The Old New Thing

Practical development throughout the evolution of Windows.

Latest posts

Image
Jul 6, 2026
Post comments count 20
Post likes count 5

I opened a file with FILE_FLAG_DELETE_ON_CLOSE, but now I changed my mind

Image
Raymond Chen

You can't change your mind, but you can do it a different way.

Image
Jul 3, 2026
Post comments count 3
Post likes count 3

How did we conclude that CcNamespace.dll was the ringleader of a group of DLLs that unloaded prematurely?

Image
Raymond Chen

Contextual clues.

Image
Jul 2, 2026
Post comments count 8
Post likes count 3

The case of the thread executing from an unloaded third-party DLL

Image
Raymond Chen

Oops, I didn't realize that I was still doing that.

Image
Jul 1, 2026
Post comments count 5
Post likes count 1

It rather involved being on the other side of this airtight hatchway: Changing administrative settings

Image
Raymond Chen

Unlocking the door from the inside.

Image
Jun 30, 2026
Post comments count 3
Post likes count 1

2026 mid-year link clearance

Image
Raymond Chen

Made it to another midpoint.

Image
Jun 30, 2026
Post comments count 5
Post likes count 3

A compatibility note on the abuse of Windows window class extra bytes

Image
Raymond Chen

Finding an illicit place to hide data.

Image
Jun 29, 2026
Post comments count 3
Post likes count 3

The evolution of window and class extra bytes in Windows

Image
Raymond Chen

The intended usage is encoded in the prefix.

Image
Jun 26, 2026
Post comments count 21
Post likes count 6

The case of the DLL that was not present in memory despite not being formally unloaded, part 2

Image
Raymond Chen

Tying two bugs together.

Image
Jun 25, 2026
Post comments count 3
Post likes count 4

Raymond’s hot take on Hainanese chicken

Image
Raymond Chen

Subtlety.