Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   olly plug-in monitor keystrokes (https://forum.exetools.com/showthread.php?t=13911)

n0ital 12-03-2011 05:56

olly plug-in monitor keystrokes
 
Hey all,

Is there an Olly plug-in that monitors keystrokes and displays mem location where they are originally stored?

tnx

Kerlingen 12-03-2011 21:00

Could you add some more explanation to your question? What do you want to achieve exactly?

Your text reads like you would like to have a breakpoint when somebody calls GetWindowText or similar. The real keystrokes are not accessible by applications, because they are handled deep inside kernel code and are passed down to the application in message queues.

Fyyre 12-06-2011 10:23

Find WndProc in the app you are debugging... ( look for call to GetMessage, or PeekMessage ) there will be a switch/case block near by, check for WM_KEYDOWN, WM_CHAR, WM_Input...

example for WM_KEYDOWN ..; wParam will hold the virtual key code, (lParam & 0xffff) will be the scan code of the key pressed.

Also you can check for functions such as GetKeyState, GetAsyncKeyState, etc, and break there.

-Fyyre

Quote:

Originally Posted by n0ital (Post 76178)
Hey all,

Is there an Olly plug-in that monitors keystrokes and displays mem location where they are originally stored?

tnx



All times are GMT +8. The time now is 18:19.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX