Win32Native Class Reference

Static Public Member Functions
static	countFilesFolders ($path)
static	countFilesFoldersCOM ($path)
static	createShortcut ($shortcutPath, $targetPath, $workingDir='', $description='', $iconPath='')
static	findProcessesByName ($name, $properties=[])
static	getCurrentPid ()
static	getDefaultBrowser ()
static	getInstalledBrowsers ()
static	getProcessInfo ($pid, $properties=[])
static	getProcessList ($properties=[])
static	getServiceInfo ($serviceName, $properties=[])
static	getServiceState ($serviceName)
static	getSpecialFolderPath ($folderName)
static	killProcess ($pid)
static	listServices ($properties=[])
static	processExists ($pid)
static	registryDeleteKey ($hive, $key)
static	registryDeleteValue ($hive, $key, $value)
static	registryExists ($hive, $key, $value=null)
static	registryGetValue ($hive, $key, $value='')
static	registrySetValue ($hive, $key, $value, $data, $type='REG_SZ')
static	resetConnections ()
static	serviceExists ($serviceName)

Static Private Member Functions
static	countFilesFoldersManual ($path)
static	countFolderItemsCOM ($fso, $path)
static	extractBrowserExecutablePath ($commandPath)
static	getWmiCimv2 ()
static	getWmiStdRegProv ()
static	getWscriptShell ()
static	mapRegistryHive ($hive)

Static Private Attributes
static COM	$wmiCimv2 = null
static COM	$wmiStdRegProv = null
static COM	$wscriptShell = null

Detailed Description

Class Win32Native

This class provides native Windows operations using PHP COM extension. Replaces VBScript operations with direct COM/WMI access from PHP. Uses Windows Management Instrumentation (WMI) and WScript.Shell COM objects.

Definition at line 16 of file class.win32native.php.

Member Function Documentation

countFilesFolders()

countFilesFolders ( $path )

static

Counts files and folders recursively using native PHP. Replaces VBS with native PHP (faster than COM FileSystemObject).

Parameters

string

$path

The path to count files and folders in

Returns

int|false The count of files and folders, or false on failure

Definition at line 792 of file class.win32native.php.

    {
        Log::debug('countFilesFolders: Counting in ' . $path . ' (Native PHP)');
 
        $startTime = microtime(true);
 
        try {
            if (!is_dir($path)) {
                Log::error('countFilesFolders: Path is not a directory: ' . $path);
 
                return false;
            }
 
            $count = 0;
 
            // Use RecursiveDirectoryIterator for efficient recursive counting
            try {
                $iterator = new RecursiveIteratorIterator(
                    new RecursiveDirectoryIterator($path, RecursiveDirectoryIterator::SKIP_DOTS),
                    RecursiveIteratorIterator::SELF_FIRST
                );
 
                foreach ($iterator as $item) {
                    $count++;
                }
            } catch (Exception $e) {
                // If RecursiveIterator fails, fall back to manual recursion
                Log::debug('countFilesFolders: RecursiveIterator failed, using manual recursion');
                $count = self::countFilesFoldersManual($path);
            }
 
            $duration = round((microtime(true) - $startTime) * 1000, 2);
            Log::debug('countFilesFolders: Counted ' . $count . ' items in ' . $duration . 'ms (Native PHP)');
 
            return $count;
        } catch (Exception $e) {
            Log::error('countFilesFolders: Exception: ' . $e->getMessage());
 
            return false;
        }
    }

References countFilesFoldersManual(), Log\debug(), and Log\error().

Here is the call graph for this function:

countFilesFoldersCOM()

countFilesFoldersCOM ( $path )

static

Counts files and folders recursively using COM FileSystemObject. Alternative COM-based implementation (slower than native PHP).

Parameters

string

$path

The path to count files and folders in

Returns

int|false The count of files and folders, or false on failure

Definition at line 881 of file class.win32native.php.

    {
        Log::debug('countFilesFoldersCOM: Counting in ' . $path . ' (COM/FSO)');
 
        $startTime = microtime(true);
 
        try {
            $fso = new COM("Scripting.FileSystemObject");
 
            if (!$fso->FolderExists($path)) {
                Log::error('countFilesFoldersCOM: Path does not exist: ' . $path);
 
                return false;
            }
 
            $count = self::countFolderItemsCOM($fso, $path);
 
            $duration = round((microtime(true) - $startTime) * 1000, 2);
            Log::debug('countFilesFoldersCOM: Counted ' . $count . ' items in ' . $duration . 'ms (COM/FSO)');
 
            return $count;
        } catch (Exception $e) {
            Log::error('countFilesFoldersCOM: COM exception: ' . $e->getMessage());
 
            return false;
        }
    }

References countFolderItemsCOM(), Log\debug(), and Log\error().

Here is the call graph for this function:

countFilesFoldersManual()

countFilesFoldersManual ( $path )

staticprivate

Manual recursive file/folder counting (fallback method). Helper method for countFilesFolders.

Parameters

string

$path

The path to count

Returns

int The count of files and folders

Definition at line 842 of file class.win32native.php.

    {
        $count = 0;
 
        try {
            $items = @scandir($path);
 
            if ($items === false) {
                return 0;
            }
 
            foreach ($items as $item) {
                if ($item === '.' || $item === '..') {
                    continue;
                }
 
                $fullPath = $path . DIRECTORY_SEPARATOR . $item;
                $count++; // Count this item
 
                if (is_dir($fullPath)) {
                    // Recursively count subdirectory
                    $count += self::countFilesFoldersManual($fullPath);
                }
            }
        } catch (Exception $e) {
            // Silently handle errors (permission denied, etc.)
        }
 
        return $count;
    }

References countFilesFoldersManual().

Referenced by countFilesFolders(), and countFilesFoldersManual().

Here is the call graph for this function:

Here is the caller graph for this function:

countFolderItemsCOM()

countFolderItemsCOM ( $fso, $path )

staticprivate

Recursive helper for COM-based file/folder counting. Helper method for countFilesFoldersCOM.

Parameters

COM	$fso	FileSystemObject instance
string	$path	The path to count

Returns

int The count of files and folders

Definition at line 918 of file class.win32native.php.

    {
        try {
            $folder = $fso->GetFolder($path);
 
            // Count files and subfolders in this folder
            $count = $folder->Files->Count + $folder->SubFolders->Count;
 
            // Recursively count subfolders
            foreach ($folder->SubFolders as $subFolder) {
                $count += self::countFolderItemsCOM($fso, $subFolder->Path);
            }
 
            return $count;
        } catch (Exception $e) {
            // Silently handle errors (permission denied, etc.)
            return 0;
        }
    }

References countFolderItemsCOM().

Referenced by countFilesFoldersCOM(), and countFolderItemsCOM().

Here is the call graph for this function:

Here is the caller graph for this function:

createShortcut()

createShortcut ( $shortcutPath, $targetPath, $workingDir = '', $description = '', $iconPath = '' )

static

Creates a Windows shortcut using COM. Replaces VBS with direct COM access.

Parameters

string	$shortcutPath	Full path where to save the shortcut (.lnk file)
string	$targetPath	Path to the target executable
string	$workingDir	Working directory for the shortcut
string	$description	Shortcut description
string	$iconPath	Path to icon file

Returns

bool True on success, false on failure

Definition at line 738 of file class.win32native.php.

    {
        Log::debug('createShortcut: Creating shortcut at ' . $shortcutPath . ' (COM)');
 
        $startTime = microtime(true);
 
        try {
            $shell = self::getWscriptShell();
 
            // Create the shortcut object
            $shortcut = $shell->CreateShortcut($shortcutPath);
 
            // Set shortcut properties
            $shortcut->TargetPath = $targetPath;
 
            if (!empty($workingDir)) {
                $shortcut->WorkingDirectory = $workingDir;
            }
 
            if (!empty($description)) {
                $shortcut->Description = $description;
            }
 
            if (!empty($iconPath)) {
                $shortcut->IconLocation = $iconPath;
            }
 
            // Save the shortcut
            $shortcut->Save();
 
            $duration = round((microtime(true) - $startTime) * 1000, 2);
            Log::debug('createShortcut: Successfully created shortcut in ' . $duration . 'ms (COM)');
 
            return true;
        } catch (Exception $e) {
            self::resetConnections();
            Log::error('createShortcut: COM exception: ' . $e->getMessage());
 
            return false;
        }
    }

References Log\debug(), Log\error(), getWscriptShell(), and resetConnections().

Referenced by Util\enableLaunchStartup().

Here is the call graph for this function:

Here is the caller graph for this function:

extractBrowserExecutablePath()

extractBrowserExecutablePath ( $commandPath )

staticprivate

Extracts the executable path from a browser command string. Helper method for browser detection.

Parameters

string

$commandPath

The command path string from registry

Returns

string|false The extracted executable path, or false on failure

Definition at line 1282 of file class.win32native.php.

    {
        if (empty($commandPath)) {
            return false;
        }
 
        // Method 1: Extract path from quotes
        // Format: "C:\Program Files\Browser\browser.exe" --arguments
        if (preg_match('/"([^"]+\\.exe)"/i', $commandPath, $matches)) {
            return $matches[1];
        }
 
        // Method 2: Extract path without quotes but with .exe
        // Format: C:\Program Files\Browser\browser.exe --arguments
        if (preg_match('/^([^\\s]+\\.exe)/i', trim($commandPath), $matches)) {
            return $matches[1];
        }
 
        // Method 3: Handle paths with spaces but no quotes (rare)
        // Try to find .exe in the string
        if (preg_match('/([A-Z]:\\\\[^"]+\\.exe)/i', $commandPath, $matches)) {
            return $matches[1];
        }
 
        // Method 4: Fallback - take everything before first space
        $parts = explode(' ', trim($commandPath));
        $path  = str_replace('"', '', $parts[0]);
 
        // Validate it looks like a path
        if (stripos($path, '.exe') !== false) {
            return $path;
        }
 
        return false;
    }

Referenced by getInstalledBrowsers().

Here is the caller graph for this function:

findProcessesByName()

findProcessesByName ( $name, $properties = [] )

static

Finds processes by name.

Parameters

string	$name	Process name (e.g., 'notepad.exe')
array	$properties	Properties to retrieve

Returns

array Array of matching processes

Definition at line 303 of file class.win32native.php.

    {
        if (empty($name)) {
            return [];
        }
 
        if (empty($properties)) {
            $properties = ['Name', 'ProcessID', 'ExecutablePath'];
        }
 
        try {
            $wmi          = self::getWmiCimv2();
            $selectClause = implode(', ', $properties);
 
            // Sanitize the name parameter to prevent WQL injection
            // Escape single quotes by doubling them (WQL standard)
            $safeName = str_replace("'", "''", $name);
 
            $query     = "SELECT {$selectClause} FROM Win32_Process WHERE Name = '{$safeName}'";
            $processes = $wmi->ExecQuery($query);
 
            $result = [];
            foreach ($processes as $proc) {
                $process = [];
                foreach ($properties as $prop) {
                    try {
                        $value          = $proc->$prop;
                        $process[$prop] = $value ?? '';
                    } catch (Exception $e) {
                        $process[$prop] = '';
                    }
                }
                $result[] = $process;
            }
 
            return $result;
        } catch (Exception $e) {
            self::resetConnections();
            Log::error('findProcessesByName: COM exception: ' . $e->getMessage());
 
            return [];
        }
    }

References $proc, $result, Log\error(), getWmiCimv2(), and resetConnections().

Here is the call graph for this function:

getCurrentPid()

getCurrentPid ( )

static

Gets the current PHP process ID.

Returns

int Current process ID

Definition at line 352 of file class.win32native.php.

    {
        return getmypid();
    }

getDefaultBrowser()

getDefaultBrowser ( )

static

Gets the default browser's executable path using COM. Replaces VBS with direct COM registry access.

Returns

string|false The path to the default browser executable, or false on failure

Definition at line 1146 of file class.win32native.php.

    {
        Log::debug('getDefaultBrowser: Reading default browser (COM)');
 
        $startTime = microtime(true);
 
        // Try to read the default browser from registry
        $browserPath = self::registryGetValue('HKLM', 'SOFTWARE\\Classes\\http\\shell\\open\\command', '');
 
        if ($browserPath === null) {
            Log::debug('getDefaultBrowser: No default browser found');
 
            return false;
        }
 
        $duration = round((microtime(true) - $startTime) * 1000, 2);
 
        // Extract the executable path from the command
        // Format is usually: "C:\Program Files\Browser\browser.exe" -- "%1"
        if (preg_match('/"([^"]+)"/', $browserPath, $matches)) {
            $path = $matches[1];
        } else {
            // No quotes, take everything before the first space or use as-is
            $path = trim(explode(' ', $browserPath)[0]);
            $path = str_replace('"', '', $path);
        }
 
        Log::debug('getDefaultBrowser: Found browser in ' . $duration . 'ms (COM)');
 
        return $path;
    }

References Log\debug(), and registryGetValue().

Referenced by ActionReload\__construct(), and ActionStartup\checkBrowser().

Here is the call graph for this function:

Here is the caller graph for this function:

getInstalledBrowsers()

getInstalledBrowsers ( )

static

Gets a list of installed browsers using hybrid approach. Hybrid approach - known browsers + pattern matching (NO VBS!)

Returns

array An array of browser executable paths (empty array if none found)

Definition at line 1184 of file class.win32native.php.

    {
        Log::debug('getInstalledBrowsers: Enumerating installed browsers (Hybrid - No VBS)');
 
        $startTime = microtime(true);
        $browsers  = [];
 
        // Known browser registry names (covers 99% of browsers)
        $knownBrowsers = [
            // Major browsers
            'Google Chrome',
            'Microsoft Edge',
            'Opera',
            'Brave',
            'Vivaldi',
            'Chromium',
 
            // Firefox variants
            'Firefox',
            'Firefox-308046B0AF4A39CB',  // Common Firefox GUID
            'Firefox Developer Edition',
            'Firefox Nightly',
 
            // Other browsers
            'Safari',
            'Waterfox',
            'Pale Moon',
            'Yandex',
            'IEXPLORE.EXE',
            'Total Browser',
            'Maxthon',
            'Seamonkey',
            'K-Meleon',
            'Basilisk',
            'Tor Browser',
            'Slimjet',
            'Epic Privacy Browser',
            'Comodo Dragon',
            'SRWare Iron',
            'Cent Browser',
            '360 Browser',
            'UC Browser',
            'Avast Secure Browser',
            'AVG Secure Browser',
        ];
 
        // Registry paths to check
        $registryPaths = [
            ['hive' => 'HKLM', 'key' => 'SOFTWARE\\WOW6432Node\\Clients\\StartMenuInternet'],
            ['hive' => 'HKLM', 'key' => 'SOFTWARE\\Clients\\StartMenuInternet'],
            ['hive' => 'HKCU', 'key' => 'SOFTWARE\\Clients\\StartMenuInternet'],
        ];
 
        // Check each known browser in each registry path
        foreach ($registryPaths as $regPath) {
            $hive     = $regPath['hive'];
            $basePath = $regPath['key'];
 
            foreach ($knownBrowsers as $browserName) {
                try {
                    // Try to read the browser's command path
                    $commandPath = self::registryGetValue(
                        $hive,
                        $basePath . '\\' . $browserName . '\\shell\\open\\command',
                        ''
                    );
 
                    if ($commandPath !== null && !empty($commandPath)) {
                        // Extract executable path
                        $exePath = self::extractBrowserExecutablePath($commandPath);
 
                        if ($exePath && !in_array($exePath, $browsers)) {
                            Log::debug('getInstalledBrowsers: Found ' . $browserName . ': ' . $exePath);
                            $browsers[] = $exePath;
                        }
                    }
                } catch (Exception $e) {
                    // Browser not found, continue
                    continue;
                }
            }
        }
 
        $duration = round((microtime(true) - $startTime) * 1000, 2);
        Log::debug('getInstalledBrowsers: Found ' . count($browsers) . ' browser(s) in ' . $duration . 'ms (Hybrid - No VBS)');
 
        // Always return an array (possibly empty) to simplify call sites
        return $browsers;
    }

References Log\debug(), extractBrowserExecutablePath(), and registryGetValue().

Referenced by ActionChangeBrowser\__construct().

Here is the call graph for this function:

Here is the caller graph for this function:

getProcessInfo()

getProcessInfo ( $pid, $properties = [] )

static

Gets information about a specific process by PID.

Parameters

int	$pid	The process ID
array	$properties	Properties to retrieve

Returns

array|false Process information or false if not found

Definition at line 256 of file class.win32native.php.

    {
        if (!is_numeric($pid) || $pid <= 0) {
            return false;
        }
 
        if (empty($properties)) {
            $properties = ['Name', 'ProcessID', 'ExecutablePath', 'CommandLine'];
        }
 
        try {
            $wmi          = self::getWmiCimv2();
            $selectClause = implode(', ', $properties);
            $query        = "SELECT {$selectClause} FROM Win32_Process WHERE ProcessID = {$pid}";
            $processes    = $wmi->ExecQuery($query);
 
            foreach ($processes as $proc) {
                $result = [];
                foreach ($properties as $prop) {
                    try {
                        $value         = $proc->$prop;
                        $result[$prop] = $value ?? '';
                    } catch (Exception $e) {
                        $result[$prop] = '';
                    }
                }
 
                return $result;
            }
 
            return false;
        } catch (Exception $e) {
            self::resetConnections();
            Log::error('getProcessInfo: COM exception: ' . $e->getMessage());
 
            return false;
        }
    }

References $proc, $result, Log\error(), getWmiCimv2(), and resetConnections().

Here is the call graph for this function:

getProcessList()

getProcessList ( $properties = [] )

static

Gets a list of running processes using COM/WMI. Replaces VBS WMI process query with direct PHP COM access.

Parameters

array

$properties

Optional array of properties to retrieve (e.g., ['Name', 'ProcessID', 'ExecutablePath'])

Returns

array Array of processes with requested information

Definition at line 97 of file class.win32native.php.

    {
        Log::debug('getProcessList: Listing processes (COM/WMI)');
 
        $startTime = microtime(true);
 
        try {
            // Create WMI connection
            $wmi = self::getWmiCimv2();
 
            // Build WQL query
            if (empty($properties)) {
                $properties = ['Name', 'ProcessID', 'ExecutablePath'];
            }
 
            $selectClause = implode(', ', $properties);
            $query        = "SELECT {$selectClause} FROM Win32_Process";
 
            // Execute query
            $processes = $wmi->ExecQuery($query);
 
            // Convert to array
            $result = [];
            foreach ($processes as $proc) {
                $process = [];
                foreach ($properties as $prop) {
                    // Handle property access
                    try {
                        $value          = $proc->$prop;
                        $process[$prop] = $value ?? '';
                    } catch (Exception $e) {
                        $process[$prop] = '';
                    }
                }
                $result[] = $process;
            }
 
            $duration = round((microtime(true) - $startTime) * 1000, 2);
            Log::debug('getProcessList: Found ' . count($result) . ' processes in ' . $duration . 'ms (COM/WMI)');
 
            return $result;
        } catch (Exception $e) {
            self::resetConnections();
            Log::error('getProcessList: COM exception: ' . $e->getMessage());
 
            return [];
        }
    }

References $proc, $result, Log\debug(), Log\error(), getWmiCimv2(), and resetConnections().

Referenced by Win32Ps\getListProcs().

Here is the call graph for this function:

Here is the caller graph for this function:

getServiceInfo()

getServiceInfo ( $serviceName, $properties = [] )

static

Gets information about a Windows service using COM/WMI. Replaces VBS with direct COM/WMI access.

Parameters

string	$serviceName	The name of the service
array	$properties	Optional array of properties to retrieve

Returns

array|false Service information array, or false on failure

Definition at line 951 of file class.win32native.php.

    {
        Log::debug('getServiceInfo: Getting info for service ' . $serviceName . ' (COM/WMI)');
 
        $startTime = microtime(true);
 
        try {
            // Create WMI connection
            $wmi = self::getWmiCimv2();
 
            // Default properties if none specified
            if (empty($properties)) {
                $properties = [
                    'Name',
                    'DisplayName',
                    'State',
                    'Status',
                    'StartMode',
                    'PathName',
                    'ProcessId',
                    'Started',
                    'StartName',
                    'Description'
                ];
            }
 
            // Build WQL query
            $selectClause    = implode(', ', $properties);
            $safeServiceName = str_replace("'", "''", $serviceName);
            $query           = "SELECT {$selectClause} FROM Win32_Service WHERE Name = '{$safeServiceName}'";
 
            // Execute query
            $services = $wmi->ExecQuery($query);
 
            // Get the first (and should be only) result
            foreach ($services as $service) {
                $result = [];
                foreach ($properties as $prop) {
                    try {
                        $value         = $service->$prop;
                        $result[$prop] = $value ?? '';
                    } catch (Exception $e) {
                        $result[$prop] = '';
                    }
                }
 
                $duration = round((microtime(true) - $startTime) * 1000, 2);
                Log::debug('getServiceInfo: Found service in ' . $duration . 'ms (COM/WMI)');
 
                return $result;
            }
 
            // Service not found
            Log::debug('getServiceInfo: Service not found');
 
            return false;
        } catch (Exception $e) {
            self::resetConnections();
            Log::error('getServiceInfo: COM exception: ' . $e->getMessage());
 
            return false;
        }
    }

References $result, Log\debug(), Log\error(), getWmiCimv2(), and resetConnections().

Referenced by Nssm\infos(), and Win32Service\infos().

Here is the call graph for this function:

Here is the caller graph for this function:

getServiceState()

getServiceState ( $serviceName )

static

Gets the state of a Windows service. Additional helper method.

Parameters

string

$serviceName

The name of the service

Returns

string|false The service state (Running, Stopped, etc.), or false if not found

Definition at line 1112 of file class.win32native.php.

    {
        try {
            $wmi = self::getWmiCimv2();
            // Sanitize the serviceName parameter to prevent WQL injection
            // Escape single quotes by doubling them (WQL standard)
            $safeServiceName = str_replace("'", "''", $serviceName);
            $query           = "SELECT State FROM Win32_Service WHERE Name = '{$safeServiceName}'";
 
            // Execute query
            $services = $wmi->ExecQuery($query);
 
            foreach ($services as $service) {
                return $service->State;
            }
 
            return false;
        } catch (Exception $e) {
            self::resetConnections();
 
            return false;
        }
    }

References getWmiCimv2(), and resetConnections().

Referenced by ActionLoading\checkAllServicesStarted().

Here is the call graph for this function:

Here is the caller graph for this function:

getSpecialFolderPath()

getSpecialFolderPath ( $folderName )

static

Gets a Windows special folder path using COM. Replaces VBS with direct COM access.

Parameters

string

$folderName

The special folder name (Desktop, Startup, etc.)

Returns

string|false The folder path, or false on failure

Definition at line 693 of file class.win32native.php.

    {
        Log::debug('getSpecialFolderPath: Getting ' . $folderName . ' path (COM)');
 
        $startTime = microtime(true);
 
        try {
            $shell = self::getWscriptShell();
 
            // Get the special folder path
            $path = $shell->SpecialFolders($folderName);
 
            $duration = round((microtime(true) - $startTime) * 1000, 2);
 
            if ($path && !empty($path)) {
                // Convert to Unix-style path
                $path = str_replace('\\', '/', $path);
                Log::debug('getSpecialFolderPath: Found ' . $folderName . ' in ' . $duration . 'ms (COM)');
 
                return $path;
            } else {
                Log::debug('getSpecialFolderPath: ' . $folderName . ' not found');
 
                return false;
            }
        } catch (Exception $e) {
            self::resetConnections();
            Log::error('getSpecialFolderPath: COM exception: ' . $e->getMessage());
 
            return false;
        }
    }

References Log\debug(), Log\error(), getWscriptShell(), and resetConnections().

Referenced by Path\getStartupLnkPath().

Here is the call graph for this function:

Here is the caller graph for this function:

getWmiCimv2()

getWmiCimv2 ( )

staticprivate

Returns the cached WMI cimv2 connection, creating it on first use.

Returns

COM The cached WMI cimv2 connection.

Definition at line 39 of file class.win32native.php.

                                         : COM
    {
        if (self::$wmiCimv2 === null) {
            self::$wmiCimv2 = new COM("winmgmts://./root/cimv2");
        }
 
        return self::$wmiCimv2;
    }

Referenced by findProcessesByName(), getProcessInfo(), getProcessList(), getServiceInfo(), getServiceState(), killProcess(), listServices(), processExists(), and serviceExists().

Here is the caller graph for this function:

getWmiStdRegProv()

getWmiStdRegProv ( )

staticprivate

Returns the cached WMI StdRegProv connection, creating it on first use.

Returns

COM The cached WMI StdRegProv connection.

Definition at line 53 of file class.win32native.php.

                                              : COM
    {
        if (self::$wmiStdRegProv === null) {
            self::$wmiStdRegProv = new COM("winmgmts://./root/default:StdRegProv");
        }
 
        return self::$wmiStdRegProv;
    }

Referenced by registryExists().

Here is the caller graph for this function:

getWscriptShell()

getWscriptShell ( )

staticprivate

Returns the cached WScript.Shell object, creating it on first use.

Returns

COM The cached WScript.Shell object.

Definition at line 67 of file class.win32native.php.

                                             : COM
    {
        if (self::$wscriptShell === null) {
            self::$wscriptShell = new COM("WScript.Shell");
        }
 
        return self::$wscriptShell;
    }

Referenced by createShortcut(), getSpecialFolderPath(), registryDeleteKey(), registryDeleteValue(), registryExists(), registryGetValue(), and registrySetValue().

Here is the caller graph for this function:

killProcess()

killProcess ( $pid )

static

Kills a process by PID using COM/WMI. Replaces VBS WMI process termination with direct PHP COM access.

Parameters

int

$pid

The process ID to kill

Returns

bool True on success, false on failure

Definition at line 154 of file class.win32native.php.

    {
        // Validate PID
        if (!is_numeric($pid) || $pid <= 0) {
            Log::error('killProcess: Invalid PID: ' . $pid);
 
            return false;
        }
 
        Log::debug('killProcess: Killing process PID ' . $pid . ' (COM/WMI)');
 
        $startTime = microtime(true);
 
        try {
            // Create WMI connection
            $wmi = self::getWmiCimv2();
 
            // Query for specific process
            $query     = "SELECT * FROM Win32_Process WHERE ProcessID = {$pid}";
            $processes = $wmi->ExecQuery($query);
 
            // Terminate the process
            $found           = false;
            $terminateResult = null;
            foreach ($processes as $proc) {
                $terminateResult = $proc->Terminate();
                $found           = true;
                break;
            }
 
            $duration = round((microtime(true) - $startTime) * 1000, 2);
 
            if (!$found) {
                Log::debug('killProcess: Process ' . $pid . ' not found');
 
                return false;
            }
 
            // Check if Terminate() returned success (0 = success)
            if ($terminateResult !== 0) {
                Log::error('killProcess: Terminate() failed with status code: ' . $terminateResult);
 
                return false;
            }
 
            // Additional verification: check if process still exists after a short delay
            usleep(100000); // Wait 100ms for termination to take effect
            if (self::processExists($pid)) {
                Log::error('killProcess: Process ' . $pid . ' still exists after termination attempt');
 
                return false;
            }
 
            Log::debug('killProcess: Successfully killed process ' . $pid . ' in ' . $duration . 'ms (COM/WMI)');
 
            return true;
        } catch (Exception $e) {
            self::resetConnections();
            Log::error('killProcess: COM exception: ' . $e->getMessage());
 
            return false;
        }
    }

References $proc, Log\debug(), Log\error(), getWmiCimv2(), and resetConnections().

Referenced by Win32Ps\kill(), and ActionQuit\terminatePhpProcesses().

Here is the call graph for this function:

Here is the caller graph for this function:

listServices()

listServices ( $properties = [] )

static

Lists all Windows services using COM/WMI. Additional helper method.

Parameters

array

$properties

Optional array of properties to retrieve

Returns

array Array of service information

Definition at line 1023 of file class.win32native.php.

    {
        Log::debug('listServices: Listing all services (COM/WMI)');
 
        $startTime = microtime(true);
 
        try {
            // Create WMI connection
            $wmi = self::getWmiCimv2();
 
            // Default properties if none specified
            if (empty($properties)) {
                $properties = ['Name', 'DisplayName', 'State', 'StartMode'];
            }
 
            // Build WQL query
            $selectClause = implode(', ', $properties);
            $query        = "SELECT {$selectClause} FROM Win32_Service";
 
            // Execute query
            $services = $wmi->ExecQuery($query);
 
            // Convert to array
            $result = [];
            foreach ($services as $service) {
                $serviceInfo = [];
                foreach ($properties as $prop) {
                    try {
                        $value              = $service->$prop;
                        $serviceInfo[$prop] = $value ?? '';
                    } catch (Exception $e) {
                        $serviceInfo[$prop] = '';
                    }
                }
                $result[] = $serviceInfo;
            }
 
            $duration = round((microtime(true) - $startTime) * 1000, 2);
            Log::debug('listServices: Found ' . count($result) . ' services in ' . $duration . 'ms (COM/WMI)');
 
            return $result;
        } catch (Exception $e) {
            self::resetConnections();
            Log::error('listServices: COM exception: ' . $e->getMessage());
 
            return [];
        }
    }

References $result, Log\debug(), Log\error(), getWmiCimv2(), and resetConnections().

Referenced by Win32Service\getServices().

Here is the call graph for this function:

Here is the caller graph for this function:

mapRegistryHive()

mapRegistryHive ( $hive )

staticprivate

Maps registry hive abbreviations to full names for WScript.Shell.

Parameters

string

$hive

The registry hive (HKLM, HKCU, HKCR, HKU)

Returns

string The full hive name

Definition at line 368 of file class.win32native.php.

    {
        $hiveMap = [
            'HKLM'               => 'HKLM',
            'HKCU'               => 'HKCU',
            'HKCR'               => 'HKCR',
            'HKU'                => 'HKU',
            'HKEY_LOCAL_MACHINE' => 'HKLM',
            'HKEY_CURRENT_USER'  => 'HKCU',
            'HKEY_CLASSES_ROOT'  => 'HKCR',
            'HKEY_USERS'         => 'HKU',
        ];
 
        return isset($hiveMap[$hive]) ? $hiveMap[$hive] : $hive;
    }

Referenced by registryDeleteKey(), registryDeleteValue(), registryExists(), registryGetValue(), and registrySetValue().

Here is the caller graph for this function:

processExists()

processExists ( $pid )

static

Checks if a process with the given PID exists.

Parameters

int

$pid

The process ID to check

Returns

bool True if process exists, false otherwise

Definition at line 225 of file class.win32native.php.

    {
        if (!is_numeric($pid) || $pid <= 0) {
            return false;
        }
 
        try {
            $wmi       = self::getWmiCimv2();
            $query     = "SELECT ProcessID FROM Win32_Process WHERE ProcessID = {$pid}";
            $processes = $wmi->ExecQuery($query);
 
            foreach ($processes as $proc) {
                return true;
            }
 
            return false;
        } catch (Exception $e) {
            self::resetConnections();
 
            return false;
        }
    }

References $proc, getWmiCimv2(), and resetConnections().

Here is the call graph for this function:

registryDeleteKey()

registryDeleteKey ( $hive, $key )

static

Deletes a registry key and all its subkeys using COM. Additional helper method for key deletion.

Parameters

string	$hive	The registry hive (HKLM, HKCU, etc.)
string	$key	The registry key path to delete

Returns

bool True on success, false on failure

Definition at line 648 of file class.win32native.php.

    {
        $hive    = self::mapRegistryHive($hive);
        $regPath = $hive . '\\' . $key . '\\';
 
        Log::debug('registryDeleteKey: Deleting ' . $regPath . ' (COM)');
 
        try {
            $shell = self::getWscriptShell();
 
            // Delete the key (note the trailing backslash)
            $shell->RegDelete($regPath);
 
            Log::debug('registryDeleteKey: Successfully deleted key (COM)');
 
            return true;
        } catch (Exception $e) {
            // If the key doesn't exist, that's OK
            $errorMsg = $e->getMessage();
            if (strpos($errorMsg, 'Unable to remove') !== false ||
                strpos($errorMsg, 'Invalid root') !== false) {
                Log::debug('registryDeleteKey: Key does not exist (already deleted)');
 
                return true;
            }
 
            self::resetConnections();
            Log::error('registryDeleteKey: COM exception: ' . $e->getMessage());
 
            return false;
        }
    }

References Log\debug(), Log\error(), getWscriptShell(), mapRegistryHive(), and resetConnections().

Referenced by Registry\setValue().

Here is the call graph for this function:

Here is the caller graph for this function:

registryDeleteValue()

registryDeleteValue ( $hive, $key, $value )

static

Deletes a value from the Windows registry using COM. Replaces VBS/reg.exe with direct COM access.

Parameters

string	$hive	The registry hive (HKLM, HKCU, etc.)
string	$key	The registry key path
string	$value	The value name to delete

Returns

bool True on success, false on failure

Definition at line 603 of file class.win32native.php.

    {
        $hive    = self::mapRegistryHive($hive);
        $regPath = $hive . '\\' . $key . '\\' . $value;
 
        Log::debug('registryDeleteValue: Deleting ' . $regPath . ' (COM)');
 
        $startTime = microtime(true);
 
        try {
            $shell = self::getWscriptShell();
 
            // Delete the value
            $shell->RegDelete($regPath);
 
            $duration = round((microtime(true) - $startTime) * 1000, 2);
            Log::debug('registryDeleteValue: Successfully deleted value in ' . $duration . 'ms (COM)');
 
            return true;
        } catch (Exception $e) {
            // If the value doesn't exist, that's OK
            $errorMsg = $e->getMessage();
            if (strpos($errorMsg, 'Unable to remove') !== false ||
                strpos($errorMsg, 'Invalid root') !== false) {
                Log::debug('registryDeleteValue: Value does not exist (already deleted)');
 
                return true;
            }
 
            self::resetConnections();
            Log::error('registryDeleteValue: COM exception: ' . $e->getMessage());
 
            return false;
        }
    }

References Log\debug(), Log\error(), getWscriptShell(), mapRegistryHive(), and resetConnections().

Referenced by Registry\setValue().

Here is the call graph for this function:

Here is the caller graph for this function:

registryExists()

registryExists ( $hive, $key, $value = null )

static

Checks if a registry key or value exists using COM. Replaces VBS/reg.exe with direct COM access.

Uses StdRegProv for key existence checks (more reliable than WScript.Shell::RegRead). Uses WScript.Shell::RegRead for value existence checks.

Parameters

string	$hive	The registry hive (HKLM, HKCU, etc.)
string	$key	The registry key path
string | null	$value	The value name (null to check key existence only)

Returns

bool True if exists, false otherwise

Definition at line 397 of file class.win32native.php.

    {
        $hive    = self::mapRegistryHive($hive);
        $regPath = $hive . '\\' . $key;
 
        Log::debug('registryExists: Checking ' . $regPath . ($value !== null ? '\\' . $value : ' (key)') . ' (COM)');
 
        try {
            if ($value === null) {
                // Check if the key itself exists
                // Use StdRegProv::EnumKey for reliable key existence checking
                // This avoids false negatives from checking for a default value that may not exist
                try {
                    $wmi = self::getWmiStdRegProv();
 
                    // Map hive names to WMI constants
                    $hiveConstMap = [
                        'HKCR' => 0x80000000,  // HKEY_CLASSES_ROOT
                        'HKCU' => 0x80000001,  // HKEY_CURRENT_USER
                        'HKLM' => 0x80000002,  // HKEY_LOCAL_MACHINE
                        'HKU'  => 0x80000003,  // HKEY_USERS
                    ];
 
                    $hConst = $hiveConstMap[$hive] ?? 0x80000002;  // Default to HKLM
 
                    // EnumKey checks if parent key's subkeys contain the requested key
                    // For root-level checks, pass empty parent
                    $pathParts = explode('\\', $key);
 
                    if (count($pathParts) === 1) {
                        // Top-level key: parent is root
                        $parentKey = '';
                        $keyName   = $pathParts[0];
                    } else {
                        // Nested key: split parent from key name
                        $keyName   = array_pop($pathParts);
                        $parentKey = implode('\\', $pathParts);
                    }
 
                    $subKeys = null;
                    $rc      = $wmi->EnumKey($hConst, $parentKey, $subKeys);
 
                    if ($rc !== 0 || !is_array($subKeys)) {
                        Log::debug('registryExists: Key not found (EnumKey failed)');
 
                        return false;
                    }
 
                    // Check if our key name is in the list of subkeys
                    $exists = false;
                    foreach ($subKeys as $subKey) {
                        if (strcasecmp($subKey, $keyName) === 0) {
                            $exists = true;
                            break;
                        }
                    }
 
                    if ($exists) {
                        Log::debug('registryExists: Key found');
 
                        return true;
                    } else {
                        Log::debug('registryExists: Key not found');
 
                        return false;
                    }
                } catch (Exception $e) {
                    self::$wmiStdRegProv = null;
                    Log::error('registryExists: StdRegProv exception during key check: ' . $e->getMessage());
 
                    return false;
                }
            } else {
                // Check if a specific value exists within the key
                // Use WScript.Shell::RegRead for value existence
                try {
                    $shell     = self::getWscriptShell();
                    $valuePath = $regPath . '\\' . $value;
                    $shell->RegRead($valuePath);
                    Log::debug('registryExists: Value found');
 
                    return true;
                } catch (Exception $e) {
                    Log::debug('registryExists: Value not found');
 
                    return false;
                }
            }
        } catch (Exception $e) {
            self::resetConnections();
            Log::error('registryExists: COM exception: ' . $e->getMessage());
 
            return false;
        }
    }

References Log\debug(), Log\error(), getWmiStdRegProv(), getWscriptShell(), mapRegistryHive(), and resetConnections().

Referenced by Registry\exists().

Here is the call graph for this function:

Here is the caller graph for this function:

registryGetValue()

registryGetValue ( $hive, $key, $value = '' )

static

Gets a value from the Windows registry using COM. Replaces VBS/reg.exe with direct COM access.

Parameters

string	$hive	The registry hive (HKLM, HKCU, etc.)
string	$key	The registry key path
string	$value	The value name (empty string for default value)

Returns

mixed|null The registry value data, or null if not found

Definition at line 503 of file class.win32native.php.

    {
        $hive    = self::mapRegistryHive($hive);
        $regPath = $hive . '\\' . $key;
 
        if ($value !== '') {
            $regPath .= '\\' . $value;
        } else {
            // For default value, append backslash
            $regPath .= '\\';
        }
 
        Log::debug('registryGetValue: Reading ' . $regPath . ' (COM)');
 
        $startTime = microtime(true);
 
        try {
            $shell  = self::getWscriptShell();
            $result = $shell->RegRead($regPath);
 
            $duration = round((microtime(true) - $startTime) * 1000, 2);
 
            // Convert result to appropriate PHP type
            if (is_object($result)) {
                // COM objects need special handling
                $result = (string)$result;
            }
 
            Log::debug('registryGetValue: Found value in ' . $duration . 'ms (COM)');
 
            return $result;
        } catch (Exception $e) {
            Log::debug('registryGetValue: Value not found');
 
            return null;
        }
    }

References $result, Log\debug(), getWscriptShell(), and mapRegistryHive().

Referenced by Path\findExecutable(), getDefaultBrowser(), getInstalledBrowsers(), Registry\getValue(), and Registry\setValue().

Here is the call graph for this function:

Here is the caller graph for this function:

registrySetValue()

registrySetValue ( $hive, $key, $value, $data, $type = 'REG_SZ' )

static

Sets a value in the Windows registry using COM. Replaces VBS/reg.exe with direct COM access.

Parameters

string	$hive	The registry hive (HKLM, HKCU, etc.)
string	$key	The registry key path
string	$value	The value name
mixed	$data	The data to write
string	$type	The registry type (REG_SZ, REG_EXPAND_SZ, REG_DWORD, REG_BINARY)

Returns

bool True on success, false on failure

Definition at line 553 of file class.win32native.php.

    {
        $hive    = self::mapRegistryHive($hive);
        $regPath = $hive . '\\' . $key . '\\' . $value;
 
        // Validate type
        $validTypes = ['REG_SZ', 'REG_EXPAND_SZ', 'REG_DWORD', 'REG_BINARY'];
        if (!in_array($type, $validTypes)) {
            Log::error('registrySetValue: Invalid type: ' . $type);
 
            return false;
        }
 
        Log::debug('registrySetValue: Writing ' . $regPath . ' (' . $type . ') (COM)');
 
        $startTime = microtime(true);
 
        try {
            $shell = self::getWscriptShell();
 
            // Convert data based on type
            if ($type === 'REG_DWORD') {
                $data = (int)$data;
            }
 
            // Write the value
            $shell->RegWrite($regPath, $data, $type);
 
            $duration = round((microtime(true) - $startTime) * 1000, 2);
            Log::debug('registrySetValue: Successfully wrote value in ' . $duration . 'ms (COM)');
 
            return true;
        } catch (Exception $e) {
            self::resetConnections();
            Log::error('registrySetValue: COM exception: ' . $e->getMessage());
 
            return false;
        }
    }

References Log\debug(), Log\error(), getWscriptShell(), mapRegistryHive(), and resetConnections().

Referenced by Registry\setValue().

Here is the call graph for this function:

Here is the caller graph for this function:

resetConnections()

resetConnections ( )

static

Clears all cached COM connections. Call this after a COM operation fails so the next call gets a fresh connection.

Returns

void

Definition at line 82 of file class.win32native.php.

                                             : void
    {
        self::$wmiCimv2      = null;
        self::$wmiStdRegProv = null;
        self::$wscriptShell  = null;
    }

Referenced by createShortcut(), findProcessesByName(), getProcessInfo(), getProcessList(), getServiceInfo(), getServiceState(), getSpecialFolderPath(), killProcess(), listServices(), processExists(), registryDeleteKey(), registryDeleteValue(), registryExists(), registrySetValue(), and serviceExists().

Here is the caller graph for this function:

serviceExists()

serviceExists ( $serviceName )

static

Checks if a Windows service exists. Additional helper method.

Parameters

string

$serviceName

The name of the service

Returns

bool True if service exists, false otherwise

Definition at line 1080 of file class.win32native.php.

    {
        try {
            $wmi = self::getWmiCimv2();
            // Sanitize the serviceName parameter to prevent WQL injection
            // Escape single quotes by doubling them (WQL standard)
            $safeServiceName = str_replace("'", "''", $serviceName);
            $query           = "SELECT Name FROM Win32_Service WHERE Name = '{$safeServiceName}'";
 
            // Execute query
            $services = $wmi->ExecQuery($query);
 
            foreach ($services as $service) {
                return true;
            }
 
            return false;
        } catch (Exception $e) {
            self::resetConnections();
 
            return false;
        }
    }

References getWmiCimv2(), and resetConnections().

Here is the call graph for this function:

Field Documentation

$wmiCimv2

COM $wmiCimv2 = null

staticprivate

Definition at line 26 of file class.win32native.php.

$wmiStdRegProv

COM $wmiStdRegProv = null

staticprivate

Definition at line 29 of file class.win32native.php.

$wscriptShell

COM $wscriptShell = null

staticprivate

Definition at line 32 of file class.win32native.php.

---

The documentation for this class was generated from the following file:

• E:/Bearsampp-development/sandbox/core/classes/class.win32native.php