Knowledge (XXG)

Microsoft Windows library files

Source 📝

260: 3253: 113: 3264: 25: 66: 620:, the Common Dialog Box Library, implements a wide variety of Windows dialog boxes intended to perform what Microsoft deems 'common application tasks'. Starting with the release of Windows Vista, Microsoft considers the "Open" and "Save as" dialog boxes provided by this library as deprecated and replaced by the 'Common Item Dialog API'. 719:
This functionality was removed from Windows Vista (and therefore later versions) to improve security and rid the operating system of generally unused functionality. Scrap (.shs) files have been used by viruses because they can contain a wide variety of files (including executable code), and the file
297:
The HAL is loaded into kernel address space and runs in kernel mode, so routines in the HAL cannot be called directly by applications, and no user mode APIs correspond directly to HAL routines. Instead, the HAL provides services primarily to the Windows executive and kernel and to kernel mode device
592:
that matches the Windows look and feel. Programs call functions from Windows USER to perform operations such as creating and managing windows, receiving window messages (which are mostly user input such as mouse and keyboard events, but also notifications from the operating system), displaying text
608:
implements a wide variety of standard Windows controls, such as File Open, Save, and Save As dialogs, progress bars, and list views. It calls functions from both USER32.DLL and GDI32.DLL to create and manage the windows for these UI elements, place various graphic elements within them, and collect
596:
Many of the functions in USER32.DLL call upon GDI functions exported by GDI32.DLL to do the actual rendering of the various elements of the user interface. Some types of programs will also call GDI functions directly to perform lower-level drawing operations within a window previously created via
540:
functions that perform primitive drawing functions for output to video displays and printers. It is used, for example, in the XP version of Paint. Applications call GDI functions directly to perform low-level drawing (line, rectangle, ellipse), text output, font management, and similar functions.
321:
and registers of their devices. The drivers use HAL routines because different platforms may require different implementations of these operations. The HAL implements the operations appropriately for each platform, so the same driver executable file can be used on all platforms using the same
851:. However, C/C++ programs using UCRTBASE.DLL are forced to link against another new DLL, the VCRuntime. At Version 14.0, this was VCRUNTIME140.DLL. The name has the potential to change at future versions, but has not done so as far as of Version 17.0. 803:
Versions of MSVC before 4.0 and from 7.0 to 12.0 used differently named DLLs for each version (MSVCR20.DLL, MSVCR70.DLL, MSVCR71.DLL, MSVCP110.DLL, etc.). Applications are required to install the appropriate version, and Microsoft offers
415:; the primary reason for their existence is to perform tasks that must run early in the system startup sequence before the Win32 subsystem is available. An obvious but important example is the creation of the Win32 subsystem process, 784:
compiler from version 4.2 to 6.0. It provides programs compiled by these versions of MSVC with most of the standard C library functions. These include string manipulation, memory allocation, C-style input/output calls, and others.
1552: 337:, there are several different HAL files on the installation media. The Windows installation procedure determines which ones are appropriate for the current platform and copies it to the hard drive, renaming it to 293:
than on one without. The HAL provides a single function for this purpose that works with all kinds of interrupts by various chipsets, so that other components need not be concerned with the differences.
588:
implements the Windows USER component that creates and manipulates the standard elements of the Windows user interface, such as the desktop, windows, and menus. It thus enables programs to implement a
251:
HAL.DLL is a kernel-mode library file and it cannot be used by any user-mode program. NTDLL.DLL is only used by some programs, but it is a dependency of most Win32 libraries used by programs.
926:(note the file extension) for MS C 9 and 10 (MSVC 2.x, 4.x) (Back then, the draft C++ Standard Library was integrated within MSVCRT.DLL. It was split up with the release of Visual C++ 5.0) 471:). A common library linked with Native applications is nt.lib, which contains startup code for Native applications, similar to how the C runtime provides startup code for Win32 apps. 404:. Native APIs are also used to implement many of the "kernel APIs" or "base APIs" exported by KERNEL32.DLL. The large majority of Windows applications do not call NTDLL.DLL directly. 1532: 796:
library instead. In older versions of Windows, programs which linked against MSVCRT.DLL were expected to install a compatible copy in the System32 folder, but this contributed to
3289: 419:. Before the csrss.exe process exists, no Win32 processes may be created, therefore the process that creates it (Smss.exe, the "session manager") must use the native subsystem. 243:. This article provides an overview of the core libraries that are included with every modern Windows installation, on top of which most Windows applications are built. 130: 38: 1156:
Information and Communications Security: 8th International Conference, ICICS 2006 – Raleigh, NC, USA, December 4–7, 2006 – proceedings
720:
extension is not shown even when "Hide file extensions from known file types" is disabled. The functionality can be restored by copying registry entries and the
426:
Despite having an ".exe" file extension, native applications cannot be executed by the user (or any program in the Win32 or other subsystems). An example is the
2268: 372:
HAL is merged (or statically linked) into ntoskrnl.exe starting with version 2004 of Windows 10, and the dll only serves as a stub for backwards compatibility.
1379: 482:
and other utility software vendors incorporate Native Applications within their products, usually to perform some boot-time task that cannot be carried out in
278:. The HAL implements a number of functions that are implemented in different ways by different hardware platforms, which in this context, refers mostly to the 712:, which are automatically created when you drag selected content from an OLE-capable application into an Explorer window or desktop, but you can also use the 1355: 2283: 2448: 1525: 346: 290: 87: 74: 459:
as is found in a Win32 application), obtain their command-line arguments via a pointer to an in-memory structure, manage their own memory using the
2105: 177: 3139: 1518: 1251: 1163: 1134: 1073: 1023: 149: 3268: 1541: 1295: 1179: 1092: 982: 44: 1399: 955: – Multilanguage Standard Common Object Runtime Library, formerly Microsoft Common Object Runtime Library) and so-called 436:
during the system initialization "Blue Screen". Other prominent examples are the services that implement the various subsystems, such as
2518: 2158: 1742: 1577: 156: 2690: 2599: 2115: 1747: 834: 823: 524:
creation, and synchronization functions. Many of these are implemented within KERNEL32.DLL by calling corresponding functions in the
1495: 792:
It has shipped with Windows versions since Windows 95 OSR2.5 for use by other Windows components; earlier versions shipped with the
214: 196: 52: 163: 2381: 2343: 2328: 3184: 2766: 2293: 936: 134: 463:
heap API, (which the Win32 heap APIs are just wrappers around—no real difference there) and return execution with a call to
145: 2308: 384:. The Native API is the interface used by user-mode components of the operating system that must run without support from 3149: 3018: 2705: 2695: 2569: 2473: 2333: 1690: 1645: 880: 705: 685: 1485: 3294: 3257: 2625: 2584: 2483: 2338: 2135: 1850: 1800: 1472: 1424: 1102: 635:
API, which provides TCP/IP networking functions and provides partial, broken compatibility with other network APIs.
2847: 2727: 2433: 1932: 1572: 1565: 1560: 1365: 977: 972: 271: 264: 1505: 1267: 123: 79: 3179: 3144: 2574: 2564: 2503: 2413: 2303: 2273: 1922: 1620: 545: 537: 1335: 2544: 2488: 2468: 2313: 2082: 1967: 800:
because many installers failed to check the library version against the installed version before replacing it.
589: 1857: 286:
can then call these functions in the same way on all platforms, without regard for the actual implementation.
170: 3129: 3124: 2968: 2963: 2923: 2883: 2833: 2579: 2323: 2318: 2193: 2168: 2130: 2100: 2050: 1862: 1785: 1710: 1630: 1605: 871: 837: 709: 3299: 3109: 3073: 2685: 2670: 2428: 2386: 2278: 2208: 2125: 2110: 1705: 681: 236: 3238: 3058: 3003: 2943: 2928: 2737: 2408: 2363: 2220: 2173: 239:", which are code libraries that can be used by multiple processes while only one copy is loaded into 3223: 3218: 3063: 3033: 2998: 2888: 2594: 2589: 2493: 2443: 2401: 2371: 2258: 1845: 1810: 1757: 1695: 1044: 992: 721: 822:), most of the C/C++ runtime was moved into a new DLL, UCRTBASE.DLL, which conforms closely with C99 3164: 3023: 2978: 2953: 2908: 2854: 2653: 2508: 2391: 1840: 1825: 1765: 1685: 1655: 755: 654:, the Advanced Windows 32 Base API DLL, provides security calls and functions for manipulating the 517: 1452: 559:
printers. The functionality has expanded over the years, and now includes support for things like
3169: 3119: 2893: 2812: 2798: 2717: 2423: 2263: 2230: 2203: 2198: 1872: 1775: 1770: 1670: 1438: 1183: 854:
Source code for runtime libraries is included in Visual C++ for reference and debugging (e.g. in
777: 521: 479: 408: 298:
drivers. Although drivers for most hardware are contained in other files, commonly of file type
1403: 811:
This runtime library is used by programs written in Visual C++ and a few other compilers (e.g.
3233: 3159: 3114: 3013: 3008: 2983: 2938: 2903: 2773: 2077: 1887: 1720: 1247: 1159: 1151: 1130: 1124: 1069: 1019: 1013: 808:
packages for this purpose, though Windows typically comes with one version already installed.
568: 509: 228: 1243: 1063: 396:(and its variants), and the majority of exported symbols within these libraries are prefixed 3174: 3083: 2918: 2861: 2819: 2680: 2648: 2604: 2559: 2478: 2238: 2035: 1912: 1902: 1665: 1660: 940: 893: 655: 310: 283: 232: 349:, and whether or not multiple processors are present and enabled. (The multiple cores of a 259: 3210: 3093: 3068: 3053: 3043: 2993: 2988: 2742: 2376: 2092: 1957: 1947: 1892: 1877: 1735: 1625: 1489: 1476: 1218: 713: 475: 369:
for each CPU architecture. On Windows 8 and later, the x86 version also only has one HAL.
240: 1206: 2700: 2243: 2055: 2045: 2030: 1962: 1830: 1805: 1780: 1730: 1700: 1610: 956: 948: 897: 564: 560: 354: 350: 3283: 3189: 3048: 2948: 2288: 2248: 2025: 2000: 1992: 1927: 1795: 1595: 1236: 1040: 819: 552: 2958: 2913: 2840: 2805: 2513: 2463: 2253: 2005: 1952: 1917: 1835: 1815: 1635: 1615: 889: 781: 580: 513: 474:
Though most of the API is undocumented, Native Applications can be built using the
448: 393: 326:
architecture, and the driver source file can be portable across all architectures.
1492: – Tips for using the Kernel API Client Library with Visual Basic 1316: 3028: 2973: 2878: 2732: 2620: 2498: 2353: 2145: 2120: 1715: 987: 495: 314: 289:
For example, responding to an interrupt is quite different on a machine with an
112: 1510: 1479: – Tips for using the User API Client Library with Visual Basic 716:
to create them. They can then be dragged into another OLE-capable application.
500:
The libraries in this section each implement various subsets of the Win32 API.
2933: 2757: 2298: 2188: 2062: 1982: 1907: 1725: 1222: 725: 556: 525: 447:
applications, native applications instantiate within the Kernel runtime code (
381: 2554: 2549: 2183: 2072: 2020: 1790: 1482: 1291: 1097: 944: 483: 437: 420: 416: 341:
if necessary. Among the criteria for this selection are: the presence of an
334: 318: 849: 65: 1469: 508:
KERNEL32.DLL exposes to applications most of the Win32 base APIs, such as
3134: 3038: 2898: 2658: 2523: 2153: 2010: 1897: 1882: 1820: 1680: 1640: 1453:"What does the "ms" in "mscorlib" stand for - hint: It's not "Microsoft"" 1360: 1015:
The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System
797: 922:– Microsoft C++ Library, contains the deprecated C++ classes from 3154: 3088: 2826: 2712: 2675: 2663: 2348: 2067: 2040: 2015: 1977: 1675: 1600: 1500: 1048: 632: 362: 279: 3228: 3078: 2747: 2528: 2453: 907: 432: 358: 3194: 2630: 2458: 2163: 1937: 1650: 841: 812: 740: 444: 385: 258: 669:
provides functions for querying and managing network interfaces.
2722: 2396: 2215: 2178: 1501:
Unofficial website that documents most of the Native API methods
845: 342: 299: 1514: 2640: 1972: 1942: 1867: 1296:"How RPC Works: Remote Procedure Call (RPC) | Microsoft Learn" 549: 330: 323: 106: 59: 18: 1207:
Visual Studio Developer Center: Identifying Functions in DLLs
1152:"Modular behavior profiles in systems with shared libraries" 833:) from Windows 10 onwards become a component part of Windows 388:
or other API subsystems. Most of this API is implemented in
856:
C:\Program Files\Microsoft Visual Studio 11.0\VC\crt\src
643:
are older versions for Win3.11 and Win95 compatibility.
309:
Kernel mode device drivers for devices on buses such as
1238:
Windows graphics programming: Win32 GDI and DirectDraw
1123:
Russinovich, Mark A. & Solomon, David A. (2009).
754:
is responsible for invoking and interacting with the
357:
CPU, all count as "processors" for this purpose.) On
353:, and even the "logical processors" implemented by a 1087: 1085: 916:– Microsoft Visual C++ Runtime, for MSVC 14.0+ 815:). Some compilers have their own runtime libraries. 3207: 3102: 2871: 2790: 2783: 2756: 2639: 2613: 2537: 2362: 2229: 2144: 2091: 1991: 1756: 1586: 137:. Unsourced material may be challenged and removed. 1235: 411:directly against this library are said to use the 16:List of main shared-libraries of Microsoft Windows 451:) and so they must have a different entry point ( 291:Advanced Programmable Interrupt Controller (APIC) 2418: 1150:Marceau, Carla & Stillerman, Matt (2006). 1018:. Jones & Bartlett Learning. p. 101. 1526: 8: 3290:Microsoft application programming interfaces 1336:"Windows Confidential: Scrapping the Scraps" 317:directly call routines in the HAL to access 593:in a window, and displaying message boxes. 53:Learn how and when to remove these messages 3263: 2787: 1533: 1519: 1511: 1439:"Source Code for the C Run-Time Functions" 544:Initially, GDI supported 16 and 256 color 1068:. John Wiley & Sons. pp. 68–69. 1065:Reversing: Secrets of Reverse Engineering 836:, so every compiler (either non MS, like 215:Learn how and when to remove this message 197:Learn how and when to remove this message 1506:Retrieving the KERNEL32.DLL base address 951:. It has many libraries (one of them is 90:of all important aspects of the article. 1202: 1200: 1004: 302:, a few core drivers are compiled into 1242:. Prentice Hall Professional. p.  263:The Hardware Abstraction Layer in the 86:Please consider expanding the lead to 3140:Next-Generation Secure Computing Base 1268:"Common Dialog Box Library (Windows)" 1154:. In Neng, Peng; et al. (eds.). 947:and other .NET languages require the 769:MSVCRT.DLL, MSVCP*.DLL and CRTDLL.DLL 708:mechanism. It implements support for 365:platforms there is just one possible 345:-compatible BIOS, the presence of an 7: 1425:"C++ binary compatibility 2015-2022" 1217:See also, the documentation for the 1093:"Inside Native Windows Applications" 983:List of Microsoft Windows components 231:operating system supports a form of 135:adding citations to reliable sources 2269:Distributed Transaction Coordinator 1041:"Did I miss something? Routines..." 2600:User Interface Privilege Isolation 1317:"WD: What is a Scrap (.shs) file?" 789:is the corresponding C++ library. 706:Object Linking and Embedding (OLE) 14: 146:"Microsoft Windows library files" 34:This article has multiple issues. 3262: 3252: 3251: 739:provides access to the original 111: 64: 23: 2329:Remote Differential Compression 1129:. O'Reilly Media. p. 136. 538:Graphics Device Interface (GDI) 423:itself is such an application. 122:needs additional citations for 78:may be too short to adequately 42:or discuss these issues on the 3185:Windows System Assessment Tool 590:graphical user interface (GUI) 476:Windows Driver Development Kit 380:NTDLL.DLL exports the Windows 88:provide an accessible overview 1: 1483:API calls list (KERNEL32.DLL) 1221:implementation of GDI32.DLL: 2474:Open XML Paper Specification 2334:Remote Installation Services 1542:Microsoft Windows components 1180:"Inside Native Applications" 881:Microsoft Foundation Classes 686:Object Linking and Embedding 2626:Windows Subsystem for Linux 2585:Mandatory Integrity Control 2339:Windows Deployment Services 2136:Wireless Zero Configuration 1470:API calls list (USER32.DLL) 1039:@PetrBenes (25 July 2019). 3318: 2728:Universal Windows Platform 2434:Kernel Transaction Manager 2419:Hardware Abstraction Layer 2116:Multimedia Class Scheduler 978:Windows NT startup process 973:Architecture of Windows NT 806:Visual C++ Redistributable 578: 493: 282:. Other components in the 272:Hardware Abstraction Layer 265:architecture of Windows NT 3247: 3180:Windows Services for UNIX 2565:Data Execution Prevention 2414:Graphics Device Interface 2304:Network Access Protection 1923:Remote Desktop Connection 1548: 1158:. Springer. p. 371. 392:and at the upper edge of 2545:Security and Maintenance 2489:Security Account Manager 2083:Windows XP visual styles 1321:Microsoft Knowledge Base 961:System.Windows.Forms.dll 931:.NET Framework libraries 528:, exposed by NTDLL.DLL. 274:(HAL) is implemented in 3130:Media Control Interface 2964:Help and Support Center 2580:Kernel Patch Protection 2344:System Resource Manager 2324:Remote Desktop Services 2319:Print Services for UNIX 2101:Service Control Manager 1711:Windows Error Reporting 1631:DirectX Diagnostic Tool 1380:"How to open SHS files" 872:Active Template Library 862:Other runtime libraries 848:) can link against UCRT 3110:Desktop Cleanup Wizard 2686:COM Structured storage 2387:Desktop Window Manager 2279:Windows Media Services 1400:"C Run-Time Libraries" 1012:Blunden, Bill (2009). 682:Component Object Model 457:(w)(Win)MainCRTStartup 407:Applications that are 267: 237:dynamic-link libraries 2738:Windows Mixed Reality 2409:Enhanced Write Filter 2259:Roaming user profiles 1368:on November 10, 2006. 1062:Eilam, Eldad (2011). 892:6.0 Virtual Machine ( 579:Further information: 494:Further information: 262: 3019:Mobile Device Center 2969:Health & Fitness 2767:Solitaire Collection 2595:User Account Control 2590:Protected Media Path 2494:Server Message Block 2444:Logical Disk Manager 1696:System Policy Editor 1681:System Configuration 1496:Native API reference 993:Dynamic link library 935:Programs written in 827:Universal C Run Time 131:improve this article 3165:Virtual DOS machine 2509:System Idle Process 2484:Resource Protection 2392:Portable Executable 2284:Active DRM Services 1686:System File Checker 1656:Performance Monitor 1234:Yuan, Feng (2001). 1223:Wine API: gdi32.dll 818:With Version 14.0 ( 756:Input Method Editor 247:Internal components 3295:Windows components 3170:Windows on Windows 2894:Backup and Restore 2706:Transaction Server 2424:I/O request packet 2264:Folder redirection 1933:Speech Recognition 1691:System Information 1646:Management Console 1488:2015-11-21 at the 1475:2015-11-21 at the 1272:msdn.microsoft.com 1126:Windows® Internals 924:<iostream.h> 906:– Microsoft 820:Visual Studio 2015 778:C standard library 597:USER32 functions. 536:GDI32.DLL exports 514:input/output (I/O) 480:antivirus software 465:RtlExitUserProcess 268: 3277: 3276: 3203: 3202: 3160:Video for Windows 3115:Games for Windows 2984:Internet Explorer 2078:Windows Spotlight 1721:Windows Installer 1253:978-0-13-086985-2 1165:978-3-540-49496-6 1136:978-0-7356-3796-2 1075:978-1-118-07976-8 1025:978-1-59822-061-2 896:programs require 782:Visual C++ (MSVC) 762:Runtime libraries 710:shell scrap files 569:multiple monitors 510:memory management 430:binary that runs 333:systems prior to 229:Microsoft Windows 225: 224: 217: 207: 206: 199: 181: 105: 104: 57: 3307: 3266: 3265: 3255: 3254: 3175:Windows SideShow 2954:Food & Drink 2848:Spider Solitaire 2788: 2681:ActiveX Document 2649:Active Scripting 2605:Windows Firewall 2560:Credential Guard 2239:Active Directory 2036:Indexing Service 1666:Resource Monitor 1661:Recovery Console 1535: 1528: 1521: 1512: 1457: 1456: 1449: 1443: 1442: 1435: 1429: 1428: 1421: 1415: 1414: 1412: 1411: 1402:. Archived from 1396: 1390: 1389: 1387: 1386: 1376: 1370: 1369: 1364:. Archived from 1352: 1346: 1345: 1343: 1342: 1331: 1325: 1324: 1313: 1307: 1306: 1304: 1302: 1288: 1282: 1281: 1279: 1278: 1264: 1258: 1257: 1241: 1231: 1225: 1215: 1209: 1204: 1195: 1194: 1192: 1191: 1182:. Archived from 1176: 1170: 1169: 1147: 1141: 1140: 1120: 1114: 1113: 1111: 1110: 1101:. Archived from 1089: 1080: 1079: 1059: 1053: 1052: 1036: 1030: 1029: 1009: 941:Visual Basic.NET 894:Visual Basic.NET 857: 656:Windows Registry 453:NtProcessStartup 413:native subsystem 284:operating system 233:shared libraries 220: 213: 202: 195: 191: 188: 182: 180: 139: 115: 107: 100: 97: 91: 68: 60: 49: 27: 26: 19: 3317: 3316: 3310: 3309: 3308: 3306: 3305: 3304: 3280: 3279: 3278: 3273: 3243: 3211:Microsoft Store 3209: 3199: 3145:POSIX subsystem 3125:File Protection 3098: 3069:Program