The Exetype.ini file must be in a folder included on your computer's path (if unsure, type path at the command prompt). By default, Windows 2000 Resource Kit Setup installs ExeType to its root folder, which is on the path.
The format of Exetype.ini is as follows:
[entry1]
This denotes the start of a new entry (80 characters maximum).
TYPE String
A description of the file type (80 characters maximum).
ADDRESS HexadecimalValue or **
Microsoft .exe files have the address of the header at a certain location. This value is kept at offset 3c from the beginning of the file. If your entry does not keep the address of the header in an offset, use ** and the offset parameter will be ignored.
OFFSET HexadecimalValue
This hexadecimal value denotes the offset from the beginning of the header.
MASK HexadecimalValue
This bitmask lets you screen which bits of the bytes you want to look at.
VALUE [HexadecimalValue | !HexadecimalValue]
This is the actual value you are comparing to the value of the bits at OFFSET strained through MASK.
The EXCLAMATION POINT (!) denotes a logical NOT; in other words, this file fits the criteria only if the value in the file does not match this value.
ADDRESS HexadecimalValue or **
OFFSET HexadecimalValue
MASK HexadecimalValue
VALUE HexadecimalValue
[entry2]
TYPE String
HEADER HexadecimalValue or **
OFFSET HexadecimalValue
MASK HexadecimalValue
VALUE HexadecimalValue
Each Entry has one TYPE field and from one to five groups of ADDRESS, OFFSET, MASK, and VALUE fields.
Note
All hexadecimal values must have an even number of characters (in bytes). If an odd number of nibbles is needed, pad with zeros.