//

// Copyright (C) Microsoft. All rights reserved.

//
rem
rem [Link]
rem
rem This file lists the tags used for pool allocations by kernel mode components
rem and drivers.
rem
rem The file has the following format:
rem <PoolTag> - <binary-name> - <Description>
rem
rem [Link] is installed with Debugging Tools for Windows (in %windbg%\
triage)
rem and with the Windows DDK (in %winddk%\tools\other\platform\poolmon, where
rem platform is amd64, i386, or arm).
rem

@GMM - <unknown> - (Intel video driver) Memory manager

@KCH - <unknown> - (Intel video driver) Chipset specific service
@MP - <unknown> - (Intel video driver) Miniport related memory
@SB - <unknown> - (Intel video driver) Soft BIOS

_ATI - <unknown> - ATI video driver

_LCD - [Link] - Monitor PDO name buffer

8042 - [Link] - PS/2 keyboard and mouse

AdSv - [Link] - Virtual Machines Additions Service

ARPC - [Link] - ATM ARP Client
ATMU - [Link] - ATM UNI Call Manager
Atom - <unknown> - Atom Tables
Abos - <unknown> - Abiosdsk
AcdM - <unknown> - TDI AcdObjectInfoG
AcdN - <unknown> - TDI AcdObjectInfoG
AcpA - [Link] - ACPI arbiter data
AcpB - [Link] - ACPI buffer data
AcpD - [Link] - ACPI device data
AcpE - [Link] - ACPI embedded controller data
AcpF - [Link] - ACPI interface data
Acpg - [Link] - ACPI GPE data
Acpi - [Link] - ACPI generic data
AcpI - [Link] - ACPI irp data
AcpL - [Link] - ACPI lock data
AcpM - [Link] - ACPI miscellaneous data
AcpO - [Link] - ACPI object data
AcpP - [Link] - ACPI power data
AcpR - [Link] - ACPI resource data
AcpS - [Link] - ACPI string data
Acpt - [Link] - ACPI table data
AcpT - [Link] - ACPI thermal data
AcpX - [Link] - ACPI translation data
Adap - <unknown> - Adapter objects
Adbe - <unknown> - Adobe's font driver
ADPT - [Link] - Processor Aggregator Driver
AECi - <unknown> - filter object interface for MS acoustic echo canceller
Afd? - [Link] - AFD objects
AfdA - [Link] - Afd EA buffer
AfdB - [Link] - Afd data buffer
AfdC - [Link] - Afd connection structure
aFDC - [Link] - Afd WSK client context
aFDT - [Link] - Afd TL provider context
AfdD - [Link] - Afd debug data
AfdE - [Link] - Afd endpoint structure
AfdF - [Link] - Afd TransmitFile info
AfdG - [Link] - Afd group table
AfdI - [Link] - Afd TDI data
AfdL - [Link] - Afd local address buffer
AfdP - [Link] - Afd poll info
AfdQ - [Link] - Afd work queue item
AfdR - [Link] - Afd remote address buffer
AfdS - [Link] - Afd security info
AfdT - [Link] - Afd transport info
AfdW - [Link] - Afd work item
AfdX - [Link] - Afd context buffer
Afda - [Link] - Afd APC buffer (NT 3.51 only)
Afdc - [Link] - Afd connect data buffer
Afdd - [Link] - Afd disconnect data buffer
Afdf - [Link] - Afd TransmitFile debug data
Afdh - [Link] - Afd address list change buffer
Afdi - [Link] - Afd "set inline mode" buffer
Afdl - [Link] - Afd lookaside lists buffer
Afdp - [Link] - Afd transport IRP buffer
Afdq - [Link] - Afd routing query buffer
Afdr - [Link] - Afd ERESOURCE buffer
Afdt - [Link] - Afd transport address buffer
Ahca - [Link] - Appcompat kernel cache pool tag

AleD - [Link] - ALE remote endpoint

Ala4 - [Link] - ALE remote endpoint IPv4 address
Ala6 - [Link] - ALE remote endpoint IPv6 address
Alei - [Link] - ALE arrival/nexthop interface cache
AleU - [Link] - ALE pend context
AleE - [Link] - ALE endpoint context
AlLl - [Link] - ALE remote endpoint LRU
AlCi - [Link] - ALE credential info
AlSP - [Link] - ALE secure socket policy
AlPU - [Link] - ALE secure socket policy update
AlPi - [Link] - ALE peer info
AlP4 - [Link] - ALE peer IPv4 address
AlP6 - [Link] - ALE peer IPv6 address
AlPT - [Link] - ALE peer target
Alep - [Link] - ALE process info
AleS - [Link] - ALE token info
AleP - [Link] - ALE process image path
AleK - [Link] - ALE audit
AleA - [Link] - ALE connection abort context
AlDN - [Link] - ALE endpoint delete notify
AleW - [Link] - ALE enum filter array
AleN - [Link] - ALE notify context
AlSs - [Link] - ALE socket security context
AlPF - [Link] - ALE policy filters
AleL - [Link] - ALE LRU
AleI - [Link] - ALE token ID
AlP5 - [Link] - ALE 5-tuple state
AlE5 - [Link] - ALE 5-tuple temp entry
Aric - [Link] - ALE route inspection context
Adnc - [Link] - ALE endpoint deactivation notification context
Acrc - [Link] - ALE connect request inspection context
Acrl - [Link] - ALE connect redirect layer data
Abrc - [Link] - ALE bind request inspection context
Abrl - [Link] - ALE bind redirect layer data
AlSm - [Link] - ALE Secondary App Meta Data

Afp - <unknown> - SFM File server

AlCI - nt!alpc - ALPC communication info
AlEv - nt!alpc - ALPC eventlog queue
AlIn - nt!alpc - ALPC Internal allocation
AlHa - nt!alpc - ALPC port handle table
AlMs - nt!alpc - ALPC message
ALPC - nt!alpc - ALPC port objects
AlRe - nt!alpc - ALPC section region
AlRr - nt!Alpc - ALPC resource reserves
AlSc - nt!alpc - ALPC section
AlSe - nt!alpc - ALPC client security
AlVi - nt!alpc - ALPC view
ATmp - AppTag mount point
ATon - AppTag object name
ATub - AppTag user buffer
ATgb - AppTag guid buffer
ATac - AppTag ATR command buffer
ATdi - AppTag cliendata index buffer
ATdt - AppTag cliendata temp buffer
ATFb - AppTag file id buffer

Aml* - <unknown> - ACPI AMLI Pooltags

APIC - [Link] - I/O APIC Driver
ArbA - nt!arb - ARBITER_ALLOCATION_STATE_TAG
ArbL - nt!arb - ARBITER_ORDERING_LIST_TAG
ArbM - nt!arb - ARBITER_MISC_TAG
ArbR - nt!arb - ARBITER_RANGE_LIST_TAG
Arp? - <unknown> - ATM ARP server objects, [Link]
ArpA - <unknown> - AtmArpS address
ArpB - <unknown> - AtmArpS buffer space
ArpI - <unknown> - AtmArpS Interface structure
ArpK - <unknown> - AtmArpS ARP block
ArpM - <unknown> - AtmArpS MARS structure
ArpR - <unknown> - AtmArpS NDIS request
ArpS - <unknown> - AtmArpS SAP structure
Asy1 - <unknown> - ndis / ASYNC_IOCTX_TAG
Asy2 - <unknown> - ndis / ASYNC_INFO_TAG
Asy3 - <unknown> - ndis / ASYNC_ADAPTER_TAG
Asy4 - <unknown> - ndis / ASYNC_FRAME_TAG
AtC - <unknown> - IDE disk configuration
AtD - <unknown> - atdisk.c
ATIX - <unknown> - WDM mini drivers for ATI tuner, xbar, etc.
Atk - <unknown> - Appletalk transport
AtmA - <unknown> - Atoms
AtmT - <unknown> - Atom tables
AtvE - cea_km.lib - Event broker aggregation library.
AuxL - <unknown> - EXIFS Auxlist

AzAp - [Link] - HD Audio Class Driver (Datastore: audio path)

AzAd - [Link] - HD Audio Class Driver (AzPcAudDev)
AzCd - [Link] - HD Audio Class Driver (CodecVendor)
AzCE - [Link] - HD Audio Class Driver (CEAAudioRender)
AzCm - [Link] - HD Audio Class Driver (AzCommon)
AzFg - [Link] - HD Audio Class Driver (Audio Function Group)
Azfg - [Link] - HD Audio Class Driver (datastore: function group)
AzJd - [Link] - HD Audio Class Driver (JackDetector)
AzMa - [Link] - HD Audio Class Driver (Main)
AzMi - [Link] - HD Audio Class Driver (micin, MixedCapture)
AzMu - [Link] - HD Audio Class Driver (MuxedCapture)
AzMx - [Link] - HD Audio Class Driver (AzMixerport)
AzLd - [Link] - HD Audio Class Driver (Datastore: logical device)
AzLi - [Link] - HD Audio Class Driver (CDIn,AUXIn, linein)
AzLg - [Link] - HD Audio Class Driver (debug)
AzLs - [Link] - HD Audio Class Driver (DLTest)
AzPd - [Link] - HD Audio Class Driver (AzDma)
AzPx - [Link] - HD Audio Class Driver (AzPower)
AzRr - [Link] - HD Audio Class Driver (RedirectedRender)
AzRR - [Link] - HD Audio Class Driver (SpdifEmbeddedRender, SpdifOut,
Headphone, HBDAout)
AzSd - [Link] - HD Audio Class Driver (subdevicegraph)
AzSi - [Link] - HD Audio Class Driver (SpdifIn)
AzSt - [Link] - HD Audio Class Driver (AzWaveCyclicStream, HdaWaveRTstream)
AzTs - [Link] - HD Audio Class Driver (TestSet1000, TestSet1001)
AzUT - [Link] - HD Audio Class Driver (TestSet0004)
AzWd - [Link] - HD Audio Class Driver (AzWidget)
AzWp - [Link] - HD Audio Class Driver (AzWaveport, HdaWaveRTminiport)

Bat? - <unknown> - Battery Class drivers

BatC - <unknown> - Composite battery driver
BatM - <unknown> - Control method battery driver
BatS - <unknown> - Smart battery driver
Batt - <unknown> - Battery class driver
BCSP - [Link] - Bluetooth BCSP minidriver
BCDK - nt!init - Kernel boot configuration data.
BDD - [Link] - Microsoft Basic Display Driver
BIG - nt!mm - Large session pool allocations (ntos\ex\pool.c)
BlCc - [Link] - Block Cache Driver
Bmfd - <unknown> - Font related stuff
BT3C - [Link] - Bluetooth 3COM minidriver
BT8x - <unknown> - WDM mini drivers for Brooktree 848,829, etc.
BTHP - [Link] - Bluetooth port driver (generic)
BthS - [Link] - Bluetooth port driver (security)
BTME - [Link] - Bluetooth enumerator
BTMO - [Link] - Bluetooth modem
BTPT - <unknown> - Bluetooth transport protocol library
BTSR - [Link] - Bluetooth serial minidriver
BTUR - [Link] - Bluetooth UART minidriver
WPAD - [Link] - Basic Render Adapter
WPDV - [Link] - Basic Render DX Device
WPCT - [Link] - Basic Render DX Context
WPAL - [Link] - Basic Render Allocation
WPAO - [Link] - Basic Render Opened Allocation
WPRC - [Link] - Basic Render Rectangles (for Present)
Bu* - <unknown> - [Link] from adaptec

BvHI - [Link] - BVT HT Items

BvHT - [Link] - BVT HT Tables

Call - nt!ex - kernel callback object signature

call - <unknown> - debugging call tables
CBRe - <unknown> - CallbackRegistration
CBSI - [Link] - Common Block Store
Cc - nt!cc - Cache Manager allocations (catch-all)
CcAs - nt!cc - Cache Manager Async cached read structure
CcBc - nt!cc - Cache Manager Bcb from pool
CcBm - nt!cc - Cache Manager Bitmap
CcBn - nt!cc - Cache Manager Bcb trim notification entry
CcBr - nt!cc - Cache Manager Bitmap range
CcBz - nt!cc - Cache Manager Bcb Zone
CcDw - nt!cc - Cache Manager Deferred Write
CcEC - nt!cc - Cache Manager External Cache tracking structure
CcEv - nt!cc - Cache Manager Event
CcFn - nt!cc - Cache Manager File name for popups
CCFF - [Link] - Cluster Client Failover Filter
Ccfx - nt!cc - Cache Manager Registry value full info structure
CcMb - nt!cc - Cache Manager Mbcb
CcNu - nt!cc - Cache Manager NUMA structures
CcOb - nt!cc - Cache Manager Overlap Bcb
CcPB - nt!ccpf - Prefetcher trace buffer
CcPC - nt!ccpf - Prefetcher context
CcPD - nt!ccpf - Prefetcher trace dump
CcPF - nt!ccpf - Prefetcher file name
CcPI - nt!ccpf - Prefetcher intermediate table
CcPL - nt!ccpf - Prefetcher read list
CcPM - nt!ccpf - Prefetcher metadata
CcPS - nt!ccpf - Prefetcher scenario
CcPT - nt!ccpf - Prefetcher trace
CcPV - nt!ccpf - Prefetcher queried volumes
CcPW - nt!ccpf - Prefetcher workers
CcPa - nt!ccpf - Prefetcher async context
CcPc - nt!cc - Cache Manager Private Cache Map
CcPf - nt!ccpf - Prefetcher
CcPh - nt!ccpf - Prefetcher header preallocation
CcPn - nt!ccpf - Prefetcher name info
CcPp - nt!ccpf - Prefetcher instructions
CcPq - nt!ccpf - Prefetcher query buffer
CcPr - nt!ccpf - Cache Manager Partition structures
CcPs - nt!ccpf - Prefetcher section table
CcPv - nt!ccpf - Prefetcher volume info
CcPw - nt!ccpf - Prefetcher enable worker
CcSc - nt!cc - Cache Manager Shared Cache Map
CcTe - nt!cc - Cache Manager Telemetry allocation
CcVa - nt!cc - Cache Manager Initial array of Vacbs
CcVl - nt!cc - Cache Manager Vacb Level structures (large streams)
CcVp - nt!cc - Cache Manager Array of Vacb pointers for a cached stream
CctX - <unknown> - EXIFX FCB Commit CTX
CcWq - nt!cc - Cache Manager Work Queue Item
CcWK - nt!cc - Kernel Cache Manager lookaside list
CcWk - nt!cc - Kernel Cache Manager lookaside list
CcWR - nt!cc - Cache Manager Registry watch structure
CcZe - nt!cc - Cache Manager Buffer of Zeros
CDmp - [Link] - Crashdump driver
CdA - <unknown> - CdAudio filter driver
Cdcc - [Link] - CDFS Ccb
Cddn - [Link] - CDFS CdName in dirent
Cdee - [Link] - CDFS Search expression for enumeration
Cdfd - [Link] - CDFS Data Fcb
Cdfi - [Link] - CDFS Index Fcb
Cdfl - [Link] - CDFS Filelock
CdFn - [Link] - CDFS Filename buffer
Cdfn - [Link] - CDFS Nonpaged Fcb
Cdfs - [Link] - CDFS General Allocation
Cdft - [Link] - CDFS Fcb Table entry
Cdgs - [Link] - CDFS Generated short name
Cdic - [Link] - CDFS Irp Context
Cdil - [Link] - CDFS Irp Context lite
Cdio - [Link] - CDFS Io context for async reads
Cdma - [Link] - CDFS Mcb array
Cdpe - [Link] - CDFS Prefix Entry
CdPn - [Link] - CDFS CdName in path entry
Cdpn - [Link] - CDFS Prefix Entry name
Cdsp - [Link] - CDFS Buffer for spanning path table
Cdtc - [Link] - CDFS TOC
Cdun - [Link] - CDFS Buffer for upcased name
Cdvd - [Link] - CDFS Buffer for volume descriptor
Cdvp - [Link] - CDFS Vpb allocated in filesystem
CIcr - [Link] - Code Integrity allocations for image integrity checking
CIsc - [Link] - Code Integrity core dll
CIha - [Link] - Code Integrity hashes
CKRT - <multiple> - Cluster Kernel RTL library
CLb* - [Link] - Cluster block storage target driver
CLB* - [Link] - Cluster block storage target driver
CLd* - [Link] - Cluster disk filter driver
ClfA - [Link] - CLFS Log container lookaside list
ClfB - [Link] - CLFS Log base file lookaside list
ClfC - [Link] - CLFS Log physical FCB lookaside list
ClfD - [Link] - CLFS Log virtual FCB lookaside list
ClfE - [Link] - CLFS Log CCB lookaside list
ClfF - [Link] - CLFS Log flush element lookaside list
ClfG - [Link] - CLFS Log I/O Request lookaside list
ClfH - [Link] - CLFS Log I/O control block lookaside list
ClfI - [Link] - CLFS Log marshal buffer lookaside list
ClfJ - [Link] - CLFS Log MDL reference
ClfK - [Link] - CLFS Log read completion element
ClfL - [Link] - CLFS Log base file image (obsolete)
ClfN - [Link] - CLFS Log base file lock
ClfO - [Link] - CLFS Log zero page
ClfP - [Link] - CLFS Log request state
ClfS - [Link] - CLFS Log base file snapshot
Clfs - [Link] - CLFS General buffer, or owner page lookaside list
ClNt - [Link] - NetFt
ClNw - [Link] - NetFt work items
CM - nt!cm - Configuration Manager (registry)
CmcD - [Link] - HAL CMC Driver Log
CmcK - [Link] - HAL CMC Kernel Log
CmcT - [Link] - HAL CMC temporary Log
CMCa - nt!cm - Configuration Manager Cache (registry)
CMDc - nt!cm - Configuration Manager Cache (registry)
CMkb - nt!cm - registry key control blocks
CMpb - nt!cm - registry post blocks
CMnb - nt!cm - registry notify blocks
CMpe - nt!cm - registry post events
CMpa - nt!cm - registry post apcs
CMsb - nt!cm - registry stash buffer
CmVn - nt!cm - captured value name
CMVw - nt!cm - registry mapped view of file
CMVa - nt!cm - value cache value tag
CMVI - nt!cm - value index cache tag
CMSc - nt!cm - security cache pooltag
CMSb - nt!cm - internal stash buffer pool tag
CMNb - nt!cm - Configuration Manager Name Tag
CMIn - nt!cm - Configuration Manager Index Hint Tag
CMDa - nt!cm - value data cache pool tag
CMAl - nt!cm - internal registry memory allocator pool tag
CMA1 - nt!cm - Configuration Manager Audit Tag 1
CMA2 - nt!cm - Configuration Manager Audit Tag 2
CMA3 - nt!cm - Configuration Manager Audit Tag 3
CMA4 - nt!cm - Configuration Manager Audit Tag 4
CMIx - nt!cm - Configuration Manager Intent Lock Tag
CMUw - nt!cm - Configuration Manager Unit of Work Tag
CMTr - nt!cm - Configuration Manager Transaction Tag
CMRm - nt!cm - Configuration Manager Resource Manager Tag
CM?? - nt!cm - Internal Configuration manager allocations
Cngb - [Link] - CNG kmode crypto pool tag
COMX - [Link] - serial driver allocations
Cont - <unknown> - Contiguous physical memory allocations for device drivers
CopW - <unknown> - EXIFS CopyOnWrite
Covr - nt!cov - Code Coverage pool tag
CpeD - [Link] - HAL CPE Driver Log
CpeK - [Link] - HAL CMC Kernel Log
CpeT - [Link] - HAL CPE temporary Log
CPnp - [Link] - ClassPnP transfer packets
Crsp - [Link] - CredSSP kernel mode client allocations
CrtH - <unknown> - EXIFS Create Header
Cryp - [Link] - Crypto allocations
CSdk - <unknown> - Cluster Disk Filter driver
CSnt - <unknown> - Cluster Network driver
CTE - <unknown> - Common transport environment (ntos\inc\cxport.h, used by tdi)
Cvli - <unknown> - EXIFS Cached Volume Info

D2d - <unknown> - Device Object to DosName rtns (ntos\rtl\dev2dos.c)

D3Dd - <unknown> - DX D3D driver (embedded in a display driver like
[Link])
D851 - <unknown> - 8514a video driver
Dacl - <unknown> - Temp allocations for object DACLs
DamK - [Link] - Desktop Activity Moderator
Dati - <unknown> - ati video driver
DbCb - nt!dbg - Debug Print Callbacks
DbLo - <unknown> - Debug logging
dcam - <unknown> - WDM mini driver for IEEE 1394 digital camera

DcbA - [Link] - DCB application priority

DcbC - [Link] - DCB NMR provider context
DcbD - [Link] - DCB NDIS_QOS_CONFIGURATION
DcbG - [Link] - DCB string data
DcbI - [Link] - DCB interface context
DcbL - [Link] - DCB LLDP buffer
DcbP - [Link] - DCB NDIS port information
DcbR - [Link] - DCB store change record
DcbS - [Link] - DCB security object
DcbU - [Link] - DCB UQOS_POLICY_DESCRIPTOR
DcbX - [Link] - DCB general

Dcdd - [Link] - Canonical display driver

Dcl - <unknown> - cirrus video driver
Ddk - <unknown> - Default for driver allocated memory (user's of ntddk.h)
Devi - <unknown> - Device objects
DEag - [Link] - Drive extender disk set array: DEVolume!DEDiskSet *
DEbo - [Link] - Drive extender bus opener context: DEVolume!
DEBusOpenerContext
DEbe - [Link] - Drive extender extends buffer
DEbg - [Link] - Drive extender bus opener context global: DEVolume!
DEBusOpenerContextGlobal
DEbm - [Link] - Drive extender bitmap
DEbu - [Link] - Drive extender generic buffer
DEcl - [Link] - Drive extender delayed cleaner: DEVolume!DelayedCleaner
DEct - [Link] - Drive extender chunk table
DEda - [Link] - Drive extender disk array: DEVolume!DEDisk *
DEdb - [Link] - Drive extender disk directory information
DEdc - [Link] - Drive extender disk chunk: DEVolume!DiskChunk
DEdg - [Link] - Drive extender disk globals: DEVolume!DEDiskGlobals
DEdi - [Link] - Drive extender disk: DEVolume!DEDisk
DEdm - [Link] - Drive extender disk mini chunk: DEVolume!DiskMiniChunk
DEdn - [Link] - Drive extender disk identification info: DEVolume!
DiskIdentificationInfo
DEdr - [Link] - Drive extender device relations
DEds - [Link] - Drive extender disk set: DEVolume!DEDiskSet
DEdt - [Link] - Drive extender disk message: DEVolume!DE_DISK_MESSAGE
DEdu - [Link] - Drive extender disk set message: DEVolume!DE_DISK_SET_MESSAGE
DEdv - [Link] - Drive extender driver object: DEVolume!DEDriver
DEea - [Link] - Drive extender expanding array: DEVolume!
ExpandingAutoPointerArray<T>
DEec - [Link] - Drive extender ECC Page: DEVolume!DeEccPage
DEfg - [Link] - Drive extender filter: DEVolume!DEFilter
DEga - [Link] - Drive extender guild array
DEic - [Link] - Drive extender filter instance context
DEip - [Link] - Drive extender IRP based logical to physical request:
DEVolume!IrpBasedLogicalToPhysicalRequest
DEir - [Link] - Drive extender IRP based read request: DEVolume!
IrpBasedReadRequest
DEiw - [Link] - Drive extender IRP based write request: DEVolume!
IrpBasedWriteRequest
DEla - [Link] - Drive extender log mini chunk array
DElb - [Link] - Drive extender log buffer
DEli - [Link] - Drive extender disk set id record: DEVolume!
DiskSetIdentificationRecord
DElm - [Link] - Drive extender log manager: DEVolume!LogManager
DElp - [Link] - Drive extender logical to physical request: DEVolume!
LogicalToPhysicalRequest
DElr - [Link] - Drive extender log reader: DEVolume!LogReader
DElv - [Link] - Drive extender disk set volume id record: DEVolume!
VolumeIdentificationRecord
DElw - [Link] - Drive extender log writer buffer: DEVolume!LogWriterBuffer
DEmc - [Link] - Drive extender volume chunk init mapping manager: DEVolume!
VolumeChunkInitializationMappingManager
DEml - [Link] - Drive extender log mapping manager: DEVolume!
LogMappingManager
DEms - [Link] - Drive extender superblock mapping manager: DEVolume!
SuperBlockMappingManager
DEmv - [Link] - Drive extender volume mapping manager: DEVolume!
VolumeMappingManager
DEog - [Link] - Drive extender old GUID array
DEpe - [Link] - Drive extender pingable event: DEVolume!PingableEvent
DEpg - [Link] - Drive extender pingable object globals: DEVolume!
PingableObjectGlobals
DEpm - [Link] - Drive extender physical map: DEVolume!PhysicalMap
DEqm - [Link] - Drive extender queued message: DEVolume!QueuedMessage
DEra - [Link] - Drive extender disk event request
DErb - [Link] - Drive extender become dirty request: DEVolume!
VolumeChunk::BecomeDirtyRequest
DErc - [Link] - Drive extender commit request: DEVolume!
VolumeChunk::CommitRequest
DErd - [Link] - Drive extender decommit request: DEVolume!
VolumeChunk::DecommitRequest
DEre - [Link] - Drive extender decommit all request: DEVolume!
DiskSetVolume::DecommitAllRequest
DErg - [Link] - Drive extender registry: DEVolume!DERegistry
DErh - [Link] - Drive extender replicate chunk: DEVolume!ReplicateChunk
DErl - [Link] - Drive extender long and notify request: DEVolume!
DiskSetVolume::LogAndNotifyRequest
DErm - [Link] - Drive extender range lock manager: DEVolume!RangeLockManager
DErn - [Link] - Drive extender new epoch request: DEVolume!
DEDiskSet::NewEpochRequest
DEro - [Link] - Drive extender become out of date request: DEVolume!
VolumeChunk::BecomeOutOfDateRequest
DErp - [Link] - Drive extender replicator: DEVolume!Replicator
DErr - [Link] - Drive extender read request: DEVolume!ReadRequest
DErs - [Link] - Drive extender delete or shutdown request: DEVolume!
DiskSetVolume::DeleteOrShutdownRequest
DErt - [Link] - Drive extender start request: DEVolume!
DEDiskSet::StartRequest
DEru - [Link] - Drive extender shutdown request: DEVolume!
DEDiskSet::ShutdownRequest
DErv - [Link] - Drive extender repair volume request: DEVolume!
DiskSetVolume::RepairVolumeDamageRequest
DErw - [Link] - Drive extender read write target: DEVolume!ReadWriteTarget
DErx - [Link] - Drive extender shutdown system request: DEVolume!
DiskSetVolume::ShutdownRequest
DEry - [Link] - Drive extender start or create request: DEVolume!
DiskSetVolume::StartOrCreateRequest
DErz - [Link] - Drive extender write super blocks request: DEVolume!
DEDiskSet::WriteSuperBlocksRequest
DEsb - [Link] - Drive extender super block buffer
DEsd - [Link] - Drive extender disk set disk: DEVolume!DiskSetDisk
DEsg - [Link] - Drive extender disk set globals: DEVolume!DEDiskSetGlobals
DEsh - [Link] - Drive extender space holder operation: DEVolume!
SpaceHolderOperation
DEte - [Link] - Drive extender data error message: DEVolume!
DE_DATA_ERROR_MESSAGE
DEtr - [Link] - Drive extender trace message
DEtn - [Link] - Drive extender range lock test node
DEtx - [Link] - Drive extender range lock test
DEts - [Link] - Drive extender splay tree test
DEtw - [Link] - Drive extender trim worker pauser: DEVolume!
AutoPauseTrimWorker
DEub - [Link] - Drive extender unaligned EccPage temp buffer: DEVolume!
DeEccPage
DEus - [Link] - Drive extender unicode string
DEva - [Link] - Drive extender volume chunk array: DEVolume!
AutoVolumeChunkPtr *
DEvc - [Link] - Drive extender volume chunk: DEVolume!VolumeChunk
DEvg - [Link] - Drive extender volume globals: DEVolume!DEVolumeGlobals
DEvh - [Link] - Drive extender volume device globals: DEVolume!
DEVolumeDeviceGlobals
DEvm - [Link] - Drive extender volume message: DEVolume!DE_VOLUME_MESSAGE
DEvo - [Link] - Drive extender volume message: DEVolume!DEVolume
DEvs - [Link] - Drive extender disk set volume: DEVolume!DiskSetVolume
DEwi - [Link] - Drive extender work item: DEVolume!AutoWorkItem
DEze - [Link] - Drive extender cluster of zeros

Dh 0 - <unknown> - DirectDraw/3D default object

Dh 1 - <unknown> - DirectDraw/3D DirectDraw object
Dh 2 - <unknown> - DirectDraw/3D Surface object
Dh 3 - <unknown> - DirectDraw/3D Direct3D context object
Dh 4 - <unknown> - DirectDraw/3D VideoPort object
Dh 5 - <unknown> - DirectDraw/3D MotionComp object

Dfb - <unknown> - framebuf video driver

DfC? - [Link] - DFS Client allocations
DfCa - [Link] - DFS Client PERUSERTABLE
DfCb - [Link] - DFS Client REFCONTEXT
DfCc - [Link] - DFS Client CONNECTION
DfCd - [Link] - DFS Client CURRENTDC
DfCe - [Link] - DFS Client CSCEA
DfCf - [Link] - DFS Client FILENAME
DfCg - [Link] - DFS Client PREFIXCACHE
DfCh - [Link] - DFS Client HASH
DfCi - [Link] - DFS Client INPUTBUFFER
DfCj - [Link] - DFS Client REFERRALNAME
DfCj - [Link] - DFS Client REWRITTENNAME
DfCl - [Link] - DFS Client DCLIST
DfCm - [Link] - DFS Client CMCONTEXT
DfCn - [Link] - DFS Client DOMAINNAME
DfCp - [Link] - DFS Client PATH
DfCq - [Link] - DFS Client REGSTRING
DfCr - [Link] - DFS Client REFERRAL
DfCs - [Link] - DFS Client SHARENAME
DfCt - [Link] - DFS Client TREECONNECT
DfCu - [Link] - DFS Client USETABLE
DfCv - [Link] - DFS Client SERVERNAME
DfCw - [Link] - DFS Client TARGETINFO
DfCx - [Link] - DFS Client CREDENTIALS
DfCy - [Link] - DFS Client REMOTEENTRY
DfCz - [Link] - DFS Client DOMAINREFERRAL
Dfs - <unknown> - Distributed File System
dfsr - <unknown> - RDBSS IRP allocation
Dfsm - <unknown> - Eng event allocation (ENG_KEVENTALLOC,ENG_ALLOC) in ntgdi\gre
dFVE - [Link] - Full Volume Encryption crash dump filter (Bitlocker Drive
Encryption)
Dict - [Link] - StorCreateDictionary storport!_STOR_DICTIONARY.Entries
Dire - <unknown> - Directory objects
Dlck - <unknown> - deadlock verifier (part of driver verifier) structures
Dlmp - <unknown> - Video utility library for Vista display drivers
Dmga - <unknown> - mga (matrox) video driver
DmH? - <unknown> - DirectMusic hardware synthesizer
DmpS - [Link] - Crashdump Service Driver
DmS? - <unknown> - DirectMusic kernel software synthesizer
Dndt - <unknown> - Device node
Dnod - <unknown> - Device node structure
DNSk - [Link] - DNS RPC Transactions
DOPE - <unknown> - Device Object Power Extension (po component)
DpDc - [Link] - FsDepends Dependency Context Block
DpDl - [Link] - FsDepends Dependency List Block
DpPl - [Link] - FsDepends Parent Link Block
DPrf - <unknown> - Disk performance filter driver
DPwr - nt!pnp - PnP power management
Dprt - [Link] - Video port for Vista display drivers
Dps5 - <unknown> - NT5 PostScript printer driver
Dpsh - <unknown> - Postcript driver heap memory
Dpsi - <unknown> - psidisp video driver
Dpsm - <unknown> - Postcript driver memory
Dqv - <unknown> - qv (qvision) video driver
DpVc - [Link] - FsDepends Volume Context Block
DrDr - [Link] - Global object
DrEx - [Link] - Exchange object
DrIC - [Link] - I/O context object
Driv - <unknown> - Driver objects
Drsd - <unknown> - Rasdd Printer Driver Pool Tag.
Dtga - <unknown> - tga video driver
Dump - <unknown> - Bugcheck dump allocations
Dun5 - <unknown> - NT5 Universal printer driver
DUQD - [Link] - MPSDRV upcall user request
DV?? - <unknown> - RDR2 DAV MiniRedir Tags
DVCx - <unknown> - AsyncEngineContext, DAV MiniRedir
DVEx - <unknown> - Exchange, DAV MiniRedir
DVFi - <unknown> - FileInfo, DAV MiniRedir
DVFn - <unknown> - FileName, DAV MiniRedir
DVRw - <unknown> - ReadWrite, DAV MiniRedir
DVSc - <unknown> - SrvCall, DAV MiniRedir
DVSh - <unknown> - SharedHeap, DAV MiniRedir

Dvga - <unknown> - vga 16 color video driver

Dvg2 - <unknown> - vga 256 color video driver
Dvg6 - <unknown> - vga 64K color video driver
Dvgr - <unknown> - vga for risc video driver
DW32 - <unknown> - W32 video driver
Dwd - <unknown> - wd90c24a video driver
Dwp9 - <unknown> - weitekp9 video driver
Dxga - <unknown> - XGA video driver

DxgK - [Link] - Vista display driver support

Efsm - <unknown> - EFS driver

Efsc - <unknown> - EFS driver

Efst - <unknown> - EXIFS FS Statistics

Envr - <unknown> - Environment strings

EQAn - [Link] - EQoS application name

EQCc - [Link] - EQoS counters
EQHb - [Link] - EQoS HKE binding
EQHp - [Link] - EQoS HKE parameters
EQOw - [Link] - EQoS policy owner
EQPn - [Link] - EQoS policy net entry
EQPp - [Link] - EQoS policy profile entry
EQPs - [Link] - EQoS policy scratch data
EQPt - [Link] - EQoS policy table
EQQu - [Link] - EQoS flow unit
EQSc - [Link] - EQoS pacer client
EQSe - [Link] - EQoS QIM endpoint
EQSp - [Link] - EQoS generic policy data
EQSt - [Link] - EQoS policy trim scratch
EQSx - [Link] - EQoS security object
EQSy - [Link] - EQoS proxy data
EQUn - [Link] - EQoS uQoS NPI client data
EQUr - [Link] - EQoS URL string
EQUp - [Link] - EQoS URL policy section
EQUQ - [Link] - UQoS generic allocation

Err - <unknown> - Error strings

Etwa - nt!etw - Etw server silo state

EtwA - nt!etw - Etw APC
Etwb - nt!etw - Etw provider tracking
EtwB - nt!etw - Etw Buffer
Etwc - nt!etw - Etw rundown reference counters
EtwC - nt!etw - Etw Realtime Consumer
Etwd - nt!etw - Etw Disallow List Entry
EtwD - nt!etw - Etw DataBlock
EtwF - nt!etw - Etw Filter
EtwG - nt!etw - Etw Guid
EtwH - nt!etw - Etw Private Handle Demuxing
Etwi - nt!etw - Etw IPT support
EtwK - nt!etw - Etw SoftRestart support
Etwl - nt!etw - Etw stack look-aside list entry
EtwL - nt!etw - Etw LoggerContext
Etwm - nt!etw - Etw BitMap
Etwo - nt!etw - Etw memory partition reference
EtwO - nt!etw - Etw memory partition MDL
Etwp - nt!etw - Etw TracingBlock
EtwP - nt!etw - Etw Pool
Etwq - nt!etw - Etw ReplyQueue
Etwr - nt!etw - Etw ReplyQueue entry
EtwR - nt!etw - Etw KM RegEntry
Etws - nt!etw - Etw stack cache
EtwS - nt!etw - Etw DataSource
Etwt - nt!etw - Etw temporary buffer
EtwT - nt!etw - Etw provider traits
EtwU - nt!etw - Etw Periodic Capture State
EtwV - nt!etw - Etw Coverage Sampling
EtwW - nt!etw - Etw WorkItem
Etwx - nt!etw - Etw LBR support
EtwX - nt!etw - Etw profiling support
EtwZ - nt!etw - Etw compression support

Evel - <unknown> - EFS file system filter driver lookaside list

Even - <unknown> - Event objects
Evid - <unknown> - Rtl Event ID's
ExWl - <unknown> - Executive worker list entry

Fat - [Link] - Fat File System allocations

FatB - [Link] - Fat allocation bitmaps
FatC - [Link] - Fat Ccbs
FatD - [Link] - Fat pool dirents
FatE - [Link] - Fat EResources
FatF - [Link] - Fat Fcbs
FatI - [Link] - Fat IrpContexts
FatL - [Link] - Fat FAT entry lookup buffer on verify
FatN - [Link] - Fat Nonpaged Fcbs
FatO - [Link] - Fat I/O buffer
FatP - [Link] - Fat output for query retrieval pointers (caller frees)
FatQ - [Link] - Fat buffered user buffer
FatR - [Link] - Fat repinned Bcb
FatS - [Link] - Fat stashed Bpb
FatT - [Link] - Fat directory allocation bitmaps
FatV - [Link] - Fat Vcb stat bucket
Fatv - [Link] - Fat events
FatW - [Link] - Fat FAT windowing structure
FatX - [Link] - Fat IO contexts
Fatb - [Link] - Fat Bcb arrays
Fatd - [Link] - Fat EA data
Fate - [Link] - Fat EA set headers
Fatf - [Link] - Fat deferred flush contexts
Fati - [Link] - Fat IO run descriptor
Fatn - [Link] - Fat filename buffer
Fatr - [Link] - Fat verification-time rootdir snapshot
Fats - [Link] - Fat verification-time boot sector
Fatv - [Link] - Fat backpocket Vpb
Fatx - [Link] - Fat delayed close contexts
FbCx - [Link] - Inet feature fallback contexts

REM FsLib allocations. FsLib is a static library linked in both NTFS and ReFS
FDEl - FsLib - FsLib DAX Extent Array
FDEd - FsLib - FsLib DAX Extent Descriptor
FDDb - FsLib - FsLib DAX DSM Buffer
FsIT - FsLib - FsLib IO Trace
FsLd - FsLib - FsLib Livedump

fboX - <unknown> - EXIFS FOBXVF List

Fcbl - <unknown> - EXIFS FCBlock

Fcon - nt!RtlpFc - Feature Configuration Management

Feiv - [Link] - WFP filter engine incoming values

Fecc - [Link] - WFP filter engine classify context
Fecf - [Link] - WFP filter engine callout context

File - <unknown> - File objects

FIcn - [Link] - FileInfo FS-filter Create Retry Path
FIcp - [Link] - FileInfo FS-filter Extra Create Parameter
FIcs - [Link] - FileInfo FS-filter Stream Context
FIcv - [Link] - FileInfo FS-filter Volume Context
FIOc - [Link] - FileInfo FS-filter Prefetch Open Context
FIou - [Link] - FileInfo FS-filter User Open Context
FIof - [Link] - FileInfo FS-filter File Object Context
FIPc - [Link] - FileInfo FS-filter Prefetch Context
FIvn - [Link] - FileInfo FS-filter Volume Name
FIvp - [Link] - FileInfo FS-filter Volume Properties

FlmC - [Link] - Framing Layer Client Contexts

FlmP - [Link] - Framing Layer Provider Contexts
Flng - [Link] - Framing Layer Generic Buffers (Tunnel/Port change
notifications, ACLs)
FlpC - [Link] - Framing Layer Client Contexts
FlpI - [Link] - Framing Layer Interfaces
FlpL - [Link] - Framing Layer Client Interface Contexts
FlpM - [Link] - Framing Layer Multicast Groups
FlpS - [Link] - Framing Layer Serialized Requests
Fl6D - [Link] - FL6t DataLink Addresses
Fl4D - [Link] - FL4t DataLink Addresses
FltD - [Link] - FLt DataLink Addresses
FlSB - [Link] - Framing Layer Stack Block

Flop - <unknown> - floppy driver

FLSk - nt!ps - Kernel TLS metadata

Flst - <unknown> - EXIFS Freelist

Fltt - nt!Vf - Log of Driver Verifier fault injection stack traces.

FLex - <unknown> - exclusive file lock

FLfl - <unknown> - exported (non-private) file lock
FLli - <unknown> - per-file lock information
FLln - <unknown> - shared lock tree node
FLsh - <unknown> - shared file lock
FLwl - <unknown> - waiting lock

FM?? - [Link] - Unrecognized FltMgr tag (update pooltag.w)

FMac - [Link] - ASCII String buffers
FMas - [Link] - ASYNC_IO_COMPLETION_CONTEXT structure
FMcb - [Link] - FLT_CCB structure
FMcn - [Link] - Non paged context extension structures
FMcp - [Link] - Client port wrapper structure
FMcr - [Link] - Context registration structures
FMct - [Link] - TRACK_COMPLETION_NODES structure
FMdh - [Link] - Paged ECP context for targeted create reparse
FMdl - [Link] - Array of DEVICE_OBJECT pointers
FMea - [Link] - EA buffer for create
FMfc - [Link] - FLTMGR_FILE_OBJECT_CONTEXT structure
FMfi - [Link] - Fast IO dispatch table
FMfk - [Link] - Byte Range Lock structure
FMfl - [Link] - FLT_FILTER structure
FMfn - [Link] - NAME_CACHE_NODE structure
FMfr - [Link] - FLT_FRAME structure
FMfz - [Link] - FILE_LIST_CTRL structure
FMib - [Link] - Irp SYSTEM buffers
FMic - [Link] - IRP_CTRL structure
FMil - [Link] - IRP_CTRL completion node stack
FMin - [Link] - FLT_INSTANCE name
FMis - [Link] - FLT_INSTANCE structure
FMla - [Link] - Per-processor IRPCTRL lookaside lists
FMlp - [Link] - Paged stream list control entry structures
FMnc - [Link] - NAME_CACHE_CREATE_CTRL structure
FMng - [Link] - NAME_GENERATION_CONTEXT structure
FMol - [Link] - OPLOCK_CONTEXT structure
FMor - [Link] - OpenReparse ECP structure
FMos - [Link] - Operation status ctrl structure
FMpl - [Link] - Cache aware pushLock
FMpr - [Link] - FLT_PRCB structure
FMQc - [Link] - QueryOnCreate ECP structure
FMrl - [Link] - FLT_OBJECT rundown logs
FMrp - [Link] - Reparse point data buffer
FMrr - [Link] - Per-processor Cache-aware rundown ref structure
FMrs - [Link] - Registry string
FMrw - [Link] - FLT_REGISTRY_WATCH_CONTEXT structure
FMsc - [Link] - SECTION_CONTEXT structure
FMsd - [Link] - Security descriptors
FMsl - [Link] - STREAM_LIST_CTRL structure
FMtb - [Link] - TXN_PARAMETER_BLOCK structure
FMtn - [Link] - Temporary file names
FMtp - [Link] - Non Paged TxVol context structures
FMtr - [Link] - Temporary Registry information
FMts - [Link] - Tree Stack
FMus - [Link] - Unicode string
FMvf - [Link] - FLT_VERIFIER_EXTENSION structure
FMvj - [Link] - FLT_VERIFIER_OBJECT structure
FMvl - [Link] - Array of FLT_VERIFIER_OBJECT structures
FMvo - [Link] - FLT_VOLUME structure
FMwi - [Link] - Work item structures

Fsb - [Link] - Fixed-Size Block pool

Fsrc - [Link] - Filesystem recognizer ([Link])

Fstb - <unknown> - ntos\fstub

FstB - <unknown> - ntos\fstub

FsVg - [Link] - International VGA support

flnk - <unknown> - font link tag used in ntgdi\gre

FLpc - [Link] - IPv6 Framing Layer Client context

fpct - [Link] - Compressed file chunk table

fpcx - [Link] - Compressed file IO context
fpdw - [Link] - Compressed file decompression workspace
fpgn - [Link] - Compressed file general
fppm - [Link] - Compressed file IO parameters
fprd - [Link] - Compressed file small read buffer
fpRD - [Link] - Compressed file large read buffer
fpwi - [Link] - Compressed file work item
fpxp - [Link] - Compressed file xpress context

FS?? - nt!fsrtl - Unrecoginzed File System Run Time allocations (update

pooltag.w)
FSeh - nt!fsrtl - File System Run Time Extra Create Parameter Entry
FSel - nt!fsrtl - File System Run Time Extra Create Parameter List
FSfm - nt!fsrtl - File System Run Time Fast Mutex Lookaside List
FSim - nt!fsrtl - File System Run Time Mcb allocations
FSrt - nt!fsrtl - File System Run Time allocations (DO NOT USE!)
FSmg - nt!fsrtl - File System Run Time
FSrd - nt!fsrtl - File System Run Time
FSrm - nt!fsrtl - File System Run Time
FSrn - nt!fsrtl - File System Run Time
FSrN - nt!fsrtl - File System Run Time
FSro - nt!fsrtl - File System Run Time
FSrs - nt!fsrtl - File System Run Time Work Item for low-stack posting
FSun - nt!fsrtl - File System Run Time
FOCX - nt!fsrtl - File System Run Time File Object Context structure

FsCo - [Link] - FSE_CORE_CONTEXT_OBJECT_POOL_TAG

Fsbi - [Link] - FSE_CORE_NBLCHAIN_INDICATION_CONTEXT_POOL_TAG
FsGo - [Link] - FSE_CORE_NDIS_GENERIC_OBJECT_POOL_TAG
Fspe - [Link] - FSE_CORE_NIC_PAIR_ENTRY_POOL_TAG
FsDC - [Link] - FSE_DEVICE_CONTEXT_TAG
Fsed - [Link] - FSE_DIAGNOSTICS_SCRATCH_TAG
FseB - [Link] - FSE_EXPANDABLE_BUFFER_SIGNATURE
FsIP - [Link] - FSE_IPS_CLIENT_TAG
FsIf - [Link] - FSE_IPS_CLIENT_INTERFACE_TAG
Fsgo - [Link] - FSE_NDIS_GENERIC_OBJECT_POOL_TAG
FsLS - [Link] - FSE_NMR_CLIENT_POOLTAG
FseV - [Link] - FSE_PARTITION_SIGNATURE
FseT - [Link] - FSE_PATCH_SIGNATURE
FseC - [Link] - FSE_PORT_CACHE_SIGNATURE
FsPp - [Link] - FSE_PORT_POLICY_TAG
FseP - [Link] - FSE_PORT_POOL_SIGNATURE
FseR - [Link] - FSE_PORT_RESERVATION_SIGNATURE
FsGl - [Link] - FSE_SERVER_TAG_GLOBAL
FsMt - [Link] - FSE_SERVER_TAG_MESSAGE
FsMl - [Link] - FSE_SERVER_TAG_MIDL
FsPd - [Link] - FSE_SERVER_TAG_PARTITION
FsSt - [Link] - FSE_SERVER_TAG_SOCKET
FsSc - [Link] - FSE_SERVER_TAG_SOCKET_CONTEXT
FsWi - [Link] - FSE_SERVER_TAG_WORKITEM
FseS - [Link] - FSE_SHIMS_TAG
FseW - [Link] - FSE_WORKSHEET_POOLTAG
FsTd - [Link] - FSE_PT_TEST_DRIVER_TAG

FTrc - <unknown> - Fault tolerance Slist tag.

FtC - <unknown> - Fault tolerance driver
FtM - <unknown> - Fault tolerance driver
FtS - <unknown> - Fault tolerance driver
FtT - <unknown> - Fault tolerance driver
FtU - <unknown> - Fault tolerance driver
FtV - <unknown> - Fault tolerance driver
<unknown>

FtpA - [Link] - MPSDRV FTP protocol analyzer

FwfD - [Link] - MPSDRV driver buffer for flattening NET_BUFFFER

FwSD - [Link] - WFP security descriptor

FVE? - [Link] - Full Volume Encryption Filter Driver (Bitlocker Drive

Encryption)
FVE0 - [Link] - General allocations
FVEc - [Link] - Cryptographic allocations
FVEl - [Link] - FVELIB allocations
FVEp - [Link] - Write buffers
FVEr - [Link] - Reserved mapping addresses
FVEv - [Link] - Conversion allocations
FVEw - [Link] - Worker threads
FVEx - [Link] - Read/write control structures

FxDr - [Link] - KMDF driver globals/generic pool allocation tag. Fallback tag
in case driver tag is unusable.
FxLg - [Link] - KMDF IFR log tag
FxL? - [Link] - KMDF Loader Pool allocation

Fwpp - [Link] - Windows Filtering Platform export driver.

Fwpn - [Link] - WFP NBL info
Fwpi - [Link] - WFP injector info
Fwpx - [Link] - WFP NBL tagged context
Fwpd - [Link] - WFP delayed injection context
Fwpc - [Link] - WFP injection call context
G??? - <unknown> - Gdi Objects
G - <unknown> - Gdi Generic allocations
Gcac - <unknown> - Gdi glyph cache
Gcap - <unknown> - Gdi capture buffer
Gcsl - <unknown> - Gdi string resource script names
Gdbr - <unknown> - Gdi driver brush realization
Gdd - <unknown> - Gdi ddraw PKEY_VALUE_FULL_INFORMATION
Gdda - <unknown> - Gdi ddraw attach list
GddD - <unknown> - Gdi ddraw dummy page
Gdde - <unknown> - Gdi ddraw event
Gddf - <unknown> - Gdi ddraw driver heaps
Gddp - <unknown> - Gdi ddraw driver caps
Gddv - <unknown> - Gdi ddraw driver video memory list
Gdxd - <unknown> - Gdi ddraw VPE directdraw object
Gdxs - <unknown> - Gdi ddraw VPE surface, videoport, capture object
Gdxx - <unknown> - Gdi ddraw VPE DXAPI object
Gdev - <unknown> - Gdi GDITAG_DEVMODE
GDev - <unknown> - Gdi pdev
Gdrs - <unknown> - Gdi GDITAG_DRVSUP
Gebr - <unknown> - Gdi ENGBRUSH
gEdg - <unknown> - Gdi gradient fill triangle
Gffv - <unknown> - Gdi FONTFILEVIEW
gFil - <unknown> - Gdi FILEVIEW
GFil - <unknown> - Gdi engine descriptor list
Gfsb - <unknown> - Gdi font sustitution list
Gfsm - <unknown> - Gdi Fast mutex
Ggdv - <unknown> - Gdi GDITAG_GDEVICE
Gglb - <unknown> - Gdi temp buffer
Ggls - <unknown> - Gdi glyphset
Ggb - <unknown> - Gdi glyph bits
Ggbl - <unknown> - Gdi look aside buffers
Ghmg - <unknown> - Gdi handle manager objects
Gini - <unknown> - Gdi fast mutex
Gldv - <unknown> - Gdi Ldev
Glnk - <unknown> - Gdi PFELINK
Gmap - <unknown> - Gdi font map signature table
Gpff - <unknown> - Gdi physical font file
Gpft - <unknown> - Gdi font table
Gsem - <unknown> - Gdi Semaphores
Gsp - <unknown> - Gdi sprite
Gspr - <unknown> - Gdi sprite grow range
Gtmp - <unknown> - Gdi temporary allocations
Gtmw - <unknown> - Gdi TMW_INTERNAL
Gxlt - <unknown> - Gdi Xlate

Gfcb - <unknown> - EXIFS Grow FCB

Hal - [Link] - Hardware Abstraction Layer

Hal2 - [Link] - Hardware Abstraction Layer: Secondary Interrupts
HalA - [Link] - Hardware Abstraction Layer: ACPI
Hala - [Link] - Hardware Abstraction Layer: HSA
HalB - [Link] - Hardware Abstraction Layer: MM Buffer
Halb - [Link] - Hardware Abstraction Layer: MM Metadata
HalC - [Link] - Hardware Abstraction Layer: Dynamic Partitioning
Halc - [Link] - Hardware Abstraction Layer: Processors
HalD - [Link] - Hardware Abstraction Layer: DMA
Hald - [Link] - Hardware Abstraction Layer: Kernel Debug
HalE - [Link] - Hardware Abstraction Layer: Errata Management
HalF - [Link] - Hardware Abstraction Layer: Firmware
HalH - [Link] - Hardware Abstraction Layer: Hypervisor
HalI - [Link] - Hardware Abstraction Layer: IOMMU
Hali - [Link] - Hardware Abstraction Layer: Interrupts
HalK - [Link] - Hardware Abstraction Layer: KINTERUPT objects
HalM - [Link] - Hardware Abstraction Layer: Memory Management
Halm - [Link] - Hardware Abstraction Layer: Misc
HalP - [Link] - Hardware Abstraction Layer: PCI
Halp - [Link] - Hardware Abstraction Layer: PNP
Halo - [Link] - Hardware Abstraction Layer: Power
HalV - [Link] - Driver Verifier DMA checking
HalW - [Link] - Hardware Abstraction Layer: WHEA

Hpfs - <unknown> - Pinball (aka Hpfs) allocations

HisC - <unknown> - histogram filter driver
Hist - <unknown> - histogram filter driver
HidP - [Link] - HID Parser
HidC - [Link] - HID Class driver
HdCl - <unknown> - HID Client Sample Driver
HpMM - [Link] - HotPlug Memory Driver

HCID - [Link] - Bluetooth port driver HCI debug

HCIT - [Link] - Bluetooth port driver (HCI)

HcRs - [Link] - HCAPORT_TAG_RESOURCE_LIST

HcEv - [Link] - HCAPORT_TAG_EVENT
HcdI - [Link] - HCAPORT_TAG_HWID
HcEn - [Link] - HCAPORT_TAG_ENUM
HcMc - [Link] - HCAPORT_TAG_MISC
HcDr - [Link] - HCAPORT_TAG_DEVICE_RELATIONS
HcBm - [Link] - HCAPORT_TAG_BITMAP
HcOb - [Link] - HCAPORT_TAG_OBJECT
HcCq - [Link] - HCAPORT_TAG_CQUEUE
HcPr - [Link] - HCAPORT_TAG_PROTD
HPmi - [Link] - HCAPORT_TAG_PMI_EXTENSION
HcMa - [Link] - HCAPORT_TAG_MAD
HcMp - [Link] - HCAPORT_TAG_MINIPORT
HcCm - [Link] - HCAPORT_TAG_CM
HcUc - [Link] - HCAPORT_TAG_UCONTEXT
HcMr - [Link] - HCAPORT_TAG_REMOVE_LOCK
Hmgo - [Link] - HCAPORT_TAG_WQ_MG_INFO
Hioc - [Link] - HCAPORT_TAG_IOC_SERVICE_TABLE

hSVD - [Link] - Shared Heap Tag

HTab - <unknown> - Hash Table pool

HT01 - <unknown> - GDI Halftone AddCachedDCI() for CurCDCIData

HT02 - <unknown> - GDI Halftone GetCachedDCI() for Threshold
HT03 - <unknown> - GDI Halftone FindCachedSMP() for CurCSMPData
HT04 - <unknown> - GDI Halftone FindCachedSMP() for CurCSMPBmp
HT05 - <unknown> - GDI Halftone HT_CreateDeviceHalftoneInfo() for HT_DHI
HT06 - <unknown> - GDI Halftone pDCIAdjClr() for DEVCLRADJ
HT07 - <unknown> - GDI Halftone ComputeRGB555LUT() for RGBLUT
HT08 - <unknown> - GDI Halftone ColorTriadSrcToDev() for RGB-XYZ
HT09 - <unknown> - GDI Halftone ColorTriadSrcToDev() for CRTX-FD6XYZ Cache
HT10 - <unknown> - GDI Halftone CreateDyesColorMappingTable() for DevPrims
HT11 - <unknown> - GDI Halftone CreateDyesColorMappingTable() for
DyeMappingTable
HT12 - <unknown> - GDI Halftone ThresholdsFromYData() for pYData
HT13 - <unknown> - GDI Halftone ComputeHTCellRegress() for pThresholds
HT14 - <unknown> - GDI Halftone CalculateStretch() for InputSI/pSrcMaskLine
HT15 - <unknown> - GDI Halftone CalculateStretch() for PrimColorInfo

Hvlm - nt!Hvl - Temporary MDL for the Hvl component.

HvlP - nt!Hvl - Hypercall marshalling pages for the Hvl component.

IBCM - [Link] - CM_INSTANCE_TAG Windows Infiniband Communications Manager

CEP - [Link] - CEP_INSTANCE_TAG
CMSH - [Link] - WIBCM_SHARED_TAG
CMWK - [Link] - WIBCM_WORK_TAG
CMWT - [Link] - WIBCM_TIMER_TAG

IBm* - [Link] - Windows Infiniband Management Server pool tags

IbPm - [Link] - WIBPM_TAG Windows Infiniband Performance Manager

IbPS - [Link] - WIBPM_SENT_TAG
IbPI - [Link] - WIBPM_ITEM_TAG
IbPA - [Link] - WIBPM_SAMPLE_TAG

IbW0 - [Link] - WIBWMI0_TAG Windows Infiniband WMI Manager

IbW1 - [Link] - WIBWMI1_TAG
IbW2 - [Link] - WIBWMI2_TAG

Ic4c - [Link] - ICMP IPv4 Control data

Ic4h - [Link] - ICMP IPv4 Headers
Ic6c - [Link] - ICMP IPv6 Control data
Ic6h - [Link] - ICMP IPv6 Headers
IBbf - [Link] - IP BVT Buffers
Ilom - [Link] - IPsec LBFO offload map
Ilog - [Link] - IPsec LBFO offload general
InAD - [Link] - Inet Ancillary Data
InCo - [Link] - Inet Compartment
InCS - [Link] - Inet Compartment Set
IneI - [Link] - Inet Inspects
InF0 - [Link] - Inet Generic Fixed Size Block pool 0
InF1 - [Link] - Inet Generic Fixed Size Block pool 1
InF2 - [Link] - Inet Generic Fixed Size Block pool 2
InIS - [Link] - Inet Inspect Streams
InNA - <unknown> - Inet Na Clients
InNP - [Link] - Inet Nsi Providers
InPA - [Link] - Inet Port Assignment Arrays
InPa - [Link] - Inet Port Assignments
InPE - [Link] - Inet Port Exclusions
InPP - [Link] - Inet Port pool
InSB - [Link] - Inet stack block
InSC - [Link] - Inet Queued Send Contexts
InWP - [Link] - Inet Wake Port Record
Ipas - [Link] - IP Buffers for Address Sort
Ipcr - [Link] - IP Cache-aware Reference Counters
IPba - [Link] - IP Batching
IPbw - [Link] - IP Path Bandwidth information
IPdc - [Link] - IP Destination Cache
IPfg - [Link] - IP Fragment Groups
IPfp - [Link] - IP PreValidated Receives
IPif - [Link] - IP Interfaces
IPlc - [Link] - IP Locality
IPle - [Link] - IP Loopback execution context
IPlo - [Link] - IP Loopback buffers
IPlw - [Link] - IP Loopback worker
IPmf - [Link] - IP Multicast Forwarding Entry pool
IPpo - [Link] - IP Offload buffers
IPpa - [Link] - IP Path information
IPro - [Link] - IP Router Context
IPrq - [Link] - IP Request Control data
IPss - [Link] - IP Session State
IPsi - [Link] - IP SubInterfaces
Ipng - [Link] - IP Generic buffers (Address, Interface, Packetize, Route
allocations)
IpOl - [Link] - IP Offload Log data
Ippp - [Link] - IP Prefix Policy information
IPre - [Link] - IP Reassembly buffers
Iptt - [Link] - IP Timer Tables
Iptc - [Link] - IP Transaction Context information
Ipur - [Link] - IP Unicast Routes
Ipwi - [Link] - IP Work Item allocations
I4ai - [Link] - IPv4 Local Address Identifiers
I4ba - [Link] - IPv4 Local Broadcast Addresses
I4bf - [Link] - IPv4 Generic Buffers (Source Address List allocations)
I4e - [Link] - IPv4 Echo data
I4ma - [Link] - IPv4 Local Multicast Addresses
I4nb - [Link] - IPv4 Neighbors
I4rd - [Link] - IPv4 Receive Datagrams Arguments
I4ua - [Link] - IPv4 Local Unicast Addresses
I6ai - [Link] - IPv6 Local Address Identifiers
I6aa - [Link] - IPv6 Local Anycast Addresses
I6bf - [Link] - IPv6 Generic Buffers (Source Address List allocations)
I6e - [Link] - IPv6 Echo data
I6ma - [Link] - IPv6 Local Multicast Addresses
I6nb - [Link] - IPv6 Neighbors
I6rd - [Link] - IPv6 Receive Datagrams Arguments
I6ua - [Link] - IPv6 Local Unicast Addresses

IPX - <unknown> - Nwlnkipx transport

Icp - <unknown> - I/O completion packets queue on a completion ports
IcpP - <unknown> - NPAGED_LOOKASIDE_LIST I/O completion per processor lookaside
pointers
IdeP - <unknown> - atapi IDE
IdeX - <unknown> - PCI IDE
idle - <unknown> - Power Manager idle handler
Ifs - <unknown> - Default file system allocations (user's of ntifs.h)
Info - <unknown> - general system information allocations
Io - nt!io - general IO allocations
IoAc - nt!io - Io ACLs
IoBo - nt!io - Io boot disk information
IoCc - nt!io - Io completion context
IoCo - nt!io - Io completion
IoCp - nt!io - Io copy operation
IoDn - nt!io - Io device name info
IoEa - nt!io - Io extended attributes
IoEr - nt!io - Io error log packets
IoEv - nt!io - Io KEVENT
IoFc - nt!io - Io name transmogrify operation
IoFs - nt!io - Io shutdown packet
IoFu - nt!pnp - Io file utils
Ioin - <unknown> - Io interrupts
IoKa - nt!io - Io keepalive
IoKB - nt!io - Registry basic key block (temp allocation)
IoKe - nt!io - Io registry key
IoLe - nt!io - Io length
IoN1 - nt!io - Io name strings 1
IoN2 - nt!io - Io name strings 2
IoN3 - nt!io - Io name strings 3
IoN4 - nt!io - Io name strings 4
IoNm - nt!io - Io parsing names
IoOp - nt!io - I/O subsystem open packet
IoRb - nt!io - Io remote boot related
IoRe - nt!io - Io reparse
IoRi - nt!io - I/O SubSystem Driver Reinitialization Callback Packet
IoRN - nt!io - Registry key name (temp allocation)
IoSA - nt!io - Io segment array
IoSB - nt!io - Io system buffer
IoSD - nt!io - Io system device buffer
IoSe - nt!io - Io security related
IoSh - nt!io - Io shutdown packet
IoSi - nt!io - Io Symbolic Links
IoSn - nt!io - Io Session Notifications
IoSs - nt!io - Io SIDs
IoSt - nt!io - Io Stream Identifier Context
IoSy - nt!io - Io system environment variables
IoTi - nt!io - Io timers
IoTt - nt!vf - I/O verifier IRP tracking table
IoUs - nt!io - I/O SubSystem completion Context Allocation
IoWI - nt!io - Io work items
Irp - <unknown> - Io, IRP packets
Irp+ - nt!vf - I/O verifier allocated IRP packets
IrpB - nt!vf - I/O verifier direct I/O double buffer allocation
Irpd - nt!vf - I/O verifier deferred completion context
Irps - nt!vf - I/O verifier per-IRP session tracking data
Irpt - nt!vf - I/O verifier per-IRP tracking data
IrpC - nt!vf - I/O verifier stack contexts
Irpl - nt!io - system large IRP lookaside list
Irps - nt!io - system small IRP lookaside list
IrpX - nt!io - IRP Extension
Isap - <unknown> - Pnp Isa bus extender
II?? - <unknown> - IP in IP tunneling
IIrf - <unknown> - Free memory
IIdt - <unknown> - Data
IITn - <unknown> - Tunnel
IIhd - <unknown> - Header
IIpk - <unknown> - Packet
IIsc - <unknown> - Send Context
IIts - <unknown> - Transfer Context
IIwc - <unknown> - Work Context

Im* - <unknown> - [Link] from adaptec

INTC - <unknown> - Intel video driver

IPm? - <unknown> - IP Multicasting

IPmg - <unknown> - Group
IPms - <unknown> - Source
IPmo - <unknown> - Outgoing Interface
IPmm - <unknown> - Message
IPmf - <unknown> - Free memory (only in checked builds)
Ip?? - [Link] - IP Security (IPsec)
IpSI - [Link] - initial allocations
IpAT - [Link] - AH headers in transport mode
IpAU - [Link] - AH headers in tunnel mode
IpET - [Link] - ESP headers in transport mode
IpEU - [Link] - ESP headers in tunnel mode
IpHT - [Link] - HUGHES headers in transport mode
IpHU - [Link] - HUGHES headers in tunnel mode
IpAX - [Link] - key acquire contexts
IpFI - [Link] - filter blocks
IpSA - [Link] - security associations (SA)
IpKE - [Link] - keys
IpTI - [Link] - timers
IpSQ - [Link] - stall queues
IpLA - [Link] - lookaside lists
IpBP - [Link] - buffer pools
IpSC - [Link] - send complete context
IpEQ - [Link] - event queue
IpHW - [Link] - hardware accleration items
IpCO - [Link] - IP compression

ItoM - [Link] - IPsec task offload interface

ItoD - [Link] - IPsec task offload delete SA
ItoS - [Link] - IPsec task offload add SA
ItoC - [Link] - IPsec task offload context
ItoO - [Link] - IPsec task offload paramters

Itht - [Link] - IPsec hashtable

ISLe - [Link] - IPsec SA list entry
IsRc - [Link] - IPsec rebalance context
Ikmb - [Link] - IPsec key module blob
Ithp - [Link] - IPsec throttle parameter
Ipfl - [Link] - IPsec flow handle
Ipap - [Link] - IPsec pend context
Inlc - [Link] - IPsec NL complete context
Iprc - [Link] - IPsec RPC context
Ipis - [Link] - IPsec inbound sequence info
Itok - [Link] - IPsec token
Iser - [Link] - IPsec inbound sequence range
IKeO - [Link] - IPsec key object
I4sa - [Link] - IPsec SADB v4
I4s6 - [Link] - IPsec SADB v6
IHaO - [Link] - IPsec hash object
Ipnc - [Link] - IPsec negotiation context
Icse - [Link] - IPsec NS connection state
Itro - [Link] - IPsec outbound session security context
Itri - [Link] - IPsec inbound packet security context
Ituo - [Link] - IPsec outbound tunnel session security context
Itui - [Link] - IPsec inbound packet tunnel security context
Ipft - [Link] - IPsec filter
Ipwi - [Link] - IPsec work item

Idqf - [Link] - IPsec DoS Protection QoS flow

Idpc - [Link] - IPsec DoS Protection pacer create
Idst - [Link] - IPsec DoS Protection state entry
Ifws - [Link] - IPsec forward state

ImPl - [Link] - NDIS IM (LBFO) Platform

IpFl - [Link] - MPSDRV IP Flow

IrD? - <unknown> - IrDA TDI and RAS drivers

IU?? - <unknown> - IIS Utility Driver

IUDl - <unknown> - Lookaside list allocations
IUcp - <unknown> - completion port minipackets

KAPC - nt!io - I/O SubSystem HardError APC

KbdC - [Link] - Keyboard Class Driver
KbdH - [Link] - Keyboard HID mapper Driver
KCfe - <unknown> - Kernel COM factory entry
KDN_ - [Link] - Network Kernel Debug Adapter
KDNT - [Link] - Network Kernel Debug Adapter TCB
KDNR - [Link] - Network Kernel Debug Adapter RCB
KDNr - [Link] - Network Kernel Debug Adapter RECV-NBL
KDNF - [Link] - Network Kernel Debug Adapter FRAME
Ke - <unknown> - Kernel data structures
KeIC - <unknown> - Kernel Interrupt Object Chain
Key - <unknown> - Key objects
KMIX - <unknown> - Kmixer (wdm audio)
KNMI - <unknown> - Kernel NMI Callback object
KrbC - [Link] - Kerberos Client package
krpc - nt - NTOS midl_user_allocate
KSah - <unknown> - Ks auxiliary stream headers
KSAI - <unknown> - allocator instance
KSai - <unknown> - default allocator instance header
KSbi - <unknown> - event buffered item
KSCI - <unknown> - clock instance
KSce - <unknown> - create item entry
KSch - <unknown> - create handler entry
KSci - <unknown> - default clock instance header
KScp - <unknown> - object creation parameters auxiliary copy
KSda - <unknown> - default allocator
KSdc - <unknown> - default clock
KSdh - <unknown> - device header
Kse0 - [Link] - Security driver allocs for sec package 0
Kse1 - [Link] - Security driver allocs for sec package 1
Kse2 - [Link] - Security driver allocs for sec package 2
Kse3 - [Link] - Security driver allocs for sec package 3
Kse4 - [Link] - Security driver allocs for sec package 4
Kse5 - [Link] - Security driver allocs for sec package 5
Kse6 - [Link] - Security driver allocs for sec package 6
Kse7 - [Link] - Security driver allocs for sec package 7
Kse8 - [Link] - Security driver allocs for sec package 8
Kse9 - [Link] - Security driver allocs for sec package 9
Ksec - [Link] - Security device driver
KSed - <unknown> - event dpc item
KSee - <unknown> - event entry
KSed - <unknown> - oneshot event deletion dpc
KSep - <unknown> - irp system buffer event parameter
KseS - [Link] - Security driver allocs for LSA proper
KSew - <unknown> - oneshot event deletion workitem
KseZ - [Link] - Security driver allocs for default sec package
KSqr - <unknown> - QM quality report
KSer - <unknown> - QM error report
KSfd - <unknown> - filter cache data (MSKSSRV)
KsFI - <unknown> - filter instance
KSns - <unknown> - null security object
KSnv - <unknown> - registry name value
KSoh - <unknown> - object header
KSop - <unknown> - object creation parameters
KSpc - <unknown> - port driver instance FsContext
KSPI - <unknown> - pin instance
KSpp - <unknown> - irp system buffer property/method/event parameter
KSpt - <unknown> - pin type list (MSKSSRV)
KSqf - <unknown> - query information file buffer
KSsc - <unknown> - port driver stream FsContext
KSsf - <unknown> - set information file buffer
KSsh - <unknown> - stream headers
KSsi - <unknown> - software bus interface
KSsl - <unknown> - symbolic link buffer (MSKSSRV)
KSsp - <unknown> - serialized property set
KsoO - <unknown> - WDM audio stuff
L2CA - [Link] - Bluetooth port driver (L2CAP)
L2T0 - <unknown> - ndis\l2tp / MTAG_FREED
L2T1 - <unknown> - ndis\l2tp / MTAG_ADAPTERCB
L2T2 - <unknown> - ndis\l2tp / MTAG_TUNNELCB
L2T3 - <unknown> - ndis\l2tp / MTAG_VCCB
L2T4 - <unknown> - ndis\l2tp / MTAG_VCTABLE
L2T5 - <unknown> - ndis\l2tp / MTAG_WORKITEM
L2T6 - <unknown> - ndis\l2tp / MTAG_TIMERQ
L2T7 - <unknown> - ndis\l2tp / MTAG_TIMERQITEM
L2T8 - <unknown> - ndis\l2tp / MTAG_PACKETPOOL
L2T9 - <unknown> - ndis\l2tp / MTAG_FBUFPOOL
L2Ta - <unknown> - ndis\l2tp / MTAG_HBUFPOOL
L2Tb - <unknown> - ndis\l2tp / MTAG_TDIXRDG
L2Tc - <unknown> - ndis\l2tp / MTAG_TDIXSDG
L2Td - <unknown> - ndis\l2tp / MTAG_CTRLRECD
L2Te - <unknown> - ndis\l2tp / MTAG_CTRLSENT
L2Tf - <unknown> - ndis\l2tp / MTAG_PAYLRECD
L2Tg - <unknown> - ndis\l2tp / MTAG_PAYLSENT
L2Th - <unknown> - ndis\l2tp / MTAG_INCALL
L2Ti - <unknown> - ndis\l2tp / MTAG_UTIL
L2Tj - <unknown> - ndis\l2tp / MTAG_ROUTEQUERY
L2Tk - <unknown> - ndis\l2tp / MTAG_ROUTESET
L2Tl - <unknown> - ndis\l2tp / MTAG_L2TPPARAMS
L2Tm - <unknown> - ndis\l2tp / MTAG_TUNNELWORK
L2Tn - <unknown> - ndis\l2tp / MTAG_TDIXROUTE
LANE - [Link] - LAN Emulation Client for ATM
LB?? - <unknown> - LM Datagram receiver allocations
LBan - <unknown> - Server announcement
LBvb - <unknown> - View buffer
LBma - <unknown> - Master announce context
LBxp - <unknown> - Transport
LBxn - <unknown> - TransportName
LBxm - <unknown> - Master name
LBtn - <unknown> - Transport name
LBea - <unknown> - Ea buffer
LBdi - <unknown> - POOL_DOMAIN_INFO
LBds - <unknown> - Send datagram context
LBci - <unknown> - Connection info
LBmh - <unknown> - Mailslot header
LBbl - <unknown> - Backup List
LBsl - <unknown> - Browser server list
LBbs - <unknown> - Browser server
LBgb - <unknown> - GetBackupList request
LBbr - <unknown> - GetBackupList response
LBmb - <unknown> - Mailslot Buffer
LBid - <unknown> - Illegal datagram context
LBbn - <unknown> - Name
LBnn - <unknown> - Name name
LBic - <unknown> - IRP context
LBwi - <unknown> - Work item
LBel - <unknown> - Election context
LBbb - <unknown> - Become backup context
LBbr - <unknown> - Become backup request
LBpn - <unknown> - Paged Name
LBpt - <unknown> - Paged transport
LBse - <unknown> - Browser security

Lbuf - <unknown> - EXIFS Large Buffer

Ldmp - nt!io - Live Dump Buffers. Note, these buffers will not be
present in the resulting live dump file.

