43,732 questions
Score of 1
1 answer
72 views
How to find all handles to my process opened by other processes from usermode?
I tried enumerating handles from NtQuerySystemInformation() and then comparing the result of GetProcessId() on that handle with the target pid, but GetProcessId() returns 0 if the handle doesn't have ...
Score of -1
0 answers
87 views
On Windows, the C# Bluetooth LE API cannot pair with iPhone devices
I aim to establish a Bluetooth connection with mobile devices (iOS/Android) and perform both Classic and BLE operations.
I have already fully implemented all these functions on Linux using DBus、BlueZ, ...
Score of 2
0 answers
93 views
Can RegisterApplicationRestart relaunch an MSIX app after ExitProcess(0) following a StoreContext update? [closed]
I am reviewing a Windows restart flow in a Flutter desktop app packaged as MSIX and intended for Microsoft Store distribution. The app uses a custom Flutter Windows plugin; there is no external ...
Score of 0
1 answer
105 views
"Ordinal Not Found" with ComCtl32.lib
Here is a simple Win32 app:
#include <Windows.h>
#include <CommCtrl.h>
#pragma comment(lib, "ComCtl32.lib")
int WINAPI wWinMain(_In_ HINSTANCE hInstance,
...
Score of 3
1 answer
146 views
How to tell if NTLM is disabled programatically?
We have some code that reads:
builder.WebHost
.UseHttpSys(options =>
{
options.Authentication.Schemes = GetSecurityObjects.IsDomainJoined
? (AuthenticationSchemes.NTLM | ...
Score of 1
0 answers
121 views
Why does StartTraceA return ERROR_ACCESS_DENIED non-elevated, but EnableTraceEx2 returns 1450 elevated for DXGI/DxgKrnl ETW providers?
I am building a native C++ FPS collector on Windows 11. The collector uses ETW to listen for graphics present events from graphics-related providers.
The target process is PathOfExile.exe running in ...
Score of -1
0 answers
64 views
SHGetFileInfo on "Camera.lnk" by PIDL outputs "ReturnHr(3) tid(50b8) 80070490 Element not found" but icon is correct
I need to get the System Image List icon of the Windows Desktop shortcut camera.lnk.
This Camera shortcut doesn't point to a physical file, but rather to
Microsoft.WindowsCamera_8wekyb3d8bbwe!App, ...
Score of 2
2 answers
193 views
Why does `QueryServiceConfig2` return a "The parameter is incorrect" error when requesting a service's preferred node?
I'm writing C#/PowerShell code to get all a service's configuration with QueryServiceConfig2 using P/Invoke. I'm able to get all configuration information except preferred node (...
Score of 0
1 answer
535 views
How do I use the Windows API to determine if NUMA is enabled?
I'm writing code to read Windows service configuration using QueryServiceConfig2(). However, when I try to get the service's preferred node, the call to QueryServiceConfig2() used to determine the ...
Score of 2
0 answers
84 views
EXIT_PROCESS_DEBUG_EVENT silently dropped for emulated x64 debuggee on Windows ARM64 under load
Working on my profiler (and started a lot of tests simultaneously) I ran into a very annoying issue.
On Windows 11 ARM64, debugging an x64 (emulated) process, the final EXIT_PROCESS_DEBUG_EVENT is ...
Score of 0
1 answer
105 views
What are the meanings of Windows service trigger types 7 and 30?
I'm working with the QueryServiceConfig2 Windows API to return SERVICE_TRIGGER objects for services. Each trigger has a type. The SERVICE_TRIGGER documentation lists the meaning for types with values ...
Score of 0
1 answer
233 views
How to set window as Foreground when it minimized?
I have a simple program written in WinAPI using C++. This program displays a regular window, and if the user attempts to open it again, the attempt is interrupted, and focus is transferred to the ...
Score of 0
1 answer
294 views
LoadLibrary fails with "An Application Control policy has blocked this file" on some PCs after overwriting DLL
I have the following setup: An application is installed via a zip-archive on a users PC. This application has an integrated updater, which will load and overwrite files from a server. The application ...
Score of -1
1 answer
151 views
TerminateProcess() Windows API call from Python [closed]
I am working with a very complicated software system on Windows. It uses win32process.TerminateProcess() in Python to stop running GUI applications on the desktop. It's my understanding that this ...
Score of 1
0 answers
117 views
CertFindChainInStore() stopped returning certs from eToken hardware store
Some recent Windows change caused the CRYPT32.CertFindChainInStore() Win32 API for C/C++ to no longer return certificates stored on some eToken hardware, specifically model 5110 USB tokens. Also the ...