|
Prefix |
Component |
|
--------- |
------------------- |
|
Cm |
Configuration manager |
|
Ex |
Executive support routines |
|
FsRtl |
File system driver run-time library |
|
Hal |
Hardware abstraction layer |
|
Io |
I/O manager |
|
Ke |
Kernel |
|
Ks |
Kernel Streaming |
|
Lpc |
Local procedure call |
|
Lsa |
Local security authentication |
|
Mm |
Memory manager |
|
Nt |
Windows system services (most of which are exported as Windows functions) |
|
Ob |
Object manager |
|
Po |
Power manager |
|
Pp |
PnP manager |
|
Ps |
Process support |
|
Rtl |
Run-time library |
|
Se |
Security |
|
Wmi |
Windows Management Instrumentation |
|
Zw |
Mirror entry point for system services (beginning with Nt) that sets previous
access mode to kernel, |
출처 : http://ssmhz.tistory.com/171
