New answers tagged

1

Procedure: Get base address in x64dbg: Load the binary in x64dbg. Go to "Memory Map" tab. Find the binary name in info column. Then copy the address with the right click on it. For example, in the following screenshot, the x86_64 PE binary name is Project1.exe and the base address is 0x00007FF6A4850000. Rebase in IDA: Open the binary in IDA. Click on Edit >...


0

There Are many possible means to change Window caption easiest of them being using a spy app like winspy and use the inbuilt functionality to change take a look at this answer i wrote a few days back which shows how a title is change change window title or if you prefer you can code a simple FindWindow() , SetWindowText() that can do the job ...


0

the process may run a long after the icons vanish from taskbar tearing down try closing a browser like firefox its icon will vanish long before one of the many instances of firefox gets out of task manager. you may need to look for WM_DESTROY WM_GETICON , WM_SHOWWINDOW messages use some spy utility like spy++ and corelate it with procmon below is a ...


0

There is no single specific API for this. IIRC the taskbar button corresponds to the main window of the process so likely it’s removed once the window is destroyed (but the process may continue running until it exits). The code you’re looking for will likely be either in the main window procedure (e.g. handling of WM_CLOSE or WM_QUIT), or after the end of ...


Top 50 recent answers are included