Thread: Get real address of api not nt version
View Single Post
  #16  
Old 05-22-2018, 03:44
ioannis ioannis is offline
Friend
  
Join Date: Jan 2015
Posts: 31
Rept. Given: 6
Rept. Rcvd 9 Times in 5 Posts
Thanks Given: 6
Thanks Rcvd at 19 Times in 11 Posts
ioannis Reputation: 9
Effectively following the jumps you will see that NtUserShowWindow resides in win32u.dll
Quote:
win32u.dll!NtUserShowWindow
Reply With Quote