Check if 32 or 64 bit

[trashy]

How to check if an exe is 32 or 64 bit. I want to check OS version and Arch on an offline drive. I've got this but I'd like something better. I don't think FileGetVersion can do this and what about something like an AutoIt compiled exe or a dll.

                $version = StringLeft(FileGetVersion(GUICtrlRead($Combo1) & "\Windows\system32\WinVer.exe"), 3)
                If StringLeft($version, 3) = "6.1" Then
                    $version = "WIN7"
                ElseIf StringLeft($version, 3) = "6.0" Then
                    $version = "VISTA"
                ElseIf StringLeft($version, 3) = "5.1" Then
                    $version = "XP"
                EndIf
                $arch = (GUICtrlRead($Combo1) & "\Program Files (x86)")
                If Not FileExists($arch) Then
                    $arch = "_x86"
                ElseIf FileExists($arch) Then
                    $arch = "_x64"
                EndIf

Edited March 12, 2014 by trashy

[JohnOne]

[trashy]

Already found that one but didn't have any luck with it

Edited March 12, 2014 by trashy

[JohnOne]

Maybe try wrapping shgetfileinfo

[trashy]

Let's just use iexplore.exe for example. There's not an easy to determine if it' a 32 or 64 bit app?

[FireFox]

Converted from a working C# function : 

#include <FileConstants.au3>

Local $Native = 0, $I386 = 0x014c, $Itanium = 0x0200, $x64 = 0x8664

Switch GetMachineType(@AutoItExe)
    Case $Native
        ConsoleWrite("Native" & @Lf)
    Case $I386
        ConsoleWrite("I386" & @Lf)
    Case $Itanium
        ConsoleWrite("Itanium" & @Lf)
    Case $x64
        ConsoleWrite("x64" & @Lf)
EndSwitch

Func GetMachineType($sFileName)
    Local Const $PE_POINTER_OFFSET = 60
    Local Const $MACHINE_OFFSET = 4

    Local $hFile = FileOpen($sFileName, $FO_BINARY)
    Local $bData = FileRead($hFile, 4096)
    FileClose($hFile)

    ;dos header is 64 bytes, last element, long (4 bytes) is the address of the PE header
    Local $PE_HEADER_ADDR = Number(BinaryMid($bData, 1 + $PE_POINTER_OFFSET, 4))
    Local $iMachineUint = Number(BinaryMid($bData, 1 + $PE_HEADER_ADDR + $MACHINE_OFFSET, 2))

    Return $iMachineUint
EndFunc

_

Br, FireFox.

Edited March 12, 2014 by FireFox

[UEZ]

How about this: #800855

Br,

UEZ

[FireFox]

How about this: #800855

 

Br,

UEZ

Same link as post #2.

[UEZ]

Indeed. 

 

What about _WinAPI_GetBinaryType() function?

Br,

UEZ

Edited March 12, 2014 by UEZ

[JohnOne]

I imagine that is same as kafu's 

Edited March 12, 2014 by JohnOne

[guinness]

I imagine that is same as kafu's 

But included as part of the AutoIt UDFs.

[trashy]

WinAPI_GetBinaryType()

Could be just what I' looking for. Out of time right now , I'll check it out later and post my results.

Thanks

[UEZ]

2x 

@trashy: why is that function not working for you? iexplorer.exe reports the architecture properly.

Br,

UEZ

[funkey]

 @UEZ: Did you read the question?

[UEZ]

@funkey: you mean

 

Let's just use iexplore.exe for example. There's not an easy to determine if it' a 32 or 64 bit app?

 

If run the example for _WinAPI_GetBinaryType I get 32-bit for iexplore.exe located in c:Program Files (x86)Internet Explorer and 64-bit for the exe located in c:Program FilesInternet Explorer.

 

Br,

UEZ

[funkey]

 

How to check if an exe is 32 or 64 bit. I want to check OS version and Arch on an offline drive. I've got this but I'd like something better. I don't think FileGetVersion can do this and what about something like an AutoIt compiled exe or a dll.

[FireFox]

And we answered the first question.

[JohnOne]

If a drive containing an os has the folder Program Files (x86) can it not be concluded it's a 64 bit os?

[FireFox]

If a drive containing an os has the folder Program Files (x86) can it not be concluded it's a 64 bit os?

Yes.

But better check the registry if there is a Wow64 key in case a dumb user has created the Program Files (x86) folder.

Edited March 12, 2014 by FireFox

[UEZ]

Regarding to check which os is installed on the ext. disk you can try these steps:

• load the ext. registry hive using REG LOAD <KeyName> <FileName> (cmdline tool)
• extract the needed values from the loaded hive using RegRead (<Keyname>HKLMSOFTWAREMicrosoftWindows NTCurrentVersion)
• unload the hive REG UNLOAD <KeyName>

 

Br,

UEZ