The app has a "secret dialog window" and I'm sure it appears after pressing combination of some buttons. How I can find the combination in this app?

  • So given you tagged this with ollydbg we can assume it's a Windows application. But maybe you could add some more information. In general there are only a handful of practical ways to implement the handling of hotkeys. But depending on whether this is dialog-based or not, details can differ. Possible ways (from the top of my head): SetWindowsHookEx, GetAsyncKeyState, RegisterHotKey
    – 0xC0000022L
    Jun 23 '19 at 11:50
  • Yes, sure, this is a Windows app. And, yes, this is a dialog-based window. I can see the window in resource editor (I use Restorator app) and my friend pretty sure this window activates by some combination on keyboard. Window's caption has name "Instrument Diagnostic" and I have found Unicode of this symbols inside exe, but where a trigger placed I don't know. Jun 24 '19 at 19:16

I assume that you don't have any more information about this Secret dialog window than what you have written (that is you don't know how it looks like and the strings it contains, etc.).

In such a case, you can search for GetKeyboardState function that may be used to obtain the keys pressed at a given time. After finding it, just look at the subsequent functions calls and you will probably find the function responsible for handling the information provided by GetKeyboardState function, thus checking whether the keys being pressed match one of the program keyboard shortcuts.

Note: OllyDbg uses this method, as shown on the picture below (yes, it's a picture of OllyDbg debugging itself ;) ): OllyGetKeyboardState

As you may notice, it firstly converts it to ASCII code and then performs some checks.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.