binwalk don't extract the binary files correctly !

[ruCyberPoison]

Hello Devs,

I'm here to report this bug/issue because i'm using binwalk -e but the *.abs firmware (Based in Linux deployed in most STB Receivers brand also uses ALItech processors ) the output is this when i use binwalk -e

Files extracted by ( binwalk -e )

Terminal output:

# binwalk -e AMIKO_HD8150_2.4.43_emu.abs

DECIMAL       HEXADECIMAL     DESCRIPTION

--------------------------------------------------------------------------------
196736        0x30080         LZMA compressed data, properties: 0x6C, dictionary size: 8388608 bytes, uncompressed size: 11883876 bytes
3866752       0x3B0080        LZMA compressed data, properties: 0x6C, dictionary size: 8388608 bytes, uncompressed size: 3255512 bytes
5636224       0x560080        LZMA compressed data, properties: 0x6C, dictionary size: 8388608 bytes, uncompressed size: 87904 bytes

so 3 files are extract, so no problem at this point but... when i extract with ALItech Processor tool i get this:

Files extracted with ALI TOOLS or Ali FirmwareDecriptor.

Windows files output:

Software used: Ali Main Code Decrypter 8.9
Files unpacked:

bootloader
MemCfg
maincode(AV)
seecode
default_lang
cipluskey
countryband
logo_user
logo_menu
logo_radio
logo_boot
patch
defaultdb(PRC)
userdb(64+64)

other addicional information to @ReFirmLabs provide me support.

Terminal OUTPUT:

# hexdump -C 

00b51a30  00 00 00 00 4c 69 62 63  6f 72 65 20 76 65 72 73  |....Libcore vers|
00b51a40  69 6f 6e 20 31 33 2e 31  36 2e 30 40 53 44 4b 34  |ion 13.16.0@SDK4|
00b51a50  2e 30 66 61 2e 31 33 2e  31 36 5f 32 30 31 36 31  |.0fa.13.16_20161|
00b51a60  30 31 39 28 67 63 63 20  76 65 72 73 69 6f 6e 20  |019(gcc version |
00b51a70  33 2e 34 2e 34 20 6d 69  70 73 73 64 65 2d 36 2e  |3.4.4 mipssde-6.|
00b51a80  30 36 2e 30 31 2d 32 30  30 37 30 34 32 30 29 28  |06.01-20070420)(|
00b51a90  41 64 6d 69 6e 69 73 74  72 61 74 6f 72 40 20 46  |Administrator@ F|
00b51aa0  72 69 2c 20 4a 75 6c 20  32 38 2c 20 32 30 31 37  |ri, Jul 28, 2017|
00b51ab0  20 31 32 3a 35 33 3a 32  38 20 41 4d 29 0a 00 00  | 12:53:28 AM)...|
00b51ac0  44 4d 58 5f 53 33 36 30  31 5f 30 00 00 a1 03 18  |DMX_S3601_0.....|

When I use readelf it says files isn't an ELF.

so this is the cmd output when i use qemu Win64 (I don't whant to use linux to do the emulation about this *.abs extension firmware so please help me for win64 version from Qemu)

CMD OUTPUT:

C:\Program Files\qemu>qemu-system-mips.exe -machine mips -cpu mips32r6-generic -drive file=C:\30080.bin,index=0,media=disk,format=raw

qemu-system-mips.exe: warning: could not load MIPS bios 'mips_bios.bin'

I also tried a lot of diferents qemu-system... and a lot of diferent configs like -machine -cpu -kernel -driver root= -PFLASH and etc... and nothing hapenned

and now i tryed also Firmadyne, but they say i get this issue because binwalk don't extract a rootable files issue in FirmaDyne #83

Terminal output:

(IS JUST A PART OF TEXT FIRMADYNE SOFTWARE SHOW A LOT OF THIS "Extraction failed!" )

/tmp/tmpBNDrbm/_AMIKO_HD8150_2.4.43_emu.abs.extracted/30080
                >> MD5: d20984f2f6c357c44979063654fc3849
                >> Tag: 2
                >> Temp: /tmp/tmpYvwvSH
                >> Status: Kernel: True, Rootfs: False, Do_Kernel: False,                 Do_Rootfs: True
                >> Recursing into archive ...
                >>>> Extraction failed!
                >>>> LZMA compressed data, properties: 0x5D, dictionary size: 8388608 bytes, uncompressed size: 18432 bytes
                >> Recursing into compressed ...

How can i reproduce this issue ?
Reply:.

Donwload *.abs firmware in amikoreceiver.com (only *.abs) and download AliDekompressor and AliConsole in http://www.satedu.cba.pl/

Direct tools:

FirmwareDecrypter_v8.9.zip :

http://www.satedu.cba.pl/index.php?action=downloadfile&filename=FirmwareDecrypter_v8.9.zip&directory=Test%20Folder&

Ali__tools_Console_v4.0__CRC_FIXER.rar :

http://www.satedu.cba.pl/index.php?action=downloadfile&filename=Ali__tools_Console_v4.0__CRC_FIXER.rar&directory=Test%20Folder&

@ReFirmLabs can provide me help ?

Thanks,
With my best regards,
David Martins
Screamfox