Livebox 2 Sagem #1

This firmware can be found in a comment to the post Modifying The DD-WRT GUI on the excellent /dev/ttyS0 blog.

$ bfsize openrg.img 
9043968

This is what the header looks like:

$ hd -n 256 openrg.img 
00000000  60 4c 51 ea 26 be 31 8e  0a 4c 03 88 08 54 4e 3a  |`LQ.&.1..L...TN:|
00000010  98 ff 2f 8c 86 3b 77 96  81 89 14 9c 7b d0 5b 95  |../..;w.....{.[.|
00000020  a0 fc 5f b3 7b 3d b2 a5  e8 86 ac 0e b8 24 52 ac  |.._.{=.......$R.|
00000030  00 03 00 00 00 00 00 00  46 41 53 54 33 79 79 79  |........FAST3yyy|
00000040  5f 36 39 31 32 37 41 00  00 00 00 00 00 00 00 00  |_69127A.........|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00000070  00 00 00 00 00 00 00 00  00 8a 00 00 00 00 00 ac  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 ac 00 00 00 86  |................|
00000090  00 00 00 00 00 00 01 40  00 88 4a c5 00 00 00 00  |.......@..J.....|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 72 6f 6f 74  |............root|
000000b0  3d 2f 64 65 76 2f 6d 74  64 62 6c 6f 63 6b 36 20  |=/dev/mtdblock6 |
000000c0  72 6f 20 72 6f 6f 74 66  73 74 79 70 65 3d 73 71  |ro rootfstype=sq|
000000d0  75 61 73 68 66 73 20 6f  70 65 72 61 74 69 6f 6e  |uashfs operation|
000000e0  61 6c 5f 73 74 61 72 74  3d 30 78 62 66 37 36 30  |al_start=0xbf760|
000000f0  30 30 30 20 72 65 73 63  75 65 5f 73 74 61 72 74  |000 rescue_start|
00000100

Let's try to find some signatures:

$ signsrch openrg.img 

Signsrch 0.1.6a
by Luigi Auriemma
e-mail: aluigi@autistici.org
web:    aluigi.org
  optimized search function from Andrew http://www.team5150.com/~andrew/
  disassembler engine from Oleh Yuschuk

- open file "openrg.img"
- 9043968 bytes allocated
- load signatures
- open file signsrch.sig
- 1801396 bytes allocated for the signatures
- 2278 signatures in the database
- start signatures scanning:

  offset   num  description [bits.endian.size]
  --------------------------------------------

- 0 signatures found in the file

Nothing found, and with sigscan?

$ sigscan openrg.img 

openrg.img: 
 0x00000140: [type: data, len: 0004]  u-boot/PPCBoot image

 0x00000180 GZIP compressed data {
    name:      "vmlinux.bin"
    method:    deflate
    type:      binary
    OS type:   Unix
    date:      
 }