jess jessica0f0116
jessica0f0116
/ directcomposition_resource_types.txt
Created
April 20, 2021 05:39
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| DirectComposition Resource types | |
| For Windows 10 20H2 | |
| These are in a big switch statement in DirectComposition::CreateInternalResource | |
| ID# vtable ptr: pool tag: size_t: | |
| 0x01 CAffineTransform2DEffectMarshaler DCfe 0x98 | |
| 0x02 CAnimationMarshaler DCan 0x100 | |
| 0x03 CAnimationLoggingManagerMarshaler DClm 0x108 | |
| 0x04 CAnimationTriggerMarshaler DCtr 0x70 | |
| 0x05 CArithmeticCompositeEffectMarshaler DCfe 0x88 | |
| 0x08 CWindowBackdropBrushMarshaler DCjb 0x48 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { "apiset entries": [ | |
| { "apiset name": "api-ms-onecoreuap-print-render-l1-1-0", "hosts": "printrenderapihost.dll" }, | |
| { "apiset name": "api-ms-win-appmodel-identity-l1-2-0", "hosts": "kernel.appcore.dll" }, | |
| { "apiset name": "api-ms-win-appmodel-runtime-internal-l1-1-7", "hosts": "kernel.appcore.dll" }, | |
| { "apiset name": "api-ms-win-appmodel-runtime-l1-1-3", "hosts": "kernel.appcore.dll" }, | |
| { "apiset name": "api-ms-win-appmodel-state-l1-1-2", "hosts": "kernel.appcore.dll" }, | |
| { "apiset name": "api-ms-win-appmodel-state-l1-2-0", "hosts": "kernel.appcore.dll" }, | |
| { "apiset name": "api-ms-win-appmodel-unlock-l1-1-0", "hosts": "kernel.appcore.dll" }, | |
| { "apiset name": "api-ms-win-base-bootconfig-l1-1-0", "hosts": "advapi32.dll" }, | |
| { "apiset name": "api-ms-win-base-util-l1-1-0", "hosts": "advapi32.dll" }, |
jessica0f0116
/ gdxgkinterface_functiontable.txt
Last active
October 30, 2022 11:59
gDxgkInterface Windows 10 2004/20H2
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 0: kd> dqs win32kbase!gDxgkInterface win32kbase!gDxgkInterface+320h //win32kbase xrefs | |
| ffffe412`87e5d7f0 00000000`002c0328 | |
| ffffe412`87e5d7f8 ffffe412`87c00000 win32kbase!DeferSysPeekMsg <PERF> (win32kbase+0x0) | |
| ffffe412`87e5d800 00000000`00000000 | |
| ffffe412`87e5d808 fffff800`8331e5c0 dxgkrnl!DXG_GUEST_COMPOSITIONOBJECTCHANNEL::ChannelStarted | |
| ffffe412`87e5d810 fffff800`8331e5c0 dxgkrnl!DXG_GUEST_COMPOSITIONOBJECTCHANNEL::ChannelStarted // DxDdCleanupDxGraphics ; | |
| ffffe412`87e5d818 fffff800`8330fbf0 dxgkrnl!DxgkProcessCallout // GdiProcessCallout ; | |
| ffffe412`87e5d820 fffff800`83337470 dxgkrnl!DxgkNotifyProcessFreezeCallout // W32CalloutDispatch ; | |
| ffffe412`87e5d828 fffff800`83337320 dxgkrnl!DxgkNotifyProcessThawCallout // W32CalloutDispatch ; | |
| ffffe412`87e5d830 fffff800`83306670 dxgkrnl!DxgkOpenAdapter // DxgkEngOpenAdapterFromHdc ; |