Quantcast
Channel: The Old New Thing
Viewing all articles
Browse latest Browse all 24428

re: Why is it possible to create a toolbar with the wrong HINSTANCE? And what's the right HINSTANCE anyway?

$
0
0

@Joshua: The low bytes of the Peb and Teb are contractually set by Microsoft and won't change because too many people rely on stuff like the peb pointer in the Teb, the IsBeingDebugged value in the teb and the location of the NtTib structure in it.

The high bytes are uncontractual and not only can change between versions of Windows, but _DO_ change between versions of Windows. That's why MSDN doesn't give you information about it (but WinDbg .reload; dt nt!_PEB .; will)


Viewing all articles
Browse latest Browse all 24428

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>