I am trying to debug a problem with my windows installation. Details do not really matter, but I'm looking for the answer to the following question:
explorer.exe receives a WM_SETTINGCHANGE message. In WinDbg, I can break the corresponding WndProc. How do I know who sent a message? That is: is there a way to track this back to the process called SendMessage(HWND_BROADCAST, WM_SETTINGCHANGE, ...)?
SendMessage(HWND_BROADCAST, WM_SETTINGCHANGE, ...)
Windows messages are anonymous. Your calling application has no way to determine where they came from if the message does not determine how the sender is identified (which would be easily tampered with)
RPC: http://kobyk.wordpress.com/2008/06/07/remote-procedure-call-debugging/
RPC: http://msdn.microsoft.com/en-us/library/ff542974.aspx