chipmunkmc/edl
1
0
Fork 0
mirror of https://github.com/bkerler/edl.git synced 2024-11-14 19:14:58 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
edl/fhloaderparse.py
Bjoern Kerler b26ddc907b New interface, diag fixes
2019-11-23 19:06:21 +01:00

327 lines
No EOL
12 KiB
Python
Executable file
Raw Blame History

#!/usr/bin/env python3
from Library.utils import elf
import os
import sys
from os import walk
import hashlib
import struct
from shutil import copyfile
from binascii import hexlify, unhexlify
vendor = {}
vendor["0000"] = "Qualcomm "
vendor["0001"] = "Sony/Wingtech"
vendor["0004"] = "ZTE "
vendor["0015"] = "Huawei "
vendor["0017"] = "Lenovo "
vendor["0029"] = "Asus "
vendor["0030"] = "Haier "
vendor["0031"] = "LG "
vendor["0042"] = "Alcatel "
vendor["0045"] = "Nokia "
vendor["0048"] = "YuLong "
vendor["0168"] = "Motorola "
vendor["01B0"] = "Motorola "
vendor["0208"] = "Motorola "
vendor["0228"] = "Motorola "
vendor["0328"] = "Motorola "
vendor["0368"] = "Motorola "
vendor["03C8"] = "Motorola "
vendor["00C8"] = "Motorola "
vendor["0348"] = "Motorola "
vendor["1111"] = "Asus "
vendor["143A"] = "Asus "
vendor["1978"] = "Blackphone "
vendor["2A70"] = "Oxygen "
hwid = {}
hwid["000460E1"] = "MSM8953 " # SnapDragon 625
hwid["0004F0E1"] = "MSM8937 " # SnapDragon 430
hwid["0006B0E1"] = "MSM8940 "
hwid["000560E1"] = "MSM8917 " # SnapDragon 425
hwid["0005F0E1"] = "MSM8996 Pro " # SnapDragon 821
hwid["007050E1"] = "MSM8916 " # SnapDragon 410
hwid["0072C0E1"] = "MSM8960 "
# 007B20E100010004 MSM8274 OEM1 Sony, Hash 49109A8016C239CD8F76540FE4D5138C87B2297E49C6B30EC31852330BDDB177
hwid["007B00E1"] = "MSM8974 " # Snapdragon 800 Nexus 5
hwid["007B30E1"] = "MSM8974 "
hwid[
"007B40E1"] = "MSM8974AC " # SnapDragon 801, 007B40E100010004, Hash CF19D6FAD8029B66B15246BF3C9D216FC1D2235D87706E0458C7125BB1E436EC
# hwid["007B80E1"] = "MSM8974AB " #HTC M8
hwid["008050E1"] = "MSM8x26 " # SnapDragon 400
hwid["009180E1"] = "MSM8x26/28 " # SnapDragon 400
hwid["008110E1"] = "MSM8x10/2 " # SnapDragon 2x/4x|00
hwid["008140E1"] = "MSM8x10/2 " # SnapDragon 2x/4x|00 Lenovo S580
hwid["0090B0E1"] = "MSM8936/9 " # SnapDragon 610
hwid["0091B0E1"] = "MSM8929 " # SnapDragon 415
hwid["009400E1"] = "MSM8994 " # SnapDragon 808 E6833 009400E100040001 setool S1_Boot_MSM8994_LA1.2_114, MSM8994_50
hwid["009470E1"] = "MSM8996 " # SnapDragon 820
hwid["009600E1"] = "MSM8909 " # SnapDragon 210
hwid["009690E1"] = "MSM8992 " # SnapDragon 82x
hwid["009720E1"] = "MSM8952 " # SnapDragon 652
hwid["009900E1"] = "MSM8976 " # SnapDragon 652
hwid["009B00E1"] = "MSM8956 " # SnapDragon 652
hwid["30020000"] = "MSM8998 "
hwid["30060000"] = "SDM660 "
# hwid["006220E1"] = "MSM7227A "
class Signed:
filename = ''
filesize = 0
oem_id = ''
model_id = ''
hw_id = ''
sw_id = ''
app_id = ''
sw_size = ''
qc_version = ''
image_variant = ''
oem_version = ''
pk_hash = ''
hash=b''
def grabtext(data):
i=len(data)
t=0
text=''
while (i>0):
if (data[t]==0):
break
text+=chr(data[t])
t+=1
i-=1
return text
def extract_hdr(memsection,si,mm,code_size,signature_size):
md_size = struct.unpack("<I", mm[memsection.file_start_addr + 0x2C:memsection.file_start_addr + 0x2C + 0x4])[0]
md_offset=memsection.file_start_addr + 0x2C + 0x4
major,minor,sw_id,hw_id,oem_id,model_id,app_id=struct.unpack("<IIIIIII",mm[md_offset:md_offset+(7*4)])
si.hw_id="%08X" % hw_id
si.sw_id = "%08X" % sw_id
si.oem_id="%04X" % oem_id
si.model_id="%04X" % model_id
si.hw_id += si.oem_id + si.model_id
si.app_id="%08X" % app_id
md_offset+=(7 * 4)
v=struct.unpack("<I", mm[md_offset:md_offset + 4])[0]
rot_en=(v >> 0) & 1
in_use_soc_hw_version=(v >> 1) & 1
use_serial_number_in_signing=(v >> 2) & 1
oem_id_independent=(v >> 3) & 1
root_revoke_activate_enable=(v >> 4) & 0b11
uie_key_switch_enable=(v >> 6) & 0b11
debug=(v >> 8) & 0b11
md_offset+=4
soc_vers=hexlify(mm[md_offset:md_offset + (12*4)])
md_offset+=12*4
multi_serial_numbers=hexlify(mm[md_offset:md_offset + (8*4)])
md_offset += 8 * 4
mrc_index=struct.unpack("<I", mm[md_offset:md_offset + 4])[0]
md_offset+=4
anti_rollback_version=struct.unpack("<I", mm[md_offset:md_offset + 4])[0]
signatureoffset = memsection.file_start_addr + 0x30 + md_size + code_size + signature_size
if mm[signatureoffset] != 0x30:
print("Error on " + si.filename + ", unknown signaturelength")
return None
if len(mm) < signatureoffset + 4:
print("Signature error on " + si.filename)
return None
len1 = struct.unpack(">H", mm[signatureoffset + 2:signatureoffset + 4])[0] + 4
casignature2offset = signatureoffset + len1
len2 = struct.unpack(">H", mm[casignature2offset + 2:casignature2offset + 4])[0] + 4
rootsignature3offset = casignature2offset + len2
len3 = struct.unpack(">H", mm[rootsignature3offset + 2:rootsignature3offset + 4])[0] + 4
si.pk_hash = hashlib.sha384(mm[rootsignature3offset:rootsignature3offset + len3]).hexdigest()
return si
def extract_old_hdr(memsection,si,mm,code_size,signature_size):
signatureoffset = memsection.file_start_addr + 0x28 + code_size + signature_size
signature = {}
if mm[signatureoffset] != 0x30:
print("Error on " + si.filename + ", unknown signaturelength")
return None
if signatureoffset != -1:
if len(mm) < signatureoffset + 4:
print("Signature error on " + si.filename)
return None
len1 = struct.unpack(">H", mm[signatureoffset + 2:signatureoffset + 4])[0] + 4
casignature2offset = signatureoffset + len1
len2 = struct.unpack(">H", mm[casignature2offset + 2:casignature2offset + 4])[0] + 4
rootsignature3offset = casignature2offset + len2
len3 = struct.unpack(">H", mm[rootsignature3offset + 2:rootsignature3offset + 4])[0] + 4
si.pk_hash = hashlib.sha256(mm[rootsignature3offset:rootsignature3offset + len3]).hexdigest()
idx = signatureoffset
while (idx != -1):
if (idx >= len(mm)):
break
idx = mm.find('\x04\x0B'.encode(), idx)
if (idx == -1):
break
length = mm[idx + 3]
if (length > 60):
idx += 1
continue
try:
text = mm[idx + 4:idx + 4 + length].decode().split(' ')
signature[text[2]] = text[1]
except:
text = ""
idx += 1
idx = mm.find('QC_IMAGE_VERSION_STRING='.encode(), 0)
if idx != -1:
si.qc_version = grabtext(mm[idx + len("QC_IMAGE_VERSION_STRING="):])
idx = mm.find('OEM_IMAGE_VERSION_STRING='.encode(), 0)
if idx != -1:
si.oem_version = grabtext(mm[idx + len("OEM_IMAGE_VERSION_STRING="):])
idx = mm.find('IMAGE_VARIANT_STRING='.encode(), 0)
if idx != -1:
si.image_variant = grabtext(mm[idx + len("IMAGE_VARIANT_STRING="):])
if "OEM_ID" in signature:
if signature["OEM_ID"] in vendor:
si.oem_id = vendor[signature["OEM_ID"]]
else:
si.oem_id = signature["OEM_ID"]
if "MODEL_ID" in signature:
si.model_id = signature["MODEL_ID"]
if "HW_ID" in signature:
si.hw_id = signature["HW_ID"]
if "SW_ID" in signature:
si.sw_id = signature["SW_ID"]
if "SW_SIZE" in signature:
si.sw_size = signature["SW_SIZE"]
return si
def main(argv):
f = []
path = ""
if (len(argv)<2):
print("Usage: ./fhloaderparse.py [FHLoaderDir]")
exit(0)
else:
path = argv[1]
for (dirpath, dirnames, filenames) in walk(path):
for filename in filenames:
f.append(os.path.join(dirpath, filename))
hashes={}
for (dirpath, dirnames, filenames) in walk('Loaders'):
for filename in filenames:
fname=os.path.join(dirpath, filename)
with open(fname,'rb') as rf:
data=rf.read()
sha256 = hashlib.sha256()
sha256.update(data)
hashes[sha256.digest()]=fname
filelist = []
rt=open("Loaders/"+argv[1]+".log","w")
extensions=["elf","mbn","bin"]
for filename in f:
found=False
for ext in extensions:
if "."+ext in filename:
found=True
break
if found!=True:
continue
with open(filename,'rb') as rf:
mm = rf.read()
sha256 = hashlib.sha256()
sha256.update(mm)
si=Signed()
si.hash=sha256.digest()
si.filename=filename
si.filesize=os.stat(filename).st_size
if len(mm)<4:
continue
hdr=struct.unpack("<I", mm[0:4])[0]
if hdr == 0x844BDCD1: # mbn
signatureoffset = struct.unpack("<I", mm[0x14:0x18])[0] + struct.unpack("<I", mm[0x20:0x24])[0] + \
struct.unpack("<I", mm[0x28:0x2C])[0]
if struct.unpack("<I", mm[0x28:0x2C])[0] == 0:
signatureoffset = -1
elif hdr == 0x464C457F:
elfheader = elf(mm,si.filename)
if 'memorylayout' in dir(elfheader):
memsection=elfheader.memorylayout[1]
version=struct.unpack("<I",mm[memsection.file_start_addr + 0x04:memsection.file_start_addr + 0x04+0x4])[0]
code_size = \
struct.unpack("<I", mm[memsection.file_start_addr + 0x14:memsection.file_start_addr + 0x14 + 0x4])[
0]
signature_size = \
struct.unpack("<I", mm[memsection.file_start_addr + 0x1C:memsection.file_start_addr + 0x1C + 0x4])[
0]
cert_chain_size=struct.unpack("<I", mm[memsection.file_start_addr + 0x24:memsection.file_start_addr + 0x24 + 0x4])[
0]
if signature_size==0:
print("%s has no signature." % filename)
continue
if version<6: #MSM,MDM
si=extract_old_hdr(memsection,si,mm,code_size,signature_size)
if si==None:
continue
filelist.append(si)
elif version>=6: #SDM
si = extract_hdr(memsection, si, mm, code_size, signature_size)
if si == None:
continue
filelist.append(si)
else:
print("Unknown version for "+filename)
continue
else:
print("Error on " + filename)
continue
if not os.path.exists("Loaders/unknown"):
os.makedirs("Loaders/unknown")
sorted_x = sorted(filelist, key=lambda x: (x.hw_id, -x.filesize))
class loaderinfo:
hw_id=''
item=''
loaderlists = {}
for item in sorted_x:
if item.oem_id!='':
info=f"OEM:{item.oem_id}\tMODEL:{item.model_id}\tHWID:{item.hw_id}\tSWID:{item.sw_id}\tSWSIZE:{item.sw_size}\tPK_HASH:{item.pk_hash}\t{item.filename}\t{str(item.filesize)}"
if item.oem_version!='':
info+="\tOEMVER:"+item.oem_version+"\tQCVER:"+item.qc_version+"\tVAR:"+item.image_variant
lf=loaderinfo()
lf.hw_id=item.hw_id
lf.pk_hash=item.pk_hash
if item.hash not in hashes:
if (lf not in loaderlists):
loaderlists[lf]=item.filename
print(info)
copyfile(item.filename,"Loaders/"+lf.hw_id+"_"+lf.pk_hash[0:16]+"_FHPRG.bin")
else:
copyfile(item.filename,"Loaders/unknown/"+item.filename[item.filename.rfind("\\")+1:]+"_"+lf.pk_hash[0:16]+"_FHPRG.bin")
else:
print(item.filename+" does already exist. Skipping")
try:
rt.write(info+"\n")
except:
continue
for item in filelist:
if item.oem_id=='' and (".bin" in item.filename or ".mbn" in item.filename or ".hex" in item.filename):
info="Unsigned:"+item.filename+"\t"+str(item.filesize)
if item.oem_version != '':
info += "\tOEMVER:" + item.oem_version + "\tQCVER:" + item.qc_version + "\tVAR:" + item.image_variant
print(info)
rt.write(info+"\n")
copyfile(item.filename,"Loaders/unknown/"+item.filename[item.filename.rfind("\\")+1:])
rt.close()
main(sys.argv)
Reference in a new issue View git blame Copy permalink