Known DLLs
Certain operating system-supplied DLLs get special treatment.
These are called Known DLLs.
Operating system always looks for them in the same directory
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs
_____________________________________________________________________
LoadLibrary(“abc”) : search “abc.dll” (normal search rules)
LoadLibrary(“abc.dll”) : search KnownDLLs Registry, ValueName “abc”
LoadLibrary() and LoadLibraryEx(),
If you are passing a DLL name that includes the .dll extension like "abc.dll", search KnownDLLS Registry ValueName "abc"
If you are passing a DLL name without the .dll extension like "abc", search "abc.dll" using the normal search rule.
Known DLLs
Shows the values in the registry key below
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs
__________________________________________________________________________________________________________
KnownDLLs ?
Certain operating system-supplied DLLs get special treatment.
These are called Known DLLs.
Operating system always looks for them in the same directory
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs
LoadLibrary(“abc”) : search “abc.dll” (normal search rules)
LoadLibrary(“abc.dll”) : search KnownDLLs Registry, ValueName “abc”
LoadLibrary() and LoadLibraryEx(),
If you are passing a DLL name that includes the .dll extension like "abc.dll", search KnownDLLS Registry
ValueName "abc"
If you are passing a DLL name without the .dll extension like "abc", search "abc.dll" using the normal
search rule.
__________________________________________________________________________________________________________
There is a corresponding key in the lower part, click it and it will open in Regedit.exe
(Protable run, EnableLUA=0(off))
When a file is selected in the list box on the left, the file information is displayed on the right.
Click on the display below to open File Explorer with the file selected
If you click the file information display part on the right or press the Z key, the file information is
displayed in more detail.
