Pictures embedded in firmware

All things embedded.
*NO FEATURE REQUESTS*

Pictures embedded in firmware

Postby Vicne » Fri Dec 02, 2011 4:40 am

Hi,

I'm thought I would repost here the JPEG pictures I found just fiddling around in the hex files, with no other tool than Notepad++ and the Hex plugin - see this link given by Kyle for how to set it up.

For those with little or no computer background, here's how you could have decoded them. First, just browsing around in the gibberish data, notice a few occurrences of the JFIF word (which stands for JPEG File Interchange Format).
After a bit of googling for the JPEG header format, you can find for example this page (scroll to JPEG) where it is clearly described. You'll learn there that most JPEG files start with "ff d8 ff e0", then 2 bytes to ignore, then "4a 46 49 46" which reads JFIF in ascii.
OK. Now back to Notepad++ : if you perform a search for the hex bytes "ff d8 ff e0", find a match and check that the ascii version shows the word JFIF 2 bytes that, it means you have found a JPEG picture (see capture below)
To find the end of the JPEG, you can either decode the image further by hand (you'll have to google a bit more to find the complete decoding and it might not be trivial), or (as I did) find the start of the next one and assume everything in between is the image (another way could be to assume the JPEG takes the whole space till the end of the file because it will be ignored by most software, but don't upload it as is then because it will be rather heavy).
So once you have the start and the end, just copy the block from ff d8 ff e0 (included) till the last byte you just calculated or guessed, and paste the block in a new blank file.
Save that new file with any name that ends with "jpg" and you should then be able to open that file like any regular jpeg picture.

If you want to post your findings here, I would suggest that you mention at least :
- the camera firmware you started from (camera model, firmware version, filename)
- the position of your findings (the address from the left column)

So in my case, the files were extracted from the D7000 version 1.3 firwmare, file b750103a.bin, starting at position 0x00014230.
They are attached below.

Want to do the same ? Just perform the same operations on the firmware for another camera model :-)

Best regards,
Attachments
notepad++.png
pic1.jpg
pic1.jpg (2.38 KiB) Viewed 6942 times
pic2.jpg
pic2.jpg (2.27 KiB) Viewed 6942 times
pic3.jpg
pic3.jpg (3.78 KiB) Viewed 6942 times
pic4.jpg
pic4.jpg (5 KiB) Viewed 6942 times
pic5.jpg
pic5.jpg (5.02 KiB) Viewed 6942 times
pic6.jpg
pic6.jpg (5.27 KiB) Viewed 6942 times
pic7.jpg
pic7.jpg (3.14 KiB) Viewed 6942 times
pic8.jpg
pic8.jpg (3.39 KiB) Viewed 6942 times
pic9.jpg
pic9.jpg (2.62 KiB) Viewed 6942 times
picA.jpg
picA.jpg (1.44 KiB) Viewed 6942 times
picB.jpg
picB.jpg (3.3 KiB) Viewed 6942 times
picC.jpg
picC.jpg (5.25 KiB) Viewed 6942 times
picD.jpg
picD.jpg (3.8 KiB) Viewed 6942 times
picE.jpg
picE.jpg (4.98 KiB) Viewed 6942 times
picF.jpg
picF.jpg (4.78 KiB) Viewed 6942 times
picG.jpg
picG.jpg (6.06 KiB) Viewed 6942 times
picH.jpg
picH.jpg (5.86 KiB) Viewed 6942 times
picI.jpg
picI.jpg (3.93 KiB) Viewed 6942 times
picJ.jpg
picJ.jpg (5.38 KiB) Viewed 6942 times
picK.jpg
picK.jpg (8.44 KiB) Viewed 6942 times
picL.jpg
picL.jpg (6.2 KiB) Viewed 6942 times
Vicne
Core Developer
 
Posts: 1730
Joined: Tue Nov 29, 2011 2:30 pm
Been thanked: 167 times

Re: Pictures embedded in firmware

Postby Simeon » Fri Dec 02, 2011 6:36 am

There's 387 embedded jpg's in the D5100 B firmware.
Simeon
Core Developer
 
Posts: 2626
Joined: Wed Nov 30, 2011 6:12 am
Location: Christchurch, New Zealand
Been thanked: 620 times

Re: Pictures embedded in firmware

Postby Vicne » Fri Dec 02, 2011 8:49 am

And 55 or 56 in the D7000 so I only have extracted about half of them...
Vicne
Core Developer
 
Posts: 1730
Joined: Tue Nov 29, 2011 2:30 pm
Been thanked: 167 times

Re: Pictures embedded in firmware

Postby Felickzs » Wed Dec 28, 2011 7:29 am

That is to say that I could change these really ugly Photos with better ones?
Felickzs
 
Posts: 2
Joined: Wed Dec 28, 2011 7:10 am
Been thanked: 0 time

Re: Pictures embedded in firmware

Postby Dionysus » Wed Dec 28, 2011 7:50 pm

Dionysus
 
Posts: 30
Joined: Thu Dec 22, 2011 10:10 am
Been thanked: 0 time

Re: Pictures embedded in firmware

Postby IRpaj » Thu Mar 01, 2012 6:11 am

Embeded JPGs ;) from d7000
Attachments
output.rar
d7000embededJPGs
(307.11 KiB) Downloaded 288 times
IRpaj
 
Posts: 2
Joined: Thu Mar 01, 2012 5:58 am
Been thanked: 0 time

Re: Pictures embedded in firmware

Postby Simeon » Thu Mar 01, 2012 7:16 am

Cheers for the effort. But before people get excited and post the pictures from all the firmware, Vitaliy's ntool strips the jpgs out, and my tool that is in the code respository also can pull the jpgs out.
Simeon
Core Developer
 
Posts: 2626
Joined: Wed Nov 30, 2011 6:12 am
Location: Christchurch, New Zealand
Been thanked: 620 times

Re: Pictures embedded in firmware

Postby IRpaj » Thu Mar 01, 2012 12:30 pm

Sorry simeon, it's just my first baby step to understad the whole, I just get exicted, and you might get the bored hahhaha... :doh: :angry-banghead:

Cheers...
:techie-typing:
IRpaj
 
Posts: 2
Joined: Thu Mar 01, 2012 5:58 am
Been thanked: 0 time

Re: Pictures embedded in firmware

Postby Simeon » Thu Mar 01, 2012 12:34 pm

:oops: Wasn't trying to offend you, thanks for the effort. Just pointing out that more of the same is not needed at this point of time.

But again thanks for the effort.
Simeon
Core Developer
 
Posts: 2626
Joined: Wed Nov 30, 2011 6:12 am
Location: Christchurch, New Zealand
Been thanked: 620 times


Return to Firmware

Who is online

Users browsing this forum: Google [Bot] and 19 guests

cron