• [^] # Re: Hachoir-subfile

    Posté par . En réponse au journal Mise à jour de BIOS/EFI sur carte mère dont le fabriquant ne fournit qu’un .exe (MSI A88X-G43). Évalué à 3.

    J'ai testé pour voir.
    Malheureusement aucun des deux ne trouve les positions.

    binwalk :

    DECIMAL HEXADECIMAL DESCRIPTION
    --------------------------------------------------------------------------------
    0 0x0 Microsoft executable, portable (PE)
    1908091 0x1D1D7B Copyright string: "Copyright (C)"
    1911072 0x1D2920 Microsoft executable, portable (PE)
    2164096 0x210580 Copyright string: "Copyright (C)"
    2181536 0x2149A0 Microsoft executable, portable (PE)
    2195543 0x218057 Microsoft executable, portable (PE)
    2426163 0x250533 UEFI PI Firmware Volume, volume size: 170812517, header size: 10, revision: 0, GUID: 75207965-6470-7461-2065-63616E63656C
    2440343 0x253C97 Copyright string: "Copyright (C)"
    2545879 0x26D8D7 Microsoft executable, portable (PE)
    2555103 0x26FCDF Object signature in DER format (PKCS header length: 4, sequence length: 6753
    2555252 0x26FD74 Certificate in DER format (x509 v3), header length: 4, sequence length: 890
    2556146 0x2700F2 Certificate in DER format (x509 v3), header length: 4, sequence length: 964
    2557114 0x2704BA Certificate in DER format (x509 v3), header length: 4, sequence length: 1276
    2558394 0x2709BA Certificate in DER format (x509 v3), header length: 4, sequence length: 1283
    2559681 0x270EC1 Certificate in DER format (x509 v3), header length: 4, sequence length: 1300
    2559852 0x270F6C Digi International firmware, load address: 0x204D6963, entry point: 0x66742053,
    2601773 0x27B32D Microsoft executable, portable (PE)
    2675500 0x28D32C Copyright string: "Copyright (C) 1992-1993 Jean-loup Gailly"
    2678981 0x28E0C5 CRC32 polynomial table, little endian
    2693421 0x29192D Microsoft executable, portable (PE)
    2783533 0x2A792D Microsoft executable, portable (PE)
    2802185 0x2AC209 Copyright string: "Copyright 2003 Compuware Corporation"
    2814261 0x2AF135 Object signature in DER format (PKCS header length: 4, sequence length: 7464
    2814410 0x2AF1CA Certificate in DER format (x509 v3), header length: 4, sequence length: 890
    2815304 0x2AF548 Certificate in DER format (x509 v3), header length: 4, sequence length: 964
    2816272 0x2AF910 Certificate in DER format (x509 v3), header length: 4, sequence length: 1016
    2817292 0x2AFD0C Certificate in DER format (x509 v3), header length: 4, sequence length: 1019
    2818315 0x2B010B Certificate in DER format (x509 v3), header length: 4, sequence length: 1214
    2819533 0x2B05CD Certificate in DER format (x509 v3), header length: 4, sequence length: 1407
    2821733 0x2B0E65 Microsoft executable, portable (PE)
    2846133 0x2B6DB5 Copyright string: "Copyright 2003 Compuware Corporation"
    2860653 0x2BA66D Object signature in DER format (PKCS header length: 4, sequence length: 7464
    2860802 0x2BA702 Certificate in DER format (x509 v3), header length: 4, sequence length: 890
    2861696 0x2BAA80 Certificate in DER format (x509 v3), header length: 4, sequence length: 964
    2862664 0x2BAE48 Certificate in DER format (x509 v3), header length: 4, sequence length: 1016
    2863684 0x2BB244 Certificate in DER format (x509 v3), header length: 4, sequence length: 1019
    2864707 0x2BB643 Certificate in DER format (x509 v3), header length: 4, sequence length: 1214
    2865925 0x2BBB05 Certificate in DER format (x509 v3), header length: 4, sequence length: 1407
    3130269 0x2FC39D UEFI PI Firmware Volume, volume size: 131072, header size: 0, revision: 0, EFI Firmware File System v2, GUID: 8C8CE578-8A3D-4F1C-3599-896185C32DD3
    3551125 0x362F95 SHA256 hash constants, little endian
    3924089 0x3BE079 SHA256 hash constants, little endian
    3929245 0x3BF49D Zlib compressed data, best compression
    4007069 0x3D249D Zlib compressed data, best compression
    4134045 0x3F149D Zlib compressed data, best compression
    4224157 0x40749D Zlib compressed data, best compression
    4252829 0x40E49D Zlib compressed data, best compression
    4506525 0x44C39D UEFI PI Firmware Volume, volume size: 5439488, header size: 0, revision: 0, EFI Firmware File System v2, GUID: 8C8CE578-8A3D-4F1C-3599-896185C32DD3
    4651056 0x46F830 gzip compressed data, last modified: 1971年05月24日 23:51:22 (bogus date)
    5435225 0x52EF59 Microsoft executable, portable (PE)
    5440425 0x5303A9 Microsoft executable, portable (PE)
    5770057 0x580B49 Microsoft executable, portable (PE)
    5780193 0x5832E1 Microsoft executable, portable (PE)
    6925239 0x69ABB7 Copyright string: "Copyright (C) %04x American Megatrends, Inc."
    8621793 0x838EE1 Microsoft executable, portable (PE)
    9946013 0x97C39D UEFI PI Firmware Volume, volume size: 1310720, header size: 0, revision: 0, EFI Firmware File System v2, GUID: 8C8CE578-8A3D-4F1C-3599-896185C32DD3
    9946137 0x97C419 Microsoft executable, portable (PE)
    9956005 0x97EAA5 Microsoft executable, portable (PE)
    9957877 0x97F1F5 Microsoft executable, portable (PE)
    9961909 0x9801B5 Microsoft executable, portable (PE)
    9966449 0x981371 Microsoft executable, portable (PE)
    9969033 0x981D89 Microsoft executable, portable (PE)
    10028205 0x9904AD Microsoft executable, portable (PE)
    10029405 0x99095D Microsoft executable, portable (PE)
    10035233 0x992021 Microsoft executable, portable (PE)
    10041173 0x993755 Microsoft executable, portable (PE)
    10044325 0x9943A5 Microsoft executable, portable (PE)
    10045425 0x9947F1 Microsoft executable, portable (PE)
    10047753 0x995109 Microsoft executable, portable (PE)
    10062261 0x9989B5 Microsoft executable, portable (PE)
    10064429 0x99922D Microsoft executable, portable (PE)
    10067785 0x999F49 Microsoft executable, portable (PE)
    10072345 0x99B119 Microsoft executable, portable (PE)
    10077905 0x99C6D1 Microsoft executable, portable (PE)
    10085165 0x99E32D Microsoft executable, portable (PE)
    10096745 0x9A1069 Microsoft executable, portable (PE)
    10100905 0x9A20A9 Microsoft executable, portable (PE)
    10102953 0x9A28A9 Microsoft executable, portable (PE)
    10104169 0x9A2D69 Microsoft executable, portable (PE)
    10939297 0xA6EBA1 Microsoft executable, portable (PE)
    10940109 0xA6EECD Microsoft executable, portable (PE)
    10940889 0xA6F1D9 Microsoft executable, portable (PE)
    10941877 0xA6F5B5 Microsoft executable, portable (PE)
    10954577 0xA72751 Microsoft executable, portable (PE)
    10957121 0xA73141 Microsoft executable, portable (PE)
    10960889 0xA73FF9 Microsoft executable, portable (PE)
    10965161 0xA750A9 Microsoft executable, portable (PE)
    10987101 0xA7A65D Microsoft executable, portable (PE)
    11010605 0xA8022D SHA256 hash constants, little endian
    11017145 0xA81BB9 Microsoft executable, portable (PE)
    11019817 0xA82629 SHA256 hash constants, little endian
    11024601 0xA838D9 Microsoft executable, portable (PE)
    11025649 0xA83CF1 Microsoft executable, portable (PE)
    11027445 0xA843F5 Microsoft executable, portable (PE)
    11048325 0xA89585 SHA256 hash constants, little endian
    11066569 0xA8DCC9 Microsoft executable, portable (PE)
    11068273 0xA8E371 Microsoft executable, portable (PE)
    11069545 0xA8E869 Microsoft executable, portable (PE)
    11072177 0xA8F2B1 Microsoft executable, portable (PE)
    11073961 0xA8F9A9 Microsoft executable, portable (PE)
    11079141 0xA90DE5 Microsoft executable, portable (PE)
    11090057 0xA93889 Microsoft executable, portable (PE)
    11251673 0xABAFD9 Microsoft executable, portable (PE)
    

    Pour UWfirmforce je vais éviter de poster la sortie ici... elle fait 6 390 957 lignes.