#16
|
|||
|
|||
win32u.dll exists in Win10 (dont know about Win 8)
Quote:
Quote:
1. at address 00007FFEFF490B00 in user32.dll 2. at address 00007FFEFF4E5178 in user32.dll 3. at address 00007FFEFE271B50 in win32u.dll |
The Following 2 Users Say Thank You to ioannis For This Useful Post: | ||
Mahmoudnia (05-23-2018), niculaita (05-22-2018) |
#17
|
|||
|
|||
Sorry, please upload it somewhere else.
|
#18
|
||||
|
||||
Quote:
http://www.mediafire.com/file/h55ajo90cor6o78/Check.rar |
The Following User Says Thank You to Mahmoudnia For This Useful Post: | ||
dosprog (05-23-2018) |
#19
|
|||
|
|||
@Mahmoudnia
By the way, one thing that may confuse you, is that, you are seing user32.NtUserShowWindow instead of user32.ShowWindow in the debugger because you have loaded the debugging symbols of the module user32.dll. The exported function name is obviously ShowWindow but the internal name of the function included in the debugg symbols is NtUserShowWindow which is what you see. Remove the debug symbols for user32.dll cached on your pc and then try Ctrl+G again. |
The Following User Says Thank You to ioannis For This Useful Post: | ||
Mahmoudnia (06-08-2019) |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
How to identify the address where the test is done? | byvs | General Discussion | 13 | 10-25-2016 08:40 |
Get APi from the address | ahmadmansoor | General Discussion | 21 | 03-03-2011 07:49 |
Finding API Address | britedream | General Discussion | 5 | 10-05-2006 21:28 |
Problem with Return Address | ArC | General Discussion | 2 | 08-03-2003 16:13 |