Windows Enhanced MetaFile .emf support for PhotoRec
This commit is contained in:
Christophe Grenier
parent
8a57818780
commit
48f986a963
3 changed files with 342 additions and 1 deletions
|
|
@ -19,7 +19,7 @@ fs_H = analyse.h bfs.h bsd.h cramfs.h fat.h fatx.h ext2.h jfs_superblock.h jfs
|
|||
testdisk_SOURCES = testdisk.c $(base_C) $(base_H) $(fs_C) $(fs_H) testdisk.h adv.c adv.h dir.c dir.h dirpart.c dirpart.h edit.c edit.h ext2_dir.c ext2_dir.h ext2_inc.h fat_adv.c fat_dir.c fat_dir.h geometry.c godmode.c godmode.h intrface.c intrface.h ntfs_adv.c ntfs_dir.c ntfs_dir.h ntfs_fix.c ntfs_inc.h rfs_dir.c rfs_dir.h $(ICON_TESTDISK) next.c next.h dimage.c dimage.h
|
||||
#ntfs_udl.c ntfs_udl.h
|
||||
|
||||
photorec_SOURCES = photorec.c photorec.h phrecn.c phrecn.h dir.c dir.h ext2p.c ext2p.h ext2_dir.c ext2_dir.h ext2_inc.h fat_dir.c fat_dir.h fatp.c fatp.h filegen.c filegen.h file_7z.c file_a.c file_ab.c file_ace.c file_aif.c file_all.c file_asf.c file_au.c file_bkf.c file_bld.c file_bmp.c file_bz2.c file_cab.c file_cam.c file_cm.c file_crw.c file_ctg.c file_cwk.c file_dat.c file_dbf.c file_dim.c file_dir.c file_djv.c file_doc.c file_dpx.c file_dsc.c file_dss.c file_dta.c file_dv.c file_dwg.c file_elf.c file_evt.c file_exe.c pe.h file_ext.c file_fcp.c file_fh10.c file_fh5.c file_flac.c file_flv.c file_fs.c file_gif.c file_gz.c file_imb.c file_indd.c file_dump.c file_itu.c file_jpg.c file_jpg.h file_kdb.c file_lnk.c file_max.c file_mb.c file_mdb.c file_mdf.c file_mid.c file_mkv.c file_mov.c file_mp3.c file_mpg.c file_mrw.c file_mus.c file_mysql.c file_njx.c file_ogg.c file_one.c file_orf.c file_pap.c file_pct.c file_pcx.c file_pdf.c file_png.c file_prc.c file_ps.c file_psd.c file_pst.c file_ptb.c file_qbb.c file_qdf.c file_qxd.c file_ra.c file_raf.c file_rar.c file_raw.c file_rdc.c file_reg.c file_res.c file_riff.c file_rm.c file_rns.c file_rpm.c file_sit.c file_skp.c file_spe.c file_spss.c file_stu.c file_swf.c file_tar.c file_tar.h file_tib.c file_tiff.c file_txt.c file_vmdk.c file_wpd.c file_wmf.c file_x3f.c file_xcf.c file_xm.c file_xsv.c file_zip.c memmem.h geometry.c list.c list.h ole.h ntfs_dir.c ntfs_dir.h ntfsp.c ntfsp.h ntfs_inc.h sessionp.c sessionp.h $(base_C) $(base_H) $(fs_C) $(fs_H) $(ICON_PHOTOREC)
|
||||
photorec_SOURCES = photorec.c photorec.h phrecn.c phrecn.h dir.c dir.h ext2p.c ext2p.h ext2_dir.c ext2_dir.h ext2_inc.h fat_dir.c fat_dir.h fatp.c fatp.h filegen.c filegen.h file_7z.c file_a.c file_ab.c file_ace.c file_aif.c file_all.c file_asf.c file_au.c file_bkf.c file_bld.c file_bmp.c file_bz2.c file_cab.c file_cam.c file_cm.c file_crw.c file_ctg.c file_cwk.c file_dat.c file_dbf.c file_dim.c file_dir.c file_djv.c file_doc.c file_dpx.c file_dsc.c file_dss.c file_dta.c file_dv.c file_dwg.c file_elf.c file_emf.c file_evt.c file_exe.c pe.h file_ext.c file_fcp.c file_fh10.c file_fh5.c file_flac.c file_flv.c file_fs.c file_gif.c file_gz.c file_imb.c file_indd.c file_dump.c file_itu.c file_jpg.c file_jpg.h file_kdb.c file_lnk.c file_max.c file_mb.c file_mdb.c file_mdf.c file_mid.c file_mkv.c file_mov.c file_mp3.c file_mpg.c file_mrw.c file_mus.c file_mysql.c file_njx.c file_ogg.c file_one.c file_orf.c file_pap.c file_pct.c file_pcx.c file_pdf.c file_png.c file_prc.c file_ps.c file_psd.c file_pst.c file_ptb.c file_qbb.c file_qdf.c file_qxd.c file_ra.c file_raf.c file_rar.c file_raw.c file_rdc.c file_reg.c file_res.c file_riff.c file_rm.c file_rns.c file_rpm.c file_sit.c file_skp.c file_spe.c file_spss.c file_stu.c file_swf.c file_tar.c file_tar.h file_tib.c file_tiff.c file_txt.c file_vmdk.c file_wpd.c file_wmf.c file_x3f.c file_xcf.c file_xm.c file_xsv.c file_zip.c memmem.h geometry.c list.c list.h ole.h ntfs_dir.c ntfs_dir.h ntfsp.c ntfsp.h ntfs_inc.h sessionp.c sessionp.h $(base_C) $(base_H) $(fs_C) $(fs_H) $(ICON_PHOTOREC)
|
||||
|
||||
#diskcp_SOURCES = diskcp.c types.h
|
||||
|
||||
|
|
|
|||
339
src/file_emf.c
Normal file
339
src/file_emf.c
Normal file
|
|
@ -0,0 +1,339 @@
|
|||
/*
|
||||
|
||||
File: file_emf.c
|
||||
|
||||
Copyright (C) 2008 Christophe GRENIER <grenier@cgsecurity.org>
|
||||
|
||||
This software is free software; you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation; either version 2 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU General Public License along
|
||||
with this program; if not, write the Free Software Foundation, Inc., 51
|
||||
Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
||||
|
||||
*/
|
||||
#ifdef HAVE_CONFIG_H
|
||||
#include <config.h>
|
||||
#endif
|
||||
#ifdef HAVE_STRING_H
|
||||
#include <string.h>
|
||||
#endif
|
||||
#include <stdio.h>
|
||||
#include "types.h"
|
||||
#include "filegen.h"
|
||||
#include "log.h"
|
||||
|
||||
static void register_header_check_emf(file_stat_t *file_stat);
|
||||
static int header_check_emf(const unsigned char *buffer, const unsigned int buffer_size, const unsigned int safe_header_only, const file_recovery_t *file_recovery, file_recovery_t *file_recovery_new);
|
||||
static int data_check_emf(const unsigned char *buffer, const unsigned int buffer_size, file_recovery_t *file_recovery);
|
||||
|
||||
const file_hint_t file_hint_emf= {
|
||||
.extension="emf",
|
||||
.description="Windows Enhanced MetaFile",
|
||||
.min_header_distance=0,
|
||||
.max_filesize=PHOTOREC_MAX_FILE_SIZE,
|
||||
.recover=1,
|
||||
.register_header_check=®ister_header_check_emf
|
||||
};
|
||||
|
||||
static const unsigned char emf_header[4]= { 0x01, 0x00, 0x00, 0x00};
|
||||
static const unsigned char emf_sign[4]= { ' ','E', 'M','F'};
|
||||
|
||||
#define EMR_HEADER 1
|
||||
#define EMR_POLYBEZIER 2
|
||||
#define EMR_POLYGON 3
|
||||
#define EMR_POLYLINE 4
|
||||
#define EMR_POLYBEZIERTO 5
|
||||
#define EMR_POLYLINETO 6
|
||||
#define EMR_POLYPOLYLINE 7
|
||||
#define EMR_POLYPOLYGON 8
|
||||
#define EMR_SETWINDOWEXTEX 9
|
||||
#define EMR_SETWINDOWORGEX 10
|
||||
#define EMR_SETVIEWPORTEXTEX 11
|
||||
#define EMR_SETVIEWPORTORGEX 12
|
||||
#define EMR_SETBRUSHORGEX 13
|
||||
#define EMR_EOF 14
|
||||
#define EMR_SETPIXELV 15
|
||||
#define EMR_SETMAPPERFLAGS 16
|
||||
#define EMR_SETMAPMODE 17
|
||||
#define EMR_SETBKMODE 18
|
||||
#define EMR_SETPOLYFILLMODE 19
|
||||
#define EMR_SETROP2 20
|
||||
#define EMR_SETSTRETCHBLTMODE 21
|
||||
#define EMR_SETTEXTALIGN 22
|
||||
#define EMR_SETCOLORADJUSTMENT 23
|
||||
#define EMR_SETTEXTCOLOR 24
|
||||
#define EMR_SETBKCOLOR 25
|
||||
#define EMR_OFFSETCLIPRGN 26
|
||||
#define EMR_MOVETOEX 27
|
||||
#define EMR_SETMETARGN 28
|
||||
#define EMR_EXCLUDECLIPRECT 29
|
||||
#define EMR_INTERSECTCLIPRECT 30
|
||||
#define EMR_SCALEVIEWPORTEXTEX 31
|
||||
#define EMR_SCALEWINDOWEXTEX 32
|
||||
#define EMR_SAVEDC 33
|
||||
#define EMR_RESTOREDC 34
|
||||
#define EMR_SETWORLDTRANSFORM 35
|
||||
#define EMR_MODIFYWORLDTRANSFORM 36
|
||||
#define EMR_SELECTOBJECT 37
|
||||
#define EMR_CREATEPEN 38
|
||||
#define EMR_CREATEBRUSHINDIRECT 39
|
||||
#define EMR_DELETEOBJECT 40
|
||||
#define EMR_ANGLEARC 41
|
||||
#define EMR_ELLIPSE 42
|
||||
#define EMR_RECTANGLE 43
|
||||
#define EMR_ROUNDRECT 44
|
||||
#define EMR_ARC 45
|
||||
#define EMR_CHORD 46
|
||||
#define EMR_PIE 47
|
||||
#define EMR_SELECTPALETTE 48
|
||||
#define EMR_CREATEPALETTE 49
|
||||
#define EMR_SETPALETTEENTRIES 50
|
||||
#define EMR_RESIZEPALETTE 51
|
||||
#define EMR_REALIZEPALETTE 52
|
||||
#define EMR_EXTFLOODFILL 53
|
||||
#define EMR_LINETO 54
|
||||
#define EMR_ARCTO 55
|
||||
#define EMR_POLYDRAW 56
|
||||
#define EMR_SETARCDIRECTION 57
|
||||
#define EMR_SETMITERLIMIT 58
|
||||
#define EMR_BEGINPATH 59
|
||||
#define EMR_ENDPATH 60
|
||||
#define EMR_CLOSEFIGURE 61
|
||||
#define EMR_FILLPATH 62
|
||||
#define EMR_STROKEANDFILLPATH 63
|
||||
#define EMR_STROKEPATH 64
|
||||
#define EMR_FLATTENPATH 65
|
||||
#define EMR_WIDENPATH 66
|
||||
