wince-extractor's Introduction

WinCE Extractor

Project Not Actively Maintained

This project was created a while ago and is not currently being maintained. Maintainers welcome.

Description

WinCE Extractor is a Python3 program that can extract and decompress execute-in-place (XIP) files from a Windows Compact Embedded ROM image. WinCE Extractor is cross-compatible with Unix and Windows.

Installation

WinCE Extractor only requires Python3.

# Install Python3 and pip3

# Clone the repo
$ git clone https://github.com/KodaSec/wince-extractor.git

# Change the working directory to wince-extractor
$ cd wince-extractor

Usage

$ python3 winceextractor.py -h
usage: winceextractor.py [-h] [-d dirpath] [-o offset] image_file

positional arguments:
  image_file  ROM image to extract

optional arguments:
  -h, --help  show this help message and exit
  -d dirpath  save found files/modules to this path
  -o offset   offset of the image file

To extract files from a WinCE ROM into a directory:

python3 winceextractor.py -d <output_dir> <image_file>

Special Thanks

Willem Hengeveld <[email protected]>

Collin Moon <[email protected]>

Frank Tursi <[email protected]>

wince-extractor's People

Contributors

Stargazers

Watchers

wince-extractor's Issues

Header isn't read

I get this with every winCE file that I test.
I tested against these old files.

https://forum.xda-developers.com/t/nk-bin-and-dumprom.656086/?__cf_chl_jschl_tk__=D2uAXTkdfKd1Y3SVgHH3ka3tCpQxGJyAN1o60NbeGBo-1636038001-0-gaNycGzNChE

File "/home/user/works/wince-extractor/winceextractor.py", line 823, in <module>
   with WinCEExtractor(f, image_offset) as extractor:
 File "/home/user/works/wince-extractor/winceextractor.py", line 498, in __enter__
   self.analyze()
 File "/home/user/works/wince-extractor/winceextractor.py", line 519, in analyze
   romhdr_s = load_from_offset(self.data, self.romhdr_offset, RomHdr)
 File "/home/user/works/wince-extractor/winceextractor.py", line 431, in load_from_offset
   return structure.from_buffer_copy(data[offset:offset + ctypes.sizeof(structure)])
ValueError: Buffer size too small (0 instead of at least 84 bytes)

Recommend Projects