win10 ntoskrnl dependencies

[Damnation]

Out of curiosity I was looking at windows 10 ntoskrnl with dependency walker and noticed all these ext-ms-win dll files it depends on.

I noticed however that the files do not seem to exist in c:\windows\system32 (or sysWOW64)

-

So where are these dependencies actually located?

[HarryTri]

Have you turned the showing hidden files option on?

[Damnation]

Yes i have, still don't see them.

[HarryTri]

Strange, they are present in Windows 8 that I am running, and since ntoskrnl.exe depends on them they must still be present in Windows 10 too.

[Damnation]

grab a windows 10 ISO and install in a VM, you can see they're absent.

[UCyborg]

I don't see them neither. Maybe those DLL names internally resolve to something else? I ran a search and haven't found them anywhere in Windows folder.

Edited August 4, 2017 by UCyborg

[Damnation]

1 hour ago, UCyborg said:

I don't see them neither. Maybe those DLL names internally resolve to something else? I ran a search and haven't found them anywhere in Windows folder.

I don't know how to figure out what it resolves to.

Anyone know how to do that?

[jaclaz]

Broken google?

https://ofekshilon.com/2016/03/27/on-api-ms-win-xxxxx-dll-and-other-dependency-walker-glitches/

Welcome to the wonderful world of API sets (whatever they are besides being an added layer of complexity).

Use the page above to get to Geoff Chappel's site with the full list and a nice explanation (or copy and paste the following).

http://www.geoffchappell.com/studies/windows/win32/apisetschema/index.htm?tx=3

http://www.geoffchappell.com/studies/windows/win32/apisetschema/api/index.htm

jaclaz

 

Edited August 5, 2017 by jaclaz

[Damnation]

5 hours ago, jaclaz said:

Broken google?

https://ofekshilon.com/2016/03/27/on-api-ms-win-xxxxx-dll-and-other-dependency-walker-glitches/

Welcome to the wonderful world of API sets (whatever they are besides being an added layer of complexity).

Use the page above to get to Geoff Chappel's site with the full list and a nice explanation (or copy and paste the following).

http://www.geoffchappell.com/studies/windows/win32/apisetschema/index.htm?tx=3

http://www.geoffchappell.com/studies/windows/win32/apisetschema/api/index.htm

jaclaz

 

Cool, Thanks very much!

[Dibya]

They are hidden system files .

[Damnation]

56 minutes ago, Dibya said:

They are hidden system files .

It's more complex than that apparently

[UCyborg]

Not directly related to API sets, but regarding MS's moving functionality around, we also have *base.dll DLLs, eg, winmmbase.dll, combase.dll, etc. kernelbase.dll was already in Win7, those two and some others came later.

Edited August 12, 2017 by UCyborg