The Windows Portable Executable Journey — Version Information | by Shlomi Boutnaru, Ph.D. | Dec, 2024 Hallie Frederick | usagoldmines.com

Shlomi Boutnaru, Ph.D.

·

Follow

1 min learn

·

Simply now

—

Pay attention

Share

“Model Data” is a useful resource as a part of the PE header (https://learn.microsoft.com/en-us/windows/win32/debug/pe-format) — as proven within the screenshot beneath, which was taken utilizing “PE Explorer” (https://github.com/zodiacon/PEExplorerV2). It incorporates totally different data similar to: file description, firm identify, file model, authorized copyright, authentic file identify and extra (https://learn.microsoft.com/en-us/windows/win32/menurc/versioninfo-resource).

Total, the model data can be utilized for various person instances like inserting information within the right location (as a part of an set up move), notifying the person if an set up is changing an current file with a special model and/or a special language help and extra (https://learn.microsoft.com/en-us/windows/win32/menurc/using-version-information).

Lastly, for extracting the model data we are able to use the “GetFileVersionInfo” or the “GetFileVersionInfoEx” Win32 API capabilities. For extra Win32 API capabilities associated to model data I counsel going over Microsoft’s documentation (https://learn.microsoft.com/en-us/windows/win32/menurc/version-information-functions). The knowledge is saved as a “strings desk” wherein every worth has a reputation and a price — as proven within the screenshot beneath.

See you in my subsequent writeup You’ll be able to comply with me on twitter — @boutnaru (https://twitter.com/boutnaru). Additionally, you may learn my different writeups on medium — https://medium.com/@boutnaru. You will discover my free eBooks at https://TheLearningJourneyEbooks.com.