260:
3253:
113:
3264:
25:
66:
620:, the Common Dialog Box Library, implements a wide variety of Windows dialog boxes intended to perform what Microsoft deems 'common application tasks'. Starting with the release of Windows Vista, Microsoft considers the "Open" and "Save as" dialog boxes provided by this library as deprecated and replaced by the 'Common Item Dialog API'.
719:
This functionality was removed from
Windows Vista (and therefore later versions) to improve security and rid the operating system of generally unused functionality. Scrap (.shs) files have been used by viruses because they can contain a wide variety of files (including executable code), and the file
297:
The HAL is loaded into kernel address space and runs in kernel mode, so routines in the HAL cannot be called directly by applications, and no user mode APIs correspond directly to HAL routines. Instead, the HAL provides services primarily to the
Windows executive and kernel and to kernel mode device
592:
that matches the
Windows look and feel. Programs call functions from Windows USER to perform operations such as creating and managing windows, receiving window messages (which are mostly user input such as mouse and keyboard events, but also notifications from the operating system), displaying text
608:
implements a wide variety of standard
Windows controls, such as File Open, Save, and Save As dialogs, progress bars, and list views. It calls functions from both USER32.DLL and GDI32.DLL to create and manage the windows for these UI elements, place various graphic elements within them, and collect
596:
Many of the functions in USER32.DLL call upon GDI functions exported by GDI32.DLL to do the actual rendering of the various elements of the user interface. Some types of programs will also call GDI functions directly to perform lower-level drawing operations within a window previously created via
540:
functions that perform primitive drawing functions for output to video displays and printers. It is used, for example, in the XP version of Paint. Applications call GDI functions directly to perform low-level drawing (line, rectangle, ellipse), text output, font management, and similar functions.
321:
and registers of their devices. The drivers use HAL routines because different platforms may require different implementations of these operations. The HAL implements the operations appropriately for each platform, so the same driver executable file can be used on all platforms using the same
851:. However, C/C++ programs using UCRTBASE.DLL are forced to link against another new DLL, the VCRuntime. At Version 14.0, this was VCRUNTIME140.DLL. The name has the potential to change at future versions, but has not done so as far as of Version 17.0.
803:
Versions of MSVC before 4.0 and from 7.0 to 12.0 used differently named DLLs for each version (MSVCR20.DLL, MSVCR70.DLL, MSVCR71.DLL, MSVCP110.DLL, etc.). Applications are required to install the appropriate version, and
Microsoft offers
415:; the primary reason for their existence is to perform tasks that must run early in the system startup sequence before the Win32 subsystem is available. An obvious but important example is the creation of the Win32 subsystem process,
784:
compiler from version 4.2 to 6.0. It provides programs compiled by these versions of MSVC with most of the standard C library functions. These include string manipulation, memory allocation, C-style input/output calls, and others.
1552:
337:, there are several different HAL files on the installation media. The Windows installation procedure determines which ones are appropriate for the current platform and copies it to the hard drive, renaming it to
293:
than on one without. The HAL provides a single function for this purpose that works with all kinds of interrupts by various chipsets, so that other components need not be concerned with the differences.
588:
implements the
Windows USER component that creates and manipulates the standard elements of the Windows user interface, such as the desktop, windows, and menus. It thus enables programs to implement a
251:
HAL.DLL is a kernel-mode library file and it cannot be used by any user-mode program. NTDLL.DLL is only used by some programs, but it is a dependency of most Win32 libraries used by programs.
926:(note the file extension) for MS C 9 and 10 (MSVC 2.x, 4.x) (Back then, the draft C++ Standard Library was integrated within MSVCRT.DLL. It was split up with the release of Visual C++ 5.0)
471:). A common library linked with Native applications is nt.lib, which contains startup code for Native applications, similar to how the C runtime provides startup code for Win32 apps.
404:. Native APIs are also used to implement many of the "kernel APIs" or "base APIs" exported by KERNEL32.DLL. The large majority of Windows applications do not call NTDLL.DLL directly.
1532:
796:
library instead. In older versions of
Windows, programs which linked against MSVCRT.DLL were expected to install a compatible copy in the System32 folder, but this contributed to
3289:
419:. Before the csrss.exe process exists, no Win32 processes may be created, therefore the process that creates it (Smss.exe, the "session manager") must use the native subsystem.
243:. This article provides an overview of the core libraries that are included with every modern Windows installation, on top of which most Windows applications are built.
130:
38:
1156:
Information and
Communications Security: 8th International Conference, ICICS 2006 – Raleigh, NC, USA, December 4–7, 2006 – proceedings
720:
extension is not shown even when "Hide file extensions from known file types" is disabled. The functionality can be restored by copying registry entries and the
426:
Despite having an ".exe" file extension, native applications cannot be executed by the user (or any program in the Win32 or other subsystems). An example is the
2268:
372:
HAL is merged (or statically linked) into ntoskrnl.exe starting with version 2004 of
Windows 10, and the dll only serves as a stub for backwards compatibility.
1379:
482:
and other utility software vendors incorporate Native
Applications within their products, usually to perform some boot-time task that cannot be carried out in
278:. The HAL implements a number of functions that are implemented in different ways by different hardware platforms, which in this context, refers mostly to the
712:, which are automatically created when you drag selected content from an OLE-capable application into an Explorer window or desktop, but you can also use the
1355:
2283:
2448:
1525:
346:
290:
87:
74:
459:
as is found in a Win32 application), obtain their command-line arguments via a pointer to an in-memory structure, manage their own memory using the
2105:
177:
3139:
1518:
1251:
1163:
1134:
1073:
1023:
149:
3268:
1541:
1295:
1179:
1092:
982:
44:
1399:
955: – Multilanguage Standard Common Object Runtime Library, formerly Microsoft Common Object Runtime Library) and so-called
436:
during the system initialization "Blue Screen". Other prominent examples are the services that implement the various subsystems, such as
2518:
2158:
1742:
1577:
156:
2690:
2599:
2115:
1747:
834:
823:
524:
creation, and synchronization functions. Many of these are implemented within KERNEL32.DLL by calling corresponding functions in the
1495:
792:
It has shipped with Windows versions since Windows 95 OSR2.5 for use by other Windows components; earlier versions shipped with the
214:
196:
52:
163:
2381:
2343:
2328:
3184:
2766:
2293:
936:
134:
463:
heap API, (which the Win32 heap APIs are just wrappers around—no real difference there) and return execution with a call to
145:
2308:
384:. The Native API is the interface used by user-mode components of the operating system that must run without support from
3149:
3018:
2705:
2695:
2569:
2473:
2333:
1690:
1645:
880:
705:
685:
1485:
3294:
3257:
2625:
2584:
2483:
2338:
2135:
1850:
1800:
1472:
1424:
1102:
635:
API, which provides TCP/IP networking functions and provides partial, broken compatibility with other network APIs.
2847:
2727:
2433:
1932:
1572:
1565:
1560:
1365:
977:
972:
271:
264:
1505:
1267:
123:
79:
3179:
3144:
2574:
2564:
2503:
2413:
2303:
2273:
1922:
1620:
545:
537:
1335:
2544:
2488:
2468:
2313:
2082:
1967:
800:
because many installers failed to check the library version against the installed version before replacing it.
589:
1857:
286:
can then call these functions in the same way on all platforms, without regard for the actual implementation.
170:
3129:
3124:
2968:
2963:
2923:
2883:
2833:
2579:
2323:
2318:
2193:
2168:
2130:
2100:
2050:
1862:
1785:
1710:
1630:
1605:
871:
837:
709:
3299:
3109:
3073:
2685:
2670:
2428:
2386:
2278:
2208:
2125:
2110:
1705:
681:
236:
3238:
3058:
3003:
2943:
2928:
2737:
2408:
2363:
2220:
2173:
239:", which are code libraries that can be used by multiple processes while only one copy is loaded into
3223:
3218:
3063:
3033:
2998:
2888:
2594:
2589:
2493:
2443:
2401:
2371:
2258:
1845:
1810:
1757:
1695:
1044:
992:
721:
822:), most of the C/C++ runtime was moved into a new DLL, UCRTBASE.DLL, which conforms closely with C99
3164:
3023:
2978:
2953:
2908:
2854:
2653:
2508:
2391:
1840:
1825:
1765:
1685:
1655:
755:
654:, the Advanced Windows 32 Base API DLL, provides security calls and functions for manipulating the
517:
1452:
559:
printers. The functionality has expanded over the years, and now includes support for things like
3169:
3119:
2893:
2812:
2798:
2717:
2423:
2263:
2230:
2203:
2198:
1872:
1775:
1770:
1670:
1438:
1183:
854:
Source code for runtime libraries is included in Visual C++ for reference and debugging (e.g. in
777:
521:
479:
408:
298:
drivers. Although drivers for most hardware are contained in other files, commonly of file type
1403:
811:
This runtime library is used by programs written in Visual C++ and a few other compilers (e.g.
3233:
3159:
3114:
3013:
3008:
2983:
2938:
2903:
2773:
2077:
1887:
1720:
1247:
1159:
1151:
1130:
1124:
1069:
1019:
1013:
808:
packages for this purpose, though Windows typically comes with one version already installed.
568:
509:
228:
1243:
1063:
396:(and its variants), and the majority of exported symbols within these libraries are prefixed
3174:
3083:
2918:
2861:
2819:
2680:
2648:
2604:
2559:
2478:
2238:
2035:
1912:
1902:
1665:
1660:
940:
893:
655:
310:
283:
232:
349:, and whether or not multiple processors are present and enabled. (The multiple cores of a
259:
3210:
3093:
3068:
3053:
3043:
2993:
2988:
2742:
2376:
2092:
1957:
1947:
1892:
1877:
1735:
1625:
1489:
1476:
1218:
713:
475:
369:
for each CPU architecture. On Windows 8 and later, the x86 version also only has one HAL.
240:
1206:
2700:
2243:
2055:
2045:
2030:
1962:
1830:
1805:
1780:
1730:
1700:
1610:
956:
948:
897:
564:
560:
354:
350:
3283:
3189:
3048:
2948:
2288:
2248:
2025:
2000:
1992:
1927:
1795:
1595:
1236:
1040:
819:
552:
2958:
2913:
2840:
2805:
2513:
2463:
2253:
2005:
1952:
1917:
1835:
1815:
1635:
1615:
889:
781:
580:
513:
474:
Though most of the API is undocumented, Native Applications can be built using the
448:
393:
326:
architecture, and the driver source file can be portable across all architectures.
1492: – Tips for using the Kernel API Client Library with Visual Basic
1316:
3028:
2973:
2878:
2732:
2620:
2498:
2353:
2145:
2120:
1715:
987:
495:
314:
289:
For example, responding to an interrupt is quite different on a machine with an
112:
1510:
1479: – Tips for using the User API Client Library with Visual Basic
716:
to create them. They can then be dragged into another OLE-capable application.
500:
The libraries in this section each implement various subsets of the Win32 API.
2933:
2757:
2298:
2188:
2062:
1982:
1907:
1725:
1222:
725:
556:
525:
447:
applications, native applications instantiate within the Kernel runtime code (
381:
2554:
2549:
2183:
2072:
2020:
1790:
1482:
1291:
1097:
944:
483:
437:
420:
416:
341:
if necessary. Among the criteria for this selection are: the presence of an
334:
318:
849:
65:
1469:
508:
KERNEL32.DLL exposes to applications most of the Win32 base APIs, such as
3134:
3038:
2898:
2658:
2523:
2153:
2010:
1897:
1882:
1820:
1680:
1640:
1453:"What does the "ms" in "mscorlib" stand for - hint: It's not "Microsoft""
1360:
1015:
The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System
797:
922:– Microsoft C++ Library, contains the deprecated C++ classes from
3154:
3088:
2826:
2712:
2675:
2663:
2348:
2067:
2040:
2015:
1977:
1675:
1600:
1500:
1048:
632:
362:
279:
3228:
3078:
2747:
2528:
2453:
907:
432:
358:
3194:
2630:
2458:
2163:
1937:
1650:
841:
812:
740:
444:
385:
258:
669:
provides functions for querying and managing network interfaces.