LeGe - [Link] - Legacy Registry Mapping Module Buffers

LeoC - <unknown> - Symantec/Norton AntiVirus filter driver

List - <unknown> - kernel utilities list allocation
LCam - <unknown> - WDM mini video capture driver for Logitech camera
Lfs - <unknown> - Lfs allocations
LfsI - <unknown> - Lfs allocations
LLDP - [Link] - LLDP protocol driver allocations
LogA - [Link] - CLFS Kernel API test driver
LpcZ - <unknown> - LPC Zone
LpcM - <unknown> - Local procedure call message blocks
Lr?? - <unknown> - LM redirector allocations
Lr - <unknown> - Generic allocations
Lrcx - <unknown> - Context blocks of various types
Lrcl - <unknown> - ConnectListEntries
Lrsl - <unknown> - ServerListEntries
Lrse - <unknown> - Security entry
Lrsc - <unknown> - Search Control Blocks
Lrea - <unknown> - EA related allocations
Lric - <unknown> - Instance Control Blocks
Lrfc - <unknown> - File Control Blocks
Lrfl - <unknown> - Fcb Locks
Lrfp - <unknown> - Fcb Paging locks
Lrcn - <unknown> - Computer Name
Lrdn - <unknown> - Domain Name
Lr?? - <unknown> - Buffers used for FsControlFile APIs
Lrlc - <unknown> - Lock Control Blocks
Lrlb - <unknown> - Lock Control Block buffers
Lrnf - <unknown> - Non paged FCB
Lrnt - <unknown> - Non paged transport
Lrps - <unknown> - Paged security entry
Lrte - <unknown> - Transport event.
Lrxx - <unknown> - Transceive context blocks
Lr!! - <unknown> - Cancel request context blocks
Lrmt - <unknown> - MPX table
Lrme - <unknown> - MPX table entries
Lrsx - <unknown> - Send contexts
Lraw - <unknown> - Async write context
Lrwb - <unknown> - Write behind buffer header
Lrbb - <unknown> - Write behind buffer
Lrwq - <unknown> - Work queue item
Lrac - <unknown> - ACL for redirector
Lrds - <unknown> - Security Descriptor for redirector
Lrsm - <unknown> - SMB buffer
Lrds - <unknown> - Duplicated ansi string
Lrdu - <unknown> - Duplicated unicode string
Lxpt - <unknown> - Transport
Lrtc - <unknown> - Transport connection
Lrna - <unknown> - Netbios Addresses
Lrca - <unknown> - Temporary storage used in name canonicalization
Lr2x - <unknown> - Transact SMB context
Lrpt - <unknown> - Primary transport server list
Lrso - <unknown> - Operating system name
Lref - <unknown> - Reference history (debug only)
LS?? - <unknown> - LM server allocations
LSac - [Link] - SMB1 BlockTypeAdminCheck
LSas - [Link] - SMB1 BlockTypeAdapterStatus
LSbf - [Link] - SMB1 buffer descriptor or srvnet allocation
LScd - [Link] - SMB1 comm device
LScn - [Link] - SMB1 connection
LSdb - [Link] - SMB1 data buffer
LSdc - [Link] - SMB1 BlockTypeDirCache
LSdi - [Link] - SMB1 BlockTypeDirectoryInfo
LSep - [Link] - SMB1 endpoint
LSfn - [Link] - SMB1 BlockTypeFSName
LSfR - [Link] - SMB2 rfssequence table and rfs64table
LShs - [Link] - SMB2 lease hash table
LSlb - [Link] - SRVLIB security descriptor/registry buffer
LSlf - [Link] - SMB1 LFCB
LSlr - [Link] - SMB1 BlockTypeLargeReadX
LSmf - [Link] - SMB1 MFCB
LSmi - [Link] - SMB1 BlockTypeMisc
LSnh - [Link] - SMB1 nonpaged block header
LSni - [Link] - SMB1 BlockTypeNameInfo
LSnn - [Link] - SMB2 netname
LSop - [Link] - SMB1 oplock break wait
LSpc - [Link] - SMB1 paged connection
LSpm - [Link] - SMB1 paged MFCB
LSpr - [Link] - SMB1 paged RFCB
LSrf - [Link] - SMB1 RFCB
LSrp - [Link] - srvnet RPC allocation
LSRp - [Link] - SRVLIB reparse point
LSsc - [Link] - SMB1 search(core)
LSsd - [Link] - SMB1 BlockTypeShareSecurityDescriptor
LSsf - [Link] - SMB1 BlockTypeDfs
LSsh - [Link] - SMB1 share
LSSL - [Link] - SMBLIB allocation
LSsp - [Link] - SMB1 search(core complete)
LSsr - [Link] - SMB1 search
LSss - [Link] - SMB1 session
LStb - [Link] - SMB1 table
LStc - [Link] - SMB1 tree connect
LSti - [Link] - SMB1 timer
LStr - [Link] - SMB1 transaction
LSvi - [Link] - SMB1 BlockTypeVolumeInformation
LSwi - [Link] - SMB1 initial work context
LSwn - [Link] - SMB1 normal work context
LSwq - [Link] - SMB1 BlockTypeWorkQueue
LSwr - [Link] - SMB1 raw work context
LSws - [Link] - SMB1 BlockTypeWorkContextSpecial
LS2b - [Link] - SMB2 buffer
LS2c - [Link] - SMB2 connection
LS2e - [Link] - SMB2 endpoint
LS2f - [Link] - SMB2 file
LS2h - [Link] - SMB2 share
LS2i - [Link] - SMB2 client
LS2l - [Link] - SMB2 lease
LS2n - [Link] - SMB2 channel
LS2o - [Link] - SMB2 oplock break
LS2p - [Link] - SMB2 provider
LS2q - [Link] - SMB2 queue
LS2s - [Link] - SMB2 session
LS2t - [Link] - SMB2 treeconnect
LS2W - [Link] - SMB2 special workitem
LS2w - [Link] - SMB2 workitem
LS2x - [Link] - SMB2 security context
LS$S - [Link] - SMB2 ecp
LS2$ - [Link] - SMB2 misc. allocation
LS00 - [Link] - SRVNET LookasideList level 0 allocation 256 Bytes
LS01 - [Link] - SRVNET LookasideList level 1 allocation 512 Bytes
LS02 - [Link] - SRVNET LookasideList level 2 allocation 1K Bytes
LS03 - [Link] - SRVNET LookasideList level 3 allocation 2K Bytes
LS04 - [Link] - SRVNET LookasideList level 4 allocation 4K Bytes
LS05 - [Link] - SRVNET LookasideList level 5 allocation 8K Bytes
LS06 - [Link] - SRVNET LookasideList level 6 allocation 16K Bytes
LS07 - [Link] - SRVNET LookasideList level 7 allocation 32K Bytes
LS08 - [Link] - SRVNET LookasideList level 8 allocation 64K Bytes
LS09 - [Link] - SRVNET LookasideList level 9 allocation 128K Bytes
LS10 - [Link] - SRVNET LookasideList level 10 allocation 192K Bytes
LS11 - [Link] - SRVNET LookasideList level 11 allocation 256K Bytes
LS12 - [Link] - SRVNET LookasideList level 12 allocation 320K Bytes
LS13 - [Link] - SRVNET LookasideList level 13 allocation 384K Bytes
LS14 - [Link] - SRVNET LookasideList level 14 allocation 448K Bytes
LS15 - [Link] - SRVNET LookasideList level 15 allocation 512K Bytes
LS16 - [Link] - SRVNET LookasideList level 16 allocation 576K Bytes
LS17 - [Link] - SRVNET LookasideList level 17 allocation 640K Bytes
LS18 - [Link] - SRVNET LookasideList level 18 allocation 704K Bytes
LS19 - [Link] - SRVNET LookasideList level 19 allocation 768K Bytes
LS20 - [Link] - SRVNET LookasideList level 20 allocation 832K Bytes
LSnd - <unknown> - WDM mini sound driver for Logitech video camera
Luaf - [Link] - LUA File Virtualization
LXMK - <unknown> - kernel mixer line driver (KMXL - looks like they got their
tag backwards)

MXF - <unknown> - DirectMusic (MIDI Transform Filter)

MapP - <unknown> - PNP map

Mapr - <unknown> - arc firmware registry routines

McaC - [Link] - HAL MCA corrected Log

McaD - [Link] - HAL MCA Driver Log
McaK - [Link] - HAL MCA Kernel Log
McaP - [Link] - HAL MCA Log from previous boot
McaT - [Link] - HAL MCA temporary Log

Mdp - [Link] - Memory Descriptor Lists

MCAM - <unknown> - WDM mini driver for Intel USB camera

MCDx - <unknown> - OpenGL MCD server ([Link]) allocations
MCDd - <unknown> - OpenGL MCD driver (embedded in a display driver like
[Link])
Mdl - <unknown> - Io, Mdls
MdlP - <unknown> - MDL per processor lookaside list pointers
Mem - nt!po - NT Power manager, POP_MEM_TAG
MePr - <unknown> - In-memory print buffer

MiCf - nt!mm - Mm compressed Control Flow Guard valid target RVA list
MiHa - nt!mm - Mm internal memory ranges
MiIo - nt!mm - Mm internal numa node information
MiPa - nt!mm - Mm internal partition core
Mipb - nt!mm - Mm internal bit buffer
MiNi - nt!mm - Mm internal node page information
Mipp - nt!mm - Mm internal page node
Mipr - nt!mm - Mm internal partition resource information

mkup - [Link] - MPSDRV upcall request

Mm - nt!mm - general Mm Allocations

MmAc - nt!mm - Mm access log buffers
MmBk - nt!mm - Mm banked sections
MmCa - nt!mm - Mm control areas for mapped files
MmCd - nt!mm - Mm fork clone descriptors
MmCh - nt!mm - Mm fork clone headers
MmCi - nt!mm - Mm control areas for images
MmCl - nt!mm - Mm fork clone prototype PTEs
MmCm - nt!mm - Calls made to MmAllocateContiguousMemory
MmCr - nt!mm - Mm fork clone roots
MmCt - nt!mm - Mm debug tracing
MmDb - nt!mm - NtMapViewOfSection service
MmDT - nt!mm - Mm debug
MmEx - nt!mm - Mm events
MmHi - nt!mm - Mm image entry - allocated per session
MmHn - nt!mm - Mm sessionwide address name string entry
MmHv - nt!mm - Mm sessionwide address entry
MmIn - nt!mm - Mm inpaged io structures
MmLd - nt!mm - Mm load module database
MmPd - nt!mm - Mm page table commitment bitmaps
MmPg - nt!mm - Mm page table pages at init time
MmRp - nt!mm - Mm repurpose logging
MmRw - nt!mm - Mm read write virtual memory buffers
MmSb - nt!mm - Mm subsections
MmSe - nt!mm - Mm secured VAD allocation
MmSg - nt!mm - Mm segments
MmSt - nt!mm - Mm section object prototype ptes
MmSy - nt!mm - Mm PTE and IO tracking logs
Mmdl - nt!mm - Mm Mdls for flushes
Mmpp - nt!mm - Mm prototype PTEs for pool
Mmpr - nt!mm - Mm physical VAD roots
MmVd - nt!mm - Mm virtual address descriptors for mapped views
MmVs - nt!mm - Mm virtual address descriptors short form (private views)
Mmxx - nt!mm - Mm temporary allocations
MmCx - nt!mm - info for dynamic section extension
MmDm - nt!mm - deferred MmUnlock entries
MmHt - nt!mm - session space PTE data
MmLn - nt!mm - temporary name buffer for driver loads
MmMl - nt!mm - physical memory range information
MmPa - nt!mm - pagefile space deletion slist entries
MmRl - nt!mm - temporary readlists for file prefetch
MmSP - nt!mm - SLIST entries for system PTE NB queues
MmSi - nt!mm - Control area security image stubs
MmSc - nt!mm - subsections used to map data files
MmSd - nt!mm - extended subsections used to map data files
MmSm - nt!mm - segments used to map data files
MmWe - nt!mm - Work entries for writing out modified filesystem pages.
MmWw - nt!mm - Write watch VAD info
Mmpv - nt!mm - Physical view VAD info
Mmww - nt!mm - Write watch bitmap VAD info
MmSW - nt!mm - Store write support
MmSw - nt!mm - Store write support when prefetching
MmCS - nt!mm - Pagefile CRC verification buffer
MmCp - nt!mm - Colored page counts for physical memory allocations
Mmdi - nt!mm - MDLs for physical memory allocations
MmDp - nt!mm - Lost delayed write context
MmFl - nt!mm - MDLs for large clusters for flushes
MmFr - nt!mm - ASLR fixup records
MmId - nt!mm - PFN identity buffer for setting PFN priorities
MmIh - nt!mm - Image header allocation for Se validation
MmIm - nt!mm - IO space MDL trackers
MmIo - nt!mm - IO space mapping trackers
Mmlk - nt!mm - ProbeAndLock MDL tracker
MmLl - nt!mm - Large page memory run allocation for finding large pages
MmNo - nt!mm - Inernal physical memory nodes
MmPh - nt!mm - Physical memory nodes for querying memory ranges
MmRe - nt!mm - ASLR relocation blocks
MmWs - nt!mm - PTE flush list for working set operations
MmWS - nt!mm - Working set swap support
MmZw - nt!mm - Work items for zeroing pages and pagefiles
MmSa - nt!mm - Subsection AVL tree allocations
MmVt - nt!mm - Verifier thunk allocations
MmLa - nt!mm - Memory list locks
MmTp - nt!mm - Store eviction thread params
MmPb - nt!mm - Paging file bitmaps

Mn01 - [Link] - ACPI method evaluation output buffer

Mn02 - [Link] - Unused
Mn03 - [Link] - Raw E-EDID v.1.x byte stream including base block + extension
blocks (if any)
Mn04 - [Link] - Cached monitor ID WMI data block
Mn05 - [Link] - Cached monitor basic display parameters WMI data block
Mn06 - [Link] - Cached monitor analog video input parameters WMI data block
Mn07 - [Link] - Cached monitor digitial video input parameters WMI data block
Mn08 - [Link] - Cached monitor color characteristics WMI data block
Mn09 - [Link] - Cached supported monitor source modes WMI data block
Mn0A - [Link] - Registry subkey info buffer
Mn0B - [Link] - Registry value buffer
Mn0C - [Link] - Cached supported monitor frequency ranges WMI data block
(overrides from registry)
Mn0D - [Link] - Cached supported monitor frequency ranges WMI data block
(from E-EDID v.1.x base block)
Mn0E - [Link] - Buffer for E-EDID v.1.x base block, if any, populated by
miniport
Mn0F - [Link] - Buffer for E-EDID v.1.x extension block(s), if any, populated
by miniport

MNFf - [Link] - NFS FS Filter, filename buffer

MNFi - [Link] - NFS FS Filter, instance name buffer
MNFr - [Link] - NFS FS Filter, registry access buffer
MNFs - [Link] - NFS FS Filter, general string buffer
MNFv - [Link] - NFS FS Filter, volume name buffer
MNFC - [Link] - NFS FS Filter, callback context
MNFF - [Link] - NFS FS Filter, file context
MNFI - [Link] - NFS FS Filter, instance context
MNFS - [Link] - NFS FS Filter, stream context
MNFT - [Link] - NFS FS Filter, thread array

Mp10 - nt!mm - Mm Enumerate address space and reference images

MQAA - [Link] - MSMQ driver, AVL allocations

MQAB - [Link] - MSMQ driver, CCursor allocations
MQAC - [Link] - MSMQ driver, generic allocations
MQAD - [Link] - MSMQ driver, CDistribution allocations
MQAG - [Link] - MSMQ driver, CGroup allocations
MQAH - [Link] - MSMQ driver, Heap allocations
MQAP - [Link] - MSMQ driver, CPacket allocations
MQAQ - [Link] - MSMQ driver, CQueue allocations
MQAT - [Link] - MSMQ driver, CTransaction allocations

MRXx - <unknown> - Client side caching for SMB

MSll - [Link] - MinLog allocated pool

REM Minstore (an ReFS component) allocations

MSag - [Link] - Minstore unspecified AVL entries (too big for lookasides;
filtered AVL)
MSah - [Link] - Minstore allocator history
MSal - [Link] - Minstore allocator block
MSab - [Link] - Minstore allocator region bitmap
MsaE - [Link] - Minstore AE push lock
MSav - [Link] - Minstore AVL table
MSb+ - [Link] - Minstore B+ table
MSba - [Link] - Minstore blockref cache array
MSbe - [Link] - Minstore blockref cache entry
MSca - [Link] - Minstore read cache object
MScc - [Link] - Minstore tx checksum context
MScd - [Link] - Minstore read cache dirty page array
MSch - [Link] - Minstore read cache hash table
MSci - [Link] - Minstore metadata cache instance
MScl - [Link] - Minstore read cache line
MScm - [Link] - Minstore composite
MScn - [Link] - Minstore container
MSco - [Link] - Minstore compression
MScp - [Link] - Minstore cached pin
MScr - [Link] - Minstore container rotation checksum buffer
MScs - [Link] - Minstore read cache sync set
MScu - [Link] - Minstore cursor
MScw - [Link] - Minstore read cache write range
MSdd - [Link] - Minstore director row data
MSde - [Link] - Minstore dirty table tracking
MSdg - [Link] - Minstore debug
MSds - [Link] - Minstore debug stack logs
Msdv - <unknown> - WDM mini driver for IEEE 1394 DV Camera and VCR
MSeb - [Link] - Minstore embedded factory (B+ and associated)
MSeg - nt!mm - segments used to support image files
MSer - [Link] - Minstore reserved CRange map lookaside
MSfa - [Link] - Minstore filtered AVL
MSha - [Link] - Minstore hash table (incl. page tables)
MShl - [Link] - Minstore hash table lite
MSho - [Link] - Minstore hash table overflow (incl. page tables)
MSht - [Link] - Minstore stack hash table
MSii - [Link] - Minstore container initial index cache
MSir - [Link] - Mscallbacks MsKmeAllocateIoRequest
MSiz - [Link] - Mscallbacks RESERVED_IO_RUNS and RESERVED_IO_REQUESTS
MSkb - [Link] - Minstore keys buffer
MSkc - [Link] - Minstore KSR context
MSkr - [Link] - Minstore CmsKeyRules object
MSlm - [Link] - Minstore CRange map list lookaside
MSlr - [Link] - Minstore reserved CRange map list lookaside
MSls - [Link] - Minstore logged stack
MSPi - [Link] - Minstore generic/untagged allocation
MSpa - [Link] - Minstore hash table entries (incl. and primarily SmsPage)
MSrc - [Link] - Minstore tx run cache
MSrb - [Link] - Minstore redo block
MSre - [Link] - Minstore AVL lite entries (incl. and primarily
SmsRangeMapEntry)
MSrk - [Link] - Minstore key rules
MSrm - [Link] - Minstore range map
MSri - [Link] - Minstore container rotation init state buffer
MSro - [Link] - Minstore container rotation buffer
MSrp - [Link] - Minstore read cache pages array
MSrr - [Link] - Minstore AVL lite entries (incl. and primarily
SmsRCRangeMapEntry)
MSrv - [Link] - Minstore reserved buffers
MSst - [Link] - Minstore stream object
MStb - [Link] - Minstore table object
MStu - [Link] - Minstore tree update filter
MStx - [Link] - Minstore transaction
MSur - [Link] - Minstore undo record
MSvc - [Link] - Minstore volume context
MSvs - [Link] - Minstore valid/invalid checksum debug buffers (debug only)
MSvu - [Link] - Minstore volume/instance object

MST? - <unknown> - MSTEE ([Link])

MSTa - <unknown> - associated stream header
MSTc - <unknown> - filer connection
MSTd - <unknown> - data format
MSTf - <unknown> - filter instance
MSTp - <unknown> - pin instance
MSTs - <unknown> - stream header

MouC - [Link] - Mouse Class Driver

MouH - [Link] - Mouse HID mapper Driver
MsFc - <unknown> - Mailslot CCB, Client control block. Each client with an
opened mailslot has one of these
MsFC - <unknown> - Mailslot root CCB, A client control block for the top level
mailslot directory
MsFd - <unknown> - Mailslot data entry write buffer, This is writes buffered
inside mailslots
MsFD - <unknown> - Mailslot root DCB and its name buffer
MsFf - <unknown> - Mailslot FCB, File control block, Service side block for each
created mailslot.
MsFg - <unknown> - Mailslot global resource
MsFn - <unknown> - Mailslot temporary name buffer
MsFN - <unknown> - Mailslot FCB name buffer, name for each created mailslot
MsFr - <unknown> - Mailslot read buffer, buffer created for pended reads issued.
MsFt - <unknown> - Mailslot query template, used for directory queries.
MsFw - <unknown> - Mailslot work context block, blocks create when we need to
timeout reads.

MsvC - [Link] - Msv/Ntlm client package

Mup - [Link] - Multiple UNC provider allocations, generic
MupI - [Link] - Windows Server 2003 and prior versions: DFS Irp Context
allocation
MuDn - [Link] - Device name
MuFc - [Link] - File Context
MuFn - [Link] - File name rewrite
MuIc - [Link] - IRP Context
MuMc - [Link] - Master context
MuQc - [Link] - Query context
MuSi - [Link] - Surrogate info
MuSf - [Link] - Surrogate file info
MuSr - [Link] - Surrogate IRP info
MuPe - [Link] - Known prefix entry
MuPi - [Link] - Provider info
MuUn - [Link] - UNC provider

Muta - <unknown> - Mutant objects

Nb01 - [Link] - NetBT hash table

Nb02 - [Link] - NetBT remote name address cache
Nb03 - [Link] - NetBT remote name address cache
Nb04 - [Link] - NetBT failed address list
Nb05 - [Link] - NetBT client element
Nb06 - [Link] - NetBT general buffer allocation
Nb07 - [Link] - NetBT datagram request tracker
Nb08 - [Link] - NetBT domain address list
Nb09 - [Link] - NetBT domain name
Nb10 - [Link] - NetBT domain address list
Nb11 - [Link] - NetBT lmhosts path
Nb12 - [Link] - NetBT lmhosts path
Nb13 - [Link] - NetBT lmhosts path
Nb14 - [Link] - NetBT lmhosts path
Nb16 - [Link] - NetBT timer entry
Nb17 - [Link] - NetBT registry path
Nb18 - [Link] - NetBT lmhosts file
Nb19 - [Link] - NetBT lmhosts data
Nb20 - [Link] - NetBT lmhosts path
Nb21 - [Link] - NetBT control object
Nb22 - [Link] - NetBT work item context
Nb23 - [Link] - NetBT lmhosts path
Nb25 - [Link] - NetBT device bindings
Nb26 - [Link] - NetBT device exports
Nb27 - [Link] - NetBT bind list cache
Nb28 - [Link] - NetBT name server addresses
Nb29 - [Link] - NetBT registry string
Nb30 - [Link] - NetBT registry string
Nb31 - [Link] - NetBT configuration entry
Nb33 - [Link] - NetBT registry data
Nb35 - [Link] - NetBT registry data
Nb36 - [Link] - NetBT string
Nb37 - [Link] - NetBT lmhosts path
Nb38 - [Link] - NetBT string
Nb39 - [Link] - NetBT file objects
NbL0 - [Link] - NetBT lower connection
NbL1 - [Link] - NetBT lower connection
NbL2 - [Link] - NetBT lower connection
NbL3 - [Link] - NetBT lower connection
NbL4 - [Link] - NetBT lower connection
NbTA - [Link] - NetBT internal address
Nba9 - [Link] - NetBT IP request buffer
Nbb0 - [Link] - NetBT IP request buffer
Nbt0 - [Link] - NetBT name address
Nbt1 - [Link] - NetBT name address
Nbt2 - [Link] - NetBT NetBIOS address
Nbt4 - [Link] - NetBT client list
Nbt5 - [Link] - NetBT client list
Nbt6 - [Link] - NetBT datagram
Nbt8 - [Link] - NetBT address list
Nbt9 - [Link] - NetBT temporary allocation
NbtA - [Link] - NetBT datagram
NbtC - [Link] - NetBT address element
NbtD - [Link] - NetBT connection
NbtF - [Link] - NetBT remote name
NbtG - [Link] - NetBT datagram
NbtH - [Link] - NetBT work item context
NbtI - [Link] - NetBT listen requests
NbtJ - [Link] - NetBT receive element
NbtK - [Link] - NetBT name address
NbtL - [Link] - NetBT datagram
NbtM - [Link] - NetBT address list
NbtN - [Link] - NetBT address list
NbtO - [Link] - NetBT adapter status
NbtP - [Link] - NetBT connection list
NbtQ - [Link] - NetBT name stats
NbtR - [Link] - NetBT name address
NbtS - [Link] - NetBT datagram
NbtV - [Link] - NetBT work item context
NbtX - [Link] - NetBT datagram
NbtY - [Link] - NetBT datagram
NbtZ - [Link] - NetBT datagram
Nbta - [Link] - NetBT DPC
Nbtb - [Link] - NetBT NetBIOS address
Nbtc - [Link] - NetBT address info
Nbte - [Link] - NetBT delayed connect
Nbtf - [Link] - NetBT DPC
Nbtg - [Link] - NetBT MDL buffer
Nbti - [Link] - NetBT device list
Nbtj - [Link] - NetBT EA buffer
Nbtm - [Link] - NetBT EA buffer
Nbtn - [Link] - NetBT device string
Nbtk - [Link] - NetBT transport address
Nbtt - [Link] - NetBT MDL buffer
Nbtu - [Link] - NetBT MDL buffer
Nbtv - [Link] - NetBT WINS allocation
Nbtw - [Link] - NetBT device linkage names
Nbuf - [Link] - NetIO Memory Descriptor List allocations

NBF - <unknown> - general NBF allocations

NBFa - <unknown> - NBF address object
NBFb - <unknown> - NBF receive buffer
NBFc - <unknown> - NBF connection object
NBFd - <unknown> - NBF packet pool descriptor
NBFe - <unknown> - NBF bind & export names
NBFf - <unknown> - NBF address file object
NBFg - <unknown> - NBF registry path name
NBFi - <unknown> - NBF tdi connection info
NBFk - <unknown> - NBF loopback buffer
NBFl - <unknown> - NBF link object
NBFn - <unknown> - NBF netbios name
NBFo - <unknown> - NBF config data
NBFp - <unknown> - NBF packet
NBFq - <unknown> - NBF query buffer
NBFr - <unknown> - NBF request
NBFs - <unknown> - NBF provider stats
NBFt - <unknown> - NBF connection table
NBFu - <unknown> - NBF UI frame
NBFw - <unknown> - NBF work item
NBI - <unknown> - NwlnkNb transport
NBS - <unknown> - general NetBIOS allocations
NBSa - <unknown> - address block
NBSc - <unknown> - connection block
NBSe - <unknown> - EA buffer
NBSf - <unknown> - FCB
NBSl - <unknown> - LANA block
NBSn - <unknown> - copy of user NCB
NBSr - <unknown> - registry allocations
NBSx - <unknown> - XNS NETONE address (connect block)
NBSy - <unknown> - NetBIOS address (connect block)
NBSz - <unknown> - NetBIOS address (listen block)
NBqh - <unknown> - Non-blocking queue entries used to carry the real data in
the queue.

NCSt - <unknown> - EXIFS NC

ND - [Link] - general NDIS allocations

NDA - [Link] - NDIS PacketDirect tag prefix
NDAa - [Link] - NDIS_PD_ASSOCIATION
NDAb - [Link] - NDIS_PD_BLOCK
NDAc - [Link] - NDIS_PD_CLIENT
NDAe - [Link] - NDIS_PD_EC
NDAf - [Link] - NDIS_PD_FILTER
NDAg - [Link] - NDIS_PD_GLOBAL
NDAm - [Link] - NDIS_PD_MEM_BLOCK NDIS_PD_SGL_BLOCK
NDAn - [Link] - NDIS_PD_COUNTER
NDAo - [Link] - NDIS_PD_CONFIG
NDAq - [Link] - NDIS_PD_PLATFORM_QUEUE
NDAt - [Link] - NDIS_PD_QUEUE_TRACKER
NDDl - [Link] - NDIS_TAG_DBG_LOG
NDMb - [Link] - NDIS_TAG_MAC_BLOCK
NDPX - [Link] - NDIS Proxy allocations
NDPa - [Link] - Apple Talk
NDPb - [Link] - NBF
NDPi - [Link] - NWLNKIPX
NDPn - [Link] - NWLNKNB
NDPp - [Link] - Packet Scheduler.
NDPs - [Link] - NWLNKSPX
NDPt - [Link] - TCPIP
NDPw - [Link] - WAN_PACKET_TAG
NDSD - [Link] - NDIS_SETUP_DEVICE_EXTENSION
NDTr - [Link] - NDIS_TAG_TRANSFER_DATA
NDam - [Link] - NdisAllocateMemory
NDan - [Link] - adapter name
NDar - [Link] - NDIS_TAG_ALLOCATED_RESOURCES
NDas - [Link] - NDIS_TAG_ALLOC_SHARED_MEM_ASYNC
NDbi - [Link] - NDIS_TAG_BUS_INTERFACE
NDca - [Link] - NDIS_TAG_NET_CFG_OPS_ACL
NDch - [Link] - NDIS_TAG_CONFIG_HANDLE
NDcm - [Link] - NDIS_TAG_CM
NDcn - [Link] - NDIS_TAG_CANCEL_DEVICE_NAME
NDco - [Link] - NDIS_TAG_CO
NDcs - [Link] - NDIS_TAG_NET_CFG_OPS_ID
NDcw - [Link] - NDIS_TAG_PCW - NDIS Performance Counters
NDd - [Link] - NDIS_TAG_DBG
NDda - [Link] - NDIS_TAG_NET_CFG_DACL
NDdb - [Link] - DMA block
NDdc - [Link] - NDIS_TAG_DCN - Data Center Networking
NDdi - [Link] - NDIS_TAG_IM_DEVICE_INSTANCE
NDdl - [Link] - NDIS_TAG_DBG_L
NDdp - [Link] - NDIS_TAG_DBG_P
NDds - [Link] - NDIS_TAG_DBG_S
NDdt - [Link] - NDIS_TAG_DFRD_TMR
NDel - [Link] - NDIS debugging event log
NDfa - [Link] - NDIS_TAG_FILTER_ADDR
NDfb - [Link] - NDIS_TAG_LWFILTER_BLOCK
NDfd - [Link] - NDIS_TAG_FILE_DESCRIPTOR
NDfi - [Link] - NDIS_TAG_FILE_IMAGE
NDfm - [Link] - NDIS_TAG_FAKE_MAC
NDfn - [Link] - NDIS_TAG_FILE_NAME
NDfv - [Link] - NDIS_TAG_LWFILTER_DRIVER
NDif - [Link] - NDIS_TAG_IF
NDio - [Link] - NDIS_TAG_IOV - IO Virtualization
NDkr - [Link] - NDIS_TAG_NDK - Kernel Mode Network Direct (kRDMA)
NDlb - [Link] - lookahead buffer
NDlp - [Link] - NDIS_TAG_LOOP_PKT
NDmb - [Link] - MAC block
NDmo - [Link] - NDIS_TAG_M_OPEN_BLK
NDmr - [Link] - map register entry array
NDmt - [Link] - NDIS_TAG_MEDIA_TYPE_ARRAY
NDnc - [Link] - NDIS_TAG_NBL_CONTEXT
NDnd - [Link] - NDIS_TAG_POOL_NDIS
NDoa - [Link] - NDIS_TAG_OID_ARRAY
NDob - [Link] - open block
NDoc - [Link] - NDIS_TAG_OPEN_CONTEXT
NDof - [Link] - NDIS_TAG_OFFLOAD
NDop - [Link] - NDIS_TAG_PM_PROT_OFFLOAD
NDpb - [Link] - protocol block
NDpc - [Link] - NDIS_TAG_PROTOCOL_CONFIGURATION
NDpf - [Link] - NDIS_TAG_FILTER
NDpk - [Link] - NDIS_TAG_PKT_PATTERN
NDpl - [Link] - NDIS_TAG_PERF_LOG_ID
NDpn - [Link] - NDIS_TAG_PARAMETER_NODE
NDpo - [Link] - NDIS_TAG_PORT
NDpp - [Link] - packet pool
NDpr - [Link] - NDIS_TAG_PERIODIC_RECEIVES
NDpw - [Link] - NDIS_TAG_WOL_PATTERN
NDqo - [Link] - NDIS_TAG_QUERY_OBJECT_WORKITEM
NDqs - [Link] - NDIS_TAG_QOS
NDqu - [Link] - NDIS_TAG_QUEUE
NDrc - [Link] - NDIS_TAG_RWL_REFCOUNT
NDrd - [Link] - NDIS_TAG_REG_READ_DATA_BUFFER
NDre - [Link] - NDIS_TAG_OID_REQUEST
NDrf - [Link] - NDIS_TAG_RECEIVE_FILTER
NDrl - [Link] - resource list
NDrp - [Link] - NDIS_TAG_REGISTRY_PATH
NDrq - [Link] - NDIS_TAG_Q_REQ
NDrs - [Link] - NDIS_TAG_RSS
NDrt - [Link] - NDIS_TAG_RST_NBL
NDrw - [Link] - NDIS_TAG_RWLOCK
NDrx - [Link] - NDIS debugging refcount
NDsd - [Link] - NDIS_TAG_NET_CFG_SEC_DESC
NDse - [Link] - NDIS_TAG_SECURITY
NDsg - [Link] - NDIS_TAG_DOUBLE_BUFFER_PKT
NDsh - [Link] - NDIS_TAG_SHARED_MEMORY
NDsi - [Link] - EISA slot information
NDsk - [Link] - NDIS debugging stacktrace
NDsm - [Link] - Cached shared memory descriptor
NDss - [Link] - NDIS_TAG_SS - Selective Suspend
NDst - [Link] - NDIS_TAG_STRING
NDtk - [Link] - NDIS_TAG_NBL_TRACKER - Lost packet diagnostics
NDvm - [Link] - NDIS_TAG_ALLOC_MEM_VERIFY_ON
NDw0 - [Link] - NDIS_TAG_WMI_REG_INFO
NDw1 - [Link] - NDIS_TAG_WMI_GUID_TO_OID
NDw2 - [Link] - NDIS_TAG_WMI_OID_SUPPORTED_LIST
NDw3 - [Link] - NDIS_TAG_WMI_EVENT_ITEM
NDwh - [Link] - NDIS_TAG_WRAPPER_HANDLE
NDwi - [Link] - NDIS_TAG_WORK_ITEM
NDwr - [Link] - NDIS_TAG_WMI_REQUEST
NDwx - [Link] - NDIS_TAG_WOL_XLATE
NDxc - [Link] - NDIS_TAG_POOL_XLATE

Net - [Link] - NetIO Generic Buffers (iBFT Table allocations)

NeWQ - [Link] - NetIO WorkQueue Data

NEEB - newt_ndis6.sys - NEWT Emulation Bench

NEFT - newt_ndis6.sys - NEWT Filter Object
NEIM - newt_ndis6.sys - NEWT IM Object
NEOD - newt_ndis6.sys - NEWT OID
NEPK - newt_ndis6.sys - NEWT Packet
NEWI - newt_ndis6.sys - NEWT Work Item

Nb?? - <unknown> - NetBT allocations

Nf?? - [Link] - NFS (Network File System) allocations
NfR? - [Link] - NFS (Network File System) client re-director
Nls - <unknown> - Nls strings
NlsK - nt!ex - Nls data
Nmdd - <unknown> - NetMeeting display driver miniport 1 MB block

Nhfs - [Link] - NetIO Hash Function State Data

NicT - [Link] - Microsoft NDIS LBFO Provider (NIC Teaming)

Navl - [Link] - Network Layer AVL Tree allocations

NLbd - [Link] - Network Layer Buffer Data
NLcc - [Link] - Network Layer Client Contexts
NLpd - [Link] - Network Layer Client Requests
NLcp - [Link] - Network Layer Compartments
NLuh - <unknown> - Network Layer Ul Handles
NLap - [Link] - Network Layer Netio Helper Function allocations
NLNa - [Link] - Network Layer Network Address Lists

