Hi,
kann mir einer bitte ein minimales NK.bin erstellen. Darin sollte so wenig wie möglich drin sein. Die Box soll nur booten können. Es wäre wichtig für unsere Analyse.
Wir haben jetzt die orginal NK.bin analysiert und haben 143 Records gefunden.
Wenn wir jetzt ein neues NK-Image erstellen indem Linux unter einem WinCE-"Kleid" versteckt ist, haben wir die Möglichkeit dem "Bootloader" vorzutäuschen, dass es orignal WinCE-Image ist und der Bootloader entpackt dieses ins RAM.
Nachdem das Image ins RAM entpackt wurde, wird versucht das Betriebssystem zu starten. Leider bekommen wir hierbei folgende Fehlermeldung:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! ERROR: Unable to find a table of contents in the downloaded image. If !!
!! this is a multi-region image, move the chain file region to an address !!
!! following the kernel region. Aborting. !!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Kann uns einer erklären wie das WinCE-Image aufgebaut ist und was es mit dem "table of contents" auf sich hat. Wo muss dieses plaziert werden und was muss darin enthalten sein?
Falls insteresse besteht, könnten wir euch noch unser Analyse-Programm und den von uns erstellten NKbin-Maker zur Verfügung stellen.
Wir vermuten, dass sich die Einsprungadresse für das Betriebsystem im Record #143 ( 0x00223F78 ) befindet. Diese Adresse wird aber vom Record #4 ( 0x00221000 ) beschrieben. Wenn man jetzt die Adressen dieser zwei Records von einander abzieht und den Speicher-Offset dazuzählt erhält man die Einsprungadresse für das Betriebssystem. Könnte jemand dies bestätigen?
the_bartman & schweigen
kann mir einer bitte ein minimales NK.bin erstellen. Darin sollte so wenig wie möglich drin sein. Die Box soll nur booten können. Es wäre wichtig für unsere Analyse.
Wir haben jetzt die orginal NK.bin analysiert und haben 143 Records gefunden.
Code:
NK.bin analyzation
NK.bin seems to have a valid WinCE binary image data format (sync bytes found).
Image header starting at fileadress 0x00000007
Run-time image address: 0x00220000
Run-time image length: 0x00FB3008
Image record #1 starting at fileadress 0x0000000F
Record #1 address: 0x00220000
Record #1 length: 0x00000010
Record #1 checksum: 0x000007C7
Record #1 data starting at fileadress 0x0000001B
Image record #2 starting at fileadress 0x0000002B
Record #2 address: 0x00220040
Record #2 length: 0x00000008
Record #2 checksum: 0x00000222
Record #2 data starting at fileadress 0x00000037
Image record #3 starting at fileadress 0x0000003F
Record #3 address: 0x00220048
Record #3 length: 0x00000004
Record #3 checksum: 0x0000016F
Record #3 data starting at fileadress 0x0000004B
Image record #4 starting at fileadress 0x0000004F
Record #4 address: 0x00221000
Record #4 length: 0x0002DFF8
Record #4 checksum: 0x012F50A2
Record #4 data starting at fileadress 0x0000005B
Image record #5 starting at fileadress 0x0002E053
Record #5 address: 0x00250000
Record #5 length: 0x000003F0
Record #5 checksum: 0x00016AA1
Record #5 data starting at fileadress 0x0002E05F
Image record #6 starting at fileadress 0x0002E44F
Record #6 address: 0x00252000
Record #6 length: 0x000005E4
Record #6 checksum: 0x0002301D
Record #6 data starting at fileadress 0x0002E45B
Image record #7 starting at fileadress 0x0002EA3F
Record #7 address: 0x00253000
Record #7 length: 0x0004F9A0
Record #7 checksum: 0x022927E6
Record #7 data starting at fileadress 0x0002EA4B
Image record #8 starting at fileadress 0x0007E3EB
Record #8 address: 0x002A29A0
Record #8 length: 0x0002A840
Record #8 checksum: 0x0103EC47
Record #8 data starting at fileadress 0x0007E3F7
Image record #9 starting at fileadress 0x000A8C37
Record #9 address: 0x002CE000
Record #9 length: 0x000000A8
Record #9 checksum: 0x00000CEC
Record #9 data starting at fileadress 0x000A8C43
Image record #10 starting at fileadress 0x000A8CEB
Record #10 address: 0x002CF000
Record #10 length: 0x000753C4
Record #10 checksum: 0x0337BF15
Record #10 data starting at fileadress 0x000A8CF7
Image record #11 starting at fileadress 0x0011E0BB
Record #11 address: 0x00345000
Record #11 length: 0x00007404
Record #11 checksum: 0x0030526B
Record #11 data starting at fileadress 0x0011E0C7
Image record #12 starting at fileadress 0x001254CB
Record #12 address: 0x0034D000
Record #12 length: 0x00000118
Record #12 checksum: 0x00004C07
Record #12 data starting at fileadress 0x001254D7
Image record #13 starting at fileadress 0x001255EF
Record #13 address: 0x0034E000
Record #13 length: 0x000140A4
Record #13 checksum: 0x0083CD9D
Record #13 data starting at fileadress 0x001255FB
Image record #14 starting at fileadress 0x0013969F
Record #14 address: 0x00363000
Record #14 length: 0x0000A38C
Record #14 checksum: 0x0040992E
Record #14 data starting at fileadress 0x001396AB
Image record #15 starting at fileadress 0x00143A37
Record #15 address: 0x0036E000
Record #15 length: 0x00001410
Record #15 checksum: 0x00080245
Record #15 data starting at fileadress 0x00143A43
Image record #16 starting at fileadress 0x00144E53
Record #16 address: 0x00370000
Record #16 length: 0x0001E16C
Record #16 checksum: 0x00A5B241
Record #16 data starting at fileadress 0x00144E5F
Image record #17 starting at fileadress 0x00162FCB
Record #17 address: 0x0038F000
Record #17 length: 0x00001618
Record #17 checksum: 0x0008DF13
Record #17 data starting at fileadress 0x00162FD7
Image record #18 starting at fileadress 0x001645EF
Record #18 address: 0x00391000
Record #18 length: 0x00000FF8
Record #18 checksum: 0x00042BEC
Record #18 data starting at fileadress 0x001645FB
Image record #19 starting at fileadress 0x001655F3
Record #19 address: 0x00392000
Record #19 length: 0x00041880
Record #19 checksum: 0x01BEC22C
Record #19 data starting at fileadress 0x001655FF
Image record #20 starting at fileadress 0x001A6E7F
Record #20 address: 0x003D3880
Record #20 length: 0x00000B2C
Record #20 checksum: 0x00039D20
Record #20 data starting at fileadress 0x001A6E8B
Image record #21 starting at fileadress 0x001A79B7
Record #21 address: 0x003D5000
Record #21 length: 0x0000BFF0
Record #21 checksum: 0x00436DFA
Record #21 data starting at fileadress 0x001A79C3
Image record #22 starting at fileadress 0x001B39B3
Record #22 address: 0x003E1000
Record #22 length: 0x0001A57C
Record #22 checksum: 0x00862F27
Record #22 data starting at fileadress 0x001B39BF
Image record #23 starting at fileadress 0x001CDF3B
Record #23 address: 0x003FC000
Record #23 length: 0x00009200
Record #23 checksum: 0x00280C4A
Record #23 data starting at fileadress 0x001CDF47
Image record #24 starting at fileadress 0x001D7147
Record #24 address: 0x00406000
Record #24 length: 0x00000294
Record #24 checksum: 0x0000C15B
Record #24 data starting at fileadress 0x001D7153
Image record #25 starting at fileadress 0x001D73E7
Record #25 address: 0x00407000
Record #25 length: 0x0000022C
Record #25 checksum: 0x00004FC7
Record #25 data starting at fileadress 0x001D73F3
Image record #26 starting at fileadress 0x001D761F
Record #26 address: 0x00408000
Record #26 length: 0x000031F0
Record #26 checksum: 0x001327B6
Record #26 data starting at fileadress 0x001D762B
Image record #27 starting at fileadress 0x001DA81B
Record #27 address: 0x0040C000
Record #27 length: 0x00019660
Record #27 checksum: 0x00A332F8
Record #27 data starting at fileadress 0x001DA827
Image record #28 starting at fileadress 0x001F3E87
Record #28 address: 0x00426000
Record #28 length: 0x0001B0C8
Record #28 checksum: 0x00A9E6FA
Record #28 data starting at fileadress 0x001F3E93
Image record #29 starting at fileadress 0x0020EF5B
Record #29 address: 0x00442000
Record #29 length: 0x00000320
Record #29 checksum: 0x00006600
Record #29 data starting at fileadress 0x0020EF67
Image record #30 starting at fileadress 0x0020F287
Record #30 address: 0x00443000
Record #30 length: 0x000164F8
Record #30 checksum: 0x008F7012
Record #30 data starting at fileadress 0x0020F293
Image record #31 starting at fileadress 0x0022578B
Record #31 address: 0x0045A000
Record #31 length: 0x00004FEC
Record #31 checksum: 0x0022F11E
Record #31 data starting at fileadress 0x00225797
Image record #32 starting at fileadress 0x0022A783
Record #32 address: 0x0045F000
Record #32 length: 0x00001F9C
Record #32 checksum: 0x000CDD7B
Record #32 data starting at fileadress 0x0022A78F
Image record #33 starting at fileadress 0x0022C72B
Record #33 address: 0x00460F9C
Record #33 length: 0x00000054
Record #33 checksum: 0x0000112F
Record #33 data starting at fileadress 0x0022C737
Image record #34 starting at fileadress 0x0022C78B
Record #34 address: 0x00460FF0
Record #34 length: 0x0001506C
Record #34 checksum: 0x0089D6A9
Record #34 data starting at fileadress 0x0022C797
Image record #35 starting at fileadress 0x00241803
Record #35 address: 0x00477000
Record #35 length: 0x00007478
Record #35 checksum: 0x002784E6
Record #35 data starting at fileadress 0x0024180F
Image record #36 starting at fileadress 0x00248C87
Record #36 address: 0x0047F000
Record #36 length: 0x0000F278
Record #36 checksum: 0x0063DB81
Record #36 data starting at fileadress 0x00248C93
Image record #37 starting at fileadress 0x00257F0B
Record #37 address: 0x0048F000
Record #37 length: 0x0001654C
Record #37 checksum: 0x008E7C02
Record #37 data starting at fileadress 0x00257F17
Image record #38 starting at fileadress 0x0026E463
Record #38 address: 0x004A6000
Record #38 length: 0x0000308C
Record #38 checksum: 0x0013EB28
Record #38 data starting at fileadress 0x0026E46F
Image record #39 starting at fileadress 0x002714FB
Record #39 address: 0x004AA000
Record #39 length: 0x0001D648
Record #39 checksum: 0x00B8998E
Record #39 data starting at fileadress 0x00271507
Image record #40 starting at fileadress 0x0028EB4F
Record #40 address: 0x004C8000
Record #40 length: 0x00012570
Record #40 checksum: 0x007D58F1
Record #40 data starting at fileadress 0x0028EB5B
Image record #41 starting at fileadress 0x002A10CB
Record #41 address: 0x004DB000
Record #41 length: 0x0003F3E4
Record #41 checksum: 0x01A48F63
Record #41 data starting at fileadress 0x002A10D7
Image record #42 starting at fileadress 0x002E04BB
Record #42 address: 0x0051B000
Record #42 length: 0x00000010
Record #42 checksum: 0x00000004
Record #42 data starting at fileadress 0x002E04C7
Image record #43 starting at fileadress 0x002E04D7
Record #43 address: 0x0051C000
Record #43 length: 0x00017374
Record #43 checksum: 0x0095B9A9
Record #43 data starting at fileadress 0x002E04E3
Image record #44 starting at fileadress 0x002F7857
Record #44 address: 0x00534000
Record #44 length: 0x000060D8
Record #44 checksum: 0x00284BD0
Record #44 data starting at fileadress 0x002F7863
Image record #45 starting at fileadress 0x002FD93B
Record #45 address: 0x0053B000
Record #45 length: 0x00002208
Record #45 checksum: 0x000AA7E2
Record #45 data starting at fileadress 0x002FD947
Image record #46 starting at fileadress 0x002FFB4F
Record #46 address: 0x0053E000
Record #46 length: 0x00002604
Record #46 checksum: 0x000AF339
Record #46 data starting at fileadress 0x002FFB5B
Image record #47 starting at fileadress 0x0030215F
Record #47 address: 0x00541000
Record #47 length: 0x00001FF0
Record #47 checksum: 0x000C5B9B
Record #47 data starting at fileadress 0x0030216B
Image record #48 starting at fileadress 0x0030415B
Record #48 address: 0x00543000
Record #48 length: 0x0001A000
Record #48 checksum: 0x009CAE49
Record #48 data starting at fileadress 0x00304167
Image record #49 starting at fileadress 0x0031E167
Record #49 address: 0x0055D000
Record #49 length: 0x0002C418
Record #49 checksum: 0x0131D326
Record #49 data starting at fileadress 0x0031E173
Image record #50 starting at fileadress 0x0034A58B
Record #50 address: 0x0058A000
Record #50 length: 0x000120B0
Record #50 checksum: 0x00715B35
Record #50 data starting at fileadress 0x0034A597
Image record #51 starting at fileadress 0x0035C647
Record #51 address: 0x0059D000
Record #51 length: 0x00000580
Record #51 checksum: 0x000204D9
Record #51 data starting at fileadress 0x0035C653
Image record #52 starting at fileadress 0x0035CBD3
Record #52 address: 0x0059E000
Record #52 length: 0x0001D578
Record #52 checksum: 0x00D59FA9
Record #52 data starting at fileadress 0x0035CBDF
Image record #53 starting at fileadress 0x0037A157
Record #53 address: 0x005BC000
Record #53 length: 0x0001A524
Record #53 checksum: 0x00B1ED18
Record #53 data starting at fileadress 0x0037A163
Image record #54 starting at fileadress 0x00394687
Record #54 address: 0x005D7000
Record #54 length: 0x0000D4F0
Record #54 checksum: 0x004DDBC7
Record #54 data starting at fileadress 0x00394693
Image record #55 starting at fileadress 0x003A1B83
Record #55 address: 0x005E5000
Record #55 length: 0x00018608
Record #55 checksum: 0x006F7B52
Record #55 data starting at fileadress 0x003A1B8F
Image record #56 starting at fileadress 0x003BA197
Record #56 address: 0x005FE000
Record #56 length: 0x00018464
Record #56 checksum: 0x00A5CE37
Record #56 data starting at fileadress 0x003BA1A3
Image record #57 starting at fileadress 0x003D2607
Record #57 address: 0x00617000
Record #57 length: 0x00005078
Record #57 checksum: 0x001DB7C9
Record #57 data starting at fileadress 0x003D2613
Image record #58 starting at fileadress 0x003D768B
Record #58 address: 0x0061D000
Record #58 length: 0x0002B000
Record #58 checksum: 0x0118744A
Record #58 data starting at fileadress 0x003D7697
Image record #59 starting at fileadress 0x00402697
Record #59 address: 0x00648000
Record #59 length: 0x000A3788
Record #59 checksum: 0x0477D53B
Record #59 data starting at fileadress 0x004026A3
Image record #60 starting at fileadress 0x004A5E2B
Record #60 address: 0x006EB788
Record #60 length: 0x0003EA8C
Record #60 checksum: 0x0124938A
Record #60 data starting at fileadress 0x004A5E37
Image record #61 starting at fileadress 0x004E48C3
Record #61 address: 0x0072B000
Record #61 length: 0x00008000
Record #61 checksum: 0x00255AD3
Record #61 data starting at fileadress 0x004E48CF
Image record #62 starting at fileadress 0x004EC8CF
Record #62 address: 0x00733000
Record #62 length: 0x00278300
Record #62 checksum: 0x10A51ACD
Record #62 data starting at fileadress 0x004EC8DB
Image record #63 starting at fileadress 0x00764BDB
Record #63 address: 0x009AC000
Record #63 length: 0x0001833C
Record #63 checksum: 0x0084B02D
Record #63 data starting at fileadress 0x00764BE7
Image record #64 starting at fileadress 0x0077CF23
Record #64 address: 0x009C5000
Record #64 length: 0x0003F02C
Record #64 checksum: 0x01990DE2
Record #64 data starting at fileadress 0x0077CF2F
Image record #65 starting at fileadress 0x007BBF5B
Record #65 address: 0x00A05000
Record #65 length: 0x0000A0C8
Record #65 checksum: 0x00254A1C
Record #65 data starting at fileadress 0x007BBF67
Image record #66 starting at fileadress 0x007C602F
Record #66 address: 0x00A10000
Record #66 length: 0x000000D0
Record #66 checksum: 0x0000469E
Record #66 data starting at fileadress 0x007C603B
Image record #67 starting at fileadress 0x007C610B
Record #67 address: 0x00A11000
Record #67 length: 0x00028000
Record #67 checksum: 0x00BA420C
Record #67 data starting at fileadress 0x007C6117
Image record #68 starting at fileadress 0x007EE117
Record #68 address: 0x00A39000
Record #68 length: 0x00047DCC
Record #68 checksum: 0x01E8DDBF
Record #68 data starting at fileadress 0x007EE123
Image record #69 starting at fileadress 0x00835EEF
Record #69 address: 0x00A80DCC
Record #69 length: 0x000346C4
Record #69 checksum: 0x01464E02
Record #69 data starting at fileadress 0x00835EFB
Image record #70 starting at fileadress 0x0086A5BF
Record #70 address: 0x00AB6000
Record #70 length: 0x00003FFC
Record #70 checksum: 0x000CCD49
Record #70 data starting at fileadress 0x0086A5CB
Image record #71 starting at fileadress 0x0086E5C7
