From: noemail@basdxcqvbe.com
On Fri, 9 Jul 2021 06:29:17 -0700 (PDT)
"muta...@gmail.com" wrote:
> [snip]
>
> The executable is quite odd. I can see this:
>
> C:\Users\kerra\Downloads\xxx\BIOS_Acer_1.18_Windows>hexdump
> ZQF_118.exe | more 000000 4D5A0000 28001900 2000B704 B7057D08
> MZ..(... .....}. 000010 80010000 54000000 3E000000 0100FB50
> ....T...>......P 000020 6A720000 00000000 00000000 00000000
> jr.............. 000030 00000000 00000000 00000000 68160400
> ............h... 000040 0000EC00 0000F704 00002208 00000708
> .........."..... 000050 0000870E 0000820C 0000640C 0000560C
> ..........d...V. 000060 00000F10 00000110 0000AE10 0000BC12
> ................ 000070 00004A13 0000E313 0000D202 9D043C23
> ..J...........<# 000080 00002E23 0000FF22 0000D822 00006224
> ...#..."..."..b$ 000090 00007A2B 00007C2C 0000962C 0000C72C
> ..z+..|,...,..., 0000A0 00000000 00000D0A 43575344 504D4920
This part below is the DJGPP 16-bit stub loader
for it's 32-bit DOS executables. It searches
for CWSDPMI, the default DPMI host for DJGPP,
loads and installs it, then uses the loaded
DPMI host's OS-like PM setup functions to
switch from 16-bit RM to 32-bit PM. Then,
the 32-bit DPMI application is started.
> ........CWSDPMI 0000B0 72352043 6F707972 69676874 20284329 r5
> Copyright (C) 0000C0 20323030 30204357 2053616E 646D616E 2000 CW
> Sandman 0000D0 6E202873 616E646D 616E6E40 636C696F n (sandmann@clio
> 0000E0 2E726963 652E6564 75292E0D 0A546865 .rice.edu)...The
> 0000F0 20737475 62206C6F 61646572 20697320 stub loader is
> 000100 436F7079 72696768 74202843 29203139 Copyright (C) 19
> 000110 39332D31 39393520 444A2044 656C6F72 93-1995 DJ Delor
> 000120 69652E0D 0A506572 6D697373 696F6E20 ie...Permission
> 000130 6772616E 74656420 746F2075 73652066 granted to use f
> 000140 6F722061 6E792070 7572706F 73652070 or any purpose p
> 000150 726F7669 64656420 74686973 20636F70 rovided this cop
> 000160 79726967 68740D0A 72656D61 696E7320 yright..remains
> 000170 70726573 656E7420 616E6420 756E6D6F present and unmo
> 000180 64696669 65642E0D 0A546869 73206F6E dified...This on
> 000190 6C792061 70706C69 65732074 6F207468 ly applies to th
> 0001A0 65207374 75622C20 616E6420 6E6F7420 e stub, and not
> 0001B0 6E656365 73736172 696C7920 74686520 necessarily the
> 0001C0 77686F6C 65207072 6F677261 6D2E0D0A whole program...
> 0001D0 00000000 00000000 00000000 00000000 ................
> 0001E0 00000000 00000000 00000000 00000000 ................
> 0001F0 00000000 00000000 00000000 00000000 ................
> 000200 676F3332 73747562 2C207620 322E3032 go32stub, v 2.02
> 000210 54000000 00000800 00000000 00000000 T...............
>
>
> So it looks like it will do something under MSDOS - run
> some sort of DOS extender.
No. It's not a DOS extender. It's an executable stub.
The "go32stub" stub is for DJGPP. The stub is 16-bit RM,
loads a 32-bit PM DPMI host "CWSDPMI" and then loads and
executes a 32-bit PM application. Unlike most other DPMI
hosts, the DPMI hosts for DJGPP do NOT also have a
built-in a DOS extender.
You can think of the DPMI host as a rudimentary
32-bit PM monitor, sort of like a PM OS calling v86.
The DPMI host provides 32-bit OS setup services on top
of 16-bit DOS, but not a fully functioning 32-bit OS.
You can think of this an an OS-lite, with a minimal
32-bit OS shim in between the app and 16-bit OS,
i.e., DOS.
> But it's supposedly a Windows program.
32-bit DOS DPMI applications will execute
in a Windows console for most versions of
Windows, but not the most recent versions.
I think XP was where some limitations were
placed upon DPMI applications. DPMI apps
will not run for modern Windows, like Win 10.
--
The Chinese have such difficulty with English ... The word is not
"reunification" but "revenge".
--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)
|
