strange file name question.

[Rein Klazes]

Hi,

Showing my ignorance, but this is the first time that I see something
like this:

(agent.xrs is indeed a zip file)

| 0009:Call kernel32.GetFileAttributesA(416818c4 "H:\binw\Agent\agent.xrs#zip:version.xml") ret=005f4635
| 0009:Ret  kernel32.GetFileAttributesA() retval=ffffffff ret=005f4635

it looks that with a normal file function you can access the contents of
a zip file.

What is a proper search term to look for the documentation on msdn?

Rein.

[Mike McCormack]

Hi Rein,

Are you sure that's not being called through a shell32 API function? eg. 
SHGetFileAttributes?

If not, perhaps make sure that usage of GetFileAttributes() really works 
on Windows.

Mike

Rein Klazes wrote:
> Hi,
>
> Showing my ignorance, but this is the first time that I see something
> like this:
>
> (agent.xrs is indeed a zip file)
>
> | 0009:Call kernel32.GetFileAttributesA(416818c4 "H:\binw\Agent\agent.xrs#zip:version.xml") ret=005f4635
> | 0009:Ret  kernel32.GetFileAttributesA() retval=ffffffff ret=005f4635
>
> it looks that with a normal file function you can access the contents of
> a zip file.
>
> What is a proper search term to look for the documentation on msdn?
>
> Rein.

[Rein Klazes]

On Tue, 10 Feb 2004 12:06:50 -0600, you wrote:
> Hi Rein,
>
> Are you sure that's not being called through a shell32 API function? eg. 
> SHGetFileAttributes?

The return address (005f4635) shows it is called from user code. Anyway
there is not a single shell (or OLE what I was thinking about) function
nearby.
> If not, perhaps make sure that usage of GetFileAttributes() really works 
> on Windows.

Now I did, on a Win2K system. The call fails there as well, so this may
be just some strange artifact in the code preserved while the
surrounding code was eroded away.

Unless, of course something else is involved.
> > | 0009:Call kernel32.GetFileAttributesA(416818c4 "H:\binw\Agent\agent.xrs#zip:version.xml") ret=005f4635
> > | 0009:Ret  kernel32.GetFileAttributesA() retval=ffffffff ret=005f4635

Rein.