fw 688 core/gui_draw.c unsigned int fw = FONT_WIDTH; fw 697 core/gui_draw.c draw_hline_simple(x, y+j, fw, 0); fw 698 core/gui_draw.c draw_hline_simple(x, y+j+1, fw, 0); fw 736 core/gui_draw.c draw_1pixel_simple(x+ii, yt, dsym>>(fw-1), 1); fw 739 core/gui_draw.c for (; ii<fw; ii+=2) fw 741 core/gui_draw.c px = (dsym & ((3<<(fw-2))>>ii))>>(fw-2-ii); fw 760 core/gui_draw.c draw_hline_simple(x, y+j, fw, 0); fw 761 core/gui_draw.c draw_hline_simple(x, y+j+1, fw, 0); fw 773 core/gui_draw.c unsigned int fw = FONT_REAL_WIDTH; fw 780 core/gui_draw.c draw_hline_simple(x, y+i, fw, 0); fw 805 core/gui_draw.c draw_1pixel_simple(x+ii, yt, dsym>>(fw-1), 0); fw 808 core/gui_draw.c for (; ii<fw; ii+=2) fw 810 core/gui_draw.c px = (dsym & ((3<<(fw-2))>>ii))>>(fw-2-ii); fw 827 core/gui_draw.c draw_hline_simple(x, y+i, fw, 0); fw 298 tools/capdis.c static void describe_str(firmware *fw, char *comment, uint32_t adr) fw 301 tools/capdis.c char *s=(char *)adr2ptr_with_data(fw,adr); fw 306 tools/capdis.c if(!isASCIIstring(fw,adr)) { fw 311 tools/capdis.c s=(char *)adr2ptr_with_data(fw,adr2); fw 316 tools/capdis.c if(!isASCIIstring(fw,adr2)) { fw 396 tools/capdis.c void describe_const_op(firmware *fw, unsigned dis_opts, char *comment, uint32_t adr) fw 400 tools/capdis.c ostub = find_sig_val(fw->sv->stubs,adr); fw 402 tools/capdis.c uint32_t *p=(uint32_t *)adr2ptr(fw,adr); fw 404 tools/capdis.c ostub = find_sig_val(fw->sv->stubs,*p); fw 417 tools/capdis.c describe_str(fw,comment,adr); fw 421 tools/capdis.c void describe_prop_call(firmware *fw,iter_state_t *is, unsigned dis_opts, char *comment, uint32_t target) fw 429 tools/capdis.c if((get_call_const_args(fw,is,6,regs)&1)!=1) { fw 432 tools/capdis.c osig* ostub = find_sig_val(fw->sv->propcases,regs[0]); fw 440 tools/capdis.c void describe_simple_func(firmware *fw, unsigned dis_opts, char *comment, uint32_t target) fw 446 tools/capdis.c if(!check_simple_func(fw, target, MATCH_SIMPLE_FUNC_ANY, &info)) { fw 458 tools/capdis.c int do_dis_branch(firmware *fw, iter_state_t *is, unsigned dis_opts, char *mnem, char *ops, char *comment) fw 460 tools/capdis.c uint32_t target = B_target(fw,is->insn); fw 463 tools/capdis.c target = CBx_target(fw,is->insn); fw 474 tools/capdis.c ostub = find_sig_val(fw->sv->stubs,target|is->thumb); fw 483 tools/capdis.c if(fw_disasm_iter_single(fw,target|is->thumb)) { fw 484 tools/capdis.c j_target=get_direct_jump_target(fw,fw->is); fw 486 tools/capdis.c ostub = find_sig_val(fw->sv->stubs,j_target); fw 509 tools/capdis.c describe_prop_call(fw,is,dis_opts,comment,desc_adr | is->thumb); fw 510 tools/capdis.c describe_simple_func(fw,dis_opts,comment,desc_adr | is->thumb); fw 515 tools/capdis.c int do_dis_call(firmware *fw, iter_state_t *is, unsigned dis_opts, char *mnem, char *ops, char *comment) fw 522 tools/capdis.c uint32_t target = get_branch_call_insn_target(fw,is); // target with thumb bit set appropriately fw 527 tools/capdis.c ostub = find_sig_val(fw->sv->stubs,target); fw 536 tools/capdis.c if(fw_disasm_iter_single(fw,target)) { fw 537 tools/capdis.c j_target=get_direct_jump_target(fw,fw->is); fw 539 tools/capdis.c ostub = find_sig_val(fw->sv->stubs,j_target); fw 563 tools/capdis.c describe_prop_call(fw,is,dis_opts,comment,desc_adr); fw 564 tools/capdis.c describe_simple_func(fw,dis_opts,comment,desc_adr); fw 569 tools/capdis.c firmware *fw, fw 584 tools/capdis.c if(do_dis_branch(fw,is,dis_opts,mnem,ops,comment)) { fw 587 tools/capdis.c if(do_dis_call(fw,is,dis_opts,mnem,ops,comment)) { fw 592 tools/capdis.c uint32_t ad=LDR_PC2adr(fw,insn); fw 593 tools/capdis.c uint32_t *pv=(uint32_t *)adr2ptr(fw,ad); fw 608 tools/capdis.c describe_const_op(fw,dis_opts,comment,ad); fw 613 tools/capdis.c unsigned ad=ADRx2adr(fw,insn); fw 614 tools/capdis.c uint32_t *pv=(uint32_t *)adr2ptr(fw,ad); fw 650 tools/capdis.c describe_const_op(fw,dis_opts,comment,ad); fw 654 tools/capdis.c } else if(get_TBx_PC_info(fw,is,ti)) { fw 663 tools/capdis.c void do_adr_label(firmware *fw, struct llist **branch_list, iter_state_t *is, unsigned dis_opts) fw 671 tools/capdis.c ostub = find_sig_val(fw->sv->stubs,adr|is->thumb); fw 692 tools/capdis.c static void do_tbb_data(firmware *fw, iter_state_t *is, unsigned dis_opts, tbx_info_t *ti) fw 702 tools/capdis.c uint8_t *p=adr2ptr(fw,adr); fw 735 tools/capdis.c uint8_t *p=adr2ptr(fw,adr); fw 746 tools/capdis.c if(!disasm_iter_init(fw,is,adr | is->thumb)) { fw 754 tools/capdis.c static void do_tbh_data(firmware *fw, iter_state_t *is, unsigned dis_opts, tbx_info_t *ti) fw 764 tools/capdis.c uint16_t *p=(uint16_t *)adr2ptr(fw,adr); fw 791 tools/capdis.c if(!disasm_iter_init(fw,is,adr | is->thumb)) { fw 796 tools/capdis.c static void do_tbx_pass1(firmware *fw, iter_state_t *is, struct llist **branch_list, unsigned dis_opts, tbx_info_t *ti) fw 801 tools/capdis.c uint8_t *p=adr2ptr(fw,adr); fw 829 tools/capdis.c if(!disasm_iter_init(fw,is,adr | is->thumb)) { fw 835 tools/capdis.c static void do_tbx_data(firmware *fw, iter_state_t *is, unsigned dis_opts, tbx_info_t *ti) fw 838 tools/capdis.c do_tbb_data(fw,is,dis_opts,ti); fw 840 tools/capdis.c do_tbh_data(fw,is,dis_opts,ti); fw 844 tools/capdis.c static void do_dis_range(firmware *fw, fw 851 tools/capdis.c iter_state_t *is=disasm_iter_new(fw,dis_start); fw 860 tools/capdis.c if(disasm_iter(fw,is)) { fw 861 tools/capdis.c uint32_t b_tgt=get_branch_call_insn_target(fw,is); fw 865 tools/capdis.c } else if(get_TBx_PC_info(fw,is,&ti)) { fw 868 tools/capdis.c do_tbx_pass1(fw,is,branch_list,dis_opts,&ti); fw 871 tools/capdis.c if(!disasm_iter_init(fw,is,(is->adr+is->insn_min_size) | is->thumb)) { fw 880 tools/capdis.c disasm_iter_init(fw,is,dis_start); fw 882 tools/capdis.c if(disasm_iter(fw,is)) { fw 883 tools/capdis.c do_adr_label(fw,branch_list,is,dis_opts); fw 907 tools/capdis.c do_dis_insn(fw,is,dis_opts,insn_mnemonic,insn_ops,comment,&ti); fw 951 tools/capdis.c do_tbx_data(fw,is,dis_opts,&ti); fw 968 tools/capdis.c uint16_t *pv=(uint16_t *)adr2ptr(fw,is->adr); fw 979 tools/capdis.c if(!disasm_iter_init(fw,is,(is->adr+is->insn_min_size)|is->thumb)) { fw 1145 tools/capdis.c firmware fw; fw 1148 tools/capdis.c fw.sv = new_stub_values(); fw 1151 tools/capdis.c load_funcs(fw.sv, stubs_path); fw 1153 tools/capdis.c load_stubs(fw.sv, stubs_path, 1); fw 1155 tools/capdis.c load_stubs(fw.sv, stubs_path, 1); fw 1157 tools/capdis.c load_stubs(fw.sv, stubs_path, 1); // Load second so values override stubs_entry.S fw 1160 tools/capdis.c fw.sv->propcases = NULL; fw 1168 tools/capdis.c load_propcases(fw.sv, props_path); fw 1169 tools/capdis.c if(!fw.sv->propcases) { fw 1173 tools/capdis.c osig *ostub=find_sig(fw.sv->stubs,"SetPropertyCase"); fw 1180 tools/capdis.c ostub=find_sig(fw.sv->stubs,"GetPropertyCase"); fw 1198 tools/capdis.c osig *ostub=find_sig(fw.sv->stubs,dis_start_fn); fw 1248 tools/capdis.c firmware_load(&fw,dumpname,load_addr,dis_arch); fw 1249 tools/capdis.c firmware_init_capstone(&fw); fw 1251 tools/capdis.c firmware_init_data_ranges(&fw); fw 1255 tools/capdis.c if(dis_start < fw.base) { fw 1256 tools/capdis.c adr_range_t *ar=adr_get_range(&fw,dis_start); fw 1268 tools/capdis.c do_dis_range(&fw, dis_start, dis_count, dis_end, dis_end_ret_count, dis_opts); fw 1270 tools/capdis.c firmware_unload(&fw); fw 285 tools/chdk_dasm.c static char * print_ascii_str(firmware *fw, char *op, t_value w) fw 287 tools/chdk_dasm.c if (isASCIIstring(fw, w)) fw 290 tools/chdk_dasm.c char *p = adr2ptr(fw, w); fw 322 tools/chdk_dasm.c static char * xhex8(firmware *fw, char * op, t_value w) fw 354 tools/chdk_dasm.c op = print_ascii_str(fw, op, w); fw 363 tools/chdk_dasm.c static char * ahex8(firmware *fw, char * op, t_value w) fw 371 tools/chdk_dasm.c return xhex8(fw, op, w); fw 376 tools/chdk_dasm.c static char * yhex8(firmware *fw, char * op, t_value w) fw 384 tools/chdk_dasm.c op = print_ascii_str(fw, op, w); fw 390 tools/chdk_dasm.c static char * sub_hex8(firmware *fw, char * op, t_value w) fw 398 tools/chdk_dasm.c if (w >= fw->base) fw 399 tools/chdk_dasm.c w = followBranch(fw,w,1); fw 400 tools/chdk_dasm.c osig *o = find_sig_val_by_type(fw->sv->stubs, w, TYPE_NHSTUB); fw 426 tools/chdk_dasm.c t_value v = fwval(fw,adr2idx(fw,w)); fw 459 tools/chdk_dasm.c static char * sub_ahex8(firmware *fw, char * op, t_value w) fw 467 tools/chdk_dasm.c w = fwval(fw,adr2idx(fw,w)); fw 468 tools/chdk_dasm.c return sub_hex8(fw, op, w); fw 567 tools/chdk_dasm.c extern pInstruction instr_disassemble(firmware *fw, t_value instr, t_address addr, pDisOptions opts) { fw 994 tools/chdk_dasm.c op = sub_hex8(fw, op, result.instr); fw 997 tools/chdk_dasm.c op = yhex8(fw, op, result.instr); fw 1037 tools/chdk_dasm.c op = sub_hex8(fw, op, target); fw 1086 tools/chdk_dasm.c op = yhex8(fw, op, n); fw 1101 tools/chdk_dasm.c op = xhex8(fw, op, a); fw 1236 tools/chdk_dasm.c op = sub_ahex8(fw, result.addrstart, result.target); fw 1238 tools/chdk_dasm.c op = ahex8(fw, result.addrstart, result.target); fw 1283 tools/chdk_dasm.c void disassemble1(firmware *fw, t_address start, t_value length) fw 1302 tools/chdk_dasm.c w = fwval(fw,adr2idx(fw,addr)); fw 1314 tools/chdk_dasm.c w = fwval(fw,adr2idx(fw,addr)); fw 1315 tools/chdk_dasm.c instr_disassemble(fw, w, addr, &options); fw 1328 tools/chdk_dasm.c void disassemble(firmware *fw, FILE *outfile, t_address start, t_value length) fw 1340 tools/chdk_dasm.c w = fwval(fw,adr2idx(fw,addr)); fw 1342 tools/chdk_dasm.c pInstruction instr = instr_disassemble(fw, w, addr, &options); fw 1430 tools/chdk_dasm.c t_address find_end(firmware *fw, t_address start) fw 1433 tools/chdk_dasm.c start = adr2idx(fw,start); fw 1435 tools/chdk_dasm.c if ((fwval(fw,start+1) & 0xFFFF4000) == 0xE92D4000) // STMFD SP!, {...,LR} fw 1440 tools/chdk_dasm.c if ((fwval(fw,start) & 0xFF000000) == 0xEA000000) // B fw 1442 tools/chdk_dasm.c return idx2adr(fw,start); fw 1444 tools/chdk_dasm.c if ((fwval(fw,start) & 0xFFFF8000) == 0xE8BD8000) // LDMFD SP!, {...,PC} fw 1446 tools/chdk_dasm.c return idx2adr(fw,start); fw 1448 tools/chdk_dasm.c if ((fwval(fw,start) & 0xFFFFFFF0) == 0xE12FFF10) // BX fw 1450 tools/chdk_dasm.c return idx2adr(fw,start); fw 1452 tools/chdk_dasm.c if ((fwval(fw,start) & 0xFFFFF000) == 0xE49DF000) // LDR PC,[SP,... fw 1454 tools/chdk_dasm.c return idx2adr(fw,start); fw 88 tools/chdk_dasm.h t_address find_end(firmware *fw, t_address start); fw 89 tools/chdk_dasm.h void disassemble1(firmware *fw, t_address start, t_value length); fw 90 tools/chdk_dasm.h void disassemble(firmware *fw, FILE *outfile, t_address start, t_value length); fw 316 tools/code_gen.c firmware *fw; fw 616 tools/code_gen.c osig *sig = find_sig(fw->sv->stubs, largs[++n]); fw 889 tools/code_gen.c p->func_end = find_end(fw, p->func_start); fw 910 tools/code_gen.c disassemble1(fw, p->func_start, p->func_len); fw 944 tools/code_gen.c disassemble(fw, outfile, start_address, (end_address + 4 - start_address) / 4); fw 960 tools/code_gen.c disassemble(fw, outfile, addr, 1); fw 975 tools/code_gen.c disassemble(fw, outfile, addr, 1); fw 990 tools/code_gen.c disassemble(fw, outfile, addr, 1); fw 1168 tools/code_gen.c fw = malloc(sizeof(firmware)); fw 1169 tools/code_gen.c load_firmware(fw, av[3], av[1], (ac==5)?av[4]:0, OS_DRYOS); fw 1172 tools/code_gen.c fw->sv = new_stub_values(); fw 1173 tools/code_gen.c load_funcs(fw->sv, "funcs_by_name.csv"); fw 1174 tools/code_gen.c load_stubs(fw->sv, "stubs_entry.S", 0); fw 1175 tools/code_gen.c load_stubs(fw->sv, "stubs_entry_2.S", 0); // Load second so values override stubs_entry.S fw 165 tools/finsig_dryos.c void fwAddMatch(firmware *fw, uint32_t fadr, int s, int f, int sig) fw 167 tools/finsig_dryos.c if ((fadr >= fw->base_copied) && (fadr < (fw->base_copied + fw->size2*4))) fw 169 tools/finsig_dryos.c addMatch(fadr - fw->base_copied + fw->base2,s,f,sig); fw 565 tools/finsig_dryos.c int get_saved_sig(firmware *fw, const char *name) fw 579 tools/finsig_dryos.c find_matches(fw, name); fw 586 tools/finsig_dryos.c find_str_sig_matches(fw, name); fw 603 tools/finsig_dryos.c int search_saved_sig(firmware *fw, char *sig, int (*func)(firmware*, int, int), int v, int ofst, int len) fw 605 tools/finsig_dryos.c int k = get_saved_sig(fw, sig); fw 608 tools/finsig_dryos.c int idx = adr2idx(fw, func_names[k].val); fw 611 tools/finsig_dryos.c int rv = func(fw, k, v); fw 712 tools/finsig_dryos.c int match_apex2us(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 714 tools/finsig_dryos.c if (isLDR_PC(fw,k) && (LDR2val(fw,k) == v1) && ((fwRd(fw,k) == 1) || (fwRd(fw,k) == 2))) fw 716 tools/finsig_dryos.c k = find_inst_rev(fw, isSTMFD_LR, k, 200); fw 719 tools/finsig_dryos.c if (fwval(fw,k-2) == 0xE3700D09) // CMN R0, #0x240 fw 721 tools/finsig_dryos.c uint32_t fadr = idx2adr(fw,k); fw 722 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,121); fw 728 tools/finsig_dryos.c int match_apex2us2(firmware *fw, int k, uint32_t v1, uint32_t v2) // r52+? fw 730 tools/finsig_dryos.c if (isLDR_PC(fw,k) && (LDR2val(fw,k) == v1) && ((fwRd(fw,k) == 1) || (fwRd(fw,k) == 2))) fw 732 tools/finsig_dryos.c k = find_inst_rev(fw, isSTMFD_LR, k, 200); fw 735 tools/finsig_dryos.c if (fwval(fw,k+1) != 0xe3700d0f) // CMN R0, #0x3c0 fw 737 tools/finsig_dryos.c uint32_t fadr = idx2adr(fw,k); fw 738 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,121); fw 744 tools/finsig_dryos.c int find_apex2us(firmware *fw, string_sig *sig, int j) fw 750 tools/finsig_dryos.c if (fwval(fw,j+i) != apex2us_test[i]) fw 758 tools/finsig_dryos.c return search_fw(fw, match_apex2us, idx2adr(fw,j), 0, 1); fw 763 tools/finsig_dryos.c if (fwval(fw,j+i) != apex2us_test2[i]) fw 768 tools/finsig_dryos.c return search_fw(fw, match_apex2us2, idx2adr(fw,j), 0, 1); fw 772 tools/finsig_dryos.c int find_mkdir(firmware *fw, string_sig *sig, int k) fw 774 tools/finsig_dryos.c if (fwval(fw,k) == 0x12CEA600) fw 777 tools/finsig_dryos.c if (fw->dryos_ver > 58) fw 785 tools/finsig_dryos.c k = find_inst_rev(fw, isSTMFD_LR, kk, 200); fw 788 tools/finsig_dryos.c if ((((fwval(fw,k+12) & 0xFFF0FFFF) == 0xE350002F) && ((fwval(fw,k+15) & 0xFFF0FFFF) == 0xE3500021) && ((fwval(fw,k+19) & 0xFFF0FFFF) == 0xE3500020)) || fw 789 tools/finsig_dryos.c (((fwval(fw,k+11) & 0xFFF0FFFF) == 0xE350002F) && ((fwval(fw,k+14) & 0xFFF0FFFF) == 0xE3500021) && ((fwval(fw,k+18) & 0xFFF0FFFF) == 0xE3500020))) fw 792 tools/finsig_dryos.c if (isBL(fw,k+47)) fw 794 tools/finsig_dryos.c fadr = followBranch(fw, idx2adr(fw,k+47), 0x01000001); fw 796 tools/finsig_dryos.c else if (isBL(fw,k+48)) fw 798 tools/finsig_dryos.c fadr = followBranch(fw, idx2adr(fw,k+48), 0x01000001); fw 802 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,121); fw 812 tools/finsig_dryos.c int find_pow(firmware *fw, string_sig *sig, int j) fw 815 tools/finsig_dryos.c if ((fwval(fw,j) == 0x00000000) && (fwval(fw,j+1) == 0x40000000) && (fwval(fw,j+2) == 0x00000000) && (fwval(fw,j+3) == 0x408F4000)) fw 817 tools/finsig_dryos.c uint32_t adr1 = idx2adr(fw,j); // address of 1st value fw 818 tools/finsig_dryos.c uint32_t adr2 = idx2adr(fw,j+2); // address of 2nd value fw 823 tools/finsig_dryos.c if (isADR_PC_cond(fw,j1) && // ADR ? fw 824 tools/finsig_dryos.c (fwval(fw,j1+1) == 0xE8900003) && // LDMIA R0,{R0,R1} fw 825 tools/finsig_dryos.c isBL(fw,j1+2) && // BL fw 826 tools/finsig_dryos.c isADR_PC_cond(fw,j1+4)) // ADR ? fw 828 tools/finsig_dryos.c if ((ADR2adr(fw,j1) == adr1) && (ADR2adr(fw,j1+4) == adr2)) fw 830 tools/finsig_dryos.c uint32_t fadr = followBranch(fw,idx2adr(fw,j1+2),0x01000001); fw 831 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,121); fw 836 tools/finsig_dryos.c if (isADR_PC_cond(fw,j1) && // ADR ? fw 837 tools/finsig_dryos.c (fwval(fw,j1+2) == 0xE8900003) && // LDMIA R0,{R0,R1} fw 838 tools/finsig_dryos.c isBL(fw,j1+3) && // BL fw 839 tools/finsig_dryos.c isADR_PC_cond(fw,j1+4)) // ADR ? fw 841 tools/finsig_dryos.c if ((ADR2adr(fw,j1) == adr1) && (ADR2adr(fw,j1+4) == adr2)) fw 843 tools/finsig_dryos.c uint32_t fadr = followBranch(fw,idx2adr(fw,j1+3),0x01000001); fw 844 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,121); fw 855 tools/finsig_dryos.c int find_rand(firmware *fw, string_sig *sig, int j) fw 857 tools/finsig_dryos.c if (fwval(fw,j) == 0x41C64E6D) fw 863 tools/finsig_dryos.c if (isLDR_PC_cond(fw,j1) && // LDR Rx, =0x41C64E6D fw 864 tools/finsig_dryos.c (LDR2val(fw,j1) == 0x41C64E6D)) // LDMIA R0,{R0,R1} fw 866 tools/finsig_dryos.c int k = find_inst_rev(fw, isBX_LR,j1-1,15); fw 869 tools/finsig_dryos.c uint32_t fadr = idx2adr(fw, k+1); fw 870 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,121); fw 880 tools/finsig_dryos.c int get_ptp_file_buf_id(firmware *fw) { fw 882 tools/finsig_dryos.c if(fw->dryos_ver >= 43 && fw->dryos_ver <= 52) { fw 890 tools/finsig_dryos.c int find_get_ptp_file_buf(firmware *fw, string_sig *sig, int j) fw 900 tools/finsig_dryos.c if(!(isMOV_immed(fw,j) fw 901 tools/finsig_dryos.c && (fwRn(fw,j) == 0) fw 902 tools/finsig_dryos.c && isBL(fw,j+1) fw 903 tools/finsig_dryos.c && ((fwval(fw,j+2) & 0xFFF00000) == 0xe3C00000) // BIC fw 904 tools/finsig_dryos.c && (ALUop2(fw,j+2) == 1) fw 905 tools/finsig_dryos.c && isMOV_immed(fw,j+3) fw 906 tools/finsig_dryos.c && (fwRn(fw,j+3) == 0) fw 907 tools/finsig_dryos.c && isBL(fw,j+4))) { fw 910 tools/finsig_dryos.c int file_buf_id = get_ptp_file_buf_id(fw); fw 911 tools/finsig_dryos.c if(ALUop2(fw,j) != file_buf_id || ALUop2(fw,j+3) != file_buf_id) { fw 914 tools/finsig_dryos.c uint32_t f1 = followBranch(fw,idx2adr(fw,j+1),0x01000001); fw 915 tools/finsig_dryos.c int i = get_saved_sig(fw,"get_ptp_buf_size"); fw 927 tools/finsig_dryos.c int k = find_inst_rev(fw, isSTMFD_LR, j-1, 8); fw 933 tools/finsig_dryos.c uint32_t fadr = idx2adr(fw, k); fw 934 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,121); fw 941 tools/finsig_dryos.c int find_closedir(firmware *fw) fw 943 tools/finsig_dryos.c int j = get_saved_sig(fw,"OpenFastDir"); fw 946 tools/finsig_dryos.c int k = find_inst(fw, isSTMFD_LR, adr2idx(fw,func_names[j].val)+1, 100); fw 947 tools/finsig_dryos.c if (isB(fw,k-1) && isBL(fw,k-2)) fw 949 tools/finsig_dryos.c uint32_t fadr = followBranch(fw, idx2adr(fw, k-2), 0x01000001); fw 950 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,121); fw 959 tools/finsig_dryos.c int find_get_fstype(firmware *fw) fw 961 tools/finsig_dryos.c int j = get_saved_sig(fw,"OpenFastDir"); fw 964 tools/finsig_dryos.c int k = find_Nth_inst(fw, isBL, adr2idx(fw,func_names[j].val)+1, 6, 2); fw 968 tools/finsig_dryos.c if ( (fwval(fw, k+1) & 0xffff0fff) != 0xe1b00000 ) // movs rx, r0 fw 971 tools/finsig_dryos.c uint32_t cmpinst = ((fwval(fw, k+1) & 0x0000f000)<<4) + 0xe3500004; // cmp rx, #4 fw 976 tools/finsig_dryos.c if ( fwval(fw, k+1+l) == cmpinst ) fw 982 tools/finsig_dryos.c uint32_t fadr = followBranch(fw, idx2adr(fw, k), 0x01000001); fw 983 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,122); fw 992 tools/finsig_dryos.c int find_Restart(firmware *fw) fw 994 tools/finsig_dryos.c int j = get_saved_sig(fw,"reboot_fw_update"); fw 997 tools/finsig_dryos.c int k = get_saved_sig(fw,"StopWDT_FW"); fw 1000 tools/finsig_dryos.c j = adr2idx(fw, func_names[j].val); fw 1004 tools/finsig_dryos.c if (isBL(fw,i) && isBL(fw,i+2)) fw 1007 tools/finsig_dryos.c uint32_t fadr = followBranch(fw, idx2adr(fw, i), 0x01000001); fw 1010 tools/finsig_dryos.c fadr = followBranch(fw, idx2adr(fw, i+2), 0x01000001); fw 1011 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,122); fw 1023 tools/finsig_dryos.c int find_add_ptp_handler(firmware *fw, string_sig *sig, int k) fw 1029 tools/finsig_dryos.c while ((vals[i] != 0) && isLDR_PC(fw,k) && (fwRd(fw,k) == 0) && (LDR2val(fw,k) == vals[i])) fw 1031 tools/finsig_dryos.c k = find_inst(fw, isBL, k+1, 5); fw 1034 tools/finsig_dryos.c fadr = followBranch(fw, idx2adr(fw,k), 0x01000001); fw 1035 tools/finsig_dryos.c k = find_inst(fw, isLDR_PC, k+1, 5); fw 1042 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,121); fw 1050 tools/finsig_dryos.c int find_PT_PlaySound(firmware *fw) fw 1053 tools/finsig_dryos.c int k1 = get_saved_sig(fw,"LogCameraEvent"); fw 1057 tools/finsig_dryos.c j = find_str_ref(fw,"BufAccBeep"); fw 1060 tools/finsig_dryos.c k = find_inst(fw, isBL, j+1, 4); fw 1063 tools/finsig_dryos.c uint32_t fadr = followBranch(fw, idx2adr(fw,k), 0x01000001); fw 1066 tools/finsig_dryos.c k = find_inst(fw, isB, k+1, 10); fw 1067 tools/finsig_dryos.c fadr = followBranch(fw, idx2adr(fw, k), 1); fw 1068 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,122); fw 1079 tools/finsig_dryos.c int find_getImageDirName(firmware *fw) fw 1081 tools/finsig_dryos.c int k = find_str_ref(fw,"%3d_%02d%02d"); fw 1084 tools/finsig_dryos.c k = find_inst_rev(fw, isLDMFD_PC, k-1, 16); fw 1087 tools/finsig_dryos.c uint32_t fadr = idx2adr(fw,k+1); fw 1088 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,122); fw 1094 tools/finsig_dryos.c k = find_str_ref(fw,"___%02d"); fw 1097 tools/finsig_dryos.c k = find_inst_rev(fw, isLDMFD_PC, k-1, 18); fw 1100 tools/finsig_dryos.c if (isMOV(fw,k+1) && isMOV(fw,k+2)) // sanity check fw 1102 tools/finsig_dryos.c uint32_t fadr = idx2adr(fw,k+1); fw 1103 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,122); fw 1115 tools/finsig_dryos.c int match_GetImageFolder(firmware *fw, int k, uint32_t a_getImageDirName, uint32_t a_TakeSemaphore) fw 1119 tools/finsig_dryos.c if (isBL(fw,k)) fw 1121 tools/finsig_dryos.c uint32_t fadr = followBranch2(fw,idx2adr(fw,k),0x01000001); fw 1124 tools/finsig_dryos.c int s = find_inst_rev(fw, isSTMFD_LR, k-1, 80); fw 1125 tools/finsig_dryos.c int e = find_inst(fw, isLDMFD_PC, k+1, 80); fw 1131 tools/finsig_dryos.c if (isBL(fw,k1)) fw 1133 tools/finsig_dryos.c fadr = followBranch2(fw,idx2adr(fw,k1),0x01000001); fw 1145 tools/finsig_dryos.c if ((isLDR_PC(fw,k1) || isADR_PC(fw,k1)) && (idx2adr(fw,k1) == strGIF)) fw 1154 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,s),32,0,122); fw 1162 tools/finsig_dryos.c int find_GetImageFolder(firmware *fw) fw 1164 tools/finsig_dryos.c int j = find_str_ref(fw,"GetCameraObjectTmpPath ERROR[ID:%lx] [TRY:%lx]\n"); fw 1166 tools/finsig_dryos.c j = find_str_ref(fw,"_GetCameraObjectTmpPath ERROR[ID:%lx] [TRY:%lx]\n"); fw 1169 tools/finsig_dryos.c strGIF = idx2adr(fw,j); fw 1170 tools/finsig_dryos.c int j = get_saved_sig(fw,"TakeSemaphore"); fw 1171 tools/finsig_dryos.c int k = get_saved_sig(fw,"getImageDirName"); fw 1174 tools/finsig_dryos.c return search_fw(fw, match_GetImageFolder, func_names[k].val, func_names[j].val, 1); fw 1182 tools/finsig_dryos.c int match_GetDrive_ClusterSize(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 1184 tools/finsig_dryos.c if (isBL_cond(fw,k)) fw 1186 tools/finsig_dryos.c uint32_t fadr = followBranch2(fw,idx2adr(fw,k),0xF1000001); fw 1190 tools/finsig_dryos.c if (isLDR_cond(fw,k-1) && idx_valid(fw,adr2idx(fw,LDR2val(fw,k-1))) && (strcmp(adr2ptr(fw,LDR2val(fw,k-1)),"Mounter.c") == 0)) fw 1194 tools/finsig_dryos.c else if (isLDR_cond(fw,k-2) && idx_valid(fw,adr2idx(fw,LDR2val(fw,k-2))) && (strcmp(adr2ptr(fw,LDR2val(fw,k-2)),"Mounter.c") == 0)) fw 1198 tools/finsig_dryos.c else if (isLDR_cond(fw,k-3) && idx_valid(fw,adr2idx(fw,LDR2val(fw,k-3))) && (strcmp(adr2ptr(fw,LDR2val(fw,k-3)),"Mounter.c") == 0)) fw 1202 tools/finsig_dryos.c else if (isADR_PC_cond(fw,k-1) && (strcmp(adr2ptr(fw,ADR2adr(fw,k-1)),"Mounter.c") == 0)) fw 1206 tools/finsig_dryos.c else if (isADR_PC_cond(fw,k-2) && (strcmp(adr2ptr(fw,ADR2adr(fw,k-2)),"Mounter.c") == 0)) fw 1211 tools/finsig_dryos.c isLDR_PC(fw,k+1) && fw 1212 tools/finsig_dryos.c ((fwval(fw,k+2) & 0xFFF00FF0) == 0xE0800200) && ((fwval(fw,k+3) & 0xFFF00FF0) == 0xE0800100) && fw 1213 tools/finsig_dryos.c (fwval(fw,k+4) == 0xE5901004) && (fwval(fw,k+5) == 0xE5900008) && (fwval(fw,k+6) == 0xE0000091) && fw 1214 tools/finsig_dryos.c isLDMFD_PC(fw,k+7)) fw 1216 tools/finsig_dryos.c k = find_inst_rev(fw,isSTMFD_LR,k-1,8); fw 1219 tools/finsig_dryos.c if (fwval(fw,k-1) == 0xE3500001) // CMP R0, #1 fw 1221 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,k),32,0,122); fw 1230 tools/finsig_dryos.c int find_GetDrive_ClusterSize(firmware *fw) fw 1232 tools/finsig_dryos.c int k = get_saved_sig(fw,"DebugAssert"); fw 1235 tools/finsig_dryos.c return search_fw(fw, match_GetDrive_ClusterSize, func_names[k].val, 0, 16); fw 1241 tools/finsig_dryos.c int find_GetDrive_TotalClusters(firmware *fw) fw 1243 tools/finsig_dryos.c extern uint32_t find_str_bytes(firmware *fw, char *str); fw 1245 tools/finsig_dryos.c if (fw->dryos_ver < 52) fw 1247 tools/finsig_dryos.c uint32_t j = find_str_bytes(fw,"DriveLetterManager.c"); fw 1250 tools/finsig_dryos.c int k = adr2idx(fw,j); fw 1251 tools/finsig_dryos.c k = find_inst_rev(fw,isLDMFD_PC,k-1,2); fw 1252 tools/finsig_dryos.c if ((k > 0) && ( (fwval(fw,k-1)&0xfffff0f0)==0xe0810090 )) // umull r0, r1, rx, ry fw 1254 tools/finsig_dryos.c if (isBL(fw,k-2)) fw 1256 tools/finsig_dryos.c k = idxFollowBranch(fw,k-2,0x01000001); fw 1257 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,k),32,0,122); fw 1267 tools/finsig_dryos.c int find_srand(firmware *fw) fw 1269 tools/finsig_dryos.c int k = get_saved_sig(fw,"rand"); fw 1272 tools/finsig_dryos.c k = adr2idx(fw, func_names[k].val) - 3; fw 1273 tools/finsig_dryos.c if (isLDR_PC(fw,k) && isSTR(fw,k+1) && isBX_LR(fw,k+2)) fw 1274 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,k),32,0,122); fw 1280 tools/finsig_dryos.c int find_malloc_strictly(firmware *fw) fw 1283 tools/finsig_dryos.c int s1 = find_str(fw,"Size: %ld"); fw 1284 tools/finsig_dryos.c int s2 = find_str(fw,"Memory.c"); fw 1285 tools/finsig_dryos.c int f1 = get_saved_sig(fw,"malloc"); fw 1289 tools/finsig_dryos.c s1 = find_Nth_str(fw,"Size: %ld",2); // this string has multiple instances, try the next one fw 1290 tools/finsig_dryos.c f1 = adr2idx(fw, func_names[f1].val); fw 1292 tools/finsig_dryos.c int r1 = find_nxt_str_ref(fw, s1, 0); fw 1293 tools/finsig_dryos.c int r2 = find_nxt_str_ref(fw, s2, 0); fw 1299 tools/finsig_dryos.c int m1 = find_inst_rev(fw,isBL,r1,6); fw 1302 tools/finsig_dryos.c int m2 = idxFollowBranch(fw,m1,0x01000001); fw 1305 tools/finsig_dryos.c m1 = find_inst_rev(fw,isSTMFD_LR,m1,3); fw 1308 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,m1),32,0,122); fw 1314 tools/finsig_dryos.c r1 = find_nxt_str_ref(fw, s1, r1+1); fw 1315 tools/finsig_dryos.c r2 = find_nxt_str_ref(fw, s2, r2+1); fw 1323 tools/finsig_dryos.c int find_DisplayBusyOnScreen(firmware *fw) fw 1326 tools/finsig_dryos.c int s1 = find_str(fw,"ErrorMessageController.c"); fw 1327 tools/finsig_dryos.c int s2 = find_str(fw,"StrMan.c"); fw 1329 tools/finsig_dryos.c s1 = find_str(fw,"MessageController.c"); fw 1330 tools/finsig_dryos.c int j = find_str_ref(fw,"_PBBusyScrn"); fw 1332 tools/finsig_dryos.c j = find_str_ref(fw,"_PlayBusyScreen"); fw 1336 tools/finsig_dryos.c int m1 = find_Nth_inst(fw,isBL,j+1,12,fw->dryos_ver<54?4:fw->dryos_ver==59?2:3); fw 1339 tools/finsig_dryos.c if (fw->dryos_ver == 58) fw 1342 tools/finsig_dryos.c m1 = find_inst(fw,isB,j+1,12); fw 1345 tools/finsig_dryos.c m2 = idxFollowBranch(fw,m1,0x00000001); fw 1346 tools/finsig_dryos.c k = find_nxt_str_ref(fw, s1, m2); fw 1353 tools/finsig_dryos.c else if (fw->dryos_ver == 57) fw 1359 tools/finsig_dryos.c if ((fwval(fw,m1+k) & 0xFE1FF000) == 0xE41F0000) // ldr r0, =func fw 1361 tools/finsig_dryos.c uint32_t u1 = LDR2val(fw, m1+k); fw 1362 tools/finsig_dryos.c if ( u1 > fw->base ) fw 1364 tools/finsig_dryos.c if (isSTMFD_LR(fw, adr2idx(fw, u1))) fw 1367 tools/finsig_dryos.c m2 = adr2idx(fw, u1); fw 1368 tools/finsig_dryos.c k = find_nxt_str_ref(fw, s1, m2); fw 1381 tools/finsig_dryos.c m2 = idxFollowBranch(fw,m1,0x01000001); fw 1382 tools/finsig_dryos.c k = find_nxt_str_ref(fw, s1, m2); fw 1386 tools/finsig_dryos.c m1 = find_inst(fw,isBL,m1+1,4); fw 1387 tools/finsig_dryos.c m2 = idxFollowBranch(fw,m1,0x01000001); fw 1388 tools/finsig_dryos.c k = find_nxt_str_ref(fw, s1, m2); fw 1396 tools/finsig_dryos.c idx_createdialogbox = find_inst_rev(fw, isBL, k-1, 4); fw 1398 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,m2),32,0,122); fw 1400 tools/finsig_dryos.c idx_adduitodialog = find_inst(fw, isBL, k+1, 7); fw 1405 tools/finsig_dryos.c if (isBL(fw,m3)&&isBL(fw,m3+2)&& fw 1406 tools/finsig_dryos.c (((fwval(fw,m3+1)&0xfffff000)==0xe3a00000)||((fwval(fw,m3+1)&0xff7ff000)==0xe51f0000))) fw 1410 tools/finsig_dryos.c int m4 = idxFollowBranch(fw,m30,0x01000001); fw 1414 tools/finsig_dryos.c int m5 = find_inst(fw, isLDMFD_PC, m4+1, 64); fw 1415 tools/finsig_dryos.c int m6 = find_nxt_str_ref(fw, s2, m4); fw 1422 tools/finsig_dryos.c m5 = find_inst(fw, isADR_PC, m4+1, 10); fw 1425 tools/finsig_dryos.c uint32_t u1 = ADR2adr(fw, m5); fw 1426 tools/finsig_dryos.c if (fwval(fw, adr2idx(fw, u1)) == 0x00000020) fw 1435 tools/finsig_dryos.c if (fw->dryos_ver < 54) fw 1437 tools/finsig_dryos.c m3 = find_inst(fw, isLDMFD_PC, k+30, 64); fw 1440 tools/finsig_dryos.c m3 = find_Nth_inst_rev(fw, isBL, m3-1, 8, 2); fw 1449 tools/finsig_dryos.c m3 = find_inst(fw, isLDMFD, k+30, 20); fw 1452 tools/finsig_dryos.c m3 = find_inst_rev(fw, isBL, m3-1, 4); fw 1466 tools/finsig_dryos.c int find_UndisplayBusyOnScreen(firmware *fw) fw 1468 tools/finsig_dryos.c if (get_saved_sig(fw,"DisplayBusyOnScreen") < 0) return 0; fw 1470 tools/finsig_dryos.c if (fw->dryos_ver > 57) fw 1472 tools/finsig_dryos.c j = find_str_ref(fw,"_PBBusyScrnToCtrlSrvTask"); fw 1476 tools/finsig_dryos.c j = find_str_ref(fw,"_PBBusyScrn"); fw 1479 tools/finsig_dryos.c j = find_str_ref(fw,"_PlayBusyScreen"); fw 1481 tools/finsig_dryos.c if (fw->dryos_ver < 57) fw 1488 tools/finsig_dryos.c int n = find_Nth_inst(fw, isSTMFD_LR, idx_createdialogbox + 30, 140, m+1); fw 1491 tools/finsig_dryos.c uint32_t a1 = idx2adr(fw,n); fw 1497 tools/finsig_dryos.c if (isBL_cond(fw,k)&&(idx2adr(fw,idxFollowBranch(fw,k,0xe1000001))==a1)) // BLEQ fw 1499 tools/finsig_dryos.c fwAddMatch(fw,a1,32,0,122); fw 1510 tools/finsig_dryos.c int m1 = find_Nth_inst(fw,isBLEQ,j+1,20,1); fw 1517 tools/finsig_dryos.c if ((fwval(fw,m1+k) & 0xFE1FF000) == 0x041F0000) // ldreq r0, =func fw 1519 tools/finsig_dryos.c uint32_t u1 = LDR2val(fw, m1+k); fw 1520 tools/finsig_dryos.c if ( u1 > fw->base ) fw 1522 tools/finsig_dryos.c if (isSTMFD_LR(fw, adr2idx(fw, u1))) fw 1524 tools/finsig_dryos.c fwAddMatch(fw,u1,32,0,122); fw 1535 tools/finsig_dryos.c int find_CreateDialogBox(firmware *fw) fw 1537 tools/finsig_dryos.c if (get_saved_sig(fw,"DisplayBusyOnScreen") < 0) return 0; fw 1540 tools/finsig_dryos.c int n = idxFollowBranch(fw,idx_createdialogbox,0x01000001); fw 1543 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,n),32,0,122); fw 1549 tools/finsig_dryos.c int find_DisplayDialogBox(firmware *fw) fw 1551 tools/finsig_dryos.c if (get_saved_sig(fw,"DisplayBusyOnScreen") < 0) return 0; fw 1554 tools/finsig_dryos.c int n = idxFollowBranch(fw,idx_displaydialogbox,0x01000001); fw 1557 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,n),32,0,122); fw 1563 tools/finsig_dryos.c int find_add_ui_to_dialog(firmware *fw) fw 1565 tools/finsig_dryos.c if (get_saved_sig(fw,"DisplayBusyOnScreen") < 0) return 0; fw 1568 tools/finsig_dryos.c int n = idxFollowBranch(fw,idx_adduitodialog,0x01000001); fw 1571 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,n),32,0,122); fw 1577 tools/finsig_dryos.c int find_get_string_by_id(firmware *fw) fw 1579 tools/finsig_dryos.c if (get_saved_sig(fw,"DisplayBusyOnScreen") < 0) return 0; fw 1582 tools/finsig_dryos.c int n = idxFollowBranch(fw,idx_getstring,0x01000001); fw 1585 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,n),32,0,122); fw 1592 tools/finsig_dryos.c int find_get_self_task_errno_pointer(firmware *fw) fw 1594 tools/finsig_dryos.c int f1 = get_saved_sig(fw,"malloc"); fw 1595 tools/finsig_dryos.c int f2 = get_saved_sig(fw,"close"); fw 1598 tools/finsig_dryos.c f1 = adr2idx(fw, func_names[f1].val); fw 1599 tools/finsig_dryos.c f1 = find_inst(fw, isLDMFD_PC, f1, 24); fw 1602 tools/finsig_dryos.c f1 = find_inst_rev(fw, isBL, f1, 6); fw 1605 tools/finsig_dryos.c if (fwval(fw,f1+2) == 0xe5801000) // str r1, [r0] fw 1607 tools/finsig_dryos.c f1 = idxFollowBranch(fw,f1,0x01000001); fw 1608 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,f1),32,0,122); fw 1614 tools/finsig_dryos.c f1 = adr2idx(fw, func_names[f2].val); fw 1615 tools/finsig_dryos.c f1 = find_Nth_inst(fw, isBL, f1, 8, 2); // second BL fw 1618 tools/finsig_dryos.c if (fwval(fw,f1+2) == 0xe5801000) // str r1, [r0] fw 1620 tools/finsig_dryos.c f1 = idxFollowBranch(fw,f1,0x01000001); fw 1621 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,f1),32,0,122); fw 1628 tools/finsig_dryos.c int find_get_nd_value(firmware *fw) fw 1631 tools/finsig_dryos.c int f1 = get_saved_sig(fw,"PutInNdFilter_FW"); fw 1632 tools/finsig_dryos.c int f2 = get_saved_sig(fw,"ClearEventFlag"); fw 1638 tools/finsig_dryos.c f1 = adr2idx(fw, func_names[f1].val); fw 1639 tools/finsig_dryos.c f2 = adr2idx(fw, func_names[f2].val); fw 1640 tools/finsig_dryos.c int k1 = find_Nth_inst(fw,isBL,f1,10,2); fw 1641 tools/finsig_dryos.c int k2 = find_inst(fw,isBL,f1,6); fw 1646 tools/finsig_dryos.c if ( followBranch2(fw,idx2adr(fw,k2),0x01000001) != idx2adr(fw,f2) ) // ClearEventFlag? fw 1648 tools/finsig_dryos.c k1 = idxFollowBranch(fw,k1,0x01000001); // PutInNdFilter_low fw 1649 tools/finsig_dryos.c k2 = find_inst(fw,isBL,k1,6); fw 1657 tools/finsig_dryos.c uint32_t v1 = fwval(fw, k3); fw 1663 tools/finsig_dryos.c k2 = idxFollowBranch(fw,k2,0x01000001); fw 1664 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,k2),32,0,122); fw 1672 tools/finsig_dryos.c int find_get_current_nd_value_iris(firmware *fw) fw 1675 tools/finsig_dryos.c if(get_saved_sig(fw,"task_Nd") < 0 || get_saved_sig(fw,"task_IrisEvent") < 0) { fw 1678 tools/finsig_dryos.c int f1 = get_saved_sig(fw,"get_current_exp"); fw 1682 tools/finsig_dryos.c f1 = adr2idx(fw, func_names[f1].val); fw 1690 tools/finsig_dryos.c if(isBL_cond(fw,f1+i)) { fw 1692 tools/finsig_dryos.c } else if(isBL(fw,f1+i)) { fw 1697 tools/finsig_dryos.c if(!isBL(fw,f1+i)) { fw 1702 tools/finsig_dryos.c int f2 = idxFollowBranch(fw,f1+i,0x01000001); fw 1704 tools/finsig_dryos.c if(isMOV(fw,f2) && (fwRd(fw,f2) == 0) && (fwOp2(fw,f2) == 0)) // MOV R0, 0 fw 1707 tools/finsig_dryos.c if(isB(fw,f2)) { fw 1708 tools/finsig_dryos.c f2 = idxFollowBranch(fw,f2,0x00000001); fw 1710 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,f2),32,0,122); fw 1717 tools/finsig_dryos.c int find_get_current_nd_value(firmware *fw) fw 1721 tools/finsig_dryos.c if(find_str(fw, "IrisSpecification.c") < 0) { fw 1722 tools/finsig_dryos.c return find_get_current_nd_value_iris(fw); fw 1725 tools/finsig_dryos.c int f1 = get_saved_sig(fw,"GetCurrentAvValue"); fw 1729 tools/finsig_dryos.c f1 = adr2idx(fw, func_names[f1].val); fw 1734 tools/finsig_dryos.c int sadr = find_str(fw, "IrisController.c"); fw 1735 tools/finsig_dryos.c int j = find_nxt_str_ref(fw, sadr, f1); fw 1739 tools/finsig_dryos.c if(isBL_cond(fw,j+1) && isBL(fw,j+2)) { fw 1740 tools/finsig_dryos.c f1 = idxFollowBranch(fw,j+2,0x01000001); fw 1742 tools/finsig_dryos.c if(isB(fw,f1)) { fw 1743 tools/finsig_dryos.c f1 = idxFollowBranch(fw,f1,0x00000001); fw 1745 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,f1),32,0,122); fw 1752 tools/finsig_dryos.c int find_getcurrentmachinetime(firmware *fw) fw 1754 tools/finsig_dryos.c int f1 = get_saved_sig(fw,"SetHPTimerAfterTimeout"); fw 1757 tools/finsig_dryos.c f1 = adr2idx(fw, func_names[f1].val); fw 1758 tools/finsig_dryos.c f1 = find_inst(fw, isBL, f1, 16); fw 1761 tools/finsig_dryos.c f1 = idxFollowBranch(fw,f1,0x01000001); fw 1762 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,f1),32,0,122); fw 1769 tools/finsig_dryos.c int find_sethptimeraftertimeout(firmware *fw) fw 1771 tools/finsig_dryos.c int sadr = find_str(fw, "FrameRateGenerator.c"); fw 1772 tools/finsig_dryos.c int j = find_nxt_str_ref(fw, sadr, -1); fw 1778 tools/finsig_dryos.c f1 = find_inst_rev(fw, isBL, j-1, 7); fw 1779 tools/finsig_dryos.c f2 = find_Nth_inst_rev(fw, isBL, j-1, 128, 2); fw 1783 tools/finsig_dryos.c j = find_nxt_str_ref(fw, sadr, j+1); fw 1789 tools/finsig_dryos.c f1 = idxFollowBranch(fw,f1,0x01000001); fw 1790 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,f1),32,0,122); fw 1801 tools/finsig_dryos.c int find_DoMovieFrameCapture(firmware *fw) fw 1806 tools/finsig_dryos.c search_saved_sig(fw, "FreeUncacheableMemory", match_CAM_UNCACHED_BIT, 0, 0, 8); fw 1808 tools/finsig_dryos.c int j = get_saved_sig(fw,"SetImageMode"); fw 1811 tools/finsig_dryos.c j = adr2idx(fw, func_names[j].val); fw 1817 tools/finsig_dryos.c j = find_inst(fw, isBL, j+1, 20); fw 1820 tools/finsig_dryos.c int j1 = idxFollowBranch(fw,j,0x01000001); fw 1826 tools/finsig_dryos.c if ((fwval(fw,j2) & 0xFF000000) == 0x1A000000) // bne fw 1828 tools/finsig_dryos.c int j3 = idxFollowBranch(fw,j2,0xF1000001); fw 1831 tools/finsig_dryos.c if (isBL(fw,j3)) fw 1834 tools/finsig_dryos.c k = idxFollowBranch(fw,j3,0x01000001); fw 1835 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,k),32,0,122); fw 1846 tools/finsig_dryos.c if ((fwval(fw,j3+m) & 0xFE1F0000) == 0xE41F0000) // ldr rx, fw 1848 tools/finsig_dryos.c frsp_argcnt = fwRd(fw,j3+m) + 1; // this should be loaded in the right register directly fw 1849 tools/finsig_dryos.c frsp_buf = LDR2val(fw,j3+m); fw 1850 tools/finsig_dryos.c frsp_buf_at = idx2adr(fw,j3+m); fw 1851 tools/finsig_dryos.c if (!