Closed fenugrec closed 2 years ago
******************** **** Started analyzing 9U03A_CS.bin alt cks block 0x001408 - 0x003A4E: sumt=0x032FDF95, xort=0x5F3225BF confirmed altcks values found : acs @ 0x1400, acx @ 0x1404 alt2 sum=0xC986560C; xor=0xF774E8F8 Keyset C6E19CF0 found near 0x18A5C ! found bsr at 189BA key : 685BFBBA found bsr at 1892E key : C6E19CF0 keys guessed: s27k @ 0x01892E, s36k1 @ 0x0189BA EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x42F9C : &eep_read() = 0x3EC14 possible calltable @ 24DC, len=0xD8 possible calltable @ 4E488, len=0x3C ******************** **** Started analyzing 9U03C_CS.bin alt cks block 0x001408 - 0x003A4E: sumt=0xAB131146, xort=0xF76080DC confirmed altcks values found : acs @ 0x1400, acx @ 0x1404 alt2 sum=0x458021F1; xor=0xB2A23F2D Keyset C6E19CF0 found near 0x19CA0 ! found bsr at 19BFE key : 685BFBBA found bsr at 19B72 key : C6E19CF0 keys guessed: s27k @ 0x019B72, s36k1 @ 0x019BFE EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x44A84 : &eep_read() = 0x408B8 possible calltable @ 24DC, len=0xD8 possible calltable @ 505B8, len=0x3D ******************** **** Started analyzing 9U05A_CS.bin alt cks block 0x001408 - 0x003A4E: sumt=0x032FDF95, xort=0x5F3225BF confirmed altcks values found : acs @ 0x1400, acx @ 0x1404 alt2 sum=0xE6FBC5C4; xor=0x4E10A3BA Keyset C6E19CF0 found near 0x18A5C ! found bsr at 189BA key : 685BFBBA found bsr at 1892E key : C6E19CF0 keys guessed: s27k @ 0x01892E, s36k1 @ 0x0189BA EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x42F9C : &eep_read() = 0x3EC14 possible calltable @ 24DC, len=0xD8 possible calltable @ 4E488, len=0x3C ******************** **** Started analyzing 9U10A_CS.bin alt cks block 0x001408 - 0x003A4E: sumt=0x032FDF95, xort=0x5F3225BF confirmed altcks values found : acs @ 0x1400, acx @ 0x1404 alt2 sum=0x35ACD45; xor=0x6A299AA7 Keyset C6E19CF0 found near 0x18A5C ! found bsr at 189BA key : 685BFBBA found bsr at 1892E key : C6E19CF0 keys guessed: s27k @ 0x01892E, s36k1 @ 0x0189BA EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x42F9C : &eep_read() = 0x3EC14 possible calltable @ 24DC, len=0xD8 possible calltable @ 4E488, len=0x3C ******************** **** Started analyzing 9U12A_CS.bin alt cks block 0x001408 - 0x003A4E: sumt=0xAB131146, xort=0xF76080DC confirmed altcks values found : acs @ 0x1400, acx @ 0x1404 alt2 sum=0xF78926D0; xor=0xCC21B50C Keyset C6E19CF0 found near 0x19CA0 ! found bsr at 19BFE key : 685BFBBA found bsr at 19B72 key : C6E19CF0 keys guessed: s27k @ 0x019B72, s36k1 @ 0x019BFE EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x44A84 : &eep_read() = 0x408B8 possible calltable @ 24DC, len=0xD8 possible calltable @ 505B8, len=0x3D ******************** **** Started analyzing 9U13A_CS.bin alt cks block 0x001408 - 0x003A4E: sumt=0xAB131146, xort=0xF76080DC confirmed altcks values found : acs @ 0x1400, acx @ 0x1404 alt2 sum=0x60092409; xor=0xA4A1B039 Keyset C6E19CF0 found near 0x19CA0 ! found bsr at 19BFE key : 685BFBBA found bsr at 19B72 key : C6E19CF0 keys guessed: s27k @ 0x019B72, s36k1 @ 0x019BFE EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x44A84 : &eep_read() = 0x408B8 possible calltable @ 24DC, len=0xD8 possible calltable @ 505B8, len=0x3D ******************** **** Started analyzing BH32A_CS.bin alt cks block 0x001408 - 0x0033B2: sumt=0x3E203D33, xort=0xD2AFA86B confirmed altcks values found : acs @ 0x1400, acx @ 0x1404 alt2 sum=0x68BAF7F2; xor=0xCA5C4D32 Keyset C6E19CF0 found near 0x193CC ! found bsr at 1932C key : 685BFBBA found bsr at 192A0 key : C6E19CF0 keys guessed: s27k @ 0x0192A0, s36k1 @ 0x01932C EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x456CC : &eep_read() = 0x41278 possible calltable @ 2660, len=0xD8 possible calltable @ 52550, len=0x3D ******************** **** Started analyzing BH32B_CS.bin alt cks block 0x001408 - 0x0033B2: sumt=0x3E203D33, xort=0xD2AFA86B confirmed altcks values found : acs @ 0x1400, acx @ 0x1404 alt2 sum=0xD35AF40E; xor=0xA0FC4922 Keyset C6E19CF0 found near 0x193CC ! found bsr at 1932C key : 685BFBBA found bsr at 192A0 key : C6E19CF0 keys guessed: s27k @ 0x0192A0, s36k1 @ 0x01932C EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x456CC : &eep_read() = 0x41278 possible calltable @ 2660, len=0xD8 possible calltable @ 52550, len=0x3D ******************** **** Started analyzing BH32C_CS.bin alt cks block 0x001408 - 0x0033B2: sumt=0x3E203D33, xort=0xD2AFA86B confirmed altcks values found : acs @ 0x1400, acx @ 0x1404 alt2 sum=0xD4BD3D21; xor=0x5A5E0E19 Keyset C6E19CF0 found near 0x193CC ! found bsr at 1932C key : 685BFBBA found bsr at 192A0 key : C6E19CF0 keys guessed: s27k @ 0x0192A0, s36k1 @ 0x01932C EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x456CC : &eep_read() = 0x41278 possible calltable @ 2660, len=0xD8 possible calltable @ 52550, len=0x3D ******************** **** Started analyzing BH32W_CS.bin alt cks block 0x001408 - 0x0033B2: sumt=0x3E203D33, xort=0xD2AFA86B confirmed altcks values found : acs @ 0x1400, acx @ 0x1404 alt2 sum=0xCEBB3908; xor=0x5C5C0C24 Keyset C6E19CF0 found near 0x193CC ! found bsr at 1932C key : 685BFBBA found bsr at 192A0 key : C6E19CF0 keys guessed: s27k @ 0x0192A0, s36k1 @ 0x01932C EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x456CC : &eep_read() = 0x41278 possible calltable @ 2660, len=0xD8 possible calltable @ 52550, len=0x3D ******************** **** Started analyzing BH32X_CS.bin alt cks block 0x001408 - 0x0033B2: sumt=0x3E203D33, xort=0xD2AFA86B confirmed altcks values found : acs @ 0x1400, acx @ 0x1404 alt2 sum=0xD4BD3D36; xor=0x5A5E0E02 Keyset C6E19CF0 found near 0x193CC ! found bsr at 1932C key : 685BFBBA found bsr at 192A0 key : C6E19CF0 keys guessed: s27k @ 0x0192A0, s36k1 @ 0x01932C EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x456CC : &eep_read() = 0x41278 possible calltable @ 2660, len=0xD8 possible calltable @ 52550, len=0x3D ******************** **** Started analyzing BH33A_CS.bin alt cks block 0x0131D4 - 0x014D58: sumt=0x06313E3E, xort=0xCB54B102 confirmed altcks values found : acs @ 0x10404, acx @ 0x10408 probable ECUID : BH33A RIPEMD-160 hash function present. alt2 sum=0x9BCCFBB0; xor=0x654AB2F6 alt2 checksum found; sum @ 0xBE8, xor @ 0xBE0 alt2 sum=0x1624F7DA; xor=0x955CD09C Keyset C6E19CF0 found near 0x2194E ! found bsr at 4296 couldn't find two imm->mem stores ? found bsr at 218B4 key : 685BFBBA found bsr at 21838 key : C6E19CF0 keys guessed: s27k @ 0x021838, s36k1 @ 0x0218B4 EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x44654 : &eep_read() = 0x40A38 possible calltable @ 14224, len=0xDD possible calltable @ 4FFF8, len=0x3F ******************** **** Started analyzing BH33B_CS.bin alt cks block 0x0131D4 - 0x014D58: sumt=0x06313E3E, xort=0xCB54B102 confirmed altcks values found : acs @ 0x10404, acx @ 0x10408 probable ECUID : BH33B RIPEMD-160 hash function present. alt2 sum=0xA5DFAD7; xor=0x9D9B7D1 alt2 checksum found; sum @ 0xBE8, xor @ 0xBE0 alt2 sum=0x2B1BF0FC; xor=0xEF0A4D16 Keyset C6E19CF0 found near 0x2194E ! found bsr at 4296 couldn't find two imm->mem stores ? found bsr at 218B4 key : 685BFBBA found bsr at 21838 key : C6E19CF0 keys guessed: s27k @ 0x021838, s36k1 @ 0x0218B4 EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x44654 : &eep_read() = 0x40A38 possible calltable @ 14224, len=0xDD possible calltable @ 4FFF8, len=0x3F ******************** **** Started analyzing BH33C_CS.bin alt cks block 0x0131D4 - 0x014D58: sumt=0x06313E3E, xort=0xCB54B102 confirmed altcks values found : acs @ 0x10404, acx @ 0x10408 probable ECUID : BH33C RIPEMD-160 hash function present. alt2 sum=0xB8A19C3; xor=0xFA86CF7 alt2 checksum found; sum @ 0xBE8, xor @ 0xBE0 alt2 sum=0x6630D69; xor=0xB8D88B95 Keyset C6E19CF0 found near 0x2194E ! found bsr at 4296 couldn't find two imm->mem stores ? found bsr at 218B4 key : 685BFBBA found bsr at 21838 key : C6E19CF0 keys guessed: s27k @ 0x021838, s36k1 @ 0x0218B4 EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x44654 : &eep_read() = 0x40A38 possible calltable @ 14224, len=0xDD possible calltable @ 4FFF8, len=0x3F ******************** **** Started analyzing BH33D_CS.bin alt cks block 0x0131D4 - 0x014D58: sumt=0x06313E3E, xort=0xCB54B102 confirmed altcks values found : acs @ 0x10404, acx @ 0x10408 probable ECUID : BH33D RIPEMD-160 hash function present. alt2 sum=0x7A1B18EA; xor=0x633F6DD0 alt2 checksum found; sum @ 0xBE8, xor @ 0xBE0 alt2 sum=0x3052C75F; xor=0x42A2CDAF Keyset C6E19CF0 found near 0x2194E ! found bsr at 4296 couldn't find two imm->mem stores ? found bsr at 218B4 key : 685BFBBA found bsr at 21838 key : C6E19CF0 keys guessed: s27k @ 0x021838, s36k1 @ 0x0218B4 EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x44654 : &eep_read() = 0x40A38 possible calltable @ 14224, len=0xDD possible calltable @ 4FFF8, len=0x3F ******************** **** Started analyzing BH34A_CS.bin alt cks block 0x0131D4 - 0x014D58: sumt=0x06313E3E, xort=0xCB54B102 confirmed altcks values found : acs @ 0x10404, acx @ 0x10408 probable ECUID : BH34A RIPEMD-160 hash function present. alt2 sum=0xECC70F6B; xor=0xE81E39F7 alt2 checksum found; sum @ 0xBE8, xor @ 0xBE0 alt2 sum=0x8317D0DE; xor=0x54942BEA Keyset C6E19CF0 found near 0x2194E ! found bsr at 4296 couldn't find two imm->mem stores ? found bsr at 218B4 key : 685BFBBA found bsr at 21838 key : C6E19CF0 keys guessed: s27k @ 0x021838, s36k1 @ 0x0218B4 EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x44654 : &eep_read() = 0x40A38 possible calltable @ 14224, len=0xDD possible calltable @ 4FFF8, len=0x3F ******************** **** Started analyzing BH34B_CS.bin alt cks block 0x0131D4 - 0x014D58: sumt=0x06313E3E, xort=0xCB54B102 confirmed altcks values found : acs @ 0x10404, acx @ 0x10408 probable ECUID : BH34B RIPEMD-160 hash function present. alt2 sum=0x5B580E92; xor=0x848D3CD0 alt2 checksum found; sum @ 0xBE8, xor @ 0xBE0 alt2 sum=0xB3F004B9; xor=0xB541CE11 Keyset C6E19CF0 found near 0x2194E ! found bsr at 4296 couldn't find two imm->mem stores ? found bsr at 218B4 key : 685BFBBA found bsr at 21838 key : C6E19CF0 keys guessed: s27k @ 0x021838, s36k1 @ 0x0218B4 EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x44654 : &eep_read() = 0x40A38 possible calltable @ 14224, len=0xDD possible calltable @ 4FFF8, len=0x3F ******************** **** Started analyzing BH34C_CS.bin alt cks block 0x0131D4 - 0x014D58: sumt=0x06313E3E, xort=0xCB54B102 confirmed altcks values found : acs @ 0x10404, acx @ 0x10408 probable ECUID : BH34C RIPEMD-160 hash function present. alt2 sum=0x5C84387D; xor=0x82FCECF7 alt2 checksum found; sum @ 0xBE8, xor @ 0xBE0 alt2 sum=0xBDB0B310; xor=0x313188C6 Keyset C6E19CF0 found near 0x2194E ! found bsr at 4296 couldn't find two imm->mem stores ? found bsr at 218B4 key : 685BFBBA found bsr at 21838 key : C6E19CF0 keys guessed: s27k @ 0x021838, s36k1 @ 0x0218B4 EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x44654 : &eep_read() = 0x40A38 possible calltable @ 14224, len=0xDD possible calltable @ 4FFF8, len=0x3F ******************** **** Started analyzing BH34D_CS.bin alt cks block 0x0131D4 - 0x014D58: sumt=0x06313E3E, xort=0xCB54B102 confirmed altcks values found : acs @ 0x10404, acx @ 0x10408 probable ECUID : BH34D RIPEMD-160 hash function present. alt2 sum=0xCB1537A4; xor=0xEE6BEDD0 alt2 checksum found; sum @ 0xBE8, xor @ 0xBE0 alt2 sum=0x9269A409; xor=0x43C97EB Keyset C6E19CF0 found near 0x2194E ! found bsr at 4296 couldn't find two imm->mem stores ? found bsr at 218B4 key : 685BFBBA found bsr at 21838 key : C6E19CF0 keys guessed: s27k @ 0x021838, s36k1 @ 0x0218B4 EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x44654 : &eep_read() = 0x40A38 possible calltable @ 14224, len=0xDD possible calltable @ 4FFF8, len=0x3F ******************** **** Started analyzing 8Y52B_CS.bin alt cks block 0x02040C - 0x022496: sumt=0x0DF7138D, xort=0x8A8C4FAF confirmed altcks values found : acs @ 0x20404, acx @ 0x20408 probable ECUID : 8Y52B RIPEMD-160 hash function present. alt2 sum=0xEF74A24B; xor=0xEC69FD5F alt2 checksum found; sum @ 0x1C0C, xor @ 0x1C04 alt2 sum=0x2F9DA2A9; xor=0x51F418D3 Keyset C6E19CF0 found near 0x33A40 ! found bsr at 44EC couldn't find two imm->mem stores ? found bsr at 3399C key : 685BFBBA found bsr at 33910 key : C6E19CF0 keys guessed: s27k @ 0x033910, s36k1 @ 0x03399C EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x77E82 : &eep_read() = 0x70674 possible calltable @ 21728, len=0x107 possible calltable @ 8912C, len=0x48 ******************** **** Started analyzing BH44C_CS.bin alt cks block 0x02040C - 0x022496: sumt=0x0DF7138D, xort=0x8A8C4FAF confirmed altcks values found : acs @ 0x20404, acx @ 0x20408 probable ECUID : BH44C RIPEMD-160 hash function present. alt2 sum=0x7051B0C; xor=0xC752F8E2 alt2 checksum found; sum @ 0x1C0C, xor @ 0x1C04 alt2 sum=0x51414719; xor=0x8D21F699 Keyset C6E19CF0 found near 0x33A40 ! found bsr at 44EC couldn't find two imm->mem stores ? found bsr at 3399C key : 685BFBBA found bsr at 33910 key : C6E19CF0 keys guessed: s27k @ 0x033910, s36k1 @ 0x03399C EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x77E82 : &eep_read() = 0x70674 possible calltable @ 21728, len=0x107 possible calltable @ 8912C, len=0x48 ******************** **** Started analyzing BH45C_CS.bin alt cks block 0x02040C - 0x022496: sumt=0x0DF7138D, xort=0x8A8C4FAF confirmed altcks values found : acs @ 0x20404, acx @ 0x20408 probable ECUID : BH45C RIPEMD-160 hash function present. alt2 sum=0x748A1844; xor=0xAED7FDD4 alt2 checksum found; sum @ 0x1C0C, xor @ 0x1C04 alt2 sum=0x64FD4451; xor=0xEA29FB8B Keyset C6E19CF0 found near 0x33A40 ! found bsr at 44EC couldn't find two imm->mem stores ? found bsr at 3399C key : 685BFBBA found bsr at 33910 key : C6E19CF0 keys guessed: s27k @ 0x033910, s36k1 @ 0x03399C EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x77E82 : &eep_read() = 0x70674 possible calltable @ 21728, len=0x107 possible calltable @ 8912C, len=0x48 ******************** **** Started analyzing BH46C_CS.bin alt cks block 0x02040C - 0x022496: sumt=0x0DF7138D, xort=0x8A8C4FAF confirmed altcks values found : acs @ 0x20404, acx @ 0x20408 probable ECUID : BH46C RIPEMD-160 hash function present. alt2 sum=0xCBDF4080; xor=0xAEA4880C alt2 checksum found; sum @ 0x1C0C, xor @ 0x1C04 alt2 sum=0x217B1C95; xor=0xA8D425B3 Keyset C6E19CF0 found near 0x33A40 ! found bsr at 44EC couldn't find two imm->mem stores ? found bsr at 3399C key : 685BFBBA found bsr at 33910 key : C6E19CF0 keys guessed: s27k @ 0x033910, s36k1 @ 0x03399C EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x77E82 : &eep_read() = 0x70674 possible calltable @ 21728, len=0x107 possible calltable @ 8912C, len=0x48 ******************** **** Started analyzing BH47C_CS.bin alt cks block 0x02040C - 0x022496: sumt=0x0DF7138D, xort=0x8A8C4FAF confirmed altcks values found : acs @ 0x20404, acx @ 0x20408 probable ECUID : BH47C RIPEMD-160 hash function present. alt2 sum=0x39643DB8; xor=0xC7218D3A alt2 checksum found; sum @ 0x1C0C, xor @ 0x1C04 alt2 sum=0xAEFF61AD; xor=0x74779B21 Keyset C6E19CF0 found near 0x33A40 ! found bsr at 44EC couldn't find two imm->mem stores ? found bsr at 3399C key : 685BFBBA found bsr at 33910 key : C6E19CF0 keys guessed: s27k @ 0x033910, s36k1 @ 0x03399C EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x77E82 : &eep_read() = 0x70674 possible calltable @ 21728, len=0x107 possible calltable @ 8912C, len=0x48 ******************** **** Started analyzing BH48C_CS.bin alt cks block 0x02040C - 0x022496: sumt=0x0DF7138D, xort=0x8A8C4FAF confirmed altcks values found : acs @ 0x20404, acx @ 0x20408 probable ECUID : BH48C RIPEMD-160 hash function present. alt2 sum=0x47B6D172; xor=0x8A89362C alt2 checksum found; sum @ 0x1C0C, xor @ 0x1C04 alt2 sum=0xCD8D67; xor=0x61881413 Keyset C6E19CF0 found near 0x33A40 ! found bsr at 44EC couldn't find two imm->mem stores ? found bsr at 3399C key : 685BFBBA found bsr at 33910 key : C6E19CF0 keys guessed: s27k @ 0x033910, s36k1 @ 0x03399C EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x77E82 : &eep_read() = 0x70674 possible calltable @ 21728, len=0x107 possible calltable @ 8912C, len=0x48 ******************** **** Started analyzing BH49C_CS.bin alt cks block 0x02040C - 0x022496: sumt=0x0DF7138D, xort=0x8A8C4FAF confirmed altcks values found : acs @ 0x20404, acx @ 0x20408 probable ECUID : BH49C RIPEMD-160 hash function present. alt2 sum=0xB53BCEAA; xor=0xE30C331A alt2 checksum found; sum @ 0x1C0C, xor @ 0x1C04 alt2 sum=0xD2F92BF; xor=0xA73C00C1 Keyset C6E19CF0 found near 0x33A40 ! found bsr at 44EC couldn't find two imm->mem stores ? found bsr at 3399C key : 685BFBBA found bsr at 33910 key : C6E19CF0 keys guessed: s27k @ 0x033910, s36k1 @ 0x03399C EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x77E82 : &eep_read() = 0x70674 possible calltable @ 21728, len=0x107 possible calltable @ 8912C, len=0x48 ******************** **** Started analyzing BH50C_CS.bin alt cks block 0x02040C - 0x022496: sumt=0x0DF7138D, xort=0x8A8C4FAF confirmed altcks values found : acs @ 0x20404, acx @ 0x20408 probable ECUID : BH50C RIPEMD-160 hash function present. alt2 sum=0x9507FCB5; xor=0x83F57037 alt2 checksum found; sum @ 0x1C0C, xor @ 0x1C04 alt2 sum=0x37D6A0A0; xor=0xAC2A7E32 Keyset C6E19CF0 found near 0x33A40 ! found bsr at 44EC couldn't find two imm->mem stores ? found bsr at 3399C key : 685BFBBA found bsr at 33910 key : C6E19CF0 keys guessed: s27k @ 0x033910, s36k1 @ 0x03399C EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x77E82 : &eep_read() = 0x70674 possible calltable @ 21728, len=0x107 possible calltable @ 8912C, len=0x48 ******************** **** Started analyzing BH51B_CS.bin Unlikely contents for struct ramf; got 0x10003. probable RAMF found @ delta = +4 alt cks block 0x02040C - 0x02244E: sumt=0xC1D4118B, xort=0x0D4AE5D5 confirmed altcks values found : acs @ 0x20404, acx @ 0x20408 probable ECUID : BH51B RIPEMD-160 hash function present. alt2 sum=0x1166ED19; xor=0x86970A2D alt2 checksum found; sum @ 0x1BA0, xor @ 0x1B98 alt2 sum=0x775FB10C; xor=0xE9DFD818 Keyset C6E19CF0 found near 0x3342C ! found bsr at 44EC couldn't find two imm->mem stores ? found bsr at 33388 key : 685BFBBA found bsr at 332FC key : C6E19CF0 keys guessed: s27k @ 0x0332FC, s36k1 @ 0x033388 EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x755EE : &eep_read() = 0x6DDB0 possible calltable @ 216F0, len=0x103 possible calltable @ 85C90, len=0x34 ******************** **** Started analyzing BH51C_CS.bin alt cks block 0x02040C - 0x022496: sumt=0x0DF7138D, xort=0x8A8C4FAF confirmed altcks values found : acs @ 0x20404, acx @ 0x20408 probable ECUID : BH51C RIPEMD-160 hash function present. alt2 sum=0x28CF9ED; xor=0xEA707501 alt2 checksum found; sum @ 0x1C0C, xor @ 0x1C04 alt2 sum=0xFF12A5F8; xor=0x9FF672BC Keyset C6E19CF0 found near 0x33A40 ! found bsr at 44EC couldn't find two imm->mem stores ? found bsr at 3399C key : 685BFBBA found bsr at 33910 key : C6E19CF0 keys guessed: s27k @ 0x033910, s36k1 @ 0x03399C EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x77E82 : &eep_read() = 0x70674 possible calltable @ 21728, len=0x107 possible calltable @ 8912C, len=0x48 ******************** **** Started analyzing 8Y50B_CS.bin alt cks block 0x02040C - 0x022496: sumt=0x0DF7138D, xort=0x8A8C4FAF confirmed altcks values found : acs @ 0x20404, acx @ 0x20408 probable ECUID : 8Y50B RIPEMD-160 hash function present. alt2 sum=0x813C03B2; xor=0x25BD7D04 alt2 checksum found; sum @ 0x1C0C, xor @ 0x1C04 alt2 sum=0xE7C80350; xor=0xDC9499F8 Keyset C6E19CF0 found near 0x33A40 ! found bsr at 44EC couldn't find two imm->mem stores ? found bsr at 3399C key : 685BFBBA found bsr at 33910 key : C6E19CF0 keys guessed: s27k @ 0x033910, s36k1 @ 0x03399C EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x77E82 : &eep_read() = 0x70674 possible calltable @ 21728, len=0x107 possible calltable @ 8912C, len=0x48 ******************** **** Started analyzing 8Y51B_CS.bin alt cks block 0x02040C - 0x022496: sumt=0x0DF7138D, xort=0x8A8C4FAF confirmed altcks values found : acs @ 0x20404, acx @ 0x20408 probable ECUID : 8Y51B RIPEMD-160 hash function present. alt2 sum=0xC88A8203; xor=0xBEF81E29 alt2 checksum found; sum @ 0x1C0C, xor @ 0x1C04 alt2 sum=0x642B82E1; xor=0xD1DA389D Keyset C6E19CF0 found near 0x33A40 ! found bsr at 44EC couldn't find two imm->mem stores ? found bsr at 3399C key : 685BFBBA found bsr at 33910 key : C6E19CF0 keys guessed: s27k @ 0x033910, s36k1 @ 0x03399C EEPROM Port reg : 0xFFFFF73A Occurence 1 @ 0x77E82 : &eep_read() = 0x70674 possible calltable @ 21728, len=0x107 possible calltable @ 8912C, len=0x48
fenugrec
commented
2 years ago fenugrec
commented
2 years ago