Updater EXEs are packed (RWX sections, near-random entropy) with anti-debug protection (IsDebuggerPresent/SoftICE check). Bypassed by running under plain Wine and reading /proc/PID/mem with elevated privileges. SW1 v2.13.x updater contains 3 firmware variants (likely .1/.2/.3): - All use LJMP 0x170D entry, 9322-9377 bytes, 10 C2 records each - FW2 vs FW3 differ by 1525 bytes (most similar pair) Rev.2 v2.10.4 updater contains 1 firmware image: - PID=0x0202 (vs SW1's 0x0203), LJMP 0x155F, 8843 bytes, 9 C2 records All images use standard Cypress C2 EEPROM format with entry at 0xE600 (CPUCS).
289 KiB
289 KiB