[3544] | 1 | <?php |
---|
| 2 | ///////////////////////////////////////////////////////////////// |
---|
| 3 | /// getID3() by James Heinrich <info@getid3.org> // |
---|
| 4 | // available at http://getid3.sourceforge.net // |
---|
| 5 | // or http://www.getid3.org // |
---|
| 6 | ///////////////////////////////////////////////////////////////// |
---|
| 7 | // See readme.txt for more details // |
---|
| 8 | ///////////////////////////////////////////////////////////////// |
---|
| 9 | // // |
---|
| 10 | // module.misc.exe.php // |
---|
| 11 | // module for analyzing EXE files // |
---|
| 12 | // dependencies: NONE // |
---|
| 13 | // /// |
---|
| 14 | ///////////////////////////////////////////////////////////////// |
---|
| 15 | |
---|
| 16 | |
---|
| 17 | class getid3_exe |
---|
| 18 | { |
---|
| 19 | |
---|
| 20 | function getid3_exe(&$fd, &$ThisFileInfo) { |
---|
| 21 | |
---|
| 22 | fseek($fd, $ThisFileInfo['avdataoffset'], SEEK_SET); |
---|
| 23 | $EXEheader = fread($fd, 28); |
---|
| 24 | |
---|
| 25 | if (substr($EXEheader, 0, 2) != 'MZ') { |
---|
| 26 | $ThisFileInfo['error'][] = 'Expecting "MZ" at offset '.$ThisFileInfo['avdataoffset'].', found "'.substr($EXEheader, 0, 2).'" instead.'; |
---|
| 27 | return false; |
---|
| 28 | } |
---|
| 29 | |
---|
| 30 | $ThisFileInfo['fileformat'] = 'exe'; |
---|
| 31 | $ThisFileInfo['exe']['mz']['magic'] = 'MZ'; |
---|
| 32 | |
---|
| 33 | $ThisFileInfo['exe']['mz']['raw']['last_page_size'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 2, 2)); |
---|
| 34 | $ThisFileInfo['exe']['mz']['raw']['page_count'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 4, 2)); |
---|
| 35 | $ThisFileInfo['exe']['mz']['raw']['relocation_count'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 6, 2)); |
---|
| 36 | $ThisFileInfo['exe']['mz']['raw']['header_paragraphs'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 8, 2)); |
---|
| 37 | $ThisFileInfo['exe']['mz']['raw']['min_memory_paragraphs'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 10, 2)); |
---|
| 38 | $ThisFileInfo['exe']['mz']['raw']['max_memory_paragraphs'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 12, 2)); |
---|
| 39 | $ThisFileInfo['exe']['mz']['raw']['initial_ss'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 14, 2)); |
---|
| 40 | $ThisFileInfo['exe']['mz']['raw']['initial_sp'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 16, 2)); |
---|
| 41 | $ThisFileInfo['exe']['mz']['raw']['checksum'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 18, 2)); |
---|
| 42 | $ThisFileInfo['exe']['mz']['raw']['cs_ip'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 20, 4)); |
---|
| 43 | $ThisFileInfo['exe']['mz']['raw']['relocation_table_offset'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 24, 2)); |
---|
| 44 | $ThisFileInfo['exe']['mz']['raw']['overlay_number'] = getid3_lib::LittleEndian2Int(substr($EXEheader, 26, 2)); |
---|
| 45 | |
---|
| 46 | $ThisFileInfo['exe']['mz']['byte_size'] = (($ThisFileInfo['exe']['mz']['raw']['page_count'] - 1)) * 512 + $ThisFileInfo['exe']['mz']['raw']['last_page_size']; |
---|
| 47 | $ThisFileInfo['exe']['mz']['header_size'] = $ThisFileInfo['exe']['mz']['raw']['header_paragraphs'] * 16; |
---|
| 48 | $ThisFileInfo['exe']['mz']['memory_minimum'] = $ThisFileInfo['exe']['mz']['raw']['min_memory_paragraphs'] * 16; |
---|
| 49 | $ThisFileInfo['exe']['mz']['memory_recommended'] = $ThisFileInfo['exe']['mz']['raw']['max_memory_paragraphs'] * 16; |
---|
| 50 | |
---|
| 51 | $ThisFileInfo['error'][] = 'EXE parsing not enabled in this version of getID3()'; |
---|
| 52 | return false; |
---|
| 53 | |
---|
| 54 | } |
---|
| 55 | |
---|
| 56 | } |
---|
| 57 | |
---|
| 58 | |
---|
| 59 | ?> |
---|