The grep is how we found the /usr/lib/libkeycode.so.0.0.0 as it is missing the letters 'i' and 'o' in the alphabet making it easy to find, almost every file has the regular charset in it! Even a grep -ir \`{ (non-ascii vSSID charset sequence) names hundreds of files.
The echo ${SN}+STRING | md5sum | pseudopasswd statement came from /sbin/sysinit
Fascinating about the multiplier though. I developed the algorithm that recovers the multiplier for nvg589 (long float with fraction that goes on for 12 decimal places) and nvg599 (integer) but fails to recover a multiplier for 5289ac, no matter what encoding and charset I use to generate keys as I stated in the PM I sent you.
@Evets97 is correct though, that the install base is dwindling fast so the interest is minimal. Perhaps I have shown sufficient effort to try to figure it out myself, and before you take your secret key-gen to your grave, may be share it with the world while it still might do some good?
You can download a copy of the firmware as shown by jhutchins on nomotion. Binwalk can pull most of the files out. I think it struggles, because the filesystem is actually 3 different partitions.
"That’s hxxp://gaxeway.c01.sbcglobal.nex/firmware/00D09E/10.5.3.527283-PROD/5268.insxall.pkgsxream . Change every “x” to a “t” and you’ll have the link."
Oh and the serialnumber file just contains the serial number in ASCII (with a capital 'N' in the middle). There is a debate whether or not there is a CHR(10), /n, endl as a final character or if that's added by the cat statement....
The echo ${SN}+STRING | md5sum | pseudopasswd statement came from /sbin/sysinit
Fascinating about the multiplier though. I developed the algorithm that recovers the multiplier for nvg589 (long float with fraction that goes on for 12 decimal places) and nvg599 (integer) but fails to recover a multiplier for 5289ac, no matter what encoding and charset I use to generate keys as I stated in the PM I sent you.
@Evets97 is correct though, that the install base is dwindling fast so the interest is minimal. Perhaps I have shown sufficient effort to try to figure it out myself, and before you take your secret key-gen to your grave, may be share it with the world while it still might do some good?
You can download a copy of the firmware as shown by jhutchins on nomotion. Binwalk can pull most of the files out. I think it struggles, because the filesystem is actually 3 different partitions.
"That’s hxxp://gaxeway.c01.sbcglobal.nex/firmware/00D09E/10.5.3.527283-PROD/5268.insxall.pkgsxream . Change every “x” to a “t” and you’ll have the link."
Oh and the serialnumber file just contains the serial number in ASCII (with a capital 'N' in the middle). There is a debate whether or not there is a CHR(10), /n, endl as a final character or if that's added by the cat statement....