Exetools  

Go Back   Exetools > General > General Discussion
Reload this Page Get real address of api not nt version
Register Forum Rules FAQ Calendar Mark Forums Read

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 05-22-2018, 03:44
ioannis ioannis is offline
Friend
  
Join Date: Jan 2015
Posts: 31
Rept. Given: 6
Rept. Rcvd 9 Times in 5 Posts
Thanks Given: 6
Thanks Rcvd at 19 Times in 11 Posts
ioannis Reputation: 9
Effectively following the jumps you will see that NtUserShowWindow resides in win32u.dll
Quote:
win32u.dll!NtUserShowWindow
Reply With Quote
  #2  
Old 05-22-2018, 04:22
Mahmoudnia's Avatar
Mahmoudnia Mahmoudnia is offline
Family
  
Join Date: Nov 2012
Posts: 240
Rept. Given: 64
Rept. Rcvd 145 Times in 50 Posts
Thanks Given: 211
Thanks Rcvd at 332 Times in 107 Posts
Mahmoudnia Reputation: 100-199 Mahmoudnia Reputation: 100-199
win32u.dll is not exist in System32 folder and I have to know where are these bytes from because ShowWindow API belongs to user32.dll
Reply With Quote
Reply

« Previous Thread | Next Thread »
Thread Tools
Display Modes
Hybrid Mode Hybrid Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
fake mac address theGate General Discussion 16 08-13-2022 10:12
How to identify the address where the test is done? byvs General Discussion 13 10-25-2016 08:40
Get APi from the address ahmadmansoor General Discussion 21 03-03-2011 07:49
Finding API Address britedream General Discussion 5 10-05-2006 21:28


All times are GMT +8. The time now is 04:40.

Aaron's homepage - Top

Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )