2 ms·

Before, it used to be user32.dll/gdi32.dll calling directly while also having tons of logic inside. Nowadays, it's split up as it should always have been, with

by my123 6y ago

Before, it used to be user32.dll/gdi32.dll calling directly while also having tons of logic inside. Nowadays, it's split up as it should always have been, with the path being user32.dll -> win32u.dll -> win32k.sys.

poizan42 6y ago
Ah yes forgot about that. The kernel side has also been split up into win32kbase.sys and win32kfull.sys/win32kmin.sys (I think win32kmin may have only been used for the now discontinued Windows 10 Mobile), and win32k.sys just calls into those.