#define EMR_SELECTCLIPPATH 67
|
||||
#define EMR_ABORTPATH 68
|
||||
#define EMR_GDICOMMENT 70
|
||||
#define EMR_FILLRGN 71
|
||||
#define EMR_FRAMERGN 72
|
||||
#define EMR_INVERTRGN 73
|
||||
#define EMR_PAINTRGN 74
|
||||
#define EMR_EXTSELECTCLIPRGN 75
|
||||
#define EMR_BITBLT 76
|
||||
#define EMR_STRETCHBLT 77
|
||||
#define EMR_MASKBLT 78
|
||||
#define EMR_PLGBLT 79
|
||||
#define EMR_SETDIBITSTODEVICE 80
|
||||
#define EMR_STRETCHDIBITS 81
|
||||
#define EMR_EXTCREATEFONTINDIRECTW 82
|
||||
#define EMR_EXTTEXTOUTA 83
|
||||
#define EMR_EXTTEXTOUTW 84
|
||||
#define EMR_POLYBEZIER16 85
|
||||
#define EMR_POLYGON16 86
|
||||
#define EMR_POLYLINE16 87
|
||||
#define EMR_POLYBEZIERTO16 88
|
||||
#define EMR_POLYLINETO16 89
|
||||
#define EMR_POLYPOLYLINE16 90
|
||||
#define EMR_POLYPOLYGON16 91
|
||||
#define EMR_POLYDRAW16 92
|
||||
#define EMR_CREATEMONOBRUSH 93
|
||||
#define EMR_CREATEDIBPATTERNBRUSHPT 94
|
||||
#define EMR_EXTCREATEPEN 95
|
||||
#define EMR_POLYTEXTOUTA 96
|
||||
#define EMR_POLYTEXTOUTW 97
|
||||
#define EMR_SETICMMODE 98
|
||||
#define EMR_CREATECOLORSPACE 99
|
||||
#define EMR_SETCOLORSPACE 100
|
||||
#define EMR_DELETECOLORSPACE 101
|
||||
#define EMR_GLSRECORD 102
|
||||
#define EMR_GLSBOUNDEDRECORD 103
|
||||
#define EMR_PIXELFORMAT 104
|
||||
#define EMR_DRAWESCAPE 105
|
||||
#define EMR_EXTESCAPE 106
|
||||
#define EMR_STARTDOC 107
|
||||
#define EMR_SMALLTEXTOUT 108
|
||||
#define EMR_FORCEUFIMAPPING 109
|
||||
#define EMR_NAMEDESCAPE 110
|
||||
#define EMR_COLORCORRECTPALETTE 111
|
||||
#define EMR_SETICMPROFILEA 112
|
||||
#define EMR_SETICMPROFILEW 113
|
||||
#define EMR_ALPHABLEND 114
|
||||
#define EMR_SETLAYOUT 115
|
||||
#define EMR_TRANSPARENTBLT 116
|
||||
#define EMR_RESERVED_117 117
|
||||
#define EMR_GRADIENTFILL 118
|
||||
#define EMR_SETLINKEDUFI 119
|
||||
#define EMR_SETTEXTJUSTIFICATION 120
|
||||
#define EMR_COLORMATCHTOTARGETW 121
|
||||
#define EMR_CREATECOLORSPACEW 122
|
||||
|
||||
static void register_header_check_emf(file_stat_t *file_stat)
|
||||
{
|
||||
register_header_check(0x28, emf_sign,sizeof(emf_sign), &header_check_emf, file_stat);
|
||||
}
|
||||
|
||||
static int header_check_emf(const unsigned char *buffer, const unsigned int buffer_size, const unsigned int safe_header_only, const file_recovery_t *file_recovery, file_recovery_t *file_recovery_new)
|
||||
{
|
||||
if(memcmp(buffer,emf_header,sizeof(emf_header))==0 &&
|
||||
memcmp(&buffer[0x28],emf_sign,sizeof(emf_sign))==0)
|
||||
{
|
||||
unsigned int atom_size;
|
||||
reset_file_recovery(file_recovery_new);
|
||||
