Credit goes to a good friend of mine for this (who doesn’t have a website or twitter account, so I can’t link to him :-p). Here is a (partial) list of DLL’s imported by the Windows 7 version of kernel32:
I guess somebody found an OOP book and started applying the “single responsibility principle” to kernel32 :-). What does this mean to you? If you are an end-user, nothing. If you are a RE or a low level programmer, take care because many functions from kernel32.dll are now forwarded into these DLLs instead of being directly implemented.
Update: here is a little more detailed post on the Avert Labs / McAfee blog.
One response to “Windows 7 OOP overdrive”
An other M$ trick to reduce (probably, in their opinion) the amount of malware that use kernel32 functions 😀
(my opinion :P)