| Fri, 06 Mar 2020 04:04:53 +0000 |
Mychaela Falconia |
frbl/reconst/command.c: second function reconstruction close to perfect
|
| Fri, 06 Mar 2020 01:59:20 +0000 |
Mychaela Falconia |
frbl2test: better message for Hello response
|
| Fri, 06 Mar 2020 00:30:18 +0000 |
Mychaela Falconia |
frbl2test: meat filled in
|
| Thu, 05 Mar 2020 22:05:01 +0000 |
Mychaela Falconia |
frbl: beginning of frbl2test
|
| Thu, 05 Mar 2020 07:09:15 +0000 |
Mychaela Falconia |
frbl/reconst/convert.c: perfect match to TCS211 object
|
| Thu, 05 Mar 2020 06:38:36 +0000 |
Mychaela Falconia |
frbl/reconst/command.c: first function reconstructed
|
| Thu, 05 Mar 2020 05:01:14 +0000 |
Mychaela Falconia |
frbl/reconst/convert.c: better match to original object
|
| Thu, 05 Mar 2020 04:48:55 +0000 |
Mychaela Falconia |
frbl/reconst/convert.c: almost perfect reconstruction
|
| Thu, 05 Mar 2020 00:27:22 +0000 |
Mychaela Falconia |
frbl/reconst/boot.c: perfect match to TCS211 boot.obj
|
| Wed, 04 Mar 2020 23:58:05 +0000 |
Mychaela Falconia |
frbl/reconst: boot.c passes compilation
|
| Wed, 04 Mar 2020 23:41:51 +0000 |
Mychaela Falconia |
frbl/reconst: first attempt to compile boot.c
|
| Wed, 04 Mar 2020 23:17:27 +0000 |
Mychaela Falconia |
frbl/reconst/boot.c: import from TI's FLUID package
|
| Wed, 04 Mar 2020 23:12:22 +0000 |
Mychaela Falconia |
frbl/reconst/main/sys_types.h: import from TCS211
|
| Wed, 04 Mar 2020 23:10:48 +0000 |
Mychaela Falconia |
frbl/reconst/inc/command.h: tab fixes
|
| Wed, 04 Mar 2020 23:06:07 +0000 |
Mychaela Falconia |
frbl/reconst/inc: import from TCS211 surviving source
|
| Sat, 29 Feb 2020 05:36:07 +0000 |
Mychaela Falconia |
fluid-mnf: original source from TI,
|
| Fri, 31 Jan 2020 22:45:18 +0000 |
Mychaela Falconia |
moko1-fw-disasm: simple analysis of init module
|
| Mon, 28 Oct 2019 06:09:28 +0000 |
Mychaela Falconia |
dspanal: char2coff works now
|
| Mon, 28 Oct 2019 05:20:50 +0000 |
Mychaela Falconia |
dspanal: char2coff utility written, compiles
|
| Mon, 28 Oct 2019 02:37:47 +0000 |
Mychaela Falconia |
dspanal: char2bin utility written, compiles
|
| Sun, 06 Oct 2019 02:27:52 +0000 |
Mychaela Falconia |
dsample-fw-disasm: one more cinit record
|
| Sun, 06 Oct 2019 01:56:38 +0000 |
Mychaela Falconia |
dsample-fw-disasm: tpudrv10 init code analysed
|
| Sun, 06 Oct 2019 01:29:35 +0000 |
Mychaela Falconia |
dsample-fw-disasm: Tx up/down functions located and analysed
|
| Sun, 06 Oct 2019 00:36:11 +0000 |
Mychaela Falconia |
dsample-fw-disasm: Rx up/down functions located and analysed
|
| Sat, 05 Oct 2019 23:47:32 +0000 |
Mychaela Falconia |
dsample-fw-disasm: rf_program() and l1dmacro_agc() analysed
|
| Sat, 05 Oct 2019 19:21:06 +0000 |
Mychaela Falconia |
dsample-fw-disasm: finished l1_drive and its l1dmacro calls
|
| Sat, 05 Oct 2019 08:29:39 +0000 |
Mychaela Falconia |
dsample-fw-disasm: a few tpudrv10 l1dmacro functions
|
| Sat, 05 Oct 2019 07:56:47 +0000 |
Mychaela Falconia |
dsample-fw-disasm: found l1_drive and tpudrv modules
|
| Sat, 21 Sep 2019 22:43:18 +0000 |
Mychaela Falconia |
blobstat/specs: added divisions spec
|
| Sat, 21 Sep 2019 22:04:45 +0000 |
Mychaela Falconia |
blobstat: classification spec files moved into specs subdir
|
| Sat, 21 Sep 2019 21:56:53 +0000 |
Mychaela Falconia |
blobstat: maghybrid-libclass added
|
| Sat, 21 Sep 2019 21:25:09 +0000 |
Mychaela Falconia |
blobstat: actually works now
|
| Sat, 21 Sep 2019 21:17:29 +0000 |
Mychaela Falconia |
blobstat: code finished, compiles
|
| Sat, 21 Sep 2019 21:07:45 +0000 |
Mychaela Falconia |
blobstat: mostly complete
|
| Sun, 09 Jun 2019 22:56:27 +0000 |
Mychaela Falconia |
gtm900/fw-reg-config: note that the main config regs are as expected
|
| Sun, 09 Jun 2019 21:05:12 +0000 |
Mychaela Falconia |
gtm900/fw-reg-config note added
|
| Fri, 07 Jun 2019 20:20:49 +0000 |
Mychaela Falconia |
gtm900/interface-signals: notes from connection tracing
|
| Fri, 07 Jun 2019 18:44:00 +0000 |
Mychaela Falconia |
gtm900 subdir created, fw-disasm work moved inside
|
| Fri, 31 May 2019 01:42:34 +0000 |
Mychaela Falconia |
gtm900-fw-disasm created
|
| Sat, 23 Mar 2019 05:11:09 +0000 |
Mychaela Falconia |
compal/c156-fw-disasm: got to Init_Target()
|
| Thu, 14 Mar 2019 22:40:18 +0000 |
Mychaela Falconia |
compal/j100-fw-disasm: GPIO init analysis
|
| Thu, 14 Mar 2019 09:06:43 +0000 |
Mychaela Falconia |
compal/c156-fw-disasm: first attempt
|
| Thu, 14 Mar 2019 08:33:39 +0000 |
Mychaela Falconia |
compal/c139-fw-disasm: GPIO init analysis complete
|
| Thu, 14 Mar 2019 07:12:27 +0000 |
Mychaela Falconia |
compal/sym-fw-disasm: ULPD setup diffs analysed
|
| Thu, 14 Mar 2019 06:55:02 +0000 |
Mychaela Falconia |
compal/sym-fw-disasm: initial analysis
|
| Sun, 03 Mar 2019 07:53:54 +0000 |
Mychaela Falconia |
dsample-fw-disasm: found l1dmacro_init_hw() and
|
| Sun, 17 Feb 2019 00:42:34 +0000 |
Mychaela Falconia |
compal/c139-{rssi,txcal}: results of C139 to CMU200 experiment
|
| Sat, 16 Feb 2019 18:30:11 +0000 |
Mychaela Falconia |
pirelli/{rssi,txcal}: results of the Pirelli to CMU200 experiment
|
| Wed, 12 Dec 2018 07:48:48 +0000 |
Mychaela Falconia |
benq-fw-disasm: dug a little into BenQ's M32 firmware
|
| Mon, 05 Nov 2018 23:18:42 +0000 |
Mychaela Falconia |
compal/c156-boot.disasm: GPIO comments were wrong
|
| Fri, 21 Sep 2018 23:08:32 +0000 |
Mychaela Falconia |
leo-obj/bootloader/Notes: bootloader blob reverse-engineered
|
| Sat, 24 Mar 2018 20:38:24 +0000 |
Mychaela Falconia |
Pirelli PCB RE: traced out Calypso FDP and flash reset input
|
| Sat, 20 Jan 2018 21:00:13 +0000 |
Mychaela Falconia |
fbdump2ppm: adjust for R2D's extra 32-bit word
|
| Sat, 20 Jan 2018 20:46:08 +0000 |
Mychaela Falconia |
miscprog: fbdump2ppm program written, compiles
|
| Sat, 20 Jan 2018 00:38:51 +0000 |
Mychaela Falconia |
dsample-fw-disasm: done with the calc_a_b()-like function
|
| Fri, 19 Jan 2018 23:30:22 +0000 |
Mychaela Falconia |
dsample-fw-disasm: magic2 tables located
|
| Fri, 19 Jan 2018 08:03:10 +0000 |
Mychaela Falconia |
dsample-fw-disasm: cinit for magic1 tables
|
| Fri, 19 Jan 2018 07:20:42 +0000 |
Mychaela Falconia |
dsample-fw-disasm: located cinit records for rf_path and synth_*
|
| Fri, 19 Jan 2018 06:19:59 +0000 |
Mychaela Falconia |
cinitdump program written, compiles
|
| Fri, 19 Jan 2018 05:15:50 +0000 |
Mychaela Falconia |
dsample-fw-disasm tpudrv10 code analysis: got to calc_a_b()
|
| Thu, 18 Jan 2018 17:12:17 +0000 |
Mychaela Falconia |
dsample-fw-disasm: found apparent beginning of the tpudrv10 module
|
| Thu, 18 Jan 2018 08:03:03 +0000 |
Mychaela Falconia |
dsample-fw-disasm: beginning to locate tpudrv10 code
|
| Thu, 18 Jan 2018 05:39:53 +0000 |
Mychaela Falconia |
dsample-fw-disasm: ARMIO functions located
|
| Thu, 18 Jan 2018 05:10:18 +0000 |
Mychaela Falconia |
dsample-fw-disasm: comment fixes
|
| Tue, 26 Dec 2017 12:26:23 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: CV charging analyzed
|
| Tue, 26 Dec 2017 07:13:21 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: pwr_start_CV_charging() analyzed
|
| Tue, 26 Dec 2017 06:49:53 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: CI charging analyzed
|
| Tue, 26 Dec 2017 04:47:58 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: pwr_cal_timer_process() analyzed
|
| Tue, 26 Dec 2017 04:12:06 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: pwr_short_test_timer_process() analyzed
|
| Tue, 26 Dec 2017 03:28:22 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: beginning of pwr_liion_cha code
|
| Tue, 26 Dec 2017 00:56:55 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: pwr_cust battery type logic located and analyzed
|
| Mon, 25 Dec 2017 23:54:05 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: found what seems to be the charging time limit function
|
| Mon, 25 Dec 2017 23:32:08 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: started proper analysis of pwr_cust code
|
| Mon, 25 Dec 2017 21:15:23 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: rvf_stop_timer() call confirmed
|
| Mon, 25 Dec 2017 20:50:30 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: Switch_ON() analysis complete
|
| Sun, 24 Dec 2017 18:03:25 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: continuing Switch_ON() analysis
|
| Sun, 24 Dec 2017 17:18:06 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: started analysing the Switch_ON() code
|
| Sun, 24 Dec 2017 16:22:28 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: Switch_ON() code located
|
| Sun, 24 Dec 2017 04:43:48 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: abb_inth located
|
| Sun, 24 Dec 2017 01:19:25 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: abb_core_inth located
|
| Sun, 24 Dec 2017 00:03:49 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: l1_abb_power_on() located
|
| Sat, 23 Dec 2017 23:26:06 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: l1_initialize() located
|
| Sat, 23 Dec 2017 16:38:50 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: ABB_Read_ADC() and ABB_Conf_ADC() located
|
| Sat, 23 Dec 2017 08:27:26 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: first round of ABB functions
|
| Sat, 23 Dec 2017 03:56:02 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: pwr_env code located
|
| Sat, 23 Dec 2017 01:46:05 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: spi_adc_on() located
|
| Sat, 23 Dec 2017 01:38:28 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: spi_core() located
|
| Sat, 23 Dec 2017 01:13:07 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: spi_env code located
|
| Fri, 22 Dec 2017 23:26:41 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: RVM SWE array analyzed
|
| Fri, 22 Dec 2017 21:50:59 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: more l1_cust stuff
|
| Fri, 22 Dec 2017 06:10:26 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: Cust_Init_Layer1() and madc_hex_2_physical() located
|
| Fri, 22 Dec 2017 02:58:33 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: math for the IRAM code location
|
| Fri, 22 Dec 2017 02:10:56 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: IRAM code loading located
|
| Thu, 21 Dec 2017 23:12:46 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: main and init modules located
|
| Thu, 21 Dec 2017 22:17:11 +0000 |
Mychaela Falconia |
tiobjd: same bug in ARM SWP decoding as in standalone armdis
|
| Thu, 21 Dec 2017 22:15:00 +0000 |
Mychaela Falconia |
arm7dis/armdis: bug in the decoding of SWP instructions
|
| Thu, 21 Dec 2017 21:54:39 +0000 |
Mychaela Falconia |
pirelli/fw-disasm: beginning of proper static RE
|
| Tue, 19 Dec 2017 04:02:32 +0000 |
Mychaela Falconia |
pirchgdbg: complete enough for first test
|
| Tue, 19 Dec 2017 02:58:38 +0000 |
Mychaela Falconia |
pirchgdbg started
|
| Sun, 17 Dec 2017 19:30:22 +0000 |
Mychaela Falconia |
current-draw: checking in experiment results
|
| Wed, 29 Nov 2017 22:51:50 +0000 |
Mychaela Falconia |
Pirelli's a_pwr_thresholds[] table found
|
| Tue, 28 Nov 2017 02:47:01 +0000 |
Mychaela Falconia |
compal/charging: checking in captured booty
|
| Tue, 28 Nov 2017 02:14:44 +0000 |
Mychaela Falconia |
pirelli/charging/i2v: note added
|
| Tue, 28 Nov 2017 02:04:52 +0000 |
Mychaela Falconia |
pirelli/charging: read-abb-regs script and observed results
|
| Thu, 23 Nov 2017 22:24:18 +0000 |
Mychaela Falconia |
osmo2psi test program written
|
| Fri, 17 Nov 2017 19:58:07 +0000 |
Mychaela Falconia |
ftmdump (C1xx factory data reverse eng) tool written
|
| Thu, 16 Nov 2017 04:19:58 +0000 |
Mychaela Falconia |
pirelli/rfcal: new understanding
|
| Sun, 28 May 2017 20:33:26 +0000 |
Mychaela Falconia |
pircalextr: added second argument for output directory
|
| Sun, 28 May 2017 20:12:14 +0000 |
Mychaela Falconia |
pircalextr program written, compiles
|
| Tue, 14 Mar 2017 06:19:52 +0000 |
Mychaela Falconia |
leo-obj: disasm hints created for l1audio_cust.obj
|
| Tue, 14 Mar 2017 06:04:28 +0000 |
Mychaela Falconia |
leo-obj: started analyzing l1audio_cust.obj in l1_custom_ext.lib
|
| Sun, 25 Dec 2016 23:48:16 +0000 |
Mychaela Falconia |
Pirelli: documented and verified the checksum scheme used for the factory block
|
| Tue, 26 Jul 2016 23:32:17 +0000 |
Mychaela Falconia |
analysis of ultra-malicious new C123 boot code from Ajay Fuloria
|
| Mon, 25 Jul 2016 19:29:03 +0000 |
Mychaela Falconia |
compal directory: added analysis of C139 boot code version with 1004 signature
|
| Mon, 28 Mar 2016 07:04:20 +0000 |
Mychaela Falconia |
leo-obj/l1_dyn_dwl: created hints file for async module to get ASCII strings
|
| Sat, 26 Mar 2016 22:03:08 +0000 |
Mychaela Falconia |
tiobjd disasm -ll: show the actual line numbers
|
| Sat, 05 Mar 2016 02:51:04 +0000 |
Mychaela Falconia |
leo-obj/l1_ext/l1_async.hints: one more ASCIZ string
|
| Sat, 05 Mar 2016 01:28:06 +0000 |
Mychaela Falconia |
leo-obj: analysis of l1_async.obj with disassembly hints
|
| Fri, 04 Mar 2016 23:36:16 +0000 |
Mychaela Falconia |
tiobjd disasm -g: grok struct/union/enum definitions and statics in functions
|
| Fri, 01 Jan 2016 23:24:05 +0000 |
Mychaela Falconia |
D-Sample 20020917 firmware analysis
|
| Wed, 30 Dec 2015 08:27:46 +0000 |
Mychaela Falconia |
old Calypso F741979B boot ROM analyzed
|
| Thu, 10 Dec 2015 07:29:35 +0000 |
Mychaela Falconia |
memwrite-grep hack-utility written
|
| Mon, 19 Oct 2015 05:07:25 +0000 |
Mychaela Falconia |
dspanal/patchanal: added -v option to dump section content
|
| Fri, 16 Oct 2015 17:00:22 +0000 |
Mychaela Falconia |
dspanal/patchanal.c written, insight gained
|
| Sat, 04 Jul 2015 18:37:26 +0000 |
Space Falcon |
leo-obj/l1_dyn_dwl/l1_dyn_dwl_init.hints: show 2D byte arrays more clearly
|
| Sat, 04 Jul 2015 02:30:27 +0000 |
Space Falcon |
leo-obj: need to look at l1_dyn_dwl objects
|
| Sat, 06 Jun 2015 18:32:49 +0000 |
Space Falcon |
leo-obj/frame_na7_db_ir: disassemble frame.obj in order to bring to light
|
| Mon, 25 May 2015 04:50:24 +0000 |
Space Falcon |
leo-obj: let's take a look at bootloader.lib
|
| Tue, 12 May 2015 20:38:15 +0000 |
Space Falcon |
pirelli/rfcal: Rx agcparams and calchan were swapped
|
| Thu, 16 Apr 2015 04:12:48 +0000 |
Michael Spacefalcon |
bootrom.notes typo fix (courtesy of pfalcon <pmiscml@gmail.com>)
|
| Sun, 15 Mar 2015 01:13:42 +0000 |
Michael Spacefalcon |
pirelli/32khz: investigative note checked in
|
| Sun, 11 Jan 2015 04:33:48 +0000 |
Michael Spacefalcon |
pirelli/vctcxo: VCTCXO connections traced out
|
| Wed, 07 Jan 2015 22:15:51 +0000 |
Michael Spacefalcon |
grokdsn: buglet in the hierarchy traversal order
|
| Wed, 07 Jan 2015 08:09:30 +0000 |
Michael Spacefalcon |
grokdsn: tree dump implemented
|
| Wed, 07 Jan 2015 07:12:51 +0000 |
Michael Spacefalcon |
grokdsn: able to follow the FAT chain for the directory
|
| Wed, 07 Jan 2015 06:55:33 +0000 |
Michael Spacefalcon |
started grokdsn utility, parses header successfully
|
| Thu, 04 Dec 2014 07:25:12 +0000 |
Michael Spacefalcon |
pirelli/vibrator: footprint measurements
|
| Sun, 17 Aug 2014 22:49:48 +0000 |
Michael Spacefalcon |
leo-obj/l1_pei: added and analyzed
|
| Sun, 17 Aug 2014 18:41:11 +0000 |
Michael Spacefalcon |
leo-obj/l1_int/dl1_com.hints: created
|
| Sun, 17 Aug 2014 18:26:06 +0000 |
Michael Spacefalcon |
leo-obj: started looking at dl1_com.obj
|
| Fri, 15 Aug 2014 00:59:45 +0000 |
Michael Spacefalcon |
leo-obj/tpudrv/tpudrv12.hints: literal pools and branches around them
|
| Mon, 11 Aug 2014 21:32:30 +0000 |
Michael Spacefalcon |
leo-obj: started analyzing tpudrv.lib objects
|
| Mon, 04 Aug 2014 21:17:06 +0000 |
Michael Spacefalcon |
tiobjd: chararray extraction command implemented
|
| Tue, 15 Jul 2014 00:24:40 +0000 |
Michael Spacefalcon |
pirelli/rfcal: found /sys/adccal, no luch with /gsm/rf/afc*
|
| Sun, 13 Jul 2014 07:51:24 +0000 |
Michael Spacefalcon |
calextract: forgot the final semicolon after the last closing brace
|
| Sun, 13 Jul 2014 01:11:22 +0000 |
Michael Spacefalcon |
Pirelli's RF calibration cracked
|
| Sat, 12 Jul 2014 00:05:22 +0000 |
Michael Spacefalcon |
calextract tool written, works
|
| Fri, 11 Jul 2014 00:59:50 +0000 |
Michael Spacefalcon |
leo-obj/l1_custom_int/l1_cust.hints: created
|
| Thu, 10 Jul 2014 03:20:00 +0000 |
Michael Spacefalcon |
leo-obj/l1_custom_int: ind_os.hints added
|
| Thu, 10 Jul 2014 03:16:42 +0000 |
Michael Spacefalcon |
leo-obj/l1_custom_int: added
|
| Sun, 06 Jul 2014 20:22:09 +0000 |
Michael Spacefalcon |
objgrep/README written
|
| Fri, 04 Jul 2014 16:37:51 +0000 |
Michael Spacefalcon |
objgrep-fe: works after fixing a buglet
|
| Fri, 04 Jul 2014 08:46:32 +0000 |
Michael Spacefalcon |
objgrep-fe written, compiles
|
| Fri, 04 Jul 2014 06:34:33 +0000 |
Michael Spacefalcon |
objgrep -r: dump symbols in other sections recovered through relocs
|
| Fri, 04 Jul 2014 03:22:41 +0000 |
Michael Spacefalcon |
objgrep: -r implemented
|
| Fri, 04 Jul 2014 03:07:09 +0000 |
Michael Spacefalcon |
objgrep: -s implemented
|
| Fri, 04 Jul 2014 02:56:21 +0000 |
Michael Spacefalcon |
objgrep: parsing of -r and -s options implemented, no functionality yet
|
| Fri, 04 Jul 2014 01:45:03 +0000 |
Michael Spacefalcon |
objgrep: weed out empty source sections
|
| Fri, 04 Jul 2014 01:01:39 +0000 |
Michael Spacefalcon |
objgrep: works after fixing a buglet
|
| Fri, 04 Jul 2014 00:54:33 +0000 |
Michael Spacefalcon |
objgrep: written, compiles
|
| Mon, 30 Jun 2014 18:00:09 +0000 |
Michael Spacefalcon |
leo-obj/osx_na7_db/osx.hints: created
|
| Mon, 30 Jun 2014 17:34:59 +0000 |
Michael Spacefalcon |
leo-obj: starting to look at OSX
|
| Sun, 15 Jun 2014 01:43:55 +0000 |
Michael Spacefalcon |
leo-obj/frame_na7_db_ir: os_mem.hints added
|
| Sun, 15 Jun 2014 01:17:36 +0000 |
Michael Spacefalcon |
leo-obj/frame_na7_db_fl: os_{sem,tim}.hints created
|
| Thu, 15 May 2014 20:55:39 +0000 |
Michael Spacefalcon |
locked C139 bootloader reverse-engineered
|
| Thu, 15 May 2014 20:10:25 +0000 |
Michael Spacefalcon |
starting to examine Tracfone's locked C139 bootloader
|
| Thu, 15 May 2014 08:38:42 +0000 |
Michael Spacefalcon |
malware version of the C118 bootloader reversed
|
| Thu, 15 May 2014 07:58:07 +0000 |
Michael Spacefalcon |
C123 bootloader re complete
|
| Thu, 15 May 2014 06:43:14 +0000 |
Michael Spacefalcon |
start of C123 bootloader re
|
| Wed, 14 May 2014 05:34:37 +0000 |
Michael Spacefalcon |
mot931c break-in procedure cracked
|
| Sat, 03 May 2014 17:56:45 +0000 |
Michael Spacefalcon |
leo-obj: started analyzing frame_na7_db_ir objects
|
| Fri, 02 May 2014 23:41:44 +0000 |
Michael Spacefalcon |
tiobjd ctypes: print more useful hex byte offsets for struct fields
|
| Fri, 02 May 2014 06:20:26 +0000 |
Michael Spacefalcon |
leo-obj/frame_na7_db_fl: extract ctypes info as well
|
| Fri, 02 May 2014 04:12:14 +0000 |
Michael Spacefalcon |
leo-obj: frame_na7_db_fl/os_pro.obj disassembles the way it should
|
| Thu, 01 May 2014 01:01:58 +0000 |
Michael Spacefalcon |
tiobjd disasm: implemented -l option to show line markers
|
| Thu, 01 May 2014 00:23:18 +0000 |
Michael Spacefalcon |
tiobjd disasm -g: line break after function locals
|
| Tue, 29 Apr 2014 07:51:28 +0000 |
Michael Spacefalcon |
tiobjd disasm -g: dump of function locals implemented
|
| Tue, 29 Apr 2014 07:11:33 +0000 |
Michael Spacefalcon |
tiobjd richsym handling: prep for handling function locals
|
| Tue, 29 Apr 2014 06:45:45 +0000 |
Michael Spacefalcon |
tiobjd disasm -g: support -b as well
|
| Tue, 29 Apr 2014 06:26:59 +0000 |
Michael Spacefalcon |
tiobjd: beginning of disasm -g
|
| Tue, 29 Apr 2014 05:18:09 +0000 |
Michael Spacefalcon |
tiobjd ctypes: buglet in the -bb mode
|
| Tue, 29 Apr 2014 04:49:17 +0000 |
Michael Spacefalcon |
tiobjd: ctypes command implemented
|
| Mon, 28 Apr 2014 08:04:39 +0000 |
Michael Spacefalcon |
tiobjd: started implementing rich symbolic info parsing
|
| Mon, 28 Apr 2014 05:55:40 +0000 |
Michael Spacefalcon |
tiobjd: raw dump of line number records implemented
|
| Mon, 28 Apr 2014 04:51:35 +0000 |
Michael Spacefalcon |
tiobjd: show symtab aux entries
|
| Sun, 27 Apr 2014 18:07:55 +0000 |
Michael Spacefalcon |
leo-obj: started disassembling frame_na7_db_ir
|
| Wed, 09 Apr 2014 02:40:20 +0000 |
Michael Spacefalcon |
OSL flash objects: created disasm hints for os_com through os_mis
|
| Mon, 07 Apr 2014 07:36:31 +0000 |
Michael Spacefalcon |
tiobjd disasm: smarter logic for when the <end of section> line
|
| Mon, 07 Apr 2014 05:40:49 +0000 |
Michael Spacefalcon |
leo-obj: starting to examine GPF OSL objects
|
| Mon, 07 Apr 2014 05:03:38 +0000 |
Michael Spacefalcon |
leo-obj/main: hints for init.obj
|
| Mon, 07 Apr 2014 04:56:29 +0000 |
Michael Spacefalcon |
tiobjd: disasm hints work now
|
| Mon, 07 Apr 2014 04:06:17 +0000 |
Michael Spacefalcon |
tiobjd: disasm of code and data sections unified
|
| Mon, 07 Apr 2014 02:41:35 +0000 |
Michael Spacefalcon |
tiobjd: implemented parsing of the hint input files
|
| Mon, 07 Apr 2014 01:22:09 +0000 |
Michael Spacefalcon |
tiobjd: Thumb bl w/o reloc: find symbol if there is one
|
| Mon, 07 Apr 2014 00:59:34 +0000 |
Michael Spacefalcon |
leo-obj/Makefile: created
|
| Sun, 06 Apr 2014 22:33:24 +0000 |
Michael Spacefalcon |
leo-obj/main: created
|
| Sun, 06 Apr 2014 22:14:39 +0000 |
Michael Spacefalcon |
leo-obj project subtree started, tiobjd tool moved into it
|
| Sun, 06 Apr 2014 20:20:39 +0000 |
Michael Spacefalcon |
miscellaneous C programs moved out of the top level directory
|
| Sat, 05 Apr 2014 20:21:55 +0000 |
Michael Spacefalcon |
tiobjd disasm: initial hook-in of the hints mechanism
|
| Sat, 05 Apr 2014 20:00:46 +0000 |
Michael Spacefalcon |
tiobjd: section disasm mode hinting rethought
|
| Sat, 05 Apr 2014 19:14:43 +0000 |
Michael Spacefalcon |
tiobjd: first preparations for adding disasm hints mechanism
|
| Fri, 04 Apr 2014 18:56:23 +0000 |
Michael Spacefalcon |
tiobjd disasm: bss handling
|
| Fri, 04 Apr 2014 18:39:01 +0000 |
Michael Spacefalcon |
tiobjd disasm: data section handling added
|
| Fri, 04 Apr 2014 08:12:29 +0000 |
Michael Spacefalcon |
tiobjd: handling of $CODE16 symbols at byte positions
|
| Fri, 04 Apr 2014 07:46:08 +0000 |
Michael Spacefalcon |
tiobjd Thumb disasm: compute results of adding to pc
|
| Fri, 04 Apr 2014 07:19:15 +0000 |
Michael Spacefalcon |
tiobjd: handling of symbol-less relocs
|
| Fri, 04 Apr 2014 05:45:22 +0000 |
Michael Spacefalcon |
tiobjd: auto-translation of section-relative relocs made more conservative
|
| Fri, 04 Apr 2014 05:11:32 +0000 |
Michael Spacefalcon |
tiobjd: sorted profile output
|
| Thu, 03 Apr 2014 07:47:03 +0000 |
Michael Spacefalcon |
tiobjd: better handling of section-relative relocs
|
| Thu, 03 Apr 2014 07:16:20 +0000 |
Michael Spacefalcon |
tiobjd: Thumb_BL reloc handling
|
| Thu, 03 Apr 2014 07:00:08 +0000 |
Michael Spacefalcon |
tiobjd: retain the original symtab order for symbols at the same position
|
| Thu, 03 Apr 2014 06:50:07 +0000 |
Michael Spacefalcon |
tiobjd: literal reloc recognition restricted to RTYPE_LONG
|
| Thu, 03 Apr 2014 06:42:39 +0000 |
Michael Spacefalcon |
tiobjd: ARM_B reloc handling
|
| Thu, 03 Apr 2014 06:20:06 +0000 |
Michael Spacefalcon |
tiobjd: recognizing relocs in ldr literals
|
| Thu, 03 Apr 2014 05:54:59 +0000 |
Michael Spacefalcon |
tiobjd disasm: beginning of reloc handling
|
| Thu, 03 Apr 2014 05:14:15 +0000 |
Michael Spacefalcon |
tiobjd: disassembly integrated, no relocs or hints yet
|
| Thu, 03 Apr 2014 03:03:41 +0000 |
Michael Spacefalcon |
tiobjd: higher-level reloc handling
|
| Mon, 31 Mar 2014 19:06:33 +0000 |
Michael Spacefalcon |
C156 boot code cracked
|
| Mon, 31 Mar 2014 16:41:21 +0000 |
Michael Spacefalcon |
C156 boot code disassembly started
|
| Mon, 31 Mar 2014 06:49:27 +0000 |
Michael Spacefalcon |
arm7dis: README and header comments added
|
| Mon, 31 Mar 2014 06:33:14 +0000 |
Michael Spacefalcon |
analysis of what osmocon's voodoo payloads disassemble to in ARM/Thumb
|
| Mon, 31 Mar 2014 05:51:57 +0000 |
Michael Spacefalcon |
C139 boot ROM fully cracked
|
| Mon, 31 Mar 2014 03:11:25 +0000 |
Michael Spacefalcon |
C139 boot re: got to UART initialization
|
| Mon, 31 Mar 2014 01:59:28 +0000 |
Michael Spacefalcon |
thumbdis: buglet in the decoding of sub-from-sp
|
| Mon, 31 Mar 2014 01:52:56 +0000 |
Michael Spacefalcon |
c139 boot re: entry code analyzed
|
| Mon, 31 Mar 2014 01:16:55 +0000 |
Michael Spacefalcon |
thumbdis: nop recognition
|
| Mon, 31 Mar 2014 01:10:34 +0000 |
Michael Spacefalcon |
C139 boot re: use thumbdis
|
| Mon, 31 Mar 2014 01:05:44 +0000 |
Michael Spacefalcon |
C139 boot re: C140 differences noted
|
| Mon, 31 Mar 2014 00:43:15 +0000 |
Michael Spacefalcon |
C139 boot re setup using the new arm7dis
|
| Sun, 30 Mar 2014 23:32:26 +0000 |
Michael Spacefalcon |
thumbdis written, compiles
|
| Sun, 30 Mar 2014 07:22:33 +0000 |
Michael Spacefalcon |
arm7dis/Makefile: install added
|
| Sun, 30 Mar 2014 07:21:21 +0000 |
Michael Spacefalcon |
armdis: swp decoding implemented
|
| Sun, 30 Mar 2014 07:11:41 +0000 |
Michael Spacefalcon |
armdis: ldm/stm decoding implemented
|
| Sun, 30 Mar 2014 01:55:46 +0000 |
Michael Spacefalcon |
armdis: buglet in literal pool handling: forgot to add base_vma
|
| Sun, 30 Mar 2014 01:47:28 +0000 |
Michael Spacefalcon |
armdis: full ldr/str decoding implemented
|
| Sun, 30 Mar 2014 00:27:25 +0000 |
Michael Spacefalcon |
armdis: ldr/str decoding implemented (but not PC-relative ldr yet)
|
| Sat, 29 Mar 2014 22:19:21 +0000 |
Michael Spacefalcon |
armdis: implemented decoding of multiplication instructions
|
| Sat, 29 Mar 2014 21:36:22 +0000 |
Michael Spacefalcon |
armdis: BX/MRS/MSR decoding implemented
|
| Sat, 29 Mar 2014 20:28:13 +0000 |
Michael Spacefalcon |
armdis: implemented decoding of data processing instructions
|
| Sat, 29 Mar 2014 00:23:16 +0000 |
Michael Spacefalcon |
armdis: skeleton compiles
|
| Fri, 28 Mar 2014 07:01:27 +0000 |
Michael Spacefalcon |
beginning of ARM7 disassembler
|
| Thu, 27 Mar 2014 19:34:07 +0000 |
Michael Spacefalcon |
compal boot ROM re: minor progress
|
| Thu, 27 Mar 2014 07:07:41 +0000 |
Michael Spacefalcon |
beginning of C139 boot ROM re
|
| Wed, 26 Mar 2014 06:13:43 +0000 |
Michael Spacefalcon |
tiobjd: known reloc types defined
|
| Wed, 26 Mar 2014 06:00:07 +0000 |
Michael Spacefalcon |
tiobjd: beginning of reloc handling
|
| Wed, 26 Mar 2014 03:23:20 +0000 |
Michael Spacefalcon |
tiobjd: symbol sorting implemented
|
| Wed, 26 Mar 2014 02:44:19 +0000 |
Michael Spacefalcon |
tiobjd: preparation for symbol sorting
|
| Wed, 26 Mar 2014 02:00:44 +0000 |
Michael Spacefalcon |
tiobjd: profile operation implemented
|
| Wed, 26 Mar 2014 01:24:17 +0000 |
Michael Spacefalcon |
tiobjd: symbol storage classes decoded into mnemonics
|
| Tue, 25 Mar 2014 22:47:51 +0000 |
Michael Spacefalcon |
tiobjd: basics dump streamlined
|
| Tue, 25 Mar 2014 20:39:44 +0000 |
Michael Spacefalcon |
ticoff/Makefile: install added
|
| Tue, 25 Mar 2014 20:38:31 +0000 |
Michael Spacefalcon |
tiobjd: dumpsym implemented
|
| Tue, 25 Mar 2014 18:55:36 +0000 |
Michael Spacefalcon |
tiobjd: a little refactoring
|
| Tue, 25 Mar 2014 18:34:03 +0000 |
Michael Spacefalcon |
tiobjd: symbol table parsing implemented
|
| Tue, 25 Mar 2014 08:51:32 +0000 |
Michael Spacefalcon |
Pirelli PCB re: Winbond chip connections
|
| Sat, 22 Mar 2014 05:53:02 +0000 |
Michael Spacefalcon |
tiobjd: successful parsing of the section header table
|
| Sat, 22 Mar 2014 02:29:22 +0000 |
Michael Spacefalcon |
tiobjd started
|
| Thu, 13 Mar 2014 09:05:18 +0000 |
Michael Spacefalcon |
Pirelli PCB re: major refdeses assigned
|
| Mon, 10 Feb 2014 02:33:17 +0000 |
Michael Spacefalcon |
pirelli preboot re: figured out the triggering condition
|
| Sun, 09 Feb 2014 09:36:42 +0000 |
Michael Spacefalcon |
started disassembly of Pirelli's boot code
|
| Sun, 02 Feb 2014 23:06:18 +0000 |
Michael Spacefalcon |
atsc hack: apparently this AT@SC command needs double quotes
|
| Sun, 02 Feb 2014 08:45:56 +0000 |
Michael Spacefalcon |
atsc hack written
|
| Thu, 16 Jan 2014 01:22:32 +0000 |
Michael Spacefalcon |
rfcap-grep.c hack-utility written
|
| Mon, 02 Dec 2013 08:55:38 +0000 |
Michael Spacefalcon |
Pirelli PCB RE: another failed attempt at tracing the keypad connections
|
| Mon, 02 Dec 2013 07:44:41 +0000 |
Michael Spacefalcon |
Pirelli PCB RE: got some success with the LCD connector pinout
|
| Sun, 01 Dec 2013 23:59:56 +0000 |
Michael Spacefalcon |
Pirelli PCB RE: attempt to trace out KBC/KBR lines stopped by grind-down damage
|
| Fri, 29 Nov 2013 01:39:31 +0000 |
Michael Spacefalcon |
imeibrute written
|
| Fri, 29 Nov 2013 00:39:02 +0000 |
Michael Spacefalcon |
Pirelli's IMEI obfuscation cracked!
|
| Wed, 13 Nov 2013 21:00:30 +0000 |
Michael Spacefalcon |
Pirelli PCB: some measurements of the debug connector footprint
|
| Tue, 12 Nov 2013 04:28:47 +0000 |
Michael Spacefalcon |
some success in finding familiar TI code in moko11 and Pirelli fw binary images
|
| Sun, 20 Oct 2013 04:49:28 +0000 |
Michael Spacefalcon |
Pirelli PCB tracing: voice band i/f, MCSI and MODEM UART
|
| Fri, 02 Aug 2013 02:16:31 +0000 |
Michael Spacefalcon |
Pirelli PCB: traced the earpiece and loudspeaker analog signals
|
| Sun, 28 Jul 2013 21:38:07 +0000 |
Michael Spacefalcon |
another Pirelli PCB tracing session, focusing on the display subsystem
|
| Fri, 26 Jul 2013 03:15:57 +0000 |
Michael Spacefalcon |
factdiff: print the number of bytes in each varying chunk
|
| Thu, 25 Jul 2013 17:06:23 +0000 |
Michael Spacefalcon |
factdiff utility written
|
| Wed, 24 Jul 2013 21:52:09 +0000 |
Michael Spacefalcon |
pirollback: resurrect file descendant chains
|
| Wed, 24 Jul 2013 19:50:24 +0000 |
Michael Spacefalcon |
pirollback: actual rollback utility implemented, compiles
|
| Sun, 07 Jul 2013 07:44:03 +0000 |
Michael Spacefalcon |
pirollback: catino implemented, works
|
| Sun, 07 Jul 2013 07:15:58 +0000 |
Michael Spacefalcon |
pirollback dumpjournal utility: print some additional info
|
| Sun, 07 Jul 2013 06:52:04 +0000 |
Michael Spacefalcon |
pirollback: dumpjournal utility written, works
|
| Sun, 07 Jul 2013 06:14:40 +0000 |
Michael Spacefalcon |
pirollback: journal parsing implemented
|
| Sat, 06 Jul 2013 22:06:38 +0000 |
Michael Spacefalcon |
pirollback: pathname reconstruction implemented
|
| Sat, 06 Jul 2013 21:31:55 +0000 |
Michael Spacefalcon |
pirollback: name check implemented
|
| Sat, 06 Jul 2013 20:52:09 +0000 |
Michael Spacefalcon |
pirollback: tree walk implemented
|
| Sat, 06 Jul 2013 20:16:34 +0000 |
Michael Spacefalcon |
pirollback: started
|
| Fri, 05 Jul 2013 03:26:06 +0000 |
Michael Spacefalcon |
MPFFS description: documented relocated chunks and the journal file
|
| Mon, 01 Jul 2013 07:04:01 +0000 |
Michael Spacefalcon |
mpffs-cat and mpffs-xtr converted to use the new extra chunk handling
|
| Mon, 01 Jul 2013 06:49:50 +0000 |
Michael Spacefalcon |
iterate_extra_chunks() function written, mpffs-ls converted to use it
|
| Mon, 01 Jul 2013 06:28:30 +0000 |
Michael Spacefalcon |
mpffs-dbgls: reworked for the new understanding of relocated chunks
|
| Sun, 30 Jun 2013 17:56:27 +0000 |
Michael Spacefalcon |
mpffs-cat: more sensible handling of -v
|
| Sun, 30 Jun 2013 17:24:21 +0000 |
Michael Spacefalcon |
mpffs-xtr ported over
|
| Sun, 30 Jun 2013 16:55:19 +0000 |
Michael Spacefalcon |
mpffs-cat implemented
|
| Sun, 30 Jun 2013 16:20:28 +0000 |
Michael Spacefalcon |
mpffs-rdutils: pathname search implemented
|
| Sun, 30 Jun 2013 07:47:49 +0000 |
Michael Spacefalcon |
mpffs-dbgls implemented
|
| Sun, 30 Jun 2013 07:16:01 +0000 |
Michael Spacefalcon |
mpffs-ls: report the full chunk length of the /.journal file
|
| Sun, 30 Jun 2013 06:59:59 +0000 |
Michael Spacefalcon |
mpffs-ls reports file sizes
|
| Sun, 30 Jun 2013 06:28:58 +0000 |
Michael Spacefalcon |
mpffs-ls works with the length code stubbed out
|
| Sun, 30 Jun 2013 05:16:23 +0000 |
Michael Spacefalcon |
mpffs-rdutils code started
|
| Sun, 30 Jun 2013 04:15:00 +0000 |
Michael Spacefalcon |
Mokopir-FFS: verbal description finished
|
| Sun, 30 Jun 2013 01:17:30 +0000 |
Michael Spacefalcon |
beginning of Mokopir-FFS verbal description
|
| Sat, 18 May 2013 23:43:46 +0000 |
Michael Spacefalcon |
MysteryFFS: extract utility seems to work
|
| Sat, 18 May 2013 23:08:13 +0000 |
Michael Spacefalcon |
MysteryFFS: beginning of the extract utility
|
| Sat, 18 May 2013 21:09:33 +0000 |
Michael Spacefalcon |
MysteryFFS dump2: dumping all file fragments
|
| Sat, 18 May 2013 19:48:07 +0000 |
Michael Spacefalcon |
MysteryFFS: dump2 started, dumping the initial frag of each file
|
| Sat, 18 May 2013 19:21:09 +0000 |
Michael Spacefalcon |
MysteryFFS dump1 tool written
|
| Sat, 18 May 2013 08:22:15 +0000 |
Michael Spacefalcon |
beginning to explore MysteryFFS
|
| Thu, 25 Apr 2013 06:56:17 +0000 |
Michael Spacefalcon |
boot ROM re: some sensible documentation written up
|
| Thu, 25 Apr 2013 06:03:27 +0000 |
Michael Spacefalcon |
boot ROM re: some better comments
|
| Thu, 25 Apr 2013 05:47:59 +0000 |
Michael Spacefalcon |
boot ROM re: appears to be complete!
|
| Thu, 25 Apr 2013 04:07:10 +0000 |
Michael Spacefalcon |
boot ROM re: got through the <w handler
|
| Thu, 25 Apr 2013 03:16:17 +0000 |
Michael Spacefalcon |
boot ROM re: getting the download state machine, <p parsed
|
| Thu, 25 Apr 2013 00:08:51 +0000 |
Michael Spacefalcon |
boot ROM re: unraveling the response message routine
|
| Wed, 24 Apr 2013 23:49:39 +0000 |
Michael Spacefalcon |
boot ROM re: starting to unravel the serial command handling
|
| Wed, 24 Apr 2013 22:48:12 +0000 |
Michael Spacefalcon |
boot ROM re: continuing plowing through the serial protocol code
|
| Wed, 24 Apr 2013 19:32:45 +0000 |
Michael Spacefalcon |
boot ROM re: making inroads into the 0x2c8 routine
|
| Sun, 21 Apr 2013 21:48:50 +0000 |
Michael Spacefalcon |
boot ROM re: got to the 0x1090 routine
|
| Sat, 20 Apr 2013 00:56:45 +0000 |
Michael Spacefalcon |
Pirelli PCB rev eng: finally have something worthy to report:
|
| Fri, 19 Apr 2013 21:31:47 +0000 |
Michael Spacefalcon |
Pirelli PCB: failed attempt at tracing out the 4 under-SIM test points
|
| Wed, 17 Apr 2013 06:25:19 +0000 |
Michael Spacefalcon |
boot ROM re: trying to understand the code that runs after '<' received
|
| Tue, 16 Apr 2013 20:56:31 +0000 |
Michael Spacefalcon |
boot ROM re: flash application image interface documented
|
| Tue, 16 Apr 2013 06:59:35 +0000 |
Michael Spacefalcon |
boot ROM re: further understanding of the external flash image booting
|
| Tue, 16 Apr 2013 06:23:14 +0000 |
Michael Spacefalcon |
boot ROM re: making inroads into the flash image validity criteria
|
| Tue, 16 Apr 2013 05:36:59 +0000 |
Michael Spacefalcon |
boot ROM re: got as far as UART init
|
| Mon, 15 Apr 2013 16:18:53 +0000 |
Michael Spacefalcon |
boot ROM re: started on main() and the 0xe2c routine
|
| Mon, 15 Apr 2013 04:51:12 +0000 |
Michael Spacefalcon |
boot ROM rev eng: progressing on the RESET code
|
| Mon, 15 Apr 2013 04:02:55 +0000 |
Michael Spacefalcon |
beginning of boot ROM reverse eng
|
| Mon, 15 Apr 2013 02:19:54 +0000 |
Michael Spacefalcon |
mokosrec2bin utility written
|
