mirror of
https://github.com/Ap0dexMe0/unixtract.git
synced 2026-07-16 05:04:22 +02:00
Add MSD10 extractor (Legacy and Tizen 2015)
This commit is contained in:
theubusu
+2
-1
@@ -3,4 +3,5 @@ pub mod samsung_old;
|
||||
pub mod tpv_timg;
|
||||
pub mod pfl_upg;
|
||||
pub mod epk1;
|
||||
pub mod novatek;
|
||||
pub mod novatek;
|
||||
pub mod msd10;
|
||||
@@ -0,0 +1,276 @@
|
||||
use std::fs::{self, File, OpenOptions};
|
||||
use std::path::{Path};
|
||||
use std::io::{Cursor, Write, Seek, SeekFrom};
|
||||
|
||||
use aes::Aes128;
|
||||
use cbc::{Decryptor, cipher::{block_padding::Pkcs7, BlockDecryptMut, KeyIvInit}};
|
||||
|
||||
type Aes128CbcDec = Decryptor<Aes128>;
|
||||
|
||||
use crate::common;
|
||||
|
||||
pub fn is_msd10_file(file: &File) -> bool {
|
||||
let header = common::read_file(&file, 0, 6).expect("Failed to read from file.");
|
||||
|
||||
if header == b"MSDU10" {
|
||||
true
|
||||
} else {
|
||||
false
|
||||
}
|
||||
}
|
||||
|
||||
struct Section {
|
||||
index: u32,
|
||||
offset: u32,
|
||||
size: u32,
|
||||
name: String,
|
||||
}
|
||||
|
||||
//fw name, type, key
|
||||
static KEYS: &[(&str, &str, &str)] = &[
|
||||
("T-NT14M", "old", "95d01e0bae861a05695bc8a6edb2ea835a09accd"),
|
||||
("T-HKM", "tizen", "1ac8989ff57db5e75ea67b033050871c"),
|
||||
];
|
||||
|
||||
fn decrypt_aes_salted_old(encrypted_data: &[u8], passphrase_bytes: &Vec<u8>) -> Result<Vec<u8>, Box<dyn std::error::Error>> {
|
||||
let mut data = encrypted_data.to_vec();
|
||||
|
||||
assert!(String::from_utf8(data[0..8].to_vec())? == "Salted__", "invalid encrypted data!");
|
||||
let salt = &data[8..16];
|
||||
|
||||
//key = md5 of (passphrase + salt)
|
||||
let mut key = Vec::new();
|
||||
key.extend_from_slice(&passphrase_bytes);
|
||||
key.extend_from_slice(&salt);
|
||||
let key_md5 = md5::compute(&key);
|
||||
|
||||
//iv = md5 of (md5 of key + passphrase + salt)
|
||||
let mut iv = Vec::new();
|
||||
iv.extend_from_slice(&key_md5.0);
|
||||
iv.extend_from_slice(&passphrase_bytes);
|
||||
iv.extend_from_slice(&salt);
|
||||
let iv_md5 = md5::compute(&iv);
|
||||
|
||||
let decryptor = Aes128CbcDec::new((&key_md5.0).into(), (&iv_md5.0).into());
|
||||
let decrypted = decryptor.decrypt_padded_mut::<Pkcs7>(&mut data[16..])
|
||||
.map_err(|e| format!("Decryption error!!: {:?}", e))?;
|
||||
|
||||
Ok(decrypted.to_vec())
|
||||
}
|
||||
|
||||
fn decrypt_aes_salted_tizen(encrypted_data: &[u8], passphrase_bytes: &Vec<u8>) -> Result<Vec<u8>, Box<dyn std::error::Error>> {
|
||||
let mut data = encrypted_data.to_vec();
|
||||
|
||||
assert!(String::from_utf8(data[0..8].to_vec())? == "Salted__", "invalid encrypted data!");
|
||||
let salt = &data[8..16];
|
||||
|
||||
//iv = md5 of salt
|
||||
let iv = md5::compute(&salt);
|
||||
|
||||
let decryptor = Aes128CbcDec::new((&(**passphrase_bytes)).into(), (&iv.0).into());
|
||||
let decrypted = decryptor.decrypt_padded_mut::<Pkcs7>(&mut data[16..])
|
||||
.map_err(|e| format!("Decryption error!!: {:?}", e))?;
|
||||
|
||||
Ok(decrypted.to_vec())
|
||||
}
|
||||
|
||||
fn decrypt_aes_tizen(encrypted_data: &[u8], passphrase_bytes: &Vec<u8>, salt: &[u8]) -> Result<Vec<u8>, Box<dyn std::error::Error>> {
|
||||
let mut data = encrypted_data.to_vec();
|
||||
|
||||
//iv = md5 of salt
|
||||
let iv = md5::compute(&salt);
|
||||
|
||||
let decryptor = Aes128CbcDec::new((&(**passphrase_bytes)).into(), (&iv.0).into());
|
||||
let decrypted = decryptor.decrypt_padded_mut::<Pkcs7>(&mut data)
|
||||
.map_err(|e| format!("Decryption error!!: {:?}", e))?;
|
||||
|
||||
Ok(decrypted.to_vec())
|
||||
}
|
||||
|
||||
pub fn extract_msd10(mut file: &File, output_folder: &str) -> Result<(), Box<dyn std::error::Error>> {
|
||||
|
||||
let _magic = common::read_exact(&mut file, 6)?; //MSDU10 magic
|
||||
|
||||
let section_count_bytes = common::read_exact(&mut file, 4)?;
|
||||
let section_count = u32::from_le_bytes(section_count_bytes.try_into().unwrap());
|
||||
println!("Number of sections: {}", section_count);
|
||||
|
||||
let mut sections: Vec<Section> = Vec::new();
|
||||
|
||||
//parse sections
|
||||
for _i in 0..section_count {
|
||||
let index_bytes = common::read_exact(&mut file, 4)?;
|
||||
let index = u32::from_le_bytes(index_bytes.try_into().unwrap());
|
||||
|
||||
let offset_bytes = common::read_exact(&mut file, 4)?;
|
||||
let offset = u32::from_le_bytes(offset_bytes.try_into().unwrap());
|
||||
|
||||
let size_bytes = common::read_exact(&mut file, 4)?;
|
||||
let size = u32::from_le_bytes(size_bytes.try_into().unwrap());
|
||||
|
||||
println!("Section {}: offset: {}, size: {}", index, offset, size);
|
||||
sections.push(Section { index, offset, size , name: "".to_string() });
|
||||
}
|
||||
|
||||
let _0 = common::read_exact(&mut file, 4)?; //0000
|
||||
|
||||
let header_count_bytes = common::read_exact(&mut file, 4)?;
|
||||
let header_count = u32::from_le_bytes(header_count_bytes.try_into().unwrap());
|
||||
println!("\nNumber of headers: {}", header_count);
|
||||
|
||||
let mut headers: Vec<Section> = Vec::new();
|
||||
|
||||
//parse headers
|
||||
for i in 0..header_count {
|
||||
let offset_bytes = common::read_exact(&mut file, 4)?;
|
||||
let offset = u32::from_le_bytes(offset_bytes.try_into().unwrap());
|
||||
|
||||
let size_bytes = common::read_exact(&mut file, 4)?;
|
||||
let size = u32::from_le_bytes(size_bytes.try_into().unwrap());
|
||||
|
||||
let name_length_byte = common::read_exact(&mut file, 1)?;
|
||||
let name_length = u8::from_le_bytes(name_length_byte.try_into().unwrap());
|
||||
|
||||
let name_bytes = common::read_exact(&mut file, name_length as usize)?;
|
||||
let name = String::from_utf8(name_bytes)?;
|
||||
|
||||
println!("Header {}: {}, offset: {}, size: {}", i + 1, name, offset, size);
|
||||
|
||||
headers.push(Section { index: 0, offset, size , name });
|
||||
}
|
||||
|
||||
//use first header
|
||||
let firmware_name = &headers[0].name;
|
||||
println!("\nFirmware name: {}", firmware_name);
|
||||
|
||||
let mut passphrase: Option<&str> = None;
|
||||
let mut firmware_type = "";
|
||||
let passphrase_bytes;
|
||||
|
||||
//find passphrase
|
||||
for (prefix, fw_type, value) in KEYS {
|
||||
if firmware_name.starts_with(prefix) {
|
||||
passphrase = Some(value);
|
||||
firmware_type = fw_type;
|
||||
break;
|
||||
}
|
||||
}
|
||||
if let Some(p) = passphrase {
|
||||
println!("Passphrase: {}", p);
|
||||
passphrase_bytes = hex::decode(p)?;
|
||||
println!("Firmware type: {}\n", firmware_type);
|
||||
} else {
|
||||
println!("Sorry, this firmware is not supported!");
|
||||
std::process::exit(1);
|
||||
}
|
||||
|
||||
let toc_offset = headers[0].offset;
|
||||
let toc_size = headers[0].size;
|
||||
let toc_data = common::read_file(&file, toc_offset as u64, toc_size as usize)?;
|
||||
|
||||
//parse TOC
|
||||
if firmware_type == "tizen" {
|
||||
let toc = decrypt_aes_salted_tizen(&toc_data, &passphrase_bytes)?;
|
||||
let mut toc_reader = Cursor::new(toc);
|
||||
|
||||
toc_reader.seek(SeekFrom::Current(256))?; // probably signature
|
||||
toc_reader.seek(SeekFrom::Current(50))?; // Tizen Software Upgrade Tree Binary Format ver. 1.8
|
||||
|
||||
for i in 0..section_count {
|
||||
