Skip to content
Runtime DLL name resolution: ApiSetSchema - Part I
blog.quarkslab.com | research | #windows | #reverse-engineering | #apisetschema | #dll | #windows-internals | #minwin
Summary
ApiSetSchema explained, part one: why Windows 7+ DLLs forward calls (Kernel32 to KernelBase) under Minwin, and how virtual DLLs map to real implementations through an early-loaded schema.
- Published
- Collected