Ramen Software

There’s no easy way to customize system icons on Windows. There are tools, such as 7TSP, which make it easier to customize system icons by patching system files. This approach works, but has several drawbacks. Patching system files can be dangerous, can be difficult to revert, and the patched files can be overridden by a Windows update.

With the Windhawk Resource Redirect mod, icon themes can be installed without modifying system files. What the mod does instead is redirecting the loaded icon files to a different folder, making all programs load alternative icons without actually touching the original icons on the disk. This redirection is only done in memory, and can be disabled easily and safely by disabling the mod or exiting Windhawk.

More than 50 icon themes can be found in the Resource Redirect icon themes repository. Below is a short video demonstrating the mod. I want to thank Undisputed00x who collected the icon themes, converted them to the right format, and organized them nicely in the repository.

Click on the image to view the demo video on YouTube.

Introducing UWPSpy, an inspection tool for UWP and WinUI 3 applications that enables to view and manipulate UI elements and their properties in real time.

I’ve been interested in UWP since the release of Windows 11, where the taskbar UI was reimplemented using a new technology called XAML Islands. I created UWPSpy after gaining some experience with UWP. UWPSpy makes it easy to experiment with UWP UI elements and see how various changes behave before making them permanent. One example where UWPSpy comes in handy is with the Windows 11 Taskbar Styler mod, refer to its details page to see examples of UI customizations that are possible.
Read More…

Windhawk aims to make it easier to customize Windows programs. It allows installing and configuring mods (customization modules) with just a couple of clicks. For developers, it provides a convenient platform for developing and sharing such mods.

You can find more details, browse for the available mods and download Windhawk on the official website.

Read on for the motivation behind creating Windhawk.

Background

As a power user, I often find the need to customize the programs I use beyond the default settings. If I’m lucky, the relevant program provides options to customize it the way I need. If that’s not the case, I have several options:
Read More…

Have you ever wanted to copy some text from a dialog box which doesn’t provide such functionality?
Textify was created to solve this problem: you can point your mouse over the text, click on the mouse shortcut (Shift + Middle click by default), and get a selectable view of the text.

Download

textify_setup.exe (593.16 kB, changelog)
Latest version: v1.10.4
Read More…

Colorizes the double-words in the CPU dump of OllyDbg 2 by the following rules:
Red: an address to a code block of a module.
Magenta: an address to a non-code block of a module.
Yellow: an address to a non-module memory block.
Black: a handle of a window which belongs to the debuggee process.

The colors can be changed in the .ini file.

Limitations: double-words across rows are not processed.

dump_address_color.zip (5.38 kB)

The source code is available on GitHub.

This plugin fixes a minor, but annoying issue with the CPU dump history navigation on OllyDbg 2.

Without the plugin (clickable):

With the plugin (clickable):

dump_history_nav_fixer.zip (112.31 kB)

Adds the missing option to follow immediate constant in OllyDbg 2, just like in OllyDbg 1.10.

Screenshot (clickable):

follow_immediate_constant.zip (21.58 kB)

OllyDbg is able to use dbghelp.dll and symsrv.dll to show extended debug information, such as the module source code (if referenced by the debug information) or module symbols from a PDB file (which can be fetched from the Microsoft Symbol Server for system modules). The problem is that if you turn on this option, module loading becomes much slower. On the other hand, this information is very handy, so there’s a dilemma as of whether to turn it on.

The Symbols on Demand plugin provides the best of both worlds: it disables loading of this extended debug information by default, but allows to load it explicitly for any module, at any time. Using this approach, loading is still fast, but if you need to load extended debug information for a module, you can easily do that.

OllyDbg v1.10 and v2.01 are supported. For OllyDbg v1.10, there’s additional functionality: you can set the symbols search path, which is set by default to SRV*.\Symbols*http://msdl.microsoft.com/download/symbols. You can also choose to retrieve undecorated symbol names. These options can be set in the INI file of OllyDbg, in the plugin’s section.

symbols_on_demand.zip (4.96 kB)

For your convenience, here are the dbghelp.dll and symsrv.dll files:

dbghelp_symsrv.zip (579.8 kB)

The source code is available on GitHub.

I’m happy to present Virtuoz, the virtual desktop utility.

Virtuoz was designed to be a minimal and robust program that allows to have more than one desktop on Windows. It was inspired by Sysinternals Desktops, but uses a different approach, which doesn’t impose the limitations which Desktops is bound to.

Virtuoz is designed for Windows 7 and Windows 8. Note that Windows 10 is not supported (Windows 10 supports virtual desktops without extra software).

Download

Virtuoz.zip (349.31 kB)

Source code

https://github.com/m417z/Virtuoz

This tiny plugin allows you to copy the address of the selected item/command/byte with the Ctrl+X keyboard shortcut.

Note that the plugin works only for OllyDbg v1.10. For OllyDbg v2, you can achieve the same with:
Options -> Edit shortcuts… (“Copy address” in “Dump: Edit”)

quick_address_copy.zip (1.6 kB)