Windows 커널 루틴 Prefix
Windows 의 커널 루틴 명명 규칙은 다음과 같다.
- prefix verb noun suffix
- 예제 : KeRevertToUserAffinityThreadEx
Windows 에서 사용되는 Kernel Prefix 의 종류는 다음과 같다.
Prefix |
Kernel-component |
Aux |
Auxiliary Library |
Clfs |
Common Log File System (CLFS) Library |
Cc |
Cache Manager |
Cm |
Configuration Manager |
Ex |
Executive Library |
Flt |
Filter Manager |
Hal |
Hardware Abstraction Layer (HAL) |
Io |
I/O Manager |
Ke |
Core Kernel Library |
Mm |
Memory Manager |
Nt |
User-mode Native Services |
Ob |
Object Manager |
Po |
Power Manager |
Ps |
Process and Thread Library |
Rtl |
Run-Time Library |
FsRtl |
File System Run-time Library |
Se |
Security Reference Monitor |
Wmi |
Windows Management Instrumentation Library |
Zw |
Kernel-mode wrappers for Native Services |
참조 :
http://blogs.msdn.com/wdkdocs/archive/2008/12/19/windows-kernel-routine-naming-conventions.aspx