Joined: 29 Nov 2005 Posts: 375 Location: Farmington NH, USA
Posted: Sun Feb 15, 2009 1:18 pm Post subject:
Most Kernel Mode Functions take some form of User Input(though not Directly in most cases..)
and being That NtUserSendInput is part of win32k.sys and not ntoskrnl is the reason why it has no Zw Function
but a simple way to know where parameters come from is looking at the parameters themselves..and the amount of checking the function does on those parameters..(more checks = Usermode Parameters) and vice versa
regards BanMe _________________
don't +rep me..i do not wish to have "status" or "recognition" from you or anyone.. thank you.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum