Skip to content

Instantly share code, notes, and snippets.

@62mkv

62mkv/README.md

Created September 25, 2024 16:26
Show Gist options
  • Save 62mkv/70f1e40917966f1ff3b2bbcdd451c02b to your computer and use it in GitHub Desktop.
Save 62mkv/70f1e40917966f1ff3b2bbcdd451c02b to your computer and use it in GitHub Desktop.
Download ZIP
How to find a thread that opened a window (Windows 10 x64)
Raw
README.md
  • run "C:\Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\Tools\spyxx_amd64.exe"
  • click on "Find window" (Ctrl-F)
  • click "Hide Spy", click-press Finder Tool and drag him on the window you want identified
  • click "OK" -> you'll get to see "Property Inspector" for this window
  • if the window in question is not "enough" you can navigate to a "Parent" or "Next" or "Child" windows, using Windows tab in Property Inspector
  • on the window of choice, open "Process" tab
  • open Calc, choose "Programmer" mode, choose "Hex"
  • enter Process ID in Calc, it will be displayed as Dec value on the left hand
  • open Process Explorer
  • navigate to the process by ID (or by using a Find Windows Process - it also works but it only shows Process, not thread)
  • double-click on the process entry in Process Explorer
  • open "Thread" tab
  • find a thread by id
  • there you go! Can check Stack for example
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment