Solved

Header for .EXE file format

Posted on 1998-01-18
6
602 Views
Last Modified: 2011-09-20
Can anyone help me by letting me know the header for .EXE file format?
0
Comment
Question by:justinng
6 Comments
 
LVL 15

Expert Comment

by:Tommy Hui
Comment Utility
Go to MSDN and search for EXE header.

http://www.microsoft.com/msdn


0
 

Author Comment

by:justinng
Comment Utility
I just wanna know the header for .exe only and not the URL to it.
0
 
LVL 8

Expert Comment

by:MikeP090797
Comment Utility
For 5 points it's the best you'll get
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 

Author Comment

by:justinng
Comment Utility
yeah I guess so...
but I really hope that some experts out there could narrow my search a bit regardless of the points allocated.
0
 

Accepted Solution

by:
rjh107 earned 0 total points
Comment Utility
This is a straight dump from HelpPC, is it what you are looking for?


 HelpPC 2.10           Quick Reference Utility     Copyright 1991 David Jurgens

                     .EXE - DOS EXE File Structure
 
      Offset Size           Description
 
        00   word  "MZ" - Link file .EXE signature (Mark Zbikowski?)
        02   word  length of image mod 512
        04   word  size of file in 512 byte pages
        06   word  number of relocation items following header
        08   word  size of header in 16 byte paragraphs, used to locate
                   the beginning of the load module
        0A   word  min # of paragraphs needed to run program
        0C   word  max # of paragraphs the program would like
        0E   word  offset in load module of stack segment (in paras)
        10   word  initial SP value to be loaded
        12   word  negative checksum of pgm used while by EXEC loads pgm
        14   word  program entry point, (initial IP value)
        16   word  offset in load module of the code segment (in paras)
        18   word  offset in .EXE file of first relocation item
        1A   word  overlay number (0 for root program)
 
        - relocation table and the program load module follow the header
        - relocation entries are 32 bit values representing the offset
          into the load module needing patched
        - once the relocatable item is found, the CS register is added to
          the value found at the calculated offset
 
       Registers at load time of the EXE file are as follows:
 
        AX:      contains number of characters in command tail, or 0
        BX:CX      32 bit value indicating the load module memory size
        DX      zero
        SS:SP      set to stack segment if defined else,  SS = CS and
              SP=FFFFh or top of memory.
        DS      set to segment address of EXE header
        ES      set to segment address of EXE header
        CS:IP      far address of program entry point, (label on "END"
              statement of program)
 
 

0
 

Author Comment

by:justinng
Comment Utility
Thanks a million rjh107!! It's exactly what I'm looking for! :)

0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Unlike C#, C++ doesn't have native support for sealing classes (so they cannot be sub-classed). At the cost of a virtual base class pointer it is possible to implement a pseudo sealing mechanism The trick is to virtually inherit from a base class…
Article by: SunnyDark
This article's goal is to present you with an easy to use XML wrapper for C++ and also present some interesting techniques that you might use with MS C++. The reason I built this class is to ease the pain of using XML files with C++, since there is…
The viewer will learn additional member functions of the vector class. Specifically, the capacity and swap member functions will be introduced.
The viewer will be introduced to the technique of using vectors in C++. The video will cover how to define a vector, store values in the vector and retrieve data from the values stored in the vector.

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now