Topic created on: April 21, 2009 17:13 CDT by j062857.
Is there a way using olly to break on access at memory address 0x96013094 (its a hdc of a window).
I'm Reverse engineering a program and I want to see which functions it calls using that hdc.
Aren't GDI handles generally handled in the kernel? That would presumably mean that read breakpoints wouldn't catch them, regardless of whether or not they are pointers to anything, would it not?
I think you'd need to set conditional breakpoints on all the HDC calls (where the condition, of course, is that the appropriate argument is that HDC).
Or maybe there is a GDI tracing tool you could use?
Note: Registration is required to post to the forums.