Implementing short macros for windows®

Hey there!

I thought about programming helpful macros for windows, well actually I only had one idea till now, that is writing a function that minimizes all windows and shows the desktop. It's necessary because windows key+D is broken if a program is in fullscreen or uses d3d, then the desktop is not clickable after windows key+D.

But how would I implement this?

I don't like having many processes, especially not a process that only does one function.

As far as I know there is:
* Creating a service - is it possible to add a service for these macros to run with all the other services in svchost.exe?
* Code Injection on the fly into a process that is always active like winlogon.exe - I think it's too unstable from my previous experiences.
* Code Injection directly into the executable of a process that is always active - Needs advanced assembling and reverse engineering skills... but is it also stable?
* Dll Injection on the fly - also unstable from my experiences.
* Dll Merge with the executable of an always active process - never tried something like this. The dll contains the macro function, but it can't be called without any kind of code injection, right?
* Proxy Dll - This will work for sure without problems if I put the proxy dll in the executable's folder, right? At least I thought programs will look for resources like dlls first in its own folder and only afterwards using the PATH environment variable.

That's it from my knowledge.

I'm tending towards using a proxy dll, but maybe somebody knows a better method of short code execution without an executable.

TIA,
Hawk

Well... either all that or just move the mouse to the right side of the taskbar...

None of those solutions is particularly viable. Merely putting a DLL in a programs folder is going to flat out nothing because the program won't even know it's there.

There are reasons why you can't just "screw around" with open windows, not the least of which is protecting the system against malware and trojans.

Quote:

---

None of those solutions is particularly viable. Merely putting a DLL in a programs folder is going to flat out nothing because the program won't even know it's there.

---

This isn't quite true, some of the methods that Hawkin explained probably could achieve this. Proxy DLLs do work (at least, on Windows XP they do) because they replace a file that the executable needs to load in order to function (has to replaced before the application is run though).

Quote:

---

Well... either all that or just move the mouse to the right side of the taskbar...

---

I will agree with this though, it's a very dirty fix to a pretty simple problem. That said, it seems as if you're on 7 or Vista, which I haven't had much experience with so I don't truly know the extent of the problem.

CommonTater: I am using proxy dlls for some executables for months, which work absolutely perfect (on XP that is). It was the last part of hooking that I needed to learn, because this solves many problems. The problem is I don't know the behaviour of windows programs, if they also look for dlls in their respective program folder first or directly access the path variable.

Care about elaborating on the "dirty fix" with "moving the mouse to the right side of the taskbar"? As mentioned I am running XP and don't even know about what topic you are talking :S

Quote:

---

Care about elaborating on the "dirty fix" with "moving the mouse to the right side of the taskbar"? As mentioned I am running XP and don't even know about what topic you are talking :S

---

Not what I mean. I mean that the way you're trying to do this (and pretty much any way apart from that which is built in to Windows) is a dirty fix to this problem. The simplest, and best, solution would be to try and use the way which Windows allows for this. So you've tried Win+D? Try Win+M which minimizes all windows. Works for me.

Just as a side note, I don't believe that proxy DLLs are a good solution to this problem at all. To get a DLL into every process (which you would need to, for what you are wishing to do) you would need to replace a DLL that was used by all processes. This would cause a (possibly significant) performance increase as every call to that DLL (and there would be a hell of a lot of calls to it) would need to be proxied to the real DLL.

I don't think I can go into DLL injection any more as it's quite a touchy topic. It mostly lends itself to malicious purposes.

It's not what I wanted. I want to proxy one single dll of one single already active program. This is only one dll in one folder, which will be loaded only once ;) My solution is a global hotkey for window minimizing, thus I need to run code only once.

Quote:

---

Originally Posted by Hawkin

CommonTater: I am using proxy dlls for some executables for months, which work absolutely perfect (on XP that is). It was the last part of hooking that I needed to learn, because this solves many problems. The problem is I don't know the behaviour of windows programs, if they also look for dlls in their respective program folder first or directly access the path variable.

---

Well, ignoring for the moment that such a practice on Win7 or Vista would probably result in the software either triggering the UAC or being tagged as malware... There is also the matter that you are tampering seriously with the work done by others... If your proxy introduces a bug or changes the program's behavior, it's likely to result in data losses or program crashes... and then lawsuits and other problems for the original creator of the software.

Hearing you say you are doing this without knowing the behavior of windows programs is enough to send shivers down my back....

