Mathieulh

DECR-1000 Bootloader pwned

Mar 31st, 2016
349
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. (live)root@redribbon:/home/math/btldr8_fat# ./lv0Decrypt 0 nor.bin buffers.bin
  2. Using spe 0
  3. Creating buffers
  4. Buffers created
  5. File loaded
  6. Buffer initialized
  7. ChanCount 0: 0000000000000000
  8. ChanCount 1: 0000000000000000
  9. ChanCount 2: 0000000000000000
  10. ChanCount 3: 0000000000000001
  11. ChanCount 4: 0000000000000001
  12. ChanCount 5: 0000000000000000
  13. ChanCount 6: 0000000000000000
  14. ChanCount 7: 0000000000000000
  15. ChanCount 8: 0000000000000000
  16. ChanCount 9: 0000000000000001
  17. ChanCount 10: 0000000000000000
  18. ChanCount 11: 0000000000000000
  19. ChanCount 12: 0000000000000000
  20. ChanCount 13: 0000000000000000
  21. ChanCount 14: 0000000000000000
  22. ChanCount 15: 0000000000000000
  23. ChanCount 16: 0000000000000000
  24. ChanCount 17: 0000000000000000
  25. ChanCount 18: 0000000000000000
  26. ChanCount 19: 0000000000000000
  27. ChanCount 20: 0000000000000000
  28. ChanCount 21: 0000000000000010
  29. ChanCount 22: 0000000000000000
  30. ChanCount 23: 0000000000000001
  31. ChanCount 24: 0000000000000000
  32. ChanCount 25: 0000000000000000
  33. ChanCount 26: 0000000000000000
  34. ChanCount 27: 0000000000000000
  35. ChanCount 28: 0000000000000001
  36. ChanCount 29: 0000000000000002
  37. ChanCount 30: 0000000000000001
  38. ChanCount 31: 0000000000000000
  39. ChanCount 0: 0000000000000000
  40. ChanCount 1: 0000000000000000
  41. ChanCount 2: 0000000000000000
  42. ChanCount 3: 0000000000000001
  43. ChanCount 4: 0000000000000001
  44. ChanCount 5: 0000000000000000
  45. ChanCount 6: 0000000000000000
  46. ChanCount 7: 0000000000000000
  47. ChanCount 8: 0000000000000000
  48. ChanCount 9: 0000000000000001
  49. ChanCount 10: 0000000000000000
  50. ChanCount 11: 0000000000000000
  51. ChanCount 12: 0000000000000000
  52. ChanCount 13: 0000000000000000
  53. ChanCount 14: 0000000000000000
  54. ChanCount 15: 0000000000000000
  55. ChanCount 16: 0000000000000000
  56. ChanCount 17: 0000000000000000
  57. ChanCount 18: 0000000000000000
  58. ChanCount 19: 0000000000000000
  59. ChanCount 20: 0000000000000000
  60. ChanCount 21: 0000000000000010
  61. ChanCount 22: 0000000000000000
  62. ChanCount 23: 0000000000000001
  63. ChanCount 24: 0000000000000000
  64. ChanCount 25: 0000000000000000
  65. ChanCount 26: 0000000000000000
  66. ChanCount 27: 0000000000000000
  67. ChanCount 28: 0000000000000001
  68. ChanCount 29: 0000000000000002
  69. ChanCount 30: 0000000000000001
  70. ChanCount 31: 0000000000000000
  71. Starting main loop
  72. STATUS 289
  73. MFCCNTL 0
  74. End of isolation load [89]
  75. 00000033 - 0000: 0x0000020000511048 <- 0x3E008 1F 26 00 00 00 00 00 00 (0x8)
  76. 00000249 - 0001: 0x0000020000511448 <- 0x3E008 08 26 00 00 00 00 00 00 (0x8)
  77. 00000377 - 0002: 0x0000020000512008 <- 0x3E008 04 00 00 00 00 00 00 00 (0x8)
  78. 00000484 - 0003: 0x0000020000513008 <- 0x3E008 04 00 00 00 00 00 00 00 (0x8)
  79. 00000674 - 0004: 0x0000020000511800 <- 0x3E000 88 06 80 00 00 00 00 00 (0x8)
  80. 00000841 - 0005: 0x0000024000FFF508 <- 0x3E008 00 00 FF 00 (0x4)
  81. 00000933 - 0006: 0x0000024000FFF530 <- 0x3E000 00 00 FF A0 (0x4)
  82. 00001053 - 0007: 0x0000024000FFF310 <- 0x3E000 00 00 80 8F (0x4)
  83. 00001183 - 0008: 0x0000024000FFF310 <- 0x3E000 00 00 00 8E (0x4)
  84. 00001270 - 0009: 0x0000024000FFF300 <- 0x3E000 00 00 40 20 (0x4)
  85. 00001434 - 000A: 0x0000024000FFF304 <- 0x3E004 00 00 00 00 (0x4)
  86. 00001565 - 000B: 0x0000024000FFF314 <- 0x3E004 00 00 00 02 (0x4)
  87. 00001654 - 000C: 0x0000024000FFF318 <- 0x3E008 00 00 00 17 (0x4)
  88. 00001736 - 000D: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  89. 00001882 - 000E: 0x000002400008DFF0 <- 0x3E000 00 00 00 00 (0x4)
  90. 00002017 - 000F: 0x000002400008DFF4 <- 0x3E004 00 00 00 00 (0x4)
  91. 00002126 - 0010: 0x000002400008DFF2 -> 0x3E002 00 00 (0x2)
  92. 00002266 - 0011: 0x000002400008CFF6 -> 0x3E006 00 00 (0x2)
  93. 00002402 - 0012: 0x000002400008D000 <- 0x3E000 FF 01 00 00 00 00 81 00 00 00 00 00 00 01 00 01 01 00 00 00 00 00 FE 7C 00 00 00 00 00 00 00 00 (0x20)
  94. 00002636 - 0013: 0x000002400008DFF0 <- 0x3E000 00 01 00 01 (0x4)
  95. 00002739 - 0014: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  96. 00002860 - 0015: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  97. RESPONSE: 41 41 41 41 41 41 41 41 41 41 41 41 00 00 00 00 41 41 41 41
  98. 00003072 - 0016: 0x000002400008CFF8 -> 0x3E008 FF FF FF FF FF FF FF FF (0x8)
  99. 00003212 - 0017: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  100. 00003317 - 0018: 0x000002400008DFF2 -> 0x3E002 00 01 (0x2)
  101. 00003419 - 0019: 0x000002400008CFF6 -> 0x3E006 00 01 (0x2)
  102. 00003500 - 001A: 0x000002400008D000 <- 0x3E000 18 01 00 01 00 00 80 1A 00 00 00 00 00 02 00 02 01 14 00 00 00 00 FF 33 00 00 00 00 00 00 00 00 (0x20)
  103. 00003689 - 001B: 0x000002400008DFF0 <- 0x3E000 00 02 00 02 (0x4)
  104. 00003798 - 001C: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  105. 00003882 - 001D: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  106. RESPONSE: 18 01 00 01 00 00 80 1A 00 00 00 00 00 04 00 04 00 14 01 05 FF FF FF 2A
  107. 00004135 - 001E: 0x000002400008CFF2 -> 0x3E002 00 02 (0x2)
  108. 00004282 - 001F: 0x000002400008DFF6 -> 0x3E006 00 01 (0x2)
  109. 00004414 - 0020: 0x000002400008CFF6 -> 0x3E006 00 02 (0x2)
  110. 00004509 - 0021: 0x000002400008CFF2 -> 0x3E002 00 02 (0x2)
  111. 00004656 - 0022: 0x000002400008DFF6 -> 0x3E006 00 01 (0x2)
  112. 00004734 - 0023: 0x000002400008C000 -> 0x3E000 18 01 00 01 00 00 80 1A 00 00 00 00 00 04 00 04 (0x10)
  113. Reading header
  114. 00004926 - 0024: 0x000002400008C000 -> 0x3E000 18 01 00 01 00 00 80 1A 00 00 00 00 00 04 00 04 00 14 01 05 FF FF FF 2A 41 41 41 41 41 41 41 41 (0x20)
  115. Reading data 0
  116. 00005114 - 0025: 0x000002400008DFF4 <- 0x3E004 00 02 00 02 (0x4)
  117. 00005250 - 0026: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  118. 00005332 - 0027: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  119. 00005492 - 0028: 0x000002400008DFF2 -> 0x3E002 00 02 (0x2)
  120. 00005626 - 0029: 0x000002400008CFF6 -> 0x3E006 00 02 (0x2)
  121. 00005731 - 002A: 0x000002400008D000 <- 0x3E000 14 01 00 02 00 00 80 17 00 00 00 00 00 04 00 04 20 02 00 13 00 00 FF 15 41 41 41 41 41 41 41 41 (0x20)
  122. 00005932 - 002B: 0x000002400008DFF0 <- 0x3E000 00 03 00 03 (0x4)
  123. 00006075 - 002C: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  124. 00006157 - 002D: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  125. RESPONSE: 14 01 00 02 00 00 80 17 00 00 00 00 00 17 00 17 00 02 00 13 00 00 01 A0 00 00 00 A0 00 00 00 A0 00 00 00 A0 00 03 00 41 FF FF FC 4A
  126. 00006469 - 002E: 0x000002400008CFF2 -> 0x3E002 00 03 (0x2)
  127. 00006546 - 002F: 0x000002400008DFF6 -> 0x3E006 00 02 (0x2)
  128. 00006700 - 0030: 0x000002400008CFF6 -> 0x3E006 00 03 (0x2)
  129. 00006829 - 0031: 0x000002400008CFF2 -> 0x3E002 00 03 (0x2)
  130. 00006931 - 0032: 0x000002400008DFF6 -> 0x3E006 00 02 (0x2)
  131. 00007074 - 0033: 0x000002400008C000 -> 0x3E000 14 01 00 02 00 00 80 17 00 00 00 00 00 17 00 17 (0x10)
  132. Reading header
  133. 00007244 - 0034: 0x000002400008C000 -> 0x3E000 14 01 00 02 00 00 80 17 00 00 00 00 00 17 00 17 00 02 00 13 00 00 01 A0 00 00 00 A0 00 00 00 A0 00 00 00 A0 00 03 00 41 FF FF FC 4A 41 41 41 41 (0x30)
  134. Reading data 1
  135. 00007500 - 0035: 0x000002400008DFF4 <- 0x3E004 00 03 00 03 (0x4)
  136. 00007644 - 0036: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  137. 00007745 - 0037: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  138. 00007887 - 0038: 0x000002400008DFF2 -> 0x3E002 00 03 (0x2)
  139. 00008285 - 0039: 0x000002400008CFF6 -> 0x3E006 00 03 (0x2)
  140. 00008443 - 003A: 0x000002400008D000 <- 0x3E000 20 01 00 03 00 00 80 24 00 00 00 00 00 17 00 17 00 5B 49 4E 46 4F 5D 3A 20 74 72 61 63 65 20 6C 65 76 65 6C 20 33 0A 00 00 00 F8 28 41 41 41 41 (0x30)
  141. 00008654 - 003B: 0x000002400008DFF0 <- 0x3E000 00 04 00 04 (0x4)
  142. 00008744 - 003C: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  143. 00008890 - 003D: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  144. MSG: [INFO]: trace level 3
  145.  
  146. RESPONSE: 20 01 00 03 00 00 80 24 00 00 00 00 00 80 00 80 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 FF FF DF D8
  147. 00009700 - 003E: 0x000002400008CFF2 -> 0x3E002 00 04 (0x2)
  148. 00009782 - 003F: 0x000002400008DFF6 -> 0x3E006 00 03 (0x2)
  149. 00009891 - 0040: 0x000002400008CFF6 -> 0x3E006 00 04 (0x2)
  150. 00009969 - 0041: 0x000002400008CFF2 -> 0x3E002 00 04 (0x2)
  151. 00010121 - 0042: 0x000002400008DFF6 -> 0x3E006 00 03 (0x2)
  152. 00010203 - 0043: 0x000002400008C000 -> 0x3E000 20 01 00 03 00 00 80 24 00 00 00 00 00 80 00 80 (0x10)
  153. Reading header
  154. 00010395 - 0044: 0x000002400008C000 -> 0x3E000 20 01 00 03 00 00 80 24 00 00 00 00 00 80 00 80 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 FF FF DF D8 41 41 41 41 41 41 41 41 41 41 41 41 (0xA0)
  155. Reading data 2
  156. 00011727 - 0045: 0x000002400008DFF4 <- 0x3E004 00 04 00 04 (0x4)
  157. 00012031 - 0046: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  158. 00012312 - 0047: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  159. 00012598 - 0048: 0x000002400008DFF2 -> 0x3E002 00 04 (0x2)
  160. 00012875 - 0049: 0x000002400008CFF6 -> 0x3E006 00 04 (0x2)
  161. 00013152 - 004A: 0x000002400008D000 <- 0x3E000 12 01 00 04 00 00 80 17 00 00 00 00 00 02 00 02 03 10 00 00 00 00 FF 3B 00 03 F0 00 00 03 F0 00 (0x20)
  162. 00013587 - 004B: 0x000002400008DFF0 <- 0x3E000 00 05 00 05 (0x4)
  163. 00013865 - 004C: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  164. 00014143 - 004D: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  165. RESPONSE: 12 01 00 04 00 00 80 17 00 00 00 00 00 02 00 02 03 00 00 00 FF FF FF 4B
  166. 00014703 - 004E: 0x000002400008CFF2 -> 0x3E002 00 05 (0x2)
  167. 00014955 - 004F: 0x000002400008DFF6 -> 0x3E006 00 04 (0x2)
  168. 00015596 - 0050: 0x000002400008CFF6 -> 0x3E006 00 05 (0x2)
  169. 00015939 - 0051: 0x000002400008CFF2 -> 0x3E002 00 05 (0x2)
  170. 00016232 - 0052: 0x000002400008DFF6 -> 0x3E006 00 04 (0x2)
  171. 00016500 - 0053: 0x000002400008C000 -> 0x3E000 12 01 00 04 00 00 80 17 00 00 00 00 00 02 00 02 (0x10)
  172. Reading header
  173. 00016997 - 0054: 0x000002400008C000 -> 0x3E000 12 01 00 04 00 00 80 17 00 00 00 00 00 02 00 02 03 00 00 00 FF FF FF 4B 00 03 F0 00 00 03 F0 00 (0x20)
  174. Reading data 3
  175. 00017612 - 0055: 0x000002400008DFF4 <- 0x3E004 00 05 00 05 (0x4)
  176. 00017902 - 0056: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  177. 00018185 - 0057: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  178. 00018469 - 0058: 0x000002400008DFF2 -> 0x3E002 00 05 (0x2)
  179. 00018714 - 0059: 0x000002400008CFF6 -> 0x3E006 00 05 (0x2)
  180. 00019032 - 005A: 0x000002400008D000 <- 0x3E000 20 01 00 05 00 00 80 26 00 00 00 00 00 25 00 25 00 5B 49 4E 46 4F 5D 3A 20 74 69 6D 65 62 61 73 65 5F 63 6C 6F 63 6B 20 30 34 63 34 62 34 30 30 28 30 30 29 0A 00 00 00 00 00 F4 2B 00 03 F0 00 (0x40)
  181. 00019498 - 005B: 0x000002400008DFF0 <- 0x3E000 00 06 00 06 (0x4)
  182. 00019796 - 005C: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  183. 00020082 - 005D: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  184. MSG: [INFO]: timebase_clock 04c4b400(00)
  185.  
  186. RESPONSE: 20 01 00 05 00 00 80 26 00 00 00 00 00 80 00 80 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 FF FF DF D4
  187. 00021444 - 005E: 0x000002400008CFF2 -> 0x3E002 00 06 (0x2)
  188. 00021728 - 005F: 0x000002400008DFF6 -> 0x3E006 00 05 (0x2)
  189. 00022010 - 0060: 0x000002400008CFF6 -> 0x3E006 00 06 (0x2)
  190. 00022284 - 0061: 0x000002400008CFF2 -> 0x3E002 00 06 (0x2)
  191. 00022553 - 0062: 0x000002400008DFF6 -> 0x3E006 00 05 (0x2)
  192. 00022827 - 0063: 0x000002400008C000 -> 0x3E000 20 01 00 05 00 00 80 26 00 00 00 00 00 80 00 80 (0x10)
  193. Reading header
  194. 00023355 - 0064: 0x000002400008C000 -> 0x3E000 20 01 00 05 00 00 80 26 00 00 00 00 00 80 00 80 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 FF FF DF D4 41 41 41 41 41 41 41 41 41 41 41 41 (0xA0)
  195. Reading data 4
  196. 00024280 - 0065: 0x000002400008DFF4 <- 0x3E004 00 06 00 06 (0x4)
  197. 00024557 - 0066: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  198. 00024838 - 0067: 0x0000020000509890 <- 0x3E000 00 00 00 00 00 00 00 00 (0x8)
  199. 00025167 - 0068: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  200. 00025478 - 0069: 0x000002400008DFF2 -> 0x3E002 00 06 (0x2)
  201. 00025762 - 006A: 0x000002400008CFF6 -> 0x3E006 00 06 (0x2)
  202. 00026042 - 006B: 0x000002400008D000 <- 0x3E000 12 01 00 06 00 00 80 19 00 00 00 00 00 02 00 02 20 10 00 00 00 00 FF 1A 00 03 F0 00 00 03 F0 00 (0x20)
  203. 00026432 - 006C: 0x000002400008DFF0 <- 0x3E000 00 07 00 07 (0x4)
  204. 00026716 - 006D: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  205. 00027005 - 006E: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  206. RESPONSE: 12 01 00 06 00 00 80 19 00 00 00 00 00 0C 00 0C 20 00 00 00 43 79 74 33 2E 32 00 00 FF FF FD 53
  207. 00027597 - 006F: 0x000002400008CFF2 -> 0x3E002 00 07 (0x2)
  208. 00027888 - 0070: 0x000002400008DFF6 -> 0x3E006 00 06 (0x2)
  209. 00028134 - 0071: 0x000002400008CFF6 -> 0x3E006 00 07 (0x2)
  210. 00028446 - 0072: 0x000002400008CFF2 -> 0x3E002 00 07 (0x2)
  211. 00028708 - 0073: 0x000002400008DFF6 -> 0x3E006 00 06 (0x2)
  212. 00028994 - 0074: 0x000002400008C000 -> 0x3E000 12 01 00 06 00 00 80 19 00 00 00 00 00 0C 00 0C (0x10)
  213. Reading header
  214. 00029559 - 0075: 0x000002400008C000 -> 0x3E000 12 01 00 06 00 00 80 19 00 00 00 00 00 0C 00 0C 20 00 00 00 43 79 74 33 2E 32 00 00 FF FF FD 53 (0x20)
  215. Reading data 5
  216. 00030127 - 0076: 0x000002400008DFF4 <- 0x3E004 00 07 00 07 (0x4)
  217. 00030390 - 0077: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  218. 00030679 - 0078: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  219. 00031423 - 0079: 0x000002400008DFF2 -> 0x3E002 00 07 (0x2)
  220. 00032569 - 007A: 0x000002400008CFF6 -> 0x3E006 00 07 (0x2)
  221. 00032902 - 007B: 0x000002400008D000 <- 0x3E000 20 01 00 07 00 00 80 28 00 00 00 00 00 2C 00 2C 00 63 68 65 63 6B 5F 62 6F 61 72 64 5F 76 65 72 73 69 6F 6E 3A 20 43 79 74 32 20 69 73 20 66 61 6C 73 65 2E 20 43 79 74 33 2E 32 0A 00 00 F0 10 (0x40)
  222. 00033407 - 007C: 0x000002400008DFF0 <- 0x3E000 00 08 00 08 (0x4)
  223. 00033620 - 007D: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  224. 00033886 - 007E: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  225. MSG: check_board_version: Cyt2 is false. Cyt3.2
  226.  
  227. RESPONSE: 20 01 00 07 00 00 80 28 00 00 00 00 00 80 00 80 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 FF FF DF D0
  228. 00035139 - 007F: 0x000002400008CFF2 -> 0x3E002 00 08 (0x2)
  229. 00035347 - 0080: 0x000002400008DFF6 -> 0x3E006 00 07 (0x2)
  230. 00035596 - 0081: 0x000002400008CFF6 -> 0x3E006 00 08 (0x2)
  231. 00035994 - 0082: 0x000002400008CFF2 -> 0x3E002 00 08 (0x2)
  232. 00036189 - 0083: 0x000002400008DFF6 -> 0x3E006 00 07 (0x2)
  233. 00036441 - 0084: 0x000002400008C000 -> 0x3E000 20 01 00 07 00 00 80 28 00 00 00 00 00 80 00 80 (0x10)
  234. Reading header
  235. 00036897 - 0085: 0x000002400008C000 -> 0x3E000 20 01 00 07 00 00 80 28 00 00 00 00 00 80 00 80 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 FF FF DF D0 41 41 41 41 41 41 41 41 41 41 41 41 (0xA0)
  236. Reading data 6
  237. 00037850 - 0086: 0x000002400008DFF4 <- 0x3E004 00 08 00 08 (0x4)
  238. 00038103 - 0087: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  239. 00038341 - 0088: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  240. 00038585 - 0089: 0x000002400008DFF2 -> 0x3E002 00 08 (0x2)
  241. 00038804 - 008A: 0x000002400008CFF6 -> 0x3E006 00 08 (0x2)
  242. 00039388 - 008B: 0x000002400008D000 <- 0x3E000 20 01 00 08 00 00 80 29 00 00 00 00 00 2B 00 2B 00 63 68 65 63 6B 5F 62 6F 61 72 64 5F 76 65 72 73 69 6F 6E 3A 20 43 79 74 33 20 69 73 20 74 72 75 65 2E 20 43 79 74 33 2E 32 0A 00 00 00 F0 5A (0x40)
  243. 00039809 - 008C: 0x000002400008DFF0 <- 0x3E000 00 09 00 09 (0x4)
  244. 00040066 - 008D: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  245. 00040305 - 008E: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  246. MSG: check_board_version: Cyt3 is true. Cyt3.2
  247.  
  248. RESPONSE: 20 01 00 08 00 00 80 29 00 00 00 00 00 80 00 80 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 FF FF DF CE
  249. 00041527 - 008F: 0x000002400008CFF2 -> 0x3E002 00 09 (0x2)
  250. 00041784 - 0090: 0x000002400008DFF6 -> 0x3E006 00 08 (0x2)
  251. 00042000 - 0091: 0x000002400008CFF6 -> 0x3E006 00 09 (0x2)
  252. 00042247 - 0092: 0x000002400008CFF2 -> 0x3E002 00 09 (0x2)
  253. 00042461 - 0093: 0x000002400008DFF6 -> 0x3E006 00 08 (0x2)
  254. 00042733 - 0094: 0x000002400008C000 -> 0x3E000 20 01 00 08 00 00 80 29 00 00 00 00 00 80 00 80 (0x10)
  255. Reading header
  256. 00043181 - 0095: 0x000002400008C000 -> 0x3E000 20 01 00 08 00 00 80 29 00 00 00 00 00 80 00 80 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 00 03 F0 00 FF FF DF CE 41 41 41 41 41 41 41 41 41 41 41 41 (0xA0)
  257. Reading data 7
  258. 00043934 - 0096: 0x000002400008DFF4 <- 0x3E004 00 09 00 09 (0x4)
  259. 00044253 - 0097: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  260. 00044503 - 0098: 0x0000024000087000 -> 0x3E000 04 00 01 03 (0x4)
  261. 00044729 - 0099: 0x0000024000087000 -> 0x3E000 04 00 01 03 (0x4)
  262. 00044951 - 009A: 0x0000024000087000 -> 0x3E000 04 00 01 03 (0x4)
  263. 00045263 - 009B: 0x0000024000087000 -> 0x3E000 04 00 01 03 (0x4)
  264. 00045514 - 009C: 0x0000024000087000 -> 0x3E000 04 00 01 03 (0x4)
  265. 00045731 - 009D: 0x0000024001000038 <- 0x3E008 FF (0x1)
  266. 00045951 - 009E: 0x0000024001000028 <- 0x3E008 00 (0x1)
  267. 00046219 - 009F: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  268. 00046471 - 00A0: 0x000002400008DFF2 -> 0x3E002 00 09 (0x2)
  269. 00046695 - 00A1: 0x000002400008CFF6 -> 0x3E006 00 09 (0x2)
  270. 00047028 - 00A2: 0x000002400008D000 <- 0x3E000 18 01 00 09 00 00 80 22 00 00 00 00 00 02 00 02 01 1B 00 00 00 00 FF 1C 00 03 F0 00 00 03 F0 00 (0x20)
  271. 00047349 - 00A3: 0x000002400008DFF0 <- 0x3E000 00 0A 00 0A (0x4)
  272. 00047601 - 00A4: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  273. 00047824 - 00A5: 0x000002400008E004 -> 0x3E004 00 00 00 02 (0x4)
  274. RESPONSE: 18 01 00 09 00 00 80 22 00 00 00 00 00 04 00 04 00 1B 01 00 FF FF FF 18
  275. 00048337 - 00A6: 0x000002400008CFF2 -> 0x3E002 00 0A (0x2)
  276. 00048940 - 00A7: 0x000002400008DFF6 -> 0x3E006 00 09 (0x2)
  277. 00049333 - 00A8: 0x000002400008CFF6 -> 0x3E006 00 0A (0x2)
  278. 00049583 - 00A9: 0x000002400008CFF2 -> 0x3E002 00 0A (0x2)
  279. 00049804 - 00AA: 0x000002400008DFF6 -> 0x3E006 00 09 (0x2)
  280. 00050183 - 00AB: 0x000002400008C000 -> 0x3E000 18 01 00 09 00 00 80 22 00 00 00 00 00 04 00 04 (0x10)
  281. Reading header
  282. 00050575 - 00AC: 0x000002400008C000 -> 0x3E000 18 01 00 09 00 00 80 22 00 00 00 00 00 04 00 04 00 1B 01 00 FF FF FF 18 00 03 F0 00 00 03 F0 00 (0x20)
  283. Reading data 8
  284. Exploiting
  285. -0x18-0x01-0x00-0x09-0x00-0x00-0x80-0x22-0x00-0x00-0x00-0x00-0x10-0x00-0x10-0x00-0x00-0x1B-0x01-0x00
  286. Package CHK: FF00
  287. CHK OFFSET 14RESPONSE: 18 01 00 09 00 00 80 22 00 00 00 00 10 00 10 00 00 1B 01 00 00 00 FF 00 00 03 F0 00
  288. 00051923 - 00AD: 0x000002400008DFF4 <- 0x3E004 00 0A 00 0A (0x4)
  289. 00052164 - 00AE: 0x000002400008E100 <- 0x3E000 00 00 00 01 (0x4)
  290. Interrupt: 5
  291. STATUS A0082
  292. CHECK 1
  293. Unexpected interrupt class 1.[0000000000000008]. MFC PUT INTERRUPT
  294. LSA CMP ADDR 3E000. Dir 1. QIDX: 0 [0x3E00080000000]
  295. Entry 1. EA:000002400008D004. LS:3E014. Size: 003 (003). Command: 20. QW: 0
  296. [0000000402000000][000002400008D000][F804018021000000][000002C400000A00]
  297. Unexpected interrupt class 1.[0000000000000008]
  298. ENDING MAIN LOOP:
  299. CHECK 2
  300. Unexpected interrupt class 2.[0000000000000013]
  301. STATUS A0082
  302. MFCCNTL 10000004000
RAW Paste Data