file_recovery_new->extension=file_hint_emf.extension;
|
||||
file_recovery_new->data_check=data_check_emf;
|
||||
file_recovery_new->file_check=&file_check_size;
|
||||
atom_size=buffer[4]+(buffer[5]<<8)+(buffer[6]<<16)+(buffer[7]<<24);
|
||||
file_recovery_new->calculated_file_size=atom_size;
|
||||
return 1;
|
||||
}
|
||||
return 0;
|
||||
}
|
||||
|
||||
static int data_check_emf(const unsigned char *buffer, const unsigned int buffer_size, file_recovery_t *file_recovery)
|
||||
{
|
||||
while(file_recovery->calculated_file_size + 8 < file_recovery->file_size + buffer_size/2)
|
||||
{
|
||||
unsigned int atom_size;
|
||||
unsigned int itype;
|
||||
unsigned int i;
|
||||
i=file_recovery->calculated_file_size - file_recovery->file_size + buffer_size/2;
|
||||
itype=buffer[i]+(buffer[i+1]<<8)+(buffer[i+2]<<16)+(buffer[i+3]<<24);
|
||||
atom_size=buffer[i+4]+(buffer[i+5]<<8)+(buffer[i+6]<<16)+(buffer[i+7]<<24);
|
||||
#ifdef DEBUG_EMF
|
||||
log_trace("0x%llx ", (long long unsigned)file_recovery->calculated_file_size);
|
||||
switch(itype)
|
||||
{
|
||||
case EMR_HEADER: log_trace("EMR_HEADER"); break;
|
||||
case EMR_POLYBEZIER: log_trace("EMR_POLYBEZIER"); break;
|
||||
case EMR_POLYGON: log_trace("EMR_POLYGON"); break;
|
||||
case EMR_POLYLINE: log_trace("EMR_POLYLINE"); break;
|
||||
case EMR_POLYBEZIERTO: log_trace("EMR_POLYBEZIERTO"); break;
|
||||
case EMR_POLYLINETO: log_trace("EMR_POLYLINETO"); break;
|
||||
case EMR_POLYPOLYLINE: log_trace("EMR_POLYPOLYLINE"); break;
|
||||
case EMR_POLYPOLYGON: log_trace("EMR_POLYPOLYGON"); break;
|
||||
case EMR_SETWINDOWEXTEX: log_trace("EMR_SETWINDOWEXTEX"); break;
|
||||
case EMR_SETWINDOWORGEX: log_trace("EMR_SETWINDOWORGEX"); break;
|
||||
case EMR_SETVIEWPORTEXTEX: log_trace("EMR_SETVIEWPORTEXTEX"); break;
|
||||
case EMR_SETVIEWPORTORGEX: log_trace("EMR_SETVIEWPORTORGEX"); break;
|
||||
case EMR_SETBRUSHORGEX: log_trace("EMR_SETBRUSHORGEX"); break;
|
||||
case EMR_EOF: log_trace("EMR_EOF"); break;
|
||||
case EMR_SETPIXELV: log_trace("EMR_SETPIXELV"); break;
|
||||
case EMR_SETMAPPERFLAGS: log_trace("EMR_SETMAPPERFLAGS"); break;
|
||||
case EMR_SETMAPMODE: log_trace("EMR_SETMAPMODE"); break;
|
||||
case EMR_SETBKMODE: log_trace("EMR_SETBKMODE"); break;
|
||||
case EMR_SETPOLYFILLMODE: log_trace("EMR_SETPOLYFILLMODE"); break;
|
||||
case EMR_SETROP2: log_trace("EMR_SETROP2"); break;
|
||||
case EMR_SETSTRETCHBLTMODE: log_trace("EMR_SETSTRETCHBLTMODE"); break;
|
||||
case EMR_SETTEXTALIGN: log_trace("EMR_SETTEXTALIGN"); break;
|
||||
case EMR_SETCOLORADJUSTMENT: log_trace("EMR_SETCOLORADJUSTMENT"); break;
|
||||
case EMR_SETTEXTCOLOR: log_trace("EMR_SETTEXTCOLOR"); break;
|
||||
case EMR_SETBKCOLOR: log_trace("EMR_SETBKCOLOR"); break;
|
||||
case EMR_OFFSETCLIPRGN: log_trace("EMR_OFFSETCLIPRGN"); break;
|
||||
case EMR_MOVETOEX: log_trace("EMR_MOVETOEX"); break;
|
||||
case EMR_SETMETARGN: log_trace("EMR_SETMETARGN"); break;
|
||||
case EMR_EXCLUDECLIPRECT: log_trace("EMR_EXCLUDECLIPRECT"); break;
|
||||
case EMR_INTERSECTCLIPRECT: log_trace("EMR_INTERSECTCLIPRECT"); break;
|
||||
case EMR_SCALEVIEWPORTEXTEX: log_trace("EMR_SCALEVIEWPORTEXTEX"); break;
|
||||
case EMR_SCALEWINDOWEXTEX: log_trace("EMR_SCALEWINDOWEXTEX"); break;
|
||||
case EMR_SAVEDC: log_trace("EMR_SAVEDC"); break;
|
||||
case EMR_RESTOREDC: log_trace("EMR_RESTOREDC"); break;
|
||||
case EMR_SETWORLDTRANSFORM: log_trace("EMR_SETWORLDTRANSFORM"); break;
|
||||
case EMR_MODIFYWORLDTRANSFORM: log_trace("EMR_MODIFYWORLDTRANSFORM"); break;
|
||||
case EMR_SELECTOBJECT: log_trace("EMR_SELECTOBJECT"); break;
|
||||
case EMR_CREATEPEN: log_trace("EMR_CREATEPEN"); break;
|
||||
case EMR_CREATEBRUSHINDIRECT: log_trace("EMR_CREATEBRUSHINDIRECT"); break;
|
||||
case EMR_DELETEOBJECT: log_trace("EMR_DELETEOBJECT"); break;
|
||||
case EMR_ANGLEARC: log_trace("EMR_ANGLEARC"); break;
|
||||
case EMR_ELLIPSE: log_trace("EMR_ELLIPSE"); break;
|
||||
case EMR_RECTANGLE: log_trace("EMR_RECTANGLE"); break;
|
||||
case EMR_ROUNDRECT: log_trace("EMR_ROUNDRECT"); break;
|
||||
case EMR_ARC: log_trace("EMR_ARC"); break;
|
||||
case EMR_CHORD: log_trace("EMR_CHORD"); break;
|
||||
case EMR_PIE: log_trace("EMR_PIE"); break;
|
||||
case EMR_SELECTPALETTE: log_trace("EMR_SELECTPALETTE"); break;
|
||||
case EMR_CREATEPALETTE: log_trace("EMR_CREATEPALETTE"); break;
|
||||
case EMR_SETPALETTEENTRIES: log_trace("EMR_SETPALETTEENTRIES"); break;
|
||||
case EMR_RESIZEPALETTE: log_trace("EMR_RESIZEPALETTE"); break;
|
||||
case EMR_REALIZEPALETTE: log_trace("EMR_REALIZEPALETTE"); break;
|
||||
case EMR_EXTFLOODFILL: log_trace("EMR_EXTFLOODFILL"); break;
|
||||
case EMR_LINETO: log_trace("EMR_LINETO"); break;
|
||||
case EMR_ARCTO: log_trace("EMR_ARCTO"); break;
|
||||
case EMR_POLYDRAW: log_trace("EMR_POLYDRAW"); break;
|
||||
case EMR_SETARCDIRECTION: log_trace("EMR_SETARCDIRECTION"); break;
|
||||
case EMR_SETMITERLIMIT: log_trace("EMR_SETMITERLIMIT"); break;
|
||||
case EMR_BEGINPATH: log_trace("EMR_BEGINPATH"); break;
|
||||
case EMR_ENDPATH: log_trace("EMR_ENDPATH"); break;
|
||||
case EMR_CLOSEFIGURE: log_trace("EMR_CLOSEFIGURE"); break;
|
||||
case EMR_FILLPATH: log_trace("EMR_FILLPATH"); break;
|
||||
case EMR_STROKEANDFILLPATH: log_trace("EMR_STROKEANDFILLPATH"); break;
|
||||
case EMR_STROKEPATH: log_trace("EMR_STROKEPATH"); break;
|
||||
case EMR_FLATTENPATH: log_trace("EMR_FLATTENPATH"); break;
|
||||
case EMR_WIDENPATH: log_trace("EMR_WIDENPATH"); break;
|
||||
case EMR_SELECTCLIPPATH: log_trace("EMR_SELECTCLIPPATH"); break;
|
||||
case EMR_ABORTPATH: log_trace("EMR_ABORTPATH"); break;
|
||||
case EMR_GDICOMMENT: log_trace("EMR_GDICOMMENT"); break;
|
||||
case EMR_FILLRGN: log_trace("EMR_FILLRGN"); break;
|
||||
case EMR_FRAMERGN: log_trace("EMR_FRAMERGN"); break;
|
||||
case EMR_INVERTRGN: log_trace("EMR_INVERTRGN"); break;
|
||||
case EMR_PAINTRGN: log_trace("EMR_PAINTRGN"); break;
|
||||
case EMR_EXTSELECTCLIPRGN: log_trace("EMR_EXTSELECTCLIPRGN"); break;
|
||||
case EMR_BITBLT: log_trace("EMR_BITBLT"); break;
|
||||
case EMR_STRETCHBLT: log_trace("EMR_STRETCHBLT"); break;
|
||||
case EMR_MASKBLT: log_trace("EMR_MASKBLT"); break;
|
||||
case EMR_PLGBLT: log_trace("EMR_PLGBLT"); break;
|
||||
case EMR_SETDIBITSTODEVICE: log_trace("EMR_SETDIBITSTODEVICE"); break;
|
||||
case EMR_STRETCHDIBITS: log_trace("EMR_STRETCHDIBITS"); break;
|
||||
case EMR_EXTCREATEFONTINDIRECTW: log_trace("EMR_EXTCREATEFONTINDIRECTW"); break;
|
||||
case EMR_EXTTEXTOUTA: log_trace("EMR_EXTTEXTOUTA"); break;
|
||||
case EMR_EXTTEXTOUTW: log_trace("EMR_EXTTEXTOUTW"); break;
|
||||
case EMR_POLYBEZIER16: log_trace("EMR_POLYBEZIER16"); break;
|
||||
case EMR_POLYGON16: log_trace("EMR_POLYGON16"); break;
|
||||
case EMR_POLYLINE16: log_trace("EMR_POLYLINE16"); break;
|
||||
case EMR_POLYBEZIERTO16: log_trace("EMR_POLYBEZIERTO16"); break;
|
||||
case EMR_POLYLINETO16: log_trace("EMR_POLYLINETO16"); break;
|
||||
case EMR_POLYPOLYLINE16: log_trace("EMR_POLYPOLYLINE16"); break;
|
||||
case EMR_POLYPOLYGON16: log_trace("EMR_POLYPOLYGON16"); break;
|
||||
case EMR_POLYDRAW16: log_trace("EMR_POLYDRAW16"); break;
|
||||
case EMR_CREATEMONOBRUSH: log_trace("EMR_CREATEMONOBRUSH"); break;
|
||||
case EMR_CREATEDIBPATTERNBRUSHPT: log_trace("EMR_CREATEDIBPATTERNBRUSHPT"); break;
|
||||
case EMR_EXTCREATEPEN: log_trace("EMR_EXTCREATEPEN"); break;
|
||||
case EMR_POLYTEXTOUTA: log_trace("EMR_POLYTEXTOUTA"); break;
|
||||
case EMR_POLYTEXTOUTW: log_trace("EMR_POLYTEXTOUTW"); break;
|
||||
case EMR_SETICMMODE: log_trace("EMR_SETICMMODE"); break;
|
||||
case EMR_CREATECOLORSPACE: log_trace("EMR_CREATECOLORSPACE"); break;
|
||||
case EMR_SETCOLORSPACE: log_trace("EMR_SETCOLORSPACE"); break;
|
||||
case EMR_DELETECOLORSPACE: log_trace("EMR_DELETECOLORSPACE"); break;
|
||||
case EMR_GLSRECORD: log_trace("EMR_GLSRECORD"); break;
|
||||
case EMR_GLSBOUNDEDRECORD: log_trace("EMR_GLSBOUNDEDRECORD"); break;
|
||||
case EMR_PIXELFORMAT: log_trace("EMR_PIXELFORMAT"); break;
|
||||
case EMR_DRAWESCAPE : log_trace("EMR_DRAWESCAPE "); break;
|
||||
case EMR_EXTESCAPE: log_trace("EMR_EXTESCAPE"); break;
|
||||
case EMR_STARTDOC: log_trace("EMR_STARTDOC"); break;
|
||||
case EMR_SMALLTEXTOUT: log_trace("EMR_SMALLTEXTOUT"); break;
|
||||
case EMR_FORCEUFIMAPPING: log_trace("EMR_FORCEUFIMAPPING"); break;
|
||||
case EMR_NAMEDESCAPE: log_trace("EMR_NAMEDESCAPE"); break;
|
||||
case EMR_COLORCORRECTPALETTE: log_trace("EMR_COLORCORRECTPALETTE"); break;
|
||||
case EMR_SETICMPROFILEA: log_trace("EMR_SETICMPROFILEA"); break;
|
||||
case EMR_SETICMPROFILEW: log_trace("EMR_SETICMPROFILEW"); break;
|
||||
case EMR_ALPHABLEND: log_trace("EMR_ALPHABLEND"); break;
|
||||
case EMR_SETLAYOUT: log_trace("EMR_SETLAYOUT"); break;
|
||||
case EMR_TRANSPARENTBLT: log_trace("EMR_TRANSPARENTBLT"); break;
|
||||
case EMR_RESERVED_117: log_trace("EMR_RESERVED_117"); break;
|
||||
case EMR_GRADIENTFILL: log_trace("EMR_GRADIENTFILL"); break;
|
||||
case EMR_SETLINKEDUFI: log_trace("EMR_SETLINKEDUFI"); break;
|
||||
case EMR_SETTEXTJUSTIFICATION: log_trace("EMR_SETTEXTJUSTIFICATION"); break;
|
||||
case EMR_COLORMATCHTOTARGETW: log_trace("EMR_COLORMATCHTOTARGETW"); break;
|
||||
case EMR_CREATECOLORSPACEW: log_trace("EMR_CREATECOLORSPACEW"); break;
|
||||
}
|
||||
log_trace(" (%08x) \t%08x\n", itype, atom_size);
|
||||
#endif
|
||||
if(atom_size<8 || atom_size%4!=0 || atom_size>1024*1024)
|
||||
return 0;
|
||||
file_recovery->calculated_file_size+=(uint64_t)atom_size;
|
||||
if(itype==EMR_EOF)
|
||||
return 2;
|
||||
}
|
||||
return 1;
|
||||
}
|
||||
|
||||
|
|
@ -123,6 +123,7 @@ extern const file_hint_t file_hint_dump;
|
|||
extern const file_hint_t file_hint_dv;
|
||||
extern const file_hint_t file_hint_dwg;
|
||||
extern const file_hint_t file_hint_elf;
|
||||
extern const file_hint_t file_hint_emf;
|
||||
extern const file_hint_t file_hint_evt;
|
||||
extern const file_hint_t file_hint_exe;
|
||||
extern const file_hint_t file_hint_ext2_sb;
|
||||
|
|
@ -800,6 +801,7 @@ int main( int argc, char **argv )
|
|||
{ .enable=1, .file_hint=&file_hint_dv },
|
||||
{ .enable=1, .file_hint=&file_hint_dwg },
|
||||
{ .enable=1, .file_hint=&file_hint_elf },
|
||||
{ .enable=1, .file_hint=&file_hint_emf },
|
||||
{ .enable=1, .file_hint=&file_hint_evt },
|
||||
{ .enable=1, .file_hint=&file_hint_exe },
|
||||
{ .enable=1, .file_hint=&file_hint_ext2_sb },
|
||||
|
|
|
|||
Loading…
Reference in a new issue