Quote:

---

Care about elaborating on the "dirty fix" with "moving the mouse to the right side of the taskbar"? As mentioned I am running XP and don't even know about what topic you are talking :S

---

In Vista and 7, with the Aero interface placing the mouse pointer on the right side of the taskbar shows you the empty desktop... when you take it away all windows return...

Quote:

---

Originally Posted by DeadPlanet

I will agree with this though, it's a very dirty fix to a pretty simple problem. That said, it seems as if you're on 7 or Vista, which I haven't had much experience with so I don't truly know the extent of the problem.

---

It's not a "dirty fix" and there's no problem... it's a built in feature of the Aero interface.

Walk up to any windows machine running Aero (Vista, server , 7, etc) and simply move the mouse cursor to the right of the clock on the taskbar... windows gone, bare desktop exposed... then move the mouse cursor away... windows return, just like nothing happened. There's even a baloon tip there telling you what it does....

Frankly this is why I find this whole thread a tad puzzling... on 2000 and XP (and it's servers) you only have to type WIN+D to get the same result.... WIN+D desktop... WIN+D windows return...

Moerover... on all versions... you can right click the taskbar and select "show desktop"....

I'm just having a real hard time figuring out why this code is even needed...

Quote:

---

Originally Posted by CommonTater

It's not a "dirty fix" and there's no problem... it's a built in feature of the Aero interface.

---

This is the second time that what I said was misunderstood, so I'm gonna blame myself here for not being clear enough. What I meant was that I agree with you in that this is simply solved problem by just using builtin features of Windows. What the OP is trying to do is a dirty fix to the problem.

Quote:

---

Originally Posted by Hawkin

It's not what I wanted. I want to proxy one single dll of one single already active program. This is only one dll in one folder, which will be loaded only once My solution is a global hotkey for window minimizing, thus I need to run code only once.

---

I have no idea how proxying one single dll in on single already active program (which I'm pretty sure will not work, because Windows loads the DLL into memory at runtime. You would have to restart the program) can allow you to minimise all windows.

Quote:

---

Originally Posted by DeadPlanet

This is the second time that what I said was misunderstood, so I'm gonna blame myself here for not being clear enough. What I meant was that I agree with you in that this is simply solved problem by just using builtin features of Windows. What the OP is trying to do is a dirty fix to the problem.

---

Thanks for that, I was indeed misunderstanding you.

Quote:

---

I have no idea how proxying one single dll in on single already active program (which I'm pretty sure will not work, because Windows loads the DLL into memory at runtime. You would have to restart the program) can allow you to minimise all windows.

---

Well, unless he went after core components like user32 ... which would set off the Windows File Protection alarms like crazy.

Ok... here's a real simple way to show the desktop as a global keyboard function...

1) Open Notepad
2) Enter the following

Code:

---

[Shell]
Command=2
IconFile=explorer.exe,3
[Taskbar]
Command=ToggleDesktop

---

3) Save this file in the root of drive C: as SHOWDESKTOP.SCF
4) now make a desktop shortcut to it... drag and drop with alt held down will work.
5) Right click on the shortcut and select properties
6) click on the window next to "Shortcut Key"...
7) Press and hole CTRL and ALT (together) then type F12...
8) Click OK to save your shortcut

Ok now zoom a window so you can't get to the desktop...

Type CTRL+ALT+F12 ... desktop ... CTRL+ALT+f12 ... windows...

No fancy schmancy DLL injection crap required...
Like I said... already there as part of standard windows.

The question I have for the OP is: What makes you think the current 'Show Desktop' command isn't implemented by minimizing all open Windows? Because I'm sure it is.

Quote:

---

Originally Posted by adeyblue

The question I have for the OP is: What makes you think the current 'Show Desktop' command isn't implemented by minimizing all open Windows? Because I'm sure it is.

---

Actually the show desktop is implemented by

ShowWindow(HWND Wind, int Flags);

flages = SW_HIDE to hide it, then to restore it ... flags = SW_SHOWNORMAL

If they did it by minimizing the windows might change size or positions on the screen. Also restoring a group of minimized windows doesn't give much control over which window is active.

Let me rephrase that, Show Desktop IS implemented by minimizing all other windows. If you don't believe me add this to the WndProc of your choice, run your program and press the show desktop button.

Code:

---

case WM_SIZE:
{
    if(wParam == SIZE_MINIMIZED)
    {
          MessageBox(hwnd, L"Minimizing", L"", MB_OK);
    }
}

---

Quote:

---

Originally Posted by adeyblue

Let me rephrase that, Show Desktop IS implemented by minimizing all other windows. If you don't believe me add this to the WndProc of your choice, run your program and press the show desktop button.

---

How about that... You learn something new everyday...

Okay... where to start...

First of all to all your Aero and "dirty fix" suggestions: In my previous post I have told that I am running XP, so I don't benefit from those tricks.

Second I only want this code for myself, on XP. Not for any other people, so I don't care at all if it works on other OS or not.

CommonTater: I totally forgot or didn't even knew about windows hotkeys for shortcuts. I tried your method using a shortcut to the original "Show Desktop.scf"-file (which contains the same code you posted) and tried several hotkeys (ctrl+alt+d, ctrl+alt+s, ctrl+alt+e, ctrl+alt+f12, ctrl+alt+f11) and had problems with all of them. with ctrl+alt+d and ctrl+alt+f11 the explorer was freezing completely for 5-15 seconds, then randomly either proccing the "show desktop"-effect or not. Unfortunately the cance of activating was 2-5%. I also applied a hotkey to a shortcut to a folder, there was the same: If applied to several hotkeys such as ctrl+alt+d, there was complete explorer freeze (all interface such as taskbar, open folders) for 5-15 seconds and then randomly appearing the folder i hotkey'd. Chance here: 50%.

Now I know why I don't know about this window function, it simply sucks. But thanks for trying to understand the topic, what I wanted is to hear experiences/solutions from other people, not criticize or discuss my solutions (except my questions), because those I can do on my own and just wanted to list them to avoid somebody posting the same ideas.

Quote:

---

There is also the matter that you are tampering seriously with the work done by others... If your proxy introduces a bug or changes the program's behavior, it's likely to result in data losses or program crashes... and then lawsuits and other problems for the original creator of the software.

Hearing you say you are doing this without knowing the behavior of windows programs is enough to send shivers down my back....

---

I am not tampering with work of anybody. You might want to look up the definition of a proxy dll. The dll's are my work and act as man in the middle, redirecting every function call back to the program. I am also autorunning 2 of my programs, which I can use for my hotkey code, if you are so fussy ;) If there are bugs or crashes, it's my fault, and I can solve them because I wrote the code, that is running on my pc ;)
And I only said code and dll injection have flaws, not proxy dlls. There is no "unknown behaviour", proxy dlls work perfectly. I haven't had a single crash or bug in a year of using.

Quote:

---

I have no idea how proxying one single dll in on single already active program (which I'm pretty sure will not work, because Windows loads the DLL into memory at runtime. You would have to restart the program) can allow you to minimise all windows.

---

Sorry, I didn't express myself good enough, in my last post I didn't mean "an already active program" but an autorun program. Hence after a reboot the program would run with my proxy dll instead. Restarting it has the same effect, yes.

Quote:

---

Sorry, I didn't express myself good enough, in my last post I didn't mean "an already active program" but an autorun program. Hence after a reboot the program would run with my proxy dll instead. Restarting it has the same effect, yes.

---

I still don't know how you could minimise all windows by proxying a DLL of one program.

What you are trying to achieve can be done with DLL Injection, but it seems like you are trying to crack a walnut with a sledgehammer.

If I were to do this (I never would, but let's go hypothetical) I would simply enumerate all windows, check which ones are maximised and then send windows messages to minimise those. This method may have some side effects, but I have very much the same outlook to you when it is messing with my computer (I take responsibility, and it's not a big deal if something screws up).

Quote:

---

Originally Posted by Hawkin

Second I only want this code for myself, on XP. Not for any other people, so I don't care at all if it works on other OS or not.

---

Plainy: I am not all that willing to put code like you're asking for in a public forum... *especially* when it has lots of uses for malware purposes and *extra especially* when the person asking is telling me he routinely uses techniques used to distribute and activate trojans.

I'm sorry it's actually nothing personal about you... it's where we are.

Quote:

---

CommonTater: I totally forgot or didn't even knew about windows hotkeys for shortcuts. I tried your method using a shortcut to the original "Show Desktop.scf"-file (which contains the same code you posted) and tried several hotkeys (ctrl+alt+d, ctrl+alt+s, ctrl+alt+e, ctrl+alt+f12, ctrl+alt+f11) and had problems with all of them. with ctrl+alt+d and ctrl+alt+f11 the explorer was freezing completely for 5-15 seconds, then randomly either proccing the "show desktop"-effect or not. Unfortunately the cance of activating was 2-5%. I also applied a hotkey to a shortcut to a folder, there was the same: If applied to several hotkeys such as ctrl+alt+d, there was complete explorer freeze (all interface such as taskbar, open folders) for 5-15 seconds and then randomly appearing the folder i hotkey'd. Chance here: 50%.

---

Well, it works on all 5 of my computers... My "main" system running Windows 7, two HTPC machines running XP, a netbook running XP and a server running 7. After you complained I tried it on my own systems... virtually instantaneous response even on a single core Atom machine....

Quote:

---

Now I know why I don't know about this window function, it simply sucks. But thanks for trying to understand the topic, what I wanted is to hear experiences/solutions from other people, not criticize or discuss my solutions (except my questions), because those I can do on my own and just wanted to list them to avoid somebody posting the same ideas.

---

Once again... look where we are. This forum has a published policy about code that can be used for malicious purposes... DLL Injection, DLL Proxy, etc. clearly fall into that category.

Quote:

---

And I only said code and dll injection have flaws, not proxy dlls. There is no "unknown behaviour", proxy dlls work perfectly. I haven't had a single crash or bug in a year of using.

---

Given your results with that simple scf file... that may be up for debate.

Quote:

---

Originally Posted by DeadPlanet

If I were to do this (I never would, but let's go hypothetical) I would simply enumerate all windows, check which ones are maximised and then send windows messages to minimise those. This method may have some side effects, but I have very much the same outlook to you when it is messing with my computer (I take responsibility, and it's not a big deal if something screws up).

---

Hmm, we talk not in the same direction I guess. The point here is not how to code the minimizing of active windows, but how to execute it. Your idea is exactly my approach, but how would you run the code? I hope not with an executable, because that's exactly what I not want.

The .scf idea was a good one, I mean it's still a good one, except the windows hotkey bug. If the file works better than windows key+d, I can use it instead of writing my own code, just I still need to set a global hotkey for it with programming as I can't use that XP feature.


CommonTater: I still have no idea what you mean. I am not asking for any code, I am asking for ideas how to implement it besides the ones I mentioned. So a qualified answer could be: "try hotpatching", because I didn't mention it in the first post.
About "malware" we could debate for weeks, I tell you ;) You are allowed to buy a car, it can be used for malicious actions like steamrolling people. Bad use of cars. It can be used to transport people. Good use of cars. Using your words we should prohibit all cars because one might be used for bad purposes. Lol. With proxy dlling (I think that's what we are mainly talking about) can be done so many things. I use them mainly for debugging and logging function calls to understand programs better and analyze the results.

One practical use for example is that I implemented a way to use a proxy connection for all internet based programs (those using winsock) that don't support using an internet proxy on their own. No need for any extra programs made by other people, I can use such feature with minimal computer resources and knowing there is no spyware, advertisment or bad programming, simply because it's my own.

But I didn't know about your policy, I also thought now that I am in the wrong forum for this because the most common ways to do this are done using asm skills, not programming skills (except using a proxy dll, but which seems to be forbidden here). I will create a petition to disallow members of this forum to tell newbies about the "system()" winapi command. It can be used for malicious purposes like turning off other people's computers!!! omg!

No seriously, I find all this concealment of advanced programming very amusing. I didn't find it amusing back then years ago when I hadn't had these skills but now I can laugh over your "overcautiousness" like it's top secret FBI stuff :D:D

I think this topic can be closed now or forgotten, I am already working on it: Since I only experience the windows key+d glitch (that the desktop is not responsive) with a single full screen application, I use a dll of itself to only activate my global hotkey override when this application is running. I do this by proxying dinput.dll, which this application uses for mouse input (and keyboard input IIRC). I am halfway done, but thanks guys for the interesting conversation once again.

Quote:

---

Originally Posted by Hawkin

But I didn't know about your policy,

---

Final comment here... It's not My policy... it's one I have chosen to accept in order to participate in this forum which has been way helpful to me.

As for the advanced programming topic... if you care to take a peek at my website you will find an application that uses DLL injection to accomplish a whole-network improvement in multimedia facility. Fully remote controlled HTPCs with the remote sitting on your screen... not your couch.

So, no I am not personally adverse to these techniques, although I will confess a certain reluctance about posting them on public forums.

Thanks for an interresting debate.