Skip to content
Runtime DLL name resolution: ApiSetSchema - Part II
blog.quarkslab.com | research | #windows | #reverse-engineering | #apisetschema | #dll | #windows-internals | #loader
Summary
ApiSetSchema internals, part two: the header fields, the DLLHOSTDESCRIPTOR array with string and redirector offsets, and UTF-16 virtual DLL names like ms-win-advapi32-auth-l1-1 mapping to API- files.
- Published
- Collected