2722:
2396:
2215:
2178:
1501:
Unofficial website that documents most of the Native API methods
845:
342:
299:
1514:
2640:
1972:
1942:
1867:
1296:"How RPC Works: Remote Procedure Call (RPC) | Microsoft Learn"
549:
330:
323:
106:
59:
18:
1207:
Visual Studio Developer Center: Identifying Functions in DLLs
1152:"Modular behavior profiles in systems with shared libraries"
833:) from Windows 10 onwards become a component part of Windows
388:
or other API subsystems. Most of this API is implemented in
856:
C:\Program Files\Microsoft Visual Studio 11.0\VC\crt\src
643:
are older versions for Win3.11 and Win95 compatibility.
309:
Kernel mode device drivers for devices on buses such as
1238:
Windows graphics programming: Win32 GDI and DirectDraw
1123:
Russinovich, Mark A. & Solomon, David A. (2009).
754:
is responsible for invoking and interacting with the
357:
CPU, all count as "processors" for this purpose.) On
353:, and even the "logical processors" implemented by a
1087:
1085:
916:– Microsoft Visual C++ Runtime, for MSVC 14.0+
815:). Some compilers have their own runtime libraries.
3207:
3102:
2871:
2790:
2783:
2756:
2639:
2613:
2537:
2362:
2229:
2144:
2091:
1991:
1756:
1586:
137:. Unsourced material may be challenged and removed.
1235:
411:directly against this library are said to use the
16:List of main shared-libraries of Microsoft Windows
451:) and so they must have a different entry point (
291:Advanced Programmable Interrupt Controller (APIC)
2418:
1150:Marceau, Carla & Stillerman, Matt (2006).
1018:. Jones & Bartlett Learning. p. 101.
1526:
8:
3290:Microsoft application programming interfaces
1336:"Windows Confidential: Scrapping the Scraps"
317:directly call routines in the HAL to access
593:in a window, and displaying message boxes.
53:Learn how and when to remove these messages
3263:
2787:
1533:
1519:
1511:
1439:"Source Code for the C Run-Time Functions"
544:Initially, GDI supported 16 and 256 color
1068:. John Wiley & Sons. pp. 68–69.
1065:Reversing: Secrets of Reverse Engineering
836:, so every compiler (either non MS, like
215:Learn how and when to remove this message
197:Learn how and when to remove this message
1506:Retrieving the KERNEL32.DLL base address
951:. It has many libraries (one of them is
90:of all important aspects of the article.
1202:
1200:
1004:
302:, a few core drivers are compiled into
1242:. Prentice Hall Professional. p.
263:The Hardware Abstraction Layer in the
86:Please consider expanding the lead to
3140:Next-Generation Secure Computing Base
1268:"Common Dialog Box Library (Windows)"
1154:. In Neng, Peng; et al. (eds.).
947:and other .NET languages require the
769:MSVCRT.DLL, MSVCP*.DLL and CRTDLL.DLL
708:mechanism. It implements support for
365:platforms there is just one possible
345:-compatible BIOS, the presence of an
7:
1425:"C++ binary compatibility 2015-2022"
1217:See also, the documentation for the
1093:"Inside Native Windows Applications"
983:List of Microsoft Windows components
231:operating system supports a form of
135:adding citations to reliable sources
2269:Distributed Transaction Coordinator
1041:"Did I miss something? Routines..."
2600:User Interface Privilege Isolation
1317:"WD: What is a Scrap (.shs) file?"
789:is the corresponding C++ library.
706:Object Linking and Embedding (OLE)
14:
146:"Microsoft Windows library files"
34:This article has multiple issues.
3262:
3252:
3251:
739:provides access to the original
111:
64:
23:
2329:Remote Differential Compression
1129:. O'Reilly Media. p. 136.
538:Graphics Device Interface (GDI)
423:itself is such an application.
122:needs additional citations for
78:may be too short to adequately
42:or discuss these issues on the
3185:Windows System Assessment Tool
590:graphical user interface (GUI)
476:Windows Driver Development Kit
380:NTDLL.DLL exports the Windows
88:provide an accessible overview
1:
1483:API calls list (KERNEL32.DLL)
1221:implementation of GDI32.DLL:
2474:Open XML Paper Specification
2334:Remote Installation Services
1542:Microsoft Windows components
1180:"Inside Native Applications"
881:Microsoft Foundation Classes
686:Object Linking and Embedding
2626:Windows Subsystem for Linux
2585:Mandatory Integrity Control
2339:Windows Deployment Services
2136:Wireless Zero Configuration
1470:API calls list (USER32.DLL)
1039:@PetrBenes (25 July 2019).
3318:
2728:Universal Windows Platform
2434:Kernel Transaction Manager
2419:Hardware Abstraction Layer
2116:Multimedia Class Scheduler
978:Windows NT startup process
973:Architecture of Windows NT
806:Visual C++ Redistributable
578:
493:
282:. Other components in the
272:Hardware Abstraction Layer
265:architecture of Windows NT
3247:
3180:Windows Services for UNIX
2565:Data Execution Prevention
2414:Graphics Device Interface
2304:Network Access Protection
1923:Remote Desktop Connection
1548:
1158:. Springer. p. 371.
392:and at the upper edge of
2545:Security and Maintenance
2489:Security Account Manager
2083:Windows XP visual styles
1321:Microsoft Knowledge Base
961:System.Windows.Forms.dll
931:.NET Framework libraries
528:, exposed by NTDLL.DLL.
274:(HAL) is implemented in
3130:Media Control Interface
2964:Help and Support Center
2580:Kernel Patch Protection
2344:System Resource Manager
2324:Remote Desktop Services
2319:Print Services for UNIX
2101:Service Control Manager
1711:Windows Error Reporting
1631:DirectX Diagnostic Tool
1380:"How to open SHS files"
872:Active Template Library
862:Other runtime libraries
848:) can link against UCRT
3110:Desktop Cleanup Wizard
2686:COM Structured storage
2387:Desktop Window Manager
2279:Windows Media Services
1400:"C Run-Time Libraries"
1012:Blunden, Bill (2009).
682:Component Object Model
457:(w)(Win)MainCRTStartup
407:Applications that are
267:
237:dynamic-link libraries
2738:Windows Mixed Reality
2409:Enhanced Write Filter
2259:Roaming user profiles
1368:on November 10, 2006.
1062:Eilam, Eldad (2011).
892:6.0 Virtual Machine (
579:Further information:
494:Further information:
262:
3019:Mobile Device Center
2969:Health & Fitness
2767:Solitaire Collection
2595:User Account Control
2590:Protected Media Path
2494:Server Message Block
2444:Logical Disk Manager
1696:System Policy Editor
1681:System Configuration
1496:Native API reference
993:Dynamic link library
935:Programs written in
827:Universal C Run Time
131:improve this article
3165:Virtual DOS machine
2509:System Idle Process
2484:Resource Protection
2392:Portable Executable
2284:Active DRM Services
1686:System File Checker
1656:Performance Monitor
1234:Yuan, Feng (2001).
1223:Wine API: gdi32.dll
818:With Version 14.0 (
756:Input Method Editor
247:Internal components
3295:Windows components
3170:Windows on Windows
2894:Backup and Restore
2706:Transaction Server
2424:I/O request packet
2264:Folder redirection
1933:Speech Recognition
1691:System Information
1646:Management Console
1488:2015-11-21 at the
1475:2015-11-21 at the
1272:msdn.microsoft.com
1126:Windows® Internals
924:<iostream.h>
906:– Microsoft
820:Visual Studio 2015
778:C standard library
597:USER32 functions.
536:GDI32.DLL exports
514:input/output (I/O)
480:antivirus software
465:RtlExitUserProcess
268:
3277:
3276:
3203:
3202:
3160:Video for Windows
3115:Games for Windows
2984:Internet Explorer
2078:Windows Spotlight
1721:Windows Installer
1253:978-0-13-086985-2
1165:978-3-540-49496-6
1136:978-0-7356-3796-2
1075:978-1-118-07976-8
1025:978-1-59822-061-2
896:programs require
782:Visual C++ (MSVC)
762:Runtime libraries
710:shell scrap files
569:multiple monitors
510:memory management
430:binary that runs
333:systems prior to
229:Microsoft Windows
225:
224:
217:
207:
206:
199:
181:
105:
104:
57:
3307:
3266:
3265:
3255:
3254:
3175:Windows SideShow
2954:Food & Drink
2848:Spider Solitaire
2788:
2681:ActiveX Document
2649:Active Scripting
2605:Windows Firewall
2560:Credential Guard
2239:Active Directory
2036:Indexing Service
1666:Resource Monitor
1661:Recovery Console
1535:
1528:
1521:
1512:
1457:
1456:
1449:
1443:
1442:
1435:
1429:
1428:
1421:
1415:
1414:
1412:
1411:
1402:. Archived from
1396:
1390:
1389:
1387:
1386:
1376:
1370:
1369:
1364:. Archived from
1352:
1346:
1345:
1343:
1342:
1331:
1325:
1324:
1313:
1307:
1306:
1304:
1302:
1288:
1282:
1281:
1279:
1278:
1264:
1258:
1257:
1241:
1231:
1225:
1215:
1209:
1204:
1195:
1194:
1192:
1191:
1182:. Archived from
1176:
1170:
1169:
1147:
1141:
1140:
1120:
1114:
1113:
1111:
1110:
1101:. Archived from
1089:
1080:
1079:
1059:
1053:
1052:
1036:
1030:
1029:
1009:
941:Visual Basic.NET
894:Visual Basic.NET
857:
656:Windows Registry
453:NtProcessStartup
413:native subsystem
284:operating system
233:shared libraries
220:
213:
202:
195:
191:
188:
182:
180:
139:
115:
107:
100:
97:
91:
68:
60:
49:
27:
26:
19:
3317:
3316:
3310:
3309:
3308:
3306:
3305:
3304:
3280:
3279:
3278:
3273:
3243:
3211:Microsoft Store
3209:
3199:
3145:POSIX subsystem
3125:File Protection
3098:
3069:Program Manager
3054:Phone Companion
3044:Outlook Express
2994:Make Compatible
2924:Desktop Gadgets
2884:Anytime Upgrade
2867:
2779:
2752:
2743:Windows Runtime
2635:
2609:
2575:Family features
2533:
2358:
2314:DFS Replication
2225:
2140:
2131:Error Reporting
2087:
1987:
1863:Mobility Center
1858:Movies & TV
1752:
1736:Windows Insider
1626:Driver Verifier
1621:Drive Optimizer
1588:
1582:
1573:Booting process
1544:
1539:
1490:Wayback Machine
1477:Wayback Machine
1466:
1461:
1460:
1451:
1450:
1446:
1437:
1436:
1432:
1423:
1422:
1418:
1409:
1407:
1398:
1397:
1393:
1384:
1382:
1378:
1377:
1373:
1354:
1353:
1349:
1340:
1338:
1333:
1332:
1328:
1315:
1314:
1310:
1300:
1298:
1290:
1289:
1285:
1276:
1274:
1266:
1265:
1261:
1254:
1233:
1232:
1228:
1216:
1212:
1205:
1198:
1189:
1187:
1178:
1177:
1173:
1166:
1149:
1148:
1144:
1137:
1122:
1121:
1117:
1108:
1106:
1091:
1090:
1083:
1076:
1061:
1060:
1056:
1038:
1037:
1033:
1026:
1011:
1010:
1006:
1001:
969:
933:
864:
855:
771:
764:
749:
734:
714:Object Packager
704:is part of the
699:
694:
675:
664:
649:
631:implements the
626:
615:
603:
583:
577:
534:
506:
498:
492:
467:(as opposed to
402:NtDisplayString
378:
257:
249:
221:
210:
209:
208:
203:
192:
186:
183:
140:
138:
128:
116:
101:
95:
92:
85:
73:This article's
69:
28:
24:
17:
12:
11:
5:
3315:
3314:
3311:
3303:
3302:
3297:
3292:
3282:
3281:
3275:
3274:
3272:
3271:
3260:
3248:
3245:
3244:
3242:
3241:
3236:
3231:
3226:
3221:
3215:
3213:
3205:
3204:
3201:
3200:
3198:
3197:
3192:
3187:
3182:
3177:
3172:
3167:
3162:
3157:
3152:
3147:
3142:
3137:
3132:
3127:
3122:
3117:
3112:
3106:
3104:
3100:
3099:
3097:
3096:
3091:
3086:
3081:
3076:
3074:Steps Recorder
3071:
3066:
3061:
3056:
3051:
3046:
3041:
3036:
3031:
3026:
3021:
3016:
3011:
3006:
3001:
2996:
2991:
2986:
2981:
2976:
2971:
2966:
2961:
2956:
2951:
2946:
2941:
2936:
2931:
2926:
2921:
2916:
2911:
2906:
2901:
2896:
2891:
2886:
2881:
2875:
2873:
2869:
2868:
2866:
2865:
2858:
2851:
2844:
2837:
2830:
2823:
2816:
2809:
2802:
2794:
2792:
2785:
2781:
2780:
2778:
2777:
2770:
2762:
2760:
2754:
2753:
2751:
2750:
2745:
2740:
2735:
2730:
2725:
2720:
2715:
2710:
2709:
2708:
2703:
2701:OLE Automation
2698:
2693:
2688:
2683:
2678:
2668:
2667:
2666:
2661:
2656:
2645:
2643:
2637:
2636:
2634:
2633:
2628:
2623:
2617:
2615:
2611:
2610:
2608:
2607:
2602:
2597:
2592:
2587:
2582:
2577:
2572:
2567:
2562:
2557:
2552:
2547:
2541:
2539:
2535:
2534:
2532:
2531:
2526:
2521:
2516:
2511:
2506:
2501:
2496:
2491:
2486:
2481:
2476:
2471:
2469:Object Manager
2466:
2461:
2456:
2451:
2446:
2441:
2436:
2431:
2429:Imaging Format
2426:
2421:
2416:
2411:
2406:
2405:
2404:
2399:
2389:
2384:
2379:
2374:
2368:
2366:
2360:
2359:
2357:
2356:
2351:
2346:
2341:
2336:
2331:
2326:
2321:
2316:
2311:
2306:
2301:
2296:
2291:
2286:
2281:
2276:
2271:
2266:
2261:
2256:
2251:
2246:
2241:
2235:
2233:
2227:
2226:
2224:
2223:
2218:
2213:
2212:
2211:
2206:
2201:
2196:
2191:
2186:
2176:
2171:
2166:
2161:
2156:
2150:
2148:
2142:
2141:
2139:
2138:
2133:
2128:
2126:Task Scheduler
2123:
2118:
2113:
2108:
2103:
2097:
2095:
2089:
2088:
2086:
2085:
2080:
2075:
2070:
2065:
2060:
2059:
2058:
2056:Special folder
2053:
2048:
2043:
2038:
2028:
2023:
2018:
2013:
2008:
2003:
1997:
1995:
1989:
1988:
1986:
1985:
1980:
1975:
1970:
1968:Voice Recorder
1965:
1960:
1955:
1950:
1945:
1940:
1935:
1930:
1925:
1920:
1915:
1910:
1905:
1900:
1895:
1890:
1885:
1880:
1875:
1870:
1865:
1860:
1855:
1854:
1853:
1843:
1838:
1833:
1828:
1823:
1818:
1813:
1808:
1803:
1798:
1793:
1788:
1783:
1778:
1773:
1768:
1762:
1760:
1754:
1753:
1751:
1750:
1745:
1740:
1739:
1738:
1731:Windows Update
1728:
1723:
1718:
1713:
1708:
1703:
1701:System Restore
1698:
1693:
1688:
1683:
1678:
1673:
1668:
1663:
1658:
1653:
1648:
1643:
1638:
1633:
1628:
1623:
1618:
1613:
1611:Device Manager
1608:
1603:
1601:Command Prompt
1598:
1592:
1590:
1584:
1583:
1581:
1580:
1575:
1570:
1569:
1568:
1563:
1555:
1549:
1546:
1545:
1540:
1538:
1537:
1530:
1523:
1515:
1509:
1508:
1503:
1498:
1493:
1480:
1465:
1464:External links
1462:
1459:
1458:
1444:
1430:
1416:
1391:
1371:
1356:"VBS.Stages.A"
1347:
1334:Raymond Chen.
1326:
1308:
1283:
1259:
1252:
1226:
1210:
1196:
1171:
1164:
1142:
1135:
1115:
1081:
1074:
1054:
1047:) – via
1031:
1024:
1003:
1002:
1000:
997:
996:
995:
990:
985:
980:
975:
968:
965:
949:.NET Framework
932:
929:
928:
927:
917:
914:VCRUNTIME*.DLL
911:
901:
898:.NET Framework
883:
874:
863:
860:
770:
767:
763:
760:
748:
745:
733:
730:
698:
695:
693:
690:
674:
671:
663:
660:
648:
645:
625:
622:
614:
611:
602:
599:
576:
573:
565:alpha channels
561:TrueType fonts
533:
530:
505:
502:
491:
488:
455:, rather than
400:, for example
377:
374:
355:hyperthreading
351:multi-core CPU
256:
253:
248:
245:
223:
222:
205:
204:
119:
117:
110:
103:
102:
82:the key points
72:
70:
63:
58:
32:
31:
29:
22:
15:
13:
10:
9:
6:
4:
3:
2:
3313:
3312:
3301:
3300:Windows files
3298:
3296:
3293:
3291:
3288:
3287:
3285:
3270:
3261:
3259:
3250:
3249:
3246:
3240:
3237:
3235:
3232:
3230:
3227:
3225:
3222:
3220:
3217:
3216:
3214:
3212:
3206:
3196:
3193:
3191:
3190:Windows To Go
3188:
3186:
3183:
3181:
3178:
3176:
3173:
3171:
3168:
3166:
3163:
3161:
3158:
3156:
3153:
3151:
3148:
3146:
3143:
3141:
3138:
3136:
3133:
3131:
3128:
3126:
3123:
3121:
3118:
3116:
3113:
3111:
3108:
3107:
3105:
3101:
3095:
3092:
3090:
3087:
3085:
3082:
3080:
3077:
3075:
3072:
3070:
3067:
3065:
3062:
3060:
3059:Photo Gallery
3057:
3055:
3052:
3050:
3047:
3045:
3042:
3040:
3037:
3035:
3032:
3030:
3027:
3025:
3022:
3020:
3017:
3015:
3012:
3010:
3007:
3005:
3004:Meeting Space
3002:
3000:
2997:
2995:
2992:
2990:
2987:
2985:
2982:
2980:
2977:
2975:
2974:HyperTerminal
2972:
2970:
2967:
2965:
2962:
2960:
2957:
2955:
2952:
2950:
2947:
2945:
2944:Easy Transfer
2942:
2940:
2937:
2935:
2932:
2930:
2927:
2925:
2922:
2920:
2917:
2915:
2912:
2910:
2907:
2905:
2902:
2900:
2897:
2895:
2892:
2890:
2887:
2885:
2882:
2880:
2877:
2876:
2874:
2870:
2864:
2863:
2859:
2857:
2856:
2852:
2850:
2849:
2845:
2843:
2842:
2838:
2836:
2835:
2831:
2829:
2828:
2824:
2822:
2821:
2817:
2815:
2814:
2810:
2808:
2807:
2803:
2801:
2800:
2796:
2795:
2793:
2789:
2786:
2782:
2776:
2775:
2771:
2769:
2768:
2764:
2763:
2761:
2759:
2755:
2749:
2746:
2744:
2741:
2739:
2736:
2734:
2731:
2729:
2726:
2724:
2721:
2719:
2716:
2714:
2711:
2707:
2704:
2702:
2699:
2697:
2694:
2692:
2689:
2687:
2684:
2682:
2679:
2677:
2674:
2673:
2672:
2669:
2665:
2662:
2660:
2657:
2655:
2652:
2651:
2650:
2647:
2646:
2644:
2642:
2638:
2632:
2629:
2627:
2624:
2622:
2619:
2618:
2616:
2614:Compatibility
2612:
2606:
2603:
2601:
2598:
2596:
2593:
2591:
2588:
2586:
2583:
2581:
2578:
2576:
2573:
2571:
2568:
2566:
2563:
2561:
2558:
2556:
2553:
2551:
2548:
2546:
2543:
2542:
2540:
2536:
2530:
2527:
2525:
2522:
2520:
2517:
2515:
2512:
2510:
2507:
2505:
2502:
2500:
2497:
2495:
2492:
2490:
2487:
2485:
2482:
2480:
2477:
2475:
2472:
2470:
2467:
2465:
2462:
2460:
2457:
2455:
2452:
2450:
2447:
2445:
2442:
2440:
2439:Library files
2437:
2435:
2432:
2430:
2427:
2425:
2422:
2420:
2417:
2415:
2412:
2410:
2407:
2403:
2400:
2398:
2395:
2394:
2393:
2390:
2388:
2385:
2383:
2380:
2378:
2375:
2373:
2370:
2369:
2367:
2365:
2361:
2355:
2352:
2350:
2347:
2345:
2342:
2340:
2337:
2335:
2332:
2330:
2327:
2325:
2322:
2320:
2317:
2315:
2312:
2310:
2307:
2305:
2302:
2300:
2297:
2295:
2292:
2290:
2287:
2285:
2282:
2280:
2277:
2275:
2272:
2270:
2267:
2265:
2262:
2260:
2257:
2255:
2252:
2250:
2247:
2245:
2242:
2240:
2237:
2236:
2234:
2232:
2228:
2222:
2219:
2217:
2214:
2210:
2207:
2205:
2202:
2200:
2199:Reparse point
2197:
2195:
2192:
2190:
2187:
2185:
2182:
2181:
2180:
2177:
2175:
2172:
2170:
2167:
2165:
2162:
2160:
2157:
2155:
2152:
2151:
2149:
2147:
2143:
2137:
2134:
2132:
2129:
2127:
2124:
2122:
2119:
2117:
2114:
2112:
2109:
2107:
2104:
2102:
2099:
2098:
2096:
2094:
2090:
2084:
2081:
2079:
2076:
2074:
2071:
2069:
2066:
2064:
2061:
2057:
2054:
2052:
2049:
2047:
2044:
2042:
2039:
2037:
2034:
2033:
2032:
2029:
2027:
2024:
2022:
2019:
2017:
2014:
2012:
2009:
2007:
2004:
2002:
2001:Action Center
1999:
1998:
1996:
1994:
1990:
1984:
1981:
1979:
1976:
1974:
1971:
1969:
1966:
1964:
1961:
1959:
1956:
1954:
1951:
1949:
1946:
1944:
1941:
1939:
1936:
1934:
1931:
1929:
1928:Snipping Tool
1926:
1924:
1921:
1919:
1916:
1914:
1911:
1909:
1906:
1904:
1901:
1899:
1896:
1894:
1891:
1889:
1886:
1884:
1881:
1879:
1876:
1874:
1871:
1869:
1866:
1864:
1861:
1859:
1856:
1852:
1849:
1848:
1847:
1844:
1842:
1839:
1837:
1834:
1832:
1829:
1827:
1824:
1822:
1819:
1817:
1814:
1812:
1809:
1807:
1804:
1802:
1799:
1797:
1794:
1792:
1789:
1787:
1786:Character Map
1784:
1782:
1779:
1777:
1774:
1772:
1769:
1767:
1764:
1763:
1761:
1759:
1755:
1749:
1746:
1744:
1741:
1737:
1734:
1733:
1732:
1729:
1727:
1724:
1722:
1719:
1717:
1714:
1712:
1709:
1707:
1704:
1702:
1699:
1697:
1694:
1692:
1689:
1687:
1684:
1682:
1679:
1677:
1674:
1672:
1669:
1667:
1664:
1662:
1659:
1657:
1654:
1652:
1649:
1647:
1644:
1642:
1639:
1637:
1634:
1632:
1629:
1627:
1624:
1622:
1619:
1617:
1614:
1612:
1609:
1607:
1606:Control Panel
1604:
1602:
1599:
1597:
1596:App Installer
1594:
1593:
1591:
1585:
1579:
1576:
1574:
1571:
1567:
1564:
1562:
