testskmon.rc

这个例子是演示用文件驱动监控注册表

//Microsoft Developer Studio generated resource script.
//
#include "resource.h"

#define APSTUDIO_READONLY_SYMBOLS
/////////////////////////////////////////////////////////////////////////////
//
// Generated from the TEXTINCLUDE 2 resource.
//
#include "afxres.h"

/////////////////////////////////////////////////////////////////////////////
#undef APSTUDIO_READONLY_SYMBOLS

/////////////////////////////////////////////////////////////////////////////
// Chinese (P.R.C.) resources

#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_CHS)
#ifdef _WIN32
LANGUAGE LANG_CHINESE, SUBLANG_CHINESE_SIMPLIFIED
#pragma code_page(936)
#endif //_WIN32

#ifdef APSTUDIO_INVOKED
/////////////////////////////////////////////////////////////////////////////
//
// TEXTINCLUDE
//

1 TEXTINCLUDE DISCARDABLE 
BEGIN
    "resource.h\0"
END

2 TEXTINCLUDE DISCARDABLE 
BEGIN
    "#include ""afxres.h""\r\n"
    "\0"
END

3 TEXTINCLUDE DISCARDABLE 
BEGIN
    "#define _AFX_NO_SPLITTER_RESOURCES\r\n"
    "#define _AFX_NO_OLE_RESOURCES\r\n"
    "#define _AFX_NO_TRACKER_RESOURCES\r\n"
    "#define _AFX_NO_PROPERTY_RESOURCES\r\n"
    "\r\n"
    "#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_CHS)\r\n"
    "#ifdef _WIN32\r\n"
    "LANGUAGE 4, 2\r\n"
    "#pragma code_page(936)\r\n"
    "#endif //_WIN32\r\n"
    "#include ""res\\TestSkMon.rc2""  // non-Microsoft Visual C++ edited resources\r\n"
    "#include ""l.chs\\afxres.rc""          // Standard components\r\n"
    "#endif\r\n"
    "\0"
END

#endif    // APSTUDIO_INVOKED


/////////////////////////////////////////////////////////////////////////////
//
// Icon
//

// Icon with lowest ID value placed first to ensure application icon
// remains consistent on all systems.
IDR_MAINFRAME           ICON    DISCARDABLE     "res\\TestSkMon.ico"

/////////////////////////////////////////////////////////////////////////////
//
// Dialog
//

