pátek 1. června 2018

Reverní inženýrství dumpnutého souboru z FLASH paměti

Jako příklad nám tentokrát poslouží testovací image (SD.img), ten se skládám z úvodní FAT ze které startuje jádro a druhé EXT4, kde jsou uložena uživatelská data:

root@Jenda:/home/jenda/Dokumenty# file SD.img 
SD.img: DOS/MBR boot sector;
partition 1 : ID=0xb, start-CHS (0x0,32,33), end-CHS (0x4,85,17), startsector 2048, 67584 sectors;
partition 2 : ID=0x7, start-CHS (0x4,85,18), end-CHS (0x8,105,33), startsector 69632, 65536 sectors;
partition 3 : ID=0x82, start-CHS (0x8,105,34), end-CHS (0xc,125,49), startsector 135168, 65536 sectors;
partition 4 : ID=0x5, start-CHS (0xc,125,50), end-CHS (0x3ff,254,63), startsector 200704, 30248960 sectors

oot@Jenda:/home/jenda/Dokumenty# fdisk -l SD.img 
Disk SD.img: 360 MiB, 377487360 bytes, 737280 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: dos
Disk identifier: 0x8dbcd0fa

Device     Boot  Start      End  Sectors  Size Id Type
SD.img1           2048    69631    67584   33M  b W95 FAT32
SD.img2          69632   135167    65536   32M  7 HPFS/NTFS/exFAT
SD.img3         135168   200703    65536   32M 82 Linux swap / Solaris
SD.img4         200704 30449663 30248960 14,4G  5 Extended
SD.img5         202752   268287    65536   32M 83 Linux
SD.img6         270336   335871    65536   32M 83 Linux
SD.img7         337920   403455    65536   32M 83 Linux
SD.img8         405504   471039    65536   32M 83 Linux
SD.img9         602112   667647    65536   32M 83 Linux

root@Jenda:/home/jenda/Dokumenty# strings -10 os.img | head
/media/jenda/62ca0b6d-6291-4c40-b1fd-11bc291e4a38
@${:@${:45
/proc/kcore
/proc/self/fd
libfakeroot-tcp.so
libasn1-samba4.so.8.0.0
libcom_err-samba4.so.0.25
libgssapi-samba4.so.2.0.0
libhcrypto-samba4.so.5.0.1
libheimbase-samba4.so.1.0.0

root@Jenda:/home/jenda/Dokumenty# file os.img 
os.img: Linux rev 1.0 ext4 filesystem data, UUID=62ca0b6d-6291-4c40-b1fd-11bc291e4a38 (needs journal recovery) (extents) (64bit) (large files)




oot@Jenda:/home/jenda/Dokumenty# binwalk SD.img 

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
1597952       0x186200        PNG image, 1600 x 900, 8-bit/color RGBA, non-interlaced
1598046       0x18625E        Zlib compressed data, default compression
18386944      0x1189000       JPEG image data, EXIF standard
18386956      0x118900C       TIFF image data, little-endian offset of first image directory: 8
18388032      0x1189440       JPEG image data, JFIF standard 1.01
18394717      0x118AE5D       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
19980288      0x130E000       JPEG image data, EXIF standard
19980300      0x130E00C       TIFF image data, little-endian offset of first image directory: 8
19981376      0x130E440       JPEG image data, JFIF standard 1.01
24436736      0x174E000       JPEG image data, EXIF standard
24436748      0x174E00C       TIFF image data, little-endian offset of first image directory: 8
24437824      0x174E440       JPEG image data, JFIF standard 1.01
24443250      0x174F972       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
25763840      0x1892000       JPEG image data, EXIF standard
25763852      0x189200C       TIFF image data, little-endian offset of first image directory: 8
25764928      0x1892440       JPEG image data, JFIF standard 1.01
25770785      0x1893B21       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
27049984      0x19CC000       JPEG image data, EXIF standard
27049996      0x19CC00C       TIFF image data, little-endian offset of first image directory: 8
27051072      0x19CC440       JPEG image data, JFIF standard 1.01
27055034      0x19CD3BA       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
28946432      0x1B9B000       JPEG image data, EXIF standard
28946444      0x1B9B00C       TIFF image data, little-endian offset of first image directory: 8
28947520      0x1B9B440       JPEG image data, JFIF standard 1.01
28953720      0x1B9CC78       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
30304699      0x1CE69BB       StuffIt Archive (data): T!
30715904      0x1D4B000       JPEG image data, EXIF standard
30715916      0x1D4B00C       TIFF image data, little-endian offset of first image directory: 8
30716992      0x1D4B440       JPEG image data, JFIF standard 1.01
30721565      0x1D4C61D       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
33013760      0x1F7C000       JPEG image data, EXIF standard
33013772      0x1F7C00C       TIFF image data, little-endian offset of first image directory: 8
33014848      0x1F7C440       JPEG image data, JFIF standard 1.01
33021390      0x1F7DDCE       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
34172928      0x2097000       JPEG image data, EXIF standard
34172940      0x209700C       TIFF image data, little-endian offset of first image directory: 8
34174016      0x2097440       JPEG image data, JFIF standard 1.01
34180091      0x2098BFB       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
37224448      0x2380000       JPEG image data, EXIF standard
37224460      0x238000C       TIFF image data, little-endian offset of first image directory: 8
37225582      0x238046E       JPEG image data, JFIF standard 1.01
37231575      0x2381BD7       Copyright string: "Copyright (c) 1998 Hewlett-Packard Company"
37234643      0x23827D3       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
37234801      0x2382871       Unix path: /ns.adobe.com/exif/1.0/aux/"
37234926      0x23828EE       Unix path: /ns.adobe.com/xap/1.0/mm/"
37234984      0x2382928       Unix path: /ns.adobe.com/xap/1.0/sType/ResourceEvent#"
37235059      0x2382973       Unix path: /ns.adobe.com/xap/1.0/sType/ResourceRef#"
37235129      0x23829B9       Unix path: /purl.org/dc/elements/1.1/"
37235186      0x23829F2       Unix path: /zoner.com/xmp/userdata/1.0/">
40169055      0x264EE5F       Unix path: /0/1/2/3/4/5/6/7/8/9/:/;/</=/>/?/@/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/[/\/]/^/_/`/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o
48455680      0x2E36000       JPEG image data, EXIF standard
48455692      0x2E3600C       TIFF image data, little-endian offset of first image directory: 8
48456768      0x2E36440       JPEG image data, JFIF standard 1.01
48462497      0x2E37AA1       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
54525952      0x3400000       PNG image, 1600 x 900, 8-bit/color RGBA, non-interlaced
54526046      0x340005E       Zlib compressed data, default compression
55386112      0x34D2000       JPEG image data, EXIF standard
55386124      0x34D200C       TIFF image data, little-endian offset of first image directory: 8
55387200      0x34D2440       JPEG image data, JFIF standard 1.01
55391549      0x34D353D       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
56520704      0x35E7000       JPEG image data, EXIF standard
56520716      0x35E700C       TIFF image data, little-endian offset of first image directory: 8
56521792      0x35E7440       JPEG image data, JFIF standard 1.01
56526912      0x35E8840       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
57831424      0x3727000       JPEG image data, EXIF standard
57831436      0x372700C       TIFF image data, little-endian offset of first image directory: 8
57832512      0x3727440       JPEG image data, JFIF standard 1.01
57837476      0x37287A4       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
59150336      0x3869000       JPEG image data, EXIF standard
59150348      0x386900C       TIFF image data, little-endian offset of first image directory: 8
59151424      0x3869440       JPEG image data, JFIF standard 1.01
59155283      0x386A353       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
60960768      0x3A23000       JPEG image data, EXIF standard
60960780      0x3A2300C       TIFF image data, little-endian offset of first image directory: 8
60961856      0x3A23440       JPEG image data, JFIF standard 1.01
60967526      0x3A24A66       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
63651840      0x3CB4000       JPEG image data, EXIF standard
63651852      0x3CB400C       TIFF image data, little-endian offset of first image directory: 8
63652928      0x3CB4440       JPEG image data, JFIF standard 1.01
63656233      0x3CB5129       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
64958464      0x3DF3000       JPEG image data, EXIF standard
64958476      0x3DF300C       TIFF image data, little-endian offset of first image directory: 8
64959552      0x3DF3440       JPEG image data, JFIF standard 1.01
64964588      0x3DF47EC       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
66359296      0x3F49000       JPEG image data, EXIF standard
66359308      0x3F4900C       TIFF image data, little-endian offset of first image directory: 8
66360384      0x3F49440       JPEG image data, JFIF standard 1.01
66364519      0x3F4A467       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
67342336      0x4039000       JPEG image data, EXIF standard
67342348      0x403900C       TIFF image data, little-endian offset of first image directory: 8
67343424      0x4039440       JPEG image data, JFIF standard 1.01
67348247      0x403A717       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
83116032      0x4F44000       JPEG image data, EXIF standard
83116044      0x4F4400C       TIFF image data, little-endian offset of first image directory: 8
83117120      0x4F44440       JPEG image data, JFIF standard 1.01
83121504      0x4F45560       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
85532672      0x5192000       JPEG image data, EXIF standard
85532684      0x519200C       TIFF image data, little-endian offset of first image directory: 8
85533760      0x5192440       JPEG image data, JFIF standard 1.01
85538051      0x5193503       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
88506368      0x5468000       JPEG image data, EXIF standard
88506380      0x546800C       TIFF image data, little-endian offset of first image directory: 8
88507456      0x5468440       JPEG image data, JFIF standard 1.01
88510970      0x54691FA       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
89755648      0x5599000       JPEG image data, EXIF standard
89755660      0x559900C       TIFF image data, little-endian offset of first image directory: 8
89756736      0x5599440       JPEG image data, JFIF standard 1.01
89761211      0x559A5BB       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
90961523      0x56BF673       MySQL ISAM index file Version 2
91942912      0x57AF000       JPEG image data, EXIF standard
91942924      0x57AF00C       TIFF image data, little-endian offset of first image directory: 8
91944000      0x57AF440       JPEG image data, JFIF standard 1.01
91951615      0x57B11FF       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
100536320     0x5FE1000       JPEG image data, EXIF standard
100536332     0x5FE100C       TIFF image data, little-endian offset of first image directory: 8
100537408     0x5FE1440       JPEG image data, JFIF standard 1.01
100540533     0x5FE2075       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
102068224     0x6157000       JPEG image data, EXIF standard
102068236     0x615700C       TIFF image data, little-endian offset of first image directory: 8
102069312     0x6157440       JPEG image data, JFIF standard 1.01
102077178     0x61592FA       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
103809024     0x6300000       Linux EXT filesystem, rev 1.0, ext2 filesystem data, UUID=48a93cf6-6189-46c5-b646-e674c1f5c1f5
104334336     0x6380400       PNG image, 1600 x 900, 8-bit/color RGBA, non-interlaced
104334430     0x638045E       Zlib compressed data, default compression
112197632     0x6B00000       Linux EXT filesystem, rev 1.0, ext2 filesystem data (mounted or unclean), UUID=48a93cf6-6189-46c5-b646-e674c1f5c1f5
128974848     0x7B00000       Linux EXT filesystem, rev 1.0, ext2 filesystem data (mounted or unclean), UUID=48a93cf6-6189-46c5-b646-e674c1f5c1f5
138399744     0x83FD000       JPEG image data, EXIF standard
138399756     0x83FD00C       TIFF image data, little-endian offset of first image directory: 8
138400832     0x83FD440       JPEG image data, JFIF standard 1.01
138406169     0x83FE919       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
138412032     0x8400000       Linux EXT filesystem, rev 1.0, ext3 filesystem data, UUID=6ddc6433-c044-49ed-872e-02dca061a061
138833920     0x8467000       Linux EXT filesystem, rev 1.0, ext3 filesystem data, UUID=6ddc6433-c044-49ed-872e-02dca061a061
143131648     0x8880400       PNG image, 1600 x 900, 8-bit/color RGBA, non-interlaced
143131742     0x888045E       Zlib compressed data, default compression
146800640     0x8C00000       Linux EXT filesystem, rev 1.0, ext3 filesystem data, UUID=6ddc6433-c044-49ed-872e-02dca061a061
163577856     0x9C00000       Linux EXT filesystem, rev 1.0, ext3 filesystem data, UUID=6ddc6433-c044-49ed-872e-02dca061a061
173015040     0xA500000       Linux EXT filesystem, rev 1.0, ext4 filesystem data, UUID=e36a217d-4124-4192-9bcf-2a2f83d183d1
181403648     0xAD00000       Linux EXT filesystem, rev 1.0, ext4 filesystem data, UUID=e36a217d-4124-4192-9bcf-2a2f83d183d1
181536768     0xAD20800       PNG image, 1600 x 900, 8-bit/color RGBA, non-interlaced
181536862     0xAD2085E       Zlib compressed data, default compression
189812736     0xB505000       Linux EXT filesystem, rev 1.0, ext4 filesystem data, UUID=e36a217d-4124-4192-9bcf-2a2f83d183d1
198180864     0xBD00000       Linux EXT filesystem, rev 1.0, ext4 filesystem data, UUID=e36a217d-4124-4192-9bcf-2a2f83d183d1
207699968     0xC614000       PNG image, 1600 x 900, 8-bit/color RGBA, non-interlaced
207700062     0xC61405E       Zlib compressed data, default compression
243838976     0xE88B000       JPEG image data, EXIF standard
243838988     0xE88B00C       TIFF image data, little-endian offset of first image directory: 8
243840040     0xE88B428       JPEG image data, JFIF standard 1.01
243848586     0xE88D58A       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
246575104     0xEB27000       JPEG image data, EXIF standard
246575116     0xEB2700C       TIFF image data, little-endian offset of first image directory: 8
246576168     0xEB27428       JPEG image data, JFIF standard 1.01
246579950     0xEB282EE       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
248356864     0xECDA000       JPEG image data, EXIF standard
248356876     0xECDA00C       TIFF image data, little-endian offset of first image directory: 8
248357928     0xECDA428       JPEG image data, JFIF standard 1.01
248362031     0xECDB42F       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
249733120     0xEE2A000       JPEG image data, EXIF standard
249733132     0xEE2A00C       TIFF image data, little-endian offset of first image directory: 8
249734184     0xEE2A428       JPEG image data, JFIF standard 1.01
249741265     0xEE2BFD1       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
251301888     0xEFA9000       JPEG image data, EXIF standard
251301900     0xEFA900C       TIFF image data, little-endian offset of first image directory: 8
251302952     0xEFA9428       JPEG image data, JFIF standard 1.01
251310356     0xEFAB114       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
253190144     0xF176000       JPEG image data, EXIF standard
253190156     0xF17600C       TIFF image data, little-endian offset of first image directory: 8
253191208     0xF176428       JPEG image data, JFIF standard 1.01
253197748     0xF177DB4       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
254844928     0xF30A000       JPEG image data, EXIF standard
254844940     0xF30A00C       TIFF image data, little-endian offset of first image directory: 8
254845992     0xF30A428       JPEG image data, JFIF standard 1.01
254851080     0xF30B808       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
256901120     0xF500000       JPEG image data, EXIF standard
256901132     0xF50000C       TIFF image data, little-endian offset of first image directory: 8
256902184     0xF500428       JPEG image data, JFIF standard 1.01
256911432     0xF502848       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
258777088     0xF6CA000       JPEG image data, EXIF standard
258777100     0xF6CA00C       TIFF image data, little-endian offset of first image directory: 8
258778152     0xF6CA428       JPEG image data, JFIF standard 1.01
258782612     0xF6CB594       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
260763648     0xF8AF000       JPEG image data, EXIF standard
260763660     0xF8AF00C       TIFF image data, little-endian offset of first image directory: 8
260764712     0xF8AF428       JPEG image data, JFIF standard 1.01
260771843     0xF8B1003       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
262557696     0xFA65000       JPEG image data, EXIF standard
262557708     0xFA6500C       TIFF image data, little-endian offset of first image directory: 8
262558760     0xFA65428       JPEG image data, JFIF standard 1.01
262566759     0xFA67367       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
264364032     0xFC1E000       JPEG image data, EXIF standard
264364044     0xFC1E00C       TIFF image data, little-endian offset of first image directory: 8
264365096     0xFC1E428       JPEG image data, JFIF standard 1.01
264369506     0xFC1F562       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
266240000     0xFDE8000       JPEG image data, EXIF standard
266240012     0xFDE800C       TIFF image data, little-endian offset of first image directory: 8
266241064     0xFDE8428       JPEG image data, JFIF standard 1.01
266248944     0xFDEA2F0       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
268189696     0xFFC4000       JPEG image data, EXIF standard
268189708     0xFFC400C       TIFF image data, little-endian offset of first image directory: 8
268190760     0xFFC4428       JPEG image data, JFIF standard 1.01
268198838     0xFFC63B6       Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
269975552     0x10178000      JPEG image data, EXIF standard
269975564     0x1017800C      TIFF image data, little-endian offset of first image directory: 8
269976616     0x10178428      JPEG image data, JFIF standard 1.01
269981697     0x10179801      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
271765504     0x1032D000      JPEG image data, EXIF standard
271765516     0x1032D00C      TIFF image data, little-endian offset of first image directory: 8
271766568     0x1032D428      JPEG image data, JFIF standard 1.01
271775765     0x1032F815      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
273756160     0x10513000      JPEG image data, EXIF standard
273756172     0x1051300C      TIFF image data, little-endian offset of first image directory: 8
273757224     0x10513428      JPEG image data, JFIF standard 1.01
273762428     0x1051487C      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
275521536     0x106C2000      JPEG image data, EXIF standard
275521548     0x106C200C      TIFF image data, little-endian offset of first image directory: 8
275522600     0x106C2428      JPEG image data, JFIF standard 1.01
275527739     0x106C383B      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
277340160     0x1087E000      JPEG image data, EXIF standard
277340172     0x1087E00C      TIFF image data, little-endian offset of first image directory: 8
277341224     0x1087E428      JPEG image data, JFIF standard 1.01
277346065     0x1087F711      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
279044096     0x10A1E000      JPEG image data, EXIF standard
279044108     0x10A1E00C      TIFF image data, little-endian offset of first image directory: 8
279045160     0x10A1E428      JPEG image data, JFIF standard 1.01
279053054     0x10A202FE      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
280821760     0x10BD0000      JPEG image data, EXIF standard
280821772     0x10BD000C      TIFF image data, little-endian offset of first image directory: 8
280822824     0x10BD0428      JPEG image data, JFIF standard 1.01
280831492     0x10BD2604      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
282411008     0x10D54000      JPEG image data, EXIF standard
282411020     0x10D5400C      TIFF image data, little-endian offset of first image directory: 8
282412072     0x10D54428      JPEG image data, JFIF standard 1.01
282417244     0x10D5585C      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
284065792     0x10EE8000      JPEG image data, EXIF standard
284065804     0x10EE800C      TIFF image data, little-endian offset of first image directory: 8
284066856     0x10EE8428      JPEG image data, JFIF standard 1.01
284075358     0x10EEA55E      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
285609984     0x11061000      JPEG image data, EXIF standard
285609996     0x1106100C      TIFF image data, little-endian offset of first image directory: 8
285611048     0x11061428      JPEG image data, JFIF standard 1.01
285618680     0x110631F8      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
287281152     0x111F9000      JPEG image data, EXIF standard
287281164     0x111F900C      TIFF image data, little-endian offset of first image directory: 8
287282216     0x111F9428      JPEG image data, JFIF standard 1.01
287289284     0x111FAFC4      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
289140736     0x113BF000      JPEG image data, EXIF standard
289140748     0x113BF00C      TIFF image data, little-endian offset of first image directory: 8
289141800     0x113BF428      JPEG image data, JFIF standard 1.01
289150495     0x113C161F      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
290721792     0x11541000      JPEG image data, EXIF standard
290721804     0x1154100C      TIFF image data, little-endian offset of first image directory: 8
290722856     0x11541428      JPEG image data, JFIF standard 1.01
290729898     0x11542FAA      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
292155392     0x1169F000      JPEG image data, EXIF standard
292155404     0x1169F00C      TIFF image data, little-endian offset of first image directory: 8
292156456     0x1169F428      JPEG image data, JFIF standard 1.01
292164607     0x116A13FF      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
293634048     0x11808000      JPEG image data, EXIF standard
293634060     0x1180800C      TIFF image data, little-endian offset of first image directory: 8
293635112     0x11808428      JPEG image data, JFIF standard 1.01
293644038     0x1180A706      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
295026635     0x1195BFCB      LANCOM WWAN firmware
295313408     0x119A2000      JPEG image data, EXIF standard
295313420     0x119A200C      TIFF image data, little-endian offset of first image directory: 8
295314472     0x119A2428      JPEG image data, JFIF standard 1.01
295319468     0x119A37AC      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
297025536     0x11B44000      JPEG image data, EXIF standard
297025548     0x11B4400C      TIFF image data, little-endian offset of first image directory: 8
297026600     0x11B44428      JPEG image data, JFIF standard 1.01
297035065     0x11B46539      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
298758144     0x11CEB000      JPEG image data, EXIF standard
298758156     0x11CEB00C      TIFF image data, little-endian offset of first image directory: 8
298759208     0x11CEB428      JPEG image data, JFIF standard 1.01
298766809     0x11CED1D9      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
300642304     0x11EB7000      JPEG image data, EXIF standard
300642316     0x11EB700C      TIFF image data, little-endian offset of first image directory: 8
300643368     0x11EB7428      JPEG image data, JFIF standard 1.01
300648200     0x11EB8708      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
302399488     0x12064000      JPEG image data, EXIF standard
302399500     0x1206400C      TIFF image data, little-endian offset of first image directory: 8
302400552     0x12064428      JPEG image data, JFIF standard 1.01
302406113     0x120659E1      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
304467968     0x1225D000      JPEG image data, EXIF standard
304467980     0x1225D00C      TIFF image data, little-endian offset of first image directory: 8
304469032     0x1225D428      JPEG image data, JFIF standard 1.01
304475573     0x1225EDB5      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
306708480     0x12480000      JPEG image data, EXIF standard
306708492     0x1248000C      TIFF image data, little-endian offset of first image directory: 8
306709544     0x12480428      JPEG image data, JFIF standard 1.01
306715374     0x12481AEE      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
308281344     0x12600000      Linux EXT filesystem, rev 1.0, ext4 filesystem data, UUID=5d21c68d-e3ed-4c0e-9bc6-a2156b336b33
316669952     0x12E00000      Linux EXT filesystem, rev 1.0, ext4 filesystem data, UUID=5d21c68d-e3ed-4c0e-9bc6-a2156b336b33
316803072     0x12E20800      PNG image, 1600 x 900, 8-bit/color RGBA, non-interlaced
316803166     0x12E2085E      Zlib compressed data, default compression
325072896     0x13603800      Linux EXT filesystem, rev 1.0, ext4 filesystem data, UUID=5d21c68d-e3ed-4c0e-9bc6-a2156b336b33
333447168     0x13E00000      Linux EXT filesystem, rev 1.0, ext4 filesystem data, UUID=5d21c68d-e3ed-4c0e-9bc6-a2156b336b33
342611342     0x146BD58E      StuffIt Archive (data): T!
