GetId3\Module\Misc\Exe Class Reference

GetId3() by James Heinrich info@.nosp@m.geti.nosp@m.d3.or.nosp@m.g //. More...

Inheritance diagram for GetId3\Module\Misc\Exe:

Collaboration diagram for GetId3\Module\Misc\Exe:

Public Member Functions
	analyze ()
Public Member Functions inherited from GetId3\Handler\BaseHandler
	__construct (GetId3Core $getid3, $call_module=null)
	analyze ()
	Analyze from file pointer. More...
	AnalyzeString (&$string)
	Analyze from string instead. More...
	saveAttachment (&$ThisFileInfoIndex, $filename, $offset, $length)

Additional Inherited Members
Protected Member Functions inherited from GetId3\Handler\BaseHandler
	ftell ()
	fread ($bytes)
	fseek ($bytes, $whence=SEEK_SET)
	feof ()
	isDependencyFor ($module)
	error ($text)
	warning ($text)
Protected Attributes inherited from GetId3\Handler\BaseHandler
	$getid3
	$data_string_flag = false
	$data_string = ''
	$data_string_position = 0
	$data_string_length = 0

Detailed Description

GetId3() by James Heinrich info@.nosp@m.geti.nosp@m.d3.or.nosp@m.g //.

module for analyzing EXE files

Author

James Heinrich info@.nosp@m.geti.nosp@m.d3.or.nosp@m.g http://www.getid3.org

Definition at line 29 of file Exe.php.

Member Function Documentation

analyze()

GetId3\Module\Misc\Exe::analyze

(

)

Returns

boolean

Reimplemented from GetId3\Handler\BaseHandler.

Definition at line 36 of file Exe.php.

    {
        $info = &$this->getid3->info;
 
        fseek($this->getid3->fp, $info['avdataoffset'], SEEK_SET);
        $EXEheader = fread($this->getid3->fp, 28);
 
        $magic = 'MZ';
        if (substr($EXEheader, 0, 2) != $magic) {
            $info['error'][] = 'Expecting "'.Helper::PrintHexBytes($magic).'" at offset '.$info['avdataoffset'].', found "'.Helper::PrintHexBytes(substr($EXEheader, 0, 2)).'"';
 
            return false;
        }
 
        $info['fileformat'] = 'exe';
        $info['exe']['mz']['magic'] = 'MZ';
 
        $info['exe']['mz']['raw']['last_page_size']          = Helper::LittleEndian2Int(substr($EXEheader,  2, 2));
        $info['exe']['mz']['raw']['page_count']              = Helper::LittleEndian2Int(substr($EXEheader,  4, 2));
        $info['exe']['mz']['raw']['relocation_count']        = Helper::LittleEndian2Int(substr($EXEheader,  6, 2));
        $info['exe']['mz']['raw']['header_paragraphs']       = Helper::LittleEndian2Int(substr($EXEheader,  8, 2));
        $info['exe']['mz']['raw']['min_memory_paragraphs']   = Helper::LittleEndian2Int(substr($EXEheader, 10, 2));
        $info['exe']['mz']['raw']['max_memory_paragraphs']   = Helper::LittleEndian2Int(substr($EXEheader, 12, 2));
        $info['exe']['mz']['raw']['initial_ss']              = Helper::LittleEndian2Int(substr($EXEheader, 14, 2));
        $info['exe']['mz']['raw']['initial_sp']              = Helper::LittleEndian2Int(substr($EXEheader, 16, 2));
        $info['exe']['mz']['raw']['checksum']                = Helper::LittleEndian2Int(substr($EXEheader, 18, 2));
        $info['exe']['mz']['raw']['cs_ip']                   = Helper::LittleEndian2Int(substr($EXEheader, 20, 4));
        $info['exe']['mz']['raw']['relocation_table_offset'] = Helper::LittleEndian2Int(substr($EXEheader, 24, 2));
        $info['exe']['mz']['raw']['overlay_number']          = Helper::LittleEndian2Int(substr($EXEheader, 26, 2));
 
        $info['exe']['mz']['byte_size']          = (($info['exe']['mz']['raw']['page_count'] - 1)) * 512 + $info['exe']['mz']['raw']['last_page_size'];
        $info['exe']['mz']['header_size']        = $info['exe']['mz']['raw']['header_paragraphs'] * 16;
        $info['exe']['mz']['memory_minimum']     = $info['exe']['mz']['raw']['min_memory_paragraphs'] * 16;
        $info['exe']['mz']['memory_recommended'] = $info['exe']['mz']['raw']['max_memory_paragraphs'] * 16;
 
        $info['error'][] = 'EXE parsing not enabled in this version of GetId3Core() ['.$this->getid3->version().']';
 
        return false;
 
    }

References $info, GetId3\Handler\BaseHandler\fread(), GetId3\Handler\BaseHandler\fseek(), GetId3\Lib\Helper\LittleEndian2Int(), and GetId3\Lib\Helper\PrintHexBytes().

Here is the call graph for this function:

---

The documentation for this class was generated from the following file:

• libs/composer/vendor/phansys/getid3/GetId3/Module/Misc/Exe.php