In Matt Pietrek's "Windows 95 System Programming Secrets" he talks about how process and thread ID's are XOR'd with an "obsfucator" value to give a pointer to the process or thread's internal data structures. The code provided in his book does not appear to work on Windows 95 revision B (with USB supplement). I haven't tried it on Windows 98 yet, but I'm assuming that it probably does not work there, either.
Does anybody know if the method to retrieve the obfuscator has changed, or if it still even exists? I know in original betas of Chicago, the process ID was a direct pointer to the structure - no obfuscator existed. Could it have possibly (however unlikely) been removed outright?
I would really like to be able to walk the process and thread structures, just to see what's going on, and I think the only way I'll be able to do this is to find out what has changed with the "obsfucator" and how I can find the structures in OSR2 and 98.
Thanks in advance.