Windows® Internals, Sixth Edition, Part 2

DD0 (fully on) power state, The Power Manager, Power Manager OperationD1 device power state, The Power Manager, Power Manager OperationD2 device power state, The Power Manager, Power Manager OperationD3 (fully off) power state, The Power Manager, Power Manager Operationdata decryption field (DDF), Encrypting a File for the First Time, Encrypting a File for the First Time, Encrypting File DataData Recovery Agent (DRA), BitLocker Managementdata recovery field (DRF), Encrypting a File for the First Time, Encrypting a File for the First Time, Encrypting File Datadata redundancy, Multipartition Volume Management, Data Redundancy and Fault Tolerancedata structures, Physical Memory Limits, Per-File Cache Data Structurescaching, Per-File Cache Data Structuresphysical memory support, Physical Memory Limitsdata transfers, Structure of a Driverdatabase records (LDM), The LDM DatabaseDbgLoadImageSymbols function, Initializing the Kernel and Executive Subsystemsdbgtransport element, The BIOS Boot Sector and Bootmgrdc command, 0xC5 - DRIVER_CORRUPTED_EXPOOLDC2WMIparser tool, Driver Verifierdd command, I/O Priority Boosts and BumpsDDF (data decryption field), Encrypting a File for the First Time, Encrypting a File for the First Time, Encrypting File Datadeadlock detection, Hung or Unresponsive Systemsdeadlocks, Modified Page Writer–Modified Page Writer, Modified Page Writer, Process Reflection–Process Reflection, Process Reflection, Hung or Unresponsive Systemsdetection, Hung or Unresponsive Systemsmodified page writer, Modified Page Writer–Modified Page Writer, Modified Page Writerprocess reflection, Process Reflection–Process Reflection, Process Reflectiondebug BCD option, Hung or Unresponsive Systemsdebug command, BitLocker Key Recoverydebug element, The BIOS Boot Sector and Bootmgrdebug environments, 0x8E - KERNEL_MODE_EXCEPTION_NOT_HANDLEDdebugaddress element, The BIOS Boot Sector and Bootmgrdebugger, The BIOS Boot Sector and Bootmgr, Crash Dump Files, Crash Dump Files, Advanced Crash Dump Analysis–Stack Trashes, Advanced Crash Dump Analysis, Stack TrashesDebugger Extension APIs, Crash Dump Filesdebugging mode, Hung or Unresponsive Systems–When There Is No Crash Dump, Hung or Unresponsive Systems, When There Is No Crash Dump, When There Is No Crash DumpDebugging Tools for Windows, Advanced Crash Dump Analysis–Stack Trashes, Advanced Crash Dump Analysis, Stack Trashesdebugport element, The BIOS Boot Sector and Bootmgrdebugstart element, The BIOS Boot Sector and Bootmgrdebugtype element, The BIOS Boot Sector and BootmgrDecodeSystemPointer API, Software Data Execution Preventiondecommitting memory, Heap Manager Structuredecommitting pages, Reserving and Committing Pagesdecompressing files, Compressing Nonsparse Datadecreasing thresholds (processors), Thresholds and Policy SettingsDecryptFile function, Encryptiondecryption, The Decryption Processdedicated logs, Log Types, Owner PagesDefault BCD element, The BIOS Boot Sector and Bootmgrdefault core parking, Core Parking Policiesdefault process heaps, Types of Heapsdefault resource manager (, Master File Table, Resource Managers, Resource Managers, On-Disk ImplementationDefineDosDevice function, Opening DevicesDefrag.exe, Defragmentationdefragmentation, I/O Priorities, NAND-Type Flash Memory, Page Files, Logical Prefetcher, POSIX Support–Defragmentation, Defragmentation, DefragmentationNTFS design goals, POSIX Support–Defragmentation, Defragmentation, Defragmentationpage files, Page Filesprefetch operations, Logical Prefetcherpriorities, I/O PrioritiesSSDs, NAND-Type Flash Memorydefragmentation APIs, Defragmentationdelayed file deleting, Smss, Csrss, and Wininitdelayed file renaming, Smss, Csrss, and Wininitdelete APIs, Transactional APIsdelete operations, Smss, Csrss, and Wininitdeleted files, File Deletion and the Trim Command, Resource Managersdeleted partitions, Basic Disk Volume Managerdemand paging, Virtual Address Descriptors, Demand Pagingdemand-start (3) value, The Start Valuedemand-zero pages, Reserving and Committing Pages, Page Fault Handling, Commit Charge and the System Commit Limit, Page List Dynamics–Page List Dynamics, Page List Dynamics, Page List Dynamics, Page List Dynamicsin commit charge, Commit Charge and the System Commit Limitpage faults and, Page Fault Handlingpage list dynamics, Page List Dynamics–Page List Dynamics, Page List Dynamics, Page List Dynamics, Page List Dynamicsprivate committed pages, Reserving and Committing Pagesdemotion (performance states), Thresholds and Policy SettingsDependOnGroup value, The Start Valuedeprioritization (robust performance), Robust Performancedesktops, Smss, Csrss, and Wininit, Post–Splash Screen Crash or Hanginitializing objects, Smss, Csrss, and Wininitpost-splash-screen hangs or crashes, Post–Splash Screen Crash or HangDESX encryption, Encrypting File Datadetecthal element, The BIOS Boot Sector and Bootmgrdetection component (FTH), Fault Tolerant Heapdevice drivers, Typical I/O Processing–Layered Drivers, Types of Device Drivers, Types of Device Drivers, Types of Device Drivers, Layered Drivers–Layered Drivers, Layered Drivers, Layered Drivers, Layered Drivers, Structure of a Driver, Structure of a Driver, Structure of a Driver–Opening Devices, Structure of a Driver, Driver Objects and Device Objects, Driver Objects and Device Objects, Driver Objects and Device Objects, Driver Objects and Device Objects, Driver Objects and Device Objects, Opening Devices–Opening Devices, Opening Devices, Opening Devices, Opening Devices, I/O Request Packets–IRP Stack Locations, IRP Stack Locations, IRP Stack Locations, I/O Request to a Single-Layered Driver, I/O Request to a Single-Layered Driver, Servicing an Interrupt, Servicing an Interrupt, Servicing an Interrupt, Completing an I/O Request, Completing an I/O Request, Completing an I/O Request, I/O Requests to Layered Drivers–I/O Requests to Layered Drivers, I/O Requests to Layered Drivers, I/O Requests to Layered Drivers, User-Mode Driver Framework (UMDF), User-Mode Driver Framework (UMDF), The Plug and Play (PnP) Manager, Disk Drivers, Disk Class, Port, and Miniport Drivers, Disk Class, Port, and Miniport Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Disk Device Objects, Partition Manager, Shared Memory and Mapped Files, Monitoring Pool Usage–Monitoring Pool Usage, Monitoring Pool Usage, Monitoring Pool Usage, Look-Aside Lists, x86 Virtual Address Translation, Physical Memory Limits, Startup and Shutdown, Safe Mode–Windows Recovery Environment (WinRE), Driver Loading in Safe Mode, Driver Loading in Safe Mode, Boot Logging in Safe Mode–Windows Recovery Environment (WinRE), Windows Recovery Environment (WinRE), Windows Recovery Environment (WinRE), Windows Recovery Environment (WinRE), Windows Recovery Environment (WinRE), System File Corruption, System Hive Corruption, The Blue Screen, Causes of Windows Crashes, Troubleshooting Crashes–Troubleshooting Crashes, Troubleshooting Crashes, Troubleshooting Crashes, Troubleshooting Crashes, Verbose Analysis, Hung or Unresponsive Systems, 0xD1 - DRIVER_IRQL_NOT_LESS_OR_EQUAL, 0x8E - KERNEL_MODE_EXCEPTION_NOT_HANDLEDaccess violations, Causes of Windows Crashesassociated IRPs, I/O Requests to Layered Drivers–I/O Requests to Layered Drivers, I/O Requests to Layered Drivers, I/O Requests to Layered Driversblue screen information, The Blue Screenboot process, Startup and Shutdownbreakpoints in, 0x8E - KERNEL_MODE_EXCEPTION_NOT_HANDLEDcorruption and startup issues, System File Corruption, System Hive Corruptiondeadlock detection, Hung or Unresponsive Systemsdeciphering names, Troubleshooting Crashesdisk drivers, Disk Drivers, Disk Class, Port, and Miniport Drivers, Disk Class, Port, and Miniport Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Disk Device Objects, Partition Managerdriver and device objects, Structure of a Driver–Opening Devices, Driver Objects and Device Objects, Driver Objects and Device Objects, Driver Objects and Device Objects, Driver Objects and Device Objects, Driver Objects and Device Objects, Opening Deviceshigh IRQL faults, 0xD1 - DRIVER_IRQL_NOT_LESS_OR_EQUALIRP processing, I/O Request Packets–IRP Stack Locations, IRP Stack Locations, IRP Stack Locations, I/O Request to a Single-Layered Driver, I/O Request to a Single-Layered Driver, Servicing an Interrupt, Completing an I/O Request, Completing an I/O Requestkernel-mode, Types of Device Drivers, User-Mode Driver Framework (UMDF)look-aside lists, Look-Aside Listsnew, crashing, Troubleshooting Crashes–Troubleshooting Crashes, Troubleshooting Crashes, Troubleshooting Crashesopening devices, Opening Devices–Opening Devices, Opening Devices, Opening Devicesphysical memory support and, Physical Memory Limitspool tags, Monitoring Pool Usage–Monitoring Pool Usage, Monitoring Pool Usage, Monitoring Pool Usageroutines, Structure of a Driver, Structure of a Driver, Structure of a Driversafe mode booting, Safe Mode–Windows Recovery Environment (WinRE), Driver Loading in Safe Mode, Driver Loading in Safe Mode, Boot Logging in Safe Mode–Windows Recovery Environment (WinRE), Windows Recovery Environment (WinRE), Windows Recovery Environment (WinRE), Windows Recovery Environment (WinRE)section objects and, Shared Memory and Mapped Filesservicing interrupts, Servicing an Interrupt, Servicing an Interrupt, Completing an I/O Requesttroubleshooting, Windows Recovery Environment (WinRE)types of, Typical I/O Processing–Layered Drivers, Types of Device Drivers, Layered Driversuser mode, Types of Device Drivers, User-Mode Driver Framework (UMDF), The Plug and Play (PnP) Managerversion information, Verbose Analysisviewing loaded drivers list, Layered Drivers–Layered Drivers, Layered Drivers, Layered Driversvirtual address and, x86 Virtual Address Translationdevice IDs, Device Stacks, Device Stack Driver Loading, The BIOS Boot Sector and Bootmgrdevice instance IDs (DIIDs), Device Stack Driver Loading, Device Stack Driver Loadingdevice interrupt request level (DIRQL), Structure of a Driver, Servicing an Interruptdevice IRQL (DIRQL), Structure of a Driver, Servicing an InterruptDevice Manager (Devmgmt.msc), Device Enumeration–Device Enumeration, Device Enumeration, Device Enumeration, Device Stack Driver Loading, Driver Power Operation, 32-Bit Client Effective Memory Limits–32-Bit Client Effective Memory Limits, 32-Bit Client Effective Memory Limits, 32-Bit Client Effective Memory Limits, Post–Splash Screen Crash or Hang–Post–Splash Screen Crash or Hang, Post–Splash Screen Crash or Hang, Post–Splash Screen Crash or Hang, Verbose Analysisdevnode information, Device Stack Driver Loadingdisabling drivers, Post–Splash Screen Crash or Hang–Post–Splash Screen Crash or Hang, Post–Splash Screen Crash or Hang, Post–Splash Screen Crash or Hangdriver power mappings, Driver Power Operationlisting devices, Device Enumeration–Device Enumeration, Device Enumeration, Device Enumerationupdating drivers, Verbose Analysisviewing memory regions, 32-Bit Client Effective Memory Limits–32-Bit Client Effective Memory Limits, 32-Bit Client Effective Memory Limits, 32-Bit Client Effective Memory Limitsdevice objects, Structure of a Driver–Opening Devices, Driver Objects and Device Objects, Driver Objects and Device Objects, Driver Objects and Device Objects, Driver Objects and Device Objects, Opening Devices, The Volume Namespace–Volume Mounting, The Mount Manager, Volume Mounting, Volume Mounting, Volume Mounting, Volume Mounting, Local FSDs, Explicit File I/Odrive letters, The Volume Namespace–Volume Mounting, The Mount Manager, Volume Mounting, Volume Mounting, Volume Mounting, Volume Mountingin I/O process, Structure of a Driver–Opening Devices, Driver Objects and Device Objects, Driver Objects and Device Objects, Driver Objects and Device Objects, Driver Objects and Device Objects, Opening Devicesvolume’s, Local FSDs, Explicit File I/Odevice stacks, I/O Requests to Layered Drivers, User-Mode Driver Framework (UMDF), User-Mode Driver Framework (UMDF), Device Stacks, Device Stacksdevice stacks (DevStack), Attaching VHDsdevice trees, Device Enumeration, Device Enumeration, Device Enumerationdevice-specific modules (DSMs), Multipath I/O (MPIO) DriversDeviceIoControl function, IRP Buffer Management, Symbolic (Soft) Links and Junctions, Notmyfaultdevices, Opening Devices, Opening Devices, Opening Devices, I/O Cancellation, KMDF Data Model, The Plug and Play (PnP) Manager, The Power