Record #71 address: 0x00ABA000
Record #71 length: 0x00040000
Record #71 checksum: 0x01B5308E
Record #71 data starting at fileadress 0x0086E5D3
Image record #72 starting at fileadress 0x008AE5D3
Record #72 address: 0x00AFA000
Record #72 length: 0x0003443C
Record #72 checksum: 0x0146EE53
Record #72 data starting at fileadress 0x008AE5DF
Image record #73 starting at fileadress 0x008E2A1B
Record #73 address: 0x00B2F000
Record #73 length: 0x0000D8CC
Record #73 checksum: 0x003DB423
Record #73 data starting at fileadress 0x008E2A27
Image record #74 starting at fileadress 0x008F02F3
Record #74 address: 0x00B3D000
Record #74 length: 0x00005190
Record #74 checksum: 0x001E65E1
Record #74 data starting at fileadress 0x008F02FF
Image record #75 starting at fileadress 0x008F548F
Record #75 address: 0x00B43000
Record #75 length: 0x00008178
Record #75 checksum: 0x001FE040
Record #75 data starting at fileadress 0x008F549B
Image record #76 starting at fileadress 0x008FD613
Record #76 address: 0x00B4C000
Record #76 length: 0x00022070
Record #76 checksum: 0x00E7125D
Record #76 data starting at fileadress 0x008FD61F
Image record #77 starting at fileadress 0x0091F68F
Record #77 address: 0x00B6F000
Record #77 length: 0x000112D0
Record #77 checksum: 0x004B1C87
Record #77 data starting at fileadress 0x0091F69B
Image record #78 starting at fileadress 0x0093096B
Record #78 address: 0x00B81000
Record #78 length: 0x0001B01C
Record #78 checksum: 0x00ACA773
Record #78 data starting at fileadress 0x00930977
Image record #79 starting at fileadress 0x0094B993
Record #79 address: 0x00B9D000
Record #79 length: 0x0001F3AC
Record #79 checksum: 0x009946A1
Record #79 data starting at fileadress 0x0094B99F
Image record #80 starting at fileadress 0x0096AD4B
Record #80 address: 0x00BBD000
Record #80 length: 0x00001530
Record #80 checksum: 0x000826A4
Record #80 data starting at fileadress 0x0096AD57
Image record #81 starting at fileadress 0x0096C287
Record #81 address: 0x00BBF000
Record #81 length: 0x00001608
Record #81 checksum: 0x0007EB0A
Record #81 data starting at fileadress 0x0096C293
Image record #82 starting at fileadress 0x0096D89B
Record #82 address: 0x00BC1000
Record #82 length: 0x00003504
Record #82 checksum: 0x00166EED
Record #82 data starting at fileadress 0x0096D8A7
Image record #83 starting at fileadress 0x00970DAB
Record #83 address: 0x00BC5000
Record #83 length: 0x00030298
Record #83 checksum: 0x00F67A18
Record #83 data starting at fileadress 0x00970DB7
Image record #84 starting at fileadress 0x009A104F
Record #84 address: 0x00BF6000
Record #84 length: 0x00001FD8
Record #84 checksum: 0x000AEE7D
Record #84 data starting at fileadress 0x009A105B
Image record #85 starting at fileadress 0x009A3033
Record #85 address: 0x00BF8000
Record #85 length: 0x00004FF4
Record #85 checksum: 0x001B3F30
Record #85 data starting at fileadress 0x009A303F
Image record #86 starting at fileadress 0x009A8033
Record #86 address: 0x00BFD000
Record #86 length: 0x000A7030
Record #86 checksum: 0x04710C7F
Record #86 data starting at fileadress 0x009A803F
Image record #87 starting at fileadress 0x00A4F06F
Record #87 address: 0x00CA4030
Record #87 length: 0x00007318
Record #87 checksum: 0x001EC140
Record #87 data starting at fileadress 0x00A4F07B
Image record #88 starting at fileadress 0x00A56393
Record #88 address: 0x00CAC000
Record #88 length: 0x0002CFF8
Record #88 checksum: 0x011B0DC5
Record #88 data starting at fileadress 0x00A5639F
Image record #89 starting at fileadress 0x00A83397
Record #89 address: 0x00CD9000
Record #89 length: 0x00015504
Record #89 checksum: 0x004EF820
Record #89 data starting at fileadress 0x00A833A3
Image record #90 starting at fileadress 0x00A988A7
Record #90 address: 0x00CEF000
Record #90 length: 0x0000B010
Record #90 checksum: 0x004712A6
Record #90 data starting at fileadress 0x00A988B3
Image record #91 starting at fileadress 0x00AA38C3
