isWin32EXE.ipynb

{
 "cells": [
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### isWin32Exe Function"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 1,
   "metadata": {
    "collapsed": true
   },
   "outputs": [],
   "source": [
    "import os\n",
    "\n",
    "def isExe(f):\n",
    "    if f.endswith(\"exe\"):\n",
    "        return True\n",
    "    else:\n",
    "        return False\n",
    "\n",
    "def isMZ(f):\n",
    "    with open(f, 'rb') as hnd:\n",
    "        if hnd.read(2) == \"MZ\":\n",
    "            return True\n",
    "        else:\n",
    "            return False\n",
    "\n",
    "def isPE(f):\n",
    "    try:\n",
    "        with open(f, 'rb') as hnd:\n",
    "            if hnd.read(2) != b\"MZ\":\n",
    "                return False\n",
    "            hnd.seek(0x3c, 0)\n",
    "\n",
    "            import struct\n",
    "            offset = struct.unpack('i', hnd.read(4))[0]\n",
    "            hnd.seek(offset, 0)\n",
    "            if hnd.read(4) == b\"PE\\0\\0\":\n",
    "                ## MIKE: for 64 or 32 bit\n",
    "                machine = struct.unpack(\"<H\", hnd.read(2))[0]\n",
    "                if machine == 332: # IMAGE_FILE_MACHINE_I386\n",
    "                    print(f, \"IA-32 (32-bit x86)\")\n",
    "                elif machine == 512: #IMAGE_FILE_MACHINE_IA64:\n",
    "                    print(f, \"IA-64 (Itanium)\")\n",
    "                elif machine == 34404: #IMAGE_FILE_MACHINE_AMD64:\n",
    "                    print(f, \"AMD64 (64-bit x86)\")\n",
    "                else:\n",
    "                    print(f, \"Unknown architecture\")\n",
    "                ## end\n",
    "                return True\n",
    "            else:\n",
    "                print(f, \"isMZ, not PE.\")\n",
    "                return False\n",
    "        \n",
    "    except:\n",
    "        print(f, \"Permission denied\")\n",
    "        return False\n",
    "\n",
    "def isWin32Exe(f):\n",
    "    try:\n",
    "        with open(f, 'rb') as hnd:\n",
    "            if hnd.read(2) != b\"MZ\":\n",
    "                return False\n",
    "            hnd.seek(0x3c, 0)\n",
    "\n",
    "            import struct\n",
    "            offset = struct.unpack('i', hnd.read(4))[0]\n",
    "            hnd.seek(offset, 0)\n",
    "            if hnd.read(4) == b\"PE\\0\\0\":\n",
    "                ## MIKE: for 64 or 32 bit\n",
    "                machine = struct.unpack(\"<H\", hnd.read(2))[0]\n",
    "                if machine == 332: # IMAGE_FILE_MACHINE_I386\n",
    "                    #print(f, \"IA-32 (32-bit x86)\")\n",
    "                    return True\n",
    "                elif machine == 512: #IMAGE_FILE_MACHINE_IA64:\n",
    "                    #print(f, \"IA-64 (Itanium)\")\n",
    "                    pass\n",
    "                elif machine == 34404: #IMAGE_FILE_MACHINE_AMD64:\n",
    "                    #print(f, \"AMD64 (64-bit x86)\")\n",
    "                    pass\n",
    "                else:\n",
    "                    #print(f, \"Unknown architecture\")\n",
    "                    pass\n",
    "                ## end\n",
    "                return False\n",
    "            else:\n",
    "                #print(f, \"isMZ, not PE.\")\n",
    "                return False\n",
    "        \n",
    "    except:\n",
    "        #print(f, \"Permission denied\")\n",
    "        return False"
   ]
  }
 ],
 "metadata": {
  "kernelspec": {
   "display_name": "Python 3",
   "language": "python",
   "name": "python3"
  },
  "language_info": {
   "codemirror_mode": {
    "name": "ipython",
    "version": 3
   },
   "file_extension": ".py",
   "mimetype": "text/x-python",
   "name": "python",
   "nbconvert_exporter": "python",
   "pygments_lexer": "ipython3",
   "version": "3.6.0"
  }
 },
 "nbformat": 4,
 "nbformat_minor": 2
}