[Samsung Galaxy S7 Edge Questions and Answers] marcinguy:
Rooted my S7 Edge with TRWP and than Magisk. Installed no-verity-opt-encrypt

With TRWP backup the /boot partition to get the kernel.

Extracted Kernel from boot.emmc.win-zImage

But somehow it seems to be encrypted:

file piggy.gz

piggy.gz: gzip compressed data, reserved method, ASCII, has comment, encrypted, last modified: Fri Aug 29 04:58:08 2014, from Unix

Binwalk of boot.emmc.win

binwalk boot.emmc.win

DECIMAL HEXADECIMAL DESCRIPTION

--------------------------------------------------------------------------------

0 0x0 Android bootimg, kernel size: 33088224 bytes, kernel addr: 0x10008000, ramdisk size: 4568278 bytes, ramdisk addr: 0x11000000, product name: "SRPOI30A002KU"

98608 0x18130 SHA256 hash constants, little endian

10778624 0xA47800 ELF, 64-bit LSB shared object, version 1 (SYSV)

11118744 0xA9A898 Linux kernel version "3.18.91-14843133-QB22482885 (dpi@21HHAG11) (gcc version 4.9.x 20150123 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Mar 8 20:10:42 KS"

11134976 0xA9E800 ELF, 64-bit LSB shared object, version 1 (SYSV)

11579493 0xB0B065 VxWorks symbol table, big endian, first entry: [type: initialized data, code address: 0x653, symbol address: 0x95]

11656285 0xB1DC5D Boot section Start 0x42424208 End 0x3F0C3642

11756712 0xB364A8 CRC32 polynomial table, little endian

12160137 0xB98C89 eCos RTOS string reference: "ecos_booster_init"

12160161 0xB98CA1 eCos RTOS string reference: "ecos_booster_request_pm_qos"

12160193 0xB98CC1 eCos RTOS string reference: "ecos_booster_start"

12160217 0xB98CD9 eCos RTOS string reference: "ecos_booster_stop"

18124065 0x1148D21 Unix path: /arch/arm64/include/asm/mmu_context.h

18158729 0x1151489 Unix path: /proc/sys/kernel/hung_task_timeout_secs" disables this message.

18170028 0x11540AC Unix path: /arch/arm64/include/asm/pgalloc.h

18352359 0x11808E7 Unix path: /video/fbdev/exynos/decon_8890/vpp/vpp_drv.c

18386508 0x1188E4C Unix path: /video/fbdev/core/fb_draw.h

18407996 0x118E23C Unix path: /video/fbdev/exynos/decon_8890/panels/mdnie_lite.c

18492989 0x11A2E3D Unix path: /devices/svc/AP/SVC_AP, %s

18513733 0x11A7F45 Unix path: /gpu/arm/t8xx/r22p0/mali_kbase_device.c

18519916 0x11A976C Unix path: /gpu/arm/t8xx/r22p0/mali_kbase_mmu.c

18520935 0x11A9B67 Unix path: /gpu/arm/t8xx/r22p0/mali_kbase_ctx_sched.c

18521431 0x11A9D57 Unix path: /gpu/arm/t8xx/r22p0/mali_kbase_jd.c

18522957 0x11AA34D Unix path: /gpu/arm/t8xx/r22p0/mali_kbase_softjobs.c

18569941 0x11B5AD5 Unix path: /gpu/arm/t8xx/r22p0/mali_kbase_mem_pool.c

18572728 0x11B65B8 Unix path: /gpu/arm/t8xx/r22p0/thirdparty/mali_kbase_mmap.c

18576383 0x11B73FF Unix path: /gpu/arm/t8xx/r22p0/platform/exynos/gpu_pmqos.c

18576608 0x11B74E0 Unix path: /gpu/arm/t8xx/r22p0/platform/exynos/gpu_dvfs_handler.c

18576773 0x11B7585 Unix path: /gpu/arm/t8xx/r22p0/platform/exynos/gpu_dvfs_api.c

18577870 0x11B79CE Unix path: /gpu/arm/t8xx/r22p0/platform/exynos/gpu_dvfs_governor.c

18581964 0x11B89CC Unix path: /gpu/arm/t8xx/r22p0/backend/gpu/mali_kbase_debug_job_fault_backend.c

18582277 0x11B8B05 Unix path: /gpu/arm/t8xx/r22p0/backend/gpu/mali_kbase_jm_as.c

18583494 0x11B8FC6 Unix path: /gpu/arm/t8xx/r22p0/backend/gpu/mali_kbase_jm_rb.c

18584867 0x11B9523 Unix path: /gpu/arm/t8xx/r22p0/backend/gpu/mali_kbase_pm_metrics.c

