31-08-2017, 02:54 PM
(This post was last modified: 31-08-2017, 02:56 PM by christianrodher.)
the problem lies in liball_docsis.so.. This stupid arris modem just accepts private keys of 688 bytes... moto private keys are 672 or so. Anyone is an expert in C that can reverse the entire liball_docsis.so?
Come on lets work to make sb6190 better... Im starring to learn C, but it will take me years to be proficient enough to decompile this.
Come on lets work to make sb6190 better... Im starring to learn C, but it will take me years to be proficient enough to decompile this.
Code:
*(_WORD *)(v1 + 3364) = v4;
close(v3);
sprintf(&s, "%s/%s", &v43, "cm_key_prv.bin");
v6 = open(&s, 0);
v7 = v6;
if ( v6 == -1 )
{
logger_build_send_log_msg(&unk_B6474, 0, "Failed to open CM certificate file!\n", 0);
return v7;
}
v8 = read(v6, &buf, 0x2B0u);
if ( v8 == 688 )
{
v40 = 0;
v35 = 0;
ptr = 0;
v28 = 0;
v36 = 0;
v37 = 0;
v38 = 0;
v39 = 0;
v31 = 0;
v32 = 0;
v33 = 0;
v34 = 0;
printf("\n%s: **** privateKey retrieved from NVRAM (len: %d):\n", &unk_B6480, 688);
if ( ProdDb_GetLanMacAddr(v29) )