log

age author description
Wed, 29 Nov 2017 22:51:50 +0000 Mychaela Falconia Pirelli's a_pwr_thresholds[] table found
Tue, 28 Nov 2017 02:47:01 +0000 Mychaela Falconia compal/charging: checking in captured booty
Tue, 28 Nov 2017 02:14:44 +0000 Mychaela Falconia pirelli/charging/i2v: note added
Tue, 28 Nov 2017 02:04:52 +0000 Mychaela Falconia pirelli/charging: read-abb-regs script and observed results
Thu, 23 Nov 2017 22:24:18 +0000 Mychaela Falconia osmo2psi test program written
Fri, 17 Nov 2017 19:58:07 +0000 Mychaela Falconia ftmdump (C1xx factory data reverse eng) tool written
Thu, 16 Nov 2017 04:19:58 +0000 Mychaela Falconia pirelli/rfcal: new understanding
Sun, 28 May 2017 20:33:26 +0000 Mychaela Falconia pircalextr: added second argument for output directory
Sun, 28 May 2017 20:12:14 +0000 Mychaela Falconia pircalextr program written, compiles
Tue, 14 Mar 2017 06:19:52 +0000 Mychaela Falconia leo-obj: disasm hints created for l1audio_cust.obj
Tue, 14 Mar 2017 06:04:28 +0000 Mychaela Falconia leo-obj: started analyzing l1audio_cust.obj in l1_custom_ext.lib
Sun, 25 Dec 2016 23:48:16 +0000 Mychaela Falconia Pirelli: documented and verified the checksum scheme used for the factory block
Tue, 26 Jul 2016 23:32:17 +0000 Mychaela Falconia analysis of ultra-malicious new C123 boot code from Ajay Fuloria
Mon, 25 Jul 2016 19:29:03 +0000 Mychaela Falconia compal directory: added analysis of C139 boot code version with 1004 signature
Mon, 28 Mar 2016 07:04:20 +0000 Mychaela Falconia leo-obj/l1_dyn_dwl: created hints file for async module to get ASCII strings
Sat, 26 Mar 2016 22:03:08 +0000 Mychaela Falconia tiobjd disasm -ll: show the actual line numbers
Sat, 05 Mar 2016 02:51:04 +0000 Mychaela Falconia leo-obj/l1_ext/l1_async.hints: one more ASCIZ string
Sat, 05 Mar 2016 01:28:06 +0000 Mychaela Falconia leo-obj: analysis of l1_async.obj with disassembly hints
Fri, 04 Mar 2016 23:36:16 +0000 Mychaela Falconia tiobjd disasm -g: grok struct/union/enum definitions and statics in functions
Fri, 01 Jan 2016 23:24:05 +0000 Mychaela Falconia D-Sample 20020917 firmware analysis
Wed, 30 Dec 2015 08:27:46 +0000 Mychaela Falconia old Calypso F741979B boot ROM analyzed
Thu, 10 Dec 2015 07:29:35 +0000 Mychaela Falconia memwrite-grep hack-utility written
Mon, 19 Oct 2015 05:07:25 +0000 Mychaela Falconia dspanal/patchanal: added -v option to dump section content
Fri, 16 Oct 2015 17:00:22 +0000 Mychaela Falconia dspanal/patchanal.c written, insight gained
Sat, 04 Jul 2015 18:37:26 +0000 Space Falcon leo-obj/l1_dyn_dwl/l1_dyn_dwl_init.hints: show 2D byte arrays more clearly
Sat, 04 Jul 2015 02:30:27 +0000 Space Falcon leo-obj: need to look at l1_dyn_dwl objects
Sat, 06 Jun 2015 18:32:49 +0000 Space Falcon leo-obj/frame_na7_db_ir: disassemble frame.obj in order to bring to light
Mon, 25 May 2015 04:50:24 +0000 Space Falcon leo-obj: let's take a look at bootloader.lib
Tue, 12 May 2015 20:38:15 +0000 Space Falcon pirelli/rfcal: Rx agcparams and calchan were swapped
Thu, 16 Apr 2015 04:12:48 +0000 Michael Spacefalcon bootrom.notes typo fix (courtesy of pfalcon <pmiscml@gmail.com>)
Sun, 15 Mar 2015 01:13:42 +0000 Michael Spacefalcon pirelli/32khz: investigative note checked in
Sun, 11 Jan 2015 04:33:48 +0000 Michael Spacefalcon pirelli/vctcxo: VCTCXO connections traced out
Wed, 07 Jan 2015 22:15:51 +0000 Michael Spacefalcon grokdsn: buglet in the hierarchy traversal order
Wed, 07 Jan 2015 08:09:30 +0000 Michael Spacefalcon grokdsn: tree dump implemented
Wed, 07 Jan 2015 07:12:51 +0000 Michael Spacefalcon grokdsn: able to follow the FAT chain for the directory
Wed, 07 Jan 2015 06:55:33 +0000 Michael Spacefalcon started grokdsn utility, parses header successfully
Thu, 04 Dec 2014 07:25:12 +0000 Michael Spacefalcon pirelli/vibrator: footprint measurements
Sun, 17 Aug 2014 22:49:48 +0000 Michael Spacefalcon leo-obj/l1_pei: added and analyzed
Sun, 17 Aug 2014 18:41:11 +0000 Michael Spacefalcon leo-obj/l1_int/dl1_com.hints: created
Sun, 17 Aug 2014 18:26:06 +0000 Michael Spacefalcon leo-obj: started looking at dl1_com.obj
Fri, 15 Aug 2014 00:59:45 +0000 Michael Spacefalcon leo-obj/tpudrv/tpudrv12.hints: literal pools and branches around them
Mon, 11 Aug 2014 21:32:30 +0000 Michael Spacefalcon leo-obj: started analyzing tpudrv.lib objects
Mon, 04 Aug 2014 21:17:06 +0000 Michael Spacefalcon tiobjd: chararray extraction command implemented
Tue, 15 Jul 2014 00:24:40 +0000 Michael Spacefalcon pirelli/rfcal: found /sys/adccal, no luch with /gsm/rf/afc*
Sun, 13 Jul 2014 07:51:24 +0000 Michael Spacefalcon calextract: forgot the final semicolon after the last closing brace
Sun, 13 Jul 2014 01:11:22 +0000 Michael Spacefalcon Pirelli's RF calibration cracked
Sat, 12 Jul 2014 00:05:22 +0000 Michael Spacefalcon calextract tool written, works
Fri, 11 Jul 2014 00:59:50 +0000 Michael Spacefalcon leo-obj/l1_custom_int/l1_cust.hints: created
Thu, 10 Jul 2014 03:20:00 +0000 Michael Spacefalcon leo-obj/l1_custom_int: ind_os.hints added
Thu, 10 Jul 2014 03:16:42 +0000 Michael Spacefalcon leo-obj/l1_custom_int: added
Sun, 06 Jul 2014 20:22:09 +0000 Michael Spacefalcon objgrep/README written
Fri, 04 Jul 2014 16:37:51 +0000 Michael Spacefalcon objgrep-fe: works after fixing a buglet
Fri, 04 Jul 2014 08:46:32 +0000 Michael Spacefalcon objgrep-fe written, compiles
Fri, 04 Jul 2014 06:34:33 +0000 Michael Spacefalcon objgrep -r: dump symbols in other sections recovered through relocs
Fri, 04 Jul 2014 03:22:41 +0000 Michael Spacefalcon objgrep: -r implemented
Fri, 04 Jul 2014 03:07:09 +0000 Michael Spacefalcon objgrep: -s implemented
Fri, 04 Jul 2014 02:56:21 +0000 Michael Spacefalcon objgrep: parsing of -r and -s options implemented, no functionality yet
Fri, 04 Jul 2014 01:45:03 +0000 Michael Spacefalcon objgrep: weed out empty source sections
Fri, 04 Jul 2014 01:01:39 +0000 Michael Spacefalcon objgrep: works after fixing a buglet
Fri, 04 Jul 2014 00:54:33 +0000 Michael Spacefalcon objgrep: written, compiles
Mon, 30 Jun 2014 18:00:09 +0000 Michael Spacefalcon leo-obj/osx_na7_db/osx.hints: created
Mon, 30 Jun 2014 17:34:59 +0000 Michael Spacefalcon leo-obj: starting to look at OSX
Sun, 15 Jun 2014 01:43:55 +0000 Michael Spacefalcon leo-obj/frame_na7_db_ir: os_mem.hints added
Sun, 15 Jun 2014 01:17:36 +0000 Michael Spacefalcon leo-obj/frame_na7_db_fl: os_{sem,tim}.hints created
Thu, 15 May 2014 20:55:39 +0000 Michael Spacefalcon locked C139 bootloader reverse-engineered
Thu, 15 May 2014 20:10:25 +0000 Michael Spacefalcon starting to examine Tracfone's locked C139 bootloader
Thu, 15 May 2014 08:38:42 +0000 Michael Spacefalcon malware version of the C118 bootloader reversed
Thu, 15 May 2014 07:58:07 +0000 Michael Spacefalcon C123 bootloader re complete
Thu, 15 May 2014 06:43:14 +0000 Michael Spacefalcon start of C123 bootloader re
Wed, 14 May 2014 05:34:37 +0000 Michael Spacefalcon mot931c break-in procedure cracked
Sat, 03 May 2014 17:56:45 +0000 Michael Spacefalcon leo-obj: started analyzing frame_na7_db_ir objects
Fri, 02 May 2014 23:41:44 +0000 Michael Spacefalcon tiobjd ctypes: print more useful hex byte offsets for struct fields
Fri, 02 May 2014 06:20:26 +0000 Michael Spacefalcon leo-obj/frame_na7_db_fl: extract ctypes info as well
Fri, 02 May 2014 04:12:14 +0000 Michael Spacefalcon leo-obj: frame_na7_db_fl/os_pro.obj disassembles the way it should
Thu, 01 May 2014 01:01:58 +0000 Michael Spacefalcon tiobjd disasm: implemented -l option to show line markers
Thu, 01 May 2014 00:23:18 +0000 Michael Spacefalcon tiobjd disasm -g: line break after function locals
Tue, 29 Apr 2014 07:51:28 +0000 Michael Spacefalcon tiobjd disasm -g: dump of function locals implemented
Tue, 29 Apr 2014 07:11:33 +0000 Michael Spacefalcon tiobjd richsym handling: prep for handling function locals
Tue, 29 Apr 2014 06:45:45 +0000 Michael Spacefalcon tiobjd disasm -g: support -b as well
Tue, 29 Apr 2014 06:26:59 +0000 Michael Spacefalcon tiobjd: beginning of disasm -g
Tue, 29 Apr 2014 05:18:09 +0000 Michael Spacefalcon tiobjd ctypes: buglet in the -bb mode
Tue, 29 Apr 2014 04:49:17 +0000 Michael Spacefalcon tiobjd: ctypes command implemented
Mon, 28 Apr 2014 08:04:39 +0000 Michael Spacefalcon tiobjd: started implementing rich symbolic info parsing
Mon, 28 Apr 2014 05:55:40 +0000 Michael Spacefalcon tiobjd: raw dump of line number records implemented
Mon, 28 Apr 2014 04:51:35 +0000 Michael Spacefalcon tiobjd: show symtab aux entries
Sun, 27 Apr 2014 18:07:55 +0000 Michael Spacefalcon leo-obj: started disassembling frame_na7_db_ir
Wed, 09 Apr 2014 02:40:20 +0000 Michael Spacefalcon OSL flash objects: created disasm hints for os_com through os_mis
Mon, 07 Apr 2014 07:36:31 +0000 Michael Spacefalcon tiobjd disasm: smarter logic for when the <end of section> line
Mon, 07 Apr 2014 05:40:49 +0000 Michael Spacefalcon leo-obj: starting to examine GPF OSL objects
Mon, 07 Apr 2014 05:03:38 +0000 Michael Spacefalcon leo-obj/main: hints for init.obj
Mon, 07 Apr 2014 04:56:29 +0000 Michael Spacefalcon tiobjd: disasm hints work now
Mon, 07 Apr 2014 04:06:17 +0000 Michael Spacefalcon tiobjd: disasm of code and data sections unified
Mon, 07 Apr 2014 02:41:35 +0000 Michael Spacefalcon tiobjd: implemented parsing of the hint input files
Mon, 07 Apr 2014 01:22:09 +0000 Michael Spacefalcon tiobjd: Thumb bl w/o reloc: find symbol if there is one
Mon, 07 Apr 2014 00:59:34 +0000 Michael Spacefalcon leo-obj/Makefile: created
Sun, 06 Apr 2014 22:33:24 +0000 Michael Spacefalcon leo-obj/main: created
Sun, 06 Apr 2014 22:14:39 +0000 Michael Spacefalcon leo-obj project subtree started, tiobjd tool moved into it
Sun, 06 Apr 2014 20:20:39 +0000 Michael Spacefalcon miscellaneous C programs moved out of the top level directory
Sat, 05 Apr 2014 20:21:55 +0000 Michael Spacefalcon tiobjd disasm: initial hook-in of the hints mechanism
Sat, 05 Apr 2014 20:00:46 +0000 Michael Spacefalcon tiobjd: section disasm mode hinting rethought
Sat, 05 Apr 2014 19:14:43 +0000 Michael Spacefalcon tiobjd: first preparations for adding disasm hints mechanism
Fri, 04 Apr 2014 18:56:23 +0000 Michael Spacefalcon tiobjd disasm: bss handling
Fri, 04 Apr 2014 18:39:01 +0000 Michael Spacefalcon tiobjd disasm: data section handling added
Fri, 04 Apr 2014 08:12:29 +0000 Michael Spacefalcon tiobjd: handling of $CODE16 symbols at byte positions
Fri, 04 Apr 2014 07:46:08 +0000 Michael Spacefalcon tiobjd Thumb disasm: compute results of adding to pc
Fri, 04 Apr 2014 07:19:15 +0000 Michael Spacefalcon tiobjd: handling of symbol-less relocs
Fri, 04 Apr 2014 05:45:22 +0000 Michael Spacefalcon tiobjd: auto-translation of section-relative relocs made more conservative
Fri, 04 Apr 2014 05:11:32 +0000 Michael Spacefalcon tiobjd: sorted profile output
Thu, 03 Apr 2014 07:47:03 +0000 Michael Spacefalcon tiobjd: better handling of section-relative relocs
Thu, 03 Apr 2014 07:16:20 +0000 Michael Spacefalcon tiobjd: Thumb_BL reloc handling
Thu, 03 Apr 2014 07:00:08 +0000 Michael Spacefalcon tiobjd: retain the original symtab order for symbols at the same position
Thu, 03 Apr 2014 06:50:07 +0000 Michael Spacefalcon tiobjd: literal reloc recognition restricted to RTYPE_LONG
Thu, 03 Apr 2014 06:42:39 +0000 Michael Spacefalcon tiobjd: ARM_B reloc handling
Thu, 03 Apr 2014 06:20:06 +0000 Michael Spacefalcon tiobjd: recognizing relocs in ldr literals
Thu, 03 Apr 2014 05:54:59 +0000 Michael Spacefalcon tiobjd disasm: beginning of reloc handling
Thu, 03 Apr 2014 05:14:15 +0000 Michael Spacefalcon tiobjd: disassembly integrated, no relocs or hints yet
Thu, 03 Apr 2014 03:03:41 +0000 Michael Spacefalcon tiobjd: higher-level reloc handling
Mon, 31 Mar 2014 19:06:33 +0000 Michael Spacefalcon C156 boot code cracked
Mon, 31 Mar 2014 16:41:21 +0000 Michael Spacefalcon C156 boot code disassembly started
Mon, 31 Mar 2014 06:49:27 +0000 Michael Spacefalcon arm7dis: README and header comments added
Mon, 31 Mar 2014 06:33:14 +0000 Michael Spacefalcon analysis of what osmocon's voodoo payloads disassemble to in ARM/Thumb
Mon, 31 Mar 2014 05:51:57 +0000 Michael Spacefalcon C139 boot ROM fully cracked
Mon, 31 Mar 2014 03:11:25 +0000 Michael Spacefalcon C139 boot re: got to UART initialization
Mon, 31 Mar 2014 01:59:28 +0000 Michael Spacefalcon thumbdis: buglet in the decoding of sub-from-sp
Mon, 31 Mar 2014 01:52:56 +0000 Michael Spacefalcon c139 boot re: entry code analyzed
Mon, 31 Mar 2014 01:16:55 +0000 Michael Spacefalcon thumbdis: nop recognition
Mon, 31 Mar 2014 01:10:34 +0000 Michael Spacefalcon C139 boot re: use thumbdis
Mon, 31 Mar 2014 01:05:44 +0000 Michael Spacefalcon C139 boot re: C140 differences noted
Mon, 31 Mar 2014 00:43:15 +0000 Michael Spacefalcon C139 boot re setup using the new arm7dis
Sun, 30 Mar 2014 23:32:26 +0000 Michael Spacefalcon thumbdis written, compiles
Sun, 30 Mar 2014 07:22:33 +0000 Michael Spacefalcon arm7dis/Makefile: install added
Sun, 30 Mar 2014 07:21:21 +0000 Michael Spacefalcon armdis: swp decoding implemented
Sun, 30 Mar 2014 07:11:41 +0000 Michael Spacefalcon armdis: ldm/stm decoding implemented
Sun, 30 Mar 2014 01:55:46 +0000 Michael Spacefalcon armdis: buglet in literal pool handling: forgot to add base_vma
Sun, 30 Mar 2014 01:47:28 +0000 Michael Spacefalcon armdis: full ldr/str decoding implemented
Sun, 30 Mar 2014 00:27:25 +0000 Michael Spacefalcon armdis: ldr/str decoding implemented (but not PC-relative ldr yet)
Sat, 29 Mar 2014 22:19:21 +0000 Michael Spacefalcon armdis: implemented decoding of multiplication instructions
Sat, 29 Mar 2014 21:36:22 +0000 Michael Spacefalcon armdis: BX/MRS/MSR decoding implemented
Sat, 29 Mar 2014 20:28:13 +0000 Michael Spacefalcon armdis: implemented decoding of data processing instructions
Sat, 29 Mar 2014 00:23:16 +0000 Michael Spacefalcon armdis: skeleton compiles
Fri, 28 Mar 2014 07:01:27 +0000 Michael Spacefalcon beginning of ARM7 disassembler
Thu, 27 Mar 2014 19:34:07 +0000 Michael Spacefalcon compal boot ROM re: minor progress
Thu, 27 Mar 2014 07:07:41 +0000 Michael Spacefalcon beginning of C139 boot ROM re
Wed, 26 Mar 2014 06:13:43 +0000 Michael Spacefalcon tiobjd: known reloc types defined
Wed, 26 Mar 2014 06:00:07 +0000 Michael Spacefalcon tiobjd: beginning of reloc handling
Wed, 26 Mar 2014 03:23:20 +0000 Michael Spacefalcon tiobjd: symbol sorting implemented
Wed, 26 Mar 2014 02:44:19 +0000 Michael Spacefalcon tiobjd: preparation for symbol sorting
Wed, 26 Mar 2014 02:00:44 +0000 Michael Spacefalcon tiobjd: profile operation implemented
Wed, 26 Mar 2014 01:24:17 +0000 Michael Spacefalcon tiobjd: symbol storage classes decoded into mnemonics
Tue, 25 Mar 2014 22:47:51 +0000 Michael Spacefalcon tiobjd: basics dump streamlined
Tue, 25 Mar 2014 20:39:44 +0000 Michael Spacefalcon ticoff/Makefile: install added
Tue, 25 Mar 2014 20:38:31 +0000 Michael Spacefalcon tiobjd: dumpsym implemented
Tue, 25 Mar 2014 18:55:36 +0000 Michael Spacefalcon tiobjd: a little refactoring
Tue, 25 Mar 2014 18:34:03 +0000 Michael Spacefalcon tiobjd: symbol table parsing implemented
Tue, 25 Mar 2014 08:51:32 +0000 Michael Spacefalcon Pirelli PCB re: Winbond chip connections
Sat, 22 Mar 2014 05:53:02 +0000 Michael Spacefalcon tiobjd: successful parsing of the section header table
Sat, 22 Mar 2014 02:29:22 +0000 Michael Spacefalcon tiobjd started
Thu, 13 Mar 2014 09:05:18 +0000 Michael Spacefalcon Pirelli PCB re: major refdeses assigned
Mon, 10 Feb 2014 02:33:17 +0000 Michael Spacefalcon pirelli preboot re: figured out the triggering condition
Sun, 09 Feb 2014 09:36:42 +0000 Michael Spacefalcon started disassembly of Pirelli's boot code
Sun, 02 Feb 2014 23:06:18 +0000 Michael Spacefalcon atsc hack: apparently this AT@SC command needs double quotes
Sun, 02 Feb 2014 08:45:56 +0000 Michael Spacefalcon atsc hack written
Thu, 16 Jan 2014 01:22:32 +0000 Michael Spacefalcon rfcap-grep.c hack-utility written
Mon, 02 Dec 2013 08:55:38 +0000 Michael Spacefalcon Pirelli PCB RE: another failed attempt at tracing the keypad connections
Mon, 02 Dec 2013 07:44:41 +0000 Michael Spacefalcon Pirelli PCB RE: got some success with the LCD connector pinout
Sun, 01 Dec 2013 23:59:56 +0000 Michael Spacefalcon Pirelli PCB RE: attempt to trace out KBC/KBR lines stopped by grind-down damage
Fri, 29 Nov 2013 01:39:31 +0000 Michael Spacefalcon imeibrute written
Fri, 29 Nov 2013 00:39:02 +0000 Michael Spacefalcon Pirelli's IMEI obfuscation cracked!
Wed, 13 Nov 2013 21:00:30 +0000 Michael Spacefalcon Pirelli PCB: some measurements of the debug connector footprint
Tue, 12 Nov 2013 04:28:47 +0000 Michael Spacefalcon some success in finding familiar TI code in moko11 and Pirelli fw binary images
Sun, 20 Oct 2013 04:49:28 +0000 Michael Spacefalcon Pirelli PCB tracing: voice band i/f, MCSI and MODEM UART
Fri, 02 Aug 2013 02:16:31 +0000 Michael Spacefalcon Pirelli PCB: traced the earpiece and loudspeaker analog signals
Sun, 28 Jul 2013 21:38:07 +0000 Michael Spacefalcon another Pirelli PCB tracing session, focusing on the display subsystem
Fri, 26 Jul 2013 03:15:57 +0000 Michael Spacefalcon factdiff: print the number of bytes in each varying chunk
Thu, 25 Jul 2013 17:06:23 +0000 Michael Spacefalcon factdiff utility written
Wed, 24 Jul 2013 21:52:09 +0000 Michael Spacefalcon pirollback: resurrect file descendant chains
Wed, 24 Jul 2013 19:50:24 +0000 Michael Spacefalcon pirollback: actual rollback utility implemented, compiles
Sun, 07 Jul 2013 07:44:03 +0000 Michael Spacefalcon pirollback: catino implemented, works
Sun, 07 Jul 2013 07:15:58 +0000 Michael Spacefalcon pirollback dumpjournal utility: print some additional info
Sun, 07 Jul 2013 06:52:04 +0000 Michael Spacefalcon pirollback: dumpjournal utility written, works
Sun, 07 Jul 2013 06:14:40 +0000 Michael Spacefalcon pirollback: journal parsing implemented
Sat, 06 Jul 2013 22:06:38 +0000 Michael Spacefalcon pirollback: pathname reconstruction implemented
Sat, 06 Jul 2013 21:31:55 +0000 Michael Spacefalcon pirollback: name check implemented
Sat, 06 Jul 2013 20:52:09 +0000 Michael Spacefalcon pirollback: tree walk implemented
Sat, 06 Jul 2013 20:16:34 +0000 Michael Spacefalcon pirollback: started
Fri, 05 Jul 2013 03:26:06 +0000 Michael Spacefalcon MPFFS description: documented relocated chunks and the journal file
Mon, 01 Jul 2013 07:04:01 +0000 Michael Spacefalcon mpffs-cat and mpffs-xtr converted to use the new extra chunk handling
Mon, 01 Jul 2013 06:49:50 +0000 Michael Spacefalcon iterate_extra_chunks() function written, mpffs-ls converted to use it
Mon, 01 Jul 2013 06:28:30 +0000 Michael Spacefalcon mpffs-dbgls: reworked for the new understanding of relocated chunks
Sun, 30 Jun 2013 17:56:27 +0000 Michael Spacefalcon mpffs-cat: more sensible handling of -v
Sun, 30 Jun 2013 17:24:21 +0000 Michael Spacefalcon mpffs-xtr ported over
Sun, 30 Jun 2013 16:55:19 +0000 Michael Spacefalcon mpffs-cat implemented