toc_reader.seek(SeekFrom::Current(44))?; //unknown
|
||||
|
||||
let name_length_byte = common::read_exact(&mut toc_reader, 1)?;
|
||||
let name_length = u8::from_le_bytes(name_length_byte.try_into().unwrap());
|
||||
|
||||
let name_bytes = common::read_exact(&mut toc_reader, name_length as usize)?;
|
||||
let name = String::from_utf8(name_bytes)?;
|
||||
|
||||
toc_reader.seek(SeekFrom::Current(314))?; //unknown
|
||||
|
||||
let salt = common::read_exact(&mut toc_reader, 8)?;
|
||||
|
||||
toc_reader.seek(SeekFrom::Current(13))?; //unknown
|
||||
|
||||
println!("- Extracting section {}: {}...", sections[i as usize].index, name);
|
||||
|
||||
let offset = sections[i as usize].offset;
|
||||
let size = sections[i as usize].size;
|
||||
let encrypted_data = common::read_file(&file, offset as u64, size as usize)?;
|
||||
let decrypted_data = decrypt_aes_tizen(&encrypted_data, &passphrase_bytes, &salt)?;
|
||||
|
||||
let output_path = Path::new(&output_folder).join(name);
|
||||
|
||||
fs::create_dir_all(&output_folder)?;
|
||||
let mut out_file = OpenOptions::new()
|
||||
.write(true)
|
||||
.create(true)
|
||||
.open(output_path)?;
|
||||
|
||||
out_file.write_all(&decrypted_data)?;
|
||||
|
||||
println!("-- Saved file!");
|
||||
|
||||
}
|
||||
|
||||
} else if firmware_type == "old" {
|
||||
let toc = decrypt_aes_salted_old(&toc_data, &passphrase_bytes)?;
|
||||
let mut toc_reader = Cursor::new(toc);
|
||||
|
||||
toc_reader.seek(SeekFrom::Current(128))?; // probably signature
|
||||
|
||||
for i in 0..section_count {
|
||||
if i != 0 { //isnt on first segment
|
||||
toc_reader.seek(SeekFrom::Current(4))?; //some magic? seems to be 00 00 03 E8 always
|
||||
}
|
||||
|
||||
let segment_length_bytes = common::read_exact(&mut toc_reader, 4)?;
|
||||
let segment_length = u32::from_be_bytes(segment_length_bytes.try_into().unwrap());
|
||||
|
||||
let segment_size_bytes = common::read_exact(&mut toc_reader, 4)?;
|
||||
let segment_size = u32::from_be_bytes(segment_size_bytes.try_into().unwrap());
|
||||
|
||||
assert!(segment_size == sections[i as usize].size, "size in TOC does not match size from header!");
|
||||
|
||||
toc_reader.seek(SeekFrom::Current(26))?; //unknown now
|
||||
|
||||
let name_length_byte = common::read_exact(&mut toc_reader, 1)?;
|
||||
let name_length = u8::from_be_bytes(name_length_byte.try_into().unwrap());
|
||||
|
||||
let name_bytes = common::read_exact(&mut toc_reader, name_length as usize)?;
|
||||
let name = String::from_utf8(name_bytes)?;
|
||||
sections[i as usize].name = name.clone();
|
||||
|
||||
toc_reader.seek(SeekFrom::Current((segment_length - name_length as u32 - 31).into()))?;
|
||||
|
||||
println!("- Extracting section {}: {}...", sections[i as usize].index, name);
|
||||
|
||||
let offset = sections[i as usize].offset;
|
||||
let size = sections[i as usize].size;
|
||||
|
||||
if i != 0 && name == sections[i as usize - 1].name { //second section with the same name is some sort of signature
|
||||
println!("-- Skipping signature file..");
|
||||
continue;
|
||||
}
|
||||
|
||||
let encrypted_data = common::read_file(&file, offset as u64 + 136, size as usize - 136)?;
|
||||
let out_data = decrypt_aes_salted_old(&encrypted_data, &passphrase_bytes)?;
|
||||
|
||||
let output_path = Path::new(&output_folder).join(name);
|
||||
|
||||
fs::create_dir_all(&output_folder)?;
|
||||
let mut out_file = OpenOptions::new()
|
||||
.write(true)
|
||||
.create(true)
|
||||
.open(output_path)?;
|
||||
|
||||
out_file.write_all(&out_data)?;
|
||||
|
||||
println!("-- Saved file!");
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
println!("\nExtraction finished!");
|
||||
|
||||
Ok(())
|
||||
}
|
||||
+5
-1
@@ -35,7 +35,11 @@ fn main() -> Result<(), Box<dyn std::error::Error>> {
|
||||
|
||||
println!();
|
||||
|
||||
if formats::tpv_timg::is_tpv_timg_file(&file) {
|
||||
if formats::msd10::is_msd10_file(&file) {
|
||||
println!("MSD10 file detected!");
|
||||
println!();
|
||||
formats::msd10::extract_msd10(&file, &output_path)?;
|
||||
} else if formats::tpv_timg::is_tpv_timg_file(&file) {
|
||||
println!("TPV TIMG file detected!");
|
||||
println!();
|
||||
formats::tpv_timg::extract_tpv_timg(&file, &output_path)?;
|
||||
|
||||
Reference in New Issue
Block a user