Jump to content

Looking for info about kb2533623 (trying to fix a dll problem)


Nomen
 Share

Recommended Posts

This is Win-7, 32 bit.  I'm trying to run a program and I get this error:  "The program can't start because api-ms-win-core-path-l1-1-0.dll is missing from your computer."  I see lots of similar issues for that particular dll and pretty much zero resolution for it.  Seems to be specific problem for win-7, possibly that file originated with windows 8?  I've gone down a few rabbit holes looking for a solution, and one path points to windows6.1-kb2533623-x86.msu as a possible solution.  The only place I was able to find it was the wayback machine.  I ran it, but it said it didn't apply to my system (?).  That KB is possibly superceded by kb2758857.  I have obtained a version of that one, I haven't run it yet.  Another rabbit hole indicated that vc_redist.x86.exe (Microsoft Visual C++ Redistributable) might fix the problem, but I ran that, and the problem remains.

Does anyone running Win8 or higher have that file?  (api-ms-win-core-path-l1-1-0.dll)

I'm just wondering for what versions of windoze can that file be found on, and why not for win-7.

And if anyone has any answers for what kb2533623 / kb2758857 were for?

 

Link to comment
Share on other sites


It's not a real DLL, it's an API set contract name. Either PE loader recognizes it or it doesn't. Clearly whatever you're trying to run wasn't compiled for Windows 7 (assuming updated Win7 also throws the error).

Windows API sets

Link to comment
Share on other sites

1 hour ago, UCyborg said:

It's likely that the application depends on newer APIs.

Found references to Win8+ APIs here: https://www.nirsoft.net/dll_information/windows8/api-ms-win-core-path-l1-1-0_dll.html

5 hours ago, Nomen said:

windows6.1-kb2533623-x86.msu

This one adds another 3 functions that didn't exist when Windows 7 was released.

https://support.microsoft.com/en-us/topic/microsoft-security-advisory-insecure-library-loading-could-allow-remote-code-execution-486ea436-2d47-27e5-6cb9-26ab7230c704

It was superseded by another update a long time ago.

Edited by UCyborg
Link to comment
Share on other sites

3 hours ago, UCyborg said:

This one adds another 3 functions that didn't exist when Windows 7 was released.

Do you know if it adds them to Vista too ? There are 6.0 packages too.

Link to comment
Share on other sites

4 hours ago, D.Draker said:

Yeah , about that . I 've come across this one also . This is an installer , right ? So you just need to place that stupid file right in it's folder . Sorry , lost the link.

Oh , here it is , found it again !

https://github.com/nalexandru/api-ms-win-core-path-HACK

Thanks!

Github is always a confusing place for me to navigate.  But yes, I found what you are talking about here:

https://github.com/nalexandru/api-ms-win-core-path-HACK/releases/tag/0.3.1

And yes, placing the dll in system32 did the trick.  I guess this would also be needed for 64-bit Win-7?

The program I'm running is also based on python.  For more on this issue, see the following:

https://vigilance.fr/vulnerability/Python-executing-DLL-code-via-Windows-7-api-ms-win-core-path-l1-1-0-dll-31456

https://github.com/python/cpython/commit/561c59777c8426fde0ef48b57cf02eddaeb2a5b8

(that's where I see reference to the KB's)

https://www.smartftp.com/en-us/support/kb/2695

 

Link to comment
Share on other sites

3 hours ago, Nomen said:

Thanks!

Github is always a confusing place for me to navigate

Yeah man , github sux . I'm glad I could help . Though, I don't know anything about Win7 x64 , I don't use it , sorry . I'm on Vista x64 . 

Edited by D.Draker
removed hate speech towards the bloody win7
Link to comment
Share on other sites

23 hours ago, D.Draker said:

Do you know if it adds them to Vista too ? There are 6.0 packages too.

Yes, you actually only get Vista update when searching for KB2533623 on Update Catalog. AFAIK, this was the first update with those functions, there was at least one newer update that supersedes it so it also adds those functions. Best to check kernel32.dll itself if it contains listed functions.

Probably a whole lot of updates changed kernel32.dll.

Link to comment
Share on other sites

On 1/20/2022 at 6:49 AM, UCyborg said:

It's not a real DLL, it's an API set contract name.

Guess it's still real in a sense that there are api-*.dll DLLs in the background that just have exported functions pointing to DLL with actual implementation.

Link to comment
Share on other sites

On 1/21/2022 at 9:58 AM, UCyborg said:

Probably a whole lot of updates changed kernel32.dll.

That's right ! Windows updates is a mess . I don't understand why people install several gigs of bloat . As far as I know , the later big updates contain all of the important files , insluding the kernel. I opened one of them ... jeez ... it's like a new SP inside !

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.


×
×
  • Create New...