Open 424778940z opened 6 years ago
Just copy-pasting my last comment about this since I haven't had anyone contact me with any new info ever since and it's probably relevant if someone wants to take this on: "I've been in contact with someone who looked at the bq9000/Sanyo and had access to software that could enter the boot-rom on it. The firmware is definitely based on the bq8030. The first and last steps to enter the boot-rom are the same. It's the challenge(read from 0x73) & answer(send to 0x71) part that they've worked on. The bq8030 gives you a single fixed challenge and you just need to give it the proper answer to reach 0x10000. On the bq9000 it gives you a random challenge value and you're supposed to answer based on some sort of secret key/algorithm which if correct will increase the next challenge value by some amount and you need to do this repeatedly until you reach 0x10000. So that's nastier but could probably be solved based on firmware disassembly without TOO much difficulty."
I did replied on the website, but it says under review.
I included the scan log, but there is no 71 address listed
Hello Viktor. Managed to read the firmware bq9000. Program.zip
need help....