Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #2  
Old 11-23-2016, 15:29
Mkz Mkz is offline
Friend
 
Join Date: Jan 2002
Posts: 98
Rept. Given: 0
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 5
Thanks Rcvd at 25 Times in 17 Posts
Mkz Reputation: 2
A-gui.exe is a regular native application which launches a java process, much like you can launch java(w) itself using the command line.
With a tool such as Process Explorer you can see what the full command line is of the child javaw process so that perhaps you can even launch it manually, without having A-gui.exe do it.

The parent process is probably launching java with an API such as JNI_CreateJavaVM, see here: hxxp://docs.oracle.com/javase/7/docs/technotes/guides/jni/spec/invocation.html

You can debug both the parent and the child process with Olly, naturally, but if the child is javaw, you're better off reversing its classes or monitoring with things like JVisualVM or Mission Control.
Reply With Quote
The Following User Says Thank You to Mkz For This Useful Post:
tonyweb (11-23-2016)
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 03:31.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )