Raw UUP workflows expose too much implementation detail
Selecting builds, UUIDs, languages, editions, converter settings, network behavior and validation by hand makes the workflow harder to reproduce and easier to misconfigure.
← All projects
Stable · v1.0.0
Stable · v1.0.0> windows / iso builder
Windows ISO Builder
Build current Windows 10/11 ISO images through UUP dump with a WPF GUI, PowerShell CLI/backend, dynamic catalogs, WIM/ESD selection, preflight checks, and proxy support.
The GUI stays intentionally thin: UUP catalog, recommendation, BuildPlan, preflight, elevation, download/conversion, DISM work, ISO validation and cancellation remain owned by the PowerShell backend through a versioned machine-readable contract.
PlatformWindows 10/11 x64
Releasev1.0.0
Published26 Aug 2026
GUIWPF / .NET 10
LicenseMIT
> context
From UUP catalog to ISO without manual SKU plumbing
The project turns the UUP dump workflow into a repeatable desktop flow while preserving a scriptable backend and avoiding a second build engine in the GUI.
Presentation over one authoritative backend
Quick Mode and Catalog Mode converge on the same backend-owned language, edition, BuildPlan, preflight and build path. The GUI orchestrates state and presentation rather than duplicating UUP or DISM logic.
> capabilities
Core capabilities
The stable release combines GUI, CLI, network/proxy support, diagnostics and validated ISO builds.
Dynamic UUP catalog
Windows 10/11 builds are discovered through UUP dump instead of a hardcoded build catalog.
Language & editions
Dynamic languages and editions, multi-edition selection, and WIM/ESD output.
Structured preflight
Readiness checks run before the privileged stage so environment failures appear before UAC.
Build lifecycle
Backend-owned elevation, progress, cancellation, logs, ISO validation and final SHA-256.
Network Policy
System / Direct / Custom applies across UUP API, preflight, conversion downloads, aria2 and updates.
HTTP & SOCKS5
Custom HTTP/SOCKS5 with fail-closed behavior and a loopback bridge for generated downloader traffic.
Desktop + CLI
WPF desktop UI plus Start-Builder.cmd, Start-Builder.ps1 and JSON/NDJSON backend automation.
RU / EN
Russian and English UI with English fallback and System / Light / Dark themes.
Safe update discovery
Official GitHub Releases discovery without automatic download or execution.
$ pipeline
One build pipeline
GUI and CLI converge on one PowerShell backend through Backend Contract v1.
01WPF / CLIUser choices
→
02Backend Contract v1JSON + NDJSON
→
03PowerShell backendCatalog · BuildPlan · build
→
04Validated ISOPath · logs · SHA-256
> interface
Application screens
Real v1.0.0 screenshots from the repository, shown without cropping.
$ architecture
Architecture
The GUI remains a thin client over a machine-readable contract.
WPF / MVVM
C# .NET 10 thin client. MainViewModel owns UI flow; transport stays in Backend/.
BackendClient
Creates owned transport directories, serializes JSON, launches the public PowerShell entry point and validates schema compatibility.
Backend Contract v1
Stable commands for version, catalog, recommendation, languages, editions, BuildPlan, preflight, execution and cancellation.
PowerShell module
Single owner of UUP discovery, BuildPlan, preflight, elevation, download/conversion/DISM, ISO validation and cancellation.
Telemetry
NDJSON progress is advisory; the final backend response is authoritative.
UAC boundary
GUI runs asInvoker; elevation belongs to the backend and cancellation is a structured result.
> engineering
Engineering decisions
The project favors explicit boundaries, reproducibility and fail-closed behavior.
No second build engine
The GUI does not reimplement UUP, DISM, recommendation, preflight or cancellation.
Custom mode is fail-closed
Bad configuration or connection failure never becomes a silent Direct retry.
DPAPI CurrentUser
Saved proxy passwords are protected and excluded from settings, BuildPlan, logs and release artifacts.
Loopback bridge
Generated aria2 sees 127.0.0.1 instead of upstream proxy credentials in its command line.
Discovery, not self-update
Only official GitHub Releases metadata and a validated release page are used.
Real ISO checks matter
v1.0.0 includes fixes found during real Windows 11 E2E validation, including ESD/WIM output checks.
> technology
Technology stack
C# / .NET 10WPF GUI
PowerShell 5.1backend / CLI
UUP dumpcatalog
aria2 / UUP scriptsdownload
DISM / Windows toolsservicing
DPAPI CurrentUserproxy credentials
System.Text.Jsoncontract transport
Pester + dotnettests
> security
EXPLICIT BOUNDARIESPrivileged work and secrets are deliberately bounded.
The application does not disable UAC or antivirus, does not embed a GitHub PAT/OAuth token, and does not execute arbitrary PowerShell names supplied by JSON.
- Explicit backend command allowlist
- No Invoke-Expression/eval dispatch
- GUI process launch uses ArgumentList
- Proxy password protected with DPAPI CurrentUser
- Diagnostics use allowlist and sanitization
- Users should still review diagnostic ZIPs before sharing
Important: Windows ISO Builder builds Windows media through UUP dump and Microsoft distribution infrastructure. Windows, UUP dump and third-party tools retain their own licenses and terms.
$ stable_release
Windows ISO Builder v1.0.0
v1.0.0 is the first stable release. The standalone EXE is a self-extracting launcher containing the validated portable payload; the ZIP contains the GUI, PowerShell CLI/backend, module and documentation. Both use the same backend.
EXE SHA-256
BE68856260C1312028B28C584C9E4D84F2D125AFF9751D3167ADA66377BE1DD6ZIP SHA-256
3B455CF3527383B1A97908B25BA1B69A85A4CD18635D03DF9B0007F39250E852> links
Project resources
GitHub remains the source of truth for code, architecture, validation and releases.