Unit WinStuff

Classes

Functions

IsConsoleProcess - Return whether a process is running as a console app.
IsWin32Process - Return whether a process if Win32 (True) or Win16 (False).
IsWin32Thread - Return whether a thread if Win32 (True) or Win16 (False).
IsWin32Window - Return whether a window is Win32 (True) or Win16 (False).
Unobfuscate - These functions were writting using information found in Matt Pietrek's Windows 95 System Programming Secrets, (1995, IDG Books).

Types

Constants

Variables


Functions


function IsConsoleProcess(Handle: DWord): Boolean;

Return whether a process is running as a console app.

function IsWin32Process(Handle: DWord): Boolean;

Return whether a process if Win32 (True) or Win16 (False).

function IsWin32Thread(Handle: DWord): Boolean;

Return whether a thread if Win32 (True) or Win16 (False).

function IsWin32Window(Handle: HWnd): Boolean;

Return whether a window is Win32 (True) or Win16 (False).

XOR with thread ID to learn Obfuscator mask


function Unobfuscate(ID: DWord): DWord;

These functions were writting using information found in Matt Pietrek's Windows 95 System Programming Secrets, (1995, IDG Books). The code below was written from scratch by Tempest Software and is copyrighted by Tempest Software. You are granted permission to use this software in a component, library, or application, without royalty. Copyright © 1996 Tempest Software. All rights reserved. { Convert a ThreadID or ProcessID into a pointer to the thread or process DB record.

Microsoft XORs the Obfuscator mask with a ThreadDB pointer to make a ThreadID. Fortunately, one can learn the Obfuscator value and XOR it with the ThreadID to obtain the ThreadDB pointer. See Matt Pietrek's Wndows 95 System Programming Secrets for more information.


Types


Constants


Variables