Livebox 2 Sagem #3

$ bfsize vmlinux.bin
10829824

$ signsrch vmlinux.bin

Signsrch 0.1.6a
by Luigi Auriemma
e-mail: aluigi@autistici.org
web:    aluigi.org
  optimized search function from Andrew http://www.team5150.com/~andrew/
  disassembler engine from Oleh Yuschuk

- open file "vmlinux.bin"
- 10829824 bytes allocated
- load signatures
- open file signsrch.sig
- 1801396 bytes allocated for the signatures
- 2278 signatures in the database
- WARNING:
  the file loaded in memory is very big so the scanning could take many time
- start signatures scanning:

  offset   num  description [bits.endian.size]
  --------------------------------------------
  0026b428 308  SHA1 / SHA0 / RIPEMD-160 initialization [32.be.20&]
  0026b480 309  padding used in hashing algorithms (0x80 0 ... 0) [..64]
  0026b428 1407 SHA1_DS [32.be.24]
  0026c35c 1524 zinflate_lengthStarts [32.be.116]
  0026c2e3 1525 zinflate_lengthExtraBits [32.le.116]
  0026c2e0 1526 zinflate_lengthExtraBits [32.be.116]
  0026c268 1528 zinflate_distanceStarts [32.be.120]
  0026c1f3 1529 zinflate_distanceExtraBits [32.le.120]
  0026c1f0 1530 zinflate_distanceExtraBits [32.be.120]
  002686c8 2258 unlzx table_three [16.be.32]
  002b0480 2260 unlzx table_three [32.be.64]

- 11 signatures found in the file

$ sigscan vmlinux.bin

vmlinux.bin: 
 0x0026bcc0: [type: code, len: 1024]  CRC32

 0x0026c1f3: [type: code, len: 0120]  zlib

 0x0026c2e3: [type: code, len: 0116]  zlib

 0x0026c4ef: [type: code, len: 0116]  zlib

 0x002f1000 GZIP compressed data {
    method:    deflate
    type:      binary
    OS type:   Unix
    date:      hN(�
 }

 0x002f4000: CRAMFS {
    0xffff8021489ccd45: magic:     0x28cd3d45
    0xffffffdf6f284b84: size:      0x00760000
    0xffffffdf6f284ba0: crc:       0x3eb55673
    0xffffffdf6f284bb0: name:      "Compressed"
 };