Firmware Structure

Here I will try to explain firmware stucture (in example I using EMTEC Movie Cube Q800 fw)

In package with official fw downloaded from Emtec homepage we can find these files:

arial.ttf
crc32.txt
install.flash.img
install_a
logo_pal.bmp
video_firmware.bin

arial.ttf

Truetype font used probably only in installation process.

crc32.txt

Simple - crc32 control sum for three files:

12f7d278    install.flash.img
129acb84    video_firmware.bin
8974c663    arial.ttf

install.flash.img

File install.flash.img contain 3 parts:

Header
Offset: 0x00
Length: 0x80
No useful information i found in this part (probably here are the offsets and sizes of other parts)

LZMA compressed kernel image which will be burned in /dev/mtdblock/0
Offset: 0x80
Length: variable
At the beginning of this part you can find 0x5D000080 LZMA signature

Squashfs filesystem of ROOT directory
Offset: variable
Length: variable
To find beginning of this part you need to find bytecode "hsqs" (0x68737173) which is little endian squashfs signature

install_a

ELF executable designed to burn firmware into box

logo_pal.bmp

Boot logo. More about changing boot logo you can find here

video_firmware.bin

Unknown for now (for me?)

Question ?

Hi How I unpack install.flash.img
to try build a CustomFirmware
http://minimodding.com/tiki-index.php?page=CustomFirmware
and build img again

Unless otherwise stated, the content of this page is licensed under Creative Commons Attribution-ShareAlike 3.0 License