Record #91 address: 0x00CFB000
Record #91 length: 0x0000D520
Record #91 checksum: 0x0051B8A0
Record #91 data starting at fileadress 0x00AA38CF
Image record #92 starting at fileadress 0x00AB0DEF
Record #92 address: 0x00D09000
Record #92 length: 0x00005FC8
Record #92 checksum: 0x0028AFCB
Record #92 data starting at fileadress 0x00AB0DFB
Image record #93 starting at fileadress 0x00AB6DC3
Record #93 address: 0x00D0F000
Record #93 length: 0x00001000
Record #93 checksum: 0x00069887
Record #93 data starting at fileadress 0x00AB6DCF
Image record #94 starting at fileadress 0x00AB7DCF
Record #94 address: 0x00D10000
Record #94 length: 0x000B28F0
Record #94 checksum: 0x046052B2
Record #94 data starting at fileadress 0x00AB7DDB
Image record #95 starting at fileadress 0x00B6A6CB
Record #95 address: 0x00DC28F0
Record #95 length: 0x00000710
Record #95 checksum: 0x0000C8B1
Record #95 data starting at fileadress 0x00B6A6D7
Image record #96 starting at fileadress 0x00B6ADE7
Record #96 address: 0x00DC3000
Record #96 length: 0x0008BEB0
Record #96 checksum: 0x03D7226D
Record #96 data starting at fileadress 0x00B6ADF3
Image record #97 starting at fileadress 0x00BF6CA3
Record #97 address: 0x00E4EEB0
Record #97 length: 0x00016150
Record #97 checksum: 0x00718D92
Record #97 data starting at fileadress 0x00BF6CAF
Image record #98 starting at fileadress 0x00C0CDFF
Record #98 address: 0x00E65000
Record #98 length: 0x0003C000
Record #98 checksum: 0x016A343E
Record #98 data starting at fileadress 0x00C0CE0B
Image record #99 starting at fileadress 0x00C48E0B
Record #99 address: 0x00EA1000
Record #99 length: 0x00005370
Record #99 checksum: 0x002C319C
Record #99 data starting at fileadress 0x00C48E17
Image record #100 starting at fileadress 0x00C4E187
Record #100 address: 0x00EA7000
Record #100 length: 0x00000370
Record #100 checksum: 0x000070F3
Record #100 data starting at fileadress 0x00C4E193
Image record #101 starting at fileadress 0x00C4E503
Record #101 address: 0x00EA8000
Record #101 length: 0x0002E000
Record #101 checksum: 0x013CBDF1
Record #101 data starting at fileadress 0x00C4E50F
Image record #102 starting at fileadress 0x00C7C50F
Record #102 address: 0x00ED6000
Record #102 length: 0x00031494
Record #102 checksum: 0x0140BE88
Record #102 data starting at fileadress 0x00C7C51B
Image record #103 starting at fileadress 0x00CAD9AF
Record #103 address: 0x00F08000
Record #103 length: 0x000151D8
Record #103 checksum: 0x009007B1
Record #103 data starting at fileadress 0x00CAD9BB
Image record #104 starting at fileadress 0x00CC2B93
Record #104 address: 0x00F1E000
Record #104 length: 0x0000C474
Record #104 checksum: 0x00471581
Record #104 data starting at fileadress 0x00CC2B9F
Image record #105 starting at fileadress 0x00CCF013
Record #105 address: 0x00F2B000
Record #105 length: 0x00008484
Record #105 checksum: 0x00358DFE
Record #105 data starting at fileadress 0x00CCF01F
Image record #106 starting at fileadress 0x00CD74A3
Record #106 address: 0x00F34000
Record #106 length: 0x000382D8
Record #106 checksum: 0x016F48A2
Record #106 data starting at fileadress 0x00CD74AF
Image record #107 starting at fileadress 0x00D0F787
Record #107 address: 0x00F6D000
Record #107 length: 0x0000424C
Record #107 checksum: 0x00180998
Record #107 data starting at fileadress 0x00D0F793
Image record #108 starting at fileadress 0x00D139DF
Record #108 address: 0x00F72000
Record #108 length: 0x0000606C
Record #108 checksum: 0x0024F3F6
Record #108 data starting at fileadress 0x00D139EB
Image record #109 starting at fileadress 0x00D19A57
Record #109 address: 0x00F79000
Record #109 length: 0x00000260
Record #109 checksum: 0x000049D8
Record #109 data starting at fileadress 0x00D19A63
Image record #110 starting at fileadress 0x00D19CC3
Record #110 address: 0x00F7A000
Record #110 length: 0x00002FAC
Record #110 checksum: 0x0015E5B8
Record #110 data starting at fileadress 0x00D19CCF
Image record #111 starting at fileadress 0x00D1CC7B
Record #111 address: 0x00F7CFAC
Record #111 length: 0x00000054
Record #111 checksum: 0x0000109F
Record #111 data starting at fileadress 0x00D1CC87
Image record #112 starting at fileadress 0x00D1CCDB
Record #112 address: 0x00F7D000
Record #112 length: 0x00000254
Record #112 checksum: 0x00004969
Record #112 data starting at fileadress 0x00D1CCE7
Image record #113 starting at fileadress 0x00D1CF3B
Record #113 address: 0x00F7E000
Record #113 length: 0x00005340
Record #113 checksum: 0x001F4F95
Record #113 data starting at fileadress 0x00D1CF47
Image record #114 starting at fileadress 0x00D22287
Record #114 address: 0x00F84000
Record #114 length: 0x00000490
Record #114 checksum: 0x0000A85E
Record #114 data starting at fileadress 0x00D22293
Image record #115 starting at fileadress 0x00D22723
Record #115 address: 0x00F85000
Record #115 length: 0x00003460
Record #115 checksum: 0x0013DA47
Record #115 data starting at fileadress 0x00D2272F
Image record #116 starting at fileadress 0x00D25B8F
Record #116 address: 0x00F89000
Record #116 length: 0x0000B2E0
Record #116 checksum: 0x004A2891
Record #116 data starting at fileadress 0x00D25B9B
Image record #117 starting at fileadress 0x00D30E7B
Record #117 address: 0x00F95000
Record #117 length: 0x00000440
Record #117 checksum: 0x00009874
Record #117 data starting at fileadress 0x00D30E87
Image record #118 starting at fileadress 0x00D312C7
Record #118 address: 0x00F96000
Record #118 length: 0x00018134
Record #118 checksum: 0x009C6727
Record #118 data starting at fileadress 0x00D312D3
Image record #119 starting at fileadress 0x00D49407
Record #119 address: 0x00FAF000
Record #119 length: 0x00002418
Record #119 checksum: 0x000B0461
Record #119 data starting at fileadress 0x00D49413
Image record #120 starting at fileadress 0x00D4B82B
Record #120 address: 0x00FB2000
Record #120 length: 0x0000216C
Record #120 checksum: 0x000D3ED3
Record #120 data starting at fileadress 0x00D4B837
Image record #121 starting at fileadress 0x00D4D9A3
Record #121 address: 0x00FB5000
Record #121 length: 0x0000E438
Record #121 checksum: 0x004FD5BA
Record #121 data starting at fileadress 0x00D4D9AF
Image record #122 starting at fileadress 0x00D5BDE7
Record #122 address: 0x00FC4000
Record #122 length: 0x000200F8
Record #122 checksum: 0x00B10E0F
Record #122 data starting at fileadress 0x00D5BDF3
Image record #123 starting at fileadress 0x00D7BEEB
Record #123 address: 0x00FE5000
Record #123 length: 0x00001478
Record #123 checksum: 0x00061145
Record #123 data starting at fileadress 0x00D7BEF7
Image record #124 starting at fileadress 0x00D7D36F
Record #124 address: 0x00FE7000
Record #124 length: 0x00016398
Record #124 checksum: 0x00925A24
Record #124 data starting at fileadress 0x00D7D37B
Image record #125 starting at fileadress 0x00D93713
Record #125 address: 0x00FFE000
Record #125 length: 0x0000929C
Record #125 checksum: 0x003827D8
Record #125 data starting at fileadress 0x00D9371F
Image record #126 starting at fileadress 0x00D9C9BB
Record #126 address: 0x01008000
Record #126 length: 0x000010E0
Record #126 checksum: 0x000567A4
Record #126 data starting at fileadress 0x00D9C9C7
Image record #127 starting at fileadress 0x00D9DAA7
Record #127 address: 0x0100A000
Record #127 length: 0x0000901C
Record #127 checksum: 0x0035CEC3
Record #127 data starting at fileadress 0x00D9DAB3
Image record #128 starting at fileadress 0x00DA6ACF
Record #128 address: 0x01014000
Record #128 length: 0x000013B8
Record #128 checksum: 0x0005FFE7
Record #128 data starting at fileadress 0x00DA6ADB
Image record #129 starting at fileadress 0x00DA7E93
Record #129 address: 0x01016000
Record #129 length: 0x000014EC
Record #129 checksum: 0x0008052F
Record #129 data starting at fileadress 0x00DA7E9F
Image record #130 starting at fileadress 0x00DA938B
Record #130 address: 0x01018000
Record #130 length: 0x00000408
Record #130 checksum: 0x0000FDDD
