Pictures inside bootloader

From t-hack.com - Hack X300T / X301T

Jump to: navigation, search

The dump of the bootloader contains 4 different pictures. They are packed with deflate and the following program is able to find the pictures and inflate them.

python2.5 /Users/xxx/Desktop/zlib-decrypt.py
License: GPLv2
Author:  pcgeil
search inside a file for zlib headers and extract them

Version: 0.1beta - 10-12-2008

Usage:
  <argv1> source file
  <argv2> dest file
  [<argv3> offset dezimal]
  [<argv4> end dezimal]

The following output is with the bootloader v1051.

python2.5 /Users/xxx/Desktop/zlib-decrypt.py  /Users/xxx/Desktop/BOOTLOADER_20081128_204145_1 /Users/xxx/Desktop/test.txt 430000 440000

License: GPLv2
Author:  pcgeil
search inside a file for zlib headers and extract them

Version: 0.1beta - 10-12-2008

Using:
  Source: /Users/xxx/Desktop/BOOTLOADER_20081128_204145_1
  Dest: /Users/xxx/Desktop/test.txt
     
Length is:  0x100000
0x69bac 
Found at address:  0x69bac
0x6a05c 
Found at address:  0x6a05c
0x6a3f4 
Found at address:  0x6a3f4
0x6a6d4 
Found at address:  0x6a6d4
0x6b6bf Now extract the files which are found
[+]Done writing to /Users/xxx/Desktop/test.txt-0
[+]Done writing to /Users/xxx/Desktop/test.txt-1
[+]Done writing to /Users/xxx/Desktop/test.txt-2
[+]Done writing to /Users/xxx/Desktop/test.txt-3


Download Python-Script: [1]


Bootloader V1039:


0x00067bac . 1192 --> 307396

0x0006805c . 909 --> 307400

0x000683f4 . 727 --> 307376

0x000686d4 .. 4064 --> 307826


Bootloader V1053:


0x0006bbac . 1192 --> 307396

0x0006c05c . 909 --> 307400

0x0006c3f4 . 727 --> 307376

0x0006c6d4 .. 4064 --> 307826


Bootloader V1527 (BT VISION):


Length is: 0x100000


Found at address: 0x67bac


Found at address: 0x70150


Found at address: 0x77620

0xfffff Now extract the files which are found

[+]Done writing to test.txt-0

[+]Done writing to test.txt-1

[+]Done writing to test.txt-2


All 300k (307772 Bytes)

Personal tools