############ Fritzbox 5530 Fiber = 41652371 bytes ############ Fixed size 128 bytes header 00000000 0d 00 ed fe 43 90 7b 02 ae 09 c2 cd 5b a7 6c b3 |....C.{.....[.l.| 00000010 64 38 fb ed 21 cc a4 e7 b0 94 84 c4 03 33 ac 46 |d8..!........3.F| 00000020 32 74 ff b1 3e 33 3c ad 9a 6d ab 80 30 f0 7c c1 |2t..>3<..m..0.|.| 00000030 d0 2f e7 89 ad 90 bf ad 7a 4d df 15 56 29 2f 7c |./......zM..V)/|| 00000040 73 3e 0d 8d 7f 68 7e 0c d0 0d fe ed 02 7b 90 43 |s>...h~......{.C| 00000050 00 00 00 38 02 7b 8f 34 00 00 00 28 00 00 00 11 |...8.{.4...(....| 00000060 00 00 00 10 00 00 00 00 00 00 01 0f 02 7b 8e fc |.............{..| 00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000080 - 0x00 = FIT signature = '0d 00 ed fe' - 0x04 = BE pointer to EOF - 0x08-0x4C = hopefully no RSA signature - doesn't contain CRC32 or MD5 of 0x50+ or 0x80+ - 0x4C = LE pointer to EOF - 0x50 = always 0x00000038 - 0x54 = LE pointer to todo (description - 0x42?) - 0x58 = always 0x00000028 - 0x5C = always 0x00000011 - 0x60 = always 0x00000010 - 0x64 = always 0x00000000 - 0x68 = 0x0000010f (5530) or 0x0000011f (others) - 0x6c = LE pointer to todo - 0x70-0x80 = always 0x00000000 Variable size hunk structure 00000080 hunk head 1 - type str - body 0 - len 8 - string '' 00000088 hunk head 3 - type 0 - body 15 - len 28 - string 'FIT for HW0257' = info 000000a4 hunk head 3 - type 12 - body 4 - len 16 - word 0x5fa14b75 = timestamp 000000b4 hunk head 3 - type 22 - body 4 - len 16 - word 0x00014521 = avm,gu-version 000000c4 hunk head 1 - type str - body 6 - len 12 - string 'images' 000000d0 hunk head 1 - type str - body 18 - len 24 - string 'prxB_HW0257_kernel' 000000e8 hunk head 3 - type 0 - body 23 - len 36 - string 'Kernel for prxB_HW0257' = info 0000010c hunk head 3 - type 37 - body 1 - len 16 - binary data = avm,variants 0000011c hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 0000012c hunk head 3 - type 65 - body 1191017 - len 1191032 - lzma compressed data = data - CRC32: 0xb4761fdd 00122da4 hunk head 3 - type 70 - body 7 - len 20 - string 'kernel' = type 00122db8 hunk head 3 - type 75 - body 5 - len 20 - string 'mips' = arch 00122dcc hunk head 3 - type 80 - body 6 - len 20 - string 'linux' = os 00122de0 hunk head 3 - type 83 - body 5 - len 20 - string 'lzma' = compression 00122df4 hunk head 3 - type 95 - body 4 - len 16 - word 0x88000000 = load 00122e04 hunk head 3 - type 100 - body 4 - len 16 - word 0x88298f10 = entry 00122e14 hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 00122e20 hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 00122e34 hunk head 3 - type 111 - body 4 - len 16 - word 0xb4761fdd = value - MATCH 00122e44 hunk head 2 - type str[1] - body 12 - len 24 - string 'avm,kallsyms' 00122e5c hunk head 3 - type 117 - body 3 - len 16 - string 'BE' = avm,endianess 00122e6c hunk head 3 - type 131 - body 4 - len 16 - word 0x88000000 = avm,kernel_text_start 00122e7c hunk head 3 - type 153 - body 4 - len 16 - word 0x882c8ec0 00122e8c hunk head 3 - type 163 - body 4 - len 16 - word 0x882e9830 00122e9c hunk head 3 - type 179 - body 4 - len 16 - word 0x882e9b90 00122eac hunk head 3 - type 195 - body 4 - len 16 - word 0x882c8eb0 00122ebc hunk head 3 - type 208 - body 0 - len 12 - empty 00122ec8 hunk head 3 - type 222 - body 4 - len 16 - word 0x882c8ea0 00122ed8 hunk head 3 - type 240 - body 4 - len 16 - word 0x882bcc70 00122ee8 hunk head 2 - type str[2] - body 21 - len 36 - string 'prxB_HW0257_flat_dt_0' 00122f0c hunk head 3 - type 0 - body 30 - len 44 - string 'Device Tree for prxB_HW0257_0' = info 00122f38 hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 00122f48 hunk head 3 - type 65 - body 1092 - len 1104 - lzma compressed data = data - CRC32: 0x3c53ca34 00123398 hunk head 3 - type 70 - body 8 - len 20 - string 'flat_dt' = type 001233ac hunk head 3 - type 75 - body 5 - len 20 - string 'mips' = arch 001233c0 hunk head 3 - type 83 - body 5 - len 20 - string 'lzma' = compression 001233d4 hunk head 3 - type 95 - body 4 - len 16 - word 0x884e2000 = load 001233e4 hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 001233f0 hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 00123404 hunk head 3 - type 111 - body 4 - len 16 - word 0x3c53ca34 = value - MATCH 00123414 hunk head 2 - type str[2] - body 19 - len 32 - string 'prxB_HW0257_ramdisk' 00123434 hunk head 3 - type 0 - body 24 - len 36 - string 'Ramdisk for prxB_HW0257' = info 00123458 hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 00123468 hunk head 3 - type 65 - body 1700705 - len 1700720 - gzip compressed data = data - CRC32: 0x0ef19ad8 002c27d8 hunk head 3 - type 70 - body 8 - len 20 - string 'ramdisk' = type 002c27ec hunk head 3 - type 75 - body 5 - len 20 - string 'mips' = arch 002c2800 hunk head 3 - type 80 - body 6 - len 20 - string 'linux' = os 002c2814 hunk head 3 - type 83 - body 5 - len 20 - string 'none' = compression 002c2828 hunk head 3 - type 95 - body 4 - len 16 - word 0x8b000000 = load 002c2838 hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 002c2844 hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 002c2858 hunk head 3 - type 111 - body 4 - len 16 - word 0x0ef19ad8 = value - MATCH 002c2868 hunk head 2 - type str[2] - body 17 - len 32 - string 'prxI_HW257_kernel' 002c2888 hunk head 3 - type 0 - body 22 - len 36 - string 'Kernel for prxI_HW257' = info 002c28ac hunk head 3 - type 37 - body 9 - len 24 - string 'aon, pon' = avm,variants 002c28c4 hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 002c28d4 hunk head 3 - type 65 - body 3282652 - len 3282664 - lzma compressed data = data - CRC32: 0xaa110233 005e3fbc hunk head 3 - type 70 - body 7 - len 20 - string 'kernel' = type 005e3fd0 hunk head 3 - type 75 - body 5 - len 20 - string 'mips' = arch 005e3fe4 hunk head 3 - type 80 - body 6 - len 20 - string 'linux' = os 005e3ff8 hunk head 3 - type 83 - body 5 - len 20 - string 'lzma' = compression 005e400c hunk head 3 - type 95 - body 4 - len 16 - word 0x70000000 = load 005e401c hunk head 3 - type 100 - body 4 - len 16 - word 0x7077a400 = entry 005e402c hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 005e4038 hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 005e404c hunk head 3 - type 111 - body 4 - len 16 - word 0xaa110233 = value - MATCH 005e405c hunk head 2 - type str[1] - body 12 - len 24 - string 'avm,kallsyms' 005e4074 hunk head 3 - type 117 - body 3 - len 16 - string 'BE' = avm,endianess 005e4084 hunk head 3 - type 131 - body 4 - len 16 - word 0x70000000 = avm,kernel_text_start 005e4094 hunk head 3 - type 153 - body 4 - len 16 - word 0x70838590 005e40a4 hunk head 3 - type 163 - body 4 - len 16 - word 0x70889d20 005e40b4 hunk head 3 - type 179 - body 4 - len 16 - word 0x7088a060 005e40c4 hunk head 3 - type 195 - body 4 - len 16 - word 0x70838580 005e40d4 hunk head 3 - type 208 - body 0 - len 12 - empty 005e40e0 hunk head 3 - type 222 - body 4 - len 16 - word 0x70838570 005e40f0 hunk head 3 - type 240 - body 4 - len 16 - word 0x7081c620 005e4100 hunk head 2 - type str[2] - body 24 - len 40 - string 'prxI_HW257_flat_dt_0_aon' 005e4128 hunk head 3 - type 0 - body 33 - len 48 - string 'Device Tree for prxI_HW257_0_aon' = info 005e4158 hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 005e4168 hunk head 3 - type 65 - body 7917 - len 7932 - lzma compressed data = data - CRC32: 0xcf9e37b4 005e6064 hunk head 3 - type 70 - body 8 - len 20 - string 'flat_dt' = type 005e6078 hunk head 3 - type 75 - body 5 - len 20 - string 'mips' = arch 005e608c hunk head 3 - type 83 - body 5 - len 20 - string 'lzma' = compression 005e60a0 hunk head 3 - type 95 - body 4 - len 16 - word 0x70fe4000 = load 005e60b0 hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 005e60bc hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 005e60d0 hunk head 3 - type 111 - body 4 - len 16 - word 0xcf9e37b4 = value - MATCH 005e60e0 hunk head 2 - type str[2] - body 24 - len 40 - string 'prxI_HW257_flat_dt_0_pon' 005e6108 hunk head 3 - type 0 - body 33 - len 48 - string 'Device Tree for prxI_HW257_0_pon' = info 005e6138 hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 005e6148 hunk head 3 - type 65 - body 7884 - len 7896 - lzma compressed data = data - CRC32: 0xb9298e1b 005e8020 hunk head 3 - type 70 - body 8 - len 20 - string 'flat_dt' = type 005e8034 hunk head 3 - type 75 - body 5 - len 20 - string 'mips' = arch 005e8048 hunk head 3 - type 83 - body 5 - len 20 - string 'lzma' = compression 005e805c hunk head 3 - type 95 - body 4 - len 16 - word 0x70fe4000 = load 005e806c hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 005e8078 hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 005e808c hunk head 3 - type 111 - body 4 - len 16 - word 0xb9298e1b = value - MATCH 005e809c hunk head 2 - type str[2] - body 18 - len 32 - string 'prxI_HW257_ramdisk' 005e80bc hunk head 3 - type 0 - body 23 - len 36 - string 'Ramdisk for prxI_HW257' = info 005e80e0 hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 005e80f0 hunk head 3 - type 65 - body 35458093 - len 35458108 - gzip compressed data = data - CRC32: 0x9b59e2d4 027b8d2c hunk head 3 - type 70 - body 8 - len 20 - string 'ramdisk' = type 027b8d40 hunk head 3 - type 75 - body 5 - len 20 - string 'mips' = arch 027b8d54 hunk head 3 - type 80 - body 6 - len 20 - string 'linux' = os 027b8d68 hunk head 3 - type 83 - body 5 - len 20 - string 'none' = compression 027b8d7c hunk head 3 - type 95 - body 4 - len 16 - word 0x90000000 = load 027b8d8c hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 027b8d98 hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 027b8dac hunk head 3 - type 111 - body 4 - len 16 - word 0x9b59e2d4 = value - MATCH 027b8dbc hunk head 2 - type str[2] - body 14 - len 32 - string 'configurations' 027b8ddc hunk head 1 - type str - body 20 - len 28 - string 'prxB_HW0257_config_0' 027b8df8 hunk head 3 - type 252 - body 19 - len 32 - string 'prxB_HW0257_kernel' 027b8e18 hunk head 3 - type 259 - body 22 - len 36 - string 'prxB_HW0257_flat_dt_0' 027b8e3c hunk head 3 - type 263 - body 20 - len 32 - string 'prxB_HW0257_ramdisk' 027b8e5c hunk head 2 - type str[1] - body 23 - len 32 - string 'prxI_HW257_config_0_aon' 027b8e7c hunk head 3 - type 252 - body 18 - len 32 - string 'prxI_HW257_kernel' 027b8e9c hunk head 3 - type 259 - body 25 - len 40 - string 'prxI_HW257_flat_dt_0_aon' 027b8ec4 hunk head 3 - type 263 - body 19 - len 32 - string 'prxI_HW257_ramdisk' 027b8ee4 hunk head 2 - type str[1] - body 23 - len 32 - string 'prxI_HW257_config_0_pon' 027b8f04 hunk head 3 - type 252 - body 18 - len 32 - string 'prxI_HW257_kernel' 027b8f24 hunk head 3 - type 259 - body 25 - len 40 - string 'prxI_HW257_flat_dt_0_pon' 027b8f4c hunk head 3 - type 263 - body 19 - len 32 - string 'prxI_HW257_ramdisk' 027b8f6c hunk head 2 - type str[2] - body 11 - len 28 - string 'description' 027b8f88 |-> array - type str - body 9 - len 10 string 'timestamp' 027b8f92 |-> array - type str - body 14 - len 15 string 'avm,gu-version' 027b8fa1 |-> array - type str - body 12 - len 13 string 'avm,variants' 027b8fae |-> array - type str - body 14 - len 15 string '#address-cells' 027b8fbd |-> array - type str - body 4 - len 5 string 'data' 027b8fc2 |-> array - type str - body 4 - len 5 string 'type' 027b8fc7 |-> array - type str - body 4 - len 5 string 'arch' 027b8fcc |-> array - type str - body 2 - len 3 string 'os' 027b8fcf |-> array - type str - body 11 - len 12 string 'compression' 027b8fdb |-> array - type str - body 4 - len 5 string 'load' 027b8fe0 |-> array - type str - body 5 - len 6 string 'entry' 027b8fe6 |-> array - type str - body 4 - len 5 string 'algo' 027b8feb |-> array - type str - body 5 - len 6 string 'value' 027b8ff1 |-> array - type str - body 13 - len 14 string 'avm,endianess' 027b8fff |-> array - type str - body 21 - len 22 string 'avm,kernel_text_start' 027b9015 |-> array - type str - body 9 - len 10 string 'avm,names' 027b901f |-> array - type str - body 15 - len 16 string 'avm,token_table' 027b902f |-> array - type str - body 15 - len 16 string 'avm,token_index' 027b903f |-> array - type str - body 12 - len 13 string 'avm,num_syms' 027b904c |-> array - type str - body 13 - len 14 string 'avm,addresses' 027b905a |-> array - type str - body 17 - len 18 string 'avm,relative_base' 027b906c |-> array - type str - body 11 - len 12 string 'avm,offsets' 027b9078 |-> array - type str - body 6 - len 7 string 'kernel' 027b907f |-> array - type str - body 3 - len 4 string 'fdt' 027b9083 |-> array - type str - body 7 - len 8 string 'ramdisk' 027b908b hunk end 0 027b9093 EOF ############ Fritzbox 7530 AX = 34733863 bytes ############ Fixed size 128 bytes header 00000000 0d 00 ed fe d7 fe 11 02 be 12 05 bb 07 71 bf f8 |.............q..| 00000010 f8 86 87 b1 b7 63 ef dd 45 db 1e 26 0c a1 c8 3a |.....c..E..&...:| 00000020 e6 0a 31 08 c5 6f f5 fe ed af b5 35 fd 74 32 2b |..1..o.....5.t2+| 00000030 dd 66 2c 18 7c 05 21 68 9e 3b a2 f9 81 d3 82 e6 |.f,.|.!h.;......| 00000040 be 45 7e 90 04 a4 7f 08 d0 0d fe ed 02 11 fe d7 |.E~.............| 00000050 00 00 00 38 02 11 fd a8 00 00 00 28 00 00 00 11 |...8.......(....| 00000060 00 00 00 10 00 00 00 00 00 00 01 2f 02 11 fd 70 |.........../...p| 00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000080 - 0x00 = FIT signature = '0d 00 ed fe' - 0x04 = BE pointer to EOF - 0x08-0x4C = hopefully no RSA signature - doesn't contain CRC32 or MD5 of 0x50+ or 0x80+ - 0x4C = LE pointer to EOF - 0x50 = always 0x00000038 - 0x54 = LE pointer to todo (description - 0x42?) - 0x58 = always 0x00000028 - 0x5C = always 0x00000011 - 0x60 = always 0x00000010 - 0x64 = always 0x00000000 - 0x68 = 0x0000010f (5530) or 0x0000011f (others) - 0x6c = LE pointer to todo - 0x70-0x80 = always 0x00000000 Variable size hunk structure 00000080 hunk head 1 - type str - body 0 - len 8 - string '' 00000088 hunk head 3 - type 0 - body 14 - len 28 - string 'FIT for HW256' = info 000000a4 hunk head 3 - type 12 - body 4 - len 16 - word 0x5fa13e4a = timestamp 000000b4 hunk head 3 - type 22 - body 4 - len 16 - word 0x0001451a = avm,gu-version 000000c4 hunk head 1 - type str - body 6 - len 12 - string 'images' 000000d0 hunk head 1 - type str - body 21 - len 28 - string 'brcma9TZ_HW256_kernel' 000000ec hunk head 3 - type 0 - body 26 - len 40 - string 'Kernel for brcma9TZ_HW256' = info 00000114 hunk head 3 - type 37 - body 1 - len 16 - binary data = avm,variants 00000124 hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 00000134 hunk head 3 - type 65 - body 192275 - len 192288 - lzma compressed data = data - CRC32: 0xf653ffe8 0002f054 hunk head 3 - type 70 - body 7 - len 20 - string 'kernel' = type 0002f068 hunk head 3 - type 75 - body 4 - len 16 - string 'arm' = arch 0002f078 hunk head 3 - type 80 - body 6 - len 20 - string 'linux' = os 0002f08c hunk head 3 - type 83 - body 5 - len 20 - string 'lzma' = compression 0002f0a0 hunk head 3 - type 95 - body 4 - len 16 - word 0x10800000 = load 0002f0b0 hunk head 3 - type 100 - body 4 - len 16 - word 0x10800000 = entry 0002f0c0 hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 0002f0cc hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 0002f0e0 hunk head 3 - type 111 - body 4 - len 16 - word 0xf653ffe8 = value - MATCH 0002f0f0 hunk head 2 - type str[2] - body 24 - len 40 - string 'brcma9TZ_HW256_flat_dt_0' 0002f118 hunk head 3 - type 0 - body 33 - len 48 - string 'Device Tree for brcma9TZ_HW256_0' = info 0002f148 hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 0002f158 hunk head 3 - type 65 - body 599 - len 612 - lzma compressed data = data - CRC32: 0x2040d9dd 0002f3bc hunk head 3 - type 70 - body 8 - len 20 - string 'flat_dt' = type 0002f3d0 hunk head 3 - type 75 - body 4 - len 16 - string 'arm' = arch 0002f3e0 hunk head 3 - type 83 - body 5 - len 20 - string 'lzma' = compression 0002f3f4 hunk head 3 - type 95 - body 4 - len 16 - word 0x10000000 = load 0002f404 hunk head 3 - type 117 - body 1 - len 16 - binary data = avm,endianess 0002f414 hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 0002f420 hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 0002f434 hunk head 3 - type 111 - body 4 - len 16 - word 0x2040d9dd = value - MATCH 0002f444 hunk head 2 - type str[2] - body 19 - len 32 - string 'brcma9_HW256_kernel' 0002f464 hunk head 3 - type 0 - body 24 - len 36 - string 'Kernel for brcma9_HW256' = info 