try to reverse some algo in c167 arch. in a part of the file i saw a variable that located in XRAM mov to accumulator registers and finally xor with other registers. as below:

mov     r1, word_E1C4
mov     r2, word_E1C6
cpl     r1
cpl     r2
xor     r12, r1
xor     r13, r2

i guess this value (word_E1C4 and word_E1C6) create the required constant value for my algorithm. so i search this values in firmware file and i found this instructions :

mov     r4, #0
mov     r5, #0Fh
calls   0Fh, 428Ch ; 0F428Ch
mov     word_E1C4, r10
mov     word_E1C6, r11

so it seems r10 and r11 have the constant value inside them and these values are created in calls 0Fh, 428Ch ; 0F428Ch !!!! But what is Calls instruction? this instruction refer to incorrect address How can I find these values? any body can help me about this ?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.