Skip to content

Instantly share code, notes, and snippets.

// ==WindhawkMod==
// @id all-resource-redirect-experimental
// @name All Resource Redirect - Experimental
// @description Define alternative files for loading resources (e.g. instead of imageres.dll) for simple theming without having to modify system files
// @version 1.0
// @author m417z
// @github https://github.com/m417z
// @twitter https://twitter.com/m417z
// @homepage https://m417z.com/
// @include *
@m417z
m417z / early-create-remote-thread-test.wh.cpp
Last active February 12, 2024 20:03
Windhawk mod: A test of CreateRemoteThread called right after NtCreateUserProcess
// ==WindhawkMod==
// @id early-create-remote-thread-test
// @name Early CreateRemoteThread test
// @description A test of CreateRemoteThread called right after NtCreateUserProcess
// @version 0.1
// @author m417z
// @github https://github.com/m417z
// @twitter https://twitter.com/m417z
// @homepage https://m417z.com/
// @include cmd.exe
@m417z
m417z / StartResources.xbf
Created December 19, 2023 18:47
Start menu-related XAML resources extracted from C:\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\resources.pri, Windows 11 version 22H2 (OS Build 22621.2861)
<ResourceDictionary
xmlns="http://schemas.microsoft.com/winfx/2006/xaml/presentation"
xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
xmlns:d="http://schemas.microsoft.com/expression/blend/2008"
xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006"
xmlns:StartMenu="using:StartMenu"
xmlns:muxc="using:Microsoft.UI.Xaml.Controls"
x:Class="StartMenu.StartResources">
<ResourceDictionary.ThemeDictionaries>
<ResourceDictionary x:Key="Light">
// ==WindhawkMod==
// @id explorer-features-test
// @name Explorer features test
// @description Enjoy experimenting
// @version 0.1
// @author m417z
// @github https://github.com/m417z
// @twitter https://twitter.com/m417z
// @homepage https://m417z.com/
// @include explorer.exe
// ==WindhawkMod==
// @id -windhawk-load-symbols-self-fix
// @name Windhawk load symbols self fix
// @description Fix Windhawk symbol loading for 32-bit apps
// @version 0.1
// @author m417z
// @include *
// @architecture x86
// ==/WindhawkMod==
@m417z
m417z / mod.wh.cpp
Created June 26, 2023 17:58
A Windhawk mod to print all SetWindowsHookExW calls
// ==WindhawkMod==
// @id print-setwindowhookexw-calls
// @name Your Awesome Mod
// @description The best mod ever that does great things
// @version 0.1
// @author You
// @github https://github.com/nat
// @twitter https://twitter.com/jack
// @homepage https://your-personal-homepage.example.com/
// @include *
@m417z
m417z / 01-TaskbarResources.xbf.xml
Created May 13, 2023 19:48
Taskbar-related XAML resources extracted from C:\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\resources.pri, Windows 11 version 22H2 (OS Build 22621.1702)
<ResourceDictionary
xmlns="http://schemas.microsoft.com/winfx/2006/xaml/presentation"
xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
xmlns:d="http://schemas.microsoft.com/expression/blend/2008"
xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006"
xmlns:muxc="using:Microsoft.UI.Xaml.Controls"
xmlns:taskbar="using:Taskbar"
xmlns:udk="using:WindowsUdk.UI.Shell"
x:Class="Taskbar.TaskbarResources">
<ResourceDictionary.ThemeDictionaries>
@m417z
m417z / xaml-visual-tree-monitoring-demo.wh.cpp
Last active May 19, 2023 12:36
A demo Windhawk mod which uses XAML diagnostics to monitor for visual tree changes
// ==WindhawkMod==
// @id xaml-visual-tree-monitoring-demo
// @name XAML Visual Tree Monitoring Demo
// @description A demo mod which uses XAML diagnostics to monitor for visual tree changes
// @version 0.1
// @author m417z
// @github https://github.com/m417z
// @twitter https://twitter.com/m417z
// @homepage https://m417z.com/
// @include explorer.exe
@m417z
m417z / _details.md
Last active April 26, 2023 05:27
Suspected inconsistency in a Windows update

A Windows update file hash inconsistency

A while ago, I encountered some inconsistencies in Windows update file hashes. Specifically, for several files, the SHA256 hash in the manifest file didn't match the MD5 hash of the file itself. These were some language resource files which I didn't have on my computer, and which I didn't find on VirusTotal. Back then, I didn't research this further.

With one of today's updates, it happened again, this time with a file which I

@m417z
m417z / taskbar-labels-fork.wh.cpp
Last active March 11, 2023 20:16
Taskbar Labels for Windows 11 - Fork with size adjusted to text, see https://github.com/ramensoftware/windhawk-mods/discussions/43
// ==WindhawkMod==
// @id taskbar-labels-fork
// @name Taskbar Labels for Windows 11 - Fork
// @description Show text labels for running programs on the taskbar (Windows 11 only)
// @version 1.1
// @author m417z
// @github https://github.com/m417z
// @twitter https://twitter.com/m417z
// @homepage https://m417z.com/
// @include explorer.exe