Nomen Posted January 20, 2022 Share Posted January 20, 2022 This is Win-7, 32 bit. I'm trying to run a program and I get this error: "The program can't start because api-ms-win-core-path-l1-1-0.dll is missing from your computer." I see lots of similar issues for that particular dll and pretty much zero resolution for it. Seems to be specific problem for win-7, possibly that file originated with windows 8? I've gone down a few rabbit holes looking for a solution, and one path points to windows6.1-kb2533623-x86.msu as a possible solution. The only place I was able to find it was the wayback machine. I ran it, but it said it didn't apply to my system (?). That KB is possibly superceded by kb2758857. I have obtained a version of that one, I haven't run it yet. Another rabbit hole indicated that vc_redist.x86.exe (Microsoft Visual C++ Redistributable) might fix the problem, but I ran that, and the problem remains. Does anyone running Win8 or higher have that file? (api-ms-win-core-path-l1-1-0.dll) I'm just wondering for what versions of windoze can that file be found on, and why not for win-7. And if anyone has any answers for what kb2533623 / kb2758857 were for? Link to comment Share on other sites More sharing options...
UCyborg Posted January 20, 2022 Share Posted January 20, 2022 It's not a real DLL, it's an API set contract name. Either PE loader recognizes it or it doesn't. Clearly whatever you're trying to run wasn't compiled for Windows 7 (assuming updated Win7 also throws the error). Windows API sets Link to comment Share on other sites More sharing options...
UCyborg Posted January 20, 2022 Share Posted January 20, 2022 List of Windows 7 API sets The one in OP is not mentioned. It's likely that the application depends on newer APIs. Link to comment Share on other sites More sharing options...
D.Draker Posted January 20, 2022 Share Posted January 20, 2022 (edited) Yeah , about that . I 've come across this one also . This is an installer , right ? So you just need to place that stupid file right in it's folder . Sorry , lost the link. Oh , here it is , found it again ! https://github.com/nalexandru/api-ms-win-core-path-HACK Edited January 20, 2022 by D.Draker 1 Link to comment Share on other sites More sharing options...
UCyborg Posted January 20, 2022 Share Posted January 20, 2022 (edited) 1 hour ago, UCyborg said: It's likely that the application depends on newer APIs. Found references to Win8+ APIs here: https://www.nirsoft.net/dll_information/windows8/api-ms-win-core-path-l1-1-0_dll.html 5 hours ago, Nomen said: windows6.1-kb2533623-x86.msu This one adds another 3 functions that didn't exist when Windows 7 was released. https://support.microsoft.com/en-us/topic/microsoft-security-advisory-insecure-library-loading-could-allow-remote-code-execution-486ea436-2d47-27e5-6cb9-26ab7230c704 It was superseded by another update a long time ago. Edited January 20, 2022 by UCyborg Link to comment Share on other sites More sharing options...
D.Draker Posted January 20, 2022 Share Posted January 20, 2022 3 hours ago, UCyborg said: This one adds another 3 functions that didn't exist when Windows 7 was released. Do you know if it adds them to Vista too ? There are 6.0 packages too. Link to comment Share on other sites More sharing options...
Nomen Posted January 20, 2022 Author Share Posted January 20, 2022 4 hours ago, D.Draker said: Yeah , about that . I 've come across this one also . This is an installer , right ? So you just need to place that stupid file right in it's folder . Sorry , lost the link. Oh , here it is , found it again ! https://github.com/nalexandru/api-ms-win-core-path-HACK Thanks! Github is always a confusing place for me to navigate. But yes, I found what you are talking about here: https://github.com/nalexandru/api-ms-win-core-path-HACK/releases/tag/0.3.1 And yes, placing the dll in system32 did the trick. I guess this would also be needed for 64-bit Win-7? The program I'm running is also based on python. For more on this issue, see the following: https://vigilance.fr/vulnerability/Python-executing-DLL-code-via-Windows-7-api-ms-win-core-path-l1-1-0-dll-31456 https://github.com/python/cpython/commit/561c59777c8426fde0ef48b57cf02eddaeb2a5b8 (that's where I see reference to the KB's) https://www.smartftp.com/en-us/support/kb/2695 Link to comment Share on other sites More sharing options...
D.Draker Posted January 20, 2022 Share Posted January 20, 2022 (edited) 3 hours ago, Nomen said: Thanks! Github is always a confusing place for me to navigate Yeah man , github sux . I'm glad I could help . Though, I don't know anything about Win7 x64 , I don't use it , sorry . I'm on Vista x64 . Edited January 20, 2022 by D.Draker removed hate speech towards the bloody win7 Link to comment Share on other sites More sharing options...
UCyborg Posted January 21, 2022 Share Posted January 21, 2022 23 hours ago, D.Draker said: Do you know if it adds them to Vista too ? There are 6.0 packages too. Yes, you actually only get Vista update when searching for KB2533623 on Update Catalog. AFAIK, this was the first update with those functions, there was at least one newer update that supersedes it so it also adds those functions. Best to check kernel32.dll itself if it contains listed functions. Probably a whole lot of updates changed kernel32.dll. Link to comment Share on other sites More sharing options...
UCyborg Posted January 21, 2022 Share Posted January 21, 2022 On 1/20/2022 at 6:49 AM, UCyborg said: It's not a real DLL, it's an API set contract name. Guess it's still real in a sense that there are api-*.dll DLLs in the background that just have exported functions pointing to DLL with actual implementation. Link to comment Share on other sites More sharing options...
D.Draker Posted January 23, 2022 Share Posted January 23, 2022 On 1/21/2022 at 9:58 AM, UCyborg said: Probably a whole lot of updates changed kernel32.dll. That's right ! Windows updates is a mess . I don't understand why people install several gigs of bloat . As far as I know , the later big updates contain all of the important files , insluding the kernel. I opened one of them ... jeez ... it's like a new SP inside ! Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now