Manager 3054:Phone Companion 3044:Outlook Express 2994:Make Compatible 2924:Desktop Gadgets 2884:Anytime Upgrade 2867: 2779: 2752: 2743:Windows Runtime 2635: 2609: 2575:Family features 2533: 2358: 2314:DFS Replication 2225: 2140: 2131:Error Reporting 2087: 1987: 1863:Mobility Center 1858:Movies & TV 1752: 1736:Windows Insider 1626:Driver Verifier 1621:Drive Optimizer 1588: 1582: 1573:Booting process 1544: 1539: 1490:Wayback Machine 1477:Wayback Machine 1466: 1461: 1460: 1451: 1450: 1446: 1437: 1436: 1432: 1423: 1422: 1418: 1409: 1407: 1398: 1397: 1393: 1384: 1382: 1378: 1377: 1373: 1354: 1353: 1349: 1340: 1338: 1333: 1332: 1328: 1315: 1314: 1310: 1300: 1298: 1290: 1289: 1285: 1276: 1274: 1266: 1265: 1261: 1254: 1233: 1232: 1228: 1216: 1212: 1205: 1198: 1189: 1187: 1178: 1177: 1173: 1166: 1149: 1148: 1144: 1137: 1122: 1121: 1117: 1108: 1106: 1091: 1090: 1083: 1076: 1061: 1060: 1056: 1038: 1037: 1033: 1026: 1011: 1010: 1006: 1001: 969: 933: 864: 855: 771: 764: 749: 734: 714:Object Packager 704:is part of the 699: 694: 675: 664: 649: 631:implements the 626: 615: 603: 583: 577: 534: 506: 498: 492: 467:(as opposed to 402:NtDisplayString 378: 257: 249: 221: 210: 209: 208: 203: 192: 186: 183: 140: 138: 128: 116: 101: 95: 92: 85: 73:This article's 69: 28: 24: 17: 12: 11: 5: 3315: 3314: 3311: 3303: 3302: 3297: 3292: 3282: 3281: 3275: 3274: 3272: 3271: 3260: 3248: 3245: 3244: 3242: 3241: 3236: 3231: 3226: 3221: 3215: 3213: 3205: 3204: 3201: 3200: 3198: 3197: 3192: 3187: 3182: 3177: 3172: 3167: 3162: 3157: 3152: 3147: 3142: 3137: 3132: 3127: 3122: 3117: 3112: 3106: 3104: 3100: 3099: 3097: 3096: 3091: 3086: 3081: 3076: 3074:Steps Recorder 3071: 3066: 3061: 3056: 3051: 3046: 3041: 3036: 3031: 3026: 3021: 3016: 3011: 3006: 3001: 2996: 2991: 2986: 2981: 2976: 2971: 2966: 2961: 2956: 2951: 2946: 2941: 2936: 2931: 2926: 2921: 2916: 2911: 2906: 2901: 2896: 2891: 2886: 2881: 2875: 2873: 2869: 2868: 2866: 2865: 2858: 2851: 2844: 2837: 2830: 2823: 2816: 2809: 2802: 2794: 2792: 2785: 2781: 2780: 2778: 2777: 2770: 2762: 2760: 2754: 2753: 2751: 2750: 2745: 2740: 2735: 2730: 2725: 2720: 2715: 2710: 2709: 2708: 2703: 2701:OLE Automation 2698: 2693: 2688: 2683: 2678: 2668: 2667: 2666: 2661: 2656: 2645: 2643: 2637: 2636: 2634: 2633: 2628: 2623: 2617: 2615: 2611: 2610: 2608: 2607: 2602: 2597: 2592: 2587: 2582: 2577: 2572: 2567: 2562: 2557: 2552: 2547: 2541: 2539: 2535: 2534: 2532: 2531: 2526: 2521: 2516: 2511: 2506: 2501: 2496: 2491: 2486: 2481: 2476: 2471: 2469:Object Manager 2466: 2461: 2456: 2451: 2446: 2441: 2436: 2431: 2429:Imaging Format 2426: 2421: 2416: 2411: 2406: 2405: 2404: 2399: 2389: 2384: 2379: 2374: 2368: 2366: 2360: 2359: 2357: 2356: 2351: 2346: 2341: 2336: 2331: 2326: 2321: 2316: 2311: 2306: 2301: 2296: 2291: 2286: 2281: 2276: 2271: 2266: 2261: 2256: 2251: 2246: 2241: 2235: 2233: 2227: 2226: 2224: 2223: 2218: 2213: 2212: 2211: 2206: 2201: 2196: 2191: 2186: 2176: 2171: 2166: 2161: 2156: 2150: 2148: 2142: 2141: 2139: 2138: 2133: 2128: 2126:Task Scheduler 2123: 2118: 2113: 2108: 2103: 2097: 2095: 2089: 2088: 2086: 2085: 2080: 2075: 2070: 2065: 2060: 2059: 2058: 2056:Special folder 2053: 2048: 2043: 2038: 2028: 2023: 2018: 2013: 2008: 2003: 1997: 1995: 1989: 1988: 1986: 1985: 1980: 1975: 1970: 1968:Voice Recorder 1965: 1960: 1955: 1950: 1945: 1940: 1935: 1930: 1925: 1920: 1915: 1910: 1905: 1900: 1895: 1890: 1885: 1880: 1875: 1870: 1865: 1860: 1855: 1854: 1853: 1843: 1838: 1833: 1828: 1823: 1818: 1813: 1808: 1803: 1798: 1793: 1788: 1783: 1778: 1773: 1768: 1762: 1760: 1754: 1753: 1751: 1750: 1745: 1740: 1739: 1738: 1731:Windows Update 1728: 1723: 1718: 1713: 1708: 1703: 1701:System Restore 1698: 1693: 1688: 1683: 1678: 1673: 1668: 1663: 1658: 1653: 1648: 1643: 1638: 1633: 1628: 1623: 1618: 1613: 1611:Device Manager 1608: 1603: 1601:Command Prompt 1598: 1592: 1590: 1584: 1583: 1581: 1580: 1575: 1570: 1569: 1568: 1563: 1555: 1549: 1546: 1545: 1540: 1538: 1537: 1530: 1523: 1515: 1509: 1508: 1503: 1498: 1493: 1480: 1465: 1464:External links 1462: 1459: 1458: 1444: 1430: 1416: 1391: 1371: 1356:"VBS.Stages.A" 1347: 1334:Raymond Chen. 1326: 1308: 1283: 1259: 1252: 1226: 1210: 1196: 1171: 1164: 1142: 1135: 1115: 1081: 1074: 1054: 1047:) – via 1031: 1024: 1003: 1002: 1000: 997: 996: 995: 990: 985: 980: 975: 968: 965: 949:.NET Framework 932: 929: 928: 927: 917: 914:VCRUNTIME*.DLL 911: 901: 898:.NET Framework 883: 874: 863: 860: 770: 767: 763: 760: 748: 745: 733: 730: 698: 695: 693: 690: 674: 671: 663: 660: 648: 645: 625: 622: 614: 611: 602: 599: 576: 573: 565:alpha channels 561:TrueType fonts 533: 530: 505: 502: 491: 488: 455:, rather than 400:, for example 377: 374: 355:hyperthreading 351:multi-core CPU 256: 253: 248: 245: 223: 222: 205: 204: 119: 117: 110: 103: 102: 82:the key points 72: 70: 63: 58: 32: 31: 29: 22: 15: 13: 10: 9: 6: 4: 3: 2: 3313: 3312: 3301: 3300:Windows files 3298: 3296: 3293: 3291: 3288: 3287: 3285: 3270: 3261: 3259: 3250: 3249: 3246: 3240: 3237: 3235: 3232: 3230: 3227: 3225: 3222: 3220: 3217: 3216: 3214: 3212: 3206: 3196: 3193: 3191: 3190:Windows To Go 3188: 3186: 3183: 3181: 3178: 3176: 3173: 3171: 3168: 3166: 3163: 3161: 3158: 3156: 3153: 3151: 3148: 3146: 3143: 3141: 3138: 3136: 3133: 3131: 3128: 3126: 3123: 3121: 3118: 3116: 3113: 3111: 3108: 3107: 3105: 3101: 3095: 3092: 3090: 3087: 3085: 3082: 3080: 3077: 3075: 3072: 3070: 3067: 3065: 3062: 3060: 3059:Photo Gallery 3057: 3055: 3052: 3050: 3047: 3045: 3042: 3040: 3037: 3035: 3032: 3030: 3027: 3025: 3022: 3020: 3017: 3015: 3012: 3010: 3007: 3005: 3004:Meeting Space 3002: 3000: 2997: 2995: 2992: 2990: 2987: 2985: 2982: 2980: 2977: 2975: 2974:HyperTerminal 2972: 2970: 2967: 2965: 2962: 2960: 2957: 2955: 2952: 2950: 2947: 2945: 2944:Easy Transfer 2942: 2940: 2937: 2935: 2932: 2930: 2927: 2925: 2922: 2920: 2917: 2915: 2912: 2910: 2907: 2905: 2902: 2900: 2897: 2895: 2892: 2890: 2887: 2885: 2882: 2880: 2877: 2876: 2874: 2870: 2864: 2863: 2859: 2857: 2856: 2852: 2850: 2849: 2845: 2843: 2842: 2838: 2836: 2835: 2831: 2829: 2828: 2824: 2822: 2821: 2817: 2815: 2814: 2810: 2808: 2807: 2803: 2801: 2800: 2796: 2795: 2793: 2789: 2786: 2782: 2776: 2775: 2771: 2769: 2768: 2764: 2763: 2761: 2759: 2755: 2749: 2746: 2744: 2741: 2739: 2736: 2734: 2731: 2729: 2726: 2724: 2721: 2719: 2716: 2714: 2711: 2707: 2704: 2702: 2699: 2697: 2694: 2692: 2689: 2687: 2684: 2682: 2679: 2677: 2674: 2673: 2672: 2669: 2665: 2662: 2660: 2657: 2655: 2652: 2651: 2650: 2647: 2646: 2644: 2642: 2638: 2632: 2629: 2627: 2624: 2622: 2619: 2618: 2616: 2614:Compatibility 2612: 2606: 2603: 2601: 2598: 2596: 2593: 2591: 2588: 2586: 2583: 2581: 2578: 2576: 2573: 2571: 2568: 2566: 2563: 2561: 2558: 2556: 2553: 2551: 2548: 2546: 2543: 2542: 2540: 2536: 2530: 2527: 2525: 2522: 2520: 2517: 2515: 2512: 2510: 2507: 2505: 2502: 2500: 2497: 2495: 2492: 2490: 2487: 2485: 2482: 2480: 2477: 2475: 2472: 2470: 2467: 2465: 2462: 2460: 2457: 2455: 2452: 2450: 2447: 2445: 2442: 2440: 2439:Library files 2437: 2435: 2432: 2430: 2427: 2425: 2422: 2420: 2417: 2415: 2412: 2410: 2407: 2403: 2400: 2398: 2395: 2394: 2393: 2390: 2388: 2385: 2383: 2380: 2378: 2375: 2373: 2370: 2369: 2367: 2365: 2361: 2355: 2352: 2350: 2347: 2345: 2342: 2340: 2337: 2335: 2332: 2330: 2327: 2325: 2322: 2320: 2317: 2315: 2312: 2310: 2307: 2305: 2302: 2300: 2297: 2295: 2292: 2290: 2287: 2285: 2282: 2280: 2277: 2275: 2272: 2270: 2267: 2265: 2262: 2260: 2257: 2255: 2252: 2250: 2247: 2245: 2242: 2240: 2237: 2236: 2234: 2232: 2228: 2222: 2219: 2217: 2214: 2210: 2207: 2205: 2202: 2200: 2199:Reparse point 2197: 2195: 2192: 2190: 2187: 2185: 2182: 2181: 2180: 2177: 2175: 2172: 2170: 2167: 2165: 2162: 2160: 2157: 2155: 2152: 2151: 2149: 2147: 2143: 2137: 2134: 2132: 2129: 2127: 2124: 2122: 2119: 2117: 2114: 2112: 2109: 2107: 2104: 2102: 2099: 2098: 2096: 2094: 2090: 2084: 2081: 2079: 2076: 2074: 2071: 2069: 2066: 2064: 2061: 2057: 2054: 2052: 2049: 2047: 2044: 2042: 2039: 2037: 2034: 2033: 2032: 2029: 2027: 2024: 2022: 2019: 2017: 2014: 2012: 2009: 2007: 2004: 2002: 2001:Action Center 1999: 1998: 1996: 1994: 1990: 1984: 1981: 1979: 1976: 1974: 1971: 1969: 1966: 1964: 1961: 1959: 1956: 1954: 1951: 1949: 1946: 1944: 1941: 1939: 1936: 1934: 1931: 1929: 1928:Snipping Tool 1926: 1924: 1921: 1919: 1916: 1914: 1911: 1909: 1906: 1904: 1901: 1899: 1896: 1894: 1891: 1889: 1886: 1884: 1881: 1879: 1876: 1874: 1871: 1869: 1866: 1864: 1861: 1859: 1856: 1852: 1849: 1848: 1847: 1844: 1842: 1839: 1837: 1834: 1832: 1829: 1827: 1824: 1822: 1819: 1817: 1814: 1812: 1809: 1807: 1804: 1802: 1799: 1797: 1794: 1792: 1789: 1787: 1786:Character Map 1784: 1782: 1779: 1777: 1774: 1772: 1769: 1767: 1764: 1763: 1761: 1759: 1755: 1749: 1746: 1744: 1741: 1737: 1734: 1733: 1732: 1729: 1727: 1724: 1722: 1719: 1717: 1714: 1712: 1709: 1707: 1704: 1702: 1699: 1697: 1694: 1692: 1689: 1687: 1684: 1682: 1679: 1677: 1674: 1672: 1669: 1667: 1664: 1662: 1659: 1657: 1654: 1652: 1649: 1647: 