Windows® Internals, Sixth Edition, Part 2

BB-trees, Indexingbackground activity priority, I/O Prioritizationbackground application page priority, Page Priority and Rebalancingbackground priority mode, I/O Priority Boosts and Bumpsbacking store, Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit, Unified Caching, Stack Trashesbacking up encrypted files, Backing Up Encrypted FilesBackup and Restore utility, System File Corruptionbackup applications, VSS Architecture, Uses in Windows, Process Monitor–Process Monitor, Process Monitorfile system filter drivers, Process Monitor–Process Monitor, Process Monitorshadow copies, Uses in Windowsshadow copy service and, VSS Architecturebackup components (VSS writers), VSS Operationbad clusters, Dynamic Bad-Cluster Remapping, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recoverybad pages, PFN Data Structures, Memory Notification Events, The BIOS Boot Sector and BootmgrBad PFN state, Page Frame Number Database, Page Frame Number Databasebad-cluster files (, Master File Table, Master File Table, NTFS Bad-Cluster Recoverybad-sector remapping, NTFS Bad-Cluster Recoverybadmemoryaccess element, The BIOS Boot Sector and Bootmgrbadmemorylist element, The BIOS Boot Sector and BootmgrBAD_POOL_CALLER stop code, Causes of Windows CrashesBAD_POOL_HEADER stop code, Causes of Windows Crashes, Buffer Overruns, Memory Corruption, and Special Poolbalance set manager and swapper, Look-Aside Lists–Look-Aside Lists, Look-Aside Lists, Modified Page Writer, Working Set Management, Balance Set Manager and Swapper–System Working Sets, System Working Sets–Memory Notification Events, System Working Sets, Memory Notification Eventslook-aside lists, Look-Aside Lists–Look-Aside Lists, Look-Aside Listspage writer events, Modified Page Writertrimming working sets, Working Set Managementworking sets, Balance Set Manager and Swapper–System Working Sets, System Working Sets–Memory Notification Events, System Working Sets, Memory Notification Eventsbalanced trees, Indexingbandwidth reservations, Opening Devices, Bandwidth Reservation (Scheduled File I/O)Base Cryptographic Provider, Encrypting a File for the First Timebase file records, Master File Table, Master File Tablebase LSNs, Logging Implementationbase-log files, Log Layout, Resource Managersbased sections, Section Objectsbasic disks, Volume Management, MBR-Style Partitioning, GUID Partition Table Partitioning, GUID Partition Table Partitioning, GUID Partition Table Partitioning, Basic Disk Volume Manager, Basic Disk Volume Manager–Multipartition Volume Management, Multipartition Volume Management, The Mount ManagerGUID partition table partitioning, GUID Partition Table Partitioning, GUID Partition Table PartitioningMBR-style partitioning, MBR-Style Partitioningmultipartition volumes on, Volume Managementregistry information, The Mount Managerstorage management, GUID Partition Table Partitioning, Basic Disk Volume Manager–Multipartition Volume Management, Multipartition Volume Managementvolume manager, Basic Disk Volume ManagerBAT files, Lockingbatch oplocks, Locking–Locking, Locking, Lockingbatching log records, Designbaud rates, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, When There Is No Crash Dumpbaudrate element, The BIOS Boot Sector and BootmgrBCD (Boot Configuration Database), Winload, LDM and GPT or MBR-Style Partitioning, Encryption Keys, BitLocker Key Recovery, No Execute Page Protection, No Execute Page Protection, No Execute Page Protection, Address Windowing Extensions, Physical Address Extension (PAE), Physical Address Extension (PAE), BIOS Preboot, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr–The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr–The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The UEFI Boot Process–The UEFI Boot Process, The UEFI Boot Process, Driver Loading in Safe Mode, Boot Sector Corruption–System Hive Corruption, System Hive Corruption, Hung or Unresponsive SystemsBitLocker encryption, Encryption Keys, BitLocker Key RecoveryBitLocker volumes, LDM and GPT or MBR-Style Partitioningboot application options, The BIOS Boot Sector and Bootmgr–The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgrboot process, BIOS Preboot, The BIOS Boot Sector and Bootmgrboot volumes, WinloadBootmgr options, The BIOS Boot Sector and Bootmgrcorruption and startup issues, Boot Sector Corruption–System Hive Corruption, System Hive Corruptiondebug option, Hung or Unresponsive Systemsincreasing virtual memory, Address Windowing Extensionsloading non-PAE kernel, No Execute Page Protectionnolowmem option, Physical Address Extension (PAE)NVRAM code, The UEFI Boot Process–The UEFI Boot Process, The UEFI Boot Processnx values, No Execute Page Protection, No Execute Page Protectionpae options, Physical Address Extension (PAE)safe mode options, Driver Loading in Safe ModeWinload options, The BIOS Boot Sector and Bootmgr–The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgrbcddevice element, The BIOS Boot Sector and BootmgrBCDEdit tool, The BIOS Boot Sector and Bootmgr, BCD Misconfiguration, When There Is No Crash Dumpbcdfilepath element, The BIOS Boot Sector and Bootmgrbinary buddy systems, The Low Fragmentation HeapBIOS, Basic Disks–GUID Partition Table Partitioning, GUID Partition Table Partitioning, BitLocker Drive Encryption, Boot Process, BIOS Preboot, BIOS Preboot–BIOS Preboot, BIOS Preboot, BIOS Preboot, Initializing the Kernel and Executive SubsystemsBIOS vs. EFI, Boot Processboot process components, BIOS Preboot–BIOS Preboot, BIOS Preboot, BIOS Prebootemulation code, Initializing the Kernel and Executive Subsystemspartitioning, Basic Disks–GUID Partition Table Partitioning, GUID Partition Table Partitioningpasswords, BitLocker Drive Encryptionpreboot, BIOS PrebootBIOS boot sector, The BIOS Boot Sector and Bootmgr–The UEFI Boot Process, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The UEFI Boot ProcessBIOS-detected disk drives, The BIOS Boot Sector and BootmgrBitLocker, LDM and GPT or MBR-Style Partitioning, Attaching VHDs–BitLocker To Go, BitLocker Drive Encryption, BitLocker Drive Encryption, Trusted Platform Module (TPM)–BitLocker Boot Process, Trusted Platform Module (TPM)–BitLocker Boot Process, Trusted Platform Module (TPM), Trusted Platform Module (TPM), BitLocker Boot Process–BitLocker Key Recovery, BitLocker Boot Process, BitLocker Boot Process, BitLocker Boot Process, BitLocker Boot Process, BitLocker Key Recovery, Full-Volume Encryption Driver–BitLocker Management, BitLocker Management–BitLocker To Go, BitLocker Management, BitLocker Management, BitLocker Management, BitLocker To Go–BitLocker To Go, BitLocker To Go, BitLocker To Go, BitLocker To Go, BitLocker To Go, BitLocker To Go, Encryption, Crash Dump GenerationBitLocker To Go, BitLocker To Go–BitLocker To Go, BitLocker To Go, BitLocker To Goboot process, BitLocker Boot Process–BitLocker Key Recovery, BitLocker Key RecoveryControl Panel applet, BitLocker Boot Process, BitLocker To GoCrashdump Filter driver, Crash Dump Generationfull-volume encryption driver, Full-Volume Encryption Driver–BitLocker Management, BitLocker Management, BitLocker Management, Encryptionmanagement, BitLocker Management–BitLocker To Go, BitLocker To Gooverview, BitLocker Drive Encryptionstorage management, Attaching VHDs–BitLocker To Go, BitLocker Drive Encryption, Trusted Platform Module (TPM)–BitLocker Boot Process, BitLocker Boot Process, BitLocker Management, BitLocker To Gosuspending, BitLocker Boot Processsystem volumes and, LDM and GPT or MBR-Style PartitioningTrusted Platform Module, Trusted Platform Module (TPM)–BitLocker Boot Process, Trusted Platform Module (TPM), Trusted Platform Module (TPM), BitLocker Boot ProcessBitLocker To Go, BitLocker Drive Encryption, BitLocker To Go, BitLocker To Gobitmap attributes, Resident and Nonresident Attributes, Indexingbitmap files, Spanned Volumes, Image Randomization, Master File Table, Master File Tableblack screens, MBR Corruptionblanket boosting, I/O Priority Inversion Avoidance (I/O Priority Inheritance)BLF (base-log file), Log Layout, Resource Managersblock metadata randomization, Heap Security Featuresblock offsets, Log Sequence Numbersblock size, Unified Cachingblock-storage devices, iSCSI Driversblocking, I/O Cancellation for Thread Termination, The IoCompletion Objectcompletion ports, The IoCompletion Objectthread, I/O Cancellation for Thread Terminationblocks, Disk Sector Format, File Deletion and the Trim Command, Heap Manager Structure, Unified Caching, Booting from iSCSIblock-level access, Booting from iSCSIcore heap, Heap Manager Structurelogical, Disk Sector Formatstore page size, Unified Cachingupdating sectors, File Deletion and the Trim CommandBlu-ray drives, Storage Terminology, UDFBluetooth, User-Mode Driver Framework (UMDF)body (IRPs), IRP Stack Locationsboosting I/O priority, I/O Priority Boosts and Bumps–Bandwidth Reservation (Scheduled File I/O), I/O Priority Boosts and Bumps, I/O Priority Boosts and Bumps, Bandwidth Reservation (Scheduled File I/O)boot applications, BCD and, The BIOS Boot Sector and Bootmgr–The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgrboot code (MBR), BIOS Prebootboot data, BitLocker Drive Encryption, ReadyDriveboot device drivers, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgrboot disks, The BIOS Boot Sector and Bootmgrboot drivers, Winload, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, Code Overwrite and System Code Write Protectionboot process, Winloadloading, The BIOS Boot Sector and Bootmgrloading failures, The BIOS Boot Sector and Bootmgrsystem code write protection, Code Overwrite and System Code Write Protectionboot entropy values, Initializing the Kernel and Executive Subsystemsboot files (, Master File Tableboot graphics library, Initializing the Kernel and Executive Subsystemsboot logging, Initializing the Kernel and Executive Subsystems, Boot Logging in Safe Mode, Windows Recovery Environment (WinRE), Post–Splash Screen Crash or HangBoot Manager (Bootmgr), BitLocker Drive Encryption, BIOS Preboot, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and BootmgrBCD options, The BIOS Boot Sector and BootmgrBitLocker code in, BitLocker Drive Encryptionboot process tasks, BIOS Prebootoptions editor, The BIOS Boot Sector and Bootmgrboot parameter block (BPB), Master File Tableboot partition paths, Initializing the Kernel and Executive Subsystemsboot partitions, BIOS Prebootboot preloaded hives, The BIOS Boot Sector and Bootmgrboot process, Trusted Platform Module (TPM)–BitLocker Key Recovery, Trusted Platform Module (TPM), Trusted Platform Module (TPM)–BitLocker Boot Process, BitLocker Boot Process, BitLocker Boot Process, BitLocker Boot Process, BitLocker Boot Process, BitLocker Key Recovery, BitLocker Key Recovery, Boot Process–The BIOS Boot Sector and Bootmgr, BIOS Preboot, BIOS Preboot, BIOS Preboot–The UEFI Boot Process, BIOS Preboot, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr–The UEFI Boot Process, The UEFI Boot Process, The UEFI Boot Process, The UEFI Boot Process, Booting from iSCSI, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystems, ReadyBoot–ReadyBoot, ReadyBoot, ReadyBoot, Troubleshooting Boot and Startup Problems–Safe-Mode-Aware User Programs, Troubleshooting Boot and Startup Problems, Troubleshooting Boot and Startup Problems–Windows Recovery Environment (WinRE), Troubleshooting Boot and Startup Problems, Safe Mode, Driver Loading in Safe Mode, Driver Loading in Safe Mode, Driver Loading in Safe Mode, Driver Loading in Safe Mode, Driver Loading in Safe Mode, Safe-Mode-Aware User Programs, Safe-Mode-Aware User Programs, Boot Logging in Safe Mode, Windows Recovery Environment (WinRE), Windows Recovery Environment (WinRE)–MBR Corruption, Windows Recovery Environment (WinRE), Windows Recovery Environment (WinRE), Windows Recovery Environment (WinRE)–MBR Corruption, Solving Common Boot Problems–Post–Splash Screen Crash or Hang, MBR Corruption, MBR Corruption, MBR Corruption, Boot Sector Corruption, System File Corruption, System Hive Corruption, Post–Splash Screen Crash or Hang, Post–Splash Screen Crash or Hang, Post–Splash Screen Crash or HangBIOS boot sector and Bootmgr, BIOS Preboot–The UEFI Boot Process, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The UEFI Boot ProcessBIOS preboot, Boot Process–The BIOS Boot Sector and Bootmgr, BIOS Preboot, BIOS Preboot, BIOS Preboot, The BIOS Boot Sector and BootmgrBitLocker, Trusted Platform Module (TPM)–BitLocker Key Recovery, BitLocker Boot Process, BitLocker Key Recovery, BitLocker Key Recoverychanges to encrypted components, Trusted Platform Module (TPM)common boot problems, Solving Common Boot Problems–Post–Splash Screen Crash or Hang, Boot Sector Corruption, System File Corruption, System Hive Corruption, Post–Splash Screen Crash or Hang, Post–Splash Screen Crash or Hang, Post–Splash Screen Crash or Hangdriver loading, Troubleshooting Boot and Startup Problems–Safe-Mode-Aware User Programs, Driver Loading in Safe Mode, Driver Loading in Safe Mode, Driver Loading in Safe Mode, Safe-Mode-Aware User ProgramsiSCSI booting, Booting from iSCSIkernel and executive subsystems, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystemslast known good (LKG), Troubleshooting Boot and Startup Problemspreboot process, BitLocker Boot ProcessReadyBoot, ReadyBoot–ReadyBoot, ReadyBoot, ReadyBootrepairing installations, Windows Recovery Environment (WinRE)–MBR Corruption, MBR Corruptionsafe mode, Troubleshooting Boot and Startup Problems–Windows Recovery Environment (WinRE), Safe Mode, Driver Loading in Safe Mode, Driver Loading in Safe Mode, Boot Logging in Safe Mode, Windows Recovery Environment (WinRE), Windows Recovery Environment (WinRE)safe-mode-aware programs, Safe-Mode-Aware User Programstroubleshooting, Troubleshooting Boot and Startup Problems, Windows Recovery Environment (WinRE)UEFI boot process, The BIOS Boot Sector and Bootmgr–The UEFI Boot Process, The UEFI Boot Process, The UEFI Boot Processverification chain, encryption, Trusted Platform Module (TPM)–BitLocker Boot Process, BitLocker Boot Process, BitLocker Boot ProcessWindows Recovery Environment, Windows Recovery Environment (WinRE)–MBR Corruption, MBR Corruption, MBR Corruptionboot sectors, Local FSDs, NTFS Bad-Cluster Recovery, BIOS Prebootdefined, BIOS Prebootduplicated, NTFS Bad-Cluster Recoveryfile system drivers and, Local FSDsboot status files (bootstat.dat), Mirrored Volumes, Windows Recovery Environment (WinRE)boot traces, Logical Prefetcherboot video driver (Bootvid.dll), BIOS Preboot, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystemsboot volumes, LDM and GPT or MBR-Style Partitioning–LDM and GPT or MBR-Style Partitioning, LDM and GPT or MBR-Style Partitioning, Mirrored Volumes, BitLocker Drive Encryption, The BIOS Boot Sector and Bootmgr–The UEFI Boot Process, The BIOS Boot Sector and Bootmgr, The UEFI Boot Processencrypting, BitLocker Drive Encryptionloading process, The BIOS Boot Sector and Bootmgr–The UEFI Boot Process, The BIOS Boot Sector and Bootmgr, The UEFI Boot Processmirroring, Mirrored Volumespartitioning, LDM and GPT or MBR-Style Partitioning–LDM and GPT or MBR-Style Partitioning, LDM and GPT or MBR-Style Partitioningboot-sector code, Encryption Keys, The BIOS Boot Sector and Bootmgrboot-selection menu, The BIOS Boot Sector and Bootmgrboot-start (0) value, The Start Value, The Start Valueboot-start drivers, Device Enumeration, Initializing the Kernel and Executive Subsystems, Windows Recovery Environment (WinRE)boot-time caching (ReadyBoot), ReadyBoot–ReadyBoot, ReadyBoot, ReadyBootbootable partitions, MBR-Style Partitioningbootdebug element, The BIOS Boot Sector and Bootmgrbootems element, The BIOS Boot Sector and Bootmgrbootlog element, The BIOS Boot Sector and Bootmgrbootlog option, Boot