Windows® Internals, Sixth Edition, Part 2

Mmachine checks, Causes of Windows Crashesmagneto-optical storage media, UDFmailslots, Typical I/O Processingmajor function codes (IRP stack locations), IRP Stack Locationsmalloc function, Heap Managermalware, No Execute Page Protection–Copy-on-Write, Software Data Execution Prevention, Copy-on-WriteManage-bde.exe, BitLocker Managementmanual crash dumps, Hung or Unresponsive Systems, Hung or Unresponsive Systems, Hardware Malfunctionsmanual I/Os, KMDF I/O Modelmanual restore points, Previous Versions and System Restoremanually configured targets (iSCSI), iSCSI Driversmanually crashing systems, Hung or Unresponsive SystemsMANUALLY_INITIATED_CRASH stop code, Hung or Unresponsive Systemsmapped file functions, Services Provided by the Memory Manager, Local FSDs, Memory Manager’s Page Fault Handlermapped files, Fast I/O, Scatter/Gather I/O, Reserving and Committing Pages, Allocation Granularity–Shared Memory and Mapped Files, Shared Memory and Mapped Files, Shared Memory and Mapped Files, Shared Memory and Mapped Files, Shared Memory and Mapped Files, Shared Memory and Mapped Files, Types of Heaps, User Address Space Layout, Commit Charge and the System Commit Limit, Section Objects, Section Objects, Modified Page Writer–Modified Page Writer, Modified Page Writer–Modified Page Writer, Modified Page Writer, Modified Page Writer, Modified Page Writer, The Memory Manager, Cache Coherency, Cache Coherency, Read-Ahead and Write-Behindaddress space, User Address Space Layoutcache coherency, Cache Coherency, Cache Coherencycopy-on-write mapped memory, Commit Charge and the System Commit LimitI/O, Fast I/O, Scatter/Gather I/O, Shared Memory and Mapped Files, Section Objectsmemory manager, Allocation Granularity–Shared Memory and Mapped Files, Shared Memory and Mapped Files, Shared Memory and Mapped Files, Shared Memory and Mapped Filesmodified page writer, Modified Page Writer–Modified Page Writer, Modified Page Writer, Modified Page Writerobjects, Types of Heapspages, Reserving and Committing Pages, Modified Page Writer–Modified Page Writer, Modified Page Writerread-ahead and write-behind, Read-Ahead and Write-Behindsection objects, Section Objectsviewing, Shared Memory and Mapped Filesvirtual address space, The Memory Managermapped page writer, Recoverable File System Support, Caching with the Mapping and Pinning Interfaces, Write-Back Caching and Lazy Writingcache operations, Caching with the Mapping and Pinning Interfacesrecovery process, Recoverable File System Supportwrite-behind operations, Write-Back Caching and Lazy Writingmapped pages, Address Windowing Extensionsmapped views, Prototype PTEs, Cache Virtual Memory Management–Cache Working Set Size, Cache Working Set Size, Per-File Cache Data Structures, Transactional APIscache manager, Cache Virtual Memory Management–Cache Working Set Size, Cache Working Set SizeTxF transactions, Transactional APIsVACBs, Per-File Cache Data Structuresvalid and invalid pages, Prototype PTEsmapped writer threads, Write-Back Caching and Lazy Writingmapping, Previous Versions and System Restore–Conclusion, Conclusion, Memory Managementvirtual memory into physical, Memory Managementvolume shadow device objects, Previous Versions and System Restore–Conclusion, Conclusionmapping interface, Caching with the Mapping and Pinning Interfaces–Fast I/O, Caching with the Mapping and Pinning Interfaces, Fast I/Omapping methods, File System InterfacesMapUserPhysicalPages functions, Address Windowing ExtensionsMapViewOfFile function, Mapped File I/O and File Caching–I/O Request Packets, I/O Request Packets, Services Provided by the Memory Manager, Shared Memory and Mapped Files, Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit, Cache Coherencycache coherency issues, Cache Coherencycommitted storage, Commit Charge and the System Commit Limitcreating virtual address space, Commit Charge and the System Commit Limitmapped file I/O, Mapped File I/O and File Caching–I/O Request Packets, I/O Request Packetsmemory mapped file functions, Services Provided by the Memory Managersection views, Shared Memory and Mapped FilesMapViewOfFileEx function, Services Provided by the Memory Manager, Allocation Granularity, Shared Memory and Mapped FilesMapViewOfFileExNuma function, Shared Memory and Mapped FilesMarkov chain models, Page Priority and Rebalancingmarshalling, Marshallingmarshalling areas, Marshallingmass storage devices, Types of Device Drivers, Prioritization Strategies, Bandwidth Reservation (Scheduled File I/O)master file table backup (, Dynamic Partitioningmaxgroup element, The BIOS Boot Sector and Bootmgrmaximum pool sizes, Pool Sizes–Pool Sizes, Pool Sizes, Pool Sizes, Pool Sizesmaximum section size, Section Objectsmaximum utility (processors), Utility FunctionMaximumCommitCondition event, Memory Notification Eventsmaxproc element, The BIOS Boot Sector and BootmgrMBRs (master boot records), MBR-Style Partitioning, LDM and GPT or MBR-Style Partitioning–LDM and GPT or MBR-Style Partitioning, LDM and GPT or MBR-Style Partitioning, Mirrored Volumes, MBR Corruptioncorruption and startup issues, MBR CorruptionLDM partitioning, LDM and GPT or MBR-Style Partitioning–LDM and GPT or MBR-Style Partitioning, LDM and GPT or MBR-Style Partitioningmultipartition volumes, Mirrored Volumespartitioning style, MBR-Style PartitioningMCA (Micro Channel Architecture), The BIOS Boot Sector and BootmgrMD5 hashes, Encrypting a File for the First TimeMDLs (memory descriptor lists), IRP Buffer Management, Clustered Page Faults, Caching with the Direct Memory Access Interfacesmedia player applications, Power Availability Requests–Processor Power Management (PPM), Power Availability Requests, Power Availability Requests, Processor Power Management (PPM)Meminfo tool, Page Frame Number Database, Page Priority, Page Priority, Page Priority, PFN Data Structures, 32-Bit Client Effective Memory LimitsMemLimit utility, Dynamic System Virtual Address Space Managementmemory, KMDF Data Model, KMDF Data Model, Processor Power Management (PPM), Solid State Disks, NAND-Type Flash Memory–File Deletion and the Trim Command, File Deletion and the Trim Command, Memory Management, Memory Manager Components, Examining Memory Usage, Examining Memory Usage–Examining Memory Usage, Examining Memory Usage, Examining Memory Usage, Examining Memory Usage, Large and Small Pages, Monitoring Pool Usage, Look-Aside Lists, Look-Aside Lists, Driver Verifier, Page Priority, System Working Sets–Memory Notification Events, Memory Notification Events–Memory Notification Events, Memory Notification Events, Memory Notification Events, Memory Notification Events, Memory Notification Events, Robust Performance–Robust Performance, Robust Performance, Robust Performance, The BIOS Boot Sector and Bootmgr, Windows Recovery Environment (WinRE), Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Code Overwrite and System Code Write Protectionaccess violations, Large and Small Pagescore parking, Processor Power Management (PPM)corruption, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Poolcounter objects, Examining Memory Usage, Monitoring Pool Usagediagnostic tools, Windows Recovery Environment (WinRE)KMDF objects, KMDF Data Model, KMDF Data Modellook-aside lists, Look-Aside Lists, Look-Aside Listslow resources simulation, Driver VerifierNAND-type, NAND-Type Flash Memory–File Deletion and the Trim Command, File Deletion and the Trim Commandnot owned by drivers, Code Overwrite and System Code Write Protectionnotification events, Memory Notification Events–Memory Notification Events, Memory Notification Events, Memory Notification Events, Memory Notification Eventsphysical, maximums, Memory Managementpriority, Page PriorityRAM vs. flash, Solid State Disksremoving from use, The BIOS Boot Sector and Bootmgrthird-party optimization software, Robust Performance–Robust Performance, Robust Performance, Robust Performanceusage, Examining Memory Usage–Examining Memory Usage, Examining Memory Usage, Examining Memory Usage, Examining Memory Usageworking sets, System Working Sets–Memory Notification Events, Memory Notification Eventszeroing, Memory Manager Componentsmemory cards, FAT12, FAT16, and FAT32memory description lists (MDLs), IRP Buffer Management, Clustered Page Faults, Clustered Page Faults, Driver Verifier, Caching with the Mapping and Pinning InterfacesMemory Leak Diagnoser, Process Reflectionmemory management unit (MMU), x86 