Microsoft-Windows-Win32k

358 events across 8 channels

Event IDTitleChannel
1Tracing
2Tracing
3UIPI
4UIPI
5UIPI
6UIPI
7UIPI
8UIPI
9UIPI
10Power
11Power
12Power
13Power
14Concurrency
15Concurrency
16Concurrency
17Concurrency
18Tracing
19Tracing
20Power
21Tracing
22Power
23Power
24Power
25Tracing
26Tracing
27Tracing
28Tracing
29Tracing
30Tracing
31Tracing
32Tracing
33Tracing
35Tracing
36Tracing
37Tracing
38Tracing
39Render
40Render
41Render
42Render
43Render
44Render
45Tracing
46Tracing
47Tracing
48Tracing
49Tracing
50Tracing
51Tracing
52Tracing
53Tracing
54Tracing
55Tracing
56Tracing
57Tracing
58Tracing
59Messages
60Messages
61Messages
62Messages
63Messages
64Messages
65Messages
66Messages
67Messages
68Messages
69Messages
70Messages
71Messages
72Messages
73Messages
74Messages
75Messages
76Messages
77Messages
78Messages
79Messages
80Messages
81Messages
82Messages
83Messages
84Messages
85Messages
86Messages
87Messages
88Messages
89Messages
91Messages
92Messages
93Messages
94Messages
95Messages
96Messages
97Messages
98Messages
99Messages
100Messages
102Tracing
103Tracing
104Tracing
105Tracing
106Messages
107Messages
108Messages
109Messages
110Messages
111Messages
112Messages
113Messages
114Messages
115Messages
116Messages
117Render
118Render
119Render
120Render
121Render
122Render
123Tracing
124Tracing
125Messages
126Messages
127Messages
128Messages
129Messages
130Messages
131Messages
132Messages
133Messages
134Messages
135Messages
136Messages
137Messages
138Messages
139Messages
140Messages
141Messages
142Messages
143Messages
144Messages
145Messages
146Messages
147Messages
148Messages
149Messages
150Messages
151Tracing
152Messages
153Messages
154Messages
155Messages
156Messages
157Messages
158Messages
159Messages
160Tracing
161Tracing
162Tracing
163Contention
164Contention
165Contention
166Contention
167Contention
168Messages
169Messages
170Tracing
171Tracing
172Tracing
173Tracing
174Messages
175Messages
176Messages
177Messages
178Tracing
179Tracing
180Tracing
181Tracing
182Tracing
183Tracing
184Messages
185Messages
186Messages
187Tracing
188Tracing
189Tracing
190Tracing
191Tracing
192Tracing
193Tracing
194Tracing
195Tracing
196Messages
197Messages
198Messages
199Messages
200Messages
201Tracing
202Tracing
203Messages
204Messages
205Tracing
206Tracing
207Tracing
213Tracing
214Tracing
215Tracing
216Tracing
217Tracing
218Tracing
219Messages
220Messages
221Messages
222Messages
223Messages
224Messages
225Messages
226Messages
227Messages
228Messages
229Messages
230Messages
231Messages
232Messages
233Tracing
234Messages
235Messages
236Tracing
237Tracing
238Tracing
239Tracing
240Tracing
241Tracing
242Tracing
243Tracing
244Tracing
245Tracing
246Tracing
247Tracing
248Tracing
249Tracing
250Tracing
251Tracing
252Tracing
253Tracing
254Tracing
255Tracing
256Messages
257Messages
258Tracing
259Tracing
260%1 attempted loading a font that is restricted by font loading policy.Operational
301Tracing
400Tracing
401Messages
402Messages
403Messages
404Messages
405Messages
406Tracing
407Tracing
410Messages
411Messages
412Tracing
413Tracing
414Tracing
415Tracing
416Tracing
417Tracing
418PowerOnGdiPower
419PowerOnGdiPower
420UserResetDisplayDevicePower
421UserResetDisplayDevicePower
422PowerOnMonitorPower
423PowerOnMonitorPower
424DwmSyncFlushForceRenderAndWaitForBatchPower
425DwmSyncFlushForceRenderAndWaitForBatchPower
426Messages
427The following win32k syscall is blocked by Win32k Syscall Filter: %1 Process …Operational
428The following SystemParametersInfo action was blocked by Win32k Syscall Filter.Operational
429PowerWatchdogPower
430PowerWatchdogPower
431VideoPortCalloutThreadPower
432VideoPortCalloutThreadPower
433PowerStateCalloutWorkerPower
434PowerStateCalloutWorkerPower
435PowerEventCalloutWorkerPower
436PowerEventCalloutWorkerPower
437InsertPower
438RemovePower
439CanceledPower
440CompletedPower
441WaitForVideoPortCalloutReadyPower
442WaitForVideoPortCalloutReadyPower
443Tracing
444Tracing
445Tracing
446Tracing
450Tracing
451Tracing
452Tracing
453Tracing
454Tracing
455Tracing
456Tracing
457Tracing
458Tracing
459Tracing
460Tracing
461Tracing
462Tracing
463Tracing
500Tracing
501Tracing
502Tracing
503Tracing
504Tracing
505Tracing
506Tracing
507Tracing
508Tracing
509Tracing
510Tracing
511Tracing
512Tracing
513Tracing
514Tracing
515Tracing
516Tracing
517Tracing
518Tracing
519Tracing
520Tracing
521Tracing
522Tracing
523Tracing
524Tracing
525Tracing
526Tracing
527Tracing
528Tracing
529Tracing
530Tracing
531Tracing
532Tracing
533Tracing
534Tracing
535Tracing
536Operational
537Operational
538Operational
539Operational
1000Operational
1001Operational
1002Operational
1003Operational
2000Operational
10002Tracing

Event ID 1 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Hwnd
Type

Event ID 2 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
OldThreadId
NewThreadId

Event ID 3 —

Provider
Microsoft-Windows-Win32k
Channel
UIPI

Fields

NameDescription
UIPI_Trace_Header
Message
wParam
lParam

Event ID 4 —

Provider
Microsoft-Windows-Win32k
Channel
UIPI

Fields

NameDescription
UIPI_Trace_Header
HookID
Flags
nCode
wParam
lParam

Event ID 5 —

Provider
Microsoft-Windows-Win32k
Channel
UIPI

Fields

NameDescription
UIPI_Trace_Header
WinEvent
WndHandle
ObjectID
ChildID
SenderTID
Time
Flags

Event ID 6 —

Provider
Microsoft-Windows-Win32k
Channel
UIPI

Fields

NameDescription
UIPI_Trace_Header
Handle
HandleType
Reserved

Event ID 7 —

Provider
Microsoft-Windows-Win32k
Channel
UIPI

Fields

NameDescription
UIPI_Trace_Header
InputType
QIL
QLBN

Event ID 8 —

Provider
Microsoft-Windows-Win32k
Channel
UIPI

Fields

NameDescription
UIPI_Trace_Header
ClipFormat
ClipIL
ClipLBN

Event ID 9 —

Provider
Microsoft-Windows-Win32k
Channel
UIPI

Fields

NameDescription
UIPI_Trace_Header
SysErrorType

Event ID 10 —

Provider
Microsoft-Windows-Win32k
Channel
Power

Fields

NameDescription
SessionId
PreviousStateTime
PreviousState
NewState
IsConsoleSession

Event ID 11 —

Provider
Microsoft-Windows-Win32k
Channel
Power

Fields

NameDescription
SessionId
IdleAction
TimeoutValueMs
IdleStartTime
IsConsoleSession

Event ID 12 —

Provider
Microsoft-Windows-Win32k
Channel
Power

Fields

NameDescription
SessionId
IsConsoleSession
NewCount

Event ID 13 —

Provider
Microsoft-Windows-Win32k
Channel
Power

Fields

NameDescription
SessionId
IsConsoleSession
DisplayTimeoutValueMs

Event ID 14 —

Provider
Microsoft-Windows-Win32k
Channel
Concurrency

Fields

NameDescription
LockId
LockLevel
LockName

Event ID 15 —

Provider
Microsoft-Windows-Win32k
Channel
Concurrency

Fields

NameDescription
LockId
LockName

Event ID 16 —

Provider
Microsoft-Windows-Win32k
Channel
Concurrency

Fields

NameDescription
LockId
LockName

Event ID 17 —

Provider
Microsoft-Windows-Win32k
Channel
Concurrency

Fields

NameDescription
LockId
LockName

Event ID 18 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hWnd
hLogicalSurfSwapChainBind

Event ID 19 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hWnd
hLogicalSurfSwapChainBind

Event ID 20 —

Provider
Microsoft-Windows-Win32k
Channel
Power

Fields

NameDescription
SessionId
AccruedIdleTime
DisplayTimeoutValueMs
ScreenSaverTimeoutValueMs
DimTimeoutValueMs
DimBrightnessValue
NormalBrightnessValue

Event ID 21 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hLogicalSurfSwapChainBind
ConfirmReason
LastPresentId
LastFrameCount
SyncFrameCount
LastFrameTime

Event ID 22 —

Provider
Microsoft-Windows-Win32k
Channel
Power

Fields

NameDescription
Action

Event ID 23 —

Provider
Microsoft-Windows-Win32k
Channel
Power

Fields

NameDescription
Action

Event ID 24 —

Provider
Microsoft-Windows-Win32k
Channel
Power

Fields

NameDescription
Action

Event ID 25 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
SessionId
ProcessIdOwningFocus
ProcessCreateTimeOwningFocus

Event ID 26 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
SessionId
OldProcessId
NewProcessId

Event ID 27 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hWnd
hSprite

Event ID 28 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hWnd
hSprite

Event ID 29 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hLogicalSurf
Flags

Event ID 30 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hLogicalSurf
Flags

Event ID 31 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hLogicalSurf
hPhysicalSurf

Event ID 32 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hLogicalSurf
hPhysicalSurf

Event ID 33 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Pending
dwDirtyFlags
hLogicalSurf
uiCookie

Event ID 35 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
CursorThreadId
CursorProcessId
SessionId
CursorType
DisplayTimeMs

Event ID 36 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
ThreadId
Flags
TimeSinceInputCheckMs
TimeSinceInputRemoveMs
TimeSinceOldestInputMs

Event ID 37 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Flags
TimeSinceInputRemoveMs
TimeSinceOldestInputMs
ClassName
TopLevelClassName
ImagePath
MessageId
WParam

Event ID 38 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Flags
DelayTimeMs
TimeSinceInputRemoveMs
TimeSinceOldestInputMs
ClassName
TopLevelClassName
ImagePath
MessageId
WParam

Event ID 39 —

Provider
Microsoft-Windows-Win32k
Channel
Render

Fields

NameDescription
hwndDst
hwndDstSprite
hbmDst
DstLeft
DstTop
DstRight
DstBottom
hwndSrc
hwndSrcSprite
hbmSrc
SrcLeft
SrcTop
SrcRight
SrcBottom

Event ID 40 —

Provider
Microsoft-Windows-Win32k
Channel
Render

Fields

NameDescription
hwndDst
hwndDstSprite
hbmDst
DstLeft
DstTop
DstRight
DstBottom
hwndSrc
hwndSrcSprite
hbmSrc
SrcLeft
SrcTop
SrcRight
SrcBottom

Event ID 41 —

Provider
Microsoft-Windows-Win32k
Channel
Render

Fields

NameDescription
hwnd
bitmapCX
bitmapCY
DirtyLeft
DirtyTop
DirtyRight
DirtyBottom

Event ID 42 —

Provider
Microsoft-Windows-Win32k
Channel
Render

Fields

NameDescription
hwnd
bitmapCX
bitmapCY
DirtyLeft
DirtyTop
DirtyRight
DirtyBottom

Event ID 43 —

Provider
Microsoft-Windows-Win32k
Channel
Render

Fields

NameDescription
hwnd
FULL
Left
Top
Right
Bottom

Event ID 44 —

Provider
Microsoft-Windows-Win32k
Channel
Render

Fields

NameDescription
hwnd
FULL
Left
Top
Right
Bottom

Event ID 45 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
ThreadId
Flags
TimeSinceInputCheckMs
TimeSinceInputRemoveMs
TimeSinceOldestInputMs

Event ID 46 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hWnd
hLogicalSurf

Event ID 47 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hWnd
hLogicalSurf

Event ID 48 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hLogicalSurf
bCreated

Event ID 49 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hDwmSprite
hLogicalSurf

Event ID 50 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hDwmSprite
hLogicalSurf

Event ID 51 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hLogicalSurf
hPhysSurf

Event ID 52 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hPhysicalSurf
Type
hDxSharedSurface
Flags

Event ID 53 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hLogicalSurface
RgnType
rcBounds
NumRects
rcData

Event ID 54 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hLogicalSurfSwapChainBind
ConfirmReason
LastPresentId
LastFrameCount
SyncFrameCount
LastFrameTime

Event ID 55 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hLogicalSurfSwapChainBinding
luidAdapter
nWidth
nHeight
DxgiColorFormat
hmonAssociation
uiPresentLimitSemaphoreId
cBuffers
BindingInfoHandle

Event ID 56 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hLogicalSurfSwapChainBinding
DesktopCompositorProcess
DesktopCompositorError
DesktopCompositorRef
DesktopCompositorStatus
pEventConfirmed

Event ID 57 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hLogicalSurfSwapChainBinding
DesktopCompositorStatus

Event ID 58 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
ProcessId
FailureStatus

Event ID 59 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pqmsg
hwnd
WParam
LParam
message
inputReadyTimeMs

Event ID 60 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pqmsg
hwnd
WParam
LParam
message
inputReadyTimeMs
flags
pidReceiver
tidReceiver

Event ID 61 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pqmsg
hwnd
WParam
LParam
message
inputReadyTimeMs
flags

Event ID 62 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pqmsg
hwnd
WParam
LParam
message
inputReadyTimeMs

Event ID 63 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
hwnd
WParam
LParam
message
inputReadyTimeMs
flags

Event ID 64 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pqmsg
hwnd
WParam
LParam
message
inputReadyTimeMs
flags

Event ID 65 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pqmsg
hwnd
WParam
LParam
message
inputReadyTimeMs

Event ID 66 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pQueue
ownerThread

Event ID 67 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pQueue
ownerThread

Event ID 68 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
api

Event ID 69 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
api

Event ID 70 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pqmsg

Event ID 71 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount

Event ID 72 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
DeviceType
dwFlags

Event ID 73 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
DeviceType
dwFlags

Event ID 74 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
hwnd
hGestureInfo

Event ID 75 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
hwnd
hGestureInfo

Event ID 76 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
fGetMessage
dwFlags
Message

Event ID 77 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
fGetMessage

Event ID 78 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
WakeReason

Event ID 79 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
Time
X
Y

Event ID 80 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
Time
X
Y

Event ID 81 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
Time
X
Y

Event ID 82 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
Time
X
Y

Event ID 83 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pqmsg

Event ID 84 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 85 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 86 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 87 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 88 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pqmsg
WindowDelegated
WasWindowDelegated
Delegated
WasDelegated
Processed
fDelayedFree
hwnd
WParam
LParam
message
inputReadyTimeMs

Event ID 89 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
message

Event ID 91 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
message

Event ID 92 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
message

Event ID 93 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
message

Event ID 94 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 95 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 96 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 97 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 98 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 99 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 100 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount

Event ID 102 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
SessionId
cLineWidth
cElements

Event ID 103 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
ProcName
ClassName
WindowName
uId
uElapse
uType

Event ID 104 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 105 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 106 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
ptOffsetX
ptOffsetY
pointerId
cursorId

Event ID 107 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
pointerId
cursorId
pointerType
pointerFlags
touchMask
ptLocationX
ptLocationY
rcContactLeft
rcContactRight
rcContactTop
rcContactBottom
orientation

Event ID 108 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
pointerId
cursorId
pointerType
pointerFlags
touchMask
ptLocationX
ptLocationY
rcContactLeft
rcContactRight
rcContactTop
rcContactBottom
orientation

Event ID 109 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 110 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 111 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 112 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 113 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 114 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 115 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
ulContactId

Event ID 116 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
ulContactId

Event ID 117 —

Provider
Microsoft-Windows-Win32k
Channel
Render

Fields

NameDescription
hwnd
DirtyLeft
DirtyTop
DirtyRight
DirtyBottom

Event ID 118 —

Provider
Microsoft-Windows-Win32k
Channel
Render

Fields

NameDescription
hwnd
Offsetx
Offsety

Event ID 119 —

Provider
Microsoft-Windows-Win32k
Channel
Render

Fields

NameDescription
hwnd
DirtyLeft
DirtyTop
DirtyRight
DirtyBottom

Event ID 120 —

Provider
Microsoft-Windows-Win32k
Channel
Render

Fields

NameDescription
hwnd
DirtyLeft
DirtyTop
DirtyRight
DirtyBottom

Event ID 121 —

Provider
Microsoft-Windows-Win32k
Channel
Render

Fields

NameDescription
hwnd
DirtyLeft
DirtyTop
DirtyRight
DirtyBottom

Event ID 122 —

Provider
Microsoft-Windows-Win32k
Channel
Render

Fields

NameDescription
hSprite
hWnd

Event ID 123 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hLogicalSurface
RgnType
rcBounds
NumRects
rcData

Event ID 124 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hwnd
DirtyLeft
DirtyTop
DirtyRight
DirtyBottom

Event ID 125 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 126 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 127 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 128 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 129 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 130 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 131 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
FrameId
PointerCount
PendingPointerCount

Event ID 132 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
FrameId
PointerCount
PendingPointerCount

Event ID 133 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
FrameId
PointerCount
PendingPointerCount

Event ID 134 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
FrameId
PointerCount
PendingPointerCount

Event ID 135 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
FrameId
PointerCount
PendingPointerCount

Event ID 136 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
FrameId
PointerCount
PendingPointerCount

Event ID 137 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
FrameId
PointerCount
PendingPointerCount

Event ID 138 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
FrameId
PointerCount
PendingPointerCount

Event ID 139 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
FrameId
PointerCount
PendingPointerCount

Event ID 140 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
FrameId
PointerCount
PendingPointerCount

Event ID 141 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
pqmsg
PointerId
Message

Event ID 142 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
pqmsg
PointerId
Message

Event ID 143 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
pqmsg
PointerId
Message

Event ID 144 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
pqmsg
PointerId
Message

Event ID 145 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 146 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 147 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 148 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 149 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pQueue
ownerThread

Event ID 150 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pQueue
ownerThread

Event ID 151 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
channelHandle
pBatch
batchID
isNinja

Event ID 152 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pqmsg
WindowDelegated
WasWindowDelegated
Delegated
WasDelegated
Processed
fDelayedFree
hwnd
WParam
LParam
message
inputReadyTimeMs

Event ID 153 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pqmsg
WindowDelegated
WasWindowDelegated
Delegated
WasDelegated
Processed
fDelayedFree
hwnd
WParam
LParam
message
inputReadyTimeMs

Event ID 154 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pqmsg
WindowDelegated
WasWindowDelegated
Delegated
WasDelegated
Processed
fDelayedFree
hwnd
WParam
LParam
message
inputReadyTimeMs
hdfResponse

Event ID 155 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pqmsg
WindowDelegated
WasWindowDelegated
Delegated
WasDelegated
Processed
fDelayedFree
hwnd
WParam
LParam
message
inputReadyTimeMs
hdfResponse

Event ID 156 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
bNew
ulContactId
dwCursorId
X
Y

Event ID 157 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
wCursorId
wPointerId

Event ID 158 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
wCursorId
wPointerId

Event ID 159 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
wCursorId
wPointerId
dwReason

Event ID 160 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Orientation
SensorOriginated
ActiveProcessId

Event ID 161 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Orientation
SensorOriginated

Event ID 162 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
pBatch

Event ID 163 —

Provider
Microsoft-Windows-Win32k
Channel
Contention

Fields

NameDescription
AcquireQpcCounts
AcquireTimeUs
Token

Event ID 164 —

Provider
Microsoft-Windows-Win32k
Channel
Contention

Fields

NameDescription
AcquireQpcCounts
AcquireTimeUs
Token

Event ID 165 —

Provider
Microsoft-Windows-Win32k
Channel
Contention

Fields

NameDescription
AcquireQpcCounts
AcquireTimeUs
Token

Event ID 166 —

Provider
Microsoft-Windows-Win32k
Channel
Contention

Fields

NameDescription
AcquireQpcCounts
AcquireTimeUs
Token

Event ID 167 —

Provider
Microsoft-Windows-Win32k
Channel
Contention

Fields

NameDescription
HoldQpcCounts
HoldTimeMs
Token

Event ID 168 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
pti

Event ID 169 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
pti

Event ID 170 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 171 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Info

Event ID 172 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Flags
TimeSinceInputRemoveMs
TimeSinceOldestInputMs
ClassName
TopLevelClassName
PackageMoniker
AppUserModelId
MessageId
WParam

Event ID 173 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Flags
DelayTimeMs
TimeSinceInputRemoveMs
TimeSinceOldestInputMs
ClassName
TopLevelClassName
PackageMoniker
AppUserModelId
MessageId
WParam

Event ID 174 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 175 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 176 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
ulContactId

Event ID 177 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
ulContactId

Event ID 178 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hLogicalSurface
RgnType
rcBounds
NumRects
rcData

Event ID 179 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hLogicalSurface
RgnType
rcBounds
NumRects
rcData

Event ID 180 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hwnd
DirtyLeft
DirtyTop
DirtyRight
DirtyBottom

Event ID 181 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hwnd
DirtyLeft
DirtyTop
DirtyRight
DirtyBottom

Event ID 182 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hwnd
Offsetx
Offsety

Event ID 183 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hLogicalSurface
RgnType
rcBounds
NumRects
rcData

Event ID 184 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
FrameId
PointerCount
PendingPointerCount

Event ID 185 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
FrameId
PointerCount
PendingPointerCount

Event ID 186 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
wCursorId
wPointerId
dwReason

Event ID 187 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Hwnd
uId
uElapse
uCoalescingTolerance
uType

Event ID 188 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Hwnd
uId
uElapse
uType

Event ID 189 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Hwnd
uId

Event ID 190 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Hwnd
uId
uElapse
uCoalescingTolerance
uType

Event ID 191 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Hwnd
uId
uElapse
uType

Event ID 192 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 193 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 194 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 195 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 196 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 197 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 198 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
ScanTime
dwTime
QPC
XRawPosition
YRawPosition
XPredictedPosition
YPredictedPosition

Event ID 199 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
wCursorId
wPointerId
dwReason

Event ID 200 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
wCursorId
wPointerId
dwReason

Event ID 201 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
pToken
pCompositionSurfaceObject
SwapChainIndex
PresentCount
CompositionSurfaceLuid
BindId
FlipInterval
DestWidth
DestHeight

Event ID 202 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
pCompositionSurfaceObject
SwapChainIndex

Event ID 203 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pqmsg
pti
dwQEvent
hwnd

Event ID 204 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
pqmsg
pti
dwQEvent
hwnd

Event ID 205 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 206 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 207 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 213 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
data

Event ID 214 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 215 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
ConvertibleState

Event ID 216 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
DockState

Event ID 217 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
ScanTime
dwTime
QPCTime
XLogicalT
YLogicalT
XLogicalC
YLogicalC
XHimetricT
YHimetricT
Button
Count
Identifier
Width
Height
Confidence
Pressure
DeviceType

Event ID 218 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
InputTransformList
PerformanceCount

Event ID 219 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
CallbackCount
WakeReason

Event ID 220 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 221 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 222 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 223 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
Hwnd

Event ID 224 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
hDCompInputHandle
Hwnd
XformQPCTime
XformStored

Event ID 225 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
Hwnd
XformQPCTime
XformUpdated

Event ID 226 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 227 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 228 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 229 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 230 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 231 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 232 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 233 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
LastKeyDownTime
LastKeyUpTime
TapTime
Blocked
Feature

Event ID 234 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 235 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 236 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
deviceType

Event ID 237 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 238 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 239 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 240 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 241 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
ContactId
OnUp
NeedsUp

Event ID 242 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
ContactId

Event ID 243 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 244 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 245 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 246 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 247 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 248 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 249 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
CurtainsOn

Event ID 250 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Top
Left
Right
Enabled

Event ID 251 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 252 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 253 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 254 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
RenderSourceProcessName
RenderSourcePackageName
RenderTargetProcessName
RenderTargetPackageName

Event ID 255 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
iCursorDim
cx
cy

Event ID 256 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 257 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 258 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
SessionId
NewProcessId
NewProcessCreateTime

Event ID 259 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
SessionId
OldProcessId
OldProcessCreateTime

Event ID 260 — %1 attempted loading a font that is restricted by font loading policy.

Provider
Microsoft-Windows-Win32k
Channel
Operational

Message

%1 attempted loading a font that is restricted by font loading policy.
FontType: %2
FontPath: %3
Blocked: %4

Fields

NameDescription
SourceProcessName
SourceType
FontSourcePath
Blocked

Event ID 301 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
pCompositionSurfaceObject
SwapChainIndex
PresentCount
FenceValue
NewState
IndependentFlip
SkipIndependentFlip
CompositionSurfaceLuid
BindId
EarlyComposition

Event ID 400 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
channelHandle
pBatch
batchID
submissionTime
submissionDeadline
deferReason

Event ID 401 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 402 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 403 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 404 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 405 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 406 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 407 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 410 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 411 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Event ID 412 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hConnection
targetTime

Event ID 413 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
SyncRefreshCount
PresentCount
CompositionSurfaceLuid
BindId

Event ID 414 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FrameId
PointerCount

Event ID 415 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FrameId
PointerCount

Event ID 416 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
AcquireQpcCounts
AcquireTimeMs
Token

Event ID 417 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
AcquireQpcCounts
AcquireTimeMs
Token

Event ID 418 — PowerOnGdi

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

PowerOnGdi

Fields

NameDescription
Location

Event ID 419 — PowerOnGdi

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

PowerOnGdi

Fields

NameDescription
Location

Event ID 420 — UserResetDisplayDevice

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

UserResetDisplayDevice

Fields

NameDescription
Location

Event ID 421 — UserResetDisplayDevice

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

UserResetDisplayDevice

Fields

NameDescription
Location

Event ID 422 — PowerOnMonitor

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

PowerOnMonitor

Fields

NameDescription
Location

Event ID 423 — PowerOnMonitor

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

PowerOnMonitor

Fields

NameDescription
Location

Event ID 424 — DwmSyncFlushForceRenderAndWaitForBatch

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

DwmSyncFlushForceRenderAndWaitForBatch

Fields

NameDescription
Location

Event ID 425 — DwmSyncFlushForceRenderAndWaitForBatch

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

DwmSyncFlushForceRenderAndWaitForBatch

Fields

NameDescription
Location

Event ID 426 —

Provider
Microsoft-Windows-Win32k
Channel
Messages

Fields

NameDescription
SourceProcessId
SourceThreadId
SourceProcessName
DestinationHwnd

Event ID 427 — The following win32k syscall is blocked by Win32k Syscall Filter: %1 Process Command Line: %3.

