| 1 | <?php |
|---|
| 2 | ///////////////////////////////////////////////////////////////// |
|---|
| 3 | /// getID3() by James Heinrich <info@getid3.org> // |
|---|
| 4 | // available at http://getid3.sourceforge.net // |
|---|
| 5 | // or http://www.getid3.org // |
|---|
| 6 | ///////////////////////////////////////////////////////////////// |
|---|
| 7 | // See readme.txt for more details // |
|---|
| 8 | ///////////////////////////////////////////////////////////////// |
|---|
| 9 | // // |
|---|
| 10 | // module.misc.exe.php // |
|---|
| 11 | // module for analyzing EXE files // |
|---|
| 12 | // dependencies: NONE // |
|---|
| 13 | // /// |
|---|
| 14 | ///////////////////////////////////////////////////////////////// |
|---|
| 15 | |
|---|
| 16 | |
|---|
| 17 | class getid3_exe |
|---|
| 18 | { |
|---|
| 19 | |
|---|
| 20 | function getid3_exe(&$fd, &$ThisFileInfo) { |
|---|
| 21 | |
|---|
| 22 | fseek($fd, $ThisFileInfo['avdataoffset'], SEEK_SET); |
|---|
| 23 | $EXEheader = fread($fd, 28); |
|---|
| 24 | |
|---|
| 25 | if (substr($EXEheader, 0, 2) != 'MZ') { |
|---|
| 26 | $ThisFileInfo['error'][] = 'Expecting "MZ" at offset '.$ThisFileInfo['avdataoffset'].', found "'.substr($EXEheader, 0, 2).'" instead.'; |
|---|
| 27 | return false; |
|---|
| 28 | } |
|---|
| 29 | |
|---|
| 30 | $ThisFileInfo['fileformat'] = 'exe'; |
|---|
| 31 | $ThisFileInfo['exe']['mz']['magic'] = 'MZ'; |
|---|
| 32 | |
|---|
| 33 | $ThisFileInfo['exe']['mz']['raw']['last_page_size'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 2, 2)); |
|---|
| 34 | $ThisFileInfo['exe']['mz']['raw']['page_count'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 4, 2)); |
|---|
| 35 | $ThisFileInfo['exe']['mz']['raw']['relocation_count'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 6, 2)); |
|---|
| 36 | $ThisFileInfo['exe']['mz']['raw']['header_paragraphs'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 8, 2)); |
|---|
| 37 | $ThisFileInfo['exe']['mz']['raw']['min_memory_paragraphs'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 10, 2)); |
|---|
| 38 | $ThisFileInfo['exe']['mz']['raw']['max_memory_paragraphs'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 12, 2)); |
|---|
| 39 | $ThisFileInfo['exe']['mz']['raw']['initial_ss'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 14, 2)); |
|---|
| 40 | $ThisFileInfo['exe']['mz']['raw']['initial_sp'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 16, 2)); |
|---|
| 41 | $ThisFileInfo['exe']['mz']['raw']['checksum'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 18, 2)); |
|---|
| 42 | $ThisFileInfo['exe']['mz']['raw']['cs_ip'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 20, 4)); |
|---|
| 43 | $ThisFileInfo['exe']['mz']['raw']['relocation_table_offset'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 24, 2)); |
|---|
| 44 | $ThisFileInfo['exe']['mz']['raw']['overlay_number'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 26, 2)); |
|---|
| 45 | |
|---|
| 46 | $ThisFileInfo['exe']['mz']['byte_size'] = (($ThisFileInfo['exe']['mz']['raw']['page_count'] - 1)) * 512 + $ThisFileInfo['exe']['mz']['raw']['last_page_size']; |
|---|
| 47 | $ThisFileInfo['exe']['mz']['header_size'] = $ThisFileInfo['exe']['mz']['raw']['header_paragraphs'] * 16; |
|---|
| 48 | $ThisFileInfo['exe']['mz']['memory_minimum'] = $ThisFileInfo['exe']['mz']['raw']['min_memory_paragraphs'] * 16; |
|---|
| 49 | $ThisFileInfo['exe']['mz']['memory_recommended'] = $ThisFileInfo['exe']['mz']['raw']['max_memory_paragraphs'] * 16; |
|---|
| 50 | |
|---|
| 51 | $ThisFileInfo['error'][] = 'EXE parsing not enabled in this version of getID3()'; |
|---|
| 52 | return false; |
|---|
| 53 | |
|---|
| 54 | } |
|---|
| 55 | |
|---|
| 56 | } |
|---|
| 57 | |
|---|
| 58 | |
|---|
| 59 | ?> |
|---|
