wuapi.dll

Description: Windows Update Client API

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6093

Architecture: 64-bit

Operating System: Windows NT

SHA256: 7d8428f22108b03fa3e938cfead44b7d

File Size: 945.0 KB

Uploaded At: Dec. 1, 2025, 7:45 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x208c0)
  • DllGetClassObject (Ordinal: 2, Address: 0x1bbc0)
  • DllRegisterServer (Ordinal: 3, Address: 0x553f0)
  • DllUnregisterServer (Ordinal: 4, Address: 0x55460)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x1800a6440)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • CStdStubBuffer2_Connect (Address: 0x1800a6458)
  • CStdStubBuffer2_CountRefs (Address: 0x1800a6578)
  • CStdStubBuffer2_Disconnect (Address: 0x1800a64f8)
  • CStdStubBuffer2_QueryInterface (Address: 0x1800a64c0)
  • NdrProxyForwardingFunction10 (Address: 0x1800a6490)
  • NdrProxyForwardingFunction11 (Address: 0x1800a64d8)
  • NdrProxyForwardingFunction12 (Address: 0x1800a64d0)
  • NdrProxyForwardingFunction13 (Address: 0x1800a64b0)
  • NdrProxyForwardingFunction14 (Address: 0x1800a6510)
  • NdrProxyForwardingFunction15 (Address: 0x1800a6518)
  • NdrProxyForwardingFunction16 (Address: 0x1800a6560)
  • NdrProxyForwardingFunction17 (Address: 0x1800a64e8)
  • NdrProxyForwardingFunction18 (Address: 0x1800a64e0)
  • NdrProxyForwardingFunction19 (Address: 0x1800a6530)
  • NdrProxyForwardingFunction20 (Address: 0x1800a6528)
  • NdrProxyForwardingFunction21 (Address: 0x1800a64b8)
  • NdrProxyForwardingFunction3 (Address: 0x1800a6470)
  • NdrProxyForwardingFunction4 (Address: 0x1800a64a8)
  • NdrProxyForwardingFunction5 (Address: 0x1800a64a0)
  • NdrProxyForwardingFunction6 (Address: 0x1800a6500)
  • NdrProxyForwardingFunction7 (Address: 0x1800a6450)
  • NdrProxyForwardingFunction8 (Address: 0x1800a6580)
  • NdrProxyForwardingFunction9 (Address: 0x1800a6478)
  • ObjectStublessClient10 (Address: 0x1800a6480)
  • ObjectStublessClient11 (Address: 0x1800a6538)
  • ObjectStublessClient12 (Address: 0x1800a6508)
  • ObjectStublessClient13 (Address: 0x1800a6558)
  • ObjectStublessClient14 (Address: 0x1800a6520)
  • ObjectStublessClient15 (Address: 0x1800a6550)
  • ObjectStublessClient18 (Address: 0x1800a64c8)
  • ObjectStublessClient19 (Address: 0x1800a6548)
  • ObjectStublessClient22 (Address: 0x1800a6570)
  • ObjectStublessClient23 (Address: 0x1800a6540)
  • ObjectStublessClient24 (Address: 0x1800a6460)
  • ObjectStublessClient3 (Address: 0x1800a6568)
  • ObjectStublessClient4 (Address: 0x1800a6468)
  • ObjectStublessClient7 (Address: 0x1800a64f0)
  • ObjectStublessClient8 (Address: 0x1800a6498)
  • ObjectStublessClient9 (Address: 0x1800a6488)
api-ms-win-core-datetime-l1-1-1.dll
  • GetDateFormatEx (Address: 0x1800a6590)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1800a65b0)
  • IsDebuggerPresent (Address: 0x1800a65a8)
  • OutputDebugStringW (Address: 0x1800a65a0)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1800a65c0)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1800a65d0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800a65f8)
  • RaiseException (Address: 0x1800a65e8)
  • SetLastError (Address: 0x1800a65e0)
  • SetUnhandledExceptionFilter (Address: 0x1800a6600)
  • UnhandledExceptionFilter (Address: 0x1800a65f0)
