use std::path::Path; use std::fs::{self, File, OpenOptions}; use std::io::{Write, Cursor, Seek}; use binrw::{BinRead, BinReaderExt}; use crate::utils::common; use crate::utils::aes::{decrypt_aes128_cbc_nopad}; use crate::utils::lzhs::{decompress_lzhs_fs_file2file}; use crate::keys; #[derive(BinRead)] struct Header { #[br(count = 4)] vendor_magic_bytes: Vec, #[br(count = 8)] _mtk_magic: Vec, //#DH@FiRm #[br(count = 56)] version_bytes: Vec, _unk: u32, file_size: u32, _flags: u32, #[br(count = 32)] product_name_bytes: Vec, #[br(count = 32)] _digest: Vec, } impl Header { fn vendor_magic(&self) -> String { common::string_from_bytes(&self.vendor_magic_bytes) } fn version(&self) -> String { common::string_from_bytes(&self.version_bytes) } fn product_name(&self) -> String { common::string_from_bytes(&self.product_name_bytes) } } #[derive(BinRead)] struct PartEntry { #[br(count = 4)] name_bytes: Vec, flags: u32, size: u32, } impl PartEntry { fn name(&self) -> String { common::string_from_bytes(&self.name_bytes) } fn is_valid(&self) -> bool { self.name().is_ascii() } fn is_encrypted(&self) -> bool { (self.flags & 1 << 0) != 0 } fn is_compressed(&self) -> bool { //lzhs fs (self.flags & 1 << 8) != 0 } } static HEADER_KEY: [u8; 16] = [ 0x09, 0x29, 0x10, 0x94, 0x09, 0x29, 0x10, 0x94, 0x09, 0x29, 0x10, 0x94, 0x09, 0x29, 0x10, 0x94, ]; static HEADER_IV: [u8; 16] = [0x00; 16]; pub fn is_mtk_pkg_file(file: &File) -> bool { let mut encrypted_header = common::read_file(&file, 0, 144).expect("Failed to read from file."); let mut header = decrypt_aes128_cbc_nopad(&encrypted_header, &HEADER_KEY, &HEADER_IV).expect("Decryption error!"); if &header[4..12] == b"#DH@FiRm" { true } else { // try for philips which has additional 128 bytes at beginning encrypted_header = common::read_file(&file, 128, 144).expect("Failed to read from file."); header = decrypt_aes128_cbc_nopad(&encrypted_header, &HEADER_KEY, &HEADER_IV).expect("Decryption error!"); if &header[4..12] == b"#DH@FiRm" { true } else { false } } } pub fn extract_mtk_pkg(mut file: &File, output_folder: &str) -> Result<(), Box> { let file_size = file.metadata()?.len(); let encrypted_header = common::read_exact(&mut file, 144)?; let header = decrypt_aes128_cbc_nopad(&encrypted_header, &HEADER_KEY, &HEADER_IV)?; let mut hdr_reader = Cursor::new(header); let hdr: Header = hdr_reader.read_le()?; println!("File info:\nFile size: {}\nVendor magic: {}\nVersion info: {}\nProduct name: {}" , hdr.file_size, hdr.vendor_magic(), hdr.version(), hdr.product_name()); let mut part_n = 0; while file.stream_position()? < file_size as u64 { part_n += 1; let part_entry: PartEntry = file.read_le()?; if !part_entry.is_valid() {break}; println!("\n#{} - {}, Size: {}{} {}", part_n, part_entry.name(), part_entry.size, if part_entry.is_compressed() {" [COMPRESSED]"} else {""}, if part_entry.is_encrypted() {"[ENCRYPTED]"} else {""} ); let data = common::read_exact(&mut file, part_entry.size as usize + 48)?; if part_entry.size == 0 { println!("- Empty entry, skipping!"); continue } let mut matching_key: Option<[u8; 16]> = None; let mut matching_iv: Option<[u8; 16]> = None; if part_entry.is_encrypted() { let crypted_header = &data[..48]; // try decrypting with vendor magic repeated 4 times (works for most) let mut key = [0u8; 16]; for i in 0..4 { key[i * 4..(i + 1) * 4].copy_from_slice(&hdr.vendor_magic_bytes); } let try_decrypt = decrypt_aes128_cbc_nopad(&crypted_header, &key, &HEADER_IV)?; if try_decrypt.starts_with(b"reserved mtk inc") { println!("- Decrypting with 4xVendor magic..."); matching_key = Some(key); matching_iv = Some(HEADER_IV); } else { //try decrypting with one of custom keys for (key_hex, iv_hex, name) in keys::MTK_PKG_CUST { let key_array: [u8; 16] = hex::decode(key_hex)?.as_slice().try_into()?; let iv_array: [u8; 16] = hex::decode(iv_hex)?.as_slice().try_into()?; let try_decrypt = decrypt_aes128_cbc_nopad(&crypted_header, &key_array, &iv_array)?; if try_decrypt.starts_with(b"reserved mtk inc") { println!("- Decrypting with key {}...", name); matching_key = Some(key_array); matching_iv = Some(iv_array); break } } } } let mut out_data; if matching_key.is_some() && matching_iv.is_some() { let (key_array, iv_array) = (matching_key.unwrap(), matching_iv.unwrap()); //data aligned to 16 bytes is AES encrypted. the remaining unaligned data is XORed with the key let align_len = data.len() & !15; let (aes_enc, xor_tail) = data.split_at(align_len); out_data = decrypt_aes128_cbc_nopad(aes_enc, &key_array, &iv_array)?; for (i, &b) in xor_tail.iter().enumerate() { out_data.push(b ^ key_array[i % key_array.len()]); } } else { println!("- Failed to decrypt data!"); continue } //strip iMtK thing and get version let extra_header_len = if &out_data[48..52] == b"iMtK" { let imtk_len = u32::from_le_bytes(out_data[52..56].try_into().unwrap()); if &out_data[56..60] != b"iPAd" { let version_len = u32::from_le_bytes(out_data[56..60].try_into().unwrap()); let version = common::string_from_bytes(&out_data[60..60 + version_len as usize]); println!("- Version: {}", version); } imtk_len + 8 } else { 0 }; //for compressed part create temp file let output_path = Path::new(&output_folder).join(part_entry.name() + if part_entry.is_compressed() {".lzhs"} else {".bin"}); fs::create_dir_all(&output_folder)?; let mut out_file = OpenOptions::new().write(true).read(true)/* for lzhs */.create(true).open(&output_path)?; out_file.write_all(&out_data[48 + extra_header_len as usize..])?; if part_entry.is_compressed() { let lzhs_out_path = Path::new(&output_folder).join(part_entry.name() + ".bin"); match decompress_lzhs_fs_file2file(&out_file, lzhs_out_path) { Ok(()) => { println!("- Decompressed Successfully!"); //after successfull decompression remove the temporary .lzhs file fs::remove_file(&output_path)?; }, Err(e) => { eprintln!("Failed to decompress partition!, Error: {}. Saving compressed data...", e); //if the decompression is not successfull leave out compressed data. } } } println!("-- Saved file!"); } println!("\nExtraction finished!"); Ok(()) }