Manager–Conclusion, The Power Manager, The Power Manager, The Power Manager, Power Manager Operation, Driver Power Operation, Driver Power Operation, Driver Power Operation, Driver and Application Control of Device Power, Power Availability Requests, Power Availability Requests, Processor Power Management (PPM), Core Parking Policies, Utility Function, Utility Function, Thresholds and Policy Settings, Thresholds and Policy Settings, Performance Check, Conclusion, Conclusion, Online Crash Analysisdriver power control, Driver and Application Control of Device PowerI/O cancellation, I/O CancellationKMDF objects, KMDF Data Modellisting for crash analysis, Online Crash Analysisname mappings, Opening Devicesnames, Opening DevicesPnP manager, The Plug and Play (PnP) Managerpower management, The Power Manager–Conclusion, The Power Manager, The Power Manager, Power Manager Operation, Driver Power Operation, Driver Power Operation, Driver Power Operation, Power Availability Requests, Power Availability Requests, Processor Power Management (PPM), Core Parking Policies, Utility Function, Utility Function, Thresholds and Policy Settings, Thresholds and Policy Settings, Performance Check, Conclusion, Conclusionpower states, The Power Managersynchronizing access, Opening DevicesDEVICE_OBJECT structure, KMDF Data Modeldevnodes, Device Enumeration, Device Enumeration, Device Stack Driver Loading–Device Stack Driver Loading, Device Stack Driver Loading, Device Stack Driver Loadingdifference data, Shadow Copy Providerdifferences area, Copy-on-Write Shadow Copiesdifferencing (virtual hard disks), Virtual Hard Disk Supportdiffuser (encryption), Encryption Keys, Encryption Keys, Full-Volume Encryption Driverdigital signatures, I/O System Components, Driver Installationdir command, Multiple Data Streams, File Namesdirect I/O, IRP Buffer Managementdirectories, The I/O Manager, Troubleshooting File System Problems, Symbolic (Soft) Links and Junctions, Compression and Sparse Files, Data Compression and Sparse Files–The Change Journal File, Data Compression and Sparse Files, Compressing Nonsparse Data, Compressing Nonsparse Data, The Change Journal File, The Change Journal File, Indexing, Transactional APIs–Resource Managers, Resource Managers, Resource Managers, Encrypting File System Security, Encrypting File System Security, Encrypting File System Security, Encrypting File Data, System File Corruptionas virtual files, The I/O Managercompression, Compression and Sparse Files, Data Compression and Sparse Files–The Change Journal File, Data Compression and Sparse Files, Compressing Nonsparse Data, Compressing Nonsparse Data, The Change Journal Fileencrypting, Encrypting File System Security, Encrypting File System Security, Encrypting File System Security, Encrypting File Dataindexing, Indexingmissing, Troubleshooting File System Problemsnew, The Change Journal Filesymbolic links, Symbolic (Soft) Links and Junctionstransaction resource managers, Transactional APIs–Resource Managers, Resource Managers, Resource ManagersWindows Resource Protection, System File Corruptiondirectory junctions, Opening Devices, Hard Links, Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and JunctionsDirectory Services Restore, Safe Mode, Driver Loading in Safe ModeDirectX drivers, Layered Driversdirty bits, Page Tables and Page Table Entries, Hardware vs. Software Write Bits in Page Table Entries, Page Fault Handling, Fast I/Odirty page table recovery, Recovery, Analysis Passdirty page threshold, Write Throttling, Write Throttlingdirty pages, Memory Manager Components, Cache Physical Size–Cache Data Structures, Cache Data Structures, Write-Back Caching and Lazy Writing, Disabling Lazy Writing for a File, Flushing Mapped Files, Cache Manager’s Lazy Writerlazy writer, Write-Back Caching and Lazy Writing, Disabling Lazy Writing for a File, Cache Manager’s Lazy Writermodified page writer, Memory Manager Componentsmultiple process mapped files, Flushing Mapped Filesstandby and modified lists, Cache Physical Size–Cache Data Structures, Cache Data Structuresdiscovery mechanisms, iSCSI Drivers–Multipath I/O (MPIO) Drivers, iSCSI Drivers, Multipath I/O (MPIO) Driversdiscovery volumes, BitLocker To Go, BitLocker To Godisk allocations, Compressing Nonsparse DataDisk Defragment utility (Dfrgul.exe), Defragmentationdisk device objects, Disk Device Objects, Disk Device Objects, Partition Managerdisk devices, Disk Devices, Disk Sector Format, Disk Sector Format, NAND-Type Flash Memory, File Deletion and the Trim Command, File Deletion and the Trim Command, Partition Managerdisk drivers, I/O Requests to Layered Drivers, Winload, Disk Class, Port, and Miniport Drivers–Multipath I/O (MPIO) Drivers, Disk Class, Port, and Miniport Drivers–Multipath I/O (MPIO) Drivers, Disk Class, Port, and Miniport Drivers–Multipath I/O (MPIO) Drivers, Disk Class, Port, and Miniport Drivers, Disk Class, Port, and Miniport Drivers, iSCSI Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Disk Device Objects, Partition Manager, Volume I/O Operations–Virtual Disk Service, Virtual Disk Servicedisk class, Disk Class, Port, and Miniport Drivers–Multipath I/O (MPIO) Drivers, Disk Class, Port, and Miniport Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Disk Device Objectsdisk I/O operations, Volume I/O Operations–Virtual Disk Service, Virtual Disk Servicefile system drivers, I/O Requests to Layered Driversminiport, Disk Class, Port, and Miniport Drivers–Multipath I/O (MPIO) Drivers, Disk Class, Port, and Miniport Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Driverspartition manager, Partition Managerport, Disk Class, Port, and Miniport Drivers–Multipath I/O (MPIO) Drivers, iSCSI Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) DriversWINLOAD, Winloaddisk entries (LDM), The LDM Database–The LDM Database, The LDM Database, The LDM Databasedisk groups, The LDM DatabaseDisk Management MMC snap-in, Dynamic Disk Volume Manager, Multipartition Volume Management, Mirrored Volumes, Mount Points, Virtual Disk Service, FAT12, FAT16, and FAT32, Volumes, Clusters–Master File Table, Clusters, Master File Tablecluster size, Clusters–Master File Table, Clusters, Master File Tablecreating mirrored volumes, Mirrored Volumescreating volumes, Volumesformatting FAT volumes, FAT12, FAT16, and FAT32mount points, Mount PointsVDS APIs, Virtual Disk Servicevolume manager, Dynamic Disk Volume Manager, Multipartition Volume Managementdisk miniport drivers, Winload, Disk Class, Port, and Miniport Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Crash Dump Generationdisk offsets, Multipartition Volume Management, The Mount Managerdisk port drivers, Disk Class, Port, and Miniport Drivers–iSCSI Drivers, Disk Class, Port, and Miniport Drivers, iSCSI Driversdisk scheduling algorithms, Winloaddisk sector formats, Disk Sector Format–NAND-Type Flash Memory, Disk Sector Format, Disk Sector Format, NAND-Type Flash Memorydisk signatures, The Mount Manager, The BIOS Boot Sector and BootmgrDisk.sys driver, Multipath I/O (MPIO) DriversDisk2VHD utility, Virtual Hard Disk SupportDiskmon utility, Multipath I/O (MPIO) Driversdiskpart command, VolumesDiskPart utility, Volume Mounting, Virtual Hard Disk Supportdisks, Storage Management, Rotating Magnetic Disks, Disk Sector Format, Solid State Disks, NAND-Type Flash Memory, File Deletion and the Trim Command, File Deletion and the Trim Command, Virtual Disk Servicedismount operations, Local FSDsdispatch entry points, IRP Stack Locationsdispatch functions, Structure and Operation of a KMDF Driverdispatch levels, Synchronization, Causes of Windows Crashesdispatch methods (KMDF queues), KMDF I/O Modeldispatch routines, Structure of a Driver, IRP Stack Locations, IRP Stack Locations, KMDF I/O Model, Driver Support for Plug and Playdispatcher data structures, Initializing the Kernel and Executive SubsystemsDISPATCH_LEVEL IRQL, Completing an I/O Request, SynchronizationDispdiag.exe (display diagnostic dump utility), x86 Address Space Layoutsdisplay diagnostic dump utility (Dispdiag.exe), x86 Address Space Layoutsdisplay drivers, Causes of Windows Crashesdisplaybootmenu element, The BIOS Boot Sector and Bootmgrdisplayorder element, The BIOS Boot Sector and Bootmgrdistributed link-tracking, Link TrackingDistributed Transaction