PE文件资源解析(三)图标组资源的解析

图标组资源,在这里指的是资源类型为RT_GROUP_ICON的资源信息。通过ResHacker看到的效果图如下:

既然是图标组,里面肯定包含很多组图标,解析代码如下:

HRSRC hResrc = ::FindResource(hModule, lpName, RT_GROUP_ICON);
HGLOBAL hGlobal = ::LoadResource(hModule, hResrc);
if (hGlobal == NULL)
	return;

BYTE* lpResrc = (BYTE*)::LockResource(hGlobal);
if (lpResrc == NULL)
	return;

LPMEMICONDIR lpIcon = (LPMEMICONDIR)lpResrc;
//解析每个子图标
for (int i = 0; i < lpIcon->idCount; i++)
{
	if ((hResrc = ::FindResource(hModule, MAKEINTRESOURCE(lpIcon->idEntries[i].nID), RT_ICON)) == NULL)
		return ;

	if ((hGlobal = ::LoadResource(hModule, hResrc)) == NULL)
		return ;

	lpResrc = (BYTE*)::LockResource(hGlobal);
	if (lpResrc == NULL)
		return;

	HICON hIcon = ::CreateIconFromResourceEx((PBYTE)lpResrc, lpIcon->idEntries[i].dwBytesInRes, TRUE, 0x00030000, lpIcon->idEntries[i].bWidth, lpIcon->idEntries[i].bHeight, 0);
	if (hIcon)
	{				
		Gdiplus::Bitmap* pBitmap = (Gdiplus::Bitmap*)Bitmap::FromHICON(hIcon);
		Gdiplus::Status result = pBitmap->GetLastStatus();
		if (result == Gdiplus::Ok)
		{
			//解析成功
		}
	}
}

猜你喜欢

转载自blog.csdn.net/u012156872/article/details/105662845