Logging in Safe Mode–Windows Recovery Environment (WinRE), Windows Recovery Environment (WinRE)bootrec command, MBR Corruption, Boot Sector Corruption, System Hive Corruptionbootsequence element, The BIOS Boot Sector and Bootmgrbootstatuspolicy element, The BIOS Boot Sector and Bootmgrbootstrap data, Master File Table, Master File Tablebootux element, The BIOS Boot Sector and Bootmgrbottom dirty page threshold, Write Throttlingbound traps, 0x7F - UNEXPECTED_KERNEL_MODE_TRAPboundary operations, Driver Verifierbreak on symbol load option, Initializing the Kernel and Executive Subsystemsbreaking into hung systems, Hung or Unresponsive Systems–When There Is No Crash Dump, Hung or Unresponsive Systems, Hung or Unresponsive Systems, When There Is No Crash Dumpbreakpoints, Copy-on-Write, The BIOS Boot Sector and Bootmgr, 0x8E - KERNEL_MODE_EXCEPTION_NOT_HANDLEDcopy-on-write process and, Copy-on-Writedrivers compiled in debug environment, 0x8E - KERNEL_MODE_EXCEPTION_NOT_HANDLEDHAL initialization, The BIOS Boot Sector and Bootmgrbroken oplocks, LockingBTG (BitLocker To Go), BitLocker To Gobucket IDs (crash analysis), Online Crash Analysisbuckets, The Low Fragmentation Heap, The Low Fragmentation Heapbuffer overflows, Process Monitor Troubleshooting Techniques, Buffer Overruns, Memory Corruption, and Special Poolbuffer overruns, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Stack Trashes, Stack Trashesbuffer underruns, Pageheap, Buffer Overruns, Memory Corruption, and Special Pool, Stack Trashes, Stack Trashesbuffered I/O, IRP Stack Locations, IRP Buffer Managementbuffers and buffer management, The I/O Manager, Scatter/Gather I/O, IRP Buffer Management–I/O Request to a Single-Layered Driver, I/O Request to a Single-Layered Driver, Look-Aside Lists, Unified Caching, Caching with the Direct Memory Access Interfaces, Caching with the Direct Memory Access Interfaces, Read-Ahead and Write-Behind, Explicit File I/O, Marshalling, Compression and Sparse Files, Compression and Sparse Files, Buffer Overruns, Memory Corruption, and Special PoolDMA and caching, Caching with the Direct Memory Access InterfacesFILE_FLAG_NO_BUFFERING flag, Read-Ahead and Write-BehindI/O manager, The I/O Managerinvalid, Explicit File I/OIRPs, IRP Buffer Management–I/O Request to a Single-Layered Driver, I/O Request to a Single-Layered Driverlook-aside lists, Look-Aside Listsmapping and pinning interfaces, Caching with the Direct Memory Access Interfacesmarshalling log records, Marshallingpool-tracking structures, Buffer Overruns, Memory Corruption, and Special Poolscatter/gather I/O, Scatter/Gather I/Osparse files, Compression and Sparse Files, Compression and Sparse Filesstores, Unified Cachingbugcheck callbacks, The Blue ScreenBugcodes.h file, The Blue ScreenBUGCODE_USB_DRIVER stop code, Causes of Windows Crashesbugs, No Execute Page Protection–Copy-on-Write, Copy-on-Writebumps (I/O priority), I/O Priority Boosts and Bumps–Bandwidth Reservation (Scheduled File I/O), Bandwidth Reservation (Scheduled File I/O)burnmemory boot option, Initializing the Kernel and Executive Subsystemsbus drivers, Layered Drivers, KMDF Data Model, The Plug and Play (PnP) Manager–The Power Manager, Level of Plug and Play Support–Driver Support for Plug and Play, Driver Support for Plug and Play, The Power Manager, Power Manager OperationKMDF IRP processing, KMDF Data ModelPnP manager, The Plug and Play (PnP) Manager–The Power Manager, Level of Plug and Play Support–Driver Support for Plug and Play, Driver Support for Plug and Play, The Power Managerpower states, Power Manager Operationrole in I/O, Layered Driversbus filter drivers, Fast I/O, Device Stacksbus filters, WDM Driversbusparams element, The BIOS Boot Sector and Bootmgrbusy thresholds (processors), Thresholds and Policy Settings, Thresholds and Policy Settings, Performance Checkbyte offsets, Spanned Volumes, x86 Virtual Address Translation, Byte Within Page, Physical Address Extension (PAE)