APU_MEM reverse engineering.

[flukejones]

Hi Sergei, wondering if you can help me here - How did you discover the APU_MEM 32c4f61 setting?

I've been trawling through the various files of windows trying to match something but apparently coming up blank.

[seerge]

@flukejones hello.

I just changed APU setting on Rog Ally and did endpoint scan after each change. 0x000600C1 was returning correct APU memory each time

[seerge]

Oh, so there are 2 different MCUs ? What does second MCU request (04-31-00-20) respond as a version ? Same thing ?

[flukejones]

The second one is the same except RC71LM. I'm actually not certain which is which, I'll check the log

The Ally X looks like this:

Sep 23 12:35:15 steamfork kernel: Buffer content (hex):
Sep 23 12:35:15 steamfork kernel: 5a 05 03 31 00 1a 17 46 47 41 38 30 31 30 30 2e
Sep 23 12:35:15 steamfork kernel: 52 43 37 32 4c 41 2e 33 31 32 5f 54 30 31 00 00
Sep 23 12:35:15 steamfork kernel: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sep 23 12:35:15 steamfork kernel: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sep 23 12:35:15 steamfork kernel:
Sep 23 12:35:15 steamfork kernel: asus_rog_ally 0003:0B05:1B4C.0004: Parsed string: RC72LA
Sep 23 12:35:15 steamfork kernel: asus_rog_ally 0003:0B05:1B4C.0004: Parsed int: 312

[flukejones]

Logs:

[Initialize] Productname :RC71L
[Initialize] Second Productname :RC71LS
[Initial] fwfiles : System.String[]
[Initial] fwfiles.Length : 2
[Initial] fwfiles[i] : FGA80100.RC71LM.315.bin
[Initial] keyboardtype : 3
[Initial] RC71LS_Name_0 : RC71LM
[Initial] RC71LS_Name_0 : RC71LS
[Initial] fwfiles[i] : FGA80100.RC71LS.315.bin
...
[Initialize] ****************** Main IC update ******************
[Backup] Backup Main FW version = FGA80100.RC71LM.312
[Initialize] Get Main FW version : FGA80100.RC71LM.312

So M is main, S is secondary

[seerge]

@flukejones ok, thanks! But as I understand firmware updated updates both (and version is the same), so it's worth to check only one probably

[flukejones]

Indeed correct. The updater app for the Ally 1 contains the bin files for each MCU. They are always done as a pair and can't be mismatched.