Dmitry Timoshkov : kernel32: On process entry store PEB address in %ebx.