Search This Blog

Most windows kernel routines use the following naming structure:



  • The prefix is an abbreviation of the kernel-mode component where the routine is located. All routines can be found in either one of the manager components or one of the library components of the kernel operating system.
  • The verb indicates the action that is being taken by the kernel.
  • The noun indicates the kernel object being acted upon by the routine.
  • The suffix differentiates between versions of a routine.
Read more...

0 comments