📄 ollydump.rc
字号:
#include "resource.h"
/////////////////////////////////////////////////////////////////////////////
//
// Dialog
//
IDD_OLLYDUMP DIALOG DISCARDABLE 0, 0, 302, 210
STYLE DS_MODALFRAME | WS_POPUP | WS_CAPTION | WS_SYSMENU
CAPTION "OllyDump"
FONT 9, "MS Sans Serif"
BEGIN
LTEXT "Start &Address:",IDC_STATIC,16,17,50,8
EDITTEXT IDE_FROM,66,14,40,14,ES_AUTOHSCROLL
LTEXT "&Size:",IDC_STATIC,126,17,16,8
EDITTEXT IDE_SIZE,146,14,40,14,ES_AUTOHSCROLL
LTEXT "Entry Point:",IDC_STATIC,16,34,50,8
EDITTEXT IDC_EP,66,31,40,14,ES_AUTOHSCROLL | ES_READONLY
LTEXT "-> &Modify:",IDC_STATIC,110,34,38,8
EDITTEXT IDC_OEP,146,31,40,14,ES_AUTOHSCROLL
PUSHBUTTON "&Get EIP as OEP",IDC_GETEIP,187,31,60,14
LTEXT "Base of &Code:",IDC_STATIC,16,54,50,8
EDITTEXT IDC_BASEOFCODE,66,51,40,14,ES_AUTOHSCROLL
LTEXT "Base of &Data:",IDC_STATIC,113,54,50,8
EDITTEXT IDC_BASEOFDATA,161,51,40,14,ES_AUTOHSCROLL
CONTROL "&Fix Raw Size && Offset of Dump Image",IDC_FIXSECT, "Button",BS_AUTOCHECKBOX | WS_TABSTOP,10,74,150,10
CONTROL "List1",IDC_SECTLIST,"SysListView32",LVS_REPORT | WS_BORDER | WS_TABSTOP,7,85,288,87
CONTROL "&Rebuild Import",IDC_REBUILD, "Button",BS_AUTOCHECKBOX | WS_TABSTOP | WS_GROUP,10,175,150,10
CONTROL "Method&1 : Search JMP[API] | CALL[API] in memory image",IDC_RDO_M1,"Button",BS_AUTORADIOBUTTON,15,185,300,10
CONTROL "Method&2 : Search DLL && API name string in dumped file",IDC_RDO_M2,"Button",BS_AUTORADIOBUTTON,15,195,300,10
DEFPUSHBUTTON "D&ump",IDOK,253,14,42,14
PUSHBUTTON "Ca&ncel",IDCANCEL,253,31,42,14
END
IDD_EDITSECT DIALOG DISCARDABLE 0, 0, 240, 157
STYLE DS_MODALFRAME | WS_POPUP | WS_CAPTION | WS_SYSMENU
CAPTION "Edit Section"
FONT 9, "MS Sans Serif"
BEGIN
GROUPBOX "Section Values",IDC_STATIC,7,7,109,122
LTEXT "Name:",IDC_STATIC,15,24,52,8
EDITTEXT IDC_SE_NAME,67,21,40,14,ES_AUTOHSCROLL
LTEXT "Virtual Size:",IDC_STATIC,15,41,52,8
EDITTEXT IDC_SE_VSIZE,67,38,40,14,ES_AUTOHSCROLL
LTEXT "Virtual Offset:",IDC_STATIC,15,58,52,8
EDITTEXT IDC_SE_VOFFSET,67,55,40,14,ES_AUTOHSCROLL
LTEXT "Raw Size:",IDC_STATIC,15,75,52,8
EDITTEXT IDC_SE_RSIZE,67,72,40,14,ES_AUTOHSCROLL
LTEXT "Raw Offset:",IDC_STATIC,15,92,52,8
EDITTEXT IDC_SE_ROFFSET,67,89,40,14,ES_AUTOHSCROLL
LTEXT "Characteristics:",IDC_STATIC,15,109,52,8
EDITTEXT IDC_SE_CHAR,67,106,40,14,ES_AUTOHSCROLL
GROUPBOX "Characteristics of the Section",IDC_STATIC,121,7,110,122
CONTROL "contains code",IDC_SE_CONTCODE,"Button",BS_AUTOCHECKBOX |
WS_TABSTOP,131,23,57,10
CONTROL "contains initialized data",IDC_SE_CONTINI,"Button",
BS_AUTOCHECKBOX | WS_TABSTOP,131,35,85,10
CONTROL "contains uninitialized data",IDC_SE_CONTUNINI,"Button",
BS_AUTOCHECKBOX | WS_TABSTOP,131,47,95,10
CONTROL "shareable",IDC_SE_SHARE,"Button",BS_AUTOCHECKBOX |
WS_TABSTOP,131,69,44,10
CONTROL "executable",IDC_SE_EXEC,"Button",BS_AUTOCHECKBOX |
WS_TABSTOP,131,81,47,10
CONTROL "readable",IDC_SE_READ,"Button",BS_AUTOCHECKBOX |
WS_TABSTOP,131,93,41,10
CONTROL "writeable",IDC_SE_WRITE,"Button",BS_AUTOCHECKBOX |
WS_TABSTOP,131,105,42,10
DEFPUSHBUTTON "&Apply",IDOK,63,136,50,14
PUSHBUTTON "&Cancel",IDCANCEL,119,136,50,14
END
IDD_OPTIONS DIALOG DISCARDABLE 0, 0, 183, 132
STYLE DS_MODALFRAME | WS_POPUP | WS_CAPTION | WS_SYSMENU
CAPTION "OllyDump Options"
FONT 9, "MS Sans Serif"
BEGIN
CONTROL "API search animation",IDC_CHK_ANIMATION,"Button",BS_AUTOCHECKBOX | WS_TABSTOP,11,14,84,10
EDITTEXT IDC_EDT_ANIMWAIT,126,13,38,12,ES_RIGHT | ES_AUTOHSCROLL
CONTROL "Search Log",IDC_CHK_SEARCHLOG,"Button",BS_AUTOCHECKBOX | WS_TABSTOP,11,26,84,10
DEFPUSHBUTTON "&OK",IDOK,38,111,50,14
PUSHBUTTON "&Cancel",IDCANCEL,93,111,50,14
LTEXT "Wait :",IDC_STATIC,106,15,19,8,SS_CENTERIMAGE
LTEXT "ms",IDC_STATIC,166,15,10,8
END
IDD_IMGDATDIR DIALOG DISCARDABLE 0, 0, 187, 277
STYLE DS_MODALFRAME | WS_POPUP | WS_CAPTION | WS_SYSMENU
CAPTION "Data Directory"
FONT 9, "MS Sans Serif"
BEGIN
LTEXT "Export:",IDC_STATIC,12,26,56,8
EDITTEXT IDC_EXPORT_RVA,77,23,40,14,ES_AUTOHSCROLL
EDITTEXT IDC_EXPORT_SIZ,125,23,40,14,ES_AUTOHSCROLL
LTEXT "Import:",IDC_STATIC,12,42,56,8
EDITTEXT IDC_IMPORT_RVA,77,39,40,14,ES_AUTOHSCROLL
EDITTEXT IDC_IMPORT_SIZ,125,39,40,14,ES_AUTOHSCROLL
LTEXT "Resource:",IDC_STATIC,12,58,56,8
EDITTEXT IDC_RESOURCE_RVA,77,55,40,14,ES_AUTOHSCROLL
EDITTEXT IDC_RESOURCE_SIZ,125,55,40,14,ES_AUTOHSCROLL
LTEXT "Exception:",IDC_STATIC,12,74,56,8
EDITTEXT IDC_EXCEPTION_RVA,77,71,40,14,ES_AUTOHSCROLL
EDITTEXT IDC_EXCEPTION_SIZ,125,71,40,14,ES_AUTOHSCROLL
LTEXT "BaseReloc:",IDC_STATIC,12,90,56,8
EDITTEXT IDC_BASERELOC_RVA,77,87,40,14,ES_AUTOHSCROLL
EDITTEXT IDC_BASERELOC_SIZ,125,87,40,14,ES_AUTOHSCROLL
LTEXT "Debug:",IDC_STATIC,12,106,56,8
EDITTEXT IDC_DEBUG_RVA,77,103,40,14,ES_AUTOHSCROLL
EDITTEXT IDC_DEBUG_SIZ,125,103,40,14,ES_AUTOHSCROLL
LTEXT "Architecture:",IDC_STATIC,12,122,56,8
EDITTEXT IDC_ARCHITECTURE_RVA,77,119,40,14,ES_AUTOHSCROLL
EDITTEXT IDC_ARCHITECTURE_SIZ,125,119,40,14,ES_AUTOHSCROLL
LTEXT "GlobalPtr:",IDC_STATIC,12,138,56,8
EDITTEXT IDC_GLOBALPTR_RVA,77,135,40,14,ES_AUTOHSCROLL
EDITTEXT IDC_GLOBALPTR_SIZ,125,135,40,14,ES_AUTOHSCROLL
LTEXT "TLS:",IDC_STATIC,12,154,56,8
EDITTEXT IDC_TLS_RVA,77,151,40,14,ES_AUTOHSCROLL
EDITTEXT IDC_TLS_SIZ,125,151,40,14,ES_AUTOHSCROLL
LTEXT "Load Config:",IDC_STATIC,12,170,56,8
EDITTEXT IDC_LOADCONFIG_RVA,77,167,40,14,ES_AUTOHSCROLL
EDITTEXT IDC_LOADCONFIG_SIZ,125,167,40,14,ES_AUTOHSCROLL
LTEXT "Bound Import:",IDC_STATIC,12,186,56,8
EDITTEXT IDC_BOUNDIMPORT_RVA,77,183,40,14,ES_AUTOHSCROLL
EDITTEXT IDC_BOUNDIMPORT_SIZ,125,183,40,14,ES_AUTOHSCROLL
LTEXT "IAT:",IDC_STATIC,12,202,56,8
EDITTEXT IDC_IAT_RVA,77,199,40,14,ES_AUTOHSCROLL
EDITTEXT IDC_IAT_SIZ,125,199,40,14,ES_AUTOHSCROLL
LTEXT "Delay Import:",IDC_STATIC,12,218,56,8
EDITTEXT IDC_DELAYIMPORT_RVA,77,215,40,14,ES_AUTOHSCROLL
EDITTEXT IDC_DELAYIMPORT_SIZ,125,215,40,14,ES_AUTOHSCROLL
LTEXT "COM Descripter:",IDC_STATIC,12,234,56,8
EDITTEXT IDC_COMDESCRIPTER_RVA,77,231,40,14,ES_AUTOHSCROLL
EDITTEXT IDC_COMDESCRIPTER_SIZ,125,231,40,14,ES_AUTOHSCROLL
DEFPUSHBUTTON "&OK",IDOK,43,256,50,14
PUSHBUTTON "&Cancel",IDCANCEL,98,256,50,14
CTEXT "RVA",IDC_STATIC,77,11,40,8
CTEXT "Size",IDC_STATIC,125,11,40,8
END
/////////////////////////////////////////////////////////////////////////////
//
// Menu
//
IDM_SECTLIST MENU DISCARDABLE
BEGIN
POPUP "dummy"
BEGIN
MENUITEM "&Edit Section", IDM_EDITSECT
// MENUITEM SEPARATOR
// MENUITEM "&Add Section", IDM_ADDSECT
// MENUITEM "&Delete Section", IDM_DELSECT
END
END
/////////////////////////////////////////////////////////////////////////////
//
// Version
//
//VS_VERSION_INFO VERSIONINFO
// FILEVERSION 2,0,108,30304
// PRODUCTVERSION 2,0,108,30304
// FILEFLAGSMASK 0x3fL
//#ifdef _DEBUG
//FILEFLAGS 0x9L
//#else
//FILEFLAGS 0x8L
//#endif
// FILEOS 0x40004L
// FILETYPE 0x1L
// FILESUBTYPE 0x0L
//BEGIN
// BLOCK "StringFileInfo"
// BEGIN
// BLOCK "040904b0"
// BEGIN
// VALUE "Comments", "Plugin for OllyDbg Compiled with PDK1.08\0"
// VALUE "CompanyName", "Gigapede\0"
// VALUE "FileDescription", "OllyDump v2.00 (Plugin for OllyDbg)\0"
// VALUE "FileVersion", "v2.20.108.030404\0"
// VALUE "InternalName", "OLLYDUMP.DLL\0"
// VALUE "LegalCopyright", "What is the Copyright ?\0"
// VALUE "OriginalFilename", "OllyDump.dll\0"
// VALUE "ProductName", "OllyDump\0"
// VALUE "ProductVersion", "v2.00.108\0"
// END
// END
// BLOCK "VarFileInfo"
// BEGIN
// VALUE "Translation", 0x409, 1200
// END
//END
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -