int_osx_receive_prim() in gsm-fw/gpf/osx/osx.c: there was an error in the reconstruction of this function from disassembly in the logic that implements special handling for MPHC_RXLEV_REQ messages. The code is now fixed to properly match what the binary object version does; with this fix the firmware now performs the power measurement phase correctly and the initial network registration succeeds.

#include "types.h"

void
cmd_dieid()
{
	u32 addr;

	for (addr = 0xFFFEF010; addr <= 0xFFFEF016; addr += 2)
		printf("%08X: %04X\n", addr, *(volatile u16 *)addr);
}