---
id: 4589
title: "Runtime DLL name resolution: ApiSetSchema - Part II"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/runtime-dll-name-resolution-apisetschema-part-ii.html"
published_at: "2012-04-24T22:00:00Z"
tags: ["windows", "reverse-engineering", "apisetschema", "dll", "windows-internals", "loader"]
phying_url: "https://phying.com/item/4589"
lang: en
---

# Runtime DLL name resolution: ApiSetSchema - Part II

## Summary

ApiSetSchema internals, part two: the header fields, the DLLHOSTDESCRIPTOR array with string and redirector offsets, and UTF-16 virtual DLL names like ms-win-advapi32-auth-l1-1 mapping to API- files.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2012-04-24T22:00:00Z
- **Original:** https://blog.quarkslab.com/runtime-dll-name-resolution-apisetschema-part-ii.html
- **Phying News:** https://phying.com/item/4589