how to find out the highest icon number in a recource

[jennico]

when i search icons, let's say in shell32.dll the autoit way (negative and positive ordinals), how can i retrieve where to stop the search (what is the highest iconnumber ? despite of all gaps i want to keep on searching to the really last one.

i searched the forum examples, but no script seems to find the really last one.

anyone knows ?

thx j.

Edited January 3, 2009 by jennico

[jennico]

from here:

using System.Runtime.InteropServices;

Get Icon Count From ExtractIconEx WinAPI

This code snippet demonstrates how to get the total number of Icons in a DLL file.

public extern static int ExtractIconEx(string libName, int iconIndex, IntPtr[] largeIcon, IntPtr[] smallIcon, int nIcons);

int icons = ExtractIconEx("shell32.dll", 0, null, null, 0);

MessageBox.Show(icons.ToString());

now translate it... Edited January 3, 2009 by jennico

[SmOke_N]

from here:

now translate it...

Would you like to super size that order?

[jennico]

....

#Include <WinAPI.au3>
MsgBox(0,"",_WinAPI_ExtractIconEx("shell32.dll",-1,0,0,0))

.....

just loudly thinking, the order was for myself.

keep calm, smoke_n ....

Edited January 3, 2009 by jennico

[BrettF]

Not that hard.

$file = @SystemDir & "\shell32.dll"
$ret = DllCall ("shell32.dll", "int", "ExtractIconEx", "str", $file, "int", -1, "hwnd", "", "hwnd", "", "uint", "")
MsgBox (0, "", $ret[0])

Cheers,

Brett

EDIT: I see it is in WinAPI.au3....

Edited January 3, 2009 by BrettF

[jennico]

one question is left: i hope this equals the number autoit gets out of the dll by pulling pos and neg ordinals. i will have to count them, no ?

j.

[jennico]

one question is left: i hope this equals the number autoit gets out of the dll by pulling pos and neg ordinals. i will have to count them, no ?

j.

i am afraid, no !!!

as i suspected, the number is different

e.g. for "zipfldr.dll", ExtractIconEx says 7 icons, but i can extract at least 25:

ordinal 0

ordinal -1

ordinal -2

ordinal -3

ordinal -4

ordinal -5

ordinal -6

ordinal -7

ordinal 101

ordinal 123

ordinal 170

ordinal 10202

ordinal 10203

ordinal 32513

ordinal 32515

ordinal 65637

ordinal 65659

ordinal 65706

ordinal 75738

ordinal 75739

ordinal 98049

ordinal 98051

ordinal 131173

ordinal 131175

ordinal 131242

... (seems endless)

what now ? that's too bad

maybe the number excludes repetitions ?

Edited January 3, 2009 by jennico

[jennico]

i found another example:

the file "shdocvw.dll" : ExtractIconEx says it contain 35 icons. but in reality there are only 23 different icons.

$file = @SystemDir & "\shdocvw.dll"
$ret = DllCall ("shell32.dll", "int", "ExtractIconEx", "str", $file, "int", -1, "hwnd", "", "hwnd", "", "uint", "")
MsgBox (0, "", $ret[0])

that's what i suspected: this is not a good way to get the icon count. but is there another one ?

any idea ?

j.

Edited January 3, 2009 by jennico

[ProgAndy]

There are 34 icons plus 1 empty icon in this file, but some icons are included multiple times in there.

//Edit: Strange. if you use The ordinal icon value, the first icon is shown mutliple times. If you open the file with reshacker, there are many empty icon groups, not multiple entries for the first icon.

Edited January 3, 2009 by ProgAndy

[trancexx]

Missing icons are manually deleted from RT_GROUP_ICON resources. What's left is only the mention of them.

Great findings!

I will update my reshacker wannabe (viewer currently) to meet this.

[jennico]

that's not all.

ExtractIconEx is supposed to return the icon count without duplicates (there are many many more if you count duplicates.

"shdocvw.dll" is said to have 35 icons. there are only 23:

"NAME", not ordinal number

0

1 does not exist (it is not empty !)

2

3

4 does not exist (it is not empty !)

5

6-9 do not exist (not empty !)

10

11

12

13

14-15 do not exist (not empty !)

16

17 does not exist (it is not empty !)

18

19

20

21

22

23

24

25

26

27

28 => is identical to 10 !

29

30

31

32-34 are empty !

so, missing RT_GROUP_ICON groups is not the reason.

"shdocvw.dll" is not an exception. mmsys.cpl and netshell.dll, shell32.dll, newdev.dll..., they all have "false" entries.

i am just trying to get an understanding of resources, but it seems complicated.

j.

Edited January 3, 2009 by jennico

[jennico]

i will have to test if ExtractIconEx at least returns the max limit for searching (you can sort the empty/missing out with PixelChecksum (i do not see a better method)), but i fear there could be more icons beyond this limit.

j.

[trancexx]

that's not all.

ExtractIconEx is supposed to return the icon count without duplicates (there are many many more if you count duplicates.

"shdocvw.dll" is said to have 35 icons. there are only 23:

"NAME", not ordinal number

0

1 does not exist (it is not empty !)

2

3

4 does not exist (it is not empty !)

5

6-9 do not exist (not empty !)

10

11

12

13

14-15 do not exist (not empty !)

16

17 does not exist (it is not empty !)

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32-34 are empty !

so, missing RT_GROUP_ICON groups is not the reason.

"shdocvw.dll" is not an exception. mmsys.cpl and netshell.dll, shell32.dll, newdev.dll..., they all have "false" entries.

i am just trying to get an understanding of resources, but it seems complicated.

j.

They are not missing, they are missing!

Entry is there but points to nothing. RT_GROUP_ICON does not contain actuall icon data (that is stored in RT_ICON to which RT_GROUP_ICON points).

Authors (modifiers) of that dlls decided to preserve that RT_GROUP_ICON entries probably not to lose the count when using ordinals to extract icons for backward compatibility. And apparently in that cases, first icon (0) will be extracted instead of that one (that does not exists any more).

[jennico]

hmm..hmm.. i will have to go deeper into this forest.

j.