api-ms-win-core-file-l1-1-0.dll
  • CreateDirectoryW (Address: 0x1800a6658)
  • CreateFileW (Address: 0x1800a6650)
  • GetDriveTypeW (Address: 0x1800a6638)
  • GetFileAttributesW (Address: 0x1800a6610)
  • GetFileSizeEx (Address: 0x1800a6660)
  • GetFileType (Address: 0x1800a6630)
  • GetVolumePathNameW (Address: 0x1800a6668)
  • LocalFileTimeToFileTime (Address: 0x1800a6640)
  • ReadFile (Address: 0x1800a6628)
  • SetFilePointer (Address: 0x1800a6648)
  • SetFileTime (Address: 0x1800a6618)
  • WriteFile (Address: 0x1800a6620)
api-ms-win-core-file-l1-2-0.dll
  • GetVolumeNameForVolumeMountPointW (Address: 0x1800a6678)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800a6688)
  • DuplicateHandle (Address: 0x1800a6690)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800a66b0)
  • HeapAlloc (Address: 0x1800a66a8)
  • HeapFree (Address: 0x1800a66b8)
  • HeapReAlloc (Address: 0x1800a66a0)
api-ms-win-core-heap-l2-1-0.dll
  • GlobalAlloc (Address: 0x1800a66e0)
  • GlobalFree (Address: 0x1800a66c8)
  • LocalAlloc (Address: 0x1800a66d0)
  • LocalFree (Address: 0x1800a66d8)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x1800a66f0)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • DosDateTimeToFileTime (Address: 0x1800a6700)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x1800a6768)
  • FindResourceExW (Address: 0x1800a6720)
  • FreeLibrary (Address: 0x1800a6738)
  • GetModuleFileNameA (Address: 0x1800a6758)
  • GetModuleFileNameW (Address: 0x1800a6740)
  • GetModuleHandleExW (Address: 0x1800a6728)
  • GetModuleHandleW (Address: 0x1800a6750)
  • GetProcAddress (Address: 0x1800a6770)
  • LoadLibraryExW (Address: 0x1800a6730)
  • LoadResource (Address: 0x1800a6718)
  • LoadStringW (Address: 0x1800a6748)
  • LockResource (Address: 0x1800a6710)
  • SizeofResource (Address: 0x1800a6760)
api-ms-win-core-libraryloader-l1-2-1.dll
  • FindResourceW (Address: 0x1800a6780)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800a6798)
  • GetThreadLocale (Address: 0x1800a67a0)
  • SetThreadLocale (Address: 0x1800a6790)
api-ms-win-core-localization-obsolete-l1-2-0.dll
  • CompareStringA (Address: 0x1800a67b8)
  • GetNumberFormatW (Address: 0x1800a67b0)
  • GetUserDefaultUILanguage (Address: 0x1800a67c0)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x1800a67e0)
  • MapViewOfFile (Address: 0x1800a67e8)
  • MapViewOfFileEx (Address: 0x1800a67d0)
  • UnmapViewOfFile (Address: 0x1800a67d8)
api-ms-win-core-privateprofile-l1-1-0.dll
  • GetPrivateProfileStringW (Address: 0x1800a67f8)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1800a6808)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateProcessW (Address: 0x1800a6828)
  • CreateThread (Address: 0x1800a6848)
  • GetCurrentProcess (Address: 0x1800a6830)
  • GetCurrentProcessId (Address: 0x1800a6840)
  • GetCurrentThread (Address: 0x1800a6858)
  • GetCurrentThreadId (Address: 0x1800a6818)
  • OpenProcessToken (Address: 0x1800a6850)
  • OpenThreadToken (Address: 0x1800a6820)
  • TerminateProcess (Address: 0x1800a6838)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x1800a6868)
  • OpenProcess (Address: 0x1800a6870)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800a6880)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1800a68a8)
  • RegCreateKeyExW (Address: 0x1800a6890)
  • RegDeleteValueW (Address: 0x1800a6898)
  • RegEnumKeyExW (Address: 0x1800a68b8)
  • RegOpenCurrentUser (Address: 0x1800a68c8)
  • RegOpenKeyExW (Address: 0x1800a68b0)
  • RegQueryInfoKeyW (Address: 0x1800a68c0)
  • RegQueryValueExW (Address: 0x1800a68d0)
  • RegSetValueExW (Address: 0x1800a68a0)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x1800a68f0)
  • RtlLookupFunctionEntry (Address: 0x1800a68e8)
  • RtlVirtualUnwind (Address: 0x1800a68e0)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFindFileNameW (Address: 0x1800a6900)
  • PathIsRelativeW (Address: 0x1800a6918)
  • PathIsRootW (Address: 0x1800a6910)
  • PathIsUNCW (Address: 0x1800a6920)
  • PathStripToRootW (Address: 0x1800a6908)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
  • StrChrW (Address: 0x1800a6938)
  • StrRChrW (Address: 0x1800a6930)
api-ms-win-core-sidebyside-l1-1-0.dll
  • ActivateActCtx (Address: 0x1800a6950)
  • CreateActCtxW (Address: 0x1800a6948)
  • DeactivateActCtx (Address: 0x1800a6960)
  • ReleaseActCtx (Address: 0x1800a6958)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringW (Address: 0x1800a6978)
  • MultiByteToWideChar (Address: 0x1800a6980)
  • WideCharToMultiByte (Address: 0x1800a6970)
api-ms-win-core-string-l2-1-0.dll
  • CharNextW (Address: 0x1800a6990)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpiW (Address: 0x1800a69a0)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800a6a28)
  • AcquireSRWLockShared (Address: 0x1800a69d8)
  • CreateEventW (Address: 0x1800a69c8)
  • CreateMutexExW (Address: 0x1800a69e8)
  • CreateSemaphoreExW (Address: 0x1800a6a30)
  • DeleteCriticalSection (Address: 0x1800a69c0)
  • EnterCriticalSection (Address: 0x1800a6a40)
  • InitializeCriticalSection (Address: 0x1800a69b8)
  • InitializeCriticalSectionEx (Address: 0x1800a6a00)
  • LeaveCriticalSection (Address: 0x1800a6a20)
  • OpenEventW (Address: 0x1800a69f0)
  • OpenSemaphoreW (Address: 0x1800a6a10)
  • ReleaseMutex (Address: 0x1800a69e0)
  • ReleaseSemaphore (Address: 0x1800a6a38)
  • ReleaseSRWLockExclusive (Address: 0x1800a6a48)
  • ReleaseSRWLockShared (Address: 0x1800a6a08)
  • ResetEvent (Address: 0x1800a69f8)
  • SetEvent (Address: 0x1800a69d0)
  • WaitForSingleObject (Address: 0x1800a69b0)
  • WaitForSingleObjectEx (Address: 0x1800a6a18)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1800a6a60)
  • InitOnceComplete (Address: 0x1800a6a58)
  • Sleep (Address: 0x1800a6a68)
api-ms-win-core-synch-l1-2-1.dll
  • WaitForMultipleObjects (Address: 0x1800a6a78)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x1800a6a88)
  • GetSystemTimeAsFileTime (Address: 0x1800a6a98)
  • GetSystemWindowsDirectoryW (Address: 0x1800a6a90)
  • GetTickCount (Address: 0x1800a6aa0)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetNativeSystemInfo (Address: 0x1800a6ab0)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1800a6ad0)
  • CreateThreadpoolTimer (Address: 0x1800a6ac8)
  • SetThreadpoolTimer (Address: 0x1800a6ad8)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800a6ac0)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • CreateTimerQueueTimer (Address: 0x1800a6ae8)
  • DeleteTimerQueueTimer (Address: 0x1800a6af0)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x1800a6b00)
  • SystemTimeToFileTime (Address: 0x1800a6b08)
api-ms-win-core-version-l1-1-0.dll
  • GetFileVersionInfoExW (Address: 0x1800a6b18)
  • GetFileVersionInfoSizeExW (Address: 0x1800a6b20)
  • VerQueryValueW (Address: 0x1800a6b28)
api-ms-win-core-wow64-l1-1-0.dll
  • IsWow64Process (Address: 0x1800a6b40)
  • Wow64DisableWow64FsRedirection (Address: 0x1800a6b38)
  • Wow64RevertWow64FsRedirection (Address: 0x1800a6b48)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x1800a6cc0)
  • __CxxFrameHandler3 (Address: 0x1800a6c08)
  • __CxxFrameHandler4 (Address: 0x1800a6cd0)
  • __std_terminate (Address: 0x1800a6cc8)
  • _CxxThrowException (Address: 0x1800a6c10)
  • _o___std_exception_copy (Address: 0x1800a6ca8)
  • _o___std_exception_destroy (Address: 0x1800a6ca0)
  • _o___std_type_info_destroy_list (Address: 0x1800a6c98)
  • _o___stdio_common_vsnprintf_s (Address: 0x1800a6c90)
  • _o___stdio_common_vsprintf_s (Address: 0x1800a6c88)
  • _o___stdio_common_vswprintf (Address: 0x1800a6c80)
  • _o__callnewh (Address: 0x1800a6c50)
  • _o__cexit (Address: 0x1800a6c48)
  • _o__configure_narrow_argv (Address: 0x1800a6c38)
  • _o__crt_atexit (Address: 0x1800a6c30)
  • _o__errno (Address: 0x1800a6c28)
  • _o__execute_onexit_table (Address: 0x1800a6c20)
  • _o__get_errno (Address: 0x1800a6c18)
  • _o__initialize_narrow_environment (Address: 0x1800a6c78)
  • _o__initialize_onexit_table (Address: 0x1800a6c70)
  • _o__invalid_parameter_noinfo (Address: 0x1800a6c68)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x1800a6c60)
  • _o__purecall (Address: 0x1800a6b58)
  • _o__recalloc (Address: 0x1800a6b60)
  • _o__register_onexit_function (Address: 0x1800a6b68)
  • _o__seh_filter_dll (Address: 0x1800a6b70)
  • _o__set_errno (Address: 0x1800a6b78)
  • _o__wtol (Address: 0x1800a6b88)
  • _o_free (Address: 0x1800a6b90)
  • _o_iswspace (Address: 0x1800a6b98)
  • _o_malloc (Address: 0x1800a6ba0)
  • _o_mbstowcs_s (Address: 0x1800a6ba8)
  • _o_qsort (Address: 0x1800a6bb0)
  • _o_strcpy_s (Address: 0x1800a6bb8)
  • _o_strncpy_s (Address: 0x1800a6bc0)
  • _o_strtol (Address: 0x1800a6bc8)
  • _o_terminate (Address: 0x1800a6bd0)
  • _o_toupper (Address: 0x1800a6bd8)
  • _o_wcscat_s (Address: 0x1800a6be0)
  • _o_wcscpy_s (Address: 0x1800a6be8)
  • _o_wcsncpy_s (Address: 0x1800a6bf0)
  • _o_wcstombs_s (Address: 0x1800a6bf8)
  • _o_wcstoul (Address: 0x1800a6c00)
  • memcmp (Address: 0x1800a6cd8)
  • memcpy (Address: 0x1800a6ce0)
  • memmove (Address: 0x1800a6b80)
  • strchr (Address: 0x1800a6cb8)
  • strrchr (Address: 0x1800a6cb0)
  • wcsrchr (Address: 0x1800a6c58)
  • wcsstr (Address: 0x1800a6c40)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x1800a6cf0)
  • _initterm_e (Address: 0x1800a6cf8)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x1800a6d08)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventProviderEnabled (Address: 0x1800a6d30)
  • EventRegister (Address: 0x1800a6d38)
  • EventSetInformation (Address: 0x1800a6d18)
  • EventUnregister (Address: 0x1800a6d28)
  • EventWriteTransfer (Address: 0x1800a6d20)
api-ms-win-security-base-l1-1-0.dll
  • AdjustTokenPrivileges (Address: 0x1800a6d78)
  • AllocateAndInitializeSid (Address: 0x1800a6d48)
  • CheckTokenMembership (Address: 0x1800a6d58)
  • CopySid (Address: 0x1800a6d50)
  • DuplicateToken (Address: 0x1800a6d68)
  • DuplicateTokenEx (Address: 0x1800a6da0)
  • FreeSid (Address: 0x1800a6d60)
  • GetLengthSid (Address: 0x1800a6d98)
  • GetTokenInformation (Address: 0x1800a6da8)
  • ImpersonateLoggedOnUser (Address: 0x1800a6d88)
  • ImpersonateSelf (Address: 0x1800a6d70)
  • IsValidSid (Address: 0x1800a6d90)
  • RevertToSelf (Address: 0x1800a6d80)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x1800a6db8)
  • ConvertStringSidToSidW (Address: 0x1800a6dc0)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x1800a6dd0)
  • OpenSCManagerW (Address: 0x1800a6de8)
  • OpenServiceW (Address: 0x1800a6dd8)
  • StartServiceW (Address: 0x1800a6de0)
api-ms-win-service-management-l2-1-0.dll
  • ChangeServiceConfig2W (Address: 0x1800a6df8)
  • ChangeServiceConfigW (Address: 0x1800a6e08)
  • QueryServiceConfig2W (Address: 0x1800a6e00)
  • QueryServiceConfigW (Address: 0x1800a6e10)
api-ms-win-service-winsvc-l1-1-0.dll
  • QueryServiceStatus (Address: 0x1800a6e20)
api-ms-win-shcore-thread-l1-1-0.dll
  • GetProcessReference (Address: 0x1800a6e30)
api-ms-win-stateseparation-helpers-l1-1-0.dll
  • GetPersistedRegistryLocationW (Address: 0x1800a6e40)
CRYPT32.dll
  • CertCloseStore (Address: 0x1800a6330)
  • CertControlStore (Address: 0x1800a6340)
  • CertFindCertificateInStore (Address: 0x1800a62f0)
  • CertFreeCertificateContext (Address: 0x1800a6338)
  • CertGetCertificateContextProperty (Address: 0x1800a6308)
  • CertGetEnhancedKeyUsage (Address: 0x1800a6328)
  • CertOpenStore (Address: 0x1800a6318)
  • CertVerifyCertificateChainPolicy (Address: 0x1800a6310)
  • CryptHashPublicKeyInfo (Address: 0x1800a6320)
  • CryptProtectData (Address: 0x1800a62f8)
  • CryptUnprotectData (Address: 0x1800a6300)
msvcp_win.dll
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800a6e50)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x1800a63e8)
  • CStdStubBuffer_Connect (Address: 0x1800a6390)
  • CStdStubBuffer_CountRefs (Address: 0x1800a6370)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x1800a6410)
  • CStdStubBuffer_DebugServerRelease (Address: 0x1800a6408)
  • CStdStubBuffer_Disconnect (Address: 0x1800a63e0)
  • CStdStubBuffer_Invoke (Address: 0x1800a6428)
  • CStdStubBuffer_IsIIDSupported (Address: 0x1800a6398)
  • CStdStubBuffer_QueryInterface (Address: 0x1800a6400)
  • IUnknown_AddRef_Proxy (Address: 0x1800a6418)
  • IUnknown_QueryInterface_Proxy (Address: 0x1800a63c0)
  • IUnknown_Release_Proxy (Address: 0x1800a63c8)
  • NdrCStdStubBuffer_Release (Address: 0x1800a6350)
  • NdrCStdStubBuffer2_Release (Address: 0x1800a6378)
  • NdrDllCanUnloadNow (Address: 0x1800a6358)
  • NdrDllGetClassObject (Address: 0x1800a6368)
  • NdrOleAllocate (Address: 0x1800a6360)
  • NdrOleFree (Address: 0x1800a63f0)
  • NdrStubCall3 (Address: 0x1800a63a0)
  • NdrStubForwardingFunction (Address: 0x1800a6420)
  • RpcServerInqCallAttributesW (Address: 0x1800a6430)
  • RpcStringFreeA (Address: 0x1800a63f8)
  • RpcStringFreeW (Address: 0x1800a6388)
  • UuidCompare (Address: 0x1800a63d8)
  • UuidCreate (Address: 0x1800a63b8)
  • UuidCreateNil (Address: 0x1800a63d0)
  • UuidFromStringW (Address: 0x1800a63b0)
  • UuidToStringA (Address: 0x1800a63a8)
  • UuidToStringW (Address: 0x1800a6380)