Now that we understand the outer structure of the file, it's time to look closer to what's inside. The DllDirectory stream looks like a good starting point. After cleaning up a whole bunch of code to make it easier to plug in specialized handling code, a nice and readable output of this structure shows up as follows:

DllDirectory
(StorageContainer) [20] {
0 0x21c0: (StorageRaw) {
Size: 4
String: ....
Hex: d8 00 e0 2e }
1 0x2038: (StorageContainer) [2] {
0 0x2039: (StorageRaw) {
Size: 78
String: V.i.e.w.p.o.r.t. .M.a.n.a.g.e.r. .f.o.r. .D.i.r.e.c.t.X. .(.A.u.t.o.d.e.s.k.). }
1 0x2037: (StorageRaw) {
Size: 38
String: V.i.e.w.p.o.r.t.M.a.n.a.g.e.r...g.u.p. } }
2 0x2038: (StorageContainer) [2] {
0 0x2039: (StorageRaw) {
Size: 98
String: m.e.n.t.a.l. .r.a.y.:. .M.a.t.e.r.i.a.l. .C.u.s.t.o.m. .A.t.t.r.i.b.u.t.e.s. .(.A.u.t.o.d.e.s.k.). }
1 0x2037: (StorageRaw) {
Size: 42
String: m.r.M.a.t.e.r.i.a.l.A.t.t.r.i.b.s...g.u.p. } }
...
19 0x2038: (StorageContainer) [2] {
0 0x2039: (StorageRaw) {
Size: 54
String: B.i.p.e.d. .C.o.n.t.r.o.l.l.e.r. .(.A.u.t.o.d.e.s.k.). }
1 0x2037: (StorageRaw) {
Size: 18
String: b.i.p.e.d...d.l.c. } } }

Thanks to the chunks, most of this is self-explanatory, and fairly easy to handle. The 0x21c0 chunk seems to be a header chunk for the DllDirectory, so we can call it DllHeader or something similar, and contains 4 bytes. This chunk is found in a version 2010 file, but doesn't seem to exist in files from version 3, so it's probably not crucial to handle and we can ignore it's contents until it seems we need it for something. The rest of the chunks in this container are all of id 0x2038, and are the entries in this list, so they are called DllEntry. Inside each of these, there is a 0x2039 chunk containing a description, and a 0x2037 chunk containing a name, both in UTF-16.

The meaning of chunk identifiers depends on the parent container chunk, so we have to code it like that as well. Each container type is set up with a handler to create the class that handles a chunk of a specified identifier. Parsing this block with some smarter code results in a data reading that looks as follows:

(DllDirectory) [20] {
0 0x21c0: (CStorageValue) { 786432216 }
1 0x2038: (DllEntry) [2] {
0 0x2039: (CStorageValue) { Viewport Manager for DirectX (Autodesk) }
1 0x2037: (CStorageValue) { ViewportManager.gup } }
2 0x2038: (DllEntry) [2] {
0 0x2039: (CStorageValue) { mental ray: Material Custom Attributes (Autodesk) }
1 0x2037: (CStorageValue) { mrMaterialAttribs.gup } }
...
19 0x2038: (DllEntry) [2] {
0 0x2039: (CStorageValue) { Biped Controller (Autodesk) }
1 0x2037: (CStorageValue) { biped.dlc } } }

Next, we do a similar thing for the ClassDirectory3 stream.

ClassDirectory3
(StorageContainer) [57] {
0 0x2040: (StorageContainer) [2] {
0 0x2060: (StorageRaw) {
Size: 16
String: ................
Hex: ff ff ff ff 82 00 00 00 00 00 00 00 82 00 00 00 }
1 0x2042: (StorageRaw) {
Size: 22
String: P.a.r.a.m.B.l.o.c.k.2. } }
1 0x2040: (StorageContainer) [2] {
0 0x2060: (StorageRaw) {
Size: 16
String: ....<).Z..B0`...
Hex: 00 00 00 00 3c 29 06 5a 1e 0c 42 30 60 11 00 00 }
1 0x2042: (StorageRaw) {
Size: 30
String: V.i.e.w.p.o.r.t.M.a.n.a.g.e.r. } }
...
8 0x2040: (StorageContainer) [2] {
0 0x2060: (StorageRaw) {
Size: 16
String: ................
Hex: 03 00 00 00 02 00 00 00 00 00 00 00 00 0c 00 00 }
1 0x2042: (StorageRaw) {
Size: 16
String: S.t.a.n.d.a.r.d. } }
...
13 0x2040: (StorageContainer) [2] {
0 0x2060: (StorageRaw) {
Size: 16
String: ....._.d..+"....
Hex: fe ff ff ff ec 5f c7 64 b9 9e 2b 22 00 0c 00 00 }
1 0x2042: (StorageRaw) {
Size: 24
String: N.e.L. .M.a.t.e.r.i.a.l. } }
...
56 0x2040: (StorageContainer) [2] {
0 0x2060: (StorageRaw) {
Size: 16
String: ....""..........
Hex: ff ff ff ff 22 22 00 00 00 00 00 00 00 01 00 00 }
1 0x2042: (StorageRaw) {
Size: 10
String: S.c.e.n.e. } } }

This container does not seem to have a header chunk, but again simply contains a whole bunch of entries of id 0x2040, containing a binary blob with id 0x2060 and a UTF-16 string with id 0x2042 that has a description. There's a block in here with some data that I can recognize and reference from our own code. The NeL Material, which is a MAXScript, has a class id of (0x64c75fec, 0x222b9eb9) which matches the middle 8 bytes of the 16 byte blob (read them backwards). The last four bytes in the blob match with the last four bytes in the Standard (material) class entry, and appear to be the SuperClassID. When we look closer at the first four bytes, this appears to be a signed integer, given that there's both ff ff ff as 00 00 00 numbers without too much inbetween. For the NeL Material, which is a script, this value is -2, cross-referencing with other max files with scripted classes reveals the same. Builtin types, such as Scene, have this number as -1. Classes that come from plugins, such as ViewPortManager, have a positive value. Even closer inspection reveals that this value matches with the index of the associated dll in the DllDirectory, ViewPortManager being part of ViewPortManager.gup, and Standard being part of mtl.dlt. It can be expected that the indices of the classes in this list will be needed later on as well. A smarter parsing output looks as follows:

(ClassDirectory3) [57] {
0 0x2040: (ClassEntry) [2] {
0 0x2060: (ClassDirectoryHeader) {
DllIndex: -1
ClassID: (0x00000000, 0x00000082)
SuperClassID: 130 }
1 0x2042: (CStorageValue) { ParamBlock2 } }
1 0x2040: (ClassEntry) [2] {
0 0x2060: (ClassDirectoryHeader) {
DllIndex: 0
ClassID: (0x30420c1e, 0x5a06293c)
SuperClassID: 4448 }
1 0x2042: (CStorageValue) { ViewportManager } }
...
56 0x2040: (ClassEntry) [2] {
0 0x2060: (ClassDirectoryHeader) {
DllIndex: -1
ClassID: (0x00000000, 0x00002222)
SuperClassID: 256 }
1 0x2042: (CStorageValue) { Scene } } }

The ClassData stream is very similar, and seems to contain a global data storage for classes, or something in that style. It doesn't seem to have anything in it that interests me or seems crucial at this point, so I won't bother with it too much for now. It's fairly self-explanatory.

(ClassData) [7] {
0 0x2100: (ClassDataEntry) [2] {
0 0x2110: (ClassDataHeader) {
ClassID: (0xbe7c7e52, 0x87d987f4)
SuperClassID: 16 }
1 0x2120: (StorageRaw) {
Size: 0
String:
Hex: } }
...
4 0x2100: (ClassDataEntry) [2] {
0 0x2110: (ClassDataHeader) {
ClassID: (0x33b673a4, 0x44b50d1e)
SuperClassID: 4128 }
1 0x2120: (StorageContainer) [14] {
0 0x0190: (StorageRaw) {
Size: 48
String: ...................=...=.......@.z.B.......@...=
Hex: 00 00 00 00 00 00 00 00 1f 1c c1 c3 01 00 00 00 cd cc cc 3d cd cc cc 3d 00 00 00 00 cf f7 7b 40 e1 7a 1d 42 01 00 00 00 00 00 a0 40 cd cc cc 3d }
1 0x019c: (StorageRaw) {
Size: 72
String: ...................?...@.......@.z.B.......@...=...=.@.E...=..........HC
Hex: 00 00 00 00 00 00 00 00 1f 1c c1 c3 01 00 00 00 00 00 80 3f 00 00 a0 40 00 00 00 00 cf f7 7b 40 e1 7a 1d 42 01 00 00 00 00 00 a0 40 cd cc cc 3d cd cc cc 3d 00 40 9c 45 cd cc cc 3d 01 00 00 00 01 00 00 00 00 00 48 43 }
...

So far, this was easy. After this comes the real stuff.

【转】http://blog.kaetemi.be/post/2012/08/19/3ds-Max-File-Format-%28Part-2%29

3ds Max File Format (Part 2: The first inner structures; DllDirectory, ClassDirectory3)的更多相关文章

  1. 3ds Max File Format (Part 1: The outer file format; OLE2)

    The 3ds Max file format, not too much documentation to be found about it. There are some hints here ...

  2. 3ds Max File Format (Part 5: How it all links together; ReferenceMaker, INode)

    At this point, you should start to familiarize yourself a bit with the publicly available 3ds Max AP ...

  3. 3ds Max File Format (Part 3: The department of redundancy department; Config)

    Now we'll have a look at the Config stream. It begins like follows, and goes on forever with various ...

  4. 3ds Max File Format (Part 4: The first useful data; Scene, AppData, Animatable)

    The most interesting part of this file is, evidently, the Scene. Opening it up in the chunk parser, ...

  5. 3ds Max File Format (Part 6: We get signal)

    Let's see what we can do now. INode *node = scene.container()->scene()->rootNode()->find(uc ...

  6. AVEVA PDMS to 3ds Max - RvmTranslator6.0beta

    AVEVA PDMS to 3ds Max - RvmTranslator6.0beta eryar@163.com RvmTranslato6.0 translate PDMS RVM to 3ds ...

  7. VRay 2.0 SP1 2.10.01 for 3ds max 9/2008/2009/2010/2011/2012 32/64位 顶渲简体中文版+英文版[中国室内设计论坛-室内人]

    VRay 2.0 SP1 2.10.01 for 3ds max 9/2008/2009/2010/2011/2012 32/64位 顶渲简体中文版+英文版[中国室内设计论坛-室内人] 对最新版本的V ...

  8. 万圣节福利:红孩儿3D引擎开发课程《3ds max导出插件初步》

    ds max文件夹,插件文件夹以及3ds max的可执行程序文件夹: 位的,这里要改成x64,否则启动程序后3ds max会提示"不是有效的win32程序"之类的对话框. 然后要将 ...

  9. 【Unity】3.3 用3ds Max 2015制作模型并将其导入到Unity

    分类:Unity.C#.VS2015 创建日期:2016-04-05 一.常用三维软件简介 由于游戏引擎本身的建模功能相对较弱,无论是专业性还是自由度都无法同专业的三维软件相比,所以大多数游戏中的模型 ...

随机推荐

  1. Python面向对象设计小结

    转自林海峰老师,学习之余做的笔记. class School: zhuti='学生和老师‘ def __init__(self,name,dic,country): self.mingzi=name ...

  2. git本地创建多个分支互不干扰

    git本地创建多个分支,互不干扰. 情景:在做某个需求a时,先需要修改紧急bug b:发版时发的是远程dev的代码.   方式一(推荐): (1)本地已有分支dev,写了需求a,先commit,即将工 ...

  3. echarts--可拖动的曲线图

    <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8&quo ...

  4. CF #623 div.2

    序 话说,总有人认为我是黑别人电脑的(雾??其实,我不黑电脑,我黑手机. T1 此题巨水,比较四个面积就就好了.. /* make by ltao */ #include <iostream&g ...

  5. XSS之Beef的使用

    0x01 Beef简介 BeEF是The Browser Exploitation Framework的缩写.它是一种专注于Web浏览器的渗透测试工具. beef管理.挂钩web浏览器的过程: 生成交 ...

  6. Asp.net core 3.1+EF Core2.2.6+Oracle.EntityFrameworkCore2.1.19连接Oracle数据库

    Asp.net Core 3.1+EF Core2.2.6+Oracle.EntityFrameworkCore2.1.19连接Oracle数据库 1.前言 本次主要采用Asp.net core3.1 ...

  7. js获取时间及转化

    有关Javascript的本地时间获取,下面我直接用代码来进行举例吧 let time = new Date(); let month = time.getMonth()+1; //获取的月份0~11 ...

  8. contos7命令行访问网址

    1.curl访问: 例子: curl http://www.baidu.com 注意:这种访问只会直接读取网站HTML代码出来 2.elinks访问: yum -y install elinks  : ...

  9. python字符串前面加上'r'的作用

    在打开文件的时候open(r'c:\....') 加r和不加''r是有区别的 'r'是防止字符转义的 如果路径中出现'\t'的话 不加r的话\t就会被转义 而加了'r'之后'\t'就能保留原有的样子 ...

  10. CGI、FastCGI和php-fpm的概念和区别和运行原理

    CGI: CGI的英文是(COMMON GATEWAY INTERFACE)公共网关接口,它的作用就是帮助服务器与语言通信,这里就是nginx和php进行通信,因为nginx和php的语言不通,因此需 ...