Paged and Nonpaged Pools The paged pool and nonpaged pool are essentially kernel-mode heaps that are used by all the kernel components.
System Cache The system cache space is where the Windows cache manager maps all currently cached files. Cache manager APIs such as
CcCopyRead and
CcCopyWrite.
Terminal Services Session Space This memory area is used by the kernel mode component of the Win32 subsystem: WIN32K.SYS.
System Working Set The system working set is a system-global data structure that manages the system's physical memory use.
System Page-Table Entries (PTE) This is a large region that is used for large kernel allocations of any kind. Device drivers can allocate System PTE regions by calling the
MmAllocateMappingAddress kernel API.
评论