Provider
Microsoft-Windows-Win32k
Channel
Operational

Message

The following win32k syscall is blocked by Win32k Syscall Filter: %1
Process Command Line: %3

Fields

NameDescription
SyscallName
AppContainerSid
ProcessCommandLine
FilterSetId

Event ID 428 — The following SystemParametersInfo action was blocked by Win32k Syscall Filter.

Provider
Microsoft-Windows-Win32k
Channel
Operational

Message

The following SystemParametersInfo action was blocked by Win32k Syscall Filter: %1

Fields

NameDescription
SPIAction

Event ID 429 — PowerWatchdog

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

PowerWatchdog

Fields

NameDescription
Instance
WatchdogType

Event ID 430 — PowerWatchdog

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

PowerWatchdog

Fields

NameDescription
Instance

Event ID 431 — VideoPortCalloutThread

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

VideoPortCalloutThread

Fields

NameDescription
CalloutType
Status

Event ID 432 — VideoPortCalloutThread

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

VideoPortCalloutThread

Fields

NameDescription
CalloutType
Status

Event ID 433 — PowerStateCalloutWorker

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

PowerStateCalloutWorker

Fields

NameDescription
PowerTaskState
Status

Event ID 434 — PowerStateCalloutWorker

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

PowerStateCalloutWorker

Fields

NameDescription
PowerTaskState
Status

Event ID 435 — PowerEventCalloutWorker

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

PowerEventCalloutWorker

Fields

NameDescription
EventNumber
Code
Status

Event ID 436 — PowerEventCalloutWorker

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

PowerEventCalloutWorker

Fields

NameDescription
EventNumber
Code
Status

Event ID 437 — Insert

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

Insert

Fields

NameDescription
Address
EventNumber
Code

Event ID 438 — Remove

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

Remove

Fields

NameDescription
Address
Status

Event ID 439 — Canceled

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

Canceled

Fields

NameDescription
Address
Status

Event ID 440 — Completed

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

Completed

Fields

NameDescription
Address
Status

Event ID 441 — WaitForVideoPortCalloutReady

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

WaitForVideoPortCalloutReady

Fields

NameDescription
NeedWaitForRit
NeedPowerOnGdi

Event ID 442 — WaitForVideoPortCalloutReady

Provider
Microsoft-Windows-Win32k
Channel
Power

Message

WaitForVideoPortCalloutReady

Event ID 443 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Channel
InternalHandle
ExternalHandle
InternalHandleAndChannel
ExternalHandleAndChannel
ResourceType
CreateShared
OpenShared

Event ID 444 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Channel
InternalHandle
ExternalHandle
ResourceType
PropertyId

Event ID 445 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
CommandType
status

Event ID 446 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
CommandsCount

Event ID 450 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Channel
VisualInternalHandle
InteractionInternalHandle
VisualInternalHandleAndChannel
InteractionInternalHandleAndChannel
ResourceType
DefaultInteraction
Reason

Event ID 451 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Channel
VisualInternalHandle
InteractionInternalHandle
VisualInternalHandleAndChannel
InteractionInternalHandleAndChannel

Event ID 452 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
HandleValue
HandleType
SessionId
OwnerProcessId

Event ID 453 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
HandleValue
HandleType
SessionId
OwnerProcessId

Event ID 454 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
HandleValue
HandleType
SessionId
OwnerProcessId

Event ID 455 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
HandleValue
HandleType
SessionId
OwnerProcessId

Event ID 456 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
HandleValue
HandleType
SessionId
OwnerProcessId

Event ID 457 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
HandleValue
HandleType
SessionId
OwnerProcessId

Event ID 458 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
PreviousHandleValue
NewHandleValue
HandleType
SessionId
OwnerProcessId

Event ID 459 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Pid
ProcessCreateTime

Event ID 460 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Pid
ProcessCreateTime

Event ID 461 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hwnd
hwndParent
visRgnType
changed

Event ID 462 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hwnd
hwndParent

Event ID 463 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
CallerPid
CallerProcessCreateTime
OwnerPid
OwnerProcessCreateTime
ClipboardSequenceNumber

Event ID 500 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId
IFlip
IFlipCompleted
ConvertedToNonIflip
RequestDwmConfirm
RequestDwmExit
IndependentFlipCandidate

Event ID 501 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
PresentId

Event ID 502 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId

Event ID 503 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId

Event ID 504 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId

Event ID 505 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
SignalValue
Skipped
Status

Event ID 506 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId
PresentAtTimeHns
CurrentTimeHns
PresentAtTimeMinusCurrentTimeHns

Event ID 507 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
ContentResource
BufferResource
BufferIndex

Event ID 508 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
BufferResource
available

Event ID 509 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
BufferResource
hVidMmGlobalAlloc

Event ID 510 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
BufferResource

Event ID 511 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Content
LUID
BindId
Displayable
BufferCount

Event ID 512 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId
FrameId
PresentAtTimeHns
FrameTimeHns
MaxAcceptableTargetTimeHns
PresentTimeMinusFrameTimeHns

Event ID 513 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId
FrameId
PresentAtTimeHns
FrameTimeHns
MaxAcceptableTargetTimeHns
PresentTimeMinusFrameTimeHns

Event ID 514 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId
FrameId
PresentAtTimeHns
FrameTimeHns
MaxAcceptableTargetTimeHns
PresentTimeMinusFrameTimeHns

Event ID 515 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId
WasCanceled

Event ID 516 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId
Notify
WasCanceled
CompletedQpc
DurationQpc

Event ID 517 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentQueueDepth

Event ID 518 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
ContentResource

Event ID 519 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
BufferResource
Index

Event ID 520 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Event ID 521 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
ContentResource

Event ID 522 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
ContentResource
LUID
BindId
FlipIndex

Event ID 523 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId

Event ID 524 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId

Event ID 525 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
Content
LUID

Event ID 526 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId

Event ID 527 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId

Event ID 528 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
LUID
BindId

Event ID 529 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId

Event ID 530 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId
Reason

Event ID 531 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId
Reason

Event ID 532 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId
FrameId
PresentAtTimeHns
FrameTimeHns
MaxAcceptableTargetTimeHns
PresentTimeMinusFrameTimeHns

Event ID 533 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
ContentResource

Event ID 534 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId

Event ID 535 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
FlipManagerId
PresentId

Event ID 536 —

Provider
Microsoft-Windows-Win32k
Channel
Operational

Fields

NameDescription
FlipManagerId
PresentId
FrameId
Status

Event ID 537 —

Provider
Microsoft-Windows-Win32k
Channel
Operational

Fields

NameDescription
FlipManagerId
adapterLuid
fenceValue
Status

Event ID 538 —

Provider
Microsoft-Windows-Win32k
Channel
Operational

Fields

NameDescription
fenceId
displayAdapterLuid

Event ID 539 —

Provider
Microsoft-Windows-Win32k
Channel
Operational

Fields

NameDescription
fenceId
displayAdapterLuid

Event ID 1000 —

Provider
Microsoft-Windows-Win32k
Channel
Operational

Fields

NameDescription
eventMin
eventMax
idEventProcess
idEventThread
Flags
HookInstance

Event ID 1001 —

Provider
Microsoft-Windows-Win32k
Channel
Operational

Fields

NameDescription
ReturnValue
UsagePage
Usage
Flags
hwndTarget
ThreadStartAddress
ThreadCreateTime
ThreadId
cWindows
cVisWindows
ThreadInfoFlags
ProcessId
ProcessCreateTime
ProcessStartKey
ThreadStartAddressMappedModuleName
ThreadStartAddressQueryResult
ThreadStartAddressVadAllocationBase
ThreadStartAddressVadAllocationProtect
ThreadStartAddressVadRegionType
ThreadStartAddressVadRegionSize
ThreadStartAddressVadProtect

Event ID 1002 —

Provider
Microsoft-Windows-Win32k
Channel
Operational

Fields

NameDescription
FilterType
pstrLib
hmod
pfnFilterProc
ReturnValue

Event ID 1003 —

Provider
Microsoft-Windows-Win32k
Channel
Operational

Fields

NameDescription
PID
MsSinceLastKeyEvent
BackgroundCallCount

Event ID 2000 —

Provider
Microsoft-Windows-Win32k
Channel
Operational

Fields

NameDescription
Flags
ProcessId
ProcessCreateTime
ProcessStartKey

Event ID 10002 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing

Fields

NameDescription
hWnd
Packed_High_Height_Low_Width
PRAID
PackageFullName