Now that we understand the outer structure of the file, it's time to look closer to what's inside. The DllDirectory stream looks like a good starting point. After cleaning up a whole bunch of code to make it easier to plug in specialized handling code, a nice and readable output of this structure shows up as follows:

DllDirectory
(StorageContainer) [20] {
0 0x21c0: (StorageRaw) {
Size: 4
String: ....
Hex: d8 00 e0 2e }
1 0x2038: (StorageContainer) [2] {
0 0x2039: (StorageRaw) {
Size: 78
String: V.i.e.w.p.o.r.t. .M.a.n.a.g.e.r. .f.o.r. .D.i.r.e.c.t.X. .(.A.u.t.o.d.e.s.k.). }
1 0x2037: (StorageRaw) {
Size: 38
String: V.i.e.w.p.o.r.t.M.a.n.a.g.e.r...g.u.p. } }
2 0x2038: (StorageContainer) [2] {
0 0x2039: (StorageRaw) {
Size: 98
String: m.e.n.t.a.l. .r.a.y.:. .M.a.t.e.r.i.a.l. .C.u.s.t.o.m. .A.t.t.r.i.b.u.t.e.s. .(.A.u.t.o.d.e.s.k.). }
1 0x2037: (StorageRaw) {
Size: 42
String: m.r.M.a.t.e.r.i.a.l.A.t.t.r.i.b.s...g.u.p. } }
...
19 0x2038: (StorageContainer) [2] {
0 0x2039: (StorageRaw) {
Size: 54
String: B.i.p.e.d. .C.o.n.t.r.o.l.l.e.r. .(.A.u.t.o.d.e.s.k.). }
1 0x2037: (StorageRaw) {
Size: 18
String: b.i.p.e.d...d.l.c. } } }

Thanks to the chunks, most of this is self-explanatory, and fairly easy to handle. The 0x21c0 chunk seems to be a header chunk for the DllDirectory, so we can call it DllHeader or something similar, and contains 4 bytes. This chunk is found in a version 2010 file, but doesn't seem to exist in files from version 3, so it's probably not crucial to handle and we can ignore it's contents until it seems we need it for something. The rest of the chunks in this container are all of id 0x2038, and are the entries in this list, so they are called DllEntry. Inside each of these, there is a 0x2039 chunk containing a description, and a 0x2037 chunk containing a name, both in UTF-16.

The meaning of chunk identifiers depends on the parent container chunk, so we have to code it like that as well. Each container type is set up with a handler to create the class that handles a chunk of a specified identifier. Parsing this block with some smarter code results in a data reading that looks as follows:

(DllDirectory) [20] {
0 0x21c0: (CStorageValue) { 786432216 }
1 0x2038: (DllEntry) [2] {
0 0x2039: (CStorageValue) { Viewport Manager for DirectX (Autodesk) }
1 0x2037: (CStorageValue) { ViewportManager.gup } }
2 0x2038: (DllEntry) [2] {
0 0x2039: (CStorageValue) { mental ray: Material Custom Attributes (Autodesk) }
1 0x2037: (CStorageValue) { mrMaterialAttribs.gup } }
...
19 0x2038: (DllEntry) [2] {
0 0x2039: (CStorageValue) { Biped Controller (Autodesk) }
1 0x2037: (CStorageValue) { biped.dlc } } }

Next, we do a similar thing for the ClassDirectory3 stream.

ClassDirectory3
(StorageContainer) [57] {
0 0x2040: (StorageContainer) [2] {
0 0x2060: (StorageRaw) {
Size: 16
String: ................
Hex: ff ff ff ff 82 00 00 00 00 00 00 00 82 00 00 00 }
1 0x2042: (StorageRaw) {
Size: 22
String: P.a.r.a.m.B.l.o.c.k.2. } }
1 0x2040: (StorageContainer) [2] {
0 0x2060: (StorageRaw) {
Size: 16
String: ....<).Z..B0`...
Hex: 00 00 00 00 3c 29 06 5a 1e 0c 42 30 60 11 00 00 }
1 0x2042: (StorageRaw) {
Size: 30
String: V.i.e.w.p.o.r.t.M.a.n.a.g.e.r. } }
...
8 0x2040: (StorageContainer) [2] {
0 0x2060: (StorageRaw) {
Size: 16
String: ................
Hex: 03 00 00 00 02 00 00 00 00 00 00 00 00 0c 00 00 }
1 0x2042: (StorageRaw) {
Size: 16
String: S.t.a.n.d.a.r.d. } }
...
13 0x2040: (StorageContainer) [2] {
0 0x2060: (StorageRaw) {
Size: 16
String: ....._.d..+"....
Hex: fe ff ff ff ec 5f c7 64 b9 9e 2b 22 00 0c 00 00 }
1 0x2042: (StorageRaw) {
Size: 24
String: N.e.L. .M.a.t.e.r.i.a.l. } }
...
56 0x2040: (StorageContainer) [2] {
0 0x2060: (StorageRaw) {
Size: 16
String: ....""..........
Hex: ff ff ff ff 22 22 00 00 00 00 00 00 00 01 00 00 }
1 0x2042: (StorageRaw) {
Size: 10
String: S.c.e.n.e. } } }

