diff options
| -rw-r--r-- | doc/dumping | 9 | ||||
| -rw-r--r-- | src/dump.c | 3 |
2 files changed, 8 insertions, 4 deletions
diff --git a/doc/dumping b/doc/dumping index 0017a33..3f22a82 100644 --- a/doc/dumping +++ b/doc/dumping @@ -25,8 +25,8 @@ pieces at certains offsets of the device internal memory. <b>Technical details:</b> - * The internal flash memory is exposed to the system as MTD devices. So it's - * possible to dump the individual sections of a flashed firmware. + * The internal flash memory is exposed to the system as MTD devices. + * Is possible to dump the individual sections of a flashed firmware. * * READ src/dump.c for detailed information. @@ -40,6 +40,9 @@ pieces at certains offsets of the device internal memory. mtd2 - starts with NOLO img\x5c\x13 and \x00 padding 0x00800 - zImage - mtd3 - rootfs.jffs2 (20M) aka 0x200000 vs 0x3900000 + > NOLO is a four byte marker, next four bytes + > can vary since it is kernel image size + + mtd3 - initfs.jffs2 (2M) aka 0x200000 vs 0x3900000 mtd4 - rootfs.jffs2 (a fucking copy of the above rootfs?) @@ -134,7 +134,8 @@ int reverse_extract_pieces(char *dir) rf_strip("xloader.bin"); rf_strip("secondary.bin"); rf_strip("zImage"); - rf_strip("initfs.jffs2"); +// rf_strip("initfs.jffs2"); // do not strip initfs, is 2MB long + //and can be useful for data recovery printf("Identifying extracted files...\n"); printf("%s: xloader\n", fpid_file("xloader.bin")); printf("%s: secondary.bin\n", fpid_file("secondary.bin")); |