1644: 1642: 1639: 1637: 1634: 1632: 1629: 1627: 1624: 1622: 1619: 1617: 1614: 1612: 1609: 1607: 1606:Control Panel 1604: 1602: 1599: 1597: 1596:App Installer 1594: 1593: 1591: 1585: 1579: 1576: 1574: 1571: 1567: 1564: 1562: 1559: 1558: 1557:Architecture 1556: 1554: 1551: 1550: 1547: 1543: 1536: 1531: 1529: 1524: 1522: 1517: 1516: 1513: 1507: 1504: 1502: 1499: 1497: 1494: 1491: 1487: 1484: 1481: 1478: 1474: 1471: 1468: 1467: 1463: 1454: 1448: 1445: 1440: 1434: 1431: 1426: 1420: 1417: 1406:on 2011-12-07 1405: 1401: 1395: 1392: 1381: 1375: 1372: 1367: 1363: 1362: 1357: 1351: 1348: 1337: 1330: 1327: 1322: 1318: 1312: 1309: 1297: 1293: 1287: 1284: 1273: 1269: 1263: 1260: 1255: 1249: 1245: 1240: 1239: 1230: 1227: 1224: 1220: 1214: 1211: 1208: 1203: 1201: 1197: 1186:on 2010-10-23 1185: 1181: 1175: 1172: 1167: 1161: 1157: 1153: 1146: 1143: 1138: 1132: 1128: 1127: 1119: 1116: 1105:on 2010-09-12 1104: 1100: 1099: 1094: 1088: 1086: 1082: 1077: 1071: 1067: 1066: 1058: 1055: 1050: 1046: 1042: 1035: 1032: 1027: 1021: 1017: 1016: 1008: 1005: 998: 994: 991: 989: 986: 984: 981: 979: 976: 974: 971: 970: 966: 964: 962: 958: 954: 950: 946: 942: 938: 930: 925: 921: 918: 915: 912: 909: 905: 902: 899: 895: 891: 887: 884: 882: 878: 875: 873: 869: 866: 865: 861: 859: 852: 850: 847: 843: 839: 835: 832: 828: 824: 821: 816: 814: 809: 807: 801: 799: 795: 790: 788: 783: 779: 775: 768: 766: 761: 759: 757: 753: 746: 744: 742: 738: 731: 729: 727: 723: 717: 715: 711: 707: 703: 696: 691: 689: 687: 684:, as well as 683: 680:provides the 679: 672: 670: 668: 661: 659: 657: 653: 646: 644: 642: 638: 634: 630: 623: 621: 619: 612: 610: 607: 600: 598: 594: 591: 587: 582: 574: 572: 570: 566: 562: 558: 554: 553:display cards 551: 547: 542: 539: 531: 529: 527: 523: 519: 515: 511: 503: 501: 497: 489: 487: 485: 481: 477: 472: 470: 466: 462: 458: 454: 450: 446: 441: 439: 435: 434: 429: 424: 422: 418: 414: 410: 405: 403: 399: 395: 391: 387: 383: 375: 373: 370: 368: 364: 360: 356: 352: 348: 344: 340: 336: 332: 327: 325: 320: 316: 312: 307: 305: 301: 295: 292: 287: 285: 281: 277: 273: 266: 261: 254: 252: 246: 244: 242: 238: 234: 230: 219: 216: 201: 198: 190: 187:February 2013 179: 176: 172: 169: 165: 162: 158: 155: 151: 148: –  147: 143: 142:Find sources: 136: 132: 126: 125: 120:This article 118: 114: 109: 108: 99: 96:February 2013 89: 83: 81: 76: 71: 67: 62: 61: 56: 54: 47: 46: 41: 40: 35: 30: 21: 20: 3224:File Manager 3064:Photo Viewer 2999:Media Center 2959:Groove Music 2889:Address Book 2860: 2853: 2846: 2841:Purble Place 2839: 2832: 2825: 2818: 2811: 2806:Chess Titans 2804: 2797: 2784:Discontinued 2772: 2765: 2464:Ntoskrnl.exe 2438: 2372:Boot Manager 2364:Architecture 2254:Group Policy 2146:File systems 2046:Saved search 1953:Sticky Notes 1918:Quick Assist 1846:Media Player 1816:Feedback Hub 1811:Fax and Scan 1706:Task Manager 1636:Event Viewer 1616:Disk Cleanup 1447: 1433: 1419: 1408:. Retrieved 1404:the original 1394: 1383:. Retrieved 1374: 1366:the original 1359: 1350: 1339:. Retrieved 1329: 1320: 1311: 1301:11 September 1299:. Retrieved 1286: 1275:. Retrieved 1271: 1262: 1237: 1229: 1213: 1188:. Retrieved 1184:the original 1174: 1155: 1145: 1125: 1118: 1107:. Retrieved 1103:the original 1096: 1064: 1057: 1034: 1014: 1007: 960: 953:mscorlib.dll 952: 934: 923: 919: 913: 903: 890:Visual Basic 886:MSVBVM60.DLL 885: 876: 867: 853: 830: 826: 817: 810: 805: 802: 793: 791: 786: 773: 772: 765: 751: 750: 736: 735: 718: 701: 700: 677: 676: 667:NETAPI32.DLL 666: 665: 662:NETAPI32.DLL 652:ADVAPI32.DLL 651: 650: 647:ADVAPI32.DLL 640: 636: 628: 627: 618:COMDLG32.DLL 617: 616: 613:COMDLG32.DLL 609:user input. 606:COMCTL32.DLL 605: 604: 601:COMCTL32.DLL 595: 585: 584: 581:Windows USER 543: 535: 516:operations, 507: 504:KERNEL32.DLL 499: 473: 468: 464: 460: 456: 452: 449:ntoskrnl.exe 442: 431: 427: 425: 412: 406: 401: 397: 394:ntoskrnl.exe 389: 379: 371: 366: 338: 328: 308: 303: 296: 288: 275: 270:The Windows 269: 250: 226: 211: 193: 184: 174: 167: 160: 153: 141: 129:Please help 124:verification 121: 93: 77: 75:lead section 50: 43: 37: 36:Please help 33: 3239:Minesweeper 3208:Spun off to 3029:MSN Dial-up 3024:Movie Maker 2929:Diagnostics 2879:ActiveMovie 2621:COMMAND.COM 2499:Shadow Copy 2354:Server Core 2194:Mount Point 2121:Shadow Copy 1716:Windows Ink 988:Windows API 920:MSVCIRT.DLL 743:audio API. 702:SHSCRAP.DLL 697:SHSCRAP.DLL 641:wsock32.dll 496:Windows API 469:ExitProcess 428:autochk.exe 315:PCI Express 3284:Categories 3219:DVD Player 3034:NetMeeting 2934:DriveSpace 2799:3D Pinball 2299:SharePoint 2063:Start menu 1908:Phone Link 1771:Calculator 1726:PowerShell 1587:Management 1410:2011-12-14 1385:2011-12-14 1341:2011-12-14 1277:2017-10-25 1190:2017-08-26 1109:2011-12-14 999:References 957:assemblies 904:VCOMP*.DLL 794:CRTDLL.DLL 787:MSVCP*.DLL 774:MSVCRT.DLL 726:Windows XP 692:Other APIs 629:WS2_32.DLL 624:WS2_32.DLL 586:USER32.DLL 575:USER32.DLL 557:monochrome 526:native API 382:Native API 235:known as " 157:newspapers 39:improve it 3014:Messenger 3009:Messaging 2939:DVD Maker 2909:CD Player 2904:CardSpace 2855:Solitaire 2555:BitLocker 2550:AppLocker 2184:Hard link 2073:Task View 2051:Namespace 2021:ClearType 1841:Messaging 1826:Magnifier 1791:Clipchamp 1766:3D Viewer 1292:Microsoft 1098:Microsoft 747:IMM32.DLL 737:WINMM.DLL 732:WINMM.DLL 678:OLE32.DLL 673:OLE32.DLL 637:wsock.dll 532:GDI32.DLL 490:Win32 API 484:userspace 438:csrss.exe 421:csrss.exe 417:csrss.exe 390:NTDLL.DLL 376:NTDLL.DLL 335:Windows 8 319:I/O ports 80:summarize 45:talk page 3258:Category 3135:MS-DOS 7 3120:ScanDisk 3039:NTBackup 2919:Contacts 2899:Cardfile 2834:Hold 'Em 2813:FreeCell 2659:VBScript 2570:Defender 2538:Security 2524:Winlogon 2479:Registry 2093:Services 2026:Explorer 2011:AutoPlay 1898:Paint 3D 1883:OneDrive 1873:Narrator 1821:Get Help 1776:Calendar 1671:Settings 1641:IExpress 1486:Archived 1473:Archived 1361:Symantec 967:See also 900:instead) 888:– 879:– 877:MFC*.DLL 870:– 868:ATL*.DLL 798:DLL Hell 780:for the 728:system. 3234:Mahjong 3155:Interix 3089:WinHelp 2989:Journal 2979:Imaging 2827:InkBall 2713:DirectX 2676:ActiveX 2664:JScript 2377:Console 2349:Hyper-V 2244:Domains 2068:Taskbar 2041:IFilter 2016:AutoRun 1978:WordPad 1973:Weather 1888:OneNote 1878:Notepad 1801:Cortana 1676:Sysprep 1049:Twitter 945:C++/CLI 910:runtime 776:is the 724:from a 633:Winsock 518:process 478:; many 443:Unlike 367:hal.dll 363:Itanium 339:hal.dll 304:hal.dll 280:chipset 276:hal.dll 255:HAL.DLL 171:scholar 3267:  3256:  3229:Hover! 3103:Others 3084:Travel 3079:Syskey 2862:Tinker 2820:Hearts 2748:WinUSB 2733:WinAPI 2718:Native 2529:WinUSB 2454:MinWin 2231:Server 2031:Search 1943:Sports 1913:Photos 1903:People 1781:Camera 1250:  1162:  1133:  1072:  1022:  959:(e.g. 908:OpenMP 567:, and 522:thread 433:chkdsk 409:linked 359:x86-64 241:memory 173:  166:  159:  152:  144:  3195:WinFS 3094:Write 2791:Games 2758:Games 2631:WoW64 2459:NTLDR 2449:LSASS 2382:CSRSS 2189:links 2164:exFAT 1993:Shell 1958:Store 1948:Start 1938:Skype 1893:Paint 1868:Money 1796:Clock 1743:WinRE 1651:Netsh 1589:tools 1578:Games 1045:Tweet 842:Clang 813:MinGW 752:IMM32 741:WinMM 445:Win32 386:Win32 178:JSTOR 164:books 3269:List 3150:HPFS 2914:Chat 2872:Apps 2774:Surf 2723:.NET 2691:DCOM 2519:WHEA 2514:USER 2504:SMSS 2294:WSUS 2274:MSMQ 2216:ReFS 2179:NTFS 2154:CDFS 2111:CLFS 2106:BITS 2006:Aero 1983:Xbox 1963:Tips 1851:2022 1836:Maps 1831:Mail 1806:Edge 1758:Apps 1553:APIs 1303:2023 1248:ISBN 1219:Wine 1160:ISBN 1131:ISBN 1070:ISBN 1020:ISBN 846:LLVM 831:UCRT 639:and 555:and 520:and 361:and 347:APIC 343:ACPI 313:and 300:.sys 227:The 150:news 3049:Pay 2949:Fax 2696:OLE 2671:COM 2654:WSH 2641:API 2402:DLL 2397:EXE 2309:PWS 2289:IIS 2249:DNS 2221:UDF 2209:EFS 2204:TxF 2174:FAT 2169:IFS 2159:DFS 1748:WMI 963:). 858:). 840:or 838:GCC 722:DLL 550:VGA 546:EGA 461:Rtl 331:x86 329:On 324:CPU 311:PCI 133:by 3286:: 1566:NT 1561:9x 1358:. 1319:. 1294:. 1270:. 1246:. 1244:71 1199:^ 1095:. 1084:^ 943:, 939:, 937:C# 825:. 758:. 688:. 658:. 571:. 563:, 512:, 486:. 440:. 398:Nt 306:. 48:. 1534:e 1527:t 1520:v 1455:. 1441:. 1427:. 1413:. 1388:. 1344:. 1323:. 1305:. 1280:. 1256:. 1193:. 1168:. 1139:. 1112:. 1078:. 1051:. 1043:( 1028:. 844:/ 829:( 548:/ 218:) 212:( 200:) 194:( 189:) 185:( 175:· 168:· 161:· 154:· 127:. 98:) 94:( 84:. 55:) 51:(

Index

improve it
talk page
Learn how and when to remove these messages

lead section
summarize
provide an accessible overview

verification
improve this article
adding citations to reliable sources
"Microsoft Windows library files"
news
newspapers
books
scholar
JSTOR
Learn how and when to remove this message
Learn how and when to remove this message
Microsoft Windows
shared libraries
dynamic-link libraries
memory

architecture of Windows NT
Hardware Abstraction Layer
chipset
operating system
Advanced Programmable Interrupt Controller (APIC)
.sys

Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.