This container does not seem to have a header chunk, but again simply contains a whole bunch of entries of id 0x2040, containing a binary blob with id 0x2060 and a UTF-16 string with id 0x2042 that has a description. There's a block in here with some data that I can recognize and reference from our own code. The NeL Material, which is a MAXScript, has a class id of (0x64c75fec, 0x222b9eb9) which matches the middle 8 bytes of the 16 byte blob (read them backwards). The last four bytes in the blob match with the last four bytes in the Standard (material) class entry, and appear to be the SuperClassID. When we look closer at the first four bytes, this appears to be a signed integer, given that there's both ff ff ff as 00 00 00 numbers without too much inbetween. For the NeL Material, which is a script, this value is -2, cross-referencing with other max files with scripted classes reveals the same. Builtin types, such as Scene, have this number as -1. Classes that come from plugins, such as ViewPortManager, have a positive value. Even closer inspection reveals that this value matches with the index of the associated dll in the DllDirectory, ViewPortManager being part of ViewPortManager.gup, and Standard being part of mtl.dlt. It can be expected that the indices of the classes in this list will be needed later on as well. A smarter parsing output looks as follows:

(ClassDirectory3) [57] {
0 0x2040: (ClassEntry) [2] {
0 0x2060: (ClassDirectoryHeader) {
DllIndex: -1
ClassID: (0x00000000, 0x00000082)
SuperClassID: 130 }
1 0x2042: (CStorageValue) { ParamBlock2 } }
1 0x2040: (ClassEntry) [2] {
0 0x2060: (ClassDirectoryHeader) {
DllIndex: 0
ClassID: (0x30420c1e, 0x5a06293c)
SuperClassID: 4448 }
1 0x2042: (CStorageValue) { ViewportManager } }
...
56 0x2040: (ClassEntry) [2] {
0 0x2060: (ClassDirectoryHeader) {
DllIndex: -1
ClassID: (0x00000000, 0x00002222)
SuperClassID: 256 }
1 0x2042: (CStorageValue) { Scene } } }

The ClassData stream is very similar, and seems to contain a global data storage for classes, or something in that style. It doesn't seem to have anything in it that interests me or seems crucial at this point, so I won't bother with it too much for now. It's fairly self-explanatory.

(ClassData) [7] {
0 0x2100: (ClassDataEntry) [2] {
0 0x2110: (ClassDataHeader) {
ClassID: (0xbe7c7e52, 0x87d987f4)
SuperClassID: 16 }
1 0x2120: (StorageRaw) {
Size: 0
String:
Hex: } }
...
4 0x2100: (ClassDataEntry) [2] {
0 0x2110: (ClassDataHeader) {
ClassID: (0x33b673a4, 0x44b50d1e)
SuperClassID: 4128 }
1 0x2120: (StorageContainer) [14] {
0 0x0190: (StorageRaw) {
Size: 48
String: ...................=...=.......@.z.B.......@...=
Hex: 00 00 00 00 00 00 00 00 1f 1c c1 c3 01 00 00 00 cd cc cc 3d cd cc cc 3d 00 00 00 00 cf f7 7b 40 e1 7a 1d 42 01 00 00 00 00 00 a0 40 cd cc cc 3d }
1 0x019c: (StorageRaw) {
Size: 72
String: ...................?...@.......@.z.B.......@...=...=.@.E...=..........HC
Hex: 00 00 00 00 00 00 00 00 1f 1c c1 c3 01 00 00 00 00 00 80 3f 00 00 a0 40 00 00 00 00 cf f7 7b 40 e1 7a 1d 42 01 00 00 00 00 00 a0 40 cd cc cc 3d cd cc cc 3d 00 40 9c 45 cd cc cc 3d 01 00 00 00 01 00 00 00 00 00 48 43 }
...

So far, this was easy. After this comes the real stuff.

【转】http://blog.kaetemi.be/post/2012/08/19/3ds-Max-File-Format-%28Part-2%29

3ds Max File Format (Part 2: The first inner structures; DllDirectory, ClassDirectory3)的更多相关文章

  1. 3ds Max File Format (Part 1: The outer file format; OLE2)

    The 3ds Max file format, not too much documentation to be found about it. There are some hints here ...

  2. 3ds Max File Format (Part 5: How it all links together; ReferenceMaker, INode)

    At this point, you should start to familiarize yourself a bit with the publicly available 3ds Max AP ...

  3. 3ds Max File Format (Part 3: The department of redundancy department; Config)

    Now we'll have a look at the Config stream. It begins like follows, and goes on forever with various ...

  4. 3ds Max File Format (Part 4: The first useful data; Scene, AppData, Animatable)

    The most interesting part of this file is, evidently, the Scene. Opening it up in the chunk parser, ...

  5. 3ds Max File Format (Part 6: We get signal)

    Let's see what we can do now. INode *node = scene.container()->scene()->rootNode()->find(uc ...

  6. AVEVA PDMS to 3ds Max - RvmTranslator6.0beta

    AVEVA PDMS to 3ds Max - RvmTranslator6.0beta eryar@163.com RvmTranslato6.0 translate PDMS RVM to 3ds ...

  7. VRay 2.0 SP1 2.10.01 for 3ds max 9/2008/2009/2010/2011/2012 32/64位 顶渲简体中文版+英文版[中国室内设计论坛-室内人]

    VRay 2.0 SP1 2.10.01 for 3ds max 9/2008/2009/2010/2011/2012 32/64位 顶渲简体中文版+英文版[中国室内设计论坛-室内人] 对最新版本的V ...

  8. 万圣节福利:红孩儿3D引擎开发课程《3ds max导出插件初步》

    ds max文件夹,插件文件夹以及3ds max的可执行程序文件夹: 位的,这里要改成x64,否则启动程序后3ds max会提示"不是有效的win32程序"之类的对话框. 然后要将 ...

  9. 【Unity】3.3 用3ds Max 2015制作模型并将其导入到Unity

    分类:Unity.C#.VS2015 创建日期:2016-04-05 一.常用三维软件简介 由于游戏引擎本身的建模功能相对较弱,无论是专业性还是自由度都无法同专业的三维软件相比,所以大多数游戏中的模型 ...

随机推荐

  1. textarea输入文字限制个数

    说明: w-count固定为数字部分的class textarea-active为超出最大输入文字个数报错信息的class html 部分: <div class="wrap wrap ...

  2. css权值和优先级+命名规范

    选择器权值: 标签选择器:1 类选择器和伪类选择器:10 ID选择器:100 通配符选择器:0 行内样式:1000 !important 在一定条件下,优先级最高 常用的css样式命名 页面结构页头: ...

  3. Spark学习之路 (十七)Spark分区[转]

    分区的概念 分区是RDD内部并行计算的一个计算单元,RDD的数据集在逻辑上被划分为多个分片,每一个分片称为分区,分区的格式决定了并行计算的粒度,而每个分区的数值计算都是在一个任务中进行的,因此任务的个 ...

  4. 剑指offer-面试题56_1-数组中只出现一次的两个数字-位运算

    /* 题目: 求数组A中只出现一次的数字,该数组中有2个数字a.b仅出现一次,其余均出现两次 */ /* 思路: 两个相同的数字异或为0. 遍历数组,得到数组中各数字异或后的结果x,结果x=a^b. ...

  5. Android数据存储之共享参数SharedPreferences

    SharedPreferences是Android的一个轻量级存储工具,采用的存储结构是Key-Value的键值对方式,类似于Java的Properties类,二者都是把Key-Value的键值对保存 ...

  6. 剑指offer-基础练习-快速排序-排序

    /* 题目:快速排序 */ /* 思路:将一个数组分为两份,左边的数字小于index,右边的数字大于index,递归划分后形成一个排序后的数组. */ void QuickSort(int data[ ...

  7. gulp常用插件之gulp-load-plugins使用

    更多gulp常用插件使用请访问:gulp常用插件汇总 gulp-load-plugins这是一款批量引入package.json文件中的依赖项工具. 更多使用文档请点击访问gulp-load-plug ...

  8. 0013 基于DRF框架开发(01 基类视图 APIView)

    之前学习了模型序列化和普通序列化,我们用最简单的视图和url实现了对序列化的操作. 而实际上,象之前那种由DRF自动生成所有的视图和url的情况,在应用是使用很少.而需要用户根据实际业务需求,自定义视 ...

  9. NC反弹shell的几种方法

    假如ubuntu.CentOS为目标服务器系统 kali为攻击者的系统,ip为:192.168.0.4,开放7777端口且没被占用 最终是将ubuntu.CentOS的shell反弹到kali上 正向 ...

  10. ArcMap 导入 CGCS2000 线段数据

    1. 先确定数据的经纬度和X.Y列是否正确, 2. ArcToolBox ---> DataManagement Tools ---> XY to line 3. 选择数据,选择对应起始点 ...