Windows® Internals, Sixth Edition, Part 2

HH-HDDs (hybrid hard disk drives), ReadyDriveHAL (hardware abstraction layer), The I/O Manager–Device Drivers, Typical I/O Processing, Device Drivers, Driver Verifier–Structure and Operation of a KMDF Driver, Structure and Operation of a KMDF Driver, The Start Value, Virtual Address Space Layouts, Dynamic System Virtual Address Space Management, The BIOS Boot Sector and Bootmgr, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystems, Code Overwrite and System Code Write ProtectionBCD elements, The BIOS Boot Sector and BootmgrBIOS emulation code, Initializing the Kernel and Executive SubsystemsDriver Verifier, Driver Verifier–Structure and Operation of a KMDF Driver, Structure and Operation of a KMDF DriverI/O processing, The I/O Manager–Device Drivers, Typical I/O Processing, Device Driversinitializing, Initializing the Kernel and Executive SubsystemsRoot driver, The Start Valuesystem code write protection, Code Overwrite and System Code Write Protectionsystem memory reserved for, Virtual Address Space Layoutsvirtual addresses, Dynamic System Virtual Address Space ManagementHalAllProcessorsStarted function, Initializing the Kernel and Executive Subsystemshalbreakpoint element, The BIOS Boot Sector and BootmgrHalInitializeBIOS function, Initializing the Kernel and Executive SubsystemsHalInitializeProcessor function, Initializing the Kernel and Executive SubsystemsHalInitSystem function, Initializing the Kernel and Executive SubsystemsHalQueryRealTimeClock function, Initializing the Kernel and Executive Subsystemshandle caching, Lockinghandles, Driver Objects and Device Objects, Opening Devices, Opening Devices, Opening Devices, Completing an I/O Request, User-Initiated I/O Cancellation, I/O Completion Port Operation, KMDF Data Model–KMDF I/O Model, KMDF I/O Model, Driver Support for Plug and Play, Shared Memory and Mapped Files, Shared Memory and Mapped Files, Shared Memory and Mapped Files, Page Files, Per-File Cache Data Structures, File System Operation, NTFS File System Driver, The Change Journal File, Transactional APIs–Resource Managers, Transactional APIs, Resource ManagersAPCs, Completing an I/O Requestchange journal, The Change Journal Filechild and parent processes, Opening Devicescompletion ports, I/O Completion Port Operationduplication, Shared Memory and Mapped Filesfile objects, Opening Devices, Per-File Cache Data Structures, NTFS File System Driverfiles, Shared Memory and Mapped FilesI/O cancellation, User-Initiated I/O CancellationI/O process, Opening Devicesinheritance, Shared Memory and Mapped FilesKMDF objects, KMDF Data Model–KMDF I/O Model, KMDF I/O Modelmultiple, File System Operationobtaining for devices, Driver Objects and Device Objectspage files, Page Filesremoving devices, Driver Support for Plug and Playtransacted operations, Transactional APIs–Resource Managers, Transactional APIs, Resource Managershard disks, Rotating Magnetic Disks–NAND-Type Flash Memory, Solid State Disks–File Deletion and the Trim Command, NAND-Type Flash Memory, File Deletion and the Trim Command, ReadyBoost, ReadyDrive, File Systems, Causes of Windows Crashesfailures, Causes of Windows CrashesReadyBoost and, ReadyBoost, ReadyDriverotating magnetic, Rotating Magnetic Disks–NAND-Type Flash Memory, NAND-Type Flash Memorysector size, File Systemssolid state, Solid State Disks–File Deletion and the Trim Command, File Deletion and the Trim Commandhard faults, Logical Prefetcher, Components, Scenarioshard links, Hard Links, Symbolic (Soft) Links and Junctions, POSIX Support, File Records, File Names, The Change Journal Filehard partitions, LDM and GPT or MBR-Style Partitioninghard working set limits, Working Set Managementhardware, I/O System Components, The Power Manager, Utility Function, Clone Shadow Copies, Protecting Memory, The UEFI Boot Process, Initializing the Kernel and Executive Subsystems, Causes of Windows Crashes, 0x7F - UNEXPECTED_KERNEL_MODE_TRAP, Hardware Malfunctionsbound traps or double faults, 0x7F - UNEXPECTED_KERNEL_MODE_TRAPcrash stop codes, Causes of Windows Crashesdetection, The UEFI Boot Processdevice drivers, I/O System Componentsfeedback, Utility Functionlatency, The Power Managermalfunctions, Hardware Malfunctionsmemory protection, Protecting Memorymirroring, Clone Shadow Copiesvirtualization, Initializing the Kernel and Executive Subsystemshardware attacks, Encryption Keyshardware DEP, No Execute Page ProtectionHARDWARE hive, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystemshardware IDs, Driver InstallationHardware Installation Wizard, Driver Installationhardware providers, Virtual Disk Servicehardware PTE accessed bit, Working Set Managementhardware PTEs, Page Tables and Page Table Entries, Translation Look-Aside Buffer, Physical Address Extension (PAE), x64 Virtual Address Translationhardware tree, Initializing the Kernel and Executive Subsystemshardware Write bits, Hardware vs. Software Write Bits in Page Table Entrieshardware-detected memory exceptions, Memory Manager Componentshash entries (working sets), PFN Data Structureshashes, Driver Installation, Consolidated Security–Consolidated Security, Consolidated Security, Consolidated SecurityHasOverlappedIoCompleted macro, Synchronous and Asynchronous I/OHBAs (Host Bus Adapters), iSCSI Drivers, iSCSI Drivershead seeks, Intelligent Read-Aheadheaders, Resident and Nonresident AttributesHeadlessInit function, Initializing the Kernel and Executive Subsystemsheads (hard disks), Disk Devicesheap and heap manager, Services Provided by the Memory Manager, Kernel-Mode Heaps (System Memory Pools)–Look-Aside Lists, Look-Aside Lists, Heap Manager, Heap Manager, Types of Heaps–Heap Manager Structure, Types of Heaps, Types of Heaps, Types of Heaps, Heap Manager Structure, Heap Manager Structure, Heap Manager Structure, Heap Synchronization, The Low Fragmentation Heap, Heap Security Features–Heap Debugging Features, Heap Debugging Features–Pageheap, Heap Debugging Features, Heap Debugging Features, Heap Debugging Features, Pageheap, Pageheap, Fault Tolerant Heap, User Address Space Layout, User Address Space Layout, User Address Space Layout, Heap Randomizationaddress space, User Address Space Layout, User Address Space LayoutAPIs, Heap Managerblocks, Types of Heapscore, Heap Manager Structuredebugging features, Heap Debugging Features–Pageheap, Heap Debugging Features, Pageheapfault tolerant, Fault Tolerant Heapfunctions (Heapxxx), Services Provided by the Memory Manager, Heap ManagerIDs, User Address Space Layoutkernel-mode, Kernel-Mode Heaps (System Memory Pools)–Look-Aside Lists, Look-Aside Listspageheap, Pageheappointers for processes, Types of Heapsrandomization, Heap Randomizationscalability, The Low Fragmentation Heapsecurity features, Heap Security Features–Heap Debugging Features, Heap Debugging Features, Heap Debugging Featuresstructure, Heap Manager Structuresynchronization, Heap Synchronizationtypes of, Types of Heaps–Heap Manager Structure, Heap Manager Structureuser-mode, Types of Heapsheap blocks, Heap ManagerHeap functions, Services Provided by the Memory Manager, Heap Managerheap IDs, User Address Space LayoutHeap interfaces, Heap ManagerHEAP linker flag, Types of Heapsheap storage, SynchronizationHeapCompatibilityInformation class, The Low Fragmentation HeapHeapCreate function, Heap ManagerHeapDestroy function, Heap ManagerHeapEnableTerminationOnCorruption class, Heap Security FeaturesHeapFree function, Fault Tolerant HeapHeapSetInformation API, The Low Fragmentation HeapHeapWalk function, Heap SynchronizationHEAP_NO_SERIALIZE flag, Heap Synchronizationhelp files (stop codes), The Blue ScreenHiberfil.sys (hibernation files), The Power Manager, BIOS Preboothibernation, Level of Plug and Play Support, The Power Manager, The Power Manager, Multipath I/O (MPIO) Drivers, BitLocker Drive Encryption, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, Windows Recovery Environment (WinRE)BCD information, The BIOS Boot Sector and Bootmgrboot status file information, Windows Recovery Environment (WinRE)MPIO, Multipath I/O (MPIO) Driversnon-Plug and Play drivers, Level of Plug and Play Supportresuming from, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and