I found cramfs image using binwalk and extract it:
Code: Select all
$ binwalk upgrade.msd
DECIMAL HEX DESCRIPTION
-------------------------------------------------------------------------------------------------------
122709283 0x7506523 TIFF image data, big-endian
183189474 0xAEB3FE2 CramFS filesystem, little endian size 601520335 version #2 sorted_dirs hole_support CRC 0xf1959aee, edition 4087060793, 1402001618 blocks, 2145595601 files
804083766 0x2FED5836 TIFF image data, big-endian
869479821 0x33D3358D Realtek firmware header (ROME bootloader) header version: 82, created: 10/111/10919, image size: -655580638 bytes, body checksum: 0xC4, header checksum: 0x79
$ dd if=upgrade.msd iflag=skip_bytes skip=183189474 of=crfs.bin