there are many windows PE resource viewers programs. But how do they work? Do they decode function calls to winapi, or does PE have some section for GUI information? Like Android has XML GUI definitons? Thanks.
Share
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
there are many windows PE resource viewers programs. But how do they work? Do they decode function calls to winapi, or does PE have some section for GUI information? Like Android has XML GUI definitons? Thanks.
There are probably different implementation strategies, so it’s not possible to answer this universally for all tools.
The PE file format specification is publicly available. It specifies the section structure of a PE file, how to find the .rsrc section in the file, and how to extract individual resources from that section. The individual resource formats are also documented on MSDN. For example, the dialog GUI definitions are defined in the DLGTEMPLATE structure.