Microsoft-Windows-Win32k

358 events across 8 channels

Event IDTitleChannel
1Tracing
2Tracing
3UIPI
4UIPI
5UIPI
6UIPI
7UIPI
8UIPI
9UIPI
10Power
11Power
12Power
13Power
14Concurrency
15Concurrency
16Concurrency
17Concurrency
18Tracing
19Tracing
20Power
21Tracing
22Power
23Power
24Power
25Tracing
26Tracing
27Tracing
28Tracing
29Tracing
30Tracing
31Tracing
32Tracing
33Tracing
35Tracing
36Tracing
37Tracing
38Tracing
39Render
40Render
41Render
42Render
43Render
44Render
45Tracing
46Tracing
47Tracing
48Tracing
49Tracing
50Tracing
51Tracing
52Tracing
53Tracing
54Tracing
55Tracing
56Tracing
57Tracing
58Tracing
59Messages
60Messages
61Messages
62Messages
63Messages
64Messages
65Messages
66Messages
67Messages
68Messages
69Messages
70Messages
71Messages
72Messages
73Messages
74Messages
75Messages
76Messages
77Messages
78Messages
79Messages
80Messages
81Messages
82Messages
83Messages
84Messages
85Messages
86Messages
87Messages
88Messages
89Messages
91Messages
92Messages
93Messages
94Messages
95Messages
96Messages
97Messages
98Messages
99Messages
100Messages
102Tracing
103Tracing
104Tracing
105Tracing
106Messages
107Messages
108Messages
109Messages
110Messages
111Messages
112Messages
113Messages
114Messages
115Messages
116Messages
117Render
118Render
119Render
120Render
121Render
122Render
123Tracing
124Tracing
125Messages
126Messages
127Messages
128Messages
129Messages
130Messages
131Messages
132Messages
133Messages
134Messages
135Messages
136Messages
137Messages
138Messages
139Messages
140Messages
141Messages
142Messages
143Messages
144Messages
145Messages
146Messages
147Messages
148Messages
149Messages
150Messages
151Tracing
152Messages
153Messages
154Messages
155Messages
156Messages
157Messages
158Messages
159Messages
160Tracing
161Tracing
162Tracing
163Contention
164Contention
165Contention
166Contention
167Contention
168Messages
169Messages
170Tracing
171Tracing
172Tracing
173Tracing
174Messages
175Messages
176Messages
177Messages
178Tracing
179Tracing
180Tracing
181Tracing
182Tracing
183Tracing
184Messages
185Messages
186Messages
187Tracing
188Tracing
189Tracing
190Tracing
191Tracing
192Tracing
193Tracing
194Tracing
195Tracing
196Messages
197Messages
198Messages
199Messages
200Messages
201Tracing
202Tracing
203Messages
204Messages
205Tracing
206Tracing
207Tracing
213Tracing
214Tracing
215Tracing
216Tracing
217Tracing
218Tracing
219Messages
220Messages
221Messages
222Messages
223Messages
224Messages
225Messages
226Messages
227Messages
228Messages
229Messages
230Messages
231Messages
232Messages
233Tracing
234Messages
235Messages
236Tracing
237Tracing
238Tracing
239Tracing
240Tracing
241Tracing
242Tracing
243Tracing
244Tracing
245Tracing
246Tracing
247Tracing
248Tracing
249Tracing
250Tracing
251Tracing
252Tracing
253Tracing
254Tracing
255Tracing
256Messages
257Messages
258Tracing
259Tracing
260SourceProcessName attempted loading a font that is restricted by font loading …Operational
301Tracing
400Tracing
401Messages
402Messages
403Messages
404Messages
405Messages
406Tracing
407Tracing
410Messages
411Messages
412Tracing
413Tracing
414Tracing
415Tracing
416Tracing
417Tracing
418PowerOnGdiPower
419PowerOnGdiPower
420UserResetDisplayDevicePower
421UserResetDisplayDevicePower
422PowerOnMonitorPower
423PowerOnMonitorPower
424DwmSyncFlushForceRenderAndWaitForBatchPower
425DwmSyncFlushForceRenderAndWaitForBatchPower
426Messages
427The following win32k syscall is blocked by Win32k Syscall Filter: SyscallName.Operational
428The following SystemParametersInfo action was blocked by Win32k Syscall Filter: …Operational
429PowerWatchdogPower
430PowerWatchdogPower
431VideoPortCalloutThreadPower
432VideoPortCalloutThreadPower
433PowerStateCalloutWorkerPower
434PowerStateCalloutWorkerPower
435PowerEventCalloutWorkerPower
436PowerEventCalloutWorkerPower
437InsertPower
438RemovePower
439CanceledPower
440CompletedPower
441WaitForVideoPortCalloutReadyPower
442WaitForVideoPortCalloutReadyPower
443Tracing
444Tracing
445Tracing
446Tracing
450Tracing
451Tracing
452Tracing
453Tracing
454Tracing
455Tracing
456Tracing
457Tracing
458Tracing
459Tracing
460Tracing
461Tracing
462Tracing
463Tracing
500Tracing
501Tracing
502Tracing
503Tracing
504Tracing
505Tracing
506Tracing
507Tracing
508Tracing
509Tracing
510Tracing
511Tracing
512Tracing
513Tracing
514Tracing
515Tracing
516Tracing
517Tracing
518Tracing
519Tracing
520Tracing
521Tracing
522Tracing
523Tracing
524Tracing
525Tracing
526Tracing
527Tracing
528Tracing
529Tracing
530Tracing
531Tracing
532Tracing
533Tracing
534Tracing
535Tracing
536Operational
537Operational
538Operational
539Operational
1000Operational
1001Operational
1002Operational
1003Operational
2000Operational
10002Tracing

Event ID 1 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
WindowUpdate

Fields #

NameDescription
Hwnd Pointer
Type UInt32

Event ID 2 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FocusChange

Fields #

NameDescription
OldThreadId UInt32
NewThreadId UInt32

Event ID 3 —

Provider
Microsoft-Windows-Win32k
Channel
UIPI
Task
UIPIMsgError

Fields #

NameDescription
UIPI_Trace_Header UInt8
Message UInt32
wParam UInt64
lParam UInt64

Event ID 4 —

Provider
Microsoft-Windows-Win32k
Channel
UIPI
Task
UIPIHookError

Fields #

NameDescription
UIPI_Trace_Header UInt16
HookID Int32
Flags Int8
nCode Int32
wParam UInt64
lParam UInt64

Event ID 5 —

Provider
Microsoft-Windows-Win32k
Channel
UIPI
Task
UIPIEventHookError

Fields #

NameDescription
UIPI_Trace_Header UInt32
WinEvent UInt32
WndHandle UInt64
ObjectID UInt32
ChildID UInt32
SenderTID Int32
Time Int32
Flags UInt32

Event ID 6 —

Provider
Microsoft-Windows-Win32k
Channel
UIPI
Task
UIPIHandleValError

Fields #

NameDescription
UIPI_Trace_Header UInt8
Handle UInt64
HandleType UInt32
Reserved UInt32

Event ID 7 —

Provider
Microsoft-Windows-Win32k
Channel
UIPI
Task
UIPIInputError

Fields #

NameDescription
UIPI_Trace_Header UInt8
InputType UInt32
QIL UInt32
QLBN UInt32

Event ID 8 —

Provider
Microsoft-Windows-Win32k
Channel
UIPI
Task
UIPIClipboardError

Fields #

NameDescription
UIPI_Trace_Header UInt8
ClipFormat UInt32
ClipIL UInt32
ClipLBN UInt32

Event ID 9 —

Provider
Microsoft-Windows-Win32k
Channel
UIPI
Task
UIPISystemError

Fields #

NameDescription
UIPI_Trace_Header AnsiString
SysErrorType UInt32

Event ID 10 —

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerDisplayChange

Fields #

NameDescription
SessionId UInt32
PreviousStateTime UInt32
PreviousState UInt16
NewState UInt16
IsConsoleSession UInt16

Event ID 11 —

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
IdleActionExpiration

Fields #

NameDescription
SessionId UInt32
IdleAction UInt32
TimeoutValueMs UInt32
IdleStartTime UInt32
IsConsoleSession UInt16

Event ID 12 —

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
DisplayReqChange

Fields #

NameDescription
SessionId UInt32
IsConsoleSession UInt16
NewCount UInt32

Event ID 13 —

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
DisplayTimeoutReset

Fields #

NameDescription
SessionId UInt32
IsConsoleSession UInt16
DisplayTimeoutValueMs UInt32

Event ID 14 —

Provider
Microsoft-Windows-Win32k
Channel
Concurrency
Task
LockAcquireExclusive

Fields #

NameDescription
LockId Pointer
LockLevel UInt32
LockName UnicodeString

Event ID 15 —

Provider
Microsoft-Windows-Win32k
Channel
Concurrency
Task
LockAcquireShared

Fields #

NameDescription
LockId Pointer
LockName UnicodeString

Event ID 16 —

Provider
Microsoft-Windows-Win32k
Channel
Concurrency
Task
LockAcquireSharedStarveExclusive

Fields #

NameDescription
LockId Pointer
LockName UnicodeString

Event ID 17 —

Provider
Microsoft-Windows-Win32k
Channel
Concurrency
Task
LockRelease

Fields #

NameDescription
LockId Pointer
LockName UnicodeString

Event ID 18 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
SwapChainBind

Fields #

NameDescription
hWnd UInt64
hLogicalSurfSwapChainBind UInt64

Event ID 19 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
SwapChainUnBind

Fields #

NameDescription
hWnd UInt64
hLogicalSurfSwapChainBind UInt64

Event ID 20 —

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
IdleStatusTracing

Fields #

NameDescription
SessionId UInt32
AccruedIdleTime UInt32
DisplayTimeoutValueMs UInt32
ScreenSaverTimeoutValueMs UInt32
DimTimeoutValueMs UInt32
DimBrightnessValue UInt32
NormalBrightnessValue UInt32

Event ID 21 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
SwapChainSetStats

Fields #

NameDescription
hLogicalSurfSwapChainBind UInt64
ConfirmReason UInt32
LastPresentId UInt32
LastFrameCount UInt32
SyncFrameCount UInt32
LastFrameTime UInt64

Event ID 22 —

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
ScreenSaverProcess

Fields #

NameDescription
Action UInt32

Event ID 23 —

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
WinlogonSleepStart

Fields #

NameDescription
Action UInt32

Event ID 24 —

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
WinlogonSleepEnd

Fields #

NameDescription
Action UInt32

Event ID 25 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
UserActive

Fields #

NameDescription
SessionId UInt32
ProcessIdOwningFocus UInt32
ProcessCreateTimeOwningFocus FILETIME

Event ID 26 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FocusedProcessChange

Fields #

NameDescription
SessionId UInt32
OldProcessId UInt32
NewProcessId UInt32

Event ID 27 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DwmSpriteCreate

Fields #

NameDescription
hWnd UInt64
hSprite UInt64

Event ID 28 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DwmSpriteDestroy

Fields #

NameDescription
hWnd UInt64
hSprite UInt64

Event ID 29 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
LogicalSurfCreate

Fields #

NameDescription
hLogicalSurf UInt64
Flags UInt32

Event ID 30 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
LogicalSurfDestroy

Fields #

NameDescription
hLogicalSurf UInt64
Flags UInt32

Event ID 31 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
LogicalSurfPhysSurfBind

Fields #

NameDescription
hLogicalSurf UInt64
hPhysicalSurf UInt64

Event ID 32 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
LogicalSurfPhysSurfUnbind

Fields #

NameDescription
hLogicalSurf UInt64
hPhysicalSurf UInt64

Event ID 33 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
GdiSysMemToken

Fields #

NameDescription
Pending UInt32
dwDirtyFlags UInt32
hLogicalSurf UInt64
uiCookie UInt64

Event ID 35 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
WaitCursor

Fields #

NameDescription
CursorThreadId UInt32
CursorProcessId UInt32
SessionId UInt32
CursorType UInt32
DisplayTimeMs UInt32

Event ID 36 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ThreadInfoRundown

Fields #

NameDescription
ThreadId UInt32
Flags UInt32
TimeSinceInputCheckMs UInt32
TimeSinceInputRemoveMs UInt32
TimeSinceOldestInputMs UInt32

Event ID 37 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
InputProcessDelay

Fields #

NameDescription
Flags UInt32
TimeSinceInputRemoveMs UInt32
TimeSinceOldestInputMs UInt32
ClassName UnicodeString
TopLevelClassName UnicodeString
ImagePath UnicodeString
MessageId UInt32
WParam UInt64

Event ID 38 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
MessageCheckDelay

Fields #

NameDescription
Flags UInt32
DelayTimeMs UInt32
TimeSinceInputRemoveMs UInt32
TimeSinceOldestInputMs UInt32
ClassName UnicodeString
TopLevelClassName UnicodeString
ImagePath UnicodeString
MessageId UInt32
WParam UInt64

Event ID 39 —

Provider
Microsoft-Windows-Win32k
Channel
Render
Task
Rendering
Opcode
NewRendering

Fields #

NameDescription
hwndDst Pointer
hwndDstSprite Pointer
hbmDst Pointer
DstLeft UInt32
DstTop UInt32
DstRight UInt32
DstBottom UInt32
hwndSrc Pointer
hwndSrcSprite Pointer
hbmSrc Pointer
SrcLeft UInt32
SrcTop UInt32
SrcRight UInt32
SrcBottom UInt32

Event ID 40 —

Provider
Microsoft-Windows-Win32k
Channel
Render
Task
Rendering
Opcode
OldToNewRendering

Fields #

NameDescription
hwndDst Pointer
hwndDstSprite Pointer
hbmDst Pointer
DstLeft UInt32
DstTop UInt32
DstRight UInt32
DstBottom UInt32
hwndSrc Pointer
hwndSrcSprite Pointer
hbmSrc Pointer
SrcLeft UInt32
SrcTop UInt32
SrcRight UInt32
SrcBottom UInt32

Event ID 41 —

Provider
Microsoft-Windows-Win32k
Channel
Render
Task
Rendering
Opcode
AppRenderingUpdate

Fields #

NameDescription
hwnd Pointer
bitmapCX UInt32
bitmapCY UInt32
DirtyLeft UInt32
DirtyTop UInt32
DirtyRight UInt32
DirtyBottom UInt32

Event ID 42 —

Provider
Microsoft-Windows-Win32k
Channel
Render
Task
Rendering
Opcode
AppRenderingTightUpdate

Fields #

NameDescription
hwnd Pointer
bitmapCX UInt32
bitmapCY UInt32
DirtyLeft UInt32
DirtyTop UInt32
DirtyRight UInt32
DirtyBottom UInt32

Event ID 43 —

Provider
Microsoft-Windows-Win32k
Channel
Render
Task
Rendering
Opcode
ValidateWindow

Fields #

NameDescription
hwnd Pointer
FULL UInt32
Left UInt32
Top UInt32
Right UInt32
Bottom UInt32

Event ID 44 —

Provider
Microsoft-Windows-Win32k
Channel
Render
Task
Rendering
Opcode
InvalidateWindow

Fields #

NameDescription
hwnd Pointer
FULL UInt32
Left UInt32
Top UInt32
Right UInt32
Bottom UInt32

Event ID 45 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ThreadExit

Fields #

NameDescription
ThreadId UInt32
Flags UInt32
TimeSinceInputCheckMs UInt32
TimeSinceInputRemoveMs UInt32
TimeSinceOldestInputMs UInt32

Event ID 46 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
BindLogicalSurface

Fields #

NameDescription
hWnd UInt64
hLogicalSurf UInt64

Event ID 47 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
UnBindLogicalSurface

Fields #

NameDescription
hWnd UInt64
hLogicalSurf UInt64

Event ID 48 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
BindLogicalSurfaceRH

Fields #

NameDescription
hLogicalSurf UInt64
bCreated UInt64

Event ID 49 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DwmSpriteLogicalSurfBind

Fields #

NameDescription
hDwmSprite UInt64
hLogicalSurf UInt64

Event ID 50 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DwmSpriteLogicalSurfUnBind

Fields #

NameDescription
hDwmSprite UInt64
hLogicalSurf UInt64

Event ID 51 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
LogicalSurfEnableDirtyNotification

Fields #

NameDescription
hLogicalSurf UInt64
hPhysSurf UInt64

Event ID 52 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
PhysicalSurfCreate

Fields #

NameDescription
hPhysicalSurf UInt64
Type UInt32
hDxSharedSurface UInt64
Flags UInt32

Event ID 53 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ModifyRgn

Fields #

NameDescription
hLogicalSurface UInt64
RgnType UInt32
rcBounds Int16
NumRects UInt32
rcData Int64

Event ID 54 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
SwapChainGetStats

Fields #

NameDescription
hLogicalSurfSwapChainBind UInt64
ConfirmReason UInt32
LastPresentId UInt32
LastFrameCount UInt32
SyncFrameCount UInt32
LastFrameTime UInt64

Event ID 55 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
SwapChainBindingOpen

Fields #

NameDescription
hLogicalSurfSwapChainBinding UInt64
luidAdapter UInt64
nWidth UInt32
nHeight UInt32
DxgiColorFormat UInt32
hmonAssociation UInt64
uiPresentLimitSemaphoreId UInt64
cBuffers UInt32
BindingInfoHandle Int64

Event ID 56 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
SwapChainBindingRelease

Fields #

NameDescription
hLogicalSurfSwapChainBinding UInt64
DesktopCompositorProcess UInt8
DesktopCompositorError UInt8
DesktopCompositorRef UInt8
DesktopCompositorStatus UInt8
pEventConfirmed UInt64

Event ID 57 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
SwapChainBindingStatus

Fields #

NameDescription
hLogicalSurfSwapChainBinding UInt64
DesktopCompositorStatus UInt8

Event ID 58 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DesktopResolutionFailure

Fields #

NameDescription
ProcessId UInt32
FailureStatus UInt32

Event ID 59 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
QueuePostMessage

Fields #

NameDescription
CallbackCount Int8
pqmsg Pointer
hwnd Pointer
WParam Pointer
LParam Pointer
message UInt32
inputReadyTimeMs UInt32

Event ID 60 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
SendMessage
Opcode
Start

Fields #

NameDescription
CallbackCount Int8
pqmsg Pointer
hwnd Pointer
WParam Pointer
LParam Pointer
message UInt32
inputReadyTimeMs UInt32
flags UInt32
pidReceiver UInt32
tidReceiver UInt32

Event ID 61 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
RetrievePostMessage

Fields #

NameDescription
CallbackCount Int8
pqmsg Pointer
hwnd Pointer
WParam Pointer
LParam Pointer
message UInt32
inputReadyTimeMs UInt32
flags UInt32

Event ID 62 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
RetrieveSendMessage
Opcode
Start

Fields #

NameDescription
CallbackCount Int8
pqmsg Pointer
hwnd Pointer
WParam Pointer
LParam Pointer
message UInt32
inputReadyTimeMs UInt32

Event ID 63 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
RetrieveInputMessage

Fields #

NameDescription
CallbackCount Int8
hwnd Pointer
WParam Pointer
LParam Pointer
message UInt32
inputReadyTimeMs UInt32
flags UInt32

Event ID 64 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
RetrievePseudoMessage

Fields #

NameDescription
CallbackCount Int8
pqmsg Pointer
hwnd Pointer
WParam Pointer
LParam Pointer
message UInt32
inputReadyTimeMs UInt32
flags UInt32

Event ID 65 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
WakePump

Fields #

NameDescription
CallbackCount Int8
pqmsg Pointer
hwnd Pointer
WParam Pointer
LParam Pointer
message UInt32
inputReadyTimeMs UInt32

Event ID 66 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
InputQueueLocked

Fields #

NameDescription
CallbackCount Int8
pQueue Pointer
ownerThread UInt32

Event ID 67 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
InputQueueLocked

Fields #

NameDescription
CallbackCount Int8
pQueue Pointer
ownerThread UInt32

Event ID 68 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
UserCallback
Opcode
Start

Fields #

NameDescription
CallbackCount Int8
api Int32

Event ID 69 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
UserCallback
Opcode
Stop

Fields #

NameDescription
CallbackCount Int8
api Int32

Event ID 70 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
SendMessage
Opcode
Stop

Fields #

NameDescription
CallbackCount Int8
pqmsg Pointer

Event ID 71 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
SendMessageTimeOutToBlocking

Fields #

NameDescription
CallbackCount Int8

Event ID 72 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
InputDeviceRead
Opcode
Start

Fields #

NameDescription
DeviceType Int32
dwFlags UInt32

Event ID 73 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
InputDeviceRead
Opcode
Stop

Fields #

NameDescription
DeviceType Int32
dwFlags UInt32

Event ID 74 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
MessageInjection
Opcode
PostGestureInputMessage

Fields #

NameDescription
CallbackCount Int8
hwnd Pointer
hGestureInfo Pointer

Event ID 75 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
MessageInjection
Opcode
PostGestureMessage

Fields #

NameDescription
CallbackCount Int8
hwnd Pointer
hGestureInfo Pointer

Event ID 76 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
AppMessagePump
Opcode
Start

Fields #

NameDescription
CallbackCount Int8
fGetMessage Int32
dwFlags UInt32
Message UInt32

Event ID 77 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
AppMessagePump
Opcode
Stop

Fields #

NameDescription
CallbackCount Int8
fGetMessage Int32

Event ID 78 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
WakeRIT

Fields #

NameDescription
CallbackCount Int8
WakeReason Int32

Event ID 79 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerMotion
Opcode
Start

Fields #

NameDescription
Time Int32
X Int32
Y Int32

Event ID 80 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerMotion
Opcode
Stop

Fields #

NameDescription
Time Int32
X Int32
Y Int32

Event ID 81 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
InjectMouse
Opcode
Start

Fields #

NameDescription
CallbackCount Int8
Time Int32
X Int32
Y Int32

Event ID 82 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
InjectMouse
Opcode
Stop

Fields #

NameDescription
CallbackCount Int8
Time Int32
X Int32
Y Int32

Event ID 83 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
RetrieveSendMessage
Opcode
Stop

Fields #

NameDescription
CallbackCount Int8
pqmsg Pointer

Event ID 84 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
GUIProcess
Opcode
Start

Event ID 85 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
GUIProcess
Opcode
Stop

Event ID 86 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
GUIThread
Opcode
Start

Event ID 87 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
GUIThread
Opcode
Stop

Event ID 88 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
QueueInputMessage

Fields #

NameDescription
CallbackCount Int8
pqmsg Pointer
WindowDelegated Boolean
WasWindowDelegated Boolean
Delegated Boolean
WasDelegated Boolean
Processed Boolean
fDelayedFree Boolean
hwnd Pointer
WParam Pointer
LParam Pointer
message UInt32
inputReadyTimeMs UInt32

Event ID 89 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TranslateMessage
Opcode
Start

Fields #

NameDescription
CallbackCount Int8
message UInt32

Event ID 91 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TranslateMessage
Opcode
Stop

Fields #

NameDescription
CallbackCount Int8
message UInt32

Event ID 92 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
DispatchMessage
Opcode
Start

Fields #

NameDescription
CallbackCount Int8
message UInt32

Event ID 93 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
DispatchMessage
Opcode
Stop

Fields #

NameDescription
CallbackCount Int8
message UInt32

Event ID 94 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchTargetingSpeedHitTest
Opcode
Start

Event ID 95 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchTargetingSpeedHitTest
Opcode
Stop

Event ID 96 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchTargetingWindowHitTest
Opcode
Start

Event ID 97 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchTargetingWindowHitTest
Opcode
Stop

Event ID 98 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchTargetingPointerTarget
Opcode
Start

Event ID 99 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchTargetingPointerTarget
Opcode
Stop

Event ID 100 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
MessageInjection
Opcode
InjectTouchEvent

Fields #

NameDescription
CallbackCount Int8

Event ID 102 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Opcode
Info

Fields #

NameDescription
SessionId UInt32
cLineWidth UInt32
cElements UInt32

Event ID 103 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Opcode
Info

Fields #

NameDescription
ProcName AnsiString
ClassName UnicodeString
WindowName UnicodeString
uId UInt32
uElapse UInt32
uType UInt32

Event ID 104 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ContactVisualization
Opcode
Start

Event ID 105 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ContactVisualization
Opcode
Stop

Event ID 106 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchTargetingOffset

Fields #

NameDescription
ptOffsetX Int32
ptOffsetY Int32
pointerId Int32
cursorId Int32

Event ID 107 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchTargetingPointerEvent

Fields #

NameDescription
pointerId Int32
cursorId Int32
pointerType Int32
pointerFlags Int32
touchMask Int32
ptLocationX Int32
ptLocationY Int32
rcContactLeft Int32
rcContactRight Int32
rcContactTop Int32
rcContactBottom Int32
orientation Int32

Event ID 108 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchTargetingPointerEvent

Fields #

NameDescription
pointerId Int32
cursorId Int32
pointerType Int32
pointerFlags Int32
touchMask Int32
ptLocationX Int32
ptLocationY Int32
rcContactLeft Int32
rcContactRight Int32
rcContactTop Int32
rcContactBottom Int32
orientation Int32

Event ID 109 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerDeviceRead
Opcode
Start

Event ID 110 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerDeviceRead
Opcode
Stop

Event ID 111 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerDeviceMessage
Opcode
Start

Event ID 112 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerDeviceMessage
Opcode
Stop

Event ID 113 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerDeviceMessage
Opcode
Start

Event ID 114 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerDeviceMessage
Opcode
Stop

Event ID 115 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerDeviceTransformation
Opcode
Start

Fields #

NameDescription
ulContactId UInt32

Event ID 116 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerDeviceTransformation
Opcode
Stop

Fields #

NameDescription
ulContactId UInt32

Event ID 117 —

Provider
Microsoft-Windows-Win32k
Channel
Render
Task
Rendering
Opcode
TranslationUpdate

Fields #

NameDescription
hwnd Pointer
DirtyLeft UInt32
DirtyTop UInt32
DirtyRight UInt32
DirtyBottom UInt32

Event ID 118 —

Provider
Microsoft-Windows-Win32k
Channel
Render
Task
TranslationUpdateOffset

Fields #

NameDescription
hwnd Pointer
Offsetx Int32
Offsety Int32

Event ID 119 —

Provider
Microsoft-Windows-Win32k
Channel
Render
Task
Rendering
Opcode
TranslationUpdateRectClip

Fields #

NameDescription
hwnd Pointer
DirtyLeft UInt32
DirtyTop UInt32
DirtyRight UInt32
DirtyBottom UInt32

Event ID 120 —

Provider
Microsoft-Windows-Win32k
Channel
Render
Task
Rendering
Opcode
UpdateDxAccumFromGDI

Fields #

NameDescription
hwnd Pointer
DirtyLeft UInt32
DirtyTop UInt32
DirtyRight UInt32
DirtyBottom UInt32

Event ID 121 —

Provider
Microsoft-Windows-Win32k
Channel
Render
Task
Rendering
Opcode
UpdateDxAccumFromDX

Fields #

NameDescription
hwnd Pointer
DirtyLeft UInt32
DirtyTop UInt32
DirtyRight UInt32
DirtyBottom UInt32

Event ID 122 —

Provider
Microsoft-Windows-Win32k
Channel
Render
Task
Rendering
Opcode
GetDxAccum

Fields #

NameDescription
hSprite UInt64
hWnd Pointer

Event ID 123 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ModifyDxAccumRgn

Fields #

NameDescription
hLogicalSurface UInt64
RgnType UInt32
rcBounds Int16
NumRects UInt32
rcData Int64

Event ID 124 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
LogicalSurfRemovedTranslationFromDirty

Fields #

NameDescription
hwnd Pointer
DirtyLeft UInt32
DirtyTop UInt32
DirtyRight UInt32
DirtyBottom UInt32

Event ID 125 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerDeviceDiscovery
Opcode
Start

Event ID 126 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerDeviceDiscovery
Opcode
Stop

Event ID 127 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerDeviceMessage
Opcode
Start

Event ID 128 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerDeviceMessage
Opcode
Stop

Event ID 129 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchInjectionEvent
Opcode
Start

Event ID 130 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchInjectionEvent
Opcode
Stop

Event ID 131 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerFrameCreation
Opcode
Start

Fields #

NameDescription
FrameId UInt32
PointerCount UInt32
PendingPointerCount UInt32

Event ID 132 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerFrameCreation
Opcode
Stop

Fields #

NameDescription
FrameId UInt32
PointerCount UInt32
PendingPointerCount UInt32

Event ID 133 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerFrameBuildPartial
Opcode
Start

Fields #

NameDescription
FrameId UInt32
PointerCount UInt32
PendingPointerCount UInt32

Event ID 134 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerFrameBuildPartial
Opcode
Stop

Fields #

NameDescription
FrameId UInt32
PointerCount UInt32
PendingPointerCount UInt32

Event ID 135 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerFrameCommit
Opcode
Start

Fields #

NameDescription
FrameId UInt32
PointerCount UInt32
PendingPointerCount UInt32

Event ID 136 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerFrameCommit
Opcode
Stop

Fields #

NameDescription
FrameId UInt32
PointerCount UInt32
PendingPointerCount UInt32

Event ID 137 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerFrameCoalesce
Opcode
Start

Fields #

NameDescription
FrameId UInt32
PointerCount UInt32
PendingPointerCount UInt32

Event ID 138 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerFrameCoalesce
Opcode
Stop

Fields #

NameDescription
FrameId UInt32
PointerCount UInt32
PendingPointerCount UInt32

Event ID 139 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerFrameMessageGeneration
Opcode
Start

Fields #

NameDescription
FrameId UInt32
PointerCount UInt32
PendingPointerCount UInt32

Event ID 140 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerFrameMessageGeneration
Opcode
Stop

Fields #

NameDescription
FrameId UInt32
PointerCount UInt32
PendingPointerCount UInt32

Event ID 141 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerMessageRetrieve
Opcode
Start

Fields #

NameDescription
pqmsg Pointer
PointerId UInt32
Message UInt32

Event ID 142 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerMessageRetrieve
Opcode
Stop

Fields #

NameDescription
pqmsg Pointer
PointerId UInt32
Message UInt32

Event ID 143 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerUpdateMessageRetrieve
Opcode
Start

Fields #

NameDescription
pqmsg Pointer
PointerId UInt32
Message UInt32

Event ID 144 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerUpdateMessageRetrieve
Opcode
Stop

Fields #

NameDescription
pqmsg Pointer
PointerId UInt32
Message UInt32

Event ID 145 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerSetTargetWindows
Opcode
Start

Event ID 146 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerSetTargetWindows
Opcode
Stop

Event ID 147 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerUpdateSetTargetWindows
Opcode
Start

Event ID 148 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerUpdateSetTargetWindows
Opcode
Stop

Event ID 149 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
InputQueueNoRemoveLocker
Opcode
Stop

Fields #

NameDescription
CallbackCount Int8
pQueue Pointer
ownerThread UInt32

Event ID 150 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
InputQueueLockedPeekRecursion
Opcode
Stop

Fields #

NameDescription
CallbackCount Int8
pQueue Pointer
ownerThread UInt32

Event ID 151 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DCompCommitBatch

Fields #

NameDescription
channelHandle UInt32
pBatch Pointer
batchID UInt32
isNinja Boolean

Event ID 152 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
DelegateInputUserCallback
Opcode
Start

Fields #

NameDescription
CallbackCount Int8
pqmsg Pointer
WindowDelegated Boolean
WasWindowDelegated Boolean
Delegated Boolean
WasDelegated Boolean
Processed Boolean
fDelayedFree Boolean
hwnd Pointer
WParam Pointer
LParam Pointer
message UInt32
inputReadyTimeMs UInt32

Event ID 153 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
DelegateInputUserCallback
Opcode
Stop

Fields #

NameDescription
CallbackCount Int8
pqmsg Pointer
WindowDelegated Boolean
WasWindowDelegated Boolean
Delegated Boolean
WasDelegated Boolean
Processed Boolean
fDelayedFree Boolean
hwnd Pointer
WParam Pointer
LParam Pointer
message UInt32
inputReadyTimeMs UInt32

Event ID 154 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
DelegatedInputWorker
Opcode
Start

Fields #

NameDescription
CallbackCount Int8
pqmsg Pointer
WindowDelegated Boolean
WasWindowDelegated Boolean
Delegated Boolean
WasDelegated Boolean
Processed Boolean
fDelayedFree Boolean
hwnd Pointer
WParam Pointer
LParam Pointer
message UInt32
inputReadyTimeMs UInt32
hdfResponse UInt32

Event ID 155 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
DelegatedInputWorker
Opcode
Stop

Fields #

NameDescription
CallbackCount Int8
pqmsg Pointer
WindowDelegated Boolean
WasWindowDelegated Boolean
Delegated Boolean
WasDelegated Boolean
Processed Boolean
fDelayedFree Boolean
hwnd Pointer
WParam Pointer
LParam Pointer
message UInt32
inputReadyTimeMs UInt32
hdfResponse UInt32

