The Windows kernel has a unique system of constructing the names for its routines. It uses a specific set of abbreviations to define each routine’s location, actions, and versioning. Because the Windows kernel has over 800 routines, it is helpful to understand the basic principles of its naming conventions when you are reading sample driver source code.
Most kernel routines use the following naming structure:
<prefix><verb><noun><suffix>
· The prefix is an abbreviation of the kernel-mode component where the routine is located. All routines can be found in either one of the manager components or one of the library components of the kernel operating system.
· The verb indicates the action that is being taken by the kernel.
· The noun indicates the kernel object being acted upon by the routine.
· The suffix differentiates between versions of a routine.
|