Before I continue I think I found the program used to make the disk image and the FAT16 header: Fat16 header: 5E00 after all the 0's jump instruction (3bytes): 0xEB - something in asm 0x3C - something in asm 0x90 - asm nop bytes per sector - 0x02,0x03 i think im not sure if theres any padding. but i think the fat16 partition starts at 5E00
5E10 - total number of file alocation tables, has to be 2 and it is 2 OEM name (8bytes): MTOOL399 - reference to MTOOLS <http://mtools.linux.lu/> version 3.99 YAY i think this is the header! I g2g but heres the rest of my message enjoy :) 1B844 - start 0's 1BFFE - end 0s, nike xml 1D0AA - start 0's 1D7FE - end 0's, nike xml 1E856 - start 0's .. skipped just intervals of nike shit with variing amouts of 0's between... 3D6A9 - last byte of xml 3D7FF - strings of data: adjust~4xml tCals.xml(with varing bytes separating) CALIBW~1XML lots more bit seperated strings (filenames) lots more of these segments of data. from this I can persume that in these segments are file names, ~n (n=number<10) is a . for a extention. one thing that comes to mind is dos(fat16?) naming convention that filenames larger than (8?) character are truncated with ~1 or ~2 etc. after these segments is the "encrypted data" Notes strings ]ih[ - ]hi[ backwards nansoso - anme character? On 9/15/07, mat h <[EMAIL PROTECTED]> wrote: > > heres a preview of my thourough disection of the ipod firmware > > ive been studying ipod firmware 19.8.1.3 using xvi32 these are my notes > > 0x0A seems to be a verry common end of data bit possible EOF? > > line 5e10 - IPODRESOURCEFAT16 > Fat16? That could come in use, fat16 partitions have a standard header. > Could be used to verify a successfull decryption > > line 61ed - character sets > Characters are printed in hex: > 00 01 02 01 03 -> FF > > line 63F1 - character set again > 00 02 01 02 -> FF > after FF there is another FF. is it like null termination? > > ... lots more character sets with different seperating numbers. > > line E012 - Ipod resources > each letter sepperated by 0x00 > > ... 0x00s > > line 127F6 - data starts again with multiple references to > miles xml (http://www.miles8.com/xna/)? <http://www.miles8.com/xna/> > calorie(always seprated by other bits) > calorie.x (always seprated by other bits) xml? > I'm thinking mabe a bitswapping alogrithim (moving places) > > line 12FDB - start of xml data > category="calorie" > Appears to be the language data for things like menu names, etc > vp... items, control handlers? Could be usefull in a buffer overflow. > > 140A6 - start of zeros > > 147FF - end of zeros > xml data relating to multilingual nike running thinggi. > again more vptriggers possible buffer overflows. > > 15801 - start 0's > > 15FF - end 0's > more xml data same kinda thing as above. > > 1707E - start 0's > > 177FF - end 0's, more xml data relating to nike running thing > > 188AA - start 0's > > 18FFF - end 0's > I think each 1 of these nike xml files are different pages on the ipod. > > 1A054 - start 0's > > 1A7FF - end 0's > more xml data for nike (YAWN im sick of bloody nike) > > to be continued in next message > > On 9/15/07, Emmanuel Fleury <[EMAIL PROTECTED]> wrote: > > > > Emmanuel Fleury wrote: > > > > > > PS: I'm still fighting against this WebDAV crap !!! > > > > Finally done... I went back to the bzip2 format... don't ask me why but > > it worked (I guess it has something to do with the file checksum, > > changing the name is not enough): > > > > Get it at: > > http://www.labri.fr/~fleury/download/ipodnano/firmwares-nano.tar.bz2<http://www.labri.fr/%7Efleury/download/ipodnano/firmwares-nano.tar.bz2> > > > > This archive is complete and has a proper script that must work > > properly. > > > > Sorry for this long long serie of "Yes, it's uploaded", "No, it's not", > > "Yes, it is", "No, it's not", ... :) > > > > Regards > > -- > > Emmanuel Fleury > > > > I worry about my child and the Internet all the time, even though > > she's too young to have logged on yet. Here's what I worry about. > > I worry that 10 or 15 years from now, she will come to me and say > > 'Daddy, where were you when they took freedom of the press away > > from the Internet?'. > > -- Mike Godwin > > > > _______________________________________________ > > Linux4nano-dev mailing list > > Linux4nano-dev@gna.org > > https://mail.gna.org/listinfo/linux4nano-dev > > http://www.linux4nano.org > > > > > > -- > We explore... and you call us criminals. > We seek after knowledge... and you call us criminals. > We exist without skin color, without nationality, without religious > bias... and you call us criminals. > You build atomic bombs, you wage wars, you murder, cheat, and lie to us > and try to make us believe it's for our own good... > ....yet we're the criminals. > > ____________WAUSHARE ROX ______________ > Join the dark side we've got cheese > Annoying people since 1992 > If you hate me, I love you too. It ain't my fault I'm better than you > Save Water, Drink Beer > God Made Women First, Then He Had A Better Idea. > If Barbie is soo popular...how come you have to buy her friends? > Don't play stupid with me... I'm better at it! > You were so cute when you were a baby...What happened? > My folks were always asking me to wear underpants. What am I, the pope? > I'm calling the police!... Right after I flush some tings. > Join the army, see the world, meet interesting people, and kill them. > -- We explore... and you call us criminals. We seek after knowledge... and you call us criminals. We exist without skin color, without nationality, without religious bias... and you call us criminals. You build atomic bombs, you wage wars, you murder, cheat, and lie to us and try to make us believe it's for our own good... ....yet we're the criminals. ____________WAUSHARE ROX ______________ Join the dark side we've got cheese Annoying people since 1992 If you hate me, I love you too. It ain't my fault I'm better than you Save Water, Drink Beer God Made Women First, Then He Had A Better Idea. If Barbie is soo popular...how come you have to buy her friends? Don't play stupid with me... I'm better at it! You were so cute when you were a baby...What happened? My folks were always asking me to wear underpants. What am I, the pope? I'm calling the police!... Right after I flush some tings. Join the army, see the world, meet interesting people, and kill them.
_______________________________________________ Linux4nano-dev mailing list Linux4nano-dev@gna.org https://mail.gna.org/listinfo/linux4nano-dev http://www.linux4nano.org