Coordinator, Resource Managersdl command, Power Availability RequestsDllhost (Dllhost.exe), Logical PrefetcherDllhst3g.exe, x86 Address Space LayoutsDLLs (dynamic link libraries), User-Mode Driver Framework (UMDF), Virtual Disk Service, Shared Memory and Mapped Files, User Address Space Layout, User Address Space Layoutaddress space, User Address Space Layout, User Address Space Layoutsharing, Shared Memory and Mapped FilesUMDF drivers, User-Mode Driver Framework (UMDF)VDS hardware providers, Virtual Disk ServiceDMA (direct memory access), I/O Requests to Layered Drivers, Driver Verifier, KMDF Data Model, User-Mode Driver Framework (UMDF), Caching with the Direct Memory Access Interfaces, Buffer Overruns, Memory Corruption, and Special Poolcaching processes, Caching with the Direct Memory Access InterfacesIRP processing, I/O Requests to Layered DriversKMDF objects, KMDF Data Modelpool corruption, Buffer Overruns, Memory Corruption, and Special PoolUMDF, User-Mode Driver Framework (UMDF)verifying functions and buffers, Driver VerifierDMA Checking option, Driver VerifierDMA common buffer objects, KMDF Data ModelDMA enabler objects, KMDF Data ModelDMA transaction objects, KMDF Data ModelDMA-aware devices, IRP Buffer ManagementDMDiskManager, Dynamic Disk Volume Manager–Multipartition Volume Management, Multipartition Volume Managementdouble errors, NTFS Bad-Cluster Recoverydouble faults, 0x7F - UNEXPECTED_KERNEL_MODE_TRAP, 0x7F - UNEXPECTED_KERNEL_MODE_TRAPdouble-freeing memory, Driver VerifierDO_PRIORITY_CALLBACK_ENABLED flag, I/O Priority Inversion Avoidance (I/O Priority Inheritance)DPC routines, Structure of a DriverDPC stacks, Stacks, DPC Stack, Initializing the Kernel and Executive SubsystemsDPC/dispatch levels, Driver Verifier, Causes of Windows Crashes, Basic Crash Dump Analysis, Hung or Unresponsive SystemsDPCs (deferred procedure calls), Structure of a Driver, Structure of a Driver, Servicing an Interrupt–Completing an I/O Request, Completing an I/O Request, Completing an I/O Request, Completing an I/O Request, KMDF Data Model, Performance Check, Stacks, Kernel Stacks, Driver Verifier, Hung or Unresponsive Systemshung systems, Hung or Unresponsive Systemsin I/O process, Structure of a Driverinterrupt processing, Servicing an Interrupt–Completing an I/O Request, Completing an I/O Request, Completing an I/O RequestKMDF objects, KMDF Data Modelpool quotas and, Driver Verifierpower domain masters, Performance Checkroutines, Structure of a Driverstacks, Stacks, Kernel Stacksthread context, Completing an I/O Requestdps command, Stack TrashesDRA (Data Recovery Agent), BitLocker ManagementDRF (data recovery field), Encrypting a File for the First Time, Encrypting a File for the First Time, Encrypting File Datadrive letters, Basic Disk Volume Manager, The LDM Database, Explicit File I/Odynamic disks, The LDM Databasesymbolic links, Explicit File I/Ovolume manager, Basic Disk Volume Managerdriver callbacks, When There Is No Crash Dumpdriver entry points, Driver Objects and Device Objectsdriver groups, Driver Loading in Safe Mode, Using Crash Troubleshooting Toolsdriver host processes, User-Mode Driver Framework (UMDF)driver images, Dynamic System Virtual Address Space Managementdriver manager, User-Mode Driver Framework (UMDF)–User-Mode Driver Framework (UMDF), User-Mode Driver Framework (UMDF), User-Mode Driver Framework (UMDF)Driver Verifier, Kernel-Mode Driver Framework (KMDF), Large and Small Pages, Monitoring Pool Usage, Driver Verifier–Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifier, Using Crash Troubleshooting Tools, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool–Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, 0xC5 - DRIVER_CORRUPTED_EXPOOL, 0xC5 - DRIVER_CORRUPTED_EXPOOLdisabling large pages, Large and Small Pagesdriver errors, Using Crash Troubleshooting Toolsenabling special pool, Buffer Overruns, Memory Corruption, and Special Pool–Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special PoolIRQL checking, Driver Verifierlow resources simulation, Driver Verifiermemory manager, Driver Verifier–Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifiermiscellaneous checks, Driver VerifierNo Reboot option, Buffer Overruns, Memory Corruption, and Special Pooloverview, Kernel-Mode Driver Framework (KMDF)pool tracking, Monitoring Pool Usage, Driver Verifierspecial pool verification, Driver Verifier, Driver Verifier, Buffer Overruns, Memory Corruption, and Special Pool, 0xC5 - DRIVER_CORRUPTED_EXPOOL, 0xC5 - DRIVER_CORRUPTED_EXPOOLDriver Verifier Manager, Driver Verifier, Driver Verifier, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pooldriver-signing policies, Driver Installation, Driver Installation, Driver InstallationDriverEntry routine, Structure of a Driverdriverloadfailurepolicy element, The BIOS Boot Sector and Bootmgrdrivers, I/O System, The I/O Manager, The I/O Manager, IRP Stack Locations, IRP Stack Locations, IRP Buffer Management–I/O Request to a Single-Layered Driver, IRP Buffer Management, I/O Request to a Single-Layered Driver, Synchronization–Synchronization, Synchronization, Synchronization, I/O Requests to Layered Drivers, I/O Requests to Layered Drivers, I/O Requests to Layered Drivers, I/O Requests to Layered Drivers, KMDF Data Model, Level of Plug and Play Support, Level of Plug and Play Support–The Start Value, Driver Support for Plug and Play, Driver Loading, Initialization, and Installation–Driver Installation, Driver Loading, Initialization, and Installation–The Start Value, Driver Loading, Initialization, and Installation–Driver Installation, Driver Loading, Initialization, and Installation–The Power Manager, The Start Value, The Start Value, The Start Value, The Start Value, The Start Value, Device Enumeration, Device Enumeration, Device Enumeration, Device Enumeration, Device Enumeration, Device Enumeration, Device Enumeration, Device Enumeration, Device Enumeration, Device Enumeration, Device Enumeration, Device Stacks, Device Stacks, Device Stack Driver Loading, Device Stack Driver Loading, Device Stack Driver Loading, Device Stack Driver Loading, Device Stack Driver Loading, Device Stack Driver Loading, Device Stack Driver Loading, Device Stack Driver Loading, Driver Installation, Driver Installation, Driver Installation, Driver Installation, Driver Installation, Driver Installation, Driver Installation, Driver Installation, Driver Installation, Driver Installation, Driver Installation, Driver Installation, The Power Manager, Power Manager Operation–Driver Power Operation, Driver Power Operation, Multipath I/O (MPIO) Drivers, Internal Synchronization, Monitoring Pool Usage–Monitoring Pool Usage, Monitoring Pool Usage, Monitoring Pool Usage, Dynamic System Virtual Address Space Management, NTFS File System Driver, Driver Loading in Safe Mode, Driver Loading in Safe Mode, Driver Loading in Safe Mode, Driver Loading in Safe Mode, Crash Dump Files, Verbose Analysis, Stack Trashes, Hung or Unresponsive Systems, When There Is No Crash Dumpbuffer management, IRP Buffer Management–I/O Request to a Single-Layered Driver, IRP Buffer Management, I/O Request to a Single-Layered Drivercallbacks, When There Is No Crash Dumpcalling other drivers, The I/O Managerdeadlock detection, Hung or Unresponsive Systemsdisk drivers, Multipath I/O (MPIO) Driversdispatch routines, IRP Stack Locationsgroups, Driver Loading in Safe ModeI/O system and, I/O Systemimages, Dynamic System Virtual Address Space ManagementIRPs, The I/O ManagerKMDF objects, KMDF Data Modellayered, I/O Requests to Layered Drivers, I/O Requests to Layered Drivers, I/O Requests to Layered Drivers, I/O Requests to Layered Drivers, NTFS File System Driverloading in safe mode, Driver Loading in Safe Mode, Driver Loading in Safe Mode, Driver Loading in Safe Modelower order, Stack Trashesmajor function codes, IRP Stack Locationsmatching for minidumps, Crash Dump Filesmemory manager, Internal Synchronizationnon-Plug and Play, Level of Plug and Play SupportPnP initialization, Driver Loading, Initialization, and Installation–Driver Installation, The Start Value, Device Enumeration, Device Enumeration, Device Enumeration, Device Enumeration, Device Stack Driver Loading, Device Stack Driver Loading, Device Stack Driver Loading, Driver Installation, Driver InstallationPnP installation, Driver Loading, Initialization, and Installation–The Power Manager, The Start Value, Device Enumeration, Device Enumeration, Device Enumeration, Device Stacks, Device Stack Driver Loading, Device Stack Driver Loading, Device Stack Driver Loading, Driver Installation, Driver Installation, Driver Installation, Driver Installation, Driver Installation, The Power ManagerPnP loading, Driver Loading, Initialization, and Installation–Driver Installation, Device Enumeration, Device Enumeration, Device Enumeration, Device Enumeration, Device Stacks, Device Stack Driver Loading, Device Stack Driver Loading, Driver Installation, Driver InstallationPnP support, Level of Plug and Play Support–The Start Value, Driver Support for Plug and Play, The Start Valuepool tags, Monitoring Pool Usage–Monitoring Pool Usage, Monitoring Pool Usage, Monitoring Pool Usagepower mappings, Power Manager Operation–Driver Power Operation, Driver Power Operationprotected driver lists, Driver Installationregistry keys, Driver Loading, Initialization, and Installation–The Start Value, The Start Value, The Start Valuesigned and unsigned, Driver Installation, Driver Installationsynchronizing data and hardware access, Synchronization–Synchronization, Synchronization, Synchronizationversion information, Verbose AnalysisDRIVER_CORRUPTED_EXPOOL stop code, Causes of Windows Crashes, 0xC5 - DRIVER_CORRUPTED_EXPOOLDRIVER_IRQL_NOT_LESS_OR_EQUAL stop code, Causes of Windows Crashes, 0xD1 - DRIVER_IRQL_NOT_LESS_OR_EQUAL, 0xD1 - DRIVER_IRQL_NOT_LESS_OR_EQUALDRIVER_OVERRAN_STACK_BUFFER stop code, Stack TrashesDRIVER_POWER_STATE_FAILURE stop code, Causes of Windows CrashesDrvinst.exe process, Driver InstallationDSM (device-specific modules), Multipath I/O (MPIO) Driversdt command, Thresholds and Policy Settings, Performance Check, x86 Session Space, Initializing the Kernel and Executive Subsystemsdual-boot environments, Mount Pointsdummy pages, Clustered Page Faults–Page Files, Clustered Page Faults, Page Files.dump command, Crash Dump Files, Hung or Unresponsive Systemsdump counts (BLF), Log LayoutDUMP files, Crash Dump Filesdump pointer with symbols command, Stack TrashesDumpanalysis.org website, ConclusionDumpbin utility, x86 Address Space Layouts.dumpdebug command, Crash Dump FilesDumpfve.sys driver, Crash Dump Generationduplicate data in memory, Section Objects–Section Objects, Section Objects, Section ObjectsDuplicateHandle function, Opening Devices, Shared Memory and Mapped FilesDVD drives, Storage TerminologyDVD formats, UDFDxgport/Videoprt driver, Layered Driversdynamic address space, x86 System Address Space Layout, x86 Session Space, Dynamic System Virtual Address Space Management, Dynamic System Virtual Address Space Management, Dynamic System Virtual Address Space Management, Dynamic System Virtual Address Space Managementdynamic bad-cluster remapping, Dynamic Bad-Cluster Remapping, NTFS Bad-Cluster Recoverydynamic disks, Volume Management, LDM and GPT or MBR-Style Partitioning, LDM and GPT or MBR-Style Partitioning, Dynamic Disk Volume Manager, Dynamic Disk Volume Manager, Multipartition Volume Management, Multipartition Volume Management–RAID-5 Volumes, RAID-5 Volumesmultipartition disk support, Volume Managementpartitioning, LDM and GPT or MBR-Style Partitioningstorage management, LDM and GPT or MBR-Style Partitioning, Dynamic Disk Volume Manager, Multipartition Volume Management–RAID-5 Volumes, RAID-5 Volumesvolume manager, Dynamic Disk Volume Manager, Multipartition Volume Managementdynamic interrupt redirection, Disk Class, Port, and Miniport Driversdynamic loading and unloading, I/O System Componentsdynamic page sizes, Large and Small Pagesdynamic partitioning, Dynamic Partitioningdynamic physical NVRAM cache, Unified Cachingdynamic system virtual address space management, Dynamic System Virtual Address Space Management–System Virtual Address Space Quotas, Dynamic System Virtual Address Space Management, Dynamic System Virtual Address Space Management, System Virtual Address Space Quotas, System Virtual Address Space Quotasdynamic virtual hard disks, Virtual Hard Disk Support