2012-08-06 21:21:14 +00:00
|
|
|
using System;
|
|
|
|
|
using System.Text;
|
|
|
|
|
using FileSystemIDandChk;
|
|
|
|
|
|
|
|
|
|
namespace FileSystemIDandChk.Plugins
|
|
|
|
|
{
|
2014-04-14 02:29:13 +00:00
|
|
|
class BFS : Plugin
|
|
|
|
|
{
|
|
|
|
|
const UInt32 BFS_MAGIC = 0x1BADFACE;
|
2012-08-06 21:21:14 +00:00
|
|
|
|
2014-04-14 02:29:13 +00:00
|
|
|
public BFS(PluginBase Core)
|
2012-08-06 21:21:14 +00:00
|
|
|
{
|
2014-04-14 02:29:13 +00:00
|
|
|
Name = "UNIX Boot filesystem";
|
|
|
|
|
PluginUUID = new Guid("1E6E0DA6-F7E4-494C-80C6-CB5929E96155");
|
2012-08-06 21:21:14 +00:00
|
|
|
}
|
2014-04-14 02:29:13 +00:00
|
|
|
|
2014-04-14 01:14:20 +00:00
|
|
|
public override bool Identify(ImagePlugins.ImagePlugin imagePlugin, ulong partitionOffset)
|
2014-04-14 02:29:13 +00:00
|
|
|
{
|
|
|
|
|
UInt32 magic;
|
2012-08-06 21:21:14 +00:00
|
|
|
|
2014-04-14 02:29:13 +00:00
|
|
|
magic = BitConverter.ToUInt32(imagePlugin.ReadSector(0 + partitionOffset), 0);
|
|
|
|
|
|
|
|
|
|
return magic == BFS_MAGIC;
|
|
|
|
|
}
|
2012-08-06 21:21:14 +00:00
|
|
|
|
2014-04-14 02:29:13 +00:00
|
|
|
public override void GetInformation(ImagePlugins.ImagePlugin imagePlugin, ulong partitionOffset, out string information)
|
|
|
|
|
{
|
|
|
|
|
information = "";
|
2012-08-06 21:21:14 +00:00
|
|
|
|
2014-04-14 02:29:13 +00:00
|
|
|
StringBuilder sb = new StringBuilder();
|
|
|
|
|
byte[] bfs_sb_sector = imagePlugin.ReadSector(0 + partitionOffset);
|
|
|
|
|
byte[] sb_strings = new byte[6];
|
2012-08-06 21:21:14 +00:00
|
|
|
|
2014-04-14 02:29:13 +00:00
|
|
|
BFSSuperBlock bfs_sb = new BFSSuperBlock();
|
2012-08-06 21:21:14 +00:00
|
|
|
|
2014-04-14 02:29:13 +00:00
|
|
|
bfs_sb.s_magic = BitConverter.ToUInt32(bfs_sb_sector, 0x00);
|
|
|
|
|
bfs_sb.s_start = BitConverter.ToUInt32(bfs_sb_sector, 0x04);
|
|
|
|
|
bfs_sb.s_end = BitConverter.ToUInt32(bfs_sb_sector, 0x08);
|
|
|
|
|
bfs_sb.s_from = BitConverter.ToUInt32(bfs_sb_sector, 0x0C);
|
|
|
|
|
bfs_sb.s_to = BitConverter.ToUInt32(bfs_sb_sector, 0x10);
|
|
|
|
|
bfs_sb.s_bfrom = BitConverter.ToInt32(bfs_sb_sector, 0x14);
|
|
|
|
|
bfs_sb.s_bto = BitConverter.ToInt32(bfs_sb_sector, 0x18);
|
|
|
|
|
Array.Copy(bfs_sb_sector, 0x1C, sb_strings, 0, 6);
|
|
|
|
|
bfs_sb.s_fsname = StringHandlers.CToString(sb_strings);
|
|
|
|
|
Array.Copy(bfs_sb_sector, 0x22, sb_strings, 0, 6);
|
|
|
|
|
bfs_sb.s_volume = StringHandlers.CToString(sb_strings);
|
2012-08-06 21:21:14 +00:00
|
|
|
|
2014-04-14 02:29:13 +00:00
|
|
|
if (MainClass.isDebug)
|
|
|
|
|
{
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_magic: 0x{0:X8}", bfs_sb.s_magic);
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_start: 0x{0:X8}", bfs_sb.s_start);
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_end: 0x{0:X8}", bfs_sb.s_end);
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_from: 0x{0:X8}", bfs_sb.s_from);
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_to: 0x{0:X8}", bfs_sb.s_to);
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_bfrom: 0x{0:X8}", bfs_sb.s_bfrom);
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_bto: 0x{0:X8}", bfs_sb.s_bto);
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_fsname: 0x{0}", bfs_sb.s_fsname);
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_volume: 0x{0}", bfs_sb.s_volume);
|
|
|
|
|
}
|
2012-08-06 21:21:14 +00:00
|
|
|
|
2014-04-14 02:29:13 +00:00
|
|
|
sb.AppendLine("UNIX Boot filesystem");
|
|
|
|
|
sb.AppendFormat("Volume goes from byte {0} to byte {1}, for {2} bytes", bfs_sb.s_start, bfs_sb.s_end, bfs_sb.s_end - bfs_sb.s_start).AppendLine();
|
|
|
|
|
sb.AppendFormat("Filesystem name: {0}", bfs_sb.s_fsname).AppendLine();
|
|
|
|
|
sb.AppendFormat("Volume name: {0}", bfs_sb.s_volume).AppendLine();
|
2012-08-06 21:21:14 +00:00
|
|
|
|
2014-04-14 02:29:13 +00:00
|
|
|
information = sb.ToString();
|
|
|
|
|
}
|
2012-08-06 21:21:14 +00:00
|
|
|
|
2014-04-14 02:29:13 +00:00
|
|
|
struct BFSSuperBlock
|
|
|
|
|
{
|
|
|
|
|
public UInt32 s_magic;
|
|
|
|
|
// 0x00, 0x1BADFACE
|
|
|
|
|
public UInt32 s_start;
|
|
|
|
|
// 0x04, start in bytes of volume
|
|
|
|
|
public UInt32 s_end;
|
|
|
|
|
// 0x08, end in bytes of volume
|
|
|
|
|
public UInt32 s_from;
|
|
|
|
|
// 0x0C, unknown :p
|
|
|
|
|
public UInt32 s_to;
|
|
|
|
|
// 0x10, unknown :p
|
|
|
|
|
public Int32 s_bfrom;
|
|
|
|
|
// 0x14, unknown :p
|
|
|
|
|
public Int32 s_bto;
|
|
|
|
|
// 0x18, unknown :p
|
|
|
|
|
public string s_fsname;
|
|
|
|
|
// 0x1C, 6 bytes, filesystem name
|
|
|
|
|
public string s_volume;
|
|
|
|
|
// 0x22, 6 bytes, volume name
|
|
|
|
|
}
|
|
|
|
|
}
|
2014-04-14 01:14:20 +00:00
|
|
|
}
|