Skip to content

Instantly share code, notes, and snippets.

@hxm-cpp
Last active September 13, 2023 12:58
Show Gist options
  • Save hxm-cpp/fcfdf4ab97f64ac8325ab49cfdd0f97f to your computer and use it in GitHub Desktop.
Save hxm-cpp/fcfdf4ab97f64ac8325ab49cfdd0f97f to your computer and use it in GitHub Desktop.
Windows Apis Prefixes
Alpc = Advanced Local Inter-Process Communication
Cc = Common Cache
Cm = Configuration Manager
Dbgk = Debugging Framework for User-Mode
Em = Errata Manager
Etw = Event Tracing for Windows
Ex = Executive support routines
FsRtl = File System driver Run-Time Library
Hal = Hardware Abstraction Layer
Hvl = Hyper visor Library
Io = I/O Manager
Kd = Kernel Debugger
Ke = Kernel
Lsa = Local Security Authority
Mm = Memory Manager
Nt = NT System Services
Ob = Object Manager
Pf = Prefetcher
Po = Power Manager
Pp = PnP Manager
Ps = Process Support
Rtl = Run-time Library
Se = Security
Tm = Transaction Manager
Vf = Verifier (Driver Verifier)
Whea = Windows Hardware Error Architecture
Wmi = Windows Management Instrumentation
Wdi = Windows Diagnostic Infrastructure
Zw = Similar to NT, but sets access mode to Kernel, w
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment