尝试使用 binwalk 反转 GPS Watch 固件映像

逆向工程 固件 嵌入式
2021-07-02 01:12:07

我正在尝试对 GPS 手表固件映像进行逆向工程,目的是为手表添加新功能。这是我到目前为止所得到的

  • 我有固件映像(.gcd 文件)。AFAIK 这不是常见的图像,我无法从谷歌搜索中找到任何有关它的信息

这是binwalk输出:

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
344446        0x5417E         Zlib compressed data, default compression
548342        0x85DF6         Zlib compressed data, default compression
548698        0x85F5A         Zlib compressed data, default compression
548849        0x85FF1         Zlib compressed data, compressed
549789        0x8639D         Zlib compressed data, compressed
550677        0x86715         Zlib compressed data, compressed
550878        0x867DE         Zlib compressed data, default compression
551849        0x86BA9         Zlib compressed data, default compression
551871        0x86BBF         Zlib compressed data, best compression
552002        0x86C42         Zlib compressed data, default compression
552145        0x86CD1         Zlib compressed data, compressed
552274        0x86D52         Zlib compressed data, default compression
552425        0x86DE9         Zlib compressed data, compressed
552778        0x86F4A         Zlib compressed data, default compression
553056        0x87060         Zlib compressed data, default compression
553199        0x870EF         Zlib compressed data, compressed
554875        0x8777B         Zlib compressed data, compressed
555202        0x878C2         Zlib compressed data, default compression
555341        0x8794D         Zlib compressed data, compressed
555600        0x87A50         Zlib compressed data, default compression
555778        0x87B02         Zlib compressed data, default compression
555928        0x87B98         Zlib compressed data, default compression
556221        0x87CBD         Zlib compressed data, compressed
556502        0x87DD6         Zlib compressed data, default compression
556612        0x87E44         Zlib compressed data, default compression
556953        0x87F99         Zlib compressed data, compressed
559176        0x88848         Zlib compressed data, default compression
559922        0x88B32         Zlib compressed data, default compression
560116        0x88BF4         Zlib compressed data, default compression
560292        0x88CA4         Zlib compressed data, default compression
560417        0x88D21         Zlib compressed data, compressed
560774        0x88E86         Zlib compressed data, default compression
561567        0x8919F         Zlib compressed data, default compression
562207        0x8941F         Zlib compressed data, best compression
670601        0xA3B89         Zlib compressed data, best compression
673859        0xA4843         Zlib compressed data, compressed
678389        0xA59F5         Zlib compressed data, default compression
797326        0xC2A8E         Zlib compressed data, default compression
811248        0xC60F0         Zlib compressed data, compressed
850955        0xCFC0B         Zlib compressed data, best compression
1023917       0xF9FAD         Zlib compressed data, best compression
1079306       0x10780A        Zlib compressed data, default compression
1278786       0x138342        Zlib compressed data, default compression
1278986       0x13840A        Zlib compressed data, default compression
1279066       0x13845A        Zlib compressed data, default compression
1279106       0x138482        Zlib compressed data, default compression
1279186       0x1384D2        Zlib compressed data, default compression
1279226       0x1384FA        Zlib compressed data, default compression
1281321       0x138D29        Copyright string: " 2002-2009n"
1284386       0x139922        XML document, version: "1.0"
1294150       0x13BF46        LZMA compressed data, properties: 0x64, dictionary size: 16777216 bytes, uncompressed size: 754974720 bytes
1294166       0x13BF56        LZMA compressed data, properties: 0x64, dictionary size: 16777216 bytes, uncompressed size: 419430400 bytes
1294182       0x13BF66        LZMA compressed data, properties: 0x64, dictionary size: 16777216 bytes, uncompressed size: 419430400 bytes
1294206       0x13BF7E        LZMA compressed data, properties: 0x64, dictionary size: 16777216 bytes, uncompressed size: 419430400 bytes
1294222       0x13BF8E        LZMA compressed data, properties: 0x64, dictionary size: 16777216 bytes, uncompressed size: 419430400 bytes
1370193       0x14E851        Zlib compressed data, default compression

这一切似乎都是误报,因为当我运行时, binwalk -e我将这些文件作为输出:

在此处输入图片说明

所有没有文件后缀的文件都是空的,压缩文件会报错。(我无法解压缩 zlib 文件)

hexdump输出中,我看到了很多 ascii,我猜这表明它没有加密。尤其是我发现在0x10780A之间似乎有某种语言文件0x138342

我已将 hexdump 包含为 hex2.out

所有文件都可以在这里找到

我的问题是:我从这里去哪里?请帮忙,我不知道。

1个回答

Garmin GCD 文件格式记录在此处此处此处提供了一些附加信息

此外,看起来有人已经写了一个工具(镜像在这里)来处理和操作 Garmin GCD 文件:

在此处输入图片说明