Extract Google Pixel Modem Images (FBPK Fastboot Package Image Format) - alexander-pick/shannon_modem_loader GitHub Wiki

Howto Extract Fastboot Package Radio Images

  1. Download image from https://developers.google.com/android/images

  2. Extract zip

  3. Check radio image:

$ xxd radio-husky-g5300i-230815-230825-b-10713889.img | head
00000000: 4642 504b 0100 0000 6735 3330 3069 2d32  FBPK....g5300i-2
00000010: 3330 3831 352d 3233 3038 3235 2d4d 2d31  30815-230825-M-1
00000020: 3037 3133 3838 3900 0000 0000 0000 0000  0713889.........
00000030: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000040: 0000 0000 0000 0000 0000 0000 0100 0000  ................
00000050: 8c60 3a06 0100 0000 6d6f 6465 6d00 0000  .`:.....modem...
00000060: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000070: 0000 0000 0000 0000 0000 0000 0060 3a06  .............`:.

It is FBPK, this is fastboot pack format

  1. Get CalyxOS Pixel tools as they support type 1 fastboot images: https://gitlab.com/CalyxOS/scripts/-/tree/b9def06273d5c68bca195474ce8c59a0ecc396e5

It has to be this exact commit at the moment. Download these files or extraction won't work. This commit has v1 support needed for fastboot packages version 1.

See more: https://gitlab.com/CalyxOS/scripts/-/commit/b9def06273d5c68bca195474ce8c59a0ecc396e5

  1. python3 fbpacktool.py unpack radio-husky-g5300i-230815-230825-b-10713889.img

  2. Now you have a modem.img which is just a ext4 image:

$ mkdir image
$ sudo mount -o loop -t ext4 ./modem.img ./image/
$ cd image/images/g5300i-230815-230825-B-10713889
$ ls
confpack  modem.bin  uecap
$ xxd modem.bin | head
00000000: 544f 4300 0000 0000 0000 0000 0000 0000  TOC.............
00000010: 0000 0000 1004 0000 0000 0000 0700 0000  ................
00000020: 424f 4f54 0000 0000 0000 0000 1004 0000  BOOT............
00000030: 0000 0000 0068 0100 2735 3941 0100 0000  .....h..'59A....
00000040: 4d41 494e 0000 0000 0000 0000 106c 0100  MAIN.........l..
00000050: 0000 0140 a07b ba05 5623 b775 0200 0000  ...@.{..V#.u....
00000060: 5653 5300 0000 0000 0000 0000 b0e7 bb05  VSS.............
00000070: 0000 904f acc9 4700 a639 fd84 0300 0000  ...O..G..9......
00000080: 4150 4d00 0000 0000 0000 0000 5cb1 0306  APM.........\...
00000090: 00e0 0202 60b3 0000 5798 edbf 0400 0000  ....`...W.......
  1. Load this modem.bin into IDA and have fun

Additional Links