Leaked source code of windows server 2003
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

1933 lines
84 KiB

  1. rem
  2. rem Pooltag.txt
  3. rem
  4. rem This file lists the tags used for pool allocations by kernel mode components
  5. rem and drivers.
  6. rem
  7. rem The file has the following format:
  8. rem <PoolTag> - <binary-name> - <Description>
  9. rem
  10. rem This file is updated occasionaly and made available to the public through
  11. rem Microsoft Product Support Services. To check for updates, go to:
  12. rem http://support.microsoft.com and search for pooltag.txt.
  13. rem
  14. 8042 - i8042prt.sys - PS/2 kb and mouse
  15. ARPC - atmarpc.sys - ATM ARP Client
  16. ATMU - atmuni.sys - ATM UNI Call Manager
  17. Atom - <unknown> - Atom Tables
  18. Abos - <unknown> - Abiosdsk
  19. AcdM - <unknown> - TDI AcdObjectInfoG
  20. AcdN - <unknown> - TDI AcdObjectInfoG
  21. Acp* - acpi.sys - ACPI Pooltags
  22. ACPI - acpi.sys - ACPI
  23. Adap - <unknown> - Adapter objects
  24. Adbe - <unknown> - Adobe's font driver
  25. AECi - <unknown> - filter object interface for MS acoustic echo canceller
  26. Afd? - afd.sys - AFD objects
  27. AfdA - afd.sys - Afd EA buffer
  28. AfdB - afd.sys - Afd data buffer
  29. AfdC - afd.sys - Afd connection structure
  30. AfdD - afd.sys - Afd debug data
  31. AfdE - afd.sys - Afd endpoint structure
  32. AfdF - afd.sys - Afd TransmitFile info
  33. AfdG - afd.sys - Afd group table
  34. AfdI - afd.sys - Afd TDI data
  35. AfdL - afd.sys - Afd local address buffer
  36. AfdP - afd.sys - Afd poll info
  37. AfdQ - afd.sys - Afd work queue item
  38. AfdR - afd.sys - Afd remote address buffer
  39. AfdS - afd.sys - Afd security info
  40. AfdT - afd.sys - Afd transport info
  41. AfdW - afd.sys - Afd work item
  42. AfdX - afd.sys - Afd context buffer
  43. Afda - afd.sys - Afd APC buffer (NT 3.51 only)
  44. Afdc - afd.sys - Afd connect data buffer
  45. Afdd - afd.sys - Afd disconnect data buffer
  46. Afdf - afd.sys - Afd TransmitFile debug data
  47. Afdh - afd.sys - Afd address list change buffer
  48. Afdi - afd.sys - Afd "set inline mode" buffer
  49. Afdl - afd.sys - Afd lookaside lists buffer
  50. Afdp - afd.sys - Afd transport IRP buffer
  51. Afdq - afd.sys - Afd routing query buffer
  52. Afdr - afd.sys - Afd ERESOURCE buffer
  53. Afdt - afd.sys - Afd transport address buffer
  54. Afp - <unknown> - SFM File server
  55. Aml* - <unknown> - ACPI AMLI Pooltags
  56. APIC - pnpapic.sys - I/O APIC Driver
  57. ArbA - nt!arb - ARBITER_ALLOCATION_STATE_TAG
  58. ArbL - nt!arb - ARBITER_ORDERING_LIST_TAG
  59. ArbM - nt!arb - ARBITER_MISC_TAG
  60. ArbR - nt!arb - ARBITER_RANGE_LIST_TAG
  61. Arp? - <unknown> - ATM ARP server objects, atmarps.sys
  62. ArpA - <unknown> - AtmArpS address
  63. ArpB - <unknown> - AtmArpS buffer space
  64. ArpI - <unknown> - AtmArpS Interface structure
  65. ArpK - <unknown> - AtmArpS ARP block
  66. ArpM - <unknown> - AtmArpS MARS structure
  67. ArpR - <unknown> - AtmArpS NDIS request
  68. ArpS - <unknown> - AtmArpS SAP structure
  69. Asy1 - <unknown> - ndis / ASYNC_IOCTX_TAG
  70. Asy2 - <unknown> - ndis / ASYNC_INFO_TAG
  71. Asy3 - <unknown> - ndis / ASYNC_ADAPTER_TAG
  72. Asy4 - <unknown> - ndis / ASYNC_FRAME_TAG
  73. AtC - <unknown> - IDE disk configuration
  74. AtD - <unknown> - atdisk.c
  75. ATIX - <unknown> - WDM mini drivers for ATI tuner, xbar, etc.
  76. Atk - <unknown> - Appletalk transport
  77. AtmA - <unknown> - Atoms
  78. AtmT - <unknown> - Atom tables
  79. AuxL - <unknown> - EXIFS Auxlist
  80. Bat? - <unknown> - Battery Class drivers
  81. BatC - <unknown> - Composite battery driver
  82. BatM - <unknown> - Control method battery driver
  83. BatS - <unknown> - Smart battery driver
  84. Batt - <unknown> - Battery class driver
  85. BCSP - bthbcsp.sys - Bluetooth BCSP minidriver
  86. BIG - nt!mm - Large session pool allocations (ntos\ex\pool.c)
  87. Bmfd - <unknown> - Font related stuff
  88. BT3C - bt3c.sys - Bluetooth 3COM minidriver
  89. BT8x - <unknown> - WDM mini drivers for Brooktree 848,829, etc.
  90. BTHP - bthport.sys - Bluetooth port driver (generic)
  91. BthS - bthport.sys - Bluetooth port driver (security)
  92. BTME - bthenum.sys - Bluetooth enumerator
  93. BTMO - bthmodem.sys - Bluetooth modem
  94. BTPT - <unknown> - Bluetooth transport protocol library
  95. BTSR - bthser.sys - Bluetooth serial minidriver
  96. BTUR - bthuart.sys - Bluetooth UART minidriver
  97. Bu* - <unknown> - burneng.sys from adaptec
  98. Call - nt!ex - kernel callback object signature
  99. call - <unknown> - debugging call tables
  100. CBRe - <unknown> - CallbackRegistration
  101. Cc - nt!cc - Cache Manager allocations (catch-all)
  102. CcBc - nt!cc - Cache Manager Bcb from pool
  103. CcBr - nt!cc - Cache Manager Bitmap range
  104. CcBz - nt!cc - Cache Manager Bcb Zone
  105. CcDw - nt!cc - Cache Manager Deferred Write
  106. CcEv - nt!cc - Cache Manager Event
  107. CcFn - nt!cc - Cache Manager File name for popups
  108. CcOb - nt!cc - Cache Manager Overlap Bcb
  109. CcPB - nt!ccpf - Prefetcher trace buffer
  110. CcPC - nt!ccpf - Prefetcher context
  111. CcPD - nt!ccpf - Prefetcher trace dump
  112. CcPF - nt!ccpf - Prefetcher file name
  113. CcPI - nt!ccpf - Prefetcher intermediate table
  114. CcPL - nt!ccpf - Prefetcher read list
  115. CcPM - nt!ccpf - Prefetcher metadata
  116. CcPS - nt!ccpf - Prefetcher scenario
  117. CcPT - nt!ccpf - Prefetcher trace
  118. CcPc - nt!cc - Cache Manager Private Cache Map
  119. CcPf - nt!ccpf - Prefetcher
  120. CcPp - nt!ccpf - Prefetcher instructions
  121. CcPq - nt!ccpf - Prefetcher query buffer
  122. CcPs - nt!ccpf - Prefetcher section table
  123. CcPv - nt!ccpf - Prefetcher volume info
  124. CcPw - nt!ccpf - Prefetcher boot worker
  125. CcSc - nt!cc - Cache Manager Shared Cache Map
  126. CcVa - nt!cc - Cache Manager Initial array of Vacbs
  127. CcVl - nt!cc - Cache Manager Vacb Level structures (large streams)
  128. CcVp - nt!cc - Cache Manager Array of Vacb pointers for a cached stream
  129. CctX - <unknown> - EXIFX FCB Commit CTX
  130. CcWq - nt!cc - Cache Manager Work Queue Item
  131. CcWK - nt!cc - Kernel Cache Manager lookaside list
  132. CcWk - nt!cc - Kernel Cache Manager lookaside list
  133. CcZe - nt!cc - Cache Manager Buffer of Zeros
  134. CdA - <unknown> - CdAudio filter driver
  135. Cdcc - cdfs.sys - CDFS Ccb
  136. Cddn - cdfs.sys - CDFS CdName in dirent
  137. Cdee - cdfs.sys - CDFS Search expression for enumeration
  138. Cdfd - cdfs.sys - CDFS Data Fcb
  139. Cdfi - cdfs.sys - CDFS Index Fcb
  140. Cdfl - cdfs.sys - CDFS Filelock
  141. CdFn - cdfs.sys - CDFS Filename buffer
  142. Cdfn - cdfs.sys - CDFS Nonpaged Fcb
  143. Cdfs - cdfs.sys - CDFS General Allocation
  144. Cdft - cdfs.sys - CDFS Fcb Table entry
  145. Cdgs - cdfs.sys - CDFS Generated short name
  146. Cdic - cdfs.sys - CDFS Irp Context
  147. Cdil - cdfs.sys - CDFS Irp Context lite
  148. Cdio - cdfs.sys - CDFS Io context for async reads
  149. Cdma - cdfs.sys - CDFS Mcb array
  150. Cdpe - cdfs.sys - CDFS Prefix Entry
  151. CdPn - cdfs.sys - CDFS CdName in path entry
  152. Cdpn - cdfs.sys - CDFS Prefix Entry name
  153. Cdsp - cdfs.sys - CDFS Buffer for spanning path table
  154. Cdtc - cdfs.sys - CDFS TOC
  155. Cdun - cdfs.sys - CDFS Buffer for upcased name
  156. Cdvd - cdfs.sys - CDFS Buffer for volume descriptor
  157. Cdvp - cdfs.sys - CDFS Vpb allocated in filesystem
  158. CM - nt!cm - Configuration Manager (registry)
  159. CmcD - hal.dll - HAL CMC Driver Log
  160. CmcK - hal.dll - HAL CMC Kernel Log
  161. CmcT - hal.dll - HAL CMC temporary Log
  162. CMCa - nt!cm - Configuration Manager Cache (registry)
  163. CMDc - nt!cm - Configuration Manager Cache (registry)
  164. CMkb - nt!cm - registry key control blocks
  165. CMpb - nt!cm - registry post blocks
  166. CMnb - nt!cm - registry notify blocks
  167. CMpe - nt!cm - registry post events
  168. CMpa - nt!cm - registry post apcs
  169. CMsb - nt!cm - registry stash buffer
  170. CmVn - nt!cm - captured value name
  171. CMVw - nt!cm - registry mapped view of file
  172. CMVa - nt!cm - value cache value tag
  173. CMVI - nt!cm - value index cache tag
  174. CMSc - nt!cm - security cache pooltag
  175. CMSb - nt!cm - internal stash buffer pool tag
  176. CMNb - nt!cm - notification block pool tag
  177. CMIn - nt!cm - index hint pool tag
  178. CM?? - nt!cm - Internal Configuration manager allocations
  179. CMDa - nt!cm - value data cache pool tag
  180. CMAl - nt!cm -internal registry memory allocator pool tag
  181. COMX - serial.sys - serial driver allocations
  182. Cont - <unknown> - Contiguous physical memory allocations for device drivers
  183. CopW - <unknown> - EXIFS CopyOnWrite
  184. CpeD - hal.dll - HAL CPE Driver Log
  185. CpeK - hal.dll - HAL CMC Kernel Log
  186. CpeT - hal.dll - HAL CPE temporary Log
  187. CPnp - classpnp.sys - ClassPnP transfer packets
  188. CrtH - <unknown> - EXIFS Create Header
  189. CSdk - <unknown> - Cluster Disk Filter driver
  190. CSnt - <unknown> - Cluster Network driver
  191. CTE - <unknown> - Common transport environment (ntos\inc\cxport.h, used by tdi)
  192. Cvli - <unknown> - EXIFS Cached Volume Info
  193. D2d - <unknown> - Device Object to DosName rtns (ntos\rtl\dev2dos.c)
  194. D3Dd - <unknown> - DX D3D driver (embedded in a display driver like s3mvirge.dll)
  195. D851 - <unknown> - 8514a video driver
  196. Dacl - <unknown> - Temp allocations for object DACLs
  197. Dati - <unknown> - ati video driver
  198. DbLo - <unknown> - Debug logging
  199. dcam - <unknown> - WDM mini driver for IEEE 1394 digital camera
  200. Dcl - <unknown> - cirrus video driver
  201. Ddk - <unknown> - Default for driver allocated memory (user's of ntddk.h)
  202. Devi - <unknown> - Device objects
  203. Dh 0 - <unknown> - DirectDraw/3D default object
  204. Dh 1 - <unknown> - DirectDraw/3D DirectDraw object
  205. Dh 2 - <unknown> - DirectDraw/3D Surface object
  206. Dh 3 - <unknown> - DirectDraw/3D Direct3D context object
  207. Dh 4 - <unknown> - DirectDraw/3D VideoPort object
  208. Dh 5 - <unknown> - DirectDraw/3D MotionComp object
  209. Dfb - <unknown> - framebuf video driver
  210. Dfs - <unknown> - Distributed File System
  211. dfsr - <unknown> - RDBSS IRP allocation
  212. Dfsm - <unknown> - Eng event allocation (ENG_KEVENTALLOC,ENG_ALLOC) in ntgdi\gre
  213. Dire - <unknown> - Directory objects
  214. Dlck - <unknown> - deadlock verifier (part of driver verifier) structures
  215. Dmga - <unknown> - mga (matrox) video driver
  216. DmH? - <unknown> - DirectMusic hardware synthesizer
  217. Dmio - <unknown> - Logical Disk Manager driver
  218. Dmip - dmio.sys - Logical Disk Manager driver
  219. Dmiq - dmio.sys - Logical Disk Manager driver
  220. Dmld - <unknown> - Logical Disk Manager loader
  221. DmS? - <unknown> - DirectMusic kernel software synthesizer
  222. Dmst - <unknown> - Logical Disk Manager driver static initialization
  223. Dndt - <unknown> - Device node
  224. Dnod - <unknown> - Device node structure
  225. DOPE - <unknown> - Device Object Power Extension (po component)
  226. DPrf - <unknown> - Disk performance filter driver
  227. DPwr - nt!pnp - PnP power management
  228. Dps5 - <unknown> - NT5 PostScript printer driver
  229. Dpsh - <unknown> - Postcript driver heap memory
  230. Dpsi - <unknown> - psidisp video driver
  231. Dpsm - <unknown> - Postcript driver memory
  232. Dqv - <unknown> - qv (qvision) video driver
  233. Driv - <unknown> - Driver objects
  234. Drsd - <unknown> - Rasdd Printer Driver Pool Tag.
  235. Dtga - <unknown> - tga video driver
  236. Dump - <unknown> - Bugcheck dump allocations
  237. Dun5 - <unknown> - NT5 Universal printer driver
  238. DV?? - <unknown> - RDR2 DAV MiniRedir Tags
  239. DVCx - <unknown> - AsyncEngineContext, DAV MiniRedir
  240. DVEx - <unknown> - Exchange, DAV MiniRedir
  241. DVFi - <unknown> - FileInfo, DAV MiniRedir
  242. DVFn - <unknown> - FileName, DAV MiniRedir
  243. DVRw - <unknown> - ReadWrite, DAV MiniRedir
  244. DVSc - <unknown> - SrvCall, DAV MiniRedir
  245. DVSh - <unknown> - SharedHeap, DAV MiniRedir
  246. Dvga - <unknown> - vga 16 color video driver
  247. Dvg2 - <unknown> - vga 256 color video driver
  248. Dvg6 - <unknown> - vga 64K color video driver
  249. Dvgr - <unknown> - vga for risc video driver
  250. DW32 - <unknown> - W32 video driver
  251. Dwd - <unknown> - wd90c24a video driver
  252. Dwp9 - <unknown> - weitekp9 video driver
  253. Dxga - <unknown> - XGA video driver
  254. Efsm - <unknown> - EFS driver
  255. Efsc - <unknown> - EFS driver
  256. Efst - <unknown> - EXIFS FS Statistics
  257. Envr - <unknown> - Environment strings
  258. Err - <unknown> - Error strings
  259. Evel - <unknown> - EFS file system filter driver lookaside list
  260. Even - <unknown> - Event objects
  261. Evid - <unknown> - Rtl Event ID's
  262. ExWl - <unknown> - Executive worker list entry
  263. Fat - fastfat.sys - Fat File System allocations
  264. FatB - fastfat.sys - Fat allocation bitmaps
  265. FatC - fastfat.sys - Fat Ccbs
  266. FatD - fastfat.sys - Fat pool dirents
  267. FatE - fastfat.sys - Fat EResources
  268. FatF - fastfat.sys - Fat Fcbs
  269. FatI - fastfat.sys - Fat IrpContexts
  270. FatL - fastfat.sys - Fat FAT entry lookup buffer on verify
  271. FatN - fastfat.sys - Fat Nonpaged Fcbs
  272. FatO - fastfat.sys - Fat I/O buffer
  273. FatP - fastfat.sys - Fat output for query retrieval pointers (caller frees)
  274. FatQ - fastfat.sys - Fat buffered user buffer
  275. FatR - fastfat.sys - Fat repinned Bcb
  276. FatS - fastfat.sys - Fat stashed Bpb
  277. FatT - fastfat.sys - Fat directory allocation bitmaps
  278. FatV - fastfat.sys - Fat Vcb stat bucket
  279. Fatv - fastfat.sys - Fat events
  280. FatW - fastfat.sys - Fat FAT windowing structure
  281. FatX - fastfat.sys - Fat IO contexts
  282. Fatb - fastfat.sys - Fat Bcb arrays
  283. Fatd - fastfat.sys - Fat EA data
  284. Fate - fastfat.sys - Fat EA set headers
  285. Fatf - fastfat.sys - Fat deferred flush contexts
  286. Fati - fastfat.sys - Fat IO run descriptor
  287. Fatn - fastfat.sys - Fat filename buffer
  288. Fatr - fastfat.sys - Fat verification-time rootdir snapshot
  289. Fats - fastfat.sys - Fat verification-time boot sector
  290. Fatv - fastfat.sys - Fat backpocket Vpb
  291. Fatx - fastfat.sys - Fat delayed close contexts
  292. Fcbl - <unknown> - EXIFS FCBlock
  293. fboX - <unknown> - EXIFS FOBXVF List
  294. File - <unknown> - File objects
  295. Flop - <unknown> - floppy driver
  296. Flst - <unknown> - EXIFS Freelist
  297. FLex - <unknown> - exclusive file lock
  298. FLfl - <unknown> - exported (non-private) file lock
  299. FLli - <unknown> - per-file lock information
  300. FLln - <unknown> - shared lock tree node
  301. FLsh - <unknown> - shared file lock
  302. FLwl - <unknown> - waiting lock
  303. Fsrc - <unknown> - Filesystem recognizer (fsrec.sys)
  304. Fstb - <unknown> - ntos\fstub
  305. FstB - <unknown> - ntos\fstub
  306. flnk - <unknown> - font link tag used in ntgdi\gre
  307. FS?? - nt!fsrtl - File System Run Time allocations
  308. FSfm - nt!fsrtl - File System Run Time Fast Mutex Lookaside List
  309. FSim - nt!fsrtl - File System Run Time Mcb Initial Mapping Lookaside List
  310. FSrt - nt!fsrtl - File System Run Time allocations (DO NOT USE!)
  311. FSmg - nt!fsrtl - File System Run Time
  312. FSrd - nt!fsrtl - File System Run Time
  313. FSrm - nt!fsrtl - File System Run Time
  314. FSrn - nt!fsrtl - File System Run Time
  315. FSrN - nt!fsrtl - File System Run Time
  316. FSro - nt!fsrtl - File System Run Time
  317. FSrs - nt!fsrtl - File System Run Time
  318. FSun - nt!fsrtl - File System Run Time
  319. FTrc - <unknown> - Fault tolerance Slist tag.
  320. FtC - <unknown> - Fault tolerance driver
  321. FtM - <unknown> - Fault tolerance driver
  322. FtS - <unknown> - Fault tolerance driver
  323. FtT - <unknown> - Fault tolerance driver
  324. FtU - <unknown> - Fault tolerance driver
  325. FtV - <unknown> - Fault tolerance driver
  326. <unknown>
  327. G??? - <unknown> - Gdi Objects
  328. G - <unknown> - Gdi Generic allocations
  329. Gcac - <unknown> - Gdi glyph cache
  330. Gcap - <unknown> - Gdi capture buffer
  331. Gcsl - <unknown> - Gdi string resource script names
  332. Gdbr - <unknown> - Gdi driver brush realization
  333. Gdd - <unknown> - Gdi ddraw PKEY_VALUE_FULL_INFORMATION
  334. Gdda - <unknown> - Gdi ddraw attach list
  335. GddD - <unknown> - Gdi ddraw dummy page
  336. Gdde - <unknown> - Gdi ddraw event
  337. Gddf - <unknown> - Gdi ddraw driver heaps
  338. Gddp - <unknown> - Gdi ddraw driver caps
  339. Gddv - <unknown> - Gdi ddraw driver video memory list
  340. Gdwd - win32k.sys - Gdi watchdog support objects
  341. Gdxd - <unknown> - Gdi ddraw VPE directdraw object
  342. Gdxs - <unknown> - Gdi ddraw VPE surface, videoport, capture object
  343. Gdxx - <unknown> - Gdi ddraw VPE DXAPI object
  344. Gdev - <unknown> - Gdi GDITAG_DEVMODE
  345. GDev - <unknown> - Gdi pdev
  346. Gdrs - <unknown> - Gdi GDITAG_DRVSUP
  347. Gebr - <unknown> - Gdi ENGBRUSH
  348. gEdg - <unknown> - Gdi gradient fill triangle
  349. Gffv - <unknown> - Gdi FONTFILEVIEW
  350. gFil - <unknown> - Gdi FILEVIEW
  351. GFil - <unknown> - Gdi engine descriptor list
  352. Gfsb - <unknown> - Gdi font sustitution list
  353. Gfsm - <unknown> - Gdi Fast mutex
  354. Ggdv - <unknown> - Gdi GDITAG_GDEVICE
  355. Gglb - <unknown> - Gdi temp buffer
  356. Ggls - <unknown> - Gdi glyphset
  357. Ggb - <unknown> - Gdi glyph bits
  358. Ggbl - <unknown> - Gdi look aside buffers
  359. Ghmg - <unknown> - Gdi handle manager objects
  360. Gini - <unknown> - Gdi fast mutex
  361. Gh ? - win32k.sys - Gdi Handle manager specific object types: defined in w32\ntgdi\inc\ntgdistr.h
  362. Gla? - win32k.sys - Gdi handle manager specific object types allocated from lookaside memory: defined in w32\ntgdi\inc\ntgdistr.h