NMhf - [Link] - Handle Factory pool

NMpt - <unknown> - Generic AVL Tree allocations

NMRb - [Link] - Network Module Registrar Bindings

NMRc - [Link] - Network Module Registrar Arrays
NMRf - [Link] - Network Module Registrar Filters
NMRg - [Link] - Network Module Registrar Generic Buffers
NMRm - [Link] - Network Module Registrar Modules
NMRn - [Link] - Network Module Registrar Network Protocol Identifiers

Nnbl - [Link] - NetIO NetBufferLists

Nnbf - [Link] - NetIO NetBuffers
Nnnn - [Link] - NetIO NetBuffers And NetBufferLists
Nph1 - [Link] - NetIO Protocol Header1 Data
Nph2 - [Link] - NetIO Protocol Header2 Data

None - nt!Vf - Call to ExAllocatePool without any pool tag

NpEv - [Link] - Npfs events

Npf* - [Link] - Npfs Allocations
NpFc - [Link] - CCB, client control block
NpFC - [Link] - ROOT_DCB CCB
NpFD - [Link] - DCB, directory block
NpFg - [Link] - Global storage
NpFi - [Link] - NPFS client info buffer.
NpFn - [Link] - Name block
NpFq - [Link] - Query template buffer used for directory query
NpFr - [Link] - DATA_ENTRY records (read/write buffers)
NpFs - [Link] - Client security context
NpFw - [Link] - Write block
NpFW - [Link] - Write block

Npta - <unknown> - NPT Addresses

Nptx - <unknown> - NPT Packets
Nptr - <unknown> - NPT Receive Completes
Npts - <unknown> - NPT Send sCompletes

Nrsd - [Link] - NRT security descriptor

Nrtr - [Link] - NRT record
Nrtw - [Link] - NRT worker

NS?? - <unknown> - Netware server allocations

NSIk - [Link] - NSI RPC Tansactions

NSIr - [Link] - NSI Generic Buffers
NSpc - [Link] - NSI Proxy Contexts
NSpg - [Link] - NSI Proxy Generic Buffers
NSIc - [Link] - NSI Containers
NMcp - [Link] - NSI Modules
NAcc - [Link] - NSI Access

REM NTFS Specific allocation tags

Nt?? - [Link] - Unrecognized NTFS tag (update base\published\pooltag.w)
NtAR - [Link] - NTFS_ASYNC_CACHED_READ_CONTEXT
Ntce - [Link] - CLOSE_ENTRY
NtDt - [Link] - Acquired range array temporary buffer
NtEA - [Link] - NTFS QueryOnCreate EA Buffer
Ntf0 - [Link] - General pool allocation
Ntf9 - [Link] - Large Temporary Buffer
Ntf5 - [Link] - Shared Security tracking (debug only)
Ntfa - [Link] - DELAYED_ALLOCATION
NtfA - [Link] - ALIGNED_MDL_CONTEXT
Ntfb - [Link] - Reserved map buffer
NtfB - [Link] - Bandwidth contracts allocations
NtfC - [Link] - CCB
Ntfc - [Link] - CCB_DATA
Ntfd - [Link] - DEALLOCATED_CLUSTERS
NtfD - [Link] - DEALLOCATED_RECORDS
NtfE - [Link] - INDEX_CONTEXT
Ntff - [Link] - FCB_DATA
NtfF - [Link] - FCB_INDEX
NtfI - [Link] - IO_CONTEXT
Ntfi - [Link] - IRP_CONTEXT
NtfK - [Link] - KEVENT NtfsKeventLookasideList
Ntfk - [Link] - FILE_LOCK
Ntfl - [Link] - LCB
NtfM - [Link] - NTFS_MCB_ENTRY
Ntfm - [Link] - NTFS_MCB_ARRAY
NtfN - [Link] - FILE_RECORDS_TO_DELETE
Ntfn - [Link] - SCB_NONPAGED
NtfsScbNonpagedLookasideList
Ntfo - [Link] - SCB_INDEX normalized named buffer
Ntfp - [Link] - COMPRESSION_CONTEXT
NtfQ - [Link] - QUOTA_CONTROL_BLOCK
Ntfq - [Link] - General Allocation with Quota
NtfR - [Link] - READ_AHEAD_THREAD
Ntfr - [Link] - ERESOURCE
NtfS - [Link] - SCB_INDEX
Ntfs - [Link] - SCB_DATA
NtfT - [Link] - SCB_SNAPSHOT
NtfsScbSnapshotLookasideList
Ntft - [Link] - SCB (Prerestart)
Ntfu - [Link] - NTFS_MARK_UNUSED_CONTEXT
NtfV - [Link] - VPB
Ntfv - [Link] - COMPRESSION_SYNC
NtfZ - [Link] - POSIX_MAPPED_CLOSE_ITEM
Ntfw - [Link] - Workspace
NtIO - [Link] - NTFS IO perf
NtMC - [Link] - MAPCOUNT_LOG
NtOi - [Link] - OFFLOAD_IO_CONTEXT
Ntop - [Link] - NTFS_OPLOCK_OWNER_STACK_CAPTURE
Ntrk - [Link] - NTFS registry key name structures
Ntrs - [Link] - ROLLBACK_STRUCT
Ntrt - [Link] - RANGETRACK_LOCAL_STRUCT
NtTc - [Link] - FILE_LEVEL_TRIM_CONTEXT
NtTf - [Link] - NTFS_DISK_FLUSH_CONTEXT
NtfsDiskFlushContextLookasideList
NtTr - [Link] - DEVICE_MANAGE_DATA_SET_ATTRIBUTES
NtfsDeviceManageDataSetAttributesLookasideList
NtTo - [Link] - DEVICE_MANAGE_DATA_SET_ATTRIBUTES
NtfsFileOffloadLookasideList
NtTe - [Link] - NTFS Telemetry
NtTm - [Link] - NtfsTPMapLookasideList
NtWR - [Link] - REGISTRY_WATCH_CONTEXT
NtxF - [Link] - FCB_NONPAGED
NtfsFcbNonpagedDataLookasideList
NtxI - [Link] - FCB_NONPAGED_INDEX
NtfsFcbNonpagedIndexLookasideList
NtxM - [Link] - FAST_MUTEXT
NtfsFastMutexNonpagedLookasideList

REM NTFS tags based on source module

NtFa - [Link] - AllocSup.c
NtFA - [Link] - AttrSup.c
NtFB - [Link] - BitmpSup.c
NtFl - [Link] - Clog.c
NtFc - [Link] - Corrupt.c
NtFC - [Link] - Create.c
NtFD - [Link] - DevioSup.c
NtFd - [Link] - DirCtrl.c
NtFE - [Link] - Ea.c
NtFF - [Link] - FileInfo.c
NtFf - [Link] - FsCtrl.c
NtFH - [Link] - SelfHeal.c
NtFI - [Link] - IndexSup.c / TxfFilterDirectoryQuery (Ccb->IndexEntry)
NtFi - [Link] - TxfIdSup.c
NtfJ - [Link] - ntfsinit.c
NtFL - [Link] - LogSup.c
NtFM - [Link] - McbSup.c
NtFm - [Link] - Ntfs MFT View Ref Counter Arrays
NtFN - [Link] - NtfsData.c
NtFO - [Link] - ObjIdSup.c
NtFQ - [Link] - QuotaSup.c
NtFP - [Link] - Pnp.c / ReparSup.c
NtFR - [Link] - RestrSup.c
NtFS - [Link] - SecurSup.c
NtFs - [Link] - StrucSup.c
NtFU - [Link] - usnsup.c
NtFV - [Link] - VerfySup.c
NtFv - [Link] - ViewSup.c
NtFW - [Link] - Write.c
NtFX - [Link] - NtfsBlackbox.c
NtMo - [Link] - mount.c
NtSr - [Link] - srsup.c

NulB - [Link] - Null TDI Buffers

NulR - [Link] - Null TDI Requests
NulS - [Link] - Null TDI Sockets
NulE - [Link] - Null Tl Endpoints
Null - [Link] - Null TL Generics
NulI - [Link] - Null TL Indications
Nulr - [Link] - Null Tl Requests

NV - <unknown> - nVidia video driver

NvLA - <[Link]> - nVidia video driver
NvLa - <[Link]> - nVidia video driver
NvLC - <[Link]> - nVidia video driver
NvLc - <[Link]> - nVidia video driver
NvLD - <[Link]> - nVidia video driver
NvLd - <[Link]> - nVidia video driver
NvLE - <[Link]> - nVidia video driver
NvLH - <[Link]> - nVidia video driver
NvLm - <[Link]> - nVidia video driver
NvLP - <[Link]> - nVidia video driver
NvLp - <[Link]> - nVidia video driver
NvLR - <[Link]> - nVidia video driver
NvLr - <[Link]> - nVidia video driver
NvLS - <[Link]> - nVidia video driver
NvLs - <[Link]> - nVidia video driver
NvLT - <[Link]> - nVidia video driver

Nwcs - <unknown> - Client Services for NetWare

NwFw - <unknown> - ntos\tdi\fwd

ObSq - nt!ob - object security descriptors (query)

ObCi - nt!ob - captured information for ObCreateObject
ObCI - nt!ob - object creation lookaside list
ObDi - nt!ob - object directory
ObHd - nt!ob - object handle count data base
ObNm - nt!ob - object names
ObNM - nt!ob - name buffer per processor lookaside pointers
ObRt - nt!ob - object reference stack tracing
ObZn - nt!ob - object zone
ObjT - nt!ob - object type objects
Obtb - nt!ob - object tables via EX handle.c
ObTR - nt!ob - object table ERESOURCEs
Obeb - nt!ob - object tables extra bit tables via EX handle.c
ObDm - nt!ob - object device map
ObSc - nt!ob - Object security descriptor cache block
ObSt - nt!ob - Object Manager temporary storage
ObWm - nt!ob - Object Manager wait blocks

ODMg - [Link] - Output Duplication component

OHCI - <unknown> - Open Host Controller Interface for USB

ohci - <unknown> - 1394 OHCI host controller driver

OlmC - [Link] - Offload Manager Connections

OlmI - [Link] - Offload Manager Interfaces

Ovfl - <unknown> - The internal pool tag table has overflowed - usually this is
a result of nontagged allocations being made

OvfL - <unknown> - EXIFS FCBOVF List

PaeD - <unknown> - PAE top level directory allocation blocks

ParC - <unknown> - Parallel class driver

ParL - <unknown> - Parallel link driver
ParP - <unknown> - Parallel port driver
ParV - <unknown> - ParVdm driver for vdm<->parallel port communciation

PciB - [Link] - PnP pci bus enumerator

Pccr - [Link] - PACER Filter Clone Requests

Pcfc - [Link] - PACER Filter Contexts
Pcfl - [Link] - PACER Flows
Pcge - [Link] - PACER Generic Buffers (DACL, SID allocations)
Pcle - [Link] - PACER Lines
Pclt - [Link] - PACER Line Tables
Pcna - [Link] - PACER Filter Network Addresses
Pcnt - [Link] - PACER NetBufferTimes
Pcop - [Link] - PACER Original Packet Contexts
Pcpc - [Link] - PACER Packet Contexts
Pcsb - [Link] - PACER Send Buffers
Pcta - [Link] - PACER Timer Units
Pctw - [Link] - PACER Timer Wheels
Pcwc - [Link] - PACER WAN NetworkBufferList CTXs

PcCi - <unknown> - WDM audio port class adapter device object stuff
PcCr - <unknown> - WDM audio stuff
PcDi - <unknown> - WDM audio stuff
PcDm - <unknown> - DirectMusic MXF objects (WDM audio)
PcFM - <unknown> - WDM audio FM synthesizer
PcFp - <unknown> - WDM audio stuff
PcIc - <unknown> - WDM audio stuff
PcIl - <unknown> - WDM audio stuff
PcNw - <unknown> - WDM audio stuff
PcPc - <unknown> - WDM audio stuff
PcPr - <unknown> - WDM audio stuff
PcSX - <unknown> - WDM audio stuff
PcSl - <unknown> - WDM audio stuff
PcSt - <unknown> - WDM audio stuff
PcSx - <unknown> - WDM audio stuff
PcUs - <unknown> - WDM audio stuff

Pcmc - [Link] - Pcmcia bus enumerator, general structures

Pcic - <unknown> - Pcmcia bus enumerator, PCIC/Cardbus controller specific
structures
Pcdb - <unknown> - Pcmcia bus enumerator, Databook controller specific
structures

PdcA - [Link] - PDC_ACTIVATION_TAG, ACTIVATOR_CLIENT_TAG

PdcC - [Link] - PDC_CLIENT_PORT_TAG
PdcE - [Link] - ACTIVATOR_EVENT_TAG
PdcI - [Link] - PDC_INCLUSION_LIST_TAG
PdcM - [Link] - PDC_MESSAGE_TAG
PdcN - [Link] - PDC_NOTIFICATION_TAG, NOTIFICATION_CLIENT_TAG
PdcP - [Link] - PDC_PORT_TAG
PdcR - [Link] - PDC_RESILIENCY_TAG, RESILIENCY_CLIENT_TAG
PdcS - [Link] - PDC_SUSPRES_TAG
PdcT - [Link] - PDC_TOKEN_TAG
PSwt - [Link] - PDC_PSWT_TAG
Pdcs - [Link] - PDC_SCENARIO_TAG

SPMp - nt!po - Kernel Scenario Power Manager Policies.

PepT - nt!PopPep - Default Power Engine Plugin

Petw - [Link] - PACER ETW

Pf?? - nt!pf - Pf Allocations

PfAL - nt!pf - Pf Application launch event data
PfAS - nt!pf - Pf Prefetch support array
PfDq - nt!pf - Pf Directory query buffers
PfED - nt!pf - Pf Generic event data
PfEL - nt!pf - Pf Event logging buffers
PfET - nt!pf - Pf Entry info tables
PfFH - nt!pf - Pf RpContext FileKeyHash buckets
PfFh - nt!pf - Pf Prefetch file handle cache array
PfFK - nt!pf - Pf RpContext FileKeyHashEntry
PfLB - nt!pf - Pf Log buffers
PfMP - nt!pf - Pf Prefetch metadata buffers
PfNL - nt!pf - Pf Name logging buffers
PfOB - nt!pf - Pf Oplock buffers
PfPB - nt!pf - Pf Pfn query buffers
PfRL - nt!pf - Pf Prefetch read list
PfRQ - nt!pf - Pf Prefetch request buffers
PfSA - nt!pf - Pf Prefetch support array
PfTD - nt!pf - Pf Trace Dump
PfTt - nt!pf - Pf Translation tables
PfVA - nt!pf - Pf VA prefetching buffers
PfVH - nt!pf - Pf Prefetch volume handles

Pfcs - [Link] - PACER Flow Counter Sets

Pfhc - [Link] - PACER File Handle Contexts

PFXM - nt!PoFx - Runtime Power Management Framework

PcwC - nt!pcw - PCW Counter set

PcwR - nt!pcw - PCW provider Registration
PcwI - nt!pcw - PCW counter set Instance
PcwQ - nt!pcw - PCW Query item
PcwS - nt!pcw - PCW System call buffer
PcwT - nt!pcw - PCW Temporary (short-lived) buffer

Pgm? - <unknown> - Pgm (Pragmatic General Multicast) protocol: [Link]

Plcp - <unknown> - Cache aware pushlock list (array of puchlock addresses)

Plcl - <unknown> - Cache aware pushlock entry. One per processor

PlMp - [Link] - PortpReadDriverParameterEntry

PlRB - [Link] - PortAllocateRegistryBuffer storport!
_PORT_REGISTRY_INFO.Buffer

PmpA - [Link] - Portmap address list

PmpC - [Link] - Portmap device context
PmpM - [Link] - Portmap mapping
PmpR - [Link] - Portmap RPCB

PmAT - [Link] - Partition Manager attributes table cache

PmDD - [Link] - Partition Manager device descriptor
PmIB - [Link] - Partition Manager buffer for IOCTL processing
PmME - [Link] - Partition Manager migration entry
PmPE - [Link] - Partition Manager partition entry
PmPT - [Link] - Partition Manager partition table cache
PmRL - [Link] - Partition Manager remove lock
PmRP - [Link] - Partition Manager registry path
PmRR - [Link] - Partition Manager removal relations
PmSD - [Link] - Partition Manager snapshot data cache
PmTE - [Link] - Partition Manager table entry
PmVE - [Link] - Partition Manager volume entry

PNCH - <unknown> - Power Notify Channel

PNCL - <unknown> - Power Notify channel list
PNDP - <unknown> - Power Abort Dpc Routine
PNI - <unknown> - Power Notify Instance

PoEa - [Link] - MTAG_ADAPTER

PoEb - [Link] - MTAG_BINDING
PoEc - [Link] - MTAG_BUFFERPOOL
PoEd - [Link] - MTAG_PACKETPOOL
PoEe - [Link] - MTAG_PPPOEPACKET
PoEf - [Link] - MTAG_TAPIPROV
PoEg - [Link] - MTAG_LINE
PoEh - [Link] - MTAG_CALL
PoEi - [Link] - MTAG_HANDLETABLE
PoEj - [Link] - MTAG_HANDLECB
PoEk - [Link] - MTAG_TIMERQ
PoEl - [Link] - MTAG_FREED
PoEm - [Link] - MTAG_LLIST_WORKITEMS
PoEu - [Link] - MTAG_UTIL

Pool - <unknown> - Pool tables, etc.

PooL - <unknown> - Phase 0 initialization of the executive component, paged and
nonpaged small pool lookaside structures
Port - <unknown> - Port objects

PoSL - <unknown> - Power shutdown event list

PPMd - <unknown> - Processor Drivers (Processor Power Management).

PPMi - nt!po - Kernel Processor Power Management Idle States.
PPMp - nt!po - Kernel Processor Power Management Perf States.
PPMw - nt!po - Kernel Processor Power Management WMI interface.

Prof - <unknown> - Profile objects

POWI - nt!po - Power Work Item (executive worker thread work item entry)
PSwt - nt!po - Power switch structure
PSTA - nt!po - Po registered system state
PDss - nt!po - Po device system state
PRTM - nt!po - Power runtime management
PCol - nt!po - Thermal cooling requests and extensions

PpsP - nt!ps - PSP_PROPERTY_TAG

PpTg - [Link] - MPSDRV PPTP GRE analyzer

PpTt - [Link] - MPSDRV PPTP TCP analyzer

Prcr - [Link] - Processr driver allocations

Proc - nt!ps - Process objects

Ps - nt!ps - general ps allocations
Psap - nt!ps - Block used to hold a user mode APC while its queued to a
thread
PsAp - nt!ps - Process APC queued by user mode process
PsCa - nt!ps - APC queued at thread create time.
PsCr - nt!ps - Working set change record (temporary allocation)
PsEx - nt!ps - Process exit APC
PsFn - nt!ps - Captured image file name buffer (temporary allocation)
PsHl - nt!ps - Captured list of handles to inherit in child process
(temporary allocation)
PsIm - nt!ps - Thread impersonation (PS_IMPERSONATE_INFORMATION, pre-Vista)
PsJa - nt!ps - Job access control state
Psjb - nt!ps - Job set array (temporary allocation)
PsLd - nt!ps - Process LDT information blocks
PsPb - nt!ps - Captured process parameter block (temporary allocation)
PsQb - nt!ps - Process quota block
PsRl - nt!ps - Captured memory reserve list (temporary allocation)
PsSb - nt!ps - Initial process parameter block (temporary allocation)
PsSd - nt!ps - Augmented thread security descriptor (temporary allocation)
PsTf - nt!ps - Job object token filter
Pstb - nt!ps - Process tables via EX handle.c
Psta - nt!ps - Power management system state
PsTp - nt!ps - Thread termination port block
PsWs - nt!ps - Process working set watch array

PSE3 - [Link] - Physical Size Extension driver

Pnp0 - nt!pnp - PNPMGR rebalance resource request table

Pnp1 - nt!pnp - PNPMGR IRP completion context
Pnp2 - nt!pnp - PNPMGR device action request
Pnp3 - nt!pnp - PNPMGR HW Profile
Pnp4 - nt!pnp - PNPMGR CM API
Pnp5 - nt!pnp - PNPMGR assign resources context
Pnp6 - nt!pnp - PNPMGR resource request
Pnp7 - nt!pnp - PNPMGR deferred notify entry
Pnp8 - nt!pnp - PNPMGR async target device change notify
Pnp9 - nt!pnp - PNPMGR HW profile notify
PnpA - nt!pnp - PNPMGR PnpRtl Operations
PnpC - nt!pnp - PNPMGR target device notify
PnpF - nt!pnp - PNPMGR eject data
PnpG - nt!pnp - PNPMGR generic
PnpH - nt!pnp - PNPMGR service name
PnpI - nt!pnp - PNPMGR instance path
PnpJ - nt!pnp - PNPMGR device event list
PnpK - nt!pnp - PNPMGR device event entry
PnpL - nt!pnp - PNPMGR device event workitem
PnpM - nt!pnp - PNPMGR veto buffer
PnpN - nt!pnp - PNPMGR PDO array
PnpO - nt!pnp - PNPMGR veto process
PnpP - nt!pnp - PNPMGR veto device object
PnpQ - nt!pnp - PNPMGR partition resource list
PnpR - nt!pnp - PNPMGR memory bitmap
PnpS - nt!pnp - PNPMGR dependent info
PnpT - nt!pnp - PNPMGR provider info
PnpU - nt!pnp - PNPMGR async set status control
PnpV - nt!pnp - PNPMGR notify entry loc
PnpW - nt!pnp - PNPMGR SwDevice
PnpX - nt!pnp - PNPMGR DevQuery
PnpY - nt!pnp - PNPMGR usermode device notifications
PnpZ - nt!pnp - PNPMGR data model
PnPb - nt!pnp - PnP BIOS resource manipulation
PpEB - nt!pnp - PNP_POOL_EVENT_BUFFER
PpEE - nt!pnp - PNP_DEVICE_EVENT_ENTRY_TAG
PpEL - nt!pnp - PNP_DEVICE_EVENT_LIST_TAG
PpLg - nt!pnp - PnP last good.
PpUB - nt!pnp - PNP_USER_BLOCK_TAG
PpWI - nt!pnp - PNP_DEVICE_WORK_ITEM_TAG
Ppcd - nt!pnp - PnP critical device database
Ppcr - nt!pnp - plug-and-play critical allocations
Ppdd - nt!pnp - new Plug-And-Play driver entries and IRPs
Ppde - nt!pnp - routines to perform device removal
Ppei - nt!pnp - Eisa related code
Ppen - nt!pnp - routines to perform device enumeration
Ppin - nt!pnp - plug-and-play initialization
Ppio - nt!pnp - plug-and-play IO system APIs

PPMi - nt!po - Processor Power Manager Idle States

PPMp - nt!po - Processor Power Manager Perf States
PPMw - nt!po - Processor Power Manager WMI Interface
Ppre - nt!pnp - resource allocation and translation
Pprl - nt!pnp - routines to manipulate relations list
Ppsu - nt!pnp - plug-and-play subroutines for the I/O system

PPTP - <unknown> - PPTP_MEMORYPOOL_TAG

PPT0 - <unknown> - PPTP_TDIADDR_TAG
PPT1 - <unknown> - PPTP_TDICONN_TAG
PPT2 - <unknown> - PPTP_CONNINFO_TAG
PPT3 - <unknown> - PPTP_ADDRINFO_TAG
PPT4 - <unknown> - PPTP_TIMEOUT_TAG
PPT5 - <unknown> - PPTP_TIMER_TAG
PPT6 - <unknown> - PPTP_TDICOTS_TAG
PPT7 - <unknown> - PPTP_WRKQUEUE_TAG
PPT8 - <unknown> - PPTP_SEND_CTRLDATA_TAG
PPT9 - <unknown> - PPTP_SEND_ACKDATA_TAG
PPTa - <unknown> - PPTP_SEND_DGRAMDESC_TAG
PPTb - <unknown> - PPTP_TDICLTS_TAG
PPTc - <unknown> - PPTP_RECV_CTRLDESC_TAG
PPTd - <unknown> - PPTP_RECV_CTRLDATA_TAG
PPTe - <unknown> - PPTP_RECV_DGRAMDESC_TAG
PPTf - <unknown> - PPTP_RECV_DGRAMDATA_TAG
PPTg - <unknown> - PPTP_RECVDESC_TAG
PPTh - <unknown> - PPTP_ENGINE_TAG
PPTi - <unknown> - PPTP_RECVDATA_TAG

PRF? - nt!wdi - Performance Allocations

PRFd - nt!wdi - Performance Diagnostics Structures

PSC? - <unknown> - Packet Scheduler (PSCHED) Tags

PSC0 - <unknown> - NDIS Request

PSC1 - <unknown> - GPC Client Vc
PSC2 - <unknown> - WanLink
PSC3 - <unknown> - Miscellaneous allocations
PSC4 - <unknown> - WMI
PSCa - <unknown> - Adapter
PSCb - <unknown> - CallParameters
PSCc - <unknown> - PipeContext
PSCd - <unknown> - FlowContext
PSCe - <unknown> - ClassMapContext
PSCf - <unknown> - Adapter Profile
PSCg - <unknown> - Component

PX1 - <unknown> - ndis ProviderEventLookaside

p2?? - [Link] - Permedia2 display driver

p2d3 - [Link] - Permedia2 display driver - d3d.c
p2d6 - [Link] - Permedia2 display driver - d3ddx6.c
p2de - [Link] - Permedia2 display driver - debug.c
p2ds - [Link] - Permedia2 display driver - d3dstate.c
p2dt - [Link] - Permedia2 display driver - d3dtxman.c
p2su - [Link] - Permedia2 display driver - ddsurf.c
p2en - [Link] - Permedia2 display driver - enable.c
p2fi - [Link] - Permedia2 display driver - fillpath.c
p2he - [Link] - Permedia2 display driver - heap.c
p2hw - [Link] - Permedia2 display driver - hwinit.c
p2cx - [Link] - Permedia2 display driver - p2ctxt.c
p2pa - [Link] - Permedia2 display driver - palette.c
p2pe - [Link] - Permedia2 display driver - permedia.c
p2tx - [Link] - Permedia2 display driver - textout.c

P3D? - [Link] - Permedia3 display driver - DirectDraw/3D

P3G? - [Link] - Permedia3 display driver

ppPT - [Link] - Proxy Virtual Machine Storage VHD Parser Driver (parser)
ppRT - [Link] - Proxy Virtual Machine Storage VHD Parser Driver (parser)

PSHD - [Link] - PSHED

PSPi - [Link] - PSHED Plug-in

Ppcs - [Link] - PACER Pipe Counter Sets

Pwff - [Link] - PACER WFP Filters
Pwmi - [Link] - PACER WMI notifications

PX1 - [Link] - PX_EVENT_TAG

PX2 - [Link] - PX_VCTABLE_TAG
PX3 - [Link] - PX_ADAPTER_TAG
PX4 - [Link] - PX_CLSAP_TAG
PX5 - [Link] - PX_CMSAP_TAG
PX6 - [Link] - PX_PARTY_TAG
PX7 - [Link] - PX_COCALLPARAMS_TAG
PX8 - [Link] - PX_REQUEST_TAG
PX9 - [Link] - PX_PROVIDER_TAG
PXa - [Link] - PX_ENUMLINE_TAG
PXb - [Link] - PX_TAPILINE_TAG
PXc - [Link] - PX_ENUMADDR_TAG
PXd - [Link] - PX_TAPIADDR_TAG
PXe - [Link] - PX_TAPICALL_TAG
PXf - [Link] - PX_LINECALLINFO_TAG
PXg - [Link] - PX_CMAF_TAG
PXh - [Link] - PX_CLAF_TAG
PXi - [Link] - PX_VC_TAG
PXj - [Link] - PX_TRANSLATE_CALL_TAG
PXk - [Link] - PX_TRANSLATE_SAP_TAG
PXl - [Link] - PX_LINETABLE_TAG

Qnam - <unknown> - EXIFS Query Name

Qp?? - <unknown> - Generic Packet Classifier (MSGPC)

Qppn - <unknown> - Queued Notifications
Qppi - <unknown> - Pending Irp structures
Qpci - <unknown> - CfInfo
Qpct - <unknown> - Client blocks
Qppa - <unknown> - Pattern blocks
Qphf - <unknown> - HandleFactory
Qpph - <unknown> - PathHash
Qprz - <unknown> - Rhizome
Qppd - <unknown> - GenPatternDb
Qpfd - <unknown> - FragmentDb
Qpcf - <unknown> - ClassificationFamily
Qpcd - <unknown> - CfInfoData
Qpcb - <unknown> - ClassificationBlock
Qppt - <unknown> - Protocol
Qpdg - <unknown> - Debug

QUIC Allocation tags are Qc00 through QcFF

QUIC - [Link] - Generic QUIC allocation
Qc00 - [Link] - QUIC Silo
Qc01 - [Link] - QUIC connection
Qc02 - [Link] - QUIC connection transport parameters
Qc03 - [Link] - QUIC stream
Qc04 - [Link] - QUIC stream buffer
Qc05 - [Link] - QUIC sent frame metadata
Qc06 - [Link] - QUIC datagram buffer
Qc07 - [Link] - QUIC test code
Qc08 - [Link] - QUIC perf code
Qc09 - [Link] - QUIC tool code
Qc0A - [Link] - QUIC Worker
Qc0B - [Link] - QUIC Listener
Qc0C - [Link] - QUIC CID
Qc0D - [Link] - QUIC CID Hash
Qc0E - [Link] - QUIC CID List Entry
Qc0F - [Link] - QUIC CID Prefix
Qc10 - [Link] - QUIC ALPN
Qc11 - [Link] - QUIC Range
Qc12 - [Link] - QUIC Send Buffer
Qc13 - [Link] - QUIC Recv Buffer
Qc14 - [Link] - QUIC Timer Wheel
Qc15 - [Link] - QUIC Registration
Qc16 - [Link] - QUIC configuration
Qc17 - [Link] - QUIC Core binding
Qc18 - [Link] - QUIC API Table
Qc19 - [Link] - QUIC Per Proc Context
Qc1A - [Link] - QUIC Platform Send Context
Qc1B - [Link] - QUIC Platform TLS ACH Context
Qc1C - [Link] - QUIC Platform TLS SNI
Qc1D - [Link] - QUIC Platform TLS Principal
Qc1E - [Link] - QUIC Platform TLS Context
Qc1F - [Link] - QUIC Platform TLS Transport Parameters
Qc20 - [Link] - QUIC Platform TLS Resumption Buffer
Qc21 - [Link] - QUIC Platform TLS Sec Config
Qc22 - [Link] - QUIC Platform TLS Packet Key
Qc23 - [Link] - QUIC Platform TLS Key
Qc24 - [Link] - QUIC Platform TLS HP Key
Qc25 - [Link] - QUIC Platform TLS Hash
Qc26 - [Link] - QUIC Platform TLS Extra Data
Qc27 - [Link] - QUIC temporary alloc
Qc28 - [Link] - QUIC Platform temporary alloc
Qc29 - [Link] - QUIC Platform Processor info
Qc2A - [Link] - QUIC Platform generic
Qc2B - [Link] - QUIC Platform datapath
Qc2C - [Link] - QUIC Platform datapath binding
Qc2D - [Link] - QUIC Platform storage
Qc2E - [Link] - QUIC Platform hashtable
Qc2F - [Link] - QUIC Platform hashtable member lists
Qc30 - [Link] - QUIC Lookup Hash Table
Qc31 - [Link] - QUIC Remote Hash Entry
Qc32 - [Link] - QUIC Server Name
Qc33 - [Link] - QUIC App Resumption Data
Qc34 - [Link] - QUIC Initial Token
Qc35 - [Link] - QUIC Close Reason
Qc36 - [Link] - QUIC Crypto Server Ticket Buffer
Qc37 - [Link] - QUIC Crypto Client Ticket Buffer
Qc38 - [Link] - QUIC Crypto Resumption Ticket
Qc39 - [Link] - QUIC Tls Buffer
Qc3A - [Link] - QUIC Send Request
Qc3B - [Link] - QUIC API Context
Qc3C - [Link] - QUIC Stateless Context
Qc3D - [Link] - QUIC Operation
Qc3E - [Link] - QUIC Event

QuU2 - [Link] - MPSDRV upcall response

RAWb - nt!RAW - RAW file system buffer

Ra12 - [Link] - INQUIRY_TAG

RaAM - [Link] - MAPPED_ADDRESS_TAG
RaCD - [Link] - CRASHDUMP_TAG
RaCT - [Link] - CONCURRENT_TOKEN_TAG
RaDI - [Link] - ID_TAG
RaDf - [Link] - DEFERRED_ITEM_TAG
RaDS - [Link] - STRING_TAG
RaDR - [Link] - DEVICE_RELATIONS_TAG
RaDr - [Link] - DPC_REDIRECTION_TAG
RaHI - [Link] - HWINIT_TAG
RaME - [Link] - MINIPORT_EXT_TAG
RaPC - [Link] - PORTCFG_TAG
RaPD - [Link] - PORT_DATA_TAG
RaPL - [Link] - PENDING_LIST_TAG
RaQT - [Link] - QUERY_TEXT_TAG
RaRm - [Link] - REMLOCK_TAG
RaRL - [Link] - RESOURCE_LIST_TAG
RaSr - [Link] - SRB_TAG
RaSE - [Link] - SRB_EXTENSION_TAG
RaTM - [Link] - TAG_MAP_TAG
RaXr - [Link] - XRB_TAG
RaUE - [Link] - UNIT_EXT_TAG
RaSN - [Link] - SENSE_TAG
RaMW - [Link] - WMI_EVENT_TAG
RaRl - [Link] - REPORT_LUNS_TAG
RaSI - [Link] - SENSE_INFO_TAG
RaSR - [Link] - RESOURCE_TAG
RaAE - [Link] - ADAPTER_EXT_TAG
RaVM - [Link] - VM_BUSES_TAG
RaTS - [Link] - TARGET_RESCAN_TAG
RaWI - [Link] - WORK_ITEM_TAG
RaAT - [Link] - ADDITIONAL_TIMER_TAG
RaPO - [Link] - POFX_TAG
RaPW - [Link] - POWER_TAG
RaIB - [Link] - IRP_BUFFER_TAG
RaPQ - [Link] - PENDING_QUEUE_TAG
RaTe - [Link] - TELEMETRY_TAG
RaSH - [Link] - SHIM_TAG
RaCE - [Link] - COMMAND_EFFECTS_TAG
RaCT - [Link] - PORT_CONTEXT_TAG
RaUL - [Link] - UNIT_LIST_TAG
RaZR - [Link] - ZONE_IO_GROUP_TAG
RaCr - [Link] - CRYPTO_TAG
RaET - [Link] - ETW_TAG
RaST - [Link] - SMART_TAG
RaRW - [Link] - REGISTRY_WATCH_TAG
RaWH - [Link] - WHEA_TAG
RaNP - [Link] - NPEM_TAG
RaOP - [Link] - OPERATION_TAG
RaAC - [Link] - ACPI_TAG
RaDQ - [Link] - DFX_QUEUE_TAG
RaGA - [Link] - GATEWAY_TAG
RaCI - [Link] - NVME_CTRL_IDENTIFY_TAG
RaNI - [Link] - NVME_NS_IDENTIFY_TAG
RaNC - [Link] - NVME_CONFIG_TAG
RaEt - [Link] - ENUM_TAG
RaMF - [Link] - MFND_TAG
RaRE - [Link] - RESET_TAG
RaTC - [Link] - TCG_TAG

RaDA - [Link] - Raw Socket Discretionary ACLs

RaEW - [Link] - Raw Socket Endpoint Work Queue Contexts
RaMI - [Link] - Raw Socket Message Indication Tags
RaPM - [Link] - Raw Socket Partial Memory Descriptor List Tag
RaSM - [Link] - Raw Socket Send Messages Requests
RaSL - [Link] - Raw Socket Send Message Lists
RawE - [Link] - Raw Socket Endpoints
RawN - [Link] - Raw Socket Nsi

RB?? - <unknown> - RedBook Filter Driver, static allocations

RBEv - <unknown> - RedBook - Thread Events
RBRl - <unknown> - RedBook - Remove lock
RBRg - <unknown> - RedBook - driverExtension->RegistryPath
RBSe - <unknown> - RedBook - Serialization tracking for checked builds
RBWa - <unknown> - RedBook - Wait block for system thread

rb?? - <unknown> - RedBook Filter Driver, dynamic allocations

rbBu - <unknown> - RedBook - Buffer for read/stream
rbIr - <unknown> - RedBook - Irp for read/stream
rbIp - <unknown> - RedBook - Irp pointer block
rbMd - <unknown> - RedBook - Mdl for read/stream
rbMp - <unknown> - RedBook - Mdl pointer block
rbRc - <unknown> - RedBook - Read completion context
rbRx - <unknown> - RedBook - Read Xtra info
rbSc - <unknown> - RedBook - Stream completion context
rbSx - <unknown> - RedBook - Stream Xtra info
rbTo - <unknown> - RedBook - Cached table of contents

Rcp? - [Link] - SAC Driver (Headless)

RcpA - [Link] - Internal memory mgr alloc block
RcpI - [Link] - Internal memory mgr initial heap block
RcpS - [Link] - Security related block

RDPD - [Link] - Device list object

ReEv - <unknown> - Resource Event

ReSe - <unknown> - Resource Semaphore
ReTa - <unknown> - Resource Extended Table
ReTr - <unknown> - Per ETHREAD EXECUTIVE Resource tracking.

REM ReFS Specific allocation tags

ReAR - [Link] - Refs Async Cached Read allocation
Reai - [Link] - RefsInsertStreamAttributeLookasideList
Ref0 - [Link] - General pool allocation
Ref9 - [Link] - Large Temporary Buffer
RefB - [Link] - RefsGetSfioReservation
Refb - [Link] - RESERVE_POOL_TAG
RefC - [Link] - CCB
Refc - [Link] - CCB_DATA
Refd - [Link] - DEALLOCATED_CLUSTERS
RefD - [Link] - DEALLOCATED_RECORDS
RefE - [Link] - INDEX_CONTEXT
Reff - [Link] - FCB_DATA
RefF - [Link] - FCB_INDEX
RefI - [Link] - IO_CONTEXT
Refi - [Link] - IRP_CONTEXT
RefK - [Link] - KEVENT
Refk - [Link] - FILE_LOCK
Refl - [Link] - LCB
ReFm - [Link] - MAP_CONTEXT RefsMapContextLookasideList
RefN - [Link] - NUKEM
Refn - [Link] - SCB_NONPAGED
Refo - [Link] - SCB_INDEX normalized named buffer
Refp - [Link] - COMPRESSION_CONTEXT RefsCompressCtxLookasideList
Refq - [Link] - General Allocation with Quota
RefR - [Link] - READ_AHEAD_THREAD
Refr - [Link] - ERESOURCE
RefS - [Link] - SCB_INDEX
Refs - [Link] - SCB_DATA
RefH - [Link] - SCB_SNAPSHOT
Reft - [Link] - SCB (Prerestart)
Refu - [Link] - NTFS_MARK_UNUSED_CONTEXT
RefV - [Link] - VPB
Refv - [Link] - COMPRESSION_SYNC
Refw - [Link] - Workspace
Refx - [Link] - General Allocation
Ref? - [Link] - Unkown allocation
ReIO - [Link] - ReFS IO perf
Rers - [Link] - ROLLBACK_STRUCT RefsRollbackStructLookasideList
ReTc - [Link] - FILE_LEVEL_TRIM_CONTEXT
ReTm - [Link] - DEVICE_MANAGE_DATA_SET_ATTRIBUTES
RefsDeviceManageDataSetAttributesLookasideList
ReTo - [Link] - DEVICE_MANAGE_DATA_SET_ATTRIBUTES
RefsFileOffloadLookasideList
ReTe - [Link] - ReFS Telemetry
Redf - [Link] - REFS_DISK_FLUSH_CONTEXT allocations
ReF_ - [Link] - FILE_REFERENCE in RefsInsertDebugInfoIrpImplementation
ReFT - [Link] - Stack trace
ReRc - [Link] - Read copy context
RKsr - [Link] - REFS_KSR_POOLTAG

REM ReFS tags based on source module

ReFa - [Link] - AllocSup.c
ReFA - [Link] - AttrHelpers.c
ReFC - [Link] - Create.c
ReFD - [Link] - DevioSup.c
ReFd - [Link] - DirCtrl.c
ReFE - [Link] - Ea.c
ReFF - [Link] - FileInfo.c
ReFf - [Link] - FsCtrl.c
ReFH - [Link] - SelfHeal.c
RefJ - [Link] - NtfsInit.c
ReFL - [Link] - TransSup.c
ReFN - [Link] - NtfsData.c
ReFP - [Link] - ReparSup.c
ReFS - [Link] - SecurSup.c
ReFs - [Link] - StrucSup.c
ReFU - [Link] - usnsup.c
ReFV - [Link] - VerfySup.c
ReFv - [Link] - ViewSup.c
ReFW - [Link] - Write.c
ReMo - [Link] - Mount.c
ReF? - [Link] - Unknown ReFS source module

RefT - <unknown> - Bluetooth reference tracking

Rf?? - <unknown> - Bluetooth RFCOMM TDI driver
RfAD - [Link] - RFCOMM Address
RfBB - [Link] - RFCOMM BRB
RfBT - [Link] - RFCOMM (bthport)
RfCB - [Link] - RCOMMM
RfCH - [Link] - RFCOMM channel
RfCN - [Link] - RFCOMM connect
RfDA - [Link] - RFCOMM data
RfFR - [Link] - RFCOMM frame
RfRX - [Link] - RFCOMM receive
RfPP - [Link] - RFCOMM pnp
RfWR - [Link] - RFCOMM worker

RhHi - [Link] - Reference History Pool

Rind - [Link] - Raw Socket Receive Indications

RKRW - [Link] - MPSDRV work item

RTLF - [Link] - MPSDRV filter

RLli - FsLib - FsLib Nonopaque Range lock entry

RLin - FsLib - FsLib Range lock entry
Rtrc - FsLib - FsLib Allocations in RangeTrack.c

RmPt - [Link] - Rtl Mapping Page Table Entries

Rnm - [Link] - RNDIS MP driver generic alloc

Rnms - [Link] - RNDIS MP driver send frame
Rnmr - [Link] - RNDIS MP driver receive frame
Rnmt - [Link] - RNDIS MP driver timer

RpcL - [Link] - debugging log data - present on checked builds only

RpcM - [Link] - all [Link] allocations not covered elsewhere
Rpcr - [Link] - not currently used

RRle - <unknown> - RTL_RANGE_LIST_ENTRY_TAG

RRlm - <unknown> - RTL_RANGE_LIST_MISC_TAG

RtPi - <unknown> - Temp allocation for product type key

Rpcl - [Link] - MSRpc memory logging - checked build only

Rpcm - [Link] - MSRpc memory allocations
Rpcr - [Link] - MSRpc resources
Rpcs - [Link] - Memory shared b/n MSRpc and caller

RPrt - [Link] - Remote Storage Port Driver

Rqrv - <unknown> - Registry query buffer

RS?? - <unknown> - Remote Storage
RSFS - <unknown> - Recall Queue
RSFN - <unknown> - File Name
RSSE - <unknown> - Security info
RSWQ - <unknown> - Work Queue
RSQI - <unknown> - Queue info
RSLT - <unknown> - Long term data
RSIO - <unknown> - Ioctl Queue
RSFO - <unknown> - File Obj queue
RSVO - <unknown> - Validate Queue
RSER - <unknown> - Error log data

RtlT - nt!rtl - Temporary RTL allocation

RWan - [Link] - Raw WAN driver

R300 - <unknown> - ATI video driver

RX00 - <unknown> - ATI video driver

Rx?? - [Link] - RDBSS allocations

RxSc - [Link] - RDBSS SrvCall
RxNr - [Link] - RDBSS NetRoot
RxVn - [Link] - RDBSS VNetRoot
RxLv - [Link] - RDBSS Logical View
RxFc - [Link] - RDBSS FCB
RxSo - [Link] - RDBSS SrvOpen
RxFx - [Link] - RDBSS fobx
RxNf - [Link] - RDBSS non paged FCB
RxWq - [Link] - RDBSS work queue
RxBm - [Link] - RDBSS buffering manager
RxCo - [Link] - RDBSS construction context
RxMs - [Link] - RDBSS miscellaneous
RxM1 - [Link] - RDBSS VNetRoot name
RxM2 - [Link] - RDBSS canonical name
RxM3 - [Link] - RDBSS querypath name
RxM4 - [Link] - RDBSS treeconnect name
RxM5 - [Link] - RDBSS reparse buffer name
RxM9 - [Link] - RDBSS cloned unicode string
RxIr - [Link] - RDBSS RxContext
RxTl - [Link] - RDBSS toplevel IRP
RxMx - [Link] - RDBSS mini-rdr
RxNc - [Link] - RDBSS name cache
RxSy - [Link] - RDBSS symlink
RxCr - [Link] - RDBSS credential
RxEc - [Link] - RDBSS ECP

RxCt - [Link] - RXCE transport

RxCa - [Link] - RXCE address
RxCc - [Link] - RXCE connection
RxCv - [Link] - RXCE VcEndpoint
RxCd - [Link] - RXCE TDI

S3 - <unknown> - S3 video driver

SAad - [Link] - SrvAdmin buffer
SBad - <unknown> - bad block simulator - simbad.c

sbp2 - <unknown> - Sbp2 1394 storage port driver

SC?? - <unknown> - Smart card driver tags

SCLb - <unknown> - Smart card driver library
SCB8 - <unknown> - Bull CP8 Transac serial reader
SCB3 - <unknown> - Bull SmarTlp PnP
SCS4 - <unknown> - SCM Microsystems pcmcia reader
SCl0 - <unknown> - Litronic 220

Sc?? - <unknown> - Mass storage driver tags

ScB? - [Link] - ClassPnP misc allocations

ScB1 - [Link] - Query registry parameters
ScB2 - [Link] - Registry path
ScB4 - [Link] - Storage descriptor header
ScB5 - [Link] - FDO relations
ScC? - [Link] - ClassPnP misc allocations
ScC1 - [Link] - Registry path buffer
ScC2 - [Link] - PDO relations
ScC6 - [Link] - START_UNIT completion context
ScC7 - [Link] - Sense info buffer
ScC8 - [Link] - Registry value name
ScC9 - [Link] - Device Control SRB

ScC? - [Link] - CdRom

ScCA - [Link] - Autorun disable functionality
ScCa - [Link] - Media change detection
ScSB - [Link] - Scratch buffer (usually 64k)
ScCC - [Link] - Ioctl GET_CONFIGURATION
ScCc - [Link] - Context of completion routine
ScCD - [Link] - Adaptor & Device descriptor buffer
ScCd - [Link] - Disc information
ScCe - [Link] - Request sync event
ScCF - [Link] - Feature descriptor
ScCG - [Link] - GESN buffer
ScCI - [Link] - Sense info buffers
ScCi - [Link] - Cached inquiry buffer
ScCM - [Link] - Mode data buffer
SCCO - [Link] - Set stream buffer
ScCo - [Link] - Device Notification buffer
ScCp - [Link] - Play active checks
ScCr - [Link] - Registry string
ScCS - [Link] - Srb allocation
ScCs - [Link] - Assorted string data
ScCU - [Link] - Update capacity path
ScCu - [Link] - Read buffer for dvd key
ScCV - [Link] - Read buffer for dvd/rpc2 check
ScCv - [Link] - Read buffer for rpc2 check
ScCX - [Link] - Security descriptor

ScD? - <unknown> - Disk

ScD - <unknown> - generic tag
ScDa - <unknown> - SMART
ScDA - <unknown> - Info Exceptions
ScDC - <unknown> - disable cache paths
ScDb - [Link] - ClassPnP debug globals buffer
ScDc - <unknown> - disk allocated completion c
ScDG - <unknown> - disk geometry buffer
ScDg - <unknown> - update disk geometry paths
ScDI - <unknown> - sense info buffers
ScDp - <unknown> - pnp ids
ScDM - <unknown> - mode data buffer
ScDM - <unknown> - mbr checksum code
ScDN - <unknown> - disk name code
ScDP - <unknown> - read capacity buffer
ScDp - <unknown> - disk partition lists
ScDS - <unknown> - srb allocation
ScDs - <unknown> - start device paths
ScDU - <unknown> - update capacity path
ScDW - <unknown> - work-item context
ScMC - <unknown> - medium changer allocations

ScIO - [Link] - ClassPnP device control

ScL? - [Link] - Classpnp
ScLA - [Link] - allocation to check for autorun disable
ScLF - [Link] - File Object Extension
ScLc - [Link] - Cache filters
ScLf - [Link] - Fault prediction
ScLm - [Link] - Mount
ScLM - [Link] - Media Change Detection
ScLq - [Link] - Release queue
ScLw - [Link] - WMI
ScLW - [Link] - Power

ScNo - [Link] - ClassPnP notification

ScP? - <unknown> - Scsiport

ScPa - <unknown> - Hold registry data
ScPA - <unknown> - Access Ranges
ScPb - <unknown> - Get Bus Dat Holder
ScPB - <unknown> - Queuetag BitMap
ScPc - <unknown> - Fake common buffer
ScPC - <unknown> - reset bus code
ScPd - <unknown> - Pnp id strings
ScPD - <unknown> - SRB_DATA allocations
ScPE - <unknown> - Scatter gather lists
ScPG - <unknown> - Global memory
ScPh - <unknown> - HwDevice Ext
ScPi - <unknown> - Sense Info
ScPI - <unknown> - Init data chain
ScPl - <unknown> - remove lock tracking
ScPL - <unknown> - scatter gather lists
ScPm - <unknown> - address mapping lists
ScPM - <unknown> - scatter gather lists
ScPp - <unknown> - device & adapter enable
ScpP - <unknown> - scsi PortConfig copies
ScPq - <unknown> - inquiry data
ScPQ - <unknown> - request sense
ScPr - <unknown> - resource list copy
ScPS - <unknown> - registry allocations
ScPt - <unknown> - legacy request rerouting
ScPT - <unknown> - interface mapping
ScPu - <unknown> - device relation structs
ScPv - <unknown> - KEVENT
ScPV - <unknown> - Device map allocations
ScPw - <unknown> - Wmi Events
ScPW - <unknown> - Wmi Requests
ScPx - <unknown> - Report Luns
ScPY - <unknown> - Report Targets
ScPZ - <unknown> - Device name buffer

ScR? - <unknown> - Partition Manager

ScRi - <unknown> - IOCTL buffer
ScRp - <unknown> - Partition entry
ScRr - <unknown> - Remove lock
ScRt - <unknown> - Table entry
ScRv - <unknown> - Dependant volume relations lists
ScRV - <unknown> - Volume entry
ScRw - <unknown> - Power mgmt private work item

ScS2 - [Link] - Sense interpretation data

ScsC - <unknown> - non-pnp SCSI CdRom

ScsD - <unknown> - non-pnp SCSI Disk
ScsH - <unknown> - non-pnp SCSI from class.h (class2)
ScsI - <unknown> - non-pnp SCSI port internal
ScsL - <unknown> - non-pnp SCSI class.c driver allocations
ScsP - <unknown> - non-pnp SCSI port.c
Scs$ - <unknown> - Tag for pnp class driver's SRB lookaside list

ScUn - <unknown> - Default Tag for pnp class driver allocations

ScV? - <unknown> - Dvd functionality in [Link]

ScVk - <unknown> - read buffer for DVD keys
ScVK - <unknown> - write buffer for DVD keys
ScVS - <unknown> - buffer for reads of DVD on-disk structures

ScWs - [Link] - Working set

SdCc - <unknown> - ObsSecurityDescriptorCache /

SECURITY_DESCRIPTOR_CACHE_ENTRIES

Sdba - <unknown> - Application compatibility Sdb* allocations

Sdp? - <unknown> - Bluetooth SDP functionality in [Link]

SdpC - [Link] - Bluetooth SDP client connection
SdpD - [Link] - Bluetooth SDP database
SdpI - [Link] - Bluetooth port driver (SDP)

SD - [Link] - SMB Direct allocations

SDa - [Link] - SMB Direct socket objects
SDb - [Link] - SMB Direct adapter objects
SDc - [Link] - SMB Direct MR buffers
SDd - [Link] - SMB Direct connect event contexts
SDe - [Link] - SMB Direct large receive buffers
SDf - [Link] - SMB Direct LAM objects
SDg - [Link] - SMB Direct data transfer packet buffers
SDh - [Link] - SMB Direct FRMR objects
SDi - [Link] - SMB Direct buffer registrations
SDj - [Link] - SMB Direct SQ work requests
SDk - [Link] - SMB Direct operation

Se - nt!se - General security allocations

SeAc - nt!se - Security ACL
SeAi - nt!se - Security Audit Work Item
SeAk - nt!se - Security Account Name
SeAo - nt!se - Security Attributes and Operations
SeAp - nt!se - Security Audit Parameter Record
SeAt - nt!se - Security Attributes
SeCL - nt!se - Security CONTEXT_TAG
SeDb - nt!se - Temp directory query buffer to delete logon session symbolic
links
SeDt - nt!se - Security Global Singleton attributes table
SeFS - nt!se - Security File System Notify Context
SeGa - nt!se - Granted Access allocations
SeHa - nt!se - Security Handle Array
SeHn - nt!se - AppContainer Handles
SeIf - nt!se - Security Image Filename
SeLa - nt!se - Security Learning Mode ACLs
SeLs - nt!se - Security Logon Session
SeLu - nt!se - Security LUID and Attributes array
SeLS - nt!se - Security Logon Session tracking array
SeLw - nt!se - Security LSA Work Item
SeOI - nt!se - Security Learning Mode Object Information
SeOn - nt!se - Security Captured Object Name information
SeON - nt!se - Security Learning Mode Object Name
SeOp - nt!se - Security Operation
SeOT - nt!se - Security Learning Mode Object Type
SeOt - nt!se - Captured object type array, used by access check
SePa - nt!se - Process audit image names and captured policy structures
SePh - nt!se - Dummy image page hash structure, used when CI is disabled
SePr - nt!se - Security Privilege Set
SeRO - nt!se - Learning Mode Root Object
SeSA - nt!se - Security CAPE Staged Access Array
SeSa - nt!se - Security SID and Attributes
SeSb - nt!se - Security Secure Boot
SeSc - nt!se - Captured Security Descriptor
SeSd - nt!se - Security Descriptor
SeSi - nt!se - Security SID
SeSp - nt!se - Scoped Policy
SeSs - nt!se - Shared Sids
SeSv - nt!se - Security SID values block
SeTa - nt!se - Security Temporary Array
SeTd - nt!se - Security Token dynamic part
SeTI - [Link] - Security TargetInfo
SeTl - nt!se - Security Token Lock
SeTn - nt!se - Security Captured Type Name information
SeUs - nt!se - Security Captured Unicode string

Sect - <unknown> - Section objects

Sema - <unknown> - Semaphore objects
Senm - <unknown> - Serenum (RS-232 serial bus enumerator)
SimB - <unknown> - Simbad (bad sector simulation driver) allocations
SIfs - <unknown> - Default tag for user's of ntsrv.h
sidg - <unknown> - GDI spooler events
Sis - <unknown> - Single Instance Store (dd\sis\filter)
SisB - <unknown> - SIS per file object break event
SisC - <unknown> - SIS common store file object
SisF - <unknown> - SIS per file object
SisL - <unknown> - SIS per link object
SisS - <unknown> - SIS SCB
Setp - <unknown> - SETUPDD SpMemAlloc calls

SMgk - [Link] - Virtual Machine Shared Memory Kernel

Mode Guest Library
SMhk - [Link] - Virtual Machine Shared Memory Kernel
Mode Host Library

SRdm - [Link] - Infiniband SRP driver

StCc - [Link] - WFP stream inspection call context

StDa - [Link] - WFP stream inspection data
StFc - [Link] - WFP stream filter conditions
StCx - [Link] - WFP stream internal callout context
Stdq - [Link] - WFP stream DPC queue

SV?? - <unknown> - Synthetic Video Driver

SVXD - [Link] - WDDM Synthetic Video Display Driver

SVXM - [Link] - WDDM Synthetic Video Miniport Driver
SVid - [Link] - LDDM Synthetic Video Miniport Driver

SW?? - <unknown> - Software Bus Enumerator

SWbi - <unknown> - bus ID
SWbr - <unknown> - bus reference
SWda - <unknown> - POOLTAG_DEVICE_ASSOCIATION
SWdn - <unknown> - device name
SWdr - <unknown> - device reference
SWdr - <unknown> - POOLTAG_DEVICE_DRIVER_REGISTRY
SWfd - <unknown> - POOLTAG_DEVICE_FDOEXTENSION
SWid - <unknown> - device ID
SWii - <unknown> - instance ID
SWip - <unknown> - POOLTAG_DEVICE_INTERFACEPATH
SWki - <unknown> - key information
SWpd - <unknown> - POOLTAG_DEVICE_PDOEXTENSION
SWre - <unknown> - relations
SWrp - <unknown> - reparse string
SWrs - <unknown> - reference string

Sm?? - [Link] - SMB miniredirector allocations

SmCe - [Link] - SMB connection object
SmXc - [Link] - SMB exchange
SmBf - [Link] - SMB exchange buffer
SmKy - [Link] - SMB compounding key
SmMs - [Link] - SMB miscellaneous
SmTp - [Link] - SMB transport
SmVc - [Link] - SMB VC endpoint
SmDg - [Link] - SMB datagram endpoint
SmWi - [Link] - SMB sequence window
SmFi - [Link] - SMB file
SmTh - [Link] - SMB thunk
SmSh - [Link] - SMB shadow file (fast loopback)
SmTd - [Link] - SMB TDI notify
SmDc - [Link] - SMB directory cache

SmMm - [Link] - SMB mm allocated structures.

SmAd - [Link] - SMB1 session setup/admin exchange
SmRw - [Link] - SMB1 read/write path
SmTr - [Link] - SMB1 transact exchange
SmRb - [Link] - SMB1 remote boot

SmFc - [Link] - SMB1 fsctl structures (special build only)

SmDc - [Link] - SMB1 dir query buffer (special build only)
SmPi - [Link] - SMB1 pipeinfo buffer (special build only)
SmDO - [Link] - SMB1 deferred open context (special build only)
SmQP - [Link] - SMB1 params for directory query transact (special
build only)

SmVr - [Link] - SMB1 VNetroot (special build only)

SmSr - [Link] - SMB1 Server (special build only)
SmSe - [Link] - SMB1 Session (special build only)
SmNr - [Link] - SMB1 NetRoot (special build only)
SmMa - [Link] - SMB1 mid atlas (special build only)
SmMt - [Link] - SMB1 mailslot buffer (special build only)
SmEc - [Link] - SMB1 echo buffer (special build only)
SmKs - [Link] - SMB1 Kerberos blob (special build only)

sm?? - nt!store or [Link] - ReadyBoost allocations

smCR - nt!store or [Link] - ReadyBoost encryption allocation
smMD - nt!store or [Link] - ReadyBoost store stats MDL
smWi - nt!store or [Link] - ReadyBoost various work items
smSt - nt!store or [Link] - ReadyBoost various store allocations
smBt - nt!store or [Link] - ReadyBoost various B+Tree allocations
smXt - nt!store or [Link] - ReadyBoost store extents array
smAr - nt!store or [Link] - ReadyBoost generic array allocation
smIt - nt!store or [Link] - ReadyBoost store ETA timers
smRg - nt!store or [Link] - ReadyBoost in-memory store region array
smET - nt!store or [Link] - ReadyBoost ETA check work item
smWd - nt!store or [Link] - ReadyBoost store contents rundown work item
smNp - nt!store or [Link] - ReadyBoost store node pool allocations
smDt - nt!store or [Link] - ReadyBoost store debug trace buffer
smDa - nt!store - ReadyBoost cache file DACL
smDS - nt!store - ReadyBoost cache file SID
smLb - nt!store - ReadyBoost virtual store manager log buffer
smCa - nt!store - ReadyBoost cache
smEK - nt!store - ReadyBoost encryption key
smEd - nt!store - ReadyBoost virtual store manager key descriptor
allocation for logging
smAc - nt!store - ReadyBoost device arrival context
smFh - nt!store - ReadyBoost cache file header
smFp - nt!store - ReadyBoost virtual forward progress entry
smR? - nt!store - ReadyBoost virtual forward progress resources
smKG - nt!store - ReadyBoost encryption key registry path buffer
smms - nt!store - ReadyBoost virtual store memory monitor context
smCr - nt!store - ReadyBoost store region bitmap
smMd - [Link] - ReadyBoost MDL allocation
smMb - [Link] - ReadyBoost MDL buffer
smBP - [Link] - ReadyBoot boot plan buffer
smBD - [Link] - ReadyBoot decompressed boot plan buffer
smBX - [Link] - ReadyBoot boot plan decompression workspace buffer
smMR - [Link] - ReadyBoot multi-read ranges
smRW - [Link] - ReadyBoot read-after-write ranges
smPr - [Link] - ReadyBoot population ranges
smPi - [Link] - ReadyBoot population ranges index
smPl - [Link] - ReadyBoot pended IRP lists
smRT - [Link] - ReadyBoot thread params
smTi - [Link] - ReadyBoost debug IO trace buffer
smPc - [Link] - ReadyBoost persist log context
smPb - [Link] - ReadyBoost persist log buffer
smPm - [Link] - ReadyBoost persist partial MDL buffer
smBR - [Link] - ReadyBoost volume ranges array
smBr - [Link] - ReadyBoost volume range
smVc - [Link] - ReadyBoost read verification buffer
smHB - [Link] - ReadyBoost Hybrid Drive command buffer

SPX - <unknown> - Nwlnkspx transport

SQOS - <unknown> - Security quality of service in IO
SpXX - [Link] - Spaceport generic
SpXl - [Link] - Spaceport log
SpXp - [Link] - Spaceport parity context
SpXr - [Link] - spaceport repair
SpXs - [Link] - spaceport parity schedule
SpXb - [Link] - spaceport slab
SpXa - [Link] - spaceport sparse array
SpIc - [Link] - spaceport IO cache
SpIl - [Link] - spaceport IO column
SpIC - [Link] - spaceport IO counters
SpId - [Link] - spaceport IO raid
SpIs - [Link] - spaceport IO space
SpIt - [Link] - spaceport IO tier
SpBc - [Link] - spaceport SDB column
SpBd - [Link] - spaceport SDB drive
SpBe - [Link] - spaceport SDB extent
SpBm - [Link] - spaceport SDB metadata
SpBt - [Link] - spaceport SDB path
SpBp - [Link] - spaceport SDB pool
SpBg - [Link] - spaceport SDB pool config
SpBs - [Link] - spaceport SDB space
SpBn - [Link] - spaceport SDB space config
SpBr - [Link] - spaceport SDB record
SpBi - [Link] - spaceport SDB tier
SpSs - [Link] - spaceport store
SpSk - [Link] - spaceport store block
SpSb - [Link] - spaceport store buffer
SpSc - [Link] - spaceport store cache
SpSr - [Link] - spaceport store record
SpAt - [Link] - spaceport attributes
SpBf - [Link] - spaceport buffer
SpPK - [Link] - spaceport custom packet
SpDg - [Link] - spaceport destage context
SpDr - [Link] - spaceport drive
SpDd - [Link] - spaceport dump data
SpEL - [Link] - spaceport enclosure
SpLa - [Link] - spaceport lookaside
SpMp - [Link] - spaceport mapping
SpMl - [Link] - spaceport MDL
SpPt - [Link] - spaceport path
SpPl - [Link] - spaceport pool
SpPm - [Link] - spaceport prm
SpRg - [Link] - spaceport regen context
SpWk - [Link] - spaceport work

Sr?? - [Link] - System Restore file system filter driver

SrCo - [Link] - SR's control object
SrSC - [Link] - Stream contexts
SrDB - [Link] - Debug information for lookup blob
SrDL - [Link] - Device list
SrFE - [Link] - File information buffer
SrFN - [Link] - File name
SrHB - [Link] - Hash bucket
SrHH - [Link] - Hash header
SrHK - [Link] - Hash key
SrLB - [Link] - Log buffer
SrLC - [Link] - Logging context
SrLE - [Link] - Log entry
SrLT - [Link] - Lookup blob
SrMP - [Link] - Mount point information
SrOI - [Link] - Overwrite information
SrPC - [Link] - Persistant configuration information
SrRB - [Link] - Rename buffer
SrRG - [Link] - Logger context
SrRH - [Link] - Reparse data size
SrRR - [Link] - Registry information
SrSD - [Link] - Security data information
SrST - [Link] - Stream data information
SrTI - [Link] - Directory delete information
SrWI - [Link] - Work queue item

SslC - [Link] - SSL kernel mode client allocations

ST* - <unknown> - New MMC compliant storage drivers

Stac - <unknown> - Stack Trace Database - i386 checked and built with NTNOFPO=1
only
StEl - [Link] - PortpErrorInitRecords storport!
_STORAGE_TRACE_CONTEXT_INTERNAL.ErrorLogRecords
Strg - <unknown> - Dynamic Translated strings
Strm - <unknown> - Streams and streams transports allocations
StTc - [Link] - PortTraceInitTracing storport!_STORAGE_TRACE_CONTEXT_INTERNAL

svx? - [Link] - VHDX sharing among multiple Hyper-V guests

svxc - [Link] - CDB (SCSI) operations
svxC - [Link] - Create File processing
svxd - [Link] - SVHDX communications port
svxe - [Link] - Stored sense data errors
svxf - [Link] - File contexts
svxI - [Link] - Initiator lists
svxi - [Link] - Instance context
svxl - [Link] - Shared VHDX RTL
svxP - [Link] - Persistent Reservation - Registrations
svxp - [Link] - Persistent Reservation support for shared VHDX files
svxQ - [Link] - Persistent Reservation - Device context
svxq - [Link] - Persistent Reservation - Reservation Info
svxr - [Link] - File read operations
svxs - [Link] - Stream context
svxS - [Link] - Stream handle context
svxt - [Link] - Test Filter
svxv - [Link] - VHDMP/SVHDX interaction
svxw - [Link] - File write operations

SwMi - <unknown> - SWMidi KS filter (WDM Audio)

Symb - <unknown> - Symbolic link objects
Symt - <unknown> - Symbolic link target strings

SYPK - [Link] - Kernel mode system partition detection allocations

SYSA - <unknown> - Sysaudio (wdm audio)

TAPI - <unknown> - ntos\ndis\ndistapi

TcAN - [Link] - TCPIP App Name

TcAR - [Link] - TCP Abort Requests
TcBW - [Link] - TCP Bandwidth Allocations
TcCC - [Link] - TCP Create And Connect Tcb Pool
TcCM - [Link] - TCP Congestion Control Manager Contexts
TcCo - [Link] - TCP Compartment
TcCR - [Link] - TCP Connect Requests
TcCT - [Link] - TCP Connection Tuples
TcDD - [Link] - TCP Debug Delivery Buffers
TcDQ - [Link] - TCP Delay Queues
TcDR - [Link] - TCP Disconnect Requests
TcEW - [Link] - TCP Endpoint Work Queue Contexts
TcFC - [Link] - TCP Fastopen Cookies
TcFR - [Link] - TCP FineRTT Buffers
TcHT - [Link] - TCP Hash Tables
TcHo - [Link] - TCPIP Histogram
TcIn - [Link] - TCP Inputs
TcLS - [Link] - TCP Listener SockAddrs
TcLW - [Link] - TCP Listener Work Queue Contexts
TcpA - [Link] - TCP DMA buffers
TcpB - [Link] - TCP Offload Blocks
TcDM - [Link] - TCP Delayed Delivery Memory Descriptor Lists
TcDN - [Link] - TCP Delayed Delivery Network Buffer Lists
TcPC - [Link] - TCP Listener Pending Connections
TcpE - [Link] - TCP Endpoints
TTcb - [Link] - TCP Connections
TcpI - [Link] - TCP ISN buffers
TcpL - [Link] - TCP Listeners
TcpM - [Link] - TCP Offload Miscellaneous buffers
TcpN - [Link] - TCP Name Service Interfaces
TcOD - [Link] - TCP Offload Devices
TcpO - [Link] - TCP Offload Requests
TcpP - [Link] - TCP Processor Arrays
TcPt - [Link] - TCP Partitions
Tcpt - [Link] - TCP Timers
TcRA - [Link] - TCP Reassembly Data
TcRB - [Link] - TCP Reassembly Buffers
TcRD - [Link] - TCP Receive DPC Data
TcRe - [Link] - TCP Recovery Buffers
TcRH - [Link] - TCP Reassembly Headers
TcRL - [Link] - TCP Create And Connect Tcb Rate Limit Pool
TcRN - [Link] - TCP Random Number Generator Pool
TcRR - [Link] - TCP Receive Requests
TcRW - [Link] - TCP Receive Window Tuning Blocks
TcSa - [Link] - TCP Sack Data
TcSR - [Link] - TCP Send Requests
TcST - [Link] - TCP Syn TCBs
TcTW - [Link] - TCP Time Wait TCBs
TcUD - [Link] - TCP Urgent Delivery Buffers
TcWQ - [Link] - TCP TCB Work Queue Contexts
TcWS - [Link] - TCP Window Scaling Diagnostics
TcRF - [Link] - TCP Recent Connection Failure
TcTI - [Link] - TCP Traceroute Info
TcSk - [Link] - TCP Send Tracker
TcTx - [Link] - TCP Transmit
TrLB - [Link] - TCP RLedbat

TDIc - <unknown> - TDI resource

TDId - <unknown> - TDI resource
TDIe - <unknown> - TDI resource
TDIf - <unknown> - TDI resource
TDIg - <unknown> - TDI resource
TDIk - <unknown> - TDI resource
TDIu - <unknown> - TDI resource
TDIv - <unknown> - TDI resource

Tdat - <unknown> - NB Data

TdxC - [Link] - TDX Connections

TdCI - [Link] - TDX Connection Information
Tdxc - [Link] - TDX Control Channels
Tdxo - [Link] - TDX Device Objects
Tdx - [Link] - TDX Generic Buffers (Address, Entity information, Interface
change allocations)
TdxI - [Link] - TDX IO Control Buffers
TdxM - [Link] - TDX Message Indication Buffers
Tdxn - [Link] - TDX Net Addresses
TdxR - [Link] - TDX Received Data
Tdxp - [Link] - TDX Reserved Page Tables Entries
TdxB - [Link] - TDX Transport Layer Buffers
Tdxt - [Link] - TDX Transport Layer Clients
TdxP - [Link] - TDX Transport Layer Providers
Tdxm - [Link] - TDX Transport Layer TDI Mappings
TdxA - [Link] - TDX Transport Addresses
TdxT - [Link] - TDX Transport Provider Contexts

Tedd - [Link] - TCP/IP Event Data Descriptors

thdd - <unknown> - DirectDraw/3D handle manager table

Thre - nt!ps - Thread objects

Time - nt!ke - Timer objects

TmDn - nt!tm - Tm Dynamic Name

TmEn - nt!tm - Tm KENLISTMENT object
TmLo - nt!tm - Tm Log Entries
TmNo - nt!tm - Tm Notification
TmPa - nt!tm - Tm Propagate Argument
TmPb - nt!tm - Tm Propagation Buffer
TmPe - nt!tm - Tm Enlistment Pointers
TmPi - nt!tm - Tm Protocol Information
TmPo - nt!tm - Tm Propagation Output
TmPp - nt!tm - Tm Protocol Pointers
TmPr - nt!tm - Tm Protocol
TmPx - nt!tm - Tm Protocol Array
TmRi - nt!tm - Tm Recovery Information
TmRm - nt!tm - Tm KRESOURCEMANAGER object
TmRq - nt!tm - Tm Propagation Request
TmRr - nt!tm - Tm KTM_RESTART_RECORD
TmTm - nt!tm - Tm KTRANSACTIONMANAGER object
TmTx - nt!tm - Tm KTRANSACTION object

Tnbl - <unknown> - NB Lists

Tnbt - <unknown> - NB Pool

TNbl - [Link] - TCP Send NetBufferLists

Toke - nt!se - Token objects

TOBJ - [Link] - Topology object

TpWc - nt!ex - Threadpool minipacket context

TpWo - nt!ex - Threadpool worker factory objects

TQoS - [Link] - TL QoS Client Data

Tran - <unknown> - EXIFS Translate

Trcd - [Link] - NB Control Data

Tslc - [Link] - WFP TL Shim Layer Cache

Tscf - [Link] - WFP Filter Engine Cached Filter Block

TSBV - <unknown> - WDM mini driver for Toshiba 750 capture

TSdd - [Link] - RDPDD - Hydra Display Driver

TSch - [Link] - RDPWD - Hydra char conversion
TSic - [Link] - Terminal Services - ICA_POOL_TAG
TSlc - [Link] - RDPWD - Hydra Licensing
TSmc - <unknown> - PDMCS - Hydra MCS Protocol Driver
Tspk - [Link] - TS Package kernel mode client allocations
TSq - <unknown> - Terminal Services - Queue - TSQ_TAG
TSrp - [Link] - Terminal Services - RP_ALLOC_TAG
TSwd - [Link] - RDPWD - Hydra Winstation Driver

Ttnc - [Link] - WFP tunnel nexthop context

Tsmp - [Link] - TCP Send Memory Descriptor Lists

TSNb - [Link] - TCP Send NetBuffers
TTsp - [Link] - TCP TCB Sends

TtCo - <unknown> - TTCP Connections

TtcC - <unknown> - TTCP Controllers
TtcL - <unknown> - TTCP Listeners
TtcM - <unknown> - TTCP Mappings
TtcN - <unknown> - TTCP NPIs
TtcW - <unknown> - TTCP Work Items

Ttfd - <unknown> - TrueType Font driver

TTFC - <unknown> - Font file cache

Thrm - <unknown> - Thermal zone structure

Tun4 - <unknown> - Tunnel cache allocation for long file name
TunL - <unknown> - Tunnel cache lookaside-allocated elements
TunP - <unknown> - Tunnel cache oddsized pool-allocated elements
TunK - <unknown> - Tunnel cache temporary key value

TuSB - [Link] - Tunnel stack block

TWTa - [Link] - Echo Request Timer Table

TWTs - [Link] - BVT TW Generic Buffers

Txcl - [Link] - TXF_CLR_RESERVATION_CHUNK

Txdl - [Link] - TXF_DELETED_LINK
Txdr - [Link] - TXF_DEFAULT_READER_SECTION
Txf0 - [Link] - TxfCallbacks.c
Txf1 - [Link] - TxfTrans.c
Txfa - [Link] - NameForLogging
Txfb - [Link] - TXF_FCB_LIST_FOR_WALKUP
Txfc - [Link] - TXF_FCB
TxfD - [Link] - TxfData.c
TxFe - [Link] - TXF_LOGREC_FILE_NAME_OPERATION
TxfE - [Link] - TXF_TRANS_REQUEST
Txfe - [Link] - TXF_FCB_EXTENSION
TxfF - [Link] - TxfAllocateTxfFcbTableEntry
Txff - [Link] - TXF_LOGREC_SET_SHORT_NAME
Txfg - [Link] - TXF_LOGREC_FILE_NAME_OPERATION file create
TxfH - [Link] - TXF_TRANS_REQUEST
Txfh - [Link] - TXF_LOGREC_FILE_NAME_OPERATION delete file
Txfi - [Link] - TXF_FCB_INFO
Txfj - [Link] - TxfBuildIsolatedNormalizedName
TxfK - [Link] - LongFileNameAttribute
Txfk - [Link] - TxfScb->[Link]
Txfl - [Link] - TXF_FCB_CLEANUP
TxfM - [Link] - ShortNameAttribute
Txfm - [Link] - TXF FAST_MUTEX
Txfo - [Link] - TXF_FO
Txfq - [Link] - Txf quota block
TxfR - [Link] - TxfAllocateFullFilePathForChangeNotify
Txfs - [Link] - TXFS_START_RM_INFORMATION RmParameters
Txfu - [Link] - CLFS_MGMT_CLIENT_REGISTRATION
Txfv - [Link] - CLFS_INFORMATION LogFileInformation
TxfW - [Link] - KEVENT in TxfWaitForEnlistmentCompletion
Txfw - [Link] - CLFS_INFORMATION LogFileInformation
Txfx - [Link] - TXF_STREAM_ISO_INFO
Txgd - [Link] - TxfData global structure
Txis - [Link] - TXF_ISO_SNAPSHOT
Txlf - [Link] - TXF_FCB (large)
Txls - [Link] - TXF_CANCEL_LSN
Txre - [Link] - TXF_TOPS_RANGE_ENTRY
Txrm - [Link] - TXF_RMCB
Txrn - [Link] - TXF_NONPAGED_RMCB
Txsa - [Link] - Txf sorted array item
Txsc - [Link] - TXF_SCB
Txsp - [Link] - TXF_SAVEPOINT
Txsp - [Link] - TXF_SCB_PTR
TxTb - [Link] - Tops Bitmaps
Txtc - [Link] - TXF_TRANS_CANCEL_LIST_ENTRY
Txte - [Link] - TXF_RMCB_TABLE_ENTRY
Txtr - [Link] - TXF_TRANS (Txf transaction context)
Txts - [Link] - TXF_TRANS_SYNC
Txvc - [Link] - TXF_VCB
Txvd - [Link] - TXF_VSCB_TO_DEREF
Txvf - [Link] - TXF_VSCB_FILE_SIZES
Txvl - [Link] - TXF_VSCB
TXCT - [Link] - TxfAllocateTableSpace
TXHT - [Link] - TXF_HANDLE_TABLE
TXIS - [Link] - TxfAllocateTableSpace

Type - <unknown> - Type objects

U802 - [Link] - RNDIS USB 8023 driver

UCAM - <unknown> - USB digital camera library

Udf1 - [Link] - Udfs file set descriptor buffer

Udf2 - [Link] - Udfs volmume recognition sequence descriptor buffer
Udf3 - [Link] - Udfs volume descriptor sequence descriptor buffer
Udf4 - [Link] - Udfs logical volume integrity descriptor buffer
UdfB - [Link] - Udfs dynamic name buffer
UdfC - [Link] - Udfs CRC table
UdfD - [Link] - Udfs FID buffer for view spanning
UdfF - [Link] - Udfs nonpaged Fcb
UdfI - [Link] - Udfs IO context
UdfL - [Link] - Udfs IRP context lite (delayed close)
UdfN - [Link] - Udfs normalized full filename
UdfS - [Link] - Udfs short file name
UdfT - [Link] - Udfs generic table entry
Udfa - [Link] - Udfs AD buffer
Udfb - [Link] - Udfs IO buffer
Udfc - [Link] - Udfs IRP context
Udfd - [Link] - Udfs file Scb
Udfe - [Link] - Udfs enumeration match expression
Udff - [Link] - Udfs Fcb
Udfi - [Link] - Udfs directory Scb
Udfl - [Link] - Udfs Lcb
Udfn - [Link] - Udfs Nonpaged Scb
Udfp - [Link] - Udfs Pcb
Udfs - [Link] - Udfs Sparing Mcb
Udft - [Link] - Udfs CDROM TOC
Udfv - [Link] - Udfs Vpb
UdfV - [Link] - Udfs VMCB dirty sector bitmap
Udfx - [Link] - Udfs Ccb

UdAE - [Link] - UDP Activate Endpoints

UdCo - [Link] - UDP Compartment
UdEW - [Link] - UDP Endpoint Work Queue Contexts
UdMI - [Link] - UDP Message Indications
UDNb - [Link] - UDP NetBuffers
UdpA - [Link] - UDP Endpoints
UdpH - [Link] - UDP Headers
UdpI - [Link] - UDP Interface
UdPM - [Link] - UDP Partial Memory Descriptor Lists
UdpN - [Link] - UDP Name Service Interfaces
UdSM - [Link] - UDP Send Messages Requests
UNbl - [Link] - UDP NetBufferLists

Udp - <unknown> - Udp protocol (TCP/IP driver)

Ufsc - <unknown> - User FULLSCREEN
UHCD - <unknown> - Universal Host Controller (USB - Intel Controller)
UHUB - <unknown> - Universal Serial Bus Hub

Ul?? - [Link] - tags. Note: In-use tags are of the form "Ul??" or "Uc??".and
Free tags are of the form "uL??" or "uC??";
Uc?? - [Link] - i.e., the case of the leading "Ul" or "Uc" has been reversed.

Ucac - [Link] - Auth Cache Pool

UcCO - [Link] - Client Connection
Ucmp - [Link] - Multipart String Buffer
Ucre - [Link] - Receive Response
Ucrp - [Link] - Response App Buffer
Ucrq - [Link] - Request Pool
UcSc - [Link] - Common Server Information
UcSN - [Link] - Server name
UcSP - [Link] - Process Server Information
UcSp - [Link] - Sspi Pool
UcST - [Link] - Server info table
Uctd - [Link] - Response Tdi Buffer
Ucte - [Link] - Entity Pool
Ucto - [Link] - Tdi Objects Pool
UlAB - [Link] - Auxiliary Buffer
UlAO - [Link] - App Pool Object
UlAP - [Link] - App Pool Process
UlBL - [Link] - Binary Log File Entry
UlBO - [Link] - Outstanding i/o
UlCC - [Link] - Control Channel
UlCE - [Link] - Config Group Tree Entry
UlCH - [Link] - Config Group Tree Header
UlCI - [Link] - Config Group URL Info
UlCJ - [Link] - Config Group Object Pool
UlCK - [Link] - Chunk Tracker
UlCL - [Link] - Config Group LogDir
UlCl - [Link] - Connection RefTraceLog
UlCO - [Link] - Connection
UlCT - [Link] - Config Group Timestamp
UlCY - [Link] - Connection Count Entry
UlDB - [Link] - Debug
UlDC - [Link] - Data Chunks array
UlDO - [Link] - Disconnect Object
UlDR - [Link] - Deferred Remove Item
UlDT - [Link] - Debug Thread Pool
UlEP - [Link] - Endpoint
UlFA - [Link] - Force Abort Work Item
UlFC - [Link] - File Cache Entry
Ulfc - [Link] - Uri Filter Context
UlFD - [Link] - Noncached File Data
UlFP - [Link] - Filter Process
UlFR - [Link] - Dummy Filter Receive Buffer
UlFT - [Link] - Filter Channel
UlFU - [Link] - Full Tracker
UlFW - [Link] - Filter Write Tracker
UlHC - [Link] - Http Connection
UlHc - [Link] - Http Connection RefTraceLog
UlHL - [Link] - Internal Request RefTraceLog
UlHR - [Link] - Internal Request
UlHT - [Link] - Hash Table
UlHV - [Link] - Header Value
UlIC - [Link] - Irp Context
UlID - [Link] - Conn ID Table
UlIR - [Link] - Internal Response
UlLD - [Link] - Log Field
UlLF - [Link] - Log File Entry
UlLG - [Link] - Log Generic
UlLH - [Link] - Log File Handle
UlLL - [Link] - Log File Buffer
UlLS - [Link] - Ansi Log Data Buffer
UlLT - [Link] - Binary Log Data Buffer
UlNO - [Link] - NSGO Pool
UlNP - [Link] - Non-Paged Data
UlOE - [Link] - Endpoint OwnerRefTraceLog PoolTag
UlOR - [Link] - Owner RefTrace Signature
UlOT - [Link] - Opaque ID Table
UlPB - [Link] - APool Proc Binding
UlPL - [Link] - Pipeline
UlQF - [Link] - TCI Filter
UlQG - [Link] - TCI Generic
UlQI - [Link] - TCI Interface
UlQL - [Link] - TCI Flow
UlQT - [Link] - TCI Tracker
UlQW - [Link] - TCI WMI
UlRB - [Link] - Receive Buffer
UlRD - [Link] - Registry Data
UlRE - [Link] - Request Body Buffer
UlRP - [Link] - Request Buffer
UlRR - [Link] - Request Buffer References
UlRS - [Link] - Non-Paged Resource
UlRT - [Link] - RefTraceLog PoolTag
UlSC - [Link] - SSL Cert Data
UlSD - [Link] - Security Data
UlSl - [Link] - StringLog Buffer PoolTag
UlSL - [Link] - StringLog PoolTag
UlSO - [Link] - Site Counter Entry
UlSS - [Link] - Simple Status Item
UlTA - [Link] - Address Pool
UlTD - [Link] - UL_TRANSPORT_ADDRESS
UlTT - [Link] - Thread Tracker
UlUB - [Link] - URL Buffer
UlUC - [Link] - Uri Cache Entry
UlUH - [Link] - HTTP Unknown Header
UlUL - [Link] - URL
UlUM - [Link] - URL Map
UlVH - [Link] - Virtual Host
UlWC - [Link] - Work Context
UlWI - [Link] - Work Item

UndP - <unknown> - EXIFS Underlying Path

UMD? - [Link] - UMDF pool allocation

USBB - [Link] - Bluetooth USB minidriver
USBD - <unknown> - Universal Serial Bus Class Driver
UsbS - [Link] - USB Serial Driver

V2ic - [Link] - VHD2 external I/O allocation

V2io - [Link] - VHD2 internal I/O allocation
V2lg - [Link] - VHD2 core large allocation
V2rv - [Link] - VHD2 reserved VA mapping
V2sm - [Link] - VHD2 core allocation
V2sr - [Link] - VHD2 SRB range allocation
V2wi - [Link] - VHD2 work item
V2?? - [Link] - VHD2 pool allocation

Vad - nt!mm - Mm virtual address descriptors

VadF - nt!mm - VADs created by a FreeVM splitting
Vadl - nt!mm - Mm virtual address descriptors (long)
VadS - nt!mm - Mm virtual address descriptors (short)

Vbus - [Link] - Virtual Machine Bus Driver

VbuW - [Link] - Virtual Machine Bus Driver (WDF)
Vbxp - [Link] - Virtual Machine Bus Driver (cross partition)

VcCh - [Link] - Dynamic Virtual channel object

VcFl - [Link] - Dynamic Virtual file object
VcMn - [Link] - Dynamic Virtual manager object
VcSn - [Link] - Dynamic Virtual session object

VDM - nt!vdm - ntos\vdm

VdDr - [Link] - Virtual Machine Virtualization Infrastructure Driver
VdMm - [Link] - Virtual Machine Virtualization Infrastructure Driver (VSMM
service)
VdWd - [Link] - Virtual Machine Virtualization Infrastructure Driver (WDF)

vDMc - [Link] - Virtual Machine Dynamic Memory VSC Driver

vDMW - [Link] - Virtual Machine Dynamic Memory VSC Driver (WDF)

Vflt - [Link] - Virtual Machine Storage Filter Driver

VflW - [Link] - Virtual Machine Storage Filter Driver (WDF)

VdPN - [Link] - Video display mode management

Vepp - nt!Vf - Verifier Pool Tracking information
VfAT - nt!Vf - Verifier AVL trees
VfIT - nt!Vf - Verifier Import Address Table information
VfPT - nt!Vf - Verifier Allocate/Free Pool stack traces
VfUs - nt!Vf - Memory allocated by a call to IoSetCompletionRoutineEx.
Vfwi - nt!Vf - IO_WORKITEM allocated by I/O verifier version of
IoAllocateWorkItem
ViIn - nt!Vf - Verifier Internal Tag for pool tracking
VMdl - nt!Vf - MDL allocated by I/O verifier version of IoAllocateMdl
VNod - nt!Vf - Deadlock Verifier nodes
VRes - nt!Vf - Deadlock Verifier resources
VStr - nt!Vf - String buffer allocated by the Driver Verifier version of Rtl
String APIs

VHDa - [Link] - VHD generic allocator

VHDA - [Link] - VHD generic allocator pool
VHDb - [Link] - VHD Block Allocation Table
VHDf - [Link] - VHD file entry
VHDh - [Link] - VHD header
VHDi - [Link] - VHD IO Range
VHDI - [Link] - VHD IO Range pool
VHDl - [Link] - VHD LUN
VHDm - [Link] - VHD bitmap
VHDn - [Link] - VHD filename
VHDo - [Link] - VHD footer
VHDp - [Link] - VHD filepath
VHDr - [Link] - VHD read buffer
VHDs - [Link] - VHD sector map
VHDS - [Link] - VHD symbolic link
VHDt - [Link] - VHD tracking information
VHDw - [Link] - VHD work item
VHDy - [Link] - VHD dynamic header
VHD? - [Link] - VHD allocation

VHde - [Link] - Virtual Machine USB Hub Driver (descriptor)

VHif - [Link] - Virtual Machine USB Hub Driver (interface)
VHps - [Link] - Virtual Machine USB Hub Driver (Pnp string)
VHrc - [Link] - Virtual Machine USB Hub Driver (request context)
VHtx - [Link] - Virtual Machine USB Hub Driver (text)
VHub - [Link] - Virtual Machine USB Hub Driver (Bus)
VHur - [Link] - Virtual Machine USB Hub Driver (URB)
VHuW - [Link] - Virtual Machine USB Hub Driver (WDF)

Vi01 - [Link] - Video memory manager global alloc

Vi02 - [Link] - Video memory manager local alloc
Vi03 - [Link] - Video memory manager alloc
Vi06 - [Link] - Video memory manager segment
Vi07 - [Link] - Video memory manager segment range
Vi08 - [Link] - Video memory manager device
Vi09 - [Link] - Video memory manager process
Vi0a - [Link] - Video memory manager global alloc VGPU
Vi10 - [Link] - Video memory manager process heap
Vi11 - [Link] - Video memory manager process heap block
Vi12 - [Link] - Video memory manager process heap alloc
Vi13 - [Link] - Video memory manager process adapter info
Vi14 - [Link] - Video memory manager process commitment info
Vi15 - [Link] - Video memory manager global state
Vi16 - [Link] - Video memory manager command state
Vi17 - [Link] - Video memory manager pool
Vi18 - [Link] - Video memory manager pool block
Vi19 - [Link] - Video memory manager pool block array
Vi20 - [Link] - Video memory manager commitment info
Vi21 - [Link] - Video memory manager segment descriptor
Vi22 - [Link] - Video memory manager DMA buffer
Vi23 - [Link] - Video memory manager DMA buffer allocation table
Vi24 - [Link] - Video memory manager DMA buffer allocation list
Vi25 - [Link] - Video memory manager DMA buffer patch location list
Vi26 - [Link] - Video memory manager protected allocation
Vi27 - [Link] - Video memory manager resource list
Vi28 - [Link] - Video memory manager mutex
Vi29 - [Link] - Video memory manager DMA pool
Vi30 - [Link] - Video memory manager slot table
Vi31 - [Link] - Video memory manager dummy page
Vi32 - [Link] - Video memory manager DMA buffer private data
Vi35 - [Link] - Video memory manager MDL
Vi36 - [Link] - Video memory manager pages history
Vi37 - [Link] - Video memory manager DMA buffer global alloc table
Vi38 - [Link] - Video memory manager allocation fence array
Vi39 - [Link] - Video memory manager migration table
Vi40 - [Link] - Video memory manager migration table lock
Vi41 - [Link] - Video memory manager process budget info
Vi42 - [Link] - Video memory manager global alloc nonpaged
Vi43 - [Link] - Video memory manager async operation
Vi44 - [Link] - Video memory manager fence storage
Vi45 - [Link] - Video memory manager CPU host aperture
Vi46 - [Link] - Video memory manager CPU host aperture page
Vi47 - [Link] - Video memory manager worker thread
Vi48 - [Link] - Video memory manager paging queue
Vi49 - [Link] - Video memory manager GPU VA
Vi50 - [Link] - Video memory manager physical adapter
Vi51 - [Link] - Video memory manager set VPR work item
Vi52 - [Link] - Video memory manager paging history
Vi53 - [Link] - Video memory manager page table
Vi54 - [Link] - Video memory manager PTE array
Vi55 - [Link] - Video memory manager VA range
Vi56 - [Link] - Video memory manager page directory
Vi57 - [Link] - Video memory manager PDE array
Vi58 - [Link] - Video memory manager release resource command
Vi59 - [Link] - Video memory manager deferred unlock
Vi5a - [Link] - Video memory manager PTE owner data
Vi5b - [Link] - Video memory manager partition
Vi5c - [Link] - Video memory manager partition adapter info
Vi5d - [Link] - Video memory manager cross adapter alloc
Vi5e - [Link] - Video memory manager scheduling log
Vi5f - [Link] - Video scheduler async operation
Vi60 - [Link] - Video memory manager cross adapter data
Vi61 - [Link] - Video memory manager context alloc
Via0 - [Link] - GPU scheduler adapter state
Via1 - [Link] - GPU scheduler node state
Via2 - [Link] - GPU scheduler process state
Via3 - [Link] - GPU scheduler device state
Via4 - [Link] - GPU scheduler context state
Via5 - [Link] - GPU scheduler queue packet
Via6 - [Link] - GPU scheduler DMA packet
Via7 - [Link] - GPU scheduler VSync cookie
Via8 - [Link] - GPU scheduler GPU sync object
Via9 - [Link] - GPU scheduler present info
Viaa - [Link] - GPU scheduler history buffer
Viab - [Link] - GPU scheduler periodic frame notification state
Viac - [Link] - GPU scheduler hardware context
Viad - [Link] - GPU scheduler hardware queue
Viae - [Link] - GPU scheduler monitored fence
Viaf - [Link] - GPU scheduler sync point
Vib0 - [Link] - GPU scheduler pending IFlip token
Vib1 - [Link] - GPU scheduler flip queue entry

VidL - [Link] - VideoPort Allocation List (FDO_EXTENSION)

VidR - [Link] - VideoPort Allocation on behalf of Miniport

ViMm - [Link] - Video memory manager

virt - [Link] - Virtual Machine Manager (VPC/VS)
ViSh - [Link] - Video scheduler

Vk?? - [Link] - Hyper-V VMBus KMCL driver

Vkin - [Link] - Hyper-V VMBus KMCL driver (incoming packets)
Vkou - [Link] - Hyper-V VMBus KMCL driver (outgoing packets)

VM?? - [Link] - Volume Manager

VM - [Link] - General allocations

Vm?? - [Link] - Volume Manager Extension

Vm - [Link] - General allocations
VmBl - [Link] - Raw configuration blocks
VmBu - [Link] - I/O buffers
VmCc - [Link] - Configuration copies
VmCo - [Link] - Configurations
VmCp - [Link] - Copies
VmCr - [Link] - Completion routine contexts
VmDc - [Link] - Device changes
VmDd - [Link] - Disk devices
VmDh - [Link] - Disk headers
VmLa - [Link] - Drive layouts
VmLb - [Link] - Log blocks
VmLc - [Link] - Log copies
VmLo - [Link] - Logs
VmLr - [Link] - Log raw content
VmMm - [Link] - Mirror emergency mappings
VmNe - [Link] - Notification entries
VmOb - [Link] - I/O objects
VmP0 - [Link] - Packets
VmP1 - [Link] - Small packets
VmP2 - [Link] - Large packets
VmP3 - [Link] - Huge packets
VmPa - [Link] - Packs
VmPd - [Link] - Physical disks
VmPs - [Link] - Arrays of packets
VmRb - [Link] - Raw record buffers
VmRc - [Link] - Raw configurations
VmRe - [Link] - Records
VmRi - [Link] - Record information
VmRm - [Link] - RAID-5 emergency mappings
VmRr - [Link] - Raw records
VmTa - [Link] - I/O tasks
VmTc - [Link] - Table of contents
VmTe - [Link] - Table of contents entries
VmTx - [Link] - Transactions
VmUe - [Link] - User entries
VmVd - [Link] - Volume devices
VmWi - [Link] - Work items

VmbK - [Link] - Virtual Machine Bus Kernel Mode Client Library

VmCh - [Link] - Virtual Machine Network Chimney Library

VmFP - [Link] - Virtual Filtering Platform driver

VMhd - [Link] - Virtual Machine Input VSC Driver

VMIN - [Link] - Virtual Wi-Fi miniport

Vmsc - [Link] - Virtual Machine Storage VSC Channel Library

VNC - [Link]/[Link] - Virtual Machine Network VSC Driver

VNCm - [Link]/[Link] - Virtual Machine Network VSC Driver (RNDIS
miniport driver library, message or object)
VNCn - [Link]/[Link] - Virtual Machine Network VSC Driver (NBL)
VNCr - [Link]/[Link] - Virtual Machine Network VSC Driver (RNDIS
message context signature)
VNCW - [Link]/[Link] - Virtual Machine Network VSC Driver (WDF)

VoS? - [Link] - VolSnap (Volume Snapshot Driver)

VoSa - [Link] - Application information allocations
VoSb - [Link] - Buffer allocations
VoSc - [Link] - Snapshot context allocations
VoSd - [Link] - Diff area volume allocations
VoSf - [Link] - Diff area file allocations
VoSh - [Link] - Bit history allocations
VoSi - [Link] - Io status block allocations
VoSm - [Link] - Bitmap allocations
VoSo - [Link] - Old heap entry allocations
VoSp - [Link] - Pnp id allocations
VoSr - [Link] - Device relations allocations
VoSs - [Link] - Short term allocations
VoSt - [Link] - Temp table allocations
VoSw - [Link] - Work queue allocations
VoSx - [Link] - Dispatch context allocations

Vpb - <unknown> - Io, vpb's

VPrs - [Link] - Virtual Machine Storage Passthrough Parser Driver

Vprt - [Link] - Video port for legacy (pre-Vista) display drivers

VraP - <unknown> - parallel class driver

Vtfd - <unknown> - Font file/context
Vrdc - [Link] - Virtual Machine Network VSC Driver (NDIS 6, RNDIS miniport
driver library, chimney neighbor or path context)
Vrdt - [Link] - Virtual Machine Network VSC Driver (NDIS 6, RNDIS miniport
driver library, chimney TCP context)
Vrdi - [Link] - Virtual Machine Network VSC Driver (NDIS 6, RNDIS miniport
driver library, chimney initiate offload)

VSAB - [Link] - Virtual Machine Storage VSP Utility Library

VsAT - [Link] - Virtual Machine Network Switch Driver (address table)

VsC4 - [Link] - Virtual Machine Network Switch Driver (chimney path4 context)
VsC6 - [Link] - Virtual Machine Network Switch Driver (chimney path6 context)
VsCH - [Link] - Virtual Machine Network Switch Driver (chimney handle)
VsCN - [Link] - Virtual Machine Network Switch Driver (chimney neighbor
context)
VsCP - [Link] - Virtual Machine Network Switch Driver (chimney NBL context)
VsCs - [Link] - Virtual Machine Network Switch Driver (configuration store)
VsCT - [Link] - Virtual Machine Network Switch Driver (chimney TCP context)
VsDI - [Link] - Virtual Machine Network Switch Driver (direct I/O NIC)
VsNb - [Link] - Virtual Machine Network Switch Driver (NBL)
VsOb - [Link] - Virtual Machine Network Switch Driver (object allocation)
VsRD - [Link] - Virtual Machine Network Switch Driver (RNDIS device)
VsRm - [Link] - Virtual Machine Network Switch Driver (routing)
VsRT - [Link] - Virtual Machine Network Switch Driver (routing table)
VssB - [Link] - Virtual Machine Network Switch Driver (balance)
VssM - [Link] - Virtual Machine Network Switch Driver (miniport NIC)
VssP - [Link] - Virtual Machine Network Switch Driver (protocol NIC)
VsSw - [Link] - Virtual Machine Network Switch Driver
VsSW - [Link] - Virtual Machine Network Switch Driver (WDF)
VsVN - [Link] - Virtual Machine Network Switch Driver (VM NIC)
Vsvq - [Link] - Virtual Machine Network Switch Driver (VMQ)

VSt - [Link] - Virtual Machine Storage VSP Driver

VSta - [Link] - Virtual Machine Storage VSP Driver (adapter)
VStb - [Link] - Virtual Machine Storage VSP Driver (balance)
VStd - [Link] - Virtual Machine Storage VSP Driver (device)
VStp - [Link] - Virtual Machine Storage VSP Driver (parser)
VStu - [Link] - Virtual Machine Storage VSP Driver (authentication)
VStW - [Link] - Virtual Machine Storage VSP Driver (WDF)

VSVL - [Link] - Virtual Machine Synthetic Video Display Driver

vS3W - [Link] - Virtual Machine Emulated S3 Device Cap Driver (WDF)

vTDR - [Link] - Video timeout detection/recovery

VubH - [Link] - Virtual Machine USB Bus Driver

VubW - [Link] - Virtual Machine USB Bus Driver (WDF)

VuCH - [Link] - Virtual Machine USB Connector Driver (connector handle)

VuCP - [Link] - Virtual Machine USB Connector Driver (virtual hub ports)
VuCU - [Link] - Virtual Machine USB Connector Driver (connector URB)
VuCW - [Link] - Virtual Machine USB Connector Driver (WDF)

VusW - [Link] - Virtual Machine USB Stub Driver (WDF)

VVpc - [Link] - Virtual Machine Storage VHD Parser Driver (context)

VVpp - [Link] - Virtual Machine Storage VHD Parser Driver (parser)
VWFB - [Link] - Virtual Wi-Fi Bus Driver
VWFF - [Link] - Virtual Wi-Fi Filter Driver (object allocation)
VWnd - [Link] - Virtual Wi-Fi Filter Driver (requests)

Wait - nt!io - WaitCompletion Packets

Wan? - <unknown> - NdisWan Tags (PPP Framing module for Remote Access)
WanA - <unknown> - BundleCB
WanB - <unknown> - ProtocolCB/LinkCB
WanC - <unknown> - DataDesc
WanD - <unknown> - WanRequest
WanE - <unknown> - LoopbackDesc
WanG - <unknown> - MiniportCB
WanH - <unknown> - OpenCB
WanI - <unknown> - IoPacket
WanJ - <unknown> - LineUpInfo
WanK - <unknown> - Unicode String Buffer
WanL - <unknown> - Protocol Table
WanM - <unknown> - Connection Table
WanN - <unknown> - NdisPacketPool Desc
WanQ - <unknown> - DataBuffer
WanR - <unknown> - WanPacket
WanS - <unknown> - AfCB/SapCB/VcCB
WanT - <unknown> - Transform Driver
WanV - <unknown> - RC4 Encryption Context
WanW - <unknown> - SHA Encryption
WanX - <unknown> - Send Compression Context
WanY - <unknown> - Recv Compression Context
WanZ - <unknown> - Protocol Specific Info

Wdm - <unknown> - WDM

WDMA - <unknown> - WDM Audio

Wdog - [Link] - Watchdog object/context allocation

Wfp? - [Link] - Windows Filtering Platform Tags

WfpF - [Link] - WFP filters
WfpM - [Link] - WFP filter match buffers
WfpI - [Link] - WFP index
WfpH - [Link] - WFP hash
WfpR - [Link] - WFP RPC
WfpC - [Link] - WFP callouts
WfpS - [Link] - WFP startup
WfpL - [Link] - WFP fast cache
WfpE - [Link] - WFP extension
Wfpn - [Link] - WFP NBL info container

WfTi - <unknown> - WFP timer

WfSt - <unknown> - WFP string

werk - <unknown> - WER kernel mode reporting allocation

WKSM - [Link] - WER kernel mode reporting allocation of WERSVC message

WimF - [Link] - WIM Boot Filter

Wl2l - [Link] - WFP L2 LWF context

Wl2g - [Link] - WFP L2 generic block
Wl2c - [Link] - WFP L2 classify cache
Wl2f - [Link] - WFP L2 flow
Wl2n - [Link] - WFP L2 NBL context

WlBs - [Link] - Writelog block store

WlFc - [Link] - Writelog fsd context
WlGc - [Link] - Writelog global context
WlIb - [Link] - Writelog I/O buffer
WlLb - [Link] - Writelog library buffer
WlCb - [Link] - Writelog checkpoint buffer
WlPw - [Link] - Writelog planned write
WlMh - [Link] - Writelog marker header
WlMp - [Link] - Writelog marker payload
WlDt - [Link] - Writelog drain target

Wmii - <unknown> - Wmi InstId chunks

Wmij - <unknown> - Wmi GuidMaps
Wmim - <unknown> - Wmi KM to UM Notification Buffers
Wmin - <unknown> - Wmi Notification Slot Chunks
Wmip - <unknown> - Wmi General purpose allocation
Wmiq - <unknown> - Wmi NBQ Blocks
Wmis - <unknown> - Wmi SysId allocations
Wmit - <unknown> - Wmi Trace
Wmiw - <unknown> - Wmi Notification Waiting Buffers, in paged queue waiting for
IOCTL
Wmiz - <unknown> - Wmi MCA Insertions debug code

WmiA - <unknown> - Wmi ACPI mapper

WmiC - <unknown> - Wmi Create Pump Thread Work Item
WmiD - <unknown> - Wmi Registration DataSouce
WmiG - <unknown> - Allocation of WMIGUID
WmiI - <unknown> - Wmi Instance Names
WmiL - <unknown> - WmiLIb
WmiN - <unknown> - Wmi Notification Notification Packet
WmiR - <unknown> - Wmi Registration info blocks

WmDS - <unknown> - Wmi DataSource chunks

WmGE - <unknown> - Wmi GuidEntry chunks
WmIS - <unknown> - Wmi InstanceSet chunks
WmMR - <unknown> - Wmi MofResouce chunks

WMca - <unknown> - WMI MCA Handling

Wnf - nt!wnf - Windows Notification Facility

WofD - [Link] - Wof directory buffer

WofF - [Link] - Wof file context
Woff - [Link] - Wof extended file context
WofG - [Link] - Wof general allocation
WofH - [Link] - Wof handle context
WofI - [Link] - Wof inflate buffer
WofS - [Link] - Wof stream context
Woft - [Link] - Wof transaction context
WofV - [Link] - Wof volume context

wpcf - [Link] - Wim config file

wpci - [Link] - Wim integrity
wpct - [Link] - Wim chunk table
wpcx - [Link] - Wim IO context
wpdw - [Link] - Wim decompression workspace
wpgn - [Link] - Wim general
wppm - [Link] - Wim IO parameters
wprd - [Link] - Wim small read buffer
wpRD - [Link] - Wim large read buffer
wprt - [Link] - Wim resource table
wpvo - [Link] - Wim volume overlay
wpwf - [Link] - Wim file
wpwi - [Link] - Wim work item
wpxp - [Link] - Wim xpress context

Wrp? - <unknown> - WanArp Tags (ARP module for Remote Access)

Wrpa - <unknown> - WAN_ADAPTER_TAG

Wrpi - <unknown> - WAN_INTERFACE_TAG
Wrpr - <unknown> - WAN_REQUEST_TAG
Wrps - <unknown> - WAN_STRING_TAG
Wrpc - <unknown> - WAN_CONN_TAG
Wrpw - <unknown> - WAN_PACKET_TAG
Wrpf - <unknown> - FREE_TAG (checked builds only)
Wrpd - <unknown> - WAN_DATA_TAG
Wrph - <unknown> - WAN_HEADER_TAG
Wrpn - <unknown> - WAN_NOTIFICATION_TAG

WSCD - [Link] - WFPSampler Callout Driver

WSKs - [Link] - WSK socket

WSNP - [Link] - WFPSampler Callout Driver NDIS Pool

WtdA - [Link] - WTD ACS implementation

WtdE - [Link] - WTD event queue
WtdF - [Link] - WTD chipc implementation
WtdJ - [Link] - WTD event stats
WtdK - [Link] - WTD KMDF framework
WtdL - [Link] - WTD chipc dll scan
WtdN - [Link] - WTD WFP implementation

