[Nexus 6P Original Android Development] makers_mark:
:good:

Thanks for giving it a shot! Gandharva has already provided both of the files to me, and they'll be the same.

This is my last stand :cowboy:! This program at the bottom will pull every partition, and search for 32 specific bytes of an decoded gzip that might be residing somewhere. The bytes that I'm searching for is the very top of the "lock_state" image that gets decoded (they're highlighted in blue). Here it is below, feel free to participate, and if not, thanks for everything else!

No partition folder will be created. All partitions will be dd'd to the device, pulled to your computer, deleted from the device (not your partition, but the copy from dd), then checked on your PC for a match. If there isn't a match, the partition will be deleted from your computer as well. When a match is found, it will be displayed, and displayed again at the very end. It is NOT important to watch this work because if there is a match, the partition with the match will still be in the folder in the end, and the screen will still be up. Fingers crossed.:fingers-crossed:​

Source: myfc.c

#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <string.h>
#include <fcntl.h>

int32_t FindSplashFile(FILE *input, uint8_t *inputFile){

int readByte;
uint8_t pos = 0;
unsigned long int cur = 0;

const uint8_t rawBGRchunk[] = { 44, 106, 106, 106, 148, 148, 148, 189, 189, 189, 221, 221, 221, 240, 240, 240,
252, 252, 252, 255, 255, 255, 252, 252, 252, 240, 240, 240, 221, 221, 221, 189};

fseek(input, 0, SEEK_SET);

while ((readByte = fgetc(input)) != EOF){

cur++;

if (readByte == rawBGRchunk[pos]){

if (pos == 31){

fprintf(stderr, "\n\n\n\n\"lock_state\" Raw image found in %s at byte %ld!\n\n\n\n\n", inputFile, cur - 32);
fclose(input);
return 1;

} else {

pos++;
continue;

}

} else if (readByte == (int)*rawBGRchunk){

pos = 1;
continue;

}

pos = 0;

}
fclose(input);
return 0;

}

int32_t main(int32_t argc, char **argv){

int c = 0;
uint8_t *inputFile;
FILE *input = NULL;

while ((c = getopt (argc, (char**)argv, "i:I:")) != -1){

switch(c)
{
case 'i':
case 'I':
inputFile = (uint8_t*)optarg;
break;

}
}

if ((input = fopen((const char*)inputFile, "rb")) == NULL){

fclose(input);
fprintf(stderr, "File could not be opened.\n");
return 0;

}

return FindSplashFile(input, inputFile);

}

Source batch file:

@echo off

title Partition Puller
set "device_dir=sdcard"
set "partitionfind=mmcblk0"

set "match="

:getpartitions

adb -d kill-server
adb -d root

if not defined device_dir echo(Device dir is undefined&goto :eof
if "[%device_dir%]"=="[]" echo(Device dir is undefined&goto :eof

echo(Pulling all partitions (minus userdata) and searching for 32 specific bytes
echo(of the raw ^"lock_state^" image that is in BGR24 format.
echo(
echo(Please wait...
for /f "skip=1 tokens=4" %%t in ('adb -d shell cat /proc/partitions^|findstr /rxic:".*%partitionfind%.*"') do (

call echo(Pulling %%t partition...
call adb -d shell dd if=/dev/block/%%t of=/%device_dir%/%%t
call adb -d pull "/%device_dir%/%%t" "%~dp0\%%t"
call adb -d shell rm "/%device_dir%/%%t"
call myfc -i "%%t" &&call del "%~dp0\%%t"||call :Match %%t

)
if defined match echo(Match found in %match%
pause
adb -d kill-server
goto :eof

:Match
set "match=%match% %1"
goto :eof