BootmgrS4 power state, The Power Manager, The Power Managervolume encryption, BitLocker Drive Encryptionhibernation files (Hiberfil.sys), The Power Manager, Nested File Systems, Shadow Copy Provider, ReadyDrive, BIOS Preboothibernation scenario (Superfetch), Scenarioshierarchy chains (KMDF), KMDF Data Modelhierarchy prioritization strategy, Prioritization Strategies, Prioritization Strategieshigh bits (address spaces), x86 Address Space LayoutsHigh I/O priority, I/O Priorities, Prioritization Strategieshigh IRQL faults, Basic Crash Dump Analysis, Verbose Analysis, Hung or Unresponsive Systems, 0xC5 - DRIVER_CORRUPTED_EXPOOLhigh memory allocation addresses, x86 Address Space Layoutshigh memory conditions, Memory Notification Events–Memory Notification Events, Memory Notification Events, Memory Notification Events, Memory Notification Eventshigh priority mapping VACBs, Systemwide Cache Data Structureshigh-level drivers, I/O System ComponentsHighCommitCondition event, Memory Notification Eventshighly utilized processor cores, Performance CheckHighMemoryCondition event, Memory Notification EventsHighNonPagedPoolCondition event, Memory Notification EventsHighPagedPoolCondition event, Memory Notification Eventshints, Key Features of the Cache Managerhistory tracking, Utility Function, Thresholds and Policy Settings, Thresholds and Policy Settings, Componentshive files, The BIOS Boot Sector and Bootmgrhost bus adapters (HBAs), iSCSI Drivers, Booting from iSCSIhost computers (debugging), When There Is No Crash Dump–When There Is No Crash Dump, When There Is No Crash Dump, When There Is No Crash Dumphost processes, User-Mode Driver Framework (UMDF)–User-Mode Driver Framework (UMDF), User-Mode Driver Framework (UMDF), User-Mode Driver Framework (UMDF)hot memory, PFN Data Structureshotfixes, Smss, Csrss, and Wininithotpatching technology, Smss, Csrss, and Wininithung or unresponsive systems, Solving Common Boot Problems–Post–Splash Screen Crash or Hang, Post–Splash Screen Crash or Hang, Stack Trashes–When There Is No Crash Dump, Hung or Unresponsive Systems, Hung or Unresponsive Systems, Hung or Unresponsive Systems, When There Is No Crash Dump, When There Is No Crash Dumpboot problems, Solving Common Boot Problems–Post–Splash Screen Crash or Hang, Post–Splash Screen Crash or Hangcrash dump analysis, Stack Trashes–When There Is No Crash Dump, Hung or Unresponsive Systems, Hung or Unresponsive Systems, Hung or Unresponsive Systems, When There Is No Crash Dump, When There Is No Crash Dumphung program screens, ShutdownHvInitSystem function, Initializing the Kernel and Executive Subsystemshybrid hard disk drives, ReadyDrive, Unified Cachinghybrid sleep states, The Power ManagerHyper-Threading feature, Core Parking PoliciesHyper-V, Partition Manager, Virtual Hard Disk Support, The BIOS Boot Sector and Bootmgr, Crash Dump Files, Hung or Unresponsive Systems, When There Is No Crash Dump–When There Is No Crash Dump, When There Is No Crash Dump, When There Is No Crash Dump, When There Is No Crash Dumpbooting from VHDs, Virtual Hard Disk Supportdisk attributes used by, Partition Managerdumping memory, Crash Dump Files, Hung or Unresponsive Systemskernel debugger, When There Is No Crash Dump–When There Is No Crash Dump, When There Is No Crash Dump, When There Is No Crash Dump, When There Is No Crash Dumploading hypervisor, The BIOS Boot Sector and Bootmgrhyperspace, Virtual Address Space Layoutshypervisor, Initializing the Kernel and Executive Subsystemshypervisor binaries, The BIOS Boot Sector and Bootmgrhypervisorbaudrate element, The BIOS Boot Sector and Bootmgrhypervisorchannel element, The BIOS Boot Sector and Bootmgrhypervisordebug element, The BIOS Boot Sector and Bootmgrhypervisordebugport element, The BIOS Boot Sector and Bootmgrhypervisordebugtype element, The BIOS Boot Sector and Bootmgrhypervisordisableslat element, The BIOS Boot Sector and Bootmgrhypervisorlaunchtype element, The BIOS Boot Sector and Bootmgrhypervisorpath element, The BIOS Boot Sector and Bootmgrhypervisoruselargevtlb element, The BIOS Boot Sector and Bootmgr