Get base address in x64dbg: Load the binary in x64dbg. Go to "Memory Map" tab.
Find the binary name in info column. Then copy the address with the right
click on it. For example, in the following screenshot, the x86_64 PE binary
name is Project1.exe and the base address is 0x00007FF6A4850000.
Rebase in IDA: Open the binary in IDA. Click on Edit >...
There Are many possible means to change Window caption
easiest of them being using a spy app like winspy and use the inbuilt functionality to change
take a look at this answer i wrote a few days back which shows how a title is change
change window title
or if you prefer you can code a simple FindWindow() , SetWindowText() that can do the job
the process may run a long after the icons vanish from taskbar tearing down
try closing a browser like firefox its icon will vanish long before one of the many instances of firefox gets out of task manager.
you may need to look for WM_DESTROY WM_GETICON , WM_SHOWWINDOW messages
use some spy utility like spy++ and corelate it with procmon
below is a ...
There is no single specific API for this. IIRC the taskbar button corresponds to the main window of the process so likely it’s removed once the window is destroyed (but the process may continue running until it exits).
The code you’re looking for will likely be either in the main window procedure (e.g. handling of WM_CLOSE or WM_QUIT), or after the end of ...