Record #130 data starting at fileadress 0x00DA9397
Image record #131 starting at fileadress 0x00DA979F
Record #131 address: 0x01019000
Record #131 length: 0x0001C608
Record #131 checksum: 0x00D88E41
Record #131 data starting at fileadress 0x00DA97AB
Image record #132 starting at fileadress 0x00DC5DB3
Record #132 address: 0x01035608
Record #132 length: 0x0003459C
Record #132 checksum: 0x00BF0AC5
Record #132 data starting at fileadress 0x00DC5DBF
Image record #133 starting at fileadress 0x00DFA35B
Record #133 address: 0x01069BA4
Record #133 length: 0x00022A90
Record #133 checksum: 0x010B15D6
Record #133 data starting at fileadress 0x00DFA367
Image record #134 starting at fileadress 0x00E1CDF7
Record #134 address: 0x0108C634
Record #134 length: 0x000466F0
Record #134 checksum: 0x010EC0F2
Record #134 data starting at fileadress 0x00E1CE03
Image record #135 starting at fileadress 0x00E634F3
Record #135 address: 0x010D2D24
Record #135 length: 0x0001C924
Record #135 checksum: 0x006C3FAD
Record #135 data starting at fileadress 0x00E634FF
Image record #136 starting at fileadress 0x00E7FE23
Record #136 address: 0x010EF648
Record #136 length: 0x00027A9C
Record #136 checksum: 0x009ECAD0
Record #136 data starting at fileadress 0x00E7FE2F
Image record #137 starting at fileadress 0x00EA78CB
Record #137 address: 0x011170E4
Record #137 length: 0x00037C28
Record #137 checksum: 0x00EE48E9
Record #137 data starting at fileadress 0x00EA78D7
Image record #138 starting at fileadress 0x00EDF4FF
Record #138 address: 0x0114ED0C
Record #138 length: 0x000141A8
Record #138 checksum: 0x009CC2CA
Record #138 data starting at fileadress 0x00EDF50B
Image record #139 starting at fileadress 0x00EF36B3
Record #139 address: 0x01162EB4
Record #139 length: 0x0003A168
Record #139 checksum: 0x01C8BF9E
Record #139 data starting at fileadress 0x00EF36BF
Image record #140 starting at fileadress 0x00F2D827
Record #140 address: 0x0119D01C
Record #140 length: 0x00033C4C
Record #140 checksum: 0x0190C649
Record #140 data starting at fileadress 0x00F2D833
Image record #141 starting at fileadress 0x00F6147F
Record #141 address: 0x011D0C68
Record #141 length: 0x00000054
Record #141 checksum: 0x00000B1F
Record #141 data starting at fileadress 0x00F6148B
Image record #142 starting at fileadress 0x00F614DF
Record #142 address: 0x011D0CBC
Record #142 length: 0x0000234C
Record #142 checksum: 0x000C2836
Record #142 data starting at fileadress 0x00F614EB
Image record #143 starting at fileadress 0x00F63837
Image record #143 is the end record.
OS entry point set to adress 0x00223F78
Wenn wir jetzt ein neues NK-Image erstellen indem Linux unter einem WinCE-"Kleid" versteckt ist, haben wir die Möglichkeit dem "Bootloader" vorzutäuschen, dass es orignal WinCE-Image ist und der Bootloader entpackt dieses ins RAM.
Nachdem das Image ins RAM entpackt wurde, wird versucht das Betriebssystem zu starten. Leider bekommen wir hierbei folgende Fehlermeldung:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! ERROR: Unable to find a table of contents in the downloaded image. If !!
!! this is a multi-region image, move the chain file region to an address !!
!! following the kernel region. Aborting. !!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Kann uns einer erklären wie das WinCE-Image aufgebaut ist und was es mit dem "table of contents" auf sich hat. Wo muss dieses plaziert werden und was muss darin enthalten sein?
Falls insteresse besteht, könnten wir euch noch unser Analyse-Programm und den von uns erstellten NKbin-Maker zur Verfügung stellen.
Wir vermuten, dass sich die Einsprungadresse für das Betriebsystem im Record #143 ( 0x00223F78 ) befindet. Diese Adresse wird aber vom Record #4 ( 0x00221000 ) beschrieben. Wenn man jetzt die Adressen dieser zwei Records von einander abzieht und den Speicher-Offset dazuzählt erhält man die Einsprungadresse für das Betriebssystem. Könnte jemand dies bestätigen?
the_bartman & schweigen