Ollydbg handles
 

Hi :)

This may sound like a dumb question but :confused:

How the hell do you find a window handle in Olly :cool:

SICE was a snitch but I have been trying for the last 30minutes to track mouse activity, like HANDLE XXXX WM_LBUTTONUP but buggered if I can work it out :confused:

Someone out there must be able to tell me before I go absolutely crazy :eek:

Before you flame me JMI it's probably just another synapse failing to fire :p

/hobferret

really dumb: there's a nice "W" button, no shourtcut for it.

hobferret:

Those of us old enough to have "synapses failing to fire" should stick together. :o I see only 2 problems with the survival of our "group."

1. Most of the time when my "synapses fail to fire" I can't remember who "I" am. :eek:

2. The rest of the time a can't remember who the rest of the members of the group are. :D

Ah well. Such is life for we older folks. :)

Regards,

Hey Shub Nigurrath :)

I know about the "W" button, I will try to explain a bit more :confused:

When I have a messagebox on the screen and then try to press the "W" button all that happens is the messagebox flashes :confused:

So what the hell am I doing wrong :D

Was assuming there must be another method of doing it :confused:

Tried it with Olly always on top and with "floating windows" :p

And JMI my friend I just can't remember anything :eek:

/hobferret

well from your explanation I cannot really understand what happens..the only thing that come to my mind is to try the WindowInfo plug, which you can find in the stuph Olly's page or break in the usual APIs which are always called to show any window.

OK Shub :)

Will try the plugin, have already tried breaking on "ShowWindow" and "DestroyWindow" but for some weird reason it then breaks in miles of obfuscated code :D

Thanks

/hobferret

well since you are talking about a messagebox i can possibly hazard a guess :)
a messagebox that has pushed its owner window handle and the Flag MB_APPLMODAL
wont let you do anything with the owner window unless you have disposed the messagebox i feel that is what you are experiencing :)

edit
well to reinforce i cooked up a small code

you wont be able to do anything with the parent
ie if you copy paste this to your desktop and execute it from there
you wont be able to click open you MYComputer mydocuments etc :)

There are few plugins for this. Like WindowJuggler by EsseEmme and WindowInfor by DDM/FFF

sure there are plugins nikola but what is the use if you cant use them or even click open the plugins menu :) may be you should download the attachment load it in olly and then f9 to execute it and then try getting the
plugin menu active :)
now if you reply "well so you can use sysinternals process viewer or ms spy++ or prcview to find the handles externally :) " i have no counter argument to that

Hi JuneMouse :)

I understand what you are saying, a messagebox that has pushed its owner window handle, had tried that also but still failed to get a break :confused:

Have only just realized that the WindowJuggler plugin needs to be activated before you run the program :D

To Shub, can't get any joy with windowinfo plugin at all :eek:

The trouble really is that along with JMI we are both that old not only does the computer think faster than us the worms do too :mad:

No offense JMI mate :)

/hobferret

I learned a long, long time ago not to take offense at what people say. If they say something worthy of a retort, I just try to be somewhat clever about it. :D And no one has said anything in this thread which even appears to be trying to be offensive. :p

It's amazing how frustrated people get when they discover they can't get you angry or hurt your feelings.

Another thing I also learned a long, long time ago was that when I deserve to be corrected about something, I should try to have the good sense to accept it with some simple grace. That also really annoys people who want to get you down. ;)

And Hobferret you just need to learn how to outsmart the dang computers. It's really simple to prevent them from thinking faster than we do. Just keep a really, really old computer running around the house and use it once in a while to reassure yourself you still have "personal computing" speed faster than a simple piece of silicone. :D And if that fails, take a very large hammer and show it just who's still Boss around there. :D

Regards,

Hey JMI :)

You are too clever for me, I am always outsmarted by the board :D

Dang computers, well there's a thing. Like I said before I'm in England now and dont have an old Dang; however I do have an old Amstrad laptop that goes about 10 cycles a second so I will have to try that :D

Remember what I said over on exetools, I was fast enough to dodge the lead at the Battle of Second Bull Run, or Second Manassas, whichever side you want to be on. 1862 seems a long time ago now, no wonder I can't think fast enough at my age :D

/hobferret

Yes. I do remember. I, myself, was already too old to join the fighting back then, but I did observe you still "standing" there like a "Stonewall," although your nickname came from the battle of First Manassas on July 21, 1861.

Not too many actually remember your "real" name now, but I know your mother christened you Thomas Jonathan. ;)

Regards,

JMI ha ha :D

You gotten me mixed up, Thomas Jonathan was already 23 years old when I was born, however, the family knew him well :o

But I bet you were not afraid to pick up a pitchfork even if you were too old to fight :D

/hobferret

In my guise as the Devil Incarnate, I'm generally rumored to carry a pitchfork all the time. :eek: :D

Ah, and that would make you born in 1857, when your ancestor/patron portrait was getting ready to merry Mary Anna Morrison, a distant relative of mine. We must be kin. :)

Regards,