// // Copyright (C) Microsoft. All rights reserved. // rem rem Pooltag.txt rem rem This file lists the tags used for pool allocations by kernel mode components rem and drivers. rem rem The file has the following format: rem - - rem rem Pooltag.txt is installed with Debugging Tools for Windows (in %windbg%\triage) rem and with the Windows DDK (in %winddk%\tools\other\platform\poolmon, where rem platform is amd64, i386, or arm). rem @GMM - - (Intel video driver) Memory manager @KCH - - (Intel video driver) Chipset specific service @MP - - (Intel video driver) Miniport related memory @SB - - (Intel video driver) Soft BIOS _ATI - - ATI video driver _LCD - monitor.sys - Monitor PDO name buffer 8042 - i8042prt.sys - PS/2 keyboard and mouse AdSv - vmsrvc.sys - Virtual Machines Additions Service ARPC - atmarpc.sys - ATM ARP Client ATMU - atmuni.sys - ATM UNI Call Manager Atom - - Atom Tables Abos - - Abiosdsk AcdM - - TDI AcdObjectInfoG AcdN - - TDI AcdObjectInfoG AcpA - acpi.sys - ACPI arbiter data AcpB - acpi.sys - ACPI buffer data AcpD - acpi.sys - ACPI device data AcpE - acpi.sys - ACPI embedded controller data AcpF - acpi.sys - ACPI interface data Acpg - acpi.sys - ACPI GPE data Acpi - acpi.sys - ACPI generic data AcpI - acpi.sys - ACPI irp data AcpL - acpi.sys - ACPI lock data AcpM - acpi.sys - ACPI miscellaneous data AcpO - acpi.sys - ACPI object data AcpP - acpi.sys - ACPI power data AcpR - acpi.sys - ACPI resource data AcpS - acpi.sys - ACPI string data Acpt - acpi.sys - ACPI table data AcpT - acpi.sys - ACPI thermal data AcpX - acpi.sys - ACPI translation data Adap - - Adapter objects Adbe - - Adobe's font driver ADPT - acpipagr.sys - Processor Aggregator Driver AECi - - filter object interface for MS acoustic echo canceller Afd? - afd.sys - AFD objects AfdA - afd.sys - Afd EA buffer AfdB - afd.sys - Afd data buffer AfdC - afd.sys - Afd connection structure aFDC - afd.sys - Afd WSK client context aFDT - afd.sys - Afd TL provider context AfdD - afd.sys - Afd debug data AfdE - afd.sys - Afd endpoint structure AfdF - afd.sys - Afd TransmitFile info AfdG - afd.sys - Afd group table AfdI - afd.sys - Afd TDI data AfdL - afd.sys - Afd local address buffer AfdP - afd.sys - Afd poll info AfdQ - afd.sys - Afd work queue item AfdR - afd.sys - Afd remote address buffer AfdS - afd.sys - Afd security info AfdT - afd.sys - Afd transport info AfdW - afd.sys - Afd work item AfdX - afd.sys - Afd context buffer Afda - afd.sys - Afd APC buffer (NT 3.51 only) Afdc - afd.sys - Afd connect data buffer Afdd - afd.sys - Afd disconnect data buffer Afdf - afd.sys - Afd TransmitFile debug data Afdh - afd.sys - Afd address list change buffer Afdi - afd.sys - Afd "set inline mode" buffer Afdl - afd.sys - Afd lookaside lists buffer Afdp - afd.sys - Afd transport IRP buffer Afdq - afd.sys - Afd routing query buffer Afdr - afd.sys - Afd ERESOURCE buffer Afdt - afd.sys - Afd transport address buffer Ahca - ahcache.sys - Appcompat kernel cache pool tag AleD - tcpip.sys - ALE remote endpoint Ala4 - tcpip.sys - ALE remote endpoint IPv4 address Ala6 - tcpip.sys - ALE remote endpoint IPv6 address Alei - tcpip.sys - ALE arrival/nexthop interface cache AleU - tcpip.sys - ALE pend context AleE - tcpip.sys - ALE endpoint context AlLl - tcpip.sys - ALE remote endpoint LRU AlCi - tcpip.sys - ALE credential info AlSP - tcpip.sys - ALE secure socket policy AlPU - tcpip.sys - ALE secure socket policy update AlPi - tcpip.sys - ALE peer info AlP4 - tcpip.sys - ALE peer IPv4 address AlP6 - tcpip.sys - ALE peer IPv6 address AlPT - tcpip.sys - ALE peer target Alep - tcpip.sys - ALE process info AleS - tcpip.sys - ALE token info AleP - tcpip.sys - ALE process image path AleK - tcpip.sys - ALE audit AleA - tcpip.sys - ALE connection abort context AlDN - tcpip.sys - ALE endpoint delete notify AleW - tcpip.sys - ALE enum filter array AleN - tcpip.sys - ALE notify context AlSs - tcpip.sys - ALE socket security context AlPF - tcpip.sys - ALE policy filters AleL - tcpip.sys - ALE LRU AleI - tcpip.sys - ALE token ID AlP5 - tcpip.sys - ALE 5-tuple state AlE5 - tcpip.sys - ALE 5-tuple temp entry Aric - tcpip.sys - ALE route inspection context Adnc - tcpip.sys - ALE endpoint deactivation notification context Acrc - tcpip.sys - ALE connect request inspection context Acrl - tcpip.sys - ALE connect redirect layer data Abrc - tcpip.sys - ALE bind request inspection context Abrl - tcpip.sys - ALE bind redirect layer data AlSm - tcpip.sys - ALE Secondary App Meta Data Afp - - SFM File server AlCI - nt!alpc - ALPC communication info AlEv - nt!alpc - ALPC eventlog queue AlIn - nt!alpc - ALPC Internal allocation AlHa - nt!alpc - ALPC port handle table AlMs - nt!alpc - ALPC message ALPC - nt!alpc - ALPC port objects AlRe - nt!alpc - ALPC section region AlRr - nt!Alpc - ALPC resource reserves AlSc - nt!alpc - ALPC section AlSe - nt!alpc - ALPC client security AlVi - nt!alpc - ALPC view ATmp - AppTag mount point ATon - AppTag object name ATub - AppTag user buffer ATgb - AppTag guid buffer ATac - AppTag ATR command buffer ATdi - AppTag cliendata index buffer ATdt - AppTag cliendata temp buffer ATFb - AppTag file id buffer Aml* - - ACPI AMLI Pooltags APIC - pnpapic.sys - I/O APIC Driver ArbA - nt!arb - ARBITER_ALLOCATION_STATE_TAG ArbL - nt!arb - ARBITER_ORDERING_LIST_TAG ArbM - nt!arb - ARBITER_MISC_TAG ArbR - nt!arb - ARBITER_RANGE_LIST_TAG Arp? - - ATM ARP server objects, atmarps.sys ArpA - - AtmArpS address ArpB - - AtmArpS buffer space ArpI - - AtmArpS Interface structure ArpK - - AtmArpS ARP block ArpM - - AtmArpS MARS structure ArpR - - AtmArpS NDIS request ArpS - - AtmArpS SAP structure Asy1 - - ndis / ASYNC_IOCTX_TAG Asy2 - - ndis / ASYNC_INFO_TAG Asy3 - - ndis / ASYNC_ADAPTER_TAG Asy4 - - ndis / ASYNC_FRAME_TAG AtC - - IDE disk configuration AtD - - atdisk.c ATIX - - WDM mini drivers for ATI tuner, xbar, etc. Atk - - Appletalk transport AtmA - - Atoms AtmT - - Atom tables AtvE - cea_km.lib - Event broker aggregation library. AuxL - - EXIFS Auxlist AzAp - HDAudio.sys - HD Audio Class Driver (Datastore: audio path) AzAd - HDAudio.sys - HD Audio Class Driver (AzPcAudDev) AzCd - HDAudio.sys - HD Audio Class Driver (CodecVendor) AzCE - HDAudio.sys - HD Audio Class Driver (CEAAudioRender) AzCm - HDAudio.sys - HD Audio Class Driver (AzCommon) AzFg - HDAudio.sys - HD Audio Class Driver (Audio Function Group) Azfg - HDAudio.sys - HD Audio Class Driver (datastore: function group) AzJd - HDAudio.sys - HD Audio Class Driver (JackDetector) AzMa - HDAudio.sys - HD Audio Class Driver (Main) AzMi - HDAudio.sys - HD Audio Class Driver (micin, MixedCapture) AzMu - HDAudio.sys - HD Audio Class Driver (MuxedCapture) AzMx - HDAudio.sys - HD Audio Class Driver (AzMixerport) AzLd - HDAudio.sys - HD Audio Class Driver (Datastore: logical device) AzLi - HDAudio.sys - HD Audio Class Driver (CDIn,AUXIn, linein) AzLg - HDAudio.sys - HD Audio Class Driver (debug) AzLs - HDAudio.sys - HD Audio Class Driver (DLTest) AzPd - HDAudio.sys - HD Audio Class Driver (AzDma) AzPx - HDAudio.sys - HD Audio Class Driver (AzPower) AzRr - HDAudio.sys - HD Audio Class Driver (RedirectedRender) AzRR - HDAudio.sys - HD Audio Class Driver (SpdifEmbeddedRender, SpdifOut, Headphone, HBDAout) AzSd - HDAudio.sys - HD Audio Class Driver (subdevicegraph) AzSi - HDAudio.sys - HD Audio Class Driver (SpdifIn) AzSt - HDAudio.sys - HD Audio Class Driver (AzWaveCyclicStream, HdaWaveRTstream) AzTs - HDAudio.sys - HD Audio Class Driver (TestSet1000, TestSet1001) AzUT - HDAudio.sys - HD Audio Class Driver (TestSet0004) AzWd - HDAudio.sys - HD Audio Class Driver (AzWidget) AzWp - HDAudio.sys - HD Audio Class Driver (AzWaveport, HdaWaveRTminiport) Bat? - - Battery Class drivers BatC - - Composite battery driver BatM - - Control method battery driver BatS - - Smart battery driver Batt - - Battery class driver BCSP - bthbcsp.sys - Bluetooth BCSP minidriver BCDK - nt!init - Kernel boot configuration data. BDD - BasicDisplay.sys - Microsoft Basic Display Driver BIG - nt!mm - Large session pool allocations (ntos\ex\pool.c) BlCc - blkcache.sys - Block Cache Driver Bmfd - - Font related stuff BT3C - bt3c.sys - Bluetooth 3COM minidriver BT8x - - WDM mini drivers for Brooktree 848,829, etc. BTHP - bthport.sys - Bluetooth port driver (generic) BthS - bthport.sys - Bluetooth port driver (security) BTME - bthenum.sys - Bluetooth enumerator BTMO - bthmodem.sys - Bluetooth modem BTPT - - Bluetooth transport protocol library BTSR - bthser.sys - Bluetooth serial minidriver BTUR - bthuart.sys - Bluetooth UART minidriver WPAD - BasicRender.sys - Basic Render Adapter WPDV - BasicRender.sys - Basic Render DX Device WPCT - BasicRender.sys - Basic Render DX Context WPAL - BasicRender.sys - Basic Render Allocation WPAO - BasicRender.sys - Basic Render Opened Allocation WPRC - BasicRender.sys - Basic Render Rectangles (for Present) Bu* - - burneng.sys from adaptec BvHI - netiobvt.sys - BVT HT Items BvHT - netiobvt.sys - BVT HT Tables Call - nt!ex - kernel callback object signature call - - debugging call tables CBRe - - CallbackRegistration CBSI - cbsi.sys - Common Block Store Cc - nt!cc - Cache Manager allocations (catch-all) CcAs - nt!cc - Cache Manager Async cached read structure CcBc - nt!cc - Cache Manager Bcb from pool CcBm - nt!cc - Cache Manager Bitmap CcBn - nt!cc - Cache Manager Bcb trim notification entry CcBr - nt!cc - Cache Manager Bitmap range CcBz - nt!cc - Cache Manager Bcb Zone CcDw - nt!cc - Cache Manager Deferred Write CcEC - nt!cc - Cache Manager External Cache tracking structure CcEv - nt!cc - Cache Manager Event CcFn - nt!cc - Cache Manager File name for popups CCFF - CCFFilter.sys - Cluster Client Failover Filter Ccfx - nt!cc - Cache Manager Registry value full info structure CcMb - nt!cc - Cache Manager Mbcb CcNu - nt!cc - Cache Manager NUMA structures CcOb - nt!cc - Cache Manager Overlap Bcb CcPB - nt!ccpf - Prefetcher trace buffer CcPC - nt!ccpf - Prefetcher context CcPD - nt!ccpf - Prefetcher trace dump CcPF - nt!ccpf - Prefetcher file name CcPI - nt!ccpf - Prefetcher intermediate table CcPL - nt!ccpf - Prefetcher read list CcPM - nt!ccpf - Prefetcher metadata CcPS - nt!ccpf - Prefetcher scenario CcPT - nt!ccpf - Prefetcher trace CcPV - nt!ccpf - Prefetcher queried volumes CcPW - nt!ccpf - Prefetcher workers CcPa - nt!ccpf - Prefetcher async context CcPc - nt!cc - Cache Manager Private Cache Map CcPf - nt!ccpf - Prefetcher CcPh - nt!ccpf - Prefetcher header preallocation CcPn - nt!ccpf - Prefetcher name info CcPp - nt!ccpf - Prefetcher instructions CcPq - nt!ccpf - Prefetcher query buffer CcPr - nt!ccpf - Cache Manager Partition structures CcPs - nt!ccpf - Prefetcher section table CcPv - nt!ccpf - Prefetcher volume info CcPw - nt!ccpf - Prefetcher enable worker CcSc - nt!cc - Cache Manager Shared Cache Map CcTe - nt!cc - Cache Manager Telemetry allocation CcVa - nt!cc - Cache Manager Initial array of Vacbs CcVl - nt!cc - Cache Manager Vacb Level structures (large streams) CcVp - nt!cc - Cache Manager Array of Vacb pointers for a cached stream CctX - - EXIFX FCB Commit CTX CcWq - nt!cc - Cache Manager Work Queue Item CcWK - nt!cc - Kernel Cache Manager lookaside list CcWk - nt!cc - Kernel Cache Manager lookaside list CcWR - nt!cc - Cache Manager Registry watch structure CcZe - nt!cc - Cache Manager Buffer of Zeros CDmp - crashdmp.sys - Crashdump driver CdA - - CdAudio filter driver Cdcc - cdfs.sys - CDFS Ccb Cddn - cdfs.sys - CDFS CdName in dirent Cdee - cdfs.sys - CDFS Search expression for enumeration Cdfd - cdfs.sys - CDFS Data Fcb Cdfi - cdfs.sys - CDFS Index Fcb Cdfl - cdfs.sys - CDFS Filelock CdFn - cdfs.sys - CDFS Filename buffer Cdfn - cdfs.sys - CDFS Nonpaged Fcb Cdfs - cdfs.sys - CDFS General Allocation Cdft - cdfs.sys - CDFS Fcb Table entry Cdgs - cdfs.sys - CDFS Generated short name Cdic - cdfs.sys - CDFS Irp Context Cdil - cdfs.sys - CDFS Irp Context lite Cdio - cdfs.sys - CDFS Io context for async reads Cdma - cdfs.sys - CDFS Mcb array Cdpe - cdfs.sys - CDFS Prefix Entry CdPn - cdfs.sys - CDFS CdName in path entry Cdpn - cdfs.sys - CDFS Prefix Entry name Cdsp - cdfs.sys - CDFS Buffer for spanning path table Cdtc - cdfs.sys - CDFS TOC Cdun - cdfs.sys - CDFS Buffer for upcased name Cdvd - cdfs.sys - CDFS Buffer for volume descriptor Cdvp - cdfs.sys - CDFS Vpb allocated in filesystem CIcr - ci.dll - Code Integrity allocations for image integrity checking CIsc - ci.dll - Code Integrity core dll CIha - ci.dll - Code Integrity hashes CKRT - - Cluster Kernel RTL library CLb* - clusbflt.sys - Cluster block storage target driver CLB* - clusbflt.sys - Cluster block storage target driver CLd* - clusdflt.sys - Cluster disk filter driver ClfA - clfs.sys - CLFS Log container lookaside list ClfB - clfs.sys - CLFS Log base file lookaside list ClfC - clfs.sys - CLFS Log physical FCB lookaside list ClfD - clfs.sys - CLFS Log virtual FCB lookaside list ClfE - clfs.sys - CLFS Log CCB lookaside list ClfF - clfs.sys - CLFS Log flush element lookaside list ClfG - clfs.sys - CLFS Log I/O Request lookaside list ClfH - clfs.sys - CLFS Log I/O control block lookaside list ClfI - clfs.sys - CLFS Log marshal buffer lookaside list ClfJ - clfs.sys - CLFS Log MDL reference ClfK - clfs.sys - CLFS Log read completion element ClfW - clfs.sys - CLFS Log work item element ClfL - clfs.sys - CLFS Log base file image (obsolete) ClfN - clfs.sys - CLFS Log base file lock ClfO - clfs.sys - CLFS Log zero page ClfP - clfs.sys - CLFS Log request state ClfS - clfs.sys - CLFS Log base file snapshot Clfs - clfs.sys - CLFS General buffer, or owner page lookaside list ClfT - clfs.sys - CLFS log BCrypt object lookaside list ClfM - clfs.sys - CLFS log Hash object lookaside list ClfZ - clfs.sys - CLFS log Merkle Tree object lookaside list CLfa - clfs.sys - CLFS log Authenticated Container IO object lookaside list CLfb - clfs.sys - CLFS log Hash IO object lookaside list CLfc - clfs.sys - CLFS log Sector IO object lookaside list CLfd - clfs.sys - CLFS log Authenticated Container IO AVL lookaside list ClNt - netft.sys - NetFt ClNw - netft.sys - NetFt work items CM - nt!cm - Configuration Manager (registry) CmcD - hal.dll - HAL CMC Driver Log CmcK - hal.dll - HAL CMC Kernel Log CmcT - hal.dll - HAL CMC temporary Log CMCa - nt!cm - Configuration Manager Cache (registry) CMDc - nt!cm - Configuration Manager Cache (registry) CMkb - nt!cm - registry key control blocks CMpb - nt!cm - registry post blocks CMnb - nt!cm - registry notify blocks CMpe - nt!cm - registry post events CMpa - nt!cm - registry post apcs CMsb - nt!cm - registry stash buffer CmVn - nt!cm - captured value name CMVw - nt!cm - registry mapped view of file CMVa - nt!cm - value cache value tag CMVI - nt!cm - value index cache tag CMSc - nt!cm - security cache pooltag CMSb - nt!cm - internal stash buffer pool tag CMNb - nt!cm - Configuration Manager Name Tag CMIn - nt!cm - Configuration Manager Index Hint Tag CMDa - nt!cm - value data cache pool tag CMAl - nt!cm - internal registry memory allocator pool tag CMA1 - nt!cm - Configuration Manager Audit Tag 1 CMA2 - nt!cm - Configuration Manager Audit Tag 2 CMA3 - nt!cm - Configuration Manager Audit Tag 3 CMA4 - nt!cm - Configuration Manager Audit Tag 4 CMIx - nt!cm - Configuration Manager Intent Lock Tag CMUw - nt!cm - Configuration Manager Unit of Work Tag CMTr - nt!cm - Configuration Manager Transaction Tag CMRm - nt!cm - Configuration Manager Resource Manager Tag CM?? - nt!cm - Internal Configuration manager allocations Cngb - ksecdd.sys - CNG kmode crypto pool tag COMX - serial.sys - serial driver allocations Cont - - Contiguous physical memory allocations for device drivers CopW - - EXIFS CopyOnWrite Covr - nt!cov - Code Coverage pool tag CpeD - hal.dll - HAL CPE Driver Log CpeK - hal.dll - HAL CMC Kernel Log CpeT - hal.dll - HAL CPE temporary Log CPnp - classpnp.sys - ClassPnP transfer packets Crsp - ksecdd.sys - CredSSP kernel mode client allocations CrtH - - EXIFS Create Header Cryp - ksecdd.sys - Crypto allocations CSdk - - Cluster Disk Filter driver CSnt - - Cluster Network driver CTE - - Common transport environment (ntos\inc\cxport.h, used by tdi) Cvli - - EXIFS Cached Volume Info D2d - - Device Object to DosName rtns (ntos\rtl\dev2dos.c) D3Dd - - DX D3D driver (embedded in a display driver like s3mvirge.dll) D851 - - 8514a video driver Dacl - - Temp allocations for object DACLs DamK - dam.sys - Desktop Activity Moderator Dati - - ati video driver DbCb - nt!dbg - Debug Print Callbacks DbLo - - Debug logging dcam - - WDM mini driver for IEEE 1394 digital camera DcbA - msdcb.sys - DCB application priority DcbC - msdcb.sys - DCB NMR provider context DcbD - msdcb.sys - DCB NDIS_QOS_CONFIGURATION DcbG - msdcb.sys - DCB string data DcbI - msdcb.sys - DCB interface context DcbL - msdcb.sys - DCB LLDP buffer DcbP - msdcb.sys - DCB NDIS port information DcbR - msdcb.sys - DCB store change record DcbS - msdcb.sys - DCB security object DcbU - msdcb.sys - DCB UQOS_POLICY_DESCRIPTOR DcbX - msdcb.sys - DCB general Dcdd - cdd.dll - Canonical display driver Dcl - - cirrus video driver Ddk - - Default for driver allocated memory (user's of ntddk.h) Devi - nt!io - Kernel device objects (nt!DEVICE_OBJECT) DEag - devolume.sys - Drive extender disk set array: DEVolume!DEDiskSet * DEbo - devolume.sys - Drive extender bus opener context: DEVolume!DEBusOpenerContext DEbe - devolume.sys - Drive extender extends buffer DEbg - devolume.sys - Drive extender bus opener context global: DEVolume!DEBusOpenerContextGlobal DEbm - devolume.sys - Drive extender bitmap DEbu - devolume.sys - Drive extender generic buffer DEcl - devolume.sys - Drive extender delayed cleaner: DEVolume!DelayedCleaner DEct - devolume.sys - Drive extender chunk table DEda - devolume.sys - Drive extender disk array: DEVolume!DEDisk * DEdb - devolume.sys - Drive extender disk directory information DEdc - devolume.sys - Drive extender disk chunk: DEVolume!DiskChunk DEdg - devolume.sys - Drive extender disk globals: DEVolume!DEDiskGlobals DEdi - devolume.sys - Drive extender disk: DEVolume!DEDisk DEdm - devolume.sys - Drive extender disk mini chunk: DEVolume!DiskMiniChunk DEdn - devolume.sys - Drive extender disk identification info: DEVolume!DiskIdentificationInfo DEdr - devolume.sys - Drive extender device relations DEds - devolume.sys - Drive extender disk set: DEVolume!DEDiskSet DEdt - devolume.sys - Drive extender disk message: DEVolume!DE_DISK_MESSAGE DEdu - devolume.sys - Drive extender disk set message: DEVolume!DE_DISK_SET_MESSAGE DEdv - devolume.sys - Drive extender driver object: DEVolume!DEDriver DEea - devolume.sys - Drive extender expanding array: DEVolume!ExpandingAutoPointerArray DEec - devolume.sys - Drive extender ECC Page: DEVolume!DeEccPage DEfg - devolume.sys - Drive extender filter: DEVolume!DEFilter DEga - devolume.sys - Drive extender guild array DEic - devolume.sys - Drive extender filter instance context DEip - devolume.sys - Drive extender IRP based logical to physical request: DEVolume!IrpBasedLogicalToPhysicalRequest DEir - devolume.sys - Drive extender IRP based read request: DEVolume!IrpBasedReadRequest DEiw - devolume.sys - Drive extender IRP based write request: DEVolume!IrpBasedWriteRequest DEla - devolume.sys - Drive extender log mini chunk array DElb - devolume.sys - Drive extender log buffer DEli - devolume.sys - Drive extender disk set id record: DEVolume!DiskSetIdentificationRecord DElm - devolume.sys - Drive extender log manager: DEVolume!LogManager DElp - devolume.sys - Drive extender logical to physical request: DEVolume!LogicalToPhysicalRequest DElr - devolume.sys - Drive extender log reader: DEVolume!LogReader DElv - devolume.sys - Drive extender disk set volume id record: DEVolume!VolumeIdentificationRecord DElw - devolume.sys - Drive extender log writer buffer: DEVolume!LogWriterBuffer DEmc - devolume.sys - Drive extender volume chunk init mapping manager: DEVolume!VolumeChunkInitializationMappingManager DEml - devolume.sys - Drive extender log mapping manager: DEVolume!LogMappingManager DEms - devolume.sys - Drive extender superblock mapping manager: DEVolume!SuperBlockMappingManager DEmv - devolume.sys - Drive extender volume mapping manager: DEVolume!VolumeMappingManager DEog - devolume.sys - Drive extender old GUID array DEpe - devolume.sys - Drive extender pingable event: DEVolume!PingableEvent DEpg - devolume.sys - Drive extender pingable object globals: DEVolume!PingableObjectGlobals DEpm - devolume.sys - Drive extender physical map: DEVolume!PhysicalMap DEqm - devolume.sys - Drive extender queued message: DEVolume!QueuedMessage DEra - devolume.sys - Drive extender disk event request DErb - devolume.sys - Drive extender become dirty request: DEVolume!VolumeChunk::BecomeDirtyRequest DErc - devolume.sys - Drive extender commit request: DEVolume!VolumeChunk::CommitRequest DErd - devolume.sys - Drive extender decommit request: DEVolume!VolumeChunk::DecommitRequest DEre - devolume.sys - Drive extender decommit all request: DEVolume!DiskSetVolume::DecommitAllRequest DErg - devolume.sys - Drive extender registry: DEVolume!DERegistry DErh - devolume.sys - Drive extender replicate chunk: DEVolume!ReplicateChunk DErl - devolume.sys - Drive extender long and notify request: DEVolume!DiskSetVolume::LogAndNotifyRequest DErm - devolume.sys - Drive extender range lock manager: DEVolume!RangeLockManager DErn - devolume.sys - Drive extender new epoch request: DEVolume!DEDiskSet::NewEpochRequest DEro - devolume.sys - Drive extender become out of date request: DEVolume!VolumeChunk::BecomeOutOfDateRequest DErp - devolume.sys - Drive extender replicator: DEVolume!Replicator DErr - devolume.sys - Drive extender read request: DEVolume!ReadRequest DErs - devolume.sys - Drive extender delete or shutdown request: DEVolume!DiskSetVolume::DeleteOrShutdownRequest DErt - devolume.sys - Drive extender start request: DEVolume!DEDiskSet::StartRequest DEru - devolume.sys - Drive extender shutdown request: DEVolume!DEDiskSet::ShutdownRequest DErv - devolume.sys - Drive extender repair volume request: DEVolume!DiskSetVolume::RepairVolumeDamageRequest DErw - devolume.sys - Drive extender read write target: DEVolume!ReadWriteTarget DErx - devolume.sys - Drive extender shutdown system request: DEVolume!DiskSetVolume::ShutdownRequest DEry - devolume.sys - Drive extender start or create request: DEVolume!DiskSetVolume::StartOrCreateRequest DErz - devolume.sys - Drive extender write super blocks request: DEVolume!DEDiskSet::WriteSuperBlocksRequest DEsb - devolume.sys - Drive extender super block buffer DEsd - devolume.sys - Drive extender disk set disk: DEVolume!DiskSetDisk DEsg - devolume.sys - Drive extender disk set globals: DEVolume!DEDiskSetGlobals DEsh - devolume.sys - Drive extender space holder operation: DEVolume!SpaceHolderOperation DEte - devolume.sys - Drive extender data error message: DEVolume!DE_DATA_ERROR_MESSAGE DEtr - devolume.sys - Drive extender trace message DEtn - devolume.sys - Drive extender range lock test node DEtx - devolume.sys - Drive extender range lock test DEts - devolume.sys - Drive extender splay tree test DEtw - devolume.sys - Drive extender trim worker pauser: DEVolume!AutoPauseTrimWorker DEub - devolume.sys - Drive extender unaligned EccPage temp buffer: DEVolume!DeEccPage DEus - devolume.sys - Drive extender unicode string DEva - devolume.sys - Drive extender volume chunk array: DEVolume!AutoVolumeChunkPtr * DEvc - devolume.sys - Drive extender volume chunk: DEVolume!VolumeChunk DEvg - devolume.sys - Drive extender volume globals: DEVolume!DEVolumeGlobals DEvh - devolume.sys - Drive extender volume device globals: DEVolume!DEVolumeDeviceGlobals DEvm - devolume.sys - Drive extender volume message: DEVolume!DE_VOLUME_MESSAGE DEvo - devolume.sys - Drive extender volume message: DEVolume!DEVolume DEvs - devolume.sys - Drive extender disk set volume: DEVolume!DiskSetVolume DEwi - devolume.sys - Drive extender work item: DEVolume!AutoWorkItem DEze - devolume.sys - Drive extender cluster of zeros Dh 0 - - DirectDraw/3D default object Dh 1 - - DirectDraw/3D DirectDraw object Dh 2 - - DirectDraw/3D Surface object Dh 3 - - DirectDraw/3D Direct3D context object Dh 4 - - DirectDraw/3D VideoPort object Dh 5 - - DirectDraw/3D MotionComp object Dfb - - framebuf video driver DfC? - dfsc.sys - DFS Client allocations DfCa - dfsc.sys - DFS Client PERUSERTABLE DfCb - dfsc.sys - DFS Client REFCONTEXT DfCc - dfsc.sys - DFS Client CONNECTION DfCd - dfsc.sys - DFS Client CURRENTDC DfCe - dfsc.sys - DFS Client CSCEA DfCf - dfsc.sys - DFS Client FILENAME DfCg - dfsc.sys - DFS Client PREFIXCACHE DfCh - dfsc.sys - DFS Client HASH DfCi - dfsc.sys - DFS Client INPUTBUFFER DfCj - dfsc.sys - DFS Client REFERRALNAME DfCj - dfsc.sys - DFS Client REWRITTENNAME DfCl - dfsc.sys - DFS Client DCLIST DfCm - dfsc.sys - DFS Client CMCONTEXT DfCn - dfsc.sys - DFS Client DOMAINNAME DfCp - dfsc.sys - DFS Client PATH DfCq - dfsc.sys - DFS Client REGSTRING DfCr - dfsc.sys - DFS Client REFERRAL DfCs - dfsc.sys - DFS Client SHARENAME DfCt - dfsc.sys - DFS Client TREECONNECT DfCu - dfsc.sys - DFS Client USETABLE DfCv - dfsc.sys - DFS Client SERVERNAME DfCw - dfsc.sys - DFS Client TARGETINFO DfCx - dfsc.sys - DFS Client CREDENTIALS DfCy - dfsc.sys - DFS Client REMOTEENTRY DfCz - dfsc.sys - DFS Client DOMAINREFERRAL Dfs - - Distributed File System dfsr - - RDBSS IRP allocation Dfsm - - Eng event allocation (ENG_KEVENTALLOC,ENG_ALLOC) in ntgdi\gre dFVE - dumpfve.sys - Full Volume Encryption crash dump filter (Bitlocker Drive Encryption) Dict - storport.sys - StorCreateDictionary storport!_STOR_DICTIONARY.Entries Dire - - Directory objects Dlck - - deadlock verifier (part of driver verifier) structures Dlmp - - Video utility library for Vista display drivers Dmga - - mga (matrox) video driver DmrP - prm.sys - Platform Runtime driver DmH? - - DirectMusic hardware synthesizer DmpS - dumpsvc.sys - Crashdump Service Driver DmS? - - DirectMusic kernel software synthesizer Dndt - - Device node Dnod - - Device node structure DNSk - netio.sys - DNS RPC Transactions DOPE - - Device Object Power Extension (po component) DpDc - FsDepends.sys - FsDepends Dependency Context Block DpDl - FsDepends.sys - FsDepends Dependency List Block DpPl - FsDepends.sys - FsDepends Parent Link Block DPrf - - Disk performance filter driver DPwr - nt!pnp - PnP power management Dprt - dxgkrnl.sys - Video port for Vista display drivers Dprx - nt!io - DriverProxy Dps5 - - NT5 PostScript printer driver Dpsh - - Postcript driver heap memory Dpsi - - psidisp video driver Dpsm - - Postcript driver memory Dqv - - qv (qvision) video driver DpVc - FsDepends.sys - FsDepends Volume Context Block DrDr - rdpdr.sys - Global object DrEx - rdpdr.sys - Exchange object DrIC - rdpdr.sys - I/O context object Driv - nt!io - Kernel driver objects (nt!DRIVER_OBJECT) Drsd - - Rasdd Printer Driver Pool Tag. Dtga - - tga video driver Dump - - Bugcheck dump allocations Dun5 - - NT5 Universal printer driver DUQD - mpsdrv.sys - MPSDRV upcall user request DV?? - - RDR2 DAV MiniRedir Tags DVCx - - AsyncEngineContext, DAV MiniRedir DVEx - - Exchange, DAV MiniRedir DVFi - - FileInfo, DAV MiniRedir DVFn - - FileName, DAV MiniRedir DVRw - - ReadWrite, DAV MiniRedir DVSc - - SrvCall, DAV MiniRedir DVSh - - SharedHeap, DAV MiniRedir Dvga - - vga 16 color video driver Dvg2 - - vga 256 color video driver Dvg6 - - vga 64K color video driver Dvgr - - vga for risc video driver DW32 - - W32 video driver Dwd - - wd90c24a video driver Dwp9 - - weitekp9 video driver Dxga - - XGA video driver DxgK - dxgkrnl.sys - Vista display driver support Efsm - - EFS driver Efsc - - EFS driver Efst - - EXIFS FS Statistics Envr - - Environment strings EQAn - tcpip.sys - EQoS application name EQCc - tcpip.sys - EQoS counters EQHb - tcpip.sys - EQoS HKE binding EQHp - tcpip.sys - EQoS HKE parameters EQOw - tcpip.sys - EQoS policy owner EQPn - tcpip.sys - EQoS policy net entry EQPp - tcpip.sys - EQoS policy profile entry EQPs - tcpip.sys - EQoS policy scratch data EQPt - tcpip.sys - EQoS policy table EQQu - tcpip.sys - EQoS flow unit EQSc - tcpip.sys - EQoS pacer client EQSe - tcpip.sys - EQoS QIM endpoint EQSp - tcpip.sys - EQoS generic policy data EQSt - tcpip.sys - EQoS policy trim scratch EQSx - tcpip.sys - EQoS security object EQSy - tcpip.sys - EQoS proxy data EQUn - tcpip.sys - EQoS uQoS NPI client data EQUr - tcpip.sys - EQoS URL string EQUp - tcpip.sys - EQoS URL policy section EQUQ - tcpip.sys - UQoS generic allocation Err - - Error strings Etwa - nt!etw - Etw server silo state EtwA - nt!etw - Etw APC Etwb - nt!etw - Etw provider tracking EtwB - nt!etw - Etw Buffer Etwc - nt!etw - Etw rundown reference counters EtwC - nt!etw - Etw Realtime Consumer Etwd - nt!etw - Etw Disallow List Entry EtwD - nt!etw - Etw DataBlock EtwF - nt!etw - Etw Filter EtwG - nt!etw - Etw Guid EtwH - nt!etw - Etw Private Handle Demuxing Etwi - nt!etw - Etw IPT support EtwK - nt!etw - Etw SoftRestart support Etwl - nt!etw - Etw stack look-aside list entry EtwL - nt!etw - Etw LoggerContext Etwm - nt!etw - Etw BitMap Etwo - nt!etw - Etw memory partition reference EtwO - nt!etw - Etw memory partition MDL Etwp - nt!etw - Etw TracingBlock EtwP - nt!etw - Etw Pool Etwq - nt!etw - Etw ReplyQueue Etwr - nt!etw - Etw ReplyQueue entry EtwR - nt!etw - Etw KM RegEntry Etws - nt!etw - Etw stack cache EtwS - nt!etw - Etw DataSource Etwt - nt!etw - Etw temporary buffer EtwT - nt!etw - Etw provider traits EtwU - nt!etw - Etw Periodic Capture State EtwV - nt!etw - Etw Coverage Sampling EtwW - nt!etw - Etw WorkItem Etwx - nt!etw - Etw LBR support EtwX - nt!etw - Etw profiling support EtwZ - nt!etw - Etw compression support Evel - - EFS file system filter driver lookaside list Even - - Event objects Evid - - Rtl Event ID's ExWl - - Executive worker list entry Fat - fastfat.sys - Fat File System allocations FatB - fastfat.sys - Fat allocation bitmaps FatC - fastfat.sys - Fat Ccbs FatD - fastfat.sys - Fat pool dirents FatE - fastfat.sys - Fat EResources FatF - fastfat.sys - Fat Fcbs FatI - fastfat.sys - Fat IrpContexts FatL - fastfat.sys - Fat FAT entry lookup buffer on verify FatN - fastfat.sys - Fat Nonpaged Fcbs FatO - fastfat.sys - Fat I/O buffer FatP - fastfat.sys - Fat output for query retrieval pointers (caller frees) FatQ - fastfat.sys - Fat buffered user buffer FatR - fastfat.sys - Fat repinned Bcb FatS - fastfat.sys - Fat stashed Bpb FatT - fastfat.sys - Fat directory allocation bitmaps FatV - fastfat.sys - Fat Vcb stat bucket Fatv - fastfat.sys - Fat events FatW - fastfat.sys - Fat FAT windowing structure FatX - fastfat.sys - Fat IO contexts Fatb - fastfat.sys - Fat Bcb arrays Fatd - fastfat.sys - Fat EA data Fate - fastfat.sys - Fat EA set headers Fatf - fastfat.sys - Fat deferred flush contexts Fati - fastfat.sys - Fat IO run descriptor Fatn - fastfat.sys - Fat filename buffer Fatr - fastfat.sys - Fat verification-time rootdir snapshot Fats - fastfat.sys - Fat verification-time boot sector Fatv - fastfat.sys - Fat backpocket Vpb Fatx - fastfat.sys - Fat delayed close contexts FbCx - tcpip.sys - Inet feature fallback contexts REM FsLib allocations. FsLib is a static library linked in both NTFS and ReFS FDEl - FsLib - FsLib DAX Extent Array FDEd - FsLib - FsLib DAX Extent Descriptor FDDb - FsLib - FsLib DAX DSM Buffer FsIT - FsLib - FsLib IO Trace FsLd - FsLib - FsLib Livedump fboX - - EXIFS FOBXVF List Fcbl - - EXIFS FCBlock Fcon - nt!RtlpFc - Feature Configuration Management Feiv - netio.sys - WFP filter engine incoming values Fecc - netio.sys - WFP filter engine classify context Fecf - netio.sys - WFP filter engine callout context File - - File objects FIcn - fileinfo.sys - FileInfo FS-filter Create Retry Path FIcp - fileinfo.sys - FileInfo FS-filter Extra Create Parameter FIcs - fileinfo.sys - FileInfo FS-filter Stream Context FIcv - fileinfo.sys - FileInfo FS-filter Volume Context FIOc - fileinfo.sys - FileInfo FS-filter Prefetch Open Context FIou - fileinfo.sys - FileInfo FS-filter User Open Context FIof - fileinfo.sys - FileInfo FS-filter File Object Context FIPc - fileinfo.sys - FileInfo FS-filter Prefetch Context FIvn - fileinfo.sys - FileInfo FS-filter Volume Name FIvp - fileinfo.sys - FileInfo FS-filter Volume Properties FlmC - tcpip.sys - Framing Layer Client Contexts FlmP - tcpip.sys - Framing Layer Provider Contexts Flng - tcpip.sys - Framing Layer Generic Buffers (Tunnel/Port change notifications, ACLs) FlpC - tcpip.sys - Framing Layer Client Contexts FlpI - tcpip.sys - Framing Layer Interfaces FlpL - tcpip.sys - Framing Layer Client Interface Contexts FlpM - tcpip.sys - Framing Layer Multicast Groups FlpS - tcpip.sys - Framing Layer Serialized Requests Fl6D - tcpip.sys - FL6t DataLink Addresses Fl4D - tcpip.sys - FL4t DataLink Addresses FltD - tcpip.sys - FLt DataLink Addresses FlSB - tcpip.sys - Framing Layer Stack Block Flop - - floppy driver FLSk - nt!ps - Kernel TLS metadata Flst - - EXIFS Freelist Fltt - nt!Vf - Log of Driver Verifier fault injection stack traces. FLex - - exclusive file lock FLfl - - exported (non-private) file lock FLli - - per-file lock information FLln - - shared lock tree node FLsh - - shared file lock FLwl - - waiting lock FM?? - fltmgr.sys - Unrecognized FltMgr tag (update pooltag.w) FMac - fltmgr.sys - ASCII String buffers FMas - fltmgr.sys - ASYNC_IO_COMPLETION_CONTEXT structure FMcb - fltmgr.sys - FLT_CCB structure FMcn - fltmgr.sys - Non paged context extension structures FMcp - fltmgr.sys - Client port wrapper structure FMcr - fltmgr.sys - Context registration structures FMct - fltmgr.sys - TRACK_COMPLETION_NODES structure FMdh - fltmgr.sys - Paged ECP context for targeted create reparse FMdl - fltmgr.sys - Array of DEVICE_OBJECT pointers FMea - fltmgr.sys - EA buffer for create FMfc - fltmgr.sys - FLTMGR_FILE_OBJECT_CONTEXT structure FMfi - fltmgr.sys - Fast IO dispatch table FMfk - fltmgr.sys - Byte Range Lock structure FMfl - fltmgr.sys - FLT_FILTER structure FMfn - fltmgr.sys - NAME_CACHE_NODE structure FMfr - fltmgr.sys - FLT_FRAME structure FMfz - fltmgr.sys - FILE_LIST_CTRL structure FMib - fltmgr.sys - Irp SYSTEM buffers FMic - fltmgr.sys - IRP_CTRL structure FMil - fltmgr.sys - IRP_CTRL completion node stack FMin - fltmgr.sys - FLT_INSTANCE name FMis - fltmgr.sys - FLT_INSTANCE structure FMla - fltmgr.sys - Per-processor IRPCTRL lookaside lists FMlp - fltmgr.sys - Paged stream list control entry structures FMnc - fltmgr.sys - NAME_CACHE_CREATE_CTRL structure FMng - fltmgr.sys - NAME_GENERATION_CONTEXT structure FMol - fltmgr.sys - OPLOCK_CONTEXT structure FMor - fltmgr.sys - OpenReparse ECP structure FMos - fltmgr.sys - Operation status ctrl structure FMpl - fltmgr.sys - Cache aware pushLock FMpr - fltmgr.sys - FLT_PRCB structure FMQc - fltmgr.sys - QueryOnCreate ECP structure FMrl - fltmgr.sys - FLT_OBJECT rundown logs FMrp - fltmgr.sys - Reparse point data buffer FMrr - fltmgr.sys - Per-processor Cache-aware rundown ref structure FMrs - fltmgr.sys - Registry string FMrw - fltmgr.sys - FLT_REGISTRY_WATCH_CONTEXT structure FMsc - fltmgr.sys - SECTION_CONTEXT structure FMsd - fltmgr.sys - Security descriptors FMsl - fltmgr.sys - STREAM_LIST_CTRL structure FMtb - fltmgr.sys - TXN_PARAMETER_BLOCK structure FMtn - fltmgr.sys - Temporary file names FMtp - fltmgr.sys - Non Paged TxVol context structures FMtr - fltmgr.sys - Temporary Registry information FMts - fltmgr.sys - Tree Stack FMus - fltmgr.sys - Unicode string FMvf - fltmgr.sys - FLT_VERIFIER_EXTENSION structure FMvj - fltmgr.sys - FLT_VERIFIER_OBJECT structure FMvl - fltmgr.sys - Array of FLT_VERIFIER_OBJECT structures FMvo - fltmgr.sys - FLT_VOLUME structure FMwi - fltmgr.sys - Work item structures Fsrc - fsrec.sys - Filesystem recognizer (fsrec.sys) Fstb - - ntos\fstub FstB - - ntos\fstub FsVg - fsvga.sys - International VGA support flnk - - font link tag used in ntgdi\gre FLpc - netio.sys - IPv6 Framing Layer Client context fpct - wof.sys - Compressed file chunk table fpcx - wof.sys - Compressed file IO context fpdw - wof.sys - Compressed file decompression workspace fpgn - wof.sys - Compressed file general fppm - wof.sys - Compressed file IO parameters fprd - wof.sys - Compressed file small read buffer fpRD - wof.sys - Compressed file large read buffer fpwi - wof.sys - Compressed file work item fpxp - wof.sys - Compressed file xpress context FS?? - nt!fsrtl - Unrecoginzed File System Run Time allocations (update pooltag.w) FSeh - nt!fsrtl - File System Run Time Extra Create Parameter Entry FSel - nt!fsrtl - File System Run Time Extra Create Parameter List FSfm - nt!fsrtl - File System Run Time Fast Mutex Lookaside List FSim - nt!fsrtl - File System Run Time Mcb allocations FSrt - nt!fsrtl - File System Run Time allocations (DO NOT USE!) FSmg - nt!fsrtl - File System Run Time FSrd - nt!fsrtl - File System Run Time FSrm - nt!fsrtl - File System Run Time FSrn - nt!fsrtl - File System Run Time FSrN - nt!fsrtl - File System Run Time FSro - nt!fsrtl - File System Run Time FSrs - nt!fsrtl - File System Run Time Work Item for low-stack posting FSun - nt!fsrtl - File System Run Time FOCX - nt!fsrtl - File System Run Time File Object Context structure FsCo - fse.sys - FSE_CORE_CONTEXT_OBJECT_POOL_TAG Fsbi - fse.sys - FSE_CORE_NBLCHAIN_INDICATION_CONTEXT_POOL_TAG FsNa - fse.sys - FSE_CORE_NBLCHAIN_NDU_ATTRIBUTE_DATA_POOL_TAG FsNs - fse.sys - FSE_CORE_NBLCHAIN_SEND_CONTEXT_POOL_TAG FsGo - fse.sys - FSE_CORE_NDIS_GENERIC_OBJECT_POOL_TAG Fspe - fse.sys - FSE_CORE_NIC_PAIR_ENTRY_POOL_TAG FsDC - fse.sys - FSE_DEVICE_CONTEXT_TAG Fsed - fse.sys - FSE_DIAGNOSTICS_SCRATCH_TAG FseB - fse.sys - FSE_EXPANDABLE_BUFFER_SIGNATURE FsIP - fse.sys - FSE_IPS_CLIENT_TAG FsIf - fse.sys - FSE_IPS_CLIENT_INTERFACE_TAG Fsgo - fse.sys - FSE_NDIS_GENERIC_OBJECT_POOL_TAG FsLS - fse.sys - FSE_NMR_CLIENT_POOLTAG FseV - fse.sys - FSE_PARTITION_SIGNATURE FseT - fse.sys - FSE_PATCH_SIGNATURE FseC - fse.sys - FSE_PORT_CACHE_SIGNATURE FsPp - fse.sys - FSE_PORT_POLICY_TAG FseP - fse.sys - FSE_PORT_POOL_SIGNATURE FseR - fse.sys - FSE_PORT_RESERVATION_SIGNATURE FsGl - fse.sys - FSE_SERVER_TAG_GLOBAL FsMt - fse.sys - FSE_SERVER_TAG_MESSAGE FsMl - fse.sys - FSE_SERVER_TAG_MIDL FsPd - fse.sys - FSE_SERVER_TAG_PARTITION FsSt - fse.sys - FSE_SERVER_TAG_SOCKET FsSc - fse.sys - FSE_SERVER_TAG_SOCKET_CONTEXT FsWi - fse.sys - FSE_SERVER_TAG_WORKITEM FseS - fse.sys - FSE_SHIMS_TAG FseW - fse.sys - FSE_WORKSHEET_POOLTAG FsTd - fse.sys - FSE_PT_TEST_DRIVER_TAG FTrc - - Fault tolerance Slist tag. FtC - - Fault tolerance driver FtM - - Fault tolerance driver FtS - - Fault tolerance driver FtT - - Fault tolerance driver FtU - - Fault tolerance driver FtV - - Fault tolerance driver FtpA - mpsdrv.sys - MPSDRV FTP protocol analyzer FwfD - mpsdrv.sys - MPSDRV driver buffer for flattening NET_BUFFFER FwSD - tcpip.sys - WFP security descriptor FVE? - fvevol.sys - Full Volume Encryption Filter Driver (Bitlocker Drive Encryption) FVE0 - fvevol.sys - General allocations FVEc - fvevol.sys - Cryptographic allocations FVEl - fvevol.sys - FVELIB allocations FVEp - fvevol.sys - Write buffers FVEr - fvevol.sys - Reserved mapping addresses FVEv - fvevol.sys - Conversion allocations FVEw - fvevol.sys - Worker threads FVEx - fvevol.sys - Read/write control structures FxDr - wdf01000.sys - KMDF driver globals/generic pool allocation tag. Fallback tag in case driver tag is unusable. FxLg - wdf01000.sys - KMDF IFR log tag FxL? - wdfldr.sys - KMDF Loader Pool allocation Fwpp - fwpkclnt.sys - Windows Filtering Platform export driver. Fwpn - fwpkclnt.sys - WFP NBL info Fwpi - fwpkclnt.sys - WFP injector info Fwpx - fwpkclnt.sys - WFP NBL tagged context Fwpd - fwpkclnt.sys - WFP delayed injection context Fwpc - fwpkclnt.sys - WFP injection call context G??? - - Gdi Objects G - - Gdi Generic allocations Gcac - - Gdi glyph cache Gcap - - Gdi capture buffer Gcsl - - Gdi string resource script names Gdbr - - Gdi driver brush realization Gdd - - Gdi ddraw PKEY_VALUE_FULL_INFORMATION Gdda - - Gdi ddraw attach list GddD - - Gdi ddraw dummy page Gdde - - Gdi ddraw event Gddf - - Gdi ddraw driver heaps Gddp - - Gdi ddraw driver caps Gddv - - Gdi ddraw driver video memory list Gdxd - - Gdi ddraw VPE directdraw object Gdxs - - Gdi ddraw VPE surface, videoport, capture object Gdxx - - Gdi ddraw VPE DXAPI object Gdev - - Gdi GDITAG_DEVMODE GDev - - Gdi pdev Gdrs - - Gdi GDITAG_DRVSUP Gebr - - Gdi ENGBRUSH gEdg - - Gdi gradient fill triangle Gffv - - Gdi FONTFILEVIEW gFil - - Gdi FILEVIEW GFil - - Gdi engine descriptor list Gfsb - - Gdi font sustitution list Gfsm - - Gdi Fast mutex Ggdv - - Gdi GDITAG_GDEVICE Gglb - - Gdi temp buffer Ggls - - Gdi glyphset Ggb - - Gdi glyph bits Ggbl - - Gdi look aside buffers Ghmg - - Gdi handle manager objects Gini - - Gdi fast mutex Gldv - - Gdi Ldev Glnk - - Gdi PFELINK Gmap - - Gdi font map signature table Gpff - - Gdi physical font file Gpft - - Gdi font table Gsem - - Gdi Semaphores Gsp - - Gdi sprite Gspr - - Gdi sprite grow range Gtmp - - Gdi temporary allocations Gtmw - - Gdi TMW_INTERNAL Gxlt - - Gdi Xlate Gfcb - - EXIFS Grow FCB Hal - hal.dll - Hardware Abstraction Layer Hal2 - hal.dll - Hardware Abstraction Layer: Secondary Interrupts HalA - hal.dll - Hardware Abstraction Layer: ACPI Hala - hal.dll - Hardware Abstraction Layer: HSA HalB - hal.dll - Hardware Abstraction Layer: MM Buffer Halb - hal.dll - Hardware Abstraction Layer: MM Metadata HalC - hal.dll - Hardware Abstraction Layer: Dynamic Partitioning Halc - hal.dll - Hardware Abstraction Layer: Processors HalD - hal.dll - Hardware Abstraction Layer: DMA Hald - hal.dll - Hardware Abstraction Layer: Kernel Debug HalE - hal.dll - Hardware Abstraction Layer: Errata Management HalF - hal.dll - Hardware Abstraction Layer: Firmware HalH - hal.dll - Hardware Abstraction Layer: Hypervisor HalI - hal.dll - Hardware Abstraction Layer: IOMMU Hali - hal.dll - Hardware Abstraction Layer: Interrupts HalK - hal.dll - Hardware Abstraction Layer: KINTERUPT objects HalM - hal.dll - Hardware Abstraction Layer: Memory Management Halm - hal.dll - Hardware Abstraction Layer: Misc Halo - hal.dll - Hardware Abstraction Layer: Power HalP - hal.dll - Hardware Abstraction Layer: PCI Halp - hal.dll - Hardware Abstraction Layer: PNP HalS - hal.dll - Hardware Abstraction Layer: ARM64 SPE HalV - ntoskrnl.exe - Driver Verifier DMA checking HalW - hal.dll - Hardware Abstraction Layer: WHEA Hpfs - - Pinball (aka Hpfs) allocations HisC - - histogram filter driver Hist - - histogram filter driver HidP - hidparse.sys - HID Parser HidC - hidclass.sys - HID Class driver HdCl - - HID Client Sample Driver HpMM - pnpmem.sys - HotPlug Memory Driver HCID - bthport.sys - Bluetooth port driver HCI debug HCIT - bthport.sys - Bluetooth port driver (HCI) HcRs - hcaport.sys - HCAPORT_TAG_RESOURCE_LIST HcEv - hcaport.sys - HCAPORT_TAG_EVENT HcdI - hcaport.sys - HCAPORT_TAG_HWID HcEn - hcaport.sys - HCAPORT_TAG_ENUM HcMc - hcaport.sys - HCAPORT_TAG_MISC HcDr - hcaport.sys - HCAPORT_TAG_DEVICE_RELATIONS HcBm - hcaport.sys - HCAPORT_TAG_BITMAP HcOb - hcaport.sys - HCAPORT_TAG_OBJECT HcCq - hcaport.sys - HCAPORT_TAG_CQUEUE HcPr - hcaport.sys - HCAPORT_TAG_PROTD HPmi - hcaport.sys - HCAPORT_TAG_PMI_EXTENSION HcMa - hcaport.sys - HCAPORT_TAG_MAD HcMp - hcaport.sys - HCAPORT_TAG_MINIPORT HcCm - hcaport.sys - HCAPORT_TAG_CM HcUc - hcaport.sys - HCAPORT_TAG_UCONTEXT HcMr - hcaport.sys - HCAPORT_TAG_REMOVE_LOCK Hmgo - hcaport.sys - HCAPORT_TAG_WQ_MG_INFO Hioc - hcaport.sys - HCAPORT_TAG_IOC_SERVICE_TABLE hSVD - mrxdav.sys - Shared Heap Tag HT01 - - GDI Halftone AddCachedDCI() for CurCDCIData HT02 - - GDI Halftone GetCachedDCI() for Threshold HT03 - - GDI Halftone FindCachedSMP() for CurCSMPData HT04 - - GDI Halftone FindCachedSMP() for CurCSMPBmp HT05 - - GDI Halftone HT_CreateDeviceHalftoneInfo() for HT_DHI HT06 - - GDI Halftone pDCIAdjClr() for DEVCLRADJ HT07 - - GDI Halftone ComputeRGB555LUT() for RGBLUT HT08 - - GDI Halftone ColorTriadSrcToDev() for RGB-XYZ HT09 - - GDI Halftone ColorTriadSrcToDev() for CRTX-FD6XYZ Cache HT10 - - GDI Halftone CreateDyesColorMappingTable() for DevPrims HT11 - - GDI Halftone CreateDyesColorMappingTable() for DyeMappingTable HT12 - - GDI Halftone ThresholdsFromYData() for pYData HT13 - - GDI Halftone ComputeHTCellRegress() for pThresholds HT14 - - GDI Halftone CalculateStretch() for InputSI/pSrcMaskLine HT15 - - GDI Halftone CalculateStretch() for PrimColorInfo Hvlm - nt!Hvl - Temporary MDL for the Hvl component. HvlP - nt!Hvl - Hypercall marshalling pages for the Hvl component. I3CD - I3cHost.sys - I3C HostController Driver I3CP - I3cHost.sys - I3C HostController Driver (Non-Paged) IBCM - wibcm.sys - CM_INSTANCE_TAG Windows Infiniband Communications Manager CEP - wibcm.sys - CEP_INSTANCE_TAG CMSH - wibcm.sys - WIBCM_SHARED_TAG CMWK - wibcm.sys - WIBCM_WORK_TAG CMWT - wibcm.sys - WIBCM_TIMER_TAG IBm* - wibms.sys - Windows Infiniband Management Server pool tags IbPm - wibpm.sys - WIBPM_TAG Windows Infiniband Performance Manager IbPS - wibpm.sys - WIBPM_SENT_TAG IbPI - wibpm.sys - WIBPM_ITEM_TAG IbPA - wibpm.sys - WIBPM_SAMPLE_TAG IbW0 - wibwmi.sys - WIBWMI0_TAG Windows Infiniband WMI Manager IbW1 - wibwmi.sys - WIBWMI1_TAG IbW2 - wibwmi.sys - WIBWMI2_TAG Ic4c - tcpip.sys - ICMP IPv4 Control data Ic4h - tcpip.sys - ICMP IPv4 Headers Ic6c - tcpip.sys - ICMP IPv6 Control data Ic6h - tcpip.sys - ICMP IPv6 Headers IBbf - tcpip.sys - IP BVT Buffers Ilom - tcpip.sys - IPsec LBFO offload map Ilog - tcpip.sys - IPsec LBFO offload general ImrP - nt!ex - Platform Runtime Interface (kernel) InAD - tcpip.sys - Inet Ancillary Data InCo - tcpip.sys - Inet Compartment InCS - tcpip.sys - Inet Compartment Set IneI - tcpip.sys - Inet Inspects InF0 - tcpip.sys - Inet Generic Fixed Size Block pool 0 InF1 - tcpip.sys - Inet Generic Fixed Size Block pool 1 InF2 - tcpip.sys - Inet Generic Fixed Size Block pool 2 InIS - tcpip.sys - Inet Inspect Streams InNA - - Inet Na Clients InNP - tcpip.sys - Inet Nsi Providers InPA - tcpip.sys - Inet Port Assignment Arrays InPa - tcpip.sys - Inet Port Assignments InPE - tcpip.sys - Inet Port Exclusions InPP - tcpip.sys - Inet Port pool InSB - tcpip.sys - Inet stack block InSC - tcpip.sys - Inet Queued Send Contexts InWP - tcpip.sys - Inet Wake Port Record Ipas - tcpip.sys - IP Buffers for Address Sort Ipcr - tcpip.sys - IP Cache-aware Reference Counters IPba - tcpip.sys - IP Batching IPbw - tcpip.sys - IP Path Bandwidth information IPdc - tcpip.sys - IP Destination Cache IpEb - tcpip.sys - IP Sec Esp Buffer IPfg - tcpip.sys - IP Fragment Groups IPfp - tcpip.sys - IP PreValidated Receives IPif - tcpip.sys - IP Interfaces IPlc - tcpip.sys - IP Locality IPle - tcpip.sys - IP Loopback execution context IPlo - tcpip.sys - IP Loopback buffers IPlw - tcpip.sys - IP Loopback worker IPmf - tcpip.sys - IP Multicast Forwarding Entry pool IPpo - tcpip.sys - IP Offload buffers IPpa - tcpip.sys - IP Path information IPro - tcpip.sys - IP Router Context IPrq - tcpip.sys - IP Request Control data IPss - tcpip.sys - IP Session State IPsi - tcpip.sys - IP SubInterfaces Ipng - tcpip.sys - IP Generic buffers (Address, Interface, Packetize, Route allocations) IpOl - tcpip.sys - IP Offload Log data Ippp - tcpip.sys - IP Prefix Policy information IPre - tcpip.sys - IP Reassembly buffers Iptt - tcpip.sys - IP Timer Tables Iptc - tcpip.sys - IP Transaction Context information Ipur - tcpip.sys - IP Unicast Routes Ipwi - tcpip.sys - IP Work Item allocations I4ai - tcpip.sys - IPv4 Local Address Identifiers I4ba - tcpip.sys - IPv4 Local Broadcast Addresses I4bf - tcpip.sys - IPv4 Generic Buffers (Source Address List allocations) I4e - tcpip.sys - IPv4 Echo data I4ma - tcpip.sys - IPv4 Local Multicast Addresses I4nb - tcpip.sys - IPv4 Neighbors I4rd - tcpip.sys - IPv4 Receive Datagrams Arguments I4ua - tcpip.sys - IPv4 Local Unicast Addresses I6ai - tcpip.sys - IPv6 Local Address Identifiers I6aa - tcpip.sys - IPv6 Local Anycast Addresses I6bf - tcpip.sys - IPv6 Generic Buffers (Source Address List allocations) I6e - tcpip.sys - IPv6 Echo data I6ma - tcpip.sys - IPv6 Local Multicast Addresses I6nb - tcpip.sys - IPv6 Neighbors I6rd - tcpip.sys - IPv6 Receive Datagrams Arguments I6ua - tcpip.sys - IPv6 Local Unicast Addresses IPX - - Nwlnkipx transport Icp - - I/O completion packets queue on a completion ports IcpP - - NPAGED_LOOKASIDE_LIST I/O completion per processor lookaside pointers IdeP - - atapi IDE IdeX - - PCI IDE idle - - Power Manager idle handler Ifs - - Default file system allocations (user's of ntifs.h) Info - - general system information allocations Io - nt!io - general IO allocations IoAc - nt!io - Io ACLs IoBo - nt!io - Io boot disk information IoCc - nt!io - Io completion context IoCo - nt!io - Io completion IoCp - nt!io - Io copy operation IoDn - nt!io - Io device name info IoEa - nt!io - Io extended attributes IoEr - nt!io - Io error log packets IoEv - nt!io - Io KEVENT IoFc - nt!io - Io name transmogrify operation IoFs - nt!io - Io shutdown packet IoFu - nt!pnp - Io file utils Ioin - - Io interrupts IoKa - nt!io - Io keepalive IoKB - nt!io - Registry basic key block (temp allocation) IoKe - nt!io - Io registry key IoLe - nt!io - Io length IoN1 - nt!io - Io name strings 1 IoN2 - nt!io - Io name strings 2 IoN3 - nt!io - Io name strings 3 IoN4 - nt!io - Io name strings 4 IoNm - nt!io - Io parsing names IoOp - nt!io - I/O subsystem open packet IoRb - nt!io - Io remote boot related IoRe - nt!io - Io reparse IoRi - nt!io - I/O SubSystem Driver Reinitialization Callback Packet IoRN - nt!io - Registry key name (temp allocation) IoSA - nt!io - Io segment array IoSB - nt!io - Io system buffer IoSD - nt!io - Io system device buffer IoSe - nt!io - Io security related IoSh - nt!io - Io shutdown packet IoSi - nt!io - Io Symbolic Links IoSn - nt!io - Io Session Notifications IoSs - nt!io - Io SIDs IoSt - nt!io - Io Stream Identifier Context IoSy - nt!io - Io system environment variables IoTi - nt!io - Io timers IoTt - nt!vf - I/O verifier IRP tracking table IoUs - nt!io - I/O SubSystem completion Context Allocation IoWI - nt!io - Io work items Irp - - Io, IRP packets Irp+ - nt!vf - I/O verifier allocated IRP packets IrpB - nt!vf - I/O verifier direct I/O double buffer allocation Irpd - nt!vf - I/O verifier deferred completion context Irps - nt!vf - I/O verifier per-IRP session tracking data Irpt - nt!vf - I/O verifier per-IRP tracking data IrpC - nt!vf - I/O verifier stack contexts Irpl - nt!io - system large IRP lookaside list Irps - nt!io - system small IRP lookaside list IrpX - nt!io - IRP Extension Isap - - Pnp Isa bus extender II?? - - IP in IP tunneling IIrf - - Free memory IIdt - - Data IITn - - Tunnel IIhd - - Header IIpk - - Packet IIsc - - Send Context IIts - - Transfer Context IIwc - - Work Context Im* - - Imapi.sys from adaptec INTC - - Intel video driver IPm? - - IP Multicasting IPmg - - Group IPms - - Source IPmo - - Outgoing Interface IPmm - - Message IPmf - - Free memory (only in checked builds) Ip?? - ipsec.sys - IP Security (IPsec) IpSI - ipsec.sys - initial allocations IpAT - ipsec.sys - AH headers in transport mode IpAU - ipsec.sys - AH headers in tunnel mode IpET - ipsec.sys - ESP headers in transport mode IpEU - ipsec.sys - ESP headers in tunnel mode IpHT - ipsec.sys - HUGHES headers in transport mode IpHU - ipsec.sys - HUGHES headers in tunnel mode IpAX - ipsec.sys - key acquire contexts IpFI - ipsec.sys - filter blocks IpSA - ipsec.sys - security associations (SA) IpKE - ipsec.sys - keys IpTI - ipsec.sys - timers IpSQ - ipsec.sys - stall queues IpLA - ipsec.sys - lookaside lists IpBP - ipsec.sys - buffer pools IpSC - ipsec.sys - send complete context IpEQ - ipsec.sys - event queue IpHW - ipsec.sys - hardware accleration items IpCO - ipsec.sys - IP compression ItoM - tcpip.sys - IPsec task offload interface ItoD - tcpip.sys - IPsec task offload delete SA ItoS - tcpip.sys - IPsec task offload add SA ItoC - tcpip.sys - IPsec task offload context ItoO - tcpip.sys - IPsec task offload paramters Itht - tcpip.sys - IPsec hashtable ISLe - tcpip.sys - IPsec SA list entry IsRc - tcpip.sys - IPsec rebalance context Ikmb - tcpip.sys - IPsec key module blob Ithp - tcpip.sys - IPsec throttle parameter Ipfl - tcpip.sys - IPsec flow handle Ipap - tcpip.sys - IPsec pend context Inlc - tcpip.sys - IPsec NL complete context Iprc - tcpip.sys - IPsec RPC context Ipis - tcpip.sys - IPsec inbound sequence info Itok - tcpip.sys - IPsec token Iser - tcpip.sys - IPsec inbound sequence range IKeO - tcpip.sys - IPsec key object I4sa - tcpip.sys - IPsec SADB v4 I4s6 - tcpip.sys - IPsec SADB v6 IHaO - tcpip.sys - IPsec hash object Ipnc - tcpip.sys - IPsec negotiation context Icse - tcpip.sys - IPsec NS connection state Itro - tcpip.sys - IPsec outbound session security context Itri - tcpip.sys - IPsec inbound packet security context Ituo - tcpip.sys - IPsec outbound tunnel session security context Itui - tcpip.sys - IPsec inbound packet tunnel security context Ipft - tcpip.sys - IPsec filter Ipwi - tcpip.sys - IPsec work item Idqf - tcpip.sys - IPsec DoS Protection QoS flow Idpc - tcpip.sys - IPsec DoS Protection pacer create Idst - tcpip.sys - IPsec DoS Protection state entry Ifws - tcpip.sys - IPsec forward state ImPl - ndisimplatform.sys - NDIS IM (LBFO) Platform IpFl - mpsdrv.sys - MPSDRV IP Flow IrD? - - IrDA TDI and RAS drivers IU?? - - IIS Utility Driver IUDl - - Lookaside list allocations IUcp - - completion port minipackets KAPC - nt!io - I/O SubSystem HardError APC KbdC - kbdclass.sys - Keyboard Class Driver KbdH - kbdhid.sys - Keyboard HID mapper Driver KCfe - - Kernel COM factory entry KDN_ - kdnic.sys - Network Kernel Debug Adapter KDNT - kdnic.sys - Network Kernel Debug Adapter TCB KDNR - kdnic.sys - Network Kernel Debug Adapter RCB KDNr - kdnic.sys - Network Kernel Debug Adapter RECV-NBL KDNF - kdnic.sys - Network Kernel Debug Adapter FRAME Ke - - Kernel data structures KeIC - - Kernel Interrupt Object Chain Key - - Key objects KMIX - - Kmixer (wdm audio) KNMI - - Kernel NMI Callback object KrbC - ksecdd.sys - Kerberos Client package krpc - nt - NTOS midl_user_allocate KSah - - Ks auxiliary stream headers KSAI - - allocator instance KSai - - default allocator instance header KSbi - - event buffered item KSCI - - clock instance KSce - - create item entry KSch - - create handler entry KSci - - default clock instance header KScp - - object creation parameters auxiliary copy KSda - - default allocator KSdc - - default clock KSdh - - device header Kse0 - ksecdd.sys - Security driver allocs for sec package 0 Kse1 - ksecdd.sys - Security driver allocs for sec package 1 Kse2 - ksecdd.sys - Security driver allocs for sec package 2 Kse3 - ksecdd.sys - Security driver allocs for sec package 3 Kse4 - ksecdd.sys - Security driver allocs for sec package 4 Kse5 - ksecdd.sys - Security driver allocs for sec package 5 Kse6 - ksecdd.sys - Security driver allocs for sec package 6 Kse7 - ksecdd.sys - Security driver allocs for sec package 7 Kse8 - ksecdd.sys - Security driver allocs for sec package 8 Kse9 - ksecdd.sys - Security driver allocs for sec package 9 Ksec - ksecdd.sys - Security device driver KSed - - event dpc item KSee - - event entry KSed - - oneshot event deletion dpc KSep - - irp system buffer event parameter KseS - ksecdd.sys - Security driver allocs for LSA proper KSew - - oneshot event deletion workitem KseZ - ksecdd.sys - Security driver allocs for default sec package KSqr - - QM quality report KSer - - QM error report KSfd - - filter cache data (MSKSSRV) KsFI - - filter instance KSns - - null security object KSnv - - registry name value KSoh - - object header KSop - - object creation parameters KSpc - - port driver instance FsContext KSPI - - pin instance KSpp - - irp system buffer property/method/event parameter KSpt - - pin type list (MSKSSRV) KSqf - - query information file buffer KSsc - - port driver stream FsContext KSsf - - set information file buffer KSsh - - stream headers KSsi - - software bus interface KSsl - - symbolic link buffer (MSKSSRV) KSsp - - serialized property set KsoO - - WDM audio stuff L2CA - bthport.sys - Bluetooth port driver (L2CAP) L2T0 - - ndis\l2tp / MTAG_FREED L2T1 - - ndis\l2tp / MTAG_ADAPTERCB L2T2 - - ndis\l2tp / MTAG_TUNNELCB L2T3 - - ndis\l2tp / MTAG_VCCB L2T4 - - ndis\l2tp / MTAG_VCTABLE L2T5 - - ndis\l2tp / MTAG_WORKITEM L2T6 - - ndis\l2tp / MTAG_TIMERQ L2T7 - - ndis\l2tp / MTAG_TIMERQITEM L2T8 - - ndis\l2tp / MTAG_PACKETPOOL L2T9 - - ndis\l2tp / MTAG_FBUFPOOL L2Ta - - ndis\l2tp / MTAG_HBUFPOOL L2Tb - - ndis\l2tp / MTAG_TDIXRDG L2Tc - - ndis\l2tp / MTAG_TDIXSDG L2Td - - ndis\l2tp / MTAG_CTRLRECD L2Te - - ndis\l2tp / MTAG_CTRLSENT L2Tf - - ndis\l2tp / MTAG_PAYLRECD L2Tg - - ndis\l2tp / MTAG_PAYLSENT L2Th - - ndis\l2tp / MTAG_INCALL L2Ti - - ndis\l2tp / MTAG_UTIL L2Tj - - ndis\l2tp / MTAG_ROUTEQUERY L2Tk - - ndis\l2tp / MTAG_ROUTESET L2Tl - - ndis\l2tp / MTAG_L2TPPARAMS L2Tm - - ndis\l2tp / MTAG_TUNNELWORK L2Tn - - ndis\l2tp / MTAG_TDIXROUTE LANE - atmlane.sys - LAN Emulation Client for ATM LB?? - - LM Datagram receiver allocations LBan - - Server announcement LBvb - - View buffer LBma - - Master announce context LBxp - - Transport LBxn - - TransportName LBxm - - Master name LBtn - - Transport name LBea - - Ea buffer LBdi - - POOL_DOMAIN_INFO LBds - - Send datagram context LBci - - Connection info LBmh - - Mailslot header LBbl - - Backup List LBsl - - Browser server list LBbs - - Browser server LBgb - - GetBackupList request LBbr - - GetBackupList response LBmb - - Mailslot Buffer LBid - - Illegal datagram context LBbn - - Name LBnn - - Name name LBic - - IRP context LBwi - - Work item LBel - - Election context LBbb - - Become backup context LBbr - - Become backup request LBpn - - Paged Name LBpt - - Paged transport LBse - - Browser security Lbuf - - EXIFS Large Buffer Ldmp - nt!io - Live Dump Buffers. Note, these buffers will not be present in the resulting live dump file. LeGe - tcpip.sys - Legacy Registry Mapping Module Buffers LeoC - - Symantec/Norton AntiVirus filter driver List - - kernel utilities list allocation LCam - - WDM mini video capture driver for Logitech camera Lfs - - Lfs allocations LfsI - - Lfs allocations LLDP - mslldp.sys - LLDP protocol driver allocations LogA - clfsapimp.sys - CLFS Kernel API test driver LpcZ - - LPC Zone LpcM - - Local procedure call message blocks Lr?? - - LM redirector allocations Lr - - Generic allocations Lrcx - - Context blocks of various types Lrcl - - ConnectListEntries Lrsl - - ServerListEntries Lrse - - Security entry Lrsc - - Search Control Blocks Lrea - - EA related allocations Lric - - Instance Control Blocks Lrfc - - File Control Blocks Lrfl - - Fcb Locks Lrfp - - Fcb Paging locks Lrcn - - Computer Name Lrdn - - Domain Name Lr?? - - Buffers used for FsControlFile APIs Lrlc - - Lock Control Blocks Lrlb - - Lock Control Block buffers Lrnf - - Non paged FCB Lrnt - - Non paged transport Lrps - - Paged security entry Lrte - - Transport event. Lrxx - - Transceive context blocks Lr!! - - Cancel request context blocks Lrmt - - MPX table Lrme - - MPX table entries Lrsx - - Send contexts Lraw - - Async write context Lrwb - - Write behind buffer header Lrbb - - Write behind buffer Lrwq - - Work queue item Lrac - - ACL for redirector Lrds - - Security Descriptor for redirector Lrsm - - SMB buffer Lrds - - Duplicated ansi string Lrdu - - Duplicated unicode string Lxpt - - Transport Lrtc - - Transport connection Lrna - - Netbios Addresses Lrca - - Temporary storage used in name canonicalization Lr2x - - Transact SMB context Lrpt - - Primary transport server list Lrso - - Operating system name Lref - - Reference history (debug only) LS?? - - LM server allocations LSac - srv.sys - SMB1 BlockTypeAdminCheck LSas - srv.sys - SMB1 BlockTypeAdapterStatus LSbf - srvnet.sys - SMB1 buffer descriptor or srvnet allocation LScd - srv.sys - SMB1 comm device LScn - srv.sys - SMB1 connection LSdb - srv.sys - SMB1 data buffer LSdc - srv.sys - SMB1 BlockTypeDirCache LSdi - srv.sys - SMB1 BlockTypeDirectoryInfo LSep - srv.sys - SMB1 endpoint LSfn - srv.sys - SMB1 BlockTypeFSName LSfR - srv2.sys - SMB2 rfssequence table and rfs64table LShs - srv2.sys - SMB2 lease hash table LSlb - srv2.sys - SRVLIB security descriptor/registry buffer LSlf - srv.sys - SMB1 LFCB LSlr - srv.sys - SMB1 BlockTypeLargeReadX LSmf - srv.sys - SMB1 MFCB LSmi - srv.sys - SMB1 BlockTypeMisc LSnh - srv.sys - SMB1 nonpaged block header LSni - srv.sys - SMB1 BlockTypeNameInfo LSnn - srv2.sys - SMB2 netname LSop - srv.sys - SMB1 oplock break wait LSpc - srv.sys - SMB1 paged connection LSpm - srv.sys - SMB1 paged MFCB LSpr - srv.sys - SMB1 paged RFCB LSrf - srv.sys - SMB1 RFCB LSrp - srvnet.sys - srvnet RPC allocation LSRp - srv2.sys - SRVLIB reparse point LSsc - srv.sys - SMB1 search(core) LSsd - srv.sys - SMB1 BlockTypeShareSecurityDescriptor LSsf - srv.sys - SMB1 BlockTypeDfs LSsh - srv.sys - SMB1 share LSSL - srv2.sys - SMBLIB allocation LSsp - srv.sys - SMB1 search(core complete) LSsr - srv.sys - SMB1 search LSss - srv.sys - SMB1 session LStb - srv.sys - SMB1 table LStc - srv.sys - SMB1 tree connect LSti - srv.sys - SMB1 timer LStr - srv.sys - SMB1 transaction LSvi - srv.sys - SMB1 BlockTypeVolumeInformation LSwi - srv.sys - SMB1 initial work context LSwn - srv.sys - SMB1 normal work context LSwq - srv.sys - SMB1 BlockTypeWorkQueue LSwr - srv.sys - SMB1 raw work context LSws - srv.sys - SMB1 BlockTypeWorkContextSpecial LS2b - srv2.sys - SMB2 buffer LS2c - srv2.sys - SMB2 connection LS2e - srv2.sys - SMB2 endpoint LS2f - srv2.sys - SMB2 file LS2h - srv2.sys - SMB2 share LS2i - srv2.sys - SMB2 client LS2l - srv2.sys - SMB2 lease LS2n - srv2.sys - SMB2 channel LS2o - srv2.sys - SMB2 oplock break LS2p - srv2.sys - SMB2 provider LS2q - srv2.sys - SMB2 queue LS2s - srv2.sys - SMB2 session LS2t - srv2.sys - SMB2 treeconnect LS2W - srv2.sys - SMB2 special workitem LS2w - srv2.sys - SMB2 workitem LS2x - srv2.sys - SMB2 security context LS$S - srv2.sys - SMB2 ecp LS2$ - srv2.sys - SMB2 misc. allocation LS00 - srvnet.sys - SRVNET LookasideList level 0 allocation 256 Bytes LS01 - srvnet.sys - SRVNET LookasideList level 1 allocation 512 Bytes LS02 - srvnet.sys - SRVNET LookasideList level 2 allocation 1K Bytes LS03 - srvnet.sys - SRVNET LookasideList level 3 allocation 2K Bytes LS04 - srvnet.sys - SRVNET LookasideList level 4 allocation 4K Bytes LS05 - srvnet.sys - SRVNET LookasideList level 5 allocation 8K Bytes LS06 - srvnet.sys - SRVNET LookasideList level 6 allocation 16K Bytes LS07 - srvnet.sys - SRVNET LookasideList level 7 allocation 32K Bytes LS08 - srvnet.sys - SRVNET LookasideList level 8 allocation 64K Bytes LS09 - srvnet.sys - SRVNET LookasideList level 9 allocation 128K Bytes LS10 - srvnet.sys - SRVNET LookasideList level 10 allocation 192K Bytes LS11 - srvnet.sys - SRVNET LookasideList level 11 allocation 256K Bytes LS12 - srvnet.sys - SRVNET LookasideList level 12 allocation 320K Bytes LS13 - srvnet.sys - SRVNET LookasideList level 13 allocation 384K Bytes LS14 - srvnet.sys - SRVNET LookasideList level 14 allocation 448K Bytes LS15 - srvnet.sys - SRVNET LookasideList level 15 allocation 512K Bytes LS16 - srvnet.sys - SRVNET LookasideList level 16 allocation 576K Bytes LS17 - srvnet.sys - SRVNET LookasideList level 17 allocation 640K Bytes LS18 - srvnet.sys - SRVNET LookasideList level 18 allocation 704K Bytes LS19 - srvnet.sys - SRVNET LookasideList level 19 allocation 768K Bytes LS20 - srvnet.sys - SRVNET LookasideList level 20 allocation 832K Bytes LSnd - - WDM mini sound driver for Logitech video camera Luaf - luafv.sys - LUA File Virtualization LXMK - - kernel mixer line driver (KMXL - looks like they got their tag backwards) MXF - - DirectMusic (MIDI Transform Filter) MapP - - PNP map Mapr - - arc firmware registry routines McaC - hal.dll - HAL MCA corrected Log McaD - hal.dll - HAL MCA Driver Log McaK - hal.dll - HAL MCA Kernel Log McaP - hal.dll - HAL MCA Log from previous boot McaT - hal.dll - HAL MCA temporary Log MCAM - - WDM mini driver for Intel USB camera MCDx - - OpenGL MCD server (mcdsrv32.dll) allocations MCDd - - OpenGL MCD driver (embedded in a display driver like s3mvirge.dll) Mdl - - Io, Mdls MdlP - - MDL per processor lookaside list pointers Mem - nt!po - NT Power manager, POP_MEM_TAG MePr - - In-memory print buffer MiCf - nt!mm - Mm compressed Control Flow Guard valid target RVA list MiHa - nt!mm - Mm internal memory ranges MiIo - nt!mm - Mm internal numa node information MiPa - nt!mm - Mm internal partition core Mipb - nt!mm - Mm internal bit buffer MiNi - nt!mm - Mm internal node page information Mipp - nt!mm - Mm internal page node Mipr - nt!mm - Mm internal partition resource information mkup - mpsdrv.sys - MPSDRV upcall request Mm - nt!mm - general Mm Allocations MmAc - nt!mm - Mm access log buffers MmBk - nt!mm - Mm banked sections MmCa - nt!mm - Mm control areas for mapped files MmCd - nt!mm - Mm fork clone descriptors MmCh - nt!mm - Mm fork clone headers MmCi - nt!mm - Mm control areas for images MmCl - nt!mm - Mm fork clone prototype PTEs MmCm - nt!mm - Calls made to MmAllocateContiguousMemory MmCr - nt!mm - Mm fork clone roots MmCt - nt!mm - Mm debug tracing MmDb - nt!mm - NtMapViewOfSection service MmDT - nt!mm - Mm debug MmEx - nt!mm - Mm events MmHi - nt!mm - Mm image entry - allocated per session MmHn - nt!mm - Mm sessionwide address name string entry MmHv - nt!mm - Mm sessionwide address entry MmIn - nt!mm - Mm inpaged io structures MmLd - nt!mm - Mm load module database MmPd - nt!mm - Mm page table commitment bitmaps MmPg - nt!mm - Mm page table pages at init time MmRp - nt!mm - Mm repurpose logging MmRw - nt!mm - Mm read write virtual memory buffers MmSb - nt!mm - Mm subsections MmSe - nt!mm - Mm secured VAD allocation MmSg - nt!mm - Mm segments MmSt - nt!mm - Mm section object prototype ptes MmSy - nt!mm - Mm PTE and IO tracking logs Mmdl - nt!mm - Mm Mdls for flushes Mmpp - nt!mm - Mm prototype PTEs for pool Mmpr - nt!mm - Mm physical VAD roots MmVd - nt!mm - Mm virtual address descriptors for mapped views MmVs - nt!mm - Mm virtual address descriptors short form (private views) Mmxx - nt!mm - Mm temporary allocations MmCx - nt!mm - info for dynamic section extension MmDm - nt!mm - deferred MmUnlock entries MmHt - nt!mm - session space PTE data MmLn - nt!mm - temporary name buffer for driver loads MmMl - nt!mm - physical memory range information MmPa - nt!mm - pagefile space deletion slist entries MmRl - nt!mm - temporary readlists for file prefetch MmSP - nt!mm - SLIST entries for system PTE NB queues MmSi - nt!mm - Control area security image stubs MmSc - nt!mm - subsections used to map data files MmSd - nt!mm - extended subsections used to map data files MmSm - nt!mm - segments used to map data files MmWe - nt!mm - Work entries for writing out modified filesystem pages. MmWw - nt!mm - Write watch VAD info Mmpv - nt!mm - Physical view VAD info Mmww - nt!mm - Write watch bitmap VAD info MmSW - nt!mm - Store write support MmSw - nt!mm - Store write support when prefetching MmCS - nt!mm - Pagefile CRC verification buffer MmCp - nt!mm - Colored page counts for physical memory allocations Mmdi - nt!mm - MDLs for physical memory allocations MmDp - nt!mm - Lost delayed write context MmFl - nt!mm - MDLs for large clusters for flushes MmFr - nt!mm - ASLR fixup records MmId - nt!mm - PFN identity buffer for setting PFN priorities MmIh - nt!mm - Image header allocation for Se validation MmIm - nt!mm - IO space MDL trackers MmIo - nt!mm - IO space mapping trackers Mmlk - nt!mm - ProbeAndLock MDL tracker MmLl - nt!mm - Large page memory run allocation for finding large pages MmNo - nt!mm - Inernal physical memory nodes MmPh - nt!mm - Physical memory nodes for querying memory ranges MmRe - nt!mm - ASLR relocation blocks MmWs - nt!mm - PTE flush list for working set operations MmWS - nt!mm - Working set swap support MmZw - nt!mm - Work items for zeroing pages and pagefiles MmSa - nt!mm - Subsection AVL tree allocations MmVt - nt!mm - Verifier thunk allocations MmLa - nt!mm - Memory list locks MmTp - nt!mm - Store eviction thread params MmPb - nt!mm - Paging file bitmaps Mn01 - monitor.sys - ACPI method evaluation output buffer Mn02 - monitor.sys - Unused Mn03 - monitor.sys - Raw E-EDID v.1.x byte stream including base block + extension blocks (if any) Mn04 - monitor.sys - Cached monitor ID WMI data block Mn05 - monitor.sys - Cached monitor basic display parameters WMI data block Mn06 - monitor.sys - Cached monitor analog video input parameters WMI data block Mn07 - monitor.sys - Cached monitor digitial video input parameters WMI data block Mn08 - monitor.sys - Cached monitor color characteristics WMI data block Mn09 - monitor.sys - Cached supported monitor source modes WMI data block Mn0A - monitor.sys - Registry subkey info buffer Mn0B - monitor.sys - Registry value buffer Mn0C - monitor.sys - Cached supported monitor frequency ranges WMI data block (overrides from registry) Mn0D - monitor.sys - Cached supported monitor frequency ranges WMI data block (from E-EDID v.1.x base block) Mn0E - monitor.sys - Buffer for E-EDID v.1.x base block, if any, populated by miniport Mn0F - monitor.sys - Buffer for E-EDID v.1.x extension block(s), if any, populated by miniport MNFf - msnfsflt.sys - NFS FS Filter, filename buffer MNFi - msnfsflt.sys - NFS FS Filter, instance name buffer MNFr - msnfsflt.sys - NFS FS Filter, registry access buffer MNFs - msnfsflt.sys - NFS FS Filter, general string buffer MNFv - msnfsflt.sys - NFS FS Filter, volume name buffer MNFC - msnfsflt.sys - NFS FS Filter, callback context MNFF - msnfsflt.sys - NFS FS Filter, file context MNFI - msnfsflt.sys - NFS FS Filter, instance context MNFS - msnfsflt.sys - NFS FS Filter, stream context MNFT - msnfsflt.sys - NFS FS Filter, thread array Mp10 - nt!mm - Mm Enumerate address space and reference images MQAA - mqac.sys - MSMQ driver, AVL allocations MQAB - mqac.sys - MSMQ driver, CCursor allocations MQAC - mqac.sys - MSMQ driver, generic allocations MQAD - mqac.sys - MSMQ driver, CDistribution allocations MQAG - mqac.sys - MSMQ driver, CGroup allocations MQAH - mqac.sys - MSMQ driver, Heap allocations MQAP - mqac.sys - MSMQ driver, CPacket allocations MQAQ - mqac.sys - MSMQ driver, CQueue allocations MQAT - mqac.sys - MSMQ driver, CTransaction allocations MRXx - - Client side caching for SMB MSll - refs.sys - MinLog allocated pool REM Minstore (an ReFS component) allocations MSag - refs.sys - Minstore unspecified AVL entries (too big for lookasides; filtered AVL) MSah - refs.sys - Minstore allocator history MSal - refs.sys - Minstore allocator block MSab - refs.sys - Minstore allocator region bitmap MsaE - refs.sys - Minstore AE push lock MSav - refs.sys - Minstore AVL table MSb+ - refs.sys - Minstore B+ table MSba - refs.sys - Minstore blockref cache array MSbe - refs.sys - Minstore blockref cache entry MSca - refs.sys - Minstore read cache object MScc - refs.sys - Minstore tx checksum context MScd - refs.sys - Minstore read cache dirty page array MSch - refs.sys - Minstore read cache hash table MSci - refs.sys - Minstore metadata cache instance MScl - refs.sys - Minstore read cache line MScm - refs.sys - Minstore composite MScn - refs.sys - Minstore container MSco - refs.sys - Minstore compression MScp - refs.sys - Minstore cached pin MScr - refs.sys - Minstore container rotation checksum buffer MScs - refs.sys - Minstore read cache sync set MScu - refs.sys - Minstore cursor MScw - refs.sys - Minstore read cache write range MSdd - refs.sys - Minstore director row data MSde - refs.sys - Minstore dirty table tracking MSdg - refs.sys - Minstore debug MSds - refs.sys - Minstore debug stack logs Msdv - - WDM mini driver for IEEE 1394 DV Camera and VCR MSeb - refs.sys - Minstore embedded factory (B+ and associated) MSeg - nt!mm - segments used to support image files MSer - refs.sys - Minstore reserved CRange map lookaside MSfa - refs.sys - Minstore filtered AVL MSha - refs.sys - Minstore hash table (incl. page tables) MShl - refs.sys - Minstore hash table lite MSho - refs.sys - Minstore hash table overflow (incl. page tables) MSht - refs.sys - Minstore stack hash table MSii - refs.sys - Minstore container initial index cache MSir - refs.sys - Mscallbacks MsKmeAllocateIoRequest MSiz - refs.sys - Mscallbacks RESERVED_IO_RUNS and RESERVED_IO_REQUESTS MSkb - refs.sys - Minstore keys buffer MSkc - refs.sys - Minstore KSR context MSkr - refs.sys - Minstore CmsKeyRules object MSlm - refs.sys - Minstore CRange map list lookaside MSlr - refs.sys - Minstore reserved CRange map list lookaside MSls - refs.sys - Minstore logged stack MSPi - refs.sys - Minstore generic/untagged allocation MSpa - refs.sys - Minstore hash table entries (incl. and primarily SmsPage) MSrc - refs.sys - Minstore tx run cache MSrb - refs.sys - Minstore redo block MSre - refs.sys - Minstore AVL lite entries (incl. and primarily SmsRangeMapEntry) MSrk - refs.sys - Minstore key rules MSrm - refs.sys - Minstore range map MSri - refs.sys - Minstore container rotation init state buffer MSro - refs.sys - Minstore container rotation buffer MSrp - refs.sys - Minstore read cache pages array MSrr - refs.sys - Minstore AVL lite entries (incl. and primarily SmsRCRangeMapEntry) MSrv - refs.sys - Minstore reserved buffers MSst - refs.sys - Minstore stream object MStb - refs.sys - Minstore table object MStu - refs.sys - Minstore tree update filter MStx - refs.sys - Minstore transaction MSur - refs.sys - Minstore undo record MSvc - refs.sys - Minstore volume context MSvs - refs.sys - Minstore valid/invalid checksum debug buffers (debug only) MSvu - refs.sys - Minstore volume/instance object MST? - - MSTEE (mstee.sys) MSTa - - associated stream header MSTc - - filer connection MSTd - - data format MSTf - - filter instance MSTp - - pin instance MSTs - - stream header MouC - mouclass.sys - Mouse Class Driver MouH - mouhid.sys - Mouse HID mapper Driver MsFc - - Mailslot CCB, Client control block. Each client with an opened mailslot has one of these MsFC - - Mailslot root CCB, A client control block for the top level mailslot directory MsFd - - Mailslot data entry write buffer, This is writes buffered inside mailslots MsFD - - Mailslot root DCB and its name buffer MsFf - - Mailslot FCB, File control block, Service side block for each created mailslot. MsFg - - Mailslot global resource MsFn - - Mailslot temporary name buffer MsFN - - Mailslot FCB name buffer, name for each created mailslot MsFr - - Mailslot read buffer, buffer created for pended reads issued. MsFt - - Mailslot query template, used for directory queries. MsFw - - Mailslot work context block, blocks create when we need to timeout reads. MsvC - ksecdd.sys - Msv/Ntlm client package Mup - mup.sys - Multiple UNC provider allocations, generic MupI - mup.sys - Windows Server 2003 and prior versions: DFS Irp Context allocation MuDn - mup.sys - Device name MuFc - mup.sys - File Context MuFn - mup.sys - File name rewrite MuIc - mup.sys - IRP Context MuMc - mup.sys - Master context MuQc - mup.sys - Query context MuSi - mup.sys - Surrogate info MuSf - mup.sys - Surrogate file info MuSr - mup.sys - Surrogate IRP info MuPe - mup.sys - Known prefix entry MuPi - mup.sys - Provider info MuUn - mup.sys - UNC provider Muta - - Mutant objects Nb01 - netbt.sys - NetBT hash table Nb02 - netbt.sys - NetBT remote name address cache Nb03 - netbt.sys - NetBT remote name address cache Nb04 - netbt.sys - NetBT failed address list Nb05 - netbt.sys - NetBT client element Nb06 - netbt.sys - NetBT general buffer allocation Nb07 - netbt.sys - NetBT datagram request tracker Nb08 - netbt.sys - NetBT domain address list Nb09 - netbt.sys - NetBT domain name Nb10 - netbt.sys - NetBT domain address list Nb11 - netbt.sys - NetBT lmhosts path Nb12 - netbt.sys - NetBT lmhosts path Nb13 - netbt.sys - NetBT lmhosts path Nb14 - netbt.sys - NetBT lmhosts path Nb16 - netbt.sys - NetBT timer entry Nb17 - netbt.sys - NetBT registry path Nb18 - netbt.sys - NetBT lmhosts file Nb19 - netbt.sys - NetBT lmhosts data Nb20 - netbt.sys - NetBT lmhosts path Nb21 - netbt.sys - NetBT control object Nb22 - netbt.sys - NetBT work item context Nb23 - netbt.sys - NetBT lmhosts path Nb25 - netbt.sys - NetBT device bindings Nb26 - netbt.sys - NetBT device exports Nb27 - netbt.sys - NetBT bind list cache Nb28 - netbt.sys - NetBT name server addresses Nb29 - netbt.sys - NetBT registry string Nb30 - netbt.sys - NetBT registry string Nb31 - netbt.sys - NetBT configuration entry Nb33 - netbt.sys - NetBT registry data Nb35 - netbt.sys - NetBT registry data Nb36 - netbt.sys - NetBT string Nb37 - netbt.sys - NetBT lmhosts path Nb38 - netbt.sys - NetBT string Nb39 - netbt.sys - NetBT file objects NbL0 - netbt.sys - NetBT lower connection NbL1 - netbt.sys - NetBT lower connection NbL2 - netbt.sys - NetBT lower connection NbL3 - netbt.sys - NetBT lower connection NbL4 - netbt.sys - NetBT lower connection NbTA - netbt.sys - NetBT internal address Nba9 - netbt.sys - NetBT IP request buffer Nbb0 - netbt.sys - NetBT IP request buffer Nbt0 - netbt.sys - NetBT name address Nbt1 - netbt.sys - NetBT name address Nbt2 - netbt.sys - NetBT NetBIOS address Nbt4 - netbt.sys - NetBT client list Nbt5 - netbt.sys - NetBT client list Nbt6 - netbt.sys - NetBT datagram Nbt8 - netbt.sys - NetBT address list Nbt9 - netbt.sys - NetBT temporary allocation NbtA - netbt.sys - NetBT datagram NbtC - netbt.sys - NetBT address element NbtD - netbt.sys - NetBT connection NbtF - netbt.sys - NetBT remote name NbtG - netbt.sys - NetBT datagram NbtH - netbt.sys - NetBT work item context NbtI - netbt.sys - NetBT listen requests NbtJ - netbt.sys - NetBT receive element NbtK - netbt.sys - NetBT name address NbtL - netbt.sys - NetBT datagram NbtM - netbt.sys - NetBT address list NbtN - netbt.sys - NetBT address list NbtO - netbt.sys - NetBT adapter status NbtP - netbt.sys - NetBT connection list NbtQ - netbt.sys - NetBT name stats NbtR - netbt.sys - NetBT name address NbtS - netbt.sys - NetBT datagram NbtV - netbt.sys - NetBT work item context NbtX - netbt.sys - NetBT datagram NbtY - netbt.sys - NetBT datagram NbtZ - netbt.sys - NetBT datagram Nbta - netbt.sys - NetBT DPC Nbtb - netbt.sys - NetBT NetBIOS address Nbtc - netbt.sys - NetBT address info Nbte - netbt.sys - NetBT delayed connect Nbtf - netbt.sys - NetBT DPC Nbtg - netbt.sys - NetBT MDL buffer Nbti - netbt.sys - NetBT device list Nbtj - netbt.sys - NetBT EA buffer Nbtm - netbt.sys - NetBT EA buffer Nbtn - netbt.sys - NetBT device string Nbtk - netbt.sys - NetBT transport address Nbtt - netbt.sys - NetBT MDL buffer Nbtu - netbt.sys - NetBT MDL buffer Nbtv - netbt.sys - NetBT WINS allocation Nbtw - netbt.sys - NetBT device linkage names Nbuf - netio.sys - NetIO Memory Descriptor List allocations NBF - - general NBF allocations NBFa - - NBF address object NBFb - - NBF receive buffer NBFc - - NBF connection object NBFd - - NBF packet pool descriptor NBFe - - NBF bind & export names NBFf - - NBF address file object NBFg - - NBF registry path name NBFi - - NBF tdi connection info NBFk - - NBF loopback buffer NBFl - - NBF link object NBFn - - NBF netbios name NBFo - - NBF config data NBFp - - NBF packet NBFq - - NBF query buffer NBFr - - NBF request NBFs - - NBF provider stats NBFt - - NBF connection table NBFu - - NBF UI frame NBFw - - NBF work item NBI - - NwlnkNb transport NBS - - general NetBIOS allocations NBSa - - address block NBSc - - connection block NBSe - - EA buffer NBSf - - FCB NBSl - - LANA block NBSn - - copy of user NCB NBSr - - registry allocations NBSx - - XNS NETONE address (connect block) NBSy - - NetBIOS address (connect block) NBSz - - NetBIOS address (listen block) NBqh - - Non-blocking queue entries used to carry the real data in the queue. NCSt - - EXIFS NC ND - ndis.sys - general NDIS allocations NDA - ndis.sys - NDIS PacketDirect tag prefix NDAa - ndis.sys - NDIS_PD_ASSOCIATION NDAb - ndis.sys - NDIS_PD_BLOCK NDAc - ndis.sys - NDIS_PD_CLIENT NDAe - ndis.sys - NDIS_PD_EC NDAf - ndis.sys - NDIS_PD_FILTER NDAg - ndis.sys - NDIS_PD_GLOBAL NDAm - ndis.sys - NDIS_PD_MEM_BLOCK NDIS_PD_SGL_BLOCK NDAn - ndis.sys - NDIS_PD_COUNTER NDAo - ndis.sys - NDIS_PD_CONFIG NDAq - ndis.sys - NDIS_PD_PLATFORM_QUEUE NDAt - ndis.sys - NDIS_PD_QUEUE_TRACKER NDDl - ndis.sys - NDIS_TAG_DBG_LOG NDMb - ndis.sys - NDIS_TAG_MAC_BLOCK NDPX - ndis.sys - NDIS Proxy allocations NDPa - ndis.sys - Apple Talk NDPb - ndis.sys - NBF NDPi - ndis.sys - NWLNKIPX NDPn - ndis.sys - NWLNKNB NDPp - ndis.sys - Packet Scheduler. NDPs - ndis.sys - NWLNKSPX NDPt - ndis.sys - TCPIP NDPw - ndis.sys - WAN_PACKET_TAG NDSD - ndis.sys - NDIS_SETUP_DEVICE_EXTENSION NDTr - ndis.sys - NDIS_TAG_TRANSFER_DATA NDam - ndis.sys - NdisAllocateMemory NDan - ndis.sys - adapter name NDar - ndis.sys - NDIS_TAG_ALLOCATED_RESOURCES NDas - ndis.sys - NDIS_TAG_ALLOC_SHARED_MEM_ASYNC NDbi - ndis.sys - NDIS_TAG_BUS_INTERFACE NDca - ndis.sys - NDIS_TAG_NET_CFG_OPS_ACL NDch - ndis.sys - NDIS_TAG_CONFIG_HANDLE NDcm - ndis.sys - NDIS_TAG_CM NDcn - ndis.sys - NDIS_TAG_CANCEL_DEVICE_NAME NDco - ndis.sys - NDIS_TAG_CO NDcs - ndis.sys - NDIS_TAG_NET_CFG_OPS_ID NDcw - ndis.sys - NDIS_TAG_PCW - NDIS Performance Counters NDd - ndis.sys - NDIS_TAG_DBG NDda - ndis.sys - NDIS_TAG_NET_CFG_DACL NDdb - ndis.sys - DMA block NDdc - ndis.sys - NDIS_TAG_DCN - Data Center Networking NDdi - ndis.sys - NDIS_TAG_IM_DEVICE_INSTANCE NDdl - ndis.sys - NDIS_TAG_DBG_L NDdp - ndis.sys - NDIS_TAG_DBG_P NDds - ndis.sys - NDIS_TAG_DBG_S NDdt - ndis.sys - NDIS_TAG_DFRD_TMR NDel - ndis.sys - NDIS debugging event log NDfa - ndis.sys - NDIS_TAG_FILTER_ADDR NDfb - ndis.sys - NDIS_TAG_LWFILTER_BLOCK NDfd - ndis.sys - NDIS_TAG_FILE_DESCRIPTOR NDfi - ndis.sys - NDIS_TAG_FILE_IMAGE NDfm - ndis.sys - NDIS_TAG_FAKE_MAC NDfn - ndis.sys - NDIS_TAG_FILE_NAME NDfv - ndis.sys - NDIS_TAG_LWFILTER_DRIVER NDif - ndis.sys - NDIS_TAG_IF NDio - ndis.sys - NDIS_TAG_IOV - IO Virtualization NDkr - ndis.sys - NDIS_TAG_NDK - Kernel Mode Network Direct (kRDMA) NDlb - ndis.sys - lookahead buffer NDlp - ndis.sys - NDIS_TAG_LOOP_PKT NDmb - ndis.sys - MAC block NDmo - ndis.sys - NDIS_TAG_M_OPEN_BLK NDmr - ndis.sys - map register entry array NDmt - ndis.sys - NDIS_TAG_MEDIA_TYPE_ARRAY NDnc - ndis.sys - NDIS_TAG_NBL_CONTEXT NDnd - ndis.sys - NDIS_TAG_POOL_NDIS NDoa - ndis.sys - NDIS_TAG_OID_ARRAY NDob - ndis.sys - open block NDoc - ndis.sys - NDIS_TAG_OPEN_CONTEXT NDof - ndis.sys - NDIS_TAG_OFFLOAD NDop - ndis.sys - NDIS_TAG_PM_PROT_OFFLOAD NDpb - ndis.sys - protocol block NDpc - ndis.sys - NDIS_TAG_PROTOCOL_CONFIGURATION NDpf - ndis.sys - NDIS_TAG_FILTER NDpk - ndis.sys - NDIS_TAG_PKT_PATTERN NDpl - ndis.sys - NDIS_TAG_PERF_LOG_ID NDpn - ndis.sys - NDIS_TAG_PARAMETER_NODE NDpo - ndis.sys - NDIS_TAG_PORT NDpp - ndis.sys - packet pool NDpr - ndis.sys - NDIS_TAG_PERIODIC_RECEIVES NDpw - ndis.sys - NDIS_TAG_WOL_PATTERN NDqo - ndis.sys - NDIS_TAG_QUERY_OBJECT_WORKITEM NDqs - ndis.sys - NDIS_TAG_QOS NDqu - ndis.sys - NDIS_TAG_QUEUE NDrc - ndis.sys - NDIS_TAG_RWL_REFCOUNT NDrd - ndis.sys - NDIS_TAG_REG_READ_DATA_BUFFER NDre - ndis.sys - NDIS_TAG_OID_REQUEST NDrf - ndis.sys - NDIS_TAG_RECEIVE_FILTER NDrl - ndis.sys - resource list NDrp - ndis.sys - NDIS_TAG_REGISTRY_PATH NDrq - ndis.sys - NDIS_TAG_Q_REQ NDrs - ndis.sys - NDIS_TAG_RSS NDrt - ndis.sys - NDIS_TAG_RST_NBL NDrw - ndis.sys - NDIS_TAG_RWLOCK NDrx - ndis.sys - NDIS debugging refcount NDsd - ndis.sys - NDIS_TAG_NET_CFG_SEC_DESC NDse - ndis.sys - NDIS_TAG_SECURITY NDsg - ndis.sys - NDIS_TAG_DOUBLE_BUFFER_PKT NDsh - ndis.sys - NDIS_TAG_SHARED_MEMORY NDsi - ndis.sys - EISA slot information NDsk - ndis.sys - NDIS debugging stacktrace NDsm - ndis.sys - Cached shared memory descriptor