olly plug-in monitor keystrokes

[n0ital]

Hey all,

Is there an Olly plug-in that monitors keystrokes and displays mem location where they are originally stored?

tnx

[Kerlingen]

Could you add some more explanation to your question? What do you want to achieve exactly?

Your text reads like you would like to have a breakpoint when somebody calls GetWindowText or similar. The real keystrokes are not accessible by applications, because they are handled deep inside kernel code and are passed down to the application in message queues.

[Fyyre]

Find WndProc in the app you are debugging... ( look for call to GetMessage, or PeekMessage ) there will be a switch/case block near by, check for WM_KEYDOWN, WM_CHAR, WM_Input...

example for WM_KEYDOWN ..; wParam will hold the virtual key code, (lParam & 0xffff) will be the scan code of the key pressed.

Also you can check for functions such as GetKeyState, GetAsyncKeyState, etc, and break there.

-Fyyre

Originally Posted by n0ital

Hey all,

Is there an Olly plug-in that monitors keystrokes and displays mem location where they are originally stored?

tnx