In w3wp.exe, STRU namespace is used. Where is the STRU namespace documented? With functions like STRU::QuerySizeCCH(), STRU::Resize()?


Those functions are exported by IISUTIL.DLL. That is not a core Windows library, and thus wouldn't be documented in any "Windows Internals" references.

| improve this answer | |
  • Where did you find the IISUTIL.DLL reference? – Craln Dec 7 '13 at 1:10
  • In w3wp.exe's Import Table. – Jason Geffner Dec 7 '13 at 1:11
  • How do you get to this 'Import Table' When I hit Control+Insert in IDA PRO nothing happens. – Craln Dec 7 '13 at 1:19
  • View --> Open subviews --> Imports (hex-rays.com/products/ida/support/idadoc/1416.shtml) – Jason Geffner Dec 7 '13 at 1:21
  • 1
    @Craln: ask a new question instead of expanding the current one in the comments. Microsoft often uses abbreviations Cch to denote "count of characters" and Cb to denote "count of bytes". IIS, like most Microsoft products, uses 16-bit characters, known as WCHAR or wchar_t. Seems that some buffer's size in bytes is stored at this+36, and this function takes it and divides it by two to convert it to size in characters. – DCoder Dec 7 '13 at 11:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.