NDss - ndis.sys - NDIS_TAG_SS - Selective Suspend NDst - ndis.sys - NDIS_TAG_STRING NDtk - ndis.sys - NDIS_TAG_NBL_TRACKER - Lost packet diagnostics NDvm - ndis.sys - NDIS_TAG_ALLOC_MEM_VERIFY_ON NDw0 - ndis.sys - NDIS_TAG_WMI_REG_INFO NDw1 - ndis.sys - NDIS_TAG_WMI_GUID_TO_OID NDw2 - ndis.sys - NDIS_TAG_WMI_OID_SUPPORTED_LIST NDw3 - ndis.sys - NDIS_TAG_WMI_EVENT_ITEM NDwh - ndis.sys - NDIS_TAG_WRAPPER_HANDLE NDwi - ndis.sys - NDIS_TAG_WORK_ITEM NDwr - ndis.sys - NDIS_TAG_WMI_REQUEST NDwx - ndis.sys - NDIS_TAG_WOL_XLATE NDxc - ndis.sys - NDIS_TAG_POOL_XLATE Net - tcpip.sys - NetIO Generic Buffers (iBFT Table allocations) NeWQ - tcpip.sys - NetIO WorkQueue Data NEEB - newt_ndis6.sys - NEWT Emulation Bench NEFT - newt_ndis6.sys - NEWT Filter Object NEIM - newt_ndis6.sys - NEWT IM Object NEOD - newt_ndis6.sys - NEWT OID NEPK - newt_ndis6.sys - NEWT Packet NEWI - newt_ndis6.sys - NEWT Work Item Nb?? - - NetBT allocations Nf?? - nfssvr.sys - NFS (Network File System) allocations NfR? - nfsrdr.sys - NFS (Network File System) client re-director Nls - - Nls strings NlsK - nt!ex - Nls data Nmdd - - NetMeeting display driver miniport 1 MB block Nhfs - tcpip.sys - NetIO Hash Function State Data NicT - mslbfoprovider.sys - Microsoft NDIS LBFO Provider (NIC Teaming) Navl - tcpip.sys - Network Layer AVL Tree allocations NLbd - tcpip.sys - Network Layer Buffer Data NLcc - tcpip.sys - Network Layer Client Contexts NLpd - tcpip.sys - Network Layer Client Requests NLcp - tcpip.sys - Network Layer Compartments NLuh - - Network Layer Ul Handles NLap - tcpip.sys - Network Layer Netio Helper Function allocations NLNa - tcpip.sys - Network Layer Network Address Lists NMhf - netio.sys - Handle Factory pool NMRb - tcpip.sys - Network Module Registrar Bindings NMRc - tcpip.sys - Network Module Registrar Arrays NMRf - tcpip.sys - Network Module Registrar Filters NMRg - tcpip.sys - Network Module Registrar Generic Buffers NMRm - tcpip.sys - Network Module Registrar Modules NMRn - tcpip.sys - Network Module Registrar Network Protocol Identifiers Nnbl - netio.sys - NetIO NetBufferLists Nnbf - netio.sys - NetIO NetBuffers Nnnn - netio.sys - NetIO NetBuffers And NetBufferLists Nph1 - netio.sys - NetIO Protocol Header1 Data Nph2 - netio.sys - NetIO Protocol Header2 Data None - nt!Vf - Call to ExAllocatePool without any pool tag NpEv - npfs.sys - Npfs events Npf* - npfs.sys - Npfs Allocations NpFc - npfs.sys - CCB, client control block NpFC - npfs.sys - ROOT_DCB CCB NpFD - npfs.sys - DCB, directory block NpFg - npfs.sys - Global storage NpFi - npfs.sys - NPFS client info buffer. NpFn - npfs.sys - Name block NpFq - npfs.sys - Query template buffer used for directory query NpFr - npfs.sys - DATA_ENTRY records (read/write buffers) NpFs - npfs.sys - Client security context NpFw - npfs.sys - Write block NpFW - npfs.sys - Write block Npta - - NPT Addresses Nptx - - NPT Packets Nptr - - NPT Receive Completes Npts - - NPT Send sCompletes Nrsd - netio.sys - NRT security descriptor Nrtr - netio.sys - NRT record Nrtw - netio.sys - NRT worker NS?? - - Netware server allocations NSIk - nsi.dll - NSI RPC Tansactions NSIr - nsi.dll - NSI Generic Buffers NSpc - nsi.dll - NSI Proxy Contexts NSpg - nsi.dll - NSI Proxy Generic Buffers NSIc - nsi.dll - NSI Containers NMcp - nsi.dll - NSI Modules NAcc - nsi.dll - NSI Access REM NTFS Specific allocation tags Nt?? - ntfs.sys - Unrecognized NTFS tag (update base\published\pooltag.w) NtAR - ntfs.sys - NTFS_ASYNC_CACHED_READ_CONTEXT NtBA - ntfs.sys - CachedRuns - BinArray NtBM - ntfs.sys - Bitmap buffer Ntce - ntfs.sys - CLOSE_ENTRY NtCP - ntfs.sys - Temporary compression buffer NtCR - ntfs.sys - CachedRuns structure NtDM - ntfs.sys - DSM Ioctl IN/OUT array NtDt - ntfs.sys - Acquired range array temporary buffer NtEA - ntfs.sys - NTFS QueryOnCreate EA Buffer Ntf0 - ntfs.sys - General pool allocation Ntf9 - ntfs.sys - Large Temporary Buffer Ntf5 - ntfs.sys - Shared Security tracking (debug only) Ntfa - ntfs.sys - DELAYED_ALLOCATION NtfA - ntfs.sys - ALIGNED_MDL_CONTEXT Ntfb - ntfs.sys - Reserved map buffer NtfB - ntfs.sys - Bandwidth contracts allocations NtfC - ntfs.sys - CCB Ntfc - ntfs.sys - CCB_DATA Ntfd - ntfs.sys - DEALLOCATED_CLUSTERS NtfD - ntfs.sys - DEALLOCATED_RECORDS structure (variable length) NtfE - ntfs.sys - INDEX_CONTEXT Ntff - ntfs.sys - FCB_DATA NtfF - ntfs.sys - FCB_INDEX NtfI - ntfs.sys - IO_CONTEXT Ntfi - ntfs.sys - IRP_CONTEXT NtfK - ntfs.sys - KEVENT NtfsKeventLookasideList Ntfk - ntfs.sys - FILE_LOCK Ntfl - ntfs.sys - LCB NtfM - ntfs.sys - NTFS_MCB_ENTRY Ntfm - ntfs.sys - NTFS_MCB_ARRAY NtfN - ntfs.sys - FILE_RECORDS_TO_DELETE Ntfn - ntfs.sys - SCB_NONPAGED NtfsScbNonpagedLookasideList Ntfo - ntfs.sys - SCB_INDEX normalized name buffer Ntfp - ntfs.sys - COMPRESSION_CONTEXT NtfQ - ntfs.sys - QUOTA_CONTROL_BLOCK Ntfq - ntfs.sys - General Allocation with Quota NtfR - ntfs.sys - READ_AHEAD_THREAD Ntfr - ntfs.sys - ERESOURCE NtfS - ntfs.sys - SCB_INDEX Ntfs - ntfs.sys - SCB_DATA NtfT - ntfs.sys - SCB_SNAPSHOT NtfsScbSnapshotLookasideList Ntft - ntfs.sys - SCB (Prerestart) Ntfu - ntfs.sys - NTFS_MARK_UNUSED_CONTEXT NtfV - ntfs.sys - VPB Ntfv - ntfs.sys - COMPRESSION_SYNC NtfZ - ntfs.sys - POSIX_MAPPED_CLOSE_ITEM Ntfw - ntfs.sys - Workspace NtIO - ntfs.sys - NTFS IO perf NtKM - ntfs.sys - MDL for accessing KSR data NtKR - ntfs.sys - KSR_MEMORY_RUN NtLA - ntfs.sys - CachedRuns - LcnArray NtLa - ntfs.sys - CachedRuns - LengthArray NtLD - ntfs.sys - CachedRuns - DeletedLcnWindows array NtLd - ntfs.sys - CachedRuns - DeletedLengthWindows array NtMC - ntfs.sys - MAPCOUNT_LOG NtOi - ntfs.sys - OFFLOAD_IO_CONTEXT Ntop - ntfs.sys - NTFS_OPLOCK_OWNER_STACK_CAPTURE NtRB - ntfs.sys - NTFS reserved bitmap buffers Ntrk - ntfs.sys - NTFS registry key name structures Ntrs - ntfs.sys - ROLLBACK_STRUCT Ntrt - ntfs.sys - RANGETRACK_LOCAL_STRUCT NtSB - ntfs.sys - ScanEntireBItmap Eventlog Worker structure NtTc - ntfs.sys - FILE_LEVEL_TRIM_CONTEXT NtTe - ntfs.sys - NTFS Telemetry NtTf - ntfs.sys - NTFS_DISK_FLUSH_CONTEXT NtfsDiskFlushContextLookasideList NtTm - ntfs.sys - NtfsTPMapLookasideList NtTN - ntfs.sys - NTFS_STORAGE_TIER name buffer NtTo - ntfs.sys - DEVICE_MANAGE_DATA_SET_ATTRIBUTES NtfsFileOffloadLookasideList NtTp - ntfs.sys - DEVICE_MANAGE_DATA_SET_ATTRIBUTES NtfsDeviceManageDataSetAttributesLookasideList NtTR - ntfs.sys - NTFS_STORAGE_TIER NtTr - ntfs.sys - NTFS_TIER_REGION NtVB - ntfs.sys - Volsnap Bitmap buffer NtVS - ntfs.sys - FILE_SYSTEM_STATISTICS_EX NtWR - ntfs.sys - REGISTRY_WATCH_CONTEXT NtxF - ntfs.sys - FCB_NONPAGED NtfsFcbNonpagedDataLookasideList NtxI - ntfs.sys - FCB_NONPAGED_INDEX NtfsFcbNonpagedIndexLookasideList NtxM - ntfs.sys - FAST_MUTEX NtfsFastMutexNonpagedLookasideList REM NTFS tags based on source module NtFa - ntfs.sys - AllocSup.c NtFA - ntfs.sys - AttrSup.c NtFl - ntfs.sys - Clog.c NtFc - ntfs.sys - Corrupt.c NtFC - ntfs.sys - Create.c NtFD - ntfs.sys - DevioSup.c NtFd - ntfs.sys - DirCtrl.c NtFE - ntfs.sys - Ea.c NtFF - ntfs.sys - FileInfo.c NtFf - ntfs.sys - FsCtrl.c NtFH - ntfs.sys - SelfHeal.c NtFI - ntfs.sys - IndexSup.c / TxfFilterDirectoryQuery (Ccb->IndexEntry) NtFi - ntfs.sys - TxfIdSup.c NtfJ - ntfs.sys - ntfsinit.c NtFL - ntfs.sys - LogSup.c NtFM - ntfs.sys - McbSup.c NtFm - ntfs.sys - Ntfs MFT View Ref Counter Arrays NtFN - ntfs.sys - NtfsData.c NtFO - ntfs.sys - ObjIdSup.c NtFQ - ntfs.sys - QuotaSup.c NtFP - ntfs.sys - Pnp.c / ReparSup.c NtFR - ntfs.sys - RestrSup.c NtFS - ntfs.sys - SecurSup.c NtFs - ntfs.sys - StrucSup.c NtFU - ntfs.sys - usnsup.c NtFV - ntfs.sys - VerfySup.c NtFv - ntfs.sys - ViewSup.c NtFW - ntfs.sys - Write.c NtFX - ntfs.sys - NtfsBlackbox.c NtMo - ntfs.sys - mount.c NtSr - ntfs.sys - srsup.c NulB - tlnull.sys - Null TDI Buffers NulR - tlnull.sys - Null TDI Requests NulS - tlnull.sys - Null TDI Sockets NulE - tlnull.sys - Null Tl Endpoints Null - tlnull.sys - Null TL Generics NulI - tlnull.sys - Null TL Indications Nulr - tlnull.sys - Null Tl Requests NV - - nVidia video driver NvLA - - nVidia video driver NvLa - - nVidia video driver NvLC - - nVidia video driver NvLc - - nVidia video driver NvLD - - nVidia video driver NvLd - - nVidia video driver NvLE - - nVidia video driver NvLH - - nVidia video driver NvLm - - nVidia video driver NvLP - - nVidia video driver NvLp - - nVidia video driver NvLR - - nVidia video driver NvLr - - nVidia video driver NvLS - - nVidia video driver NvLs - - nVidia video driver NvLT - - nVidia video driver Nwcs - - Client Services for NetWare NwFw - - ntos\tdi\fwd ObSq - nt!ob - object security descriptors (query) ObCi - nt!ob - captured information for ObCreateObject ObCI - nt!ob - object creation lookaside list ObDi - nt!ob - object directory ObHd - nt!ob - object handle count data base ObNm - nt!ob - object names ObNM - nt!ob - name buffer per processor lookaside pointers ObRt - nt!ob - object reference stack tracing ObZn - nt!ob - object zone ObjT - nt!ob - object type objects Obtb - nt!ob - object tables via EX handle.c ObTR - nt!ob - object table ERESOURCEs Obeb - nt!ob - object tables extra bit tables via EX handle.c ObDm - nt!ob - object device map ObSc - nt!ob - Object security descriptor cache block ObSt - nt!ob - Object Manager temporary storage ObWm - nt!ob - Object Manager wait blocks ODMg - dxgkrnl.sys - Output Duplication component OHCI - - Open Host Controller Interface for USB ohci - - 1394 OHCI host controller driver Oink - uiomap.sys - Usermode IO Mapper Driver" OlmC - tcpip.sys - Offload Manager Connections OlmI - tcpip.sys - Offload Manager Interfaces Ovfl - - The internal pool tag table has overflowed - usually this is a result of nontagged allocations being made OvfL - - EXIFS FCBOVF List PaeD - - PAE top level directory allocation blocks ParC - - Parallel class driver ParL - - Parallel link driver ParP - - Parallel port driver ParV - - ParVdm driver for vdm<->parallel port communciation PciB - pci.sys - PnP pci bus enumerator Pccr - pacer.sys - PACER Filter Clone Requests Pcfc - pacer.sys - PACER Filter Contexts Pcfl - pacer.sys - PACER Flows Pcge - pacer.sys - PACER Generic Buffers (DACL, SID allocations) Pcle - pacer.sys - PACER Lines Pclt - pacer.sys - PACER Line Tables Pcna - pacer.sys - PACER Filter Network Addresses Pcnt - pacer.sys - PACER NetBufferTimes Pcop - pacer.sys - PACER Original Packet Contexts Pcpc - pacer.sys - PACER Packet Contexts Pcsb - pacer.sys - PACER Send Buffers Pcta - pacer.sys - PACER Timer Units Pctw - pacer.sys - PACER Timer Wheels Pcwc - pacer.sys - PACER WAN NetworkBufferList CTXs PcCi - - WDM audio port class adapter device object stuff PcCr - - WDM audio stuff PcDi - - WDM audio stuff PcDm - - DirectMusic MXF objects (WDM audio) PcFM - - WDM audio FM synthesizer PcFp - - WDM audio stuff PcIc - - WDM audio stuff PcIl - - WDM audio stuff PcNw - - WDM audio stuff PcPc - - WDM audio stuff PcPr - - WDM audio stuff PcSX - - WDM audio stuff PcSl - - WDM audio stuff PcSt - - WDM audio stuff PcSx - - WDM audio stuff PcUs - - WDM audio stuff Pcmc - pcmcia.sys - Pcmcia bus enumerator, general structures Pcic - - Pcmcia bus enumerator, PCIC/Cardbus controller specific structures Pcdb - - Pcmcia bus enumerator, Databook controller specific structures PdcA - pdc.sys - PDC_ACTIVATION_TAG, ACTIVATOR_CLIENT_TAG PdcC - pdc.sys - PDC_CLIENT_PORT_TAG PdcE - pdc.sys - ACTIVATOR_EVENT_TAG PdcI - pdc.sys - PDC_INCLUSION_LIST_TAG PdcM - pdc.sys - PDC_MESSAGE_TAG PdcN - pdc.sys - PDC_NOTIFICATION_TAG, NOTIFICATION_CLIENT_TAG PdcP - pdc.sys - PDC_PORT_TAG PdcR - pdc.sys - PDC_RESILIENCY_TAG, RESILIENCY_CLIENT_TAG PdcS - pdc.sys - PDC_SUSPRES_TAG PdcT - pdc.sys - PDC_TOKEN_TAG PSwt - pdc.sys - PDC_PSWT_TAG Pdcs - pdc.sys - PDC_SCENARIO_TAG SPMp - nt!po - Kernel Scenario Power Manager Policies. PepT - nt!PopPep - Default Power Engine Plugin Petw - pacer.sys - PACER ETW Pf?? - nt!pf - Pf Allocations PfAL - nt!pf - Pf Application launch event data PfAS - nt!pf - Pf Prefetch support array PfDq - nt!pf - Pf Directory query buffers PfED - nt!pf - Pf Generic event data PfEL - nt!pf - Pf Event logging buffers PfET - nt!pf - Pf Entry info tables PfFH - nt!pf - Pf RpContext FileKeyHash buckets PfFh - nt!pf - Pf Prefetch file handle cache array PfFK - nt!pf - Pf RpContext FileKeyHashEntry PfLB - nt!pf - Pf Log buffers PfMP - nt!pf - Pf Prefetch metadata buffers PfNL - nt!pf - Pf Name logging buffers PfOB - nt!pf - Pf Oplock buffers PfPB - nt!pf - Pf Pfn query buffers PfRL - nt!pf - Pf Prefetch read list PfRQ - nt!pf - Pf Prefetch request buffers PfSA - nt!pf - Pf Prefetch support array PfTD - nt!pf - Pf Trace Dump PfTt - nt!pf - Pf Translation tables PfVA - nt!pf - Pf VA prefetching buffers PfVH - nt!pf - Pf Prefetch volume handles Pfcs - pacer.sys - PACER Flow Counter Sets Pfhc - pacer.sys - PACER File Handle Contexts PFXM - nt!PoFx - Runtime Power Management Framework PcwC - nt!pcw - PCW Counter set PcwR - nt!pcw - PCW provider Registration PcwI - nt!pcw - PCW counter set Instance PcwQ - nt!pcw - PCW Query item PcwS - nt!pcw - PCW System call buffer PcwT - nt!pcw - PCW Temporary (short-lived) buffer Pgm? - - Pgm (Pragmatic General Multicast) protocol: RMCast.sys Plcp - - Cache aware pushlock list (array of puchlock addresses) Plcl - - Cache aware pushlock entry. One per processor PlMp - storport.sys - PortpReadDriverParameterEntry PlRB - storport.sys - PortAllocateRegistryBuffer storport!_PORT_REGISTRY_INFO.Buffer PmpA - portmap.sys - Portmap address list PmpC - portmap.sys - Portmap device context PmpM - portmap.sys - Portmap mapping PmpR - portmap.sys - Portmap RPCB PmAT - partmgr.sys - Partition Manager attributes table cache PmDD - partmgr.sys - Partition Manager device descriptor PmIB - partmgr.sys - Partition Manager buffer for IOCTL processing PmME - partmgr.sys - Partition Manager migration entry PmPE - partmgr.sys - Partition Manager partition entry PmPT - partmgr.sys - Partition Manager partition table cache PmRL - partmgr.sys - Partition Manager remove lock PmRP - partmgr.sys - Partition Manager registry path PmRR - partmgr.sys - Partition Manager removal relations PmSD - partmgr.sys - Partition Manager snapshot data cache PmTE - partmgr.sys - Partition Manager table entry PmVE - partmgr.sys - Partition Manager volume entry PNCH - - Power Notify Channel PNCL - - Power Notify channel list PNDP - - Power Abort Dpc Routine PNI - - Power Notify Instance PoEa - raspppoe.sys - MTAG_ADAPTER PoEb - raspppoe.sys - MTAG_BINDING PoEc - raspppoe.sys - MTAG_BUFFERPOOL PoEd - raspppoe.sys - MTAG_PACKETPOOL PoEe - raspppoe.sys - MTAG_PPPOEPACKET PoEf - raspppoe.sys - MTAG_TAPIPROV PoEg - raspppoe.sys - MTAG_LINE PoEh - raspppoe.sys - MTAG_CALL PoEi - raspppoe.sys - MTAG_HANDLETABLE PoEj - raspppoe.sys - MTAG_HANDLECB PoEk - raspppoe.sys - MTAG_TIMERQ PoEl - raspppoe.sys - MTAG_FREED PoEm - raspppoe.sys - MTAG_LLIST_WORKITEMS PoEu - raspppoe.sys - MTAG_UTIL Pool - - Pool tables, etc. PooL - - Phase 0 initialization of the executive component, paged and nonpaged small pool lookaside structures Port - - Port objects PoSL - - Power shutdown event list Pp - nt!io - PNPMGR NtPlugPlayControl PPMd - - Processor Drivers (Processor Power Management). PPMi - nt!po - Kernel Processor Power Management Idle States. PPMp - nt!po - Kernel Processor Power Management Perf States. PPMw - nt!po - Kernel Processor Power Management WMI interface. Prof - - Profile objects POWI - nt!po - Power Work Item (executive worker thread work item entry) PSwt - nt!po - Power switch structure PSTA - nt!po - Po registered system state PDss - nt!po - Po device system state PRTM - nt!po - Power runtime management PCol - nt!po - Thermal cooling requests and extensions PpsP - nt!ps - PSP_PROPERTY_TAG PpTg - mpsdrv.sys - MPSDRV PPTP GRE analyzer PpTt - mpsdrv.sys - MPSDRV PPTP TCP analyzer Prcr - processr.sys - Processr driver allocations Proc - nt!ps - Process objects Ps - nt!ps - general ps allocations Psap - nt!ps - Block used to hold a user mode APC while its queued to a thread PsAp - nt!ps - Process APC queued by user mode process PsCa - nt!ps - APC queued at thread create time. PsCr - nt!ps - Working set change record (temporary allocation) PsEx - nt!ps - Process exit APC PsFn - nt!ps - Captured image file name buffer (temporary allocation) PsHl - nt!ps - Captured list of handles to inherit in child process (temporary allocation) PsIm - nt!ps - Thread impersonation (PS_IMPERSONATE_INFORMATION, pre-Vista) PsJa - nt!ps - Job access control state Psjb - nt!ps - Job set array (temporary allocation) PsLd - nt!ps - Process LDT information blocks PsPb - nt!ps - Captured process parameter block (temporary allocation) PsQb - nt!ps - Process quota block PsRl - nt!ps - Captured memory reserve list (temporary allocation) PsSb - nt!ps - Initial process parameter block (temporary allocation) PsSd - nt!ps - Augmented thread security descriptor (temporary allocation) PsTf - nt!ps - Job object token filter Pstb - nt!ps - Process tables via EX handle.c Psta - nt!ps - Power management system state PsTp - nt!ps - Thread termination port block PsWs - nt!ps - Process working set watch array PSE3 - pse36.sys - Physical Size Extension driver Pnp0 - nt!pnp - PNPMGR rebalance resource request table Pnp1 - nt!pnp - PNPMGR IRP completion context Pnp2 - nt!pnp - PNPMGR device action request Pnp3 - nt!pnp - PNPMGR HW Profile Pnp4 - nt!pnp - PNPMGR CM API Pnp5 - nt!pnp - PNPMGR assign resources context Pnp6 - nt!pnp - PNPMGR resource request Pnp7 - nt!pnp - PNPMGR deferred notify entry Pnp8 - nt!pnp - PNPMGR async target device change notify Pnp9 - nt!pnp - PNPMGR HW profile notify PnpA - nt!pnp - PNPMGR PnpRtl Operations Pnpa - nt!pnp - PNPMGR kernel soft reboot PnpC - nt!pnp - PNPMGR target device notify PnpD - nt!pnp - PNPMGR device class notification Pnpd - nt!pnp - PNPMGR DMA Guard PnpF - nt!pnp - PNPMGR eject data PnpG - nt!pnp - PNPMGR generic PnpH - nt!pnp - PNPMGR service name PnpI - nt!pnp - PNPMGR instance path PnpJ - nt!pnp - PNPMGR device event list PnpK - nt!pnp - PNPMGR device event entry PnpL - nt!pnp - PNPMGR device event workitem PnpM - nt!pnp - PNPMGR veto buffer PnpN - nt!pnp - PNPMGR PDO array PnpO - nt!pnp - PNPMGR veto process PnpP - nt!pnp - PNPMGR veto device object PnpQ - nt!pnp - PNPMGR partition resource list PnpR - nt!pnp - PNPMGR memory bitmap Pnpr - nt!pnp - PNPMGR remove lock PnpS - nt!pnp - PNPMGR dependent info PnpT - nt!pnp - PNPMGR provider info PnpU - nt!pnp - PNPMGR async set status control PnpV - nt!pnp - PNPMGR notify entry loc PnpW - nt!pnp - PNPMGR SwDevice PnpX - nt!pnp - PNPMGR DevQuery PnpY - nt!pnp - PNPMGR usermode device notifications PnpZ - nt!pnp - PNPMGR data model PnPb - nt!pnp - PnP BIOS resource manipulation PpEB - nt!pnp - PNP_POOL_EVENT_BUFFER PpEE - nt!pnp - PNP_DEVICE_EVENT_ENTRY_TAG PpEL - nt!pnp - PNP_DEVICE_EVENT_LIST_TAG PpLg - nt!pnp - PnP last good. PpUB - nt!pnp - PNP_USER_BLOCK_TAG PpWI - nt!pnp - PNP_DEVICE_WORK_ITEM_TAG Ppcd - nt!pnp - PnP critical device database Ppcr - nt!pnp - plug-and-play critical allocations Ppdd - nt!pnp - new Plug-And-Play driver entries and IRPs Ppde - nt!pnp - routines to perform device removal PpdW - nt!pnp - PNPMGR device watchdog Ppei - nt!pnp - Eisa related code Ppen - nt!pnp - routines to perform device enumeration Ppin - nt!pnp - plug-and-play initialization Ppio - nt!pnp - plug-and-play IO system APIs PPMi - nt!po - Processor Power Manager Idle States PPMp - nt!po - Processor Power Manager Perf States PPMw - nt!po - Processor Power Manager WMI Interface Ppre - nt!pnp - resource allocation and translation Pprl - nt!pnp - routines to manipulate relations list Ppsu - nt!pnp - PNPMGR internal utility functions PPTP - - PPTP_MEMORYPOOL_TAG PPT0 - - PPTP_TDIADDR_TAG PPT1 - - PPTP_TDICONN_TAG PPT2 - - PPTP_CONNINFO_TAG PPT3 - - PPTP_ADDRINFO_TAG PPT4 - - PPTP_TIMEOUT_TAG PPT5 - - PPTP_TIMER_TAG PPT6 - - PPTP_TDICOTS_TAG PPT7 - - PPTP_WRKQUEUE_TAG PPT8 - - PPTP_SEND_CTRLDATA_TAG PPT9 - - PPTP_SEND_ACKDATA_TAG PPTa - - PPTP_SEND_DGRAMDESC_TAG PPTb - - PPTP_TDICLTS_TAG PPTc - - PPTP_RECV_CTRLDESC_TAG PPTd - - PPTP_RECV_CTRLDATA_TAG PPTe - - PPTP_RECV_DGRAMDESC_TAG PPTf - - PPTP_RECV_DGRAMDATA_TAG PPTg - - PPTP_RECVDESC_TAG PPTh - - PPTP_ENGINE_TAG PPTi - - PPTP_RECVDATA_TAG PRF? - nt!wdi - Performance Allocations PRFd - nt!wdi - Performance Diagnostics Structures PReb - nt!io - PNPMGR rebalance tracing PSC? - - Packet Scheduler (PSCHED) Tags PSC0 - - NDIS Request PSC1 - - GPC Client Vc PSC2 - - WanLink PSC3 - - Miscellaneous allocations PSC4 - - WMI PSCa - - Adapter PSCb - - CallParameters PSCc - - PipeContext PSCd - - FlowContext PSCe - - ClassMapContext PSCf - - Adapter Profile PSCg - - Component PX1 - - ndis ProviderEventLookaside p2?? - perm2dll.dll - Permedia2 display driver p2d3 - perm2dll.dll - Permedia2 display driver - d3d.c p2d6 - perm2dll.dll - Permedia2 display driver - d3ddx6.c p2de - perm2dll.dll - Permedia2 display driver - debug.c p2ds - perm2dll.dll - Permedia2 display driver - d3dstate.c p2dt - perm2dll.dll - Permedia2 display driver - d3dtxman.c p2su - perm2dll.dll - Permedia2 display driver - ddsurf.c p2en - perm2dll.dll - Permedia2 display driver - enable.c p2fi - perm2dll.dll - Permedia2 display driver - fillpath.c p2he - perm2dll.dll - Permedia2 display driver - heap.c p2hw - perm2dll.dll - Permedia2 display driver - hwinit.c p2cx - perm2dll.dll - Permedia2 display driver - p2ctxt.c p2pa - perm2dll.dll - Permedia2 display driver - palette.c p2pe - perm2dll.dll - Permedia2 display driver - permedia.c p2tx - perm2dll.dll - Permedia2 display driver - textout.c P3D? - perm3dd.dll - Permedia3 display driver - DirectDraw/3D P3G? - perm3dd.dll - Permedia3 display driver ppPT - pvhdparser.sys - Proxy Virtual Machine Storage VHD Parser Driver (parser) ppRT - pvhdparser.sys - Proxy Virtual Machine Storage VHD Parser Driver (parser) PSHD - pshed.dll - PSHED PSPi - pshed.dll - PSHED Plug-in Ppcs - pacer.sys - PACER Pipe Counter Sets Pwff - pacer.sys - PACER WFP Filters Pwmi - pacer.sys - PACER WMI notifications PX1 - ndproxy.sys - PX_EVENT_TAG PX2 - ndproxy.sys - PX_VCTABLE_TAG PX3 - ndproxy.sys - PX_ADAPTER_TAG PX4 - ndproxy.sys - PX_CLSAP_TAG PX5 - ndproxy.sys - PX_CMSAP_TAG PX6 - ndproxy.sys - PX_PARTY_TAG PX7 - ndproxy.sys - PX_COCALLPARAMS_TAG PX8 - ndproxy.sys - PX_REQUEST_TAG PX9 - ndproxy.sys - PX_PROVIDER_TAG PXa - ndproxy.sys - PX_ENUMLINE_TAG PXb - ndproxy.sys - PX_TAPILINE_TAG PXc - ndproxy.sys - PX_ENUMADDR_TAG PXd - ndproxy.sys - PX_TAPIADDR_TAG PXe - ndproxy.sys - PX_TAPICALL_TAG PXf - ndproxy.sys - PX_LINECALLINFO_TAG PXg - ndproxy.sys - PX_CMAF_TAG PXh - ndproxy.sys - PX_CLAF_TAG PXi - ndproxy.sys - PX_VC_TAG PXj - ndproxy.sys - PX_TRANSLATE_CALL_TAG PXk - ndproxy.sys - PX_TRANSLATE_SAP_TAG PXl - ndproxy.sys - PX_LINETABLE_TAG Qnam - - EXIFS Query Name Qp?? - - Generic Packet Classifier (MSGPC) Qppn - - Queued Notifications Qppi - - Pending Irp structures Qpci - - CfInfo Qpct - - Client blocks Qppa - - Pattern blocks Qphf - - HandleFactory Qpph - - PathHash Qprz - - Rhizome Qppd - - GenPatternDb Qpfd - - FragmentDb Qpcf - - ClassificationFamily Qpcd - - CfInfoData Qpcb - - ClassificationBlock Qppt - - Protocol Qpdg - - Debug QUIC Allocation tags are Qc00 through QcFF QUIC - msquic.sys - Generic QUIC allocation Qc00 - msquic.sys - QUIC Silo Qc01 - msquic.sys - QUIC connection Qc02 - msquic.sys - QUIC connection transport parameters Qc03 - msquic.sys - QUIC stream Qc04 - msquic.sys - QUIC stream buffer Qc05 - msquic.sys - QUIC sent frame metadata Qc06 - msquic.sys - QUIC datagram buffer Qc07 - msquic.sys - QUIC test code Qc08 - msquic.sys - QUIC perf code Qc09 - msquic.sys - QUIC tool code Qc0A - msquic.sys - QUIC Worker Qc0B - msquic.sys - QUIC Listener Qc0C - msquic.sys - QUIC CID Qc0D - msquic.sys - QUIC CID Hash Qc0E - msquic.sys - QUIC CID List Entry Qc0F - msquic.sys - QUIC CID Prefix Qc10 - msquic.sys - QUIC ALPN Qc11 - msquic.sys - QUIC Range Qc12 - msquic.sys - QUIC Send Buffer Qc13 - msquic.sys - QUIC Recv Buffer Qc14 - msquic.sys - QUIC Timer Wheel Qc15 - msquic.sys - QUIC Registration Qc16 - msquic.sys - QUIC configuration Qc17 - msquic.sys - QUIC Core binding Qc18 - msquic.sys - QUIC API Table Qc19 - msquic.sys - QUIC Per Proc Context Qc1A - msquic.sys - QUIC Platform Send Context Qc1B - msquic.sys - QUIC Platform TLS ACH Context Qc1C - msquic.sys - QUIC Platform TLS SNI Qc1D - msquic.sys - QUIC Platform TLS Principal Qc1E - msquic.sys - QUIC Platform TLS Context Qc1F - msquic.sys - QUIC Platform TLS Transport Parameters Qc20 - msquic.sys - QUIC Platform TLS Resumption Buffer Qc21 - msquic.sys - QUIC Platform TLS Sec Config Qc22 - msquic.sys - QUIC Platform TLS Packet Key Qc23 - msquic.sys - QUIC Platform TLS Key Qc24 - msquic.sys - QUIC Platform TLS HP Key Qc25 - msquic.sys - QUIC Platform TLS Hash Qc26 - msquic.sys - QUIC Platform TLS Extra Data Qc27 - msquic.sys - QUIC temporary alloc Qc28 - msquic.sys - QUIC Platform temporary alloc Qc29 - msquic.sys - QUIC Platform Processor info Qc2A - msquic.sys - QUIC Platform generic Qc2B - msquic.sys - QUIC Platform datapath Qc2C - msquic.sys - QUIC Platform datapath binding Qc2D - msquic.sys - QUIC Platform storage Qc2E - msquic.sys - QUIC Platform hashtable Qc2F - msquic.sys - QUIC Platform hashtable member lists Qc30 - msquic.sys - QUIC Lookup Hash Table Qc31 - msquic.sys - QUIC Remote Hash Entry Qc32 - msquic.sys - QUIC Server Name Qc33 - msquic.sys - QUIC App Resumption Data Qc34 - msquic.sys - QUIC Initial Token Qc35 - msquic.sys - QUIC Close Reason Qc36 - msquic.sys - QUIC Crypto Server Ticket Buffer Qc37 - msquic.sys - QUIC Crypto Client Ticket Buffer Qc38 - msquic.sys - QUIC Crypto Resumption Ticket Qc39 - msquic.sys - QUIC Tls Buffer Qc3A - msquic.sys - QUIC Send Request Qc3B - msquic.sys - QUIC API Context Qc3C - msquic.sys - QUIC Stateless Context Qc3D - msquic.sys - QUIC Operation Qc3E - msquic.sys - QUIC Event QuU2 - mpsdrv.sys - MPSDRV upcall response RAWb - nt!RAW - RAW file system buffer Ra12 - storport.sys - INQUIRY_TAG RaAM - storport.sys - MAPPED_ADDRESS_TAG RaCD - storport.sys - CRASHDUMP_TAG RaCT - storport.sys - CONCURRENT_TOKEN_TAG RaDI - storport.sys - ID_TAG RaDf - storport.sys - DEFERRED_ITEM_TAG RaDS - storport.sys - STRING_TAG RaDR - storport.sys - DEVICE_RELATIONS_TAG RaDr - storport.sys - DPC_REDIRECTION_TAG RaHI - storport.sys - HWINIT_TAG RaME - storport.sys - MINIPORT_EXT_TAG RaPC - storport.sys - PORTCFG_TAG RaPD - storport.sys - PORT_DATA_TAG RaPL - storport.sys - PENDING_LIST_TAG RaQT - storport.sys - QUERY_TEXT_TAG RaRm - storport.sys - REMLOCK_TAG RaRL - storport.sys - RESOURCE_LIST_TAG RaSr - storport.sys - SRB_TAG RaSE - storport.sys - SRB_EXTENSION_TAG RaTM - storport.sys - TAG_MAP_TAG RaXr - storport.sys - XRB_TAG RaUE - storport.sys - UNIT_EXT_TAG RaSN - storport.sys - SENSE_TAG RaMW - storport.sys - WMI_EVENT_TAG RaRl - storport.sys - REPORT_LUNS_TAG RaSI - storport.sys - SENSE_INFO_TAG RaSR - storport.sys - RESOURCE_TAG RaAE - storport.sys - ADAPTER_EXT_TAG RaVM - storport.sys - VM_BUSES_TAG RaTS - storport.sys - TARGET_RESCAN_TAG RaWI - storport.sys - WORK_ITEM_TAG RaAT - storport.sys - ADDITIONAL_TIMER_TAG RaPO - storport.sys - POFX_TAG RaPW - storport.sys - POWER_TAG RaIB - storport.sys - IRP_BUFFER_TAG RaPQ - storport.sys - PENDING_QUEUE_TAG RaTe - storport.sys - TELEMETRY_TAG RaSH - storport.sys - SHIM_TAG RaCE - storport.sys - COMMAND_EFFECTS_TAG RaCT - storport.sys - PORT_CONTEXT_TAG RaUL - storport.sys - UNIT_LIST_TAG RaZR - storport.sys - ZONE_IO_GROUP_TAG RaCr - storport.sys - CRYPTO_TAG RaET - storport.sys - ETW_TAG RaST - storport.sys - SMART_TAG RaRW - storport.sys - REGISTRY_WATCH_TAG RaWH - storport.sys - WHEA_TAG RaNP - storport.sys - NPEM_TAG RaOP - storport.sys - OPERATION_TAG RaAC - storport.sys - ACPI_TAG RaDQ - storport.sys - DFX_QUEUE_TAG RaGA - storport.sys - GATEWAY_TAG RaCI - storport.sys - NVME_CTRL_IDENTIFY_TAG RaNI - storport.sys - NVME_NS_IDENTIFY_TAG RaNC - storport.sys - NVME_CONFIG_TAG RaEt - storport.sys - ENUM_TAG RaMF - storport.sys - MFND_TAG RaRE - storport.sys - RESET_TAG RaTC - storport.sys - TCG_TAG RaNV - storport.sys - NVME_ADAPTER_TAG RaNF - storport.sys - NVMEOF_TAG RaCR - storport.sys - NVME_CONTROLLER_TAG RaDA - tcpip.sys - Raw Socket Discretionary ACLs RaEW - tcpip.sys - Raw Socket Endpoint Work Queue Contexts RaMI - tcpip.sys - Raw Socket Message Indication Tags RaPM - tcpip.sys - Raw Socket Partial Memory Descriptor List Tag RaSM - tcpip.sys - Raw Socket Send Messages Requests RaSL - tcpip.sys - Raw Socket Send Message Lists RawE - tcpip.sys - Raw Socket Endpoints RawN - tcpip.sys - Raw Socket Nsi RB?? - - RedBook Filter Driver, static allocations RBEv - - RedBook - Thread Events RBRl - - RedBook - Remove lock RBRg - - RedBook - driverExtension->RegistryPath RBSe - - RedBook - Serialization tracking for checked builds RBWa - - RedBook - Wait block for system thread rb?? - - RedBook Filter Driver, dynamic allocations rbBu - - RedBook - Buffer for read/stream rbIr - - RedBook - Irp for read/stream rbIp - - RedBook - Irp pointer block rbMd - - RedBook - Mdl for read/stream rbMp - - RedBook - Mdl pointer block rbRc - - RedBook - Read completion context rbRx - - RedBook - Read Xtra info rbSc - - RedBook - Stream completion context rbSx - - RedBook - Stream Xtra info rbTo - - RedBook - Cached table of contents Rcp? - sacdrv.sys - SAC Driver (Headless) RcpA - sacdrv.sys - Internal memory mgr alloc block RcpI - sacdrv.sys - Internal memory mgr initial heap block RcpS - sacdrv.sys - Security related block RDPD - rdpdr.sys - Device list object ReEv - - Resource Event ReSe - - Resource Semaphore ReTa - - Resource Extended Table ReTr - - Per ETHREAD EXECUTIVE Resource tracking. REM ReFS Specific allocation tags ReAR - refs.sys - Refs Async Cached Read allocation Reai - refs.sys - RefsInsertStreamAttributeLookasideList Ref0 - refs.sys - General pool allocation Ref9 - refs.sys - Large Temporary Buffer RefB - refs.sys - RefsGetSfioReservation Refb - refs.sys - RESERVE_POOL_TAG RefC - refs.sys - CCB Refc - refs.sys - CCB_DATA Refd - refs.sys - DEALLOCATED_CLUSTERS RefD - refs.sys - DEALLOCATED_RECORDS RefE - refs.sys - INDEX_CONTEXT Reff - refs.sys - FCB_DATA RefF - refs.sys - FCB_INDEX RefI - refs.sys - IO_CONTEXT Refi - refs.sys - IRP_CONTEXT RefK - refs.sys - KEVENT Refk - refs.sys - FILE_LOCK Refl - refs.sys - LCB ReFm - refs.sys - MAP_CONTEXT RefsMapContextLookasideList RefN - refs.sys - NUKEM Refn - refs.sys - SCB_NONPAGED Refo - refs.sys - SCB_INDEX normalized named buffer Refp - refs.sys - COMPRESSION_CONTEXT RefsCompressCtxLookasideList Refq - refs.sys - General Allocation with Quota RefR - refs.sys - READ_AHEAD_THREAD Refr - refs.sys - ERESOURCE RefS - refs.sys - SCB_INDEX Refs - refs.sys - SCB_DATA RefH - refs.sys - SCB_SNAPSHOT Reft - refs.sys - SCB (Prerestart) Refu - refs.sys - NTFS_MARK_UNUSED_CONTEXT RefV - refs.sys - VPB Refv - refs.sys - COMPRESSION_SYNC Refw - refs.sys - Workspace Refx - refs.sys - General Allocation Ref? - refs.sys - Unkown allocation ReIO - refs.sys - ReFS IO perf Rers - refs.sys - ROLLBACK_STRUCT RefsRollbackStructLookasideList ReTc - refs.sys - FILE_LEVEL_TRIM_CONTEXT ReTm - refs.sys - DEVICE_MANAGE_DATA_SET_ATTRIBUTES RefsDeviceManageDataSetAttributesLookasideList ReTo - refs.sys - DEVICE_MANAGE_DATA_SET_ATTRIBUTES RefsFileOffloadLookasideList ReTe - refs.sys - ReFS Telemetry Redf - refs.sys - REFS_DISK_FLUSH_CONTEXT allocations ReF_ - refs.sys - FILE_REFERENCE in RefsInsertDebugInfoIrpImplementation ReFT - refs.sys - Stack trace ReRc - refs.sys - Read copy context RKsr - refs.sys - REFS_KSR_POOLTAG REM ReFS tags based on source module ReFa - refs.sys - AllocSup.c ReFA - refs.sys - AttrHelpers.c ReFC - refs.sys - Create.c ReFD - refs.sys - DevioSup.c ReFd - refs.sys - DirCtrl.c ReFE - refs.sys - Ea.c ReFF - refs.sys - FileInfo.c ReFf - refs.sys - FsCtrl.c ReFH - refs.sys - SelfHeal.c RefJ - refs.sys - NtfsInit.c ReFL - refs.sys - TransSup.c ReFN - refs.sys - NtfsData.c ReFP - refs.sys - ReparSup.c ReFS - refs.sys - SecurSup.c ReFs - refs.sys - StrucSup.c ReFU - refs.sys - usnsup.c ReFV - refs.sys - VerfySup.c ReFv - refs.sys - ViewSup.c ReFW - refs.sys - Write.c ReMo - refs.sys - Mount.c ReF? - refs.sys - Unknown ReFS source module RefT - - Bluetooth reference tracking Rf?? - - Bluetooth RFCOMM TDI driver RfAD - rfcomm.sys - RFCOMM Address RfBB - rfcomm.sys - RFCOMM BRB RfBT - rfcomm.sys - RFCOMM (bthport) RfCB - rfcomm.sys - RCOMMM RfCH - rfcomm.sys - RFCOMM channel RfCN - rfcomm.sys - RFCOMM connect RfDA - rfcomm.sys - RFCOMM data RfFR - rfcomm.sys - RFCOMM frame RfRX - rfcomm.sys - RFCOMM receive RfPP - rfcomm.sys - RFCOMM pnp RfWR - rfcomm.sys - RFCOMM worker RhHi - tcpip.sys - Reference History Pool Rind - tcpip.sys - Raw Socket Receive Indications RKRW - mpsdrv.sys - MPSDRV work item RTLF - mpsdrv.sys - MPSDRV filter RLli - FsLib - FsLib Nonopaque Range lock entry RLin - FsLib - FsLib Range lock entry Rtrc - FsLib - FsLib Allocations in RangeTrack.c RmPt - netio.sys - Rtl Mapping Page Table Entries Rnm - rndismp.sys - RNDIS MP driver generic alloc Rnms - rndismp.sys - RNDIS MP driver send frame Rnmr - rndismp.sys - RNDIS MP driver receive frame Rnmt - rndismp.sys - RNDIS MP driver timer RpcL - msrpc.sys - debugging log data - present on checked builds only RpcM - msrpc.sys - all msrpc.sys allocations not covered elsewhere Rpcr - msrpc.sys - not currently used RRle - - RTL_RANGE_LIST_ENTRY_TAG RRlm - - RTL_RANGE_LIST_MISC_TAG RtPi - - Temp allocation for product type key Rpcl - msrpc.sys - MSRpc memory logging - checked build only Rpcm - msrpc.sys - MSRpc memory allocations Rpcr - msrpc.sys - MSRpc resources Rpcs - msrpc.sys - Memory shared b/n MSRpc and caller RPrt - rstorprt.sys - Remote Storage Port Driver Rqrv - - Registry query buffer RS?? - - Remote Storage RSFS - - Recall Queue RSFN - - File Name RSSE - - Security info RSWQ - - Work Queue RSQI - - Queue info RSLT - - Long term data RSIO - - Ioctl Queue RSFO - - File Obj queue RSVO - - Validate Queue RSER - - Error log data RtlT - nt!rtl - Temporary RTL allocation RWan - rawwan.sys - Raw WAN driver R300 - - ATI video driver RX00 - - ATI video driver Rx?? - rdbss.sys - RDBSS allocations RxSc - rdbss.sys - RDBSS SrvCall RxNr - rdbss.sys - RDBSS NetRoot RxVn - rdbss.sys - RDBSS VNetRoot RxLv - rdbss.sys - RDBSS Logical View RxFc - rdbss.sys - RDBSS FCB RxSo - rdbss.sys - RDBSS SrvOpen RxFx - rdbss.sys - RDBSS fobx RxNf - rdbss.sys - RDBSS non paged FCB RxWq - rdbss.sys - RDBSS work queue RxBm - rdbss.sys - RDBSS buffering manager RxCo - rdbss.sys - RDBSS construction context RxMs - rdbss.sys - RDBSS miscellaneous RxM1 - rdbss.sys - RDBSS VNetRoot name RxM2 - rdbss.sys - RDBSS canonical name RxM3 - rdbss.sys - RDBSS querypath name RxM4 - rdbss.sys - RDBSS treeconnect name RxM5 - rdbss.sys - RDBSS reparse buffer name RxM9 - rdbss.sys - RDBSS cloned unicode string RxIr - rdbss.sys - RDBSS RxContext RxTl - rdbss.sys - RDBSS toplevel IRP RxMx - rdbss.sys - RDBSS mini-rdr RxNc - rdbss.sys - RDBSS name cache RxSy - rdbss.sys - RDBSS symlink RxCr - rdbss.sys - RDBSS credential RxEc - rdbss.sys - RDBSS ECP RxCt - mrxsmb.sys - RXCE transport RxCa - mrxsmb.sys - RXCE address RxCc - mrxsmb.sys - RXCE connection RxCv - mrxsmb.sys - RXCE VcEndpoint RxCd - mrxsmb.sys - RXCE TDI S3 - - S3 video driver SAad - srvnet.sys - SrvAdmin buffer SBad - - bad block simulator - simbad.c sbp2 - - Sbp2 1394 storage port driver SC?? - - Smart card driver tags SCLb - - Smart card driver library SCB8 - - Bull CP8 Transac serial reader SCB3 - - Bull SmarTlp PnP SCS4 - - SCM Microsystems pcmcia reader SCl0 - - Litronic 220 Sc?? - - Mass storage driver tags ScB? - classpnp.sys - ClassPnP misc allocations ScB1 - classpnp.sys - Query registry parameters ScB2 - classpnp.sys - Registry path ScB4 - classpnp.sys - Storage descriptor header ScB5 - classpnp.sys - FDO relations ScC? - classpnp.sys - ClassPnP misc allocations ScC1 - classpnp.sys - Registry path buffer ScC2 - classpnp.sys - PDO relations ScC6 - classpnp.sys - START_UNIT completion context ScC7 - classpnp.sys - Sense info buffer ScC8 - classpnp.sys - Registry value name ScC9 - classpnp.sys - Device Control SRB ScC? - cdrom.sys - CdRom ScCA - cdrom.sys - Autorun disable functionality ScCa - cdrom.sys - Media change detection ScSB - cdrom.sys - Scratch buffer (usually 64k) ScCC - cdrom.sys - Ioctl GET_CONFIGURATION ScCc - cdrom.sys - Context of completion routine ScCD - cdrom.sys - Adaptor & Device descriptor buffer ScCd - cdrom.sys - Disc information ScCe - cdrom.sys - Request sync event ScCF - cdrom.sys - Feature descriptor ScCG - cdrom.sys - GESN buffer ScCI - cdrom.sys - Sense info buffers ScCi - cdrom.sys - Cached inquiry buffer ScCM - cdrom.sys - Mode data buffer SCCO - cdrom.sys - Set stream buffer ScCo - cdrom.sys - Device Notification buffer ScCp - cdrom.sys - Play active checks ScCr - cdrom.sys - Registry string ScCS - cdrom.sys - Srb allocation ScCs - cdrom.sys - Assorted string data ScCU - cdrom.sys - Update capacity path ScCu - cdrom.sys - Read buffer for dvd key ScCV - cdrom.sys - Read buffer for dvd/rpc2 check ScCv - cdrom.sys - Read buffer for rpc2 check ScCX - cdrom.sys - Security descriptor ScD? - - Disk ScD - - generic tag ScDa - - SMART ScDA - - Info Exceptions ScDC - - disable cache paths ScDb - classpnp.sys - ClassPnP debug globals buffer ScDc - - disk allocated completion c ScDG - - disk geometry buffer ScDg - - update disk geometry paths ScDI - - sense info buffers ScDp - - pnp ids ScDM - - mode data buffer ScDM - - mbr checksum code ScDN - - disk name code ScDP - - read capacity buffer ScDp - - disk partition lists ScDS - - srb allocation ScDs - - start device paths ScDU - - update capacity path ScDW - - work-item context ScMC - - medium changer allocations ScIO - classpnp.sys - ClassPnP device control ScL? - classpnp.sys - Classpnp ScLA - classpnp.sys - allocation to check for autorun disable ScLF - classpnp.sys - File Object Extension ScLc - classpnp.sys - Cache filters ScLf - classpnp.sys - Fault prediction ScLm - classpnp.sys - Mount ScLM - classpnp.sys - Media Change Detection ScLq - classpnp.sys - Release queue ScLw - classpnp.sys - WMI ScLW - classpnp.sys - Power ScNo - classpnp.sys - ClassPnP notification ScP? - - Scsiport ScPa - - Hold registry data ScPA - - Access Ranges ScPb - - Get Bus Dat Holder ScPB - - Queuetag BitMap ScPc - - Fake common buffer ScPC - - reset bus code ScPd - - Pnp id strings ScPD - - SRB_DATA allocations ScPE - - Scatter gather lists ScPG - - Global memory ScPh - - HwDevice Ext ScPi - - Sense Info ScPI - - Init data chain ScPl - - remove lock tracking ScPL - - scatter gather lists ScPm - - address mapping lists ScPM - - scatter gather lists ScPp - - device & adapter enable ScpP - - scsi PortConfig copies ScPq - - inquiry data ScPQ - - request sense ScPr - - resource list copy ScPS - - registry allocations ScPt - - legacy request rerouting ScPT - - interface mapping ScPu - - device relation structs ScPv - - KEVENT ScPV - - Device map allocations ScPw - - Wmi Events ScPW - - Wmi Requests ScPx - - Report Luns ScPY - - Report Targets ScPZ - - Device name buffer ScR? - - Partition Manager ScRi - - IOCTL buffer ScRp - - Partition entry ScRr - - Remove lock ScRt - - Table entry ScRv - - Dependant volume relations lists ScRV - - Volume entry ScRw - - Power mgmt private work item ScS2 - classpnp.sys - Sense interpretation data ScsC - - non-pnp SCSI CdRom ScsD - - non-pnp SCSI Disk ScsH - - non-pnp SCSI from class.h (class2) ScsI - - non-pnp SCSI port internal ScsL - - non-pnp SCSI class.c driver allocations ScsP - - non-pnp SCSI port.c Scs$ - - Tag for pnp class driver's SRB lookaside list ScUn - - Default Tag for pnp class driver allocations ScV? - - Dvd functionality in cdrom.sys ScVk - - read buffer for DVD keys ScVK - - write buffer for DVD keys ScVS - - buffer for reads of DVD on-disk structures ScWs - classpnp.sys - Working set SdCc - - ObsSecurityDescriptorCache / SECURITY_DESCRIPTOR_CACHE_ENTRIES Sdba - - Application compatibility Sdb* allocations Sdp? - - Bluetooth SDP functionality in BTHPORT.sys SdpC - bthport.sys - Bluetooth SDP client connection SdpD - bthport.sys - Bluetooth SDP database SdpI - bthport.sys - Bluetooth port driver (SDP) SD - afsmbdirect.sys - SMB Direct allocations SDa - afsmbdirect.sys - SMB Direct socket objects SDb - afsmbdirect.sys - SMB Direct adapter objects SDc - afsmbdirect.sys - SMB Direct MR/LAM buffers SDd - afsmbdirect.sys - SMB Direct connect event contexts/accept workers SDe - afsmbdirect.sys - SMB Direct large receive/reassembly buffers SDf - afsmbdirect.sys - SMB Direct LAM objects SDg - afsmbdirect.sys - SMB Direct data transfer packet buffers SDh - afsmbdirect.sys - SMB Direct FRMR objects SDi - afsmbdirect.sys - SMB Direct buffer registrations SDj - afsmbdirect.sys - SMB Direct SQ work requests SDk - afsmbdirect.sys - SMB Direct operation SDl - afsmbdirect.sys - SMB Direct private data associated with inbound connection requests SDm - afsmbdirect.sys - SMB Direct socket config objects SDn - afsmbdirect.sys - SMB Direct per-processor performance counters SDo - afsmbdirect.sys - SMB Direct connect worker objects SDp - afsmbdirect.sys - SMB Direct bitmap objects SDq - afsmbdirect.sys - SMB Direct adapter alias strings SDr - afsmbdirect.sys - SMB Direct listener objects SDs - afsmbdirect.sys - SMB Direct socket address block objects SDt - afsmbdirect.sys - SMB Direct NUMA node objects SDu - afsmbdirect.sys - SMB Direct packet header buffer objects Sd - smbdirect.sys - SMB Direct allocations Sda - smbdirect.sys - SMB Direct socket objects Sdb - smbdirect.sys - SMB Direct adapter objects Sdc - smbdirect.sys - SMB Direct MR/LAM buffers Sdd - smbdirect.sys - SMB Direct connect event contexts/accept workers Sde - smbdirect.sys - SMB Direct large receive/reassembly buffers Sdf - smbdirect.sys - SMB Direct LAM objects Sdg - smbdirect.sys - SMB Direct data transfer packet buffers Sdh - smbdirect.sys - SMB Direct FRMR objects Sdi - smbdirect.sys - SMB Direct buffer registrations Sdj - smbdirect.sys - SMB Direct SQ work requests Sdk - smbdirect.sys - SMB Direct operation Sdl - smbdirect.sys - SMB Direct private data associated with inbound connection requests Sdm - smbdirect.sys - SMB Direct socket config objects Sdn - smbdirect.sys - SMB Direct per-processor performance counters Sdo - smbdirect.sys - SMB Direct connect worker objects Sdp - smbdirect.sys - SMB Direct bitmap objects Sdq - smbdirect.sys - SMB Direct adapter alias strings Sdr - smbdirect.sys - SMB Direct listener objects Sds - smbdirect.sys - SMB Direct socket address block objects Sdt - smbdirect.sys - SMB Direct NUMA node objects Sdu - smbdirect.sys - SMB Direct packet header buffer objects Se - nt!se - General security allocations SeAc - nt!se - Security ACL SeAi - nt!se - Security Audit Work Item SeAk - nt!se - Security Account Name SeAo - nt!se - Security Attributes and Operations SeAp - nt!se - Security Audit Parameter Record SeAt - nt!se - Security Attributes SeCL - nt!se - Security CONTEXT_TAG SeDb - nt!se - Temp directory query buffer to delete logon session symbolic links SeDt - nt!se - Security Global Singleton attributes table SeFS - nt!se - Security File System Notify Context SeGa - nt!se - Granted Access allocations SeHa - nt!se - Security Handle Array SeHn - nt!se - AppContainer Handles SeIf - nt!se - Security Image Filename SeLa - nt!se - Security Learning Mode ACLs SeLs - nt!se - Security Logon Session SeLu - nt!se - Security LUID and Attributes array SeLS - nt!se - Security Logon Session tracking array SeLw - nt!se - Security LSA Work Item SeOI - nt!se - Security Learning Mode Object Information SeOn - nt!se - Security Captured Object Name information SeON - nt!se - Security Learning Mode Object Name SeOp - nt!se - Security Operation SeOT - nt!se - Security Learning Mode Object Type SeOt - nt!se - Captured object type array, used by access check SePa - nt!se - Process audit image names and captured policy structures SePh - nt!se - Dummy image page hash structure, used when CI is disabled SePr - nt!se - Security Privilege Set SeRO - nt!se - Learning Mode Root Object SeSA - nt!se - Security CAPE Staged Access Array SeSa - nt!se - Security SID and Attributes SeSb - nt!se - Security Secure Boot SeSc - nt!se - Captured Security Descriptor SeSd - nt!se - Security Descriptor SeSi - nt!se - Security SID SeSp - nt!se - Scoped Policy SeSs - nt!se - Shared Sids SeSv - nt!se - Security SID values block SeTa - nt!se - Security Temporary Array SeTd - nt!se - Security Token dynamic part SeTI - ksecdd.sys - Security TargetInfo SeTl - nt!se - Security Token Lock SeTn - nt!se - Security Captured Type Name information SeUs - nt!se - Security Captured Unicode string Sect - - Section objects Sema - - Semaphore objects Senm - - Serenum (RS-232 serial bus enumerator) SimB - - Simbad (bad sector simulation driver) allocations SIfs - - Default tag for user's of ntsrv.h sidg - - GDI spooler events Sis - - Single Instance Store (dd\sis\filter) SisB - - SIS per file object break event SisC - - SIS common store file object SisF - - SIS per file object SisL - - SIS per link object SisS - - SIS SCB Setp - - SETUPDD SpMemAlloc calls SMgk - vmsharedmemoryguestkernel.lib - Virtual Machine Shared Memory Kernel Mode Guest Library SMhk - vmsharedmemoryhostkernel.lib - Virtual Machine Shared Memory Kernel Mode Host Library SRdm - scsirdma.sys - Infiniband SRP driver StCc - netio.sys - WFP stream inspection call context StDa - netio.sys - WFP stream inspection data StFc - netio.sys - WFP stream filter conditions StCx - netio.sys - WFP stream internal callout context Stdq - netio.sys - WFP stream DPC queue SV?? - - Synthetic Video Driver SVXD - synvidxd.dll - WDDM Synthetic Video Display Driver SVXM - synvidxm.sys - WDDM Synthetic Video Miniport Driver SVid - synthvid.sys - LDDM Synthetic Video Miniport Driver SW?? - - Software Bus Enumerator SWbi - - bus ID SWbr - - bus reference SWda - - POOLTAG_DEVICE_ASSOCIATION SWdn - - device name SWdr - - device reference SWdr - - POOLTAG_DEVICE_DRIVER_REGISTRY SWfd - - POOLTAG_DEVICE_FDOEXTENSION SWid - - device ID SWii - - instance ID SWip - - POOLTAG_DEVICE_INTERFACEPATH SWki - - key information SWpd - - POOLTAG_DEVICE_PDOEXTENSION SWre - - relations SWrp - - reparse string SWrs - - reference string Sm?? - mrxsmb.sys - SMB miniredirector allocations SmCe - mrxsmb.sys - SMB connection object SmXc - mrxsmb.sys - SMB exchange SmBf - mrxsmb.sys - SMB exchange buffer SmKy - mrxsmb.sys - SMB compounding key SmMs - mrxsmb.sys - SMB miscellaneous SmTp - mrxsmb.sys - SMB transport SmVc - mrxsmb.sys - SMB VC endpoint SmDg - mrxsmb.sys - SMB datagram endpoint SmWi - mrxsmb.sys - SMB sequence window SmFi - mrxsmb.sys - SMB file SmTh - mrxsmb.sys - SMB thunk SmSh - mrxsmb.sys - SMB shadow file (fast loopback) SmTd - mrxsmb.sys - SMB TDI notify SmDc - mrxsmb.sys - SMB directory cache SmMm - mrxsmb.sys - SMB mm allocated structures. SmAd - mrxsmb10.sys - SMB1 session setup/admin exchange SmRw - mrxsmb10.sys - SMB1 read/write path SmTr - mrxsmb10.sys - SMB1 transact exchange SmRb - mrxsmb10.sys - SMB1 remote boot SmFc - mrxsmb10.sys - SMB1 fsctl structures (special build only) SmDc - mrxsmb10.sys - SMB1 dir query buffer (special build only) SmPi - mrxsmb10.sys - SMB1 pipeinfo buffer (special build only) SmDO - mrxsmb10.sys - SMB1 deferred open context (special build only) SmQP - mrxsmb10.sys - SMB1 params for directory query transact (special build only) SmVr - mrxsmb10.sys - SMB1 VNetroot (special build only) SmSr - mrxsmb10.sys - SMB1 Server (special build only) SmSe - mrxsmb10.sys - SMB1 Session (special build only) SmNr - mrxsmb10.sys - SMB1 NetRoot (special build only) SmMa - mrxsmb10.sys - SMB1 mid atlas (special build only) SmMt - mrxsmb10.sys - SMB1 mailslot buffer (special build only) SmEc - mrxsmb10.sys - SMB1 echo buffer (special build only) SmKs - mrxsmb10.sys - SMB1 Kerberos blob (special build only) sm?? - nt!store or rdyboost.sys - ReadyBoost allocations smCR - nt!store or rdyboost.sys - ReadyBoost encryption allocation smMD - nt!store or rdyboost.sys - ReadyBoost store stats MDL smWi - nt!store or rdyboost.sys - ReadyBoost various work items smSt - nt!store or rdyboost.sys - ReadyBoost various store allocations smBt - nt!store or rdyboost.sys - ReadyBoost various B+Tree allocations smXt - nt!store or rdyboost.sys - ReadyBoost store extents array smAr - nt!store or rdyboost.sys - ReadyBoost generic array allocation smIt - nt!store or rdyboost.sys - ReadyBoost store ETA timers smRg - nt!store or rdyboost.sys - ReadyBoost in-memory store region array smET - nt!store or rdyboost.sys - ReadyBoost ETA check work item smWd - nt!store or rdyboost.sys - ReadyBoost store contents rundown work item smNp - nt!store or rdyboost.sys - ReadyBoost store node pool allocations smDt - nt!store or rdyboost.sys - ReadyBoost store debug trace buffer smDa - nt!store - ReadyBoost cache file DACL smDS - nt!store - ReadyBoost cache file SID smLb - nt!store - ReadyBoost virtual store manager log buffer smCa - nt!store - ReadyBoost cache smEK - nt!store - ReadyBoost encryption key smEd - nt!store - ReadyBoost virtual store manager key descriptor allocation for logging smAc - nt!store - ReadyBoost device arrival context smFh - nt!store - ReadyBoost cache file header smFp - nt!store - ReadyBoost virtual forward progress entry smR? - nt!store - ReadyBoost virtual forward progress resources smKG - nt!store - ReadyBoost encryption key registry path buffer smms - nt!store - ReadyBoost virtual store memory monitor context smCr - nt!store - ReadyBoost store region bitmap smMd - rdyboost.sys - ReadyBoost MDL allocation smMb - rdyboost.sys - ReadyBoost MDL buffer smBP - rdyboost.sys - ReadyBoot boot plan buffer smBD - rdyboost.sys - ReadyBoot decompressed boot plan buffer smBX - rdyboost.sys - ReadyBoot boot plan decompression workspace buffer smMR - rdyboost.sys - ReadyBoot multi-read ranges smRW - rdyboost.sys - ReadyBoot read-after-write ranges smPr - rdyboost.sys - ReadyBoot population ranges smPi - rdyboost.sys - ReadyBoot population ranges index smPl - rdyboost.sys - ReadyBoot pended IRP lists smRT - rdyboost.sys - ReadyBoot thread params smRS - rdyboost.sys - ReadyBoot split IO allocations smTi - rdyboost.sys - ReadyBoost debug IO trace buffer smPc - rdyboost.sys - ReadyBoost persist log context smPb - rdyboost.sys - ReadyBoost persist log buffer smPm - rdyboost.sys - ReadyBoost persist partial MDL buffer smBR - rdyboost.sys - ReadyBoost volume ranges array smBr - rdyboost.sys - ReadyBoost volume range smVc - rdyboost.sys - ReadyBoost read verification buffer smHB - rdyboost.sys - ReadyBoost Hybrid Drive command buffer SPX - - Nwlnkspx transport SQOS - - Security quality of service in IO SpXX - spaceport.sys - Spaceport generic SpXl - spaceport.sys - Spaceport log SpXp - spaceport.sys - Spaceport parity context SpXr - spaceport.sys - spaceport repair SpXs - spaceport.sys - spaceport parity schedule SpXb - spaceport.sys - spaceport slab SpXa - spaceport.sys - spaceport sparse array SpIc - spaceport.sys - spaceport IO cache SpIl - spaceport.sys - spaceport IO column SpIC - spaceport.sys - spaceport IO counters SpId - spaceport.sys - spaceport IO raid SpIs - spaceport.sys - spaceport IO space SpIt - spaceport.sys - spaceport IO tier SpBc - spaceport.sys - spaceport SDB column SpBd - spaceport.sys - spaceport SDB drive SpBe - spaceport.sys - spaceport SDB extent SpBm - spaceport.sys - spaceport SDB metadata SpBt - spaceport.sys - spaceport SDB path SpBp - spaceport.sys - spaceport SDB pool SpBg - spaceport.sys - spaceport SDB pool config SpBs - spaceport.sys - spaceport SDB space SpBn - spaceport.sys - spaceport SDB space config SpBr - spaceport.sys - spaceport SDB record SpBi - spaceport.sys - spaceport SDB tier SpSs - spaceport.sys - spaceport store SpSk - spaceport.sys - spaceport store block SpSb - spaceport.sys - spaceport store buffer SpSc - spaceport.sys - spaceport store cache SpSr - spaceport.sys - spaceport store record SpAt - spaceport.sys - spaceport attributes SpBf - spaceport.sys - spaceport buffer SpPK - spaceport.sys - spaceport custom packet SpDg - spaceport.sys - spaceport destage context SpDr - spaceport.sys - spaceport drive SpDd - spaceport.sys - spaceport dump data SpEL - spaceport.sys - spaceport enclosure SpLa - spaceport.sys - spaceport lookaside SpMp - spaceport.sys - spaceport mapping SpMl - spaceport.sys - spaceport MDL SpPt - spaceport.sys - spaceport path SpPl - spaceport.sys - spaceport pool SpPm - spaceport.sys - spaceport prm SpRg - spaceport.sys - spaceport regen context SpWk - spaceport.sys - spaceport work Sr?? - sr.sys - System Restore file system filter driver SrCo - sr.sys - SR's control object SrSC - sr.sys - Stream contexts SrDB - sr.sys - Debug information for lookup blob SrDL - sr.sys - Device list SrFE - sr.sys - File information buffer SrFN - sr.sys - File name SrHB - sr.sys - Hash bucket SrHH - sr.sys - Hash header SrHK - sr.sys - Hash key SrLB - sr.sys - Log buffer SrLC - sr.sys - Logging context SrLE - sr.sys - Log entry SrLT - sr.sys - Lookup blob SrMP - sr.sys - Mount point information SrOI - sr.sys - Overwrite information SrPC - sr.sys - Persistant configuration information SrRB - sr.sys - Rename buffer SrRG - sr.sys - Logger context SrRH - sr.sys - Reparse data size SrRR - sr.sys - Registry information SrSD - sr.sys - Security data information SrST - sr.sys - Stream data information SrTI - sr.sys - Directory delete information SrWI - sr.sys - Work queue item SslC - ksecdd.sys - SSL kernel mode client allocations ST* - - New MMC compliant storage drivers Stac - - Stack Trace Database - i386 checked and built with NTNOFPO=1 only StEl - storport.sys - PortpErrorInitRecords storport!_STORAGE_TRACE_CONTEXT_INTERNAL.ErrorLogRecords Strg - - Dynamic Translated strings Strm - - Streams and streams transports allocations StTc - storport.sys - PortTraceInitTracing storport!_STORAGE_TRACE_CONTEXT_INTERNAL svx? - svhdxflt.sys - VHDX sharing among multiple Hyper-V guests svxc - svhdxflt.sys - CDB (SCSI) operations svxC - svhdxflt.sys - Create File processing svxd - svhdxflt.sys - SVHDX communications port svxe - svhdxflt.sys - Stored sense data errors svxf - svhdxflt.sys - File contexts svxI - svhdxflt.sys - Initiator lists svxi - svhdxflt.sys - Instance context svxl - svhdxflt.sys - Shared VHDX RTL svxP - svhdxflt.sys - Persistent Reservation - Registrations svxp - svhdxflt.sys - Persistent Reservation support for shared VHDX files svxQ - svhdxflt.sys - Persistent Reservation - Device context svxq - svhdxflt.sys - Persistent Reservation - Reservation Info svxr - svhdxflt.sys - File read operations svxs - svhdxflt.sys - Stream context svxS - svhdxflt.sys - Stream handle context svxt - svhdxflt.sys - Test Filter svxv - svhdxflt.sys - VHDMP/SVHDX interaction svxw - svhdxflt.sys - File write operations SwMi - - SWMidi KS filter (WDM Audio) Symb - - Symbolic link objects Symt - - Symbolic link target strings SYPK - syspart.lib - Kernel mode system partition detection allocations SYSA - - Sysaudio (wdm audio) TAPI - - ntos\ndis\ndistapi TcAN - tcpip.sys - TCPIP App Name TcpH - tcpip.sys - TCPIP Health TcAR - tcpip.sys - TCP Abort Requests TcBW - tcpip.sys - TCP Bandwidth Allocations TcCC - tcpip.sys - TCP Create And Connect Tcb Pool Tccc - tcpip.sys - TCPIP Config Client Context Pool TcCM - tcpip.sys - TCP Congestion Control Manager Contexts TcCo - tcpip.sys - TCP Compartment TcCR - tcpip.sys - TCP Connect Requests TcCT - tcpip.sys - TCP Connection Tuples TcDD - tcpip.sys - TCP Debug Delivery Buffers TcDQ - tcpip.sys - TCP Delay Queues TcDR - tcpip.sys - TCP Disconnect Requests TcEW - tcpip.sys - TCP Endpoint Work Queue Contexts TcFC - tcpip.sys - TCP Fastopen Cookies TcFR - tcpip.sys - TCP FineRTT Buffers TcHT - tcpip.sys - TCP Hash Tables TcHo - tcpip.sys - TCPIP Histogram TcIn - tcpip.sys - TCP Inputs TcLS - tcpip.sys - TCP Listener SockAddrs TcLW - tcpip.sys - TCP Listener Work Queue Contexts TcpA - tcpip.sys - TCP DMA buffers TcpB - tcpip.sys - TCP Offload Blocks Tcpc - tcpip.sys - TCPIP Config Provider Context Pool TcDM - tcpip.sys - TCP Delayed Delivery Memory Descriptor Lists TcDN - tcpip.sys - TCP Delayed Delivery Network Buffer Lists TcPC - tcpip.sys - TCP Listener Pending Connections TcpE - tcpip.sys - TCP Endpoints TTcb - tcpip.sys - TCP Connections TcpI - tcpip.sys - TCP ISN buffers TcpL - tcpip.sys - TCP Listeners TcpM - tcpip.sys - TCP Offload Miscellaneous buffers TcpN - tcpip.sys - TCP Name Service Interfaces TcOD - tcpip.sys - TCP Offload Devices TcpO - tcpip.sys - TCP Offload Requests TcpP - tcpip.sys - TCP Processor Arrays TcPt - tcpip.sys - TCP Partitions Tcpt - tcpip.sys - TCP Timers TcRA - tcpip.sys - TCP Reassembly Data TcRB - tcpip.sys - TCP Reassembly Buffers TcRD - tcpip.sys - TCP Receive DPC Data TcRe - tcpip.sys - TCP Recovery Buffers TcRH - tcpip.sys - TCP Reassembly Headers TcRL - tcpip.sys - TCP Create And Connect Tcb Rate Limit Pool TcRN - tcpip.sys - TCP Random Number Generator Pool TcRR - tcpip.sys - TCP Receive Requests TcRW - tcpip.sys - TCP Receive Window Tuning Blocks TcSa - tcpip.sys - TCP Sack Data TcSR - tcpip.sys - TCP Send Requests TcST - tcpip.sys - TCP Syn TCBs Tcps - tcpip.sys - TCP Regkey Setting TcTW - tcpip.sys - TCP Time Wait TCBs TcUD - tcpip.sys - TCP Urgent Delivery Buffers TcWQ - tcpip.sys - TCP TCB Work Queue Contexts TcWS - tcpip.sys - TCP Window Scaling Diagnostics TcRF - tcpip.sys - TCP Recent Connection Failure TcTI - tcpip.sys - TCP Traceroute Info TcSk - tcpip.sys - TCP Send Tracker TcTx - tcpip.sys - TCP Transmit TrLB - tcpip.sys - TCP RLedbat TDIc - - TDI resource TDId - - TDI resource TDIe - - TDI resource TDIf - - TDI resource TDIg - - TDI resource TDIk - - TDI resource TDIu - - TDI resource TDIv - - TDI resource Tdat - - NB Data TdxC - tdx.sys - TDX Connections TdCI - tdx.sys - TDX Connection Information Tdxc - tdx.sys - TDX Control Channels Tdxo - tdx.sys - TDX Device Objects Tdx - tdx.sys - TDX Generic Buffers (Address, Entity information, Interface change allocations) TdxI - tdx.sys - TDX IO Control Buffers TdxM - tdx.sys - TDX Message Indication Buffers Tdxn - tdx.sys - TDX Net Addresses TdxR - tdx.sys - TDX Received Data Tdxp - tdx.sys - TDX Reserved Page Tables Entries TdxB - tdx.sys - TDX Transport Layer Buffers Tdxt - tdx.sys - TDX Transport Layer Clients TdxP - tdx.sys - TDX Transport Layer Providers Tdxm - tdx.sys - TDX Transport Layer TDI Mappings TdxA - tdx.sys - TDX Transport Addresses TdxT - tdx.sys - TDX Transport Provider Contexts Tedd - tcpip.sys - TCP/IP Event Data Descriptors thdd - - DirectDraw/3D handle manager table Thre - nt!ps - Thread objects Time - nt!ke - Timer objects TmDn - nt!tm - Tm Dynamic Name TmEn - nt!tm - Tm KENLISTMENT object TmLo - nt!tm - Tm Log Entries TmNo - nt!tm - Tm Notification TmPa - nt!tm - Tm Propagate Argument TmPb - nt!tm - Tm Propagation Buffer TmPe - nt!tm - Tm Enlistment Pointers TmPi - nt!tm - Tm Protocol Information TmPo - nt!tm - Tm Propagation Output TmPp - nt!tm - Tm Protocol Pointers TmPr - nt!tm - Tm Protocol TmPx - nt!tm - Tm Protocol Array TmRi - nt!tm - Tm Recovery Information TmRm - nt!tm - Tm KRESOURCEMANAGER object TmRq - nt!tm - Tm Propagation Request TmRr - nt!tm - Tm KTM_RESTART_RECORD TmTm - nt!tm - Tm KTRANSACTIONMANAGER object TmTx - nt!tm - Tm KTRANSACTION object Tnbl - - NB Lists Tnbt - - NB Pool TNbl - tcpip.sys - TCP Send NetBufferLists Toke - nt!se - Token objects TOBJ - rdpdr.sys - Topology object TpWc - nt!ex - Threadpool minipacket context TpWo - nt!ex - Threadpool worker factory objects TQoS - tcpip.sys - TL QoS Client Data Tran - - EXIFS Translate Trcd - netiobvt.sys - NB Control Data Tslc - tcpip.sys - WFP TL Shim Layer Cache Tscf - netio.sys - WFP Filter Engine Cached Filter Block TSBV - - WDM mini driver for Toshiba 750 capture TSdd - rdpdd.sys - RDPDD - Hydra Display Driver TSch - rdpwd.sys - RDPWD - Hydra char conversion TSic - termdd.sys - Terminal Services - ICA_POOL_TAG TSlc - rdpwd.sys - RDPWD - Hydra Licensing TSmc - - PDMCS - Hydra MCS Protocol Driver Tspk - ksecdd.sys - TS Package kernel mode client allocations TSq - - Terminal Services - Queue - TSQ_TAG TSrp - termdd.sys - Terminal Services - RP_ALLOC_TAG TSwd - rdpwd.sys - RDPWD - Hydra Winstation Driver Ttnc - tcpip.sys - WFP tunnel nexthop context Tsmp - tcpip.sys - TCP Send Memory Descriptor Lists TSNb - tcpip.sys - TCP Send NetBuffers TTsp - tcpip.sys - TCP TCB Sends TtCo - - TTCP Connections TtcC - - TTCP Controllers TtcL - - TTCP Listeners TtcM - - TTCP Mappings TtcN - - TTCP NPIs TtcW - - TTCP Work Items Ttfd - - TrueType Font driver TTFC - - Font file cache Thrm - - Thermal zone structure Tun4 - - Tunnel cache allocation for long file name TunL - - Tunnel cache lookaside-allocated elements TunP - - Tunnel cache oddsized pool-allocated elements TunK - - Tunnel cache temporary key value TuSB - tunnel.sys - Tunnel stack block TWTa - tcpip.sys - Echo Request Timer Table TWTs - netiobvt.sys - BVT TW Generic Buffers Txcl - ntfs.sys - TXF_CLR_RESERVATION_CHUNK Txdl - ntfs.sys - TXF_DELETED_LINK Txdr - ntfs.sys - TXF_DEFAULT_READER_SECTION Txf0 - ntfs.sys - TxfCallbacks.c Txf1 - ntfs.sys - TxfTrans.c Txfa - ntfs.sys - NameForLogging Txfb - ntfs.sys - TXF_FCB_LIST_FOR_WALKUP Txfc - ntfs.sys - TXF_FCB TxfD - ntfs.sys - TxfData.c TxFe - ntfs.sys - TXF_LOGREC_FILE_NAME_OPERATION TxfE - ntfs.sys - TXF_TRANS_REQUEST Txfe - ntfs.sys - TXF_FCB_EXTENSION TxfF - ntfs.sys - TxfAllocateTxfFcbTableEntry Txff - ntfs.sys - TXF_LOGREC_SET_SHORT_NAME Txfg - ntfs.sys - TXF_LOGREC_FILE_NAME_OPERATION file create TxfH - ntfs.sys - TXF_TRANS_REQUEST Txfh - ntfs.sys - TXF_LOGREC_FILE_NAME_OPERATION delete file Txfi - ntfs.sys - TXF_FCB_INFO Txfj - ntfs.sys - TxfBuildIsolatedNormalizedName TxfK - ntfs.sys - LongFileNameAttribute Txfk - ntfs.sys - TxfScb->AttributeName.Buffer Txfl - ntfs.sys - TXF_FCB_CLEANUP TxfM - ntfs.sys - ShortNameAttribute Txfm - ntfs.sys - TXF FAST_MUTEX Txfo - ntfs.sys - TXF_FO Txfq - ntfs.sys - Txf quota block TxfR - ntfs.sys - TxfAllocateFullFilePathForChangeNotify Txfs - ntfs.sys - TXFS_START_RM_INFORMATION RmParameters Txfu - ntfs.sys - CLFS_MGMT_CLIENT_REGISTRATION Txfv - ntfs.sys - CLFS_INFORMATION LogFileInformation TxfW - ntfs.sys - KEVENT in TxfWaitForEnlistmentCompletion Txfw - ntfs.sys - CLFS_INFORMATION LogFileInformation Txfx - ntfs.sys - TXF_STREAM_ISO_INFO Txgd - ntfs.sys - TxfData global structure Txis - ntfs.sys - TXF_ISO_SNAPSHOT Txlf - ntfs.sys - TXF_FCB (large) Txls - ntfs.sys - TXF_CANCEL_LSN Txre - ntfs.sys - TXF_TOPS_RANGE_ENTRY Txrm - ntfs.sys - TXF_RMCB Txrn - ntfs.sys - TXF_NONPAGED_RMCB Txsa - ntfs.sys - Txf sorted array item Txsc - ntfs.sys - TXF_SCB Txsp - ntfs.sys - TXF_SAVEPOINT Txsp - ntfs.sys - TXF_SCB_PTR TxTb - ntfs.sys - Tops Bitmaps Txtc - ntfs.sys - TXF_TRANS_CANCEL_LIST_ENTRY Txte - ntfs.sys - TXF_RMCB_TABLE_ENTRY Txtr - ntfs.sys - TXF_TRANS (Txf transaction context) Txts - ntfs.sys - TXF_TRANS_SYNC Txvc - ntfs.sys - TXF_VCB Txvd - ntfs.sys - TXF_VSCB_TO_DEREF Txvf - ntfs.sys - TXF_VSCB_FILE_SIZES Txvl - ntfs.sys - TXF_VSCB TXCT - ntfs.sys - TxfAllocateTableSpace TXHT - ntfs.sys - TXF_HANDLE_TABLE TXIS - ntfs.sys - TxfAllocateTableSpace Type - - Type objects U802 - usb8023.sys - RNDIS USB 8023 driver UCAM - - USB digital camera library Udf1 - udfs.sys - Udfs file set descriptor buffer Udf2 - udfs.sys - Udfs volmume recognition sequence descriptor buffer Udf3 - udfs.sys - Udfs volume descriptor sequence descriptor buffer Udf4 - udfs.sys - Udfs logical volume integrity descriptor buffer UdfB - udfs.sys - Udfs dynamic name buffer UdfC - udfs.sys - Udfs CRC table UdfD - udfs.sys - Udfs FID buffer for view spanning UdfF - udfs.sys - Udfs nonpaged Fcb UdfI - udfs.sys - Udfs IO context UdfL - udfs.sys - Udfs IRP context lite (delayed close) UdfN - udfs.sys - Udfs normalized full filename UdfS - udfs.sys - Udfs short file name UdfT - udfs.sys - Udfs generic table entry Udfa - udfs.sys - Udfs AD buffer Udfb - udfs.sys - Udfs IO buffer Udfc - udfs.sys - Udfs IRP context Udfd - udfs.sys - Udfs file Scb Udfe - udfs.sys - Udfs enumeration match expression Udff - udfs.sys - Udfs Fcb Udfi - udfs.sys - Udfs directory Scb Udfl - udfs.sys - Udfs Lcb Udfn - udfs.sys - Udfs Nonpaged Scb Udfp - udfs.sys - Udfs Pcb Udfs - udfs.sys - Udfs Sparing Mcb Udft - udfs.sys - Udfs CDROM TOC Udfv - udfs.sys - Udfs Vpb UdfV - udfs.sys - Udfs VMCB dirty sector bitmap Udfx - udfs.sys - Udfs Ccb UdAE - tcpip.sys - UDP Activate Endpoints UdCo - tcpip.sys - UDP Compartment UdEW - tcpip.sys - UDP Endpoint Work Queue Contexts UdMI - tcpip.sys - UDP Message Indications UDNb - tcpip.sys - UDP NetBuffers UdpA - tcpip.sys - UDP Endpoints UdpH - tcpip.sys - UDP Headers UdpI - tcpip.sys - UDP Interface UdPM - tcpip.sys - UDP Partial Memory Descriptor Lists UdpN - tcpip.sys - UDP Name Service Interfaces UdSM - tcpip.sys - UDP Send Messages Requests UNbl - tcpip.sys - UDP NetBufferLists Udp - - Udp protocol (TCP/IP driver) Ufsc - - User FULLSCREEN UHCD - - Universal Host Controller (USB - Intel Controller) UHUB - - Universal Serial Bus Hub Ul?? - http.sys - tags. Note: In-use tags are of the form "Ul??" or "Uc??".and Free tags are of the form "uL??" or "uC??"; Uc?? - http.sys - i.e., the case of the leading "Ul" or "Uc" has been reversed. Ucac - http.sys - Auth Cache Pool UcCO - http.sys - Client Connection Ucmp - http.sys - Multipart String Buffer Ucre - http.sys - Receive Response Ucrp - http.sys - Response App Buffer Ucrq - http.sys - Request Pool UcSc - http.sys - Common Server Information UcSN - http.sys - Server name UcSP - http.sys - Process Server Information UcSp - http.sys - Sspi Pool UcST - http.sys - Server info table Uctd - http.sys - Response Tdi Buffer Ucte - http.sys - Entity Pool Ucto - http.sys - Tdi Objects Pool UlAB - http.sys - Auxiliary Buffer UlAO - http.sys - App Pool Object UlAP - http.sys - App Pool Process UlBL - http.sys - Binary Log File Entry UlBO - http.sys - Outstanding i/o UlCC - http.sys - Control Channel UlCE - http.sys - Config Group Tree Entry UlCH - http.sys - Config Group Tree Header UlCI - http.sys - Config Group URL Info UlCJ - http.sys - Config Group Object Pool UlCK - http.sys - Chunk Tracker UlCL - http.sys - Config Group LogDir UlCl - http.sys - Connection RefTraceLog UlCO - http.sys - Connection UlCT - http.sys - Config Group Timestamp UlCY - http.sys - Connection Count Entry UlDB - http.sys - Debug UlDC - http.sys - Data Chunks array UlDO - http.sys - Disconnect Object UlDR - http.sys - Deferred Remove Item UlDT - http.sys - Debug Thread Pool UlEP - http.sys - Endpoint UlFA - http.sys - Force Abort Work Item UlFC - http.sys - File Cache Entry Ulfc - http.sys - Uri Filter Context UlFD - http.sys - Noncached File Data UlFP - http.sys - Filter Process UlFR - http.sys - Dummy Filter Receive Buffer UlFT - http.sys - Filter Channel UlFU - http.sys - Full Tracker UlFW - http.sys - Filter Write Tracker UlHC - http.sys - Http Connection UlHc - http.sys - Http Connection RefTraceLog UlHL - http.sys - Internal Request RefTraceLog UlHR - http.sys - Internal Request UlHT - http.sys - Hash Table UlHV - http.sys - Header Value UlIC - http.sys - Irp Context UlID - http.sys - Conn ID Table UlIR - http.sys - Internal Response UlLD - http.sys - Log Field UlLF - http.sys - Log File Entry UlLG - http.sys - Log Generic UlLH - http.sys - Log File Handle UlLL - http.sys - Log File Buffer UlLS - http.sys - Ansi Log Data Buffer UlLT - http.sys - Binary Log Data Buffer UlNO - http.sys - NSGO Pool UlNP - http.sys - Non-Paged Data UlOE - http.sys - Endpoint OwnerRefTraceLog PoolTag UlOR - http.sys - Owner RefTrace Signature UlOT - http.sys - Opaque ID Table UlPB - http.sys - APool Proc Binding UlPL - http.sys - Pipeline UlQF - http.sys - TCI Filter UlQG - http.sys - TCI Generic UlQI - http.sys - TCI Interface UlQL - http.sys - TCI Flow UlQT - http.sys - TCI Tracker UlQW - http.sys - TCI WMI UlRB - http.sys - Receive Buffer UlRD - http.sys - Registry Data UlRE - http.sys - Request Body Buffer UlRP - http.sys - Request Buffer UlRR - http.sys - Request Buffer References UlRS - http.sys - Non-Paged Resource UlRT - http.sys - RefTraceLog PoolTag UlSC - http.sys - SSL Cert Data UlSD - http.sys - Security Data UlSl - http.sys - StringLog Buffer PoolTag UlSL - http.sys - StringLog PoolTag UlSO - http.sys - Site Counter Entry UlSS - http.sys - Simple Status Item UlTA - http.sys - Address Pool UlTD - http.sys - UL_TRANSPORT_ADDRESS UlTT - http.sys - Thread Tracker UlUB - http.sys - URL Buffer UlUC - http.sys - Uri Cache Entry UlUH - http.sys - HTTP Unknown Header UlUL - http.sys - URL UlUM - http.sys - URL Map UlVH - http.sys - Virtual Host UlWC - http.sys - Work Context UlWI - http.sys - Work Item UndP - - EXIFS Underlying Path UMD? - WUDFRd.sys - UMDF pool allocation USBB - bthusb.sys - Bluetooth USB minidriver USBD - - Universal Serial Bus Class Driver UsbS - usbser.sys - USB Serial Driver V2ic - vhdmp.sys - VHD2 external I/O allocation V2io - vhdmp.sys - VHD2 internal I/O allocation V2lg - vhdmp.sys - VHD2 core large allocation V2rv - vhdmp.sys - VHD2 reserved VA mapping V2sm - vhdmp.sys - VHD2 core allocation V2sr - vhdmp.sys - VHD2 SRB range allocation V2wi - vhdmp.sys - VHD2 work item V2?? - vhdmp.sys - VHD2 pool allocation Vad - nt!mm - Mm virtual address descriptors VadF - nt!mm - VADs created by a FreeVM splitting Vadl - nt!mm - Mm virtual address descriptors (long) VadS - nt!mm - Mm virtual address descriptors (short) Vbus - vmbus.sys - Virtual Machine Bus Driver VbuW - vmbus.sys - Virtual Machine Bus Driver (WDF) Vbxp - vmbus.sys - Virtual Machine Bus Driver (cross partition) VcCh - rdpdr.sys - Dynamic Virtual channel object VcFl - rdpdr.sys - Dynamic Virtual file object VcMn - rdpdr.sys - Dynamic Virtual manager object VcSn - rdpdr.sys - Dynamic Virtual session object VDM - nt!vdm - ntos\vdm VdDr - Vid.sys - Virtual Machine Virtualization Infrastructure Driver VdMm - Vid.sys - Virtual Machine Virtualization Infrastructure Driver (VSMM service) VdWd - Vid.sys - Virtual Machine Virtualization Infrastructure Driver (WDF) vDMc - dmvsc.sys - Virtual Machine Dynamic Memory VSC Driver vDMW - dmvsc.sys - Virtual Machine Dynamic Memory VSC Driver (WDF) Vflt - vmstorfl.sys - Virtual Machine Storage Filter Driver VflW - vmstorfl.sys - Virtual Machine Storage Filter Driver (WDF) VdPN - dxgkrnl.sys - Video display mode management Vepp - nt!Vf - Verifier Pool Tracking information VfAT - nt!Vf - Verifier AVL trees VfIT - nt!Vf - Verifier Import Address Table information VfPT - nt!Vf - Verifier Allocate/Free Pool stack traces VfUs - nt!Vf - Memory allocated by a call to IoSetCompletionRoutineEx. Vfwi - nt!Vf - IO_WORKITEM allocated by I/O verifier version of IoAllocateWorkItem ViIn - nt!Vf - Verifier Internal Tag for pool tracking VMdl - nt!Vf - MDL allocated by I/O verifier version of IoAllocateMdl VNod - nt!Vf - Deadlock Verifier nodes VRes - nt!Vf - Deadlock Verifier resources VStr - nt!Vf - String buffer allocated by the Driver Verifier version of Rtl String APIs VHDa - vhdmp.sys - VHD generic allocator VHDA - vhdmp.sys - VHD generic allocator pool VHDb - vhdmp.sys - VHD Block Allocation Table VHDf - vhdmp.sys - VHD file entry VHDh - vhdmp.sys - VHD header VHDi - vhdmp.sys - VHD IO Range VHDI - vhdmp.sys - VHD IO Range pool VHDl - vhdmp.sys - VHD LUN VHDm - vhdmp.sys - VHD bitmap VHDn - vhdmp.sys - VHD filename VHDo - vhdmp.sys - VHD footer VHDp - vhdmp.sys - VHD filepath VHDr - vhdmp.sys - VHD read buffer VHDs - vhdmp.sys - VHD sector map VHDS - vhdmp.sys - VHD symbolic link VHDt - vhdmp.sys - VHD tracking information VHDw - vhdmp.sys - VHD work item VHDy - vhdmp.sys - VHD dynamic header VHD? - vhdmp.sys - VHD allocation VHde - vmusbhub.sys - Virtual Machine USB Hub Driver (descriptor) VHif - vmusbhub.sys - Virtual Machine USB Hub Driver (interface) VHps - vmusbhub.sys - Virtual Machine USB Hub Driver (Pnp string) VHrc - vmusbhub.sys - Virtual Machine USB Hub Driver (request context) VHtx - vmusbhub.sys - Virtual Machine USB Hub Driver (text) VHub - vmusbhub.sys - Virtual Machine USB Hub Driver (Bus) VHur - vmusbhub.sys - Virtual Machine USB Hub Driver (URB) VHuW - vmusbhub.sys - Virtual Machine USB Hub Driver (WDF) Vi01 - dxgmms2.sys - Video memory manager global alloc Vi02 - dxgmms2.sys - Video memory manager local alloc Vi03 - dxgmms2.sys - Video memory manager alloc Vi06 - dxgmms2.sys - Video memory manager segment Vi07 - dxgmms2.sys - Video memory manager segment range Vi08 - dxgmms2.sys - Video memory manager device Vi09 - dxgmms2.sys - Video memory manager process Vi0a - dxgmms2.sys - Video memory manager global alloc VGPU Vi10 - dxgmms2.sys - Video memory manager process heap Vi11 - dxgmms2.sys - Video memory manager process heap block Vi12 - dxgmms2.sys - Video memory manager process heap alloc Vi13 - dxgmms2.sys - Video memory manager process adapter info Vi14 - dxgmms2.sys - Video memory manager process commitment info Vi15 - dxgmms2.sys - Video memory manager global state Vi16 - dxgmms2.sys - Video memory manager command state Vi17 - dxgmms2.sys - Video memory manager pool Vi18 - dxgmms2.sys - Video memory manager pool block Vi19 - dxgmms2.sys - Video memory manager pool block array Vi20 - dxgmms2.sys - Video memory manager commitment info Vi21 - dxgmms2.sys - Video memory manager segment descriptor Vi22 - dxgmms2.sys - Video memory manager DMA buffer Vi23 - dxgmms2.sys - Video memory manager DMA buffer allocation table Vi24 - dxgmms2.sys - Video memory manager DMA buffer allocation list Vi25 - dxgmms2.sys - Video memory manager DMA buffer patch location list Vi26 - dxgmms2.sys - Video memory manager protected allocation Vi27 - dxgmms2.sys - Video memory manager resource list Vi28 - dxgmms2.sys - Video memory manager mutex Vi29 - dxgmms2.sys - Video memory manager DMA pool Vi30 - dxgmms2.sys - Video memory manager slot table Vi31 - dxgmms2.sys - Video memory manager dummy page Vi32 - dxgmms2.sys - Video memory manager DMA buffer private data Vi35 - dxgmms2.sys - Video memory manager MDL Vi36 - dxgmms2.sys - Video memory manager pages history Vi37 - dxgmms2.sys - Video memory manager DMA buffer global alloc table Vi38 - dxgmms2.sys - Video memory manager allocation fence array Vi39 - dxgmms2.sys - Video memory manager migration table Vi40 - dxgmms2.sys - Video memory manager migration table lock Vi41 - dxgmms2.sys - Video memory manager process budget info Vi42 - dxgmms2.sys - Video memory manager global alloc nonpaged Vi43 - dxgmms2.sys - Video memory manager async operation Vi44 - dxgmms2.sys - Video memory manager fence storage Vi45 - dxgmms2.sys - Video memory manager CPU host aperture Vi46 - dxgmms2.sys - Video memory manager CPU host aperture page Vi47 - dxgmms2.sys - Video memory manager worker thread Vi48 - dxgmms2.sys - Video memory manager paging queue Vi49 - dxgmms2.sys - Video memory manager GPU VA Vi50 - dxgmms2.sys - Video memory manager physical adapter Vi51 - dxgmms2.sys - Video memory manager set VPR work item Vi52 - dxgmms2.sys - Video memory manager paging history Vi53 - dxgmms2.sys - Video memory manager page table Vi54 - dxgmms2.sys - Video memory manager PTE array Vi55 - dxgmms2.sys - Video memory manager VA range Vi56 - dxgmms2.sys - Video memory manager page directory Vi57 - dxgmms2.sys - Video memory manager PDE array Vi58 - dxgmms2.sys - Video memory manager release resource command Vi59 - dxgmms2.sys - Video memory manager deferred unlock Vi5a - dxgmms2.sys - Video memory manager PTE owner data Vi5b - dxgmms2.sys - Video memory manager partition Vi5c - dxgmms2.sys - Video memory manager partition adapter info Vi5d - dxgmms2.sys - Video memory manager cross adapter alloc Vi5e - dxgmms2.sys - Video memory manager scheduling log Vi5f - dxgmms2.sys - Video scheduler async operation Vi60 - dxgmms2.sys - Video memory manager cross adapter data Vi61 - dxgmms2.sys - Video memory manager context alloc Via0 - dxgmms2.sys - GPU scheduler adapter state Via1 - dxgmms2.sys - GPU scheduler node state Via2 - dxgmms2.sys - GPU scheduler process state Via3 - dxgmms2.sys - GPU scheduler device state Via4 - dxgmms2.sys - GPU scheduler context state Via5 - dxgmms2.sys - GPU scheduler queue packet Via6 - dxgmms2.sys - GPU scheduler DMA packet Via7 - dxgmms2.sys - GPU scheduler VSync cookie Via8 - dxgmms2.sys - GPU scheduler GPU sync object Via9 - dxgmms2.sys - GPU scheduler present info Viaa - dxgmms2.sys - GPU scheduler history buffer Viab - dxgmms2.sys - GPU scheduler periodic frame notification state Viac - dxgmms2.sys - GPU scheduler hardware context Viad - dxgmms2.sys - GPU scheduler hardware queue Viae - dxgmms2.sys - GPU scheduler monitored fence Viaf - dxgmms2.sys - GPU scheduler sync point Vib0 - dxgmms2.sys - GPU scheduler pending IFlip token Vib1 - dxgmms2.sys - GPU scheduler flip queue entry VidL - videoprt.sys - VideoPort Allocation List (FDO_EXTENSION) VidR - videoprt.sys - VideoPort Allocation on behalf of Miniport ViMm - dxgkrnl.sys - Video memory manager virt - vmm.sys - Virtual Machine Manager (VPC/VS) ViSh - dxgkrnl.sys - Video scheduler Vk?? - vmbkmcl.sys - Hyper-V VMBus KMCL driver Vkin - vmbkmcl.sys - Hyper-V VMBus KMCL driver (incoming packets) Vkou - vmbkmcl.sys - Hyper-V VMBus KMCL driver (outgoing packets) VM?? - volmgr.sys - Volume Manager VM - volmgr.sys - General allocations Vm?? - volmgrx.sys - Volume Manager Extension Vm - volmgrx.sys - General allocations VmBl - volmgrx.sys - Raw configuration blocks VmBu - volmgrx.sys - I/O buffers VmCc - volmgrx.sys - Configuration copies VmCo - volmgrx.sys - Configurations VmCp - volmgrx.sys - Copies VmCr - volmgrx.sys - Completion routine contexts VmDc - volmgrx.sys - Device changes VmDd - volmgrx.sys - Disk devices VmDh - volmgrx.sys - Disk headers VmLa - volmgrx.sys - Drive layouts VmLb - volmgrx.sys - Log blocks VmLc - volmgrx.sys - Log copies VmLo - volmgrx.sys - Logs VmLr - volmgrx.sys - Log raw content VmMm - volmgrx.sys - Mirror emergency mappings VmNe - volmgrx.sys - Notification entries VmOb - volmgrx.sys - I/O objects VmP0 - volmgrx.sys - Packets VmP1 - volmgrx.sys - Small packets VmP2 - volmgrx.sys - Large packets VmP3 - volmgrx.sys - Huge packets VmPa - volmgrx.sys - Packs VmPd - volmgrx.sys - Physical disks VmPs - volmgrx.sys - Arrays of packets VmRb - volmgrx.sys - Raw record buffers VmRc - volmgrx.sys - Raw configurations VmRe - volmgrx.sys - Records VmRi - volmgrx.sys - Record information VmRm - volmgrx.sys - RAID-5 emergency mappings VmRr - volmgrx.sys - Raw records VmTa - volmgrx.sys - I/O tasks VmTc - volmgrx.sys - Table of contents VmTe - volmgrx.sys - Table of contents entries VmTx - volmgrx.sys - Transactions VmUe - volmgrx.sys - User entries VmVd - volmgrx.sys - Volume devices VmWi - volmgrx.sys - Work items VmbK - kmcl.lib - Virtual Machine Bus Kernel Mode Client Library VmCh - ChimneyLib.lib - Virtual Machine Network Chimney Library VmFP - vfpext.sys - Virtual Filtering Platform driver VMhd - vmbushid.sys - Virtual Machine Input VSC Driver VMIN - vwifimp.sys - Virtual Wi-Fi miniport Vmsc - storchannel.lib - Virtual Machine Storage VSC Channel Library VNC - netvsc50.sys/netvsc60.sys - Virtual Machine Network VSC Driver VNCm - netvsc50.sys/netvsc60.sys - Virtual Machine Network VSC Driver (RNDIS miniport driver library, message or object) VNCn - netvsc50.sys/netvsc60.sys - Virtual Machine Network VSC Driver (NBL) VNCr - netvsc50.sys/netvsc60.sys - Virtual Machine Network VSC Driver (RNDIS message context signature) VNCW - netvsc50.sys/netvsc60.sys - Virtual Machine Network VSC Driver (WDF) VoS? - volsnap.sys - VolSnap (Volume Snapshot Driver) VoSa - volsnap.sys - Application information allocations VoSb - volsnap.sys - Buffer allocations VoSc - volsnap.sys - Snapshot context allocations VoSd - volsnap.sys - Diff area volume allocations VoSf - volsnap.sys - Diff area file allocations VoSh - volsnap.sys - Bit history allocations VoSi - volsnap.sys - Io status block allocations VoSm - volsnap.sys - Bitmap allocations VoSo - volsnap.sys - Old heap entry allocations VoSp - volsnap.sys - Pnp id allocations VoSr - volsnap.sys - Device relations allocations VoSs - volsnap.sys - Short term allocations VoSt - volsnap.sys - Temp table allocations VoSw - volsnap.sys - Work queue allocations VoSx - volsnap.sys - Dispatch context allocations Vpb - - Io, vpb's VPrs - passthruparser.sys - Virtual Machine Storage Passthrough Parser Driver Vprt - videoprt.sys - Video port for legacy (pre-Vista) display drivers VraP - - parallel class driver Vtfd - - Font file/context Vrdc - netvsc60.sys - Virtual Machine Network VSC Driver (NDIS 6, RNDIS miniport driver library, chimney neighbor or path context) Vrdt - netvsc60.sys - Virtual Machine Network VSC Driver (NDIS 6, RNDIS miniport driver library, chimney TCP context) Vrdi - netvsc60.sys - Virtual Machine Network VSC Driver (NDIS 6, RNDIS miniport driver library, chimney initiate offload) VcTc - netvsc.sys - Virtual Machine Network VSC Driver (IOCTL surface) VSAB - utils.lib - Virtual Machine Storage VSP Utility Library VsAT - vmswitch.sys - Virtual Machine Network Switch Driver (address table) VsC4 - vmswitch.sys - Virtual Machine Network Switch Driver (chimney path4 context) VsC6 - vmswitch.sys - Virtual Machine Network Switch Driver (chimney path6 context) VsCH - vmswitch.sys - Virtual Machine Network Switch Driver (chimney handle) VsCN - vmswitch.sys - Virtual Machine Network Switch Driver (chimney neighbor context) VsCP - vmswitch.sys - Virtual Machine Network Switch Driver (chimney NBL context) VsCs - vmswitch.sys - Virtual Machine Network Switch Driver (configuration store) VsCT - vmswitch.sys - Virtual Machine Network Switch Driver (chimney TCP context) VsDI - vmswitch.sys - Virtual Machine Network Switch Driver (direct I/O NIC) VsNb - vmswitch.sys - Virtual Machine Network Switch Driver (NBL) VsOb - vmswitch.sys - Virtual Machine Network Switch Driver (object allocation) VsRD - vmswitch.sys - Virtual Machine Network Switch Driver (RNDIS device) VsRm - vmswitch.sys - Virtual Machine Network Switch Driver (routing) VsRT - vmswitch.sys - Virtual Machine Network Switch Driver (routing table) VssB - vmswitch.sys - Virtual Machine Network Switch Driver (balance) VssM - vmswitch.sys - Virtual Machine Network Switch Driver (miniport NIC) VssP - vmswitch.sys - Virtual Machine Network Switch Driver (protocol NIC) VsSw - vmswitch.sys - Virtual Machine Network Switch Driver VsSW - vmswitch.sys - Virtual Machine Network Switch Driver (WDF) VsVN - vmswitch.sys - Virtual Machine Network Switch Driver (VM NIC) Vsvq - vmswitch.sys - Virtual Machine Network Switch Driver (VMQ) VSt - storvsp.sys - Virtual Machine Storage VSP Driver VSta - storvsp.sys - Virtual Machine Storage VSP Driver (adapter) VStb - storvsp.sys - Virtual Machine Storage VSP Driver (balance) VStd - storvsp.sys - Virtual Machine Storage VSP Driver (device) VStp - storvsp.sys - Virtual Machine Storage VSP Driver (parser) VStu - storvsp.sys - Virtual Machine Storage VSP Driver (authentication) VStW - storvsp.sys - Virtual Machine Storage VSP Driver (WDF) VSVL - VMBusVideoM.sys - Virtual Machine Synthetic Video Display Driver vS3W - vms3cap.sys - Virtual Machine Emulated S3 Device Cap Driver (WDF) vTDR - dxgkrnl.sys - Video timeout detection/recovery VubH - vmusbbus.sys - Virtual Machine USB Bus Driver VubW - vmusbbus.sys - Virtual Machine USB Bus Driver (WDF) VuCH - vuc.sys - Virtual Machine USB Connector Driver (connector handle) VuCP - vuc.sys - Virtual Machine USB Connector Driver (virtual hub ports) VuCU - vuc.sys - Virtual Machine USB Connector Driver (connector URB) VuCW - vuc.sys - Virtual Machine USB Connector Driver (WDF) VusW - vmusbstub.sys - Virtual Machine USB Stub Driver (WDF) VVpc - vhdparser.sys - Virtual Machine Storage VHD Parser Driver (context) VVpp - vhdparser.sys - Virtual Machine Storage VHD Parser Driver (parser) VWFB - vwifibus.sys - Virtual Wi-Fi Bus Driver VWFF - vwififlt.sys - Virtual Wi-Fi Filter Driver (object allocation) VWnd - vwififlt.sys - Virtual Wi-Fi Filter Driver (requests) Wait - nt!io - WaitCompletion Packets Wan? - - NdisWan Tags (PPP Framing module for Remote Access) WanA - - BundleCB WanB - - ProtocolCB/LinkCB WanC - - DataDesc WanD - - WanRequest WanE - - LoopbackDesc WanG - - MiniportCB WanH - - OpenCB WanI - - IoPacket WanJ - - LineUpInfo WanK - - Unicode String Buffer WanL - - Protocol Table WanM - - Connection Table WanN - - NdisPacketPool Desc WanQ - - DataBuffer WanR - - WanPacket WanS - - AfCB/SapCB/VcCB WanT - - Transform Driver WanV - - RC4 Encryption Context WanW - - SHA Encryption WanX - - Send Compression Context WanY - - Recv Compression Context WanZ - - Protocol Specific Info Wdm - - WDM WDMA - - WDM Audio Wdog - watchdog.sys - Watchdog object/context allocation Wfp? - netio.sys - Windows Filtering Platform Tags WfpF - netio.sys - WFP filters WfpM - netio.sys - WFP filter match buffers WfpI - netio.sys - WFP index WfpH - netio.sys - WFP hash WfpR - netio.sys - WFP RPC WfpC - netio.sys - WFP callouts WfpS - netio.sys - WFP startup WfpL - netio.sys - WFP fast cache WfpE - netio.sys - WFP extension Wfpn - netio.sys - WFP NBL info container WfTi - - WFP timer WfSt - - WFP string werk - - WER kernel mode reporting allocation WKSM - werkernel.sys - WER kernel mode reporting allocation of WERSVC message WimF - wimfsf.sys - WIM Boot Filter WI3D - wini3ctarget.sys - WinI3C Target Driver WI3P - wini3ctarget.sys - WinI3C Target Driver (Non-Paged) Wl2l - wfplwfs.sys - WFP L2 LWF context Wl2g - wfplwfs.sys - WFP L2 generic block Wl2c - wfplwfs.sys - WFP L2 classify cache Wl2f - wfplwfs.sys - WFP L2 flow Wl2n - wfplwfs.sys - WFP L2 NBL context WlBs - writelog.sys - Writelog block store WlFc - writelog.sys - Writelog fsd context WlGc - writelog.sys - Writelog global context WlIb - writelog.sys - Writelog I/O buffer WlLb - writelog.sys - Writelog library buffer WlCb - writelog.sys - Writelog checkpoint buffer WlPw - writelog.sys - Writelog planned write WlMh - writelog.sys - Writelog marker header WlMp - writelog.sys - Writelog marker payload WlDt - writelog.sys - Writelog drain target Wmii - - Wmi InstId chunks Wmij - - Wmi GuidMaps Wmim - - Wmi KM to UM Notification Buffers Wmin - - Wmi Notification Slot Chunks Wmip - - Wmi General purpose allocation Wmiq - - Wmi NBQ Blocks Wmis - - Wmi SysId allocations Wmit - - Wmi Trace Wmiw - - Wmi Notification Waiting Buffers, in paged queue waiting for IOCTL Wmiz - - Wmi MCA Insertions debug code WmiA - - Wmi ACPI mapper WmiC - - Wmi Create Pump Thread Work Item WmiD - - Wmi Registration DataSouce WmiG - - Allocation of WMIGUID WmiI - - Wmi Instance Names WmiL - - WmiLIb WmiN - - Wmi Notification Notification Packet WmiR - - Wmi Registration info blocks WmDS - - Wmi DataSource chunks WmGE - - Wmi GuidEntry chunks WmIS - - Wmi InstanceSet chunks WmMR - - Wmi MofResouce chunks WMca - - WMI MCA Handling Wnf - nt!wnf - Windows Notification Facility WofD - wof.sys - Wof directory buffer WofF - wof.sys - Wof file context Woff - wof.sys - Wof extended file context WofG - wof.sys - Wof general allocation WofH - wof.sys - Wof handle context WofI - wof.sys - Wof inflate buffer WofS - wof.sys - Wof stream context Woft - wof.sys - Wof transaction context WofV - wof.sys - Wof volume context wpcf - wof.sys - Wim config file wpci - wof.sys - Wim integrity wpct - wof.sys - Wim chunk table wpcx - wof.sys - Wim IO context wpdw - wof.sys - Wim decompression workspace wpgn - wof.sys - Wim general wppm - wof.sys - Wim IO parameters wprd - wof.sys - Wim small read buffer wpRD - wof.sys - Wim large read buffer wprt - wof.sys - Wim resource table wpvo - wof.sys - Wim volume overlay wpwf - wof.sys - Wim file wpwi - wof.sys - Wim work item wpxp - wof.sys - Wim xpress context Wrp? - - WanArp Tags (ARP module for Remote Access) Wrpa - - WAN_ADAPTER_TAG Wrpi - - WAN_INTERFACE_TAG Wrpr - - WAN_REQUEST_TAG Wrps - - WAN_STRING_TAG Wrpc - - WAN_CONN_TAG Wrpw - - WAN_PACKET_TAG Wrpf - - FREE_TAG (checked builds only) Wrpd - - WAN_DATA_TAG Wrph - - WAN_HEADER_TAG Wrpn - - WAN_NOTIFICATION_TAG WSCD - WFPSamplerCalloutDriver.sys - WFPSampler Callout Driver WSKs - afd.sys - WSK socket WSNP - WFPSamplerCalloutDriver.sys - WFPSampler Callout Driver NDIS Pool WtdA - wtd.sys - WTD ACS implementation WtdE - wtd.sys - WTD event queue WtdF - wtd.sys - WTD chipc implementation WtdJ - wtd.sys - WTD event stats WtdK - wtd.sys - WTD KMDF framework WtdL - wtd.sys - WTD chipc dll scan WtdN - wtd.sys - WTD WFP implementation WvCy - - WDM Audio WaveCyc port WvPc - - WDM Audio WavePCI port xCVD - mrxdav.sys - AsyncEngineContext Tag XDR? - rpcxdr.sys - NFS (Network File System) XDR driver xSMB - smbmrx.sys - IFSKIT sample SMB mini-redirector XWan - - ndis\usrwan allocations Xtra - - EXIFS Extra Create ZsaB - - EXIFS ZeroBlock Adbe - win32k.sys - GDITAG_ATM_FONT Bmfd - win32k.sys - GDITAG_BMP_FONT Dfsm - win32k.sys - GDITAG_ENG_EVENT DwmL - win32k!HwndLookupAllocTableData - GDITAG_DWM_HWND_LOOKUP DWMt - win32k.sys - GDITAG_DWM_SENDTOUCHCONTACTS DWMv - win32k.sys - GDITAG_DWM_VALIDATION Dxdd - win32k!DxLddmSharedPrimaryLockNotification - GDITAG_LOCKED_PRIMARY Gill - win32kbase.sys - GDITAG_ISOLATED_LOOKASIDE_LIST Gila - win32kbase.sys - GDITAG_ISOLATED_LOOKASIDE_LIST_ALLOCATION Gadb - win32k!XDCOBJ::bAddColorTransform - GDITAG_DC_COLOR_TRANSFORM Gadd - win32k.sys - GDITAG_DC_FONT Galp - win32k!AlphaScanLineBlend - GDITAG_ALPHABLEND Gapc - win32kbase!GrepQueueApc - GDITAG_APC Gbaf - win32k.sys - GDITAG_BRUSH_FREELIST Gbdl - win32k!BRUSH::bAddIcmDIB - GDITAG_ICM_DIB_LIST Gcac - win32k.sys - GDITAG_FONTCACHE Gcsl - win32k!InitializeScripts - GDITAG_SCRIPTS Gcwc - win32k!ConvertToAndFromWideChar - GDITAG_CHAR_TO_WIDE_CHAR Gdbr - win32k!BRUSHOBJ_pvAllocRbrush - GDITAG_RBRUSH Gdcf - win32k.sys - GDITAG_DC_FREELIST GDcs - win32k!GreDwmStartup - GDITAG_DWMSTATE Gdev - win32k.sys - GDITAG_DEVMODE Gdfm - win32k!DoFontManagement - GDITAG_HGLYPH_ARRAY Gdrs - win32k.sys - GDITAG_DRVSUP Gdrv - win32k!EngCreateClip - GDITAG_CLIPOBJ Gdtd - win32k!GreAcquireSemaphoreAndValidate - GDITAG_SEMAPHORE_VALIDATE Gdwd - win32k.sys - GDITAG_WATCHDOG Gebr - win32k!EngRealizeBrush - GDITAG_ENGBRUSH Gedd - win32k.sys - GDITAG_ENUM_DISPLAY_DEVICES Gedg - win32k!bFill - GDITAG_EDGE gEdg - win32k!bTriangleMesh - GDITAG_TRIANGLEDATA Geto - win32k.sys - GDITAG_TEXTOUT Gfda - win32k!UmfdAllocation::Create - GDITAG_UMFD_ALLOCATION Gfdf - win32k!InitializeDefaultFamilyFonts - GDITAG_FONT_DEFAULT_FAMILY Gffv - win32k.sys - GDITAG_FONTFILEVIEW Gfid - win32k.sys - GDITAG_UNIVERSAL_FONT_ID GFil - win32k.sys - GDITAG_FILEPATH Gfil - win32k.sys - GDITAG_MAPFILE GFld - win32k.sys - GDITAG_FLOODFILL Gfnt - win32k!RFONTOBJ::bRealizeFont - GDITAG_RFONT Gfsb - win32k.sys - GDITAG_FONT_SUB Gfsf - win32k!bInitStockFontsInternal - GDITAG_FONT_STOCKFONT Gfsm - win32k!GreCreateFastMutex - GDITAG_FAST_MUTEX Gful - win32k.sys - GDITAG_FULLSCREEN Gfvi - win32k!bUnloadAllButPermanentFonts - GDITAG_FONTVICTIM Ggb - win32k!RFONTOBJ::pgbCheckGlyphCache - GDITAG_GLYPHBLOCK Ggdv - win32k.sys - GDITAG_GDEVICE Ggls - win32k.sys - GDITAG_GLYPHSET Ggly - win32k.sys - GDITAG_HGLYPH Gh?: - win32k.sys - GDITAG_HMGR_LFONT_TYPE Gh?; - win32k.sys - GDITAG_HMGR_RFONT_TYPE Gh?@ - win32k.sys - GDITAG_HMGR_BRUSH_TYPE Gh?> - win32k.sys - GDITAG_HMGR_ICMCXF_TYPE Gh?0 - win32k.sys - GDITAG_HMGR_DEF_TYPE Gh?1 - win32k.sys - GDITAG_HMGR_DC_TYPE Gh?4 - win32k.sys - GDITAG_HMGR_RGN_TYPE Gh?5 - win32k.sys - GDITAG_HMGR_SURF_TYPE Gh?6 - win32k.sys - GDITAG_HMGR_CLIENTOBJ_TYPE Gh?7 - win32k.sys - GDITAG_HMGR_PATH_TYPE Gh?8 - win32k.sys - GDITAG_HMGR_PAL_TYPE Gh?9 - win32k.sys - GDITAG_HMGR_ICMLCS_TYPE Gh?A - win32k.sys - GDITAG_HMGR_UMPD_TYPE Gh?B - win32k.sys - GDITAG_HMGR_HLSURF_TYPE Gh?E - win32k.sys - GDITAG_HMGR_META_TYPE Gh?L - win32k.sys - GDITAG_HMGR_DRVOBJ_TYPE Gh?? - win32k.sys - GDITAG_HMGR_SPRITE_TYPE Gh00 - win32k.sys - GDITAG_HMGR_START Ghab - win32k!FHOBJ::bAddPFELink - GDITAG_PFE_HASHBUCKET Ghas - win32k!FHMEMOBJ::FHMEMOBJ - GDITAG_PFE_HASHTABLE Ghml - win32k.sys - GDITAG_HMGR_LOCK Ghtc - win32k!bSetHTSrcSurfInfo - GDITAG_HALFTONE_COLORTRIAD Ghtm - win32k.sys - GDITAG_HMGR_TEMP Gi2c - win32k.sys - GDITAG_DDCCI Gicm - win32k.sys - GDITAG_ICM Giga - win32k.sys - GDITAG_PRIVATEGAMMA Giog - win32k.sys - GDITAG_COMPOSEDGAMMA Gkbm - win32k.sys - GDITAG_KMODE_BITMAP Gla: - win32k.sys - GDITAG_HMGR_LOOKASIDE_LFONT_TYPE Gla; - win32k.sys - GDITAG_HMGR_LOOKASIDE_RFONT_TYPE Gla@ - win32k.sys - GDITAG_HMGR_LOOKASIDE_BRUSH_TYPE Gla0 - win32k.sys - GDITAG_HMGR_LOOKASIDE_START Gla1 - win32k.sys - GDITAG_HMGR_LOOKASIDE_DC_TYPE Gla4 - win32k.sys - GDITAG_HMGR_LOOKASIDE_RGN_TYPE Gla5 - win32k.sys - GDITAG_HMGR_LOOKASIDE_SURF_TYPE Gla8 - win32k.sys - GDITAG_HMGR_LOOKASIDE_PAL_TYPE Glas - win32k.sys - GDITAG_SCAN_LOOKASIDE_LIST Gldv - win32k.sys - GDITAG_LDEV Glid - win32k!GetLanguageID - GDITAG_LOCALEINFO Glnk - win32k!FHOBJ::bAddPFELink - GDITAG_PFE_LINK Gmap - win32k!InitializeFontSignatures - GDITAG_FONT_MAPPER Gmso - win32k!MULTISORTBLTORDER::MULTISORTBLTORDER - GDITAG_DISPURF_SORT Gmul - win32k!MULTIFONT::MULTIFONT - GDITAG_MULTIFONT Gnls - win32k.sys - GDITAG_NLS Gogl - win32k!iOpenGLExtEscape - GDITAG_OPENGL GOPM - win32k.sys - GDITAG_OPM GPal - win32k.sys - GDITAG_PALETTE Gpan - win32k.sys - GDITAG_PANNING_PDEV Gpat - win32k.sys - GDITAG_PATHOBJ Gpfe - win32k!PFFMEMOBJ::bAllocPFEData - GDITAG_PFF_INDEXES Gpff - win32k.sys - GDITAG_PFF Gpft - win32k!pAllocateAndInitializePFT - GDITAG_PFT Gpgb - win32k!EngPlgBlt - GDITAG_PLGBLT_DATA Gpid - win32k!NtGdiSetPUMPDOBJ - GDITAG_PRINTCLIENTID Gppo - win32k!XCLIPOBJ::ppoGetPath - GDITAG_CLIP_PATHOBJ Gppt - win32k!PROXYPORT::PROXYPORT - GDITAG_PROXYPORT Gpre - win32k!pSpCreatePresent - GDITAG_PRESENT Gqnk - win32k!bComputeQuickLookup - GDITAG_LFONT_QUICKLOOKUP Grgb - win32k.sys - GDITAG_PALETTE_RGB_XLATE Grgn - win32k.sys - GDITAG_REGION Grsd - win32k.sys - GDITAG_REGISTRY_SECURITY_DESCRIPTOR Gsem - win32k.sys - GDITAG_SEMAPHORE Gsp - win32k!pSpCreateSprite - GDITAG_SPRITE Gspm - win32k.sys - GDITAG_METASPRITE Gspr - win32k.sys - GDITAG_SPRITESCAN Gsta - win32k.sys - GDITAG_STACKTRACE Gsth - win32k.sys - GDITAG_STRETCHBLT Gsty - win32k!GreExtCreatePen - GDITAG_PENSTYLE Gsux - win32k.sys - GDITAG_SFM Gtmp - win32k.sys - GDITAG_TEMP GTmp - win32k!AllocFreeTmpBuffer - GDITAG_TEMP_THREADLOCK Gtmw - win32k!vIFIMetricsToTextMetricW - GDITAG_TEXTMETRICS Gtvp - win32k!PFFOBJ::bAddPvtData - GDITAG_PFF_DATA Gtvt - win32k!bTriangleMesh - GDITAG_TRIANGLE_MESH Gtxt - win32k.sys - GDITAG_TEXT Gubm - win32k.sys - GDITAG_UMODE_BITMAP GUma - win32k!GDIEngUserMemAllocNodeAlloc - GDITAG_ENG_USER_MEM_ALLOC_TABLE Gump - win32k.sys - GDITAG_UMPD Gvds - win32k!MulEnablePDEV - GDITAG_HDEV GVdv - win32k.sys - GDITAG_VDEV GVms - win32k!MulSaveScreenBits - GDITAG_MULTISAVEBITS GVsf - win32k!MulCreateDeviceBitmap - GDITAG_MDSURF Gwnd - win32k.sys - GDITAG_WNDOBJ Gxlt - win32k.sys - GDITAG_PXLATE Gxpd - win32k!XUMPDOBJ::XUMPDOBJ - GDITAG_UMPDOBJ knlf - win32k.sys - GDITAG_FONT_LINK PASf - win32k.sys - GDITAG_PANNING_SURFACE PSlo - win32k.sys - GDITAG_PANNING_SHADOWLOCK Ssrl - win32k.sys - GDITAG_SINGLEREADERLOCK TTFC - win32k.sys - GDITAG_TT_FONT_CACHE Ttfd - win32k.sys - GDITAG_TT_FONT Vtfd - win32k.sys - GDITAG_VF_FONT W32l - win32k!W32PIDLOCK::vInit - GDITAG_W32PIDLOCK SFMb - win32k!SfmTokenArray::EnsureTokenBufferSize - GDITAG_TOKENARRAY Gnff - win32k.sys - GDITAG_NETWORKED_FONT_FILE_TABLE Gtff - win32k.sys - GDITAG_TRUSTED_FONT_FILE_TABLE Gala - win32k.sys - GDITAG_ADAPTER_LUID_ARRAY FDpd - win32k.sys - GDITAG_UMFD_PDEV FDev - win32k.sys - GDITAG_UMFD_EVENT FDUm - win32k.sys - GDITAG_UMFD_UM_BUFFER FDtl - win32k.sys - GDITAG_UMFD_TLS FDrq - win32k.sys - GDITAG_UMFD_REQUEST GFdk - win32k.sys - GDITAG_UMFD_KERNEL_ALLOCATION UHFF - win32k.sys - GDITAG_UMFD_HFF FDat - win32k.sys - GDITAG_UMFD_GLYPHATTRS GMFF - win32k.sys - GDITAG_FONT_MAPPER_FAMILY_FALLBACK GFIC - win32k.sys - GDITAG_FONT_INTENSITY_CORRECTION Ghmc - win32k!GdiHandleManager::Create - GDITAG_HANDLE_MANAGER Getc - win32k!GdiHandleEntryTable::_Create - GDITAG_HANDLE_ENTRY_TABLE Gelt - win32k!EntryDataLookupTable::Create - GDITAG_ENTRY_DATA_LOOKUP_TABLE Gelc - win32k!EntryDataLookupTable::Initialize - GDITAG_ENTRY_DATA_LOOKUP_TABLE_COLUMN Gpbm - win32k.sys - GDITAG_POOL_BITMAP_BITS Gapl - win32k.sys - GDITAG_APAL_TABLE Gscn - win32k.sys - GDITAG_SCAN_ARRAY GGG0 - win32k.sys - GDITAG_CORE_SESSION_GLOBALS GGG1 - win32kbase.sys - GDITAG_BASE_SESSION_GLOBALS GGG2 - win32kmin.sys - GDITAG_MIN_SESSION_GLOBALS GGG3 - win32kfull.sys - GDITAG_FULL_SESSION_GLOBALS GGG4 - win32kfull.sys - GDITAG_HT_SESSION_GLOBALS GGG5 - win32kfull.sys - GDITAG_UMFD_SESSION_GLOBALS GGG6 - win32kfull.sys - GDITAG_TTFD_SESSION_GLOBALS GGG7 - win32kfull.sys - GDITAG_TTS_SESSION_GLOBALS Gtrn - win32kbase.sys - GDITAG_THREAD_RESTRICTED_NEW_HANDLES Rust - win32kbase_rs.sys - GDITAG_RUST RstG - win32kbase.sys - GDITAG_RUST_GLOBALS UCNS - win32kfull.sys - GDITAG_UNEXPECTED_CODEPATH dAcc - win32kbase!CDeviceAcceleration::operator new - CDACC_TAG eMyS- win32k!CInputSystemMetrics::operator new - SYSTEMMETRICS_TAG EKmm - win32kbase!EtwTraceAuditApiQueryAddressVADInformation - ETW_MEMORY_MAPPED_NAME_TAG EKsa - win32kbase!CAsyncKeyEventMonitor::operator new - USERTAG_ASYNCKEYEVENT jczD - win32kbase!CCursorClip::DeadzoneJumping - DEADZONE_CUR_TAG rpTC - win32k!CTouchProcessor::operator new - CTPRO_TAG oCnI - win32k!CInputConfig::operator new - INPUTCONFIG_TAG piHC - win32k!CRIMBase::operator new - CHINP_TAG prKP - win32kbase!CMouseProcessor::operator new - CMKRO_TAG prMP - win32kbase!CMouseProcessor::operator new - CMPRO_TAG Ucal - win32k!DriverEntry - USERTAG_SERVICE_TABLE Uiso - win32k!TypeIsolation::Create - USERTAG_ISOHEAP Umam - win32k!UpdateDesktopMonitorNavigationOrder - USERTAG_MONITOR_SPATIAL Uman - win32k!NtUserSetManipulationInputTarget - USERTAG_DWM_MANIPULATION Urdr - win32k!SetRedirectionBitmap - USERTAG_REDIRECT Usac - win32k!_CreateAcceleratorTable - USERTAG_ACCEL Usai - win32k!zzzAttachThreadInput - USERTAG_ATTACHINFO Usal - win32k!InitSwitchWndInfo - USERTAG_ALTTAB Usas - win32kfull!CForegroundLaunch::_AppStarting_Set - USERTAG_APPSTARTING Usbg - win32k!xxxLogClipData - USERTAG_DEBUG Usbm - win32k!SetGestureConfigSettings - USERTAG_BITMASK Usbr - win32k!NtUserShutdownBlockReasonCreate - USERTAG_BLOCKREASON Usbs - win32k!CShellForegroundBoost::operator new - USERTAG_SHELLBOOST Usca - win32k!NtUserSetCalibrationData - USERTAG_CALIBRATIONDATA Uscb - win32k!_ConvertMemHandle - USERTAG_CLIPBOARD Uscc - win32k!AllocCallbackMessage - USERTAG_CALLBACK Uscd - win32k!SetWindowCompositionInfo - USERTAG_COMPOSITIONPROP UsCd - win32k!xxxUserChangeDisplaySettings - USERTAG_CDS Usce - win32k!RetrieveLinkCollection - USERTAG_COLLINK Usci - win32k!InitSystemThread - USERTAG_CLIENTTHREADINFO UscI - win32k!CitStart - USERTAG_COMPAT_IMPACT Uscl - win32k!ClassAlloc - USERTAG_CLASS Usc1 - win32kbase!CCursorClip::operator new - USERTAG_CURSORCLIP Uscm - win32k!InitScancodeMap - USERTAG_SCANCODEMAP Uscp - win32k!CreateDIBPalette - USERTAG_CLIPBOARDPALETTE Uscr - win32k!NtUserSetSysColors - USERTAG_COLORS Uscs - win32kfull!NtUserSetProcessWin32Capabilities - USERTAG_CAPUPDATE Usct - win32k!CkptRestore - USERTAG_CHECKPT Uscu - win32k!_CreateEmptyCursorObject - USERTAG_CURSOR Uscv - win32k!NtUserSetSysColors - USERTAG_COLORVALUES Uscw - win32k!CacheAxisChildIndex - USERTAG_CONTACTRELATIVE UsDI - win32k!CreateDeviceInfo - USERTAG_DEVICEINFO UsDc - win32k!NtUserDisplayConfigSetDeviceInfo - USERTAG_DISPLAYCONFIG UsDt - win32k!NtUserCtxDisplayIOCtl - USERTAG_DISPLAYIOCTL Usd1 - win32k!FreeListAdd - USERTAG_DDE1 Usd2 - win32k!_DdeSetQualityOfService - USERTAG_DDE2 Usd4 - win32k!AddPublicObject - USERTAG_DDE4 Usd5 - win32k!xxxCsEvent - USERTAG_DDE5 Usd6 - win32k!xxxCsEvent - USERTAG_DDE6 Usd7 - win32k!xxxCsEvent - USERTAG_DDE7 Usd8 - win32k!xxxMessageEvent - USERTAG_DDE8 Usd9 - win32k!xxxCsDdeInitialize - USERTAG_DDE9 UsdA - win32k!NewConversation - USERTAG_DDEa UsdB - win32k!Createpxs - USERTAG_DDEb Usdc - win32k!CreateCacheDC - USERTAG_DCE UsdD - win32k!NtUserfnDDEINIT - USERTAG_DDEd UsdE - win32k!xxxClientCopyDDEIn1 - USERTAG_DDE Usdl - win32kbase!UserGetLoadedImageInformation - USERTAG_DELAYLOAD Usdi - win32k!CreateMonitor - USERTAG_DISPLAYINFO Usdm - win32k!CreateDCompositionHwndTargetInfo - USERTAG_DCOMPHWNDTARGETINFO Usdp - win32k!NtUserDelegateCapturePointers - USERTAG_DELEGATEPOINTERSTRUCT Usds - win32k!xxxDragObject - USERTAG_DRAGDROP Usdv - win32k!NtUserfnINDEVICECHANGE - USERTAG_DEVICECHANGE Usdw - win32k!GetProductString - USERTAG_DEVICENAME UsEC - win32k!AddWEFCOMPInvalidateSListEntry - USERTAG_WSEXCOMPINVALID Used - win32k!AddOrUpdateListener - USERTAG_EDGY User - win32k!InitCreateUserCrit - USERTAG_ERESOURCE Usex - win32k!IsDeviceExcluded - USERTAG_EXCLUDEDLIST Usfb - win32k!CForegroundLaunch::operator new - USERTAG_FOREGROUNDLAUNCH Usfd - win32k!CPointerFeedback::operator new - USERTAG_POINTERFEEDBACK Usfi - win32k!CreatePointerDeviceInfo - USERTAG_FEATUREIOCTL Usfg - win32k!NtUserSetAdditionalForegroundBoostProcesses - USERTAG_ADDITIONALFGBOOST Usfl - win32k!InitializeWin32KSyscallFilter - USERTAG_SERVICEFILTER Usft - win32k!CreateValidTouchInputInfo - USERTAG_FORWARDTOUCHMESSAGE Usgc - win32k!_StoreGestureConfig - USERTAG_GESTURECONFIG Usgd - win32k!SetGestureConfigSettings - USERTAG_GESTUREDATA Usgh - win32k!NtUserUserHandleGrantAccess - USERTAG_GRANTEDHANDLES Usgi - win32k!NtUserSendGestureInput - USERTAG_GESTUREINFO Usgt - win32k!AddGhost - USERTAG_GHOST Usha - win32k!AllocateHidData - USERTAG_HIDDATA Ushb - win32k!NtUserGetDCompositionHwndBitmap - USERTAG_DCOMPHWNDBITMAP Ushc - win32k!AllocateHidConfigDesc - USERTAG_HIDCONFIG UshD - Win32k!AllocateHidDesc - USERTAG_HIDDESC Ushf - win32k!AllocateHidConfigDesc - USERTAG_HIDFEATURE Ushi - win32k!AllocateHidDesc - USERTAG_HIDINPUT Ushk - win32k!_RegisterHotKey - USERTAG_HOTKEY Ushl - win32k!INLPHLPSTRUCT - USERTAG_HELP UshP - win32k!HidCreateDeviceInfo - USERTAG_HIDPREPARSED Ushr - win32k!AllocateAndLinkHidPageOnlyRequest - USERTAG_HIDPAGEREQUEST UshR - win32k!AllocateHidProcessRequest - USERTAG_HIDPROCREQUEST Usht - win32k!AllocateProcessHidTable - USERTAG_HIDTABLE UshT - win32k!AllocateAndLinkHidTLCInfo - USERTAG_HIDTLC Usig - win32kbase!CInputGlobals::operator new - USERTAG_INPUTGLOBALS Usih - win32k!SetImeHotKey - USERTAG_IMEHOTKEY Usim - win32k!CreateInputContext - USERTAG_IME Usip - win32k!CreateNode - USERTAG_INPUTPOINTERNODE Usiq - win23k!CInputQueueProp - USERTAG_COMPOSITIONINPUTQUEUE Usit - win32k!InjectTouchInput - USERTAG_INJECT_TOUCH Usim - win32k!InjectMouseInput - USERTAG_INJECT_MOUSE Usik - win32k!InjectKeyboardInput - USERTAG_INJECT_KEYBOARD Usix - win32k!AllocInputTransformEntry - USERTAG_INPUT_TRANSFORM Uisc - win32k!DWMSetInputSystemOutputConfig - USERTAG_INPUT_CONFIG Ucsc - win32k!SetShellCursorClip - USERTAG_SHELL_CURSOR_CLIP Usjb - win32k!CreateW32Job - USERTAG_W32JOB Usjx - win32k!JobCalloutAddProcess - USERTAG_W32JOBEXTRA UsKe - win32k!CreateKernelEvent - USERTAG_KEVENT UsKf - win32k!InitCreateUserCrit - USERTAG_FASTMUTEX UsKg - win32k!UserCritTelemetry::operator new - USERTAG_USERCRIT_TELEMETRY UsKm - win32k!DriverEntry - USERTAG_KMUTEX UsKs - win32k!CreateKernelSemaphore - USERTAG_KSEMAPHORE UsKt - win32k!RemoteConnect - USERTAG_KTIMER UsKw - win32k!xxxDesktopThread - USERTAG_KWAITBLOCK UsKv - win32k!ReadTabletButtonConfig - USERTAG_KEYVALUEINFORMATION Uskb - win32k!xxxLoadKeyboardLayoutEx - USERTAG_KBDLAYOUT Uskd - win32k!xxxCreateDesktopEx2 - USERTAG_KERNELDESKTOPINFO Ukdp - win32k!Win32UserInitialize - USERTAG_KERNELDISPLAYINFO Uske - win32k!GetKbdExId - USERTAG_KBDEXID Uskf - win32k!LoadKeyboardLayoutFile - USERTAG_KBDFILE Usks - win32k!PostUpdateKeyStateEvent - USERTAG_KBDSTATE Uskt - win32k!ReadLayoutFile - USERTAG_KBDTABLE Usla - win32k!InitLockRecordLookaside - USERTAG_LOOKASIDE Usld - win32k!GrowLogIfNecessary - USERTAG_LOGDESKTOP Uslr - win32k!InitLockRecordLookaside - USERTAG_LOCKRECORD Uslw - win32kbase!CLastWokenThread::operator new - USERTAG_LASTWOKENTHREAD UsMP - win32k!GeneratePointerMessageFromMouse - USERTAG_MOUSEINPOINTER usmd - win32k!xxxSetModernAppWindow - USERTAG_MODERNDESKTOPAPP Usmg - win32k!Magxxx - USERTAG_MAGNIFICATION Usmi - win32k!MirrorRegion - USERTAG_MIRROR Usml - win32k!MsgLookupTableAlloc - USERTAG_MESSAGE_FILTER Usmo - win32k!_EnableIAMAccess - USERTAG_MOSH Usmp - win32k!AllocMousePromotionEntry - USERTAG_MOUSEPROMOTIONENTRY Usmr - win32k!SnapshotMonitorRects - USERTAG_MONITORRECTS Usms - win32k!xxxMoveSize - USERTAG_MOVESIZE Usmt - win32k!xxxMNAllocMenuState - USERTAG_MENUSTATE Usmx - win32k!InitializeMonitorDpiRectsAndTransforms - USERTAG_MATRIX Usna - win32k!UserPostNKAPC - USERTAG_NKAPC Usny - win32k!CreateNotify - USERTAG_NOTIFY Uspa - win32k!AllocPointerMsgParamsList - USERTAG_POINTERMSGPARAMS Uspb - win32k!fnPOWERBROADCAST - USERTAG_POWERBROADCAST Uspd - win32k!PointerList::AddMsgData - USERTAG_POINTERINPUTMSGDATA Uspc - win32k!CreatePointerDeviceInfo - USERTAG_POINTERDEVICE UspC - win32k!AssignPointerCaptureData - USERTAG_POINTERCAPTUREDATA Uspe - win32k!AllocPointerInfoNodeList - USERTAG_POINTERINPUTEVENT Uspf - win32k!CommitHoldingFrame - USERTAG_POINTERINPUTFRAME Uspg - win32k!GeneratePointerMessage - USERTAG_POINTERINPUTMSG Uspi - win32k!MapDesktop - USERTAG_PROCESSINFO Uspk - win32k!GetProductString - USERTAG_PRODUCTSTRING Uspl - win32k!xxxPollAndWaitForSingleObject - USERTAG_POLLEVENT Uspm - win32k!MNAllocPopup - USERTAG_POPUPMENU Uspn - win32k!CreateProfileUserName - USERTAG_PROFILEUSERNAME Uspo - win32k!QueuePowerRequest - USERTAG_POWER Uspp - win32k!AllocateAndLinkHidTLCInfo - USERTAG_PNP Uspq - win32k!CreatePointerDeviceInfo - USERTAG_PARALLELPROP UspQ - win32k!AllocPointerQFrameList - USERTAG_POINTERQFRAME Uspr - win32k!GetPrivateProfileStruct - USERTAG_PROFILE Usps - win32k!InitPlaySound - USERTAG_PLAYSOUND Uspt - win32k!AllocThreadPointerData - USERTAG_POINTERTHREADDATA Uspv - win32k!ContactVisualization - USERTAG_POINTERVISUALIZATION Uspw - win32k!CDynamicArray::Add - USERTAG_DYNAMICARRAY Uspx - win32k!GetCustomFlickPath - USERTAG_PTRCFG Usph - win32k!CreateProp - USERTAG_PROPLISTHEADER Uspy - win32k!CreateProp - USERTAG_PROPLIST Usql - win32k!EnsureQMsgLog - USERTAG_QMSGLOG Usqm - win32k!InitQEntryLookaside - USERTAG_QMSG Usqo - win32k!tagWND::QosLinkProcess - USERTAG_QOSLINK Usqr - win32kbase!CQoSReport::operator new - USERTAG_QOSREPORT Usqu - win32k!InitQEntryLookaside - USERTAG_Q Usrd - win32k!StoreRawDataBlock - USERTAG_POINTERRAWDATA Usri - win32k!NtUserRegisterRawInputDevices - USERTAG_RAWINPUTDEVICE Usrt - win32k!xxxDrawMenuItemText - USERTAG_RTL Ussa - win32k!xxxBroadcastMessage - USERTAG_SMS_ASYNC Ussb - win32k!CreateSpb - USERTAG_SPB Ussc - win32k!xxxInterSendMsgEx - USERTAG_SMS_CAPTURE Ussd - win32k!xxxAddShadow - USERTAG_SHADOW Usse - win32k!SetDisconnectDesktopSecurity - USERTAG_SECURITY Ussi - win32k!NtUserSendInput - USERTAG_SENDINPUT Ussj - win32k!NtUserSendTouchInput - USERTAG_SENDTOUCHINPUT Ussm - win32k!InitSMSLookaside - USERTAG_SMS Usss - win32k!xxxBroadcastMessage - USERTAG_SMS_STRING Ussw - win32k!_BeginDeferWindowPos - USERTAG_SWP Ussh - win32k!zzzSetWindowsHookEx - USERTAG_HOOK Uscd - win32k!GetCPD - USERTAG_CPD Ussr - win32k!xxxDesktopRecalc - USERTAG_ADR Ussy - win32k!xxxDesktopThread - USERTAG_SYSTEM UsTI - win32k!NtUserQueryInformationThread - USERTAG_THREADINFORMATION Usta - win32k!AssociateShellFrameAppThreads - USERTAG_THREADASSOCIATION Usti - win32k!AllocateW32Thread - USERTAG_THREADINFO Ustn - win32k!AllocateW32Thread - USERTAG_THREADINFONP Ustk - win32k!HeavyAllocPool - USERTAG_STACK Ustm - win32k!InternalSetTimer - USERTAG_TIMER Ustl - win32k!AllocateW32Thread - USERTAG_TLS Usto - win32k!xxxConnectService - USERTAG_TOKEN Ustp - win32k!FindOrCreateHoldingFrameForDevice - USERTAG_TOUCHPADSTATE Usts - win32k!_Win32CreateSection - USERTAG_SECTION Ustx - win32k!NtUserDrawCaptionTemp - USERTAG_TEXT Usty - win32k!NtUserResolveDesktopForWOW - USERTAG_TEXT2 Ustz - win32k!AllocTouchInputInfo - USERTAG_TOUCHINPUTINFO Usua - win32k!TabletButtonHandler - USERTAG_TABLETBUTTONUSAGE Usub - win32k!NtUserToUnicodeEx - USERTAG_UNICODEBUFFER Usvc - win32k!_GetPointerDeviceProperties - USERTAG_VALUECAP Usvi - win32k!ResizeVisExcludeMemory - USERTAG_VISRGN Usvl - win32k!VWPLAdd - USERTAG_VWPL UsWE - win32k!ReportHungExplorerToWer - USERTAG_WER UsWP - win32k!SetGlobalWallpaperSettings - USERTAG_WALLPAPER Uswc - win32k!SetSwapChainProp - USERTAG_SWAPCHAIN Uswd - win32k!xxxCreateWindowEx - USERTAG_WINDOW Uswe - win32k!_SetWinEventHook - USERTAG_WINEVENT Uswi - win32k!RemoteShadowStart - USERTAG_WIREDATA Uswl - win32k!BuildHwndList - USERTAG_WINDOWLIST Uswo - win32k!zzzInitTask - USERTAG_WOWTDB Uswr - win32k!CoreWindowProp - USERTAG_COREWINDOWPROP Usrr - win32k!TouchTargetingRankForRegion - USERTAG_RANKFORRGN Uslt - win32k!InitializeWin32PoolTracking - USERTAG_LEAKEDTAG UsI0 - win32k!NSInstrumentation::CBackTraceStorageUnit::Create - USERTAG_BACKTRACE_STORAGE_UNIT UsI1 - win32k!NSInstrumentation::CBackTraceBucket::Create - USERTAG_BACKTRACE_BUCKET UsI2 - win32k!NSInstrumentation::CBackTraceBucket::CreateContext - USERTAG_BACKTRACE_BUCKET_CONTEXT UsI3 - win32k!NSInstrumentation::CBackTraceStoreEx::Create - USERTAG_BACKTRACE_STORE UsI4 - win32k!NSInstrumentation::CBloomFilter::Create - USERTAG_BLOOMFILTER UsI5 - win32k!NSInstrumentation::CPlatformSignal::Create - USERTAG_INSTRUMENTATION_EVENT UsI6 - win32k!NSInstrumentation::CLeakTrackingAllocator::Create - USERTAG_LEAK_TRACKING_ALLOCATOR UsI7 - win32k!NSInstrumentation::CPrioritizedWriterLock::Create - USERTAG_PRIORITIZED_WRITER_LOCK UsI8 - win32k!NSInstrumentation::CPointerHashTable::Create - USERTAG_POINTER_HASH_TABLE UsI9 - win32k!NSInstrumentation::CReferenceTracker::Create - USERTAG_REFERENCE_TRACKER UsIa - win32k!NSInstrumentation::CReferenceTracker::CReferenceCountedType::Create - USERTAG_REFERENCE_COUNTED_TYPE_HANDLE UsIb - win32k!NSInstrumentation::CReferenceTracker::CReferenceCountedType::BeginTrack - USERTAG_REFERENCE_COUNTED_OBJECT_HANDLE UsIc - win32k!NSInstrumentation::CSortedVector::Create - USERTAG_SORTED_VECTOR UsId - win32k!NSInstrumentation::CSharedStorage::InitializeCommon - USERTAG_SHARED_STORAGE Udpi - win32k!CreateSystemFontsForDpi - USERTAG_DPIMETRICS Ubwd - win32kbase!NtUserCreateBaseWindow - USERTAG_BASE_WINDOW Ubws - win32kmin!xxxMinSendPointerMessageWorker - USERTAG_BASE_WINDOW_SENTLIST Urtm - win32kfull!InitRotationManager - USERTAG_ROTMGR Usws - win32kfull!xxxCreateWindowEx - USERTAG_WND_SERVER_EXTRA_BYTES Udwp - win32kbase!SetMonitorData - USERTAG_REFCOUNTED_DPI_INFORMATION Uiim - win32kbase!CTouchProcessor::ForwardInputToManipulationThread - USERTAG_INPUT_INTEROP_MESSAGE Usdz - win32kbase!DelayZonePalmRejection::_AddDelayZoneToListInternal - USERTAG_DELAYZONEINFO Uvtp - win32kbase!VirtualTouchpadProcessor::GetInstance - USERTAG_VIRTUALTOUCHPAD Umen - win32kbase!HMAllocObject - USERTAG_MENU Umit - win32kfull!SetLPITEMInfoNoRedraw - USERTAG_MENUITEM Usol - win32kmin!InitSmartObjLookaside - USERTAG_SMOBJ_LOOKASIDE Uawp - win32kfull!AdvancedWindowPos - USERTAG_AWP Utli - win32kbase!InputTraceLogging::PerfRegion::Initialize - USERTAG_PERFREGION_LOOKASIDE Uagm - win32kbase!CActivationObjectManager::operator new - USERTAG_ACTIVATION_GROUP_MANAGEMENT Ucnv - win32kbase!InputObjectMap::AllocateBucket - USERTAG_INPUTOBJECTMAP Uvst - win32kfull!SetVisRgnTrackerProp - USERTAG_VISRGNTRACKER Urav - win32kmin!minPostInputMessage - USERTAG_QMSGVARPAYLOAD Ugcd - win32kbase!NtUserGetInputContainerId - USERTAG_CONTAINERINFO Umid - win32kfull!GetMouseDeviceHardwareId - USERTAG_MOUSE_HARDWARE_ID Uwmc - win32kfull!WindowMargins::CWindowMarginProp::CreateWindowProp - USERTAG_WINDOW_MARGINS_CHANGE Umwm - win32kfull!ShellWindowPos::MigrateWindowAsync - USERTAG_MIGRATE_WINDOW_ASYNC Uttd - win32kfull!_RegisterForTooltipDismissNotification - USERTAG_TOOLTIP_DISMISS Utte - win32kfull!CursorApiRouter::operator new - USERTAG_CURSORAPIROUTER Uttf - win32kbase!CDesktopInputSink::operator new - USERTAG_DESKTOP_INPUT_SINK Utti - win32kfull!InitializeWinArrangeGlobal - USERTAG_WINARRANGE_GLOBAL Utth - win32kbase!RootSynthesizedMouseList::operator new - USERTAG_ROOT_SYNTHESIZED_MOUSE_LIST Usde - Win32kbase!HMAllocObjectEx - USERTAG_SECURITYDESCRIPTOR Uctb - Win32kbase!HMAllocObjectEx - USERTAG_CAPABILITY_TABLE Uste - Win32kbase!UserSetWindowMessageCapability - USERTAG_CAPABILITY_TABLE_ENTRY Usos - Win32kbase!HMAllocObjectEx - USERTAG_OBJECT_SECURITY Uttj - win32k!SGDInitializeWin32kSysSessionState - USERTAG_WIN32K_SYS_SESSION_STATE Uttk - win32kbase!InputDelegation::CInputDelegationInfo::Initialize - USERTAG_INPUTDELEGATIONINFO Uccr - win32kbase!CContentRects::GetInstance - USERTAG_CONTENT_RECT MCGA - win32kfull!xxxChangeMonitorFlags - USERTAG_MONITOR_COUNT_ARRAY Usnb - win32kfull!CDwmWindowNotifyBatchProp::CreateWindowProp - USERTAG_DWMNOTIFYBATCH Usnc - win32k!W32SessionInitialize - USERTAG_SESSION_GLOBALS UApt - win32k!CreateWin32kApiSetTable - USERTAG_APISET_TABLE UpOs - win32kfull!NtUserSetProcessObservableState - USERTAG_PROCESS_OBSERVABLE_STATE Uems - win32kfull!MoveSizeApi::PostAsyncMoveSize - USERTAG_ENTERMOVESIZELOOP usck - Win32kbase!CoreMessagingKPort::operator new - USERTAG_COREMESSAGINGKPORT DCa0 - win32kbase!DirectComposition::CAtlasedRectsMeshMarshaler::_allocate - DCOMPOSITIONTAG_ATLASEDRECTSMESHMARSHALER DCab - win32kbase!DirectComposition::CAnimationBinding::_allocate - DCOMPOSITIONTAG_ANIMATIONBINDING DCac - win32kbase!DirectComposition::CApplicationChannel::_allocate - DCOMPOSITIONTAG_APPLICATIONCHANNEL DCae - win32kbase!DirectComposition::CAnimationMarshaler::SetBufferProperty - DCOMPOSITIONTAG_ANIMATIONTIMEEVENTDATA DCag - win32kbase!DirectComposition::CAnimationMarshaler::SetBufferProperty - DCOMPOSITIONTAG_ANIMATIONSCENARIOGUID DCah - win32kbase!DirectComposition::CAnimationControllerMarshaler::_allocate - DCOMPOSITIONTAG_ANIMATIONCONTROLLERMARSHALER DCal - win32kbase!DirectComposition::CAnimationTimeList::_allocate - DCOMPOSITIONTAG_ANIMATIONTIMELIST DCam - win32kbase!DirectComposition::CCompositionAmbientLight::_allocate - DCOMPOSITIONTAG_AMBIENTLIGHTMARSHALER DCan - win32kbase!DirectComposition::CAnimationMarshaler::_allocate - DCOMPOSITIONTAG_ANIMATIONMARSHALER DCar - win32kbase!DirectComposition::CResourceMarshaler::_allocate - DCOMPOSITIONTAG_ABSTRACTRESOURCE DCat - win32kbase!DirectComposition::CLegacyAnimationTriggerMarshaler::_allocate - DCOMPOSITIONTAG_LEGACYANIMATIONTRIGGERMARSHALER DCaw - win32kbase!DirectComposition::CAtlasedRectsGroupMarshaler::_allocate - DCOMPOSITIONTAG_ATLASEDRECTSGROUPMARSHALER DCax - win32kbase!DirectComposition::CAnalogExclusiveViewMarshaler::_allocate - DCOMPOSITIONTAG_ANALOGEXCLUSIVEVIEWMARSHALER DCay - win32kbase!DirectComposition::CAnalogTextureTargetMarshaler::_allocate - DCOMPOSITIONTAG_ANALOGTEXTURETARGETMARSHALER DCaz - win32kbase!DirectComposition::CAnalogCompositorMarshaler::_allocate - DCOMPOSITIONTAG_ANALOGCOMPOSITORMARSHALER DCba - win32kbase!DirectComposition::CBatch::_allocate - DCOMPOSITIONTAG_BATCH DCbd - win32kbase!DirectComposition::CBatchDeferralMarshaler::_allocate - DCOMPOSITIONTAG_BATCHDEFERRALMARSHALER DCbc - win32kbase!DirectComposition::CChannel::_allocate - DCOMPOSITIONTAG_CHANNEL DCbf - win32kbase!DirectComposition::Memory::Allocate - DCOMPOSITIONTAG_BUFFER DCbl - win32kbase!DirectComposition::CBackChannelMarshaler::_allocate - DCOMPOSITIONTAG_BACKCHANNELMARSHALER DCbr - win32kbase!DirectComposition::CBatch::CSystemResourceReference::_allocate - DCOMPOSITIONTAG_BATCH_RESOURCEREF DCbs - win32kbase!DirectComposition::CBatchSharedMemoryPool::_allocate - DCOMPOSITIONTAG_BATCH_SHARED_MEMORY_POOL DCc2 - win32kbase!DirectComposition::CComponentTransform2DMarshaler::_allocate - DCOMPOSITIONTAG_COMPONENTTRANSFORM2DMARSHALER DCca - win32kbase!DirectComposition::CConditionalExpressionMarshaler::_allocate - DCOMPOSITIONTAG_CONDITIONALEXPRESSIONMARSHALER DCcb - win32kbase!DirectComposition::CCompositionSurfaceBitmapMarshaler::_allocate - DCOMPOSITIONTAG_HCOMPBITMAPMARSHALER DCcc - win32kbase!DirectComposition::CConnection::_allocate - DCOMPOSITIONTAG_CONNECTION DCcg - win32kbase!DirectComposition::CClipGroupMarshaler::_allocate - DCOMPOSITIONTAG_CLIPGROUPMARSHALER DCch - win32kbase!DirectComposition::CChannelHandleTable::_allocate - DCOMPOSITIONTAG_CHANNELHANDLETABLE DCck - win32kbase!DirectComposition::CBaseExpressionMarshaler::SetBufferProperty - DCOMPOSITIONTAG_DEBUGTAG DCcl - win32kbase!DirectComposition::CCompositionLight::_allocate - DCOMPOSITIONTAG_LIGHTMARSHALER DCco - win32kbase!DirectComposition::CComponentTransform3DMarshaler::_allocate - DCOMPOSITIONTAG_COMPONENTTRANSFORM3DMARSHALER DCcp - win32kbase!DirectComposition::CPushLockCriticalSection::_allocate - DCOMPOSITIONTAG_PUSHLOCKCRITICALSECTION DCcq - win32kbase!DirectComposition::CCaptureControllerMarshaler::_allocate - DCOMPOSITIONTAG_CAPTURECONTROLLERMARSHALER DCcr - win32kbase!DirectComposition::CCaptureRenderTargetMarshaler::_allocate - DCOMPOSITIONTAG_CAPTURERENDERTARGETMARSHALER DCcs - win32kbase!DirectComposition::CCriticalSection::_allocate - DCOMPOSITIONTAG_CRITICALSECTION DCct - win32kbase!DirectComposition::CApplicationChannel::AllocateTableEntry - DCOMPOSITIONTAG_CHANNELTABLE DCcv - win32kbase!DirectComposition::CrossChannelVisualData::_allocate - DCOMPOSITIONTAG_CROSSCHANNELVISUALDATA DCcw - win32kbase!DirectComposition::CScreenCursorMarshaler::_allocate - DCOMPOSITIONTAG_SCREENCURSORMARSHALER DCcy - win32kbase!DirectComposition::CCursorVisualMarshaler::_allocate - DCOMPOSITIONTAG_CURSORVISUALMARSHALER DCd2 - win32kbase!DirectComposition::CStructDynamicArray::_allocate - DCOMPOSITIONTAG_STRUCTDYNAMICARRAY DCda - win32kbase!DirectComposition::CDCompDynamicArray::_allocate - DCOMPOSITIONTAG_DYNAMICARRAY DCdb - win32kbase!DirectComposition::CDCompDynamicArrayBase::_allocate - DCOMPOSITIONTAG_DYNAMICARRAYBASE DCdc - win32kbase!DirectComposition::CDwmChannel::_allocate - DCOMPOSITIONTAG_DWMCHANNEL DCdd - win32kbase!DirectComposition::CDDisplayRenderTargetMarshaler::_allocate - DCOMPOSITIONTAG_DDISPLAYRENDERTARGETMARSHALER DCde - win32kbase!DirectComposition::CDesktopTreeMarshaler::_allocate - DCOMPOSITIONTAG_DESKTOPTREEMARSHALER DCdi - win32kbase!DirectComposition::CDelegatedInkCanvasMarshaler::_allocate - DCOMPOSITIONTAG_DELEGATEDINKCANVASMARSHALER DCdj - win32kbase!DirectComposition::CLegacyStereoRenderTargetMarshaler::_allocate - DCOMPOSITIONTAG_LEGACYSTEREORENDERTARGETMARSHALER DCdk - win32kbase!DirectComposition::CLegacyRenderTargetMarshaler::_allocate - DCOMPOSITIONTAG_LEGACYRENDERTARGETMARSHALER DCdl - win32kbase!DirectComposition::CCompositionDistantLight::_allocate - DCOMPOSITIONTAG_DISTANTLIGHTMARSHALER DCdm - win32kbase!DirectComposition::CRemoteAppRenderTargetMarshaler::_allocate - DCOMPOSITIONTAG_REMOTEAPPRENDERTARGETMARSHALER DCdp - win32kbase!DirectComposition::CRemoteRenderTargetMarshaler::_allocate - DCOMPOSITIONTAG_REMOTERENDERTARGETMARSHALER DCds - win32kbase!DirectComposition::CDropShadowMarshaler::_allocate - DCOMPOSITIONTAG_DROPSHADOWMARSHALER DCdt - win32kbase!DirectComposition::CCompositionDynamicTextureMarshaler::_allocate - DCOMPOSITIONTAG_COMPOSITIONDYNAMICTEXTUREMARSHALER DCef - win32kbase!DirectComposition::CCompiledEffect::_allocate - DCOMPOSITIONTAG_COMPILEDEFFECTMARSHALER DCeg - win32kbase!DirectComposition::CEffectGroupMarshaler::_allocate - DCOMPOSITIONTAG_EFFECTGROUPMARSHALER DCem - win32kbase!DirectComposition::CBaseExpressionMarshaler::SetBufferProperty - DCOMPOSITIONTAG_EXPRESSIONTARGETMASK DCep - win32kbase!DirectComposition::CCompiledEffectPropertyBag::_allocate - DCOMPOSITIONTAG_COMPILEDEFFECTPROPERTYBAGMARSHALER DCet - win32kbase!DirectComposition::CCompiledEffectTemplate::_allocate - DCOMPOSITIONTAG_COMPILEDEFFECTTEMPLATEMARSHALER DCev - win32kbase!DirectComposition::CEvent::_allocate - DCOMPOSITIONTAG_EVENT DCex - win32kbase!DirectComposition::CExpressionMarshaler::_allocate - DCOMPOSITIONTAG_EXPRESSIONMARSHALER DCey - win32kbase!DirectComposition::CEllipseGeometryMarshaler::_allocate - DCOMPOSITIONTAG_ELLIPSEGEOMETRYMARSHALER DCfb - win32kbase!DirectComposition::CTableTransferEffectMarshaler::SetBufferProperty - DCOMPOSITIONTAG_FILTEREFFECTBUFFER DCfe - win32kbase!DirectComposition::CFilterEffectMarshaler::_allocate - DCOMPOSITIONTAG_FILTEREFFECTMARSHALER DCff - win32kbase!DirectComposition::CFilterEffectMarshaler::Initialize - DCOMPOSITIONTAG_FILTERINPUTFLAGS DCfi - win32kbase!DirectComposition::CFilterEffectMarshaler::Initialize - DCOMPOSITIONTAG_FILTERINPUTS DCfj - win32kbase!DirectComposition::CFilterEffectMarshaler::Initialize - DCOMPOSITIONTAG_SUBRECTINPUTFLAGS DCg3 - win32kbase!DirectComposition::CTransform3DGroupMarshaler::_allocate - DCOMPOSITIONTAG_TRANSFORM3DGROUPMARSHALER DCgb - win32kbase!DirectComposition::CGradientLegacyMilBrushMarshaler::_allocate - DCOMPOSITIONTAG_GRADIENTLEGACYMILBRUSHMARSHALER DCgc - win32kbase!DirectComposition::CAnimationGlobalConfiguration::_allocate - DCOMPOSITIONTAG_ANIMATIONGLOBALCONFIGURATIONMARSHALER DCgd - win32kbase!DirectComposition::CGdiSpriteBitmapMarshaler::_allocate - DCOMPOSITIONTAG_GDISPRITEBITMAPMARSHALER DCge - win32kbase!DirectComposition::CGaussianBlurEffectMarshaler::_allocate - DCOMPOSITIONTAG_GAUSSIANBLUREFFECTMARSHALER DCgg - win32kbase!DirectComposition::CGeometry2DGroupMarshaler::_allocate - DCOMPOSITIONTAG_GEOMETRY2DGROUPMARSHALER DCgi - win32kbase!DirectComposition::CGenericInkMarshaler::_allocate - DCOMPOSITIONTAG_GENERICINKMARSHALER DCgm - win32kbase!DirectComposition::CGenericMarshaler::_allocate - DCOMPOSITIONTAG_GENERICMARSHALER DCgp - win32kbase!DirectComposition::CGenericProperty::_allocate - DCOMPOSITIONTAG_GENERICPROPERTY DCgr - win32kbase!DirectComposition::CCompositionGlyphRunMarshaler::_allocate - DCOMPOSITIONTAG_COMPOSITIONGLYPHRUNMARSHALER DCgs - win32kbase!DirectComposition::CColorGradientStopMarshaler::_allocate - DCOMPOSITIONTAG_COLORGRADIENTSTOPMARSHALER DCgv - win32kbase!DirectComposition::CGlobalDCompVisualMarshaler::_allocate - DCOMPOSITIONTAG_GLOBALDCOMPVISUALMARSHALER DChc - win32kbase!DirectComposition::CHolographicCompositionMarshaler::_allocate - DCOMPOSITIONTAG_HOLOGRAPHICCOMPOSITIONMARSHALER DChd - win32kbase!DirectComposition::CHolographicDisplayMarshaler::_allocate - DCOMPOSITIONTAG_HOLOGRAPHICDISPLAYMARSHALER DChe - win32kbase!DirectComposition::CHolographicExclusiveViewMarshaler::_allocate - DCOMPOSITIONTAG_HOLOGRAPHICEXCLUSIVEVIEWMARSHALER DChi - win32kbase!DirectComposition::CHolographicInteropTextureMarshaler::_allocate - DCOMPOSITIONTAG_HOLOGRAPHICINTEROPTEXTUREMARSHALER DChm - win32kbase!DirectComposition::CHolographicExclusiveModeMarshaler::_allocate - DCOMPOSITIONTAG_HOLOGRAPHICEXCLUSIVEMODEMARSHALER DChp - win32kbase!DirectComposition::CHoverPointerSourceMarshaler::_allocate - DCOMPOSITIONTAG_HOVERPOINTERSOURCEMARSHALER DCht - win32kbase!DirectComposition::CHwndTargetMarshaler::_allocate - DCOMPOSITIONTAG_HWNDTARGETMARSHALER DChv - win32kbase!DirectComposition::CHostVisualMarshaler::_allocate - DCOMPOSITIONTAG_HOSTVISUALMARSHALER DChx - win32kbase!DirectComposition::CHolographicViewer::_allocate - DCOMPOSITIONTAG_HOLOGRAPHICVIEWERMARSHALER DCia - win32kbase!DirectComposition::CInjectionAnimationMarshaler::_allocate - DCOMPOSITIONTAG_INJECTIONANIMATIONMARSHALER DCib - win32kbase!DirectComposition::CImageLegacyMilBrushMarshaler::_allocate - DCOMPOSITIONTAG_IMAGELEGACYMILBRUSHMARSHALER DCic - win32kbase!DirectComposition::CInteractionConfigurationGroup::_allocate - DCOMPOSITIONTAG_INTERACTIONCONFIGURATIONGROUP DCik - win32kbase!DirectComposition::CInkMarshaler::_allocate - DCOMPOSITIONTAG_INKMARSHALER DCio - win32kbase!DirectComposition::CInteractionMarshaler::_allocate - DCOMPOSITIONTAG_INTERACTIONMARSHALER DCir - win32kbase!DirectComposition::CInteractionTrackerMarshaler::_allocate - DCOMPOSITIONTAG_INTERACTIONTRACKERMARSHALER DCis - win32kbase!DirectComposition::CInteractionTrackerBindingManagerMarshaler::_allocate - DCOMPOSITIONTAG_INTERACTIONTRACKERBINDINGMANAGERMARSHALER DCit - win32kbase!DirectComposition::CInteractionMarshaler::EnsureTouchConfigurationList - DCOMPOSITIONTAG_INTERACTIONTOUCHCONFIGURATION DCjb - win32kbase!DirectComposition::CBackdropBrushMarshaler::_allocate - DCOMPOSITIONTAG_BACKDROPBRUSHMARSHALER DCjc - win32kbase!DirectComposition::CColorBrushMarshaler::_allocate - DCOMPOSITIONTAG_COLORBRUSHMARSHALER DCjd - win32kbase!DirectComposition::CBlurredWallpaperBackdropBrushMarshaler::_allocate - DCOMPOSITIONTAG_BLURREDWALLPAPERBACKDROPBRUSHMARSHALER DCje - win32kbase!DirectComposition::CEffectBrushMarshaler::_allocate - DCOMPOSITIONTAG_EFFECTBRUSHMARSHALER DCjl - win32kbase!DirectComposition::CLinearGradientBrushMarshaler::_allocate - DCOMPOSITIONTAG_LINEARGRADIENTBRUSHMARSHALER DCjm - win32kbase!DirectComposition::CMaskBrushMarshaler::_allocate - DCOMPOSITIONTAG_MASKBRUSHMARSHALER DCjn - win32kbase!DirectComposition::CNineGridBrushMarshaler::_allocate - DCOMPOSITIONTAG_NINEGRIDBRUSHMARSHALER DCjo - win32kbase!DirectComposition::CRadialGradientBrushMarshaler::_allocate - DCOMPOSITIONTAG_RADIALGRADIENTBRUSHMARSHALER DCjs - win32kbase!DirectComposition::CSurfaceBrushMarshaler::_allocate - DCOMPOSITIONTAG_SURFACEBRUSHMARSHALER DCjw - win32kbase!DirectComposition::CWindowBackdropBrushMarshaler::_allocate - DCOMPOSITIONTAG_WINDOWBACKDROPBRUSHMARSHALER DCkf - win32kbase!DirectComposition::CKeyframeAnimationMarshaler::_allocate - DCOMPOSITIONTAG_KEYFRAMEANIMATIONMARSHALER DCks - win32kbase!DirectComposition::CKeyframeAnimationMarshaler::SetBufferProperty - DCOMPOSITIONTAG_KEYFRAMEANIMATIONSCENARIOGUID DCkt - win32kbase!DirectComposition::CSkewTransformMarshaler::_allocate - DCOMPOSITIONTAG_SKEWTRANSFORMMARSHALER DClb - win32kbase!DirectComposition::CLinearGradientLegacyMilBrushMarshaler::_allocate - DCOMPOSITIONTAG_LINEARGRADIENTLEGACYMILBRUSHMARSHALER DClc - win32kbase!DirectComposition::CVisualMarshaler::_allocate - DCOMPOSITIONTAG_LAYOUTCONSTRAINTINFO DClg - win32kbase!DirectComposition::CLineGeometryMarshaler::_allocate - DCOMPOSITIONTAG_LINEGEOMETRYMARSHALER DCls - win32kbase!DirectComposition::CVisualSurfaceMarshaler::_allocate - DCOMPOSITIONTAG_VISUALSURFACEMARSHALER DClt - win32kbase!DirectComposition::CLinearObjectTableBase::_allocate - DCOMPOSITIONTAG_LINEAROBJECTTABLEDATA DClv - win32kbase!DirectComposition::CLayerVisualMarshaler::_allocate - DCOMPOSITIONTAG_LAYERVISUALMARSHALER DCm3 - win32kbase!DirectComposition::CMatrixTransform3DMarshaler::_allocate - DCOMPOSITIONTAG_MATRIXTRANSFORM3DMARSHALER DCma - win32kbase!DirectComposition::CManipulationTransformMarshaler::_allocate - DCOMPOSITIONTAG_MANIPULATIONTRANSFORMMARSHALER DCmg - win32kbase!DirectComposition::CMeshGeometryMarshaler::_allocate - DCOMPOSITIONTAG_MESHGEOMETRY2DMARSHALER DCmh - win32kbase!DirectComposition::CMessageHandleInfo::_allocate - DCOMPOSITIONTAG_MESSAGEHANDLEINFO DCmi - win32kbase!DirectComposition::CManipulationMarshaler::_allocate - DCOMPOSITIONTAG_MANIPULATIONMARSHALER DCmm - win32kbase!DirectComposition::CCompositionMipmapSurfaceMarshaler::_allocate - DCOMPOSITIONTAG_MIPMAPSURFACEMARSHALER DCmn - win32kbase!DirectComposition::CSceneSurfaceMaterialInputMarshaler::_allocate - DCOMPOSITIONTAG_SCENESURFACEMATERIALINPUTMARSHALER DCmr - win32kbase!DirectComposition::CSceneMetallicRoughnessMarshaler::_allocate - DCOMPOSITIONTAG_SCENEMETALLICROUGHNESSMATERIALMARSHALER DCmt - win32kbase!DirectComposition::CMatrixTransformMarshaler::_allocate - DCOMPOSITIONTAG_MATRIXTRANSFORMMARSHALER DCna - win32kbase!DirectComposition::CNaturalAnimationMarshaler::_allocate - DCOMPOSITIONTAG_NATURALANIMATIONMARSHALER DCnb - win32kbase!DirectComposition::CDeletedNotificationList::EnsureTagAllocation - DCOMPOSITIONTAG_DELETEDNOTIFICATIONLISTBUFFER DCnl - win32kbase!DirectComposition::CDeletedNotificationList::_allocate - DCOMPOSITIONTAG_DELETEDNOTIFICATIONLIST DCns - win32kbase!DirectComposition::CNaturalAnimationMarshaler::SetBufferProperty - DCOMPOSITIONTAG_NATURALANIMATIONSCENARIOGUID DCoc - win32kbase!DirectComposition::CContainerShapeMarshaler::_allocate - DCOMPOSITIONTAG_CONTAINERSHAPEMARSHALER DCos - win32kbase!DirectComposition::CSpriteShapeMarshaler::_allocate - DCOMPOSITIONTAG_SPRITESHAPEMARSHALER DCpb - win32kbase!DirectComposition::CPropertySetMarshaler::_allocate - DCOMPOSITIONTAG_PROPERTYSETMARSHALER DCpc - win32kbase!DirectComposition::CPrimitveColorMarshaler::_allocate - DCOMPOSITIONTAG_PRIMITIVECOLORMARSHALER DCpd - win32kbase!DirectComposition::CProcessData::_allocate - DCOMPOSITIONTAG_PROCESSDATA DCpg - win32kbase!DirectComposition::CPrimitiveGroupMarshaler::_allocate - DCOMPOSITIONTAG_PRIMITIVEGROUPMARSHALER DCpl - win32kbase!DirectComposition::PropertySetKernelModeAllocator::AllocateAndClear - DCOMPOSITIONTAG_PROPERTYSETSTORAGE DCpo - win32kbase!DirectComposition::CCompositionPointLight::_allocate - DCOMPOSITIONTAG_POINTLIGHTMARSHALER DCpr - win32kbase!DirectComposition::CPrimitiveMarshaler::_allocate - DCOMPOSITIONTAG_PRIMITIVEMARSHALER DCpy - win32kbase!DirectComposition::CPathGeometryMarshaler::_allocate - DCOMPOSITIONTAG_PATHGEOMETRYMARSHALER DCr3 - win32kbase!DirectComposition::CRotateTransform3DMarshaler::_allocate - DCOMPOSITIONTAG_ROTATETRANSFORM3DMARSHALER DCrc - win32kbase!DirectComposition::CRectangleClipMarshaler::_allocate - DCOMPOSITIONTAG_RECTANGLECLIPMARSHALER DCrf - win32kbase!DirectComposition::CVisualReferenceControllerMarshaler::_allocate - DCOMPOSITIONTAG_VISUALREFERENCECONTROLLERMARSHALER DCrg - win32kbase!DirectComposition::CRegionGeometryMarshaler::_allocate - DCOMPOSITIONTAG_REGIONGEOMETRYMARSHALER DCro - win32kbase!DirectComposition::CRotateTransformMarshaler::_allocate - DCOMPOSITIONTAG_ROTATETRANSFORMMARSHALER DCrt - win32kbase!DirectComposition::CResourceTable::_allocate - DCOMPOSITIONTAG_RESOURCETABLE DCrv - win32kbase!DirectComposition::CRedirectVisualMarshaler::_allocate - DCOMPOSITIONTAG_REDIRECTVISUALMARSHALER DCs0 - win32kbase!DirectComposition::CSharedResourceMarshaler::_allocate - DCOMPOSITIONTAG_SHAREDRESOURCEMARSHALER DCs3 - win32kbase!DirectComposition::CScaleTransform3DMarshaler::_allocate - DCOMPOSITIONTAG_SCALETRANSFORM3DMARSHALER DCsa - win32kbase!DirectComposition::CSnapshotMarshaler::_allocate - DCOMPOSITIONTAG_SNAPSHOTMARSHALER DCsc - win32kbase!DirectComposition::CSystemChannel::_allocate - DCOMPOSITIONTAG_SYSTEMCHANNEL DCsd - win32kbase!DirectComposition::CSpriteShapeMarshaler::SetBufferProperty - DCOMPOSITIONTAG_STROKEDASHARRAY DCse - win32kbase!DirectComposition::CSynchronizationManager::_allocate - DCOMPOSITIONTAG_SYNCHRONIZATIONENTRY DCsf - win32kbase!DirectComposition::CCrossContainerGuestReadWriteSharedSectionMarshaler - DCOMPOSITIONTAG_CROSSCONTAINERGUESTREADWRITESHAREDSECTIONMARSHALER DCsg - win32kbase!DirectComposition::CCrossContainerHostReadOnlySharedSectionMarshaler - DCOMPOSITIONTAG_CROSSCONTAINERHOSTREADONLYSHAREDSECTIONMARSHALER DCsh - win32kbase!DirectComposition::CShapeVisualMarshaler::_allocate - DCOMPOSITIONTAG_SHAPEVISUALMARSHALER DCsl - win32kbase!DirectComposition::CScalarMarshaler::_allocate - DCOMPOSITIONTAG_SCALARMARSHALER DCso - win32kbase!DirectComposition::CSemaphore::_allocate - DCOMPOSITIONTAG_SEMAPHORE DCsp - win32kbase!DirectComposition::CCompositionSpotLight::_allocate - DCOMPOSITIONTAG_SPOTLIGHTMARSHALER DCsr - win32kbase!DirectComposition::CDataSourceReaderMarshaler::_allocate - DCOMPOSITIONTAG_DATASOURCEREADERMARSHALER DCss - win32kbase!DirectComposition::CSharedSectionMarshaler - DCOMPOSITIONTAG_SHAREDSECTIONMARSHALER DCst - win32kbase!DirectComposition::CScaleTransformMarshaler::_allocate - DCOMPOSITIONTAG_SCALETRANSFORMMARSHALER DCsu - win32kbase!DirectComposition::CSuperWetInkVisualMarshaler::_allocate - DCOMPOSITIONTAG_SUPERWETINKVISUALMARSHALER DCsv - win32kbase!DirectComposition::CSpriteVisualMarshaler::_allocate - DCOMPOSITIONTAG_SPRITEVISUALMARSHALER DCsw - win32kbase!DirectComposition::CCompositionSurfaceWrapperMarshaler::_allocate - DCOMPOSITIONTAG_SURFACEWRAPPERMARSHALER DCsy - win32kbase!DirectComposition::CSynchronousSuperWetInkMarshaler::_allocate - DCOMPOSITIONTAG_SYNCHRONOUSSUPERWETINKMARSHALER DCsz - win32kbase!DirectComposition::CSolidColorLegacyMilBrushMarshaler::_allocate - DCOMPOSITIONTAG_SOLIDCOLORLEGACYMILBRUSHMARSHALER DCt3 - win32kbase!DirectComposition::CTranslateTransform3DMarshaler::_allocate - DCOMPOSITIONTAG_TRANSLATETRANSFORM3DMARSHALER DCtc - win32kbase!DirectComposition::CTileClumpMarshaler::_allocate - DCOMPOSITIONTAG_TILECLUMPMARSHALER DCtg - win32kbase!DirectComposition::CTransformGroupMarshaler::_allocate - DCOMPOSITIONTAG_TRANSFORMGROUPMARSHALER DCtl - win32kbase!DirectComposition::CCompositionTextLineMarshaler::_allocate - DCOMPOSITIONTAG_COMPOSITIONTEXTLINEMARSHALER DCto - win32kbase!DirectComposition::CTelemetryInfo::_allocate - DCOMPOSITIONTAG_TELEMETRYINFO DCtr - win32kbase!DirectComposition::CAnimationTriggerMarshaler::_allocate - DCOMPOSITIONTAG_ANIMATIONTRIGGERMARSHALER DCts - win32kbase!DirectComposition::_allocate - DCOMPOSITIONTAG_TELEMETRYSTRING DCtt - win32kbase!DirectComposition::CTranslateTransformMarshaler::_allocate - DCOMPOSITIONTAG_TRANSLATETRANSFORMMARSHALER DCtv - win32kbase!DirectComposition::CTextVisualMarshaler::_allocate - DCOMPOSITIONTAG_TEXTVISUALMARSHALER DCvb - win32kbase!DirectComposition::CViewBoxMarshaler::_allocate - DCOMPOSITIONTAG_VIEWBOXMARSHALER DCvc - win32kbase!DirectComposition::CVisualMarshaler::AllocateChildrenArray - DCOMPOSITIONTAG_VISUALMARSHALERCHILDREN DCvg - win32kbase!DirectComposition::CVisualGroupMarshaler::_allocate - DCOMPOSITIONTAG_VISUALGROUPMARSHALER DCvi - win32kbase!DirectComposition::CVisualMarshaler::_allocate - DCOMPOSITIONTAG_VISUALMARSHALER DCvm - win32kbase!DirectComposition::CVirtualMonitorCaptureRenderTargetMarshaler::_allocate - DCOMPOSITIONTAG_VIRTUALMONITORCAPTURERENDERTARGETMARSHALER DCvr - win32kbase!DirectComposition::CVisualCaptureMarshaler::_allocate - DCOMPOSITIONTAG_VISUALCAPTUREMARSHALER DCvs - win32kbase!DirectComposition::CVirtualSurfaceMarshaler::_allocate - DCOMPOSITIONTAG_VIRTUALSURFACEMARSHALER DCvt - win32kbase!DirectComposition::CVisualTargetMarshaler::_allocate - DCOMPOSITIONTAG_VISUALTARGETMARSHALER DCvx - win32kbase!DirectComposition::CVisualBitmapMarshaler::_allocate - DCOMPOSITIONTAG_VISUALBITMAPMARSHALER DCwn - win32kbase!DirectComposition::CWindowNodeMarshaler::_allocate - DCOMPOSITIONTAG_WINDOWNODEMARSHALER DCwr - win32kbase!DirectComposition::CWeakReferenceBase::_allocate - DCOMPOSITIONTAG_WEAKREFERENCE DCwt - win32kbase!DirectComposition::CApplicationChannel::GetWeakReferenceBase - DCOMPOSITIONTAG_WEAKREFERENCETABLEENTRY DCxc - win32kbase!DirectComposition::CCrossChannelChildVisualMarshaler::_allocate - DCOMPOSITIONTAG_CROSSCHANNELCHILDVISUALMARSHALER DCxp - win32kbase!DirectComposition::CCrossChannelParentVisualMarshaler::_allocate - DCOMPOSITIONTAG_CROSSCHANNELPARENTVISUALMARSHALER DCys - win32kbase!DirectComposition::CYCbCrSurfaceMarshaler::_allocate - DCOMPOSITIONTAG_YCBCRSURFACEMARSHALER DCzc - win32kbase!DirectComposition::CProjectedShadowCasterMarshaler::_allocate - DCOMPOSITIONTAG_PROJECTEDSHADOWCASTERMARSHALER DCze - win32kbase!DirectComposition::CSceneMesh::_allocate - DCOMPOSITIONTAG_SCENEMESHMARSHALER DCzg - win32kbase!DirectComposition::CSharedSectionWrapperMarshaler::_allocate - DCOMPOSITIONTAG_SHAREDSECTIONWRAPPERMARSHALER DCzh - win32kbase!DirectComposition::CSceneMeshRendererComponentMarshaler::_allocate - DCOMPOSITIONTAG_SCENEMESHRENDERERCOMPONENTMARSHALER DCzr - win32kbase!DirectComposition::CProjectedShadowReceiverMarshaler::_allocate - DCOMPOSITIONTAG_PROJECTEDSHADOWRECEIVERMARSHALER DCzs - win32kbase!DirectComposition::CProjectedShadowSceneMarshaler::_allocate - DCOMPOSITIONTAG_PROJECTEDSHADOWSCENEMARSHALER DCzt - win32kbase!DirectComposition::CSceneNode::_allocate - DCOMPOSITIONTAG_SCENENODEMARSHALER DCzv - win32kbase!DirectComposition::CSceneVisualMarshaler::_allocate - DCOMPOSITIONTAG_SCENEVISUALMARSHALER DCzx - win32kbase!DirectComposition::CProxyGeometryClipMarshaler::_allocate - DCOMPOSITIONTAG_PROXYGEOMETRYCLIPMARSHALER DCzz - win32kbase!DirectComposition::CSceneModelTransformMarshaler::_allocate - DCOMPOSITIONTAG_SCENEMODELTRANSFORMMARSHALER CSMb - dxgkrnl!CCompositionBuffer::Create - COMPOSITIONSURFACEMANAGER_BUFFER CSMr - dxgkrnl!CBufferRealization::Create - COMPOSITIONSURFACEMANAGER_REALIZATION CSMi - dxgkrnl!NtOpenCompositionSurfaceRealizationInfo - COMPOSITIONSURFACEMANAGER_REALIZATIONINFOBUFFER TMcb - dxgkrnl!CCompositionToken::Initialize - TOKENMANAGER_COMPOSITIONTOKENBUFFER TMcc - dxgkrnl!CCompositionFrameCollection - TOKENMANAGER_COMPOSITIONFRAMECOLLECTION TMce - dxgkrnl!CCompositionFrame::TokenTableEntry::Allocate - TOKENMANAGER_TOKENTABLEENTRY TMcf - dxgkrnl!CCompositionFrame::Create - TOKENMANAGER_COMPOSITIONFRAME TMlt - dxgkrnl!CTokenManager::EnsureLegacyTokenBuffer - TOKENMANAGER_LEGACYTOKENBUFFER TMfa - dxgkrnl!CFlipAwayFence::Create - TOKENMANAGER_FLIPAWAYFENCE TMsc - dxgkrnl!CAdapter::FlipManagerSyncContext::Allocate - TOKENMANAGER_FLIPMANAGERSYNCCONTEXTTABLEENTRY TMsg - dxgkrnl!CreateSessionTokenManager - TOKENMANAGER_SESSIONGLOBAL TMtb - dxgkrnl!CLegacyTokenBuffer::TokenBlock::Create - TOKENMANAGER_TOKENBLOCK TMte - dxgkrnl!CTokenManager::TokenQueueTableEntry::Allocate - TOKENMANAGER_TOKENQUEUETABLEENTRY TMto - dxgkrnl!CToken::Create - TOKENMANAGER_TOKENOBJECT TMtq - dxgkrnl!CTokenQueue::Create - TOKENMANAGER_TOKENQUEUE TMac - dxgkrnl!CAdapter::Create - TOKENMANAGER_ADAPTER TMcc - dxgkrnl!CAdapterCollection::Create - TOKENMANAGER_ADAPTERCOLLECTION IMhq - win32k!CInputQueue::Create - INPUTMANAGER_INPUTQUEUE IMsg - win32k!CInputManager::Create - INPUTMANAGER_SESSIONGLOBAL FCai - dxgkrnl!CEndpointResourceStateManager::PrepareTokenInitInfoForDWM - FLIPCONTENT_AUXILIARYPRESENTINFO FCbm - dxgkrnl!CBackchannelManager::CBackchannelManager - FLIPCONTENT_BACKCHANNELMANAGER FCbr - dxgkrnl!CPoolBufferResource::Create - FLIPCONTENT_BUFFERRESOURCE FCbs - dxgkrnl!CPoolBufferResourceState::operator new - FLIPCONTENT_BUFFERRESOURCESTATE FCcr - dxgkrnl!CContentResource::Create - FLIPCONTENT_CONTENTRESOURCE FCcm - dxgkrnl!CFlipConsumerMessage::operator new - FLIPCONTENT_CONSUMERMESSAGE FCii - dxgkrnl!CEndpointResourceStateManager::PrepareTokenInitInfoForDWM - FLIPCONTENT_INDEPENDENTFLIPINFO FCpb - dxgkrnl!CreateFlipPropertySet - FLIPCONTENT_PROPERTYBLOBBUFFER FCpc - dxgkrnl!CFlipPresentCancel::operator new - FLIPCONTENT_PRESENTCANCEL FCph - dxgkrnl!CFlipManager::Initialize - FLIPCONTENT_DEBUG_PRESENTHISTORY FCpi - dxgkrnl!CreateFlipPropertySet - FLIPCONTENT_PROPERTYBLOBINDEXBUFFER FCps - dxgkrnl!CFlipPropertySet::operator new - FLIPCONTENT_PROPERTYSET FCpu - dxgkrnl!CFlipManager::ProcessTokenCreate - FLIPCONTENT_PRESENTUPDATE FCre - dxgkrnl!CFlipManagerRegistry::operator new - FLIPCONTENT_FLIPMANAGERREGISTRY FCrs - dxgkrnl!CContentResourceState::operator new - FLIPCONTENT_CONTENTRESOURCESTATE FCsb - dxgkrnl!CEndpointResourceStateManager::PrepareBufferSignals - FLIPCONTENT_SIGNAL_BUFFERARRAY FCsi - dxgkrnl!CFlipManagerSignal::operator new - FLIPCONTENT_SIGNAL FCub - dxgkrnl!CEndpointResourceStateManager::PrepareIncrementalUpdateForStateManager - FLIPCONTENT_INCREMENTALRESOURCEUPDATEFORCONSUMER FCuu - dxgkrnl!CEndpointResourceStateManager::PrepareIncrementalUpdateForUser - FLIPCONTENT_INCREMENTALRESOURCEUPDATEFORUSER FCwr - dxgkrnl!CFlipWaitedConsumerReturn::operator new - FLIPCONTENT_WAITEDCONSUMERRETURN