x1009d4b8)
- _o___stdio_common_vsprintf_s (Address: 0x1009d4b4)
- _o___stdio_common_vswprintf (Address: 0x1009d4b0)
- _o__callnewh (Address: 0x1009d4a4)
- _o__cexit (Address: 0x1009d4a0)
- _o__configure_narrow_argv (Address: 0x1009d49c)
- _o__crt_atexit (Address: 0x1009d490)
- _o__errno (Address: 0x1009d484)
- _o__execute_onexit_table (Address: 0x1009d480)
- _o__get_errno (Address: 0x1009d4c8)
- _o__initialize_narrow_environment (Address: 0x1009d498)
- _o__initialize_onexit_table (Address: 0x1009d494)
- _o__invalid_parameter_noinfo (Address: 0x1009d48c)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x1009d488)
- _o__purecall (Address: 0x1009d424)
- _o__recalloc (Address: 0x1009d428)
- _o__register_onexit_function (Address: 0x1009d42c)
- _o__seh_filter_dll (Address: 0x1009d430)
- _o__set_errno (Address: 0x1009d434)
- _o__wtol (Address: 0x1009d4cc)
- _o_free (Address: 0x1009d43c)
- _o_iswspace (Address: 0x1009d440)
- _o_malloc (Address: 0x1009d444)
- _o_mbstowcs_s (Address: 0x1009d448)
- _o_qsort (Address: 0x1009d44c)
- _o_strcpy_s (Address: 0x1009d450)
- _o_strncpy_s (Address: 0x1009d454)
- _o_strtol (Address: 0x1009d458)
- _o_terminate (Address: 0x1009d45c)
- _o_toupper (Address: 0x1009d460)
- _o_wcscat_s (Address: 0x1009d464)
- _o_wcscpy_s (Address: 0x1009d468)
- _o_wcsncpy_s (Address: 0x1009d46c)
- _o_wcstombs_s (Address: 0x1009d470)
- _o_wcstoul (Address: 0x1009d474)
- memcmp (Address: 0x1009d4e0)
- memcpy (Address: 0x1009d4e4)
- memmove (Address: 0x1009d438)
- strchr (Address: 0x1009d4d4)
- strrchr (Address: 0x1009d4d0)
- wcsrchr (Address: 0x1009d4ac)
- wcsstr (Address: 0x1009d4a8)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x1009d4ec)
- _initterm_e (Address: 0x1009d4f0)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x1009d4f8)
api-ms-win-eventing-provider-l1-1-0.dll
- EventProviderEnabled (Address: 0x1009d50c)
- EventRegister (Address: 0x1009d510)
- EventSetInformation (Address: 0x1009d500)
- EventUnregister (Address: 0x1009d508)
- EventWriteTransfer (Address: 0x1009d504)
api-ms-win-security-base-l1-1-0.dll
- AdjustTokenPrivileges (Address: 0x1009d530)
- AllocateAndInitializeSid (Address: 0x1009d518)
- CheckTokenMembership (Address: 0x1009d520)
- CopySid (Address: 0x1009d51c)
- DuplicateToken (Address: 0x1009d528)
- DuplicateTokenEx (Address: 0x1009d544)
- FreeSid (Address: 0x1009d524)
- GetLengthSid (Address: 0x1009d540)
- GetTokenInformation (Address: 0x1009d548)
- ImpersonateLoggedOnUser (Address: 0x1009d538)
- ImpersonateSelf (Address: 0x1009d52c)
- IsValidSid (Address: 0x1009d53c)
- RevertToSelf (Address: 0x1009d534)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x1009d550)
- ConvertStringSidToSidW (Address: 0x1009d554)
api-ms-win-service-management-l1-1-0.dll
- CloseServiceHandle (Address: 0x1009d55c)
- OpenSCManagerW (Address: 0x1009d568)
- OpenServiceW (Address: 0x1009d560)
- StartServiceW (Address: 0x1009d564)
api-ms-win-service-management-l2-1-0.dll
- ChangeServiceConfig2W (Address: 0x1009d570)
- ChangeServiceConfigW (Address: 0x1009d578)
- QueryServiceConfig2W (Address: 0x1009d574)
- QueryServiceConfigW (Address: 0x1009d57c)
api-ms-win-service-winsvc-l1-1-0.dll
- QueryServiceStatus (Address: 0x1009d584)
api-ms-win-shcore-thread-l1-1-0.dll
- GetProcessReference (Address: 0x1009d58c)
api-ms-win-stateseparation-helpers-l1-1-0.dll
- GetPersistedRegistryLocationW (Address: 0x1009d594)
CRYPT32.dll
- CertCloseStore (Address: 0x1009d028)
- CertControlStore (Address: 0x1009d024)
- CertFindCertificateInStore (Address: 0x1009d000)
- CertFreeCertificateContext (Address: 0x1009d020)
- CertGetCertificateContextProperty (Address: 0x1009d00c)
- CertGetEnhancedKeyUsage (Address: 0x1009d01c)
- CertOpenStore (Address: 0x1009d018)
- CertVerifyCertificateChainPolicy (Address: 0x1009d010)
- CryptHashPublicKeyInfo (Address: 0x1009d014)
- CryptProtectData (Address: 0x1009d004)
- CryptUnprotectData (Address: 0x1009d008)
msvcp_win.dll
- ?_Xlength_error@std@@YAXPBD@Z (Address: 0x1009d59c)
RPCRT4.dll
- CStdStubBuffer_AddRef (Address: 0x1009d074)
- CStdStubBuffer_Connect (Address: 0x1009d038)
- CStdStubBuffer_CountRefs (Address: 0x1009d060)
- CStdStubBuffer_DebugServerQueryInterface (Address: 0x1009d084)
- CStdStubBuffer_DebugServerRelease (Address: 0x1009d04c)
- CStdStubBuffer_Disconnect (Address: 0x1009d048)
- CStdStubBuffer_Invoke (Address: 0x1009d09c)
- CStdStubBuffer_IsIIDSupported (Address: 0x1009d040)
- CStdStubBuffer_QueryInterface (Address: 0x1009d05c)
- IUnknown_AddRef_Proxy (Address: 0x1009d088)
- IUnknown_QueryInterface_Proxy (Address: 0x1009d044)
- IUnknown_Release_Proxy (Address: 0x1009d064)
- NdrCStdStubBuffer_Release (Address: 0x1009d03c)
- NdrCStdStubBuffer2_Release (Address: 0x1009d090)
- NdrDllCanUnloadNow (Address: 0x1009d034)
- NdrDllGetClassObject (Address: 0x1009d030)
- NdrOleAllocate (Address: 0x1009d050)
- NdrOleFree (Address: 0x1009d080)
- NdrStubCall2 (Address: 0x1009d094)
- NdrStubForwardingFunction (Address: 0x1009d098)
- RpcServerInqCallAttributesW (Address: 0x1009d0a0)
- RpcStringFreeA (Address: 0x1009d08c)
- RpcStringFreeW (Address: 0x1009d058)
- UuidCompare (Address: 0x1009d07c)
- UuidCreate (Address: 0x1009d070)
- UuidCreateNil (Address: 0x1009d078)
- UuidFromStringW (Address: 0x1009d06c)
- UuidToStringA (Address: 0x1009d068)
- UuidToStringW (Address: 0x1009d054)