Re: Outlook Express question
From: Jim Carlock (anonymous_at_127.0.0.1)
Date: 04/01/04
- Next message: Bruce: "Re: Pictures within text - OE"
- Previous message: Bob H: "Pictures within text - OE"
- Maybe in reply to: Jim Carlock: "Re: Outlook Express question"
- Next in thread: Jim Carlock: "Re: Outlook Express question"
- Reply: Jim Carlock: "Re: Outlook Express question"
- Reply: Robert Aldwinckle: "Re: Outlook Express question"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 1 Apr 2004 14:08:54 -0500
<g>
This message is for Robert Aldwinckle as well. I'm sending the
thread to the PA Bear newsgroup as well. ;-)
I've tried using OllyDbg to step through it. I can't slow down my
system enough to read the splash, and for some reason I can get
OllyDbg to stop right after the Splash is displayed, but the splash
at that point is unreadable (because of OllyDbg's control over it).
Some comments, so far, the best I can tell right at the moment
is the version number is being read from msoeres.dll. I've looked
through the msoe.dll for the version string but they default to a
IMproper string (ie, not the 5.00.0000.0000 string). ;-)
And I'm not sure if you'd like me to post all the gorey details
about the different strings that are contained within the other
files, so I'll start off by stating, the following:
msoe.dll <- is one of the main files
msimn.exe <- is thart starting stub
msoeres.dll <- is the resource file that holds icons (and version info ?)
This file is read initially and loaded at start up. This file is also read
when doing a version lookup (at least on my system it is).
I created a new MS IEADK (these acronyms are killing me!) and
reinstalled using the new IEAKD build, but it didn't seem to over-
write anything. Right now I've got the OLD msoeres.dll (as it
doesn't export anything but icons (and possibly a version number)),
in use. It does NOT seem to affect any of the operations of OE.
There are approx. 59 icons in msoeres.dll in 10 different formats,
and it has the version number of OE as displayed in my About box.
The About box seems to read from that file, but my first inclination
is to think that it's grabbing a bitmap or icon. Furthermore, there
seem to be numerous .gif89 files inside of msoeres.dll, as well as
Adobe 4.0 images, there is a reference to: NPhotoshop 3.0, I'm
not quite sure what that is at the moment, but I think it might be
worth finding, and other things with that tag inside of them all
seem to be some sort of .jpg images, which is really really
interesting, as there is JFIF in those files and if the image is renamed
from jpg, to jfif, it reads 100% accurately (in IE as well as other
graphics programs). If you're a graphic image specialist, you I'd
appreciate a comment, because as you can tell I don't have a
very broad knowledge of what the difference is between jfif and
jpg (there appears to be NO difference).
Some interesting strings inside of msoe.dll:
ComboBox, cmdDownload, cmdConnect, btnContinue
btnTrust, btnCert, btnOpen, Hhotmail
It almost looks like a VB application with function names as those
listed above. Either that, or the programmers took a fancy for the
Hungarian notation that VB programmers use. In fact, I'm willing
to bet that parts of msoe.dll were created with an offshoot brand
of VB5.
But what do I know? Absolutely nothing! I'm still at the same
point I started at. <g>
-- Jim Carlock http://www.microcosmotalk.com/ Post replies to the newsgroup. "Kelly" wrote: Hi PaBear (dry up those tears), Here is the reading of the second export: All is norm except for the fact that you will scream because it reads ...1106. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] "Version"="6,0,2800,1106" @="Microsoft Outlook Express 6" "IsInstalled"=dword:00000001 "Locale"="EN" "ComponentID"="MailNews" "CloneUser"=dword:00000001 "StubPath"=hex <snipped> -- All the Best, Kelly Microsoft-MVP Windows® XP Troubleshooting Windows XP http://www.kellys-korner-xp.com Taskbar Repair Tool Plus! http://www.kellys-korner-xp.com/taskbarplus!.htm "PA Bear" <PABear@mvps.org> wrote in message news:O4jZcM6FEHA.1012@TK2MSFTNGP11.phx.gbl... > <sniff> OK, fine, be that way. > -- > ~PAB > > Kelly wrote: >> Hi Jim, >> >> So sorry, I didn't recognize the name with the attachment. :o( Ok, so >> far that looks all correct. Go to Start/Run/Regedit, navigate to this >> key and either post here what is listed for (Default), StubPath and the >> Version listed in the right pane or send me the reg file, please. >> >> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed >> Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C} >> >> "Jim Carlock" <anonymous@127.0.0.1> wrote in message >> news:eQ35i$sFEHA.3080@tk2msftngp13.phx.gbl... >>> Did you get my email, Kelly? >>> >>> -- >>> Jim Carlock >>> http://www.microcosmotalk.com/ >>> Post replies to the newsgroup. >>> >>> >>> "Kelly" wrote: >>> Jim, >>> >>> Go to Start/Run/Regedit, naviagate to this key: >>> HKEY_CURRENT_USER\Identities\{GUID}\Software\Microsoft\Outlook >>> Express\5.0 >>> >>> Right click, export and send it to me via e-mail. >>> >>> -- >>> All the Best, >>> Kelly >>> >>> Microsoft-MVP Windows® XP >>> >>> Troubleshooting Windows XP >>> http://www.kellys-korner-xp.com >>> >>> Taskbar Repair Tool Plus! >>> http://www.kellys-korner-xp.com/taskbarplus!.htm >>> >>> >>> "Kelly" wrote: >>>> Do all of the numbers under Version (File/Version/Full Path) read 5.... >>>> as >>>> well? Either way, this is not normal. >>>> >>>> -- >>>> All the Best, >>>> Kelly >>>> >>>> "Jim Carlock" >>>>> When I click on Help, "About Microsoft Outlook Express", >>>>> I get the About dialog box for Outlook Express. >>>>> >>>>> It's unusual though I think. Mine is reporting: >>>>> >>>>> Microsoft >>>>> Outlook Express 6 >>>>> 5.00.0000.0000 >>>>> >>>>> And I think it should be reporting different numbers. I'm wondering >>>>> what others are getting. >>>>> >>>>> I'm not sure if I should report this as a bug or look somewhere else >>>>> to find out why. >>>>> -- >>>>> Jim Carlock > >
- Next message: Bruce: "Re: Pictures within text - OE"
- Previous message: Bob H: "Pictures within text - OE"
- Maybe in reply to: Jim Carlock: "Re: Outlook Express question"
- Next in thread: Jim Carlock: "Re: Outlook Express question"
- Reply: Jim Carlock: "Re: Outlook Express question"
- Reply: Robert Aldwinckle: "Re: Outlook Express question"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
