Skip to content

Instantly share code, notes, and snippets.

@halal-beef
Last active April 17, 2025 18:03
Show Gist options
  • Save halal-beef/129c24d3f5a7d9ae0f46c9467578c96b to your computer and use it in GitHub Desktop.
Save halal-beef/129c24d3f5a7d9ae0f46c9467578c96b to your computer and use it in GitHub Desktop.
sboot.bin splits for Exynos 990 (9830) based devices
dd if=sboot.bin of=fwbl1.img bs=1 skip=$((0x0)) count=$((0x3000))
dd if=sboot.bin of=epbl.img bs=1 skip=$((0x3000)) count=$((0x16000 - 0x3000))
dd if=sboot.bin of=bl2.img bs=1 skip=$((0x16000)) count=$((0x82000 - 0x16000))
dd if=sboot.bin of=lk.bin bs=1 skip=$((0xDB000)) count=$((0x35B000 - 0xDB000))
dd if=sboot.bin of=el3_mon.img bs=1 skip=$((0x35B000)) count=$((0x39B000 - 0x35B000))
Notice:
These splits have been confirmed to work on:
- Samsung Galaxy S20 (5G too)
- Samsung Galaxy S20 Ultra (5G too)
Credits go to VDavid003. Without him we wouldn't even have a valid split for bl2.
Credits also go to XDA User gaitenis for finding the valid lk.bin split.
0x0-0x3000 - fwbl1.img
0x3000-0x16000 - epbl.img
0x16000-0x82000 - bl2.img
0xDB000-0x35B000 - lk.bin
0x35B000-0x39B000 - el3_mon.img
LDFW is in the BL package - ldfw.img.lz4
TZSW is in the BL package - tzsw.img.lz4
Loading LK into ghidra:
Settings:
AARCH64 V8A 64 LITTLE DEFAULT
Binary Options:
Base Address: 0xE8000000
Keep default analysis settings.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment