================================================================================ win32kbase.sys (C++ host): Rust integration + feature traits File: C:\Windows\System32\win32kbase.sys (10.0.26100.8972) PDB : win32kbase.pdb (public symbols, 14,235 S_PUB32) ================================================================================ --- Every public symbol containing Rust / Win32kRS / PathToRegion / RgnRust / GdiRust --- (60 symbols) ??0RGNMEMOBJ@@QEAA@AEBVRustAutoHotpatchLockSH@@@Z ??0RustAutoHotpatchLockSH@@QEAA@XZ ?AllocateAndGetBaseRustExports@@YAJPEBU_SYSTEM_GDI_DRIVER_INFORMATION@@PEAPEAUBaseRustExportsStorage@@@Z ?AllocateAndLoadBaseRustExports@@YAJPEBGPEAPEAUBaseRustExportsStorage@@_N@Z ?AllocateRegion@RGNMEMOBJ@@SAPEAVREGION@@AEBVRustAutoHotpatchLockSH@@K@Z ?bCopy@RGNOBJ@@QEAAHAEBVRustAutoHotpatchLockSH@@AEAV1@@Z ?bOffset@RGNOBJ@@QEAAHAEBVRustAutoHotpatchLockSH@@PEBU_POINTL@@@Z ?CleanupRustCode@@YAXXZ ?GetBaseRustExports@@YAJPEAUBaseRustExportsStorage@@@Z ?GetBaseRustGlobals@@YAPEBUBaseRustGlobals@@XZ ?GreProbeAndReadFromUntrustedVa@@YAXPEAX_KPEBX11@Z ?GreProbeAndWriteToUntrustedVa@@YAXPEAX_KPEBX11@Z ?GreProbeUntrustedVaRange@@YAXPEBX_K11@Z ?HotswapBaseRustBinary@@YAJPEBG@Z ?iCombine@RGNOBJ@@QEAAJAEBVRustAutoHotpatchLockSH@@AEAV1@1J@Z ?iComplexity@RGNOBJ@@QEBAJAEBVRustAutoHotpatchLockSH@@@Z ?RegionCore_bContain_region@Win32kRS@@YAHPEBVREGION_CORE@@0@Z ?RegionCore_bCopy@Win32kRS@@YA_NPEAVREGION_CORE@@PEBV2@@Z ?RegionCore_bEqual@Win32kRS@@YAHPEBVREGION_CORE@@0@Z ?RegionCore_bExpand@Win32kRS@@YAHPEAVREGION_CORE@@K@Z ?RegionCore_bMerge@Win32kRS@@YAHPEAVREGION_CORE@@PEBV2@1E@Z ?RegionCore_bOffset@Win32kRS@@YAHPEAVREGION_CORE@@PEBU_POINTL@@@Z ?RegionCore_fill_path_with_outline@Win32kRS@@YAHPEBVREGION_CORE@@AEAVEPATHOBJ@@PEBVEXFORMOBJ@@@Z ?RegionCore_get_pScan_mut@Win32kRS@@YAPEAVSCAN@@PEAVREGION_CORE@@@Z ?RegionCore_get_pscnTail_mut@Win32kRS@@YAPEAVSCAN@@PEAVREGION_CORE@@@Z ?RegionCore_get_sizeScan@Win32kRS@@YAKPEBVREGION_CORE@@@Z ?RegionCore_get_sizeScanAlloc@Win32kRS@@YAKPEBVREGION_CORE@@@Z ?RegionCore_iCombine@Win32kRS@@YAJPEAVREGION_CORE@@00J@Z ?RegionCore_iComplexity@Win32kRS@@YAJPEBVREGION_CORE@@@Z ?RegionCore_iReduce@Win32kRS@@YAJPEAVREGION_CORE@@PEBV2@@Z ?RegionCore_is_rect@Win32kRS@@YAHPEBVREGION_CORE@@@Z ?RegionCore_numRect@Win32kRS@@YAKPEBVREGION_CORE@@@Z ?RegionCore_set_from_path@Win32kRS@@YAHPEAVREGION_CORE@@AEAVEPATHOBJ@@KPEBU_RECTL@@@Z ?RegionCore_set_sizeScan@Win32kRS@@YAXPEAVREGION_CORE@@K@Z ?RegionCore_set_to_null_scan@Win32kRS@@YAXPEAVREGION_CORE@@@Z ?RegionCore_set_to_rect@Win32kRS@@YAXPEAVREGION_CORE@@PEBU_RECTL@@@Z ?RegionCore_set_to_rectls@Win32kRS@@YAHPEAVREGION_CORE@@_KPEBU_RECTL@@@Z ?RegionCore_sizeSave@Win32kRS@@YAKPEBVREGION_CORE@@@Z ?RegionCore_tighten@Win32kRS@@YAXPEAVREGION_CORE@@@Z ?RegionCore_upload@Win32kRS@@YAHPEAVREGION_CORE@@PEBJK@Z ?RegionCore_upload_for_floodfill@Win32kRS@@YAJPEAVREGION_CORE@@PEBJKPEAJK@Z ?RegionCore_vCopy@Win32kRS@@YAXPEAVREGION_CORE@@PEBV2@@Z ?RegionCore_vScale@Win32kRS@@YAXPEAVREGION_CORE@@VPOINTFL@@@Z ?RgnCaptureLiveMemoryDumpOnZeroSizedScan@@YAXAEBVBaseRustExports@@PEBVREGION_CORE@@@Z ?RustOnZeroSizedScanCallback@@YAXXZ ?vDeleteREGION@REGION@@AEAAXAEBVRustAutoHotpatchLockSH@@@Z ?vDeleteRGNOBJ@RGNOBJ@@QEAAXAEBVRustAutoHotpatchLockSH@@@Z ?vGetSubRect@RGNOBJ@@QEBAXAEBVRustAutoHotpatchLockSH@@PEAU_RECTL@@@Z ?vInitialize@RGNMEMOBJ@@QEAAXAEBVRustAutoHotpatchLockSH@@K@Z ?vStamp@REGION@@AEAAXAEBVRustAutoHotpatchLockSH@@@Z ?vUpdate_VisRect@DC@@QEAAXAEBVRustAutoHotpatchLockSH@@PEAVREGION@@@Z ?vUpdate_VisRectFastOpt@DC@@QEAAXAEAUSESSION_GLOBALS@Base@Gre@@AEBVRustAutoHotpatchLockSH@@PEAVREGION@@@Z ?vUpdateScaledRegions@DC@@QEAAXAEBVRustAutoHotpatchLockSH@@@Z Feature_Rust_GDI_REGION__private_descriptor Feature_Rust_GDI_REGION__private_featureState Feature_Rust_GDI_REGION__private_IsEnabledPreCheck Feature_Rust_GDI_REGION__private_reporting Feature_Rust_GDI_REGION_logged_traits RIMIsCurrentProcessTrusted Win32kBaseRustPatchCalloutHandler KEY OBSERVATIONS * The Rust region engine is exported/consumed here as ?RegionCore_*@Win32kRS@@ and is invoked from the classic GDI region objects: RGNOBJ::iCombine/bCopy/bOffset, RGNMEMOBJ::AllocateRegion/vInitialize, REGION::vDeleteREGION/vStamp, DC::vUpdate_VisRect*, each taking a RustAutoHotpatchLockSH (hot-patch lock for the Rust binary). * Rust binary is loaded as a hot-patchable module: AllocateAndLoadBaseRustExports, HotswapBaseRustBinary, Win32kBaseRustPatchCalloutHandler, CleanupRustCode, GetBaseRustGlobals, RgnCaptureLiveMemoryDumpOnZeroSizedScan, RustOnZeroSizedScanCallback. * NO symbol named PathToRegion / Win32kRSPathToRegion / RgnRust / GdiRust exists here. --- WIL feature traits relevant to Rust / Win32k (name -> RtlQueryFeatureConfiguration id) --- (feature id = descriptor+0x18, i.e. the value loaded into ECX before RtlQueryFeatureConfiguration; proven from win32kbase_rs.sys PopulateInitialConfiguredFeatureStates: 'mov ecx,[rbx+0x18]' then 'call [RtlQueryFeatureConfiguration]', and from win32kbase.sys GetCurrentFeatureEnabledState.) Feature_Rust_GDI_REGION id=37356106 (0x023A024A) live: boot=NOT_FOUND (no config; compiled default applies) | runtime=NOT_FOUND (no config; compiled default applies) Feature_Servicing_GdiMsrc99105 id=58181618 (0x0377C7F2) live: boot=NOT_FOUND (no config; compiled default applies) | runtime=NOT_FOUND (no config; compiled default applies) Feature_Servicing_UmfdDeadlockFix id=58322696 (0x0379EF08) live: boot=enabled | runtime=enabled Feature_FixWin32kStateAfterSessionDpiUpdate id=62076925 (0x03B337FD) live: boot=NOT_FOUND (no config; compiled default applies) | runtime=NOT_FOUND (no config; compiled default applies) Total distinct WIL Feature_* traits recorded from win32kbase.sys: 111 There is NO Feature_Servicing_Win32kRSPathToRegion in this build. The Check Point flag name is not present; the closest GDI security-servicing trait is Feature_Servicing_GdiMsrc99105 (Gdi + MSRC case number 99105). mach2 26100.2314 also lists Servicing_Win32kRSNoisyLKD[_ffi] (a different Win32k-Rust servicing flag), but no PathToRegion flag.