Wow always amazing to see the progress!
And no sadly I don?t know any freeware disassembler which is as powerful as IDA Pro ...
Regards, Bastler
LE40C750 bootloader disassembly thread
-
- Posts: 104
- Joined: Thu Jun 17, 2010 8:38 pm
Re: LE40C750 bootloader disassembly thread
probutus
Is here any hint of procedure if bootloader finds changed kernel? What procedure is next? Maybe is it possible to boot from external source in this case or we just get kernel panic or smth else?
Is here any hint of procedure if bootloader finds changed kernel? What procedure is next? Maybe is it possible to boot from external source in this case or we just get kernel panic or smth else?
LE40B653T5W,UE40D6750,UE65Q8C
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]
DO NOT EVER INSTALL FIRMWARE UPGRADE
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]
DO NOT EVER INSTALL FIRMWARE UPGRADE
Re: LE40C750 bootloader disassembly thread
probutus
Why to make a jump (B locReturn) right after sub_6701A144.
Otherwise there is a probability of a jump on locCreateHashCheckFailed.
Why to make a jump (B locReturn) right after sub_6701A144.
Otherwise there is a probability of a jump on locCreateHashCheckFailed.
Re: LE40C750 bootloader disassembly thread
OK!probutus wrote: Thas was my first thought, too but I have seen that the function Authenticate() is called from different places (even inside the second section of the bootloader which is copied into internal sram before). The function CreateHash seem to only fail when there is something wrong with the mechanism creating a hash, so this should not fail when the hashes dont match. Patching only the authenticate function makes us proof even with the other functions calling it
Then quits there are two functions (sub_6701A020=CreateHash and sub_6701A144=CreateHash_0) of creation a hash? Or it is check of different parts?