Anyone know howto get TEB/PEB address of another process? I want to use it to patch aspr dbg check without hooking. TIA.

Hi.

You could use GetThreadContext w/ CONTEXT_SEGMENTS to obtain the value of FS in your target thread;
Then use GetThreadSelectorEntry specifying the value of FS.

LDT_ENTRY.HighWord.Bytes.BaseHi, LDT_ENTRY.HighWord.Bytes.BaseMid and LDT_ENTRY.BaseLow.
Shift the values in place, do a bit of OR'ing and voila!

Regards, sna

(OMFG the formatting came out wrong)

Great thanks, worked like a charm =)