Virtual Address Translation, Page Tables and Page Table Entries, Physical Address Extension (PAE)memory manager, Mapped File I/O and File Caching, Mapped File I/O and File Caching–I/O Request Packets, Mapped File I/O and File Caching, I/O Request Packets, I/O Priorities, Driver Verifier, Introduction to the Memory Manager, Memory Manager Components–Internal Synchronization, Memory Manager Components, Memory Manager Components, Internal Synchronization, Internal Synchronization, Internal Synchronization, Examining Memory Usage–Examining Memory Usage, Examining Memory Usage, Examining Memory Usage, Examining Memory Usage, Large and Small Pages–Reserving and Committing Pages, Large and Small Pages, Large and Small Pages, Reserving and Committing Pages, Commit Limit, Allocation Granularity, Shared Memory and Mapped Files, Shared Memory and Mapped Files–Shared Memory and Mapped Files, Shared Memory and Mapped Files, Shared Memory and Mapped Files, Shared Memory and Mapped Files, No Execute Page Protection, No Execute Page Protection, No Execute Page Protection, Software Data Execution Prevention, Copy-on-Write–Copy-on-Write, Copy-on-Write, Copy-on-Write, Heap Manager, Heap Manager, Heap Manager Structure, Heap Synchronization, The Low Fragmentation Heap, Heap Debugging Features, Pageheap, Virtual Address Space Layouts–Controlling Security Mitigations, Virtual Address Space Layouts, x86 Address Space Layouts, x86 Address Space Layouts, x86 Address Space Layouts, x86 Address Space Layouts, x86 Address Space Layouts, x86 System Address Space Layout–System Page Table Entries, x86 System Address Space Layout–System Page Table Entries, x86 System Address Space Layout–System Page Table Entries, x86 Session Space, x86 Session Space, System Page Table Entries, System Page Table Entries, System Page Table Entries, System Page Table Entries, System Page Table Entries, System Page Table Entries, 64-Bit Address Space Layouts–64-Bit Address Space Layouts, 64-Bit Address Space Layouts, 64-Bit Address Space Layouts, 64-Bit Address Space Layouts, x64 Virtual Addressing Limitations–Dynamic System Virtual Address Space Management, x64 Virtual Addressing Limitations, Windows x64 16-TB Limitation, Windows x64 16-TB Limitation, Dynamic System Virtual Address Space Management, Dynamic System Virtual Address Space Management, Dynamic System Virtual Address Space Management, Dynamic System Virtual Address Space Management, Dynamic System Virtual Address Space Management, System Virtual Address Space Quotas, System Virtual Address Space Quotas–Controlling Security Mitigations, User Address Space Layout, User Address Space Layout, User Address Space Layout, Image Randomization, Image Randomization, Stack Randomization, ASLR in Kernel Address Space, ASLR in Kernel Address Space, Controlling Security Mitigations, Controlling Security Mitigations, Address Translation, Address Translation, Address Translation–Translation Look-Aside Buffer, x86 Virtual Address Translation, x86 Virtual Address Translation, Translation Look-Aside Buffer, Translation Look-Aside Buffer–Physical Address Extension (PAE), Translation Look-Aside Buffer, Physical Address Extension (PAE)–Physical Address Extension (PAE), Physical Address Extension (PAE), Physical Address Extension (PAE), Physical Address Extension (PAE), Physical Address Extension (PAE), Physical Address Extension (PAE), Physical Address Extension (PAE), Physical Address Extension (PAE), IA64 Virtual Address Translation, Page Fault Handling–Commit Charge and Page File Size, Page Fault Handling–Invalid PTEs, Invalid PTEs–In-Paging I/O, Invalid PTEs, Invalid PTEs, Prototype PTEs–In-Paging I/O, Prototype PTEs, Prototype PTEs, In-Paging I/O, In-Paging I/O–Collided Page Faults, In-Paging I/O, In-Paging I/O, In-Paging I/O, Collided Page Faults, Collided Page Faults, Clustered Page Faults, Page Files–Page Files, Page Files, Page Files, Page Files, Commit Charge and the System Commit Limit–Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit, Commit Charge and Page File Size–Commit Charge and Page File Size, Commit Charge and Page File Size–Commit Charge and Page File Size, Commit Charge and Page File Size, Commit Charge and Page File Size, Commit Charge and