1559:
1558:
1557:Architecture
1556:
1554:
1551:
1550:
1547:
1543:
1536:
1531:
1529:
1524:
1522:
1517:
1516:
1513:
1507:
1504:
1502:
1499:
1497:
1494:
1491:
1487:
1484:
1481:
1478:
1474:
1471:
1468:
1467:
1463:
1454:
1448:
1445:
1440:
1434:
1431:
1426:
1420:
1417:
1406:on 2011-12-07
1405:
1401:
1395:
1392:
1381:
1375:
1372:
1367:
1363:
1362:
1357:
1351:
1348:
1337:
1330:
1327:
1322:
1318:
1312:
1309:
1297:
1293:
1287:
1284:
1273:
1269:
1263:
1260:
1255:
1249:
1245:
1240:
1239:
1230:
1227:
1224:
1220:
1214:
1211:
1208:
1203:
1201:
1197:
1186:on 2010-10-23
1185:
1181:
1175:
1172:
1167:
1161:
1157:
1153:
1146:
1143:
1138:
1132:
1128:
1127:
1119:
1116:
1105:on 2010-09-12
1104:
1100:
1099:
1094:
1088:
1086:
1082:
1077:
1071:
1067:
1066:
1058:
1055:
1050:
1046:
1042:
1035:
1032:
1027:
1021:
1017:
1016:
1008:
1005:
998:
994:
991:
989:
986:
984:
981:
979:
976:
974:
971:
970:
966:
964:
962:
958:
954:
950:
946:
942:
938:
930:
925:
921:
918:
915:
912:
909:
905:
902:
899:
895:
891:
887:
884:
882:
878:
875:
873:
869:
866:
865:
861:
859:
852:
850:
847:
843:
839:
835:
832:
828:
824:
821:
816:
814:
809:
807:
801:
799:
795:
790:
788:
783:
779:
775:
768:
766:
761:
759:
757:
753:
746:
744:
742:
738:
731:
729:
727:
723:
717:
715:
711:
707:
703:
696:
691:
689:
687:
684:, as well as
683:
680:provides the
679:
672:
670:
668:
661:
659:
657:
653:
646:
644:
642:
638:
634:
630:
623:
621:
619:
612:
610:
607:
600:
598:
594:
591:
587:
582:
574:
572:
570:
566:
562:
558:
554:
553:display cards
551:
547:
542:
539:
531:
529:
527:
523:
519:
515:
511:
503:
501:
497:
489:
487:
485:
481:
477:
472:
470:
466:
462:
458:
454:
450:
446:
441:
439:
435:
434:
429:
424:
422:
418:
414:
410:
405:
403:
399:
395:
391:
387:
383:
375:
373:
370:
368:
364:
360:
356:
352:
348:
344:
340:
336:
332:
327:
325:
320:
316:
312:
307:
305:
301:
295:
292:
287:
285:
281:
277:
273:
266:
261:
254:
252:
246:
244:
242:
238:
234:
230:
219:
216:
201:
198:
190:
187:February 2013
179:
176:
172:
169:
165:
162:
158:
155:
151:
148: –
147:
143:
142:Find sources:
136:
132:
126:
125:
120:This article
118:
114:
109:
108:
99:
96:February 2013
89:
83:
81:
76:
71:
67:
62:
61:
56:
54:
47:
46:
41:
40:
35:
30:
21:
20:
3224:File Manager
3064:Photo Viewer
2999:Media Center
2959:Groove Music
2889:Address Book
2860:
2853:
2846:
2841:Purble Place
2839:
2832:
2825:
2818:
2811:
2806:Chess Titans
2804:
2797:
2784:Discontinued
2772:
2765:
2464:Ntoskrnl.exe
2438:
2372:Boot Manager
2364:Architecture
2254:Group Policy
2146:File systems
2046:Saved search
1953:Sticky Notes
1918:Quick Assist
1846:Media Player
1816:Feedback Hub
1811:Fax and Scan
1706:Task Manager
1636:Event Viewer
1616:Disk Cleanup
1447:
1433:
1419:
1408:. Retrieved
1404:the original
1394:
1383:. Retrieved
1374:
1366:the original
1359:
1350:
1339:. Retrieved
1329:
1320:
1311:
1301:11 September
1299:. Retrieved
1286:
1275:. Retrieved
1271:
1262:
1237:
1229:
1213:
1188:. Retrieved
1184:the original
1174:
1155:
1145:
1125:
1118:
1107:. Retrieved
1103:the original
1096:
1064:
1057:
1034:
1014:
1007:
960:
953:mscorlib.dll
952:
934:
923:
919:
913:
903:
890:Visual Basic
886:MSVBVM60.DLL
885:
876:
867:
853:
830:
826:
817:
810:
805:
802:
793:
791:
786:
773:
772:
765:
751:
750:
736:
735:
718:
701:
700:
677:
676:
667:NETAPI32.DLL
666:
665:
662:NETAPI32.DLL
652:ADVAPI32.DLL
651:
650:
647:ADVAPI32.DLL
640:
636:
628:
627:
618:COMDLG32.DLL
617:
616:
613:COMDLG32.DLL
609:user input.
606:COMCTL32.DLL
605:
604:
601:COMCTL32.DLL
595:
585:
584:
581:Windows USER
543:
535:
516:operations,
507:
504:KERNEL32.DLL
499:
473:
468:
464:
460:
456:
452:
449:ntoskrnl.exe
442:
431:
427:
425:
412:
406:
401:
397:
394:ntoskrnl.exe
389:
379:
371:
366:
338:
328:
308:
303:
296:
288:
275:
270:The Windows
269:
250:
226:
211:
193:
184:
174:
167:
160:
153:
141:
129:Please help
124:verification
121:
93:
77:
75:lead section
50:
43:
37:
36:Please help
33:
3239:Minesweeper
3208:Spun off to
3029:MSN Dial-up
3024:Movie Maker
2929:Diagnostics
2879:ActiveMovie
2621:COMMAND.COM
2499:Shadow Copy
2354:Server Core
2194:Mount Point
2121:Shadow Copy
1716:Windows Ink
988:Windows API
920:MSVCIRT.DLL
743:audio API.
