ExeFormat content plugin 0.2 for TotalCmd 6.5


About
=====

This plugin can show information about executable file:
currently supported are MZ, NE, LE/LX, PE(PE32/PE32+).
The following information is shown:

MZ: Magic number, Bytes on last page of file, Pages in file,
    Relocations, Size of header in paragraphs, Minimum extra
    paragraphs needed, Maximum extra paragraphs needed,
    Initial (relative) SS value, Initial SP value, Checksum,
    Initial IP value, Initial (relative) CS value, File
    address of relocation table, Overlay number, OEM
    identifier (for e_oeminfo), OEM information, File
    address of new exe header;

NE: Target Operating system, Expected Windows version,
    LinkerVersion, Checksum of whole file, Automatic
    Data Segment, Initial heap allocation, Initial stack
    allocation, Initial CSIP setting, Initial SSSP
    setting, Count of file segments, Entries in Module
    Reference Table, Size of non-resident name table,
    Offset of Segment Table, Offset of Resource Table,
    Offset of resident name table, Offset of Module
    Reference Table, Offset of Imported Names Table,
    Offset of Non-resident Names Table, Count of movable
    entries, Segment alignment shift count, Count of
    resource segments, Other .EXE flags, offset to
    return thunks, offset to segment ref. BYTEs, Minimum
    code swap area size;
    
LE/LX: The CPU type, Target Operating system, Version
    Number, Flag word, Number of memory pages, Object
    for EIP, Extended instruction pointer (EIP),
    Object for ESP, Extended stack pointer (ESP), Page
    size, Last Page size, Fixup section size, Fixup
    section checksum, Loader section size, Loader
    section checksum, Object table offset, Number of
    objects in module, Object page map offset, Object
    iterated data map offset, Resource Table Offset,
    Number of resource entries, Resident name table
    Offset, Entry Table Offset, Module Directive Table
    Offset, Number of module directives, Fixup Page
    Table Offset, Fixup Record Table Offset, Import
    Module Name Table Offset, Number of entries in IMNT,
    Import Proc Name Table Offset, Per-Page Checksum
    Table Offset, Enumerated Data Pages Offset, umber
    of preload pages, Non-resident Names Table Offset,
    Size of NRNT, NRNT Checksum, Object # for automatic
    data object, Debugging information Offset, Length
    of the debugging info, Pages in preload section,
    Pages in demand-load section, Size of heap - for
    16-bit apps, Number of instance pages in preload
    section of VXD file, Number of instance pages in
    demand load section of VXD file, Device ID for VxD,
    DDK version for VxD
    
PE(PE32/PE32+): Machine, NumberOfSections, TimeDateStamp,
    PointerToSymbolTable, NumberOfSymbols, SizeOfOptionalHeader,
    Magic, LinkerVersion, SizeOfCode, SizeOfInitializedData,
    SizeOfUninitializedData, AddressOfEntryPoint, BaseOfCode,
    BaseOfData, ImageBase, SectionAlignment, FileAlignment,
    OperatingSystemVersion, ImageVersion, SubsystemVersion,
    Win32VersionValue, SizeOfImage, SizeOfHeaders, CheckSum,
    Subsystem, DllCharacteristics, SizeOfStackReserve,
    SizeOfStackCommit, SizeOfHeapReserve, SizeOfHeapCommit,
    LoaderFlags, NumberOfRvaAndSizes, EntryPoint (RAW), Compiler


License
=======

These software are provided "as-is". No warranty provided.

You use this program at your own risk. The author will not
response for data loss, damages, etc. while using or misusing
this software.

The software must not be modified, you may not decompile, disassemble.

This plugin is freeware.


History
=======

0.2
[+] - Background processing
[+] - Increased velocity of the plugin functioning
[+] - New signatures (by NEOx)
[+] - Fix small bug


0.1b - First release


==================
Contact the author
Sergey Urbanovich 
e-mail: UrbS(at)yandex(dot)ru