Page File Size, Stacks, Kernel Stacks, Kernel Stacks, Virtual Address Descriptors–Process VADs, Virtual Address Descriptors, Process VADs, Process VADs, NUMA, Section Objects, Section Objects, Driver Verifier–Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifier, Page Frame Number Database–PFN Data Structures, Page Frame Number Database, Page Frame Number Database, Page Frame Number Database, Page List Dynamics, Page List Dynamics, Page List Dynamics, Page List Dynamics, Page List Dynamics, Page List Dynamics, Page List Dynamics, Page List Dynamics, Page Priority, Page Priority, Modified Page Writer–Modified Page Writer, Modified Page Writer–PFN Data Structures, Modified Page Writer, Modified Page Writer, PFN Data Structures, PFN Data Structures, PFN Data Structures, PFN Data Structures, PFN Data Structures, PFN Data Structures, Working Sets–Memory Notification Events, Logical Prefetcher, Logical Prefetcher, Placement Policy, Placement Policy, Working Set Management–Balance Set Manager and Swapper, Working Set Management, Balance Set Manager and Swapper–System Working Sets, Balance Set Manager and Swapper, Balance Set Manager and Swapper, System Working Sets, System Working Sets–Memory Notification Events, System Working Sets, System Working Sets, Memory Notification Events–Memory Notification Events, Memory Notification Events, Memory Notification Events, Memory Notification Events, Memory Notification Events, Memory Notification Events, Proactive Memory Management (Superfetch)–Unified Caching, Components, Tracing and Logging, Scenarios, Page Priority and Rebalancing, Page Priority and Rebalancing, Robust Performance, Robust Performance, ReadyBoost, ReadyDrive, Unified Caching, Unified Caching, Unified Caching, Cache Manager, Cache Physical Size, File System Driver Architecture, Memory Manager’s Modified and Mapped Page Writer, Memory Manager’s Modified and Mapped Page Writer, Cache Manager’s Read-Ahead Thread, Shutdown64-bit virtual layouts, 64-Bit Address Space Layouts–64-Bit Address Space Layouts, 64-Bit Address Space Layoutsaddress translation, Address Translation–Translation Look-Aside Buffer, x86 Virtual Address Translation, x86 Virtual Address Translation, Translation Look-Aside Buffer, Translation Look-Aside Buffer, Physical Address Extension (PAE), Physical Address Extension (PAE), IA64 Virtual Address Translationallocation granularity, Allocation Granularitybalance set manager and swapper, Balance Set Manager and Swapper–System Working Sets, System Working Setscache manager, Cache Managercaching, Mapped File I/O and File Caching–I/O Request Packets, Mapped File I/O and File Caching, I/O Request Packetscollided page faults, Collided Page Faultscommit charge, Commit Charge and the System Commit Limit–Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit, Commit Charge and Page File Size–Commit Charge and Page File Size, Commit Charge and Page File Sizecomponents, Memory Manager Components–Internal Synchronization, Memory Manager Components, Internal Synchronizationcopy-on-write, Copy-on-Write–Copy-on-Write, Copy-on-Write, Copy-on-WriteDriver Verifier, Driver Verifier, Driver Verifier–Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifier, Driver Verifierfile system drivers, File System Driver Architectureheap manager, Heap Manager, Heap Manager, Heap Manager Structure, Heap Synchronization, The Low Fragmentation Heap, Heap Debugging Features, PageheapI/O priorities, I/O Prioritiesin-paging I/O, In-Paging I/O–Collided Page Faults, Collided Page Faultsinternal synchronization, Internal Synchronizationinvalid PTEs, Page Fault Handling–Invalid PTEs, Invalid PTEslarge and small pages, Large and Small Pages–Reserving and Committing Pages, Large and Small Pages, Large and Small Pages, Reserving and Committing Pageslocking memory, Commit Limitlogical prefetcher, Logical Prefetchermanagement, Introduction to the Memory Manager, Memory Manager Components, Working Set Management–Balance Set Manager and Swapper, Balance Set Manager and Swappermapped file views, Cache Manager’s Read-Ahead Threadmapped files, Mapped File I/O and File Caching, Shared Memory and Mapped Files, Shared Memory and Mapped Filesmapped page writer, Memory Manager’s Modified and Mapped Page Writermodified page writer, Modified Page Writer–Modified Page Writer, Modified Page Writer, Modified Page Writer, Memory Manager’s Modified and Mapped Page Writerno execute page protection, No Execute Page Protection, No Execute Page Protection, No Execute Page Protection, Software Data Execution Preventionnotification events, Memory Notification Events–Memory Notification Events, Memory Notification Events, Memory Notification Events, Memory Notification EventsNUMA, NUMAPAE translation, Physical Address Extension (PAE)–Physical Address Extension (PAE), Physical Address Extension (PAE), Physical Address Extension (PAE), Physical Address Extension (PAE), Physical Address Extension (PAE)page fault handling, Page Fault Handling–Commit Charge and Page File Size, Invalid PTEs–In-Paging I/O, Invalid PTEs, Prototype PTEs, In-Paging I/O, In-Paging I/O, In-Paging I/O, Clustered Page Faults, Page Files, Commit Charge and Page File Sizepage file size, Commit Charge and Page File Size–Commit Charge and Page File Size, Commit Charge and Page File Sizepage files, Page Files–Page Files, Page Files, Page Filespage list dynamics, Page List Dynamics, Page List Dynamics, Page List Dynamics, Page List Dynamics, Page List Dynamics, Page List DynamicsPFN database, Page Frame Number Database–PFN Data Structures, Page Frame Number Database, Page Frame Number Database, Page Frame Number Database, Page List Dynamics, Page List Dynamics, Page Priority, Page Priority, Modified Page Writer–PFN Data Structures, PFN Data Structures, PFN Data Structures, PFN Data Structures, PFN Data Structures, PFN Data Structures, PFN Data Structuresproactive memory management (Superfetch), Proactive Memory Management (Superfetch)–Unified Caching, Components, Tracing and Logging, Scenarios, Page Priority and Rebalancing, Page Priority and Rebalancing, Robust Performance, Robust Performance, ReadyBoost, ReadyDrive, Unified Caching, Unified Caching, Unified Cachingprototype PTEs, Prototype PTEs–In-Paging I/O, Prototype PTEs, In-Paging I/Osection objects, Section Objects, Section Objectssession space, x86 System Address Space Layout–System Page Table Entries, x86 System Address Space Layout–System Page Table Entries, System Page Table Entries, System Page Table Entriesshared memory, Shared Memory and Mapped Files–Shared Memory and Mapped Files, Shared Memory and Mapped Files, Shared Memory and Mapped Filesshutting down, Shutdownstacks, Stacks, Kernel Stacks, Kernel Stacksstandby and modified lists, Cache Physical Sizesystem PTEs, System Page Table Entriessystem working sets, System Working Sets–Memory Notification Events, System Working Sets, Memory Notification Eventssystemwide resources, Internal Synchronizationtranslation look-aside buffer, Translation Look-Aside Buffer–Physical Address Extension (PAE), Physical Address Extension (PAE)usage, Examining Memory Usage–Examining Memory Usage, Examining Memory Usage, Examining Memory Usage, Examining Memory Usageuser space virtual layouts, System Virtual Address Space Quotas–Controlling Security Mitigations, User Address Space Layout, ASLR in Kernel Address Space, Controlling Security Mitigations, Address Translationvirtual address descriptors, Virtual Address Descriptors–Process VADs, Virtual Address Descriptors, Process VADs, Process VADsvirtual address randomization, Image Randomization, Stack Randomizationvirtual address space layouts, Virtual Address Space Layouts–Controlling Security Mitigations, Virtual Address Space Layouts, x86 Address Space Layouts, x86 Address Space Layouts, x86 System Address Space Layout–System Page Table Entries, x86 Session Space, System Page Table Entries, System Page Table Entries, 64-Bit Address Space Layouts, 64-Bit Address Space Layouts, x64 Virtual Addressing Limitations, Windows x64 16-TB Limitation, Dynamic System Virtual Address Space Management, Dynamic System Virtual Address Space Management, Dynamic System Virtual Address Space Management, System Virtual Address Space Quotas, User Address Space Layout, User Address Space Layout, Image Randomization, ASLR in Kernel Address Space, Controlling Security Mitigations, Address Translationworking sets, Working Sets–Memory Notification Events, Logical Prefetcher, Placement Policy, Placement Policy, Working Set Management, Balance Set Manager and Swapper, System Working Sets, Memory Notification Eventsx64 virtual limitations, x64 Virtual Addressing Limitations–Dynamic System Virtual Address Space Management, Windows x64 16-TB Limitation, Dynamic System Virtual Address Space Management, Dynamic System Virtual Address Space Managementx86 virtual layouts, x86 Address Space Layouts, x86 Address Space Layouts, x86 Address Space Layouts, x86 Session Space, System Page Table Entriesmemory mirroring APIs, Crash Dump FilesMemory Test (Memtest.exe), BIOS Prebootmemory-mapped files, Introduction to the Memory Manager, Services Provided by the Memory Manager, Smss, Csrss, and Wininit, Causes of Windows CrashesMemory.dmp file, Crash Dump FilesMemoryErrors event, Memory Notification EventsMEMORY_MANAGEMENT stop code, Causes of Windows CrashesMEM_DOS_LIM flag, Allocation GranularityMEM_TOP_DOWN flag, x86 Address Space Layoutsmessage queues, Common Log File Systemmessage signaled interrupts, The BIOS Boot Sector and Bootmgrmetadata, File Deletion and the Trim Command, Heap Security Features, File Systems, Log Layout, Master File Table–Master File Table, Master File Table, Master File Table, Master File Table, Metadata Logging–Recovery, Log File Service, RecoveryCLFS logs, Log Layoutdisk availability, File Deletion and the Trim Commandfile system metadata, File Systemsfile system structure, Master File Table–Master File Table, Master File Table, Master File TableLFH blocks, Heap Security Featureslogging, Metadata Logging–Recovery, Log File Service, RecoveryNTFS extensions directory, Master File Tablemetadata transaction log (, Dynamic PartitioningMFT records, Master File Table, Master File Table, File Record Numbers, File Records, File Records, Resident and Nonresident Attributes, IndexingMFTs (master file tables), Logical Prefetcher, Defragmentation, Master File Table, File Records, File Names, Resident and Nonresident Attributes–Data Compression and Sparse Files, Resident and Nonresident Attributes, Data Compression and Sparse Files, Indexing, NTFS Bad-Cluster Recoverycontiguous disk space, Defragmentationdirectories, Resident and Nonresident Attributesduplicated, NTFS Bad-Cluster Recoveryfile entries, File Recordsfile names, File Namesfile records, Master File Table, Indexingresident attributes, Resident and Nonresident Attributes–Data Compression and Sparse Files, Data Compression and Sparse Filestraces, Logical Prefetchermice, legacy, The BIOS Boot Sector and BootmgrMiComputeNumaCosts function, NUMAMicro Channel Architecture (MCA), The BIOS Boot Sector and BootmgrMicrosoft symbol server, Crash Dump FilesMicrosoft Windows Hardware Quality Labs (WHQL), Driver Verifier, Driver InstallationMicrosoft, sending crash dumps to, Windows Error Reporting–Windows Error Reporting, Windows Error Reporting, Windows Error ReportingMiCurrentMappedPageBucket routine, Modified Page WriterMiDereferenceSegmentThread routine, Memory Manager ComponentsMiDispatchFault routine, Explicit File I/OMiImageBias routine, Image RandomizationMiImageBitmap routine, Image RandomizationMiInitializeRelocations routine, Image RandomizationMiInsertPage routines, Modified Page Writer, Modified Page WriterMiIssueHardFault routine, Write-Back Caching and Lazy WritingMiMappedPageListHeadEvent event, Modified Page WriterMiMappedPageWriter routine, Memory Manager ComponentsMiMaximumWorkingSet variable, Working Set ManagementMiModifiedPageWriter routine, Memory Manager Componentsminiclass drivers, Layered Driversminidumps, Crash Dump Files, Crash Dump Filesminifilter drivers, Process MonitorMinimal subkey, Safe Mode, Driver Loading in Safe Mode, Driver Loading in Safe ModeMiniNT/WinPE registry keys, Initializing the Kernel and Executive Subsystemsminiport drivers, Layered Drivers, Device Stacks, Disk Drivers, Disk Class, Port, and Miniport Drivers, Disk Class, Port, and Miniport Drivers, Multipath I/O (MPIO) Drivers, Volume I/O Operationsminor function codes (IRP stack locations), IRP Stack LocationsMIPS support, The BIOS Boot Sector and BootmgrMiReclaimSystemVA function, Dynamic System Virtual Address Space ManagementMiRescanPageFilesEvent event, Modified Page Writermirrored partitions, Basic Disk Volume Manager, The LDM Database, Data Redundancy and Fault Tolerancemirrored volumes (RAID-1), Mirrored Volumes, Volume I/O Operations–Virtual Disk Service, Virtual Disk Service, Data Redundancy and Fault Tolerance, NTFS Bad-Cluster Recoverybad sector handling, NTFS Bad-Cluster Recoverydata redundancy, Data Redundancy and Fault ToleranceI/O operations, Mirrored Volumes, Volume I/O Operations–Virtual Disk Service, Virtual Disk Servicemirroring, Volume Shadow Copy Service–Conclusion, ConclusionVolume Shadow Copy Service, Volume Shadow Copy Service–Conclusion, ConclusionMiSystemPteInfo variable, System Page Table Entries–System Page Table Entries, System Page Table Entries, System Page Table EntriesMiSystemVaType arrays, Dynamic System Virtual Address Space ManagementMiSystemVaTypeCount arrays, Dynamic System Virtual Address Space Managementmitigation component (FTH), Fault Tolerant HeapMiTrimAllSystemPagableMemory function, Driver VerifierMiVa regions, Dynamic System Virtual Address Space ManagementMiWriteGapCounter variable, Modified Page WriterMiZeroInParallel function, Memory Manager ComponentsMklink.exe utility, Previous Versions and System RestoreMLC (multilevel cell memory), NAND-Type Flash Memory–NAND-Type Flash Memory, NAND-Type Flash Memory, NAND-Type Flash Memorymlink utility, Hard LinksMm functions, Services Provided by the Memory ManagerMmAccessFault handler, Page Fault Handling, Write-Back Caching and Lazy Writing, Explicit File I/OMmAllocate functions, NUMAMmAvailablePages variable, Modified Page Writer, PFN Data StructuresMmFlushAllFilesystemPages function, Modified Page WriterMmFlushAllPages function, Modified Page WriterMmFlushSection function, Cache Manager’s Lazy WriterMmInitializeProcessAddressSpace function, Process ReflectionMmLock functions, Locking MemoryMmMapIoSpace function, Large and Small PagesMmMapLockedPages function, Driver VerifierMmMappedPageWriterEvent event, Modified Page WriterMmMapViewInSystemCache function, Explicit File I/OMmMaximumNonPagedPoolInBytes variable, Pool SizesMmModifiedPageWriterGate object, Modified Page WriterMmNumberOfPhysicalPages variable, PFN Data StructuresMmPagedPoolWs variables, Pool Sizes, System Working SetsMmPagingFileHeader event, Modified Page WriterMmPrefetchPages function, Logical PrefetcherMmProbeAndLockPages function, Locking Memory, Driver VerifierMmProbeAndLockProcessPages function, Driver VerifierMmResidentAvailablePages variable, PFN Data StructuresMmSizeOfNonPagedPoolInBytes variable, Pool SizesMmSizeOfPagedPoolInBytes variable, Pool SizesMmSystemCacheWs variables, System Working Sets, System Working SetsMmSystemDriverPage variable, System Working SetsMmSystemPtesWs variable, System Working SetsMMU (memory management unit), Page Tables and Page Table Entries, Physical Address Extension (PAE)MmUnlockPages function, Driver VerifierMmUnmapLockedPages function, Driver VerifierMmWorkingSetManager function, Memory Manager Components, Modified Page WriterMmZeroPageThread routine, Memory Manager ComponentsMM_SESSION_SPACE structure, x86 Session Spacemodel-specific registers (MSRs), DPC Stackmodified lists, Memory Manager Components, Page List Dynamics–Page Priority, Page List Dynamics, Page List Dynamics, Page List Dynamics, Page Priority, Modified Page Writer, Tracing and Logging, Cache Size, Cache Physical Size, Cache Physical Size–Cache Data Structures, Cache Physical Size, Cache Data Structures, Intelligent Read-Aheadcache manager write operations, Intelligent Read-Aheadcache physical size, Cache Physical Size–Cache Data Structures, Cache Data Structuresmapped page writer, Memory Manager Componentspage writer, Modified Page Writerredistributing memory, Tracing and Loggingsystem cache, Cache Size, Cache Physical Size, Cache Physical Sizeviewing page allocations, Page List Dynamics–Page Priority, Page List Dynamics, Page List Dynamics, Page List Dynamics, Page PriorityModified no-write PFN state, Page Frame Number Databasemodified page lists, Reserving and Committing Pagesmodified page writer, Modified Page WriterPFN database, Modified Page Writermodified pages, PFN Data Structures, Memory Manager’s Modified and Mapped Page WriterModified PFN state, Page Frame Number Databasemodified