is possible current locale of thread living inside windows process? there utility shows or maybe win32 api call?
the locale stored in teb, have able open process process_vm_read rights , thread thread_query_information , call openthread()+ntqueryinformationthread(threadbasicinformation) , teb address in thread_basic_information , read readprocessmemory().
all of undocumented , change @ time, need handle wow64 etc...
Comments
Post a Comment