Windows NT Kernel memory pool tags

Alter.Org.UA

<< Back

Home

www/www1/www2

Windows NT Kernel memory pool tags

Все компоненты Windows NT помечают выделяемые блоки памяти уникальным Tag'ом - 4-байтным словом, имеющим текстовое представление в ASCII. Это используется для контроля выделяемой памяти, выяснения кто же вылез за границы выделенной области, и т.п. В принципе, эта информация доступна на сайте Microsoft'а (http://support.microsoft.com), внутри WinDbg (искать pooltag.txt). Здесь находится копия,
а чуть ниже - обновляемая база tag'ов. Вы можете пополнять ее информацией о tag'ах ваших драйверов.

NEW! Теперь можно указывать версию ОС и/или драйвера, в которой данный tag появился.

Свежий pooltag.txt
.GZ-архив pooltag.txt
Обновлено 2012.1.13 13:10

Редактировать базу pool-tag'ов
Добавить pool-tag

Tag	Source	Description, OS/ver
`8042` (0)	i8042prt.sys	PS/2 kb and mouse
`@GMM` (0)		(Intel video driver) Memory manager
`@KCH`	TZvpAfhzcpxeQy	Umm, are you really just giivng this info out for nothing? NT 3.51 ver. sFPOPqhYDuyb
`@MP`	TykjFGChIOTRkrJK	Great thinking! That really baekrs the mold! NT 4 ver. nZmnBNTgkW
`@SB`	bkwpFHzSbSJAUH	Youб▓re a real deep thinker. Thnkas for sharing. NT 3.51 ver. yiahSVHMuNYHGhXl
`Abos` (0)	FlrkvKDPCzUdMkcwCP	A rolling stone is worth two in the bush, thanks to this aritlce. NT 4 ver. dnOulFVqgrrPZvwbucc
`AcdM`		TDI AcdObjectInfoG
`AcdN`	seBmPKigICIwjOsPu	Thnkas for sharing. What a pleasure to read! ver. fSSrDghTxvz
`Acp*`	acpi.sys	ACPI Pooltags
`ACPI`	acpi.sys	Too many compliments too ltilte space, thanks! Win XP ver. nmxYTSwSi
`Adap`	hdIiJrmKfSjn	That's way the betesst answer so far! ver. jWGyBtEwcBZzWr
`Adbe`		Adobe's font driver
`AdSv`	vmsrvc.sys	Whoa, whoa, get out the way with that good infromatoin. Win XP ver. nnkFnNotqPN
`AECi`		filter object interface for MS acoustic echo canceller
`Afd?`	afd.sys	That's way the bestset answer so far! ver. TZiROOXusOfcRKrbND
`AfdA`	afd.sys	The forum is a brgihetr place thanks to your posts. Thanks! NT 3.51 ver. rsrXgwYUfWmtyVrF
`Afda`	afd.sys	Afd APC buffer (NT 3.51 only)
`AfdB`	afd.sys	Iб▓m not wtorhy to be in the same forum. ROTFL ver. jQUTCHNXcgeoz
`AfdC`	afd.sys	I feel saitsfeid after reading that one. NT 3.51 ver. hdpZWbDpOI
`Afdc`	afd.sys	Afd connect data buffer
`AfdD`	afd.sys	Afd debug data
`Afdd`	afd.sys	Afd disconnect data buffer
`AfdE`	afd.sys	Son of a gun, this is so hlefpul! NT 4 ver. ClBmIZMtA
`AfdF`	afd.sys	Afd TransmitFile info
`Afdf`	afd.sys	Great thinking! That really braeks the mold! ver. XGQypWaNRXOnkx
`AfdG`	afd.sys	Thatб▓s relaly shrewd! Good to see the logic set out so well. NT 3.51 ver. UGMNzqDEFbdZUW
`Afdh`	afd.sys	Afd address list change buffer
`AfdI`	afd.sys	Very true! Makes a change to see soemnoe spell it out like that. :) ver. XudXTipN
`Afdi`	afd.sys	I like to party, not look articles up oinlne. You made it happen. ver. lWxiwAGomvv
`AfdL`	afd.sys	Afd local address buffer
`Afdl`	afd.sys	I'm impressed! You've managed the amlsot impossible. NT 3.51 ver. amhfMWmcqDSoQIJblQP
`AfdP`	afd.sys	Afd poll info
`Afdp`	afd.sys	Afd transport IRP buffer
`AfdQ`	afd.sys	Afd work queue item
`Afdq`	afd.sys	The forum is a birhgter place thanks to your posts. Thanks! Win 2000 ver. BSbewHlvmvdjJ
`AfdR`	afd.sys	This forum needed shkanig up and youб▓ve just done that. Great post! NT 3.51 ver. hzlXlFBAaAfPjg
`Afdr`	afd.sys	Afd ERESOURCE buffer
`AfdS`	afd.sys	Afd security info
`AfdT`	afd.sys	Afd transport info
`Afdt`	afd.sys	Afd transport address buffer
`AfdW`	afd.sys	Afd work item
`AfdX`	afd.sys	Your wbseite has to be the electronic Swiss army knife for this topic. Win 2000 ver. iquJhecUk
`AFMM`	afw.sys, afwcore.sys	Agnitum Outpost Firewall Drivers
`Afp`	NRfzLPuT	Just what the doctor ordreed, thankity you! Win 2000 ver. yNhmJakwTu
`AlCI`	nt!alpc	ALPC communication info
`AlEv`	nt!alpc	Whoever edits and publishes these articles ralely knows what they're doing. NT 4 ver. KTIPYguy
`AlHa`	nt!alpc	ALPC port handle table
`AlIn`	nt!alpc	ALPC Internal allocation
`AlMs`	nt!alpc	ALPC message
`ALPC`	nt!alpc	Thkans for sharing. Always good to find a real expert. Win 2000 ver. jZjgRhsALzPqCz
`AlRe`	nt!alpc	Great common sense here. Wish Iб▓d tuhoght of that. NT 3.51 ver. hGmfNUELSgRydRA
`AlRr`	nt!Alpc	ALPC resource reserves
`AlSc`	nt!alpc	ALPC section
`AlSe`	nt!alpc	Stands back from the kebyaord in amazement! Thanks! NT 3.51 ver. UMQfZIEYKuNI
`AlVi`	nt!alpc	In awe of that answer! Rellay cool! Win XP ver. eHZDTIBiG
`Aml*`		ACPI AMLI Pooltags
`AoE*`	aoebus.sys	You're the one with the brains here. I'm wtcahing for your posts. ver. SgowACoDelJqnJpHh
`APIC`	pnpapic.sys	Kudos! What a neat way of thinknig about it. NT 3.51 ver. HZOiFqcRmuJUuTlAN
`ArbA`	nt!arb	Real brain power on dipsaly. Thanks for that answer! NT 3.51 ver. cQOzwAywWscuhddpvqy
`ArbL`	nt!arb	IJWTS wow! Why can't I think of tihngs like that? Win XP ver. QupBsEdTJ
`ArbM`	nt!arb	I searhced a bunch of sites and this was the best. Win XP ver. ncTLlwuLvtdlbZZXoD
`ArbR`	nt!arb	ARBITER_RANGE_LIST_TAG
`Arp?`	HUQHcmtQ	Wonderful explanation of facts avalaible here. NT 3.51 ver. OsOGOiERnvRTglE
`ArpA`	IOMfClXsTARVeBv	Hey, that post leaves me feeling foloish. Kudos to you! NT 4 ver. aAfhOaAInsJz
`ArpB`		AtmArpS buffer space
`ARPC`	atmarpc.sys	ATM ARP Client
`ArpI`	aUIKdOgIklZF	Your story was raelly informative, thanks! Win XP ver. eLyKsFXqSxjYHiJT
`ArpK`		AtmArpS ARP block
`ArpM`	SSgXhRkjr	If you want to get read, this is how you shuold write. NT 3.51 ver. DMBOUNZOuUaoQRIh
`ArpR`		AtmArpS NDIS request
`ArpS`		AtmArpS SAP structure
`Asy1`	FOcFZbXEoFVNPJh	You're the geatrest! JMHO ver. ipBQJDrCqFXUNI
`Asy2`	htdekqbpvdzkbUJKqWS	Thatб▓s not just logic. Thatб▓s relaly sensible. ver. lGFpwKtRRLcm
`Asy3`	ywCduEancKMPcNaFp	This piece was cogent, well-wrttien, and pithy. NT 4 ver. EUKVqrnxHSuHiKYBtN
`Asy4`		ndis / ASYNC_FRAME_TAG
`ATac`	AppTag ATR command buffer	Thanks for shraing. Always good to find a real expert. Win 2000 ver. uevpqkKi
`AtC`		IDE disk configuration
`AtD`	XVnKjoyinEZxXEsv	A minute saved is a minute earend, and this saved hours! Win XP ver. XeFSMIOHLCFvDNQRyg
`ATdi`	AppTag cliendata index buffer	Ppl like you get all the brains. I just get to say tahkns for he answer. ver. pqWPNwnGM
`ATdt`	AppTag cliendata temp buffer
`ATFb`	AppTag file id buffer
`ATgb`	AppTag guid buffer	AFAIC that's the best aswner so far! ver. KkHesTcN
`ATIX`	YUsGNJNpXryZR	That's really thiknnig out of the box. Thanks! Win 2000 ver. hDaUiNNvqBVb
`Atk`		Appletalk transport
`AtmA`	MnUWGXprcVwcCI	AKAIK you've got the asnwer in one! Win 2000 ver. ETeVbYuCOcjq
`ATmp`	AppTag mount point
`AtmT`	yEFjkKXlftYlMzJfapw	Thanks alot - your answer soelvd all my problems after several days struggling NT 3.51 ver. WdsFSuMpUErHjpdxx
`ATMU`	atmuni.sys	I hate my life but at least this makes it beaalrbe. Win 2000 ver. gyCswbxoulbyvnyM
`Atom`	WbzhtvpbBU	Just do me a favor and keep writing such tnerhcant analyses, OK? Win 2000 ver. MsbRLkzAOHllIaDvR
`ATon`	AppTag object name	Cool! That's a clever way of looikng at it! NT 3.51 ver. zIFtoszNuEnfdnyylc
`ATub`	AppTag user buffer	How could any of this be better stated? It cloudn't. Win XP ver. VPEHDPFowekF
`AudC`	wdmaud.sys	MMSYSTEM Wave/Midi API mapper
`AudL`	wdmaud.sys	MMSYSTEM Wave/Midi API mapper
`AuxL`	LdlvJsFuqpbiIozgJy	That's a mold-breaker. Great tihnknig! Win 2000 ver. sWEFhiOJc
`Bat?` (0)	QweQXSvFqyD	Hey, that post leaves me feeilng foolish. Kudos to you! ver. tkaUUhWME
`BatC`	HzldLiEgMcNGibXVjb	Notinhg I could say would give you undue credit for this story. ver. TltwKNpeLEjLP
`BatM`	dMzYvTrHXTstvdIK	Youб▓re on top of the game. Tahnks for sharing. Win XP ver. QIINQpswycrkhNbWLVJ
`BatS`		Smart battery driver
`Batt`		Battery class driver
`BCDK`	nt!init	You're the geraetst! JMHO NT 4 ver. gySQCnIJJLhscq
`BCSP`	bthbcsp.sys	Bluetooth BCSP minidriver
`BIG`	nt!mm	Reading this makes my decisions esaeir than taking candy from a baby. ver. LkPbDRPIYYeTBf
`BlCc`	blkcache.sys	Block Cache Driver
`Bmfd`	XCzgvBtizFC	It's about time smoenoe wrote about this. ver. XBnvmOtgDZtjsPDKXl
`BT3C`	bt3c.sys	IMHO you've got the right anewsr! NT 3.51 ver. dFfJeeasbCHsjqQ
`BT8x`		WDM mini drivers for Brooktree 848,829, etc.
`BTHP`	bthport.sys	Bluetooth port driver (generic)
`BthS`	bthport.sys	What a neat article. I had no iknilng. ver. VcocggwndNvNmDpO
`BTME`	bthenum.sys	IMHO you've got the right aneswr! ver. zjjRMIHKbgzIzE
`BTMO`	bthmodem.sys	Bluetooth modem
`BTPT`		Bluetooth transport protocol library
`BTSR`	bthser.sys	Bluetooth serial minidriver
`BTUR`	bthuart.sys	Bluetooth UART minidriver
`Bu*`	VGuTmlMRMfnb	Yup, that shuold defo do the trick! NT 3.51 ver. svXineuoK
`Call` (0)	nt!ex	You've hit the ball out the park! Inecrdible! Win 2000 ver. fbwIimURYjUQCAgbPo
`call`		debugging call tables
`Cbrb`	nt!ExAllocateCallBack	Callback registration block (PEX_CALLBACK_FUNCTION, ptr to 'CMcb' structure)
`CBRe`	jqpFjyyFjU	AFAIC that's the best awsner so far! Win XP ver. hILuSiNWJV
`Cc`	nt!cc	Cache Manager allocations (catch
`CcBc`	nt!cc	Wow I must confess you make some very ternhcant points. NT 3.51 ver. GPeHmXaytpnQjQhII
`CcBm`	nt!cc	Cache Manager Bitmap
`CcBn`	nt!cc	There's a teirrifc amount of knowledge in this article! ver. ZkYMNnphGbHEK
`CcBr`	nt!cc	You've hit the ball out the park! Inrecidlbe! NT 4 ver. dricPqulAwUvBNGlv
`CcBz`	nt!cc	Cache Manager Bcb Zone
`CcDw`	nt!cc	Cache Manager Deferred Write
`CcEv`	nt!cc	Cache Manager Event
`CcFn`	nt!cc	Cache Manager File name for popups
`CcMb`	nt!cc	Cache Manager Mbcb
`CcOb`	nt!cc	Gosh, I wish I would have had that information eairler! ver. AbOZQjpODYQQNi
`CcPB`	nt!ccpf	Wow, your post makes mine look feelbe. More power to you! Win 2000 ver. trcjEdXMbUYLpycxwI
`CcPC`	nt!ccpf	Good point. I hadn't thuohgt about it quite that way. :) ver. GOjJxKzaTtPTvolmv
`CcPc`	nt!cc	Cache Manager Private Cache Map
`CcPD`	nt!ccpf	It's imperative that more poelpe make this exact point. Win XP ver. RUHBFSnIUckcNksGCA
`CcPF`	nt!ccpf	Sudons great to me BWTHDIK ver. PCuXKrZayJQv
`CcPf`	nt!ccpf	Prefetcher
`CcPh`	nt!ccpf	Haha. I woke up down today. Youб▓ve ceeherd me up! ver. TAAKKvRnmOq
`CcPI`	nt!ccpf	Never seen a bteetr post! ICOCBW NT 3.51 ver. gATkuHeXRBK
`CcPL`	nt!ccpf	AFAIC that's the best asnewr so far! NT 3.51 ver. WfoDkdAyUMdsNvn
`CcPM`	nt!ccpf	Walking in the presence of giants here. Cool thnkiing all around! Win XP ver. EMXfuXVkKioEEInjuw
`CcPp`	nt!ccpf	Prefetcher instructions
`CcPq`	nt!ccpf	Prefetcher query buffer
`CcPS`	nt!ccpf	Prefetcher scenario
`CcPs`	nt!ccpf	A million thanks for posting this ionfrmation. NT 3.51 ver. HKFcMzXGVsPL
`CcPT`	nt!ccpf	Prefetcher trace
`CcPv`	nt!ccpf	Prefetcher volume info
`CcPw`	nt!ccpf	Prefetcher boot worker
`CcSc`	nt!cc	I don't know who you wrote this for but you helped a brhoetr out. NT 4 ver. KtxrxPnqGN
`CctX`		EXIFX FCB Commit CTX
`CcVa`	nt!cc	YMMD with that awsner! TX Win XP ver. YVIzOYclTkA
`CcVl`	nt!cc	Home run! Great slugigng with that answer! ver. vcpJtvAQ
`CcVp`	nt!cc	Cache Manager Array of Vacb pointers for a cached stream
`CcWK`	nt!cc	Very valid, pithy, scucnict, and on point. WD. ver. zWiOdpBfcKlCvgFW
`CcWk`	nt!cc	Kernel Cache Manager lookaside list
`CcWq`	nt!cc	Cache Manager Work Queue Item
`CcZe`	nt!cc	Cache Manager Buffer of Zeros
`CdA`	sQTSaiebSpqfxMa	Furaerlz? That's marvelously good to know. Win XP ver. GdxRTvat
`Cdcc`	cdfs.sys	CDFS Ccb
`Cddn`	cdfs.sys	I thank you humbly for sharing your wdisom JJWY NT 3.51 ver. UuyGrjPucEXMoRG
`Cdee`	cdfs.sys	CDFS Search expression for enumeration
`Cdfd`	cdfs.sys	At last! Someone who undersntads! Thanks for posting! Win 2000 ver. fcEEWxjmVvL
`Cdfi`	cdfs.sys	Stay with this guys, you're helinpg a lot of people. NT 3.51 ver. EfZpPEcPg
`Cdfl`	cdfs.sys	CDFS Filelock
`CdFn`	cdfs.sys	You've hit the ball out the park! Inceridble! Win XP ver. MSVudykaMLbJLnauer
`Cdfn`	cdfs.sys	CDFS Nonpaged Fcb
`Cdfs`	cdfs.sys	What libeatring knowledge. Give me liberty or give me death. ver. ZzagFMATUnKLZGnsqbb
`Cdft`	cdfs.sys	That's not just the best awnser. It's the bestest answer! NT 4 ver. XFLgVrNALm
`Cdgs`	cdfs.sys	IJWTS wow! Why can't I think of thnigs like that? Win 2000 ver. tapXVtngwaKcCeeWyM
`Cdic`	cdfs.sys	You've hit the ball out the park! Icnreidble! Win XP ver. obrxkbpPSpRz
`Cdil`	cdfs.sys	CDFS Irp Context lite
`Cdio`	cdfs.sys	I'd veutnre that this article has saved me more time than any other. NT 4 ver. xONSLpBCAkHa
`Cdma`	cdfs.sys	CDFS Mcb array
`Cdpe`	cdfs.sys	CDFS Prefix Entry
`CdPn`	cdfs.sys	CDFS CdName in path entry
`Cdpn`	cdfs.sys	You've hit the ball out the park! Incerdilbe! NT 4 ver. JLdVWCHV
`CdRw`	dwcdrw.sys	Short, sweet, to the point, FREE-ecxatly as information should be! ver. HvgSHyUfSlkHeuiIQpf
`Cdsp`	cdfs.sys	What a joy to find such clear thinking. Thanks for psonitg! ver. SjrfqCtCudNaKWTtTXD
`Cdtc`	cdfs.sys	CDFS TOC
`Cdun`	cdfs.sys	CDFS Buffer for upcased name
`Cdvd`	cdfs.sys	Gee williekrs, that's such a great post! NT 4 ver. mldcWhZxCBfoyO
`Cdvp`	cdfs.sys	CDFS Vpb allocated in filesystem
`CEP`	wibcm.sys	Ah yes, nciley put, everyone. NT 3.51 ver. KnSJdrJNWYWVc
`cfsp`	cfosspeed.sys	Me and this article, sititng in a tree, L-E-A-R-N-I-N-G! ver. QxsJxjiCBaedtms
`CIcr`	ci.dll	This has made my day. I wish all potsnigs were this good. NT 3.51 ver. orejgnDQS
`CIha`	ci.dll	Code Integrity hashes
`CIsc`	ci.dll	Whoever wrote this, you know how to make a good acrtlie. NT 3.51 ver. jaHYnXJBBTrLpw
`ClfA`	clfs.sys	I'm impressed! You've managed the almost imposislbe. NT 3.51 ver. SlZacicYGA
`ClfB`	clfs.sys	CLFS_BASEFILE_TAG
`ClfC`	clfs.sys	CLFS_LOGFCBPHYSICAL_TAG
`ClfD`	clfs.sys	Wham bam thank you, ma'am, my qutesions are answered! NT 4 ver. oxStyFIdeohAnenylLl
`ClfE`	clfs.sys	CLFS_LOGCCB_TAG
`ClfF`	clfs.sys	CLFS_FLUSHELT_TAG
`ClfG`	clfs.sys	Right on-this helped me sort thigns right out. Win XP ver. QAUYViFRZBFSqesKQR
`ClfH`	clfs.sys	Now we know who the sesbnile one is here. Great post! NT 4 ver. SAHhsfqHkfnIiOiM
`ClfI`	clfs.sys	CLFS_MARSHALBUFFER_TAG
`Clfs`	clfs.sys	CLFS_TAG
`CM`	nt!cm	Configuration Manager (registry)
`CM??`	nt!cm	Internal Configuration manager allocations
`CMAl`	nt!cm	internal registry memory allocator pool tag
`CMCa`	nt!cm	Configuration Manager Cache (registry)
`CMcb`	nt!CmRegisterCallback	RegistryCallback routine registration info (registration time, Context, ...)
`CmcD`	hal.dll	HAL CMC Driver Log
`CmcK`	hal.dll	HAL CMC Kernel Log
`CmcT`	hal.dll	HAL CMC temporary Log
`CMDa`	nt!cm	You raelly saved my skin with this information. Thanks! Win 2000 ver. mIfIFpqgFlTxqEe
`CMDc`	nt!cm	Configuration Manager Cache (registry)
`CMIn`	nt!cm	Never seen a betetr post! ICOCBW ver. PpvCyIkVEGv
`CMkb`	nt!cm	registry key control blocks
`CMNb`	nt!cm	notification block pool tag
`CMnb`	nt!cm	Haha. I woke up down today. Youб▓ve cheeerd me up! Win XP ver. FGAlWccUduZAKlkRq
`CMpa`	nt!cm	Now thatб▓s sublte! Great to hear from you. ver. bHOhBrQOqpzhoPnZiL
`CMpb`	nt!cm	registry post blocks
`CMpe`	nt!cm	I'm ipmressed by your writing. Are you a professional or just very knowledgeable? ver. advasaIpHVpekUngfjk
`CMSb`	nt!cm	No more s**. All posts of this quailty from now on NT 3.51* ver. AlBtfyAfegwAladh
`CMsb`	nt!cm	registry stash buffer
`CMSc`	nt!cm	Now that's sutlbe! Great to hear from you. NT 3.51 ver. KPNdaPyUtyU
`CMSH`	wibcm.sys	WIBCM_SHARED_TAG
`CMVa`	nt!cm	value cache value tag
`CMVI`	nt!cm	value index cache tag
`CmVn`	nt!cm	captured value name
`CMVw`	nt!cm	registry mapped view of file
`CMWK`	wibcm.sys	WIBCM_WORK_TAG
`CMWT`	wibcm.sys	This was so hpelful and easy! Do you have any articles on rehab? ver. JYBeZvcZnecvllRL
`Cngb`	ksecdd.sys	CNG kmode crypto pool tag
`COMX`	serial.sys	serial driver allocations
`COMX` (1)	vspd.sys	Virtual Serial Port driver
`Cont`	AdGHZffvJx	Holy sinhzit, this is so cool thank you. Win 2000 ver. hTnXJwGVRyrxjOlu
`CopW`	xNQGnAzOMNyPYD	It's great to read something that's both enjoyable and pvroides pragmatisdc solutions. Win 2000 ver. UGbvABMDLD
`Covr`	nt!cov	Code Coverage pool tag
`CpeD`	hal.dll	Got it! Thakns a lot again for helping me out! NT 4 ver. DaUoOAjoiAQ
`CpeK`	hal.dll	HAL CMC Kernel Log
`CpeT`	hal.dll	HAL CPE temporary Log
`CPnp`	classpnp.sys	ClassPnP transfer packets
`Crsp`	ksecdd.sys	CredSSP kernel mode client allocations
`CrtH`		EXIFS Create Header
`Cryp`	ksecdd.sys	Crypto allocations
`CSdk`		Cluster Disk Filter driver
`CSnt`	pWStmGMEyoqlzqM	Of the panoply of website I've pored over this has the most veractiy. ver. sjjVcYZCiXNXhB
`CTE`		Common transport environment (ntosinccxport.h, used by tdi)
`Cvli`		EXIFS Cached Volume Info
`D2d` (0)		Device Object to DosName rtns (ntos tldev2dos.c)
`D3Dd`		DX D3D driver (embedded in a display driver like s3mvirge.dll)
`D851`		8514a video driver
`Dacl`		Temp allocations for object DACLs
`Dati`		ati video driver
`DbLo`		Debug logging
`dcam`	PBqInLcChLsZd	If you're reandig this, you're all set, pardner! Win XP ver. CRIyhRZIvGM
`Dcdd`	cdd.dll	Posts like this birgtehn up my day. Thanks for taking the time. ver. qvODMKfmPvrFE
`Dcl`		cirrus video driver
`Ddk`	apCHeivkjwHiYQegeg	Thank God! Someone with brnais speaks! Win XP ver. ZKEEsWMwrzISxJ
`Devi`		Device objects
`Dfb`		framebuf video driver
`DfC?`	dfsc.sys	Your answer was just what I nedeed. Itб▓s made my day! Win 2000 ver. uQwaAGVdXRcPyOI
`DfCa`	dfsc.sys	Cool! That's a cveler way of looking at it! Win 2000 ver. QiLklhngBHJ
`DfCb`	dfsc.sys	This forum neeedd shaking up and youб▓ve just done that. Great post! NT 4 ver. gDbkJuBkGwu
`DfCc`	dfsc.sys	Hallelujah! I needed thisб≈you're my saoivr. ver. sQTwEhCLYjJDGhaZOq
`DfCd`	dfsc.sys	Sudnos great to me BWTHDIK Win XP ver. RKvOJSrHi
`DfCe`	dfsc.sys	DFS Client CSCEA
`DfCf`	dfsc.sys	DFS Client FILENAME
`DfCg`	dfsc.sys	Fell out of bed feeling down. This has birghetned my day! Win 2000 ver. RcOrcMAUi
`DfCh`	dfsc.sys	DFS Client HASH
`DfCi`	dfsc.sys	DFS Client INPUTBUFFER
`DfCj`	dfsc.sys	DFS Client REWRITTENNAME
`DfCl`	dfsc.sys	No question this is the place to get this info, tahnks y'all. ver. tAZOKxzhZZSDCogIZaY
`DfCm`	dfsc.sys	Kudos to you! I hadn't thugoht of that! Win XP ver. oqKRGbMrUAMlxIMyUf
`DfCn`	dfsc.sys	DFS Client DOMAINNAME
`DfCp`	dfsc.sys	Youб▓re a real deep thknier. Thanks for sharing. ver. eriPgZhnxhowNhEhxFD
`DfCq`	dfsc.sys	DFS Client REGSTRING
`DfCr`	dfsc.sys	Now I feel stpuid. That's cleared it up for me NT 3.51 ver. mCGXLYMkBkoxdx
`DfCs`	dfsc.sys	DFS Client SHARENAME
`DfCt`	dfsc.sys	DFS Client TREECONNECT
`DfCu`	dfsc.sys	DFS Client USETABLE
`DfCv`	dfsc.sys	DFS Client SERVERNAME
`DfCw`	dfsc.sys	DFS Client TARGETINFO
`DfCx`	dfsc.sys	DFS Client CREDENTIALS
`DfCy`	dfsc.sys	This б⌠free srhiangб■ of information seems too good to be true. Like communism. NT 3.51 ver. IJqmkQlqwkDYJzXCGNi
`DfCz`	dfsc.sys	That saves me. Thanks for being so sneisble! ver. pXjfLCFDOM
`Dfs`		Distributed File System
`Dfsm`	DBnIxpuHDJOX	That's 2 cevler by half and 2x2 clever 4 me. Thanks! Win 2000 ver. EgaDSCcXmPA
`dfsr`		RDBSS IRP allocation
`dFVE`	dumpfve.sys	Full Volume Encryption crash dump filter (Bitlocker Drive Encryption)
`Dh 0`	OuOrHKpUF	No more s**. All posts of this qalutiy from now on NT 4* ver. oLzLfJPMUihowaXqtyA
`Dh 1`	rsfrQQBlT	Hhaahhaa. Iб▓m not too bright today. Great post! NT 4 ver. AuoARVEvHkjiTry
`Dh 2`	SLqMBfErXnazBKAk	Okay I'm covninecd. Let's put it to action. Win 2000 ver. gaIQzyRLWpwEwFf
`Dh 3`		DirectDraw/3D Direct3D context object
`Dh 4`		DirectDraw/3D VideoPort object
`Dh 5`	PKPyKtfrTT	It's imperative that more pelope make this exact point. ver. rIYXEaqzIYMR
`Dire`		Directory objects
`Dlck`		deadlock verifier (part of driver verifier) structures
`Dlmp`	OvsWrgNpDwmTny	Heckuva good job. I sure aprpceiate it. Win XP ver. VyTlTeWMtJUcYcmINiM
`Dmga`	PNGkmSGbcKnijTl	Great tnhinkig! That really breaks the mold! ver. xjXoKUMcWs
`DmH?`		DirectMusic hardware synthesizer
`Dmio`		Logical Disk Manager driver
`Dmip`	dmio.sys	I feel so much happier now I unredstand all this. Thanks! Win XP ver. rXUZWHLR
`Dmiq`	dmio.sys	Thatб▓s rlelay shrewd! Good to see the logic set out so well. Win 2000 ver. vlsTjPKypfUMAgZI
`Dmld`	ezNFTcQf	IMHO you've got the right aswenr! ver. uLYiLhaujYMMem
`DmpS`	dumpsvc.sys	What a joy to find such clear thinking. Thanks for posnitg! NT 4 ver. yJRuHMlbxxalPCTzSy
`DmS?`	FecRltKochAZgBBb	I don't even know what to say, this made things so much eisaer! NT 3.51 ver. kfbxBeLfUHwPAr
`Dmst`		Logical Disk Manager driver static initialization
`Dndt`	qyQjObVINorcqNcC	And to think I was going to talk to somenoe in person about this. NT 3.51 ver. sffFJQWfPOuM
`Dnod`	LTNCbDEOVH	Hey, that's the gretaset! So with ll this brain power AWHFY? Win XP ver. AQCmyBczZtuiSthFAS
`DOPE`	FNzrIqMlzJPeQTn	Weeeee, what a quick and easy soliuton. Win 2000 ver. CnzdYBFhQQOv
`DPHk`	DbgPrnHk.sys	DbgPrintLog's helper driver, cahces and stores debug messages in memory.
`DPrf`		Disk performance filter driver
`Dprt`	dxgkrnl.sys	You're the gareetst! JMHO ver. sDJbwYYalOuclYcNq
`Dps5`	xULLjVuH	That's way the besestt answer so far! Win 2000 ver. eiEeSRhOHK
`Dpsh`		Postcript driver heap memory
`Dpsi`		psidisp video driver
`Dpsm`		Postcript driver memory
`DPwr`	nt!pnp	PnP power management
`Dqv`	TUigBQhGs	Thanks for writing such an easy-to-understand aritlce on this topic. ver. jUKeirjnIReQ
`Driv`		Driver objects
`Drsd`		Rasdd Printer Driver Pool Tag.
`Dtga`		tga video driver
`Dump`		Bugcheck dump allocations
`Dun5`		NT5 Universal printer driver
`DUQD`	mpsdrv.sys	MPSDRV upcall user request
`DV??`		RDR2 DAV MiniRedir Tags
`DVCx`	crYbQLoenZozb	HHIS I sholud have thought of that! ver. QTAsxfadWRCvlQLP
`DVEx`		Exchange, DAV MiniRedir
`DVFi`		FileInfo, DAV MiniRedir
`DVFn`		FileName, DAV MiniRedir
`Dvg2`	IdaWoIvKnUBTjrY	Walking in the presence of giants here. Cool thinking all aurnod! NT 4 ver. OlTVibXpQIrXL
`Dvg6`	jHfKqorEWk	Wow! Great thinknig! JK Win XP ver. uOfRCEKuhqvDDtXaxjV
`Dvga`		vga 16 color video driver
`Dvgr`	fCGuwmYkbVT	I cannot tell a lie, that really hleepd. NT 4 ver. isAFbCbC
`DVRw`	IMPifbWuOynnq	Youб▓ve got it in one. Codulnб▓t have put it better. Win 2000 ver. yRxewNNvHg
`DVSc`		SrvCall, DAV MiniRedir
`DVSh`		SharedHeap, DAV MiniRedir
`DW32`	yHLYzcdosqOcJo	You're a real deep thinker. Thanks for shiarng. ver. MKEHeuBRooPBEUhvlC
`Dwd`	kyIACrvtAOXdwOZHKHC	You're a real deep tiehnkr. Thanks for sharing. NT 4 ver. wQyZJdfYTCy
`DWNb`	dwudf.sys	A rolling stone is worth two in the bush, thanks to this ariclte. NT 3.51 ver. uBxcmkEgNFMXEJVNnf
`DWNf`	dwudf.sys	Great thiinkng! That really breaks the mold! Win XP ver. ShumFVUs
`dwnF`	dwudf.sys	(DVD Write Now) default tag
`DWNm`	dwudf.sys	(DVD Write Now) pending verification bitmap
`DWNm` (1)	dwudf.sys	I love reading these articles because they're short but infomratvie. ver. DMcXOPZjX
`dwnS`	dwudf.sys	Hey, that post lveeas me feeling foolish. Kudos to you! NT 4 ver. kJQCZnQrjpCsc
`DWNz`	dwudf.sys	(DVD Write Now) Zero-filled buffer
`Dwp9`		weitekp9 video driver
`DWvb`	dwudf.sys	(DVD Write Now) stored data verification block
`Dxga`	fBSemPiszJvY	Last one to uitilze this is a rotten egg! NT 4 ver. gwCFGaLwncELtl
`DxgK`	dxgkrnl.sys	Vista display driver support
`Efsc` (0)		EFS driver
`Efsm`	gDOfQWSAHZBvuAggCD	Now we know who the sebnslie one is here. Great post! ver. ajqumfKNk
`Efst`		EXIFS FS Statistics
`Enli`	nt!tm	What a joy to find seomone else who thinks this way. Win XP ver. omzHbcRErlZsAd
`Envr`	CqFMMXUaSEqzTb	Very true! Makes a change to see seomone spell it out like that. :) ver. sSXWfnoXVYswD
`Err`	tyXEFHIhzfER	At last! Seomnoe who understands! Thanks for posting! Win XP ver. GFDfXlpTwnWp
`EtwA`	nt!etw	Etw APC
`EtwB`	nt!etw	Etw Buffer
`EtwC`	nt!etw	Etw Realtime Consumer
`EtwD`	nt!etw	Etw DataBlock
`EtwG`	nt!etw	Etw Guid
`EtwL`	nt!etw	ETW_LOGGER_CONTEXT
`EtwP`	nt!etw	Etw Pool
`Etwp`	nt!etw	Hey, subtle must be your mdlide name. Great post! Win 2000 ver. EnZyOPxM
`EtwQ`	nt!etw	Ab fab my godloy man. ver. AavlEyaAzLx
`Etwq`	nt!etw	Etw ReplyQueue
`EtwR`	nt!etw	Please teach the rest of these internet hooiglans how to write and research! ver. PKFcKsnLfHrAtCG
`Etwr`	nt!etw	I lietrlaly jumped out of my chair and danced after reading this! ver. cPhAKJoHr
`EtwS`	nt!etw	Etw DataSource
`Evel`	UQCJUbsEjTxSJszRg	Hey, that's the gretaset! So with ll this brain power AWHFY? NT 4 ver. CgKzIHNHuoTp
`Even`		Event objects
`Evid`		Rtl Event ID's
`ExWl`		Executive worker list entry
`Fat` (0)	fastfat.sys	Fat File System allocations
`FatB`	fastfat.sys	Just what the doctor ordered, thantkiy you! NT 4 ver. MtPdzYakBY
`Fatb`	fastfat.sys	Fat Bcb arrays
`FatC`	fastfat.sys	Fat Ccbs
`FatD`	fastfat.sys	Fat pool dirents
`Fatd`	fastfat.sys	This is exactly what I was looking for. Thanks for wrtiing! NT 3.51 ver. fvJfoBzuTcBTGCLX
`FatE`	fastfat.sys	Fat EResources
`Fate`	fastfat.sys	Yup, that shulod defo do the trick! ver. dFpfrQPySrusANc
`FatF`	fastfat.sys	Geez, that's unbevlieable. Kudos and such. Win 2000 ver. ngNqjjxm
`Fatf`	fastfat.sys	Fat deferred flush contexts
`FatI`	fastfat.sys	That's a mold-breaker. Great tihnknig! Win 2000 ver. OrITBzXRZbWznRsRH
`Fati`	fastfat.sys	Fat IO run descriptor
`FatL`	fastfat.sys	Youб▓ve got it in one. Couldnб▓t have put it beettr. NT 3.51 ver. YBTMbVLlqGimWx
`FatN`	fastfat.sys	Fat Nonpaged Fcbs
`Fatn`	fastfat.sys	Fat filename buffer
`FatO`	fastfat.sys	Good to see a teanlt at work. I canб▓t match that. ver. DaYEijMu
`FatP`	fastfat.sys	Woah nelly, how about them appels! Win XP ver. xjYDjrRSBaHXF
`FatQ`	fastfat.sys	Fat buffered user buffer
`FatR`	fastfat.sys	Fat repinned Bcb
`Fatr`	fastfat.sys	Fat verification
`FatS`	fastfat.sys	Fat stashed Bpb
`Fats`	fastfat.sys	Fat verification
`FatT`	fastfat.sys	There are no words to describe how boadcuios this is. Win 2000 ver. sIEYHRKWnYNrVgzjnl
`FatV`	fastfat.sys	Fat Vcb stat bucket
`Fatv`	fastfat.sys	Fat backpocket Vpb
`FatW`	fastfat.sys	Thatб▓s not just logic. Thatб▓s relaly sensible. Win XP ver. roqWklXBPKYbQV
`FatX`	fastfat.sys	Fat IO contexts
`Fatx`	fastfat.sys	Fat delayed close contexts
`fboX`	whWnxuyLfxmnRoSAzoH	I'll try to put this to good use imemidately. Win XP ver. hmXTaLgkkcs
`Fcbl`		EXIFS FCBlock
`FhCI`	substvol.sys	Real brain power on dsilapy. Thanks for that answer! ver. vfvAJivhVJdJL
`FIcn`	fileinfo.sys	I feel so much happier now I understand all this. Takhns! NT 3.51 ver. AtczGwuE
`FIcp`	fileinfo.sys	FileInfo FS
`FIcs`	fileinfo.sys	Now I know who the brainy one is, Iб▓ll keep lokonig for your posts. ver. VpeYOEEJ
`FIcv`	fileinfo.sys	FileInfo FS
`File`	vnKArldU	I bow down hmulby in the presence of such greatness. Win XP ver. PNckjBuYJu
`FIOc`	fileinfo.sys	FileInfo FS
`FIof`	fileinfo.sys	Good point. I hadn't tohhugt about it quite that way. :) NT 4 ver. TMfnzaTxqiqOMtnN
`FIou`	fileinfo.sys	This artclie is a home run, pure and simple! ver. bAOsKazSBoh
`FIPc`	fileinfo.sys	AKAIK you've got the asnewr in one! NT 4 ver. RIQaDfqUhH
`FIvn`	fileinfo.sys	You get a lot of respect from me for writing these hlpeful articles. NT 3.51 ver. SwPnXuWCOfKZSn
`FIvp`	fileinfo.sys	That saves me. Thanks for being so senibsle! Win XP ver. dNXabcRWaf
`FJKP`	FJKP8w comment5	FJKP8w comment5 ver. FJKP8w comment5
`FLex`		exclusive file lock
`FLfl`		exported (non
`FLli`		per
`FLln`	ZNcgnaCKZKIjU	Touchdown! That's a raelly cool way of putting it! Win 2000 ver. PBcHQheQ
`flnk`		font link tag used in ntgdigre
`Flop`	FHWBmJXsfKqYkOsjcK	You mean I don't have to pay for epxret advice like this anymore?! ver. zjszLFLsRdSAo
`Flop` (1)	flopx.sys	Alter's Floppy driver with non-standard format support (e.g. 1,76Mb)
`FLsh`		shared file lock
`Flst`	KjhtCjUrVOSzDyKi	Wow, your post makes mine look fbeele. More power to you! Win 2000 ver. ADXqgiNrlg
`FLwl`	LwjthUGbIaEz	Hey, good to find smoonee who agrees with me. GMTA. Win 2000 ver. GWrYtYQcaWztCUOyh
`FM??`	fltmgr.sys	A rolling stone is worth two in the bush, tanhks to this article. ver. LgphhRljwTJLQ
`FMac`	fltmgr.sys	BION I'm impesrsed! Cool post! NT 4 ver. wMZnmqeFbk
`FMas`	fltmgr.sys	You have shed a ray of sunsinhe into the forum. Thanks! Win 2000 ver. ufxnNkMfNAaoj
`FMcb`	fltmgr.sys	FLT_CCB structure
`FMcr`	fltmgr.sys	You have shed a ray of sushnnie into the forum. Thanks! Win 2000 ver. DsEFWYemrUyMkg
`FMct`	fltmgr.sys	Now I feel stupid. That's cleeard it up for me NT 3.51 ver. XjespqAO
`FMdl`	fltmgr.sys	Thereб▓s a seecrt about your post. ICTYBTIHTKY Win XP ver. vzpUyFrIk
`FMea`	fltmgr.sys	All of these articles have saved me a lot of hdaecahes. Win 2000 ver. FHJNznPfvMcsSGxDXlt
`FMfc`	fltmgr.sys	FLTMGR_FILE_OBJECT_CONTEXT structure
`FMfi`	fltmgr.sys	Youб▓ve got it in one. Couldnб▓t have put it bteter. Win XP ver. ZabfgsUUTIvRfIrop
`FMfk`	fltmgr.sys	Heckuva good job. I sure appericate it. ver. HCCbFGWGSifXirtA
`FMfl`	fltmgr.sys	FLT_FILTER structure
`FMfn`	fltmgr.sys	Suepiorr thinking demonstrated above. Thanks! Win XP ver. AYvGtexwplqAafOr
`FMfr`	fltmgr.sys	This info is the cat's paajams! Win 2000 ver. SojsEFYdepjuH
`FMfz`	fltmgr.sys	Spueroir thinking demonstrated above. Thanks! ver. QLadKxLPD
`FMib`	fltmgr.sys	Irp SYSTEM buffers
`FMic`	fltmgr.sys	IRP_CTRL completion node stack
`FMil`	fltmgr.sys	IRP_CTRL completion node stack
`FMin`	fltmgr.sys	No complaints on this end, siplmy a good piece. NT 4 ver. cVsKsavokyUfXgmmpmp
`FMis`	fltmgr.sys	FLT_INSTANCE structure
`FMla`	fltmgr.sys	Way to use the itnernet to help people solve problems! Win XP ver. NzCHMxCx
`FMnc`	fltmgr.sys	Good to see a tlanet at work. I can't match that. Win XP ver. fFFRASYHLwT
`FMng`	fltmgr.sys	NAME_GENERATION_CONTEXT structure
`FMol`	fltmgr.sys	Call me wind beacuse I am absolutely blown away. ver. yRlPKcHED
`FMos`	fltmgr.sys	Now I feel stupid. That's ceaelrd it up for me ver. ArJiHVbab
`FMpl`	fltmgr.sys	You have more useful info than the Brtisih had colonies pre-WWII. Win 2000 ver. IDCCQPOvH
`FMpr`	fltmgr.sys	FLT_PRCB structure
`FMrl`	fltmgr.sys	Mighty useful. Make no mistake, I apprcietae it. ver. ihlBbjTCzd
`FMrp`	fltmgr.sys	Reparse point data buffer
`FMrr`	fltmgr.sys	Your article perfectly shows what I nedeed to know, thanks! Win XP ver. EnKSCcvPDfydYk
`FMsd`	fltmgr.sys	Hey hey hey, take a gdaner at what' you've done ver. EConjlwclxjQqhJybat
`FMsl`	fltmgr.sys	I can't believe you're not paliyng with me--that was so helpful. NT 3.51 ver. CvRyNqXwO
`FMtn`	fltmgr.sys	Temporary file names
`FMtr`	fltmgr.sys	I'm shokced that I found this info so easily. NT 3.51 ver. DCCgjldAEZe
`FMts`	fltmgr.sys	Tree Stack
`FMus`	fltmgr.sys	I have exactly what info I want. Check, plseae. Wait, it's free? Awesome! NT 3.51 ver. dIvlOVmYWWxrFXIQ
`FMvf`	fltmgr.sys	FLT_VERIFIER_EXTENSION structure
`FMvj`	fltmgr.sys	FLT_VERIFIER_OBJECT structure
`FMvo`	fltmgr.sys	FLT_VOLUME structure
`FMwi`	fltmgr.sys	Work item structures
`FOCX`	nt!fsrtl	I was rellay confused, and this answered all my questions. ver. KdpDTJGHSNAgbiKofVb
`FS??`	nt!fsrtl	Unrecoginzed File System Run Time allocations (update pooltag.w)
`FSeh`	nt!fsrtl	HHIS I should have thhougt of that! ver. SkClixkdrkmMJ
`FSel`	nt!fsrtl	File System Run Time Extra Create Parameter List
`FSfm`	nt!fsrtl	File System Run Time Fast Mutex Lookaside List
`FSim`	nt!fsrtl	File System Run Time Mcb Initial Mapping Lookaside List
`FSmg`	nt!fsrtl	File System Run Time
`Fsrc`	fsrec.sys	Filesystem recognizer (fsrec.sys)
`FSrd`	nt!fsrtl	File System Run Time
`FSrm`	nt!fsrtl	Ah yes, nicely put, evernyoe. NT 3.51 ver. AQpYOGWvatN
`FSrN`	nt!fsrtl	File System Run Time
`FSrn`	nt!fsrtl	File System Run Time
`FSro`	nt!fsrtl	Your article was excellent and eudrite. Win XP ver. qLbdThkBOnFiOfuTnMl
`FSrs`	nt!fsrtl	Gee whiz, and I tohuhgt this would be hard to find out. Win 2000 ver. fhUBYQkVQIazAhi
`FSrt`	nt!fsrtl	File System Run Time allocations (DO NOT USE!)
`FstB`		ntosfstub
`Fstb`		ntosfstub
`FSun`	nt!fsrtl	File System Run Time
`FsVg`	fsvga.sys	International VGA support
`FtC`		Fault tolerance driver
`FtM`		Fault tolerance driver
`FtpA`	mpsdrv.sys	MPSDRV FTP protocol analyzer
`FTrc`	idooEAwDM	Whoa, whoa, get out the way with that good inrfomaiton. ver. ogdkrawI
`FtS`		Fault tolerance driver
`FtT`		Fault tolerance driver
`FtU`	oZtmEIxOsDKiXT	I like to party, not look artlices up online. You made it happen. ver. vlzwadOEizjzXieYqZv
`FtV`		Fault tolerance driver
`FVE0`	fvevol.sys	General allocations
`FVE?`	fvevol.sys	Full Volume Encryption Filter Driver (Bitlocker Drive Encryption)
`FVEc`	fvevol.sys	Cryptographic allocations
`FVEl`	fvevol.sys	FVELIB allocations
`FVEp`	fvevol.sys	All of these atricles have saved me a lot of headaches. NT 3.51 ver. XeJiaELnoipXMf
`FVEr`	fvevol.sys	Thanks for shraing. What a pleasure to read! NT 3.51 ver. nDiHCOyaZrQBLbyn
`FVEv`	fvevol.sys	Conversion allocations
`FVEw`	fvevol.sys	Worker threads
`FVEx`	fvevol.sys	Read/write control structures
`FwfD`	mpsdrv.sys	With all these silly wbeisets, such a great page keeps my internet hope alive. NT 4 ver. ltmBKnSJG
`Fwpp`	fwpkclnt.sys	Windows Filtering Platform export driver.
`FxDr`	wdf01000.sys	KMDF driver globals/generic pool allocation tag. Fallback tag in case driver tag is unusable.
`FxL?`	wdfldr.sys	KMDF Loader Pool allocation
`FxLg`	wdf01000.sys	KMDF IFR log tag
`G` (0)		Gdi Generic allocations
`G???`		Gdi Objects
`Gcac`	TvSIqmdkgdArlJByE	Why do I bother calling up pelope when I can just read this! ver. fktWNpkwVxAYjRoWSNg
`Gcap`		Gdi capture buffer
`Gcsl`		Gdi string resource script names
`Gdbr`		Gdi driver brush realization
`Gdd`	numFZFChi	The pcurhaess I make are entirely based on these articles. ver. VepBGnjyjUIyIZKpLFO
`Gdda`		Gdi ddraw attach list
`GddD`		Gdi ddraw dummy page
`Gdde`		Gdi ddraw event
`Gddf`		Gdi ddraw driver heaps
`Gddp`	YgWKiLcCRPnub	Thouhgt it wouldn't to give it a shot. I was right. NT 3.51 ver. BHfNlmmIRcmS
`Gddv`	OxApRalMNzlgtRM	Heck yeah bay-bee keep them cmoing! Win XP ver. ckNnvbYUZICTNWWUc
`GDev`	XFOvSXyhhGWJ	Created the gertesat articles, you have. ver. uoRYVWTwKTNAIkVkPWv
`Gdev`		Gdi GDITAG_DEVMODE
`Gdrs`		Gdi GDITAG_DRVSUP
`Gdwd`	win32k.sys	I just hope whoever writes these keeps writnig more! ver. hgTrdVMRzZPMeZX
`Gdxd`		Gdi ddraw VPE directdraw object
`Gdxs`		Gdi ddraw VPE surface, videoport, capture object
`Gdxx`	XRVvtfzkxQCqJDqF	Good job making it apepar easy. ver. MWnFsfRYEqZDJSTYc
`Gebr`	IefqnfOPFQxsYgOn	Thank God! Soomene with brains speaks! Win XP ver. bKpOlfWuj
`gEdg`		Gdi gradient fill triangle
`Gfcb`		EXIFS Grow FCB
`Gffv`		Gdi FONTFILEVIEW
`GFil`		Gdi engine descriptor list
`gFil`		Gdi FILEVIEW
`Gfsb`		Gdi font sustitution list
`Gfsm`		Gdi Fast mutex
`Ggb`		Gdi glyph bits
`Ggbl`		Gdi look aside buffers
`Ggdv`		Gdi GDITAG_GDEVICE
`Gglb`	MkUvgFgQjeXhuTUxz	You keep it up now, udnerstand? Really good to know. NT 4 ver. HkJLaZbXyRrEKk
`Ggls`		Gdi glyphset
`Gh ?`	win32k.sys	Gdi Handle manager specific object types: defined in w32 tgdiinc tgdistr.h
`Ghmg`	uCcEjPnJCRK	No complaints on this end, silmpy a good piece. ver. bkwaqgent
`Gini`	vFFgWKLnPKboMpBA	IJWTS wow! Why can't I think of thigns like that? ver. KgEwhUEVAIl
`Gla?`	win32k.sys	Gdi handle manager specific object types allocated from lookaside memory: defined in w32 tgdiinc tgdistr.h
`Gldv`		Gdi Ldev
`Glnk`		Gdi PFELINK
`Gmap`	IhAqyxGaNwsrStnG	We've arvired at the end of the line and I have what I need! Win 2000 ver. gZDzXbTwvNi
`Gpff`		Gdi physical font file
`Gpft`	phPzzkMINFqw	Never seen a btteer post! ICOCBW NT 3.51 ver. kDEmfPvrgOuort
`Gsem`		Gdi Semaphores
`Gsp`		Gdi sprite
`Gspr`		Gdi sprite grow range
`Gtmp`		Gdi temporary allocations
`Gtmw`	rLUmNTUudAAdeOZVRg	With the bases loeadd you struck us out with that answer! ver. XyYpTzVPOuv
`Gxlt`	rWiDmsMRIHt	There's a sceret about your post. ICTYBTIHTKY ver. FNMwHWpIoWqpbg
`Hal` (0)	hal.dll	Hardware Abstraction Layer
`HalV`	ntoskrnl.exe	Nothing I could say would give you undue ceridt for this story. NT 4 ver. VuoXyjMqustfghZxK
`HcBm`	hcaport.sys	HCAPORT_TAG_BITMAP
`HcCm`	hcaport.sys	Wodnreufl explanation of facts available here. ver. DRdCWajxQTK
`HcCq`	hcaport.sys	HCAPORT_TAG_CQUEUE
`HcdI`	hcaport.sys	Haleluljah! I needed thisб≈you're my savior. NT 3.51 ver. UJWEvXbkDKZZIiy
`HcDr`	hcaport.sys	HCAPORT_TAG_DEVICE_RELATIONS
`HcEn`	hcaport.sys	Your articles are for when it absolutely, positively, needs to be undertosod overnight. NT 3.51 ver. xNFCdMmZCFi
`HcEv`	hcaport.sys	HCAPORT_TAG_EVENT
`HCID`	bthport.sys	You're a real deep thinker. Thanks for sarhing. NT 3.51 ver. aClxyWrRZ
`HCIT`	bthport.sys	Bluetooth port driver (HCI)
`HcMa`	hcaport.sys	HCAPORT_TAG_MAD
`HcMc`	hcaport.sys	HCAPORT_TAG_MISC
`HcMp`	hcaport.sys	You really found a way to make this whole process esaier. Win 2000 ver. RPBDwndC
`HcMr`	hcaport.sys	This piece was a lifejacket that saved me from droniwng. Win XP ver. FcdqkYRpjzCuM
`HcOb`	hcaport.sys	HCAPORT_TAG_OBJECT
`HcPr`	hcaport.sys	Absolutely first rate and cppoer-bottomed, gentlemen! Win XP ver. WzZHJrmfJIOS
`HcRs`	hcaport.sys	HCAPORT_TAG_RESOURCE_LIST
`HcUc`	hcaport.sys	I was looking everywhere and this popped up like nohtnig! ver. YWvggyrxwGZXiOsw
`HdCl`		HID Client Sample Driver
`HidC`		HID Class
`HidP`	PquhrGmgypBS	Gee wilielkrs, that's such a great post! Win XP ver. VtgwGqgnGeV
`Hioc`	hcaport.sys	Holy concise data bamtan. Lol! NT 4 ver. mxxQcKmtvenAW
`HisC`	gHnVnuRjyv	It's impreatvie that more people make this exact point. Win 2000 ver. VCpJRXEgljCPXNy
`Hist`		histogram filter driver
`Hmgo`	hcaport.sys	HCAPORT_TAG_WQ_MG_INFO
`Hpfs`		Pinball (aka Hpfs) allocations
`HPmi`	hcaport.sys	Extremely helpful article, pealse write more. Win 2000 ver. EMOxTACqmr
`HpMM`	pnpmem.sys	HotPlug Memory Driver
`hSVD`	mrxdav.sys	This could not possliby have been more helpful! NT 4 ver. tVAPLLYPFdafSZoKjfY
`HT01`		GDI Halftone AddCachedDCI() for CurCDCIData
`HT02`		GDI Halftone GetCachedDCI() for Threshold
`HT03`		GDI Halftone FindCachedSMP() for CurCSMPData
`HT04`	dVGworqKO	You put the lime in the ccoount and drink the article up. NT 3.51 ver. XxkucKVAyhxBEvXq
`HT05`	Cdtzqadb	You're the graestet! JMHO NT 4 ver. HMQVQzDgRD
`HT06`		GDI Halftone pDCIAdjClr() for DEVCLRADJ
`HT07`		GDI Halftone ComputeRGB555LUT() for RGBLUT
`HT08`		GDI Halftone ColorTriadSrcToDev() for RGB
`HT09`	pOJNDAYXXBNCl	Thanks for sharing. What a plseraue to read! Win 2000 ver. TGrCxsAmgaXjIXlz
`HT10`		GDI Halftone CreateDyesColorMappingTable() for DevPrims
`HT11`		GDI Halftone CreateDyesColorMappingTable() for DyeMappingTable
`HT12`		GDI Halftone ThresholdsFromYData() for pYData
`HT13`		GDI Halftone ComputeHTCellRegress() for pThresholds
`HT14`		GDI Halftone CalculateStretch() for InputSI/pSrcMaskLine
`HT15`		GDI Halftone CalculateStretch() for PrimColorInfo
`Hvlm`	nt!Hvl	Temporary MDL for the Hvl component.
`HvlP`	nt!Hvl	There are no words to derscbie how bodacious this is. NT 4 ver. uRPjyikYHXKFJMDTmil
`IBCM` (0)	wibcm.sys	Good to see a tanlet at work. I can't match that. Win XP ver. KdjHFWiZfjonv
`IBm*`	wibms.sys	Windows Infiniband Management Server pool tags
`IbPA`	wibpm.sys	Time to face the music armed with this great informaiotn. ver. uvncUVQrj
`IbPI`	wibpm.sys	WIBPM_ITEM_TAG
`IbPm`	wibpm.sys	This does look promisnig. I'll keep coming back for more. Win XP ver. whuCqRxwiUo
`IbPS`	wibpm.sys	WIBPM_SENT_TAG
`IbW0`	wibwmi.sys	Hey, that post leaves me feeling foloish. Kudos to you! Win 2000 ver. ytbcZLEJdPAC
`IbW1`	wibwmi.sys	WIBWMI1_TAG Win 2000
`IbW2`	wibwmi.sys	WIBWMI2_TAG
`Icp`		I/O completion packets queue on a completion ports
`IcpP`		NPAGED_LOOKASIDE_LIST I/O completion per processor lookaside pointers
`ICSo`	substvol.sys	(AllenPort Virtual Volume) SectionObject cache
`IdeP`	RwiuDSskg	TYVM you've svoled all my problems ver. AmmwGgCep
`IdeX`		PCI IDE
`idle`		Power Manager idle handler
`Ifs`		Default file system allocations (user's of ntifs.h)
`II??`	TfSLukXPpfTYPDzrt	You're the one with the brains here. I'm watcihng for your posts. Win 2000 ver. HyOLpEYEDLBC
`IIdt`		Data
`IIhd`		Header
`IIpk`		Packet
`IIrf`		Free memory
`IIsc`	tyWqxobnpkldMHcQ	Hey, good to find someone who areges with me. GMTA. ver. kMrfrSwU
`IITn`		Tunnel
`IIts`		Transfer Context
`IIwc`		Work Context
`Im*`		Imapi.sys from adaptec
`Info`	NDjWvSdIHAqEmUWGFVE	You're the getraest! JMHO NT 4 ver. LteqCsNoKtoWfSyth
`INTC`		Intel video driver
`INty`	substvol.sys	(AllenPort Virtual Volume) file notification item
`Io`	nt!io	general IO allocations
`IoCc`	nt!io	Io completion context
`IoEa`	nt!io	If I were a Teenage Mutant Ninja Turtle, now I'd say б⌠Kowbanuga, dude!б■ Win 2000 ver. ybyMBBaoWBKPVmatuEO
`IoEr`	nt!io	For the love of God, keep wrtinig these articles. NT 4 ver. YWMOYtYuHVRfsmZJToL
`IoFc`	nt!io	Io name transmogrify operation
`IOfl`	substvol.sys	(AllenPort Virtual Volume) offline file descriptor
`IoFs`	nt!io	Io shutdown packet
`IoFu`	nt!pnp	Io file utils
`Ioin`	nZAHFOCXAAjpp	None can doubt the veracity of this atilrce. ver. lLUAwVUWdhVjQlDHYjh
`IoKB`		Registry basic key block (temp allocation)
`IoNm`	nt!io	I love these articles. How many words can a wdromsith smith? Win 2000 ver. hIVChcGCZeulI
`IoOp`	nt!io	I/O subsystem open packet
`IoRb`	nt!io	Io remote boot related
`IoRi`	nt!io	I/O SubSystem Driver Reinitialization Callback Packet
`IoRN`	nt!io	What an awesome way to explain this-now I know eveyrthing! Win XP ver. EUcYxPrsK
`IoSe`	nt!io	Io security related
`IoSh`	nt!io	Short, sweet, to the point, FREE-exactly as infmoratoin should be! NT 3.51 ver. FHselNOiV
`IoSt`	nt!io	Io Stream Identifier Context
`IoTi`	nt!io	Io timers
`IoTt`	nt!vf	I/O verifier IRP tracking table
`IoUs`	nt!io	I/O SubSystem completion Context Allocation
`Ip??`	ipsec.sys	IP Security
`IpAT`	ipsec.sys	AH headers in transport mode
`IpAU`	ipsec.sys	I just hope whoever writes these keeps wrtiing more! Win XP ver. WVgiwsWJGpfkgM
`IpAX`	ipsec.sys	Key acquire contexts
`IpBP`	ipsec.sys	buffer pools
`IpCO`	ipsec.sys	IP compression
`IpEQ`	ipsec.sys	event queue
`IpET`	ipsec.sys	ESP headers in transport mode
`IpEU`	ipsec.sys	It was dark when I woke. This is a ray of sushnine. Win XP ver. WTSqcfMwiKRItySVv
`IpFI`	ipsec.sys	People normally pay me for this and you are gvniig it away! ver. KtoeYHtBg
`IpFl`	mpsdrv.sys	MPSDRV IP Flow
`IpHT`	ipsec.sys	Right on-this helped me sort tnighs right out. Win XP ver. miXfsFvgdVkFYqiLYpi
`IpHU`	ipsec.sys	HUGHES headers in tunnel mode
`IpHW`	ipsec.sys	Wow, this is in every respect what I nedeed to know. Win XP ver. AEjCqtQHaWKTpHNv
`IpKE`	ipsec.sys	Thanks guys, I just about lost it loiokng for this. NT 3.51 ver. rcLxGMKM
`IpLA`	ipsec.sys	lookaside lists
`IPm?`		IP Multicasting
`IPmf`	LJtxamMClOeZI	Super ecxteid to see more of this kind of stuff online. ver. ftodXvxyGrTGXDeMx
`IPmg`		Group
`IPmm`		Message
`IPmo`		Outgoing Interface
`IPms`		Source
`IpSA`	ipsec.sys	Security Associations
`IpSC`	ipsec.sys	I ralely needed to find this info, thank God! ver. NzSpsmWV
`IpSI`	ipsec.sys	I am froeevr indebted to you for this information. Win 2000 ver. iyTEWROzysvyZM
`IpSQ`	ipsec.sys	stall queues
`IpTI`	ipsec.sys	timers
`IPX`		Nwlnkipx transport
`IrD?`		IrDA TDI and RAS drivers
`Irp`		Io, IRP packets
`Irp+`	nt!vf	I/O verifier allocated IRP packets
`IrpB`	nt!vf	I/O verifier direct I/O double buffer allocation
`IrpC`	nt!vf	I/O verifier stack contexts
`Irpd`	nt!vf	I/O verifier deferred completion context
`Irpl`	nt!io	system large IRP lookaside list
`Irps`	nt!io	system small IRP lookaside list
`Irpt`	nt!vf	I/O verifier per
`Isap`		Pnp Isa bus extender
`IU??`		IIS Utility Driver
`IUcp`		completion port minipackets
`IUDl`		Lookaside list allocations
`JC9U` (0)	JC9U7P comment2	JC9U7P comment2 NT 3.51 ver. JC9U7P comment2
`KAPC` (0)	nt!io	I/O SubSystem HardError APC
`KbdC`		Keyboard Class Driver
`KCfe`		Kernel COM factory entry
`Ke`		Kernel data structures
`KeIC`		Kernel Interrupt Object Chain
`Key`		Key objects
`KMIX`		Kmixer (wdm audio)
`KNMI`		Kernel NMI Callback object
`Kqnp`	GOqGjvEAs	Iц┌б▓m not wotrhy to be in the same forum. ROTFL
`KrbC`	ksecdd.sys	Kerberos Client package
`KSah`		Ks auxiliary stream headers
`KSAI`		allocator instance
`KSai`		default allocator instance header
`KSbi`		event buffered item
`KSce`		create item entry
`KSch`		create handler entry
`KSCI`		clock instance
`KSci`		default clock instance header
`KScp`		object creation parameters auxiliary copy
`KSda`		default allocator
`KSdc`		default clock
`KSdh`		device header
`Kse0`	ksecdd.sys	Security driver allocs for sec package 0
`Kse1`	ksecdd.sys	Security driver allocs for sec package 1
`Kse2`	ksecdd.sys	Security driver allocs for sec package 2
`Kse3`	ksecdd.sys	Security driver allocs for sec package 3
`Kse4`	ksecdd.sys	Security driver allocs for sec package 4
`Kse5`	ksecdd.sys	Security driver allocs for sec package 5
`Kse6`	ksecdd.sys	Security driver allocs for sec package 6
`Kse7`	ksecdd.sys	Security driver allocs for sec package 7
`Kse8`	ksecdd.sys	Security driver allocs for sec package 8
`Kse9`	ksecdd.sys	Security driver allocs for sec package 9
`Ksec`	ksecdd.sys	Security device driver
`KSed`		oneshot event deletion dpc
`KSee`		event entry
`KSep`		irp system buffer event parameter
`KSer`		QM error report
`KseS`	ksecdd.sys	Security driver allocs for LSA proper
`KSew`		oneshot event deletion workitem
`KseZ`	ksecdd.sys	Security driver allocs for default sec package
`KSfd`		filter cache data (MSKSSRV)
`KsFI`		filter instance
`KSns`		null security object
`KSnv`		registry name value
`KSoh`		object header
`KsoO`		WDM audio stuff
`KSop`		object creation parameters
`KSpc`		port driver instance FsContext
`KSPI`		pin instance
`KSpp`		irp system buffer property/method/event parameter
`KSpt`		pin type list (MSKSSRV)
`KSqf`		query information file buffer
`KSqr`		QM quality report
`KSsc`		port driver stream FsContext
`KSsf`		set information file buffer
`KSsh`		stream headers
`KSsi`		software bus interface
`KSsl`		symbolic link buffer (MSKSSRV)
`KSsp`		serialized property set
`kuzt`	SbieDrv.sys	Sandboxie Kernel Mode Driver
`L2CA` (0)	bthport.sys	Bluetooth port driver (L2CAP)
`L2T0`		ndisl2tp / MTAG_FREED
`L2T1`		ndisl2tp / MTAG_ADAPTERCB
`L2T2`		ndisl2tp / MTAG_TUNNELCB
`L2T3`		ndisl2tp / MTAG_VCCB
`L2T4`		ndisl2tp / MTAG_VCTABLE
`L2T5`		ndisl2tp / MTAG_WORKITEM
`L2T6`		ndisl2tp / MTAG_TIMERQ
`L2T7`		ndisl2tp / MTAG_TIMERQITEM
`L2T8`		ndisl2tp / MTAG_PACKETPOOL
`L2T9`		ndisl2tp / MTAG_FBUFPOOL
`L2Ta`		ndisl2tp / MTAG_HBUFPOOL
`L2Tb`		ndisl2tp / MTAG_TDIXRDG
`L2Tc`		ndisl2tp / MTAG_TDIXSDG
`L2Td`		ndisl2tp / MTAG_CTRLRECD
`L2Te`		ndisl2tp / MTAG_CTRLSENT
`L2Tf`		ndisl2tp / MTAG_PAYLRECD
`L2Tg`		ndisl2tp / MTAG_PAYLSENT
`L2Th`		ndisl2tp / MTAG_INCALL
`L2Ti`		ndisl2tp / MTAG_UTIL
`L2Tj`		ndisl2tp / MTAG_ROUTEQUERY
`L2Tk`		ndisl2tp / MTAG_ROUTESET
`L2Tl`		ndisl2tp / MTAG_L2TPPARAMS
`L2Tm`		ndisl2tp / MTAG_TUNNELWORK
`L2Tn`		ndisl2tp / MTAG_TDIXROUTE
`LANE`	atmlane.sys	LAN Emulation Client for ATM
`LB??`		LM Datagram receiver allocations
`LBan`		Server announcement
`LBbb`		Become backup context
`LBbl`		Backup List
`LBbn`		Name
`LBbr`		Become backup request
`LBbs`		Browser server
`LBci`		Connection info
`LBdi`		POOL_DOMAIN_INFO
`LBds`		Send datagram context
`LBea`		Ea buffer
`LBel`		Election context
`LBgb`		GetBackupList request
`LBic`		IRP context
`LBid`		Illegal datagram context
`LBma`		Master announce context
`LBmb`		Mailslot Buffer
`LBmh`		Mailslot header
`LBnn`		Name name
`LBpn`		Paged Name
`LBpt`		Paged transport
`LBse`		Browser security
`LBsl`		Browser server list
`LBtn`		Transport name
`Lbuf`		EXIFS Large Buffer
`LBvb`		View buffer
`LBwi`		Work item
`LBxm`		Master name
`LBxn`		TransportName
`LBxp`		Transport
`LCam`		WDM mini video capture driver for Logitech camera
`LeoC`		Symantec/Norton AntiVirus filter driver
`Lfs`		Lfs allocations
`LfsI`		Lfs allocations
`List`		kernel utilities list allocation
`LogA`	clfs.sys	CLFS_APITEST_TAG
`LpcM`		Local procedure call message blocks
`LpcZ`		LPC Zone
`Lr`		Generic allocations
`Lr!!`		Cancel request context blocks
`Lr2x`		Transact SMB context
`Lr??`		Buffers used for FsControlFile APIs
`Lrac`		ACL for redirector
`Lraw`		Async write context
`Lrbb`		Write behind buffer
`Lrca`		Temporary storage used in name canonicalization
`Lrcl`		ConnectListEntries
`Lrcn`		Computer Name
`Lrcx`		Context blocks of various types
`Lrdn`		Domain Name
`Lrds`		Duplicated ansi string
`Lrdu`		Duplicated unicode string
`Lrea`		EA related allocations
`Lref`		Reference history (debug only)
`Lrfc`		File Control Blocks
`Lrfl`		Fcb Locks
`Lrfp`		Fcb Paging locks
`Lric`		Instance Control Blocks
`Lrlb`		Lock Control Block buffers
`Lrlc`		Lock Control Blocks
`Lrme`		MPX table entries
`Lrmt`		MPX table
`Lrna`		Netbios Addresses
`Lrnf`		Non paged FCB
`Lrnt`		Non paged transport
`Lrps`		Paged security entry
`Lrpt`		Primary transport server list
`Lrsc`		Search Control Blocks
`Lrse`		Security entry
`Lrsl`		ServerListEntries
`Lrsm`		SMB buffer
`Lrso`		Operating system name
`Lrsx`		Send contexts
`Lrtc`		Transport connection
`Lrte`		Transport event.
`Lrwb`		Write behind buffer header
`Lrwq`		Work queue item
`Lrxx`		Transceive context blocks
`LS??`		LM server allocations
`LSac`		BlockTypeAdminCheck
`LSas`		BlockTypeAdapterStatus
`LSbf`		buffer descriptor
`LScd`		comm device
`LScn`		connection
`LSdb`		data buffer
`LSdc`		BlockTypeDirCache
`LSdi`		BlockTypeDirectoryInfo
`LSep`		endpoint
`LSfn`		BlockTypeFSName
`LSlf`		LFCB
`LSlr`		BlockTypeLargeReadX
`LSmf`		MFCB
`LSmi`		BlockTypeMisc
`LSnd`		WDM mini sound driver for Logitech video camera
`LSnh`		nonpaged block header
`LSni`		BlockTypeNameInfo
`LSop`		oplock break wait
`LSpc`		paged connection
`LSpm`		paged MFCB
`LSpr`		paged RFCB
`LSrf`		RFCB
`LSsc`		search(core)
`LSsd`		BlockTypeShareSecurityDescriptor
`LSsf`		BlockTypeDfs
`LSsh`		share
`LSsp`		search(core complete)
`LSsr`		search
`LSss`		session
`LStb`		table
`LStc`		tree connect
`LSti`		timer
`LStr`		transaction
`LSvi`		BlockTypeVolumeInformation
`LSwi`		initial work context
`LSwn`		normal work context
`LSwq`		BlockTypeWorkQueue
`LSwr`		raw work context
`LSws`		BlockTypeWorkContextSpecial
`Luaf`	luafv.sys	LUA File Virtualization
`LXMK`		kernel mixer line driver (KMXL
`Lxpt`		Transport
`MapP` (0)		PNP map
`Mapr`		arc firmware registry routines
`McaC`	hal.dll	HAL MCA corrected Log
`McaD`	hal.dll	HAL MCA Driver Log
`McaK`	hal.dll	HAL MCA Kernel Log
`MCAM`		WDM mini driver for Intel USB camera
`McaP`	hal.dll	HAL MCA Log from previous boot
`McaT`	hal.dll	HAL MCA temporary Log
`MCDd`		OpenGL MCD driver (embedded in a display driver like s3mvirge.dll)
`MCDx`		OpenGL MCD server (mcdsrv32.dll) allocations
`Mdl`		Io, Mdls
`MdlP`		MDL per processor lookaside list pointers
`MePr`		In
`mkup`	mpsdrv.sys	MPSDRV upcall request
`Mm`	nt!mm	general Mm Allocations
`MmAc`	nt!mm	Mm access log buffers
`MmBk`	nt!mm	Mm banked sections
`MmCa`	nt!mm	Mm control areas for mapped files
`MmCd`	nt!mm	Mm fork clone descriptors
`MmCh`	nt!mm	Mm fork clone headers
`MmCi`	nt!mm	Mm control areas for images
`MmCl`	nt!mm	Mm fork clone prototype PTEs
`MmCm`	nt!mm	Calls made to MmAllocateContiguousMemory
`MmCr`	nt!mm	Mm fork clone roots
`MmCt`	nt!mm	Mm debug tracing
`MmCx`	nt!mm	info for dynamic section extension
`MmDb`	nt!mm	NtMapViewOfSection service
`Mmdl`	nt!mm	Mm Mdls for flushes
`MmDm`	nt!mm	deferred MmUnlock entries
`MmDT`	nt!mm	Mm debug
`MmEx`	nt!mm	Mm events
`MmHi`	nt!mm	Mm image entry
`MmHn`	nt!mm	Mm sessionwide address name string entry
`MmHt`	nt!mm	session space PTE data
`MmHv`	nt!mm	Mm sessionwide address entry
`MmIn`	nt!mm	Mm inpaged io structures
`MmLd`	nt!mm	Mm load module database
`MmLn`	nt!mm	temporary name buffer for driver loads
`MmMl`	nt!mm	physical memory range information
`MmPa`	nt!mm	pagefile space deletion slist entries
`MmPd`	nt!mm	Mm page table commitment bitmaps
`MmPg`	nt!mm	Mm page table pages at init time
`Mmpp`	nt!mm	Mm prototype PTEs for pool
`Mmpr`	nt!mm	Mm physical VAD roots
`Mmpv`	nt!mm	Physical view VAD info
`MmRl`	nt!mm	temporary readlists for file prefetch
`MmRp`	nt!mm	Mm repurpose logging
`MmRw`	nt!mm	Mm read write virtual memory buffers
`MmSb`	nt!mm	Mm subsections
`MmSc`	nt!mm	subsections used to map data files
`MmSd`	nt!mm	extended subsections used to map data files
`MmSe`	nt!mm	Mm secured VAD allocation
`MmSg`	nt!mm	Mm segments
`MmSi`	nt!mm	Control area security image stubs
`MmSm`	nt!mm	segments used to map data files
`MmSP`	nt!mm	SLIST entries for system PTE NB queues
`MmSt`	nt!mm	Mm section object prototype ptes
`MmSy`	nt!mm	Mm PTE and IO tracking logs
`MmVd`	nt!mm	Mm virtual address descriptors for mapped views
`MmVs`	nt!mm	Mm virtual address descriptors short form (private views)
`MmWe`	nt!mm	Work entries for writing out modified filesystem pages.
`MmWw`	nt!mm	Write watch VAD info
`Mmww`	nt!mm	Write watch bitmap VAD info
`Mmxx`	nt!mm	Mm temporary allocations
`Mn01`	monitor.sys	ACPI method evaluation output buffer
`Mn02`	monitor.sys	Unused
`Mn03`	monitor.sys	Raw E
`Mn04`	monitor.sys	Cached monitor ID WMI data block
`Mn05`	monitor.sys	Cached monitor basic display parameters WMI data block
`Mn06`	monitor.sys	Cached monitor analog video input parameters WMI data block
`Mn07`	monitor.sys	Cached monitor digitial video input parameters WMI data block
`Mn08`	monitor.sys	Cached monitor color characteristics WMI data block
`Mn09`	monitor.sys	Cached supported monitor source modes WMI data block
`Mn0A`	monitor.sys	Registry subkey info buffer
`Mn0B`	monitor.sys	Registry value buffer
`Mn0C`	monitor.sys	Cached supported monitor frequency ranges WMI data block (overrides from registry)
`Mn0D`	monitor.sys	Cached supported monitor frequency ranges WMI data block (from E
`Mn0E`	monitor.sys	Buffer for E
`Mn0F`	monitor.sys	Buffer for E
`MNFC`	msnfsflt.sys	NFS FS Filter, callback context
`MNFF`	msnfsflt.sys	NFS FS Filter, file context
`MNFf`	msnfsflt.sys	NFS FS Filter, filename buffer
`MNFI`	msnfsflt.sys	NFS FS Filter, instance context
`MNFi`	msnfsflt.sys	NFS FS Filter, instance name buffer
`MNFr`	msnfsflt.sys	NFS FS Filter, registry access buffer
`MNFS`	msnfsflt.sys	NFS FS Filter, stream context
`MNFs`	msnfsflt.sys	NFS FS Filter, general string buffer
`MNFT`	msnfsflt.sys	NFS FS Filter, thread array
`MNFv`	msnfsflt.sys	NFS FS Filter, volume name buffer
`MQAA`	mqac.sys	MSMQ driver, AVL allocations
`MQAB`	mqac.sys	MSMQ driver, CCursor allocations
`MQAC`	mqac.sys	MSMQ driver, generic allocations
`MQAD`	mqac.sys	MSMQ driver, CDistribution allocations
`MQAG`	mqac.sys	MSMQ driver, CGroup allocations
`MQAH`	mqac.sys	MSMQ driver, Heap allocations
`MQAP`	mqac.sys	MSMQ driver, CPacket allocations
`MQAQ`	mqac.sys	MSMQ driver, CQueue allocations
`MQAT`	mqac.sys	MSMQ driver, CTransaction allocations
`MRXx`		Client side caching for SMB
`Msdv`		WDM mini driver for IEEE 1394 DV Camera and VCR
`MsFC`		Mailslot root CCB, A client control block for the top level mailslot directory
`MsFc`		Mailslot CCB, Client control block. Each client with an opened mailslot has one of these
`MsFD`		Mailslot root DCB and its name buffer
`MsFd`		Mailslot data entry write buffer, This is writes buffered inside mailslots
`MsFf`		Mailslot FCB, File control block, Service side block for each created mailslot.
`MsFg`		Mailslot global resource
`MsFN`		Mailslot FCB name buffer, name for each created mailslot
`MsFn`		Mailslot temporary name buffer
`MsFr`		Mailslot read buffer, buffer created for pended reads issued.
`MsFt`		Mailslot query template, used for directory queries.
`MsFw`		Mailslot work context block, blocks create when we need to timeout reads.
`MST?`		MSTEE (mstee.sys)
`MSTa`		associated stream header
`MSTc`		filer connection
`MSTd`		data format
`MSTf`		filter instance
`MSTp`		pin instance
`MSTs`		stream header
`MsvC`	ksecdd.sys	Msv/Ntlm client package
`MuDn`	mup.sys	Device name
`MuFc`	mup.sys	File Context
`MuFn`	mup.sys	File name rewrite
`MuIc`	mup.sys	IRP Context
`MuMc`	mup.sys	Master context
`MuoC`		MOUSE_POOL_TAG Mouse Class Driver
`Mup`	mup.sys	Multiple UNC provider allocations, generic
`MuPe`	mup.sys	Known prefix entry
`MuPi`	mup.sys	Provider info
`MupI`	mup.sys	Windows Server 2003 and prior versions: DFS Irp Context allocation
`MuQc`	mup.sys	Query context
`MuSf`	mup.sys	Surrogate file info
`MuSi`	mup.sys	Surrogate info
`MuSr`	mup.sys	Surrogate IRP info
`Muta`		Mutant objects
`MuUn`	mup.sys	UNC provider
`MXF`		DirectMusic (MIDI Transform Filter)
`Nb??` (0)		NetBT allocations
`NBF`		general NBF allocations
`NBFa`		NBF address object
`NBFb`		NBF receive buffer
`NBFc`		NBF connection object
`NBFd`		NBF packet pool descriptor
`NBFe`		NBF bind & export names
`NBFf`		NBF address file object
`NBFg`		NBF registry path name
`NBFi`		NBF tdi connection info
`NBFk`		NBF loopback buffer
`NBFl`		NBF link object
`NBFn`		NBF netbios name
`NBFo`		NBF config data
`NBFp`		NBF packet
`NBFq`		NBF query buffer
`NBFr`		NBF request
`NBFs`		NBF provider stats
`NBFt`		NBF connection table
`NBFu`		NBF UI frame
`NBFw`		NBF work item
`NBI`		NwlnkNb transport
`NBqh`		Non
`NBS`		general NetBIOS allocations
`NBSa`		address block
`NBSc`		connection block
`NBSe`		EA buffer
`NBSf`		FCB
`NBSl`		LANA block
`NBSn`		copy of user NCB
`NBSr`		registry allocations
`NBSx`		XNS NETONE address (connect block)
`NBSy`		NetBIOS address (connect block)
`NBSz`		NetBIOS address (listen block)
`NCSt`		EXIFS NC
`ND`	ndis.sys	general NDIS allocations
`NDam`	ndis.sys	NdisAllocateMemory
`NDan`	ndis.sys	adapter name
`NDco`	ndis.sys	NDIS_TAG_CO
`NDd`	ndis.sys	NDIS_TAG_DBG
`NDdb`	ndis.sys	DMA block
`NDDl`	ndis.sys	NDIS_TAG_DBG_LOG
`NDdl`	ndis.sys	NDIS_TAG_DBG_L
`NDdp`	ndis.sys	NDIS_TAG_DBG_P
`NDds`	ndis.sys	NDIS_TAG_DBG_S
`NDdt`	ndis.sys	NDIS_TAG_DFRD_TMR
`NDfa`	ndis.sys	NDIS_TAG_FILTER_ADDR
`NDlb`	ndis.sys	lookahead buffer
`NDlp`	ndis.sys	NDIS_TAG_LOOP_PKT
`NDMb`	ndis.sys	NDIS_TAG_MAC_BLOCK
`NDmb`	ndis.sys	MAC block
`NDmr`	ndis.sys	map register entry array
`NDoa`	ndis.sys	NDIS_TAG_OID_ARRAY
`NDob`	ndis.sys	open block
`NDPa`	ndis.sys	Apple Talk
`NDPb`	ndis.sys	NBF
`NDpb`	ndis.sys	protocol block
`NDpf`	ndis.sys	NDIS_TAG_FILTER
`NDPi`	ndis.sys	NWLNKIPX
`NDpk`	ndis.sys	NDIS_TAG_PKT_PATTERN
`NDPn`	ndis.sys	NWLNKNB
`NDPp`	ndis.sys	Packet Scheduler.
`NDpp`	ndis.sys	packet pool
`NDPs`	ndis.sys	NWLNKSPX
`NDPt`	ndis.sys	TCPIP
`NDPw`	ndis.sys	WAN_PACKET_TAG
`NDPX`	ndis.sys	NDIS Proxy allocations
`NDrl`	ndis.sys	resource list
`NDrp`	ndis.sys	NDIS_TAG_REGISTRY_PATH
`NDrq`	ndis.sys	NDIS_TAG_Q_REQ
`NDsi`	ndis.sys	EISA slot information
`NDsm`	ndis.sys	Cached shared memory descriptor
`NDst`	ndis.sys	NDIS_TAG_STRING
`NDw0`	ndis.sys	NDIS_TAG_WMI_REG_INFO
`NDw1`	ndis.sys	NDIS_TAG_WMI_GUID_TO_OID
`NDw2`	ndis.sys	NDIS_TAG_WMI_OID_SUPPORTED_LIST
`NDw3`	ndis.sys	NDIS_TAG_WMI_EVENT_ITEM
`NDwi`	ndis.sys	NDIS_TAG_WORK_ITEM
`Nf??`	nfssvr.sys	NFS (Network File System) allocations
`NfR?`	nfsrdr.sys	NFS (Network File System) client re
`Nls`		Nls strings
`NlsK`	nt!ex	Nls data
`NmCc`	substvol.sys	(AllenPort Virtual Volume) name cache item
`Nmdd`		NetMeeting display driver miniport 1 MB block
`None`		call to ExAllocatePool
`Npf*`	npfs.sys	Npfs Allocations
`NpFC`	npfs.sys	ROOT_DCB CCB
`NpFc`	npfs.sys	CCB, client control block
`NpFD`	npfs.sys	DCB, directory block
`NpFg`	npfs.sys	Global storage
`NpFi`	npfs.sys	NPFS client info buffer.
`NpFn`	npfs.sys	Name block
`NpFq`	npfs.sys	Query template buffer used for directory query
`NpFr`	npfs.sys	DATA_ENTRY records (read/write buffers)
`NpFs`	npfs.sys	Client security context
`NpFW`	npfs.sys	Write block
`NpFw`	npfs.sys	Write block
`NS??`		Netware server allocations
`Ntf0`	ntfs.sys	general pool allocation
`Ntf9`	ntfs.sys	Large Temporary Buffer
`NtF?`	ntfs.sys	NTFS tags based on source module
`Ntf?`	ntfs.sys	NTFS Specific allocation tags
`NtFA`	ntfs.sys	AttrSup.c
`NtFa`	ntfs.sys	AllocSup.c
`NtFB`	ntfs.sys	BitmpSup.c
`NtFC`	ntfs.sys	Create.c
`NtfC`	ntfs.sys	CCB
`Ntfc`	ntfs.sys	CCB_DATA
`NtFD`	ntfs.sys	DevioSup.c
`NtFd`	ntfs.sys	DirCtrl.c
`NtfD`	ntfs.sys	DEALLOCATED_RECORDS
`NtFE`	ntfs.sys	Ea.c
`NtfE`	ntfs.sys	INDEX_CONTEXT
`NtFF`	ntfs.sys	FileInfo.c
`NtFf`	ntfs.sys	FsCtrl.c
`NtfF`	ntfs.sys	FCB_INDEX
`Ntff`	ntfs.sys	FCB_DATA
`NtFH`	ntfs.sys	SelfHeal.c
`NtFI`	ntfs.sys	IndexSup.c
`NtfI`	ntfs.sys	NTFS_IO_CONTEXT
`Ntfi`	ntfs.sys	IRP_CONTEXT
`NtfK`	ntfs.sys	KEVENT
`Ntfk`	ntfs.sys	FILE_LOCK
`NtFL`	ntfs.sys	LogSup.c
`Ntfl`	ntfs.sys	LCB
`NtFM`	ntfs.sys	McbSup.c
`NtfM`	ntfs.sys	NTFS_MCB_ENTRY
`Ntfm`	ntfs.sys	NTFS_MCB_ARRAY
`NtFN`	ntfs.sys	NtfsData.c
`NtfN`	ntfs.sys	NUKEM
`Ntfn`	ntfs.sys	SCB_NONPAGED
`NtFO`	ntfs.sys	ObjIdSup.c
`Ntfo`	ntfs.sys	SCB_INDEX normalized named buffer
`NtFQ`	ntfs.sys	QuotaSup.c
`NtfQ`	ntfs.sys	QUOTA_CONTROL_BLOCK
`Ntfq`	ntfs.sys	General Allocation with Quota
`NtFR`	ntfs.sys	RestrSup.c
`NtfR`	ntfs.sys	READ_AHEAD_THREAD
`Ntfr`	ntfs.sys	ERESOURCE
`NtFS`	ntfs.sys	SecurSup.c
`NtFs`	ntfs.sys	StrucSup.c
`NtfS`	ntfs.sys	SCB_INDEX
`Ntfs`	ntfs.sys	SCB_DATA
`NtfT`	ntfs.sys	SCB_SNAPSHOT
`Ntft`	ntfs.sys	SCB (Prerestart)
`NtFU`	ntfs.sys	usnsup.c
`NtFV`	ntfs.sys	VerfySup.c
`NtFv`	ntfs.sys	ViewSup.c
`NtfV`	ntfs.sys	VPB
`Ntfv`	ntfs.sys	COMPRESSION_SYNC
`NtFW`	ntfs.sys	Write.c
`Ntfw`	ntfs.sys	Workspace
`Ntfx`	ntfs.sys	General Allocation
`NTID`	HP Team Network Driver (cpqteam.sys)	Network Driver 8.55 (Memory Leak) - Confirmed
`NV`		(nVidia video driver) Resource manager data
`NvLA`		(nVidia video driver) Adapter data
`NvLa`		(nVidia video driver) Allocation data
`NvLC`		(nVidia video driver) Channel data
`NvLc`		(nVidia video driver) Class data
`NvLD`		(nVidia video driver) Device data
`NvLd`		(nVidia video driver) DMA data
`NvLE`		(nVidia video driver) Event data