Event ID 156 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerDeviceMessage

Fields #

NameDescription
bNew UInt32
ulContactId UInt32
dwCursorId UInt32
X Int32
Y Int32

Event ID 157 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerMessageGeneration
Opcode
Start

Fields #

NameDescription
wCursorId UInt16
wPointerId UInt16

Event ID 158 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerMessageGeneration
Opcode
Stop

Fields #

NameDescription
wCursorId UInt16
wPointerId UInt16

Event ID 159 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerFrameCoalesce

Fields #

NameDescription
wCursorId UInt16
wPointerId UInt16
dwReason UInt32

Event ID 160 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
SmoothRotation
Opcode
Start

Fields #

NameDescription
Orientation UInt32
SensorOriginated Boolean
ActiveProcessId UInt32

Event ID 161 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
SmoothRotation
Opcode
Stop

Fields #

NameDescription
Orientation UInt32
SensorOriginated Boolean

Event ID 162 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DCompGetBatch

Fields #

NameDescription
pBatch Pointer

Event ID 163 —

Provider
Microsoft-Windows-Win32k
Channel
Contention
Task
ExclusiveUserCrit

Fields #

NameDescription
AcquireQpcCounts UInt64
AcquireTimeUs UInt32
Token UInt64

Event ID 164 —

Provider
Microsoft-Windows-Win32k
Channel
Contention
Task
ExclusiveUserCrit

Fields #

NameDescription
AcquireQpcCounts UInt64
AcquireTimeUs UInt32
Token UInt64

Event ID 165 —

Provider
Microsoft-Windows-Win32k
Channel
Contention
Task
SharedUserCrit

Fields #

NameDescription
AcquireQpcCounts UInt64
AcquireTimeUs UInt32
Token UInt64

Event ID 166 —

Provider
Microsoft-Windows-Win32k
Channel
Contention
Task
SharedUserCrit

Fields #

NameDescription
AcquireQpcCounts UInt64
AcquireTimeUs UInt32
Token UInt64

Event ID 167 —

Provider
Microsoft-Windows-Win32k
Channel
Contention
Task
ReleaseUserCrit

Fields #

NameDescription
HoldQpcCounts UInt64
HoldTimeMs UInt32
Token UInt64

Event ID 168 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
SleepInputIdle

Fields #

NameDescription
pti Pointer

Event ID 169 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
WakeInputIdle

Fields #

NameDescription
pti Pointer

Event ID 170 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
EdgyDetection
Opcode
Start

Event ID 171 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
EdgyDetection
Opcode
Stop

Fields #

NameDescription
Info UInt32

Event ID 172 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ImmersiveInputProcessDelay

Fields #

NameDescription
Flags UInt32
TimeSinceInputRemoveMs UInt32
TimeSinceOldestInputMs UInt32
ClassName UnicodeString
TopLevelClassName UnicodeString
PackageMoniker UnicodeString
AppUserModelId UnicodeString
MessageId UInt32
WParam UInt64

Event ID 173 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ImmersiveMessageCheckDelay

Fields #

NameDescription
Flags UInt32
DelayTimeMs UInt32
TimeSinceInputRemoveMs UInt32
TimeSinceOldestInputMs UInt32
ClassName UnicodeString
TopLevelClassName UnicodeString
PackageMoniker UnicodeString
AppUserModelId UnicodeString
MessageId UInt32
WParam UInt64

Event ID 174 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
THQAEvent
Opcode
Start

Event ID 175 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
THQAEvent
Opcode
Stop

Event ID 176 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerPrediction
Opcode
Start

Fields #

NameDescription
ulContactId UInt32

Event ID 177 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerPrediction
Opcode
Stop

Fields #

NameDescription
ulContactId UInt32

Event ID 178 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
MoveRgn

Fields #

NameDescription
hLogicalSurface UInt64
RgnType UInt32
rcBounds Int16
NumRects UInt32
rcData Int64

Event ID 179 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DirtyRgn

Fields #

NameDescription
hLogicalSurface UInt64
RgnType UInt32
rcBounds Int16
NumRects UInt32
rcData Int64

Event ID 180 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
LogicalSurfRemovedTranslationFromMove

Fields #

NameDescription
hwnd Pointer
DirtyLeft UInt32
DirtyTop UInt32
DirtyRight UInt32
DirtyBottom UInt32

Event ID 181 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DirtyRectUpdate

Fields #

NameDescription
hwnd Pointer
DirtyLeft UInt32
DirtyTop UInt32
DirtyRight UInt32
DirtyBottom UInt32

Event ID 182 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TranslationUpdateOffsetDWM

Fields #

NameDescription
hwnd Pointer
Offsetx Int32
Offsety Int32

Event ID 183 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DwmGetRgn

Fields #

NameDescription
hLogicalSurface UInt64
RgnType UInt32
rcBounds Int16
NumRects UInt32
rcData Int64

Event ID 184 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerFrameCoalesce
Opcode
Start

Fields #

NameDescription
FrameId UInt32
PointerCount UInt32
PendingPointerCount UInt32

Event ID 185 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerFrameCoalesce
Opcode
Stop

Fields #

NameDescription
FrameId UInt32
PointerCount UInt32
PendingPointerCount UInt32

Event ID 186 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerFrameCoalesce

Fields #

NameDescription
wCursorId UInt16
wPointerId UInt16
dwReason UInt32

Event ID 187 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
InternalSetTimerCoalescing

Fields #

NameDescription
Hwnd Pointer
uId UInt32
uElapse UInt32
uCoalescingTolerance UInt32
uType UInt32

Event ID 188 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
InternalSetTimerNoCoalescing

Fields #

NameDescription
Hwnd Pointer
uId UInt32
uElapse UInt32
uType UInt32

Event ID 189 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
KillTimer

Fields #

NameDescription
Hwnd Pointer
uId UInt32

Event ID 190 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ProcTimerCoalescing

Fields #

NameDescription
Hwnd Pointer
uId UInt32
uElapse UInt32
uCoalescingTolerance UInt32
uType UInt32

Event ID 191 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ProcTimerNoCoalescing

Fields #

NameDescription
Hwnd Pointer
uId UInt32
uElapse UInt32
uType UInt32

Event ID 192 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DrvChangeDisplaySettings
Opcode
Start

Event ID 193 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DrvChangeDisplaySettings
Opcode
Stop

Event ID 194 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ChangeDisplayMode
Opcode
Start

Event ID 195 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ChangeDisplayMode
Opcode
Stop

Event ID 196 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PseudoDevCreation
Opcode
Start

Event ID 197 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PseudoDevCreation
Opcode
Stop

Event ID 198 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchHWTimeStamp

Fields #

NameDescription
ScanTime Int32
dwTime Int32
QPC UInt64
XRawPosition Int32
YRawPosition Int32
XPredictedPosition Int32
YPredictedPosition Int32

Event ID 199 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerFrameCoalesce

Fields #

NameDescription
wCursorId UInt16
wPointerId UInt16
dwReason UInt32

Event ID 200 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
PointerFrameCoalesce

Fields #

NameDescription
wCursorId UInt16
wPointerId UInt16
dwReason UInt32

Event ID 201 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TokenCompositionSurfaceObject

Fields #

NameDescription
pToken Pointer
pCompositionSurfaceObject Pointer
SwapChainIndex UInt32
PresentCount UInt64
CompositionSurfaceLuid UInt64
BindId UInt64
FlipInterval UInt32
DestWidth UInt32
DestHeight UInt32

Event ID 202 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
CompositionSurfaceObjectUpdate

Fields #

NameDescription
pCompositionSurfaceObject Pointer
SwapChainIndex UInt32

Event ID 203 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
QueueEventMessage

Fields #

NameDescription
CallbackCount Int8
pqmsg Pointer
pti Pointer
dwQEvent UInt32
hwnd Pointer

Event ID 204 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
RetrieveQueueEventMessage

Fields #

NameDescription
CallbackCount Int8
pqmsg Pointer
pti Pointer
dwQEvent UInt32
hwnd Pointer

Event ID 205 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ForegroundWindowFullScreen
Opcode
Start

Event ID 206 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ForegroundWindowFullScreen
Opcode
Stop

Event ID 207 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ChangeDisplayModeBroadcast

Event ID 213 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ContactVisualization

Fields #

NameDescription
data UInt32

Event ID 214 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ChangeDisplayModeDeferral

Event ID 215 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ConvertibleState

Fields #

NameDescription
ConvertibleState UInt32

Event ID 216 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DockState

Fields #

NameDescription
DockState UInt32

Event ID 217 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TouchPadHWTimeStamp

Fields #

NameDescription
ScanTime UInt32
dwTime UInt32
QPCTime UInt64
XLogicalT UInt32
YLogicalT UInt32
XLogicalC UInt32
YLogicalC UInt32
XHimetricT UInt32
YHimetricT UInt32
Button Boolean
Count UInt32
Identifier UInt32
Width UInt32
Height UInt32
Confidence Boolean
Pressure UInt32
DeviceType UInt32

Event ID 218 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TransformAgeDecay

Fields #

NameDescription
InputTransformList Pointer
PerformanceCount UInt64

Event ID 219 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
WakeMIT

Fields #

NameDescription
CallbackCount Int8
WakeReason Int32

Event ID 220 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
ArmDitMouseFlush

Event ID 221 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
ProcessQueuedMouseEvents
Opcode
Start

Event ID 222 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
ProcessQueuedMouseEvents
Opcode
Stop

Event ID 223 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
DITSpeedHitTestFailedRevalidation

Fields #

NameDescription
Hwnd Pointer

Event ID 224 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
InputRedirection

Fields #

NameDescription
hDCompInputHandle Pointer
Hwnd Pointer
XformQPCTime UInt64
XformStored UInt32

Event ID 225 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
OnInputXformUpdate

Fields #

NameDescription
Hwnd Pointer
XformQPCTime UInt64
XformUpdated UInt32

Event ID 226 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
DitWaitForRitDisEngagement

Event ID 227 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
RitDisEngaged

Event ID 228 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
DitEngaged

Event ID 229 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
RitReEngaged

Event ID 230 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
DitDisEngaged

Event ID 231 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
DitTerminated

Event ID 232 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
DitShutdown

Event ID 233 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TouchPadAAP

Fields #

NameDescription
LastKeyDownTime UInt32
LastKeyUpTime UInt32
TapTime UInt32
Blocked Boolean
Feature UInt32

Event ID 234 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
MouseInputApc

Event ID 235 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
MouseInputCoalesced

Event ID 236 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TouchPadTypeDiscovered

Fields #

NameDescription
deviceType UInt32

Event ID 237 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TouchPadEnabledStatusChange
Opcode
Start

Event ID 238 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TouchPadEnabledStatusChange
Opcode
Stop

Event ID 239 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
PTPReadThresholds
Opcode
Start

Event ID 240 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
PTPReadThresholds
Opcode
Stop

Event ID 241 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TouchPadConfidenceCleared

Fields #

NameDescription
ContactId UInt32
OnUp Boolean
NeedsUp Boolean

Event ID 242 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TouchPadConfidenceUpped

Fields #

NameDescription
ContactId UInt32

Event ID 243 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
PTPElasticDragMode
Opcode
Start

Event ID 244 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
PTPElasticDragMode
Opcode
Stop

Event ID 245 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
LegacyTouchPadDetection
Opcode
Start

Event ID 246 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
LegacyTouchPadDetection
Opcode
Stop

Event ID 247 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
LegacyTouchPadDetection

Event ID 248 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
LegacyTouchPadDetection

Event ID 249 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TouchPadCurtainState

Fields #

NameDescription
CurtainsOn Boolean

Event ID 250 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TouchPadCurtainSize

Fields #

NameDescription
Top UInt32
Left UInt32
Right UInt32
Enabled Boolean

Event ID 251 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TouchpadStopInertia

Event ID 252 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TouchpadStopInertia

Event ID 253 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TouchpadStopInertia

Event ID 254 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TrappedAppContainerRender

Fields #

NameDescription
RenderSourceProcessName AnsiString
RenderSourcePackageName UnicodeString
RenderTargetProcessName AnsiString
RenderTargetPackageName UnicodeString

Event ID 255 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
CursorSize

Fields #

NameDescription
iCursorDim UInt32
cx UInt32
cy UInt32

Event ID 256 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
DitMmcssWork
Opcode
Start

Event ID 257 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
DitMmcssWork
Opcode
Stop

Event ID 258 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FocusedProcessChangeGained

Fields #

NameDescription
SessionId UInt32
NewProcessId UInt32
NewProcessCreateTime FILETIME

Event ID 259 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FocusedProcessChangeLost

Fields #

NameDescription
SessionId UInt32
OldProcessId UInt32
OldProcessCreateTime FILETIME

Event ID 260 — SourceProcessName attempted loading a font that is restricted by font loading policy.

Provider
Microsoft-Windows-Win32k
Channel
Operational
Collection Priority
Recommended (JSCU-NL)
Task
FontLoadAttempt

Description

SourceProcessName attempted loading a font that is restricted by font loading policy.

Message #

%1 attempted loading a font that is restricted by font loading policy.
FontType: %2
FontPath: %3
Blocked: %4

Fields #

NameDescription
SourceProcessName UnicodeString
SourceType UInt32
FontSourcePath UnicodeString
Blocked Boolean

Event ID 301 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TokenStateChanged

Fields #

NameDescription
pCompositionSurfaceObject Pointer
SwapChainIndex UInt32
PresentCount UInt32
FenceValue UInt64
NewState UInt32
IndependentFlip Boolean
SkipIndependentFlip Boolean
CompositionSurfaceLuid UInt64
BindId UInt64
EarlyComposition Boolean

Event ID 400 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DCompDeferBatch

Fields #

NameDescription
channelHandle UInt32
pBatch Pointer
batchID UInt32
submissionTime UInt64
submissionDeadline UInt64
deferReason UInt32

Event ID 401 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchPadHIDProcessing
Opcode
Start

Event ID 402 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchPadHIDProcessing
Opcode
Stop

Event ID 403 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchPadWMPointerProcessing
Opcode
Start

Event ID 404 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchPadWMPointerProcessing
Opcode
Stop

Event ID 405 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
TouchPadGesture

Event ID 406 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
CopyPointerInputFrame
Opcode
Start

Event ID 407 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
CopyPointerInputFrame
Opcode
Stop

Event ID 410 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
LatencyModeProcessing
Opcode
Start

Event ID 411 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
LatencyModeProcessing
Opcode
Stop

Event ID 412 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DCompBeginFrame

Fields #

NameDescription
hConnection UInt64
targetTime UInt64

Event ID 413 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TokenIndependentFlipSkipComplete

Fields #

NameDescription
SyncRefreshCount UInt32
PresentCount UInt32
CompositionSurfaceLuid UInt64
BindId UInt64

Event ID 414 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DwmManipulationFrameStart

Fields #

NameDescription
FrameId UInt32
PointerCount UInt32

Event ID 415 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DwmManipulationFrameRouted

Fields #

NameDescription
FrameId UInt32
PointerCount UInt32

Event ID 416 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ExclusiveUserCritTelemetry

Fields #

NameDescription
AcquireQpcCounts UInt64
AcquireTimeMs UInt32
Token UInt64

Event ID 417 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
SharedUserCritTelemetry

Fields #

NameDescription
AcquireQpcCounts UInt64
AcquireTimeMs UInt32
Token UInt64

Event ID 418 — PowerOnGdi

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerDisplayChange
Opcode
Start

Description

PowerOnGdi.

Message #

PowerOnGdi

Fields #

NameDescription
Location Int32

Event ID 419 — PowerOnGdi

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerDisplayChange
Opcode
Stop

Description

PowerOnGdi.

Message #

PowerOnGdi

Fields #

NameDescription
Location Int32

Event ID 420 — UserResetDisplayDevice

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerDisplayChange
Opcode
Start

Description

UserResetDisplayDevice.

Message #

UserResetDisplayDevice

Fields #

NameDescription
Location Int32

Event ID 421 — UserResetDisplayDevice

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerDisplayChange
Opcode
Stop

Description

UserResetDisplayDevice.

Message #

UserResetDisplayDevice

Fields #

NameDescription
Location Int32

Event ID 422 — PowerOnMonitor

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerDisplayChange
Opcode
Start

Description

PowerOnMonitor.

Message #

PowerOnMonitor

Fields #

NameDescription
Location Int32

Event ID 423 — PowerOnMonitor

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerDisplayChange
Opcode
Stop

Description

PowerOnMonitor.

Message #

PowerOnMonitor

Fields #

NameDescription
Location Int32

Event ID 424 — DwmSyncFlushForceRenderAndWaitForBatch

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerDisplayChange
Opcode
Start

Description

DwmSyncFlushForceRenderAndWaitForBatch.

Message #

DwmSyncFlushForceRenderAndWaitForBatch

Fields #

NameDescription
Location Int32

Event ID 425 — DwmSyncFlushForceRenderAndWaitForBatch

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerDisplayChange
Opcode
Stop

Description

DwmSyncFlushForceRenderAndWaitForBatch.

Message #

DwmSyncFlushForceRenderAndWaitForBatch

Fields #

NameDescription
Location Int32

Event ID 426 —

Provider
Microsoft-Windows-Win32k
Channel
Messages
Task
QueueNullPostMessage

Fields #

NameDescription
SourceProcessId UInt32
SourceThreadId UInt32
SourceProcessName AnsiString
DestinationHwnd Pointer

Event ID 427 — The following win32k syscall is blocked by Win32k Syscall Filter: SyscallName.

Provider
Microsoft-Windows-Win32k
Channel
Operational
Task
SyscallFilterMessage

Description

The following win32k syscall is blocked by Win32k Syscall Filter: SyscallName.

Message #

The following win32k syscall is blocked by Win32k Syscall Filter: %1
Process Command Line: %3

Fields #

NameDescription
SyscallName AnsiString
AppContainerSid UnicodeString
ProcessCommandLine UnicodeString
FilterSetId UInt32

Event ID 428 — The following SystemParametersInfo action was blocked by Win32k Syscall Filter: SPIAction.

Provider
Microsoft-Windows-Win32k
Channel
Operational
Task
SPIBlockedByFiltering

Description

The following SystemParametersInfo action was blocked by Win32k Syscall Filter: SPIAction.

Message #

The following SystemParametersInfo action was blocked by Win32k Syscall Filter: %1

Fields #

NameDescription
SPIAction UInt32

Event ID 429 — PowerWatchdog

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerWatchdog
Opcode
Start

Description

PowerWatchdog.

Message #

PowerWatchdog

Fields #

NameDescription
Instance UInt64
WatchdogType UInt32

Event ID 430 — PowerWatchdog

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerWatchdog
Opcode
Stop

Description

PowerWatchdog.

Message #

PowerWatchdog

Fields #

NameDescription
Instance UInt64

Event ID 431 — VideoPortCalloutThread

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerRequest
Opcode
Start

Description

VideoPortCalloutThread.

Message #

VideoPortCalloutThread

Fields #

NameDescription
CalloutType Int32
Status UInt32NTSTATUS reference

Event ID 432 — VideoPortCalloutThread

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerRequest
Opcode
Stop

Description

VideoPortCalloutThread.

Message #

VideoPortCalloutThread

Fields #

NameDescription
CalloutType Int32
Status UInt32NTSTATUS reference

Event ID 433 — PowerStateCalloutWorker

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerRequest
Opcode
Start

Description

PowerStateCalloutWorker.

Message #

PowerStateCalloutWorker

Fields #

NameDescription
PowerTaskState Int32
Status UInt32NTSTATUS reference

Event ID 434 — PowerStateCalloutWorker

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerRequest
Opcode
Stop

Description

PowerStateCalloutWorker.

Message #

PowerStateCalloutWorker

Fields #

NameDescription
PowerTaskState Int32
Status UInt32NTSTATUS reference

Event ID 435 — PowerEventCalloutWorker

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerRequest
Opcode
Start

Description

PowerEventCalloutWorker.

Message #

PowerEventCalloutWorker

Fields #

NameDescription
EventNumber Int32
Code UInt64
Status UInt32NTSTATUS reference

Event ID 436 — PowerEventCalloutWorker

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerRequest
Opcode
Stop

Description

PowerEventCalloutWorker.

Message #

PowerEventCalloutWorker

Fields #

NameDescription
EventNumber Int32
Code UInt64
Status UInt32NTSTATUS reference

Event ID 437 — Insert

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerRequest
Opcode
Start

Message #

Insert

Fields #

NameDescription
Address UInt64
EventNumber Int32
Code UInt64

Event ID 438 — Remove

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerRequest

Message #

Remove

Fields #

NameDescription
Address UInt64
Status UInt32NTSTATUS reference

Event ID 439 — Canceled

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerRequest

Message #

Canceled

Fields #

NameDescription
Address UInt64
Status UInt32NTSTATUS reference

Event ID 440 — Completed

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerRequest
Opcode
Stop

Description

Completed.

Message #

Completed

Fields #

NameDescription
Address UInt64
Status UInt32NTSTATUS reference

Event ID 441 — WaitForVideoPortCalloutReady

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerRequest
Opcode
Start

Description

WaitForVideoPortCalloutReady.

Message #

WaitForVideoPortCalloutReady

Fields #

NameDescription
NeedWaitForRit Boolean
NeedPowerOnGdi Boolean

Event ID 442 — WaitForVideoPortCalloutReady

Provider
Microsoft-Windows-Win32k
Channel
Power
Task
PowerRequest
Opcode
Stop

Description

WaitForVideoPortCalloutReady.

Message #

WaitForVideoPortCalloutReady

Event ID 443 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DCompResourceMapping

Fields #

NameDescription
Channel UInt32
InternalHandle UInt32
ExternalHandle UInt32
InternalHandleAndChannel UInt64
ExternalHandleAndChannel UInt64
ResourceType UInt32
CreateShared Boolean
OpenShared Boolean

Event ID 444 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DCompResourcePropertyUpdate

Fields #

NameDescription
Channel UInt32
InternalHandle UInt32
ExternalHandle UInt32
ResourceType UInt32
PropertyId UInt32

Event ID 445 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DCompCommandType

Fields #

NameDescription
CommandType UInt32
status UInt64NTSTATUS reference

Event ID 446 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DCompCommandsInBatch

Fields #

NameDescription
CommandsCount UInt64

Event ID 450 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DCompCreateImplicitInteraction

Fields #

NameDescription
Channel UInt32
VisualInternalHandle UInt32
InteractionInternalHandle UInt32
VisualInternalHandleAndChannel UInt64
InteractionInternalHandleAndChannel UInt64
ResourceType UInt32
DefaultInteraction Boolean
Reason UnicodeString

Event ID 451 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DCompVisualSetInteraction

Fields #

NameDescription
Channel UInt32
VisualInternalHandle UInt32
InteractionInternalHandle UInt32
VisualInternalHandleAndChannel UInt64
InteractionInternalHandleAndChannel UInt64

Event ID 452 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
UserHandleOperation
Opcode
CreateHandle

Fields #

NameDescription
HandleValue Pointer
HandleType UInt32
SessionId UInt32
OwnerProcessId UInt32

Event ID 453 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
UserHandleOperation
Opcode
DestroyHandle

Fields #

NameDescription
HandleValue Pointer
HandleType UInt32
SessionId UInt32
OwnerProcessId UInt32

Event ID 454 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
UserHandleOperation
Opcode
UpdateHandleOwner

Fields #

NameDescription
HandleValue Pointer
HandleType UInt32
SessionId UInt32
OwnerProcessId UInt32

Event ID 455 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
GdiHandleOperation
Opcode
CreateHandle

Fields #

NameDescription
HandleValue Pointer
HandleType UInt32
SessionId UInt32
OwnerProcessId UInt32

Event ID 456 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
GdiHandleOperation
Opcode
DestroyHandle

Fields #

NameDescription
HandleValue Pointer
HandleType UInt32
SessionId UInt32
OwnerProcessId UInt32

Event ID 457 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
GdiHandleOperation
Opcode
UpdateHandleOwner

Fields #

NameDescription
HandleValue Pointer
HandleType UInt32
SessionId UInt32
OwnerProcessId UInt32

Event ID 458 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
GdiHandleOperation
Opcode
TransformHandle

Fields #

NameDescription
PreviousHandleValue Pointer
NewHandleValue Pointer
HandleType UInt32
SessionId UInt32
OwnerProcessId UInt32

Event ID 459 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
WriteClipboard

Fields #

NameDescription
Pid UInt32
ProcessCreateTime FILETIME

Event ID 460 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
WriteClipboard

Fields #

NameDescription
Pid UInt32
ProcessCreateTime FILETIME

Event ID 461 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DwmVisRgnUpdate

Fields #

NameDescription
hwnd Pointer
hwndParent Pointer
visRgnType UInt32
changed Boolean

Event ID 462 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
DwmVisRgnDirty

Fields #

NameDescription
hwnd Pointer
hwndParent Pointer

Event ID 463 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
ReadClipboard

Fields #

NameDescription
CallerPid UInt32
CallerProcessCreateTime FILETIME
OwnerPid UInt32
OwnerProcessCreateTime FILETIME
ClipboardSequenceNumber UInt32

Event ID 500 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerCompleteToken
Opcode
Start

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64
IFlip Boolean
IFlipCompleted Boolean
ConvertedToNonIflip Boolean
RequestDwmConfirm Boolean
RequestDwmExit Boolean
IndependentFlipCandidate Boolean

Event ID 501 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerCompleteToken
Opcode
Stop

Fields #

NameDescription
PresentId UInt64

Event ID 502 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerTokenReleaseToFrame
Opcode
Start

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64

Event ID 503 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerTokenReleaseToFrame
Opcode
Stop

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64

Event ID 504 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerPresentConfirmed

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64

Event ID 505 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerPresentSignaled

Fields #

NameDescription
FlipManagerId UInt32
SignalValue UInt64
Skipped Boolean
Status UInt32NTSTATUS reference

Event ID 506 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerPresentPosted

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64
PresentAtTimeHns UInt64
CurrentTimeHns UInt64
PresentAtTimeMinusCurrentTimeHns Int64

Event ID 507 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerProducerSetContent

Fields #

NameDescription
FlipManagerId UInt32
ContentResource Pointer
BufferResource Pointer
BufferIndex UInt32

Event ID 508 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerBufferAvailable

Fields #

NameDescription
FlipManagerId UInt32
BufferResource Pointer
available Boolean

Event ID 509 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerAddBuffer

Fields #

NameDescription
FlipManagerId UInt32
BufferResource Pointer
hVidMmGlobalAlloc Pointer

Event ID 510 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerRemoveBuffer

Fields #

NameDescription
FlipManagerId UInt32
BufferResource Pointer

Event ID 511 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerContentRebind

Fields #

NameDescription
Content Pointer
LUID UInt64
BindId UInt64
Displayable Boolean
BufferCount UInt32

Event ID 512 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerPresentProcessed

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64
FrameId UInt64
PresentAtTimeHns UInt64
FrameTimeHns UInt64
MaxAcceptableTargetTimeHns UInt64
PresentTimeMinusFrameTimeHns Int64

Event ID 513 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerPresentDeferred

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64
FrameId UInt64
PresentAtTimeHns UInt64
FrameTimeHns UInt64
MaxAcceptableTargetTimeHns UInt64
PresentTimeMinusFrameTimeHns Int64

Event ID 514 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerPresentCanceled

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64
FrameId UInt64
PresentAtTimeHns UInt64
FrameTimeHns UInt64
MaxAcceptableTargetTimeHns UInt64
PresentTimeMinusFrameTimeHns Int64

Event ID 515 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerPresentIFlipSubmitted

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64
WasCanceled Boolean

Event ID 516 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerPresentIFlipCompleted

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64
Notify Boolean
WasCanceled Boolean
CompletedQpc UInt64
DurationQpc UInt64

Event ID 517 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerPresentQueueDepth

Fields #

NameDescription
FlipManagerId UInt32
PresentQueueDepth UInt64

Event ID 518 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerBinding
Opcode
Start

Fields #

NameDescription
ContentResource Pointer

Event ID 519 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerBinding

Fields #

NameDescription
BufferResource Pointer
Index UInt32

Event ID 520 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerBinding
Opcode
Stop

Event ID 521 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerAddContent

Fields #

NameDescription
FlipManagerId UInt32
ContentResource Pointer

Event ID 522 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerContentFlip

Fields #

NameDescription
ContentResource Pointer
LUID UInt64
BindId UInt64
FlipIndex UInt32

Event ID 523 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerNoOpPresent

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64

Event ID 524 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerCancelPosted

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64

Event ID 525 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerContentUnbind

Fields #

NameDescription
Content Pointer
LUID UInt64

Event ID 526 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerCreate

Fields #

NameDescription
FlipManagerId UInt32

Event ID 527 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerDestroy

Fields #

NameDescription
FlipManagerId UInt32

Event ID 528 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
TokenManagerDisableScanoutToken

Fields #

NameDescription
LUID UInt64
BindId UInt64

Event ID 529 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerLost

Fields #

NameDescription
FlipManagerId UInt32

Event ID 530 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerCanceledPresentShown

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64
Reason UInt32

Event ID 531 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerUpdateExpectedConsumerPresentId

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64
Reason UInt32

Event ID 532 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerPresentSkipped

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64
FrameId UInt64
PresentAtTimeHns UInt64
FrameTimeHns UInt64
MaxAcceptableTargetTimeHns UInt64
PresentTimeMinusFrameTimeHns Int64

Event ID 533 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerRemoveContent

Fields #

NameDescription
FlipManagerId UInt32
ContentResource Pointer

Event ID 534 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerPresentIFlipPurgePreviousPresents

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64

Event ID 535 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
FlipManagerDiscardPresentAfterDestroy

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64

Event ID 536 —

Provider
Microsoft-Windows-Win32k
Channel
Operational
Task
FlipManagerWaitForFrameRenderingComplete

Fields #

NameDescription
FlipManagerId UInt32
PresentId UInt64
FrameId UInt64
Status UInt32NTSTATUS reference

Event ID 537 —

Provider
Microsoft-Windows-Win32k
Channel
Operational
Task
FlipManagerWaitForFrameFlipAway

Fields #

NameDescription
FlipManagerId UInt32
adapterLuid UInt64
fenceValue UInt64
Status UInt32NTSTATUS reference

Event ID 538 —

Provider
Microsoft-Windows-Win32k
Channel
Operational
Task
FlipManagerFlipAwayFenceCreate

Fields #

NameDescription
fenceId UInt64
displayAdapterLuid UInt64

Event ID 539 —

Provider
Microsoft-Windows-Win32k
Channel
Operational
Task
FlipManagerFlipAwayFenceDestroy

Fields #

NameDescription
fenceId UInt64
displayAdapterLuid UInt64

Event ID 1000 —

Provider
Microsoft-Windows-Win32k
Channel
Operational
Opcode
Info

Fields #

NameDescription
eventMin UInt32
eventMax UInt32
idEventProcess UInt32
idEventThread UInt32
Flags UInt32
HookInstance Pointer

Event ID 1001 —

Provider
Microsoft-Windows-Win32k
Channel
Operational
Opcode
Info

Fields #

NameDescription
ReturnValue UInt32
UsagePage UInt16
Usage UInt16
Flags UInt32
hwndTarget Pointer
ThreadStartAddress Pointer
ThreadCreateTime FILETIME
ThreadId UInt32
cWindows UInt32
cVisWindows UInt32
ThreadInfoFlags UInt64
ProcessId UInt32
ProcessCreateTime FILETIME
ProcessStartKey UInt64
ThreadStartAddressMappedModuleName UnicodeString
ThreadStartAddressQueryResult UInt32
ThreadStartAddressVadAllocationBase Pointer
ThreadStartAddressVadAllocationProtect UInt32
ThreadStartAddressVadRegionType UInt32
ThreadStartAddressVadRegionSize Pointer
ThreadStartAddressVadProtect UInt32

Event ID 1002 —

Provider
Microsoft-Windows-Win32k
Channel
Operational
Opcode
Info

Fields #

NameDescription
FilterType UInt32
pstrLib UnicodeString
hmod Pointer
pfnFilterProc Pointer
ReturnValue UInt32

Event ID 1003 —

Provider
Microsoft-Windows-Win32k
Channel
Operational
Opcode
Info

Fields #

NameDescription
PID UInt32
MsSinceLastKeyEvent UInt32
BackgroundCallCount UInt32

Event ID 2000 —

Provider
Microsoft-Windows-Win32k
Channel
Operational
Opcode
Info

Fields #

NameDescription
Flags UInt32
ProcessId UInt32
ProcessCreateTime FILETIME
ProcessStartKey UInt64

Event ID 10002 —

Provider
Microsoft-Windows-Win32k
Channel
Tracing
Task
WindowLayoutChange
Opcode
Stop

Fields #

NameDescription
hWnd UInt32
Packed_High_Height_Low_Width UInt32
PRAID UnicodeString
PackageFullName UnicodeString