Created
March 17, 2020 15:17
-
-
Save joshfinley/bc54df3c092e224ad08140cfd619fa2d to your computer and use it in GitHub Desktop.
List of NT prefixes - sourced from https://community.osr.com/discussion/72000/meaning-of-the-function-prefices
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Cc = Cache manager (???) | |
Csr = Client Server support functions(LPC; related: CSRSS.EXE) | |
Dbg = Debugger support functions | |
Etw = Extended tracing ... support functions (???) | |
Ex = Executive | |
Fs = File system support functions | |
Hal = Hardware abstraction layer functions | |
Inbv = Something like: _In_itial _B_oot _V_ideo functions (???) | |
Io = I/O manager support functions | |
Kd = Kernel debugger support functions | |
Ki = Kernel interrupt support functions (???) | |
Ldr = PE image loader support functions | |
Lpc = LPC support functions | |
Lsa = Local security authority support functions | |
Mm = Memory manager support functions | |
Nls = Native language support functions | |
Ob = Object manager functions | |
Pfx = Name prefix support functions (???) | |
Po = Power management support functions | |
Ps = Process management support functions | |
Rtl = Runtime library functions | |
Rtlp = Private runtime library functions | |
Se = Security support functions | |
Wmi = Windows management instrumentation support functions | |
Vf = Verification (?) functions |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment