A forum for reverse engineering, OS internals and malware analysis 

Forum for discussion about user-mode development.
 #18088  by EP_X0FF
 Thu Feb 07, 2013 4:50 pm
Hello,

haven't found any useful links in google regarding this, and when it was required, coded example myself, see attach.

As useful documentation see LegacyApi, WinSta* routines are all use the same methods internally.

Note that some of Remote Desktop Services API's (former Terminal Services API, wtsapi32.dll) are wrappers around some of WinSta* routines.
Attachments
(1.47 KiB) Downloaded 58 times
 #18096  by EP_X0FF
 Fri Feb 08, 2013 7:34 am
myid wrote:Pascal program is not useful.
I like C program. :?
Well if you can't translate yourself, see attach then. In win64 app WinStationEnumerateProcess will return ERROR_NOT_SUPPORTED, while second method works fine. Please don't ask for C# or brainfuck's translations.
Attachments
(1.46 KiB) Downloaded 63 times