CODEWITHSUNDEEP
windowswindbganalysiscrash-dumps
yasouser
yasouser

Reputation: 5177

How to get the list of window handles and the window with the focus from a windows crash dump file?

I'm looking at a crash dump and would like to know the list of HWNDs and the HWND with keyboard focus. I tried a few types with !handle but I'm not getting any information. !handle is listing all types of handles but I don't see HWNDs being listed there.

What I mean by "HWND with keyboard focus" is that, I would like to find the HWND that GetFocus() will return.

Has anyone done this before?

Upvotes: 1

Views: 1225

Answers (1)

Anders
Anders

Reputation: 101646

Most of the window manager is implemented in kernel mode so you probably need a full dump to get any useful information.

You could try the 0cchext extension but I don't know if it works on dumps, SDbgExt does not.

You could also disassemble GetGUIThreadInfo to see where it gets its data from...

Upvotes: 1

Related Questions