IDD_TESTSKMON_DIALOG DIALOGEX 0, 0, 427, 323
STYLE WS_MINIMIZEBOX | WS_MAXIMIZEBOX | WS_POPUP | WS_VISIBLE | WS_CAPTION | 
    WS_SYSMENU | WS_THICKFRAME
EXSTYLE WS_EX_CLIENTEDGE | WS_EX_APPWINDOW
CAPTION "注册表实时监察系统 V1.0"
MENU IDR_MAINMENU
FONT 9, "宋体"
BEGIN
    CONTROL         "允许hook注册表？",IDC_ENABLE_HOOK,"Button",
                    BS_AUTOCHECKBOX | WS_TABSTOP,2,2,97,14
    LISTBOX         IDC_DISABLE_PROCESS,190,27,76,79,LBS_SORT | 
                    LBS_NOINTEGRALHEIGHT | WS_VSCROLL | WS_TABSTOP
    PUSHBUTTON      "&D删除",IDC_DEL,229,12,31,14
    PUSHBUTTON      "&A增加",IDC_ADD_PROGNAME,192,12,31,14
    PUSHBUTTON      "&K取得列表(<=1000)",IDOK,2,96,79,13
    LTEXT           "状态:",IDC_STATIC,7,34,22,8
    LTEXT           "buffer status",IDC_DRIVER_BUFFER_STATUS,31,34,125,22
    PUSHBUTTON      "&S设置最大包数目:",IDC_SET_MAX_LOG_NUM,6,59,74,12
    EDITTEXT        IDC_EDT_INPUT,87,59,39,12,ES_AUTOHSCROLL
    LISTBOX         IDC_LOG_LIST,289,40,76,65,LBS_NOINTEGRALHEIGHT | 
                    WS_VSCROLL | WS_TABSTOP
    CONTROL         "&R只纪录下面的线程?",IDC_CHECK_PROCESS_IN_LIST,"Button",
                    BS_AUTOCHECKBOX | WS_TABSTOP,285,11,88,11
    PUSHBUTTON      "&I增加",IDC_ADD_LOG_LIST,288,24,31,14
    PUSHBUTTON      "&K删除",IDC_DEL_FROM_LOG_LIST,327,24,31,14
    PUSHBUTTON      "&C清除列表",IDC_CLEAR_RESULT,92,96,78,13
    PUSHBUTTON      "&K清除驱动程序的结果",IDC_CLEAR_DRIVER_BUFFER,5,75,122,
                    12
    GROUPBOX        "禁止访问列表:",IDC_STATIC,186,2,84,108
    GROUPBOX        "侦察记录列表:",IDC_STATIC,283,2,88,108
    GROUPBOX        "驱动程序",IDC_STATIC,2,23,160,69
    CONTROL         "List1",IDC_LST_REG_RESULT,"SysListView32",LVS_REPORT | 
                    LVS_NOSORTHEADER | WS_BORDER | WS_TABSTOP,2,139,420,179
    LTEXT           "",IDC_DETAIL_TEXT,41,117,381,17,WS_BORDER
    LTEXT           "操作键名",IDC_STATIC,2,119,34,10
END

IDD_SELECT_PROGRAM DIALOGEX 0, 0, 289, 170
STYLE DS_MODALFRAME | WS_POPUP | WS_CAPTION | WS_SYSMENU
EXSTYLE WS_EX_CLIENTEDGE
CAPTION "选择一个程序名称或者ID号"
FONT 9, "宋体", 0, 0, 0x1
BEGIN
    DEFPUSHBUTTON   "&A增加",ID_ADD,168,148,62,14
    PUSHBUTTON      "Cancel",IDCANCEL,232,148,50,14
    LISTBOX         IDC_LST_PROG_LIST,7,24,275,77,LBS_NOINTEGRALHEIGHT | 
                    WS_VSCROLL | WS_TABSTOP
    LTEXT           "输入程序名称",IDC_STATIC,7,113,58,9
    EDITTEXT        IDC_EDT_PROGNAME,71,111,83,14,ES_AUTOHSCROLL
    PUSHBUTTON      "&B浏览",IDC_BROWSE,157,111,39,13
    LTEXT           "选择结果",IDC_SELECT_RESULT,8,149,148,13
    LTEXT           "在下面进程列表中,选择一个进程id号,或者直接输入程序名称. ",
                    IDC_STATIC,7,7,275,10
    PUSHBUTTON      "&R刷新进程列表",IDC_REFRESH_PROGID,225,111,57,14
    CONTROL         "",IDC_STATIC,"Static",SS_GRAYFRAME,7,136,275,27
END

IDD_DLG_ABOUT DIALOGEX 0, 0, 227, 133
STYLE DS_MODALFRAME | WS_POPUP | WS_CAPTION | WS_SYSMENU
EXSTYLE WS_EX_CLIENTEDGE
CAPTION "关于注册表实时监察系统"
FONT 10, "宋体"
BEGIN
    DEFPUSHBUTTON   "OK",IDOK,185,7,35,14
    EDITTEXT        IDC_EDT_MSG,7,43,213,86,ES_MULTILINE | ES_AUTOVSCROLL | 
                    ES_AUTOHSCROLL | ES_READONLY | WS_VSCROLL | WS_HSCROLL
    ICON            IDR_MAINFRAME,IDC_STATIC,7,7,20,20
    LTEXT           "注册表实时监察系统 v1.0",IDC_STATIC_BRAND,37,7,140,14
    LTEXT           "by snake, 2000/10 所有权保留",IDC_STATIC,94,28,126,11
END


#ifndef _MAC
/////////////////////////////////////////////////////////////////////////////
//
// Version
//

VS_VERSION_INFO VERSIONINFO
 FILEVERSION 1,0,0,1
 PRODUCTVERSION 1,0,0,1
 FILEFLAGSMASK 0x3fL
#ifdef _DEBUG
 FILEFLAGS 0x1L
#else
 FILEFLAGS 0x0L
#endif
 FILEOS 0x4L
 FILETYPE 0x1L
 FILESUBTYPE 0x0L
BEGIN
    BLOCK "StringFileInfo"
    BEGIN
        BLOCK "080404B0"
        BEGIN
            VALUE "CompanyName", "\0"
            VALUE "FileDescription", "TestSkMon Microsoft 基础类应用程序\0"
            VALUE "FileVersion", "1, 0, 0, 1\0"
            VALUE "InternalName", "TestSkMon\0"
            VALUE "LegalCopyright", "版权所有 (C) 2000\0"
            VALUE "LegalTrademarks", "\0"
            VALUE "OriginalFilename", "TestSkMon.EXE\0"
            VALUE "ProductName", "TestSkMon 应用程序\0"
            VALUE "ProductVersion", "1, 0, 0, 1\0"
        END
    END
    BLOCK "VarFileInfo"
    BEGIN
        VALUE "Translation", 0x804, 1200
    END
END

#endif    // !_MAC


/////////////////////////////////////////////////////////////////////////////
//
// DESIGNINFO
//

#ifdef APSTUDIO_INVOKED
GUIDELINES DESIGNINFO DISCARDABLE 
BEGIN
    IDD_TESTSKMON_DIALOG, DIALOG
    BEGIN
        LEFTMARGIN, 2
        RIGHTMARGIN, 422
        TOPMARGIN, 2
        BOTTOMMARGIN, 318
    END

    IDD_SELECT_PROGRAM, DIALOG
    BEGIN
        LEFTMARGIN, 7
        RIGHTMARGIN, 282
        TOPMARGIN, 7
        BOTTOMMARGIN, 163
    END

    IDD_DLG_ABOUT, DIALOG
    BEGIN
        LEFTMARGIN, 7
        RIGHTMARGIN, 220
        TOPMARGIN, 7
        BOTTOMMARGIN, 126
    END
END
#endif    // APSTUDIO_INVOKED


/////////////////////////////////////////////////////////////////////////////
//
// Menu
//

IDR_MAINMENU MENU DISCARDABLE 
BEGIN
    POPUP "&C命令"
    BEGIN
        MENUITEM "&G读存取注册表纪录",          IDOK
        MENUITEM "&C清除结果",                  IDC_CLEAR_RESULT
        MENUITEM "&A关于",                      ID_ABOUT
    END
END


/////////////////////////////////////////////////////////////////////////////
//
// TEXT
//

IDR_HELPTEXT            TEXT    DISCARDABLE     "helptext.txt"
#endif    // Chinese (P.R.C.) resources
/////////////////////////////////////////////////////////////////////////////



#ifndef APSTUDIO_INVOKED
/////////////////////////////////////////////////////////////////////////////
//
// Generated from the TEXTINCLUDE 3 resource.
//
#define _AFX_NO_SPLITTER_RESOURCES
#define _AFX_NO_OLE_RESOURCES
#define _AFX_NO_TRACKER_RESOURCES
#define _AFX_NO_PROPERTY_RESOURCES

#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_CHS)
#ifdef _WIN32
LANGUAGE 4, 2
#pragma code_page(936)
#endif //_WIN32
#include "res\TestSkMon.rc2"  // non-Microsoft Visual C++ edited resources
#include "l.chs\afxres.rc"          // Standard components
#endif

/////////////////////////////////////////////////////////////////////////////
#endif    // not APSTUDIO_INVOKED