0002f488 hunk head 3 - type 37 - body 1 - len 16 - binary data = avm,variants 0002f498 hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 0002f4a8 hunk head 3 - type 65 - body 2671938 - len 2671952 - lzma compressed data = data - CRC32: 0x34ac9b5e 002bb9f8 hunk head 3 - type 70 - body 7 - len 20 - string 'kernel' = type 002bba0c hunk head 3 - type 75 - body 4 - len 16 - string 'arm' = arch 002bba1c hunk head 3 - type 80 - body 6 - len 20 - string 'linux' = os 002bba30 hunk head 3 - type 83 - body 5 - len 20 - string 'lzma' = compression 002bba44 hunk head 3 - type 95 - body 4 - len 16 - word 0xc0008000 = load 002bba54 hunk head 3 - type 100 - body 4 - len 16 - word 0xc0008000 = entry 002bba64 hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 002bba70 hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 002bba84 hunk head 3 - type 111 - body 4 - len 16 - word 0x34ac9b5e = value - MATCH 002bba94 hunk head 2 - type str[1] - body 12 - len 24 - string 'avm,kallsyms' 002bbaac hunk head 3 - type 133 - body 3 - len 16 - string 'LE' = avm,endianess 002bbabc hunk head 3 - type 147 - body 4 - len 16 - word 0xc0008000 = avm,kernel_text_start 002bbacc hunk head 3 - type 169 - body 4 - len 16 - word 0xc0520920 002bbadc hunk head 3 - type 179 - body 4 - len 16 - word 0xc058c9c0 002bbaec hunk head 3 - type 195 - body 4 - len 16 - word 0xc058cd40 002bbafc hunk head 3 - type 211 - body 4 - len 16 - word 0xc0520910 002bbb0c hunk head 3 - type 224 - body 4 - len 16 - word 0xc04fb9d0 002bbb1c hunk head 3 - type 238 - body 0 - len 12 - empty 002bbb28 hunk head 3 - type 256 - body 0 - len 12 - empty 002bbb34 hunk head 2 - type str[2] - body 22 - len 36 - string 'brcma9_HW256_flat_dt_1' 002bbb58 hunk head 3 - type 0 - body 31 - len 44 - string 'Device Tree for brcma9_HW256_1' = info 002bbb84 hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 002bbb94 hunk head 3 - type 65 - body 3815 - len 3828 - lzma compressed data = data - CRC32: 0x5edb6c64 002bca88 hunk head 3 - type 70 - body 8 - len 20 - string 'flat_dt' = type 002bca9c hunk head 3 - type 75 - body 4 - len 16 - string 'arm' = arch 002bcaac hunk head 3 - type 83 - body 5 - len 20 - string 'lzma' = compression 002bcac0 hunk head 3 - type 95 - body 4 - len 16 - word 0xc07ab000 = load 002bcad0 hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 002bcadc hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 002bcaf0 hunk head 3 - type 111 - body 4 - len 16 - word 0x5edb6c64 = value - MATCH 002bcb00 hunk head 2 - type str[2] - body 22 - len 36 - string 'brcma9_HW256_flat_dt_0' 002bcb24 hunk head 3 - type 0 - body 31 - len 44 - string 'Device Tree for brcma9_HW256_0' = info 002bcb50 hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 002bcb60 hunk head 3 - type 65 - body 3817 - len 3832 - lzma compressed data = data - CRC32: 0xa7ded150 002bda58 hunk head 3 - type 70 - body 8 - len 20 - string 'flat_dt' = type 002bda6c hunk head 3 - type 75 - body 4 - len 16 - string 'arm' = arch 002bda7c hunk head 3 - type 83 - body 5 - len 20 - string 'lzma' = compression 002bda90 hunk head 3 - type 95 - body 4 - len 16 - word 0xc07ab000 = load 002bdaa0 hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 002bdaac hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 002bdac0 hunk head 3 - type 111 - body 4 - len 16 - word 0xa7ded150 = value - MATCH 002bdad0 hunk head 2 - type str[2] - body 32 - len 48 - string 'brcma9_HW256_squashFS_filesystem' 002bdb00 hunk head 3 - type 0 - body 26 - len 40 - string 'squashFS for brcma9_HW256' = info 002bdb28 hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 002bdb38 hunk head 3 - type 268 - body 4 - len 16 - word 0x00001000 002bdb48 hunk head 3 - type 65 - body 31858688 - len 31858700 - squashfs image = data - CRC32: 0x29c318fc 0211fb54 hunk head 3 - type 70 - body 11 - len 24 - string 'filesystem' = type 0211fb6c hunk head 3 - type 83 - body 5 - len 20 - string 'none' = compression 0211fb80 hunk head 3 - type 95 - body 4 - len 16 - word 0x19c00000 = load 0211fb90 hunk head 3 - type 117 - body 97 - len 112 - string 'mtdram=ram-filesystem,0x19c00000,0x1bb00000 mtdparts_ext=ram-filesystem:31858688@0x0(rootfs_ram)' = avm,endianess 0211fc00 hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 0211fc0c hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 0211fc20 hunk head 3 - type 111 - body 4 - len 16 - word 0x29c318fc = value - MATCH 0211fc30 hunk head 2 - type str[2] - body 14 - len 32 - string 'configurations' 0211fc50 hunk head 1 - type str - body 23 - len 28 - string 'brcma9TZ_HW256_config_0' 0211fc6c hunk head 3 - type 283 - body 22 - len 36 - string 'brcma9TZ_HW256_kernel' 0211fc90 hunk head 3 - type 290 - body 25 - len 40 - string 'brcma9TZ_HW256_flat_dt_0' 0211fcb8 hunk head 2 - type str[1] - body 21 - len 32 - string 'brcma9_HW256_config_1' 0211fcd8 hunk head 3 - type 283 - body 20 - len 32 - string 'brcma9_HW256_kernel' 0211fcf8 hunk head 3 - type 290 - body 23 - len 36 - string 'brcma9_HW256_flat_dt_1' 0211fd1c hunk head 3 - type 294 - body 33 - len 48 - string 'brcma9_HW256_squashFS_filesystem' 0211fd4c hunk head 2 - type str[1] - body 21 - len 32 - string 'brcma9_HW256_config_0' 0211fd6c hunk head 3 - type 283 - body 20 - len 32 - string 'brcma9_HW256_kernel' 0211fd8c hunk head 3 - type 290 - body 23 - len 36 - string 'brcma9_HW256_flat_dt_0' 0211fdb0 hunk head 3 - type 294 - body 33 - len 48 - string 'brcma9_HW256_squashFS_filesystem' 0211fde0 hunk head 2 - type str[2] - body 11 - len 28 - string 'description' 0211fdfc |-> array - type str - body 9 - len 10 string 'timestamp' 0211fe06 |-> array - type str - body 14 - len 15 string 'avm,gu-version' 0211fe15 |-> array - type str - body 12 - len 13 string 'avm,variants' 0211fe22 |-> array - type str - body 14 - len 15 string '#address-cells' 0211fe31 |-> array - type str - body 4 - len 5 string 'data' 0211fe36 |-> array - type str - body 4 - len 5 string 'type' 0211fe3b |-> array - type str - body 4 - len 5 string 'arch' 0211fe40 |-> array - type str - body 2 - len 3 string 'os' 0211fe43 |-> array - type str - body 11 - len 12 string 'compression' 0211fe4f |-> array - type str - body 4 - len 5 string 'load' 0211fe54 |-> array - type str - body 5 - len 6 string 'entry' 0211fe5a |-> array - type str - body 4 - len 5 string 'algo' 0211fe5f |-> array - type str - body 5 - len 6 string 'value' 0211fe65 |-> array - type str - body 15 - len 16 string 'avm,kernel-args' 0211fe75 |-> array - type str - body 13 - len 14 string 'avm,endianess' 0211fe83 |-> array - type str - body 21 - len 22 string 'avm,kernel_text_start' 0211fe99 |-> array - type str - body 9 - len 10 string 'avm,names' 0211fea3 |-> array - type str - body 15 - len 16 string 'avm,token_table' 0211feb3 |-> array - type str - body 15 - len 16 string 'avm,token_index' 0211fec3 |-> array - type str - body 12 - len 13 string 'avm,num_syms' 0211fed0 |-> array - type str - body 13 - len 14 string 'avm,addresses' 0211fede |-> array - type str - body 17 - len 18 string 'avm,relative_base' 0211fef0 |-> array - type str - body 11 - len 12 string 'avm,offsets' 0211fefc |-> array - type str - body 14 - len 15 string 'avm,data-align' 0211ff0b |-> array - type str - body 6 - len 7 string 'kernel' 0211ff12 |-> array - type str - body 3 - len 4 string 'fdt' 0211ff16 |-> array - type str - body 8 - len 9 string 'squashFS' 0211ff1f hunk end 0 0211ff27 EOF ############ Repeater 6000 = 20083335 bytes ############ Fixed size 128 bytes header 00000000 0d 00 ed fe 37 72 32 01 f2 35 2b fd 6b 89 c9 75 |....7r2..5+.k..u| 00000010 80 51 35 10 e0 ed 0b e1 5b 75 06 65 6a 98 bc 82 |.Q5.....[u.ej...| 00000020 69 d6 05 fa 86 23 66 42 62 ff b1 c0 0e b3 ac 2c |i....#fBb......,| 00000030 f4 71 6a 64 38 e2 4d 10 13 5e c0 40 26 5a c7 ac |.qjd8.M..^.@&Z..| 00000040 28 f4 f1 6d 8e e8 38 0d d0 0d fe ed 01 32 72 37 |(..m..8......2r7| 00000050 00 00 00 38 01 32 71 08 00 00 00 28 00 00 00 11 |...8.2q....(....| 00000060 00 00 00 10 00 00 00 00 00 00 01 2f 01 32 70 d0 |.........../.2p.| 00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000080 - 0x00 = FIT signature = '0d 00 ed fe' - 0x04 = BE pointer to EOF - 0x08-0x4C = hopefully no RSA signature - doesn't contain CRC32 or MD5 of 0x50+ or 0x80+ - 0x4C = LE pointer to EOF - 0x50 = always 0x00000038 - 0x54 = LE pointer to todo (description - 0x42?) - 0x58 = always 0x00000028 - 0x5C = always 0x00000011 - 0x60 = always 0x00000010 - 0x64 = always 0x00000000 - 0x68 = 0x0000010f (5530) or 0x0000011f (others) - 0x6c = LE pointer to todo - 0x70-0x80 = always 0x00000000 Variable size hunk structure 00000080 hunk head 1 - type str - body 0 - len 8 - string '' 00000088 hunk head 3 - type 0 - body 14 - len 28 - string 'FIT for HW253' = info 000000a4 hunk head 3 - type 12 - body 4 - len 16 - word 0x5fd9e2d0 = timestamp 000000b4 hunk head 3 - type 22 - body 4 - len 16 - word 0x00014b47 = avm,gu-version 000000c4 hunk head 1 - type str - body 6 - len 12 - string 'images' 000000d0 hunk head 1 - type str - body 21 - len 28 - string 'qcaarmv8_HW253_kernel' 000000ec hunk head 3 - type 0 - body 26 - len 40 - string 'Kernel for qcaarmv8_HW253' = info 00000114 hunk head 3 - type 37 - body 1 - len 16 - binary data = avm,variants 00000124 hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 00000134 hunk head 3 - type 65 - body 3272774 - len 3272788 - lzma compressed data = data - CRC32: 0x305c1622 0031f188 hunk head 3 - type 70 - body 7 - len 20 - string 'kernel' = type 0031f19c hunk head 3 - type 75 - body 4 - len 16 - string 'arm' = arch 0031f1ac hunk head 3 - type 80 - body 6 - len 20 - string 'linux' = os 0031f1c0 hunk head 3 - type 83 - body 5 - len 20 - string 'lzma' = compression 0031f1d4 hunk head 3 - type 95 - body 4 - len 16 - word 0x41208000 = load 0031f1e4 hunk head 3 - type 100 - body 4 - len 16 - word 0x41208000 = entry 0031f1f4 hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 0031f200 hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 0031f214 hunk head 3 - type 111 - body 4 - len 16 - word 0x305c1622 = value - MATCH 0031f224 hunk head 2 - type str[1] - body 12 - len 24 - string 'avm,kallsyms' 0031f23c hunk head 3 - type 117 - body 3 - len 16 - string 'LE' = avm,endianess 0031f24c hunk head 3 - type 131 - body 4 - len 16 - word 0xc0208000 = avm,kernel_text_start 0031f25c hunk head 3 - type 153 - body 4 - len 16 - word 0xc080b490 0031f26c hunk head 3 - type 163 - body 4 - len 16 - word 0xc089ed90 0031f27c hunk head 3 - type 179 - body 4 - len 16 - word 0xc089f130 0031f28c hunk head 3 - type 195 - body 4 - len 16 - word 0xc080b480 0031f29c hunk head 3 - type 208 - body 4 - len 16 - word 0xc07d9700 0031f2ac hunk head 3 - type 222 - body 0 - len 12 - empty 0031f2b8 hunk head 3 - type 240 - body 0 - len 12 - empty 0031f2c4 hunk head 2 - type str[2] - body 24 - len 40 - string 'qcaarmv8_HW253_flat_dt_0' 0031f2ec hunk head 3 - type 0 - body 33 - len 48 - string 'Device Tree for qcaarmv8_HW253_0' = info 0031f31c hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 0031f32c hunk head 3 - type 65 - body 15581 - len 15596 - lzma compressed data = data - CRC32: 0x19dce80e 00323018 hunk head 3 - type 70 - body 8 - len 20 - string 'flat_dt' = type 0032302c hunk head 3 - type 75 - body 4 - len 16 - string 'arm' = arch 0032303c hunk head 3 - type 83 - body 5 - len 20 - string 'lzma' = compression 00323050 hunk head 3 - type 95 - body 4 - len 16 - word 0x41c30000 = load 00323060 hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 0032306c hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 00323080 hunk head 3 - type 111 - body 4 - len 16 - word 0x19dce80e = value - MATCH 00323090 hunk head 2 - type str[2] - body 24 - len 40 - string 'qcaarmv8_HW253_flat_dt_2' 003230b8 hunk head 3 - type 0 - body 33 - len 48 - string 'Device Tree for qcaarmv8_HW253_2' = info 003230e8 hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 003230f8 hunk head 3 - type 65 - body 15630 - len 15644 - lzma compressed data = data - CRC32: 0x12fa7f09 00326e14 hunk head 3 - type 70 - body 8 - len 20 - string 'flat_dt' = type 00326e28 hunk head 3 - type 75 - body 4 - len 16 - string 'arm' = arch 00326e38 hunk head 3 - type 83 - body 5 - len 20 - string 'lzma' = compression 00326e4c hunk head 3 - type 95 - body 4 - len 16 - word 0x41c30000 = load 00326e5c hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 00326e68 hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 00326e7c hunk head 3 - type 111 - body 4 - len 16 - word 0x12fa7f09 = value - MATCH 00326e8c hunk head 2 - type str[2] - body 34 - len 48 - string 'qcaarmv8_HW253_squashFS_filesystem' 00326ebc hunk head 3 - type 0 - body 28 - len 40 - string 'squashFS for qcaarmv8_HW253' = info 00326ee4 hunk head 3 - type 50 - body 4 - len 16 - word 0x00000001 = #address-cells 00326ef4 hunk head 3 - type 252 - body 4 - len 16 - word 0x00001000 00326f04 hunk head 3 - type 65 - body 16777216 - len 16777228 - squashfs image = data - CRC32: 0x89107410 01326f10 hunk head 3 - type 70 - body 11 - len 24 - string 'filesystem' = type 01326f28 hunk head 3 - type 83 - body 5 - len 20 - string 'none' = compression 01326f3c hunk head 3 - type 95 - body 4 - len 16 - word 0x43000000 = load 01326f4c hunk head 3 - type 267 - body 97 - len 112 - string 'mtdram=ram-filesystem,0x43000000,0x44100000 mtdparts_ext=ram-filesystem:16777216@0x0(rootfs_ram)' = avm,kernel-args 01326fbc hunk head 1 - type str - body 6 - len 12 - string 'hash_0' 01326fc8 hunk head 3 - type 106 - body 6 - len 20 - string 'crc32' = algo 01326fdc hunk head 3 - type 111 - body 4 - len 16 - word 0x89107410 = value - MATCH 01326fec hunk head 2 - type str[2] - body 14 - len 32 - string 'configurations' 0132700c hunk head 1 - type str - body 23 - len 28 - string 'qcaarmv8_HW253_config_0' 01327028 hunk head 3 - type 283 - body 22 - len 36 - string 'qcaarmv8_HW253_kernel' 0132704c hunk head 3 - type 290 - body 25 - len 40 - string 'qcaarmv8_HW253_flat_dt_0' 01327074 hunk head 3 - type 294 - body 35 - len 48 - string 'qcaarmv8_HW253_squashFS_filesystem' 013270a4 hunk head 2 - type str[1] - body 23 - len 32 - string 'qcaarmv8_HW253_config_2' 013270c4 hunk head 3 - type 283 - body 22 - len 36 - string 'qcaarmv8_HW253_kernel' 013270e8 hunk head 3 - type 290 - body 25 - len 40 - string 'qcaarmv8_HW253_flat_dt_2' 01327110 hunk head 3 - type 294 - body 35 - len 48 - string 'qcaarmv8_HW253_squashFS_filesystem' 01327140 hunk head 2 - type str[2] - body 11 - len 28 - string 'description' 0132715c |-> array - type str - body 9 - len 10 string 'timestamp' 01327166 |-> array - type str - body 14 - len 15 string 'avm,gu-version' 01327175 |-> array - type str - body 12 - len 13 string 'avm,variants' 01327182 |-> array - type str - body 14 - len 15 string '#address-cells' 01327191 |-> array - type str - body 4 - len 5 string 'data' 01327196 |-> array - type str - body 4 - len 5 string 'type' 0132719b |-> array - type str - body 4 - len 5 string 'arch' 013271a0 |-> array - type str - body 2 - len 3 string 'os' 013271a3 |-> array - type str - body 11 - len 12 string 'compression' 013271af |-> array - type str - body 4 - len 5 string 'load' 013271b4 |-> array - type str - body 5 - len 6 string 'entry' 013271ba |-> array - type str - body 4 - len 5 string 'algo' 013271bf |-> array - type str - body 5 - len 6 string 'value' 013271c5 |-> array - type str - body 13 - len 14 string 'avm,endianess' 013271d3 |-> array - type str - body 21 - len 22 string 'avm,kernel_text_start' 013271e9 |-> array - type str - body 9 - len 10 string 'avm,names' 013271f3 |-> array - type str - body 15 - len 16 string 'avm,token_table' 01327203 |-> array - type str - body 15 - len 16 string 'avm,token_index' 01327213 |-> array - type str - body 12 - len 13 string 'avm,num_syms' 01327220 |-> array - type str - body 13 - len 14 string 'avm,addresses' 0132722e |-> array - type str - body 17 - len 18 string 'avm,relative_base' 01327240 |-> array - type str - body 11 - len 12 string 'avm,offsets' 0132724c |-> array - type str - body 14 - len 15 string 'avm,data-align' 0132725b |-> array - type str - body 15 - len 16 string 'avm,kernel-args' 0132726b |-> array - type str - body 6 - len 7 string 'kernel' 01327272 |-> array - type str - body 3 - len 4 string 'fdt' 01327276 |-> array - type str - body 8 - len 9 string 'squashFS' 0132727f hunk end 0 01327287 EOF