  363. Gldv - <unknown> - Gdi Ldev
  364. Glnk - <unknown> - Gdi PFELINK
  365. Gmap - <unknown> - Gdi font map signature table
  366. Gpff - <unknown> - Gdi physical font file
  367. Gpft - <unknown> - Gdi font table
  368. Gsem - <unknown> - Gdi Semaphores
  369. Gsp - <unknown> - Gdi sprite
  370. Gspr - <unknown> - Gdi sprite grow range
  371. Gtmp - <unknown> - Gdi temporary allocations
  372. Gtmw - <unknown> - Gdi TMW_INTERNAL
  373. Gxlt - <unknown> - Gdi Xlate
  374. Gfcb - <unknown> - EXIFS Grow FCB
  375. Hal - hal.dll - Hardware Abstraction Layer
  376. Hpfs - <unknown> - Pinball (aka Hpfs) allocations
  377. HisC - <unknown> - histogram filter driver
  378. Hist - <unknown> - histogram filter driver
  379. HidP - <unknown> - HID Parser
  380. HidC - <unknown> - HID Class
  381. HdCl - <unknown> - HID Client Sample Driver
  382. HpMM - pnpmem.sys - HotPlug Memory Driver
  383. HCID - bthport.sys - Bluetooth port driver HCI debug
  384. HCIT - bthport.sys - Bluetooth port driver (HCI)
  385. HcRs - hcaport.sys - HCAPORT_TAG_RESOURCE_LIST
  386. HcEv - hcaport.sys - HCAPORT_TAG_EVENT
  387. HcdI - hcaport.sys - HCAPORT_TAG_HWID
  388. HcEn - hcaport.sys - HCAPORT_TAG_ENUM
  389. HcMc - hcaport.sys - HCAPORT_TAG_MISC
  390. HcDr - hcaport.sys - HCAPORT_TAG_DEVICE_RELATIONS
  391. HcBm - hcaport.sys - HCAPORT_TAG_BITMAP
  392. HcOb - hcaport.sys - HCAPORT_TAG_OBJECT
  393. HcCq - hcaport.sys - HCAPORT_TAG_CQUEUE
  394. HcPr - hcaport.sys - HCAPORT_TAG_PROTD
  395. HPmi - hcaport.sys - HCAPORT_TAG_PMI_EXTENSION
  396. HcMa - hcaport.sys - HCAPORT_TAG_MAD
  397. HcMp - hcaport.sys - HCAPORT_TAG_MINIPORT
  398. HcCm - hcaport.sys - HCAPORT_TAG_CM
  399. HcUc - hcaport.sys - HCAPORT_TAG_UCONTEXT
  400. HcMr - hcaport.sys - HCAPORT_TAG_REMOVE_LOCK
  401. Hmgo - hcaport.sys - HCAPORT_TAG_WQ_MG_INFO
  402. Hioc - hcaport.sys - HCAPORT_TAG_IOC_SERVICE_TABLE
  403. hSVD - mrxdav.sys - Shared Heap Tag
  404. HT01 - <unknown> - GDI Halftone AddCachedDCI() for CurCDCIData
  405. HT02 - <unknown> - GDI Halftone GetCachedDCI() for Threshold
  406. HT03 - <unknown> - GDI Halftone FindCachedSMP() for CurCSMPData
  407. HT04 - <unknown> - GDI Halftone FindCachedSMP() for CurCSMPBmp
  408. HT05 - <unknown> - GDI Halftone HT_CreateDeviceHalftoneInfo() for HT_DHI
  409. HT06 - <unknown> - GDI Halftone pDCIAdjClr() for DEVCLRADJ
  410. HT07 - <unknown> - GDI Halftone ComputeRGB555LUT() for RGBLUT
  411. HT08 - <unknown> - GDI Halftone ColorTriadSrcToDev() for RGB-XYZ
  412. HT09 - <unknown> - GDI Halftone ColorTriadSrcToDev() for CRTX-FD6XYZ Cache
  413. HT10 - <unknown> - GDI Halftone CreateDyesColorMappingTable() for DevPrims
  414. HT11 - <unknown> - GDI Halftone CreateDyesColorMappingTable() for DyeMappingTable
  415. HT12 - <unknown> - GDI Halftone ThresholdsFromYData() for pYData
  416. HT13 - <unknown> - GDI Halftone ComputeHTCellRegress() for pThresholds
  417. HT14 - <unknown> - GDI Halftone CalculateStretch() for InputSI/pSrcMaskLine
  418. HT15 - <unknown> - GDI Halftone CalculateStretch() for PrimColorInfo
  419. IBCM - wibcm.sys - CM_INSTANCE_TAG Windows Infiniband Communications Manager
  420. CEP - wibcm.sys - CEP_INSTANCE_TAG
  421. CMSH - wibcm.sys - WIBCM_SHARED_TAG
  422. CMWK - wibcm.sys - WIBCM_WORK_TAG
  423. CMWT - wibcm.sys - WIBCM_TIMER_TAG
  424. IBm* - wibms.sys - Windows Infiniband Management Server pool tags
  425. IbPm - wibpm.sys - WIBPM_TAG Windows Infiniband Performance Manager
  426. IbPS - wibpm.sys - WIBPM_SENT_TAG
  427. IbPI - wibpm.sys - WIBPM_ITEM_TAG
  428. IbPA - wibpm.sys - WIBPM_SAMPLE_TAG
  429. IbW0 - wibwmi.sys - WIBWMI0_TAG Windows Infiniband WMI Manager
  430. IbW1 - wibwmi.sys - WIBWMI1_TAG
  431. IbW2 - wibwmi.sys - WIBWMI2_TAG
  432. IPX - <unknown> - Nwlnkipx transport
  433. Icp - <unknown> - I/O completion packets queue on a completion ports
  434. IcpP - <unknown> - NPAGED_LOOKASIDE_LIST I/O completion per processor lookaside pointers
  435. IdeP - <unknown> - atapi IDE
  436. IdeX - <unknown> - PCI IDE
  437. idle - <unknown> - Power Manager idle handler
  438. Ifs - <unknown> - Default file system allocations (user's of ntifs.h)
  439. Info - <unknown> - general system information allocations
  440. Io - nt!io - general IO allocations
  441. IoCc - nt!io - Io completion context
  442. IoEa - nt!io - Io extended attributes
  443. IoEr - nt!io - Io error log packets
  444. IoFc - nt!io - Io name transmogrify operation
  445. IoFs - nt!io - Io shutdown packet
  446. IoFu - nt!pnp - Io file utils
  447. IoKB - <unknown> - Registry basic key block (temp allocation)
  448. IoNm - nt!io - Io parsing names
  449. IoRb - nt!io - Io remote boot related
  450. IoRN - nt!io - Registry key name (temp allocation)
  451. IoSe - nt!io - Io security related
  452. IoSh - nt!io - Io shutdown packet
  453. IoTi - nt!io - Io timers
  454. IoTt - nt!vf - I/O verifier IRP tracking table
  455. Ioin - <unknown> - Io interrupts
  456. IoOp - nt!io - I/O subsystem open packet
  457. IoRi - nt!io - I/O SubSystem Driver Reinitialization Callback Packet
  458. IoUs - nt!io - I/O SubSystem completion Context Allocation
  459. Irp - <unknown> - Io, IRP packets
  460. Irp+ - nt!vf - I/O verifier allocated IRP packets
  461. IrpB - nt!vf - I/O verifier direct I/O double buffer allocation
  462. Irpd - nt!vf - I/O verifier deferred completion context
  463. Irps - nt!vf - I/O verifier per-IRP session tracking data
  464. Irpt - nt!vf - I/O verifier per-IRP tracking data
  465. IrpC - nt!vf - I/O verifier stack contexts
  466. Irpl - nt!io - system large IRP lookaside list
  467. Irps - nt!io - system small IRP lookaside list
  468. Isap - <unknown> - Pnp Isa bus extender
  469. II?? - <unknown> - IP in IP tunneling
  470. IIrf - <unknown> - Free memory
  471. IIdt - <unknown> - Data
  472. IITn - <unknown> - Tunnel
  473. IIhd - <unknown> - Header
  474. IIpk - <unknown> - Packet
  475. IIsc - <unknown> - Send Context
  476. IIts - <unknown> - Transfer Context
  477. IIwc - <unknown> - Work Context
  478. Im* - <unknown> - Imapi.sys from adaptec
  479. IPm? - <unknown> - IP Multicasting
  480. IPmg - <unknown> - Group
  481. IPms - <unknown> - Source
  482. IPmo - <unknown> - Outgoing Interface
  483. IPmm - <unknown> - Message
  484. IPmf - <unknown> - Free memory (only in checked builds)
  485. Ip?? - ipsec.sys - IP Security
  486. IpSI - ipsec.sys - initial allcoations
  487. IpAT - ipsec.sys - AH headers in transport mode
  488. IpAU - ipsec.sys - AH headers in tunnel mode
  489. IpET - ipsec.sys - ESP headers in transport mode
  490. IpEU - ipsec.sys - ESP headers in tunnel mode
  491. IpHT - ipsec.sys - HUGHES headers in transport mode
  492. IpHU - ipsec.sys - HUGHES headers in tunnel mode
  493. IpAX - ipsec.sys - Key acquire contexts
  494. IpFI - ipsec.sys - Filter blocks
  495. IpSA - ipsec.sys - Security Associations
  496. IpKE - ipsec.sys - keys
  497. IpTI - ipsec.sys - timers
  498. IpSQ - ipsec.sys - stall queues
  499. IpLA - ipsec.sys - lookaside lists
  500. IpBP - ipsec.sys - buffer pools
  501. IpSC - ipsec.sys - send complete context
  502. IpEQ - ipsec.sys - event queue
  503. IpHW - ipsec.sys - hardware accleration items
  504. IpCO - ipsec.sys - IP compression
  505. IrD? - <unknown> - IrDA TDI and RAS drivers
  506. IU?? - <unknown> - IIS Utility Driver
  507. IUDl - <unknown> - Lookaside list allocations
  508. IUcp - <unknown> - completion port minipackets
  509. KAPC - nt!io - I/O SubSystem HardError APC
  510. KbdC - <unknown> - Keyboard Class Driver
  511. KCfe - <unknown> - Kernel COM factory entry
  512. Ke - <unknown> - Kernel data structures
  513. KeIC - <unknown> - Kernel Interrupt Object Chain
  514. Key - <unknown> - Key objects
  515. KMIX - <unknown> - Kmixer (wdm audio)
  516. KNMI - <unknown> - Kernel NMI Callback object
  517. KrbC - <unknown> - Kerberos Client package
  518. KSah - <unknown> - Ks auxiliary stream headers
  519. KSAI - <unknown> - allocator instance
  520. KSai - <unknown> - default allocator instance header
  521. KSbi - <unknown> - event buffered item
  522. KSCI - <unknown> - clock instance
  523. KSce - <unknown> - create item entry
  524. KSch - <unknown> - create handler entry
  525. KSci - <unknown> - default clock instance header
  526. KScp - <unknown> - object creation parameters auxiliary copy
  527. KSda - <unknown> - default allocator
  528. KSdc - <unknown> - default clock
  529. KSdh - <unknown> - device header
  530. Ksec - <unknown> - security device driver
  531. KSed - <unknown> - event dpc item
  532. KSee - <unknown> - event entry
  533. KSed - <unknown> - oneshot event deletion dpc
  534. KSep - <unknown> - irp system buffer event parameter
  535. KSew - <unknown> - oneshot event deletion workitem
  536. KSqr - <unknown> - QM quality report
  537. KSer - <unknown> - QM error report
  538. KSfd - <unknown> - filter cache data (MSKSSRV)
  539. KsFI - <unknown> - filter instance
  540. KSns - <unknown> - null security object
  541. KSnv - <unknown> - registry name value
  542. KSoh - <unknown> - object header
  543. KSop - <unknown> - object creation parameters
  544. KSpc - <unknown> - port driver instance FsContext
  545. KSPI - <unknown> - pin instance
  546. KSpp - <unknown> - irp system buffer property/method/event parameter
  547. KSpt - <unknown> - pin type list (MSKSSRV)
  548. KSqf - <unknown> - query information file buffer
  549. KSsc - <unknown> - port driver stream FsContext
  550. KSsf - <unknown> - set information file buffer
  551. KSsh - <unknown> - stream headers
  552. KSsi - <unknown> - software bus interface
  553. KSsl - <unknown> - symbolic link buffer (MSKSSRV)
  554. KSsp - <unknown> - serialized property set
  555. KsoO - <unknown> - WDM audio stuff
  556. L2CA - bthport.sys - Bluetooth port driver (L2CAP)
  557. L2T0 - <unknown> - ndis\l2tp / MTAG_FREED
  558. L2T1 - <unknown> - ndis\l2tp / MTAG_ADAPTERCB
  559. L2T2 - <unknown> - ndis\l2tp / MTAG_TUNNELCB
  560. L2T3 - <unknown> - ndis\l2tp / MTAG_VCCB
  561. L2T4 - <unknown> - ndis\l2tp / MTAG_VCTABLE
  562. L2T5 - <unknown> - ndis\l2tp / MTAG_WORKITEM
  563. L2T6 - <unknown> - ndis\l2tp / MTAG_TIMERQ
  564. L2T7 - <unknown> - ndis\l2tp / MTAG_TIMERQITEM
  565. L2T8 - <unknown> - ndis\l2tp / MTAG_PACKETPOOL
  566. L2T9 - <unknown> - ndis\l2tp / MTAG_FBUFPOOL
  567. L2Ta - <unknown> - ndis\l2tp / MTAG_HBUFPOOL
  568. L2Tb - <unknown> - ndis\l2tp / MTAG_TDIXRDG
  569. L2Tc - <unknown> - ndis\l2tp / MTAG_TDIXSDG
  570. L2Td - <unknown> - ndis\l2tp / MTAG_CTRLRECD
  571. L2Te - <unknown> - ndis\l2tp / MTAG_CTRLSENT
  572. L2Tf - <unknown> - ndis\l2tp / MTAG_PAYLRECD
  573. L2Tg - <unknown> - ndis\l2tp / MTAG_PAYLSENT
  574. L2Th - <unknown> - ndis\l2tp / MTAG_INCALL
  575. L2Ti - <unknown> - ndis\l2tp / MTAG_UTIL
  576. L2Tj - <unknown> - ndis\l2tp / MTAG_ROUTEQUERY
  577. L2Tk - <unknown> - ndis\l2tp / MTAG_ROUTESET
  578. L2Tl - <unknown> - ndis\l2tp / MTAG_L2TPPARAMS
  579. L2Tm - <unknown> - ndis\l2tp / MTAG_TUNNELWORK
  580. L2Tn - <unknown> - ndis\l2tp / MTAG_TDIXROUTE
  581. LANE - atmlane.sys - LAN Emulation Client for ATM
  582. LB?? - <unknown> - LM Datagram receiver allocations
  583. LBan - <unknown> - Server announcement
  584. LBvb - <unknown> - View buffer
  585. LBma - <unknown> - Master announce context
  586. LBxp - <unknown> - Transport
  587. LBxn - <unknown> - TransportName
  588. LBxm - <unknown> - Master name
  589. LBtn - <unknown> - Transport name
  590. LBea - <unknown> - Ea buffer
  591. LBdi - <unknown> - POOL_DOMAIN_INFO
  592. LBds - <unknown> - Send datagram context
  593. LBci - <unknown> - Connection info
  594. LBmh - <unknown> - Mailslot header
  595. LBbl - <unknown> - Backup List
  596. LBsl - <unknown> - Browser server list
  597. LBbs - <unknown> - Browser server
  598. LBgb - <unknown> - GetBackupList request
  599. LBbr - <unknown> - GetBackupList response
  600. LBmb - <unknown> - Mailslot Buffer
  601. LBid - <unknown> - Illegal datagram context
  602. LBbn - <unknown> - Name
  603. LBnn - <unknown> - Name name
  604. LBic - <unknown> - IRP context
  605. LBwi - <unknown> - Work item
  606. LBel - <unknown> - Election context
  607. LBbb - <unknown> - Become backup context
  608. LBbr - <unknown> - Become backup request
  609. LBpn - <unknown> - Paged Name
  610. LBpt - <unknown> - Paged transport
  611. LBse - <unknown> - Browser security
  612. Lbuf - <unknown> - EXIFS Large Buffer
  613. LeoC - <unknown> - Symantec/Norton AntiVirus filter driver
  614. List - <unknown> - kernel utilities list allocation
  615. LCam - <unknown> - WDM mini video capture driver for Logitech camera
  616. Lfs - <unknown> - Lfs allocations
  617. LfsI - <unknown> - Lfs allocations
  618. LpcZ - <unknown> - LPC Zone
  619. LpcM - <unknown> - Local procedure call message blocks
  620. Lr?? - <unknown> - LM redirector allocations
  621. Lr - <unknown> - Generic allocations
  622. Lrcx - <unknown> - Context blocks of various types
  623. Lrcl - <unknown> - ConnectListEntries
  624. Lrsl - <unknown> - ServerListEntries
  625. Lrse - <unknown> - Security entry
  626. Lrsc - <unknown> - Search Control Blocks
  627. Lrea - <unknown> - EA related allocations
  628. Lric - <unknown> - Instance Control Blocks
  629. Lrfc - <unknown> - File Control Blocks
  630. Lrfl - <unknown> - Fcb Locks
  631. Lrfp - <unknown> - Fcb Paging locks
  632. Lrcn - <unknown> - Computer Name
  633. Lrdn - <unknown> - Domain Name
  634. Lr?? - <unknown> - Buffers used for FsControlFile APIs
  635. Lrlc - <unknown> - Lock Control Blocks
  636. Lrlb - <unknown> - Lock Control Block buffers
  637. Lrnf - <unknown> - Non paged FCB
  638. Lrnt - <unknown> - Non paged transport
  639. Lrps - <unknown> - Paged security entry
  640. Lrte - <unknown> - Transport event.
  641. Lrxx - <unknown> - Transceive context blocks
  642. Lr!! - <unknown> - Cancel request context blocks
  643. Lrmt - <unknown> - MPX table
  644. Lrme - <unknown> - MPX table entries
  645. Lrsx - <unknown> - Send contexts
  646. Lraw - <unknown> - Async write context
  647. Lrwb - <unknown> - Write behind buffer header
  648. Lrbb - <unknown> - Write behind buffer
  649. Lrwq - <unknown> - Work queue item
  650. Lrac - <unknown> - ACL for redirector
  651. Lrds - <unknown> - Security Descriptor for redirector
  652. Lrsm - <unknown> - SMB buffer
  653. Lrds - <unknown> - Duplicated ansi string
  654. Lrdu - <unknown> - Duplicated unicode string
  655. Lxpt - <unknown> - Transport
  656. Lrtc - <unknown> - Transport connection
  657. Lrna - <unknown> - Netbios Addresses
  658. Lrca - <unknown> - Temporary storage used in name canonicalization
  659. Lr2x - <unknown> - Transact SMB context
  660. Lrpt - <unknown> - Primary transport server list
  661. Lrso - <unknown> - Operating system name
  662. Lref - <unknown> - Reference history (debug only)
  663. LS?? - <unknown> - LM server allocations
  664. LSac - <unknown> - BlockTypeAdminCheck
  665. LSas - <unknown> - BlockTypeAdapterStatus
  666. LSbf - <unknown> - buffer descriptor
  667. LScd - <unknown> - comm device
  668. LScn - <unknown> - connection
  669. LSdb - <unknown> - data buffer
  670. LSdc - <unknown> - BlockTypeDirCache
  671. LSdi - <unknown> - BlockTypeDirectoryInfo
  672. LSep - <unknown> - endpoint
  673. LSfn - <unknown> - BlockTypeFSName
  674. LSlf - <unknown> - LFCB
  675. LSlr - <unknown> - BlockTypeLargeReadX
  676. LSmf - <unknown> - MFCB
  677. LSmi - <unknown> - BlockTypeMisc
  678. LSnh - <unknown> - nonpaged block header
  679. LSni - <unknown> - BlockTypeNameInfo
  680. LSop - <unknown> - oplock break wait
  681. LSpc - <unknown> - paged connection
  682. LSpm - <unknown> - paged MFCB
  683. LSpr - <unknown> - paged RFCB
  684. LSrf - <unknown> - RFCB
  685. LSsc - <unknown> - search(core)
  686. LSsd - <unknown> - BlockTypeShareSecurityDescriptor
  687. LSsf - <unknown> - BlockTypeDfs
  688. LSsh - <unknown> - share
  689. LSsp - <unknown> - search(core complete)
  690. LSsr - <unknown> - search
  691. LSss - <unknown> - session
  692. LStb - <unknown> - table
  693. LStc - <unknown> - tree connect
  694. LSti - <unknown> - timer
  695. LStr - <unknown> - transaction
  696. LSvi - <unknown> - BlockTypeVolumeInformation
  697. LSwi - <unknown> - initial work context
  698. LSwn - <unknown> - normal work context
  699. LSwq - <unknown> - BlockTypeWorkQueue
  700. LSwr - <unknown> - raw work context
  701. LSws - <unknown> - BlockTypeWorkContextSpecial
  702. LSnd - <unknown> - WDM mini sound driver for Logitech video camera
  703. LXMK - <unknown> - kernel mixer line driver (KMXL - looks like they got their tag backwards)
  704. MXF - <unknown> - DirectMusic (MIDI Transform Filter)
  705. MapP - <unknown> - PNP map
  706. Mapr - <unknown> - arc firmware registry routines
  707. McaC - hal.dll - HAL MCA corrected Log
  708. McaD - hal.dll - HAL MCA Driver Log
  709. McaK - hal.dll - HAL MCA Kernel Log
  710. McaP - hal.dll - HAL MCA Log from previous boot
  711. McaT - hal.dll - HAL MCA temporary Log
  712. MCAM - <unknown> - WDM mini driver for Intel USB camera
  713. MCDx - <unknown> - OpenGL MCD server (mcdsrv32.dll) allocations
  714. MCDd - <unknown> - OpenGL MCD driver (embedded in a display driver like s3mvirge.dll)
  715. Mdl - <unknown> - Io, Mdls
  716. MdlP - <unknown> - MDL per processor lookaside list pointers
  717. MePr - <unknown> - In-memory print buffer
  718. Mm - nt!mm - general Mm Allocations
  719. MmBk - nt!mm - Mm banked sections
  720. MmCa - nt!mm - Mm control areas for mapped files
  721. MmCd - nt!mm - Mm fork clone descriptors
  722. MmCh - nt!mm - Mm fork clone headers
  723. MmCi - nt!mm - Mm control areas for images
  724. MmCm - nt!mm - Calls made to MmAllocateContiguousMemory
  725. MmDb - nt!mm - NtMapViewOfSection service
  726. MmDT - nt!mm - Mm debug
  727. MmEx - nt!mm - Mm events
  728. MmHi - nt!mm - Mm image entry - allocated per session
  729. MmHn - nt!mm - Mm sessionwide address name string entry
  730. MmHv - nt!mm - Mm sessionwide address entry
  731. MmIn - nt!mm - Mm inpaged io structures
  732. MmLd - nt!mm - Mm load module database
  733. MmPg - nt!mm - Mm page table pages at init time
  734. MmRw - nt!mm - Mm read write virtual memory buffers
  735. MmSb - nt!mm - Mm subsections
  736. MmSe - nt!mm - Mm secured VAD allocation
  737. MmSg - nt!mm - Mm segments
  738. MmSt - nt!mm - Mm section object prototype ptes
  739. Mmdl - nt!mm - Mm Mdls for flushes
  740. Mmpp - nt!mm - Mm prototype PTEs for pool
  741. MmVd - nt!mm - Mm virtual address descriptors for mapped views
  742. MmVs - nt!mm - Mm virtual address descriptors short form (private views)
  743. Mmxx - nt!mm - Mm temporary allocations
  744. MmCx - nt!mm - info for dynamic section extension
  745. MmDm - nt!mm - deferred MmUnlock entries
  746. MmHt - nt!mm - session space PTE data
  747. MmLn - nt!mm - temporary name buffer for driver loads
  748. MmMl - nt!mm - physical memory range information
  749. MmRl - nt!mm - temporary readlists for file prefetch
  750. MmSP - nt!mm - SLIST entries for system PTE NB queues
  751. MmSc - nt!mm - subsections used to map data files
  752. MmSd - nt!mm - extended subsections used to map data files
  753. MmSm - nt!mm - segments used to map data files
  754. MmWe - nt!mm - Work entries for writing out modified filesystem pages.
  755. MmWw - nt!mm - Write watch VAD info
  756. Mmpv - nt!mm - Physical view VAD info
  757. Mmww - nt!mm - Write watch bitmap VAD info
  758. MRXx - <unknown> - Client side caching for SMB
  759. Msdv - <unknown> - WDM mini driver for IEEE 1394 DV Camera and VCR
  760. MST? - <unknown> - MSTEE (mstee.sys)
  761. MSTa - <unknown> - associated stream header
  762. MSTc - <unknown> - filer connection
  763. MSTd - <unknown> - data format
  764. MSTf - <unknown> - filter instance
  765. MSTp - <unknown> - pin instance
  766. MSTs - <unknown> - stream header
  767. MuoC - <unknown> - MOUSE_POOL_TAG Mouse Class Driver
  768. MupI - <unknown> - DFS file system driver IRP context allocation
  769. MsFc - <unknown> - Mailslot CCB, Client control block. Each client with an opened mailslot has one of these
  770. MsFC - <unknown> - Mailslot root CCB, A client control block for the top level mailslot directory
  771. MsFd - <unknown> - Mailslot data entry write buffer, This is writes buffered inside mailslots
