Hacker News Reader

For what it's worth, I just went back to an earlier version (10240) of win32kbase.sys, and the search is indeed a lot simpler...it's essentially a flat linear table search (to be clear, it's still iterating through every GDI object), much friendlier to the CPU than the structure traversing that happens now. Could very well be the culprit.

View on HN

Thanks for the information. I guess if scanning used to be two to three times faster maybe that would be fast enough that the issue, while still present, would not be noticeable.

Note that the scanning happens even when the process has zero GDI objects. That seems... suboptimal.

I've made a few updates to the end of the post based on the latest information.

Reply on news.ycombinator.com