Search notes:
csrss.exe
The Client Server Runtime Sub-System process.
The process might be started with the following arguments
%SystemRoot%\system32 \csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
csrss.exe
has the Windows
subystem's raw input thread which handles keyboard and mouse input.
See also the System Global Flag Enable debugging of Win32 subsystem (FLG_ENABLE_CSRDEBUG
)
See also
In order to debug
csrss.exe
, the
Enable debugging of Win32 subsystem tick needs to be set with
gflags.exe
. Alternatively, this can be done on a command line with
C:\> gflags /r +20000