  772. MsFD - <unknown> - Mailslot root DCB and its name buffer
  773. MsFf - <unknown> - Mailslot FCB, File control block, Service side block for each created mailslot.
  774. MsFg - <unknown> - Mailslot global resource
  775. MsFn - <unknown> - Mailslot temporary name buffer
  776. MsFN - <unknown> - Mailslot FCB name buffer, name for each created mailslot
  777. MsFr - <unknown> - Mailslot read buffer, buffer created for pended reads issued.
  778. MsFt - <unknown> - Mailslot query template, used for directory queries.
  779. MsFw - <unknown> - Mailslot work context block, blocks create when we need to timeout reads.
  780. MsvC - <unknown> - Msv/Ntlm client package
  781. Mup - <unknown> - Multiple UNC provider allocations
  782. Muta - <unknown> - Mutant objects
  783. NBF - <unknown> - general NBF allocations
  784. NBFa - <unknown> - NBF address object
  785. NBFb - <unknown> - NBF receive buffer
  786. NBFc - <unknown> - NBF connection object
  787. NBFd - <unknown> - NBF packet pool descriptor
  788. NBFe - <unknown> - NBF bind & export names
  789. NBFf - <unknown> - NBF address file object
  790. NBFg - <unknown> - NBF registry path name
  791. NBFi - <unknown> - NBF tdi connection info
  792. NBFk - <unknown> - NBF loopback buffer
  793. NBFl - <unknown> - NBF link object
  794. NBFn - <unknown> - NBF netbios name
  795. NBFo - <unknown> - NBF config data
  796. NBFp - <unknown> - NBF packet
  797. NBFq - <unknown> - NBF query buffer
  798. NBFr - <unknown> - NBF request
  799. NBFs - <unknown> - NBF provider stats
  800. NBFt - <unknown> - NBF connection table
  801. NBFu - <unknown> - NBF UI frame
  802. NBFw - <unknown> - NBF work item
  803. NBI - <unknown> - NwlnkNb transport
  804. NBS - <unknown> - general NetBIOS allocations
  805. NBSa - <unknown> - address block
  806. NBSc - <unknown> - connection block
  807. NBSe - <unknown> - EA buffer
  808. NBSf - <unknown> - FCB
  809. NBSl - <unknown> - LANA block
  810. NBSn - <unknown> - copy of user NCB
  811. NBSr - <unknown> - registry allocations
  812. NBSx - <unknown> - XNS NETONE address (connect block)
  813. NBSy - <unknown> - NetBIOS address (connect block)
  814. NBSz - <unknown> - NetBIOS address (listen block)
  815. NBqh - <unknown> - Non-blocking queue entries used to carry the real data in the queue.
  816. NCSt - <unknown> - EXIFS NC
  817. ND - ndis.sys - general NDIS allocations
  818. NDDl - ndis.sys - NDIS_TAG_DBG_LOG
  819. NDMb - ndis.sys - NDIS_TAG_MAC_BLOCK
  820. NDPX - ndis.sys - NDIS Proxy allocations
  821. NDPa - ndis.sys - Apple Talk
  822. NDPb - ndis.sys - NBF
  823. NDPi - ndis.sys - NWLNKIPX
  824. NDPn - ndis.sys - NWLNKNB
  825. NDPp - ndis.sys - Packet Scheduler.
  826. NDPs - ndis.sys - NWLNKSPX
  827. NDPt - ndis.sys - TCPIP
  828. NDPw - ndis.sys - WAN_PACKET_TAG
  829. NDam - ndis.sys - NdisAllocateMemory
  830. NDan - ndis.sys - adapter name
  831. NDco - ndis.sys - NDIS_TAG_CO
  832. NDd - ndis.sys - NDIS_TAG_DBG
  833. NDdb - ndis.sys - DMA block
  834. NDdl - ndis.sys - NDIS_TAG_DBG_L
  835. NDdp - ndis.sys - NDIS_TAG_DBG_P
  836. NDds - ndis.sys - NDIS_TAG_DBG_S
  837. NDdt - ndis.sys - NDIS_TAG_DFRD_TMR
  838. NDfa - ndis.sys - NDIS_TAG_FILTER_ADDR
  839. NDlb - ndis.sys - lookahead buffer
  840. NDlp - ndis.sys - NDIS_TAG_LOOP_PKT
  841. NDmb - ndis.sys - MAC block
  842. NDmr - ndis.sys - map register entry array
  843. NDoa - ndis.sys - NDIS_TAG_OID_ARRAY
  844. NDob - ndis.sys - open block
  845. NDpb - ndis.sys - protocol block
  846. NDpf - ndis.sys - NDIS_TAG_FILTER
  847. NDpk - ndis.sys - NDIS_TAG_PKT_PATTERN
  848. NDpp - ndis.sys - packet pool
  849. NDrl - ndis.sys - resource list
  850. NDrp - ndis.sys - NDIS_TAG_REGISTRY_PATH
  851. NDrq - ndis.sys - NDIS_TAG_Q_REQ
  852. NDsi - ndis.sys - EISA slot information
  853. NDsm - ndis.sys - Cached shared memory descriptor
  854. NDst - ndis.sys - NDIS_TAG_STRING
  855. NDw0 - ndis.sys - NDIS_TAG_WMI_REG_INFO
  856. NDw1 - ndis.sys - NDIS_TAG_WMI_GUID_TO_OID
  857. NDw2 - ndis.sys - NDIS_TAG_WMI_OID_SUPPORTED_LIST
  858. NDw3 - ndis.sys - NDIS_TAG_WMI_EVENT_ITEM
  859. NDwi - ndis.sys - NDIS_TAG_WORK_ITEM
  860. Nb?? - <unknown> - NetBT allocations
  861. Nls - <unknown> - Nls strings
  862. Nmdd - <unknown> - NetMeeting display driver miniport 1 MB block
  863. None - <unknown> - call to ExAllocatePool
  864. Npf* - npfs.sys - Npfs Allocations
  865. NpFc - npfs.sys - CCB, client control block
  866. NpFC - npfs.sys - ROOT_DCB CCB
  867. NpFD - npfs.sys - DCB, directory block
  868. NpFg - npfs.sys - Global storage
  869. NpFi - npfs.sys - NPFS client info buffer.
  870. NpFn - npfs.sys - Name block
  871. NpFq - npfs.sys - Query template buffer used for directory query
  872. NpFr - npfs.sys - DATA_ENTRY records (read/write buffers)
  873. NpFs - npfs.sys - Client security context
  874. NpFw - npfs.sys - Write block
  875. NpFW - npfs.sys - Write block
  876. NS?? - <unknown> - Netware server allocations
  877. Ntf? - ntfs.sys - NTFS Specific allocation tags
  878. Ntf0 - ntfs.sys - general pool allocation
  879. Ntf9 - ntfs.sys - Large Temporary Buffer
  880. NtfC - ntfs.sys - CCB
  881. Ntfc - ntfs.sys - CCB_DATA
  882. NtfD - ntfs.sys - DEALLOCATED_RECORDS
  883. NtfE - ntfs.sys - INDEX_CONTEXT
  884. NtfF - ntfs.sys - FCB_INDEX
  885. Ntff - ntfs.sys - FCB_DATA
  886. NtfI - ntfs.sys - NTFS_IO_CONTEXT
  887. Ntfi - ntfs.sys - IRP_CONTEXT
  888. NtfK - ntfs.sys - KEVENT
  889. Ntfk - ntfs.sys - FILE_LOCK
  890. Ntfl - ntfs.sys - LCB
  891. NtfM - ntfs.sys - NTFS_MCB_ENTRY
  892. Ntfm - ntfs.sys - NTFS_MCB_ARRAY
  893. NtfN - ntfs.sys - NUKEM
  894. Ntfn - ntfs.sys - SCB_NONPAGED
  895. Ntfo - ntfs.sys - SCB_INDEX normalized named buffer
  896. NtfQ - ntfs.sys - QUOTA_CONTROL_BLOCK
  897. Ntfq - ntfs.sys - General Allocation with Quota
  898. NtfR - ntfs.sys - READ_AHEAD_THREAD
  899. Ntfr - ntfs.sys - ERESOURCE
  900. NtfS - ntfs.sys - SCB_INDEX
  901. Ntfs - ntfs.sys - SCB_DATA
  902. NtfT - ntfs.sys - SCB_SNAPSHOT
  903. Ntft - ntfs.sys - SCB (Prerestart)
  904. NtfV - ntfs.sys - VPB
  905. Ntfv - ntfs.sys - COMPRESSION_SYNC
  906. Ntfw - ntfs.sys - Workspace
  907. Ntfx - ntfs.sys - General Allocation
  908. NtF? - ntfs.sys - NTFS tags based on source module
  909. NtFa - ntfs.sys - AllocSup.c
  910. NtFA - ntfs.sys - AttrSup.c
  911. NtFB - ntfs.sys - BitmpSup.c
  912. NtFC - ntfs.sys - Create.c
  913. NtFD - ntfs.sys - DevioSup.c
  914. NtFd - ntfs.sys - DirCtrl.c
  915. NtFE - ntfs.sys - Ea.c
  916. NtFF - ntfs.sys - FileInfo.c
  917. NtFf - ntfs.sys - FsCtrl.c
  918. NtFI - ntfs.sys - IndexSup.c
  919. NtFL - ntfs.sys - LogSup.c
  920. NtFM - ntfs.sys - McbSup.c
  921. NtFN - ntfs.sys - NtfsData.c
  922. NtFO - ntfs.sys - ObjIdSup.c
  923. NtFQ - ntfs.sys - QuotaSup.c
  924. NtFR - ntfs.sys - RestrSup.c
  925. NtFS - ntfs.sys - SecurSup.c
  926. NtFs - ntfs.sys - StrucSup.c
  927. NtFU - ntfs.sys - usnsup.c
  928. NtFV - ntfs.sys - VerfySup.c
  929. NtFv - ntfs.sys - ViewSup.c
  930. NtFW - ntfs.sys - Write.c
  931. Nwcs - <unknown> - Client Services for NetWare
  932. NwFw - <unknown> - ntos\tdi\fwd
  933. ObSq - nt!ob - object security descriptors (query)
  934. ObCi - nt!ob - captured information for ObCreateObject
  935. ObCI - nt!ob - object creation lookaside list
  936. ObDi - nt!ob - object directory
  937. ObHd - nt!ob - object handle count data base
  938. ObNm - nt!ob - object names
  939. ObNM - nt!ob - name buffer per processor lookaside pointers
  940. ObZn - nt!ob - object zone
  941. ObjT - nt!ob - object type objects
  942. Obtb - nt!ob - object tables via EX handle.c
  943. ObTR - nt!ob - object table ERESOURCEs
  944. Obeb - nt!ob - object tables extra bit tables via EX handle.c
  945. ObDm - nt!ob - object device map
  946. ObSc - nt!ob - Object security descriptor cache block
  947. ObSt - nt!ob - Object Manager temporary storage
  948. OHCI - <unknown> - Open Host Controller Interface for USB
  949. ohci - <unknown> - 1394 OHCI host controller driver
  950. Ovfl - <unknown> - The internal pool tag table has overflowed - usually this is a result of nontagged allocations being made
  951. OvfL - <unknown> - EXIFS FCBOVF List
  952. PaeD - <unknown> - PAE top level directory allocation blocks
  953. ParC - <unknown> - Parallel class driver
  954. ParL - <unknown> - Parallel link driver
  955. ParP - <unknown> - Parallel port driver
  956. ParV - <unknown> - ParVdm driver for vdm<->parallel port communciation
  957. PciB - pci.sys - PnP pci bus enumerator
  958. PcCi - <unknown> - WDM audio port class adapter device object stuff
  959. PcCr - <unknown> - WDM audio stuff
  960. PcDi - <unknown> - WDM audio stuff
  961. PcDm - <unknown> - DirectMusic MXF objects (WDM audio)
  962. PcFM - <unknown> - WDM audio FM synthesizer
  963. PcFp - <unknown> - WDM audio stuff
  964. PcIc - <unknown> - WDM audio stuff
  965. PcIl - <unknown> - WDM audio stuff
  966. PcNw - <unknown> - WDM audio stuff
  967. PcPc - <unknown> - WDM audio stuff
  968. PcPr - <unknown> - WDM audio stuff
  969. PcSX - <unknown> - WDM audio stuff
  970. PcSl - <unknown> - WDM audio stuff
  971. PcSt - <unknown> - WDM audio stuff
  972. PcSx - <unknown> - WDM audio stuff
  973. PcUs - <unknown> - WDM audio stuff
  974. Pcmc - pcmcia.sys - Pcmcia bus enumerator, general structures
  975. Pcic - <unknown> - Pcmcia bus enumerator, PCIC/Cardbus controller specific structures
  976. Pcdb - <unknown> - Pcmcia bus enumerator, Databook controller specific structures
  977. Pgm? - <unknown> - Pgm (Pragmatic General Multicast) protocol: RMCast.sys
  978. Plcp - <unknown> - Cache aware pushlock list (array of puchlock addresses)
  979. Plcl - <unknown> - Cache aware pushlock entry. One per processor
  980. PNCH - <unknown> - Power Notify Channel
  981. PNCL - <unknown> - Power Notify channel list
  982. PNDP - <unknown> - Power Abort Dpc Routine
  983. PNI - <unknown> - Power Notify Instance
  984. Pool - <unknown> - Pool tables, etc.
  985. PooL - <unknown> - Phase 0 initialization of the executive component, paged and nonpaged small pool lookaside structures
  986. Port - <unknown> - Port objects
  987. PoSL - <unknown> - Power shutdown event list
  988. Prof - <unknown> - Profile objects
  989. POWI - nt!po - Power Work Item (executive worker thread work item entry)
  990. PSwt - nt!po - Power switch structure
  991. PSTA - nt!po - Po registered system state
  992. PDss - nt!po - Po device system state
  993. Prcr - processr.sys - Processr hal driver allocations
  994. Proc - <unknown> - Process objects
  995. Ps - <unknown> - general ps allocations
  996. Psap - <unknown> - Block used to hold a user mode APC while its queued to a thread
  997. PsAp - <unknown> - Process APC queued by user mode process
  998. PsCa - <unknown> - APC queued at thread create time.
  999. PsCr - <unknown> - Working set change record, should be a temporary allocation
  1000. PsEx - <unknown> - Process exit APC
  1001. PsIm - <unknown> - Thread impersonation (PS_IMPERSONATE_INFORMATION)
  1002. Psjb - <unknown> - Job set array, should be a temporary allocation
  1003. PsLd - <unknown> - Process LDT information blocks
  1004. PsQb - <unknown> - Process quota block
  1005. PsTf - <unknown> - Job object token filter
  1006. Pstb - <unknown> - Process tables via EX handle.c
  1007. Psta - <unknown> - Power management system state
  1008. PsTp - <unknown> - Thread termination port block
  1009. PsWs - <unknown> - Process working set watch array
  1010. PSE3 - pse36.sys - Physical Size Extension driver
  1011. PnPb - nt!pnp - PnP BIOS resource manipulation
  1012. PpEB - nt!pnp - PNP_POOL_EVENT_BUFFER
  1013. PpEE - nt!pnp - PNP_DEVICE_EVENT_ENTRY_TAG
  1014. PpEL - nt!pnp - PNP_DEVICE_EVENT_LIST_TAG
  1015. PpLg - nt!pnp - PnP last good.
  1016. PpUB - nt!pnp - PNP_USER_BLOCK_TAG
  1017. PpWI - nt!pnp - PNP_DEVICE_WORK_ITEM_TAG
  1018. Ppcd - nt!pnp - PnP critical device database
  1019. Ppcr - nt!pnp - plug-and-play critical allocations
  1020. Ppdd - nt!pnp - new Plug-And-Play driver entries and IRPs
  1021. Ppde - nt!pnp - routines to perform device removal
  1022. Ppei - nt!pnp - Eisa related code
  1023. Ppen - nt!pnp - routines to perform device enumeration
  1024. Ppin - nt!pnp - plug-and-play initialization
  1025. Ppio - nt!pnp - plug-and-play IO system APIs
  1026. Ppre - nt!pnp - resource allocation and translation
  1027. Pprl - nt!pnp - routines to manipulate relations list
  1028. Ppsu - nt!pnp - plug-and-play subroutines for the I/O system
  1029. PPTP - <unknown> - PPTP_MEMORYPOOL_TAG
  1030. PPT0 - <unknown> - PPTP_TDIADDR_TAG
  1031. PPT1 - <unknown> - PPTP_TDICONN_TAG
  1032. PPT2 - <unknown> - PPTP_CONNINFO_TAG
  1033. PPT3 - <unknown> - PPTP_ADDRINFO_TAG
  1034. PPT4 - <unknown> - PPTP_TIMEOUT_TAG
  1035. PPT5 - <unknown> - PPTP_TIMER_TAG
  1036. PPT6 - <unknown> - PPTP_TDICOTS_TAG
  1037. PPT7 - <unknown> - PPTP_WRKQUEUE_TAG
  1038. PPT8 - <unknown> - PPTP_SEND_CTRLDATA_TAG
  1039. PPT9 - <unknown> - PPTP_SEND_ACKDATA_TAG
  1040. PPTa - <unknown> - PPTP_SEND_DGRAMDESC_TAG
  1041. PPTb - <unknown> - PPTP_TDICLTS_TAG
  1042. PPTc - <unknown> - PPTP_RECV_CTRLDESC_TAG
  1043. PPTd - <unknown> - PPTP_RECV_CTRLDATA_TAG
  1044. PPTe - <unknown> - PPTP_RECV_DGRAMDESC_TAG
  1045. PPTf - <unknown> - PPTP_RECV_DGRAMDATA_TAG
  1046. PPTg - <unknown> - PPTP_RECVDESC_TAG
  1047. PPTh - <unknown> - PPTP_ENGINE_TAG
  1048. PPTi - <unknown> - PPTP_RECVDATA_TAG
  1049. PSC? - <unknown> - Packet Scheduler (PSCHED) Tags
  1050. PSC0 - <unknown> - NDIS Request
  1051. PSC1 - <unknown> - GPC Client Vc
  1052. PSC2 - <unknown> - WanLink
  1053. PSC3 - <unknown> - Miscellaneous allocations
  1054. PSC4 - <unknown> - WMI
  1055. PSCa - <unknown> - Adapter
  1056. PSCb - <unknown> - CallParameters
  1057. PSCc - <unknown> - PipeContext
  1058. PSCd - <unknown> - FlowContext
  1059. PSCe - <unknown> - ClassMapContext
  1060. PSCf - <unknown> - Adapter Profile
  1061. PSCg - <unknown> - Component
  1062. PX1 - <unknown> - ndis ProviderEventLookaside
  1063. p2?? - perm2dll.dll - Permedia2 display driver
  1064. p2d3 - perm2dll.dll - Permedia2 display driver - d3d.c
  1065. p2d6 - perm2dll.dll - Permedia2 display driver - d3ddx6.c
  1066. p2de - perm2dll.dll - Permedia2 display driver - debug.c
  1067. p2ds - perm2dll.dll - Permedia2 display driver - d3dstate.c
  1068. p2dt - perm2dll.dll - Permedia2 display driver - d3dtxman.c
  1069. p2su - perm2dll.dll - Permedia2 display driver - ddsurf.c
  1070. p2en - perm2dll.dll - Permedia2 display driver - enable.c
  1071. p2fi - perm2dll.dll - Permedia2 display driver - fillpath.c
  1072. p2he - perm2dll.dll - Permedia2 display driver - heap.c
  1073. p2hw - perm2dll.dll - Permedia2 display driver - hwinit.c
  1074. p2cx - perm2dll.dll - Permedia2 display driver - p2ctxt.c
  1075. p2pa - perm2dll.dll - Permedia2 display driver - palette.c
  1076. p2pe - perm2dll.dll - Permedia2 display driver - permedia.c
  1077. p2tx - perm2dll.dll - Permedia2 display driver - textout.c
  1078. P3D? - perm3dd.dll - Permedia3 display driver - DirectDraw/3D
  1079. P3G? - perm3dd.dll - Permedia3 display driver
  1080. Qnam - <unknown> - EXIFS Query Name
  1081. Qp?? - <unknown> - Generic Packet Classifier (MSGPC)
  1082. Qppn - <unknown> - Queued Notifications
  1083. Qppi - <unknown> - Pending Irp structures
  1084. Qpci - <unknown> - CfInfo
  1085. Qpct - <unknown> - Client blocks
  1086. Qppa - <unknown> - Pattern blocks
  1087. Qphf - <unknown> - HandleFactory
  1088. Qpph - <unknown> - PathHash
  1089. Qprz - <unknown> - Rhizome
  1090. Qppd - <unknown> - GenPatternDb
  1091. Qpfd - <unknown> - FragmentDb
  1092. Qpcf - <unknown> - ClassificationFamily
  1093. Qpcd - <unknown> - CfInfoData
  1094. Qpcb - <unknown> - ClassificationBlock
  1095. Qppt - <unknown> - Protocol
  1096. Qpdg - <unknown> - Debug
  1097. RB?? - <unknown> - RedBook Filter Driver, static allocations
  1098. RBEv - <unknown> - RedBook - Thread Events
  1099. RBRl - <unknown> - RedBook - Remove lock
  1100. RBRg - <unknown> - RedBook - driverExtension->RegistryPath
  1101. RBSe - <unknown> - RedBook - Serialization tracking for checked builds
  1102. RBWa - <unknown> - RedBook - Wait block for system thread
  1103. rb?? - <unknown> - RedBook Filter Driver, dynamic allocations
  1104. rbBu - <unknown> - RedBook - Buffer for read/stream
  1105. rbIr - <unknown> - RedBook - Irp for read/stream
  1106. rbIp - <unknown> - RedBook - Irp pointer block
  1107. rbMd - <unknown> - RedBook - Mdl for read/stream
  1108. rbMp - <unknown> - RedBook - Mdl pointer block
  1109. rbRc - <unknown> - RedBook - Read completion context
  1110. rbRx - <unknown> - RedBook - Read Xtra info
  1111. rbSc - <unknown> - RedBook - Stream completion context
  1112. rbSx - <unknown> - RedBook - Stream Xtra info
  1113. rbTo - <unknown> - RedBook - Cached table of contents
  1114. Rcp? - sacdrv.sys - SAC Driver (Headless)
  1115. RcpA - sacdrv.sys - Internal memory mgr alloc block
  1116. RcpI - sacdrv.sys - Internal memory mgr initial heap block
  1117. RcpS - sacdrv.sys - Security related block
  1118. ReEv - <unknown> - Resource Event
  1119. ReSe - <unknown> - Resource Semaphore
  1120. ReTa - <unknown> - Resource Extended Table
  1121. RefT - <unknown> - Bluetooth reference tracking
  1122. Rf?? - <unknown> - Bluetooth RFCOMM TDI driver
  1123. RfAD - rfcomm.sys - RFCOMM Address
  1124. RfBB - rfcomm.sys - RFCOMM BRB
  1125. RfBT - rfcomm.sys - RFCOMM (bthport)
  1126. RfCB - rfcomm.sys - RCOMMM
  1127. RfCH - rfcomm.sys - RFCOMM channel
  1128. RfCN - rfcomm.sys - RFCOMM connect
  1129. RfDA - rfcomm.sys - RFCOMM data
  1130. RfFR - rfcomm.sys - RFCOMM frame
  1131. RfRX - rfcomm.sys - RFCOMM receive
  1132. RfPP - rfcomm.sys - RFCOMM pnp
  1133. RfWR - rfcomm.sys - RFCOMM worker
  1134. RRle - <unknown> - RTL_RANGE_LIST_ENTRY_TAG
  1135. RRlm - <unknown> - RTL_RANGE_LIST_MISC_TAG
  1136. RtPi - <unknown> - Temp allocation for product type key
  1137. RPrt - rstorprt.sys - Remote Storage Port Driver
  1138. Rqrv - <unknown> - Registry query buffer
  1139. RS?? - <unknown> - Remote Storage
  1140. RSFS - <unknown> - Recall Queue
  1141. RSFN - <unknown> - File Name
  1142. RSSE - <unknown> - Security info
  1143. RSWQ - <unknown> - Work Queue
  1144. RSQI - <unknown> - Queue info
  1145. RSLT - <unknown> - Long term data
  1146. RSIO - <unknown> - Ioctl Queue
  1147. RSFO - <unknown> - File Obj queue
  1148. RSVO - <unknown> - Validate Queue
  1149. RSER - <unknown> - Error log data
  1150. RWan - rawwan.sys - Raw WAN driver
  1151. Rx?? - <unknown> - Rdr2 rdbss.sys stuff
  1152. RxSc - <unknown> - SrvCall
  1153. RxNr - <unknown> - NetRoot
  1154. RxVn - <unknown> - VNetRoot
  1155. RxFc - <unknown> - FCB
  1156. RxSo - <unknown> - SrvOpen
  1157. RxFx - <unknown> - Fobx
  1158. RxNf - <unknown> - nonpaged FCB
  1159. RxWq - <unknown> - work queue
  1160. RxBm - <unknown> - buffering manager
  1161. RxMs - <unknown> - misc.
  1162. RxIr - <unknown> - RxContext (IrpContext)
  1163. RxMx - <unknown> - minirdr dispatch table
  1164. RxNc - <unknown> - NameCache (not currently used)
  1165. RxCt - <unknown> - connection engine transport
  1166. RxCa - <unknown> - connection engine address
  1167. RxCc - <unknown> - connection engine connection
  1168. RxCv - <unknown> - connection engine VC
  1169. RxCd - <unknown> - connection engine TDI
  1170. RxSp - <unknown> - srvcall calldown params (special build only)
  1171. RxVp - <unknown> - vnetroot calldown params (special build only)
  1172. RxTm - <unknown> - timer context (special build only)
  1173. RxDc - <unknown> - querydirectory pattern (special build only)
  1174. RxCx - <unknown> - connection engine misc. (special build only)
  1175. S3 - <unknown> - S3 video driver
  1176. SBad - <unknown> - bad block simulator - simbad.c
  1177. sbp2 - <unknown> - Sbp2 1394 storage port driver
  1178. SC?? - <unknown> - Smart card driver tags
  1179. SCLb - <unknown> - Smart card driver library
  1180. SCB8 - <unknown> - Bull CP8 Transac serial reader
  1181. SCB3 - <unknown> - Bull SmarTlp PnP
  1182. SCS4 - <unknown> - SCM Microsystems pcmcia reader
  1183. SCl0 - <unknown> - Litronic 220
  1184. Sc?? - <unknown> - Mass storage driver tags
  1185. ScB? - classpnp.sys - ClassPnP misc allocations
  1186. ScC? - classpnp.sys - ClassPnP misc allocations
  1187. ScC? - <unknown> - CdRom
  1188. ScCE - <unknown> - device control synch event
  1189. ScCG - <unknown> - disk geometry buffer
  1190. ScCH - <unknown> - hitachi error buffer
  1191. ScCI - <unknown> - sense info buffers
  1192. ScCS - <unknown> - srb allocation
  1193. ScCM - <unknown> - mode data buffer
  1194. ScCP - <unknown> - read capacity buffer
  1195. ScCp - <unknown> - play active checks
  1196. ScCQ - <unknown> - read sub q buffer
  1197. ScCR - <unknown> - raw mode read buffer
  1198. ScCT - <unknown> - read toc buffer
  1199. ScCt - <unknown> - toshiba error buffer
  1200. ScCU - <unknown> - update capacity path
  1201. ScCV - <unknown> - volume control buffer
  1202. ScCv - <unknown> - volume control buffer
  1203. ScD? - <unknown> - Disk
  1204. ScD - <unknown> - generic tag
  1205. ScDa - <unknown> - SMART
  1206. ScDA - <unknown> - Info Exceptions
  1207. ScDC - <unknown> - disable cache paths
  1208. ScDb - classpnp.sys - ClassPnP debug globals buffer
  1209. ScDc - <unknown> - disk allocated completion c
  1210. ScDG - <unknown> - disk geometry buffer
  1211. ScDg - <unknown> - update disk geometry paths
  1212. ScDI - <unknown> - sense info buffers
  1213. ScDp - <unknown> - pnp ids
  1214. ScDM - <unknown> - mode data buffer
  1215. ScDM - <unknown> - mbr checksum code
  1216. ScDN - <unknown> - disk name code
  1217. ScDP - <unknown> - read capacity buffer
  1218. ScDp - <unknown> - disk partition lists
  1219. ScDS - <unknown> - srb allocation
  1220. ScDs - <unknown> - start device paths
  1221. ScDU - <unknown> - update capacity path
  1222. ScDW - <unknown> - work-item context
  1223. ScMC - <unknown> - medium changer allocations
  1224. ScF? - <unknown> - FtDisk
  1225. ScFt - <unknown> - FtDisk allocations
  1226. ScIO - classpnp.sys - ClassPnP device control
  1227. ScL? - classpnp.sys - Classpnp
  1228. ScLA - classpnp.sys - allocation to check for autorun disable
  1229. ScLF - classpnp.sys - File Object Extension
  1230. ScLc - classpnp.sys - Cache filters
  1231. ScLf - classpnp.sys - Fault prediction
  1232. ScLm - classpnp.sys - Mount
  1233. ScLM - classpnp.sys - Media Change Detection
  1234. ScLq - classpnp.sys - Release queue
  1235. ScLw - classpnp.sys - WMI
  1236. ScLW - classpnp.sys - Power
  1237. ScNo - classpnp.sys - ClassPnP notification
  1238. ScP? - <unknown> - Scsiport
  1239. ScPa - <unknown> - Hold registry data
  1240. ScPA - <unknown> - Access Ranges
  1241. ScPb - <unknown> - Get Bus Dat Holder
  1242. ScPB - <unknown> - Queuetag BitMap
  1243. ScPc - <unknown> - Fake common buffer
  1244. ScPC - <unknown> - reset bus code
  1245. ScPd - <unknown> - Pnp id strings
  1246. ScPD - <unknown> - SRB_DATA allocations
  1247. ScPE - <unknown> - Scatter gather lists
  1248. ScPG - <unknown> - Global memory
  1249. ScPh - <unknown> - HwDevice Ext
  1250. ScPi - <unknown> - Sense Info
  1251. ScPI - <unknown> - Init data chain
  1252. ScPl - <unknown> - remove lock tracking
  1253. ScPL - <unknown> - scatter gather lists
  1254. ScPm - <unknown> - address mapping lists
  1255. ScPM - <unknown> - scatter gather lists
  1256. ScPp - <unknown> - device & adapter enable
  1257. ScpP - <unknown> - scsi PortConfig copies
  1258. ScPq - <unknown> - inquiry data
  1259. ScPQ - <unknown> - request sense
  1260. ScPr - <unknown> - resource list copy
  1261. ScPS - <unknown> - registry allocations
  1262. ScPt - <unknown> - legacy request rerouting
  1263. ScPT - <unknown> - interface mapping
  1264. ScPu - <unknown> - device relation structs
  1265. ScPv - <unknown> - KEVENT
  1266. ScPV - <unknown> - Device map allocations
  1267. ScPw - <unknown> - Wmi Events
  1268. ScPW - <unknown> - Wmi Requests
  1269. ScPx - <unknown> - Report Luns
  1270. ScPY - <unknown> - Report Targets
  1271. ScPZ - <unknown> - Device name buffer
  1272. ScR? - <unknown> - Partition Manager
  1273. ScRi - <unknown> - IOCTL buffer
  1274. ScRp - <unknown> - Partition entry
  1275. ScRr - <unknown> - Remove lock
  1276. ScRt - <unknown> - Table entry
  1277. ScRv - <unknown> - Dependant volume relations lists
  1278. ScRV - <unknown> - Volume entry
  1279. ScRw - <unknown> - Power mgmt private work item
  1280. ScsC - <unknown> - non-pnp SCSI CdRom
  1281. ScsD - <unknown> - non-pnp SCSI Disk
  1282. ScsH - <unknown> - non-pnp SCSI from class.h (class2)
  1283. ScsI - <unknown> - non-pnp SCSI port internal
  1284. ScsL - <unknown> - non-pnp SCSI class.c driver allocations
  1285. ScsP - <unknown> - non-pnp SCSI port.c
  1286. Scs$ - <unknown> - Tag for pnp class driver's SRB lookaside list
  1287. ScUn - <unknown> - Default Tag for pnp class driver allocations
  1288. ScV? - <unknown> - Dvd functionality in cdrom.sys
  1289. ScVk - <unknown> - read buffer for DVD keys
  1290. ScVK - <unknown> - write buffer for DVD keys
  1291. ScVS - <unknown> - buffer for reads of DVD on-disk structures
  1292. SdCc - <unknown> - ObsSecurityDescriptorCache / SECURITY_DESCRIPTOR_CACHE_ENTRIES
  1293. Sdba - <unknown> - Application compatibility Sdb* allocations
  1294. Sdp? - <unknown> - Bluetooth SDP functionality in BTHPORT.sys
  1295. SdpC - bthport.sys - Bluetooth SDP client connection
  1296. SdpD - bthport.sys - Bluetooth SDP database
  1297. SdpI - bthport.sys - Bluetooth port driver (SDP)
  1298. Se - nt!se - General security allocations
  1299. SeAc - nt!se - Security ACL
  1300. SeAi - nt!se - Security Audit Work Item
  1301. SeAp - nt!se - Security Audit Parameter Record
  1302. SeCL - nt!se - Security CONTEXT_TAG
  1303. SeDb - nt!se - Temp directory query buffer to delete logon session symbolic links.
  1304. SeFS - nt!se - SEP_FILE_SYSTEM_NOTIFY_CONTEXT
  1305. SeHa - nt!se - Temp directory query buffer to delete logon session symbolic links.
  1306. SeLs - nt!se - Security Logon Session
  1307. SeLu - nt!se - Security LUID and Attributes array
  1308. SeLS - nt!se - Security Logon Session tracking array
  1309. SeLw - nt!se - Security LSA Work Item
  1310. SeOn - nt!se - Security Captured Object Name information
  1311. SeOt - nt!se - Captured object type array. Used by access check code
  1312. SePa - nt!se - Process audit image names and captured polity structures
  1313. SePr - nt!se - Security Privilege Set
  1314. SeSa - nt!se - Security SID and Attributes
  1315. SeSc - nt!se - Captured Security Descriptor
  1316. SeSd - nt!se - Security Descriptor
  1317. SeSi - nt!se - Security SID
  1318. SeTa - nt!se - Security Temporary Array
  1319. SeTd - nt!se - Security Token dynamic part
  1320. SeTn - nt!se - Security Captured Type Name information
  1321. SeUs - nt!se - Security Captured Unicode string
  1322. Sect - <unknown> - Section objects
  1323. Sema - <unknown> - Semaphore objects
  1324. Senm - <unknown> - Serenum (RS-232 serial bus enumerator)
  1325. SimB - <unknown> - Simbad (bad sector simulation driver) allocations
  1326. SIfs - <unknown> - Default tag for user's of ntsrv.h
  1327. sidg - <unknown> - GDI spooler events
  1328. Sis - <unknown> - Single Instance Store (dd\sis\filter)
  1329. SisB - <unknown> - SIS per file object break event
  1330. SisC - <unknown> - SIS common store file object
  1331. SisF - <unknown> - SIS per file object
  1332. SisL - <unknown> - SIS per link object
  1333. SisS - <unknown> - SIS SCB
  1334. Setp - <unknown> - SETUPDD SpMemAlloc calls
  1335. SRdm - scsirdma.sys - Infiniband SRP driver
  1336. SW?? - <unknown> - Software Bus Enumerator
  1337. SWbi - <unknown> - bus ID
  1338. SWbr - <unknown> - bus reference
  1339. SWda - <unknown> - POOLTAG_DEVICE_ASSOCIATION
  1340. SWdn - <unknown> - device name
  1341. SWdr - <unknown> - device reference
  1342. SWdr - <unknown> - POOLTAG_DEVICE_DRIVER_REGISTRY
  1343. SWfd - <unknown> - POOLTAG_DEVICE_FDOEXTENSION
  1344. SWid - <unknown> - device ID
  1345. SWii - <unknown> - instance ID
  1346. SWip - <unknown> - POOLTAG_DEVICE_INTERFACEPATH
  1347. SWki - <unknown> - key information
  1348. SWpd - <unknown> - POOLTAG_DEVICE_PDOEXTENSION
  1349. SWre - <unknown> - relations
  1350. SWrp - <unknown> - reparse string
  1351. SWrs - <unknown> - reference string
  1352. Sm?? - <unknown> - rdr2 smb mini
  1353. SmCe - <unknown> - smbmini connection engine
  1354. SmMm - <unknown> - smbmini managed datastructures
  1355. SmAd - <unknown> - session setup/admin exchange
  1356. SmRw - <unknown> - read/write path
  1357. SmTr - <unknown> - transact exchange
  1358. SmMs - <unknown> - misc.
  1359. SmTp - <unknown> - server transport tag
  1360. SmRb - <unknown> - remote boot
  1361. SmFc - <unknown> - fsctl structures (special build only)
  1362. SmDc - <unknown> - dir query buffer (special build only)
  1363. SmPi - <unknown> - pipeinfo buffer (special build only)
  1364. SmDO - <unknown> - deferred open context (special build only)
  1365. SmQP - <unknown> - params for directory query transact (special build only)
  1366. SmRx - <unknown> - minirdr generated RxContext (special build only)
  1367. SmVr - <unknown> - VNetroot (special build only)
  1368. SmSr - <unknown> - Server (special build only)
  1369. SmSe - <unknown> - Session (special build only)
  1370. SmNr - <unknown> - NetRoot (special build only)
  1371. SmMa - <unknown> - mid atlas (special build only)
  1372. SmMt - <unknown> - mailslot buffer (special build only)
  1373. SmVc - <unknown> - smbmini connectionengine VC (special build only)
  1374. SmEc - <unknown> - echo buffer (special build only)
  1375. SmKs - <unknown> - Kerberos blob (special build only)
  1376. SPX - <unknown> - Nwlnkspx transport
  1377. SQOS - <unknown> - Security quality of service in IO
  1378. Sr?? - sr.sys - System Restore file system filter driver
  1379. SrCo - <unknown> - SR's control object
  1380. SrSC - <unknown> - Stream contexts
  1381. SrDB - <unknown> - Debug information for lookup blob
  1382. SrDL - <unknown> - Device list
  1383. SrFE - <unknown> - File information buffer
  1384. SrFN - <unknown> - File name
  1385. SrHB - <unknown> - Hash bucket
  1386. SrHH - <unknown> - Hash header
  1387. SrHK - <unknown> - Hash key
  1388. SrLB - <unknown> - Log buffer
  1389. SrLC - <unknown> - Logging context
  1390. SrLE - <unknown> - Log entry
  1391. SrLT - <unknown> - Lookup blob
  1392. SrMP - <unknown> - Mount point information
  1393. SrOI - <unknown> - Overwrite information
  1394. SrPC - <unknown> - Persistant configuration information
  1395. SrRB - <unknown> - Rename buffer
  1396. SrRG - <unknown> - Logger context
  1397. SrRH - <unknown> - Reparse data size
  1398. SrRR - <unknown> - Registry information
  1399. SrSD - <unknown> - Security data information
  1400. SrST - <unknown> - Stream data information
  1401. SrTI - <unknown> - Directory delete information
  1402. SrWI - <unknown> - Work queue item
  1403. ST* - <unknown> - New MMC compliant storage drivers
  1404. Stac - <unknown> - Stack Trace Database - i386 checked and built with NTNOFPO=1 only
  1405. Strg - <unknown> - Dynamic Translated strings
  1406. Strm - <unknown> - Streams and streams transports allocations
  1407. SwMi - <unknown> - SWMidi KS filter (WDM Audio)
  1408. Symb - <unknown> - Symbolic link objects
  1409. Symt - <unknown> - Symbolic link target strings
  1410. SYSA - <unknown> - Sysaudio (wdm audio)
  1411. TAPI - <unknown> - ntos\ndis\ndistapi
  1412. TC?? - TCP - TCP/IP network protocol
  1413. TCh? - <unknown> - TCP/IP header pools
  1414. TCPC - <unknown> - TCP connection pool
  1415. TCPT - <unknown> - TCB pool
  1416. TCPY - <unknown> - SYN-TCB pool
  1417. TCPr - <unknown> - TCP request pool
  1418. TDIc - <unknown> - TDI resource
  1419. TDId - <unknown> - TDI resource
  1420. TDIe - <unknown> - TDI resource
  1421. TDIf - <unknown> - TDI resource
  1422. TDIg - <unknown> - TDI resource
  1423. TDIk - <unknown> - TDI resource
  1424. TDIu - <unknown> - TDI resource
  1425. TDIv - <unknown> - TDI resource
  1426. thdd - <unknown> - DirectDraw/3D handle manager table
  1427. Thre - nt!ps - Thread objects
  1428. Time - nt!ke - Timer objects
  1429. Toke - nt!se - Token objects
  1430. Tran - <unknown> - EXIFS Translate
  1431. TSBV - <unknown> - WDM mini driver for Toshiba 750 capture
  1432. TSdd - <unknown> - RDPDD - Hydra Display Driver
  1433. TSmc - <unknown> - PDMCS - Hydra MCS Protocol Driver
  1434. TSwd - <unknown> - RDPWD - Hydra Winstation Driver
  1435. TTFC - <unknown> - Font file cache
  1436. Ttfd - <unknown> - TrueType Font driver
  1437. Thrm - <unknown> - Thermal zone structure
  1438. Tun4 - <unknown> - Tunnel cache allocation for long file name
  1439. TunL - <unknown> - Tunnel cache lookaside-allocated elements
  1440. TunP - <unknown> - Tunnel cache oddsized pool-allocated elements
  1441. TunK - <unknown> - Tunnel cache temporary key value
  1442. Type - <unknown> - Type objects
  1443. UCAM - <unknown> - USB digital camera library
  1444. UDFV - <unknown> - Udfs volume descriptor sequence descriptor buffer
  1445. Udf1 - <unknown> - Udfs file set descriptor buffer
  1446. Udf2 - <unknown> - Udfs volmume recognition sequence descriptor buffer
  1447. Udf2 - <unknown> - Udfs volume descriptor sequence descriptor buffer
  1448. UdfC - <unknown> - Udfs CRC table
  1449. UdfD - <unknown> - Udfs FID buffer for view spanning
  1450. UdfF - <unknown> - Udfs nonpaged Fcb errata
  1451. UdfI - <unknown> - Udfs IO context
  1452. UdfL - <unknown> - Udfs IRP context lite (delayed close)
  1453. UdfS - <unknown> - Udfs short file name
  1454. UdfT - <unknown> - Udfs generic table entry
  1455. Udfb - <unknown> - Udfs IO buffer
  1456. Udfc - <unknown> - Udfs IRP context
  1457. Udfd - <unknown> - Udfs file Fcb
  1458. Udfe - <unknown> - Udfs enumeration match expression
  1459. Udff - <unknown> - Udfs normalized full filename
  1460. Udfi - <unknown> - Udfs directory Fcb
  1461. Udfl - <unknown> - Udfs Lcb
  1462. Udfp - <unknown> - Udfs Pcb
  1463. Udfs - <unknown> - Udfs Sparing Mcb
  1464. Udft - <unknown> - Udfs CDROM TOC
  1465. Udfv - <unknown> - Udfs Vpb
  1466. Udfx - <unknown> - Udfs Ccb
  1467. Udp - <unknown> - Udp protocol (TCP/IP driver)
  1468. Ufsc - <unknown> - User FULLSCREEN
  1469. UHCD - <unknown> - Universal Host Controller (USB - Intel Controller)
  1470. UHUB - <unknown> - Universal Serial Bus Hub
  1471. Ul?? - http.sys - tags. Note: In-use tags are of the form "Ul??" or "Uc??".and Free tags are of the form "uL??" or "uC??";
  1472. Uc?? - http.sys - i.e., the case of the leading "Ul" or "Uc" has been reversed.
  1473. Ucac - http.sys - Auth Cache Pool
  1474. UcCO - http.sys - Client Connection
  1475. Ucmp - http.sys - Multipart String Buffer
  1476. Ucre - http.sys - Receive Response
  1477. Ucrp - http.sys - Response App Buffer
  1478. Ucrq - http.sys - Request Pool
  1479. UcSc - http.sys - Common Server Information
  1480. UcSN - http.sys - Server name
  1481. UcSP - http.sys - Process Server Information
  1482. UcSp - http.sys - Sspi Pool
  1483. UcST - http.sys - Server info table
  1484. Uctd - http.sys - Response Tdi Buffer
  1485. Ucte - http.sys - Entity Pool
  1486. Ucto - http.sys - Tdi Objects Pool
  1487. UlAB - http.sys - Auxiliary Buffer
  1488. UlAO - http.sys - App Pool Object
  1489. UlAP - http.sys - App Pool Process
  1490. UlBL - http.sys - Binary Log File Entry
  1491. UlBO - http.sys - Outstanding i/o
  1492. UlCC - http.sys - Control Channel
  1493. UlCE - http.sys - Config Group Tree Entry
  1494. UlCH - http.sys - Config Group Tree Header
  1495. UlCI - http.sys - Config Group URL Info
  1496. UlCJ - http.sys - Config Group Object Pool
  1497. UlCK - http.sys - Chunk Tracker
  1498. UlCL - http.sys - Config Group LogDir
  1499. UlCl - http.sys - Connection RefTraceLog
  1500. UlCO - http.sys - Connection
  1501. UlCT - http.sys - Config Group Timestamp
  1502. UlCY - http.sys - Connection Count Entry
  1503. UlDB - http.sys - Debug
  1504. UlDC - http.sys - Data Chunks array
  1505. UlDO - http.sys - Disconnect Object
  1506. UlDR - http.sys - Deferred Remove Item
  1507. UlDT - http.sys - Debug Thread Pool
  1508. UlEP - http.sys - Endpoint
  1509. UlFA - http.sys - Force Abort Work Item
  1510. UlFC - http.sys - File Cache Entry
  1511. Ulfc - http.sys - Uri Filter Context
  1512. UlFD - http.sys - Noncached File Data
  1513. UlFP - http.sys - Filter Process
  1514. UlFR - http.sys - Dummy Filter Receive Buffer
  1515. UlFT - http.sys - Filter Channel
  1516. UlFU - http.sys - Full Tracker
  1517. UlFW - http.sys - Filter Write Tracker
  1518. UlHC - http.sys - Http Connection
  1519. UlHc - http.sys - Http Connection RefTraceLog
  1520. UlHL - http.sys - Internal Request RefTraceLog
  1521. UlHR - http.sys - Internal Request
  1522. UlHT - http.sys - Hash Table
  1523. UlHV - http.sys - Header Value
  1524. UlIC - http.sys - Irp Context
  1525. UlID - http.sys - Conn ID Table
  1526. UlIR - http.sys - Internal Response
  1527. UlLD - http.sys - Log Field
  1528. UlLF - http.sys - Log File Entry
  1529. UlLG - http.sys - Log Generic
  1530. UlLH - http.sys - Log File Handle
  1531. UlLL - http.sys - Log File Buffer
  1532. UlLS - http.sys - Ansi Log Data Buffer
  1533. UlLT - http.sys - Binary Log Data Buffer
  1534. UlNO - http.sys - NSGO Pool
  1535. UlNP - http.sys - Non-Paged Data
  1536. UlOE - http.sys - Endpoint OwnerRefTraceLog PoolTag
  1537. UlOR - http.sys - Owner RefTrace Signature
  1538. UlOT - http.sys - Opaque ID Table
  1539. UlPB - http.sys - APool Proc Binding
  1540. UlPL - http.sys - Pipeline
  1541. UlQF - http.sys - TCI Filter
  1542. UlQG - http.sys - TCI Generic
  1543. UlQI - http.sys - TCI Interface
  1544. UlQL - http.sys - TCI Flow
  1545. UlQT - http.sys - TCI Tracker
  1546. UlQW - http.sys - TCI WMI
  1547. UlRB - http.sys - Receive Buffer
  1548. UlRD - http.sys - Registry Data
  1549. UlRE - http.sys - Request Body Buffer
  1550. UlRP - http.sys - Request Buffer
  1551. UlRR - http.sys - Request Buffer References
  1552. UlRS - http.sys - Non-Paged Resource
  1553. UlRT - http.sys - RefTraceLog PoolTag
  1554. UlSC - http.sys - SSL Cert Data
  1555. UlSD - http.sys - Security Data
  1556. UlSl - http.sys - StringLog Buffer PoolTag
  1557. UlSL - http.sys - StringLog PoolTag
  1558. UlSO - http.sys - Site Counter Entry
  1559. UlSS - http.sys - Simple Status Item
  1560. UlTA - http.sys - Address Pool
  1561. UlTD - http.sys - UL_TRANSPORT_ADDRESS
  1562. UlTT - http.sys - Thread Tracker
  1563. UlUB - http.sys - URL Buffer
  1564. UlUC - http.sys - Uri Cache Entry
  1565. UlUH - http.sys - HTTP Unknown Header
  1566. UlUL - http.sys - URL
  1567. UlUM - http.sys - URL Map
  1568. UlVH - http.sys - Virtual Host
  1569. UlWC - http.sys - Work Context
  1570. UlWI - http.sys - Work Item
  1571. UndP - <unknown> - EXIFS Underlying Path
  1572. Urdr - win32k!SetRedirectionBitmap - REDIRECT
  1573. Usac - win32k!_CreateAcceleratorTable - ACCEL
  1574. Usai - win32k!zzzAttachThreadInput - ATTACHINFO
  1575. Usal - win32k!InitSwitchWndInfo - ALTTAB
  1576. USBB - bthusb.sys - Bluetooth USB minidriver
  1577. USBD - <unknown> - Universal Serial Bus Class Driver
  1578. Usbg - win32k!xxxLogClipData - DEBUG
  1579. Uscb - win32k!_ConvertMemHandle - CLIPBOARD
  1580. Uscc - win32k!AllocCallbackMessage - CALLBACK
  1581. Usci - win32k!InitSystemThread - CLIENTTHREADINFO
  1582. Uscl - win32k!ClassAlloc - CLASS
  1583. Uscm - win32k!InitScancodeMap - SCANCODEMAP
  1584. Uscp - win32k!CreateDIBPalette - CLIPBOARDPALETTE
  1585. Uscr - win32k!NtUserSetSysColors - COLORS
  1586. Usct - win32k!CkptRestore - CHECKPT
  1587. Uscu - win32k!_CreateEmptyCursorObject - CURSOR
  1588. Uscv - win32k!NtUserSetSysColors - COLORVALUES
  1589. Usd1 - win32k!FreeListAdd - DDE1
  1590. Usd2 - win32k!_DdeSetQualityOfService - DDE2
  1591. Usd4 - win32k!AddPublicObject - DDE4
  1592. Usd5 - win32k!xxxCsEvent - DDE5
  1593. Usd6 - win32k!xxxCsEvent - DDE6
  1594. Usd7 - win32k!xxxCsEvent - DDE7
  1595. Usd8 - win32k!xxxMessageEvent - DDE8
  1596. Usd9 - win32k!xxxCsDdeInitialize - DDE9
  1597. UsdA - win32k!NewConversation - DDEa
  1598. UsdB - win32k!Createpxs - DDEb
  1599. UsdD - win32k!NtUserfnDDEINIT - DDEd
  1600. UsdE - win32k!xxxClientCopyDDEIn1 - DDE
  1601. Usdc - win32k!CreateCacheDC - DCE
  1602. Usdi - win32k!CreateMonitor - DISPLAYINFO
  1603. UsDI - win32k!CreateDeviceInfo - DEVICEINFO
  1604. Usds - win32k!xxxDragObject - DRAGDROP
  1605. Usdv - win32k!NtUserfnINDEVICECHANGE - DEVICECHANGE
  1606. User - win32k!InitCreateUserCrit - ERESOURCE
  1607. Usev - win32k!xxxPollAndWaitForSingleObject - EVENT
  1608. Usgh - win32k!NtUserUserHandleGrantAccess - GRANTEDHANDLES
  1609. Usgl - win32k!CreateShadowTL - GLOBALTHREADLOCK
  1610. Usgt - win32k!AddGhost - GHOST
  1611. Usha - win32k!AllocateHidData - HIDDATA
  1612. UshD - Win32k!AllocateHidDesc - HIDDESC
  1613. Ushk - win32k!_RegisterHotKey - HOTKEY
  1614. Usih - win32k!SetImeHotKey - IMEHOTKEY
  1615. Usim - win32k!CreateInputContext - IME
  1616. Usjb - win32k!CreateW32Job - W32JOB
  1617. Usjx - win32k!JobCalloutAddProcess - W32JOBEXTRA
  1618. Uskb - win32k!xxxLoadKeyboardLayoutEx - KBDLAYOUT
  1619. Uske - win32k!GetKbdExId - KBDEXID
  1620. Uskf - win32k!LoadKeyboardLayoutFile - KBDFILE
  1621. Usks - win32k!PostUpdateKeyStateEvent - KBDSTATE
  1622. Uskt - win32k!ReadLayoutFile - KBDTABLE
  1623. Usla - win32k!InitLockRecordLookaside - LOOKASIDE
  1624. Usld - win32k!GrowLogIfNecessary - LOGDESKTOP
  1625. Uslr - win32k!InitLockRecordLookaside - LOCKRECORD
  1626. Usmi - win32k!MirrorRegion - MIRROR
  1627. Usmr - win32k!SnapshotMonitorRects - MONITORRECTS
  1628. Usms - win32k!xxxMoveSize - MOVESIZE
  1629. Usmt - win32k!xxxMNAllocMenuState - MENUSTATE
  1630. Usno - win32k!zzz - NONE - don't use
  1631. Usny - win32k!CreateNotify - NOTIFY
  1632. Uspi - win32k!MapDesktop - PROCESSINFO
  1633. Uspm - win32k!MNAllocPopup - POPUPMENU
  1634. Uspn - win32k!CreateProfileUserName - PROFILEUSERNAME
  1635. Uspo - win32k!QueuePowerRequest - POWER
  1636. Uspp - win32k!AllocateAndLinkHidTLCInfo - PNP
  1637. Uspr - win32k!GetPrivateProfileStruct - PROFILE
  1638. Usqm - win32k!InitQEntryLookaside - QMSG
  1639. Usqu - win32k!InitQEntryLookaside - Q
  1640. Usrt - win32k!xxxDrawMenuItemText - RTL
  1641. Ussa - win32k!xxxBroadcastMessage - SMS_ASYNC
  1642. Ussb - win32k!CreateSpb - SPB
  1643. Ussd - win32k!xxxAddShadow - SHADOW
  1644. Ussc - win32k!xxxInterSendMsgEx - SMS_CAPTURE
  1645. Usse - win32k!SetDisconnectDesktopSecurity - SECURITY
  1646. Ussi - win32k!NtUserSendInput - SENDINPUT
  1647. Ussm - win32k!InitSMSLookaside - SMS
  1648. Usss - win32k!xxxBroadcastMessage - SMS_STRING
  1649. Usst - win32k!xxxSBTrackInit - SCROLLTRACK
  1650. Ussw - win32k!_BeginDeferWindowPos - SWP
  1651. Ussy - win32k!xxxDesktopThread - SYSTEM
  1652. Ustd - win32k!TrackAddDesktop - TRACKDESKTOP
  1653. Usti - win32k!AllocateW32Thread - THREADINFO
  1654. Ustk - win32k!HeavyAllocPool - STACK
  1655. Ustm - win32k!InternalSetTimer - TIMER
  1656. Usto - win32k!xxxConnectService - TOKEN
  1657. Usts - win32k!_Win32CreateSection - SECTION
  1658. Ustx - win32k!NtUserDrawCaptionTemp - TEXT
  1659. Usty - win32k!NtUserResolveDesktopForWOW - TEXT2
  1660. Usub - win32k!NtUserToUnicodeEx - UNICODEBUFFER
  1661. Usvi - win32k!ResizeVisExcludeMemory - VISRGN
  1662. Usvl - win32k!VWPLAdd - VWPL
  1663. Uswd - win32k!xxxCreateWindowEx - WINDOW
  1664. Uswe - win32k!_SetWinEventHook - WINEVENT
  1665. Uswl - win32k!BuildHwndList - WINDOWLIST
  1666. Uswo - win32k!zzzInitTask - WOWTDB
  1667. Uswp - win32k!xxxRegisterUserHungAppHandlers - WOWPROCESSINFO
  1668. Uswt - win32k!xxxUserNotifyProcessCreate - WOWTHREADINFO
  1669. Vad - nt!mm - Mm virtual address descriptors
  1670. VadF - nt!mm - VADs created by a FreeVM splitting
  1671. Vadl - nt!mm - Mm virtual address descriptors (long)
  1672. VadS - nt!mm - Mm virtual address descriptors (short)
  1673. VidL - videoprt.sys - VideoPort Allocation List (FDO_EXTENSION)
  1674. VidR - videoprt.sys - VideoPort Allocation on behalf of Miniport
  1675. VDM - nt!vdm - ntos\vdm
  1676. VoS? - volsnap.sys - VolSnap (Volume Snapshot Driver)
  1677. VoSa - volsnap.sys - Application information allocations
  1678. VoSb - volsnap.sys - Buffer allocations
  1679. VoSc - volsnap.sys - Snapshot context allocations
  1680. VoSd - volsnap.sys - Diff area volume allocations
  1681. VoSf - volsnap.sys - Diff area file allocations
  1682. VoSh - volsnap.sys - Bit history allocations
  1683. VoSi - volsnap.sys - Io status block allocations
  1684. VoSm - volsnap.sys - Bitmap allocations
  1685. VoSo - volsnap.sys - Old heap entry allocations
  1686. VoSp - volsnap.sys - Pnp id allocations
  1687. VoSr - volsnap.sys - Device relations allocations
  1688. VoSs - volsnap.sys - Short term allocations
  1689. VoSt - volsnap.sys - Temp table allocations
  1690. VoSw - volsnap.sys - Work queue allocations
  1691. VoSx - volsnap.sys - Dispatch context allocations
  1692. Vpb - <unknown> - Io, vpb's
  1693. Vprt - <unknown> - ntos\video\port
  1694. VraP - <unknown> - parallel class driver
  1695. Vtfd - <unknown> - Font file/context
  1696. Wait - <unknown> - NtWaitForMultipleObjects
  1697. Wan? - <unknown> - NdisWan Tags (PPP Framing module for Remote Access)
  1698. WanA - <unknown> - BundleCB
  1699. WanB - <unknown> - ProtocolCB/LinkCB
  1700. WanC - <unknown> - DataDesc
  1701. WanD - <unknown> - WanRequest
  1702. WanE - <unknown> - LoopbackDesc
  1703. WanG - <unknown> - MiniportCB
  1704. WanH - <unknown> - OpenCB
  1705. WanI - <unknown> - IoPacket
  1706. WanJ - <unknown> - LineUpInfo
  1707. WanK - <unknown> - Unicode String Buffer
  1708. WanL - <unknown> - Protocol Table
  1709. WanM - <unknown> - Connection Table
  1710. WanN - <unknown> - NdisPacketPool Desc
  1711. WanQ - <unknown> - DataBuffer
  1712. WanR - <unknown> - WanPacket
  1713. WanS - <unknown> - AfCB/SapCB/VcCB
  1714. WanT - <unknown> - Transform Driver
  1715. WanV - <unknown> - RC4 Encryption Context
  1716. WanW - <unknown> - SHA Encryption
  1717. WanX - <unknown> - Send Compression Context
  1718. WanY - <unknown> - Recv Compression Context
  1719. WanZ - <unknown> - Protocol Specific Info
  1720. Wdm - <unknown> - WDM
  1721. WDMA - <unknown> - WDM Audio
  1722. Wdog - watchdog.sys - Watchdog object/context allocation
  1723. Wmii - <unknown> - Wmi InstId chunks
  1724. Wmij - <unknown> - Wmi GuidMaps
  1725. Wmim - <unknown> - Wmi KM to UM Notification Buffers
  1726. Wmin - <unknown> - Wmi Notification Slot Chunks
  1727. Wmip - <unknown> - Wmi General purpose allocation
  1728. Wmis - <unknown> - Wmi SysId allocations
  1729. Wmit - <unknown> - Wmi Trace
  1730. Wmiw - <unknown> - Wmi Notification Waiting Buffers, in paged queue waiting for IOCTL
  1731. Wmiz - <unknown> - Wmi MCA Insertions debug code
  1732. WmiA - <unknown> - Wmi ACPI mapper
  1733. WmiC - <unknown> - Wmi Create Pump Thread Work Item
  1734. WmiD - <unknown> - Wmi Registration DataSouce
  1735. WmiG - <unknown> - Allocation of WMIGUID
  1736. WmiI - <unknown> - Wmi Instance Names
  1737. WmiL - <unknown> - WmiLIb
  1738. WmiN - <unknown> - Wmi Notification Notification Packet
  1739. WmiR - <unknown> - Wmi Registration info blocks
  1740. WmDS - <unknown> - Wmi DataSource chunks
  1741. WmGE - <unknown> - Wmi GuidEntry chunks
  1742. WmIS - <unknown> - Wmi InstanceSet chunks
  1743. WmMR - <unknown> - Wmi MofResouce chunks
  1744. WMca - <unknown> - WMI MCA Handling
  1745. Wrp? - <unknown> - WanArp Tags (ARP module for Remote Access)
  1746. Wrpa - <unknown> - WAN_ADAPTER_TAG
  1747. Wrpi - <unknown> - WAN_INTERFACE_TAG
  1748. Wrpr - <unknown> - WAN_REQUEST_TAG
  1749. Wrps - <unknown> - WAN_STRING_TAG
  1750. Wrpc - <unknown> - WAN_CONN_TAG
  1751. Wrpw - <unknown> - WAN_PACKET_TAG
  1752. Wrpf - <unknown> - FREE_TAG (checked builds only)
  1753. Wrpd - <unknown> - WAN_DATA_TAG
  1754. Wrph - <unknown> - WAN_HEADER_TAG
  1755. Wrpn - <unknown> - WAN_NOTIFICATION_TAG
  1756. WvCy - <unknown> - WDM Audio WaveCyc port
  1757. WvPc - <unknown> - WDM Audio WavePCI port
  1758. xCVD - mrxdav.sys - AsyncEngineContext Tag
  1759. xSMB - smbmrx.sys - IFSKIT sample SMB mini-redirector
  1760. XWan - <unknown> - ndis\usrwan allocations
  1761. Xtra - <unknown> - EXIFS Extra Create
  1762. ysd8 - win32k.sys - User DDE8
  1763. ysd9 - win32k.sys - User DDE9
  1764. ysda - win32k.sys - User DDEa
  1765. ysdb - win32k.sys - User DDEb
  1766. ysdc - win32k.sys - User DDEc
  1767. ysdd - win32k.sys - User DDEd
  1768. ZsaB - <unknown> - EXIFS ZeroBlock