Inspecting AOR AR5700D firmware updater

AR5700Updater.exe

Detect It Easy

 

Lots of Motorola s-record inside exe. Too many strings for the Detect It Easy Strings feature.

Linux strings cmd works.

strings AR5700Updater.exe | grep -E "S[0-9]+" > AR5700.txt

remove non S-record format lines in head and tail and in the middle (find with e.g. srec_info tool).

srec_info: 

Termination records (S9) should be last => use e.g Python to get data blocks into several files.

n = 1
print("start")
s = ""
f = open("ar5700.txt", "r")
lines = f.readlines()
for line in lines:
    s = s + line
    if line[:2] == "S9":
        with open("ar5700-" + str(n) + ".txt", "w") as w:
            w.writelines(s)
        print("ar5700-" + str(n) + ".txt")
        n = n + 1
        s = ""
f.close()
print("end")
 

=> 10 files of S-Records

Some maybe DSP code and four which are highly probable SuperH SH-2 code (Ghidra shows nicely string and code when CPU selection is SH-2).