Re: A PE resource directory -- difficulty in understanding it ...
- From: "R.Wieser" <address@xxxxxxxxxxxxx>
- Date: Sat, 22 Dec 2007 11:55:22 +0100
Remy Lebeau <no.spam@xxxxxxxxxxx> schreef in berichtnieuws
OHtSVn$QIHA.5524@xxxxxxxxxxxxxxxxxxxxxxx
Hello Gambit,
"R.Wieser" <address@xxxxxxxxxxxxx> wrote in message
news:%236XaiN%23QIHA.4400@xxxxxxxxxxxxxxxxxxxxxxx
I would be gratefull for any kind of info to the subject, as mu
searches of the web did not shed much light on it
Have you read Microsoft's documentation on the PE format yet?
I remember having seen the first link, but think I've somehow missed the
second. Thanks
A question though : nowhere there is mentioned that those four levels (root,
name/ID, language-split, data) are the required and/or the only ones. Is
it allowed for the root to directly point to the data (a leaf node) ? Can
the name level, when a language is not required for the the resource (like
icons), directly point to the data ? Can a fifth level be inserted/present
(no idea what for, but ...) ?
You see, in the info I found the "OffsetToData" member of the
"IMAGE_RESOURCE_DIRECTORY_ENTRY" structure is only specified as pointing to
data if its unsigned, and to another node if its signed. This structure is
used by the first three of the above levels, and leaves quite some room to
my above ponderings. Why this specification when the usage of that member
in those three levels is fixed (*allways* pointing to the next level) ? It
could simply be an unsigned value.
Regards,
Rudy Wieser
.
- Follow-Ups:
- References:
- A PE resource directory -- difficulty in understanding it ...
- From: R.Wieser
- Re: A PE resource directory -- difficulty in understanding it ...
- From: Remy Lebeau
- A PE resource directory -- difficulty in understanding it ...
- Prev by Date: Re: run a process (all threads) in single core in a dual core system
- Next by Date: Re: Problem about writing large files.
- Previous by thread: Re: A PE resource directory -- difficulty in understanding it ...
- Next by thread: Re: A PE resource directory -- difficulty in understanding it ...
- Index(es):
Relevant Pages
|