$ bfsize upgrade_R511_XDX_nologo_ckid_release_V1.0.4.7.bin
3493918
Here's what the header looks like:
$ hd -n 128 upgrade_R511_XDX_nologo_ckid_release_V1.0.4.7.bin
00000000 52 33 47 53 00 50 35 00 00 00 0e 02 00 00 00 00 |R3GS.P5.........|
00000010 00 00 00 00 00 00 00 00 00 00 00 00 ef 39 23 c5 |.............9#.|
00000020 24 bb 52 e9 05 5e 4f 46 12 36 47 08 bc 3a 93 a2 |$.R..^OF.6G..:..|
00000030 15 ee 43 48 af e3 f7 0f 06 0d ca 3f 76 fa cc e0 |..CH.......?v...|
00000040 bb 43 03 20 2a 67 77 6f 28 81 51 5b f4 c7 95 c3 |.C. *gwo(.Q[....|
00000050 63 48 45 58 09 12 03 08 c8 3c 3a 93 ff 95 c3 63 |cHEX.....<:....c|
00000060 4a 09 a4 27 12 03 08 c8 3c 3a 93 cd 68 3c 9c eb |J..'....<:..h<..|
00000070 f2 27 61 22 1f ce 97 50 2a ee 97 6c 6d 80 64 ca |.'a"...P*..lm.d.|
00000080
Now try to find some signatures:
$ signsrch upgrade_R511_XDX_nologo_ckid_release_V1.0.4.7.bin
Signsrch 0.1.6a
by Luigi Auriemma
e-mail: aluigi@autistici.org
web: aluigi.org
optimized search function from Andrew http://www.team5150.com/~andrew/
disassembler engine from Oleh Yuschuk
- open file "upgrade_R511_XDX_nologo_ckid_release_V1.0.4.7.bin"
- 3493918 bytes allocated
- load signatures
- open file signsrch.sig
- 1801396 bytes allocated for the signatures
- 2278 signatures in the database
- start signatures scanning:
offset num description [bits.endian.size]
--------------------------------------------
- 0 signatures found in the file
Nothing found, and with sigscan?
$ sigscan upgrade_R511_XDX_nologo_ckid_release_V1.0.4.7.bin
upgrade_R511_XDX_nologo_ckid_release_V1.0.4.7.bin:
Nothing found either...