PFN state flag, PFN Data Structuresmodified-no-write lists, Invalid PTEs, Prototype PTEsmodified-no-write pages, PFN Data Structuresmore command, Multiple Data Streamsmotherboard devices, Device Enumeration, Hung or Unresponsive Systemsmotherboard driver, BIOS PrebootMount Manager, Mount PointsMount Manager driver, The Mount Manager–Mount Points, The Mount Manager, Mount Pointsmount operations, Basic Disk Volume Managermount points, Opening Devices, Mount Points, Mount Points, Reparse Pointsmount requests, Volume Mountingmounting volumes, The Volume Namespace, The Mount Manager, Volume Mounting, Volume Mounting, Volume Mounting, Virtual Hard Disk SupportMountvol.exe tool, Mount Pointsmove APIs, Transactional APIsMoveFileEx API, Smss, Csrss, and Wininitmoving files, Smss, Csrss, and WininitMpclaim.exe, Multipath I/O (MPIO) DriversMpdev.sys driver, Multipath I/O (MPIO) DriversMPIO (Multipath I/O), Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Partition ManagerMpio.sys driver, Multipath I/O (MPIO) DriversMS-DOS, File Records–Resident and Nonresident Attributes, File Names, Resident and Nonresident Attributesfile names, File Records–Resident and Nonresident Attributes, Resident and Nonresident Attributesgenerating file names, File NamesMS-DOS applications, Allocation Granularity, The BIOS Boot Sector and BootmgrMsconfig utility, Images That Start AutomaticallyMsdsm.sys module, Multipath I/O (MPIO) Driversmsi element, The BIOS Boot Sector and BootmgrMsInfo32.exe utility, Layered Drivers, 32-Bit Client Effective Memory LimitsMsiscsi.sys driver, iSCSI DriversMUI files, BitLocker To Gomultiboot systems, FAT12, FAT16, and FAT32multifunction device container IDs, Device Stack Driver Loading–Device Stack Driver Loading, Device Stack Driver Loading, Device Stack Driver Loadingmultilevel cell memory (MLC), NAND-Type Flash Memory–NAND-Type Flash Memory, NAND-Type Flash Memory, NAND-Type Flash Memorymultilevel VACB arrays, Per-File Cache Data Structuresmultipartition volumes, Volume Management, Volume Management, Dynamic Disks–Multipartition Volume Management, Multipartition Volume Management–RAID-5 Volumes, Multipartition Volume Management, Spanned Volumes, Spanned Volumes, Spanned Volumes, Striped Volumes, Striped Volumes, Striped Volumes, Striped Volumes–Mirrored Volumes, Striped Volumes, Mirrored Volumes, Mirrored Volumes, Mirrored Volumes, Mirrored Volumes, Mirrored Volumes, RAID-5 Volumes, RAID-5 Volumes, Volume I/O Operationsbasic disks, Volume Managementdynamic disks, Volume Management, Dynamic Disks–Multipartition Volume Management, Multipartition Volume ManagementI/O operations, Volume I/O Operationsmanagement, Multipartition Volume Management–RAID-5 Volumes, Spanned Volumes, Striped Volumes, Mirrored Volumes, RAID-5 Volumesmirrored, Striped Volumes–Mirrored Volumes, Mirrored Volumes, Mirrored Volumes, Mirrored VolumesRAID-5, RAID-5 Volumesspanned, Spanned Volumesstorage management, Spanned Volumes, Striped Volumes, Mirrored Volumesstriped, Striped Volumes, Striped VolumesMultipath Bus Driver (Mpio.sys), Multipath I/O (MPIO) Driversmultipath I/O (MPIO) drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Partition Managermultipathing solutions, Multipath I/O (MPIO) Driversmultiple data streams, Advanced Features of NTFS–Multiple Data Streams, Multiple Data Streams, Multiple Data Streams, Multiple Data StreamsMultiple Provider Router, Smss, Csrss, and WininitMultiple Universal Naming Convention (UNC) Provider (MUP) driver, The Start Valuemultiplexed logs, Log Types, Translating Virtual LSNs to Physical LSNsmultiprocessor systems, Synchronization, Internal Synchronization, Look-Aside Lists, The BIOS Boot Sector and Bootmgrdriver synchronizing, Synchronizationlook-aside lists, Look-Aside Listsmemory manager, Internal Synchronizationnumbers of CPUs, The BIOS Boot Sector and Bootmgrmultithreaded applications, Heap Synchronizationmutexes, Driver Verifier, Hung or Unresponsive Systemsmutual exclusion (heap blocks), Heap ManagerMyfault.sys driver, I/O Cancellation for Thread Termination, I/O Cancellation for Thread Termination, I/O Cancellation for Thread Termination, Notmyfault, Basic Crash Dump Analysis, Buffer Overruns, Memory Corruption, and Special Pool