702:SHSCRAP.DLL
697:SHSCRAP.DLL
641:wsock32.dll
496:Windows API
469:ExitProcess
428:autochk.exe
315:PCI Express
3284:Categories
3219:DVD Player
3034:NetMeeting
2934:DriveSpace
2799:3D Pinball
2299:SharePoint
2063:Start menu
1908:Phone Link
1771:Calculator
1726:PowerShell
1587:Management
1410:2011-12-14
1385:2011-12-14
1341:2011-12-14
1277:2017-10-25
1190:2017-08-26
1109:2011-12-14
999:References
957:assemblies
904:VCOMP*.DLL
794:CRTDLL.DLL
787:MSVCP*.DLL
774:MSVCRT.DLL
726:Windows XP
692:Other APIs
629:WS2_32.DLL
624:WS2_32.DLL
586:USER32.DLL
575:USER32.DLL
557:monochrome
526:native API
382:Native API
235:known as "
157:newspapers
39:improve it
3014:Messenger
3009:Messaging
2939:DVD Maker
2909:CD Player
2904:CardSpace
2855:Solitaire
2555:BitLocker
2550:AppLocker
2184:Hard link
2073:Task View
2051:Namespace
2021:ClearType
1841:Messaging
1826:Magnifier
1791:Clipchamp
1766:3D Viewer
1292:Microsoft
1098:Microsoft
747:IMM32.DLL
737:WINMM.DLL
732:WINMM.DLL
678:OLE32.DLL
673:OLE32.DLL
637:wsock.dll
532:GDI32.DLL
490:Win32 API
484:userspace
438:csrss.exe
421:csrss.exe
417:csrss.exe
390:NTDLL.DLL
376:NTDLL.DLL
335:Windows 8
319:I/O ports
80:summarize
45:talk page
3258:Category
3135:MS-DOS 7
3120:ScanDisk
3039:NTBackup
2919:Contacts
2899:Cardfile
2834:Hold 'Em
2813:FreeCell
2659:VBScript
2570:Defender
2538:Security
2524:Winlogon
2479:Registry
2093:Services
2026:Explorer
2011:AutoPlay
1898:Paint 3D
1883:OneDrive
1873:Narrator
1821:Get Help
1776:Calendar
1671:Settings
1641:IExpress
1486:Archived
1473:Archived
1361:Symantec
967:See also
900:instead)
888:–
879:–
877:MFC*.DLL
870:–
868:ATL*.DLL
798:DLL Hell
780:for the
728:system.
3234:Mahjong
3155:Interix
3089:WinHelp
2989:Journal
2979:Imaging
2827:InkBall
2713:DirectX
2676:ActiveX
2664:JScript
2377:Console
2349:Hyper-V
2244:Domains
2068:Taskbar
2041:IFilter
2016:AutoRun
1978:WordPad
1973:Weather
1888:OneNote
1878:Notepad
1801:Cortana
1676:Sysprep
1049:Twitter
945:C++/CLI
910:runtime
776:is the
724:from a
633:Winsock
518:process
478:; many
443:Unlike
367:hal.dll
363:Itanium
339:hal.dll
304:hal.dll
280:chipset
276:hal.dll
255:HAL.DLL
171:scholar
3267:
3256:
3229:Hover!
3103:Others
3084:Travel
3079:Syskey
2862:Tinker
2820:Hearts
2748:WinUSB
2733:WinAPI
2718:Native
2529:WinUSB
2454:MinWin
2231:Server
2031:Search
1943:Sports
1913:Photos
1903:People
1781:Camera
1250:
1162:
1133:
1072:
1022:
959:(e.g.
908:OpenMP
567:, and
522:thread
433:chkdsk
409:linked
359:x86-64
241:memory
173:
166:
159:
152:
144:
3195:WinFS
3094:Write
2791:Games
2758:Games
2631:WoW64
2459:NTLDR
2449:LSASS
2382:CSRSS
2189:links
2164:exFAT
1993:Shell
1958:Store
1948:Start
1938:Skype
1893:Paint
1868:Money
1796:Clock
1743:WinRE
1651:Netsh
1589:tools
1578:Games
1045:Tweet
842:Clang
813:MinGW
752:IMM32
741:WinMM
445:Win32
386:Win32
178:JSTOR
164:books
3269:List
3150:HPFS
2914:Chat
2872:Apps
2774:Surf
2723:.NET
2691:DCOM
2519:WHEA
2514:USER
2504:SMSS
2294:WSUS
2274:MSMQ
2216:ReFS
2179:NTFS
2154:CDFS
2111:CLFS
2106:BITS
2006:Aero
1983:Xbox
1963:Tips
1851:2022
1836:Maps
1831:Mail
1806:Edge
1758:Apps
1553:APIs
1303:2023
1248:ISBN
1219:Wine
1160:ISBN
1131:ISBN
1070:ISBN
1020:ISBN
846:LLVM
831:UCRT
639:and
555:and
520:and
361:and
347:APIC
343:ACPI
313:and
300:.sys
227:The
150:news
3049:Pay
2949:Fax
2696:OLE
2671:COM
2654:WSH
2641:API
2402:DLL
2397:EXE
2309:PWS
2289:IIS
2249:DNS
2221:UDF
2209:EFS
2204:TxF
2174:FAT
2169:IFS
2159:DFS
1748:WMI
963:).
858:).
840:or
838:GCC
722:DLL
550:VGA
546:EGA
461:Rtl
331:x86
329:On
324:CPU
311:PCI
133:by
3286::
1566:NT
1561:9x
1358:.
1319:.
1294:.
1270:.
1246:.
1244:71
1199:^
1095:.
1084:^
943:,
939:,
937:C#
825:.
758:.
688:.
658:.
571:.
563:,
512:,
486:.
440:.
398:Nt
306:.
48:.
1534:e
1527:t
1520:v
1455:.
1441:.
1427:.
1413:.
1388:.
1344:.
1323:.
1305:.
1280:.
1256:.
1193:.
1168:.
1139:.
1112:.
1078:.
1051:.
1043:(
1028:.
844:/
829:(
548:/
218:)
212:(
200:)
194:(
189:)
185:(
175:·
168:·
161:·
154:·
127:.
98:)
94:(
84:.
55:)
51:(
Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.