Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   [Query - Newbie] Which api gets the following window (https://forum.exetools.com/showthread.php?t=5947)

Numega Softice 12-03-2004 02:39

[Query - Newbie] Which api gets the following window
 
1 Attachment(s)
hi,
I am trying to get a breakpoint on a program which brings up a follwing box (jpg file attached. what api's are used. I couldnt find a good breakpoint to set for this window /box.


any help with this will be appreciated.

thanks

amigo 12-03-2004 16:55

Hi

Find the displayed string in IDA disassembly and then you will see references to it or set bpx when the string is loaded

Regards
amigo

hosiminh 12-03-2004 19:58

You can use ApiSpy v2.5 (hxxp://www.matcode.com/apis32.htm ) . It's usefull tool :p

taos 12-03-2004 22:34

createwindow, showwindow,etc... or in Sice use WM_CREATE, WM_CLOSE events.

Numega Softice 12-04-2004 05:17

I will try again and let you know. thanks for ur replies

xtreem.x 12-06-2004 19:41

There is also "UpdateLayeredWindow" if it has the WS_EX_LAYERED bit set. This is used instead of ShowWindow in this case. (only available under win2000/xp).

Otherwise its likely to be CreateWindow or CreateWindowEx with WS_VISIBLE set, or WS_VISIBLE not set, but followed by ShowWindow.


All times are GMT +8. The time now is 11:27.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX