wuapi.dll
Description: Windows Update Client API
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.2304
Architecture: 32-bit
Operating System: Windows NT
SHA256: 0456cccdd9b85590650125472cdbe579
File Size: 747.5 KB
Uploaded At: Dec. 1, 2025, 8:33 a.m.
Views: 20
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x25190)
- DllGetClassObject (Ordinal: 2, Address: 0x25020)
- DllRegisterServer (Ordinal: 3, Address: 0x511d0)
- DllUnregisterServer (Ordinal: 4, Address: 0x511e0)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x1009c0a8)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
- CStdStubBuffer2_Connect (Address: 0x1009c0cc)
- CStdStubBuffer2_CountRefs (Address: 0x1009c0bc)
- CStdStubBuffer2_Disconnect (Address: 0x1009c0fc)
- CStdStubBuffer2_QueryInterface (Address: 0x1009c114)
- NdrProxyForwardingFunction10 (Address: 0x1009c134)
- NdrProxyForwardingFunction11 (Address: 0x1009c108)
- NdrProxyForwardingFunction12 (Address: 0x1009c138)
- NdrProxyForwardingFunction13 (Address: 0x1009c11c)
- NdrProxyForwardingFunction14 (Address: 0x1009c0d4)
- NdrProxyForwardingFunction15 (Address: 0x1009c0d0)
- NdrProxyForwardingFunction16 (Address: 0x1009c0e4)
- NdrProxyForwardingFunction17 (Address: 0x1009c148)
- NdrProxyForwardingFunction18 (Address: 0x1009c140)
- NdrProxyForwardingFunction19 (Address: 0x1009c0f4)
- NdrProxyForwardingFunction20 (Address: 0x1009c0b0)
- NdrProxyForwardingFunction21 (Address: 0x1009c124)
- NdrProxyForwardingFunction3 (Address: 0x1009c120)
- NdrProxyForwardingFunction4 (Address: 0x1009c128)
- NdrProxyForwardingFunction5 (Address: 0x1009c12c)
- NdrProxyForwardingFunction6 (Address: 0x1009c0f8)
- NdrProxyForwardingFunction7 (Address: 0x1009c0ec)
- NdrProxyForwardingFunction8 (Address: 0x1009c0c8)
- NdrProxyForwardingFunction9 (Address: 0x1009c100)
- ObjectStublessClient10 (Address: 0x1009c144)
- ObjectStublessClient11 (Address: 0x1009c0b4)
- ObjectStublessClient12 (Address: 0x1009c110)
- ObjectStublessClient13 (Address: 0x1009c10c)
- ObjectStublessClient14 (Address: 0x1009c0b8)
- ObjectStublessClient15 (Address: 0x1009c0e8)
- ObjectStublessClient18 (Address: 0x1009c0e0)
- ObjectStublessClient19 (Address: 0x1009c118)
- ObjectStublessClient22 (Address: 0x1009c0d8)
- ObjectStublessClient23 (Address: 0x1009c0f0)
- ObjectStublessClient24 (Address: 0x1009c0c0)
- ObjectStublessClient3 (Address: 0x1009c0dc)
- ObjectStublessClient4 (Address: 0x1009c0c4)
- ObjectStublessClient7 (Address: 0x1009c104)
- ObjectStublessClient8 (Address: 0x1009c130)
- ObjectStublessClient9 (Address: 0x1009c13c)
api-ms-win-core-datetime-l1-1-1.dll
- GetDateFormatEx (Address: 0x1009c150)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1009c158)
- IsDebuggerPresent (Address: 0x1009c160)
- OutputDebugStringW (Address: 0x1009c15c)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x1009c168)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x1009c170)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1009c180)
- RaiseException (Address: 0x1009c178)
- SetLastError (Address: 0x1009c188)
- SetUnhandledExceptionFilter (Address: 0x1009c184)
- UnhandledExceptionFilter (Address: 0x1009c17c)
api-ms-win-core-file-l1-1-0.dll
- CreateDirectoryW (Address: 0x1009c1a8)
- CreateFileW (Address: 0x1009c1ac)
- GetDriveTypeW (Address: 0x1009c19c)
- GetFileAttributesW (Address: 0x1009c1a0)
- GetFileSizeEx (Address: 0x1009c1a4)
- GetFileType (Address: 0x1009c198)
- GetVolumePathNameW (Address: 0x1009c190)
- LocalFileTimeToFileTime (Address: 0x1009c1bc)
- ReadFile (Address: 0x1009c1b8)
- SetFilePointer (Address: 0x1009c1b4)
- SetFileTime (Address: 0x1009c194)
- WriteFile (Address: 0x1009c1b0)
api-ms-win-core-file-l1-2-0.dll
- GetVolumeNameForVolumeMountPointW (Address: 0x1009c1c4)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1009c1cc)
- DuplicateHandle (Address: 0x1009c1d0)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1009c1d8)
- HeapAlloc (Address: 0x1009c1e0)
- HeapFree (Address: 0x1009c1e4)
- HeapReAlloc (Address: 0x1009c1dc)
api-ms-win-core-heap-l2-1-0.dll
- GlobalAlloc (Address: 0x1009c1ec)
- GlobalFree (Address: 0x1009c1f4)
- LocalAlloc (Address: 0x1009c1f8)
- LocalFree (Address: 0x1009c1f0)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x1009c200)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- DosDateTimeToFileTime (Address: 0x1009c208)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x1009c240)
- FindResourceExW (Address: 0x1009c210)
- FreeLibrary (Address: 0x1009c214)
- GetModuleFileNameA (Address: 0x1009c220)
- GetModuleFileNameW (Address: 0x1009c234)
- GetModuleHandleExW (Address: 0x1009c228)
- GetModuleHandleW (Address: 0x1009c22c)
- GetProcAddress (Address: 0x1009c224)
- LoadLibraryExW (Address: 0x1009c238)
- LoadResource (Address: 0x1009c218)
- LoadStringW (Address: 0x1009c23c)
- LockResource (Address: 0x1009c230)
- SizeofResource (Address: 0x1009c21c)
api-ms-win-core-libraryloader-l1-2-1.dll
- FindResourceW (Address: 0x1009c248)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x1009c258)
- GetThreadLocale (Address: 0x1009c250)
- SetThreadLocale (Address: 0x1009c254)
api-ms-win-core-localization-obsolete-l1-2-0.dll
- CompareStringA (Address: 0x1009c264)
- GetNumberFormatW (Address: 0x1009c268)
- GetUserDefaultUILanguage (Address: 0x1009c260)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x1009c27c)
- MapViewOfFile (Address: 0x1009c278)
- MapViewOfFileEx (Address: 0x1009c270)
- UnmapViewOfFile (Address: 0x1009c274)
api-ms-win-core-privateprofile-l1-1-0.dll
- GetPrivateProfileStringW (Address: 0x1009c284)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x1009c28c)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessW (Address: 0x1009c2a8)
- CreateThread (Address: 0x1009c2b0)
- GetCurrentProcess (Address: 0x1009c2ac)
- GetCurrentProcessId (Address: 0x1009c294)
- GetCurrentThread (Address: 0x1009c298)
- GetCurrentThreadId (Address: 0x1009c2a0)
- OpenProcessToken (Address: 0x1009c29c)
- OpenThreadToken (Address: 0x1009c2a4)
- TerminateProcess (Address: 0x1009c2b4)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x1009c2c0)
- OpenProcess (Address: 0x1009c2bc)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1009c2c8)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1009c2e4)
- RegCreateKeyExW (Address: 0x1009c2e8)
- RegDeleteValueW (Address: 0x1009c2e0)
- RegEnumKeyExW (Address: 0x1009c2d4)
- RegOpenCurrentUser (Address: 0x1009c2ec)
- RegOpenKeyExW (Address: 0x1009c2d0)
- RegQueryInfoKeyW (Address: 0x1009c2dc)
- RegQueryValueExW (Address: 0x1009c2f0)
- RegSetValueExW (Address: 0x1009c2d8)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathFindFileNameW (Address: 0x1009c304)
- PathIsRelativeW (Address: 0x1009c2fc)
- PathIsRootW (Address: 0x1009c2f8)
- PathIsUNCW (Address: 0x1009c308)
- PathStripToRootW (Address: 0x1009c300)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
- StrChrW (Address: 0x1009c314)
- StrRChrW (Address: 0x1009c310)
api-ms-win-core-sidebyside-l1-1-0.dll
- ActivateActCtx (Address: 0x1009c320)
- CreateActCtxW (Address: 0x1009c31c)
- DeactivateActCtx (Address: 0x1009c328)
- ReleaseActCtx (Address: 0x1009c324)
api-ms-win-core-string-l1-1-0.dll
- CompareStringW (Address: 0x1009c334)
- MultiByteToWideChar (Address: 0x1009c338)
- WideCharToMultiByte (Address: 0x1009c330)
api-ms-win-core-string-l2-1-0.dll
- CharNextW (Address: 0x1009c340)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpiW (Address: 0x1009c348)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x1009c38c)
- AcquireSRWLockShared (Address: 0x1009c364)
- CreateEventW (Address: 0x1009c35c)
- CreateMutexExW (Address: 0x1009c36c)
- CreateSemaphoreExW (Address: 0x1009c390)
- DeleteCriticalSection (Address: 0x1009c358)
- EnterCriticalSection (Address: 0x1009c398)
- InitializeCriticalSection (Address: 0x1009c354)
- InitializeCriticalSectionEx (Address: 0x1009c378)
- LeaveCriticalSection (Address: 0x1009c388)
- OpenEventW (Address: 0x1009c370)
- OpenSemaphoreW (Address: 0x1009c380)
- ReleaseMutex (Address: 0x1009c368)
- ReleaseSemaphore (Address: 0x1009c394)
- ReleaseSRWLockExclusive (Address: 0x1009c39c)
- ReleaseSRWLockShared (Address: 0x1009c37c)
- ResetEvent (Address: 0x1009c374)
- SetEvent (Address: 0x1009c360)
- WaitForSingleObject (Address: 0x1009c350)
- WaitForSingleObjectEx (Address: 0x1009c384)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x1009c3a8)
- InitOnceComplete (Address: 0x1009c3a4)
- Sleep (Address: 0x1009c3ac)
api-ms-win-core-synch-l1-2-1.dll
- WaitForMultipleObjects (Address: 0x1009c3b4)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x1009c3bc)
- GetSystemTimeAsFileTime (Address: 0x1009c3c4)
- GetSystemWindowsDirectoryW (Address: 0x1009c3c0)
- GetTickCount (Address: 0x1009c3c8)
api-ms-win-core-sysinfo-l1-2-0.dll
- GetNativeSystemInfo (Address: 0x1009c3d0)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x1009c3e0)
- CreateThreadpoolTimer (Address: 0x1009c3dc)
- SetThreadpoolTimer (Address: 0x1009c3e4)
- WaitForThreadpoolTimerCallbacks (Address: 0x1009c3d8)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- CreateTimerQueueTimer (Address: 0x1009c3ec)
- DeleteTimerQueueTimer (Address: 0x1009c3f0)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x1009c3f8)
- SystemTimeToFileTime (Address: 0x1009c3fc)
api-ms-win-core-version-l1-1-0.dll
- GetFileVersionInfoExW (Address: 0x1009c404)
- GetFileVersionInfoSizeExW (Address: 0x1009c408)
- VerQueryValueW (Address: 0x1009c40c)
api-ms-win-core-wow64-l1-1-0.dll
- IsWow64Process (Address: 0x1009c418)
- Wow64DisableWow64FsRedirection (Address: 0x1009c414)
- Wow64RevertWow64FsRedirection (Address: 0x1009c41c)
api-ms-win-crt-private-l1-1-0.dll
- __CxxFrameHandler3 (Address: 0x1009c4dc)
- __std_terminate (Address: 0x1009c4d8)
- _CxxThrowException (Address: 0x1009c480)
- _except_handler4_common (Address: 0x1009c47c)
- _o___std_exception_copy (Address: 0x1009c4c8)
- _o___std_exception_destroy (Address: 0x1009c4c4)
- _o___std_type_info_destroy_list (Address: 0x1009c4c0)
- _o___stdio_common_vsnprintf_s (Address: 0x1009c4bc)
- _o___stdio_common_vsprintf_s (Address: 0x1009c4b8)
- _o___stdio_common_vswprintf (Address: 0x1009c4b4)
- _o__callnewh (Address: 0x1009c4a8)
- _o__cexit (Address: 0x1009c4a4)
- _o__configure_narrow_argv (Address: 0x1009c4a0)
- _o__crt_atexit (Address: 0x1009c494)
- _o__errno (Address: 0x1009c488)
- _o__execute_onexit_table (Address: 0x1009c484)
- _o__get_errno (Address: 0x1009c4cc)
- _o__initialize_narrow_environment (Address: 0x1009c49c)
- _o__initialize_onexit_table (Address: 0x1009c498)
- _o__invalid_parameter_noinfo (Address: 0x1009c490)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x1009c48c)
- _o__purecall (Address: 0x1009c424)
- _o__recalloc (Address: 0x1009c428)
- _o__register_onexit_function (Address: 0x1009c42c)
- _o__seh_filter_dll (Address: 0x1009c430)
- _o__set_errno (Address: 0x1009c434)
- _o__wtol (Address: 0x1009c43c)
- _o_free (Address: 0x1009c440)
- _o_iswspace (Address: 0x1009c444)
- _o_malloc (Address: 0x1009c448)
- _o_mbstowcs_s (Address: 0x1009c44c)
- _o_qsort (Address: 0x1009c450)
- _o_strcpy_s (Address: 0x1009c454)
- _o_strncpy_s (Address: 0x1009c458)
- _o_strtol (Address: 0x1009c45c)
- _o_terminate (Address: 0x1009c460)
- _o_toupper (Address: 0x1009c464)
- _o_wcscat_s (Address: 0x1009c468)
- _o_wcscpy_s (Address: 0x1009c46c)
- _o_wcsncpy_s (Address: 0x1009c470)
- _o_wcstombs_s (Address: 0x1009c474)
- _o_wcstoul (Address: 0x1009c478)
- memcmp (Address: 0x1009c4e0)
- memcpy (Address: 0x1009c4e4)
- memmove (Address: 0x1009c438)
- strchr (Address: 0x1009c4d4)
- strrchr (Address: 0x1009c4d0)
- wcsrchr (Address: 0x1009c4b0)
- wcsstr (Address: 0x1009c4ac)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x1009c4ec)
- _initterm_e (Address: 0x1009c4f0)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x1009c4f8)
api-ms-win-eventing-provider-l1-1-0.dll
- EventProviderEnabled (Address: 0x1009c50c)
- EventRegister (Address: 0x1009c510)
- EventSetInformation (Address: 0x1009c500)
- EventUnregister (Address: 0x1009c508)
- EventWriteTransfer (Address: 0x1009c504)
api-ms-win-security-base-l1-1-0.dll
- AdjustTokenPrivileges (Address: 0x1009c530)
- AllocateAndInitializeSid (Address: 0x1009c518)
- CheckTokenMembership (Address: 0x1009c520)
- CopySid (Address: 0x1009c51c)
- DuplicateToken (Address: 0x1009c528)
- DuplicateTokenEx (Address: 0x1009c544)
- FreeSid (Address: 0x1009c524)
- GetLengthSid (Address: 0x1009c540)
- GetTokenInformation (Address: 0x1009c548)
- ImpersonateLoggedOnUser (Address: 0x1009c538)
- ImpersonateSelf (Address: 0x1009c52c)
- IsValidSid (Address: 0x1009c53c)
- RevertToSelf (Address: 0x1009c534)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x1009c550)
- ConvertStringSidToSidW (Address: 0x1009c554)
api-ms-win-service-management-l1-1-0.dll
- CloseServiceHandle (Address: 0x1009c55c)
- OpenSCManagerW (Address: 0x1009c568)
- OpenServiceW (Address: 0x1009c560)
- StartServiceW (Address: 0x1009c564)
api-ms-win-service-management-l2-1-0.dll
- ChangeServiceConfig2W (Address: 0x1009c570)
- ChangeServiceConfigW (Address: 0x1009c578)
- QueryServiceConfig2W (Address: 0x1009c574)
- QueryServiceConfigW (Address: 0x1009c57c)
api-ms-win-service-winsvc-l1-1-0.dll
- QueryServiceStatus (Address: 0x1009c584)
api-ms-win-shcore-thread-l1-1-0.dll
- GetProcessReference (Address: 0x1009c58c)
api-ms-win-stateseparation-helpers-l1-1-0.dll
- GetPersistedRegistryLocationW (Address: 0x1009c594)
CRYPT32.dll
- CertCloseStore (Address: 0x1009c004)
- CertControlStore (Address: 0x1009c008)
- CertFindCertificateInStore (Address: 0x1009c028)
- CertFreeCertificateContext (Address: 0x1009c014)
- CertGetCertificateContextProperty (Address: 0x1009c00c)
- CertGetEnhancedKeyUsage (Address: 0x1009c01c)
- CertOpenStore (Address: 0x1009c018)
- CertVerifyCertificateChainPolicy (Address: 0x1009c010)
- CryptHashPublicKeyInfo (Address: 0x1009c020)
- CryptProtectData (Address: 0x1009c000)
- CryptUnprotectData (Address: 0x1009c024)
msvcp_win.dll
- ?_Xlength_error@std@@YAXPBD@Z (Address: 0x1009c59c)
RPCRT4.dll
- CStdStubBuffer_AddRef (Address: 0x1009c090)
- CStdStubBuffer_Connect (Address: 0x1009c058)
- CStdStubBuffer_CountRefs (Address: 0x1009c088)
- CStdStubBuffer_DebugServerQueryInterface (Address: 0x1009c098)
- CStdStubBuffer_DebugServerRelease (Address: 0x1009c078)
- CStdStubBuffer_Disconnect (Address: 0x1009c068)
- CStdStubBuffer_Invoke (Address: 0x1009c070)
- CStdStubBuffer_IsIIDSupported (Address: 0x1009c05c)
- CStdStubBuffer_QueryInterface (Address: 0x1009c084)
- IUnknown_AddRef_Proxy (Address: 0x1009c09c)
- IUnknown_QueryInterface_Proxy (Address: 0x1009c064)
- IUnknown_Release_Proxy (Address: 0x1009c08c)
- NdrCStdStubBuffer_Release (Address: 0x1009c048)
- NdrCStdStubBuffer2_Release (Address: 0x1009c054)
- NdrDllCanUnloadNow (Address: 0x1009c04c)
- NdrDllGetClassObject (Address: 0x1009c050)
- NdrOleAllocate (Address: 0x1009c080)
- NdrOleFree (Address: 0x1009c06c)
- NdrStubCall2 (Address: 0x1009c07c)
- NdrStubForwardingFunction (Address: 0x1009c074)
- RpcServerInqCallAttributesW (Address: 0x1009c0a0)
- RpcStringFreeA (Address: 0x1009c060)
- RpcStringFreeW (Address: 0x1009c040)
- UuidCompare (Address: 0x1009c03c)
- UuidCreate (Address: 0x1009c094)
- UuidCreateNil (Address: 0x1009c038)
- UuidFromStringW (Address: 0x1009c030)
- UuidToStringA (Address: 0x1009c034)
- UuidToStringW (Address: 0x1009c044)