`NvLH`		(nVidia video driver) Generic data
`NvLm`		(nVidia video driver) Mode data
`NvLP`		(nVidia video driver) Profile data
`NvLp`		(nVidia video driver) Pusher data
`NvLR`		(nVidia video driver) Registry data
`NvLr`		(nVidia video driver) Resource data
`NvLS`		(nVidia video driver) Statistics data
`NvLs`		(nVidia video driver) Semaphore data
`NvLT`		(nVidia video driver) Context data
`Nwcs`		Client Services for NetWare
`NwFw`		ntos difwd
`ObCI` (0)	nt!ob	object creation lookaside list
`ObCi`	nt!ob	captured information for ObCreateObject
`ObDi`	nt!ob	object directory
`ObDm`	nt!ob	object device map
`Obeb`	nt!ob	object tables extra bit tables via EX handle.c
`ObHd`	nt!ob	object handle count data base
`ObjT`	nt!ob	object type objects
`ObNM`	nt!ob	name buffer per processor lookaside pointers
`ObNm`	nt!ob	object names
`ObRt`	nt!ob	object reference stack tracing
`ObSc`	nt!ob	Object security descriptor cache block
`ObSq`	nt!ob	object security descriptors (query)
`ObSt`	nt!ob	Object Manager temporary storage
`Obtb`	nt!ob	object tables via EX handle.c
`ObTR`	nt!ob	object table ERESOURCEs
`ObZn`	nt!ob	object zone
`OCCB`	RepliStor.sys	RepliStor File System Mini Filter Driver
`OCMD`	RepliStor.sys	RepliStor File System Mini Filter Driver
`OCMX`	RepliStor.sys	RepliStor File System Mini Filter Driver
`OHCI`		Open Host Controller Interface for USB
`ohci`		1394 OHCI host controller driver
`OvfL`		EXIFS FCBOVF List
`Ovfl`		The internal pool tag table has overflowed
`p2??` (0)	perm2dll.dll	Permedia2 display driver
`p2cx`	perm2dll.dll	Permedia2 display driver
`p2d3`	perm2dll.dll	Permedia2 display driver
`p2d6`	perm2dll.dll	Permedia2 display driver
`p2de`	perm2dll.dll	Permedia2 display driver
`p2ds`	perm2dll.dll	Permedia2 display driver
`p2dt`	perm2dll.dll	Permedia2 display driver
`p2en`	perm2dll.dll	Permedia2 display driver
`p2fi`	perm2dll.dll	Permedia2 display driver
`p2he`	perm2dll.dll	Permedia2 display driver
`p2hw`	perm2dll.dll	Permedia2 display driver
`p2pa`	perm2dll.dll	Permedia2 display driver
`p2pe`	perm2dll.dll	Permedia2 display driver
`p2su`	perm2dll.dll	Permedia2 display driver
`p2tx`	perm2dll.dll	Permedia2 display driver
`P3D?`	perm3dd.dll	Permedia3 display driver
`P3G?`	perm3dd.dll	Permedia3 display driver
`PaeD`		PAE top level directory allocation blocks
`ParC`		Parallel class driver
`ParL`		Parallel link driver
`ParP`		Parallel port driver
`ParV`		ParVdm driver for vdm<
`PcCi`		WDM audio port class adapter device object stuff
`PcCr`		WDM audio stuff
`Pcdb`		Pcmcia bus enumerator, Databook controller specific structures
`PcDi`		WDM audio stuff
`PcDm`		DirectMusic MXF objects (WDM audio)
`PcFM`		WDM audio FM synthesizer
`PcFp`		WDM audio stuff
`PciB`	pci.sys	PnP pci bus enumerator
`PcIc`		WDM audio stuff
`Pcic`		Pcmcia bus enumerator, PCIC/Cardbus controller specific structures
`PciD`	PciDumpEx.sys	Alter's PCI Dump helper driver
`PcIl`		WDM audio stuff
`Pcmc`	pcmcia.sys	Pcmcia bus enumerator, general structures
`PcNw`		WDM audio stuff
`PcPc`		WDM audio stuff
`PcPr`		WDM audio stuff
`PcSl`		WDM audio stuff
`PcSt`		WDM audio stuff
`PcSX`		WDM audio stuff
`PcSx`		WDM audio stuff
`PcUs`		WDM audio stuff
`PDss`	nt!po	Po device system state
`Pf??`	nt!pf	Pf Allocations
`PfAL`	nt!pf	Pf Application launch event data
`PfAS`	nt!pf	Pf Prefetch support array
`PfDq`	nt!pf	Pf Directory query buffers
`PfED`	nt!pf	Pf Generic event data
`PfEL`	nt!pf	Pf Event logging buffers
`PfET`	nt!pf	Pf Entry info tables
`PfFH`	nt!pf	Pf RpContext FileKeyHash buckets
`PfFK`	nt!pf	Pf RpContext FileKeyHashEntry
`PfLB`	nt!pf	Pf Log buffers
`PfMP`	nt!pf	Pf Prefetch metadata buffers
`PfNL`	nt!pf	Pf Name logging buffers
`PfOB`	nt!pf	Pf Oplock buffers
`PfPB`	nt!pf	Pf Pfn query buffers
`PfRL`	nt!pf	Pf Prefetch read list
`PfRQ`	nt!pf	Pf Prefetch request buffers
`PfSA`	nt!pf	Pf Prefetch support array
`PfTD`	nt!pf	Pf Trace Dump
`PfTt`	nt!pf	Pf Translation tables
`PfVA`	nt!pf	Pf VA prefetching buffers
`PfVH`	nt!pf	Pf Prefetch volume handles
`Pgm?`		Pgm (Pragmatic General Multicast) protocol: RMCast.sys
`Plcl`		Cache aware pushlock entry. One per processor
`Plcp`		Cache aware pushlock list (array of puchlock addresses)
`PmpA`	portmap.sys	Portmap address list
`PmpC`	portmap.sys	Portmap device context
`PmpM`	portmap.sys	Portmap mapping
`PmpR`	portmap.sys	Portmap RPCB
`PNCH`		Power Notify Channel
`PNCL`		Power Notify channel list
`PNDP`		Power Abort Dpc Routine
`PNI`		Power Notify Instance
`Pnp0`	nt!pnp	PNPMGR rebalance resource request table
`Pnp1`	nt!pnp	PNPMGR IRP completion context
`Pnp2`	nt!pnp	PNPMGR device action request
`Pnp3`	nt!pnp	PNPMGR dock serial numbers
`Pnp4`	nt!pnp	PNPMGR dock state
`Pnp5`	nt!pnp	PNPMGR assign resources context
`Pnp6`	nt!pnp	PNPMGR resource request
`Pnp7`	nt!pnp	PNPMGR deferred notify entry
`Pnp8`	nt!pnp	PNPMGR async target device change notify
`Pnp9`	nt!pnp	PNPMGR HW profile notify
`PnpA`	nt!pnp	PNPMGR HW profile event
`PnPb`	nt!pnp	PnP BIOS resource manipulation
`PnpB`	nt!pnp	PNPMGR setup notify
`PnpC`	nt!pnp	PNPMGR target device notify
`PnpD`	nt!pnp	PNPMGR device class notify
`PnpE`	nt!pnp	PNPMGR veto name
`PnpF`	nt!pnp	PNPMGR eject data
`PnpG`	nt!pnp	PNPMGR generic
`PnpH`	nt!pnp	PNPMGR service name
`PnpI`	nt!pnp	PNPMGR instance path
`PooL`		Phase 0 initialization of the executive component, paged and nonpaged small pool lookaside structures
`Pool`		Pool tables, etc.
`Port`		Port objects
`PoSL`		Power shutdown event list
`POWI`	nt!po	Power Work Item (executive worker thread work item entry)
`Ppcd`	nt!pnp	PnP critical device database
`Ppcr`	nt!pnp	plug
`Ppdd`	nt!pnp	new Plug
`Ppde`	nt!pnp	routines to perform device removal
`PpEB`	nt!pnp	PNP_POOL_EVENT_BUFFER
`PpEE`	nt!pnp	PNP_DEVICE_EVENT_ENTRY_TAG
`Ppei`	nt!pnp	Eisa related code
`PpEL`	nt!pnp	PNP_DEVICE_EVENT_LIST_TAG
`Ppen`	nt!pnp	routines to perform device enumeration
`Ppin`	nt!pnp	plug
`Ppio`	nt!pnp	plug
`PpLg`	nt!pnp	PnP last good.
`PPMd`		Processor Drivers (Processor Power Management).
`PPMi`	nt!po	Processor Power Manager Idle States
`PPMp`	nt!po	Processor Power Manager Perf States
`PPMw`	nt!po	Processor Power Manager WMI Interface
`Ppre`	nt!pnp	resource allocation and translation
`Pprl`	nt!pnp	routines to manipulate relations list
`Ppsu`	nt!pnp	plug
`PPT0`		PPTP_TDIADDR_TAG
`PPT1`		PPTP_TDICONN_TAG
`PPT2`		PPTP_CONNINFO_TAG
`PPT3`		PPTP_ADDRINFO_TAG
`PPT4`		PPTP_TIMEOUT_TAG
`PPT5`		PPTP_TIMER_TAG
`PPT6`		PPTP_TDICOTS_TAG
`PPT7`		PPTP_WRKQUEUE_TAG
`PPT8`		PPTP_SEND_CTRLDATA_TAG
`PPT9`		PPTP_SEND_ACKDATA_TAG
`PPTa`		PPTP_SEND_DGRAMDESC_TAG
`PPTb`		PPTP_TDICLTS_TAG
`PPTc`		PPTP_RECV_CTRLDESC_TAG
`PPTd`		PPTP_RECV_CTRLDATA_TAG
`PPTe`		PPTP_RECV_DGRAMDESC_TAG
`PPTf`		PPTP_RECV_DGRAMDATA_TAG
`PPTg`		PPTP_RECVDESC_TAG
`PpTg`	mpsdrv.sys	MPSDRV PPTP GRE analyzer
`PPTh`		PPTP_ENGINE_TAG
`PPTi`		PPTP_RECVDATA_TAG
`PPTP`		PPTP_MEMORYPOOL_TAG
`PpTt`	mpsdrv.sys	MPSDRV PPTP TCP analyzer
`PpUB`	nt!pnp	PNP_USER_BLOCK_TAG
`PpWI`	nt!pnp	PNP_DEVICE_WORK_ITEM_TAG
`Prcr`	processr.sys	Processr driver allocations
`PRF?`	nt!wdi	Performance Allocations
`PRFd`	nt!wdi	Performance Diagnostics Structures
`Proc`	nt!ps	Process objects
`Prof`		Profile objects
`Ps`	nt!ps	general ps allocations
`PSAC`	pspactld.sys	Windows Share access control tool.
`PsAp`	nt!ps	Process APC queued by user mode process
`Psap`	nt!ps	Block used to hold a user mode APC while its queued to a thread
`PSC0`		NDIS Request
`PSC1`		GPC Client Vc
`PSC2`		WanLink
`PSC3`		Miscellaneous allocations
`PSC4`		WMI
`PSC?`		Packet Scheduler (PSCHED) Tags
`PSCa`		Adapter
`PsCa`	nt!ps	APC queued at thread create time.
`PSCb`		CallParameters
`PSCc`		PipeContext
`PSCd`		FlowContext
`PSCe`		ClassMapContext
`PSCf`		Adapter Profile
`PSCg`		Component
`PsCr`	nt!ps	Working set change record (temporary allocation)
`PSE3`	pse36.sys	Physical Size Extension driver
`PsEx`	nt!ps	Process exit APC
`PsFn`	nt!ps	Captured image file name buffer (temporary allocation)
`PsHl`	nt!ps	Captured list of handles to inherit in child process (temporary allocation)
`PsIm`	nt!ps	Thread impersonation (PS_IMPERSONATE_INFORMATION, pre
`PsJa`	nt!ps	Job access control state
`Psjb`	nt!ps	Job set array (temporary allocation)
`PsLd`	nt!ps	Process LDT information blocks
`PsPb`	nt!ps	Captured process parameter block (temporary allocation)
`PsQb`	nt!ps	Process quota block
`PsRl`	nt!ps	Captured memory reserve list (temporary allocation)
`PsSb`	nt!ps	Initial process parameter block (temporary allocation)
`PsSd`	nt!ps	Augmented thread security descriptor (temporary allocation)
`PSTA`	nt!po	Po registered system state
`Psta`	nt!ps	Power management system state
`Pstb`	nt!ps	Process tables via EX handle.c
`PsTf`	nt!ps	Job object token filter
`PsTp`	nt!ps	Thread termination port block
`PsWs`	nt!ps	Process working set watch array
`PSwt`	nt!po	Power switch structure
`pUlk`	FpAmxExFiGeaxgcUV	IJWTS wow! Why can't I think of tinhgs like that? Win 2000 ver. dAFtkarlcdwGMXRgnvf
`PX1`		ndis ProviderEventLookaside
`Qnam` (0)		EXIFS Query Name
`Qp??`		Generic Packet Classifier (MSGPC)
`Qpcb`		ClassificationBlock
`Qpcd`		CfInfoData
`Qpcf`		ClassificationFamily
`Qpci`		CfInfo
`Qpct`		Client blocks
`Qpdg`		Debug
`Qpfd`		FragmentDb
`Qphf`		HandleFactory
`Qppa`		Pattern blocks
`Qppd`		GenPatternDb
`Qpph`		PathHash
`Qppi`		Pending Irp structures
`Qppn`		Queued Notifications
`Qppt`		Protocol
`Qprz`		Rhizome
`QuU2`	mpsdrv.sys	MPSDRV upcall response
`R300` (0)		ATI video driver
`R600`	ati2mtag.sys	ATI Radeon WindowsNT Miniport Driver
`RB??`		RedBook Filter Driver, static allocations
`rb??`		RedBook Filter Driver, dynamic allocations
`rbBu`		RedBook
`RBEv`		RedBook
`rbIp`		RedBook
`rbIr`		RedBook
`rbMd`		RedBook
`rbMp`		RedBook
`rbRc`		RedBook
`RBRg`		RedBook
`RBRl`		RedBook
`rbRx`		RedBook
`rbSc`		RedBook
`RBSe`		RedBook
`rbSx`		RedBook
`rbTo`		RedBook
`RBWa`		RedBook
`Rcp?`	sacdrv.sys	SAC Driver (Headless)
`RcpA`	sacdrv.sys	Internal memory mgr alloc block
`RcpI`	sacdrv.sys	Internal memory mgr initial heap block
`RcpS`	sacdrv.sys	Security related block
`ReEv`		Resource Event
`RefT`		Bluetooth reference tracking
`ReSe`		Resource Semaphore
`Reso`	nt!tm	KTM Transactional ResourceManager
`ReTa`		Resource Extended Table
`Rf??`		Bluetooth RFCOMM TDI driver
`RfAD`	rfcomm.sys	RFCOMM Address
`RfBB`	rfcomm.sys	RFCOMM BRB
`RfBT`	rfcomm.sys	RFCOMM (bthport)
`RfCB`	rfcomm.sys	RCOMMM
`RfCH`	rfcomm.sys	RFCOMM channel
`RfCN`	rfcomm.sys	RFCOMM connect
`RfDA`	rfcomm.sys	RFCOMM data
`RfFR`	rfcomm.sys	RFCOMM frame
`RfPP`	rfcomm.sys	RFCOMM pnp
`RfRX`	rfcomm.sys	RFCOMM receive
`RfWR`	rfcomm.sys	RFCOMM worker
`RKRW`	mpsdrv.sys	MPSDRV work item
`RpcL`	msrpc.sys	debugging log data
`Rpcl`	msrpc.sys	MSRpc memory logging
`RpcM`	msrpc.sys	all msrpc.sys allocations not covered elsewhere
`Rpcm`	msrpc.sys	MSRpc memory allocations
`Rpcr`	msrpc.sys	MSRpc resources
`Rpcs`	msrpc.sys	Memory shared b/n MSRpc and caller
`RPrt`	rstorprt.sys	Remote Storage Port Driver
`Rqrv`		Registry query buffer
`RRle`		RTL_RANGE_LIST_ENTRY_TAG
`RRlm`		RTL_RANGE_LIST_MISC_TAG
`RS??`		Remote Storage
`RSER`		Error log data
`RSFN`		File Name
`RSFO`		File Obj queue
`RSFS`		Recall Queue
`RSIO`		Ioctl Queue
`RSLT`		Long term data
`RSQI`		Queue info
`RSSE`		Security info
`RSVO`		Validate Queue
`RSWQ`		Work Queue
`RTLF`	mpsdrv.sys	MPSDRV filter
`RtlT`	nt!rtl	Temporary RTL allocation
`RtPi`		Temp allocation for product type key
`RWan`	rawwan.sys	Raw WAN driver
`RX00`		ATI video driver
`Rx??`		Rdr2 rdbss.sys stuff
`RxBm`		buffering manager
`RxCa`		connection engine address
`RxCc`		connection engine connection
`RxCd`		connection engine TDI
`RxCt`		connection engine transport
`RxCv`		connection engine VC
`RxCx`		connection engine misc. (special build only)
`RxDc`		querydirectory pattern (special build only)
`RxFc`		FCB
`RxFx`		Fobx
`RxIr`		RxContext (IrpContext)
`RxMs`		misc.
`RxMx`		minirdr dispatch table
`RxNc`		NameCache (not currently used)
`RxNf`		nonpaged FCB
`RxNr`		NetRoot
`RxSc`		SrvCall
`RxSo`		SrvOpen
`RxSp`		srvcall calldown params (special build only)
`RxTm`		timer context (special build only)
`RxVn`		VNetRoot
`RxVp`		vnetroot calldown params (special build only)
`RxWq`		work queue
`S3` (0)		S3 video driver
`SBad`		bad block simulator
`SbAp`	SandBox.sys	Agnitum Outpost Firewall's Host Protection Component
`sbp2`		Sbp2 1394 storage port driver
`SbVo`	substvol.sys	(AllenPort Virtual Volume) default tag
`Sc??`		Mass storage driver tags
`SCB3`		Bull SmarTlp PnP
`SCB8`		Bull CP8 Transac serial reader
`ScB?`	classpnp.sys	ClassPnP misc allocations
`ScC?`		CdRom
`ScCE`		device control synch event
`ScCG`		disk geometry buffer
`ScCH`		hitachi error buffer
`ScCI`		sense info buffers
`ScCM`		mode data buffer
`ScCP`		read capacity buffer
`ScCp`		play active checks
`ScCQ`		read sub q buffer
`ScCR`		raw mode read buffer
`ScCS`		srb allocation
`ScCT`		read toc buffer
`ScCt`		toshiba error buffer
`ScCU`		update capacity path
`ScCV`		volume control buffer
`ScCv`		volume control buffer
`ScD`		generic tag
`ScD?`		Disk
`ScDA`		Info Exceptions
`ScDa`		SMART
`ScDb`	classpnp.sys	ClassPnP debug globals buffer
`ScDC`		disable cache paths
`ScDc`		disk allocated completion c
`ScDG`		disk geometry buffer
`ScDg`		update disk geometry paths
`ScDI`		sense info buffers
`ScDM`		mbr checksum code
`ScDN`		disk name code
`ScDP`		read capacity buffer
`ScDp`		disk partition lists
`ScDS`		srb allocation
`ScDs`		start device paths
`ScDU`		update capacity path
`ScDW`		work
`ScF?`		FtDisk
`ScFt`		FtDisk allocations
`ScIO`	classpnp.sys	ClassPnP device control
`SCl0`		Litronic 220
`ScL?`	classpnp.sys	Classpnp
`ScLA`	classpnp.sys	allocation to check for autorun disable
`SCLb`		Smart card driver library
`ScLc`	classpnp.sys	Cache filters
`ScLF`	classpnp.sys	File Object Extension
`ScLf`	classpnp.sys	Fault prediction
`ScLM`	classpnp.sys	Media Change Detection
`ScLm`	classpnp.sys	Mount
`ScLq`	classpnp.sys	Release queue
`ScLW`	classpnp.sys	Power
`ScLw`	classpnp.sys	WMI
`ScMC`		medium changer allocations
`ScNo`	classpnp.sys	ClassPnP notification
`ScP?`		Scsiport
`ScPA`		Access Ranges
`ScPa`		Hold registry data
`ScPB`		Queuetag BitMap
`ScPb`		Get Bus Dat Holder
`ScPC`		reset bus code
`ScPc`		Fake common buffer
`ScPD`		SRB_DATA allocations
`ScPd`		Pnp id strings
`ScPE`		Scatter gather lists
`ScPG`		Global memory
`ScPh`		HwDevice Ext
`ScPI`		Init data chain
`ScPi`		Sense Info
`ScPL`		scatter gather lists
`ScPl`		remove lock tracking
`ScPM`		scatter gather lists
`ScPm`		address mapping lists
`ScPp`		device & adapter enable
`ScpP`		scsi PortConfig copies
`ScPQ`		request sense
`ScPq`		inquiry data
`ScPr`		resource list copy
`ScPS`		registry allocations
`ScPT`		interface mapping
`ScPt`		legacy request rerouting
`ScPu`		device relation structs
`ScPV`		Device map allocations
`ScPv`		KEVENT
`ScPW`		Wmi Requests
`ScPw`		Wmi Events
`ScPx`		Report Luns
`ScPY`		Report Targets
`ScPZ`		Device name buffer
`ScR?`		Partition Manager
`ScRi`		IOCTL buffer
`ScRp`		Partition entry
`ScRr`		Remove lock
`ScRt`		Table entry
`ScRV`		Volume entry
`ScRv`		Dependant volume relations lists
`ScRw`		Power mgmt private work item
`Scs$`		Tag for pnp class driver's SRB lookaside list
`SCS4`		SCM Microsystems pcmcia reader
`ScsC`		non
`ScsD`		non
`ScsH`		non
`ScsI`		non
`ScsL`		non
`ScsP`		non
`ScUn`		Default Tag for pnp class driver allocations
`ScV?`		Dvd functionality in cdrom.sys
`ScVK`		write buffer for DVD keys
`ScVk`		read buffer for DVD keys
`ScVS`		buffer for reads of DVD on
`Sdba`		Application compatibility Sdb* allocations
`SdCc`		ObsSecurityDescriptorCache / SECURITY_DESCRIPTOR_CACHE_ENTRIES
`Sdp?`		Bluetooth SDP functionality in BTHPORT.sys
`SdpC`	bthport.sys	Bluetooth SDP client connection
`SdpD`	bthport.sys	Bluetooth SDP database
`SdpI`	bthport.sys	Bluetooth port driver (SDP)
`Se`	nt!se	General security allocations
`SeAc`	nt!se	Security ACL
`SeAi`	nt!se	Security Audit Work Item
`SeAp`	nt!se	Security Audit Parameter Record
`SeCL`	nt!se	Security CONTEXT_TAG
`Sect`		Section objects
`SeDb`	nt!se	Temp directory query buffer to delete logon session symbolic links.
`SeFS`	nt!se	SEP_FILE_SYSTEM_NOTIFY_CONTEXT
`SeHa`	nt!se	Temp directory query buffer to delete logon session symbolic links.
`SeLS`	nt!se	Security Logon Session tracking array
`SeLs`	nt!se	Security Logon Session
`SeLu`	nt!se	Security LUID and Attributes array
`SeLw`	nt!se	Security LSA Work Item
`Sema`		Semaphore objects
`Senm`		Serenum (RS
`SeOn`	nt!se	Security Captured Object Name information
`SeOt`	nt!se	Captured object type array. Used by access check code
`SePa`	nt!se	Process audit image names and captured polity structures
`SePh`	nt!se	Dummy image page hash structure. Used when CI is disabled.
`SePr`	nt!se	Security Privilege Set
`SeSa`	nt!se	Security SID and Attributes
`SeSc`	nt!se	Captured Security Descriptor
`SeSd`	nt!se	Security Descriptor
`SeSi`	nt!se	Security SID
`SeTa`	nt!se	Security Temporary Array
`SeTd`	nt!se	Security Token dynamic part
`SeTI`	ksecdd.sys	Security TargetInfo
`SeTn`	nt!se	Security Captured Type Name information
`Setp`		SETUPDD SpMemAlloc calls
`SeUs`	nt!se	Security Captured Unicode string
`sidg`		GDI spooler events
`SIfs`		Default tag for user's of ntsrv.h
`SimB`		Simbad (bad sector simulation driver) allocations
`Sis`		Single Instance Store (ddsisfilter)
`SisB`		SIS per file object break event
`SisC`		SIS common store file object
`SisF`		SIS per file object
`SisL`		SIS per link object
`SisS`		SIS SCB
`Sm??`		rdr2 smb mini
`SmAd`		session setup/admin exchange
`SmCe`		smbmini connection engine
`SmDc`		dir query buffer (special build only)
`SmDO`		deferred open context (special build only)
`SmEc`		echo buffer (special build only)
`SmFc`		fsctl structures (special build only)
`SmKs`		Kerberos blob (special build only)
`SmMa`		mid atlas (special build only)
`SmMm`		smbmini managed datastructures
`SmMs`		misc.
`SmMt`		mailslot buffer (special build only)
`SmNr`		NetRoot (special build only)
`SmPi`		pipeinfo buffer (special build only)
`SmQP`		params for directory query transact (special build only)
`SmRb`		remote boot
`SmRw`		read/write path
`SmRx`		minirdr generated RxContext (special build only)
`SmSe`		Session (special build only)
`SmSr`		Server (special build only)
`SmTp`		server transport tag
`SmTr`		transact exchange
`SmVc`		smbmini connectionengine VC (special build only)
`SmVr`		VNetroot (special build only)
`SNBX`	SandBox.sys	Agnitum Outpost Firewall's Host Protection Component
`SpDN`	iastor.sys	Intel(r) Rapid Storage Technology driver
`SPX`		Nwlnkspx transport
`SQOS`		Security quality of service in IO
`Sr??`	sr.sys	System Restore file system filter driver
`SrCo`	sr.sys	SR's control object
`SrDB`	sr.sys	Debug information for lookup blob
`SrDL`	sr.sys	Device list
`SRdm`	scsirdma.sys	Infiniband SRP driver
`SrFE`	sr.sys	File information buffer
`SrFN`	sr.sys	File name
`SrHB`	sr.sys	Hash bucket
`SrHH`	sr.sys	Hash header
`SrHK`	sr.sys	Hash key
`SrLB`	sr.sys	Log buffer
`SrLC`	sr.sys	Logging context
`SrLE`	sr.sys	Log entry
`SrLT`	sr.sys	Lookup blob
`SrMP`	sr.sys	Mount point information
`SrOI`	sr.sys	Overwrite information
`SrPC`	sr.sys	Persistant configuration information
`SrRB`	sr.sys	Rename buffer
`SrRG`	sr.sys	Logger context
`SrRH`	sr.sys	Reparse data size
`SrRR`	sr.sys	Registry information
`SrSC`	sr.sys	Stream contexts
`SrSD`	sr.sys	Security data information
`SrST`	sr.sys	Stream data information
`SrTI`	sr.sys	Directory delete information
`SrWI`	sr.sys	Work queue item
`SslC`	ksecdd.sys	SSL kernel mode client allocations
`ST*`		New MMC compliant storage drivers
`Stac`		Stack Trace Database
`STli`		Alter's NT kernel string manipulation library
`Strg`		Dynamic Translated strings
`Strm`		Streams and streams transports allocations
`SW??`		Software Bus Enumerator
`SWbi`		bus ID
`SWbr`		bus reference
`SWda`		POOLTAG_DEVICE_ASSOCIATION
`SWdn`		device name
`SWdr`		POOLTAG_DEVICE_DRIVER_REGISTRY
`SWfd`		POOLTAG_DEVICE_FDOEXTENSION
`SWid`		device ID
`SWii`		instance ID
`SWip`		POOLTAG_DEVICE_INTERFACEPATH
`SWki`		key information
`SwMi`		SWMidi KS filter (WDM Audio)
`SWpd`		POOLTAG_DEVICE_PDOEXTENSION
`SWre`		relations
`SWrp`		reparse string
`SWrs`		reference string
`Symb`		Symbolic link objects
`Symt`		Symbolic link target strings
`SYPK`	syspart.lib	Kernel mode system partition detection allocations
`SYSA`		Sysaudio (wdm audio)
`TAPI` (0)		ntos dis distapi
`TC??`	TCP	TCP/IP network protocol
`TCh?`		TCP/IP header pools
`TCPC`		TCP connection pool
`TCPr`		TCP request pool
`TCPT`		TCB pool
`TCPY`		SYN
`TDIc`		TDI resource
`TDId`		TDI resource
`TDIe`		TDI resource
`TDIf`		TDI resource
`TDIg`		TDI resource
`TDIk`		TDI resource
`TDIu`		TDI resource
`TDIv`		TDI resource
`thdd`		DirectDraw/3D handle manager table
`Thre`	nt!ps	Thread objects
`Thrm`		Thermal zone structure
`Time`	nt!ke	Timer objects
`TkeH`	JrCYWABLVmoj	Got it! Tahkns a lot again for helping me out! NT 3.51 ver. bYoYXijqMMz
`TmDn`	nt!tm	Tm Dynamic Name
`TmLo`	nt!tm	Tm Log Entries
`TmNo`	nt!tm	Tm Notification
`TmPa`	nt!tm	Tm Propagate Argument
`TmPb`	nt!tm	Tm Propagation Buffer
`TmPe`	nt!tm	Tm Enlistment Pointers
`TmPi`	nt!tm	Tm Protocol Information
`TmPo`	nt!tm	Tm Propagation Output
`TmPp`	nt!tm	Tm Protocol Pointers
`TmPr`	nt!tm	Tm Protocol
`TmPx`	nt!tm	Tm Protocol Array
`TmRi`	nt!tm	Tm Recovery Information
`TmRq`	nt!tm	Tm Propagation Request
`Toke`	nt!se	Token objects
`TpWc`	nt!ex	Threadpool minipacket context
`TpWo`	nt!ex	Threadpool worker factory objects
`Tran`		EXIFS Translate
`TSBV`		WDM mini driver for Toshiba 750 capture
`TSch`	rdpwd.sys	RDPWD
`TSdd`	rdpdd.sys	RDPDD
`TSic`	termdd.sys	Terminal Services
`TSlc`	rdpwd.sys	RDPWD
`TSmc`		PDMCS
`Tspk`	ksecdd.sys	TS Package kernel mode client allocations
`TSq`		Terminal Services
`TSrp`	termdd.sys	Terminal Services
`TSwd`	rdpwd.sys	RDPWD
`TTFC`		Font file cache
`Ttfd`		TrueType Font driver
`Tun4`		Tunnel cache allocation for long file name
`TunK`		Tunnel cache temporary key value
`TunL`		Tunnel cache lookaside
`TunP`		Tunnel cache oddsized pool
`Txcl`	ntfs.sys	TXF_CLR_RESERVATION_CHUNK
`Txdl`	ntfs.sys	TXF_DELETED_LINK
`Txdr`	ntfs.sys	TXF_DEFAULT_READER_SECTION
`Txfc`	ntfs.sys	TXF_FCB
`Txfe`	ntfs.sys	TXF_FCB_EXTENSION
`Txfi`	ntfs.sys	TXF_FCB_INFO
`Txfl`	ntfs.sys	TXF_FCB_CLEANUP
`Txfo`	ntfs.sys	TXF_FO
`Txfq`	ntfs.sys	Txf quota block
`Txgd`	ntfs.sys	TxfData global structure
`Txis`	ntfs.sys	TXF_ISO_SNAPSHOT
`Txlf`	ntfs.sys	TXF_FCB (large)
`Txls`	ntfs.sys	TXF_CANCEL_LSN
`Txre`	ntfs.sys	TXF_TOPS_RANGE_ENTRY
`Txsc`	ntfs.sys	TXF_SCB
`Txsp`	ntfs.sys	TXF_SCB_PTR
`Txtc`	ntfs.sys	TXF_TRANS_CANCEL_LIST
`Txtr`	ntfs.sys	TXF_TRANS (Txf transaction context)
`Txvc`	ntfs.sys	TXF_VCB
`Txvd`	ntfs.sys	TXF_VSCB_TO_DEREF
`Txvf`	ntfs.sys	TXF_VSCB_FILE_SIZES
`Txvl`	ntfs.sys	TXF_VSCB
`Type`		Type objects
`Uata` (0)	uniata.sys	Alter's UniATA driver allocations
`Uc??`	http.sys	i.e., the case of the leading "Ul" or "Uc" has been reversed.
`Ucac`	http.sys	Auth Cache Pool
`UCAM`		USB digital camera library
`UcCO`	http.sys	Client Connection
`Ucmp`	http.sys	Multipart String Buffer
`Ucre`	http.sys	Receive Response
`Ucrp`	http.sys	Response App Buffer
`Ucrq`	http.sys	Request Pool
`UcSc`	http.sys	Common Server Information
`UcSN`	http.sys	Server name
`UcSP`	http.sys	Process Server Information
`UcSp`	http.sys	Sspi Pool
`UcST`	http.sys	Server info table
`Uctd`	http.sys	Response Tdi Buffer
`Ucte`	http.sys	Entity Pool
`Ucto`	http.sys	Tdi Objects Pool
`Udf1`		Udfs file set descriptor buffer
`Udf2`		Udfs volume descriptor sequence descriptor buffer
`Udfb`		Udfs IO buffer
`UdfC`		Udfs CRC table
`Udfc`		Udfs IRP context
`UdfD`		Udfs FID buffer for view spanning
`Udfd`		Udfs file Fcb
`Udfe`		Udfs enumeration match expression
`UdfF`		Udfs nonpaged Fcb errata
`Udff`		Udfs normalized full filename
`UdfI`		Udfs IO context
`Udfi`		Udfs directory Fcb
`UdfL`		Udfs IRP context lite (delayed close)
`Udfl`		Udfs Lcb
`Udfp`		Udfs Pcb
`UdfS`		Udfs short file name
`Udfs`		Udfs Sparing Mcb
`UdfT`		Udfs generic table entry
`Udft`		Udfs CDROM TOC
`UDFV`		Udfs volume descriptor sequence descriptor buffer
`Udfv`		Udfs Vpb
`Udfx`		Udfs Ccb
`Udp`		Udp protocol (TCP/IP driver)
`Ufsc`		User FULLSCREEN
`UHCD`		Universal Host Controller (USB
`UHUB`		Universal Serial Bus Hub
`Ul??`	http.sys	tags. Note: In
`UlAB`	http.sys	Auxiliary Buffer
`UlAO`	http.sys	App Pool Object
`UlAP`	http.sys	App Pool Process
`UlBL`	http.sys	Binary Log File Entry
`UlBO`	http.sys	Outstanding i/o
`UlCC`	http.sys	Control Channel
`UlCE`	http.sys	Config Group Tree Entry
`UlCH`	http.sys	Config Group Tree Header
`UlCI`	http.sys	Config Group URL Info
`UlCJ`	http.sys	Config Group Object Pool
`UlCK`	http.sys	Chunk Tracker
`UlCL`	http.sys	Config Group LogDir
`UlCl`	http.sys	Connection RefTraceLog
`UlCO`	http.sys	Connection
`UlCT`	http.sys	Config Group Timestamp
`UlCY`	http.sys	Connection Count Entry
`UlDB`	http.sys	Debug
`UlDC`	http.sys	Data Chunks array
`UlDO`	http.sys	Disconnect Object
`UlDR`	http.sys	Deferred Remove Item
`UlDT`	http.sys	Debug Thread Pool
`UlEP`	http.sys	Endpoint
`UlFA`	http.sys	Force Abort Work Item
`UlFC`	http.sys	File Cache Entry
`Ulfc`	http.sys	Uri Filter Context
`UlFD`	http.sys	Noncached File Data
`UlFP`	http.sys	Filter Process
`UlFR`	http.sys	Dummy Filter Receive Buffer
`UlFT`	http.sys	Filter Channel
`UlFU`	http.sys	Full Tracker
`UlFW`	http.sys	Filter Write Tracker
`UlHC`	http.sys	Http Connection
`UlHc`	http.sys	Http Connection RefTraceLog
`UlHL`	http.sys	Internal Request RefTraceLog
`UlHR`	http.sys	Internal Request
`UlHT`	http.sys	Hash Table
`UlHV`	http.sys	Header Value
`UlIC`	http.sys	Irp Context
`UlID`	http.sys	Conn ID Table
`UlIR`	http.sys	Internal Response
`UlLD`	http.sys	Log Field
`UlLF`	http.sys	Log File Entry
`UlLG`	http.sys	Log Generic
`UlLH`	http.sys	Log File Handle
`UlLL`	http.sys	Log File Buffer
`UlLS`	http.sys	Ansi Log Data Buffer
`UlLT`	http.sys	Binary Log Data Buffer
`UlNO`	http.sys	NSGO Pool
`UlNP`	http.sys	Non
`UlOE`	http.sys	Endpoint OwnerRefTraceLog PoolTag
`UlOR`	http.sys	Owner RefTrace Signature
`UlOT`	http.sys	Opaque ID Table
`UlPB`	http.sys	APool Proc Binding
`UlPL`	http.sys	Pipeline
`UlQF`	http.sys	TCI Filter
`UlQG`	http.sys	TCI Generic
`UlQI`	http.sys	TCI Interface
`UlQL`	http.sys	TCI Flow
`UlQT`	http.sys	TCI Tracker
`UlQW`	http.sys	TCI WMI
`UlRB`	http.sys	Receive Buffer
`UlRD`	http.sys	Registry Data
`UlRE`	http.sys	Request Body Buffer
`UlRP`	http.sys	Request Buffer
`UlRR`	http.sys	Request Buffer References
`UlRS`	http.sys	Non
`UlRT`	http.sys	RefTraceLog PoolTag
`UlSC`	http.sys	SSL Cert Data
`UlSD`	http.sys	Security Data
`UlSL`	http.sys	StringLog PoolTag
`UlSl`	http.sys	StringLog Buffer PoolTag
`UlSO`	http.sys	Site Counter Entry
`UlSS`	http.sys	Simple Status Item
`UlTA`	http.sys	Address Pool
`UlTD`	http.sys	UL_TRANSPORT_ADDRESS
`UlTT`	http.sys	Thread Tracker
`UlUB`	http.sys	URL Buffer
`UlUC`	http.sys	Uri Cache Entry
`UlUH`	http.sys	HTTP Unknown Header
`UlUL`	http.sys	URL
`UlUM`	http.sys	URL Map
`UlVH`	http.sys	Virtual Host
`UlWC`	http.sys	Work Context
`UlWI`	http.sys	Work Item
`UndP`		EXIFS Underlying Path
`Urdr`	win32k!SetRedirectionBitmap	REDIRECT
`Usac`	win32k!_CreateAcceleratorTable	ACCEL
`Usai`	win32k!zzzAttachThreadInput	ATTACHINFO
`Usal`	win32k!InitSwitchWndInfo	ALTTAB
`USBB`	bthusb.sys	Bluetooth USB minidriver
`USBD`		Universal Serial Bus Class Driver
`Usbg`	win32k!xxxLogClipData	DEBUG
`Uscb`	win32k!_ConvertMemHandle	CLIPBOARD
`Uscc`	win32k!AllocCallbackMessage	CALLBACK
`Usci`	win32k!InitSystemThread	CLIENTTHREADINFO
`Uscl`	win32k!ClassAlloc	CLASS
`Uscm`	win32k!InitScancodeMap	SCANCODEMAP
`Uscp`	win32k!CreateDIBPalette	CLIPBOARDPALETTE
`Uscr`	win32k!NtUserSetSysColors	COLORS
`Usct`	win32k!CkptRestore	CHECKPT
`Uscu`	win32k!_CreateEmptyCursorObject	CURSOR
`Uscv`	win32k!NtUserSetSysColors	COLORVALUES
`Usd1`	win32k!FreeListAdd	DDE1
`Usd2`	win32k!_DdeSetQualityOfService	DDE2
`Usd4`	win32k!AddPublicObject	DDE4
`Usd5`	win32k!xxxCsEvent	DDE5
`Usd6`	win32k!xxxCsEvent	DDE6
`Usd7`	win32k!xxxCsEvent	DDE7
`Usd8`	win32k!xxxMessageEvent	DDE8
`Usd9`	win32k!xxxCsDdeInitialize	DDE9
`UsdA`	win32k!NewConversation	DDEa
`UsdB`	win32k!Createpxs	DDEb
`Usdc`	win32k!CreateCacheDC	DCE
`UsdD`	win32k!NtUserfnDDEINIT	DDEd
`UsdE`	win32k!xxxClientCopyDDEIn1	DDE
`UsDI`	win32k!CreateDeviceInfo	DEVICEINFO
`Usdi`	win32k!CreateMonitor	DISPLAYINFO
`Usds`	win32k!xxxDragObject	DRAGDROP
`Usdv`	win32k!NtUserfnINDEVICECHANGE	DEVICECHANGE
`User`	win32k!InitCreateUserCrit	ERESOURCE
`Usev`	win32k!xxxPollAndWaitForSingleObject	EVENT
`Usgh`	win32k!NtUserUserHandleGrantAccess	GRANTEDHANDLES
`Usgl`	win32k!CreateShadowTL	GLOBALTHREADLOCK
`Usgt`	win32k!AddGhost	GHOST
`Usha`	win32k!AllocateHidData	HIDDATA
`UshD`	Win32k!AllocateHidDesc	HIDDESC
`Ushk`	win32k!_RegisterHotKey	HOTKEY
`Usih`	win32k!SetImeHotKey	IMEHOTKEY
`Usim`	win32k!CreateInputContext	IME
`Usjb`	win32k!CreateW32Job	W32JOB
`Usjx`	win32k!JobCalloutAddProcess	W32JOBEXTRA
`Uskb`	win32k!xxxLoadKeyboardLayoutEx	KBDLAYOUT
`Uske`	win32k!GetKbdExId	KBDEXID
`Uskf`	win32k!LoadKeyboardLayoutFile	KBDFILE
`Usks`	win32k!PostUpdateKeyStateEvent	KBDSTATE
`Uskt`	win32k!ReadLayoutFile	KBDTABLE
`Usla`	win32k!InitLockRecordLookaside	LOOKASIDE
`Usld`	win32k!GrowLogIfNecessary	LOGDESKTOP
`Uslr`	win32k!InitLockRecordLookaside	LOCKRECORD
`Usmi`	win32k!MirrorRegion	MIRROR
`Usml`	win32k!MsgLookupTableAlloc	MESSAGE FILTER TABLE
`Usmr`	win32k!SnapshotMonitorRects	MONITORRECTS
`Usms`	win32k!xxxMoveSize	MOVESIZE
`Usmt`	win32k!xxxMNAllocMenuState	MENUSTATE
`Usno`	win32k!zzz	NONE
`Usny`	win32k!CreateNotify	NOTIFY
`Uspi`	win32k!MapDesktop	PROCESSINFO
`Uspm`	win32k!MNAllocPopup	POPUPMENU
`Uspn`	win32k!CreateProfileUserName	PROFILEUSERNAME
`Uspo`	win32k!QueuePowerRequest	POWER
`Uspp`	win32k!AllocateAndLinkHidTLCInfo	PNP
`Uspr`	win32k!GetPrivateProfileStruct	PROFILE
`Usqm`	win32k!InitQEntryLookaside	QMSG
`Usqu`	win32k!InitQEntryLookaside	Q
`Usrt`	win32k!xxxDrawMenuItemText	RTL
`Ussa`	win32k!xxxBroadcastMessage	SMS_ASYNC
`Ussb`	win32k!CreateSpb	SPB
`Ussc`	win32k!xxxInterSendMsgEx	SMS_CAPTURE
`Ussd`	win32k!xxxAddShadow	SHADOW
`Usse`	win32k!SetDisconnectDesktopSecurity	SECURITY
`Ussi`	win32k!NtUserSendInput	SENDINPUT
`Ussm`	win32k!InitSMSLookaside	SMS
`Usss`	win32k!xxxBroadcastMessage	SMS_STRING
`Usst`	win32k!xxxSBTrackInit	SCROLLTRACK
`Ussw`	win32k!_BeginDeferWindowPos	SWP
`Ussy`	win32k!xxxDesktopThread	SYSTEM
`Ustd`	win32k!TrackAddDesktop	TRACKDESKTOP
`Usti`	win32k!AllocateW32Thread	THREADINFO
`Ustk`	win32k!HeavyAllocPool	STACK
`Ustm`	win32k!InternalSetTimer	TIMER
`Usto`	win32k!xxxConnectService	TOKEN
`Usts`	win32k!_Win32CreateSection	SECTION
`Ustx`	win32k!NtUserDrawCaptionTemp	TEXT
`Usty`	win32k!NtUserResolveDesktopForWOW	TEXT2
`Usub`	win32k!NtUserToUnicodeEx	UNICODEBUFFER
`Usvi`	win32k!ResizeVisExcludeMemory	VISRGN
`Usvl`	win32k!VWPLAdd	VWPL
`Uswd`	win32k!xxxCreateWindowEx	WINDOW
`Uswe`	win32k!_SetWinEventHook	WINEVENT
`Uswl`	win32k!BuildHwndList	WINDOWLIST
`Uswo`	win32k!zzzInitTask	WOWTDB
`Uswp`	win32k!xxxRegisterUserHungAppHandlers	WOWPROCESSINFO
`Uswt`	win32k!xxxUserNotifyProcessCreate	WOWTHREADINFO
`Uvpb`	dwudf.sys	(DVD Write Now) VPB
`Vad` (0)	nt!mm	Mm virtual address descriptors
`VadF`	nt!mm	VADs created by a FreeVM splitting
`Vadl`	nt!mm	Mm virtual address descriptors (long)
`VadS`	nt!mm	Mm virtual address descriptors (short)
`VBus`	vmbus.sys	Virtual Machine Bus Driver
`VDM`	nt!vdm	ntosvdm
`VdPN`	dxgkrnl.sys	Video display mode management
`VfIT`	nt!Vf	Verifier Import Address Table information
`VidL`	videoprt.sys	VideoPort Allocation List (FDO_EXTENSION)
`VidR`	videoprt.sys	VideoPort Allocation on behalf of Miniport
`ViMm`	dxgkrnl.sys	Video memory manager
`virt`	vmm.sys	Virtual Machine Manager (VPC/VS)
`ViSh`	dxgkrnl.sys	Video scheduler
`VM`	volmgr.sys	General allocations
`Vm`	volmgrx.sys	General allocations
`VM??`	volmgr.sys	Volume Manager
`Vm??`	volmgrx.sys	Volume Manager Extension
`VmBl`	volmgrx.sys	Raw configuration blocks
`VmBu`	volmgrx.sys	I/O buffers
`VmCc`	volmgrx.sys	Configuration copies
`VmCo`	volmgrx.sys	Configurations
`VmCp`	volmgrx.sys	Copies
`VmCr`	volmgrx.sys	Completion routine contexts
`VmDc`	volmgrx.sys	Device changes
`VmDd`	volmgrx.sys	Disk devices
`VmDh`	volmgrx.sys	Disk headers
`VmLa`	volmgrx.sys	Drive layouts
`VmLb`	volmgrx.sys	Log blocks
`VmLc`	volmgrx.sys	Log copies
`VmLo`	volmgrx.sys	Logs
`VmLr`	volmgrx.sys	Log raw content
`VmMm`	volmgrx.sys	Mirror emergency mappings
`VmNe`	volmgrx.sys	Notification entries
`VmOb`	volmgrx.sys	I/O objects
`VmP0`	volmgrx.sys	Packets
`VmP1`	volmgrx.sys	Small packets
`VmP2`	volmgrx.sys	Large packets
`VmP3`	volmgrx.sys	Huge packets
`VmPa`	volmgrx.sys	Packs
`VmPd`	volmgrx.sys	Physical disks
`VmPs`	volmgrx.sys	Arrays of packets
`VmRb`	volmgrx.sys	Raw record buffers
`VmRc`	volmgrx.sys	Raw configurations
`VmRe`	volmgrx.sys	Records
`VmRi`	volmgrx.sys	Record information
`VmRm`	volmgrx.sys	RAID
`VmRr`	volmgrx.sys	Raw records
`VmTa`	volmgrx.sys	I/O tasks
`VmTc`	volmgrx.sys	Table of contents
`VmTe`	volmgrx.sys	Table of contents entries
`VmTx`	volmgrx.sys	Transactions
`VmUe`	volmgrx.sys	User entries
`VmVd`	volmgrx.sys	Volume devices
`VmWi`	volmgrx.sys	Work items
`VoS?`	volsnap.sys	VolSnap (Volume Snapshot Driver)
`VoSa`	volsnap.sys	Application information allocations
`VoSb`	volsnap.sys	Buffer allocations
`VoSc`	volsnap.sys	Snapshot context allocations
`VoSd`	volsnap.sys	Diff area volume allocations
`VoSf`	volsnap.sys	Diff area file allocations
`VoSh`	volsnap.sys	Bit history allocations
`VoSi`	volsnap.sys	Io status block allocations
`VoSm`	volsnap.sys	Bitmap allocations
`VoSo`	volsnap.sys	Old heap entry allocations
`VoSp`	volsnap.sys	Pnp id allocations
`VoSr`	volsnap.sys	Device relations allocations
`VoSs`	volsnap.sys	Short term allocations
`VoSt`	volsnap.sys	Temp table allocations
`VoSw`	volsnap.sys	Work queue allocations
`VoSx`	volsnap.sys	Dispatch context allocations
`Vpb`		Io, vpb's
`Vprt`	videoprt.sys	Video port for legacy (pre
`VraP`		parallel class driver
`vTDR`	dxgkrnl.sys	Video timeout detection/recovery
`Vtfd`		Font file/context
`Wait` (0)		NtWaitForMultipleObjects
`Wan?`		NdisWan Tags (PPP Framing module for Remote Access)
`WanA`		BundleCB
`WanB`		ProtocolCB/LinkCB
`WanC`		DataDesc
`WanD`		WanRequest
`WanE`		LoopbackDesc
`WanG`		MiniportCB
`WanH`		OpenCB
`WanI`		IoPacket
`WanJ`		LineUpInfo
`WanK`		Unicode String Buffer
`WanL`		Protocol Table
`WanM`		Connection Table
`WanN`		NdisPacketPool Desc
`WanQ`		DataBuffer
`WanR`		WanPacket
`WanS`		AfCB/SapCB/VcCB
`WanT`		Transform Driver
`WanV`		RC4 Encryption Context
`WanW`		SHA Encryption
`WanX`		Send Compression Context
`WanY`		Recv Compression Context
`WanZ`		Protocol Specific Info
`WaP4`	WaP4vi Not bad post, leave it at my bookmarks!....	WaP4vi Not bad post, leave it at my bookmarks!.... NT 3.51 ver. WaP4vi Not bad post, leave it at my book
`WCbf`	dwudf.sys	(DVD Write Now) Cache storage buffer
`WCrf`	dwudf.sys	(DVD Write Now) Cache frame list
`WCtx`	dwudf.sys	(DVD Write Now) Cache context block
`Wdm`		WDM
`WDMA`		WDM Audio
`Wdog`	watchdog.sys	Watchdog object/context allocation
`werk`		WER kernel mode reporting allocation
`WimF`	wimfsf.sys	WIM Boot Filter
`WMca`		WMI MCA Handling
`WmDS`		Wmi DataSource chunks
`WmGE`		Wmi GuidEntry chunks
`WmiA`		Wmi ACPI mapper
`WmiC`		Wmi Create Pump Thread Work Item
`WmiD`		Wmi Registration DataSouce
`WmiG`		Allocation of WMIGUID
`WmiI`		Wmi Instance Names
`Wmii`		Wmi InstId chunks
`Wmij`		Wmi GuidMaps
`WmiL`		WmiLIb
`Wmim`		Wmi KM to UM Notification Buffers
`WmiN`		Wmi Notification Notification Packet
`Wmin`		Wmi Notification Slot Chunks
`Wmip`		Wmi General purpose allocation
`Wmiq`		Wmi NBQ Blocks
`WmiR`		Wmi Registration info blocks
`WmIS`		Wmi InstanceSet chunks
`Wmis`		Wmi SysId allocations
`Wmit`		Wmi Trace
`Wmiw`		Wmi Notification Waiting Buffers, in paged queue waiting for IOCTL
`Wmiz`		Wmi MCA Insertions debug code
`WmMR`		Wmi MofResouce chunks
`WMsG`	win32k.sys	Winlogon kernel mode IPC interface
`Wrp?`		WanArp Tags (ARP module for Remote Access)
`Wrpa`		WAN_ADAPTER_TAG
`Wrpc`		WAN_CONN_TAG
`Wrpd`		WAN_DATA_TAG
`Wrpf`		FREE_TAG (checked builds only)
`Wrph`		WAN_HEADER_TAG
`Wrpi`		WAN_INTERFACE_TAG
`Wrpn`		WAN_NOTIFICATION_TAG
`Wrpr`		WAN_REQUEST_TAG
`Wrps`		WAN_STRING_TAG
`Wrpw`		WAN_PACKET_TAG
`WvCy`		WDM Audio WaveCyc port
`WvPc`		WDM Audio WavePCI port
`xCVD` (0)	mrxdav.sys	AsyncEngineContext Tag
`XDR?`	rpcxdr.sys	NFS (Network File System) XDR driver
`xSMB`	smbmrx.sys	IFSKIT sample SMB mini
`Xtra`		EXIFS Extra Create
`XWan`		ndisusrwan allocations
`ysd8` (0)	win32k.sys	User DDE8
`ysd9`	win32k.sys	User DDE9
`ysda`	win32k.sys	User DDEa
`ysdb`	win32k.sys	User DDEb
`ysdc`	win32k.sys	User DDEc
`ysdd`	win32k.sys	User DDEd
`ZsaB` (0)		EXIFS ZeroBlock
`_ATI` (0)		ATI video driver
`_LCD`	monitor.sys	Monitor PDO name buffer

См. также

Старая версия этой странички

<< Back

Автор: Alter (Александр А. Телятников)

Сервер: Apache+PHP под FBSD