try to reverse some algo in c167 arch. in a part of the file i saw a variable that located in XRAM mov to accumulator registers and finally xor with other registers. as below:
mov r1, word_E1C4 mov r2, word_E1C6 cpl r1 cpl r2 xor r12, r1 xor r13, r2
i guess this value (word_E1C4 and word_E1C6) create the required constant value for my algorithm. so i search this values in firmware file and i found this instructions :
mov r4, #0 mov r5, #0Fh calls 0Fh, 428Ch ; 0F428Ch mov word_E1C4, r10 mov word_E1C6, r11
so it seems r10 and r11 have the constant value inside them and these values are created in calls 0Fh, 428Ch ; 0F428Ch !!!! But what is Calls instruction? this instruction refer to incorrect address How can I find these values? any body can help me about this ?