Уровень 0 · материалов: 4
В кластер входят документы о техническом изменении работы функций и системных процессов Windows через перехват API или патчинг, но не входят обзоры стороннего прикладного ПО для кастомизации рабочего стола.
Общие признаки: API hooking, изменение работы системных процессов, манипуляция интерфейсом ОС, патчинг памяти
Группа выше: Настройка, оптимизация и модификация Windows
Смысл: The text demonstrates how reverse engineering and memory patching can be used to modify undocumented OS behaviors, specifically disabling the grouping of icons on the Windows taskbar.
The author explains how to use OllyDbg to reverse engineer Windows Explorer and disable taskbar button grouping, which eventually led to the creation of the 7+ Taskbar Tweaker tool.
Смысл: The text explains a technique to visually hide a process from the Windows Task Manager by manipulating the GUI list (SysListView32) via WinAPI, rather than hiding it from the OS kernel.
A technical guide on how to use Delphi and WinAPI to remove a process entry from the Windows Task Manager's visual list while keeping the process running.
Смысл: The main idea is to demonstrate the process of API hooking in a 64-bit Windows environment by modifying the behavior of explorer.exe to display the system clock's seconds in reverse.
A technical guide on how to use WinDbg and MinHook to invert the seconds hand of the Windows clock by hooking the GetLocalTime API in explorer.exe.
Смысл: The main idea is to demystify function hooking by providing a hands-on, simplified tutorial that leverages existing libraries (Microsoft Detours) rather than requiring deep knowledge of assembly language.
A beginner-friendly guide on how to use the Microsoft Detours library to intercept and modify function calls in Windows applications.