binwalk 3.1.0

Analyzes data for embedded file types
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

use crate::structures::common::{self, StructureError};

/// Struct to store WindowsCE header info
#[derive(Debug, Default, Clone)]
pub struct WinCEHeader {
    pub base_address: usize,
    pub image_size: usize,
    pub header_size: usize,
}

/// Parses a Windows CE header
pub fn parse_wince_header(wince_data: &[u8]) -> Result<WinCEHeader, StructureError> {
    let wince_header_structure = vec![
        ("magic_p1", "u32"),
        ("magic_p2", "u24"),
        ("image_start", "u32"),
        ("image_size", "u32"),
    ];

    // Parse the WinCE header
    if let Ok(wince_header) = common::parse(wince_data, &wince_header_structure, "little") {
        return Ok(WinCEHeader {
            base_address: wince_header["image_start"],
            image_size: wince_header["image_size"],
            header_size: common::size(&wince_header_structure),
        });
    }

    Err(StructureError)
}

/// Struct to store WindowsCE block info
#[derive(Debug, Default, Clone)]
pub struct WinCEBlock {
    pub address: usize,
    pub data_size: usize,
    pub header_size: usize,
}

/// Parse a WindowsCE block header
pub fn parse_wince_block_header(block_data: &[u8]) -> Result<WinCEBlock, StructureError> {
    let wince_block_structure = vec![("address", "u32"), ("size", "u32"), ("checksum", "u32")];

    if let Ok(block_header) = common::parse(block_data, &wince_block_structure, "little") {
        return Ok(WinCEBlock {
            address: block_header["address"],
            data_size: block_header["size"],
            header_size: common::size(&wince_block_structure),
        });
    }

    Err(StructureError)
}