Ollydbg handles
 

Hi :)

This may sound like a dumb question but :confused:

How the hell do you find a window handle in Olly :cool:

SICE was a snitch but I have been trying for the last 30minutes to track mouse activity, like HANDLE XXXX WM_LBUTTONUP but buggered if I can work it out :confused:

Someone out there must be able to tell me before I go absolutely crazy :eek:

Before you flame me JMI it's probably just another synapse failing to fire :p

/hobferret

really dumb: there's a nice "W" button, no shourtcut for it.

hobferret:

Those of us old enough to have "synapses failing to fire" should stick together. :o I see only 2 problems with the survival of our "group."

1. Most of the time when my "synapses fail to fire" I can't remember who "I" am. :eek:

2. The rest of the time a can't remember who the rest of the members of the group are. :D

Ah well. Such is life for we older folks. :)

Regards,

Hey Shub Nigurrath :)

I know about the "W" button, I will try to explain a bit more :confused:

When I have a messagebox on the screen and then try to press the "W" button all that happens is the messagebox flashes :confused:

So what the hell am I doing wrong :D

Was assuming there must be another method of doing it :confused:

Tried it with Olly always on top and with "floating windows" :p

And JMI my friend I just can't remember anything :eek:

/hobferret

well from your explanation I cannot really understand what happens..the only thing that come to my mind is to try the WindowInfo plug, which you can find in the stuph Olly's page or break in the usual APIs which are always called to show any window.

OK Shub :)

Will try the plugin, have already tried breaking on "ShowWindow" and "DestroyWindow" but for some weird reason it then breaks in miles of obfuscated code :D

Thanks

/hobferret

well since you are talking about a messagebox i can possibly hazard a guess :)
a messagebox that has pushed its owner window handle and the Flag MB_APPLMODAL
wont let you do anything with the owner window unless you have disposed the messagebox i feel that is what you are experiencing :)

edit
well to reinforce i cooked up a small code

you wont be able to do anything with the parent
ie if you copy paste this to your desktop and execute it from there
you wont be able to click open you MYComputer mydocuments etc :)

There are few plugins for this. Like WindowJuggler by EsseEmme and WindowInfor by DDM/FFF

sure there are plugins nikola but what is the use if you cant use them or even click open the plugins menu :) may be you should download the attachment load it in olly and then f9 to execute it and then try getting the
plugin menu active :)
now if you reply "well so you can use sysinternals process viewer or ms spy++ or prcview to find the handles externally :) " i have no counter argument to that

Hi JuneMouse :)

I understand what you are saying, a messagebox that has pushed its owner window handle, had tried that also but still failed to get a break :confused:

Have only just realized that the WindowJuggler plugin needs to be activated before you run the program :D

To Shub, can't get any joy with windowinfo plugin at all :eek:

The trouble really is that along with JMI we are both that old not only does the computer think faster than us the worms do too :mad:

No offense JMI mate :)

/hobferret

I learned a long, long time ago not to take offense at what people say. If they say something worthy of a retort, I just try to be somewhat clever about it. :D And no one has said anything in this thread which even appears to be trying to be offensive. :p

It's amazing how frustrated people get when they discover they can't get you angry or hurt your feelings.

Another thing I also learned a long, long time ago was that when I deserve to be corrected about something, I should try to have the good sense to accept it with some simple grace. That also really annoys people who want to get you down. ;)

And Hobferret you just need to learn how to outsmart the dang computers. It's really simple to prevent them from thinking faster than we do. Just keep a really, really old computer running around the house and use it once in a while to reassure yourself you still have "personal computing" speed faster than a simple piece of silicone. :D And if that fails, take a very large hammer and show it just who's still Boss around there. :D

Regards,

Hey JMI :)

You are too clever for me, I am always outsmarted by the board :D

Dang computers, well there's a thing. Like I said before I'm in England now and dont have an old Dang; however I do have an old Amstrad laptop that goes about 10 cycles a second so I will have to try that :D

Remember what I said over on exetools, I was fast enough to dodge the lead at the Battle of Second Bull Run, or Second Manassas, whichever side you want to be on. 1862 seems a long time ago now, no wonder I can't think fast enough at my age :D

/hobferret

Yes. I do remember. I, myself, was already too old to join the fighting back then, but I did observe you still "standing" there like a "Stonewall," although your nickname came from the battle of First Manassas on July 21, 1861.

Not too many actually remember your "real" name now, but I know your mother christened you Thomas Jonathan. ;)

Regards,

JMI ha ha :D

You gotten me mixed up, Thomas Jonathan was already 23 years old when I was born, however, the family knew him well :o

But I bet you were not afraid to pick up a pitchfork even if you were too old to fight :D

/hobferret

In my guise as the Devil Incarnate, I'm generally rumored to carry a pitchfork all the time. :eek: :D

Ah, and that would make you born in 1857, when your ancestor/patron portrait was getting ready to merry Mary Anna Morrison, a distant relative of mine. We must be kin. :)

Regards,

JMI The Devil Incarnate :D

Mate your synapses are definately failing 1824+23=1847 :cool:

Are we talking about the Mary Anna Morrison who died in 1915, if so and she is really a distant relative you should be a proud man. "Old blue light" was very much endeared to her :cool:

/hobferret

Well actually, it was my eyesight, rather than my synapses that failed me. It was 5:30 a.m. my time when I made that post and I had been working all night rebuilding three laptops and installing all the updates and I simply mis-read the Birthdate for the General as "1834" and added your "24". The math was correct for what I "thought" I saw. :eek: Where is Ben Franklin when we need him. I've got to try some of his new fangled spectacles. :D

I guess it is a good thing he was a much better General than he was a professor. ;)

Regards,

JMI Oops :o

I never thought of him, maybe that's what we need :D

Let's go fly a kite and maybe a shock will put everything back to normal :D

I think you can find him in Christ Church cemetary PA :cool:

The spectacles are a good idea too, everything fails with age :D

/hobferret

JMI have you stopped reading the forum posts ??
how come these two here are posting dud posts to increase thier post count ??
is it an official post count scam racket *
one is gonna be a vvip and other will become vip if they are allowed to continue
in this manner
your urgent intervention is required to stop the ghosts from posting old tales from 1847

*
well i increased my post count by one in the process

Where? Where is this happening? I didn't "see" it. :eek: Where are those dang spectacles???

And hobferret, according to the movie "National Treasure", that's not all that's buried "in Christ Church cemetary PA." :eek: ;)

Regards,

JMI amigo mio :)

Will have to get my spectacles out, the good pair and check, because I thought I had the one and only original copy of the Declaration of Independence :confused:

Justin Bartha has disappearing spectacles, did you notice it in the movie, one shot they are there and the next they have disappeared. :cool:

It's only a little banter JuneMouse, although my mouse does not have a month, just Microsoft. :D

We have done stuff like this before on exetools so don't panic about being a VIP+, I don't mind being a noob :eek:

/hobferret

Hey hobferret,

I believe JuneMouse was just joining in the general fun and humour attempts of our exchange by making an "offtopic" comment about "our" "offtopic" discussion. :D If you were wearing your spectales, you would have drawn that conclusion from the tiny comment after the "*", whereby JuneMouse noted his own clever postcounting increase technique.

And when I watched National Treasure I was mostly struck by two things and did not catch the disappearing spectales, probably because, again, I was not wearing my own. :)

1. I was SO releaved that someone finally found those missing scrolls from the Library of Alexandria. There were a few I had not had time to finish reading before the fire and I hate starting to read something and not get to finish. :mad:

2. I was amazed that such a large cavern under a well build-up area in a major U. S. city had not been discovered by any pipeline, electrical conduit, or foundation piling in over 200 years. Wonder what's hiding under a city near you? Oh I remember, just the "underground" and some unexploded ordinance from WWII. For me, it's only just part of the Hayward Fault, waiting for the next big earthquake. :eek:

And just a small "technical" point. Your "copy" is either a "copy" OR "the original." It can't be the "original copy."

And what's "really" on the back?

"What's on the Back?

People who watched the popular movie "National Treasure" want to know. On the back, at the bottom, upside-down is simply written:

"Original Declaration of Independence
dated 4th July 1776"

According to the National Archives, "While no one knows for certain who wrote it, it is known that early in its life, the large parchment document was rolled up for storage. So, it is likely that the notation was added simply as a label."

Regards,

JMI :)

I did notice JuneMouse's comment, how do you know that person is male. You really are too clever, but that's why you are admim eh. :cool:

If you have the DVD "National Treasure" the disappearing spectacles; this can clearly be seen when Justin Bartha is running the surveillance cable and afterwards when he returns to the van. :cool:

The missing scrolls from the Library of Alexandria, so you never cease to amaze me, you read Greek too! :confused:

Hey man did you know they recently "dug up" a spitfire buried 20 feet down in the middle of London. So one never knows what lies beneath our cities. :D

It is the "original copy" i.e. the first copy made by hand of course! ;)

The Declaration of Independance, on the back as far as I know is what you say, although there is some talk of the Liberty Bell. How or why I don't know. :confused:

Maybe the "real" Declaration was stolen by a British secret agent a la 007, sent in by George III. Strange lot these Brits. :D

/hobferret

Hi hobferret:

The "Original" Declaration of Independence, was affirmatively voted on on July 4, 1776, but the New York delegation was required to abstain, and the Declaration was not signed on that day. Later that same day, Congress ordered the printing of between 200-500 "Broadsides" of the Declaration for distribution among the Colonies. Neither the "original" document or the Broadsides were signed.

The New York Resolution was laid before the Continental Congress on July 15th so then and not before was it proper to entitle the document "The Unanimous Declaration of the Thirteen States of America." Contrary to popular belief, the printed Broadside with only Hancock and Thomson's names was the actual document delivered to King George III in England later that year. The names of the other delegates who voted for Independence were not published until 1777.

On July 19, 1776 Congress ordered that the Declaration be "fairly engrossed on parchment, with the title and stile [sic] of 'The unanimous declaration of the thirteen United States of America,' and that the same, when engrossed, be signed by every member of Congress." This "handwritten" copy of the "Original" was the one signed by 56 members of the Continental Congress. It is believed that this signed "copy" is the "only" handwritten copy of the "original" document and, therefore, the only "copy" of the "original."

The "original" document was eventually lost and the "signed copy" is the one on display in Washington. That "copy" is severely faded, unlike the one shown in the movie, because of poor early preservation techniques and a "wet ink transfer" process used to attempt to make additional printed "copies" of the "original signed" document in 1820.

The 201 "official" parchment printed copies struck from the William J. Stone plate carry the identification "Engraved by W. J. Stone for the Department of State, by order" in the upper left corner followed by "of J. Q. Adams, Sec. of State July 4th 1824." in the upper right corner. "Unofficial" copies that were struck later do not have the identification at the top of the document or are printed on vellum. Instead the engraver identified his work by engraving "W. J. Stone SC. Washn." near the lower left corner and burnishing out the earlier identification. Today 31 of the 201 Stone facsimiles printed in 1823 are known to exist.

http://www.thedeclarationofindependence.org/
http://en.wikipedia.org/wiki/United_States_Declaration_of_Independence

That said, "the original copy," to the extent that usage may be correct, would have to apply only to the handwritten document signed on July 19, 1776. All the other "copies" are "prints" and would not appear to merit the term "copies" because none of them are handwritten, although they are, indeed, ink transfer printed "copies" of the "original." ;)

I did, indeed watch the program showing the unearthing of the "Spitfire that Saved London." Fortunately, Britian's original Kamikaze survived his ramming of the German bomber. :cool:

I "assume" JuneMouse is male, because of the use of the word "gonna" in the Post. Based on empirical evidence, most female writers are more careful with their use of grammar and casual slang. But I am open to the possibility it was a "deliberate" effort at gender concealment. :eek: :D

By the way, if you have an "original" Broadside, the last one found sold for slightly over $8 million dollars. :eek:

Regards,

JMI :)

Interesting stuff "Contrary to popular belief, the printed Broadside with only Hancock and Thomson's names was the actual document delivered to King George III in England later that year." :D

So the Brits did not steal it then. :eek:

$8 million dollars, better get the darn thing insured then. :confused: :eek:

I hope the Hayward Fault behaves itself for you, does that mean you are down Palo Alto way? :cool:

I'm getting homesick talking about this, need to be back in Albuquerque. There is one thing for that; the climate is much better, it's midsummer here and freezing, well almost. :mad:

/hobferret

Hi hobferret:

Palo Alto is on the West side of the San Francisco Bay Pensulia. It is most affected by the San Andreas Fault zone, which is the one which caused the 1906 San Francisco Earthquake. Hayward is on the East side of the Bay and it's fault line runs North through Berkeley and South through San Jose. There are several other fault lines on the East side of the Bay, besides the Hayward fault.

I am located to the East of San Francisco and remember very clearly the 1989 Loma Prieta Earthquake along the San Andreas Fault which struck on October 17th, during the World Series between San Francisco and Oakland. I happened to be on the phone talking to someone closer to the epicenter who told me they were having an Earthquake. I has several seconds to warn the people in my office we were about to have an Earthquake before the shaking reached us and knocked over some major furniture in our office. I told them for several days that I was just physic and had just "known" it was coming. :eek: That was the one which cause part of the S.F. Bay Bridge and a major doubledeck freeway in Oakland to collapse and part of San Francisco's Marina District to burn down.

That was my second major Earthquake experience. I was also fairly close to the epicenter of the 1983 Coalinga California Earthquake, centered south of San Jose, when that one hit. It was "only" about 6.5 on the Richter scale, while the Loma Prieta quake was about 7.1. We have much smaller "jolts" all the time around here, and they are always predicting a "big one" along the Hayward fault, someday, which will do major damage because of the mass of humanity and development along the fault line. Here's a map of "recent" activity along some of the major faultlines, which can be moved about to show major sections of the Bay Area. ;)

http://quake.wr.usgs.gov/recenteqs/FaultMaps/121-37.htm

What has been passing for summer here in California has been very strange also. The weather has been unseasonably cool and wet for almost summer. Hope you make it "home" soon.

Regards,

JMI :)

Thanx fot the info's, I never got to SF when I was home, LA the closest place to there :mad:

Not actually been home since 1969, however, have been to NY, MIA & Anchorage for work :D

Never remember an earthquake in NM but pop used to say there was one the year I was born, right on Albu. Been in minor ones, Panama (1979) and the constant rumbling of Arequipa (Peru) a few times but no where else :cool:

Hope the East Bay area stays stable for you all :cool:

Regards

/hobferret