WvCy - <unknown> - WDM Audio WaveCyc port

WvPc - <unknown> - WDM Audio WavePCI port

xCVD - [Link] - AsyncEngineContext Tag

XDR? - [Link] - NFS (Network File System) XDR driver

xSMB - [Link] - IFSKIT sample SMB mini-redirector

XWan - <unknown> - ndis\usrwan allocations

Xtra - <unknown> - EXIFS Extra Create

ZsaB - <unknown> - EXIFS ZeroBlock

Adbe - [Link] - GDITAG_ATM_FONT
Bmfd - [Link] - GDITAG_BMP_FONT
Dfsm - [Link] - GDITAG_ENG_EVENT
DwmL - win32k!HwndLookupAllocTableData - GDITAG_DWM_HWND_LOOKUP
DWMt - [Link] - GDITAG_DWM_SENDTOUCHCONTACTS
DWMv - [Link] - GDITAG_DWM_VALIDATION
Dxdd - win32k!DxLddmSharedPrimaryLockNotification - GDITAG_LOCKED_PRIMARY
Gill - [Link] - GDITAG_ISOLATED_LOOKASIDE_LIST
Gila - [Link] -
GDITAG_ISOLATED_LOOKASIDE_LIST_ALLOCATION
Gadb - win32k!XDCOBJ::bAddColorTransform - GDITAG_DC_COLOR_TRANSFORM
Gadd - [Link] - GDITAG_DC_FONT
Galp - win32k!AlphaScanLineBlend - GDITAG_ALPHABLEND
Gapc - win32kfull!UmfdQueueTryUnzombifyPffApc - GDITAG_UNZOMBIFY_APC
Gbaf - [Link] - GDITAG_BRUSH_FREELIST
Gbdl - win32k!BRUSH::bAddIcmDIB - GDITAG_ICM_DIB_LIST
Gcac - [Link] - GDITAG_FONTCACHE
Gcsl - win32k!InitializeScripts - GDITAG_SCRIPTS
Gcwc - win32k!ConvertToAndFromWideChar - GDITAG_CHAR_TO_WIDE_CHAR
Gdbr - win32k!BRUSHOBJ_pvAllocRbrush - GDITAG_RBRUSH
Gdcf - [Link] - GDITAG_DC_FREELIST
GDcs - win32k!GreDwmStartup - GDITAG_DWMSTATE
Gdev - [Link] - GDITAG_DEVMODE
Gdfm - win32k!DoFontManagement - GDITAG_HGLYPH_ARRAY
Gdrs - [Link] - GDITAG_DRVSUP
Gdrv - win32k!EngCreateClip - GDITAG_CLIPOBJ
Gdtd - win32k!GreAcquireSemaphoreAndValidate - GDITAG_SEMAPHORE_VALIDATE
Gdwd - [Link] - GDITAG_WATCHDOG
Gebr - win32k!EngRealizeBrush - GDITAG_ENGBRUSH
Gedd - [Link] - GDITAG_ENUM_DISPLAY_DEVICES
Gedg - win32k!bFill - GDITAG_EDGE
gEdg - win32k!bTriangleMesh - GDITAG_TRIANGLEDATA
Geto - [Link] - GDITAG_TEXTOUT
Gfda - win32k!UmfdAllocation::Create - GDITAG_UMFD_ALLOCATION
Gfdf - win32k!InitializeDefaultFamilyFonts - GDITAG_FONT_DEFAULT_FAMILY
Gffv - [Link] - GDITAG_FONTFILEVIEW
Gfid - [Link] - GDITAG_UNIVERSAL_FONT_ID
GFil - [Link] - GDITAG_FILEPATH
Gfil - [Link] - GDITAG_MAPFILE
GFld - [Link] - GDITAG_FLOODFILL
Gfnt - win32k!RFONTOBJ::bRealizeFont - GDITAG_RFONT
Gfsb - [Link] - GDITAG_FONT_SUB
Gfsf - win32k!bInitStockFontsInternal - GDITAG_FONT_STOCKFONT
Gfsm - win32k!GreCreateFastMutex - GDITAG_FAST_MUTEX
Gful - [Link] - GDITAG_FULLSCREEN
Gfvi - win32k!bUnloadAllButPermanentFonts - GDITAG_FONTVICTIM
Ggb - win32k!RFONTOBJ::pgbCheckGlyphCache - GDITAG_GLYPHBLOCK
Ggdv - [Link] - GDITAG_GDEVICE
Ggls - [Link] - GDITAG_GLYPHSET
Ggly - [Link] - GDITAG_HGLYPH
Gh?: - [Link] - GDITAG_HMGR_LFONT_TYPE
Gh?; - [Link] - GDITAG_HMGR_RFONT_TYPE
Gh?@ - [Link] - GDITAG_HMGR_BRUSH_TYPE
Gh?> - [Link] - GDITAG_HMGR_ICMCXF_TYPE
Gh?0 - [Link] - GDITAG_HMGR_DEF_TYPE
Gh?1 - [Link] - GDITAG_HMGR_DC_TYPE
Gh?4 - [Link] - GDITAG_HMGR_RGN_TYPE
Gh?5 - [Link] - GDITAG_HMGR_SURF_TYPE
Gh?6 - [Link] - GDITAG_HMGR_CLIENTOBJ_TYPE
Gh?7 - [Link] - GDITAG_HMGR_PATH_TYPE
Gh?8 - [Link] - GDITAG_HMGR_PAL_TYPE
Gh?9 - [Link] - GDITAG_HMGR_ICMLCS_TYPE
Gh?A - [Link] - GDITAG_HMGR_UMPD_TYPE
Gh?B - [Link] - GDITAG_HMGR_HLSURF_TYPE
Gh?E - [Link] - GDITAG_HMGR_META_TYPE
Gh?L - [Link] - GDITAG_HMGR_DRVOBJ_TYPE
Gh?? - [Link] - GDITAG_HMGR_SPRITE_TYPE
Gh00 - [Link] - GDITAG_HMGR_START
Ghab - win32k!FHOBJ::bAddPFELink - GDITAG_PFE_HASHBUCKET
Ghas - win32k!FHMEMOBJ::FHMEMOBJ - GDITAG_PFE_HASHTABLE
Ghml - [Link] - GDITAG_HMGR_LOCK
Ghtc - win32k!bSetHTSrcSurfInfo - GDITAG_HALFTONE_COLORTRIAD
Ghtm - [Link] - GDITAG_HMGR_TEMP
Gi2c - [Link] - GDITAG_DDCCI
Gicm - [Link] - GDITAG_ICM
Giga - [Link] - GDITAG_PRIVATEGAMMA
Giog - [Link] - GDITAG_COMPOSEDGAMMA
Gkbm - [Link] - GDITAG_KMODE_BITMAP
Gla: - [Link] - GDITAG_HMGR_LOOKASIDE_LFONT_TYPE
Gla; - [Link] - GDITAG_HMGR_LOOKASIDE_RFONT_TYPE
Gla@ - [Link] - GDITAG_HMGR_LOOKASIDE_BRUSH_TYPE
Gla0 - [Link] - GDITAG_HMGR_LOOKASIDE_START
Gla1 - [Link] - GDITAG_HMGR_LOOKASIDE_DC_TYPE
Gla4 - [Link] - GDITAG_HMGR_LOOKASIDE_RGN_TYPE
Gla5 - [Link] - GDITAG_HMGR_LOOKASIDE_SURF_TYPE
Gla8 - [Link] - GDITAG_HMGR_LOOKASIDE_PAL_TYPE
Glas - [Link] - GDITAG_SCAN_LOOKASIDE_LIST
Gldv - [Link] - GDITAG_LDEV
Glid - win32k!GetLanguageID - GDITAG_LOCALEINFO
Glnk - win32k!FHOBJ::bAddPFELink - GDITAG_PFE_LINK
Gmap - win32k!InitializeFontSignatures - GDITAG_FONT_MAPPER
Gmso - win32k!MULTISORTBLTORDER::MULTISORTBLTORDER - GDITAG_DISPURF_SORT
Gmul - win32k!MULTIFONT::MULTIFONT - GDITAG_MULTIFONT
Gnls - [Link] - GDITAG_NLS
Gogl - win32k!iOpenGLExtEscape - GDITAG_OPENGL
GOPM - [Link] - GDITAG_OPM
GPal - [Link] - GDITAG_PALETTE
Gpan - [Link] - GDITAG_PANNING_PDEV
Gpat - [Link] - GDITAG_PATHOBJ
Gpfe - win32k!PFFMEMOBJ::bAllocPFEData - GDITAG_PFF_INDEXES
Gpff - [Link] - GDITAG_PFF
Gpft - win32k!pAllocateAndInitializePFT - GDITAG_PFT
Gpgb - win32k!EngPlgBlt - GDITAG_PLGBLT_DATA
Gpid - win32k!NtGdiSetPUMPDOBJ - GDITAG_PRINTCLIENTID
Gppo - win32k!XCLIPOBJ::ppoGetPath - GDITAG_CLIP_PATHOBJ
Gppt - win32k!PROXYPORT::PROXYPORT - GDITAG_PROXYPORT
Gpre - win32k!pSpCreatePresent - GDITAG_PRESENT
Gqnk - win32k!bComputeQuickLookup - GDITAG_LFONT_QUICKLOOKUP
Grgb - [Link] - GDITAG_PALETTE_RGB_XLATE
Grgn - [Link] - GDITAG_REGION
Gsem - [Link] - GDITAG_SEMAPHORE
Gsp - win32k!pSpCreateSprite - GDITAG_SPRITE
Gspm - [Link] - GDITAG_METASPRITE
Gspr - [Link] - GDITAG_SPRITESCAN
Gsta - [Link] - GDITAG_STACKTRACE
Gsth - [Link] - GDITAG_STRETCHBLT
Gsty - win32k!GreExtCreatePen - GDITAG_PENSTYLE
Gsux - [Link] - GDITAG_SFM
Gtmp - [Link] - GDITAG_TEMP
GTmp - win32k!AllocFreeTmpBuffer - GDITAG_TEMP_THREADLOCK
Gtmw - win32k!vIFIMetricsToTextMetricW - GDITAG_TEXTMETRICS
Gtvp - win32k!PFFOBJ::bAddPvtData - GDITAG_PFF_DATA
Gtvt - win32k!bTriangleMesh - GDITAG_TRIANGLE_MESH
Gtxt - [Link] - GDITAG_TEXT
Gubm - [Link] - GDITAG_UMODE_BITMAP
GUma - win32k!GDIEngUserMemAllocNodeAlloc - GDITAG_ENG_USER_MEM_ALLOC_TABLE
Gump - [Link] - GDITAG_UMPD
Gvds - win32k!MulEnablePDEV - GDITAG_HDEV
GVdv - [Link] - GDITAG_VDEV
GVms - win32k!MulSaveScreenBits - GDITAG_MULTISAVEBITS
GVsf - win32k!MulCreateDeviceBitmap - GDITAG_MDSURF
Gwnd - [Link] - GDITAG_WNDOBJ
Gxlt - [Link] - GDITAG_PXLATE
Gxpd - win32k!XUMPDOBJ::XUMPDOBJ - GDITAG_UMPDOBJ
knlf - [Link] - GDITAG_FONT_LINK
PASf - [Link] - GDITAG_PANNING_SURFACE
PSlo - [Link] - GDITAG_PANNING_SHADOWLOCK
Ssrl - [Link] - GDITAG_SINGLEREADERLOCK
TTFC - [Link] - GDITAG_TT_FONT_CACHE
Ttfd - [Link] - GDITAG_TT_FONT
Vtfd - [Link] - GDITAG_VF_FONT
W32l - win32k!W32PIDLOCK::vInit - GDITAG_W32PIDLOCK
SFMb - win32k!SfmTokenArray::EnsureTokenBufferSize - GDITAG_TOKENARRAY
Gnff - [Link] - GDITAG_NETWORKED_FONT_FILE_TABLE
Gtff - [Link] - GDITAG_TRUSTED_FONT_FILE_TABLE
Gala - [Link] - GDITAG_ADAPTER_LUID_ARRAY
FDpd - [Link] - GDITAG_UMFD_PDEV
FDev - [Link] - GDITAG_UMFD_EVENT
FDUm - [Link] - GDITAG_UMFD_UM_BUFFER
FDtl - [Link] - GDITAG_UMFD_TLS
FDrq - [Link] - GDITAG_UMFD_REQUEST
GFdk - [Link] - GDITAG_UMFD_KERNEL_ALLOCATION
UHFF - [Link] - GDITAG_UMFD_HFF
FDat - [Link] - GDITAG_UMFD_GLYPHATTRS
GMFF - [Link] - GDITAG_FONT_MAPPER_FAMILY_FALLBACK
GFIC - [Link] - GDITAG_FONT_INTENSITY_CORRECTION
Ghmc - win32k!GdiHandleManager::Create - GDITAG_HANDLE_MANAGER
Getc - win32k!GdiHandleEntryTable::_Create - GDITAG_HANDLE_ENTRY_TABLE
Gelt - win32k!EntryDataLookupTable::Create - GDITAG_ENTRY_DATA_LOOKUP_TABLE
Gelc - win32k!EntryDataLookupTable::Initialize -
GDITAG_ENTRY_DATA_LOOKUP_TABLE_COLUMN
Gpbm - [Link] - GDITAG_POOL_BITMAP_BITS
Gapl - [Link] - GDITAG_APAL_TABLE
Gscn - [Link] - GDITAG_SCAN_ARRAY
GGG0 - [Link] - GDITAG_CORE_SESSION_GLOBALS
GGG1 - [Link] - GDITAG_BASE_SESSION_GLOBALS
GGG2 - [Link] - GDITAG_MIN_SESSION_GLOBALS
GGG3 - [Link] - GDITAG_FULL_SESSION_GLOBALS
GGG4 - [Link] - GDITAG_HT_SESSION_GLOBALS
GGG5 - [Link] - GDITAG_UMFD_SESSION_GLOBALS
GGG6 - [Link] - GDITAG_TTFD_SESSION_GLOBALS
GGG7 - [Link] - GDITAG_TTS_SESSION_GLOBALS
EKmm - win32kbase!EtwTraceAuditApiQueryAddressVADInformation -
ETW_MEMORY_MAPPED_NAME_TAG
EKsa - win32kbase!CAsyncKeyEventMonitor::operator new - USERTAG_ASYNCKEYEVENT
Ucal - win32k!DriverEntry - USERTAG_SERVICE_TABLE
Uiso - win32k!TypeIsolation::Create - USERTAG_ISOHEAP
Umam - win32k!UpdateDesktopMonitorNavigationOrder - USERTAG_MONITOR_SPATIAL
Uman - win32k!NtUserSetManipulationInputTarget - USERTAG_DWM_MANIPULATION
Urdr - win32k!SetRedirectionBitmap - USERTAG_REDIRECT
Usac - win32k!_CreateAcceleratorTable - USERTAG_ACCEL
Usai - win32k!zzzAttachThreadInput - USERTAG_ATTACHINFO
Usal - win32k!InitSwitchWndInfo - USERTAG_ALTTAB
Usbg - win32k!xxxLogClipData - USERTAG_DEBUG
Usbm - win32k!SetGestureConfigSettings - USERTAG_BITMASK
Usbr - win32k!NtUserShutdownBlockReasonCreate - USERTAG_BLOCKREASON
Usca - win32k!NtUserSetCalibrationData - USERTAG_CALIBRATIONDATA
Uscb - win32k!_ConvertMemHandle - USERTAG_CLIPBOARD
Uscc - win32k!AllocCallbackMessage - USERTAG_CALLBACK
Uscd - win32k!SetWindowCompositionInfo - USERTAG_COMPOSITIONPROP
UsCd - win32k!xxxUserChangeDisplaySettings - USERTAG_CDS
Usce - win32k!RetrieveLinkCollection - USERTAG_COLLINK
Usci - win32k!InitSystemThread - USERTAG_CLIENTTHREADINFO
UscI - win32k!CitStart - USERTAG_COMPAT_IMPACT
Uscl - win32k!ClassAlloc - USERTAG_CLASS
Uscm - win32k!InitScancodeMap - USERTAG_SCANCODEMAP
Uscp - win32k!CreateDIBPalette - USERTAG_CLIPBOARDPALETTE
Uscr - win32k!NtUserSetSysColors - USERTAG_COLORS
Usct - win32k!CkptRestore - USERTAG_CHECKPT
Uscu - win32k!_CreateEmptyCursorObject - USERTAG_CURSOR
Uscv - win32k!NtUserSetSysColors - USERTAG_COLORVALUES
Uscw - win32k!CacheAxisChildIndex - USERTAG_CONTACTRELATIVE
UsDI - win32k!CreateDeviceInfo - USERTAG_DEVICEINFO
UsDc - win32k!NtUserDisplayConfigSetDeviceInfo - USERTAG_DISPLAYCONFIG
UsDt - win32k!NtUserCtxDisplayIOCtl - USERTAG_DISPLAYIOCTL
Usd1 - win32k!FreeListAdd - USERTAG_DDE1
Usd2 - win32k!_DdeSetQualityOfService - USERTAG_DDE2
Usd4 - win32k!AddPublicObject - USERTAG_DDE4
Usd5 - win32k!xxxCsEvent - USERTAG_DDE5
Usd6 - win32k!xxxCsEvent - USERTAG_DDE6
Usd7 - win32k!xxxCsEvent - USERTAG_DDE7
Usd8 - win32k!xxxMessageEvent - USERTAG_DDE8
Usd9 - win32k!xxxCsDdeInitialize - USERTAG_DDE9
UsdA - win32k!NewConversation - USERTAG_DDEa
UsdB - win32k!Createpxs - USERTAG_DDEb
Usdc - win32k!CreateCacheDC - USERTAG_DCE
UsdD - win32k!NtUserfnDDEINIT - USERTAG_DDEd
UsdE - win32k!xxxClientCopyDDEIn1 - USERTAG_DDE
Usdi - win32k!CreateMonitor - USERTAG_DISPLAYINFO
Usdm - win32k!CreateDCompositionHwndTargetInfo - USERTAG_DCOMPHWNDTARGETINFO
Usdp - win32k!NtUserDelegateCapturePointers - USERTAG_DELEGATEPOINTERSTRUCT
Usds - win32k!xxxDragObject - USERTAG_DRAGDROP
Usdv - win32k!NtUserfnINDEVICECHANGE - USERTAG_DEVICECHANGE
Usdw - win32k!GetProductString - USERTAG_DEVICENAME
UsEC - win32k!AddWEFCOMPInvalidateSListEntry - USERTAG_WSEXCOMPINVALID
Used - win32k!AddOrUpdateListener - USERTAG_EDGY
User - win32k!InitCreateUserCrit - USERTAG_ERESOURCE
Usex - win32k!IsDeviceExcluded - USERTAG_EXCLUDEDLIST
Usfi - win32k!CreatePointerDeviceInfo - USERTAG_FEATUREIOCTL
Usfg - win32k!NtUserSetAdditionalForegroundBoostProcesses -
USERTAG_ADDITIONALFGBOOST
Usfl - win32k!InitializeWin32KSyscallFilter - USERTAG_SERVICEFILTER
Usft - win32k!CreateValidTouchInputInfo - USERTAG_FORWARDTOUCHMESSAGE
Usgc - win32k!_StoreGestureConfig - USERTAG_GESTURECONFIG
Usgd - win32k!SetGestureConfigSettings - USERTAG_GESTUREDATA
Usgh - win32k!NtUserUserHandleGrantAccess - USERTAG_GRANTEDHANDLES
Usgi - win32k!NtUserSendGestureInput - USERTAG_GESTUREINFO
Usgt - win32k!AddGhost - USERTAG_GHOST
Usha - win32k!AllocateHidData - USERTAG_HIDDATA
Ushb - win32k!NtUserGetDCompositionHwndBitmap - USERTAG_DCOMPHWNDBITMAP
Ushc - win32k!AllocateHidConfigDesc - USERTAG_HIDCONFIG
UshD - Win32k!AllocateHidDesc - USERTAG_HIDDESC
Ushf - win32k!AllocateHidConfigDesc - USERTAG_HIDFEATURE
Ushi - win32k!AllocateHidDesc - USERTAG_HIDINPUT
Ushk - win32k!_RegisterHotKey - USERTAG_HOTKEY
Ushl - win32k!INLPHLPSTRUCT - USERTAG_HELP
UshP - win32k!HidCreateDeviceInfo - USERTAG_HIDPREPARSED
Ushr - win32k!AllocateAndLinkHidPageOnlyRequest - USERTAG_HIDPAGEREQUEST
UshR - win32k!AllocateHidProcessRequest - USERTAG_HIDPROCREQUEST
Usht - win32k!AllocateProcessHidTable - USERTAG_HIDTABLE
UshT - win32k!AllocateAndLinkHidTLCInfo - USERTAG_HIDTLC
Usih - win32k!SetImeHotKey - USERTAG_IMEHOTKEY
Usim - win32k!CreateInputContext - USERTAG_IME
Usip - win32k!CreateNode - USERTAG_INPUTPOINTERNODE
Usiq - win23k!CInputQueueProp - USERTAG_COMPOSITIONINPUTQUEUE
Usit - win32k!InjectTouchInput - USERTAG_INJECT_TOUCH
Usim - win32k!InjectMouseInput - USERTAG_INJECT_MOUSE
Usik - win32k!InjectKeyboardInput - USERTAG_INJECT_KEYBOARD
Usix - win32k!AllocInputTransformEntry - USERTAG_INPUT_TRANSFORM
Uisc - win32k!DWMSetInputSystemOutputConfig - USERTAG_INPUT_CONFIG
Ucsc - win32k!SetShellCursorClip - USERTAG_SHELL_CURSOR_CLIP
Usjb - win32k!CreateW32Job - USERTAG_W32JOB
Usjx - win32k!JobCalloutAddProcess - USERTAG_W32JOBEXTRA
UsKe - win32k!CreateKernelEvent - USERTAG_KEVENT
UsKf - win32k!InitCreateUserCrit - USERTAG_FASTMUTEX
UsKm - win32k!DriverEntry - USERTAG_KMUTEX
UsKs - win32k!CreateKernelSemaphore - USERTAG_KSEMAPHORE
UsKt - win32k!RemoteConnect - USERTAG_KTIMER
UsKw - win32k!xxxDesktopThread - USERTAG_KWAITBLOCK
UsKv - win32k!ReadTabletButtonConfig - USERTAG_KEYVALUEINFORMATION
Uskb - win32k!xxxLoadKeyboardLayoutEx - USERTAG_KBDLAYOUT
Uskd - win32k!xxxCreateDesktopEx2 - USERTAG_KERNELDESKTOPINFO
Ukdp - win32k!Win32UserInitialize - USERTAG_KERNELDISPLAYINFO
Uske - win32k!GetKbdExId - USERTAG_KBDEXID
Uskf - win32k!LoadKeyboardLayoutFile - USERTAG_KBDFILE
Usks - win32k!PostUpdateKeyStateEvent - USERTAG_KBDSTATE
Uskt - win32k!ReadLayoutFile - USERTAG_KBDTABLE
Usla - win32k!InitLockRecordLookaside - USERTAG_LOOKASIDE
Usld - win32k!GrowLogIfNecessary - USERTAG_LOGDESKTOP
Uslr - win32k!InitLockRecordLookaside - USERTAG_LOCKRECORD
UsMP - win32k!GeneratePointerMessageFromMouse - USERTAG_MOUSEINPOINTER
usmd - win32k!xxxSetModernAppWindow - USERTAG_MODERNDESKTOPAPP
Usmg - win32k!Magxxx - USERTAG_MAGNIFICATION
Usmi - win32k!MirrorRegion - USERTAG_MIRROR
Usml - win32k!MsgLookupTableAlloc - USERTAG_MESSAGE_FILTER
Usmo - win32k!_EnableIAMAccess - USERTAG_MOSH
Usmp - win32k!AllocMousePromotionEntry - USERTAG_MOUSEPROMOTIONENTRY
Usmr - win32k!SnapshotMonitorRects - USERTAG_MONITORRECTS
Usms - win32k!xxxMoveSize - USERTAG_MOVESIZE
Usmt - win32k!xxxMNAllocMenuState - USERTAG_MENUSTATE
Usmx - win32k!InitializeMonitorDpiRectsAndTransforms - USERTAG_MATRIX
Usna - win32k!UserPostNKAPC - USERTAG_NKAPC
Usny - win32k!CreateNotify - USERTAG_NOTIFY
Uspa - win32k!AllocPointerMsgParamsList - USERTAG_POINTERMSGPARAMS
Uspb - win32k!fnPOWERBROADCAST - USERTAG_POWERBROADCAST
Uspd - win32k!PointerList::AddMsgData - USERTAG_POINTERINPUTMSGDATA
Uspc - win32k!CreatePointerDeviceInfo - USERTAG_POINTERDEVICE
UspC - win32k!AssignPointerCaptureData - USERTAG_POINTERCAPTUREDATA
Uspe - win32k!AllocPointerInfoNodeList - USERTAG_POINTERINPUTEVENT
Uspf - win32k!CommitHoldingFrame - USERTAG_POINTERINPUTFRAME
Uspg - win32k!GeneratePointerMessage - USERTAG_POINTERINPUTMSG
Uspi - win32k!MapDesktop - USERTAG_PROCESSINFO
Uspk - win32k!GetProductString - USERTAG_PRODUCTSTRING
Uspl - win32k!xxxPollAndWaitForSingleObject - USERTAG_POLLEVENT
Uspm - win32k!MNAllocPopup - USERTAG_POPUPMENU
Uspn - win32k!CreateProfileUserName - USERTAG_PROFILEUSERNAME
Uspo - win32k!QueuePowerRequest - USERTAG_POWER
Uspp - win32k!AllocateAndLinkHidTLCInfo - USERTAG_PNP
Uspq - win32k!CreatePointerDeviceInfo - USERTAG_PARALLELPROP
UspQ - win32k!AllocPointerQFrameList - USERTAG_POINTERQFRAME
Uspr - win32k!GetPrivateProfileStruct - USERTAG_PROFILE
Usps - win32k!InitPlaySound - USERTAG_PLAYSOUND
Uspt - win32k!AllocThreadPointerData - USERTAG_POINTERTHREADDATA
Uspv - win32k!ContactVisualization - USERTAG_POINTERVISUALIZATION
Uspw - win32k!CDynamicArray::Add - USERTAG_DYNAMICARRAY
Uspx - win32k!GetCustomFlickPath - USERTAG_PTRCFG
Usph - win32k!CreateProp - USERTAG_PROPLISTHEADER
Uspy - win32k!CreateProp - USERTAG_PROPLIST
Usql - win32k!EnsureQMsgLog - USERTAG_QMSGLOG
Usqm - win32k!InitQEntryLookaside - USERTAG_QMSG
Usqu - win32k!InitQEntryLookaside - USERTAG_Q
Usrd - win32k!StoreRawDataBlock - USERTAG_POINTERRAWDATA
Usri - win32k!NtUserRegisterRawInputDevices - USERTAG_RAWINPUTDEVICE
Usrt - win32k!xxxDrawMenuItemText - USERTAG_RTL
Ussa - win32k!xxxBroadcastMessage - USERTAG_SMS_ASYNC
Ussb - win32k!CreateSpb - USERTAG_SPB
Ussc - win32k!xxxInterSendMsgEx - USERTAG_SMS_CAPTURE
Ussd - win32k!xxxAddShadow - USERTAG_SHADOW
Usse - win32k!SetDisconnectDesktopSecurity - USERTAG_SECURITY
Ussi - win32k!NtUserSendInput - USERTAG_SENDINPUT
Ussj - win32k!NtUserSendTouchInput - USERTAG_SENDTOUCHINPUT
Ussm - win32k!InitSMSLookaside - USERTAG_SMS
Usss - win32k!xxxBroadcastMessage - USERTAG_SMS_STRING
Ussw - win32k!_BeginDeferWindowPos - USERTAG_SWP
Ussh - win32k!zzzSetWindowsHookEx - USERTAG_HOOK
Uscd - win32k!GetCPD - USERTAG_CPD
Ussr - win32k!xxxDesktopRecalc - USERTAG_ADR
Ussy - win32k!xxxDesktopThread - USERTAG_SYSTEM
UsTI - win32k!NtUserQueryInformationThread - USERTAG_THREADINFORMATION
Usta - win32k!AssociateShellFrameAppThreads - USERTAG_THREADASSOCIATION
Ustd - win32k!TrackAddDesktop - USERTAG_TRACKDESKTOP
Usti - win32k!AllocateW32Thread - USERTAG_THREADINFO
Ustn - win32k!AllocateW32Thread - USERTAG_THREADINFONP
Ustk - win32k!HeavyAllocPool - USERTAG_STACK
Ustm - win32k!InternalSetTimer - USERTAG_TIMER
Ustl - win32k!AllocateW32Thread - USERTAG_TLS
Usto - win32k!xxxConnectService - USERTAG_TOKEN
Ustp - win32k!FindOrCreateHoldingFrameForDevice - USERTAG_TOUCHPADSTATE
Usts - win32k!_Win32CreateSection - USERTAG_SECTION
Ustx - win32k!NtUserDrawCaptionTemp - USERTAG_TEXT
Usty - win32k!NtUserResolveDesktopForWOW - USERTAG_TEXT2
Ustz - win32k!AllocTouchInputInfo - USERTAG_TOUCHINPUTINFO
Usua - win32k!TabletButtonHandler - USERTAG_TABLETBUTTONUSAGE
Usub - win32k!NtUserToUnicodeEx - USERTAG_UNICODEBUFFER
Usvc - win32k!_GetPointerDeviceProperties - USERTAG_VALUECAP
Usvi - win32k!ResizeVisExcludeMemory - USERTAG_VISRGN
Usvl - win32k!VWPLAdd - USERTAG_VWPL
UsWE - win32k!ReportHungExplorerToWer - USERTAG_WER
UsWP - win32k!SetGlobalWallpaperSettings - USERTAG_WALLPAPER
Uswc - win32k!SetSwapChainProp - USERTAG_SWAPCHAIN
Uswd - win32k!xxxCreateWindowEx - USERTAG_WINDOW
Uswe - win32k!_SetWinEventHook - USERTAG_WINEVENT
Uswi - win32k!RemoteShadowStart - USERTAG_WIREDATA
Uswl - win32k!BuildHwndList - USERTAG_WINDOWLIST
Uswo - win32k!zzzInitTask - USERTAG_WOWTDB
Uswr - win32k!CoreWindowProp - USERTAG_COREWINDOWPROP
Usrr - win32k!TouchTargetingRankForRegion - USERTAG_RANKFORRGN
Uslt - win32k!InitializeWin32PoolTracking - USERTAG_LEAKEDTAG
UsI0 - win32k!NSInstrumentation::CBackTraceStorageUnit::Create -
USERTAG_BACKTRACE_STORAGE_UNIT
UsI1 - win32k!NSInstrumentation::CBackTraceBucket::Create -
USERTAG_BACKTRACE_BUCKET
UsI2 - win32k!NSInstrumentation::CBackTraceBucket::CreateContext -
USERTAG_BACKTRACE_BUCKET_CONTEXT
UsI3 - win32k!NSInstrumentation::CBackTraceStoreEx::Create -
USERTAG_BACKTRACE_STORE
UsI4 - win32k!NSInstrumentation::CBloomFilter::Create - USERTAG_BLOOMFILTER
UsI5 - win32k!NSInstrumentation::CPlatformSignal::Create -
USERTAG_INSTRUMENTATION_EVENT
UsI6 - win32k!NSInstrumentation::CLeakTrackingAllocator::Create -
USERTAG_LEAK_TRACKING_ALLOCATOR
UsI7 - win32k!NSInstrumentation::CPrioritizedWriterLock::Create -
USERTAG_PRIORITIZED_WRITER_LOCK
UsI8 - win32k!NSInstrumentation::CPointerHashTable::Create -
USERTAG_POINTER_HASH_TABLE
UsI9 - win32k!NSInstrumentation::CReferenceTracker::Create -
USERTAG_REFERENCE_TRACKER
UsIa - win32k!NSInstrumentation::CReferenceTracker::CReferenceCountedType::Create
- USERTAG_REFERENCE_COUNTED_TYPE_HANDLE
UsIb - win32k!
NSInstrumentation::CReferenceTracker::CReferenceCountedType::BeginTrack -
USERTAG_REFERENCE_COUNTED_OBJECT_HANDLE
UsIc - win32k!NSInstrumentation::CSortedVector::Create - USERTAG_SORTED_VECTOR
UsId - win32k!NSInstrumentation::CSharedStorage::InitializeCommon -
USERTAG_SHARED_STORAGE
Udpi - win32k!CreateSystemFontsForDpi - USERTAG_DPIMETRICS
Ubwd - win32kbase!NtUserCreateBaseWindow - USERTAG_BASE_WINDOW
Ubws - win32kmin!xxxMinSendPointerMessageWorker - USERTAG_BASE_WINDOW_SENTLIST
Urtm - win32kfull!InitRotationManager - USERTAG_ROTMGR
Usws - win32kfull!xxxCreateWindowEx - USERTAG_WND_SERVER_EXTRA_BYTES
Udwp - win32kbase!SetMonitorData - USERTAG_REFCOUNTED_DPI_INFORMATION
Uiim - win32kbase!CTouchProcessor::ForwardInputToManipulationThread -
USERTAG_INPUT_INTEROP_MESSAGE
Usdz - win32kbase!DelayZonePalmRejection::_AddDelayZoneToListInternal -
USERTAG_DELAYZONEINFO
Uvtp - win32kbase!VirtualTouchpadProcessor::GetInstance - USERTAG_VIRTUALTOUCHPAD
Umen - win32kbase!HMAllocObject - USERTAG_MENU
Umit - win32kfull!SetLPITEMInfoNoRedraw - USERTAG_MENUITEM
Usol - win32kmin!InitSmartObjLookaside - USERTAG_SMOBJ_LOOKASIDE
Ugwm - win32kfull!CWindowGroup::operator new - USERTAG_GROUP_WINDOW_MANAGEMENT
Ucwp - win32kfull!CloneWindowPosAndArrangementAsync - USERTAG_CLONEWINDOWPOS
Usol - win32kbase!InputTraceLogging::PerfRegion::Initialize -
USERTAG_PERFREGION_LOOKASIDE
Uagm - win32kbase!CActivationObjectManager::operator new -
USERTAG_ACTIVATION_GROUP_MANAGEMENT
Ucnv - win32kbase!InputObjectMap::AllocateBucket - USERTAG_INPUTOBJECTMAP
Uvst - win32kfull!SetVisRgnTrackerProp - USERTAG_VISRGNTRACKER
Urav - win32kmin!minPostInputMessage - USERTAG_QMSGVARPAYLOAD
Ugcd - win32kbase!NtUserGetInputContainerId - USERTAG_CONTAINERINFO
Umid - win32kfull!GetMouseDeviceHardwareId - USERTAG_MOUSE_HARDWARE_ID
Uwmc - win32kfull!WindowMargins::CWindowMarginProp::CreateWindowProp -
USERTAG_WINDOW_MARGINS_CHANGE
Umwm - win32kfull!ShellWindowPos::MigrateWindowAsync - USERTAG_MIGRATE_WINDOW_ASYNC
Uttd - win32kfull!_RegisterForTooltipDismissNotification - USERTAG_TOOLTIP_DISMISS
DCa0 - win32kbase!DirectComposition::CAtlasedRectsMeshMarshaler::_allocate
- DCOMPOSITIONTAG_ATLASEDRECTSMESHMARSHALER
DCab - win32kbase!DirectComposition::CAnimationBinding::_allocate
- DCOMPOSITIONTAG_ANIMATIONBINDING
DCac - win32kbase!DirectComposition::CApplicationChannel::_allocate
- DCOMPOSITIONTAG_APPLICATIONCHANNEL
DCae - win32kbase!DirectComposition::CAnimationMarshaler::SetBufferProperty
- DCOMPOSITIONTAG_ANIMATIONTIMEEVENTDATA
DCag - win32kbase!DirectComposition::CAnimationMarshaler::SetBufferProperty
- DCOMPOSITIONTAG_ANIMATIONSCENARIOGUID
DCah - win32kbase!DirectComposition::CAnimationControllerMarshaler::_allocate
- DCOMPOSITIONTAG_ANIMATIONCONTROLLERMARSHALER
DCal - win32kbase!DirectComposition::CAnimationTimeList::_allocate
- DCOMPOSITIONTAG_ANIMATIONTIMELIST
DCam - win32kbase!DirectComposition::CCompositionAmbientLight::_allocate
- DCOMPOSITIONTAG_AMBIENTLIGHTMARSHALER
DCan - win32kbase!DirectComposition::CAnimationMarshaler::_allocate
- DCOMPOSITIONTAG_ANIMATIONMARSHALER
DCar - win32kbase!DirectComposition::CResourceMarshaler::_allocate
- DCOMPOSITIONTAG_ABSTRACTRESOURCE
DCat - win32kbase!DirectComposition::CLegacyAnimationTriggerMarshaler::_allocate
- DCOMPOSITIONTAG_LEGACYANIMATIONTRIGGERMARSHALER
DCaw - win32kbase!DirectComposition::CAtlasedRectsGroupMarshaler::_allocate
- DCOMPOSITIONTAG_ATLASEDRECTSGROUPMARSHALER
DCax - win32kbase!DirectComposition::CAnalogExclusiveViewMarshaler::_allocate
- DCOMPOSITIONTAG_ANALOGEXCLUSIVEVIEWMARSHALER
DCay - win32kbase!DirectComposition::CAnalogTextureTargetMarshaler::_allocate
- DCOMPOSITIONTAG_ANALOGTEXTURETARGETMARSHALER
DCaz - win32kbase!DirectComposition::CAnalogCompositorMarshaler::_allocate
- DCOMPOSITIONTAG_ANALOGCOMPOSITORMARSHALER
DCba - win32kbase!DirectComposition::CBatch::_allocate
- DCOMPOSITIONTAG_BATCH
DCbd - win32kbase!DirectComposition::CBatchDeferralMarshaler::_allocate
- DCOMPOSITIONTAG_BATCHDEFERRALMARSHALER
DCbc - win32kbase!DirectComposition::CChannel::_allocate
- DCOMPOSITIONTAG_CHANNEL
DCbf - win32kbase!DirectComposition::Memory::Allocate
- DCOMPOSITIONTAG_BUFFER
DCbl - win32kbase!DirectComposition::CBackChannelMarshaler::_allocate
- DCOMPOSITIONTAG_BACKCHANNELMARSHALER
DCbr - win32kbase!DirectComposition::CBatch::CSystemResourceReference::_allocate
- DCOMPOSITIONTAG_BATCH_RESOURCEREF
DCbs - win32kbase!DirectComposition::CBatchSharedMemoryPool::_allocate
- DCOMPOSITIONTAG_BATCH_SHARED_MEMORY_POOL
DCc2 - win32kbase!DirectComposition::CComponentTransform2DMarshaler::_allocate
- DCOMPOSITIONTAG_COMPONENTTRANSFORM2DMARSHALER
DCca - win32kbase!DirectComposition::CConditionalExpressionMarshaler::_allocate
- DCOMPOSITIONTAG_CONDITIONALEXPRESSIONMARSHALER
DCcb - win32kbase!DirectComposition::CCompositionSurfaceBitmapMarshaler::_allocate
- DCOMPOSITIONTAG_HCOMPBITMAPMARSHALER
DCcc - win32kbase!DirectComposition::CConnection::_allocate
- DCOMPOSITIONTAG_CONNECTION
DCcg - win32kbase!DirectComposition::CClipGroupMarshaler::_allocate
- DCOMPOSITIONTAG_CLIPGROUPMARSHALER
DCch - win32kbase!DirectComposition::CChannelHandleTable::_allocate
- DCOMPOSITIONTAG_CHANNELHANDLETABLE
DCck - win32kbase!DirectComposition::CBaseExpressionMarshaler::SetBufferProperty
- DCOMPOSITIONTAG_DEBUGTAG
DCcl - win32kbase!DirectComposition::CCompositionLight::_allocate
- DCOMPOSITIONTAG_LIGHTMARSHALER
DCcm - win32kbase!DirectComposition::CCompositionCubeMapMarshaler::_allocate
- DCOMPOSITIONTAG_CUBEMAPMARSHALER
DCco - win32kbase!DirectComposition::CComponentTransform3DMarshaler::_allocate
- DCOMPOSITIONTAG_COMPONENTTRANSFORM3DMARSHALER
DCcp - win32kbase!DirectComposition::CPushLockCriticalSection::_allocate
- DCOMPOSITIONTAG_PUSHLOCKCRITICALSECTION
DCcq - win32kbase!DirectComposition::CCaptureControllerMarshaler::_allocate
- DCOMPOSITIONTAG_CAPTURECONTROLLERMARSHALER
DCcr - win32kbase!DirectComposition::CCaptureRenderTargetMarshaler::_allocate
- DCOMPOSITIONTAG_CAPTURERENDERTARGETMARSHALER
DCcs - win32kbase!DirectComposition::CCriticalSection::_allocate
- DCOMPOSITIONTAG_CRITICALSECTION
DCct - win32kbase!DirectComposition::CApplicationChannel::AllocateTableEntry
- DCOMPOSITIONTAG_CHANNELTABLE
DCcv - win32kbase!DirectComposition::CrossChannelVisualData::_allocate
- DCOMPOSITIONTAG_CROSSCHANNELVISUALDATA
DCcw - win32kbase!DirectComposition::CScreenCursorMarshaler::_allocate
- DCOMPOSITIONTAG_SCREENCURSORMARSHALER
DCcy - win32kbase!DirectComposition::CCursorVisualMarshaler::_allocate
- DCOMPOSITIONTAG_CURSORVISUALMARSHALER
DCd2 - win32kbase!DirectComposition::CStructDynamicArray::_allocate
- DCOMPOSITIONTAG_STRUCTDYNAMICARRAY
DCda - win32kbase!DirectComposition::CDCompDynamicArray::_allocate
- DCOMPOSITIONTAG_DYNAMICARRAY
DCdb - win32kbase!DirectComposition::CDCompDynamicArrayBase::_allocate
- DCOMPOSITIONTAG_DYNAMICARRAYBASE
DCdc - win32kbase!DirectComposition::CDwmChannel::_allocate
- DCOMPOSITIONTAG_DWMCHANNEL
DCdd - win32kbase!DirectComposition::CDDisplayRenderTargetMarshaler::_allocate
- DCOMPOSITIONTAG_DDISPLAYRENDERTARGETMARSHALER
DCde - win32kbase!DirectComposition::CDesktopTreeMarshaler::_allocate
- DCOMPOSITIONTAG_DESKTOPTREEMARSHALER
DCdj - win32kbase!DirectComposition::CLegacyStereoRenderTargetMarshaler::_allocate
- DCOMPOSITIONTAG_LEGACYSTEREORENDERTARGETMARSHALER
DCdk - win32kbase!DirectComposition::CLegacyRenderTargetMarshaler::_allocate
- DCOMPOSITIONTAG_LEGACYRENDERTARGETMARSHALER
DCdl - win32kbase!DirectComposition::CCompositionDistantLight::_allocate
- DCOMPOSITIONTAG_DISTANTLIGHTMARSHALER
DCdm - win32kbase!DirectComposition::CRemoteAppRenderTargetMarshaler::_allocate
- DCOMPOSITIONTAG_REMOTEAPPRENDERTARGETMARSHALER
DCdp - win32kbase!DirectComposition::CRemoteRenderTargetMarshaler::_allocate
- DCOMPOSITIONTAG_REMOTERENDERTARGETMARSHALER
DCds - win32kbase!DirectComposition::CDropShadowMarshaler::_allocate
- DCOMPOSITIONTAG_DROPSHADOWMARSHALER
DCef - win32kbase!DirectComposition::CCompiledEffect::_allocate
- DCOMPOSITIONTAG_COMPILEDEFFECTMARSHALER
DCeg - win32kbase!DirectComposition::CEffectGroupMarshaler::_allocate
- DCOMPOSITIONTAG_EFFECTGROUPMARSHALER
DCem - win32kbase!DirectComposition::CBaseExpressionMarshaler::SetBufferProperty
- DCOMPOSITIONTAG_EXPRESSIONTARGETMASK
DCep - win32kbase!DirectComposition::CCompiledEffectPropertyBag::_allocate
- DCOMPOSITIONTAG_COMPILEDEFFECTPROPERTYBAGMARSHALER
DCet - win32kbase!DirectComposition::CCompiledEffectTemplate::_allocate
- DCOMPOSITIONTAG_COMPILEDEFFECTTEMPLATEMARSHALER
DCev - win32kbase!DirectComposition::CEvent::_allocate
- DCOMPOSITIONTAG_EVENT
DCex - win32kbase!DirectComposition::CExpressionMarshaler::_allocate
- DCOMPOSITIONTAG_EXPRESSIONMARSHALER
DCey - win32kbase!DirectComposition::CEllipseGeometryMarshaler::_allocate
- DCOMPOSITIONTAG_ELLIPSEGEOMETRYMARSHALER
DCfb - win32kbase!
DirectComposition::CTableTransferEffectMarshaler::SetBufferProperty -
DCOMPOSITIONTAG_FILTEREFFECTBUFFER
DCfe - win32kbase!DirectComposition::CFilterEffectMarshaler::_allocate
- DCOMPOSITIONTAG_FILTEREFFECTMARSHALER
DCff - win32kbase!DirectComposition::CFilterEffectMarshaler::Initialize
- DCOMPOSITIONTAG_FILTERINPUTFLAGS
DCfi - win32kbase!DirectComposition::CFilterEffectMarshaler::Initialize
- DCOMPOSITIONTAG_FILTERINPUTS
DCfj - win32kbase!DirectComposition::CFilterEffectMarshaler::Initialize
- DCOMPOSITIONTAG_SUBRECTINPUTFLAGS
DCg3 - win32kbase!DirectComposition::CTransform3DGroupMarshaler::_allocate
- DCOMPOSITIONTAG_TRANSFORM3DGROUPMARSHALER
DCgb - win32kbase!DirectComposition::CGradientLegacyMilBrushMarshaler::_allocate
- DCOMPOSITIONTAG_GRADIENTLEGACYMILBRUSHMARSHALER
DCgd - win32kbase!DirectComposition::CGdiSpriteBitmapMarshaler::_allocate
- DCOMPOSITIONTAG_GDISPRITEBITMAPMARSHALER
DCge - win32kbase!DirectComposition::CGaussianBlurEffectMarshaler::_allocate
- DCOMPOSITIONTAG_GAUSSIANBLUREFFECTMARSHALER
DCgg - win32kbase!DirectComposition::CGeometry2DGroupMarshaler::_allocate
- DCOMPOSITIONTAG_GEOMETRY2DGROUPMARSHALER
DCgi - win32kbase!DirectComposition::CGenericInkMarshaler::_allocate
- DCOMPOSITIONTAG_GENERICINKMARSHALER
DCgm - win32kbase!DirectComposition::CGenericMarshaler::_allocate
- DCOMPOSITIONTAG_GENERICMARSHALER
DCgr - win32kbase!DirectComposition::CCompositionGlyphRunMarshaler::_allocate
- DCOMPOSITIONTAG_COMPOSITIONGLYPHRUNMARSHALER
DCgs - win32kbase!DirectComposition::CColorGradientStopMarshaler::_allocate
- DCOMPOSITIONTAG_COLORGRADIENTSTOPMARSHALER
DCgv - win32kbase!DirectComposition::CGlobalDCompVisualMarshaler::_allocate
- DCOMPOSITIONTAG_GLOBALDCOMPVISUALMARSHALER
DChc - win32kbase!DirectComposition::CHolographicCompositionMarshaler::_allocate
- DCOMPOSITIONTAG_HOLOGRAPHICCOMPOSITIONMARSHALER
DChd - win32kbase!DirectComposition::CHolographicDisplayMarshaler::_allocate
- DCOMPOSITIONTAG_HOLOGRAPHICDISPLAYMARSHALER
DChe - win32kbase!DirectComposition::CHolographicExclusiveViewMarshaler::_allocate
- DCOMPOSITIONTAG_HOLOGRAPHICEXCLUSIVEVIEWMARSHALER
DChi - win32kbase!DirectComposition::CHolographicInteropTextureMarshaler::_allocate
- DCOMPOSITIONTAG_HOLOGRAPHICINTEROPTEXTUREMARSHALER
DChm - win32kbase!DirectComposition::CHolographicExclusiveModeMarshaler::_allocate
- DCOMPOSITIONTAG_HOLOGRAPHICEXCLUSIVEMODEMARSHALER
DChp - win32kbase!DirectComposition::CHoverPointerSourceMarshaler::_allocate
- DCOMPOSITIONTAG_HOVERPOINTERSOURCEMARSHALER
DCht - win32kbase!DirectComposition::CHwndTargetMarshaler::_allocate
- DCOMPOSITIONTAG_HWNDTARGETMARSHALER
DChv - win32kbase!DirectComposition::CHostVisualMarshaler::_allocate
- DCOMPOSITIONTAG_HOSTVISUALMARSHALER
DChx - win32kbase!DirectComposition::CHolographicViewer::_allocate
- DCOMPOSITIONTAG_HOLOGRAPHICVIEWERMARSHALER
DCia - win32kbase!DirectComposition::CInjectionAnimationMarshaler::_allocate
- DCOMPOSITIONTAG_INJECTIONANIMATIONMARSHALER
DCib - win32kbase!DirectComposition::CImageLegacyMilBrushMarshaler::_allocate
- DCOMPOSITIONTAG_IMAGELEGACYMILBRUSHMARSHALER
DCic - win32kbase!DirectComposition::CInteractionConfigurationGroup::_allocate
- DCOMPOSITIONTAG_INTERACTIONCONFIGURATIONGROUP
DCik - win32kbase!DirectComposition::CInkMarshaler::_allocate
- DCOMPOSITIONTAG_INKMARSHALER
DCio - win32kbase!DirectComposition::CInteractionMarshaler::_allocate
- DCOMPOSITIONTAG_INTERACTIONMARSHALER
DCir - win32kbase!DirectComposition::CInteractionTrackerMarshaler::_allocate
- DCOMPOSITIONTAG_INTERACTIONTRACKERMARSHALER
DCis - win32kbase!
DirectComposition::CInteractionTrackerBindingManagerMarshaler::_allocate -
DCOMPOSITIONTAG_INTERACTIONTRACKERBINDINGMANAGERMARSHALER
DCit - win32kbase!
DirectComposition::CInteractionMarshaler::EnsureTouchConfigurationList -
DCOMPOSITIONTAG_INTERACTIONTOUCHCONFIGURATION
DCjb - win32kbase!DirectComposition::CBackdropBrushMarshaler::_allocate
- DCOMPOSITIONTAG_BACKDROPBRUSHMARSHALER
DCjc - win32kbase!DirectComposition::CColorBrushMarshaler::_allocate
- DCOMPOSITIONTAG_COLORBRUSHMARSHALER
DCjd - win32kbase!
DirectComposition::CBlurredWallpaperBackdropBrushMarshaler::_allocate -
DCOMPOSITIONTAG_BLURREDWALLPAPERBACKDROPBRUSHMARSHALER
DCje - win32kbase!DirectComposition::CEffectBrushMarshaler::_allocate
- DCOMPOSITIONTAG_EFFECTBRUSHMARSHALER
DCjl - win32kbase!DirectComposition::CLinearGradientBrushMarshaler::_allocate
- DCOMPOSITIONTAG_LINEARGRADIENTBRUSHMARSHALER
DCjm - win32kbase!DirectComposition::CMaskBrushMarshaler::_allocate
- DCOMPOSITIONTAG_MASKBRUSHMARSHALER
DCjn - win32kbase!DirectComposition::CNineGridBrushMarshaler::_allocate
- DCOMPOSITIONTAG_NINEGRIDBRUSHMARSHALER
DCjo - win32kbase!DirectComposition::CRadialGradientBrushMarshaler::_allocate
- DCOMPOSITIONTAG_RADIALGRADIENTBRUSHMARSHALER
DCjs - win32kbase!DirectComposition::CSurfaceBrushMarshaler::_allocate
- DCOMPOSITIONTAG_SURFACEBRUSHMARSHALER
DCjw - win32kbase!DirectComposition::CWindowBackdropBrushMarshaler::_allocate
- DCOMPOSITIONTAG_WINDOWBACKDROPBRUSHMARSHALER
DCkf - win32kbase!DirectComposition::CKeyframeAnimationMarshaler::_allocate
- DCOMPOSITIONTAG_KEYFRAMEANIMATIONMARSHALER
DCks - win32kbase!DirectComposition::CKeyframeAnimationMarshaler::SetBufferProperty
- DCOMPOSITIONTAG_KEYFRAMEANIMATIONSCENARIOGUID
DCkt - win32kbase!DirectComposition::CSkewTransformMarshaler::_allocate
- DCOMPOSITIONTAG_SKEWTRANSFORMMARSHALER
DClb - win32kbase!
DirectComposition::CLinearGradientLegacyMilBrushMarshaler::_allocate -
DCOMPOSITIONTAG_LINEARGRADIENTLEGACYMILBRUSHMARSHALER
DClc - win32kbase!DirectComposition::CVisualMarshaler::_allocate
- DCOMPOSITIONTAG_LAYOUTCONSTRAINTINFO
DClg - win32kbase!DirectComposition::CLineGeometryMarshaler::_allocate
- DCOMPOSITIONTAG_LINEGEOMETRYMARSHALER
DClm - win32kbase!DirectComposition::CAnimationLoggingManager::_allocate
- DCOMPOSITIONTAG_ANIMATIONLOGGINGMANAGERMARSHALER
DCls - win32kbase!DirectComposition::CVisualSurfaceMarshaler::_allocate
- DCOMPOSITIONTAG_VISUALSURFACEMARSHALER
DClt - win32kbase!DirectComposition::CLinearObjectTableBase::_allocate
- DCOMPOSITIONTAG_LINEAROBJECTTABLEDATA
DClv - win32kbase!DirectComposition::CLayerVisualMarshaler::_allocate
- DCOMPOSITIONTAG_LAYERVISUALMARSHALER
DCm3 - win32kbase!DirectComposition::CMatrixTransform3DMarshaler::_allocate
- DCOMPOSITIONTAG_MATRIXTRANSFORM3DMARSHALER
DCma - win32kbase!DirectComposition::CManipulationTransformMarshaler::_allocate
- DCOMPOSITIONTAG_MANIPULATIONTRANSFORMMARSHALER
DCmg - win32kbase!DirectComposition::CMeshGeometryMarshaler::_allocate
- DCOMPOSITIONTAG_MESHGEOMETRY2DMARSHALER
DCmh - win32kbase!DirectComposition::CMessageHandleInfo::_allocate
- DCOMPOSITIONTAG_MESSAGEHANDLEINFO
DCmi - win32kbase!DirectComposition::CManipulationMarshaler::_allocate
- DCOMPOSITIONTAG_MANIPULATIONMARSHALER
DCmm - win32kbase!DirectComposition::CCompositionMipmapSurfaceMarshaler::_allocate
- DCOMPOSITIONTAG_MIPMAPSURFACEMARSHALER
DCmn - win32kbase!DirectComposition::CSceneSurfaceMaterialInputMarshaler::_allocate
- DCOMPOSITIONTAG_SCENESURFACEMATERIALINPUTMARSHALER
DCmr - win32kbase!DirectComposition::CSceneMetallicRoughnessMarshaler::_allocate
- DCOMPOSITIONTAG_SCENEMETALLICROUGHNESSMATERIALMARSHALER
DCmt - win32kbase!DirectComposition::CMatrixTransformMarshaler::_allocate
- DCOMPOSITIONTAG_MATRIXTRANSFORMMARSHALER
DCna - win32kbase!DirectComposition::CNaturalAnimationMarshaler::_allocate
- DCOMPOSITIONTAG_NATURALANIMATIONMARSHALER
DCnb - win32kbase!DirectComposition::CDeletedNotificationList::EnsureTagAllocation
- DCOMPOSITIONTAG_DELETEDNOTIFICATIONLISTBUFFER
DCnl - win32kbase!DirectComposition::CDeletedNotificationList::_allocate
- DCOMPOSITIONTAG_DELETEDNOTIFICATIONLIST
DCns - win32kbase!DirectComposition::CNaturalAnimationMarshaler::SetBufferProperty
- DCOMPOSITIONTAG_NATURALANIMATIONSCENARIOGUID
DCoc - win32kbase!DirectComposition::CContainerShapeMarshaler::_allocate
- DCOMPOSITIONTAG_CONTAINERSHAPEMARSHALER
DCos - win32kbase!DirectComposition::CSpriteShapeMarshaler::_allocate
- DCOMPOSITIONTAG_SPRITESHAPEMARSHALER
DCpb - win32kbase!DirectComposition::CPropertySetMarshaler::_allocate
- DCOMPOSITIONTAG_PROPERTYSETMARSHALER
DCpc - win32kbase!DirectComposition::CPrimitveColorMarshaler::_allocate
- DCOMPOSITIONTAG_PRIMITIVECOLORMARSHALER
DCpd - win32kbase!DirectComposition::CProcessData::_allocate
- DCOMPOSITIONTAG_PROCESSDATA
DCpg - win32kbase!DirectComposition::CPrimitiveGroupMarshaler::_allocate
- DCOMPOSITIONTAG_PRIMITIVEGROUPMARSHALER
DCpl - win32kbase!
DirectComposition::PropertySetKernelModeAllocator::AllocateAndClear -
DCOMPOSITIONTAG_PROPERTYSETSTORAGE
DCpo - win32kbase!DirectComposition::CCompositionPointLight::_allocate
- DCOMPOSITIONTAG_POINTLIGHTMARSHALER
DCpr - win32kbase!DirectComposition::CPrimitiveMarshaler::_allocate
- DCOMPOSITIONTAG_PRIMITIVEMARSHALER
DCpy - win32kbase!DirectComposition::CPathGeometryMarshaler::_allocate
- DCOMPOSITIONTAG_PATHGEOMETRYMARSHALER
DCqa - win32kbase!DirectComposition::CParticleBaseBehaviorMarshaler::_allocate
- DCOMPOSITIONTAG_PARTICLEBASEBEHAVIORMARSHALER
DCqb - win32kbase!DirectComposition::CParticleBehaviorMarshaler::_allocate
- DCOMPOSITIONTAG_PARTICLEBEHAVIORSMARSHALER
DCqc - win32kbase!DirectComposition::CParticleColorRangeMarshaler::_allocate
- DCOMPOSITIONTAG_PARTICLECOLORRANGEMARSHALER
DCqd - win32kbase!DirectComposition::CParticleColorBehaviorMarshaler::_allocate
- DCOMPOSITIONTAG_PARTICLECOLORBEHAVIORMARSHALER
DCqe - win32kbase!DirectComposition::CParticleScalarBehaviorMarshaler::_allocate
- DCOMPOSITIONTAG_PARTICLESCALARBEHAVIORMARSHALER
DCqf - win32kbase!DirectComposition::CParticleVector2BehaviorMarshaler::_allocate
- DCOMPOSITIONTAG_PARTICLEVECTOR2BEHAVIORMARSHALER
DCqg - win32kbase!DirectComposition::CParticleGeneratorMarshaler::_allocate
- DCOMPOSITIONTAG_PARTICLEGENERATORMARSHALER
DCqh - win32kbase!DirectComposition::CParticleVector4BehaviorMarshaler::_allocate
- DCOMPOSITIONTAG_PARTICLEVECTOR4BEHAVIORMARSHALER
DCqi - win32kbase!DirectComposition::CParticleVector3BehaviorMarshaler::_allocate
- DCOMPOSITIONTAG_PARTICLEVECTOR3BEHAVIORMARSHALER
DCqr - win32kbase!DirectComposition::CParticleAttractorMarshaler::_allocate
- DCOMPOSITIONTAG_PARTICLEATTRACTORMARSHALER
DCqv - win32kbase!DirectComposition::CParticleEmitterVisualMarshaler::_allocate
- DCOMPOSITIONTAG_PARTICLEEMITTERVISUALMARSHALER
DCqw - win32kbase!DirectComposition::CParticleVector4RangeMarshaler::_allocate
- DCOMPOSITIONTAG_PARTICLEVECTOR4RANGEMARSHALER
DCqx - win32kbase!DirectComposition::CParticleScalarRangeMarshaler::_allocate
- DCOMPOSITIONTAG_PARTICLESCALARRANGEMARSHALER
DCqy - win32kbase!DirectComposition::CParticleSizeRangeMarshaler::_allocate
- DCOMPOSITIONTAG_PARTICLESIZERANGEMARSHALER
DCqz - win32kbase!DirectComposition::CParticleDirectionRangeMarshaler::_allocate
- DCOMPOSITIONTAG_PARTICLEDIRECTIONRANGEMARSHALER
DCr3 - win32kbase!DirectComposition::CRotateTransform3DMarshaler::_allocate
- DCOMPOSITIONTAG_ROTATETRANSFORM3DMARSHALER
DCrc - win32kbase!DirectComposition::CRectangleClipMarshaler::_allocate
- DCOMPOSITIONTAG_RECTANGLECLIPMARSHALER
DCrf - win32kbase!DirectComposition::CVisualReferenceControllerMarshaler::_allocate
- DCOMPOSITIONTAG_VISUALREFERENCECONTROLLERMARSHALER
DCrg - win32kbase!DirectComposition::CRegionGeometryMarshaler::_allocate
- DCOMPOSITIONTAG_REGIONGEOMETRYMARSHALER
DCro - win32kbase!DirectComposition::CRotateTransformMarshaler::_allocate
- DCOMPOSITIONTAG_ROTATETRANSFORMMARSHALER
DCrt - win32kbase!DirectComposition::CResourceTable::_allocate
- DCOMPOSITIONTAG_RESOURCETABLE
DCrv - win32kbase!DirectComposition::CRedirectVisualMarshaler::_allocate
- DCOMPOSITIONTAG_REDIRECTVISUALMARSHALER
DCs0 - win32kbase!DirectComposition::CSharedResourceMarshaler::_allocate
- DCOMPOSITIONTAG_SHAREDRESOURCEMARSHALER
DCs3 - win32kbase!DirectComposition::CScaleTransform3DMarshaler::_allocate
- DCOMPOSITIONTAG_SCALETRANSFORM3DMARSHALER
DCsa - win32kbase!DirectComposition::CSnapshotMarshaler::_allocate
- DCOMPOSITIONTAG_SNAPSHOTMARSHALER
DCsb - win32kbase!DirectComposition::CCompositionSkyBoxBrushMarshaler::_allocate
- DCOMPOSITIONTAG_SKYBOXBRUSHMARSHALER
DCsc - win32kbase!DirectComposition::CSystemChannel::_allocate
- DCOMPOSITIONTAG_SYSTEMCHANNEL
DCsd - win32kbase!DirectComposition::CSpriteShapeMarshaler::SetBufferProperty
- DCOMPOSITIONTAG_STROKEDASHARRAY
DCse - win32kbase!DirectComposition::CSynchronizationManager::_allocate
- DCOMPOSITIONTAG_SYNCHRONIZATIONENTRY
DCsf - win32kbase!
DirectComposition::CCrossContainerGuestReadWriteSharedSectionMarshaler -
DCOMPOSITIONTAG_CROSSCONTAINERGUESTREADWRITESHAREDSECTIONMARSHALER
DCsg - win32kbase!
DirectComposition::CCrossContainerHostReadOnlySharedSectionMarshaler -
DCOMPOSITIONTAG_CROSSCONTAINERHOSTREADONLYSHAREDSECTIONMARSHALER
DCsh - win32kbase!DirectComposition::CShapeVisualMarshaler::_allocate
- DCOMPOSITIONTAG_SHAPEVISUALMARSHALER
DCsl - win32kbase!DirectComposition::CScalarMarshaler::_allocate
- DCOMPOSITIONTAG_SCALARMARSHALER
DCso - win32kbase!DirectComposition::CSemaphore::_allocate
- DCOMPOSITIONTAG_SEMAPHORE
DCsp - win32kbase!DirectComposition::CCompositionSpotLight::_allocate
- DCOMPOSITIONTAG_SPOTLIGHTMARSHALER
DCsr - win32kbase!DirectComposition::CDataSourceReaderMarshaler::_allocate
- DCOMPOSITIONTAG_DATASOURCEREADERMARSHALER
DCss - win32kbase!DirectComposition::CSharedSectionMarshaler
- DCOMPOSITIONTAG_SHAREDSECTIONMARSHALER
DCst - win32kbase!DirectComposition::CScaleTransformMarshaler::_allocate
- DCOMPOSITIONTAG_SCALETRANSFORMMARSHALER
DCsu - win32kbase!DirectComposition::CSuperWetInkVisualMarshaler::_allocate
- DCOMPOSITIONTAG_SUPERWETINKVISUALMARSHALER
DCsv - win32kbase!DirectComposition::CSpriteVisualMarshaler::_allocate
- DCOMPOSITIONTAG_SPRITEVISUALMARSHALER
DCsw - win32kbase!DirectComposition::CCompositionSurfaceWrapperMarshaler::_allocate
- DCOMPOSITIONTAG_SURFACEWRAPPERMARSHALER
DCsy - win32kbase!DirectComposition::CSynchronousSuperWetInkMarshaler::_allocate
- DCOMPOSITIONTAG_SYNCHRONOUSSUPERWETINKMARSHALER
DCsz - win32kbase!DirectComposition::CSolidColorLegacyMilBrushMarshaler::_allocate
- DCOMPOSITIONTAG_SOLIDCOLORLEGACYMILBRUSHMARSHALER
DCt3 - win32kbase!DirectComposition::CTranslateTransform3DMarshaler::_allocate
- DCOMPOSITIONTAG_TRANSLATETRANSFORM3DMARSHALER
DCtc - win32kbase!DirectComposition::CTileClumpMarshaler::_allocate
- DCOMPOSITIONTAG_TILECLUMPMARSHALER
DCtg - win32kbase!DirectComposition::CTransformGroupMarshaler::_allocate
- DCOMPOSITIONTAG_TRANSFORMGROUPMARSHALER
DCtl - win32kbase!DirectComposition::CCompositionTextLineMarshaler::_allocate
- DCOMPOSITIONTAG_COMPOSITIONTEXTLINEMARSHALER
DCto - win32kbase!DirectComposition::CTelemetryInfo::_allocate
- DCOMPOSITIONTAG_TELEMETRYINFO
DCtr - win32kbase!DirectComposition::CAnimationTriggerMarshaler::_allocate
- DCOMPOSITIONTAG_ANIMATIONTRIGGERMARSHALER
DCts - win32kbase!DirectComposition::_allocate
- DCOMPOSITIONTAG_TELEMETRYSTRING
DCtt - win32kbase!DirectComposition::CTranslateTransformMarshaler::_allocate
- DCOMPOSITIONTAG_TRANSLATETRANSFORMMARSHALER
DCtv - win32kbase!DirectComposition::CTextVisualMarshaler::_allocate
- DCOMPOSITIONTAG_TEXTVISUALMARSHALER
DCvb - win32kbase!DirectComposition::CViewBoxMarshaler::_allocate
- DCOMPOSITIONTAG_VIEWBOXMARSHALER
DCvc - win32kbase!DirectComposition::CVisualMarshaler::AllocateChildrenArray
- DCOMPOSITIONTAG_VISUALMARSHALERCHILDREN
DCvg - win32kbase!DirectComposition::CVisualGroupMarshaler::_allocate
- DCOMPOSITIONTAG_VISUALGROUPMARSHALER
DCvi - win32kbase!DirectComposition::CVisualMarshaler::_allocate
- DCOMPOSITIONTAG_VISUALMARSHALER
DCvm - win32kbase!
DirectComposition::CVirtualMonitorCaptureRenderTargetMarshaler::_allocate -
DCOMPOSITIONTAG_VIRTUALMONITORCAPTURERENDERTARGETMARSHALER
DCvr - win32kbase!DirectComposition::CVisualCaptureMarshaler::_allocate
- DCOMPOSITIONTAG_VISUALCAPTUREMARSHALER
DCvs - win32kbase!DirectComposition::CVirtualSurfaceMarshaler::_allocate
- DCOMPOSITIONTAG_VIRTUALSURFACEMARSHALER
DCvt - win32kbase!DirectComposition::CVisualTargetMarshaler::_allocate
- DCOMPOSITIONTAG_VISUALTARGETMARSHALER
DCvx - win32kbase!DirectComposition::CVisualBitmapMarshaler::_allocate
- DCOMPOSITIONTAG_VISUALBITMAPMARSHALER
DCwn - win32kbase!DirectComposition::CWindowNodeMarshaler::_allocate
- DCOMPOSITIONTAG_WINDOWNODEMARSHALER
DCwr - win32kbase!DirectComposition::CWeakReferenceBase::_allocate
- DCOMPOSITIONTAG_WEAKREFERENCE
DCwt - win32kbase!DirectComposition::CApplicationChannel::GetWeakReferenceBase
- DCOMPOSITIONTAG_WEAKREFERENCETABLEENTRY
DCxc - win32kbase!DirectComposition::CCrossChannelChildVisualMarshaler::_allocate
- DCOMPOSITIONTAG_CROSSCHANNELCHILDVISUALMARSHALER
DCxp - win32kbase!DirectComposition::CCrossChannelParentVisualMarshaler::_allocate
- DCOMPOSITIONTAG_CROSSCHANNELPARENTVISUALMARSHALER
DCys - win32kbase!DirectComposition::CYCbCrSurfaceMarshaler::_allocate
- DCOMPOSITIONTAG_YCBCRSURFACEMARSHALER
DCzc - win32kbase!DirectComposition::CProjectedShadowCasterMarshaler::_allocate
- DCOMPOSITIONTAG_PROJECTEDSHADOWCASTERMARSHALER
DCze - win32kbase!DirectComposition::CSceneMesh::_allocate
- DCOMPOSITIONTAG_SCENEMESHMARSHALER
DCzg - win32kbase!DirectComposition::CSharedSectionWrapperMarshaler::_allocate
- DCOMPOSITIONTAG_SHAREDSECTIONWRAPPERMARSHALER
DCzh - win32kbase!
DirectComposition::CSceneMeshRendererComponentMarshaler::_allocate -
DCOMPOSITIONTAG_SCENEMESHRENDERERCOMPONENTMARSHALER
DCzr - win32kbase!DirectComposition::CProjectedShadowReceiverMarshaler::_allocate
- DCOMPOSITIONTAG_PROJECTEDSHADOWRECEIVERMARSHALER
DCzs - win32kbase!DirectComposition::CProjectedShadowSceneMarshaler::_allocate
- DCOMPOSITIONTAG_PROJECTEDSHADOWSCENEMARSHALER
DCzt - win32kbase!DirectComposition::CSceneNode::_allocate
- DCOMPOSITIONTAG_SCENENODEMARSHALER
DCzv - win32kbase!DirectComposition::CSceneVisualMarshaler::_allocate
- DCOMPOSITIONTAG_SCENEVISUALMARSHALER
DCzx - win32kbase!DirectComposition::CProxyGeometryClipMarshaler::_allocate
- DCOMPOSITIONTAG_PROXYGEOMETRYCLIPMARSHALER
DCzy - win32kbase!DirectComposition::CSpatialRemarshalerMarshaler::_allocate
- DCOMPOSITIONTAG_SPATIALREMARSHALERMARSHALER
DCzz - win32kbase!DirectComposition::CSceneModelTransformMarshaler::_allocate
- DCOMPOSITIONTAG_SCENEMODELTRANSFORMMARSHALER
CSMb - dxgkrnl!CCompositionBuffer::Create - COMPOSITIONSURFACEMANAGER_BUFFER
CSMr - dxgkrnl!CBufferRealization::Create -
COMPOSITIONSURFACEMANAGER_REALIZATION
CSMi - dxgkrnl!NtOpenCompositionSurfaceRealizationInfo -
COMPOSITIONSURFACEMANAGER_REALIZATIONINFOBUFFER
TMcb - dxgkrnl!CCompositionToken::Initialize -
TOKENMANAGER_COMPOSITIONTOKENBUFFER
TMcc - dxgkrnl!CCompositionFrameCollection -
TOKENMANAGER_COMPOSITIONFRAMECOLLECTION
TMce - dxgkrnl!CCompositionFrame::TokenTableEntry::Allocate -
TOKENMANAGER_TOKENTABLEENTRY
TMcf - dxgkrnl!CCompositionFrame::Create -
TOKENMANAGER_COMPOSITIONFRAME
TMlt - dxgkrnl!CTokenManager::EnsureLegacyTokenBuffer -
TOKENMANAGER_LEGACYTOKENBUFFER
TMsg - dxgkrnl!CreateSessionTokenManager -
TOKENMANAGER_SESSIONGLOBAL
TMtb - dxgkrnl!CLegacyTokenBuffer::TokenBlock::Create -
TOKENMANAGER_TOKENBLOCK
TMte - dxgkrnl!CTokenManager::TokenQueueTableEntry::Allocate -
TOKENMANAGER_TOKENQUEUETABLEENTRY
TMto - dxgkrnl!CToken::Create -
TOKENMANAGER_TOKENOBJECT
TMtq - dxgkrnl!CTokenQueue::Create -
TOKENMANAGER_TOKENQUEUE
TMac - dxgkrnl!CAdapter::Create - TOKENMANAGER_ADAPTER
TMcc - dxgkrnl!CAdapterCollection::Create -
TOKENMANAGER_ADAPTERCOLLECTION
IMhq - win32k!CInputQueue::Create -
INPUTMANAGER_INPUTQUEUE
IMsg - win32k!CInputManager::Create -
INPUTMANAGER_SESSIONGLOBAL
FCai - dxgkrnl!CEndpointResourceStateManager::PrepareTokenInitInfoForDWM -
FLIPCONTENT_AUXILIARYPRESENTINFO
FCbm - dxgkrnl!CBackchannelManager::CBackchannelManager -
FLIPCONTENT_BACKCHANNELMANAGER
FCbr - dxgkrnl!CPoolBufferResource::Create - FLIPCONTENT_BUFFERRESOURCE
FCbs - dxgkrnl!CPoolBufferResourceState::operator new -
FLIPCONTENT_BUFFERRESOURCESTATE
FCcr - dxgkrnl!CContentResource::Create - FLIPCONTENT_CONTENTRESOURCE
FCcm - dxgkrnl!CFlipConsumerMessage::operator new - FLIPCONTENT_CONSUMERMESSAGE
FCii - dxgkrnl!CEndpointResourceStateManager::PrepareTokenInitInfoForDWM -
FLIPCONTENT_INDEPENDENTFLIPINFO
FCpb - dxgkrnl!CreateFlipPropertySet - FLIPCONTENT_PROPERTYBLOBBUFFER
FCpc - dxgkrnl!CFlipPresentCancel::operator new - FLIPCONTENT_PRESENTCANCEL
FCph - dxgkrnl!CFlipManager::Initialize - FLIPCONTENT_DEBUG_PRESENTHISTORY
FCpi - dxgkrnl!CreateFlipPropertySet - FLIPCONTENT_PROPERTYBLOBINDEXBUFFER
FCps - dxgkrnl!CFlipPropertySet::operator new - FLIPCONTENT_PROPERTYSET
FCpu - dxgkrnl!CFlipManager::ProcessTokenCreate - FLIPCONTENT_PRESENTUPDATE
FCrs - dxgkrnl!CContentResourceState::operator new -
FLIPCONTENT_CONTENTRESOURCESTATE
FCsb - dxgkrnl!CEndpointResourceStateManager::PrepareBufferSignals -
FLIPCONTENT_SIGNAL_BUFFERARRAY
FCsi - dxgkrnl!CFlipManagerSignal::operator new - FLIPCONTENT_SIGNAL
FCub - dxgkrnl!
CEndpointResourceStateManager::PrepareIncrementalUpdateForStateManager -
FLIPCONTENT_INCREMENTALRESOURCEUPDATEFORCONSUMER
FCuu - dxgkrnl!CEndpointResourceStateManager::PrepareIncrementalUpdateForUser -
FLIPCONTENT_INCREMENTALRESOURCEUPDATEFORUSER
FCwr - dxgkrnl!CFlipWaitedConsumerReturn::operator new -
FLIPCONTENT_WAITEDCONSUMERRETURN