18603634 0x11BDE72 Unix path: /lib/firmware/updates/3.18.91-14843133-QB22482885

18677025 0x11CFD21 Unix path: /net/wireless/bcmdhd4359/dhd_common.c

18680100 0x11D0924 Unix path: /vendor/etc/wifi/bcmdhd_clm.blob

18683090 0x11D14D2 Unix path: /net/wireless/bcmdhd4359/dhd_ip.c

18685738 0x11D1F2A Unix path: /data/misc/conn/.psm.info

18686150 0x11D20C6 Unix path: /data/misc/conn/.ant.info

18686683 0x11D22DB Unix path: /data/misc/conn/.rsdb.info

18686839 0x11D2377 Unix path: /data/misc/conn/.logtrace.info

18686917 0x11D23C5 Unix path: /data/misc/conn/.bustxglom.info

18688096 0x11D2860 Unix path: /data/misc/conn/.wifiver.info

18692932 0x11D3B44 Unix path: /vendor/etc/wifi/nvram_net.txt

18701027 0x11D5AE3 Unix path: /data/misc/conn/.memdump.info

18701530 0x11D5CDA Unix path: /data/log/wifi/debug_dump_USER

18701809 0x11D5DF1 Unix path: /data/misc/conn/.assert.info

18707379 0x11D73B3 Unix path: /data/misc/conn/roml.map

18707837 0x11D757D Unix path: /net/wireless/bcmdhd4359/dhd_linux_wq.c

18708607 0x11D787F Unix path: /net/wireless/bcmdhd4359/aiutils.c

18711282 0x11D82F2 Unix path: /net/wireless/bcmdhd4359/bcmutils.c

18713539 0x11D8BC3 Unix path: /net/wireless/bcmdhd4359/bcmwifi_channels.c

18714469 0x11D8F65 Unix path: /net/wireless/bcmdhd4359/sbutils.c

18714815 0x11D90BF Unix path: /net/wireless/bcmdhd4359/siutils.c

18733557 0x11DD9F5 Unix path: /net/wireless/bcmdhd4359/wl_cfg80211.c

18736653 0x11DE60D Unix path: /net/wireless/bcmdhd4359/wl_cfg80211.h

18763284 0x11E4E14 Unix path: /net/wireless/bcmdhd4359/wl_cfgp2p.c

18766177 0x11E5961 Unix path: /net/wireless/bcmdhd4359/dhd_linux_platdev.c

18766838 0x11E5BF6 Unix path: /net/wireless/bcmdhd4359/hnd_pktq.c

18767907 0x11E6023 Unix path: /net/wireless/bcmdhd4359/dhd_debug.c

18771481 0x11E6E19 Unix path: /data/misc/conn/.cid.info

18774922 0x11E7B8A Unix path: /net/wireless/bcmdhd4359/dhd_pcie.c

18785819 0x11EA61B Unix path: /net/wireless/bcmdhd4359/dhd_pcie_linux.c

18787945 0x11EAE69 Unix path: /net/wireless/bcmdhd4359/pcie_core.c

18789598 0x11EB4DE Unix path: /net/wireless/bcmdhd4359/dhd_msgbuf.c

18805073 0x11EF151 Unix path: /net/wireless/bcmdhd4359/bcmxtlv.c

18806994 0x11EF8D2 Unix path: /net/wireless/bcmdhd4359/dhd_custom_exynos.c

18818455 0x11F2597 Unix path: /sys/bus/usb/devices/X-XX/power/level"

18843474 0x11F8752 PARity archive data - file number 20549

18863904 0x11FD720 Unix path: /S70/S75/505V/F505/F707/F717/P8

18871011 0x11FF2E3 Unix path: /usb/gadget/function/u_serial.c

18872811 0x11FF9EB Unix path: /drivers/usb/gadget/udc/../function/f_accessory.c

18874331 0x11FFFDB Unix path: /drivers/usb/gadget/udc/../function/f_mass_storage.c

18880147 0x1201693 Unix path: /drivers/usb/gadget/udc/../function/u_ether.c

18900213 0x12064F5 Unix path: /sdcard/Firmware/TOUCHKEY/abov_fw.bin

18903633 0x1207251 Unix path: /sdcard/Firmware/TOUCHKEY/fw.bin

18917541 0x120A8A5 Unix path: /sdcard/Firmware/TSP/lsi.bin

18931437 0x120DEED Unix path: /sdcard/Firmware/TSP/stm.fw

19017368 0x1222E98 Unix path: /media/platform/exynos/fimc-is2/fimc-is-mem.c

19081116 0x123279C Unix path: /data/media/0/fimc_is_fw.bin

19086726 0x1233D86 Unix path: /data/media/0/reload/r1e2l3o4a5d.key

19086804 0x1233DD4 Unix path: /data/media/0/i1s2p3s4r.key

19088293 0x12343A5 Unix path: /data/media/0/1q2w3e4r.key

19088346 0x12343DA Unix path: /data/media/0/dump

19088446 0x123443E Unix path: /data/media/0/dump/eeprom_cal.bin

19089012 0x1234674 Unix path: /data/media/0/CamFW_Main.bin

19090892 0x1234DCC Unix path: /data/media/0/dump/from_cal.bin

19157110 0x1245076 Unix path: /switch/../../sound/soc/samsung/jack_arizona.c

19198780 0x124F33C Unix path: /sys/firmware/devicetree/base

19284143 0x12640AF Unix path: /gud/gud-exynos8890/MobiCoreDriver/admin.c

19285134 0x126448E Unix path: /gud/gud-exynos8890/MobiCoreDriver/client.c

19288442 0x126517A Unix path: /gud/gud-exynos8890/MobiCoreDriver/mmu.c

19289630 0x126561E Unix path: /gud/gud-exynos8890/MobiCoreDriver/user.c

19290207 0x126585F eCos RTOS string reference: "ecos boost policy:%d"

19290355 0x12658F3 eCos RTOS string reference: "ecos_booster_stop failed. err:%d"

19321110 0x126D116 Unix path: /sys/class/sec/sec_key/certify_hall_detect

19323928 0x126DC18 Unix path: /sensorhub/brcm/bbdpl/bcm_gps_spi.c

19325230 0x126E12E Unix path: /sensorhub/brcm/bbdpl/bbd_rpc_lh.c

19464870 0x12902A6 Neighborly text, "NeighborSolicitss"

19464887 0x12902B7 Neighborly text, "NeighborAdvertisementscmp6OutMsgs"

19486291 0x1295653 Neighborly text, "NeighborhHWMPactivePathTimeout"

19549135 0x12A4BCF mcrypt 2.2 encrypted data, algorithm: blowfish-448, mode: CBC, keymode: 8bit

19584679 0x12AD6A7 mcrypt 2.2 encrypted data, algorithm: blowfish-448, mode: CBC, keymode: 8bit

20110944 0x132DE60 gzip compressed data, maximum compression, from Unix, NULL date (1970-01-01 00:00:00)

30514688 0x1D19E00 CRC32 polynomial table, little endian

31611145 0x1E25909 Windows CE image header, image start: 0x34323038, image length: 1144341553

31636270 0x1E2BB2E ASCII cpio archive (SVR4 with CRC) file name: "220FFF7B7FF012840F0F7800120", file name length: "0x0F0F8800", file size: "0x210020FA"

31731098 0x1E42D9A ASCII cpio archive (SVR4 with no CRC), file name: "403902081000A2900F27580DFE801F006275773734C73", file name length: "0xE9684018", file size: "0x18338B5"

32096978 0x1E9C2D2 ISO 9660 CD-ROM filesystem data, version 1.0, volume name: "DB4846FFF79CFD322801DA02270AE04846FFF7",

32221252 0x1EBA844 ASCII cpio archive (SVR4 with no CRC), file name: "400F1EE", file name length: "0xE600AF19", file size: "0x03207070"

33091584 0x1F8F000 gzip compressed data, from Unix, NULL date (1970-01-01 00:00:00)

37484346 0x23BF73A MySQL MISAM compressed data file Version 7

37693439 0x23F27FF GPG key trust database version 48

37700759 0x23F4497 GPG key trust database version 48

37705655 0x23F57B7 GPG key trust database version 48

37705723 0x23F57FB GPG key trust database version 48

37705791 0x23F583F GPG key trust database version 48

37822916 0x24121C4 Unix path: /sys/class/scsi_host/host0/transferred_cnt

37886195 0x24218F3 GPG key trust database version 48

37893599 0x24235DF GPG key trust database version 48

37898495 0x24248FF GPG key trust database version 48

37898563 0x2424943 GPG key trust database version 48

37898631 0x2424987 GPG key trust database version 48

38015668 0x24412B4 Unix path: /sys/class/scsi_host/host0/transferred_cnt

Used unpackbootimg to get the zImage

unpackbootimg -i boot.emmc.win -o .

and than

grep -P -a -b -m 1 --only-matching '\x5D\x00\x00' boot.emmc.win-zImage | cut -f 1 -d :

dd if=./boot.emmc.win-zImage of=piggy.gz bs=1 skip=323568

Questions:

1) Is my Kernel encrypted?

2) How to decrypt it?

3) I want to find some symbols, hence I need the kernel image

Thanks,