Windows Kernel Function Name

Windows kernel functions have a good feature in naming, that is, function names are all prefixed by their levels or modules. After learning about these prefixes, you can see a function name to roughly understand the hierarchy and modules of the function. The main prefixes are:

Ex: management layer. ex is the first two letters of executive.

KE: the core layer. Ke is the first two letters of the kernel.

HAL: Hardware Abstraction Layer. Hal is the abbreviation of hardware Hardware Abstraction action layer.

Ob: Object Management. Ob is the first two letters of an object.

MM: memory management. mm is short for Memory Manager.

PS: Process (thread) management. PS indicates process.

SE: Security Management. Se is the first two letters of security.

IO: I/O management.

FS: File System. FS is short for file system.

Cc: File Cache Management. CC indicates cache.

CM: System Configuration Management. CM is short for Configuration Manager.

PP: "plug-and-play" management. PP indicates PNP.

RTL: RuntimeProgramLibrary. RTL is the abbreviation of Runtime Library.

 

Http://book.csdn.net/bookfiles/1044/100104431305.shtml