342900736     0x14704000      JPEG image data, EXIF standard
342900748     0x1470400C      TIFF image data, little-endian offset of first image directory: 8
342901800     0x14704428      JPEG image data, JFIF standard 1.01
342909452     0x1470620C      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
344596480     0x148A2000      JPEG image data, EXIF standard
344596492     0x148A200C      TIFF image data, little-endian offset of first image directory: 8
344597544     0x148A2428      JPEG image data, JFIF standard 1.01
344602223     0x148A366F      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
346017792     0x149FD000      JPEG image data, EXIF standard
346017804     0x149FD00C      TIFF image data, little-endian offset of first image directory: 8
346018856     0x149FD428      JPEG image data, JFIF standard 1.01
346023171     0x149FE503      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
347586560     0x14B7C000      JPEG image data, EXIF standard
347586572     0x14B7C00C      TIFF image data, little-endian offset of first image directory: 8
347587624     0x14B7C428      JPEG image data, JFIF standard 1.01
347592047     0x14B7D56F      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
349143040     0x14CF8000      JPEG image data, EXIF standard
349143052     0x14CF800C      TIFF image data, little-endian offset of first image directory: 8
349144104     0x14CF8428      JPEG image data, JFIF standard 1.01
349152591     0x14CFA54F      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
350769152     0x14E85000      JPEG image data, EXIF standard
350769164     0x14E8500C      TIFF image data, little-endian offset of first image directory: 8
350770216     0x14E85428      JPEG image data, JFIF standard 1.01
350775205     0x14E867A5      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
352825344     0x1507B000      JPEG image data, EXIF standard
352825356     0x1507B00C      TIFF image data, little-endian offset of first image directory: 8
352826408     0x1507B428      JPEG image data, JFIF standard 1.01
352831908     0x1507C9A4      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
354287616     0x151E0000      JPEG image data, EXIF standard
354287628     0x151E000C      TIFF image data, little-endian offset of first image directory: 8
354288680     0x151E0428      JPEG image data, JFIF standard 1.01
354296376     0x151E2238      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
356323328     0x153D1000      JPEG image data, EXIF standard
356323340     0x153D100C      TIFF image data, little-endian offset of first image directory: 8
356324392     0x153D1428      JPEG image data, JFIF standard 1.01
356328922     0x153D25DA      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
358850560     0x1563A000      JPEG image data, EXIF standard
358850572     0x1563A00C      TIFF image data, little-endian offset of first image directory: 8
358851624     0x1563A428      JPEG image data, JFIF standard 1.01
358859279     0x1563C20F      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
361099264     0x1585F000      JPEG image data, EXIF standard
361099276     0x1585F00C      TIFF image data, little-endian offset of first image directory: 8
361100328     0x1585F428      JPEG image data, JFIF standard 1.01
361104687     0x1586052F      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
362631168     0x159D5000      JPEG image data, EXIF standard
362631180     0x159D500C      TIFF image data, little-endian offset of first image directory: 8
362632232     0x159D5428      JPEG image data, JFIF standard 1.01
362639235     0x159D6F83      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
364613632     0x15BB9000      JPEG image data, EXIF standard
364613644     0x15BB900C      TIFF image data, little-endian offset of first image directory: 8
364614696     0x15BB9428      JPEG image data, JFIF standard 1.01
364619058     0x15BBA532      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
366006272     0x15D0D000      JPEG image data, EXIF standard
366006284     0x15D0D00C      TIFF image data, little-endian offset of first image directory: 8
366007336     0x15D0D428      JPEG image data, JFIF standard 1.01
366011239     0x15D0E367      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
367210496     0x15E33000      JPEG image data, EXIF standard
367210508     0x15E3300C      TIFF image data, little-endian offset of first image directory: 8
367211560     0x15E33428      JPEG image data, JFIF standard 1.01
367216300     0x15E346AC      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
368455680     0x15F63000      JPEG image data, EXIF standard
368455692     0x15F6300C      TIFF image data, little-endian offset of first image directory: 8
368456744     0x15F63428      JPEG image data, JFIF standard 1.01
368460593     0x15F64331      Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">

Žádné komentáře:

Okomentovat