((frsp_buf > fw->uncached_adr) && fw 1852 tools/finsig_dryos.c (fw->uncached_adr+fw->maxram))) // has to be uncached ram fw 1855 tools/finsig_dryos.c if ((fwval(fw,j3+m) & 0xFFF00000) == 0xE3A00000) // mov rx, fw 1857 tools/finsig_dryos.c uint32_t u1 = ALUop2a(fw,j3+m); fw 1858 tools/finsig_dryos.c if (u1>fw->uncached_adr && u1<(fw->uncached_adr+fw->maxram)) fw 1861 tools/finsig_dryos.c frsp_buf_at = idx2adr(fw,j3+m); fw 1862 tools/finsig_dryos.c frsp_argcnt = fwRd(fw,j3+m) + 1; // this should be loaded in the right register directly fw 1869 tools/finsig_dryos.c if (isBL(fw,j3+m)) fw 1871 tools/finsig_dryos.c k = idxFollowBranch(fw,j3+m,0x01000001); fw 1872 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,k),32,0,122); fw 1893 tools/finsig_dryos.c if (isLDR_PC(fw,k1)) fw 1895 tools/finsig_dryos.c uint32_t v = LDR2val(fw,k1); fw 1896 tools/finsig_dryos.c if (v>fw->uncached_adr && v<fw->uncached_adr+fw->maxram && (v&3)==0) fw 1900 tools/finsig_dryos.c frsp_buf_at = idx2adr(fw,k1); fw 1912 tools/finsig_dryos.c int find_get_ptp_buf_size(firmware *fw) fw 1914 tools/finsig_dryos.c int j = get_saved_sig(fw,"handle_PTP_OC_SendObject"); // same handler as CANON_SendObjectByPath fw 1919 tools/finsig_dryos.c int k=adr2idx(fw,func_names[j].val); fw 1922 tools/finsig_dryos.c int file_buf_id=get_ptp_file_buf_id(fw); fw 1928 tools/finsig_dryos.c if(isMOV_immed(fw,k) && fwRn(fw,k) == 0 && ALUop2(fw,k) == file_buf_id && isBL(fw, k+1)) { fw 1929 tools/finsig_dryos.c adr = followBranch(fw,idx2adr(fw,k+1),0x01000001); fw 1941 tools/finsig_dryos.c if(isMOV_immed(fw,k) && fwRn(fw,k) == 0 && ALUop2(fw,k) == file_buf_id && isBL(fw, k+1)) { fw 1942 tools/finsig_dryos.c uint32_t adr2 = followBranch(fw,idx2adr(fw,k+1),0x01000001); fw 1946 tools/finsig_dryos.c fwAddMatch(fw,adr,32,0,122); fw 1955 tools/finsig_dryos.c int find_GetBaseSv(firmware *fw) fw 1957 tools/finsig_dryos.c int j = get_saved_sig(fw,"SetPropertyCase"); fw 1960 tools/finsig_dryos.c j = adr2idx(fw, func_names[j].val); fw 1962 tools/finsig_dryos.c int sadr = find_str(fw, "Sensitive.c"); fw 1963 tools/finsig_dryos.c if (sadr < fw->lowest_idx) fw 1965 tools/finsig_dryos.c int s1 = find_nxt_str_ref(fw, sadr, -1/*fw->lowest_idx*/); fw 1979 tools/finsig_dryos.c if ( isBL(fw, n) ) fw 1982 tools/finsig_dryos.c k = idxFollowBranch(fw,n,0x01000001); fw 1983 tools/finsig_dryos.c if ( idx2adr(fw, k) == idx2adr(fw, j) ) fw 1986 tools/finsig_dryos.c k = find_inst(fw, isBL, s1+2, 6); fw 1990 tools/finsig_dryos.c int l = idxFollowBranch(fw,k,0x01000001); fw 1991 tools/finsig_dryos.c if ( isB(fw, l) ) fw 1995 tools/finsig_dryos.c k = idxFollowBranch(fw,l,0x01000001); fw 1996 tools/finsig_dryos.c if ( isB(fw, k) ) fw 1998 tools/finsig_dryos.c int m = idxFollowBranch(fw,k,0x01000001); fw 1999 tools/finsig_dryos.c add_func_name("j_j_GetBaseSv", idx2adr(fw,l), ""); fw 2000 tools/finsig_dryos.c add_func_name("j_GetBaseSv", idx2adr(fw,k), ""); fw 2001 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,m),32,0,122); fw 2005 tools/finsig_dryos.c add_func_name("j_GetBaseSv", idx2adr(fw,l), ""); fw 2006 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,k),32,0,122); fw 2011 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,l),32,0,122); fw 2020 tools/finsig_dryos.c s1 = find_nxt_str_ref(fw, sadr, s1+1); fw 2026 tools/finsig_dryos.c int find_Remove(firmware *fw) fw 2028 tools/finsig_dryos.c int f1 = get_saved_sig(fw,"Close"); fw 2032 tools/finsig_dryos.c f1 = adr2idx(fw, func_names[f1].val); fw 2034 tools/finsig_dryos.c f2 = find_str_ref(fw,"File Write Fail."); fw 2039 tools/finsig_dryos.c if(!isBL(fw,f2+i)) { fw 2043 tools/finsig_dryos.c if(idxFollowBranch(fw,f2+i,0x01000001)==f1) { fw 2047 tools/finsig_dryos.c else if(idxFollowBranch(fw,idxFollowBranch(fw,f2+i,0x01000001),0x01000001)==f1) { fw 2052 tools/finsig_dryos.c f2 = idxFollowBranch(fw,f2+i,0x01000001); fw 2053 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,f2),32,0,122); fw 2060 tools/finsig_dryos.c int find_dispatch_funcs(firmware *fw, int param) fw 2064 tools/finsig_dryos.c f1= get_saved_sig(fw,"EnableDispatch_low"); fw 2067 tools/finsig_dryos.c f1= get_saved_sig(fw,"DisableDispatch_low"); fw 2075 tools/finsig_dryos.c f1 = adr2idx(fw, func_names[f1].val); fw 2077 tools/finsig_dryos.c r0 = find_str(fw,"Booting"); // for sx230 (extra task on a few models) fw 2079 tools/finsig_dryos.c r0 = find_str(fw,"Startup"); // locating taskcreate_Startup fw 2080 tools/finsig_dryos.c r1 = find_str(fw,"Startup.c"); fw 2082 tools/finsig_dryos.c r0 = find_Nth_str(fw,"Startup",2); fw 2085 tools/finsig_dryos.c r0 = find_nxt_str_ref(fw,r0,r0-1024); fw 2088 tools/finsig_dryos.c r0 = adr2idx(fw,idx2adr(fw,r0)); // needed on cams with code copied to RAM fw 2091 tools/finsig_dryos.c r0 = find_inst_rev(fw,isBL,r0-1,10); fw 2092 tools/finsig_dryos.c int b1 = idxFollowBranch(fw,r0,0x01000001); fw 2093 tools/finsig_dryos.c b1 = adr2idx(fw,idx2adr(fw,b1)); // needed on cams with code copied to RAM fw 2094 tools/finsig_dryos.c if (isLDR_PC(fw,b1)) { // for s110 fw 2095 tools/finsig_dryos.c b1 = idxFollowBranch(fw,b1,0x01000001); fw 2098 tools/finsig_dryos.c r1 = find_nxt_str_ref_alt(fw, "KerSys.c", b1, 24); fw 2099 tools/finsig_dryos.c int i1 = find_inst(fw,isLDMFD_PC,b1,24); fw 2101 tools/finsig_dryos.c int j1 = find_Nth_inst(fw,isBL,b1,24,1); fw 2103 tools/finsig_dryos.c if (idx2adr(fw,idxFollowBranch(fw,j1,0x01000001))==idx2adr(fw,f1)) { fw 2104 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,b1),32,0,122); fw 2113 tools/finsig_dryos.c int b2 = find_Nth_inst(fw,isBL,b1,12,c); fw 2117 tools/finsig_dryos.c b2 = idxFollowBranch(fw,b2,0x01000001); fw 2118 tools/finsig_dryos.c b2 = adr2idx(fw,idx2adr(fw,b2)); // needed on cams with code copied to RAM fw 2119 tools/finsig_dryos.c r1 = find_nxt_str_ref_alt(fw, "KerSys.c", b2, 24); fw 2120 tools/finsig_dryos.c int i1 = find_inst(fw,isLDMFD_PC,b2,24); fw 2122 tools/finsig_dryos.c int j1 = find_Nth_inst(fw,isBL,b2,24,1); fw 2124 tools/finsig_dryos.c if (idx2adr(fw,idxFollowBranch(fw,j1,0x01000001))==idx2adr(fw,f1)) { fw 2125 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,b2),32,0,122); fw 2699 tools/finsig_dryos.c int dryos_offset(firmware *fw, string_sig *sig) fw 2701 tools/finsig_dryos.c switch (fw->dryos_ver) fw 2728 tools/finsig_dryos.c int fw_string_process(firmware *fw, string_sig *sig, int (*check_match)(firmware *fw, string_sig *sig, int j), int inc_eos) fw 2736 tools/finsig_dryos.c for (br = fw->br; br != 0; br = br->next) fw 2742 tools/finsig_dryos.c if (check_match(fw,sig,j)) fw 2753 tools/finsig_dryos.c int fw_string_process_unaligned(firmware *fw, string_sig *sig, int (*check_match)(firmware *fw, string_sig *sig, int j)) fw 2760 tools/finsig_dryos.c for (br = fw->br; br != 0; br = br->next) fw 2766 tools/finsig_dryos.c if (check_match(fw,sig,j+br->off*4)) fw 2778 tools/finsig_dryos.c int fw_process(firmware *fw, string_sig *sig, int (*check_match)(firmware *fw, string_sig *sig, int j)) fw 2784 tools/finsig_dryos.c for (br = fw->br; br != 0; br = br->next) fw 2788 tools/finsig_dryos.c if (check_match(fw,sig,j)) fw 2805 tools/finsig_dryos.c int match_strsig1(firmware *fw, string_sig *sig, int j) fw 2807 tools/finsig_dryos.c uint32_t fadr = fwval(fw,j-1); // function address fw 2808 tools/finsig_dryos.c if (idx_valid(fw,adr2idx(fw,fadr))) // is function address valid fw 2811 tools/finsig_dryos.c if (sig->offset > 1) fadr = followBranch(fw, fadr, 1); fw 2813 tools/finsig_dryos.c fadr = followBranch2(fw, fadr, sig->offset); fw 2814 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,101); fw 2827 tools/finsig_dryos.c int match_strsig2a(firmware *fw, int k, uint32_t sadr, uint32_t offset) fw 2829 tools/finsig_dryos.c if (fwval(fw,k) == sadr) // pointer to string? fw 2831 tools/finsig_dryos.c uint32_t fadr = fwval(fw,k+1); // function address fw 2832 tools/finsig_dryos.c if (idx_valid(fw,adr2idx(fw,fadr))) // is function address valid fw 2834 tools/finsig_dryos.c uint32_t bfadr = followBranch2(fw, fadr, offset); fw 2837 tools/finsig_dryos.c fwAddMatch(fw,bfadr,32,0,102); fw 2844 tools/finsig_dryos.c int match_strsig2(firmware *fw, string_sig *sig, int j) fw 2847 tools/finsig_dryos.c return search_fw(fw, match_strsig2a, fw->base + j, sig->offset, 2); fw 2868 tools/finsig_dryos.c int match_strsig3a(firmware *fw, int k, uint32_t sadr, uint32_t offset) fw 2870 tools/finsig_dryos.c if (isADR_PC(fw,k+1) && // ADR ? fw 2871 tools/finsig_dryos.c isBorBL(fw,k+2)) // B or BL ? fw 2873 tools/finsig_dryos.c uint32_t padr = ADR2adr(fw,k+1); // get address pointed to by 2nd ADR instructioin fw 2878 tools/finsig_dryos.c if (isADR_PC(fw,k)) // ADR ? fw 2885 tools/finsig_dryos.c if (isADR_PC(fw,j2) && // ADR ? fw 2886 tools/finsig_dryos.c isB(fw,j2+1)) // B fw 2888 tools/finsig_dryos.c uint32_t fa = idx2adr(fw,j2+1); fw 2889 tools/finsig_dryos.c fa = followBranch(fw,fa,1); fw 2890 tools/finsig_dryos.c if (adr2idx(fw,fa) == k+1) fw 2900 tools/finsig_dryos.c uint32_t fadr = ADR2adr(fw,j2); fw 2901 tools/finsig_dryos.c if (offset > 1) fadr = followBranch(fw, fadr, 1); fw 2902 tools/finsig_dryos.c fadr = followBranch2(fw, fadr, offset); fw 2903 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,103); fw 2910 tools/finsig_dryos.c int match_strsig3(firmware *fw, string_sig *sig, int j) fw 2912 tools/finsig_dryos.c return search_fw(fw, match_strsig3a, idx2adr(fw,j), sig->offset, 3); fw 2921 tools/finsig_dryos.c int match_strsig4a(firmware *fw, int k, uint32_t sadr, uint32_t offset) fw 2923 tools/finsig_dryos.c if (isSTMFD(fw,k) && // STMFD fw 2924 tools/finsig_dryos.c isADR_PC(fw,k+offset)) // ADR ? fw 2926 tools/finsig_dryos.c uint32_t padr = ADR2adr(fw,k+offset); fw 2929 tools/finsig_dryos.c uint32_t fadr = idx2adr(fw,k); fw 2930 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,104); fw 2936 tools/finsig_dryos.c int match_strsig4(firmware *fw, string_sig *sig, int j) fw 2938 tools/finsig_dryos.c return search_fw(fw, match_strsig4a, idx2adr(fw,j), sig->offset, sig->offset+1); fw 2957 tools/finsig_dryos.c int match_strsig5a(firmware *fw, int k, uint32_t sadr, uint32_t offset) fw 2959 tools/finsig_dryos.c if ((isADR_PC(fw,k+1) || isLDR_PC(fw,k+1)) && // LDR or ADR ? fw 2960 tools/finsig_dryos.c isBorBL(fw,k+2)) // B or BL ? fw 2963 tools/finsig_dryos.c if (isLDR_PC(fw,k+1)) // LDR ? fw 2964 tools/finsig_dryos.c padr = LDR2val(fw,k+1); fw 2966 tools/finsig_dryos.c padr = ADR2adr(fw,k+1); fw 2971 tools/finsig_dryos.c if (isLDR_PC(fw,k)) // LDR ? fw 2977 tools/finsig_dryos.c if (isLDR_PC(fw,j2) && // LDR ? fw 2978 tools/finsig_dryos.c isB(fw,j2+1)) // B fw 2980 tools/finsig_dryos.c if (idxFollowBranch(fw,j2+1,1) == k+1) fw 2990 tools/finsig_dryos.c uint32_t fadr = LDR2val(fw,j2); fw 2991 tools/finsig_dryos.c if (offset > 1) fadr = followBranch(fw, fadr, 1); fw 2992 tools/finsig_dryos.c fadr = followBranch2(fw, fadr, offset); fw 2995 tools/finsig_dryos.c uint32_t fadr2 = followBranch(fw, fadr, dryos_ofst); fw 2999 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,105); fw 3006 tools/finsig_dryos.c int match_strsig5(firmware *fw, string_sig *sig, int j) fw 3008 tools/finsig_dryos.c dryos_ofst = dryos_offset(fw,sig); fw 3009 tools/finsig_dryos.c return search_fw(fw, match_strsig5a, idx2adr(fw,j), sig->offset, 3); fw 3014 tools/finsig_dryos.c int match_strsig6(firmware *fw, string_sig *sig, int j) fw 3016 tools/finsig_dryos.c int j1 = find_inst_rev(fw, isSTMFD_LR, j-1, j-1); fw 3019 tools/finsig_dryos.c uint32_t fadr = idx2adr(fw,j1); fw 3020 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,106); fw 3033 tools/finsig_dryos.c int match_strsig7a(firmware *fw, int k, uint32_t sadr, uint32_t offset) fw 3035 tools/finsig_dryos.c if (isADR_PC_cond(fw,k) || isLDR_PC_cond(fw,k)) // LDR or ADR ? fw 3038 tools/finsig_dryos.c if (isLDR_PC_cond(fw,k)) // LDR ? fw 3039 tools/finsig_dryos.c padr = LDR2val(fw,k); fw 3041 tools/finsig_dryos.c padr = ADR2adr(fw,k); fw 3044 tools/finsig_dryos.c int j2 = find_inst(fw, isBL, k+1, 10); fw 3047 tools/finsig_dryos.c uint32_t fa = idx2adr(fw,j2); fw 3048 tools/finsig_dryos.c fa = followBranch2(fw,fa,offset); fw 3049 tools/finsig_dryos.c fwAddMatch(fw,fa,32,0,107); fw 3056 tools/finsig_dryos.c int match_strsig7(firmware *fw, string_sig *sig, int j) fw 3058 tools/finsig_dryos.c return search_fw(fw, match_strsig7a, idx2adr(fw,j), sig->offset, 2); fw 3064 tools/finsig_dryos.c int match_strsig8(firmware *fw, string_sig *sig, int j) fw 3070 tools/finsig_dryos.c uint32_t fadr = idx2adr(fw,j1); fw 3071 tools/finsig_dryos.c u1 = fwval(fw,j1); fw 3072 tools/finsig_dryos.c if ((u1 >= fw->base) || ((u1 >= fw->base2) && (u1 < fw->base2 + fw->size2*4))) // pointer ?? fw 3077 tools/finsig_dryos.c if (isLDR_PC(fw,j2) && (LDR2adr(fw,j2) == fadr)) // LDR ? fw 3079 tools/finsig_dryos.c if ((isSTR(fw,j2+1) && (fwOp2(fw,j2+1) == ofst)) || // STR ? fw 3080 tools/finsig_dryos.c (isSTR(fw,j2+2) && (fwOp2(fw,j2+2) == ofst))) // STR ? fw 3082 tools/finsig_dryos.c fadr = fwval(fw,j1); fw 3083 tools/finsig_dryos.c if (idx_valid(fw,adr2idx(fw,fadr))) fw 3085 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,108); fw 3096 tools/finsig_dryos.c int find_strsig8(firmware *fw, string_sig *sig) fw 3102 tools/finsig_dryos.c int j = get_saved_sig(fw,"UpdateMBROnFlash"); fw 3109 tools/finsig_dryos.c j = get_saved_sig(fw,"MakeSDCardBootable"); fw 3119 tools/finsig_dryos.c int idx = adr2idx(fw, fadr); fw 3124 tools/finsig_dryos.c if (isLDR(fw,j) && isLDR(fw,j+1) && isLDR(fw,j+2)) fw 3126 tools/finsig_dryos.c ofst = fwOp2(fw,j) + fwOp2(fw,j+1) + fwOp2(fw,j+2); fw 3133 tools/finsig_dryos.c return fw_string_process(fw, sig, match_strsig8, 1); fw 3141 tools/finsig_dryos.c int find_strsig9(firmware *fw, string_sig *sig) fw 3143 tools/finsig_dryos.c int j = get_saved_sig(fw,sig->ev_name); fw 3148 tools/finsig_dryos.c int ofst = dryos_offset(fw, sig); fw 3149 tools/finsig_dryos.c uint32_t fadr = followBranch(fw, func_names[j].val+ofst*4, 0xF1000001); fw 3153 tools/finsig_dryos.c if (sig->offset != -1) fadr2 = followBranch2(fw, fadr2, sig->offset); fw 3156 tools/finsig_dryos.c fwAddMatch(fw,fadr2,32,0,109); fw 3172 tools/finsig_dryos.c int match_strsig11(firmware *fw, string_sig *sig, int j) fw 3174 tools/finsig_dryos.c int ofst = dryos_offset(fw, sig); fw 3176 tools/finsig_dryos.c uint32_t sadr = idx2adr(fw,j); // string address fw 3180 tools/finsig_dryos.c if (isADR_PC_cond(fw,j1)) // ADR ? fw 3182 tools/finsig_dryos.c uint32_t padr = ADR2adr(fw,j1); fw 3185 tools/finsig_dryos.c uint32_t fadr = idx2adr(fw,j1-ofst); fw 3186 tools/finsig_dryos.c uint32_t bfadr = followBranch(fw,fadr,sig->offset); fw 3192 tools/finsig_dryos.c if (isBL_cond(fw,j2) && // BLxx fw 3193 tools/finsig_dryos.c isLDR_SP(fw,j2+1) && (fwRd(fw,j2+1) == 0) && // LDR R0,[SP,x] fw 3194 tools/finsig_dryos.c isBL(fw,j2+2) && // BL fw 3195 tools/finsig_dryos.c isMOV(fw,j2+3) && (fwRd(fw,j2+3) == 4) && (fwRn(fw,j2+3) == 0)) // LDR R4, R0 fw 3204 tools/finsig_dryos.c fwAddMatch(fw,bfadr,32,0,111); fw 3219 tools/finsig_dryos.c int find_strsig12(firmware *fw, string_sig *sig) fw 3221 tools/finsig_dryos.c int j = get_saved_sig(fw,"CreateJumptable"); fw 3223 tools/finsig_dryos.c int ofst = dryos_offset(fw, sig); fw 3231 tools/finsig_dryos.c int idx = adr2idx(fw, func_names[j].val); fw 3232 tools/finsig_dryos.c for(; !isBX_LR(fw,idx); idx++) // BX LR fw 3234 tools/finsig_dryos.c if (((fwval(fw,idx+1) & 0xFFFFF000) == 0xE5801000) && // STR R1,[R0,nnn] fw 3235 tools/finsig_dryos.c (fwOp2(fw,idx+1) == ofst)) fw 3237 tools/finsig_dryos.c uint32_t fadr = LDR2val(fw,idx); fw 3238 tools/finsig_dryos.c uint32_t bfadr = followBranch2(fw,fadr,sig->offset); fw 3239 tools/finsig_dryos.c if ((sig->offset <= 1) || ((bfadr != fadr) && ((fw->buf[adr2idx(fw,fadr)] & 0xFFFF0000) == 0xE92D0000))) fw 3241 tools/finsig_dryos.c fwAddMatch(fw,bfadr,32,0,112); fw 3245 tools/finsig_dryos.c else if (isB(fw,idx)) // B fw 3247 tools/finsig_dryos.c idx = adr2idx(fw,followBranch(fw,idx2adr(fw,idx),1)) - 1; fw 3267 tools/finsig_dryos.c int match_strsig13a(firmware *fw, int k, uint32_t sadr, uint32_t offset) fw 3269 tools/finsig_dryos.c if (fwval(fw,k) == sadr) // string ptr fw 3271 tools/finsig_dryos.c uint32_t padr = idx2adr(fw,k); // string ptr address fw 3275 tools/finsig_dryos.c if (fwval(fw,j2) == padr) // string ptr address fw 3277 tools/finsig_dryos.c uint32_t ppadr = idx2adr(fw,j2); // string ptr ptr address fw 3281 tools/finsig_dryos.c if (isLDR_PC(fw,j3) && (LDR2adr(fw,j3) == ppadr)) fw 3283 tools/finsig_dryos.c uint32_t fadr = idx2adr(fw,j3-offset); fw 3284 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,113); fw 3293 tools/finsig_dryos.c int match_strsig13(firmware *fw, string_sig *sig, int j) fw 3296 tools/finsig_dryos.c return search_fw(fw, match_strsig13a, fw->base + j, sig->offset, 1); fw 3306 tools/finsig_dryos.c int match_strsig15a(firmware *fw, int k, uint32_t sadr, uint32_t offset) fw 3308 tools/finsig_dryos.c if (isADR_PC_cond(fw,k) || isLDR_PC_cond(fw,k)) // LDR or ADR ? fw 3311 tools/finsig_dryos.c if (isLDR_PC_cond(fw,k)) // LDR ? fw 3312 tools/finsig_dryos.c padr = LDR2val(fw,k); fw 3314 tools/finsig_dryos.c padr = ADR2adr(fw,k); fw 3317 tools/finsig_dryos.c int j2 = find_inst_rev(fw, isBL, k-1, dryos_ofst); fw 3321 tools/finsig_dryos.c j2 = idxcorr(fw, j2); fw 3322 tools/finsig_dryos.c uint32_t fa = idx2adr(fw,j2); fw 3323 tools/finsig_dryos.c fa = followBranch2(fw,fa,offset); fw 3324 tools/finsig_dryos.c fwAddMatch(fw,fa,32,0,115); fw 3331 tools/finsig_dryos.c int match_strsig15(firmware *fw, string_sig *sig, int j) fw 3333 tools/finsig_dryos.c dryos_ofst = dryos_offset(fw,sig); fw 3335 tools/finsig_dryos.c return search_fw(fw, match_strsig15a, idx2adr(fw,j), sig->offset, 1); fw 3340 tools/finsig_dryos.c int match_strsig16(firmware *fw, string_sig *sig, int j) fw 3344 tools/finsig_dryos.c if (isADR_PC_cond(fw,j) || isLDR_PC_cond(fw,j)) // LDR or ADR ? fw 3347 tools/finsig_dryos.c if (isLDR_PC_cond(fw,j)) // LDR ? fw 3348 tools/finsig_dryos.c padr = LDR2val(fw,j); fw 3350 tools/finsig_dryos.c padr = ADR2adr(fw,j); fw 3353 tools/finsig_dryos.c int j2 = find_inst_rev(fw, isSTMFD_LR, j-1, 50); fw 3356 tools/finsig_dryos.c uint32_t fa = idx2adr(fw,j2); fw 3357 tools/finsig_dryos.c fwAddMatch(fw,fa,32,0,116); fw 3368 tools/finsig_dryos.c int find_strsig17(firmware *fw, string_sig *sig) fw 3370 tools/finsig_dryos.c int j = get_saved_sig(fw,"StartRecModeMenu"); fw 3376 tools/finsig_dryos.c int idx = adr2idx(fw, func_names[j].val); fw 3378 tools/finsig_dryos.c if (fw->dryos_ver < 58) fw 3380 tools/finsig_dryos.c if (isLDR_PC(fw,idx-3) && isMOV_immed(fw,idx-2) && isB(fw,idx-1)) fw 3382 tools/finsig_dryos.c k = adr2idx(fw,LDR2val(fw,idx-3)); fw 3384 tools/finsig_dryos.c else if (isMOV_immed(fw,idx-3) && isADR_PC(fw,idx-2) && isB(fw,idx-1)) fw 3386 tools/finsig_dryos.c k = adr2idx(fw,ADR2adr(fw,idx-2)); fw 3391 tools/finsig_dryos.c int l = find_inst_rev(fw, isBL, idx-1, 4); fw 3394 tools/finsig_dryos.c if (isLDR_PC(fw,l-2) && isMOV_immed(fw,l-1)) fw 3396 tools/finsig_dryos.c k = adr2idx(fw,LDR2val(fw,l-2)); fw 3404 tools/finsig_dryos.c fadr = followBranch(fw,idx2adr(fw,k+1),0x01000001); fw 3407 tools/finsig_dryos.c k = find_inst(fw, isLDMFD, k+1, 60); fw 3408 tools/finsig_dryos.c if (fw->dryos_ver < 58) fw 3410 tools/finsig_dryos.c fadr = followBranch(fw,idx2adr(fw,k-1),0x01000001); fw 3414 tools/finsig_dryos.c k = find_inst_rev(fw, isBL, k-1, 4); fw 3417 tools/finsig_dryos.c fadr = followBranch(fw,idx2adr(fw,k),0x01000001); fw 3423 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,117); fw 3443 tools/finsig_dryos.c int find_strsig19(firmware *fw, string_sig *sig) fw 3445 tools/finsig_dryos.c int j = get_saved_sig(fw,sig->ev_name); fw 3450 tools/finsig_dryos.c int ofst = dryos_offset(fw, sig); fw 3462 tools/finsig_dryos.c case 0: k = isLDMFD_PC(fw, adr2idx(fw, fadr)-1-addoffs); break; fw 3463 tools/finsig_dryos.c case 1: k = isB(fw, adr2idx(fw, fadr)-1-addoffs); break; fw 3464 tools/finsig_dryos.c case 2: k = ((fwval(fw, adr2idx(fw, fadr)-1-addoffs) & 0x0f000000) == 0x0a000000); break; // B cond. fw 3465 tools/finsig_dryos.c case 3: k = (fwval(fw, adr2idx(fw, fadr)-1-addoffs) == 0xE1A0F00E); break; // mov pc, lr fw 3466 tools/finsig_dryos.c case 4: k = (fwval(fw, adr2idx(fw, fadr)-1-addoffs) == 0xE12FFF1E); break; // bx lr fw 3471 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,119); fw 3489 tools/finsig_dryos.c int match_strsig23a(firmware *fw, int k, uint32_t sadr, uint32_t maxdist) fw 3491 tools/finsig_dryos.c if (isADR_PC_cond(fw,k) || isLDR_PC_cond(fw,k)) // LDR or ADR ? fw 3494 tools/finsig_dryos.c if (isLDR_PC_cond(fw,k)) // LDR ? fw 3495 tools/finsig_dryos.c padr = LDR2val(fw,k); fw 3497 tools/finsig_dryos.c padr = ADR2adr(fw,k); fw 3503 tools/finsig_dryos.c j2 = find_Nth_inst_rev(fw, isBorBL, k, maxdist, -dryos_ofst); fw 3507 tools/finsig_dryos.c j2 = find_Nth_inst(fw, isBorBL, k+1, maxdist, dryos_ofst+1); fw 3511 tools/finsig_dryos.c uint32_t fa = idx2adr(fw,j2); fw 3512 tools/finsig_dryos.c fa = followBranch2(fw,fa,0x01000001); fw 3513 tools/finsig_dryos.c fwAddMatch(fw,fa,32,0,123); fw 3520 tools/finsig_dryos.c int match_strsig23(firmware *fw, string_sig *sig, int j) fw 3522 tools/finsig_dryos.c dryos_ofst = dryos_offset(fw,sig); fw 3527 tools/finsig_dryos.c return search_fw(fw, match_strsig23a, idx2adr(fw,j), sig->offset, 2); fw 3544 tools/finsig_dryos.c int match_strsig24(firmware *fw, string_sig *sig, int j) fw 3547 tools/finsig_dryos.c int ofst = dryos_offset(fw, sig); fw 3560 tools/finsig_dryos.c uint32_t sadr = idx2adr(fw,j); // string address fw 3564 tools/finsig_dryos.c if (isLDR(fw,j1)) // LDR ? fw 3566 tools/finsig_dryos.c uint32_t pval = LDR2val(fw,j1); fw 3569 tools/finsig_dryos.c int j2 = find_Nth_inst_rev(fw,instid,j1-1,sig->offset,ninst); fw 3572 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,j2-ofst),32,0,124); fw 3577 tools/finsig_dryos.c else if (isADR_PC(fw,j1)) // ADR ? fw 3579 tools/finsig_dryos.c uint32_t pval = ADR2adr(fw,j1); fw 3582 tools/finsig_dryos.c int j2 = find_Nth_inst_rev(fw,instid,j1-1,sig->offset,ninst); fw 3585 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,j2-ofst),32,0,124); fw 3596 tools/finsig_dryos.c int find_strsig(firmware *fw, string_sig *sig) fw 3600 tools/finsig_dryos.c case 1: return fw_string_process(fw, sig, match_strsig1, 1); fw 3601 tools/finsig_dryos.c case 2: return fw_string_process_unaligned(fw, sig, match_strsig2); fw 3602 tools/finsig_dryos.c case 3: return fw_string_process(fw, sig, match_strsig3, 1); fw 3603 tools/finsig_dryos.c case 4: return fw_string_process(fw, sig, match_strsig4, 1); fw 3604 tools/finsig_dryos.c case 5: return fw_string_process(fw, sig, match_strsig5, 1); fw 3605 tools/finsig_dryos.c case 6: return fw_string_process(fw, sig, match_strsig6, 1); fw 3606 tools/finsig_dryos.c case 7: return fw_string_process(fw, sig, match_strsig7, 1); fw 3607 tools/finsig_dryos.c case 8: return find_strsig8(fw, sig); fw 3608 tools/finsig_dryos.c case 9: return find_strsig9(fw, sig); fw 3609 tools/finsig_dryos.c case 11: return fw_string_process(fw, sig, match_strsig11, 0); fw 3610 tools/finsig_dryos.c case 12: return find_strsig12(fw, sig); fw 3611 tools/finsig_dryos.c case 13: return fw_string_process_unaligned(fw, sig, match_strsig13); fw 3612 tools/finsig_dryos.c case 15: return fw_string_process(fw, sig, match_strsig15, 1); fw 3613 tools/finsig_dryos.c case 16: return fw_process(fw, sig, match_strsig16); fw 3614 tools/finsig_dryos.c case 17: return find_strsig17(fw, sig); fw 3615 tools/finsig_dryos.c case 19: return find_strsig19(fw, sig); fw 3621 tools/finsig_dryos.c uint32_t fadr = followBranch2(fw,func_names[j].val,sig->offset); fw 3622 tools/finsig_dryos.c fwAddMatch(fw,fadr,32,0,120); fw 3627 tools/finsig_dryos.c case 21: return fw_process(fw, sig, (int (*)(firmware*, string_sig*, int))(sig->ev_name)); fw 3628 tools/finsig_dryos.c case 22: return ((int (*)(firmware*,int))(sig->ev_name))(fw,sig->offset); fw 3629 tools/finsig_dryos.c case 23: return fw_string_process(fw, sig, match_strsig23, 1); fw 3630 tools/finsig_dryos.c case 24: return fw_string_process(fw, sig, match_strsig24, 0); fw 3641 tools/finsig_dryos.c void find_str_sig_matches(firmware *fw, const char *curr_name) fw 3653 tools/finsig_dryos.c if (find_strsig(fw, &string_sigs[i])) fw 3674 tools/finsig_dryos.c void find_matches(firmware *fw, const char *curr_name) fw 3692 tools/finsig_dryos.c fwAddMatch(fw,func_names[i].val,32,0,120); fw 3703 tools/finsig_dryos.c if (find_strsig(fw, &string_sigs[i])) fw 3731 tools/finsig_dryos.c for (n = fw->br; n != 0; n = n->next) fw 3753 tools/finsig_dryos.c if ((fw->buf[n->off+i+s->value] & 0x0F000000) == 0x0A000000) // B fw 3755 tools/finsig_dryos.c idx = adr2idx(fw, followBranch2(fw, idx2adr(fw,n->off+i+s->value), 0xF0000001)); fw 3756 tools/finsig_dryos.c if ((idx >= 0) && (idx < fw->size)) fw 3759 tools/finsig_dryos.c p1 = &fw->buf[idx]; fw 3798 tools/finsig_dryos.c if (isLDR_PC_cond(fw,n->off+i+s->offs)) fw 3800 tools/finsig_dryos.c int m = adr2idx(fw,LDR2val(fw,n->off+i+s->offs)); fw 3801 tools/finsig_dryos.c if ((m >= 0) && (m < fw->size) && (strcmp((char*)(&fw->buf[m]),"Mounter.c") == 0)) fw 3806 tools/finsig_dryos.c else if (isADR_PC_cond(fw,n->off+i+s->offs)) fw 3808 tools/finsig_dryos.c int m = adr2idx(fw,ADR2adr(fw,n->off+i+s->offs)); fw 3809 tools/finsig_dryos.c if ((m >= 0) && (m < fw->size) && (strcmp((char*)(&fw->buf[m]),"Mounter.c") == 0)) fw 3820 tools/finsig_dryos.c fwAddMatch(fw,idx2adr(fw,i+n->off),success,fail,func_list[j].ver); fw 3851 tools/finsig_dryos.c void print_results(firmware *fw, const char *curr_name, int k) fw 3860 tools/finsig_dryos.c osig* ostub2 = find_sig(fw->sv->stubs,curr_name); fw 3957 tools/finsig_dryos.c void output_modemap(firmware *fw, int k) fw 3961 tools/finsig_dryos.c if (isLDR_PC(fw,k)) fw 3963 tools/finsig_dryos.c k = adr2idx(fw,LDR2val(fw,k)); fw 3964 tools/finsig_dryos.c bprintf("%08x\n",idx2adr(fw,k)); fw 3965 tools/finsig_dryos.c uint16_t *p = (uint16_t*)(&fw->buf[k]); fw 3969 tools/finsig_dryos.c if (((fw->dryos_ver < 47) && ((*p < 8000) || (*p > 8999))) || ((fw->dryos_ver >= 47) && ((*p < 4000) || (*p > 4999)))) fw 3971 tools/finsig_dryos.c osig *m = find_sig_val(fw->sv->modemap, *p); fw 3990 tools/finsig_dryos.c osig *m = fw->sv->modemap; fw 4006 tools/finsig_dryos.c int match_modelist(firmware *fw, int k, uint32_t fadr, uint32_t v2) fw 4008 tools/finsig_dryos.c if (isBX_LR(fw,k) && (fw->buf[k+4] == fadr)) fw 4010 tools/finsig_dryos.c fadr = fwval(fw,k+1); fw 4014 tools/finsig_dryos.c if (isLDR_PC(fw,k1) && (LDR2val(fw,k1) == fadr)) fw 4016 tools/finsig_dryos.c bprintf("// Firmware modemap table found @%08x -> ",idx2adr(fw,k1)); fw 4017 tools/finsig_dryos.c output_modemap(fw,k1); fw 4028 tools/finsig_dryos.c int match_FlashParamsTable2(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4030 tools/finsig_dryos.c if (fw->buf[k] == v1) fw 4032 tools/finsig_dryos.c FlashParamsTable_address = idx2adr(fw,k); fw 4038 tools/finsig_dryos.c int match_FlashParamsTable(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4040 tools/finsig_dryos.c if ((fw->buf[k] > fw->base) && (fw->buf[k+1] == 0x00010000) && (fw->buf[k+2] == 0xFFFF0002)) fw 4042 tools/finsig_dryos.c if (search_fw(fw, match_FlashParamsTable2, idx2adr(fw,k), 0, 1)) fw 4048 tools/finsig_dryos.c void find_modemap(firmware *fw) fw 4053 tools/finsig_dryos.c search_fw(fw, match_FlashParamsTable, 0, 0, 1); fw 4059 tools/finsig_dryos.c search_fw(fw, match_modelist, FlashParamsTable_address, 0, 5); fw 4065 tools/finsig_dryos.c int match_CAM_UNCACHED_BIT(firmware *fw, int k, int v) fw 4067 tools/finsig_dryos.c if ((fw->buf[k] & 0x0FFFF000) == 0x03C00000) // BIC fw 4069 tools/finsig_dryos.c fw->uncached_adr = ALUop2(fw,k); fw 4070 tools/finsig_dryos.c fw->uncached_adr_idx = k; fw 4076 tools/finsig_dryos.c int find_DebugAssert_argcount(firmware *fw) fw 4078 tools/finsig_dryos.c int s1 = find_str_ref(fw, "CameraLog.c"); fw 4081 tools/finsig_dryos.c int k = isADR_PC_cond(fw, s1); fw 4084 tools/finsig_dryos.c k = fwRd(fw, s1); fw 4091 tools/finsig_dryos.c void find_platform_vals(firmware *fw) fw 4100 tools/finsig_dryos.c if (fw->dryos_ver >= 39) fw 4102 tools/finsig_dryos.c if (fw->dryos_ver >= 47) fw 4104 tools/finsig_dryos.c if (fw->dryos_ver >= 59) fw 4112 tools/finsig_dryos.c k = find_str_ref(fw, "\r[%ld] AdjDrvType[%02ld] -> DrvType[%02"); fw 4118 tools/finsig_dryos.c if ((fw->buf[k1] & 0x0FFF0FFF) == 0x058D0034) // STRxx Rn, [SP,#0x34] fw 4120 tools/finsig_dryos.c if ((fw->buf[k1-1] & 0x0FFF0000) == 0x03A00000) // MOVxx Rn, #YYY fw 4122 tools/finsig_dryos.c raw_width = ALUop2(fw, k1-1); fw 4125 tools/finsig_dryos.c else if ((fw->buf[k1-2] & 0x0FFF0000) == 0x03A00000)// MOVxx Rn, #YYY fw 4127 tools/finsig_dryos.c raw_width = ALUop2(fw, k1-2); fw 4130 tools/finsig_dryos.c else if (isLDR_PC_cond(fw,k1-1)) fw 4132 tools/finsig_dryos.c raw_width = LDR2val(fw,k1-1); fw 4135 tools/finsig_dryos.c else if (isLDR_PC_cond(fw,k1-2)) fw 4137 tools/finsig_dryos.c raw_width = LDR2val(fw,k1-2); fw 4145 tools/finsig_dryos.c if ((fw->buf[k1] & 0x0FFF0FFF) == 0x058D0030) // STRxx Rn, [SP,#0x30] fw 4147 tools/finsig_dryos.c if ((fw->buf[k1-1] & 0x0FFF0000) == 0x03A00000) // MOVxx Rn, #YYY fw 4149 tools/finsig_dryos.c raw_height = ALUop2(fw, k1-1); fw 4152 tools/finsig_dryos.c else if ((fw->buf[k1-2] & 0x0FFF0000) == 0x03A00000)// MOVxx Rn, #YYY fw 4154 tools/finsig_dryos.c raw_height = ALUop2(fw, k1-2); fw 4157 tools/finsig_dryos.c else if (isLDR_PC_cond(fw,k1-1)) fw 4159 tools/finsig_dryos.c raw_height = LDR2val(fw,k1-1); fw 4162 tools/finsig_dryos.c else if (isLDR_PC_cond(fw,k1-2)) fw 4164 tools/finsig_dryos.c raw_height = LDR2val(fw,k1-2); fw 4167 tools/finsig_dryos.c if ((fw->buf[k1-1] & 0x0FFF0000) == 0x02400000) // SUBxx Rn, #YYY fw 4169 tools/finsig_dryos.c raw_height = raw_width - ALUop2(fw, k1-1); fw 4178 tools/finsig_dryos.c k = find_str_ref(fw, " CrwAddress %lx, CrwSize H %ld V %ld\r"); fw 4184 tools/finsig_dryos.c if ((fw->buf[k1] & 0xFFFFF000) == 0xE3A02000) // MOV R2, #nnn fw 4186 tools/finsig_dryos.c raw_width = ALUop2(fw,k1); fw 4190 tools/finsig_dryos.c if (isLDR_PC(fw,k1) && ((fw->buf[k1]& 0x0000F000) == 0x00002000)) // LDR R2, =nnn fw 4192 tools/finsig_dryos.c raw_width = LDR2val(fw,k1); fw 4199 tools/finsig_dryos.c if ((fw->buf[k1] & 0xFFFFF000) == 0xE3A03000) // MOV R3, #nnn fw 4201 tools/finsig_dryos.c raw_height = ALUop2(fw,k1); fw 4205 tools/finsig_dryos.c if (isLDR_PC(fw,k1) && ((fw->buf[k1]& 0x0000F000) == 0x00003000)) // LDR R3, =nnn fw 4207 tools/finsig_dryos.c raw_height = LDR2val(fw,k1); fw 4211 tools/finsig_dryos.c if ((fw->buf[k1] & 0xFFFFF000) == 0xE2423000) // SUB R3, R2, #nnn fw 4213 tools/finsig_dryos.c raw_height = raw_width - ALUop2(fw,k1); fw 4222 tools/finsig_dryos.c bprintf("//#define CAM_RAW_ROWPIX %d // Found @0x%08x\n",raw_width,idx2adr(fw,kw)); fw 4230 tools/finsig_dryos.c bprintf("//#define CAM_RAW_ROWS %d // Found @0x%08x\n",raw_height,idx2adr(fw,kh)); fw 4238 tools/finsig_dryos.c if (fw->uncached_adr_idx != 0) fw 4241 tools/finsig_dryos.c bprintf("//#define CAM_UNCACHED_BIT 0x%08x // Found @0x%08x\n",fw->uncached_adr,idx2adr(fw,fw->uncached_adr_idx)); fw 4245 tools/finsig_dryos.c k = get_saved_sig(fw,"GetImageFolder"); fw 4249 tools/finsig_dryos.c int s = adr2idx(fw,fadr); fw 4250 tools/finsig_dryos.c int e = find_inst(fw, isLDMFD_PC, s+1, 160); fw 4253 tools/finsig_dryos.c if (isMOV(fw,k1) && (fwRnMOV(fw,k1) == 2)) fw 4255 tools/finsig_dryos.c int r1 = fwRd(fw,k1); fw 4260 tools/finsig_dryos.c if (isMOV(fw,k2) && isBL(fw,k2+1) && (fwRnMOV(fw,k2) == r1)) fw 4262 tools/finsig_dryos.c else if (isMOV(fw,k2) && isBL(fw,k2+7) && (fwRnMOV(fw,k2) == r1)) fw 4266 tools/finsig_dryos.c int r2 = fwRd(fw,k2); fw 4267 tools/finsig_dryos.c fadr = followBranch2(fw,idx2adr(fw,k2+b),0x01000001); fw 4268 tools/finsig_dryos.c k = adr2idx(fw,fadr); fw 4272 tools/finsig_dryos.c if (isCMP(fw,k3) && (fwRn(fw,k3) == r2)) fw 4274 tools/finsig_dryos.c int val = ALUop2(fw,k3); fw 4275 tools/finsig_dryos.c bprintf("//#define CAM_DATE_FOLDER_NAMING 0x%03x // Found @0x%08x (pass as 3rd param to GetImageFolder)\n",val,idx2adr(fw,k3)); fw 4287 tools/finsig_dryos.c k1 = adr2idx(fw,FlashParamsTable_address); fw 4290 tools/finsig_dryos.c uint32_t fadr = fwval(fw,k); fw 4291 tools/finsig_dryos.c int k2 = adr2idx(fw,fadr); fw 4292 tools/finsig_dryos.c if (idx_valid(fw,k2)) fw 4294 tools/finsig_dryos.c uint32_t sadr = fwval(fw,k2); fw 4295 tools/finsig_dryos.c k2 = adr2idx(fw,sadr); fw 4296 tools/finsig_dryos.c if (idx_valid(fw,k2)) fw 4298 tools/finsig_dryos.c char *s = adr2ptr(fw,sadr); fw 4299 tools/finsig_dryos.c if (((fw->cam != 0) && (strcmp(s,fw->cam) == 0)) || (strcmp(s,"Unknown") == 0)) fw 4309 tools/finsig_dryos.c find_DebugAssert_argcount(fw); fw 4314 tools/finsig_dryos.c uint32_t find_viewport_address(firmware *fw, int *kout) fw 4319 tools/finsig_dryos.c k = find_str_ref(fw, "VRAM Address : %p\r"); fw 4324 tools/finsig_dryos.c if (isLDR(fw,k1) && isLDR(fw,k1+1)) fw 4326 tools/finsig_dryos.c uint32_t v1 = LDR2val(fw,k1); fw 4327 tools/finsig_dryos.c uint32_t v2 = LDR2val(fw,k1+1); fw 4339 tools/finsig_dryos.c int match_vid_get_bitmap_fb(firmware *fw, int k, int v) fw 4341 tools/finsig_dryos.c if (isBL(fw,k-1) && // BL fw 4342 tools/finsig_dryos.c isLDR_PC(fw,k)) fw 4344 tools/finsig_dryos.c uint32_t v1 = LDR2val(fw,k); fw 4345 tools/finsig_dryos.c bprintf("//void *vid_get_bitmap_fb() { return (void*)0x%08x; } // Found @0x%08x\n",v1,idx2adr(fw,k)); fw 4349 tools/finsig_dryos.c if (isBL(fw,k-1) && // BL fw 4350 tools/finsig_dryos.c (isLDR_PC(fw,k+1))) fw 4352 tools/finsig_dryos.c uint32_t v1 = LDR2val(fw,k+1); fw 4353 tools/finsig_dryos.c bprintf("//void *vid_get_bitmap_fb() { return (void*)0x%08x; } // Found @0x%08x\n",v1,idx2adr(fw,k)); fw 4360 tools/finsig_dryos.c int match_get_flash_params_count(firmware *fw, int k, int v) fw 4362 tools/finsig_dryos.c if ((fw->buf[k] & 0xFFF00FFF) == 0xE3C00901) // BIC Rn, Rn, #0x4000 fw 4364 tools/finsig_dryos.c uint32_t r = fw->buf[k] & 0x000F0000; // Register fw 4365 tools/finsig_dryos.c if (((fw->buf[k+1] & 0xFFF00000) == 0xE3500000) && ((fw->buf[k+1] & 0x000F0000) == r)) // CMP, Rn #val fw 4367 tools/finsig_dryos.c bprintf("//int get_flash_params_count(void) { return 0x%02x; } // Found @0x%08x\n",fw->buf[k+1]&0xFFF,idx2adr(fw,k+1)); fw 4376 tools/finsig_dryos.c int match_uiprop_count(firmware *fw, int k, int v) fw 4378 tools/finsig_dryos.c if ((fw->buf[k] & 0xFFF00FFF) == 0xe3c00902) // BIC Rn, Rn, #0x8000 fw 4380 tools/finsig_dryos.c uint32_t r = fw->buf[k] & 0x000F0000; // Register fw 4381 tools/finsig_dryos.c if (((fw->buf[k+1] & 0xFFF00000) == 0xE3500000) && ((fw->buf[k+1] & 0x000F0000) == r)) // CMP, Rn #val fw 4384 tools/finsig_dryos.c uint32_t fadr = fw->buf[k+1]&0xFFF; fw 4385 tools/finsig_dryos.c osig *o = find_sig(fw->sv->stubs_min,name); fw 4388 tools/finsig_dryos.c bprintf("//DEF_CONST(%-34s,0x%08x) // Found @0x%08x",name,fadr,idx2adr(fw,k+1)); fw 4400 tools/finsig_dryos.c bprintf("DEF_CONST(%-34s,0x%08x) // Found @0x%08x",name,fadr,idx2adr(fw,k+1)); fw 4410 tools/finsig_dryos.c int match_imager_active(firmware *fw, int k, int v) fw 4416 tools/finsig_dryos.c if (isLDMFD_PC(fw,k)) fw 4418 tools/finsig_dryos.c int k1 = find_inst_rev(fw, isBL, k-1, 10); fw 4425 tools/finsig_dryos.c if (isLDR(fw,k1) || isADR(fw,k1)) fw 4427 tools/finsig_dryos.c if (isADR(fw,k1)) fw 4429 tools/finsig_dryos.c a = ADR2adr(fw, k1); fw 4433 tools/finsig_dryos.c a = LDR2val(fw, k1); fw 4435 tools/finsig_dryos.c if ((a>fw->base) && ((a&3) == 0)) fw 4437 tools/finsig_dryos.c int k3 = adr2idx(fw, a); fw 4438 tools/finsig_dryos.c if (isSTMFD_LR(fw,k3)) fw 4440 tools/finsig_dryos.c k3 = find_inst(fw, isBLX, k3+1, 6); fw 4446 tools/finsig_dryos.c if (isSTR_cond(fw,k3+k4)) fw 4448 tools/finsig_dryos.c reg = fwRn(fw,k3+k4); fw 4449 tools/finsig_dryos.c o = fwval(fw,k3+k4) & 0xff; // offset, should be around 4 fw 4450 tools/finsig_dryos.c where = idx2adr(fw,k3+k4); fw 4452 tools/finsig_dryos.c if (reg>=0 && isLDR_cond(fw,k3+k4) && fwRd(fw,k3+k4)==reg) fw 4454 tools/finsig_dryos.c adr = LDR2val(fw,k3+k4); fw 4455 tools/finsig_dryos.c if (adr < fw->memisostart) fw 4479 tools/finsig_dryos.c void find_lib_vals(firmware *fw) fw 4489 tools/finsig_dryos.c search_saved_sig(fw, "DispCon_ShowBitmapColorBar", match_vid_get_bitmap_fb, 0, 1, 30); fw 4492 tools/finsig_dryos.c uint32_t v = find_viewport_address(fw,&k); fw 4495 tools/finsig_dryos.c bprintf("//void *vid_get_viewport_fb() { return (void*)0x%08x; } // Found @0x%08x\n",v,idx2adr(fw,k)); fw 4505 tools/finsig_dryos.c int sadr = find_str(fw, "ImagePlayer.c"); fw 4506 tools/finsig_dryos.c k = find_nxt_str_ref(fw, sadr, -1); fw 4513 tools/finsig_dryos.c if (isLDR(fw,k+fbd[f][0]) && isLDR(fw,k+fbd[f][1]) && isLDR(fw,k+fbd[f][2])) fw 4515 tools/finsig_dryos.c int reg = fw->buf[k+fbd[f][2]] & 0x000F0000; // Index register used fw 4517 tools/finsig_dryos.c if (((fw->buf[k+fbd[f][0]] & 0x0000F000) << 4) == reg) { ka = k+fbd[f][0]; } fw 4518 tools/finsig_dryos.c else if (((fw->buf[k+fbd[f][1]] & 0x0000F000) << 4) == reg) { ka = k+fbd[f][1]; } fw 4521 tools/finsig_dryos.c uint32_t adr = LDR2val(fw,ka); fw 4524 tools/finsig_dryos.c if (isSTR(fw,k1) && ((fw->buf[k1] & 0x000F0000) == reg)) fw 4526 tools/finsig_dryos.c uint32_t ofst = fw->buf[k1] & 0x00000FFF; fw 4527 tools/finsig_dryos.c bprintf("DEF(%-40s,0x%08x) // Found 0x%04x (@0x%08x) + 0x%02x (@0x%08x)\n","viewport_fb_d",adr+ofst,adr,idx2adr(fw,ka),ofst,idx2adr(fw,k1)); fw 4528 tools/finsig_dryos.c bprintf("//void *vid_get_viewport_fb_d() { return (void*)(*(int*)(0x%04x+0x%02x)); } // Found @0x%08x & 0x%08x\n",adr,ofst,idx2adr(fw,ka),idx2adr(fw,k1)); fw 4536 tools/finsig_dryos.c k = find_nxt_str_ref(fw, sadr, k); fw 4540 tools/finsig_dryos.c k = find_str_ref(fw, "9999"); fw 4543 tools/finsig_dryos.c if (isLDR(fw,k-1) && isBL(fw,k+1)) fw 4545 tools/finsig_dryos.c uint32_t v1 = LDR2val(fw,k-1); fw 4546 tools/finsig_dryos.c bprintf("DEF(%-40s,0x%08x) // Found @0x%08x\n","jpeg_count_str",v1,idx2adr(fw,k-1)); fw 4547 tools/finsig_dryos.c bprintf("//char *camera_jpeg_count_str() { return (char*)0x%08x; } // Found @0x%08x\n",v1,idx2adr(fw,k-1)); fw 4563 tools/finsig_dryos.c search_saved_sig(fw, "GetParameterData", match_get_flash_params_count, 0, 0, 30); fw 4568 tools/finsig_dryos.c void print_stubs_min(firmware *fw, const char *name, uint32_t fadr, uint32_t atadr) fw 4570 tools/finsig_dryos.c osig *o = find_sig(fw->sv->stubs_min,name); fw 4591 tools/finsig_dryos.c int print_exmem_types(firmware *fw) fw 4596 tools/finsig_dryos.c int ii = adr2idx(fw, exm_typ_tbl); fw 4600 tools/finsig_dryos.c bprintf("// %s %i\n",adr2ptr(fw, fwval(fw,ii+n)),n); fw 4606 tools/finsig_dryos.c int find_exmem_alloc_table(firmware *fw) fw 4608 tools/finsig_dryos.c int i = get_saved_sig(fw,"ExMem.View_FW"); // s5 and earlier don't have this fw 4611 tools/finsig_dryos.c i = get_saved_sig(fw,"exmem_assert"); // s5 fw 4617 tools/finsig_dryos.c i = adr2idx(fw, func_names[i].val); fw 4624 tools/finsig_dryos.c if ( ((fwval(fw,i+n)&0xffff0000)==0xe59f0000) ) // ldr rx, [pc, #imm] fw 4626 tools/finsig_dryos.c u = LDR2val(fw, i+n); fw 4627 tools/finsig_dryos.c if (u>fw->data_start && u<fw->data_start+fw->data_len*4 && (fwRd(fw,i+n)>3)) fw 4630 tools/finsig_dryos.c u = u - fw->data_start + fw->data_init_start; fw 4633 tools/finsig_dryos.c else if (us==0 && u>fw->base && u<fw->base+fw->size*4-4 && (u&3)==0) fw 4648 tools/finsig_dryos.c int ii = adr2idx(fw, exm_typ_tbl); fw 4652 tools/finsig_dryos.c if ( (fwval(fw,ii+n)!=0) && isASCIIstring(fw, fwval(fw,ii+n)) ) fw 4654 tools/finsig_dryos.c extyp = adr2ptr(fw, fwval(fw,ii+n)); fw 4669 tools/finsig_dryos.c if ( ((fwval(fw,i+n)&0xffff0000)==0xe59f0000) ) // ldr rx, [pc, #imm] fw 4671 tools/finsig_dryos.c u = LDR2val(fw, i+n); fw 4672 tools/finsig_dryos.c if (u>fw->data_start+fw->data_len*4 && u<fw->memisostart && (fwRd(fw,i+n)>3)) fw 4681 tools/finsig_dryos.c print_stubs_min(fw,"exmem_alloc_table",u,idx2adr(fw,i+n)); fw 4685 tools/finsig_dryos.c print_stubs_min(fw,"exmem_types_table",exm_typ_tbl,exm_typ_tbl_orig); fw 4694 tools/finsig_dryos.c int match_levent_table(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4696 tools/finsig_dryos.c if ((fw->buf[k] > fw->base) && (fw->buf[k+1] == 0x00000800) && (fw->buf[k+2] == 0x00000002)) fw 4698 tools/finsig_dryos.c print_stubs_min(fw,"levent_table",idx2adr(fw,k),idx2adr(fw,k)); fw 4700 tools/finsig_dryos.c uint32_t levent_tbl = idx2adr(fw,k); fw 4702 tools/finsig_dryos.c write_levent_table_dump(fw, levent_tbl); fw 4708 tools/finsig_dryos.c int match_movie_status(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4710 tools/finsig_dryos.c if (isLDR_PC(fw, k) && // LDR R0, =base fw 4711 tools/finsig_dryos.c ((fw->buf[k+1] & 0xFE0F0000) == 0xE20F0000) && // ADR R1, =sub fw 4712 tools/finsig_dryos.c isSTR(fw, k+2) && // STR R1, [R0,N] fw 4713 tools/finsig_dryos.c (fw->buf[k+3] == 0xE3A01003) && // MOV R1, 3 fw 4714 tools/finsig_dryos.c isSTR(fw, k+4) && // STR R1, [R0,ofst] fw 4715 tools/finsig_dryos.c (LDR2val(fw,k) < fw->base)) fw 4717 tools/finsig_dryos.c uint32_t base = LDR2val(fw,k); fw 4718 tools/finsig_dryos.c uint32_t ofst = fw->buf[k+4] & 0x00000FFF; fw 4719 tools/finsig_dryos.c print_stubs_min(fw,"movie_status",base+ofst,idx2adr(fw,k)); fw 4723 tools/finsig_dryos.c if (isLDR_PC(fw, k) && // LDR R1, =sub fw 4724 tools/finsig_dryos.c isLDR_PC(fw, k+1) && // LDR R0, =base fw 4725 tools/finsig_dryos.c isSTR(fw, k+2) && // STR R1, [R0,N] fw 4726 tools/finsig_dryos.c (fw->buf[k+3] == 0xE3A01003) && // MOV R1, 3 fw 4727 tools/finsig_dryos.c isSTR(fw, k+4) && // STR R1, [R0,ofst] fw 4728 tools/finsig_dryos.c (LDR2val(fw,k+1) < fw->base)) fw 4730 tools/finsig_dryos.c uint32_t base = LDR2val(fw,k+1); fw 4731 tools/finsig_dryos.c uint32_t ofst = fw->buf[k+4] & 0x00000FFF; fw 4732 tools/finsig_dryos.c print_stubs_min(fw,"movie_status",base+ofst,idx2adr(fw,k)); fw 4736 tools/finsig_dryos.c if (isLDR_PC(fw, k) && // LDR Rx, =base fw 4737 tools/finsig_dryos.c isLDR(fw, k+1) && (fwRd(fw,k) == fwRn(fw,k+1)) && // LDR R0, [Rx, ...] fw 4738 tools/finsig_dryos.c isCMP(fw, k+2) && (fwRd(fw,k+2) == fwRd(fw,k+1)) && // CMP R0, #... fw 4739 tools/finsig_dryos.c (fwval(fw,k+3) == 0x03A00005) && fw 4740 tools/finsig_dryos.c isSTR_cond(fw, k+4) && (fwRn(fw,k+4) == fwRd(fw,k)) && // STRxx R0, [Rx,ofst] fw 4741 tools/finsig_dryos.c (LDR2val(fw,k) < fw->base)) fw 4743 tools/finsig_dryos.c uint32_t base = LDR2val(fw,k); fw 4744 tools/finsig_dryos.c uint32_t ofst = fwOp2(fw,k+4); fw 4745 tools/finsig_dryos.c print_stubs_min(fw,"movie_status",base+ofst,idx2adr(fw,k)); fw 4751 tools/finsig_dryos.c int match_full_screen_refresh(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4753 tools/finsig_dryos.c if (((fw->buf[k] & 0xFF1FF000) == 0xE51F0000) && // LDR R0, =base fw 4754 tools/finsig_dryos.c (fw->buf[k+1] == 0xE5D01000) && // LDRB R1, [R0] fw 4755 tools/finsig_dryos.c (fw->buf[k+2] == 0xE3811002) && // ORR R1, R1, #2 fw 4756 tools/finsig_dryos.c (fw->buf[k+3] == 0xE5C01000) && // STRB R1, [R0] fw 4757 tools/finsig_dryos.c isBX_LR(fw,k+4)) // BX LR fw 4759 tools/finsig_dryos.c uint32_t base = LDR2val(fw,k); fw 4760 tools/finsig_dryos.c print_stubs_min(fw,"full_screen_refresh",base,idx2adr(fw,k)); fw 4765 tools/finsig_dryos.c int match_canon_shoot_menu_active(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4767 tools/finsig_dryos.c if (((fw->buf[k] & 0xFF1FF000) == 0xE51F1000) && // LDR R1, =base fw 4768 tools/finsig_dryos.c ((fw->buf[k+1] & 0xFFFFF000) == 0xE5D10000) && // LDRB R0, [R1, #n] fw 4769 tools/finsig_dryos.c (fw->buf[k+2] == 0xE2800001) && // ADD R0, R0, #1 fw 4770 tools/finsig_dryos.c ((fw->buf[k+3] & 0xFFFFF000) == 0xE5C10000) && // STRB R0, [R1, #n] fw 4771 tools/finsig_dryos.c (isB(fw,k+4))) // B fw 4773 tools/finsig_dryos.c uint32_t base = LDR2val(fw,k); fw 4774 tools/finsig_dryos.c uint32_t ofst = fw->buf[k+1] & 0x00000FFF; fw 4775 tools/finsig_dryos.c print_stubs_min(fw,"canon_shoot_menu_active",base+ofst,idx2adr(fw,k)); fw 4778 tools/finsig_dryos.c if (((fw->buf[k] & 0xFF1FF000) == 0xE51F0000) && // LDR R0, =base fw 4779 tools/finsig_dryos.c ((fw->buf[k+1] & 0xFFFFF000) == 0xE5D01000) && // LDRB R1, [R0, #n] fw 4780 tools/finsig_dryos.c (fw->buf[k+2] == 0xE2811001) && // ADD R1, R1, #1 fw 4781 tools/finsig_dryos.c ((fw->buf[k+3] & 0xFFFFF000) == 0xE5C01000) && // STRB R1, [R0, #n] fw 4782 tools/finsig_dryos.c (isB(fw,k+4))) // B fw 4784 tools/finsig_dryos.c uint32_t base = LDR2val(fw,k); fw 4785 tools/finsig_dryos.c uint32_t ofst = fw->buf[k+1] & 0x00000FFF; fw 4786 tools/finsig_dryos.c print_stubs_min(fw,"canon_shoot_menu_active",base+ofst,idx2adr(fw,k)); fw 4791 tools/finsig_dryos.c int match_playrec_mode(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4793 tools/finsig_dryos.c if (((fw->buf[k] & 0xFF1FF000) == 0xE51F1000) && // LDR R1, =base fw 4794 tools/finsig_dryos.c ((fw->buf[k+1] & 0xFFFFF000) == 0xE5810000) && // STR R0, [R1, #n] fw 4795 tools/finsig_dryos.c ((fw->buf[k+3] & 0xFF1FF000) == 0xE51F0000) && // LDR R0, =base fw 4796 tools/finsig_dryos.c ((fw->buf[k+4] & 0xFFFFF000) == 0xE5900000) && // LDR R0, [R0, #n] fw 4797 tools/finsig_dryos.c ((fw->buf[k+6] & 0xFF1FF000) == 0xE51F1000) && // LDR R1, =base fw 4798 tools/finsig_dryos.c ((fw->buf[k+9] & 0xFF1FF000) == 0xE51F0000) && // LDR R0, =base fw 4799 tools/finsig_dryos.c ((fw->buf[k+12] & 0xFF1FF000) == 0xE51F1000) && // LDR R1, =base fw 4800 tools/finsig_dryos.c ((fw->buf[k+15] & 0xFF1FF000) == 0xE51F0000) && // LDR R0, =base fw 4801 tools/finsig_dryos.c ((fw->buf[k+18] & 0xFF1FF000) == 0xE51F1000) && // LDR R1, =base fw 4802 tools/finsig_dryos.c (LDR2val(fw,k) == LDR2val(fw,k+3)) && fw 4803 tools/finsig_dryos.c (LDR2val(fw,k) == LDR2val(fw,k+6)) && fw 4804 tools/finsig_dryos.c (LDR2val(fw,k) == LDR2val(fw,k+9)) && fw 4805 tools/finsig_dryos.c (LDR2val(fw,k) == LDR2val(fw,k+12)) && fw 4806 tools/finsig_dryos.c (LDR2val(fw,k) == LDR2val(fw,k+15)) && fw 4807 tools/finsig_dryos.c (LDR2val(fw,k) == LDR2val(fw,k+18))) fw 4809 tools/finsig_dryos.c uint32_t base = LDR2val(fw,k); fw 4810 tools/finsig_dryos.c uint32_t ofst = fw->buf[k+1] & 0x00000FFF; fw 4811 tools/finsig_dryos.c print_stubs_min(fw,"playrec_mode",base+ofst,idx2adr(fw,k)); fw 4816 tools/finsig_dryos.c int match_some_flag_for_af_scan(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4818 tools/finsig_dryos.c if (isB(fw,k) && // B loc fw 4819 tools/finsig_dryos.c isB(fw,k+1) && // B loc fw 4820 tools/finsig_dryos.c isB(fw,k+2) && // B loc fw 4821 tools/finsig_dryos.c isB(fw,k+3) && // B loc fw 4822 tools/finsig_dryos.c isB(fw,k+4) && // B loc fw 4823 tools/finsig_dryos.c isB(fw,k+5) && // B loc fw 4824 tools/finsig_dryos.c isB(fw,k+6) && // B loc fw 4825 tools/finsig_dryos.c isB(fw,k+7) && // B loc fw 4826 tools/finsig_dryos.c (followBranch(fw,idx2adr(fw,k),1) != followBranch(fw,idx2adr(fw,k+1),1)) && fw 4827 tools/finsig_dryos.c (followBranch(fw,idx2adr(fw,k),1) == followBranch(fw,idx2adr(fw,k+2),1)) && fw 4828 tools/finsig_dryos.c (followBranch(fw,idx2adr(fw,k),1) == followBranch(fw,idx2adr(fw,k+3),1)) && fw 4829 tools/finsig_dryos.c (followBranch(fw,idx2adr(fw,k),1) != followBranch(fw,idx2adr(fw,k+4),1)) && fw 4830 tools/finsig_dryos.c (followBranch(fw,idx2adr(fw,k),1) != followBranch(fw,idx2adr(fw,k+5),1)) && fw 4831 tools/finsig_dryos.c (followBranch(fw,idx2adr(fw,k),1) == followBranch(fw,idx2adr(fw,k+6),1)) && fw 4832 tools/finsig_dryos.c (followBranch(fw,idx2adr(fw,k),1) == followBranch(fw,idx2adr(fw,k+7),1)) && fw 4833 tools/finsig_dryos.c (isLDR_PC(fw,adr2idx(fw,followBranch(fw,idx2adr(fw,k),1))))) // LDR R0, =base fw 4835 tools/finsig_dryos.c uint32_t base = LDR2val(fw,adr2idx(fw,followBranch(fw,idx2adr(fw,k),1))); fw 4836 tools/finsig_dryos.c if (base < fw->base) fw 4837 tools/finsig_dryos.c print_stubs_min(fw,"some_flag_for_af_scan",base,followBranch(fw,idx2adr(fw,k),1)); fw 4842 tools/finsig_dryos.c int match_palette_data(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4844 tools/finsig_dryos.c if ((fw->buf[k] == 0) && (fw->buf[k+1] == 0x00FF0000) && fw 4845 tools/finsig_dryos.c (fw->buf[k+577] == 1) && (fw->buf[k+578] == 0x00FF0000) && fw 4846 tools/finsig_dryos.c (fw->buf[k+1154] == 2) && (fw->buf[k+1155] == 0x00FF0000)) fw 4848 tools/finsig_dryos.c return idx2adr(fw,k); fw 4850 tools/finsig_dryos.c else if ((fw->buf[k] == 0) && (fw->buf[k+1] == 0x00FF0000) && fw 4851 tools/finsig_dryos.c (fw->buf[k+513] == 1) && (fw->buf[k+514] == 0x00FF0000) && fw 4852 tools/finsig_dryos.c (fw->buf[k+1026] == 2) && (fw->buf[k+1027] == 0x00FF0000)) fw 4854 tools/finsig_dryos.c return idx2adr(fw,k); fw 4859 tools/finsig_dryos.c int match_palette_buffer_offset(firmware *fw, int k) fw 4861 tools/finsig_dryos.c int idx2 = idxFollowBranch(fw, k, 0x01000001); fw 4862 tools/finsig_dryos.c if (isLDR(fw, idx2+2) && isBL(fw, idx2+3)) fw 4864 tools/finsig_dryos.c uint32_t palette_size = LDR2val(fw,idx2+2); fw 4867 tools/finsig_dryos.c bprintf("// Offset from start of palette_buffer to color data = %d (Found @0x%08x)\n",palette_size-0x400,idx2adr(fw,idx2+2)); fw 4871 tools/finsig_dryos.c else if (isADR(fw, idx2+2) && isBL(fw, idx2+3)) fw 4873 tools/finsig_dryos.c uint32_t palette_size = ALUop2(fw,idx2+2); fw 4876 tools/finsig_dryos.c bprintf("// Offset from start of palette_buffer to color data = %d (Found @0x%08x)\n",palette_size-0x400,idx2adr(fw,idx2+2)); fw 4883 tools/finsig_dryos.c int match_palette_data3(firmware *fw, int k, uint32_t palette_data, uint32_t v2) fw 4885 tools/finsig_dryos.c if (isLDR_PC(fw, k) && (LDR2val(fw,k) == palette_data) && isLDR_PC(fw,k-1) && isLDR_PC(fw,k-6) && isLDR(fw,k-5)) fw 4887 tools/finsig_dryos.c int palette_control = LDR2val(fw,k-6); fw 4888 tools/finsig_dryos.c int ptr_offset = fwOp2(fw,k-5); fw 4889 tools/finsig_dryos.c uint32_t fadr = find_inst_rev(fw, isSTMFD_LR, k-7, 30); fw 4892 tools/finsig_dryos.c int k1 = search_fw(fw, find_B, fadr, 0, 1); fw 4893 tools/finsig_dryos.c if ((k1 > 0) && isLDR_PC(fw,k1-2) && isLDR(fw,k1-1) && (LDR2val(fw,k1-2) == palette_control)) fw 4895 tools/finsig_dryos.c int active_offset = fwOp2(fw,k1-1); fw 4896 tools/finsig_dryos.c print_stubs_min(fw,"active_palette_buffer",palette_control+active_offset,idx2adr(fw,k1-1)); fw 4897 tools/finsig_dryos.c print_stubs_min(fw,"palette_buffer_ptr",palette_control+ptr_offset,idx2adr(fw,k-5)); fw 4898 tools/finsig_dryos.c if (isBL(fw,k+8)) fw 4900 tools/finsig_dryos.c fadr = followBranch(fw, idx2adr(fw,k+8), 0x01000001); fw 4901 tools/finsig_dryos.c int idx = adr2idx(fw, fadr); fw 4902 tools/finsig_dryos.c if (isLDR(fw, idx+2) && isBL(fw, idx+3)) fw 4904 tools/finsig_dryos.c uint32_t palette_size = LDR2val(fw,idx+2); fw 4907 tools/finsig_dryos.c bprintf("// Offset from start of palette_buffer to color data = %d (Found @0x%08x)\n",palette_size-0x400,idx2adr(fw,idx+2)); fw 4918 tools/finsig_dryos.c int match_palette_data2(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4920 tools/finsig_dryos.c if (isLDR(fw,k) && (LDR2val(fw,k) == v1)) fw 4925 tools/finsig_dryos.c if (isBL(fw,k1) && isLDMFD(fw,k1+2)) fw 4927 tools/finsig_dryos.c uint32_t fadr = followBranch(fw, idx2adr(fw,k1), 0x01000001); fw 4928 tools/finsig_dryos.c int idx = adr2idx(fw, fadr); fw 4932 tools/finsig_dryos.c if (isSTR(fw,k2) && isLDMFD(fw,k2+1)) fw 4934 tools/finsig_dryos.c int ptr_offset = fwval(fw,k2) & 0xFFF; fw 4935 tools/finsig_dryos.c print_stubs_min(fw,"palette_buffer_ptr",v2+ptr_offset,idx2adr(fw,k2)); fw 4939 tools/finsig_dryos.c if (isBL(fw,k) && isCMP(fw,k+1) && isADR_PC(fw,k+2)) fw 4941 tools/finsig_dryos.c fadr = ADR2adr(fw,k+2); fw 4942 tools/finsig_dryos.c idx = adr2idx(fw, fadr); fw 4946 tools/finsig_dryos.c if (isBL(fw,k3)) fw 4948 tools/finsig_dryos.c if (match_palette_buffer_offset(fw,k3)) fw 4958 tools/finsig_dryos.c else if (isLDR_cond(fw,k1) && isLDMFD(fw,k1+2) && isBL(fw,k1-2)) fw 4960 tools/finsig_dryos.c int ptr_offset = fwval(fw,k1) & 0xFFF; fw 4961 tools/finsig_dryos.c print_stubs_min(fw,"palette_buffer_ptr",v2+ptr_offset,idx2adr(fw,k1)); fw 4962 tools/finsig_dryos.c match_palette_buffer_offset(fw, k1-2); fw 4970 tools/finsig_dryos.c int match_SavePaletteData(firmware *fw, int idx, int palette_data) fw 4972 tools/finsig_dryos.c if (isBL(fw,idx+13)) fw 4974 tools/finsig_dryos.c uint32_t fadr = followBranch(fw, idx2adr(fw,idx+13), 0x01000001); fw 4975 tools/finsig_dryos.c idx = adr2idx(fw, fadr); fw 4976 tools/finsig_dryos.c if (isLDR(fw,idx) && isLDR(fw,idx+1) && isB(fw,idx+2)) fw 4978 tools/finsig_dryos.c uint32_t palette_control = LDR2val(fw,idx); fw 4979 tools/finsig_dryos.c print_stubs_min(fw,"palette_control",palette_control,idx2adr(fw,idx)); fw 4980 tools/finsig_dryos.c int active_offset = fwval(fw,idx+1) & 0xFFF; fw 4981 tools/finsig_dryos.c print_stubs_min(fw,"active_palette_buffer",palette_control+active_offset,idx2adr(fw,idx+1)); fw 4982 tools/finsig_dryos.c fadr = followBranch(fw,idx2adr(fw,idx+2),1); fw 4983 tools/finsig_dryos.c idx = adr2idx(fw, fadr); fw 4984 tools/finsig_dryos.c if (isLDR(fw,idx+17) && isLDR(fw,idx+18) && isLDR(fw,idx+12) && (LDR2val(fw,idx+12) == palette_control)) fw 4986 tools/finsig_dryos.c if (isLDR(fw,idx+13)) fw 4988 tools/finsig_dryos.c int ptr_offset = fwval(fw,idx+13) & 0xFFF; fw 4989 tools/finsig_dryos.c print_stubs_min(fw,"palette_buffer_ptr",palette_control+ptr_offset,idx2adr(fw,idx+13)); fw 4992 tools/finsig_dryos.c if ((fwval(fw,idx+18) & 0x0000F000) == 0) fw 4994 tools/finsig_dryos.c palette_buffer = LDR2val(fw,idx+17); fw 4995 tools/finsig_dryos.c print_stubs_min(fw,"palette_buffer",palette_buffer,idx2adr(fw,idx+17)); fw 4999 tools/finsig_dryos.c palette_buffer = LDR2val(fw,idx+18); fw 5000 tools/finsig_dryos.c print_stubs_min(fw,"palette_buffer",palette_buffer,idx2adr(fw,idx+18)); fw 5002 tools/finsig_dryos.c if (isBL(fw,idx+26)) fw 5004 tools/finsig_dryos.c fadr = followBranch(fw, idx2adr(fw,idx+26), 0x01000001); fw 5005 tools/finsig_dryos.c idx = adr2idx(fw, fadr); fw 5006 tools/finsig_dryos.c if (isLDR(fw, idx+2) && isBL(fw, idx+3)) fw 5008 tools/finsig_dryos.c uint32_t palette_size = LDR2val(fw,idx+2); fw 5011 tools/finsig_dryos.c bprintf("// Offset from start of palette_buffer to color data = %d (Found @0x%08x)\n",palette_size-0x400,idx2adr(fw,idx+2)); fw 5017 tools/finsig_dryos.c else if (isLDR(fw,idx) && isLDR(fw,idx+6) && isLDR(fw,idx+7) && isBX(fw,idx+8)) fw 5020 tools/finsig_dryos.c if ((fwval(fw,idx+6) & 0x0000F000) == 0) fw 5021 tools/finsig_dryos.c active_offset = fwval(fw,idx+6) & 0xFFF; fw 5022 tools/finsig_dryos.c else if ((fwval(fw,idx+7) & 0x0000F000) == 0) fw 5023 tools/finsig_dryos.c active_offset = fwval(fw,idx+7) & 0xFFF; fw 5026 tools/finsig_dryos.c uint32_t palette_control = LDR2val(fw,idx); fw 5028 tools/finsig_dryos.c print_stubs_min(fw,"active_palette_buffer",palette_control+active_offset,idx2adr(fw,idx+1)); fw 5029 tools/finsig_dryos.c search_fw(fw, match_palette_data2, palette_data, palette_control, 1); fw 5038 tools/finsig_dryos.c int match_viewport_address3(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 5040 tools/finsig_dryos.c if (isLDR_PC(fw,k) && (LDR2val(fw,k) == v1)) fw 5043 tools/finsig_dryos.c int k1 = find_inst_rev(fw, isSTMFD_LR, k-1, 1000); fw 5047 tools/finsig_dryos.c if (isLDR_PC(fw,k1+1) && isLDR_PC(fw,k1+2) && isLDR(fw,k1+3) && fw 5048 tools/finsig_dryos.c (fwRd(fw,k1+1) == fwRn(fw,k1+3))) fw 5050 tools/finsig_dryos.c uint32_t a = LDR2val(fw,k1+1); fw 5051 tools/finsig_dryos.c print_stubs_min(fw,"viewport_buffers",v1,idx2adr(fw,k)); fw 5052 tools/finsig_dryos.c print_stubs_min(fw,"active_viewport_buffer",a,idx2adr(fw,k1+1)); fw 5056 tools/finsig_dryos.c if (isLDR_PC(fw,k1+1) && isLDR_PC(fw,k1+3) && isLDR(fw,k1+4) && fw 5057 tools/finsig_dryos.c (fwRd(fw,k1+1) == fwRn(fw,k1+4))) fw 5059 tools/finsig_dryos.c uint32_t a = LDR2val(fw,k1+1); fw 5060 tools/finsig_dryos.c print_stubs_min(fw,"viewport_buffers",v1,idx2adr(fw,k)); fw 5061 tools/finsig_dryos.c print_stubs_min(fw,"active_viewport_buffer",a,idx2adr(fw,k1+1)); fw 5065 tools/finsig_dryos.c if (isLDR_PC(fw,k1+1) && isLDR_PC(fw,k1+4) && isLDR(fw,k1+5) && fw 5066 tools/finsig_dryos.c (fwRd(fw,k1+1) == fwRn(fw,k1+5))) fw 5068 tools/finsig_dryos.c uint32_t a = LDR2val(fw,k1+1); fw 5069 tools/finsig_dryos.c print_stubs_min(fw,"viewport_buffers",v1,idx2adr(fw,k)); fw 5070 tools/finsig_dryos.c print_stubs_min(fw,"active_viewport_buffer",a,idx2adr(fw,k1+1)); fw 5078 tools/finsig_dryos.c int match_viewport_address2(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 5080 tools/finsig_dryos.c if (fw->buf[k] == v1) fw 5082 tools/finsig_dryos.c if (search_fw(fw, match_viewport_address3, v1, 0, 1)) fw 5088 tools/finsig_dryos.c int match_viewport_address(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 5090 tools/finsig_dryos.c if (fw->buf[k] == v1) fw 5093 tools/finsig_dryos.c if (search_fw(fw, match_viewport_address2, idx2adr(fw,k), 0, 1)) fw 5099 tools/finsig_dryos.c int match_physw_status(firmware *fw, int k, int v) fw 5101 tools/finsig_dryos.c if (isLDR_PC(fw,k)) fw 5103 tools/finsig_dryos.c print_stubs_min(fw,"physw_status",LDR2val(fw,k),idx2adr(fw,k)); fw 5109 tools/finsig_dryos.c int match_physw_run(firmware *fw, int k, int v) fw 5111 tools/finsig_dryos.c if (isLDR_PC(fw,k)) fw 5113 tools/finsig_dryos.c uint32_t base = LDR2val(fw,k); fw 5114 tools/finsig_dryos.c uint32_t fadr = followBranch(fw, idx2adr(fw,k+1), 1); fw 5115 tools/finsig_dryos.c uint32_t ofst = fw->buf[adr2idx(fw,fadr)] & 0x00000FFF; fw 5116 tools/finsig_dryos.c print_stubs_min(fw,"physw_run",base+ofst,idx2adr(fw,k)); fw 5118 tools/finsig_dryos.c ofst = fw->buf[k+2] & 0x00000FFF; fw 5119 tools/finsig_dryos.c print_stubs_min(fw,"physw_sleep_delay",base+ofst,idx2adr(fw,k)); fw 5125 tools/finsig_dryos.c int match_canon_menu_active(firmware *fw, int k, int v) fw 5127 tools/finsig_dryos.c if (isLDR_PC(fw,k)) fw 5129 tools/finsig_dryos.c uint32_t base = LDR2val(fw,k); fw 5133 tools/finsig_dryos.c if (isLDR(fw,k1)) fw 5135 tools/finsig_dryos.c uint32_t ofst = fw->buf[k1] & 0x00000FFF; fw 5136 tools/finsig_dryos.c print_stubs_min(fw,"canon_menu_active",base+ofst,idx2adr(fw,k)); fw 5144 tools/finsig_dryos.c int match_zoom_busy(firmware *fw, int k, int v) fw 5146 tools/finsig_dryos.c if (isBL(fw,k)) fw 5148 tools/finsig_dryos.c int idx1 = idxFollowBranch(fw,k,0x01000001); fw 5152 tools/finsig_dryos.c if ((fw->buf[k1] & 0xFFFF0000) == 0xE8BD0000) // LDMFD fw 5155 tools/finsig_dryos.c if (isADR_PC(fw,k1+1)) fw 5157 tools/finsig_dryos.c fadr = ADR2adr(fw,k1+1); fw 5159 tools/finsig_dryos.c else if (isADR_PC(fw,k1+2)) fw 5161 tools/finsig_dryos.c fadr = ADR2adr(fw,k1+2); fw 5163 tools/finsig_dryos.c else if (isADR_PC(fw,k1-3)) fw 5165 tools/finsig_dryos.c fadr = ADR2adr(fw,k1-3); fw 5167 tools/finsig_dryos.c else if (isLDR_PC(fw,k1+1)) fw 5169 tools/finsig_dryos.c fadr = LDR2val(fw,k1+1); fw 5171 tools/finsig_dryos.c else if (isLDR_PC(fw,k1+2)) fw 5173 tools/finsig_dryos.c fadr = LDR2val(fw,k1+2); fw 5177 tools/finsig_dryos.c int idx2 = adr2idx(fw,fadr); fw 5178 tools/finsig_dryos.c if (isLDR_PC(fw,idx2+1) && isLDR(fw,idx2+2)) fw 5180 tools/finsig_dryos.c int base = LDR2val(fw,idx2+1); fw 5181 tools/finsig_dryos.c int ofst = fw->buf[idx2+2] & 0xFFF; fw 5182 tools/finsig_dryos.c print_stubs_min(fw,"zoom_busy",base+ofst-4,fadr); fw 5193 tools/finsig_dryos.c int match_focus_busy(firmware *fw, int k, int v) fw 5195 tools/finsig_dryos.c if ((fw->buf[k] & 0xFFFF0000) == 0xE8BD0000) // LDMFD fw 5198 tools/finsig_dryos.c if (isBL(fw,k-2)) fw 5200 tools/finsig_dryos.c k1 = idxFollowBranch(fw,k-2,0x01000001); fw 5202 tools/finsig_dryos.c if (isBL(fw,k-1)) fw 5204 tools/finsig_dryos.c k1 = idxFollowBranch(fw,k-1,0x01000001); fw 5208 tools/finsig_dryos.c if (isLDR_PC(fw,k1+1) && isLDR(fw,k1+3)) fw 5210 tools/finsig_dryos.c int base = LDR2val(fw,k1+1); fw 5211 tools/finsig_dryos.c int ofst = fw->buf[k1+3] & 0xFFF; fw 5212 tools/finsig_dryos.c print_stubs_min(fw,"focus_busy",base+ofst-4,idx2adr(fw,k1)); fw 5221 tools/finsig_dryos.c int match_bitmap_buffer2(firmware *fw, int k, int v) fw 5223 tools/finsig_dryos.c uint32_t screen_lock = idx2adr(fw,k); fw 5224 tools/finsig_dryos.c if (isBL(fw,v) && (followBranch(fw,idx2adr(fw,v),0x01000001) == screen_lock) && isBL(fw,v+2) && isBL(fw,v+3)) fw 5226 tools/finsig_dryos.c uint32_t fadr = followBranch2(fw,idx2adr(fw,v+3),0x01000001); fw 5227 tools/finsig_dryos.c int k1 = adr2idx(fw,fadr); fw 5228 tools/finsig_dryos.c if (isLDR_PC(fw,k1+1)) fw 5230 tools/finsig_dryos.c int reg = (fwval(fw,k1+1) & 0x0000F000) >> 12; fw 5231 tools/finsig_dryos.c uint32_t adr = LDR2val(fw,k1+1); fw 5235 tools/finsig_dryos.c if (isLDR_PC(fw,k2) && isLDR(fw,k2+1) && (((fwval(fw,k2+1) & 0x000F0000) >> 16) == reg)) fw 5237 tools/finsig_dryos.c uint32_t bitmap_buffer = LDR2val(fw,k2); fw 5240 tools/finsig_dryos.c uint32_t active_bitmap_buffer = adr + (fwval(fw,k2+1) & 0xFFF); fw 5241 tools/finsig_dryos.c print_stubs_min(fw,"bitmap_buffer",bitmap_buffer,idx2adr(fw,k2)); fw 5242 tools/finsig_dryos.c print_stubs_min(fw,"active_bitmap_buffer",active_bitmap_buffer,idx2adr(fw,k2+1)); fw 5252 tools/finsig_dryos.c int match_bitmap_buffer(firmware *fw, int k, int v) fw 5254 tools/finsig_dryos.c search_saved_sig(fw, "ScreenLock", match_bitmap_buffer2, k, 0, 1); fw 5258 tools/finsig_dryos.c int match_raw_buffer(firmware *fw, int k, uint32_t rb1, uint32_t v2) fw 5260 tools/finsig_dryos.c if (((fwval(fw,k) == rb1) && (fwval(fw,k+4) == rb1) && (fwval(fw,k-2) != 1) && (fwval(fw,k+2) >= fw->uncached_adr)) || fw 5261 tools/finsig_dryos.c ((fwval(fw,k) == rb1) && (fwval(fw,k+4) == rb1) && (fwval(fw,k+20) == rb1))) fw 5263 tools/finsig_dryos.c uint32_t rb2 = fwval(fw,k+1); fw 5266 tools/finsig_dryos.c bprintf("// Camera has 2 RAW buffers @ 0x%08x & 0x%08x\n", rb1, rb2, idx2adr(fw,k)); fw 5269 tools/finsig_dryos.c print_stubs_min(fw,"raw_buffers",idx2adr(fw,k),idx2adr(fw,k)); fw 5273 tools/finsig_dryos.c else if ((fwval(fw,k) == rb1) && (fwval(fw,k-2) == 2) && (fwval(fw,k-7) == rb1)) fw 5275 tools/finsig_dryos.c uint32_t rb2 = fwval(fw,k+3); fw 5278 tools/finsig_dryos.c bprintf("// Camera has 2 RAW buffers @ 0x%08x & 0x%08x\n", rb1, rb2, idx2adr(fw,k)); fw 5281 tools/finsig_dryos.c print_stubs_min(fw,"raw_buffers",idx2adr(fw,k),idx2adr(fw,k)); fw 5288 tools/finsig_dryos.c int match_fileiosem(firmware *fw, int k, uint32_t fadr, uint32_t nadr) fw 5290 tools/finsig_dryos.c if ((k > 5) && isADR_PC(fw, k) && isBL(fw,k+1) && (ADR2adr(fw,k) == nadr) && (followBranch2(fw, idx2adr(fw,k+1), 0x01000001) == fadr)) fw 5295 tools/finsig_dryos.c if (isLDR(fw,j)) fw 5297 tools/finsig_dryos.c if (fwRd(fw,j) == 0) fw 5298 tools/finsig_dryos.c rn = fwRn(fw, j); fw 5299 tools/finsig_dryos.c else if (fwRd(fw,j) == rn) fw 5301 tools/finsig_dryos.c int v = LDR2val(fw,j); fw 5302 tools/finsig_dryos.c print_stubs_min(fw,"fileio_semaphore",v,idx2adr(fw,j)); fw 5312 tools/finsig_dryos.c void find_stubs_min(firmware *fw) fw 5322 tools/finsig_dryos.c search_saved_sig(fw, "kbd_read_keys", match_physw_status, 0, 0, 5); fw 5325 tools/finsig_dryos.c search_saved_sig(fw, "task_PhySw", match_physw_run, 0, 0, 5); fw 5328 tools/finsig_dryos.c search_fw(fw, match_levent_table, 0, 0, 1); fw 5332 tools/finsig_dryos.c print_stubs_min(fw,"FlashParamsTable",FlashParamsTable_address,FlashParamsTable_address); fw 5335 tools/finsig_dryos.c search_fw(fw, match_movie_status, 0, 0, 1); fw 5338 tools/finsig_dryos.c uint32_t sadr = find_str(fw, "CompressionRateAdjuster.c"); fw 5339 tools/finsig_dryos.c k = find_nxt_str_ref(fw, sadr, -1); fw 5343 tools/finsig_dryos.c int f = find_inst_rev(fw, isSTMFD_LR, k-1, 100); fw 5346 tools/finsig_dryos.c f = search_fw(fw, find_BL, f, 0, 1); fw 5350 tools/finsig_dryos.c if ((fwval(fw,f) & 0xFFF00000) == 0xE2400000) // SUB fw 5352 tools/finsig_dryos.c int src = fwRn(fw,f); fw 5355 tools/finsig_dryos.c if (isLDR_PC(fw,k1) && (fwRd(fw,k1) == src)) fw 5357 tools/finsig_dryos.c uint32_t v = LDR2val(fw,k1) - ALUop2(fw,f); fw 5358 tools/finsig_dryos.c print_stubs_min(fw,"video_compression_rate",v,idx2adr(fw,k1)); fw 5365 tools/finsig_dryos.c k = find_nxt_str_ref(fw, sadr, k); fw 5369 tools/finsig_dryos.c search_fw(fw, match_full_screen_refresh, 0, 0, 1); fw 5372 tools/finsig_dryos.c search_saved_sig(fw, "StartRecModeMenu", match_canon_menu_active, 0, 0, 5); fw 5375 tools/finsig_dryos.c search_fw(fw, match_canon_shoot_menu_active, 0, 0, 1); fw 5379 tools/finsig_dryos.c k = find_str_ref(fw, "AFFChg"); fw 5380 tools/finsig_dryos.c if ((k >= 0) && isBL(fw,k+6)) fw 5382 tools/finsig_dryos.c k = idxFollowBranch(fw, k+6, 0x01000001); fw 5383 tools/finsig_dryos.c if (isLDR_PC(fw,k) && isLDR(fw,k+1)) fw 5385 tools/finsig_dryos.c uint32_t base = LDR2val(fw,k); fw 5386 tools/finsig_dryos.c uint32_t ofst = fw->buf[k+1] & 0x00000FFF; fw 5387 tools/finsig_dryos.c print_stubs_min(fw,"playrec_mode",base+ofst,idx2adr(fw,k)); fw 5393 tools/finsig_dryos.c search_fw(fw, match_playrec_mode, 0, 0, 1); fw 5399 tools/finsig_dryos.c k = find_str_ref(fw, "m_ZoomState :%d\n"); fw 5402 tools/finsig_dryos.c if (isLDR(fw,k-1)) fw 5404 tools/finsig_dryos.c uint32_t ofst = fw->buf[k-1] & 0x00000FFF; fw 5405 tools/finsig_dryos.c uint32_t reg = (fw->buf[k-1] & 0x000F0000) >> 16; fw 5409 tools/finsig_dryos.c if ((fw->buf[k1] & 0xFF1FF000) == ldr_inst) fw 5411 tools/finsig_dryos.c uint32_t base = LDR2val(fw,k1); fw 5412 tools/finsig_dryos.c print_stubs_min(fw,"zoom_status",base+ofst,idx2adr(fw,k)); fw 5422 tools/finsig_dryos.c for (k=0; k<fw->size; k++) fw 5424 tools/finsig_dryos.c if (((fw->buf[k] & 0xFF1FF000) == 0xE51F0000) && // LDR R0, =base fw 5425 tools/finsig_dryos.c (fw->buf[k+1] == 0xE5D00000) && // LDRB R0, [R0] fw 5426 tools/finsig_dryos.c (fw->buf[k+2] == 0xE1B00000) && // MOVS R0, R0 fw 5427 tools/finsig_dryos.c (fw->buf[k+3] == 0x13A00001) && // MOVNE R0, #1 fw 5428 tools/finsig_dryos.c isBX_LR(fw,k+4)) // BX LR fw 5430 tools/finsig_dryos.c uint32_t base = LDR2val(fw,k); fw 5431 tools/finsig_dryos.c print_stubs_min(fw,"zoom_status",base,idx2adr(fw,k)); fw 5440 tools/finsig_dryos.c k = find_str_ref(fw, "TerminateDeliverToZoomController"); fw 5445 tools/finsig_dryos.c if (isLDR_PC(fw,k+k1)) fw 5447 tools/finsig_dryos.c uint32_t base = LDR2val(fw,k+k1); fw 5448 tools/finsig_dryos.c print_stubs_min(fw,"zoom_status",base+0x20,idx2adr(fw,k+k1)); fw 5457 tools/finsig_dryos.c search_fw(fw, match_some_flag_for_af_scan, 0, 0, 1); fw 5460 tools/finsig_dryos.c if (fw->sv->min_focus_len != 0) fw 5463 tools/finsig_dryos.c for (k=0; k<fw->size; k++) fw 5465 tools/finsig_dryos.c if (fw->buf[k] == fw->sv->min_focus_len) fw 5468 tools/finsig_dryos.c if ((fw->buf[k+1] == 100) && (fw->buf[k+2] == 0)) mul = 3; fw 5469 tools/finsig_dryos.c if ((fw->buf[k+1] == 100) && (fw->buf[k+2] != 0)) mul = 2; fw 5470 tools/finsig_dryos.c if ((fw->buf[k+1] == 0) && (fw->buf[k+2] != 0)) mul = 2; fw 5471 tools/finsig_dryos.c for (k1 = k + mul; (k1 < fw->size) && (fw->buf[k1] > fw->buf[k1-mul]) && (fw->buf[k1] > fw->sv->min_focus_len) && (fw->buf[k1] < fw->sv->max_focus_len); k1 += mul) ; fw 5472 tools/finsig_dryos.c if (fw->buf[k1] == fw->sv->max_focus_len) fw 5495 tools/finsig_dryos.c print_stubs_min(fw,"focus_len_table",idx2adr(fw,pos),idx2adr(fw,pos)); fw 5500 tools/finsig_dryos.c search_saved_sig(fw, "ResetZoomLens", match_zoom_busy, 0, 0, 5); fw 5503 tools/finsig_dryos.c search_saved_sig(fw, "ResetFocusLens", match_focus_busy, 0, 0, 25); fw 5506 tools/finsig_dryos.c k = find_str_ref(fw, "ShootCon_NotifyStartReviewHold"); fw 5511 tools/finsig_dryos.c if (isLDR_PC(fw,k1) && ((fw->buf[k1+1] & 0xFFFF0FFF) == 0xE3A00001) && isSTR(fw,k1+2) && fw 5512 tools/finsig_dryos.c ((fw->buf[k1+1] & 0x0000F000) == (fw->buf[k1+2] & 0x0000F000)) && fw 5513 tools/finsig_dryos.c ((fw->buf[k1] & 0x0000F000) == ((fw->buf[k1+2] & 0x000F0000) >> 4))) fw 5515 tools/finsig_dryos.c uint32_t base = LDR2val(fw,k1); fw 5516 tools/finsig_dryos.c int ofst = fw->buf[k1+2] & 0x00000FFF; fw 5517 tools/finsig_dryos.c print_stubs_min(fw,"recreview_hold",base+ofst,idx2adr(fw,k1)); fw 5524 tools/finsig_dryos.c uint32_t palette_data = search_fw(fw, match_palette_data, 0, 0, 1); fw 5530 tools/finsig_dryos.c if (search_saved_sig(fw, "SavePaletteData", match_SavePaletteData, palette_data, 0, 1) == 0) fw 5532 tools/finsig_dryos.c search_fw(fw, match_palette_data3, palette_data, 0, 1); fw 5537 tools/finsig_dryos.c search_saved_sig(fw, "GUISrv_StartGUISystem", match_bitmap_buffer, 0, 0, 50); fw 5540 tools/finsig_dryos.c uint32_t v = find_viewport_address(fw,&k); fw 5543 tools/finsig_dryos.c search_fw(fw, match_viewport_address, v, 0, 1); fw 5547 tools/finsig_dryos.c k = find_str_ref(fw, "CRAW BUFF %p"); fw 5552 tools/finsig_dryos.c if (isLDR(fw,k-1)) fw 5554 tools/finsig_dryos.c rb1 = LDR2val(fw,k-1); fw 5557 tools/finsig_dryos.c else if (isMOV_immed(fw,k-1)) fw 5559 tools/finsig_dryos.c rb1 = ALUop2(fw,k-1); fw 5562 tools/finsig_dryos.c else if (isMOV(fw,k-1) && (fwRd(fw,k-1) == 1)) fw 5564 tools/finsig_dryos.c int reg = fwval(fw,k-1) & 0xF; fw 5567 tools/finsig_dryos.c if (isLDR(fw,k1) && (fwRd(fw,k1) == reg)) fw 5569 tools/finsig_dryos.c rb1 = LDR2val(fw,k1); fw 5578 tools/finsig_dryos.c rb2 = search_fw(fw, match_raw_buffer, rb1, 0, 5); fw 5582 tools/finsig_dryos.c sadr = find_str(fw, "SsImgProcBuf.c"); fw 5583 tools/finsig_dryos.c k = find_nxt_str_ref(fw, sadr, -1); fw 5586 tools/finsig_dryos.c int f = find_inst_rev(fw, isSTMFD_LR, k-1, 100); fw 5589 tools/finsig_dryos.c int e = find_inst(fw, isLDMFD_PC, f+1, 200); fw 5594 tools/finsig_dryos.c ((fwval(fw,k1) & 0xFFF00FFF) == 0xE2400001) && // SUB Rx, Rn, #1 fw 5595 tools/finsig_dryos.c isLDR(fw,k1+1) && // LDR Ry, [Rz, fw 5596 tools/finsig_dryos.c ((fwval(fw,k1+2) & 0xFFF00000) == 0xE1500000) && // CMP Rx, Ry fw 5597 tools/finsig_dryos.c (((fwRd(fw,k1) == fwRd(fw,k1+2)) && (fwRd(fw,k1+1) == fwRn(fw,k1+2))) || fw 5598 tools/finsig_dryos.c ((fwRd(fw,k1) == fwRn(fw,k1+2)) && (fwRd(fw,k1+1) == fwRd(fw,k1+2)))) && fw 5599 tools/finsig_dryos.c ((fwval(fw,k1+3) & 0xFFF00FFF) == 0x12800001) && // ADDNE Ry, Ry, #1 fw 5600 tools/finsig_dryos.c ((fwRd(fw,k1+3) == fwRn(fw,k1+3)) && (fwRd(fw,k1+3) == fwRd(fw,k1+1))) && fw 5601 tools/finsig_dryos.c ((fwval(fw,k1+4) & 0xFFF00FFF) == 0x03A00000) && // MOVEQ Ry, #0 fw 5602 tools/finsig_dryos.c (fwRd(fw,k1+4) == fwRd(fw,k1+1)) && fw 5603 tools/finsig_dryos.c isSTR(fw,k1+5) && // STR Ry, [Rz, fw 5604 tools/finsig_dryos.c ((fwRd(fw,k1+5) == fwRd(fw,k1+1)) && (fwRn(fw,k1+5) == fwRn(fw,k1+1)) && (fwOp2(fw,k1+5) == fwOp2(fw,k1+1))) fw 5607 tools/finsig_dryos.c ((fwval(fw,k1) & 0xFFF00FFF) == 0xE2400001) && // SUB Rx, Rn, #1 fw 5608 tools/finsig_dryos.c isLDR(fw,k1+1) && // LDR Ry, [Rz, fw 5609 tools/finsig_dryos.c ((fwval(fw,k1+3) & 0xFFF00000) == 0xE1500000) && // CMP Rx, Ry fw 5610 tools/finsig_dryos.c (((fwRd(fw,k1) == fwRd(fw,k1+3)) && (fwRd(fw,k1+1) == fwRn(fw,k1+3))) || fw 5611 tools/finsig_dryos.c ((fwRd(fw,k1) == fwRn(fw,k1+3)) && (fwRd(fw,k1+1) == fwRd(fw,k1+3)))) && fw 5612 tools/finsig_dryos.c ((fwval(fw,k1+4) & 0xFFF00FFF) == 0x12800001) && // ADDNE Ry, Ry, #1 fw 5613 tools/finsig_dryos.c ((fwRd(fw,k1+4) == fwRn(fw,k1+4)) && (fwRd(fw,k1+4) == fwRd(fw,k1+1))) && fw 5614 tools/finsig_dryos.c ((fwval(fw,k1+5) & 0xFFF00FFF) == 0x03A00000) && // MOVEQ Ry, #0 fw 5615 tools/finsig_dryos.c (fwRd(fw,k1+5) == fwRd(fw,k1+1)) && fw 5616 tools/finsig_dryos.c isSTR(fw,k1+7) && // STR Ry, [Rz, fw 5617 tools/finsig_dryos.c ((fwRd(fw,k1+7) == fwRd(fw,k1+1)) && (fwRn(fw,k1+7) == fwRn(fw,k1+1)) && (fwOp2(fw,k1+7) == fwOp2(fw,k1+1))) fw 5621 tools/finsig_dryos.c int ofst = fwOp2(fw,k1+1); fw 5622 tools/finsig_dryos.c int reg = fwRn(fw,k1+1); fw 5626 tools/finsig_dryos.c if (isLDR_PC(fw,k2) && (fwRd(fw,k2) == reg)) fw 5628 tools/finsig_dryos.c uint32_t base = LDR2val(fw,k2); fw 5629 tools/finsig_dryos.c print_stubs_min(fw,"active_raw_buffer",base+ofst,idx2adr(fw,k1)); fw 5637 tools/finsig_dryos.c k = find_nxt_str_ref(fw, sadr, k); fw 5642 tools/finsig_dryos.c bprintf("// Camera appears to have only 1 RAW buffer @ 0x%08x (Found @0x%08x)\n", rb1, idx2adr(fw,rb1_idx)); fw 5648 tools/finsig_dryos.c k = get_saved_sig(fw, "TakeSemaphoreStrictly"); fw 5652 tools/finsig_dryos.c k = find_str(fw, "FileSem.c"); fw 5655 tools/finsig_dryos.c uint32_t nadr = idx2adr(fw, k); fw 5656 tools/finsig_dryos.c search_fw(fw, match_fileiosem, fadr, nadr, 3); fw 5661 tools/finsig_dryos.c find_exmem_alloc_table(fw); fw 5664 tools/finsig_dryos.c search_saved_sig(fw, "ImagerActivate", match_imager_active, 0/*v*/, 0, 30); fw 5674 tools/finsig_dryos.c search_saved_sig(fw, "PTM_SetCurrentItem", match_uiprop_count, 0, 0, 30); fw 5679 tools/finsig_dryos.c int find_ctypes(firmware *fw, int k) fw 5693 tools/finsig_dryos.c if (k < (fw->size*4 - sizeof(ctypes))) fw 5695 tools/finsig_dryos.c if (memcmp(((char*)fw->buf)+k,ctypes,sizeof(ctypes)) == 0) fw 5697 tools/finsig_dryos.c bprintf("DEF(ctypes, 0x%08x)\n", fw->base + k); fw 5704 tools/finsig_dryos.c int match_nrflag3(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 5706 tools/finsig_dryos.c if (isBL(fw,k) && (idxFollowBranch(fw,k,0x01000001) == v1)) fw 5713 tools/finsig_dryos.c if ((fwval(fw,k3) & 0x0F0FF000) == 0x020D3000) // Dest = R3, Src = SP = skip fw 5715 tools/finsig_dryos.c if ((fwval(fw,k3) & 0xFF0FF000) == 0xE2033000) // ADD/SUB R3,R3,x fw 5718 tools/finsig_dryos.c if ((fwval(fw,k3) & 0x00F00000) == 0x00400000) // SUB fw 5719 tools/finsig_dryos.c ofst1 -= (fwval(fw,k3) & 0x00000FFF); fw 5721 tools/finsig_dryos.c ofst1 += (fwval(fw,k3) & 0x00000FFF); fw 5723 tools/finsig_dryos.c if (isLDR_PC(fw,k3) && (fwRd(fw,k3) == 3)) fw 5725 tools/finsig_dryos.c int ofst2 = LDR2val(fw,k3); fw 5729 tools/finsig_dryos.c bprintf("DEF(_nrflag,0x%04x) // Found @ %08x (0x%04x)\n",ofst2,idx2adr(fw,k3),ofst2); fw 5730 tools/finsig_dryos.c bprintf("//static long *nrflag = (long*)(0x%04x); // Found @ %08x\n",ofst2,idx2adr(fw,k3)); fw 5734 tools/finsig_dryos.c bprintf("DEF(_nrflag,0x%04x) // Found @ %08x (0x%04x) & %08x (-0x%02x)\n",ofst2+ofst1,idx2adr(fw,k3),ofst2,idx2adr(fw,k),-ofst1); fw 5735 tools/finsig_dryos.c bprintf("//static long *nrflag = (long*)(0x%04x-0x%02x); // Found @ %08x & %08x\n",ofst2,-ofst1,idx2adr(fw,k3),idx2adr(fw,k4)); fw 5739 tools/finsig_dryos.c bprintf("DEF(_nrflag,0x%04x) // Found @ %08x (0x%04x) & %08x (+0x%02x)\n",ofst2+ofst1,idx2adr(fw,k3),ofst2,idx2adr(fw,k),ofst1); fw 5740 tools/finsig_dryos.c bprintf("//static long *nrflag = (long*)(0x%04x+0x%02x); // Found @ %08x & %08x\n",ofst2,ofst1,idx2adr(fw,k3),idx2adr(fw,k4)); fw 5749 tools/finsig_dryos.c int match_nrflag(firmware *fw, int idx, int v) fw 5754 tools/finsig_dryos.c if (isLDR(fw, idx+1) && isLDR(fw, idx+2)) fw 5757 tools/finsig_dryos.c int ofst2 = LDR2val(fw, k3); fw 5761 tools/finsig_dryos.c if (isB(fw, k1)) fw 5763 tools/finsig_dryos.c k2 = idxFollowBranch(fw,k1,0x01000001); fw 5764 tools/finsig_dryos.c if (isSTR(fw, k2)) fw 5770 tools/finsig_dryos.c if (isSTR(fw, k2)) fw 5780 tools/finsig_dryos.c int ofst1 = fw->buf[k2] & 0x00000FFF; fw 5782 tools/finsig_dryos.c bprintf("DEF(_nrflag,0x%04x) // Found @ %08x (0x%04x) & %08x (+0x%02x)\n",ofst2+ofst1,idx2adr(fw,k3),ofst2,idx2adr(fw,k2),ofst1); fw 5783 tools/finsig_dryos.c bprintf("//static long *nrflag = (long*)(0x%04x+0x%02x); // Found @ %08x & %08x\n",ofst2,ofst1,idx2adr(fw,k3),idx2adr(fw,k2)); fw 5791 tools/finsig_dryos.c int match_nrflag2(firmware *fw, int k, int v) fw 5794 tools/finsig_dryos.c if (isBL(fw,k)) fw 5796 tools/finsig_dryos.c k = idxFollowBranch(fw,k,0x01000001); fw 5797 tools/finsig_dryos.c return search_fw(fw, match_nrflag3, k, 0, 1); fw 5806 tools/finsig_dryos.c int isSTRw(firmware *fw, int offset) fw 5808 tools/finsig_dryos.c if ((fwval(fw,offset) & 0xfff00000) == (0xe5800000)) // STR Rx, [Ry, #offs] fw 5815 tools/finsig_dryos.c int isSTRB(firmware *fw, int offset) fw 5817 tools/finsig_dryos.c if ((fwval(fw,offset) & 0xfff00000) == (0xe5c00000)) // STRB Rx, [Ry, #offs] fw 5834 tools/finsig_dryos.c int find_leds(firmware *fw) fw 5838 tools/finsig_dryos.c int k0 = find_str_ref(fw,"LEDCon"); fw 5841 tools/finsig_dryos.c int k1 = find_inst_rev(fw,isSTMFD_LR,k0,110); fw 5844 tools/finsig_dryos.c j1 = find_inst(fw,isBL,k1,80); fw 5845 tools/finsig_dryos.c j2 = find_Nth_inst(fw,isBL,k1,80,3); fw 5854 tools/finsig_dryos.c if (followBranch(fw,idx2adr(fw,j1),0x01000001) == followBranch(fw,idx2adr(fw,j2),0x01000001)) fw 5856 tools/finsig_dryos.c k1 = find_Nth_inst(fw,isBL,k1,80,2); fw 5858 tools/finsig_dryos.c k1 = idxFollowBranch(fw,k1,0x01000001); fw 5861 tools/finsig_dryos.c bprintf("\n// LED table init @ 0x%x\n",idx2adr(fw,k1)); fw 5870 tools/finsig_dryos.c if (isLDR_PC(fw,k1+j2)) fw 5872 tools/finsig_dryos.c uint32_t l1 = LDR2val(fw,k1+j2); fw 5876 tools/finsig_dryos.c leds[j3].reg = fwRd(fw,k1+j2); fw 5880 tools/finsig_dryos.c else if (isBX_LR(fw,k1+j2) || isB(fw,k1+j2)) fw 5915 tools/finsig_dryos.c if (isLDR_PC(fw,k1+j2)) fw 5919 tools/finsig_dryos.c uint32_t l1 = LDR2val(fw,k1+j2); fw 5922 tools/finsig_dryos.c if ((leds[j3].reg == fwRd(fw,k1+j2)) && (leds[j3].addr == LDR2val(fw,k1+j2))) fw 5931 tools/finsig_dryos.c if (leds[j3].reg == fwRd(fw,k1+j2)) fw 5937 tools/finsig_dryos.c else if (isBX_LR(fw,k1+j2) || isB(fw,k1+j2)) fw 5947 tools/finsig_dryos.c if (isADD(fw,k1+j2)) fw 5949 tools/finsig_dryos.c if (leds[j3].reg == fwRd(fw,k1+j2)) fw 5951 tools/finsig_dryos.c leds[j3].addr += ALUop2a(fw,k1+j2); fw 5954 tools/finsig_dryos.c else if (leds[j3].reg == fwRn(fw,k1+j2)) fw 5959 tools/finsig_dryos.c repeataddr = leds[j3].addr + ALUop2a(fw,k1+j2); fw 5960 tools/finsig_dryos.c repeatreg = fwRd(fw,k1+j2); fw 5965 tools/finsig_dryos.c else if (isSUB(fw,k1+j2)) fw 5967 tools/finsig_dryos.c if (leds[j3].reg == fwRd(fw,k1+j2)) fw 5969 tools/finsig_dryos.c leds[j3].addr -= ALUop2a(fw,k1+j2); fw 5972 tools/finsig_dryos.c else if (leds[j3].reg == fwRn(fw,k1+j2)) fw 5977 tools/finsig_dryos.c repeataddr = leds[j3].addr - ALUop2a(fw,k1+j2); fw 5978 tools/finsig_dryos.c repeatreg = fwRd(fw,k1+j2); fw 5983 tools/finsig_dryos.c else if (isSTR(fw,k1+j2)) fw 5987 tools/finsig_dryos.c if (leds[j3].reg == fwRd(fw,k1+j2)) fw 5989 tools/finsig_dryos.c leds[j3].offs = fwval(fw,k1+j2) & 0xfff; fw 5993 tools/finsig_dryos.c else if (isMOV_immed(fw,k1+j2) && (leds[j3].reg == fwRd(fw,k1+j2))) fw 6022 tools/finsig_dryos.c j2 = find_str_ref(fw,"\n\n Set LCD Driver: Address 0x%04x <-- Data 0x%04x\n"); fw 6025 tools/finsig_dryos.c j2 = find_inst_rev(fw, isBL, j2, 8); fw 6031 tools/finsig_dryos.c if ( !((fwval(fw,j2-1)&0xfffff000)==0xe3a01000) && !((fwval(fw,j2-2)&0xfffff000)==0xe3a01000) ) // MOV R1, #imm fw 6033 tools/finsig_dryos.c j2 = find_inst_rev(fw, isBL, j2-1, 6); fw 6044 tools/finsig_dryos.c j2 = idxFollowBranch(fw, j2, 0x01000001); fw 6045 tools/finsig_dryos.c if (isLDR_PC(fw,j2)) fw 6048 tools/finsig_dryos.c gpiotbladdr = adr2idx(fw, LDR2val(fw, j2)); fw 6068 tools/finsig_dryos.c if (isSTRw(fw,k1+j2)) fw 6070 tools/finsig_dryos.c uint32_t o1 = fwval(fw,k1+j2)&0xfff; // may not be the correct way of determining the offset fw 6076 tools/finsig_dryos.c if (isSTRB(fw,k1+n)) fw 6078 tools/finsig_dryos.c o2 = fwval(fw,k1+n)&0xfff; fw 6081 tools/finsig_dryos.c r1 = fwRd(fw,k1+j2); // dest. register fw 6084 tools/finsig_dryos.c else if (isBX_LR(fw,k1+n) || isB(fw,k1+n)) fw 6096 tools/finsig_dryos.c if (isMOV_immed(fw, n) && (fwRd(fw, n) == r1)) fw 6098 tools/finsig_dryos.c leds[j3].addr = ALUop2a(fw,n); fw 6107 tools/finsig_dryos.c else if (isBX_LR(fw,k1+j2) || isB(fw,k1+j2)) fw 6125 tools/finsig_dryos.c bprintf("// LED #%i: 0x%08x (#%d in GPIO table), offset 0x%x\n",j1, fwval(fw, leds[j3].addr + gpiotbladdr), leds[j3].addr, leds[j3].offs); fw 6135 tools/finsig_dryos.c bprintf("// GPIO table @ 0x%x\n",idx2adr(fw, gpiotbladdr)); fw 6146 tools/finsig_dryos.c int f1 = get_saved_sig(fw,"CreateMessageQueueStrictly"); fw 6149 tools/finsig_dryos.c f1 = adr2idx(fw, func_names[f1].val); fw 6155 tools/finsig_dryos.c k1 = find_inst_rev(fw,isBL,k1-1,80); fw 6158 tools/finsig_dryos.c if (idx2adr(fw,idxFollowBranch(fw,k1,0x01000001)) == idx2adr(fw,f1)) // BL CreateMessageQueueStrictly fw 6168 tools/finsig_dryos.c k1 = find_inst_rev(fw,isBL,k1-1,80); fw 6171 tools/finsig_dryos.c k1 = idxFollowBranch(fw,k1,0x01000001); fw 6174 tools/finsig_dryos.c bprintf("\n// LED table init @ 0x%x\n",idx2adr(fw,k1)); fw 6179 tools/finsig_dryos.c j2 = find_str_ref(fw,"\n\n Set LCD Driver: Address 0x%04x <-- Data 0x%04x\n"); fw 6182 tools/finsig_dryos.c j2 = find_inst_rev(fw, isBL, j2, 8); fw 6188 tools/finsig_dryos.c if ( !((fwval(fw,j2-1)&0xfffff000)==0xe3a00000) && !((fwval(fw,j2-2)&0xfffff000)==0xe3a00000) ) // MOV R0, #imm fw 6190 tools/finsig_dryos.c j2 = find_inst_rev(fw, isBL, j2-1, 6); fw 6201 tools/finsig_dryos.c j2 = idxFollowBranch(fw, j2, 0x01000001); fw 6202 tools/finsig_dryos.c if (isLDR_PC(fw,j2)) fw 6205 tools/finsig_dryos.c gpiotbladdr = adr2idx(fw, LDR2val(fw, j2)); fw 6225 tools/finsig_dryos.c if (isSTRw(fw,k1+j2)) fw 6227 tools/finsig_dryos.c uint32_t o1 = fwval(fw,k1+j2)&0xfff; // may not be the correct way of determining the offset fw 6233 tools/finsig_dryos.c if (isSTRB(fw,k1+n)) fw 6235 tools/finsig_dryos.c o2 = fwval(fw,k1+n)&0xfff; fw 6238 tools/finsig_dryos.c r1 = fwRd(fw,k1+j2); // dest. register fw 6241 tools/finsig_dryos.c else if (isBX_LR(fw,k1+n) || isB(fw,k1+n)) fw 6253 tools/finsig_dryos.c if (isMOV_immed(fw, n) && (fwRd(fw, n) == r1)) fw 6255 tools/finsig_dryos.c leds[j3].addr = ALUop2a(fw,n); fw 6264 tools/finsig_dryos.c else if (isBX_LR(fw,k1+j2) || isB(fw,k1+j2)) fw 6282 tools/finsig_dryos.c bprintf("// LED #%i: 0x%08x (#%d in GPIO table), offset 0x%x\n",j1, fwval(fw, leds[j3].addr + gpiotbladdr), leds[j3].addr, leds[j3].offs); fw 6292 tools/finsig_dryos.c bprintf("// GPIO table @ 0x%x\n",idx2adr(fw, gpiotbladdr)); fw 6298 tools/finsig_dryos.c int find_task_related_info(firmware *fw) fw 6300 tools/finsig_dryos.c int i = get_saved_sig(fw,"get_self_task_id"); fw 6306 tools/finsig_dryos.c i = adr2idx(fw, func_names[i].val); fw 6307 tools/finsig_dryos.c if ( (fwval(fw,i)&0xffff0000)==0xe59f0000 ) // ldr r0, [pc, #imm] fw 6310 tools/finsig_dryos.c u = LDR2val(fw, i); fw 6311 tools/finsig_dryos.c if ( (fwval(fw,i+3)&0xffff0000)==0x059f0000 ) // ldreq r0, [pc, #imm] fw 6314 tools/finsig_dryos.c v = LDR2val(fw, i+3); fw 6321 tools/finsig_dryos.c i = find_str(fw, "DRYOS version 2.3, release "); fw 6322 tools/finsig_dryos.c j = find_nxt_str_ref(fw, i, -1); fw 6326 tools/finsig_dryos.c u = idx2adr(fw,i); fw 6327 tools/finsig_dryos.c if ( (u > fw->base_copied) && ((u-fw->base_copied)/4 < fw->size2)) fw 6329 tools/finsig_dryos.c i = adr2idx(fw, fw->base2 + (u-fw->base_copied)); fw 6330 tools/finsig_dryos.c j = find_nxt_str_ref(fw, i, -1); fw 6337 tools/finsig_dryos.c k = find_nxt_str_ref(fw, i, j+1); fw 6347 tools/finsig_dryos.c m = find_inst_rev(fw, isSTMFD_LR, j, 42); fw 6363 tools/finsig_dryos.c n = find_Nth_inst(fw, isBL, m, 6, 2); fw 6366 tools/finsig_dryos.c n = idxFollowBranch(fw,n,0x01000001); fw 6367 tools/finsig_dryos.c n = find_inst(fw, isSTR, n, 8); fw 6370 tools/finsig_dryos.c m = fwRn(fw, n); // this register holds the base address pointer of TCB area fw 6371 tools/finsig_dryos.c n = find_inst_rev(fw, isLDR_PC, n-1, 4); fw 6374 tools/finsig_dryos.c if (fwRd(fw, n) != m) fw 6376 tools/finsig_dryos.c n = find_inst_rev(fw, isLDR_PC, n-1, 3); fw 6377 tools/finsig_dryos.c if ((n != -1) && (fwRd(fw, n) == m)) fw 6379 tools/finsig_dryos.c u = LDR2val(fw, n); fw 6380 tools/finsig_dryos.c v = idx2adr(fw, n); fw 6393 tools/finsig_dryos.c void find_AdditionAgent_RAM(firmware *fw) fw 6395 tools/finsig_dryos.c int i = get_saved_sig(fw,"AdditionAgentRAM_FW"); fw 6401 tools/finsig_dryos.c int j1 = adr2idx(fw, func_names[i].val); fw 6405 tools/finsig_dryos.c if (fwval(fw,j1+n) == 0xe3500a32) // cmp r0, #0x32000 fw 6408 tools/finsig_dryos.c sizeloc = idx2adr(fw,j1+n); fw 6411 tools/finsig_dryos.c else if (fwval(fw,j1+n) == 0xe3500a22) // cmp r0, #0x22000 fw 6414 tools/finsig_dryos.c sizeloc = idx2adr(fw,j1+n); fw 6423 tools/finsig_dryos.c r = LDR2val(fw,j1+n); fw 6424 tools/finsig_dryos.c if ( isLDR_PC(fw,j1+n) && (r>fw->memisostart) && (r<fw->maxram) ) fw 6427 tools/finsig_dryos.c startloc = idx2adr(fw,j1+n); fw 6535 tools/finsig_dryos.c int match_propsig1a(firmware *fw, int k, uint32_t sadr, uint32_t offset) fw 6537 tools/finsig_dryos.c if (isADR_PC_cond(fw,k) || isLDR_PC_cond(fw,k)) // LDR or ADR ? fw 6540 tools/finsig_dryos.c if (isLDR_PC_cond(fw,k)) // LDR ? fw 6541 tools/finsig_dryos.c padr = LDR2val(fw,k); fw 6543 tools/finsig_dryos.c padr = ADR2adr(fw,k); fw 6546 tools/finsig_dryos.c int j1 = find_inst_rev(fw, isBL, k-1, 16); fw 6549 tools/finsig_dryos.c int j = get_saved_sig(fw,"GetPropertyCase"); fw 6555 tools/finsig_dryos.c if (followBranch2(fw, idx2adr(fw,j1), 0x01000001) == fadr) fw 6571 tools/finsig_dryos.c if (a==0 && isLDR_PC(fw,j2) && fwRd(fw,j2)==j) fw 6573 tools/finsig_dryos.c a = LDR2val(fw,j2); fw 6580 tools/finsig_dryos.c if (isADD(fw,j2) && fwRd(fw,j2)==j) fw 6582 tools/finsig_dryos.c j = fwRn(fw, j2); // change the watched register on-the-fly fw 6583 tools/finsig_dryos.c a += ALUop2a(fw, j2); fw 6585 tools/finsig_dryos.c if (isMOV_immed(fw,j2) && fwRd(fw,j2)==j) fw 6587 tools/finsig_dryos.c a += ALUop2a(fw, j2); fw 6601 tools/finsig_dryos.c int match_propsig1(firmware *fw, string_sig *sig, int j) fw 6603 tools/finsig_dryos.c return search_fw(fw, match_propsig1a, idx2adr(fw,j), sig->offset, 1); fw 6607 tools/finsig_dryos.c int find_strsig2(firmware *fw, string_sig *sig) fw 6611 tools/finsig_dryos.c case 1: return fw_string_process(fw, sig, match_propsig1, 1); fw 6617 tools/finsig_dryos.c void find_prop_matches(firmware *fw) fw 6624 tools/finsig_dryos.c find_strsig2(fw, &prop_sigs[i]); fw 6629 tools/finsig_dryos.c void find_propset(firmware *fw) fw 6636 tools/finsig_dryos.c find_prop_matches(fw); fw 6683 tools/finsig_dryos.c if (fw->sv->propset == n+1) okay = 1; // if the propset equals to (one of) the complete propset matches fw 6697 tools/finsig_dryos.c if (fw->sv->propset == n+1) okay = 1; // if the propset equals to (one of) the most complete propset matches fw 6703 tools/finsig_dryos.c if (!okay && fw->sv->propset>0) fw 6706 tools/finsig_dryos.c bprintf("// Port's propset (%i) may be set incorrectly\n", fw->sv->propset); fw 6711 tools/finsig_dryos.c void find_other_vals(firmware *fw) fw 6718 tools/finsig_dryos.c if (!search_fw_bytes(fw, find_ctypes)) fw 6724 tools/finsig_dryos.c print_exmem_types(fw); fw 6725 tools/finsig_dryos.c find_task_related_info(fw); fw 6726 tools/finsig_dryos.c find_leds(fw); fw 6730 tools/finsig_dryos.c if (fw->dryos_ver >= 45) fw 6732 tools/finsig_dryos.c found = search_saved_sig(fw, "NR_SetDarkSubType", match_nrflag, 0, 0, 1); fw 6736 tools/finsig_dryos.c search_saved_sig(fw, "NR_GetDarkSubType", match_nrflag2, 0, 0, 20); fw 6742 tools/finsig_dryos.c void print_kval(firmware *fw, uint32_t tadr, int tsiz, int tlen, uint32_t ev, const char *name, char *sfx) fw 6744 tools/finsig_dryos.c int tidx = adr2idx(fw,tadr); fw 6748 tools/finsig_dryos.c if (fw->buf[tidx+k+1] == ev) fw 6750 tools/finsig_dryos.c kval = fw->buf[tidx+k]; fw 6751 tools/finsig_dryos.c tadr = idx2adr(fw,tidx+k); fw 6770 tools/finsig_dryos.c void print_physw_raw_vals(firmware *fw, uint32_t tadr, int tsiz, int tlen) fw 6772 tools/finsig_dryos.c int tidx = adr2idx(fw,tadr); fw 6780 tools/finsig_dryos.c ev = fw->buf[tidx+k+1]; fw 6781 tools/finsig_dryos.c kval = fw->buf[tidx+k]; fw 6782 tools/finsig_dryos.c tadr = idx2adr(fw,tidx+k); fw 6823 tools/finsig_dryos.c uint32_t add_kmval(firmware *fw, uint32_t tadr, int tsiz, int tlen, uint32_t ev, const char *name, uint32_t xtra) fw 6825 tools/finsig_dryos.c int tidx = adr2idx(fw,tadr); fw 6831 tools/finsig_dryos.c if (fw->buf[tidx+k+1] == ev) fw 6833 tools/finsig_dryos.c kval = fw->buf[tidx+k]; fw 6834 tools/finsig_dryos.c tadr = idx2adr(fw,tidx+k); fw 6921 tools/finsig_dryos.c int match_GetSDProtect(firmware *fw, int k, int v) fw 6923 tools/finsig_dryos.c if (isB(fw,k)) // B fw 6925 tools/finsig_dryos.c k = idxFollowBranch(fw,k,1); fw 6926 tools/finsig_dryos.c if (isLDR_PC(fw,k)) fw 6928 tools/finsig_dryos.c return LDR2val(fw,k); fw 6935 tools/finsig_dryos.c void find_key_vals(firmware *fw) fw 6943 tools/finsig_dryos.c uint32_t tadr = search_saved_sig(fw, "GetSDProtect", match_GetSDProtect, 0, 1, 1); fw 6946 tools/finsig_dryos.c k = find_str_ref(fw,"SD Not Exist\n"); fw 6951 tools/finsig_dryos.c if (isBL(fw,k1)) // BL fw 6953 tools/finsig_dryos.c uint32_t fadr = followBranch(fw,idx2adr(fw,k1),0x01000001); fw 6954 tools/finsig_dryos.c int k2 = adr2idx(fw,fadr); fw 6955 tools/finsig_dryos.c if (isLDR_PC(fw,k2)) fw 6957 tools/finsig_dryos.c tadr = LDR2val(fw,k2); fw 6966 tools/finsig_dryos.c if (fw->buf[adr2idx(fw,tadr)+2] == 0) tsiz = 3; fw 6968 tools/finsig_dryos.c uint32_t madr = fw->base + (fw->size*4-4); fw 6969 tools/finsig_dryos.c for (k=0; k<(tadr-fw->base)/4; k++) fw 6971 tools/finsig_dryos.c if (isLDR_PC(fw,k)) fw 6973 tools/finsig_dryos.c uint32_t adr = LDR2val(fw,k); fw 6983 tools/finsig_dryos.c k1 = adr2idx(fw,tadr); fw 6986 tools/finsig_dryos.c if ((fw->buf[k1+k+1] == 0xFFFFFFFF) && (fw->buf[k1+k+4] == 0xFFFFFFFF)) fw 6997 tools/finsig_dryos.c print_physw_raw_vals(fw, tadr, tsiz, tlen); fw 7000 tools/finsig_dryos.c if (fw->dryos_ver >= 58) fw 7003 tools/finsig_dryos.c print_kval(fw,tadr,tsiz,tlen,0x30A,"SD_READONLY","_FLAG"); fw 7004 tools/finsig_dryos.c print_kval(fw,tadr,tsiz,tlen,0x302,"USB","_MASK"); fw 7005 tools/finsig_dryos.c print_kval(fw,tadr,tsiz,tlen,0x305,"BATTCOVER","_FLAG"); fw 7006 tools/finsig_dryos.c print_kval(fw,tadr,tsiz,tlen,0x304,"HOTSHOE","_FLAG"); fw 7007 tools/finsig_dryos.c print_kval(fw,tadr,tsiz,tlen,0x300,"ANALOG_AV","_FLAG"); fw 7009 tools/finsig_dryos.c else if (fw->dryos_ver >= 49) fw 7012 tools/finsig_dryos.c print_kval(fw,tadr,tsiz,tlen,0x20A,"SD_READONLY","_FLAG"); fw 7013 tools/finsig_dryos.c print_kval(fw,tadr,tsiz,tlen,0x202,"USB","_MASK"); fw 7014 tools/finsig_dryos.c print_kval(fw,tadr,tsiz,tlen,0x205,"BATTCOVER","_FLAG"); fw 7015 tools/finsig_dryos.c print_kval(fw,tadr,tsiz,tlen,0x204,"HOTSHOE","_FLAG"); fw 7016 tools/finsig_dryos.c print_kval(fw,tadr,tsiz,tlen,0x200,"ANALOG_AV","_FLAG"); fw 7020 tools/finsig_dryos.c print_kval(fw,tadr,tsiz,tlen,0x90A,"SD_READONLY","_FLAG"); fw 7021 tools/finsig_dryos.c print_kval(fw,tadr,tsiz,tlen,0x902,"USB","_MASK"); fw 7022 tools/finsig_dryos.c print_kval(fw,tadr,tsiz,tlen,0x905,"BATTCOVER","_FLAG"); fw 7023 tools/finsig_dryos.c print_kval(fw,tadr,tsiz,tlen,0x904,"HOTSHOE","_FLAG"); fw 7024 tools/finsig_dryos.c print_kval(fw,tadr,tsiz,tlen,0x900,"ANALOG_AV","_FLAG"); fw 7027 tools/finsig_dryos.c uint32_t key_half = add_kmval(fw,tadr,tsiz,tlen,0,"KEY_SHOOT_HALF",0); fw 7028 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,1,"KEY_SHOOT_FULL",key_half); fw 7029 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,1,"KEY_SHOOT_FULL_ONLY",0); fw 7031 tools/finsig_dryos.c if (fw->dryos_ver == 52) // unclear if this applies any other ver fw 7033 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,3,"KEY_ZOOM_IN",0); fw 7034 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,4,"KEY_ZOOM_OUT",0); fw 7035 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,6,"KEY_UP",0); fw 7036 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,7,"KEY_DOWN",0); fw 7037 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,8,"KEY_LEFT",0); fw 7038 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,9,"KEY_RIGHT",0); fw 7039 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0xA,"KEY_SET",0); fw 7040 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0xB,"KEY_MENU",0); fw 7041 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0xC,"KEY_DISPLAY",0); fw 7042 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0x12,"KEY_HELP",0); fw 7043 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0x19,"KEY_ERASE",0); fw 7044 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,2,"KEY_VIDEO",0); fw 7046 tools/finsig_dryos.c else if (fw->dryos_ver < 54) fw 7048 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,2,"KEY_ZOOM_IN",0); fw 7049 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,3,"KEY_ZOOM_OUT",0); fw 7050 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,4,"KEY_UP",0); fw 7051 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,5,"KEY_DOWN",0); fw 7052 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,6,"KEY_LEFT",0); fw 7053 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,7,"KEY_RIGHT",0); fw 7054 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,8,"KEY_SET",0); fw 7055 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,9,"KEY_MENU",0); fw 7056 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0xA,"KEY_DISPLAY",0); fw 7058 tools/finsig_dryos.c else if (fw->dryos_ver < 55) fw 7060 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,3,"KEY_ZOOM_IN",0); fw 7061 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,4,"KEY_ZOOM_OUT",0); fw 7062 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,6,"KEY_UP",0); fw 7063 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,7,"KEY_DOWN",0); fw 7064 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,8,"KEY_LEFT",0); fw 7065 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,9,"KEY_RIGHT",0); fw 7066 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0xA,"KEY_SET",0); fw 7067 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0xE,"KEY_MENU",0); fw 7068 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,2,"KEY_VIDEO",0); fw 7069 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0xD,"KEY_HELP",0); fw 7074 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,3,"KEY_ZOOM_IN",0); fw 7075 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,4,"KEY_ZOOM_OUT",0); fw 7076 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,6,"KEY_UP",0); fw 7077 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,7,"KEY_DOWN",0); fw 7078 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,8,"KEY_LEFT",0); fw 7079 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,9,"KEY_RIGHT",0); fw 7080 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0xA,"KEY_SET",0); fw 7081 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0x14,"KEY_MENU",0); fw 7082 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,2,"KEY_VIDEO",0); fw 7083 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0xD,"KEY_HELP",0); fw 7086 tools/finsig_dryos.c if (fw->dryos_ver <= 47) fw 7088 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0x601,"KEY_PLAYBACK",0); fw 7089 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0x600,"KEY_POWER",0); fw 7090 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0x12,"KEY_VIDEO",0); fw 7094 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0x101,"KEY_PLAYBACK",0); fw 7095 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0x100,"KEY_POWER",0); fw 7096 tools/finsig_dryos.c if (fw->dryos_ver == 49) fw 7098 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0x19,"KEY_VIDEO",0); fw 7100 tools/finsig_dryos.c else if(fw->dryos_ver == 50) fw 7102 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0x1A,"KEY_VIDEO",0); fw 7103 tools/finsig_dryos.c add_kmval(fw,tadr,tsiz,tlen,0x14,"KEY_HELP",0); fw 7117 tools/finsig_dryos.c int get_eventproc_val(firmware *fw, int k) fw 7119 tools/finsig_dryos.c if (isADR_PC(fw,k) && (fwRd(fw,k) == 0)) fw 7120 tools/finsig_dryos.c nadr = ADR2adr(fw,k); fw 7121 tools/finsig_dryos.c else if (isADR_PC(fw,k) && (fwRd(fw,k) == 1)) fw 7122 tools/finsig_dryos.c eadr = ADR2adr(fw,k); fw 7123 tools/finsig_dryos.c else if (isLDR_PC(fw,k) && (fwRd(fw,k) == 0)) fw 7124 tools/finsig_dryos.c nadr = LDR2val(fw,k); fw 7125 tools/finsig_dryos.c else if (isLDR_PC(fw,k) && (fwRd(fw,k) == 1)) fw 7126 tools/finsig_dryos.c eadr = LDR2val(fw,k); fw 7169 tools/finsig_dryos.c void add_func_name2(firmware *fw, uint32_t nadr, uint32_t eadr, char *suffix) fw 7171 tools/finsig_dryos.c char *n = (char*)adr2ptr(fw,nadr); fw 7172 tools/finsig_dryos.c if (isB(fw,adr2idx(fw,eadr))) fw 7177 tools/finsig_dryos.c eadr = followBranch(fw,eadr,1); fw 7182 tools/finsig_dryos.c int match_eventproc(firmware *fw, int k, uint32_t fadr, uint32_t v2) fw 7184 tools/finsig_dryos.c if (isBorBL(fw,k)) fw 7186 tools/finsig_dryos.c uint32_t adr = followBranch(fw,idx2adr(fw,k),0x01000001); fw 7192 tools/finsig_dryos.c if (get_eventproc_val(fw, k) == 0) fw 7194 tools/finsig_dryos.c int k1 = find_inst_rev(fw, isB, k, 500); fw 7198 tools/finsig_dryos.c get_eventproc_val(fw, k); fw 7202 tools/finsig_dryos.c if (get_eventproc_val(fw, k) == 0) fw 7204 tools/finsig_dryos.c int k1 = find_inst_rev(fw, isB, k, 500); fw 7208 tools/finsig_dryos.c get_eventproc_val(fw, k); fw 7213 tools/finsig_dryos.c add_func_name2(fw, nadr, eadr, "_FW"); fw 7220 tools/finsig_dryos.c int match_registerproc2(firmware *fw, int k, uint32_t fadr, uint32_t v2) fw 7223 tools/finsig_dryos.c if (isBorBL(fw,k)) fw 7225 tools/finsig_dryos.c uint32_t adr = followBranch(fw,idx2adr(fw,k),0x01000001); fw 7231 tools/finsig_dryos.c if (get_eventproc_val(fw, k) == 0) fw 7233 tools/finsig_dryos.c int k1 = find_inst_rev(fw, isB, k, 500); fw 7237 tools/finsig_dryos.c get_eventproc_val(fw, k); fw 7241 tools/finsig_dryos.c if (get_eventproc_val(fw, k) == 0) fw 7243 tools/finsig_dryos.c int k1 = find_inst_rev(fw, isB, k, 500); fw 7247 tools/finsig_dryos.c get_eventproc_val(fw, k); fw 7252 tools/finsig_dryos.c add_func_name2(fw, nadr, eadr, "_FW"); fw 7258 tools/finsig_dryos.c int k1 = find_inst_rev(fw, isLDR_PC, k, 8); fw 7261 tools/finsig_dryos.c uint32_t k2 = LDR2val(fw,k1); fw 7262 tools/finsig_dryos.c if ((k2 > fw->base) && (k2 < (fw->base + fw->size*4 - 1))) fw 7267 tools/finsig_dryos.c if ( ((fwval(fw,k3) & 0xfff00ff0) == 0xe0800180) && // add rx, ry, rz, lsl #3 fw 7268 tools/finsig_dryos.c ((fwval(fw,k3) & 0x000f0000)>>16) == (fwRd(fw,k1)) ) // check register match fw 7271 tools/finsig_dryos.c k1 = adr2idx(fw,k2); fw 7272 tools/finsig_dryos.c while (fwval(fw,k1) != 0) fw 7274 tools/finsig_dryos.c add_func_name2(fw, fwval(fw,k1), fwval(fw,k1+1), "_FW"); fw 7289 tools/finsig_dryos.c int match_registerproc(firmware *fw, int k, uint32_t fadr, uint32_t v2) fw 7291 tools/finsig_dryos.c if (isB(fw,k+1) && isMOV_immed(fw,k) && (fwRd(fw,k) == 2)) fw 7293 tools/finsig_dryos.c uint32_t adr = followBranch(fw,idx2adr(fw,k+1),1); fw 7296 tools/finsig_dryos.c search_fw(fw, match_registerproc2, idx2adr(fw,k), 0, 2); fw 7302 tools/finsig_dryos.c int match_registerlists(firmware *fw, int k, uint32_t fadr, uint32_t v2) fw 7304 tools/finsig_dryos.c if (isBorBL(fw,k+1) && isLDR_PC(fw,k) && (fwRd(fw,k) == 0)) fw 7306 tools/finsig_dryos.c uint32_t adr = followBranch2(fw,idx2adr(fw,k+1),0x01000001); fw 7309 tools/finsig_dryos.c int j = adr2idx(fw,LDR2val(fw,k)); fw 7310 tools/finsig_dryos.c if (!idx_valid(fw,j)) fw 7312 tools/finsig_dryos.c j = adr2idx(fw,LDR2val(fw,k) - fw->data_start + fw->data_init_start); fw 7314 tools/finsig_dryos.c if (idx_valid(fw,j)) fw 7316 tools/finsig_dryos.c while (fwval(fw,j) != 0) fw 7318 tools/finsig_dryos.c add_func_name2(fw, fwval(fw,j), fwval(fw,j+1), "_FW"); fw 7324 tools/finsig_dryos.c else if (isBorBL(fw,k+1) && isLDMFD(fw,k) && isLDR_PC(fw,k-1) && (fwRd(fw,k-1) == 0)) fw 7326 tools/finsig_dryos.c uint32_t adr = followBranch2(fw,idx2adr(fw,k+1),0x01000001); fw 7329 tools/finsig_dryos.c int j = adr2idx(fw,LDR2val(fw,k-1)); fw 7330 tools/finsig_dryos.c if (!idx_valid(fw,j)) fw 7332 tools/finsig_dryos.c j = adr2idx(fw,LDR2val(fw,k-1) - fw->data_start + fw->data_init_start); fw 7334 tools/finsig_dryos.c if (idx_valid(fw,j)) fw 7336 tools/finsig_dryos.c while (fwval(fw,j) != 0) fw 7338 tools/finsig_dryos.c add_func_name2(fw, fwval(fw,j), fwval(fw,j+1), "_FW"); fw 7347 tools/finsig_dryos.c void find_eventprocs(firmware *fw) fw 7349 tools/finsig_dryos.c int j = get_saved_sig(fw,"ExportToEventProcedure_FW"); fw 7353 tools/finsig_dryos.c search_fw(fw, match_eventproc, fadr, 0, 1); fw 7355 tools/finsig_dryos.c if (isB(fw,adr2idx(fw,fadr)+2)) fw 7357 tools/finsig_dryos.c fadr = followBranch(fw, fadr+8, 1); fw 7359 tools/finsig_dryos.c search_fw(fw, match_registerproc, fadr, 0, 2); fw 7362 tools/finsig_dryos.c j = get_saved_sig(fw,"SS.Create_FW"); fw 7365 tools/finsig_dryos.c j = adr2idx(fw,func_names[j].val); fw 7370 tools/finsig_dryos.c if (isLDR_PC(fw,j+offsets[i]) && (fwRd(fw,j+offsets[i]) == 0) && isBL(fw,j+offsets[i]+1)) fw 7372 tools/finsig_dryos.c fadr = followBranch(fw,idx2adr(fw,j+offsets[i]+1),0x01000001); fw 7373 tools/finsig_dryos.c search_fw(fw, match_registerlists, fadr, 0, 2); fw 7381 tools/finsig_dryos.c j = find_strptr_ref(fw,"ResetZoomLens"); fw 7384 tools/finsig_dryos.c if (isBorBL(fw,j+1)) fw 7386 tools/finsig_dryos.c fadr = followBranch(fw,idx2adr(fw,j+1),0x01000001); fw 7387 tools/finsig_dryos.c search_fw(fw, match_registerlists, fadr, 0, 2); fw 7392 tools/finsig_dryos.c j = get_saved_sig(fw,"TerminateAdjustmentSystem_FW"); fw 7395 tools/finsig_dryos.c j = adr2idx(fw,func_names[j].val); fw 7399 tools/finsig_dryos.c if (isBL(fw,k)) fw 7401 tools/finsig_dryos.c int k1 = adr2idx(fw,followBranch(fw,idx2adr(fw,k),0x01000001)); fw 7405 tools/finsig_dryos.c if (isLDR_PC(fw,k2) && (fwRd(fw,k2) == 0) && isLDMFD(fw,k2+1)) fw 7407 tools/finsig_dryos.c int k3 = adr2idx(fw, LDR2val(fw,k2) - fw->data_start + fw->data_init_start); fw 7408 tools/finsig_dryos.c if (idx_valid(fw,k3)) fw 7410 tools/finsig_dryos.c while (fwval(fw,k3) != 0) fw 7412 tools/finsig_dryos.c add_func_name2(fw, fwval(fw,k3), fwval(fw,k3+1), "_FW"); fw 7424 tools/finsig_dryos.c uint32_t findTaskAddress(firmware *fw, int k, int reg) fw 7430 tools/finsig_dryos.c if (isLDR_PC(fw,k+o) && (fwRd(fw,k+o) == reg)) fw 7432 tools/finsig_dryos.c uint32_t adr = LDR2val(fw,k+o); fw 7436 tools/finsig_dryos.c if (fwval(fw,k+i) == (0xE5900000 | (reg << 12) | (reg << 16))) // LDR Rx,[Rx] fw 7438 tools/finsig_dryos.c adr = fwval(fw,adr2idx(fw,adr)); fw 7443 tools/finsig_dryos.c else if (isADR_PC(fw,k+o) && (fwRd(fw,k+o) == reg)) fw 7445 tools/finsig_dryos.c return(ADR2adr(fw,k+o)); fw 7452 tools/finsig_dryos.c int match_createtask(firmware *fw, int k, uint32_t fadr, uint32_t v2) fw 7455 tools/finsig_dryos.c k = idxcorr(fw, k); fw 7456 tools/finsig_dryos.c if (isBorBL(fw,k)) fw 7458 tools/finsig_dryos.c uint32_t adr = followBranch2(fw,idx2adr(fw,k),0x01000001); fw 7461 tools/finsig_dryos.c fadr = findTaskAddress(fw, k, 3); fw 7464 tools/finsig_dryos.c uint32_t sadr = findTaskAddress(fw, k, 0); fw 7467 tools/finsig_dryos.c char *s = adr2ptr(fw,sadr); fw 7479 tools/finsig_dryos.c void find_tasks(firmware *fw) fw 7481 tools/finsig_dryos.c int k = get_saved_sig(fw,"CreateTask"); fw 7484 tools/finsig_dryos.c search_fw(fw, match_createtask, func_names[k].val, 0, 7); fw 7486 tools/finsig_dryos.c k = get_saved_sig(fw,"CreateTaskStrictly"); fw 7489 tools/finsig_dryos.c search_fw(fw, match_createtask, func_names[k].val, 0, 7); fw 7491 tools/finsig_dryos.c if (fw->dryos_ver >= 59) fw 7493 tools/finsig_dryos.c k = get_saved_sig(fw,"CreateTaskStrictly_alt"); // r59+ fw 7496 tools/finsig_dryos.c search_fw(fw, match_createtask, func_names[k].val, 0, 7); fw 7501 tools/finsig_dryos.c void find_builddate(firmware *fw) fw 7503 tools/finsig_dryos.c int j = get_saved_sig(fw,"GetBuildDate_FW"); fw 7506 tools/finsig_dryos.c int idx = adr2idx(fw, func_names[j].val); fw 7507 tools/finsig_dryos.c uint32_t adr = ADR2adr(fw, idx); fw 7508 tools/finsig_dryos.c idx = adr2idx(fw, adr); fw 7509 tools/finsig_dryos.c fw->fw_build_date = (char*)&fw->buf[idx]; fw 7512 tools/finsig_dryos.c fw->fw_build_date = 0; fw 7514 tools/finsig_dryos.c j = get_saved_sig(fw,"GetBuildTime_FW"); fw 7517 tools/finsig_dryos.c int idx = adr2idx(fw, func_names[j].val); fw 7518 tools/finsig_dryos.c uint32_t adr = ADR2adr(fw, idx); fw 7519 tools/finsig_dryos.c idx = adr2idx(fw, adr); fw 7520 tools/finsig_dryos.c fw->fw_build_time = (char*)&fw->buf[idx]; fw 7523 tools/finsig_dryos.c fw->fw_build_time = 0; fw 7543 tools/finsig_dryos.c int find_ptp_handler_imm(firmware *fw, int k) fw 7553 tools/finsig_dryos.c if (isLDR_PC(fw,k+o)) fw 7555 tools/finsig_dryos.c if(fwRd(fw,k+o) == 0) fw 7557 tools/finsig_dryos.c op = LDR2val(fw,k+o); fw 7559 tools/finsig_dryos.c else if(fwRd(fw,k+o) == 1){ fw 7560 tools/finsig_dryos.c handler = LDR2val(fw,k+o); fw 7564 tools/finsig_dryos.c else if (isADR_PC(fw,k+o) && (fwRd(fw,k+o) == 1)) fw 7566 tools/finsig_dryos.c handler=ADR2adr(fw,k+o); fw 7578 tools/finsig_dryos.c int match_ptp_handlers(firmware *fw, int k, uint32_t fadr, uint32_t v2) fw 7581 tools/finsig_dryos.c if(fwval(fw,k) == 0x1004 fw 7582 tools/finsig_dryos.c && fwval(fw,k+2) == 0x1005 fw 7583 tools/finsig_dryos.c && fwval(fw,k+4) == 0x1006 fw 7584 tools/finsig_dryos.c && fwval(fw,k+1) > fw->base && !(fwval(fw,k+1) & 0x3) fw 7585 tools/finsig_dryos.c && fwval(fw,k+3) > fw->base && !(fwval(fw,k+1) & 0x3) fw 7586 tools/finsig_dryos.c && fwval(fw,k+5) > fw->base && !(fwval(fw,k+1) & 0x3)) fw 7592 tools/finsig_dryos.c uint32_t op=fwval(fw,k+i*2); fw 7593 tools/finsig_dryos.c uint32_t handler=fwval(fw,k+i*2+1); fw 7603 tools/finsig_dryos.c k = idxcorr(fw, k); fw 7604 tools/finsig_dryos.c if (!isBorBL(fw,k)) fw 7608 tools/finsig_dryos.c uint32_t adr = followBranch2(fw,idx2adr(fw,k),0x01000001); fw 7612 tools/finsig_dryos.c find_ptp_handler_imm(fw,k); fw 7618 tools/finsig_dryos.c void find_ptp_handlers(firmware *fw) fw 7620 tools/finsig_dryos.c int k = get_saved_sig(fw,"add_ptp_handler"); fw 7623 tools/finsig_dryos.c search_fw(fw, match_ptp_handlers, func_names[k].val, 0, 128); fw 7627 tools/finsig_dryos.c void write_levent_table_dump(firmware *fw, uint32_t tadr) fw 7642 tools/finsig_dryos.c val = *(uint32_t*)adr2ptr(fw, tadr); fw 7643 tools/finsig_dryos.c if ((val == 0xffffffff) || (val == 0) || (*(uint32_t*)adr2ptr(fw, tadr+4) < lid)) { fw 7646 tools/finsig_dryos.c lid = *(uint32_t*)adr2ptr(fw, tadr+4); fw 7647 tools/finsig_dryos.c str = (char*)adr2ptr(fw,val); fw 7649 tools/finsig_dryos.c fprintf(f,"0x%08x 0x%04x 0x%08x %s\n",tadr,lid,*(uint32_t*)adr2ptr(fw, tadr+8),str); fw 7658 tools/finsig_dryos.c void output_firmware_vals(firmware *fw) fw 7662 tools/finsig_dryos.c if (fw->dryos_ver == 0) fw 7668 tools/finsig_dryos.c if (fw->dryos_ver < fw->real_dryos_ver) // check for outdated finsig fw 7669 tools/finsig_dryos.c bprintf("// DRYOS R%d (%s) *** New DRYOS Version - please update finsig_dryos.c ***\n",fw->real_dryos_ver,fw->dryos_ver_str); fw 7671 tools/finsig_dryos.c bprintf("// DRYOS R%d (%s)\n",fw->dryos_ver,fw->dryos_ver_str); fw 7674 tools/finsig_dryos.c if (fw->firmware_ver_str == 0) fw 7680 tools/finsig_dryos.c uint32_t j = idx2adr(fw,fw->fwver_idx); fw 7681 tools/finsig_dryos.c char *c = strrchr(fw->firmware_ver_str,' ') + 1; // points after the last space char fw 7682 tools/finsig_dryos.c uint32_t k = j + c - fw->firmware_ver_str; fw 7685 tools/finsig_dryos.c bprintf("// %s // Found @ 0x%08x, \"%s\" @ 0x%08x\n",fw->firmware_ver_str,j,c,k); fw 7690 tools/finsig_dryos.c bprintf("// %s // Found @ 0x%08x, \"%s\" @ 0x%08x\n",fw->firmware_ver_str,j,fw->firmware_ver_str,j); fw 7694 tools/finsig_dryos.c if (fw->fw_build_date != 0) fw 7696 tools/finsig_dryos.c bprintf("// Firmware build timestamp: %s %s\n",fw->fw_build_date, (fw->fw_build_time==0)?"":fw->fw_build_time); fw 7699 tools/finsig_dryos.c if (fw->fsize > (fw->size + 256)) fw 7701 tools/finsig_dryos.c bprintf("// Possible corrupt firmware dump - file size too small for start address 0x%08x\n",fw->base); fw 7702 tools/finsig_dryos.c bprintf("// file size = %.2fMB, should be %.2fMB\n", ((double)fw->size*4.0)/(1024.0*1024.0),((double)fw->fsize*4.0)/(1024.0*1024.0)); fw 7705 tools/finsig_dryos.c if (fw->cam != 0) fw 7707 tools/finsig_dryos.c bprintf("// %s\n",fw->cam); fw 7715 tools/finsig_dryos.c bprintf("// PLATFORMOSVER = %d\n",fw->real_dryos_ver); fw 7717 tools/finsig_dryos.c if (fw->pid != 0) fw 7719 tools/finsig_dryos.c bprintf("// PLATFORMID = %d (0x%04x) // Found @ 0x%08x\n",fw->pid,fw->pid,fw->pid_adr); fw 7723 tools/finsig_dryos.c bprintf("// PLATFORMID = ? // Not found @ 0x%08x\n",fw->pid_adr); fw 7726 tools/finsig_dryos.c if (fw->maxram != 0) fw 7727 tools/finsig_dryos.c bprintf("// MAXRAMADDR = 0x%08x\n",fw->maxram); fw 7729 tools/finsig_dryos.c if (fw->memisostart != 0) fw 7731 tools/finsig_dryos.c osig *o = find_match(fw->sv->makevals, "MEMISOSTART", fw->memisostart); fw 7732 tools/finsig_dryos.c if (o && (o->val == fw->memisostart)) fw 7733 tools/finsig_dryos.c bprintf("// MEMISOSTART = 0x%08x\n",fw->memisostart); fw 7735 tools/finsig_dryos.c bprintf("// MEMISOSTART = 0x%08x (*** DOES NOT MATCH MAKEFILE VALUE 0x%08x***)\n",fw->memisostart,(o)?o->val:0); fw 7738 tools/finsig_dryos.c if (fw->ksys != 0) fw 7740 tools/finsig_dryos.c bprintf("// KEYSYS = %s // Found @ 0x%08x\n",fw->ksys,idx2adr(fw,fw->ksys_idx)); fw 7742 tools/finsig_dryos.c if (fw->dancing_bits_idx != 0) fw 7744 tools/finsig_dryos.c if (fw->dancing_bits) fw 7746 tools/finsig_dryos.c bprintf("// NEED_ENCODED_DISKBOOT = %d // Found @ 0x%08x",fw->dancing_bits,idx2adr(fw,fw->dancing_bits_idx)); fw 7747 tools/finsig_dryos.c osig *o = find_sig(fw->sv->makevals,"NEED_ENCODED_DISKBOOT"); fw 7750 tools/finsig_dryos.c else if (o->val != fw->dancing_bits) fw 7756 tools/finsig_dryos.c bprintf("// NEED_ENCODED_DISKBOOT = ? Not found, possible new 'dancing bits' entry needed. // Found @ 0x%08x\n",idx2adr(fw,fw->dancing_bits_idx)); fw 7761 tools/finsig_dryos.c find_AdditionAgent_RAM(fw); fw 7765 tools/finsig_dryos.c uint32_t u = fw->base+fw->fsize*4; fw 7770 tools/finsig_dryos.c bprintf("// %-8s 0x%08x - 0x%08x (%7d bytes)\n","ROM",fw->base,u,fw->fsize*4); fw 7771 tools/finsig_dryos.c if ((fw->dryos_ver >= 50) && (fw->base2 != 0)) fw 7773 tools/finsig_dryos.c bprintf("// %-8s 0x%08x - 0x%08x copied from 0x%08x (%7d bytes)\n","RAM code",fw->base2,fw->base2+fw->size2*4,fw->base_copied,fw->size2*4); fw 7775 tools/finsig_dryos.c bprintf("// %-8s 0x%08x - 0x%08x copied from 0x%08x (%7d bytes)\n","RAM data",fw->data_start,fw->data_start+fw->data_len*4,fw->data_init_start,fw->data_len*4); fw 7804 tools/finsig_dryos.c void write_funcs(firmware *fw, char *filename, func_entry *fns[], int (*compare)(const func_entry **p1, const func_entry **p2)) fw 7819 tools/finsig_dryos.c osig* ostub2 = find_sig(fw->sv->stubs,fns[k]->name); fw 7840 tools/finsig_dryos.c firmware fw; fw 7856 tools/finsig_dryos.c fw.sv = new_stub_values(); fw 7857 tools/finsig_dryos.c load_stubs(fw.sv, "stubs_entry_2.S", 1); fw 7858 tools/finsig_dryos.c load_stubs_min(fw.sv); fw 7859 tools/finsig_dryos.c load_modemap(fw.sv); fw 7860 tools/finsig_dryos.c load_platform(fw.sv); fw 7861 tools/finsig_dryos.c load_makefile(fw.sv); fw 7866 tools/finsig_dryos.c load_firmware(&fw,argv[1],argv[2],(argc==5)?argv[4]:0, OS_DRYOS); fw 7867 tools/finsig_dryos.c fw.uncached_adr = 0; fw 7868 tools/finsig_dryos.c fw.uncached_adr_idx = 0; fw 7869 tools/finsig_dryos.c find_eventprocs(&fw); fw 7870 tools/finsig_dryos.c find_ptp_handlers(&fw); fw 7871 tools/finsig_dryos.c find_builddate(&fw); fw 7872 tools/finsig_dryos.c output_firmware_vals(&fw); fw 7881 tools/finsig_dryos.c find_tasks(&fw); fw 7888 tools/finsig_dryos.c if ((fw.dryos_ver >= find_min_ver(curr_name)) && (fw.dryos_ver <= find_max_ver(curr_name))) fw 7890 tools/finsig_dryos.c find_matches(&fw, curr_name); fw 7891 tools/finsig_dryos.c print_results(&fw,curr_name,k); fw 7900 tools/finsig_dryos.c if (!fw.uncached_adr) fw 7901 tools/finsig_dryos.c search_saved_sig(&fw, "FreeUncacheableMemory", match_CAM_UNCACHED_BIT, 0, 0, 8); fw 7903 tools/finsig_dryos.c find_modemap(&fw); fw 7904 tools/finsig_dryos.c find_stubs_min(&fw); fw 7905 tools/finsig_dryos.c find_lib_vals(&fw); fw 7906 tools/finsig_dryos.c find_key_vals(&fw); fw 7907 tools/finsig_dryos.c find_platform_vals(&fw); fw 7908 tools/finsig_dryos.c find_propset(&fw); fw 7909 tools/finsig_dryos.c find_other_vals(&fw); fw 7919 tools/finsig_dryos.c write_funcs(&fw, "funcs_by_name.csv", fns, compare_func_names); fw 7920 tools/finsig_dryos.c write_funcs(&fw, "funcs_by_address.csv", fns, compare_func_addresses); fw 685 tools/finsig_thumb2.c void save_sig(firmware *fw, const char *name, uint32_t val) fw 694 tools/finsig_thumb2.c if(!adr_is_main_fw_code(fw,val)) { fw 704 tools/finsig_thumb2.c void add_func_name(firmware *fw, char *n, uint32_t eadr, char *suffix) fw 718 tools/finsig_thumb2.c if(!adr_is_main_fw_code(fw,eadr)) { fw 759 tools/finsig_thumb2.c int save_sig_with_j(firmware *fw, char *name, uint32_t adr) fw 766 tools/finsig_thumb2.c if(!fw_disasm_iter_single(fw,adr)) { fw 773 tools/finsig_thumb2.c uint32_t b_adr=get_direct_jump_target(fw,fw->is); fw 777 tools/finsig_thumb2.c add_func_name(fw,buf,adr,NULL); // this is the orignal named address fw 781 tools/finsig_thumb2.c save_sig(fw,name,adr); fw 788 tools/finsig_thumb2.c int find_next_sig_call(firmware *fw, iter_state_t *is, uint32_t max_offset, const char *name) fw 811 tools/finsig_thumb2.c return fw_search_insn(fw,is,search_disasm_calls_multi,0,match_fns,is->adr + max_offset); fw 815 tools/finsig_thumb2.c int is_sig_call(firmware *fw, iter_state_t *is, const char *name) fw 817 tools/finsig_thumb2.c uint32_t adr=get_branch_call_insn_target(fw,is); fw 824 tools/finsig_thumb2.c osig* ostub2 = find_sig(fw->sv->stubs,name); fw 844 tools/finsig_thumb2.c typedef int (*sig_match_fn)(firmware *fw, iter_state_t *is, sig_rule_t *rule); fw 880 tools/finsig_thumb2.c int init_disasm_sig_ref(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 891 tools/finsig_thumb2.c if(!disasm_iter_init(fw,is,adr)) { fw 898 tools/finsig_thumb2.c int sig_match_near_str(firmware *fw, iter_state_t *is, sig_rule_t *rule); fw 904 tools/finsig_thumb2.c int sig_match_str_r0_call(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 906 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 915 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 916 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 920 tools/finsig_thumb2.c if(insn_match_find_next(fw,is,4,match_b_bl_blximm)) { fw 921 tools/finsig_thumb2.c uint32_t adr=get_branch_call_insn_target(fw,is); fw 923 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,adr); fw 931 tools/finsig_thumb2.c int sig_match_reg_evp(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 949 tools/finsig_thumb2.c disasm_iter_init(fw,is,e_to_evp); fw 950 tools/finsig_thumb2.c if(insn_match_seq(fw,is,reg_evp_match)) { fw 953 tools/finsig_thumb2.c save_sig(fw,"RegisterEventProcedure",reg_evp); fw 960 tools/finsig_thumb2.c int sig_match_reg_evp_table(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 963 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); // note this string may appear more than once, assuming want first fw 971 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 973 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 977 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,2,match_b_bl)) { fw 982 tools/finsig_thumb2.c save_sig(fw,"RegisterEventProcedure_alt1",reg_evp_alt1); fw 987 tools/finsig_thumb2.c if((get_call_const_args(fw,is,4,regs)&3)==3) { fw 992 tools/finsig_thumb2.c add_func_name(fw,"DispDev_EnableEventProc",dd_enable_p,NULL); fw 999 tools/finsig_thumb2.c disasm_iter_init(fw,is,dd_enable_p); // start at found func fw 1000 tools/finsig_thumb2.c if(insn_match_find_next(fw,is,4,match_b_bl)) { // find the first bl fw 1003 tools/finsig_thumb2.c if(get_call_const_args(fw,is,4,regs)&1) { fw 1006 tools/finsig_thumb2.c save_sig(fw,"RegisterEventProcTable",reg_evp_tbl); fw 1014 tools/finsig_thumb2.c int sig_match_reg_evp_alt2(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1018 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 1026 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 1027 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 1031 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,3,match_b_bl)) { fw 1036 tools/finsig_thumb2.c if((get_call_const_args(fw,is,4,regs)&3)==3) { fw 1044 tools/finsig_thumb2.c save_sig(fw,"RegisterEventProcedure_alt2",reg_evp_alt2); fw 1056 tools/finsig_thumb2.c int sig_match_unreg_evp_table(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1058 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 1068 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 1069 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 1074 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,3,match_b_bl)) { fw 1077 tools/finsig_thumb2.c uint32_t reg_call=get_branch_call_insn_target(fw,is); fw 1084 tools/finsig_thumb2.c if((get_call_const_args(fw,is,4,regs)&3)==3) { fw 1096 tools/finsig_thumb2.c disasm_iter_init(fw,is,mecha_unreg); fw 1098 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,7,match_b_bl)) { fw 1106 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,18,match_ldr_r0)) { fw 1109 tools/finsig_thumb2.c uint32_t tbl=LDR_PC2val(fw,is->insn); fw 1113 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 1117 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 1122 tools/finsig_thumb2.c int sig_match_evp_table_veneer(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1129 tools/finsig_thumb2.c disasm_iter_init(fw,is,ref_adr); // start at our known function fw 1132 tools/finsig_thumb2.c if (!disasm_iter(fw,is)) { fw 1133 tools/finsig_thumb2.c disasm_iter_set(fw,is,(is->adr+2) | fw->thumb_default); fw 1137 tools/finsig_thumb2.c uint32_t b_adr = get_branch_call_insn_target(fw,is); fw 1140 tools/finsig_thumb2.c add_func_name(fw,rule->name,cadr | is->thumb,NULL); fw 1150 tools/finsig_thumb2.c int sig_match_get_nd_value(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1157 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1160 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,16,"ClearEventFlag")) { fw 1164 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,4,match_bl_blximm)) { fw 1169 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 1170 tools/finsig_thumb2.c disasm_iter(fw,is); fw 1171 tools/finsig_thumb2.c if (B_target(fw,is->insn)) fw 1172 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 1174 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,5,match_bl_blximm)) { fw 1178 tools/finsig_thumb2.c uint32_t addr=get_branch_call_insn_target(fw,is); fw 1183 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,addr); fw 1186 tools/finsig_thumb2.c int sig_match_get_current_exp(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1188 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1191 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,2,match_bl_blximm)) { fw 1196 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 1197 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,6,match_bl_blximm)) { fw 1202 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 1203 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,6,match_bl_blximm)) { fw 1207 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 1210 tools/finsig_thumb2.c int sig_match_get_current_nd_value(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1216 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1219 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,36,"GetCurrentShutterSpeed_FW")) { fw 1230 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,10,match_bl_strh)) { fw 1235 tools/finsig_thumb2.c disasm_iter_init(fw,is,adr_hist_get(&is->ah,1)); fw 1236 tools/finsig_thumb2.c disasm_iter(fw,is); fw 1237 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 1240 tools/finsig_thumb2.c int sig_match_imager_active_callback(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1242 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1253 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,28,match_ldr_bl_mov_pop)) { fw 1258 tools/finsig_thumb2.c disasm_iter_init(fw,is,adr_hist_get(&is->ah,3)); fw 1260 tools/finsig_thumb2.c disasm_iter(fw,is); fw 1261 tools/finsig_thumb2.c uint32_t f1=LDR_PC2val(fw,is->insn); fw 1264 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,f1); fw 1266 tools/finsig_thumb2.c int sig_match_imager_active(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1268 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1281 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,10,match_ldr_mov_str_pop)) { fw 1283 tools/finsig_thumb2.c init_disasm_sig_ref(fw,is,rule); fw 1291 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,10,match_mov_ldr_str_pop)) { fw 1298 tools/finsig_thumb2.c disasm_iter_init(fw,is,adr_hist_get(&is->ah,backtrack)); fw 1299 tools/finsig_thumb2.c disasm_iter(fw,is); fw 1300 tools/finsig_thumb2.c uint32_t base=LDR_PC2val(fw,is->insn); fw 1305 tools/finsig_thumb2.c disasm_iter(fw,is); fw 1307 tools/finsig_thumb2.c disasm_iter(fw,is); fw 1319 tools/finsig_thumb2.c int sig_match_screenlock_helper(firmware *fw, iter_state_t *is, sig_rule_t *rule) { fw 1320 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1339 tools/finsig_thumb2.c if(insn_match_find_next_seq(fw,is,6,match_cmp_bne_bl)) { fw 1340 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,init_adr); fw 1346 tools/finsig_thumb2.c disasm_iter_init(fw,is,init_adr); fw 1347 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,1,match_ldrpc_mov_b)) { fw 1351 tools/finsig_thumb2.c disasm_iter_init(fw,is,init_adr); fw 1352 tools/finsig_thumb2.c disasm_iter(fw,is); fw 1353 tools/finsig_thumb2.c uint32_t adr = LDR_PC2val(fw,is->insn); fw 1358 tools/finsig_thumb2.c disasm_iter_init(fw,is,adr); fw 1360 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,6,match_cmp_bne_bl)) { fw 1364 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,adr); fw 1367 tools/finsig_thumb2.c int sig_match_screenunlock(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1369 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1373 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,14,"ScreenLock")) { fw 1384 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,38,match_end)) { fw 1389 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 1393 tools/finsig_thumb2.c int sig_match_log_camera_event(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1395 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1398 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,6,match_bl_blximm)) { fw 1403 tools/finsig_thumb2.c if((get_call_const_args(fw,is,4,regs)&3)!=3) { fw 1411 tools/finsig_thumb2.c const char *str=(char *)adr2ptr(fw,regs[1]); fw 1416 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 1420 tools/finsig_thumb2.c int sig_match_physw_misc(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1422 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1423 tools/finsig_thumb2.c osig* ostub2 = find_sig(fw->sv->stubs,rule->ref_name); fw 1426 tools/finsig_thumb2.c disasm_iter_init(fw,is,ostub2->val); fw 1436 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 1440 tools/finsig_thumb2.c physw_run=LDR_PC2val(fw,is->insn); fw 1442 tools/finsig_thumb2.c if(adr_is_var(fw,physw_run)) { fw 1456 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,7,match_bl_blximm)) { fw 1464 tools/finsig_thumb2.c uint32_t f=get_branch_call_insn_target(fw,is); fw 1468 tools/finsig_thumb2.c fw_disasm_iter_single(fw,f); fw 1469 tools/finsig_thumb2.c uint32_t f2=get_direct_jump_target(fw,fw->is); fw 1475 tools/finsig_thumb2.c save_sig_with_j(fw,"SleepTask",f); fw 1478 tools/finsig_thumb2.c disasm_iter_init(fw,is,adr_hist_get(&is->ah,1)); fw 1479 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 1490 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 1496 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,2,match_bl_blximm)) { fw 1499 tools/finsig_thumb2.c save_sig(fw,"kbd_p1_f",get_branch_call_insn_target(fw,is)); fw 1502 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,4,match_bl_blximm)) { fw 1505 tools/finsig_thumb2.c save_sig(fw,"kbd_p2_f",get_branch_call_insn_target(fw,is)); fw 1509 tools/finsig_thumb2.c int sig_match_kbd_read_keys(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1511 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1515 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,4,match_bl_blximm)) { fw 1518 tools/finsig_thumb2.c save_sig(fw,"kbd_read_keys",get_branch_call_insn_target(fw,is)); fw 1519 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 1523 tools/finsig_thumb2.c uint32_t physw_status=LDR_PC2val(fw,is->insn); fw 1526 tools/finsig_thumb2.c save_sig(fw,"kbd_p1_f_cont",(uint32_t)(is->insn->address) | is->thumb); fw 1533 tools/finsig_thumb2.c int sig_match_get_kbd_state(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1535 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1545 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,11,match)) { fw 1548 tools/finsig_thumb2.c save_sig_with_j(fw,"GetKbdState",get_branch_call_insn_target(fw,is)); fw 1550 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,5,match_b_bl_blximm)) { fw 1553 tools/finsig_thumb2.c save_sig_with_j(fw,"kbd_read_keys_r2",get_branch_call_insn_target(fw,is)); fw 1557 tools/finsig_thumb2.c int sig_match_get_dial_hw_position(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1559 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1562 tools/finsig_thumb2.c uint32_t adr = find_last_call_from_func(fw,is,18,50); fw 1568 tools/finsig_thumb2.c disasm_iter_init(fw,is,adr); fw 1569 tools/finsig_thumb2.c adr = find_last_call_from_func(fw,is,16,32); fw 1575 tools/finsig_thumb2.c disasm_iter_init(fw,is,adr); fw 1577 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,30,match_bl_blximm)) { fw 1581 tools/finsig_thumb2.c uint32_t fadr = get_branch_call_insn_target(fw,is); fw 1583 tools/finsig_thumb2.c disasm_iter_init(fw,is,adr_hist_get(&is->ah,4)); fw 1590 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,4,match_hw_dial_call)) { fw 1594 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,fadr); fw 1597 tools/finsig_thumb2.c int sig_match_create_jumptable(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1599 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1603 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,20,2,match_bl_blximm)) { fw 1607 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 1608 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,15,match_bl_blximm)) { fw 1612 tools/finsig_thumb2.c save_sig(fw,"CreateJumptable",get_branch_call_insn_target(fw,is)); fw 1617 tools/finsig_thumb2.c int sig_match_take_semaphore_strict(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1619 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1623 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,6,match_bl_blximm)) { fw 1627 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 1629 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,10,2,match_bl_blximm)) { fw 1633 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 1635 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,20,3,match_bl_blximm)) { fw 1638 tools/finsig_thumb2.c save_sig_with_j(fw,"DebugAssert",get_branch_call_insn_target(fw,is)); fw 1641 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,7,match_bl_blximm)) { fw 1644 tools/finsig_thumb2.c save_sig_with_j(fw,"TakeSemaphoreStrictly",get_branch_call_insn_target(fw,is)); fw 1650 tools/finsig_thumb2.c fw_disasm_iter_single(fw,adr_hist_get(&is->ah,i)); fw 1651 tools/finsig_thumb2.c cs_insn *insn=fw->is->insn; fw 1664 tools/finsig_thumb2.c sem_adr=LDR_PC2val(fw,insn); fw 1674 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,10,match_bl_blximm)) { fw 1677 tools/finsig_thumb2.c return save_sig_with_j(fw,"GetDrive_FreeClusters",get_branch_call_insn_target(fw,is)); fw 1680 tools/finsig_thumb2.c int sig_match_get_semaphore_value(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1682 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 1688 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 1690 tools/finsig_thumb2.c if(!fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 1698 tools/finsig_thumb2.c if(!fw_disasm_iter_single(fw,adr_hist_get(&is->ah,i))) { fw 1702 tools/finsig_thumb2.c if(insn_match_any(fw->is->insn,match_bl_blximm)){ fw 1703 tools/finsig_thumb2.c fadr=get_branch_call_insn_target(fw,fw->is); fw 1712 tools/finsig_thumb2.c disasm_iter_init(fw,is,fadr); fw 1714 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,9,match_bl_blximm)) { fw 1718 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 1721 tools/finsig_thumb2.c int sig_match_stat(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1723 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 1730 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 1731 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 1733 tools/finsig_thumb2.c if(insn_match_find_next(fw,is,2,match_bl_blximm)) { fw 1734 tools/finsig_thumb2.c uint32_t adr=get_branch_call_insn_target(fw,is); fw 1736 tools/finsig_thumb2.c if(is_sig_call(fw,is,"Fopen_Fut_FW")) { fw 1740 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,adr); fw 1757 tools/finsig_thumb2.c int sig_match_open(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1759 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1762 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,48,match_open_mov_call)) { fw 1765 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 1769 tools/finsig_thumb2.c int sig_match_open_gt_57(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1771 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1774 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,38,"TakeSemaphoreStrictly")) { fw 1779 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,5,match_bl_blximm)) { fw 1783 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 1785 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,48,match_open_mov_call)) { fw 1788 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 1793 tools/finsig_thumb2.c int sig_match_close_gt_57(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1795 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1798 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,34,"TakeSemaphoreStrictly")) { fw 1803 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,3,match_bl_blximm)) { fw 1807 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 1809 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,3,match_bl_blximm)) { fw 1812 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 1817 tools/finsig_thumb2.c int sig_match_umalloc(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1819 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1823 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,15,3,match_bl_blximm)) { fw 1827 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 1829 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,14,3,match_bl_blximm)) { fw 1832 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 1836 tools/finsig_thumb2.c int sig_match_ufree(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1838 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1842 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,60,"strcpy_FW")) { fw 1846 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,12,3,match_bl_blximm)) { fw 1850 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 1852 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,40,"Close_FW")) { fw 1856 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,4,match_bl_blximm)) { fw 1859 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 1862 tools/finsig_thumb2.c int sig_match_deletefile_fut(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1864 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 1870 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 1871 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 1873 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,4,match_bl_blximm)) { fw 1877 tools/finsig_thumb2.c uint32_t adr=get_branch_call_insn_target(fw,is); fw 1878 tools/finsig_thumb2.c if(!fw_disasm_iter_single(fw,adr)) { fw 1890 tools/finsig_thumb2.c if(!insn_match_any(fw->is->insn,match_mov_r1)){ fw 1893 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,adr); fw 1898 tools/finsig_thumb2.c uint32_t find_call_near_str(firmware *fw, iter_state_t *is, sig_rule_t *rule); fw 1900 tools/finsig_thumb2.c int sig_match_closedir(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1902 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 1908 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 1909 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 1910 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,60,"sprintf_FW")) { fw 1913 tools/finsig_thumb2.c if(insn_match_find_nth(fw,is,7,2,match_bl_blximm)) { fw 1914 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 1918 tools/finsig_thumb2.c uint32_t call_adr = find_call_near_str(fw,is,rule); fw 1920 tools/finsig_thumb2.c disasm_iter_init(fw,is,call_adr); // reset to a bit before where the string was found fw 1927 tools/finsig_thumb2.c if(insn_match_seq(fw,is,match_closedir)){ fw 1928 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 1935 tools/finsig_thumb2.c int sig_match_readfastdir_gt58(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1937 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 1941 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,22,"bzero")) { fw 1945 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,10,"OpenFastDir")) { fw 1949 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,12,1,match_bl_blximm)) { fw 1952 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 1955 tools/finsig_thumb2.c int sig_match_strrchr(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1960 tools/finsig_thumb2.c uint32_t call_adr = find_call_near_str(fw,is,rule); fw 1962 tools/finsig_thumb2.c disasm_iter_init(fw,is,call_adr-4); // reset to a bit before where the string was found fw 1967 tools/finsig_thumb2.c if(insn_match_find_next(fw,is,2,match_mov_r1_imm)){ fw 1968 tools/finsig_thumb2.c disasm_iter_init(fw,is,call_adr); fw 1969 tools/finsig_thumb2.c disasm_iter(fw,is); fw 1970 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 1977 tools/finsig_thumb2.c int sig_match_time(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 1979 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 1986 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 1987 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 1989 tools/finsig_thumb2.c if(insn_match_find_nth(fw,is,6,2,match_bl_blximm)) { fw 1990 tools/finsig_thumb2.c fadr=get_branch_call_insn_target(fw,is); fw 1998 tools/finsig_thumb2.c disasm_iter_init(fw,is,fadr); fw 2000 tools/finsig_thumb2.c if(insn_match_find_nth(fw,is,11,2,match_bl_blximm)) { fw 2001 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2006 tools/finsig_thumb2.c int sig_match_strncpy(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2008 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2011 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,60,"strcpy_FW")) { fw 2014 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,6,match_bl_blximm)) { fw 2017 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2020 tools/finsig_thumb2.c int sig_match_strncmp(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2022 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 2028 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 2029 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 2030 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,3,match_bl_blximm)) { fw 2034 tools/finsig_thumb2.c if((get_call_const_args(fw,is,4,regs)&6)==6) { fw 2037 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2044 tools/finsig_thumb2.c int sig_match_strtolx(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2046 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2049 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,130,"strncpy")) { fw 2053 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,6,match_bl_blximm)) { fw 2056 tools/finsig_thumb2.c uint32_t adr=get_branch_call_insn_target(fw,is); fw 2061 tools/finsig_thumb2.c disasm_iter_init(fw,is,adr); fw 2062 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 2076 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 2080 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2084 tools/finsig_thumb2.c int sig_match_exec_evp(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2086 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 2092 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 2093 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 2097 tools/finsig_thumb2.c if(!fw_disasm_iter_single(fw,adr_hist_get(&is->ah,i))) { fw 2100 tools/finsig_thumb2.c if(fw->is->insn->id == ARM_INS_PUSH && fw->is->insn->detail->arm.operands[0].reg == ARM_REG_R0) { fw 2102 tools/finsig_thumb2.c uint32_t adr=(uint32_t)(fw->is->insn->address) | is->thumb; fw 2104 tools/finsig_thumb2.c if(find_next_sig_call(fw,is,28,"DebugAssert")) { fw 2107 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,adr); fw 2114 tools/finsig_thumb2.c int sig_match_fgets_fut(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2116 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2119 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,16,"Fopen_Fut_FW")) { fw 2122 tools/finsig_thumb2.c disasm_iter(fw,is); fw 2123 tools/finsig_thumb2.c disasm_iter(fw,is); fw 2124 tools/finsig_thumb2.c if (B_target(fw,is->insn) && (is->insn->detail->arm.cc == ARM_CC_NE)) { fw 2125 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 2127 tools/finsig_thumb2.c if (B_target(fw,is->insn) && (is->insn->detail->arm.cc == ARM_CC_NE)) { fw 2128 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 2131 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,20,1,match_bl_blximm)) { fw 2134 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2137 tools/finsig_thumb2.c int sig_match_log(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2139 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2147 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,38,3,match_pop6)) { fw 2151 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,24,3,match_bl_blximm)) { fw 2154 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2158 tools/finsig_thumb2.c int sig_match_pow_dry_52(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2160 tools/finsig_thumb2.c if (fw->dryos_ver != 52) { fw 2163 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2171 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,50,match_ldrd_r0_r1)) { fw 2178 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 2182 tools/finsig_thumb2.c uint32_t adr=get_branch_call_insn_target(fw,is); fw 2186 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,adr); fw 2190 tools/finsig_thumb2.c int sig_match_pow_dry_gt_52(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2192 tools/finsig_thumb2.c if (fw->dryos_ver <= 52) { fw 2195 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2218 tools/finsig_thumb2.c if(insn_match_find_next_seq(fw,is,50,match1[idx])) fw 2220 tools/finsig_thumb2.c init_disasm_sig_ref(fw,is,rule); fw 2226 tools/finsig_thumb2.c uint32_t adr=get_branch_call_insn_target(fw,is); fw 2231 tools/finsig_thumb2.c disasm_iter_init(fw,is,adr); fw 2248 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,15,match2[idx])) { fw 2251 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2254 tools/finsig_thumb2.c int sig_match_sqrt(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2256 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2260 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,12,3,match_bl_blximm)) { fw 2264 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 2265 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 2269 tools/finsig_thumb2.c uint32_t j_tgt=get_direct_jump_target(fw,is); fw 2273 tools/finsig_thumb2.c disasm_iter_init(fw,is,j_tgt); fw 2274 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 2280 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,12,2,match_b_bl_blximm)) { fw 2283 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2285 tools/finsig_thumb2.c int sig_match_get_drive_cluster_size(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2287 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2291 tools/finsig_thumb2.c if(fw_search_insn(fw,is,search_disasm_str_ref,0,"A/OpLogErr.txt",(uint32_t)is->adr+260)) { fw 2293 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,3,match_bl_blximm)) { fw 2298 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 2300 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,13,2,match_bl_blximm)) { fw 2305 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 2306 tools/finsig_thumb2.c disasm_iter(fw,is); fw 2307 tools/finsig_thumb2.c if (B_target(fw, is->insn)) fw 2308 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 2310 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,4,match_bl_blximm)) { fw 2314 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2319 tools/finsig_thumb2.c int sig_match_mktime_ext(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2321 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 2327 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 2328 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 2330 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,12,"sscanf_FW")) { fw 2335 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,22,match_bl_blximm)) { fw 2340 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 2341 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 2345 tools/finsig_thumb2.c uint32_t j_tgt=get_direct_jump_target(fw,is); fw 2349 tools/finsig_thumb2.c disasm_iter_init(fw,is,j_tgt); fw 2350 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 2362 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,54,match_pop4)) { fw 2366 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,1,match_b)) { fw 2370 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2376 tools/finsig_thumb2.c int sig_match_rec2pb(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2378 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 2384 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 2385 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 2391 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,10,match_ldr_cbnz_r0)) { fw 2396 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 2397 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,3,match_b_bl_blximm)) { fw 2404 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 2405 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,16,"LogCameraEvent")) { fw 2410 tools/finsig_thumb2.c if((get_call_const_args(fw,is,4,regs)&3)!=3) { fw 2415 tools/finsig_thumb2.c if(regs[0]==0x60 && adr2ptr(fw,regs[1]) && (strcmp((const char *)adr2ptr(fw,regs[1]),"AC:Rec2PB")==0)) { fw 2416 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,adr); fw 2426 tools/finsig_thumb2.c int sig_match_get_parameter_data(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2428 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2436 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,4,match_cmp_bhs)) { fw 2441 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 2442 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,1,match_b)) { fw 2446 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2452 tools/finsig_thumb2.c int sig_match_prepdir_x(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2454 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2464 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,1,match_mov_r1_1)) { fw 2468 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,1,match_b)) { fw 2472 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2478 tools/finsig_thumb2.c int sig_match_prepdir_1(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2480 tools/finsig_thumb2.c uint32_t call_adr = find_call_near_str(fw,is,rule); fw 2482 tools/finsig_thumb2.c disasm_iter_init(fw,is,call_adr); fw 2483 tools/finsig_thumb2.c disasm_iter(fw,is); fw 2484 tools/finsig_thumb2.c disasm_iter(fw,is); fw 2485 tools/finsig_thumb2.c if (!CBx_target(fw,is->insn)) fw 2488 tools/finsig_thumb2.c call_adr = find_call_near_str(fw,is,rule); fw 2492 tools/finsig_thumb2.c disasm_iter_init(fw,is,call_adr); fw 2493 tools/finsig_thumb2.c disasm_iter(fw,is); fw 2494 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2499 tools/finsig_thumb2.c call_adr = find_call_near_str(fw,is,rule); fw 2503 tools/finsig_thumb2.c disasm_iter_init(fw,is,call_adr); fw 2504 tools/finsig_thumb2.c disasm_iter(fw,is); fw 2505 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2508 tools/finsig_thumb2.c int sig_match_prepdir_0(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2510 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2519 tools/finsig_thumb2.c disasm_iter(fw,is); fw 2520 tools/finsig_thumb2.c disasm_iter(fw,is); fw 2530 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,1,match_mov_r1_1)) { fw 2534 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,1,match_b)) { fw 2538 tools/finsig_thumb2.c uint32_t pdx=get_branch_call_insn_target(fw,is); fw 2543 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,adr); fw 2545 tools/finsig_thumb2.c int sig_match_mkdir(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2547 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2557 tools/finsig_thumb2.c if(insn_match_find_next_seq(fw,is,148,match)) { fw 2558 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2561 tools/finsig_thumb2.c init_disasm_sig_ref(fw,is,rule); fw 2569 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,148,match2)) { fw 2573 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2576 tools/finsig_thumb2.c int sig_match_add_ptp_handler(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2578 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 2584 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 2585 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 2587 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,8,"CreateTaskStrictly")) { fw 2592 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,13,3,match_bl_blximm)) { fw 2598 tools/finsig_thumb2.c if((get_call_const_args(fw,is,5,regs)&7)!=7) { fw 2602 tools/finsig_thumb2.c if(regs[0] < 0x9000 || regs[0] > 0x10000 || !adr2ptr(fw,regs[1]) || regs[2] != 0) { fw 2606 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2610 tools/finsig_thumb2.c int sig_match_qsort(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2612 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2615 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,90,"DebugAssert")) { fw 2619 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,38,3,match_bl_blximm)) { fw 2624 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 2626 tools/finsig_thumb2.c if(insn_match_find_next(fw,is,4,match_bl_blximm)) { fw 2627 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 2629 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,14,match_bl_blximm)) { fw 2635 tools/finsig_thumb2.c if((get_call_const_args(fw,is,5,regs)&0xe)!=0xe) { fw 2639 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2649 tools/finsig_thumb2.c int sig_match_deletedirectory_fut(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2651 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 2658 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - 2048) | fw->thumb_default); // reset to a bit before where the string was found fw 2660 tools/finsig_thumb2.c while(find_next_sig_call(fw,is,end_adr - (uint32_t)is->adr,"DeleteFile_Fut")) { fw 2661 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,6,match_bl_blximm)) { fw 2665 tools/finsig_thumb2.c if(!is_sig_call(fw,is,"strcpy")) { fw 2669 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,4,match_bl_blximm)) { fw 2673 tools/finsig_thumb2.c if(!is_sig_call(fw,is,"strrchr")) { fw 2679 tools/finsig_thumb2.c if((get_call_const_args(fw,is,2,regs)&0x2)!=0x2) { fw 2687 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,5,match_bl_blximm)) { fw 2691 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2705 tools/finsig_thumb2.c int sig_match_set_control_event(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2707 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 2713 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 2714 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 2715 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,4,match_bl_blximm)) { fw 2719 tools/finsig_thumb2.c if(!is_sig_call(fw,is,"LogCameraEvent")) { fw 2729 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,1,match_seq)) { fw 2733 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2738 tools/finsig_thumb2.c int sig_match_displaybusyonscreen_52(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2740 tools/finsig_thumb2.c if (fw->dryos_ver != 52) { fw 2743 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 2748 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 2749 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 2750 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,3,match_bl_blximm)) { fw 2754 tools/finsig_thumb2.c if(!is_sig_call(fw,is,"LogCameraEvent")) { fw 2758 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,4,"GUISrv_StartGUISystem_FW")) { fw 2762 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,5,2,match_bl_blximm)) { fw 2766 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2771 tools/finsig_thumb2.c int sig_match_undisplaybusyonscreen_52(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2773 tools/finsig_thumb2.c if (fw->dryos_ver != 52) { fw 2776 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 2781 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 2782 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 2784 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,24,"displaybusyonscreen")) { fw 2788 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,12,"GUISrv_StartGUISystem_FW")) { fw 2792 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,6,3,match_bl_blximm)) { fw 2796 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2801 tools/finsig_thumb2.c int sig_match_try_take_sem_dry_gt_58(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2803 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2806 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,24,"ReceiveMessageQueue")) { fw 2810 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,60,"bzero")) { fw 2814 tools/finsig_thumb2.c if(insn_match_find_next(fw,is,3,match_bl_blximm)) { fw 2815 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2821 tools/finsig_thumb2.c int sig_match_wait_all_eventflag_strict(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2823 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2826 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,"EFTool.c"); fw 2831 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,60,"SleepTask")) { fw 2836 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,is->adr + 60)) { fw 2837 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,6,match_bl_blximm)) { fw 2841 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2846 tools/finsig_thumb2.c int sig_match_get_num_posted_messages(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2848 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2851 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,50,"TakeSemaphore")) { fw 2856 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,5,match_bl_blximm)) { fw 2860 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2863 tools/finsig_thumb2.c int sig_match_set_hp_timer_after_now(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2865 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 2870 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 2871 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 2872 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,20,"ClearEventFlag")) { fw 2877 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,13,3,match_bl_blximm)) { fw 2883 tools/finsig_thumb2.c uint32_t found_regs = get_call_const_args(fw,is,6,regs); fw 2888 tools/finsig_thumb2.c if((found_regs & 0x2 && regs[1] > fw->rom_code_search_min_adr) fw 2889 tools/finsig_thumb2.c || (found_regs & 0x4 && regs[2] > fw->rom_code_search_min_adr)) { fw 2890 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2901 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 2905 tools/finsig_thumb2.c int sig_match_transfer_src_overlay(firmware *fw, iter_state_t *is, sig_rule_t *rule) { fw 2906 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2910 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,32,"DebugAssert")) { fw 2915 tools/finsig_thumb2.c if(!find_and_get_var_ldr(fw, is, 20,4, ARM_REG_R0, &desc)) { fw 2920 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,1,match_bl_blximm)) { fw 2925 tools/finsig_thumb2.c uint32_t fadr = get_branch_call_insn_target(fw,is); fw 2938 tools/finsig_thumb2.c if(insn_match_find_next_seq(fw,is,1,bm_buf_match)) { fw 2953 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,fadr); fw 2957 tools/finsig_thumb2.c int sig_match_exmem_vars(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 2960 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 2965 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,15,match_ldr_pc)) { fw 2969 tools/finsig_thumb2.c adr[0]=LDR_PC2val(fw,is->insn); fw 2971 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,5,match_ldr_pc)) { fw 2975 tools/finsig_thumb2.c adr[1]=LDR_PC2val(fw,is->insn); fw 2980 tools/finsig_thumb2.c if (adr[n] < fw->data_start+fw->data_len) { fw 2981 tools/finsig_thumb2.c uint32_t ladr = adr[n]-fw->data_start+fw->data_init_start; fw 2986 tools/finsig_thumb2.c if ( (fw_u32(fw,ladr+m*4)!=0) && isASCIIstring(fw, fw_u32(fw,ladr+m*4)) ) fw 2988 tools/finsig_thumb2.c char *extyp = (char*)adr2ptr(fw, fw_u32(fw,ladr+m*4)); fw 3001 tools/finsig_thumb2.c else if (adr[n] < fw->memisostart) { fw 3009 tools/finsig_thumb2.c int sig_match_zicokick_52(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3011 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 3016 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 3019 tools/finsig_thumb2.c if(!fw_search_insn(fw,is,search_disasm_str_ref,0,rule->ref_name,(uint32_t)is->adr+SEARCH_NEAR_REF_RANGE)) { fw 3024 tools/finsig_thumb2.c if(!fw_disasm_iter_single(fw,adr_hist_get(&is->ah,1))) { fw 3028 tools/finsig_thumb2.c if (!(isLDR_PC(fw->is->insn) && fw->is->insn->detail->arm.operands[0].reg == ARM_REG_R0)) { fw 3033 tools/finsig_thumb2.c uint32_t adr=(uint32_t)(fw->is->insn->address) | is->thumb; fw 3035 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 3040 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,adr); fw 3045 tools/finsig_thumb2.c int sig_match_zicokick_gt52(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3047 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 3052 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 3055 tools/finsig_thumb2.c if(!fw_search_insn(fw,is,search_disasm_str_ref,0,rule->ref_name,(uint32_t)is->adr+SEARCH_NEAR_REF_RANGE)) { fw 3064 tools/finsig_thumb2.c if (!fw_disasm_iter_single(fw,adr_hist_get(&is->ah,i))) { fw 3068 tools/finsig_thumb2.c if (fw->is->insn->id == ARM_INS_PUSH && fw->is->insn->detail->arm.operands[0].reg == ARM_REG_R4) { fw 3069 tools/finsig_thumb2.c if (!fw_disasm_iter_single(fw,adr_hist_get(&is->ah,i+1))) { fw 3073 tools/finsig_thumb2.c if (isLDR_PC(fw->is->insn) && fw->is->insn->detail->arm.operands[0].reg == ARM_REG_R0) { fw 3074 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,(uint32_t)(fw->is->insn->address) | is->thumb); fw 3081 tools/finsig_thumb2.c int sig_match_zicokick_copy(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3083 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3096 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,30,match_ldrs_bl)) { fw 3101 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 3104 tools/finsig_thumb2.c int sig_match_zicokick_values(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3106 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3112 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,64,"zicokick_copy")) { fw 3118 tools/finsig_thumb2.c if((get_call_const_args(fw,is,7,regs)&0x7)==0x7) { fw 3123 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,8,"zicokick_copy")) { fw 3136 tools/finsig_thumb2.c if (!disasm_iter(fw,is)) { fw 3141 tools/finsig_thumb2.c uint32_t u = LDR_PC2val(fw,is->insn); fw 3142 tools/finsig_thumb2.c if ((u<fw->base+fw->size8) && (u>fw->rom_code_search_max_adr)) { fw 3158 tools/finsig_thumb2.c u = fw_u32(fw, uv[j]); fw 3197 tools/finsig_thumb2.c int sig_match_enable_hdmi_power(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3199 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3202 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,14,"CreateEventFlagStrictly")) { fw 3211 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,4,match_seq)) { fw 3216 tools/finsig_thumb2.c if (!disasm_iter(fw,is)) { fw 3219 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 3222 tools/finsig_thumb2.c int sig_match_disable_hdmi_power(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3224 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3227 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,24,"EnableHDMIPower")) { fw 3231 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,22,"ClearEventFlag")) { fw 3241 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,12,match_seq)) { fw 3246 tools/finsig_thumb2.c disasm_iter_init(fw,is,adr_hist_get(&is->ah,2)); fw 3247 tools/finsig_thumb2.c if (!disasm_iter(fw,is)) { fw 3250 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 3253 tools/finsig_thumb2.c int sig_match_levent_table(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3255 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3258 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,4,match_bl_blximm)) { fw 3263 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 3266 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,4,match_bl_blximm)) { fw 3272 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 3275 tools/finsig_thumb2.c disasm_iter(fw,is); fw 3276 tools/finsig_thumb2.c uint32_t adr=LDR_PC2val(fw,is->insn); fw 3281 tools/finsig_thumb2.c uint32_t *p=(uint32_t *)adr2ptr(fw,adr); fw 3294 tools/finsig_thumb2.c int sig_match_flash_param_table(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3296 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3300 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,14,match_bl_blximm)) { fw 3304 tools/finsig_thumb2.c if(!is_sig_call(fw,is,"DebugAssert")) { fw 3308 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,7,match_bl_blximm)) { fw 3312 tools/finsig_thumb2.c if(!is_sig_call(fw,is,"DebugAssert")) { fw 3316 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,8,match_bl_blximm)) { fw 3320 tools/finsig_thumb2.c if(!is_sig_call(fw,is,"DebugAssert")) { fw 3325 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,14,2,match_bl_blximm)) { fw 3330 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 3333 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,8,match_bl_blximm)) { fw 3339 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 3341 tools/finsig_thumb2.c disasm_iter(fw,is); fw 3342 tools/finsig_thumb2.c uint32_t adr=LDR_PC2val(fw,is->insn); fw 3350 tools/finsig_thumb2.c int sig_match_jpeg_count_str(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3352 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 3358 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 3359 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 3361 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,3,match_bl_blximm)) { fw 3365 tools/finsig_thumb2.c if(!is_sig_call(fw,is,"sprintf_FW")) { fw 3371 tools/finsig_thumb2.c if((get_call_const_args(fw,is,5,regs)&0x3)!=0x3) { fw 3379 tools/finsig_thumb2.c if(!adr_is_var(fw,regs[0])) { fw 3390 tools/finsig_thumb2.c int sig_match_misc_flag_named(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3397 tools/finsig_thumb2.c int sig_match_cam_has_iris_diaphragm(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3412 tools/finsig_thumb2.c int sig_match_cam_uncached_bit(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3414 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3421 tools/finsig_thumb2.c if(insn_match_find_next(fw,is,4,match_bic_r0)) { fw 3428 tools/finsig_thumb2.c int sig_match_physw_event_table(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3430 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3434 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,5,match_ldr_pc)) { fw 3438 tools/finsig_thumb2.c uint32_t adr=LDR_PC2val(fw,is->insn); fw 3443 tools/finsig_thumb2.c if(!adr2ptr(fw,adr)) { fw 3450 tools/finsig_thumb2.c int sig_match_uiprop_count(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3452 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3455 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,38,"DebugAssert")) { fw 3459 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,14,"DebugAssert")) { fw 3468 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,3,match_bic_cmp)) { fw 3476 tools/finsig_thumb2.c int sig_match_get_canon_mode_list(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3478 tools/finsig_thumb2.c uint32_t str_adr = find_str_bytes_main_fw(fw,rule->ref_name); fw 3485 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(str_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 3486 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,str_adr+SEARCH_NEAR_REF_RANGE)) { fw 3488 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,4,"LogCameraEvent")) { fw 3493 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 3505 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,2,2,match_bl_blximm)) { fw 3516 tools/finsig_thumb2.c adr=get_branch_call_insn_target(fw,is); fw 3523 tools/finsig_thumb2.c disasm_iter_init(fw,is,adr); fw 3524 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,40,"TakeSemaphoreStrictly")) { fw 3529 tools/finsig_thumb2.c if(!insn_match_find_nth(fw,is,12,2,match_b_bl_blximm)) { fw 3534 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 3542 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,64,match_loop)) { fw 3546 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,2,match_bl_blximm)) { fw 3551 tools/finsig_thumb2.c adr=get_branch_call_insn_target(fw,is); fw 3553 tools/finsig_thumb2.c disasm_iter_init(fw,is,adr); fw 3559 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,1,match_ldr_r0_ret)) { fw 3563 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,adr); fw 3566 tools/finsig_thumb2.c int sig_match_zoom_busy(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3568 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3572 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,5,match_bl_blximm)) { fw 3577 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 3579 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,5,match_ldr_pc)) { fw 3583 tools/finsig_thumb2.c uint32_t base=LDR_PC2val(fw,is->insn); fw 3587 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,40,"TakeSemaphoreStrictly")) { fw 3591 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 3606 tools/finsig_thumb2.c int sig_match_focus_busy(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3608 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3612 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,40,"TakeSemaphore")) { fw 3617 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,5,match_bl_blximm)) { fw 3622 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 3624 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,5,match_ldr_pc)) { fw 3628 tools/finsig_thumb2.c uint32_t base=LDR_PC2val(fw,is->insn); fw 3632 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,50,"TakeSemaphoreStrictly")) { fw 3640 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,7,match_ldr)) { fw 3653 tools/finsig_thumb2.c int sig_match_aram_size(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3655 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3664 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,15,match_ldr_r0_sp_cmp)) { fw 3676 tools/finsig_thumb2.c int sig_match_aram_size_gt58(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3678 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3693 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,15,match_ldrd_r0r1_mov)) { fw 3694 tools/finsig_thumb2.c init_disasm_sig_ref(fw,is,rule); // reset to start fw 3695 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,15,match_ldrd_r2r1_mov)) { fw 3708 tools/finsig_thumb2.c int sig_match_aram_start(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3710 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3714 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,50,"DebugAssert")) { fw 3724 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,15,match_cmp_bne_ldr)) { fw 3728 tools/finsig_thumb2.c uint32_t adr=LDR_PC2val(fw,is->insn); fw 3738 tools/finsig_thumb2.c int sig_match_aram_start2(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3743 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3747 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,60,"DebugAssert")) { fw 3758 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,15,match_cmp_bne_ldr)) { fw 3762 tools/finsig_thumb2.c uint32_t adr=LDR_PC2val(fw,is->insn); fw 3772 tools/finsig_thumb2.c int sig_match__nrflag(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3774 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3784 tools/finsig_thumb2.c if(!insn_match_find_next_seq(fw,is,4,match_cmp_b) || is->insn->detail->arm.cc == ARM_CC_AL) { fw 3789 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 3790 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 3795 tools/finsig_thumb2.c uint32_t adr=LDR_PC2val(fw,is->insn); fw 3801 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 3816 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 3833 tools/finsig_thumb2.c int sig_match_var_struct_get(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3835 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3840 tools/finsig_thumb2.c if(!find_and_get_var_ldr(fw, is, 1, 4, ARM_REG_R0, &desc)) { fw 3844 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 3857 tools/finsig_thumb2.c int sig_match_av_over_sem(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3864 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3867 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,30,"TakeSemaphore")) { fw 3873 tools/finsig_thumb2.c disasm_iter_init(fw,is,adr_hist_get(&is->ah,5)); fw 3875 tools/finsig_thumb2.c if(!find_and_get_var_ldr(fw, is, 3, 4, ARM_REG_R0, &desc)) { fw 3884 tools/finsig_thumb2.c int sig_match_canon_menu_active(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3886 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3890 tools/finsig_thumb2.c if(!find_and_get_var_ldr(fw, is, 2, 4, ARM_REG_R0, &desc)) { fw 3894 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 3906 tools/finsig_thumb2.c int sig_match_file_counter_init(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3908 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3912 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,3,match_bl_blximm)) { fw 3917 tools/finsig_thumb2.c if(check_simple_func(fw,get_branch_call_insn_target(fw,is),MATCH_SIMPLE_FUNC_NULLSUB,NULL)) { fw 3918 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,3,match_bl_blximm)) { fw 3924 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 3925 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,3,match_bl_blximm)) { fw 3929 tools/finsig_thumb2.c uint32_t fadr = get_branch_call_insn_target(fw,is); fw 3931 tools/finsig_thumb2.c disasm_iter_init(fw,is,fadr); fw 3932 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 3942 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,fadr); fw 3944 tools/finsig_thumb2.c int sig_match_file_counter_var(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3946 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3949 tools/finsig_thumb2.c uint32_t adr=LDR_PC2val(fw,is->insn); fw 3958 tools/finsig_thumb2.c if(!adr_is_var(fw,adr)) { fw 3966 tools/finsig_thumb2.c int sig_match_palette_vars(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 3968 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 3971 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,70,"transfer_src_overlay")) { fw 3979 tools/finsig_thumb2.c if(!fw_disasm_iter_single(fw,adr_hist_get(&is->ah,i))) { fw 3983 tools/finsig_thumb2.c fadr=get_branch_call_insn_target(fw,fw->is); fw 3989 tools/finsig_thumb2.c printf("sig_match_palette_vars: no match bl 1 0x%"PRIx64"\n",fw->is->insn->address); fw 3993 tools/finsig_thumb2.c disasm_iter_init(fw,is,fadr); fw 3995 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,3,match_bl)) { fw 4000 tools/finsig_thumb2.c disasm_iter_init(fw,is,get_branch_call_insn_target(fw,is)); fw 4002 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,3,match_ldr_pc)) { fw 4007 tools/finsig_thumb2.c uint32_t pal_base=LDR_PC2val(fw,is->insn); fw 4008 tools/finsig_thumb2.c if(!pal_base || !adr_is_var(fw,pal_base)) { fw 4020 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 4038 tools/finsig_thumb2.c if(!find_next_sig_call(fw,is,20,"PTM_RestoreUIProperty_FW")) { fw 4044 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 4060 tools/finsig_thumb2.c int sig_match_rom_ptr_get(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 4062 tools/finsig_thumb2.c if(!init_disasm_sig_ref(fw,is,rule)) { fw 4066 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 4070 tools/finsig_thumb2.c uint32_t adr=LDR_PC2val(fw,is->insn); fw 4079 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 4095 tools/finsig_thumb2.c uint32_t find_call_near_str(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 4099 tools/finsig_thumb2.c str_adr = find_str_bytes(fw,rule->ref_name); // indirect string could be in data area fw 4101 tools/finsig_thumb2.c str_adr = find_str_bytes_main_fw(fw,rule->ref_name); // direct string must be near actual code fw 4112 tools/finsig_thumb2.c search_adr=find_u32_adr_range(fw,str_adr,fw->rom_code_search_min_adr,fw->rom_code_search_max_adr); fw 4130 tools/finsig_thumb2.c disasm_iter_init(fw,is,(ADR_ALIGN4(search_adr) - SEARCH_NEAR_REF_RANGE) | fw->thumb_default); // reset to a bit before where the string was found fw 4131 tools/finsig_thumb2.c while(fw_search_insn(fw,is,search_disasm_const_ref,str_adr,NULL,search_adr+SEARCH_NEAR_REF_RANGE)) { fw 4137 tools/finsig_thumb2.c fw_disasm_iter_single(fw,adr_hist_get(&is->ah,i)); fw 4138 tools/finsig_thumb2.c if(insn_match_any(fw->is->insn,insn_match)) { fw 4142 tools/finsig_thumb2.c return (uint32_t)fw->is->insn->address | fw->is->thumb; fw 4146 tools/finsig_thumb2.c if(insn_match_find_nth(fw,is,max_insns,n,insn_match)) { fw 4156 tools/finsig_thumb2.c int sig_match_near_str(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 4160 tools/finsig_thumb2.c uint32_t call_adr = find_call_near_str(fw,is,rule); fw 4162 tools/finsig_thumb2.c disasm_iter_init(fw,is,call_adr); // reset to a bit before where the string was found fw 4163 tools/finsig_thumb2.c disasm_iter(fw,is); fw 4164 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,get_branch_call_insn_target(fw,is)); fw 4171 tools/finsig_thumb2.c int sig_match_prop_string(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 4173 tools/finsig_thumb2.c uint32_t call_adr = find_call_near_str(fw, is, rule); fw 4179 tools/finsig_thumb2.c disasm_iter_init(fw,is,call_adr); fw 4180 tools/finsig_thumb2.c disasm_iter(fw,is); fw 4184 tools/finsig_thumb2.c if (is_sig_call(fw,is,"GetPropertyCase")) { fw 4195 tools/finsig_thumb2.c disasm_iter_init(fw,is,call_adr - hl*4); fw 4198 tools/finsig_thumb2.c if (!disasm_iter(fw,is)) fw 4199 tools/finsig_thumb2.c disasm_iter_init(fw,is,(is->adr | is->thumb)+2); fw 4203 tools/finsig_thumb2.c if ((get_call_const_args(fw,is,hl,regs)&(1<<myreg))==(1<<myreg)) { fw 4212 tools/finsig_thumb2.c int is_immediate_ret_sub(firmware *fw,iter_state_t *is_init) fw 4214 tools/finsig_thumb2.c fw_disasm_iter_single(fw,is_init->adr | is_init->thumb); fw 4223 tools/finsig_thumb2.c if(insn_match_any(fw->is->insn,match_mov_r0_imm)) { fw 4224 tools/finsig_thumb2.c fw_disasm_iter(fw); fw 4226 tools/finsig_thumb2.c if(isRETx(fw->is->insn)) { fw 4244 tools/finsig_thumb2.c int sig_match_named_last(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 4253 tools/finsig_thumb2.c disasm_iter_init(fw,is,ref_adr); fw 4254 tools/finsig_thumb2.c if(is_immediate_ret_sub(fw,is)) { fw 4258 tools/finsig_thumb2.c uint32_t fadr = find_last_call_from_func(fw,is,min,max); fw 4260 tools/finsig_thumb2.c return save_sig_with_j(fw,rule->name,fadr); fw 4291 tools/finsig_thumb2.c void sig_match_named_save_sig(firmware *fw,const char *name, uint32_t adr, uint32_t flags) fw 4296 tools/finsig_thumb2.c save_sig(fw,name,adr); fw 4301 tools/finsig_thumb2.c int sig_match_named(firmware *fw, iter_state_t *is, sig_rule_t *rule) fw 4321 tools/finsig_thumb2.c sig_match_named_save_sig(fw,rule->name,ref_adr,sig_flags); fw 4336 tools/finsig_thumb2.c disasm_iter_init(fw,is,ref_adr); fw 4338 tools/finsig_thumb2.c if(is_immediate_ret_sub(fw,is)) { fw 4346 tools/finsig_thumb2.c if(!disasm_iter(fw,is)) { fw 4351 tools/finsig_thumb2.c sig_match_named_save_sig(fw,rule->name,(uint32_t)is->insn->address | is->thumb,sig_flags); fw 4356 tools/finsig_thumb2.c if(insn_match_find_nth(fw,is,15 + sig_nth_range*sig_nth,sig_nth,insn_match)) { fw 4357 tools/finsig_thumb2.c uint32_t adr = B_BL_BLXimm_target(fw,is->insn); fw 4369 tools/finsig_thumb2.c disasm_iter_set(fw,is,adr); fw 4370 tools/finsig_thumb2.c if(disasm_iter(fw,is)) { fw 4372 tools/finsig_thumb2.c uint32_t j_adr=get_direct_jump_target(fw,is); fw 4377 tools/finsig_thumb2.c add_func_name(fw,buf,adr,NULL); // add the previous address as j_... fw 4383 tools/finsig_thumb2.c sig_match_named_save_sig(fw,rule->name,adr,sig_flags); fw 4713 tools/finsig_thumb2.c void run_sig_rules(firmware *fw, sig_rule_t *sig_rules) fw 4717 tools/finsig_thumb2.c iter_state_t *is=disasm_iter_new(fw,0); fw 4719 tools/finsig_thumb2.c if((rule->dryos_min && fw->dryos_ver < rule->dryos_min) fw 4720 tools/finsig_thumb2.c || (rule->dryos_max && fw->dryos_ver > rule->dryos_max)) { fw 4726 tools/finsig_thumb2.c rule->match_fn(fw,is,rule); fw 4733 tools/finsig_thumb2.c void add_event_proc(firmware *fw, char *name, uint32_t adr) fw 4740 tools/finsig_thumb2.c if(!fw_disasm_iter_single(fw,adr)) { fw 4747 tools/finsig_thumb2.c uint32_t b_adr=get_direct_jump_target(fw,fw->is); fw 4751 tools/finsig_thumb2.c add_func_name(fw,buf,adr,NULL); // this is the orignal named address fw 4755 tools/finsig_thumb2.c add_func_name(fw,name,adr,"_FW"); fw 4759 tools/finsig_thumb2.c int process_reg_eventproc_call(firmware *fw, iter_state_t *is,uint32_t unused) { fw 4762 tools/finsig_thumb2.c if((get_call_const_args(fw,is,4,regs)&3)==3) { fw 4764 tools/finsig_thumb2.c if(isASCIIstring(fw,regs[0])) { fw 4765 tools/finsig_thumb2.c char *nm=(char *)adr2ptr(fw,regs[0]); fw 4766 tools/finsig_thumb2.c add_event_proc(fw,nm,regs[1]); fw 4783 tools/finsig_thumb2.c disasm_iter_init(fw,is,adr_hist_get(&is->ah,10)); fw 4786 tools/finsig_thumb2.c if (!disasm_iter(fw,is)) break; fw 4789 tools/finsig_thumb2.c uint32_t u = LDR_PC2val(fw,is->insn); fw 4790 tools/finsig_thumb2.c if ((u<fw->base+fw->size8) && (u>adr) && (!isASCIIstring(fw,u))) { fw 4799 tools/finsig_thumb2.c if (!disasm_iter(fw,is)) break; fw 4809 tools/finsig_thumb2.c uint32_t *p=(uint32_t*)adr2ptr_with_data(fw,tbla); fw 4815 tools/finsig_thumb2.c if(!isASCIIstring(fw,nm_adr)) { fw 4819 tools/finsig_thumb2.c char *nm=(char *)adr2ptr(fw,nm_adr); fw 4823 tools/finsig_thumb2.c add_event_proc(fw,nm,fn); fw 4833 tools/finsig_thumb2.c disasm_iter_init(fw,is,adr | adr_thumb); fw 4834 tools/finsig_thumb2.c disasm_iter(fw,is); fw 4840 tools/finsig_thumb2.c int process_eventproc_table_call(firmware *fw, iter_state_t *is,uint32_t unused) { fw 4844 tools/finsig_thumb2.c foundr0 = get_call_const_args(fw,is,4,regs) & 1; fw 4850 tools/finsig_thumb2.c disasm_iter_set(fw,is,ta); fw 4854 tools/finsig_thumb2.c disasm_iter(fw,is); fw 4856 tools/finsig_thumb2.c fw_disasm_iter_single(fw,sa); fw 4858 tools/finsig_thumb2.c uint32_t adr2 = get_branch_call_insn_target(fw,fw->is); fw 4859 tools/finsig_thumb2.c if (fw->is->insn->id == ARM_INS_BLX && adr1 == adr2) { fw 4860 tools/finsig_thumb2.c foundr0 = get_call_const_args(fw,is,8-2,regs) & 2; fw 4867 tools/finsig_thumb2.c disasm_iter_init(fw,is,ca); fw 4868 tools/finsig_thumb2.c disasm_iter(fw,is); fw 4872 tools/finsig_thumb2.c uint32_t *p=(uint32_t*)adr2ptr_with_data(fw,regs[0]); fw 4878 tools/finsig_thumb2.c if(!isASCIIstring(fw,nm_adr)) { fw 4882 tools/finsig_thumb2.c char *nm=(char *)adr2ptr(fw,nm_adr); fw 4887 tools/finsig_thumb2.c add_event_proc(fw,nm,fn); fw 4899 tools/finsig_thumb2.c int process_createtask_call(firmware *fw, iter_state_t *is,uint32_t unused) { fw 4903 tools/finsig_thumb2.c if((get_call_const_args(fw,is,10,regs)&9)==9) { fw 4904 tools/finsig_thumb2.c if(isASCIIstring(fw,regs[0])) { fw 4907 tools/finsig_thumb2.c char *nm=(char *)adr2ptr(fw,regs[0]); fw 4910 tools/finsig_thumb2.c add_func_name(fw,buf,regs[3],NULL); fw 4920 tools/finsig_thumb2.c int save_ptp_handler_func(firmware *fw,uint32_t op,uint32_t handler) { fw 4930 tools/finsig_thumb2.c add_func_name(fw,buf,handler,NULL); fw 4936 tools/finsig_thumb2.c int process_add_ptp_handler_call(firmware *fw, iter_state_t *is,uint32_t unused) { fw 4939 tools/finsig_thumb2.c if((get_call_const_args(fw,is,8,regs)&3)==3) { fw 4941 tools/finsig_thumb2.c if(!save_ptp_handler_func(fw,regs[0],regs[1])) { fw 4951 tools/finsig_thumb2.c fw_disasm_iter_single(fw,adr_hist_get(&is->ah,i)); fw 4952 tools/finsig_thumb2.c cs_insn *insn=fw->is->insn; fw 4975 tools/finsig_thumb2.c fw_disasm_iter_single(fw,adr_hist_get(&is->ah,i)); fw 4976 tools/finsig_thumb2.c cs_insn *insn=fw->is->insn; fw 4984 tools/finsig_thumb2.c uint32_t adr=LDR_PC2val(fw,insn); fw 4986 tools/finsig_thumb2.c if(fw_u32(fw,adr) == 0x1004) { fw 4998 tools/finsig_thumb2.c uint32_t op=fw_u32(fw,op_table+i*8); fw 4999 tools/finsig_thumb2.c uint32_t handler=fw_u32(fw,op_table+i*8+4); fw 5001 tools/finsig_thumb2.c if(!save_ptp_handler_func(fw,op,handler)) { fw 5048 tools/finsig_thumb2.c void find_exception_handlers(firmware *fw, iter_state_t *is) fw 5052 tools/finsig_thumb2.c if (fw->arch_flags & FW_ARCH_FL_VMSA) { fw 5059 tools/finsig_thumb2.c disasm_iter_init(fw, is, fw->base + fw->main_offs + 12 + fw->thumb_default); fw 5060 tools/finsig_thumb2.c if(!insn_match_find_next(fw,is,4,match_mcr_vbar)) { fw 5064 tools/finsig_thumb2.c disasm_iter_init(fw, is, adr_hist_get(&is->ah,1)); fw 5065 tools/finsig_thumb2.c disasm_iter(fw, is); fw 5067 tools/finsig_thumb2.c ex_vec = LDR_PC2val(fw,is->insn); fw 5068 tools/finsig_thumb2.c if(!ex_vec || adr_get_range_type(fw,ex_vec) != ADR_RANGE_ROM) { fw 5075 tools/finsig_thumb2.c disasm_iter_init(fw, is, ex_vec); fw 5076 tools/finsig_thumb2.c disasm_iter(fw, is); fw 5089 tools/finsig_thumb2.c uint32_t addr=LDR_PC2val(fw,is->insn); fw 5091 tools/finsig_thumb2.c addr=get_branch_call_insn_target(fw,is); fw 5095 tools/finsig_thumb2.c add_func_name(fw,names[0],addr,NULL); fw 5097 tools/finsig_thumb2.c disasm_iter_init(fw, is, ADR_SET_THUMB(ex_vec + 4)); fw 5100 tools/finsig_thumb2.c disasm_iter(fw, is); fw 5103 tools/finsig_thumb2.c addr=LDR_PC2val(fw,is->insn); fw 5105 tools/finsig_thumb2.c add_func_name(fw,names[i],addr,NULL); fw 5114 tools/finsig_thumb2.c void find_generic_funcs(firmware *fw) { fw 5133 tools/finsig_thumb2.c iter_state_t *is=disasm_iter_new(fw,0); fw 5134 tools/finsig_thumb2.c disasm_iter_init(fw,is,fw->rom_code_search_min_adr | fw->thumb_default); // reset to start of fw fw 5135 tools/finsig_thumb2.c fw_search_insn(fw,is,search_disasm_calls_multi,0,match_fns,0); fw 5139 tools/finsig_thumb2.c for(i=0;i<fw->adr_range_count;i++) { fw 5140 tools/finsig_thumb2.c if(fw->adr_ranges[i].type != ADR_RANGE_RAM_CODE) { fw 5143 tools/finsig_thumb2.c disasm_iter_init(fw,is,fw->adr_ranges[i].start | fw->thumb_default); // reset to start of range fw 5144 tools/finsig_thumb2.c fw_search_insn(fw,is,search_disasm_calls_multi,0,match_fns,0); fw 5147 tools/finsig_thumb2.c find_exception_handlers(fw,is); fw 5152 tools/finsig_thumb2.c void find_ctypes(firmware *fw) fw 5167 tools/finsig_thumb2.c int match_count = find_bytes_all(fw,ctypes,sizeof(ctypes),fw->base,ctypes_matches,10); fw 5179 tools/finsig_thumb2.c uint32_t maxadr = (fw->rom_code_search_max_adr > fw->base + 0x400000)?fw->base + 0x100000:fw->rom_code_search_max_adr; fw 5180 tools/finsig_thumb2.c uint32_t adr = find_u32_adr_range(fw,ctypes_matches[i],fw->rom_code_search_min_adr,maxadr); fw 5215 tools/finsig_thumb2.c void output_firmware_vals(firmware *fw) fw 5218 tools/finsig_thumb2.c bprintf("// Main firmware start: 0x%08x\n",fw->base+fw->main_offs); fw 5219 tools/finsig_thumb2.c if (fw->dryos_ver == 0) fw 5224 tools/finsig_thumb2.c fw->dryos_ver, fw 5225 tools/finsig_thumb2.c fw->dryos_ver_str, fw 5226 tools/finsig_thumb2.c fw->dryos_ver_adr, fw 5227 tools/finsig_thumb2.c fw->dryos_ver_ref_adr); fw 5229 tools/finsig_thumb2.c if (fw->firmware_ver_str == 0) fw 5235 tools/finsig_thumb2.c char *c = strrchr(fw->firmware_ver_str,' ') + 1; // points after the last space char fw 5236 tools/finsig_thumb2.c uint32_t j = ptr2adr(fw,(uint8_t *)fw->firmware_ver_str); fw 5237 tools/finsig_thumb2.c uint32_t k = j + c - fw->firmware_ver_str; fw 5240 tools/finsig_thumb2.c bprintf("// %s // Found @ 0x%08x, \"%s\" @ 0x%08x\n",fw->firmware_ver_str,j,c,k); fw 5245 tools/finsig_thumb2.c bprintf("// %s // Found @ 0x%08x, \"%s\" @ 0x%08x\n",fw->firmware_ver_str,j,fw->firmware_ver_str,j); fw 5248 tools/finsig_thumb2.c if (fw->arch_flags & FW_ARCH_FL_VMSA) { fw 5253 tools/finsig_thumb2.c bprintf("// PLATFORMOSVER = %d\n",fw->dryos_ver); fw 5255 tools/finsig_thumb2.c if (fw->memisostart) { fw 5256 tools/finsig_thumb2.c bprintf("// MEMISOSTART = 0x%x\n",fw->memisostart); fw 5260 tools/finsig_thumb2.c if (fw->data_init_start) fw 5262 tools/finsig_thumb2.c bprintf("// MEMBASEADDR = 0x%x\n",fw->data_start); fw 5269 tools/finsig_thumb2.c for(i=0; i<fw->adr_range_count; i++) { fw 5270 tools/finsig_thumb2.c if(fw->adr_ranges[i].type == ADR_RANGE_ROM) { fw 5272 tools/finsig_thumb2.c adr_range_desc_str(&fw->adr_ranges[i]), fw 5273 tools/finsig_thumb2.c fw->adr_ranges[i].start, fw 5274 tools/finsig_thumb2.c fw->adr_ranges[i].start+fw->adr_ranges[i].bytes, fw 5275 tools/finsig_thumb2.c fw->adr_ranges[i].bytes); fw 5278 tools/finsig_thumb2.c adr_range_desc_str(&fw->adr_ranges[i]), fw 5279 tools/finsig_thumb2.c fw->adr_ranges[i].start, fw 5280 tools/finsig_thumb2.c fw->adr_ranges[i].start+fw->adr_ranges[i].bytes, fw 5281 tools/finsig_thumb2.c fw->adr_ranges[i].src_start, fw 5282 tools/finsig_thumb2.c fw->adr_ranges[i].bytes); fw 5298 tools/finsig_thumb2.c if(fw->dryos_ver_count) { fw 5300 tools/finsig_thumb2.c for(i=0;i<fw->dryos_ver_count;i++) { fw 5302 tools/finsig_thumb2.c fw->dryos_ver_list[i], (fw->dryos_ver_list[i] == fw->dryos_ver_adr) ? "main ":"other", fw 5303 tools/finsig_thumb2.c (char *)adr2ptr(fw,fw->dryos_ver_list[i])); fw 5315 tools/finsig_thumb2.c if(ct && adr_get_range_type(fw,ct->val) != ADR_RANGE_RAM_CODE) { fw 5319 tools/finsig_thumb2.c if(ctl && adr_get_range_type(fw,ctl->val) == ADR_RANGE_RAM_CODE) { fw 5339 tools/finsig_thumb2.c void output_platform_vals(firmware *fw) { fw 5342 tools/finsig_thumb2.c if (fw->dryos_ver >= 39) fw 5344 tools/finsig_thumb2.c if (fw->dryos_ver >= 47) fw 5346 tools/finsig_thumb2.c if (fw->dryos_ver >= 59) fw 5365 tools/finsig_thumb2.c void output_propcases(firmware *fw) { fw 5417 tools/finsig_thumb2.c if (fw->sv->propset == n+ps_offset) okay = 1; // if the propset equals to (one of) the complete propset matches fw 5431 tools/finsig_thumb2.c if (fw->sv->propset == n+ps_offset) okay = 1; // if the propset equals to (one of) the most complete propset matches fw 5437 tools/finsig_thumb2.c if (!okay && fw->sv->propset>0) fw 5440 tools/finsig_thumb2.c bprintf("// Port's propset (%i) may be set incorrectly\n", fw->sv->propset); fw 5446 tools/finsig_thumb2.c void output_exmem_types(firmware *fw) fw 5457 tools/finsig_thumb2.c char *extyp = (char*)adr2ptr(fw, fw_u32(fw,ett->val+n*4)); fw 5492 tools/finsig_thumb2.c void get_physw_table_entry(firmware *fw, uint32_t adr, physw_table_entry_t *vals) fw 5494 tools/finsig_thumb2.c uint32_t info=fw_u32(fw,adr); fw 5496 tools/finsig_thumb2.c vals->ev=fw_u32(fw,adr+4); fw 5503 tools/finsig_thumb2.c uint32_t find_physw_table_entry(firmware *fw, uint32_t tadr, int tcount, uint32_t ev) fw 5507 tools/finsig_thumb2.c if(fw_u32(fw,tadr+4) == ev) { fw 5514 tools/finsig_thumb2.c uint32_t find_physw_table_max(firmware *fw, uint32_t tadr, int max_count) fw 5519 tools/finsig_thumb2.c get_physw_table_entry(fw,tadr,&v); fw 5527 tools/finsig_thumb2.c void write_physw_event_table_dump(firmware *fw, uint32_t tadr, int tcount) fw 5539 tools/finsig_thumb2.c get_physw_table_entry(fw,tadr,&v); fw 5544 tools/finsig_thumb2.c void print_kval(firmware *fw, uint32_t tadr, int tcount, uint32_t ev, const char *name, const char *sfx) fw 5546 tools/finsig_thumb2.c uint32_t adr=find_physw_table_entry(fw,tadr,tcount,ev); fw 5551 tools/finsig_thumb2.c get_physw_table_entry(fw,adr,&v); fw 5590 tools/finsig_thumb2.c uint32_t add_kmval(firmware *fw, uint32_t tadr, int tsiz, int tlen, uint32_t ev, const char *name, uint32_t xtra) fw 5592 tools/finsig_thumb2.c uint32_t adr=find_physw_table_entry(fw,tadr,tlen,ev); fw 5597 tools/finsig_thumb2.c get_physw_table_entry(fw,adr,&v); fw 5674 tools/finsig_thumb2.c void do_km_vals(firmware *fw, uint32_t tadr,int tsiz,int tlen) fw 5676 tools/finsig_thumb2.c uint32_t key_half = add_kmval(fw,tadr,tsiz,tlen,0,"KEY_SHOOT_HALF",0); fw 5677 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,1,"KEY_SHOOT_FULL",key_half); fw 5678 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,1,"KEY_SHOOT_FULL_ONLY",0); fw 5680 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0x101,"KEY_PLAYBACK",0); fw 5681 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0x100,"KEY_POWER",0); fw 5684 tools/finsig_thumb2.c if (fw->dryos_ver == 52) // unclear if this applies any other ver fw 5686 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,3,"KEY_ZOOM_IN",0); fw 5687 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,4,"KEY_ZOOM_OUT",0); fw 5688 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,6,"KEY_UP",0); fw 5689 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,7,"KEY_DOWN",0); fw 5690 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,8,"KEY_LEFT",0); fw 5691 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,9,"KEY_RIGHT",0); fw 5692 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0xA,"KEY_SET",0); fw 5693 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0xB,"KEY_MENU",0); fw 5694 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0xC,"KEY_DISPLAY",0); fw 5695 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0x12,"KEY_HELP",0); fw 5696 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0x19,"KEY_ERASE",0); fw 5697 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,2,"KEY_VIDEO",0); fw 5700 tools/finsig_thumb2.c else if (fw->dryos_ver < 54) fw 5702 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,2,"KEY_ZOOM_IN",0); fw 5703 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,3,"KEY_ZOOM_OUT",0); fw 5704 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,4,"KEY_UP",0); fw 5705 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,5,"KEY_DOWN",0); fw 5706 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,6,"KEY_LEFT",0); fw 5707 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,7,"KEY_RIGHT",0); fw 5708 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,8,"KEY_SET",0); fw 5709 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,9,"KEY_MENU",0); fw 5710 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0xA,"KEY_DISPLAY",0); fw 5712 tools/finsig_thumb2.c else if (fw->dryos_ver < 55) fw 5714 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,3,"KEY_ZOOM_IN",0); fw 5715 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,4,"KEY_ZOOM_OUT",0); fw 5716 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,6,"KEY_UP",0); fw 5717 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,7,"KEY_DOWN",0); fw 5718 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,8,"KEY_LEFT",0); fw 5719 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,9,"KEY_RIGHT",0); fw 5720 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0xA,"KEY_SET",0); fw 5721 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0xE,"KEY_MENU",0); fw 5722 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,2,"KEY_VIDEO",0); fw 5723 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0xD,"KEY_DISPLAY",0); fw 5724 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0x103,"KEY_WIFI",0); fw 5728 tools/finsig_thumb2.c else if (fw->dryos_ver < 59) fw 5730 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,3,"KEY_ZOOM_IN",0); fw 5731 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,4,"KEY_ZOOM_OUT",0); fw 5732 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,6,"KEY_UP",0); fw 5733 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,7,"KEY_DOWN",0); fw 5734 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,8,"KEY_LEFT",0); fw 5735 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,9,"KEY_RIGHT",0); fw 5736 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0xA,"KEY_SET",0); fw 5737 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0x14,"KEY_MENU",0); fw 5738 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,2,"KEY_VIDEO",0); fw 5739 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0xD,"KEY_DISPLAY",0); fw 5740 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0x103,"KEY_WIFI",0); fw 5746 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,3,"KEY_ZOOM_IN",0); fw 5747 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,4,"KEY_ZOOM_OUT",0); fw 5748 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,6,"KEY_UP",0); fw 5749 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,7,"KEY_DOWN",0); fw 5750 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,8,"KEY_LEFT",0); fw 5751 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,9,"KEY_RIGHT",0); fw 5752 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0xA,"KEY_SET",0); fw 5753 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0x15,"KEY_MENU",0); fw 5754 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,2,"KEY_VIDEO",0); fw 5755 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0xB,"KEY_ERASE",0); // also framing assist etc fw 5756 tools/finsig_thumb2.c add_kmval(fw,tadr,tsiz,tlen,0x103,"KEY_WIFI",0); fw 5763 tools/finsig_thumb2.c void output_physw_vals(firmware *fw) { fw 5769 tools/finsig_thumb2.c int physw_tbl_len=find_physw_table_max(fw,physw_tbl,50); fw 5770 tools/finsig_thumb2.c write_physw_event_table_dump(fw,physw_tbl,physw_tbl_len); fw 5773 tools/finsig_thumb2.c if (fw->dryos_ver >= 58) fw 5776 tools/finsig_thumb2.c print_kval(fw,physw_tbl,physw_tbl_len,0x30A,"SD_READONLY","_FLAG"); fw 5777 tools/finsig_thumb2.c print_kval(fw,physw_tbl,physw_tbl_len,0x302,"USB","_MASK"); fw 5778 tools/finsig_thumb2.c print_kval(fw,physw_tbl,physw_tbl_len,0x305,"BATTCOVER","_FLAG"); fw 5779 tools/finsig_thumb2.c print_kval(fw,physw_tbl,physw_tbl_len,0x304,"HOTSHOE","_FLAG"); fw 5780 tools/finsig_thumb2.c print_kval(fw,physw_tbl,physw_tbl_len,0x300,"ANALOG_AV","_FLAG"); fw 5784 tools/finsig_thumb2.c print_kval(fw,physw_tbl,physw_tbl_len,0x20A,"SD_READONLY","_FLAG"); fw 5785 tools/finsig_thumb2.c print_kval(fw,physw_tbl,physw_tbl_len,0x202,"USB","_MASK"); fw 5786 tools/finsig_thumb2.c print_kval(fw,physw_tbl,physw_tbl_len,0x205,"BATTCOVER","_FLAG"); fw 5787 tools/finsig_thumb2.c print_kval(fw,physw_tbl,physw_tbl_len,0x204,"HOTSHOE","_FLAG"); fw 5788 tools/finsig_thumb2.c print_kval(fw,physw_tbl,physw_tbl_len,0x200,"ANALOG_AV","_FLAG"); fw 5790 tools/finsig_thumb2.c do_km_vals(fw,physw_tbl,2,physw_tbl_len); fw 5829 tools/finsig_thumb2.c void output_modemap(firmware *fw) { fw 5841 tools/finsig_thumb2.c uint16_t *pv=(uint16_t*)adr2ptr(fw,adr); fw 5848 tools/finsig_thumb2.c osig *m = find_sig_val(fw->sv->modemap, *pv); fw 5864 tools/finsig_thumb2.c osig *m = fw->sv->modemap; fw 5907 tools/finsig_thumb2.c void write_funcs(firmware *fw, char *filename, sig_entry_t *fns[], int (*compare)(const sig_entry_t **p1, const sig_entry_t **p2)) fw 5923 tools/finsig_thumb2.c osig* ostub2 = find_sig(fw->sv->stubs,fns[k]->name); fw 5941 tools/finsig_thumb2.c void write_func_lists(firmware *fw) { fw 5947 tools/finsig_thumb2.c write_funcs(fw, "funcs_by_name.csv", fns, compare_sig_names); fw 5948 tools/finsig_thumb2.c write_funcs(fw, "funcs_by_address.csv", fns, compare_func_addresses); fw 5951 tools/finsig_thumb2.c void print_other_stubs_min(firmware *fw, const char *name, uint32_t fadr, uint32_t atadr) fw 5953 tools/finsig_thumb2.c osig *o = find_sig(fw->sv->stubs_min,name); fw 5973 tools/finsig_thumb2.c void print_stubs_min_def(firmware *fw, misc_val_t *sig) fw 5979 tools/finsig_thumb2.c osig* ostub2=find_sig(fw->sv->stubs_min,sig->name); fw 6020 tools/finsig_thumb2.c void find_other_stubs_min(firmware *fw) fw 6027 tools/finsig_thumb2.c if (fw->sv->min_focus_len != 0) fw 6030 tools/finsig_thumb2.c for (k=0; k<fw->size32; k++) fw 6032 tools/finsig_thumb2.c if (fw->buf32[k] == fw->sv->min_focus_len) fw 6035 tools/finsig_thumb2.c if ((fw->buf32[k+1] == 100) && (fw->buf32[k+2] == 0)) mul = 3; fw 6036 tools/finsig_thumb2.c if ((fw->buf32[k+1] == 100) && (fw->buf32[k+2] != 0)) mul = 2; fw 6037 tools/finsig_thumb2.c if ((fw->buf32[k+1] == 0) && (fw->buf32[k+2] != 0)) mul = 2; fw 6038 tools/finsig_thumb2.c for (k1 = k + mul; (k1 < fw->size32) && (fw->buf32[k1] > fw->buf32[k1-mul]) && (fw->buf32[k1] > fw->sv->min_focus_len) && (fw->buf32[k1] < fw->sv->max_focus_len); k1 += mul) ; fw 6039 tools/finsig_thumb2.c if (fw->buf32[k1] == fw->sv->max_focus_len) fw 6053 tools/finsig_thumb2.c uint32_t adr = fw->base + (pos << 2); fw 6060 tools/finsig_thumb2.c print_other_stubs_min(fw,"focus_len_table",adr,adr); fw 6067 tools/finsig_thumb2.c void print_results(firmware *fw, sig_entry_t *sig) fw 6078 tools/finsig_thumb2.c osig* ostub2 = find_sig(fw->sv->stubs,sig->name); fw 6134 tools/finsig_thumb2.c fw_disasm_iter_single(fw,ostub2->val); fw 6135 tools/finsig_thumb2.c if(get_direct_jump_target(fw,fw->is) == sig->val) { fw 6138 tools/finsig_thumb2.c fw_disasm_iter_single(fw,sig->val); fw 6139 tools/finsig_thumb2.c if(get_direct_jump_target(fw,fw->is) == ostub2->val) { fw 6167 tools/finsig_thumb2.c void write_stubs(firmware *fw,int max_find_func) { fw 6172 tools/finsig_thumb2.c print_stubs_min_def(fw,stub_min); fw 6176 tools/finsig_thumb2.c find_other_stubs_min(fw); fw 6182 tools/finsig_thumb2.c print_results(fw,&sig_names[k]); fw 6190 tools/finsig_thumb2.c firmware fw; fw 6191 tools/finsig_thumb2.c memset(&fw,0,sizeof(firmware)); fw 6200 tools/finsig_thumb2.c fw.sv = new_stub_values(); fw 6201 tools/finsig_thumb2.c load_stubs(fw.sv, "stubs_entry_2.S", 1); fw 6202 tools/finsig_thumb2.c load_stubs_min(fw.sv); fw 6203 tools/finsig_thumb2.c load_modemap(fw.sv); fw 6204 tools/finsig_thumb2.c load_platform(fw.sv); fw 6209 tools/finsig_thumb2.c firmware_load(&fw,argv[1],strtoul(argv[2], NULL, 0),FW_ARCH_ARMv7); fw 6210 tools/finsig_thumb2.c if(!firmware_init_capstone(&fw)) { fw 6213 tools/finsig_thumb2.c firmware_init_data_ranges(&fw); fw 6223 tools/finsig_thumb2.c find_ctypes(&fw); fw 6225 tools/finsig_thumb2.c run_sig_rules(&fw,sig_rules_initial); fw 6226 tools/finsig_thumb2.c find_generic_funcs(&fw); fw 6227 tools/finsig_thumb2.c run_sig_rules(&fw,sig_rules_main); fw 6229 tools/finsig_thumb2.c output_firmware_vals(&fw); fw 6231 tools/finsig_thumb2.c output_platform_vals(&fw); fw 6232 tools/finsig_thumb2.c output_physw_vals(&fw); fw 6233 tools/finsig_thumb2.c output_modemap(&fw); fw 6235 tools/finsig_thumb2.c output_propcases(&fw); fw 6236 tools/finsig_thumb2.c output_exmem_types(&fw); fw 6238 tools/finsig_thumb2.c write_stubs(&fw,max_find_sig); fw 6243 tools/finsig_thumb2.c write_func_lists(&fw); fw 6245 tools/finsig_thumb2.c firmware_unload(&fw); fw 166 tools/finsig_vxworks.c void fwAddMatch(firmware *fw, uint32_t fadr, int s, int f, int sig) fw 168 tools/finsig_vxworks.c if ((fadr >= fw->base_copied) && (fadr < (fw->base_copied + fw->size2*4))) fw 170 tools/finsig_vxworks.c addMatch(fadr - fw->base_copied + fw->base2,s,f,sig); fw 557 tools/finsig_vxworks.c int get_saved_sig(firmware *fw, const char *name) fw 571 tools/finsig_vxworks.c find_matches(fw, name); fw 578 tools/finsig_vxworks.c find_str_sig_matches(fw, name); fw 595 tools/finsig_vxworks.c int search_saved_sig(firmware *fw, char *sig, int (*func)(firmware*, int, int), int v, int ofst, int len) fw 597 tools/finsig_vxworks.c int k = get_saved_sig(fw, sig); fw 600 tools/finsig_vxworks.c int idx = adr2idx(fw, func_names[k].val); fw 603 tools/finsig_vxworks.c int rv = func(fw, k, v); fw 635 tools/finsig_vxworks.c int match_apex2us(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 637 tools/finsig_vxworks.c if (isLDR_PC(fw,k) && (LDR2val(fw,k) == v1) && ((fwRd(fw,k) == 1) || (fwRd(fw,k) == 2))) fw 639 tools/finsig_vxworks.c k = find_inst_rev(fw, isSTMFD_LR, k, 200); fw 642 tools/finsig_vxworks.c if (fwval(fw,k-2) == 0xE3700D09) // CMN R0, #0x240 fw 644 tools/finsig_vxworks.c uint32_t fadr = idx2adr(fw,k); fw 645 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,121); fw 651 tools/finsig_vxworks.c int find_apex2us(firmware *fw, string_sig *sig, int j) fw 655 tools/finsig_vxworks.c if (fwval(fw,j+i) != apex2us_test[i]) fw 658 tools/finsig_vxworks.c return search_fw(fw, match_apex2us, idx2adr(fw,j), 0, 1); fw 662 tools/finsig_vxworks.c int find_mkdir(firmware *fw, string_sig *sig, int k) fw 664 tools/finsig_vxworks.c if (fwval(fw,k) == 0x12CEA600) fw 666 tools/finsig_vxworks.c k = find_inst_rev(fw, isSTMFD_LR, k-20, 200); fw 669 tools/finsig_vxworks.c if ((((fwval(fw,k+12) & 0xFFF0FFFF) == 0xE350002F) && ((fwval(fw,k+15) & 0xFFF0FFFF) == 0xE3500021) && ((fwval(fw,k+19) & 0xFFF0FFFF) == 0xE3500020)) || fw 670 tools/finsig_vxworks.c (((fwval(fw,k+11) & 0xFFF0FFFF) == 0xE350002F) && ((fwval(fw,k+14) & 0xFFF0FFFF) == 0xE3500021) && ((fwval(fw,k+18) & 0xFFF0FFFF) == 0xE3500020))) fw 673 tools/finsig_vxworks.c if (isBL(fw,k+47)) fw 675 tools/finsig_vxworks.c fadr = followBranch(fw, idx2adr(fw,k+47), 0x01000001); fw 677 tools/finsig_vxworks.c else if (isBL(fw,k+48)) fw 679 tools/finsig_vxworks.c fadr = followBranch(fw, idx2adr(fw,k+48), 0x01000001); fw 683 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,121); fw 693 tools/finsig_vxworks.c int find_pow(firmware *fw, string_sig *sig, int j) fw 695 tools/finsig_vxworks.c if (!idx_valid(fw,j) || !idx_valid(fw,j+3)) return 0; fw 697 tools/finsig_vxworks.c if ((fwval(fw,j) == 0x00000000) && (fwval(fw,j+1) == 0x40000000) && (fwval(fw,j+2) == 0x00000000) && (fwval(fw,j+3) == 0x408F4000)) fw 699 tools/finsig_vxworks.c uint32_t adr1 = idx2adr(fw,j); // address of 1st value fw 700 tools/finsig_vxworks.c uint32_t adr2 = idx2adr(fw,j+2); // address of 2nd value fw 705 tools/finsig_vxworks.c if (isADR_PC_cond(fw,j1) && // ADR ? fw 706 tools/finsig_vxworks.c (fwval(fw,j1+1) == 0xE8900003) && // LDMIA R0,{R0,R1} fw 707 tools/finsig_vxworks.c isBL(fw,j1+2) && // BL fw 708 tools/finsig_vxworks.c isADR_PC_cond(fw,j1+4)) // ADR ? fw 710 tools/finsig_vxworks.c if ((ADR2adr(fw,j1) == adr1) && (ADR2adr(fw,j1+4) == adr2)) fw 712 tools/finsig_vxworks.c uint32_t fadr = followBranch(fw,idx2adr(fw,j1+2),0x01000001); fw 713 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,121); fw 718 tools/finsig_vxworks.c if (isADR_PC_cond(fw,j1) && // ADR ? fw 719 tools/finsig_vxworks.c (fwval(fw,j1+1) == 0xE8900003) && // LDMIA R0,{R0,R1} fw 720 tools/finsig_vxworks.c isBL(fw,j1+2) && // BL fw 721 tools/finsig_vxworks.c isADR_PC_cond(fw,j1+3)) // ADR ? fw 723 tools/finsig_vxworks.c if ((ADR2adr(fw,j1) == adr1) && (ADR2adr(fw,j1+3) == adr2)) fw 725 tools/finsig_vxworks.c uint32_t fadr = followBranch(fw,idx2adr(fw,j1+2),0x01000001); fw 726 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,121); fw 731 tools/finsig_vxworks.c if (isADR_PC_cond(fw,j1) && // ADR ? fw 732 tools/finsig_vxworks.c (fwval(fw,j1+2) == 0xE8900003) && // LDMIA R0,{R0,R1} fw 733 tools/finsig_vxworks.c isBL(fw,j1+3) && // BL fw 734 tools/finsig_vxworks.c isADR_PC_cond(fw,j1+4)) // ADR ? fw 736 tools/finsig_vxworks.c if ((ADR2adr(fw,j1) == adr1) && (ADR2adr(fw,j1+4) == adr2)) fw 738 tools/finsig_vxworks.c uint32_t fadr = followBranch(fw,idx2adr(fw,j1+3),0x01000001); fw 739 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,121); fw 750 tools/finsig_vxworks.c int find_log(firmware *fw, string_sig *sig, int j) fw 753 tools/finsig_vxworks.c if (isBL(fw,j) && isLDR_PC(fw,j+1) && (LDR2val(fw,j+1) == 0x3FDBCB7B) && isLDR_PC(fw,j+2) && (LDR2val(fw,j+2) == 0x1526E50E)) fw 755 tools/finsig_vxworks.c uint32_t fadr = followBranch(fw,idx2adr(fw,j),0x01000001); fw 756 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,121); fw 762 tools/finsig_vxworks.c int find_log10(firmware *fw, string_sig *sig, int j) fw 765 tools/finsig_vxworks.c if (isBL(fw,j) && isLDR_PC(fw,j+1) && (LDR2val(fw,j+1) == 0x3FDBCB7B) && isLDR_PC(fw,j+2) && (LDR2val(fw,j+2) == 0x1526E50E)) fw 767 tools/finsig_vxworks.c int k = find_inst_rev(fw, isSTMFD_LR, j-1, 100); fw 768 tools/finsig_vxworks.c uint32_t fadr = idx2adr(fw,k); fw 769 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,121); fw 776 tools/finsig_vxworks.c int find_get_ptp_file_buf(firmware *fw, string_sig *sig, int j) fw 787 tools/finsig_vxworks.c if(!(isMOV_immed(fw,j) fw 788 tools/finsig_vxworks.c && (fwRn(fw,j) == 0) fw 789 tools/finsig_vxworks.c && ((fwval(fw,j+1) & 0xFF000000) == 0x1A000000) // BNE fw 790 tools/finsig_vxworks.c && isBL(fw,j+2) fw 791 tools/finsig_vxworks.c && ((fwval(fw,j+3) & 0xFFF00000) == 0xe3C00000) // BIC fw 792 tools/finsig_vxworks.c && (ALUop2(fw,j+3) == 1) fw 793 tools/finsig_vxworks.c && isMOV_immed(fw,j+4) fw 794 tools/finsig_vxworks.c && (fwRn(fw,j+4) == 0) fw 795 tools/finsig_vxworks.c && isBL(fw,j+5))) { fw 798 tools/finsig_vxworks.c if(ALUop2(fw,j) != 4 || ALUop2(fw,j+4) != 4) { fw 802 tools/finsig_vxworks.c uint32_t f1 = followBranch(fw,idx2adr(fw,j+2),0x01000001); fw 803 tools/finsig_vxworks.c int i = get_saved_sig(fw,"get_ptp_buf_size"); fw 814 tools/finsig_vxworks.c int k = find_inst_rev(fw, isSTMFD_LR, j-1, 8); fw 820 tools/finsig_vxworks.c uint32_t fadr = idx2adr(fw, k); fw 821 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,121); fw 828 tools/finsig_vxworks.c int find_closedir(firmware *fw) fw 830 tools/finsig_vxworks.c int j = get_saved_sig(fw,"OpenFastDir"); fw 833 tools/finsig_vxworks.c int k = find_inst(fw, isSTMFD_LR, adr2idx(fw,func_names[j].val)+1, 100); fw 834 tools/finsig_vxworks.c if (isB(fw,k-1) && isBL(fw,k-2)) fw 836 tools/finsig_vxworks.c uint32_t fadr = followBranch(fw, idx2adr(fw, k-2), 0x01000001); fw 837 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,121); fw 846 tools/finsig_vxworks.c int find_add_ptp_handler(firmware *fw, string_sig *sig, int k) fw 852 tools/finsig_vxworks.c while ((vals[i] != 0) && isLDR_PC(fw,k) && (fwRd(fw,k) == 0) && (LDR2val(fw,k) == vals[i])) fw 854 tools/finsig_vxworks.c k = find_inst(fw, isBL, k+1, 5); fw 857 tools/finsig_vxworks.c fadr = followBranch(fw, idx2adr(fw,k), 0x01000001); fw 858 tools/finsig_vxworks.c k = find_inst(fw, isLDR_PC, k+1, 5); fw 865 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,121); fw 873 tools/finsig_vxworks.c int find_PT_PlaySound(firmware *fw) fw 876 tools/finsig_vxworks.c int k1 = get_saved_sig(fw,"LogCameraEvent"); fw 880 tools/finsig_vxworks.c j = find_str_ref(fw,"BufAccBeep"); fw 883 tools/finsig_vxworks.c k = find_inst(fw, isBL, j+1, 4); fw 886 tools/finsig_vxworks.c uint32_t fadr = followBranch(fw, idx2adr(fw,k), 0x01000001); fw 889 tools/finsig_vxworks.c k = find_inst(fw, isB, k+1, 10); fw 890 tools/finsig_vxworks.c fadr = followBranch(fw, idx2adr(fw, k), 1); fw 891 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,122); fw 902 tools/finsig_vxworks.c int find_ExportToEventProcedure(firmware *fw) fw 904 tools/finsig_vxworks.c int k = find_str_ref(fw,"ExportToEventProcedure"); fw 908 tools/finsig_vxworks.c if (isLDR_PC(fw,k+1) && (isBorBL(fw,k+2) || isBorBL(fw,k+3)) && (fwRd(fw,k+1) == 1)) fw 910 tools/finsig_vxworks.c uint32_t fadr = LDR2val(fw,k+1); fw 911 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,122); fw 920 tools/finsig_vxworks.c int find_RegisterEventProcedure(firmware *fw) fw 922 tools/finsig_vxworks.c int k = find_str_ref(fw,"CreateProxyOfEventProcedure"); fw 926 tools/finsig_vxworks.c if (isLDR_PC(fw,k+1) && (isBorBL(fw,k+2) || isBorBL(fw,k+3)) && (fwRd(fw,k) == 0)) fw 929 tools/finsig_vxworks.c if (isBorBL(fw,k+2)) fw 930 tools/finsig_vxworks.c fadr = followBranch(fw,idx2adr(fw,k+2),0x01000001); fw 932 tools/finsig_vxworks.c fadr = followBranch(fw,idx2adr(fw,k+3),0x01000001); fw 933 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,122); fw 942 tools/finsig_vxworks.c int find_set_control_event(firmware *fw) fw 945 tools/finsig_vxworks.c int k1 = get_saved_sig(fw,"IsControlEventActive"); fw 946 tools/finsig_vxworks.c int k2 = get_saved_sig(fw,"GetLogicalEventName"); fw 950 tools/finsig_vxworks.c j1 = adr2idx(fw, func_names[k1].val); fw 951 tools/finsig_vxworks.c j2 = adr2idx(fw, func_names[k2].val); fw 956 tools/finsig_vxworks.c if (isBL(fw,k)) fw 958 tools/finsig_vxworks.c if (j2 == idxFollowBranch(fw,k,0x01000001)) fw 970 tools/finsig_vxworks.c k = find_inst_rev(fw,isSTMFD_LR,k,60); fw 972 tools/finsig_vxworks.c j2 = find_inst(fw,isLDMFD_PC,k+1,128); fw 981 tools/finsig_vxworks.c k = find_inst(fw,isBL,k,32); fw 985 tools/finsig_vxworks.c j1 = idxFollowBranch(fw,k,0x01000001); fw 998 tools/finsig_vxworks.c fwAddMatch(fw,idx2adr(fw,j1),32,0,122); fw 1007 tools/finsig_vxworks.c int find_filesem_init(firmware *fw) fw 1009 tools/finsig_vxworks.c int s1 = find_str(fw, "FileSem.c"); fw 1012 tools/finsig_vxworks.c s1 = find_inst(fw, isLDR_PC, s1+2, 16); fw 1015 tools/finsig_vxworks.c s1 = find_inst_rev(fw, isSTMFD_LR, s1-1, 16); fw 1018 tools/finsig_vxworks.c fwAddMatch(fw,idx2adr(fw,s1),32,0,122); fw 1022 tools/finsig_vxworks.c int find_getcurrentmachinetime(firmware *fw) fw 1024 tools/finsig_vxworks.c int f1 = get_saved_sig(fw,"SetHPTimerAfterNow"); fw 1027 tools/finsig_vxworks.c f1 = adr2idx(fw, func_names[f1].val); fw 1028 tools/finsig_vxworks.c f1 = find_inst(fw, isBL, f1, 16); fw 1031 tools/finsig_vxworks.c f1 = idxFollowBranch(fw,f1,0x01000001); fw 1032 tools/finsig_vxworks.c fwAddMatch(fw,idx2adr(fw,f1),32,0,122); fw 1039 tools/finsig_vxworks.c int find_get_nd_value(firmware *fw) fw 1042 tools/finsig_vxworks.c if((get_saved_sig(fw,"task_NdActuator") < 0) || (get_saved_sig(fw,"task_IrisEvent") < 0)) { fw 1049 tools/finsig_vxworks.c f1 = get_saved_sig(fw,"PutInNdFilter_FW"); fw 1050 tools/finsig_vxworks.c int f2 = get_saved_sig(fw,"ClearEventFlag"); fw 1055 tools/finsig_vxworks.c f1 = adr2idx(fw, func_names[f1].val); fw 1056 tools/finsig_vxworks.c f2 = adr2idx(fw, func_names[f2].val); fw 1057 tools/finsig_vxworks.c int k1 = find_Nth_inst(fw,isBL,f1,10,2); fw 1058 tools/finsig_vxworks.c int k2 = find_inst(fw,isBL,f1,6); fw 1061 tools/finsig_vxworks.c if ( followBranch2(fw,idx2adr(fw,k2),0x01000001) != idx2adr(fw,f2) ) // ClearEventFlag? fw 1065 tools/finsig_vxworks.c k1 = idxFollowBranch(fw,k1,0x01000001); // PutInNdFilter_low veneer fw 1066 tools/finsig_vxworks.c k1 = find_inst(fw,isB,k1,3); // veneer fw 1070 tools/finsig_vxworks.c k1 = idxFollowBranch(fw,k1,0x00000001); // PutInNdFilter_low fw 1074 tools/finsig_vxworks.c k1 = find_inst(fw,isBL,k1,4); // get_nd_value wrapper fw 1078 tools/finsig_vxworks.c k1 = idxFollowBranch(fw,k1,0x01000001); // fw 1079 tools/finsig_vxworks.c k1 = find_inst(fw,isBL,k1,2); // get_nd_value fw 1083 tools/finsig_vxworks.c k1 = idxFollowBranch(fw,k1,0x01000001); fw 1084 tools/finsig_vxworks.c fwAddMatch(fw,idx2adr(fw,k1),32,0,122); fw 1089 tools/finsig_vxworks.c int find_get_current_nd_value_iris(firmware *fw) fw 1092 tools/finsig_vxworks.c if((get_saved_sig(fw,"task_NdActuator") < 0) || (get_saved_sig(fw,"task_IrisEvent") < 0)) { fw 1095 tools/finsig_vxworks.c int f1 = get_saved_sig(fw,"get_current_exp"); fw 1099 tools/finsig_vxworks.c f1 = adr2idx(fw, func_names[f1].val); fw 1106 tools/finsig_vxworks.c if(!isBL(fw,f1+i)) { fw 1111 tools/finsig_vxworks.c int f2 = idxFollowBranch(fw,f1+i,0x01000001); fw 1113 tools/finsig_vxworks.c if(isMOV(fw,f2) && (fwRd(fw,f2) == 0) && (fwOp2(fw,f2) == 0)) // MOV R0, 0 fw 1116 tools/finsig_vxworks.c if(isBL(fw,f2+1)) { fw 1117 tools/finsig_vxworks.c f2 = idxFollowBranch(fw,f2+1,0x01000001); fw 1118 tools/finsig_vxworks.c fwAddMatch(fw,idx2adr(fw,f2),32,0,122); fw 1127 tools/finsig_vxworks.c int find_get_current_nd_value(firmware *fw) fw 1131 tools/finsig_vxworks.c if(find_str(fw, "IrisSpecification.c") < 0) { fw 1132 tools/finsig_vxworks.c return find_get_current_nd_value_iris(fw); fw 1135 tools/finsig_vxworks.c int f1 = get_saved_sig(fw,"GetCurrentAvValue"); fw 1139 tools/finsig_vxworks.c f1 = adr2idx(fw, func_names[f1].val); fw 1141 tools/finsig_vxworks.c if (!isBL(fw,f1+1)) fw 1143 tools/finsig_vxworks.c f1 = idxFollowBranch(fw,f1+1,0x01000001); fw 1148 tools/finsig_vxworks.c int sadr = find_str(fw, "IrisController.c"); fw 1149 tools/finsig_vxworks.c int j = find_nxt_str_ref(fw, sadr, f1); fw 1153 tools/finsig_vxworks.c j = find_Nth_inst(fw,isBL,j,8,2); fw 1156 tools/finsig_vxworks.c f1 = idxFollowBranch(fw,j,0x01000001); fw 1157 tools/finsig_vxworks.c fwAddMatch(fw,idx2adr(fw,f1),32,0,122); fw 1161 tools/finsig_vxworks.c int find_exmem_free(firmware *fw) fw 1164 tools/finsig_vxworks.c int k = get_saved_sig(fw,"ExMem.FreeCacheable_FW"); // newer cam, a wrapped version of exmem_free is already located fw 1167 tools/finsig_vxworks.c k = get_saved_sig(fw,"memset_FW"); fw 1170 tools/finsig_vxworks.c k = adr2idx(fw, func_names[k].val); fw 1171 tools/finsig_vxworks.c int sadr = find_str(fw, "ComMemMan.c"); // always there fw 1172 tools/finsig_vxworks.c int j = find_nxt_str_ref(fw, sadr, sadr); fw 1175 tools/finsig_vxworks.c j = find_nxt_str_ref(fw, sadr, j+1); fw 1181 tools/finsig_vxworks.c if (isBL(fw,n)) fw 1183 tools/finsig_vxworks.c if (idx2adr(fw,idxFollowBranch(fw,n,0x01000001)) == idx2adr(fw,k)) fw 1185 tools/finsig_vxworks.c int m = find_inst_rev(fw,isBL,n-1,4); fw 1188 tools/finsig_vxworks.c m = idxFollowBranch(fw,m,0x01000001); fw 1189 tools/finsig_vxworks.c fwAddMatch(fw,idx2adr(fw,m),32,0,122); fw 1198 tools/finsig_vxworks.c int find_exmem_alloc(firmware *fw) fw 1201 tools/finsig_vxworks.c int k = get_saved_sig(fw,"ExMem.AllocCacheable_FW"); // newer cam, a wrapped version of exmem_alloc is already located fw 1204 tools/finsig_vxworks.c k = get_saved_sig(fw,"DebugAssert"); // fw 1207 tools/finsig_vxworks.c k = adr2idx(fw, func_names[k].val); fw 1208 tools/finsig_vxworks.c int sadr = find_str(fw, "ComMemMan.c"); // always there fw 1209 tools/finsig_vxworks.c int j = find_nxt_str_ref(fw, sadr, sadr); fw 1212 tools/finsig_vxworks.c int m = find_inst(fw,isBorBL,j+3,10); fw 1215 tools/finsig_vxworks.c m = idxFollowBranch(fw,m,0x01000001); fw 1216 tools/finsig_vxworks.c if (idx2adr(fw,m) != idx2adr(fw,k)) fw 1218 tools/finsig_vxworks.c fwAddMatch(fw,idx2adr(fw,m),32,0,122); fw 1225 tools/finsig_vxworks.c int find_get_ptp_buf_size(firmware *fw) fw 1227 tools/finsig_vxworks.c int j = get_saved_sig(fw,"handle_PTP_OC_SendObject"); // same handler as CANON_SendObjectByPath fw 1232 tools/finsig_vxworks.c int k=adr2idx(fw,func_names[j].val); fw 1243 tools/finsig_vxworks.c if(isMOV_immed(fw,k) && fwRn(fw,k) == 0 && ALUop2(fw,k) == file_buf_id && isBL(fw, k+1)) { fw 1244 tools/finsig_vxworks.c adr = followBranch(fw,idx2adr(fw,k+1),0x01000001); fw 1256 tools/finsig_vxworks.c if(isMOV_immed(fw,k) && fwRn(fw,k) == 0 && ALUop2(fw,k) == file_buf_id && isBL(fw, k+1)) { fw 1257 tools/finsig_vxworks.c uint32_t adr2 = followBranch(fw,idx2adr(fw,k+1),0x01000001); fw 1261 tools/finsig_vxworks.c fwAddMatch(fw,adr,32,0,122); fw 1270 tools/finsig_vxworks.c int find_GetBaseSv(firmware *fw) fw 1272 tools/finsig_vxworks.c int j = get_saved_sig(fw,"SetPropertyCase"); fw 1275 tools/finsig_vxworks.c j = adr2idx(fw, func_names[j].val); fw 1276 tools/finsig_vxworks.c int j2 = get_saved_sig(fw,"DebugAssert"); fw 1279 tools/finsig_vxworks.c j2 = adr2idx(fw, func_names[j2].val); fw 1281 tools/finsig_vxworks.c int sadr = find_str(fw, "Sensitive.c"); fw 1282 tools/finsig_vxworks.c if (sadr < fw->lowest_idx) fw 1284 tools/finsig_vxworks.c int s1 = find_nxt_str_ref(fw, sadr, -1/*fw->lowest_idx*/); fw 1298 tools/finsig_vxworks.c if ( isBL(fw, n) ) fw 1301 tools/finsig_vxworks.c k = idxFollowBranch(fw,n,0x01000001); fw 1302 tools/finsig_vxworks.c if ( idx2adr(fw, k) == idx2adr(fw, j) ) fw 1305 tools/finsig_vxworks.c k = find_inst(fw, isBL, s1+2, 6); fw 1308 tools/finsig_vxworks.c int l = idxFollowBranch(fw,k,0x01000001); fw 1309 tools/finsig_vxworks.c if (idx2adr(fw,l) == idx2adr(fw,j2)) // DebugAssert? fw 1311 tools/finsig_vxworks.c k = find_inst(fw, isBL, k+1, 6); fw 1314 tools/finsig_vxworks.c l = idxFollowBranch(fw,k,0x01000001); fw 1316 tools/finsig_vxworks.c if ( (fwval(fw,l)==0xe52de004) && fw 1317 tools/finsig_vxworks.c (fwval(fw,l+4)==0xe49df004) && fw 1318 tools/finsig_vxworks.c isBL(fw,l+1) ) fw 1321 tools/finsig_vxworks.c add_func_name("j_GetBaseSv", idx2adr(fw,l), ""); fw 1322 tools/finsig_vxworks.c k = idxFollowBranch(fw,l+1,0x01000001); fw 1323 tools/finsig_vxworks.c fwAddMatch(fw,idx2adr(fw,k),32,0,122); fw 1332 tools/finsig_vxworks.c s1 = find_nxt_str_ref(fw, sadr, s1+1); fw 1338 tools/finsig_vxworks.c int find_Remove(firmware *fw) fw 1340 tools/finsig_vxworks.c int f1 = get_saved_sig(fw,"Close"); fw 1344 tools/finsig_vxworks.c f1 = adr2idx(fw, func_names[f1].val); fw 1346 tools/finsig_vxworks.c f2 = find_str_ref(fw,"File Write Fail."); fw 1351 tools/finsig_vxworks.c if(!isBL(fw,f2+i)) { fw 1355 tools/finsig_vxworks.c if(idxFollowBranch(fw,f2+i,0x01000001) == f1) { fw 1360 tools/finsig_vxworks.c f2 = idxFollowBranch(fw,f2+i,0x01000001); fw 1361 tools/finsig_vxworks.c fwAddMatch(fw,idx2adr(fw,f2),32,0,122); fw 1872 tools/finsig_vxworks.c int vxworks_offset(firmware *fw, string_sig *sig) fw 1882 tools/finsig_vxworks.c int fw_string_process(firmware *fw, string_sig *sig, int (*check_match)(firmware *fw, string_sig *sig, int j), int inc_eos) fw 1890 tools/finsig_vxworks.c for (br = fw->br; br != 0; br = br->next) fw 1896 tools/finsig_vxworks.c if (check_match(fw,sig,j)) fw 1907 tools/finsig_vxworks.c int fw_string_process_unaligned(firmware *fw, string_sig *sig, int (*check_match)(firmware *fw, string_sig *sig, int j)) fw 1914 tools/finsig_vxworks.c for (br = fw->br; br != 0; br = br->next) fw 1920 tools/finsig_vxworks.c if (check_match(fw,sig,j+br->off*4)) fw 1932 tools/finsig_vxworks.c int fw_process(firmware *fw, string_sig *sig, int (*check_match)(firmware *fw, string_sig *sig, int j)) fw 1938 tools/finsig_vxworks.c for (br = fw->br; br != 0; br = br->next) fw 1942 tools/finsig_vxworks.c if (check_match(fw,sig,j)) fw 1959 tools/finsig_vxworks.c int match_strsig1(firmware *fw, string_sig *sig, int j) fw 1961 tools/finsig_vxworks.c uint32_t fadr = fwval(fw,j-1); // function address fw 1962 tools/finsig_vxworks.c if (idx_valid(fw,adr2idx(fw,fadr))) // is function address valid fw 1965 tools/finsig_vxworks.c if (sig->offset > 1) fadr = followBranch(fw, fadr, 1); fw 1967 tools/finsig_vxworks.c fadr = followBranch2(fw, fadr, sig->offset); fw 1968 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,101); fw 1981 tools/finsig_vxworks.c int match_strsig2a(firmware *fw, int k, uint32_t sadr, uint32_t offset) fw 1983 tools/finsig_vxworks.c if (fwval(fw,k) == sadr) // pointer to string? fw 1985 tools/finsig_vxworks.c uint32_t fadr = fwval(fw,k+1); // function address fw 1986 tools/finsig_vxworks.c if (idx_valid(fw,adr2idx(fw,fadr))) // is function address valid fw 1988 tools/finsig_vxworks.c uint32_t bfadr = followBranch2(fw, fadr, offset); fw 1991 tools/finsig_vxworks.c fwAddMatch(fw,bfadr,32,0,102); fw 1998 tools/finsig_vxworks.c int match_strsig2(firmware *fw, string_sig *sig, int j) fw 2001 tools/finsig_vxworks.c return search_fw(fw, match_strsig2a, fw->base + j, sig->offset, 2); fw 2022 tools/finsig_vxworks.c int match_strsig3a(firmware *fw, int k, uint32_t sadr, uint32_t offset) fw 2024 tools/finsig_vxworks.c if (isADR_PC(fw,k+1) && // ADR ? fw 2025 tools/finsig_vxworks.c isBorBL(fw,k+2)) // B or BL ? fw 2027 tools/finsig_vxworks.c uint32_t padr = ADR2adr(fw,k+1); // get address pointed to by 2nd ADR instructioin fw 2032 tools/finsig_vxworks.c if (isADR_PC(fw,k)) // ADR ? fw 2039 tools/finsig_vxworks.c if (isADR_PC(fw,j2) && // ADR ? fw 2040 tools/finsig_vxworks.c isB(fw,j2+1)) // B fw 2042 tools/finsig_vxworks.c uint32_t fa = idx2adr(fw,j2+1); fw 2043 tools/finsig_vxworks.c fa = followBranch(fw,fa,1); fw 2044 tools/finsig_vxworks.c if (adr2idx(fw,fa) == k+1) fw 2054 tools/finsig_vxworks.c uint32_t fadr = ADR2adr(fw,j2); fw 2055 tools/finsig_vxworks.c if (offset > 1) fadr = followBranch(fw, fadr, 1); fw 2056 tools/finsig_vxworks.c fadr = followBranch2(fw, fadr, offset); fw 2057 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,103); fw 2064 tools/finsig_vxworks.c int match_strsig3(firmware *fw, string_sig *sig, int j) fw 2066 tools/finsig_vxworks.c return search_fw(fw, match_strsig3a, idx2adr(fw,j), sig->offset, 3); fw 2075 tools/finsig_vxworks.c int match_strsig4a(firmware *fw, int k, uint32_t sadr, uint32_t offset) fw 2077 tools/finsig_vxworks.c if (isSTMFD(fw,k) && // STMFD fw 2078 tools/finsig_vxworks.c isADR_PC(fw,k+offset)) // ADR ? fw 2080 tools/finsig_vxworks.c uint32_t padr = ADR2adr(fw,k+offset); fw 2083 tools/finsig_vxworks.c uint32_t fadr = idx2adr(fw,k); fw 2084 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,104); fw 2090 tools/finsig_vxworks.c int match_strsig4(firmware *fw, string_sig *sig, int j) fw 2092 tools/finsig_vxworks.c return search_fw(fw, match_strsig4a, idx2adr(fw,j), sig->offset, sig->offset+1); fw 2111 tools/finsig_vxworks.c int match_strsig5a(firmware *fw, int k, uint32_t sadr, uint32_t offset) fw 2113 tools/finsig_vxworks.c if ((isADR_PC(fw,k+1) || isLDR_PC(fw,k+1)) && // LDR or ADR ? fw 2114 tools/finsig_vxworks.c isBorBL(fw,k+2)) // B or BL ? fw 2117 tools/finsig_vxworks.c if (isLDR_PC(fw,k+1)) // LDR ? fw 2118 tools/finsig_vxworks.c padr = LDR2val(fw,k+1); fw 2120 tools/finsig_vxworks.c padr = ADR2adr(fw,k+1); fw 2125 tools/finsig_vxworks.c if (isLDR_PC(fw,k)) // LDR ? fw 2131 tools/finsig_vxworks.c if (isLDR_PC(fw,j2) && // LDR ? fw 2132 tools/finsig_vxworks.c isB(fw,j2+1)) // B fw 2134 tools/finsig_vxworks.c if (idxFollowBranch(fw,j2+1,1) == k+1) fw 2144 tools/finsig_vxworks.c uint32_t fadr = LDR2val(fw,j2); fw 2145 tools/finsig_vxworks.c if (offset > 1) fadr = followBranch(fw, fadr, 1); fw 2146 tools/finsig_vxworks.c fadr = followBranch2(fw, fadr, offset); fw 2149 tools/finsig_vxworks.c uint32_t fadr2 = followBranch(fw, fadr, dryos_ofst); fw 2153 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,105); fw 2160 tools/finsig_vxworks.c int match_strsig5(firmware *fw, string_sig *sig, int j) fw 2162 tools/finsig_vxworks.c dryos_ofst = vxworks_offset(fw,sig); fw 2163 tools/finsig_vxworks.c return search_fw(fw, match_strsig5a, idx2adr(fw,j), sig->offset, 3); fw 2168 tools/finsig_vxworks.c int match_strsig6(firmware *fw, string_sig *sig, int j) fw 2170 tools/finsig_vxworks.c int j1 = find_inst_rev(fw, isSTMFD_LR, j-1, j-1); fw 2173 tools/finsig_vxworks.c uint32_t fadr = idx2adr(fw,j1); fw 2174 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,106); fw 2187 tools/finsig_vxworks.c int match_strsig7a(firmware *fw, int k, uint32_t sadr, uint32_t offset) fw 2189 tools/finsig_vxworks.c if (isADR_PC_cond(fw,k) || isLDR_PC_cond(fw,k)) // LDR or ADR ? fw 2192 tools/finsig_vxworks.c if (isLDR_PC_cond(fw,k)) // LDR ? fw 2193 tools/finsig_vxworks.c padr = LDR2val(fw,k); fw 2195 tools/finsig_vxworks.c padr = ADR2adr(fw,k); fw 2198 tools/finsig_vxworks.c int j2 = find_inst(fw, isBL, k+1, 10); fw 2201 tools/finsig_vxworks.c uint32_t fa = idx2adr(fw,j2); fw 2202 tools/finsig_vxworks.c fa = followBranch2(fw,fa,offset); fw 2203 tools/finsig_vxworks.c fwAddMatch(fw,fa,32,0,107); fw 2210 tools/finsig_vxworks.c int match_strsig7(firmware *fw, string_sig *sig, int j) fw 2212 tools/finsig_vxworks.c return search_fw(fw, match_strsig7a, idx2adr(fw,j), sig->offset, 2); fw 2218 tools/finsig_vxworks.c int match_strsig8(firmware *fw, string_sig *sig, int j) fw 2223 tools/finsig_vxworks.c uint32_t fadr = idx2adr(fw,j1); fw 2224 tools/finsig_vxworks.c if (fwval(fw,j1) >= fw->base) // pointer ?? fw 2229 tools/finsig_vxworks.c if (isLDR_PC(fw,j2) && (LDR2adr(fw,j2) == fadr)) // LDR ? fw 2231 tools/finsig_vxworks.c if ((isSTR(fw,j2+1) && (fwOp2(fw,j2+1) == ofst)) || // STR ? fw 2232 tools/finsig_vxworks.c (isSTR(fw,j2+2) && (fwOp2(fw,j2+2) == ofst))) // STR ? fw 2234 tools/finsig_vxworks.c fadr = fwval(fw,j1); fw 2235 tools/finsig_vxworks.c if (idx_valid(fw,adr2idx(fw,fadr))) fw 2237 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,108); fw 2248 tools/finsig_vxworks.c int find_strsig8(firmware *fw, string_sig *sig) fw 2254 tools/finsig_vxworks.c int j = get_saved_sig(fw,"UpdateMBROnFlash"); fw 2261 tools/finsig_vxworks.c j = get_saved_sig(fw,"MakeSDCardBootable"); fw 2271 tools/finsig_vxworks.c int idx = adr2idx(fw, fadr); fw 2276 tools/finsig_vxworks.c if (isLDR(fw,j) && isLDR(fw,j+1) && isLDR(fw,j+2)) fw 2278 tools/finsig_vxworks.c ofst = fwOp2(fw,j) + fwOp2(fw,j+1) + fwOp2(fw,j+2); fw 2285 tools/finsig_vxworks.c return fw_string_process(fw, sig, match_strsig8, 1); fw 2293 tools/finsig_vxworks.c int find_strsig9(firmware *fw, string_sig *sig) fw 2295 tools/finsig_vxworks.c int j = get_saved_sig(fw,sig->ev_name); fw 2300 tools/finsig_vxworks.c int ofst = vxworks_offset(fw, sig); fw 2301 tools/finsig_vxworks.c uint32_t fadr = followBranch(fw, func_names[j].val+ofst*4, 0xF1000001); fw 2305 tools/finsig_vxworks.c if (sig->offset != -1) fadr2 = followBranch2(fw, fadr2, sig->offset); fw 2308 tools/finsig_vxworks.c fwAddMatch(fw,fadr2,32,0,109); fw 2324 tools/finsig_vxworks.c int match_strsig11(firmware *fw, string_sig *sig, int j) fw 2326 tools/finsig_vxworks.c int ofst = vxworks_offset(fw, sig); fw 2328 tools/finsig_vxworks.c uint32_t sadr = idx2adr(fw,j); // string address fw 2332 tools/finsig_vxworks.c if (isADR_PC_cond(fw,j1)) // ADR ? fw 2334 tools/finsig_vxworks.c uint32_t padr = ADR2adr(fw,j1); fw 2337 tools/finsig_vxworks.c uint32_t fadr = idx2adr(fw,j1-ofst); fw 2338 tools/finsig_vxworks.c uint32_t bfadr = followBranch(fw,fadr,sig->offset); fw 2344 tools/finsig_vxworks.c if (isBL_cond(fw,j2) && // BLxx fw 2345 tools/finsig_vxworks.c isLDR_SP(fw,j2+1) && (fwRd(fw,j2+1) == 0) && // LDR R0,[SP,x] fw 2346 tools/finsig_vxworks.c isBL(fw,j2+2) && // BL fw 2347 tools/finsig_vxworks.c isMOV(fw,j2+3) && (fwRd(fw,j2+3) == 4) && (fwRn(fw,j2+3) == 0)) // LDR R4, R0 fw 2356 tools/finsig_vxworks.c fwAddMatch(fw,bfadr,32,0,111); fw 2419 tools/finsig_vxworks.c int match_strsig13a(firmware *fw, int k, uint32_t sadr, uint32_t offset) fw 2421 tools/finsig_vxworks.c if (fwval(fw,k) == sadr) // string ptr fw 2423 tools/finsig_vxworks.c uint32_t padr = idx2adr(fw,k); // string ptr address fw 2427 tools/finsig_vxworks.c if (fwval(fw,j2) == padr) // string ptr address fw 2429 tools/finsig_vxworks.c uint32_t ppadr = idx2adr(fw,j2); // string ptr ptr address fw 2433 tools/finsig_vxworks.c if (isLDR_PC(fw,j3) && (LDR2adr(fw,j3) == ppadr)) fw 2435 tools/finsig_vxworks.c uint32_t fadr = idx2adr(fw,j3-offset); fw 2436 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,113); fw 2445 tools/finsig_vxworks.c int match_strsig13(firmware *fw, string_sig *sig, int j) fw 2448 tools/finsig_vxworks.c return search_fw(fw, match_strsig13a, fw->base + j, sig->offset, 1); fw 2458 tools/finsig_vxworks.c int match_strsig15a(firmware *fw, int k, uint32_t sadr, uint32_t offset) fw 2460 tools/finsig_vxworks.c if (isADR_PC_cond(fw,k) || isLDR_PC_cond(fw,k)) // LDR or ADR ? fw 2463 tools/finsig_vxworks.c if (isLDR_PC_cond(fw,k)) // LDR ? fw 2464 tools/finsig_vxworks.c padr = LDR2val(fw,k); fw 2466 tools/finsig_vxworks.c padr = ADR2adr(fw,k); fw 2469 tools/finsig_vxworks.c int j2 = find_inst_rev(fw, isBL, k-1, dryos_ofst); fw 2472 tools/finsig_vxworks.c uint32_t fa = idx2adr(fw,j2); fw 2473 tools/finsig_vxworks.c fa = followBranch2(fw,fa,offset); fw 2474 tools/finsig_vxworks.c fwAddMatch(fw,fa,32,0,115); fw 2481 tools/finsig_vxworks.c int match_strsig15(firmware *fw, string_sig *sig, int j) fw 2483 tools/finsig_vxworks.c dryos_ofst = vxworks_offset(fw,sig); fw 2485 tools/finsig_vxworks.c return search_fw(fw, match_strsig15a, idx2adr(fw,j), sig->offset, 1); fw 2490 tools/finsig_vxworks.c int match_strsig16(firmware *fw, string_sig *sig, int j) fw 2494 tools/finsig_vxworks.c if (isADR_PC_cond(fw,j) || isLDR_PC_cond(fw,j)) // LDR or ADR ? fw 2497 tools/finsig_vxworks.c if (isLDR_PC_cond(fw,j)) // LDR ? fw 2499 tools/finsig_vxworks.c int k = adr2idx(fw,LDR2adr(fw,j)); fw 2500 tools/finsig_vxworks.c if (idx_valid(fw,k)) fw 2501 tools/finsig_vxworks.c padr = fwval(fw,k); fw 2504 tools/finsig_vxworks.c padr = ADR2adr(fw,j); fw 2507 tools/finsig_vxworks.c int j2 = find_inst_rev(fw, isSTMFD_LR, j-1, 50); fw 2510 tools/finsig_vxworks.c uint32_t fa = idx2adr(fw,j2); fw 2511 tools/finsig_vxworks.c fwAddMatch(fw,fa,32,0,116); fw 2522 tools/finsig_vxworks.c int find_strsig17(firmware *fw, string_sig *sig) fw 2524 tools/finsig_vxworks.c int j = get_saved_sig(fw,"StartRecModeMenu"); fw 2530 tools/finsig_vxworks.c int idx = adr2idx(fw, func_names[j].val); fw 2532 tools/finsig_vxworks.c if (isLDR_PC(fw,idx-3) && isMOV_immed(fw,idx-2) && isB(fw,idx-1)) fw 2534 tools/finsig_vxworks.c k = adr2idx(fw,LDR2val(fw,idx-3)); fw 2536 tools/finsig_vxworks.c else if (isMOV_immed(fw,idx-3) && isADR_PC(fw,idx-2) && isB(fw,idx-1)) fw 2538 tools/finsig_vxworks.c k = adr2idx(fw,ADR2adr(fw,idx-2)); fw 2544 tools/finsig_vxworks.c fadr = followBranch(fw,idx2adr(fw,k+1),0x01000001); fw 2547 tools/finsig_vxworks.c k = find_inst(fw, isLDMFD, k+1, 60); fw 2548 tools/finsig_vxworks.c fadr = followBranch(fw,idx2adr(fw,k-1),0x01000001); fw 2550 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,117); fw 2569 tools/finsig_vxworks.c int find_strsig19(firmware *fw, string_sig *sig) fw 2571 tools/finsig_vxworks.c int j = get_saved_sig(fw,sig->ev_name); fw 2576 tools/finsig_vxworks.c int ofst = vxworks_offset(fw, sig); fw 2588 tools/finsig_vxworks.c case 0: k = isLDMFD_PC(fw, adr2idx(fw, fadr)-1-addoffs); break; fw 2589 tools/finsig_vxworks.c case 1: k = isB(fw, adr2idx(fw, fadr)-1-addoffs); break; fw 2593 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,119); fw 2609 tools/finsig_vxworks.c int match_strsig100(firmware *fw, string_sig *sig, int j) fw 2611 tools/finsig_vxworks.c int ofst = vxworks_offset(fw, sig); fw 2613 tools/finsig_vxworks.c uint32_t sadr = idx2adr(fw,j); // string address fw 2617 tools/finsig_vxworks.c if (isLDR(fw,j1)) // LDR ? fw 2619 tools/finsig_vxworks.c uint32_t pval = LDR2val(fw,j1); fw 2622 tools/finsig_vxworks.c uint32_t fadr = idx2adr(fw,j1-ofst); fw 2623 tools/finsig_vxworks.c uint32_t bfadr = followBranch(fw,fadr,sig->offset); fw 2626 tools/finsig_vxworks.c fwAddMatch(fw,bfadr,32,0,1100); fw 2643 tools/finsig_vxworks.c int match_strsig101(firmware *fw, string_sig *sig, int j) fw 2645 tools/finsig_vxworks.c uint32_t sadr = idx2adr(fw,j); // string address fw 2649 tools/finsig_vxworks.c if (isLDR(fw,j1) && (fwRd(fw,j1)==0)) // LDR R0, fw 2651 tools/finsig_vxworks.c uint32_t pval = LDR2val(fw,j1); fw 2657 tools/finsig_vxworks.c if (isLDR(fw,j2) && (fwRd(fw,j2)==1)) // LDR R1, fw 2659 tools/finsig_vxworks.c uint32_t pval2 = LDR2val(fw,j2); fw 2660 tools/finsig_vxworks.c fwAddMatch(fw,pval2,32,0,1101); fw 2673 tools/finsig_vxworks.c int match_strsig102(firmware *fw, string_sig *sig, int j) fw 2675 tools/finsig_vxworks.c uint32_t sadr = idx2adr(fw,j); // string address fw 2676 tools/finsig_vxworks.c char *n = (char*)adr2ptr(fw,sadr); fw 2682 tools/finsig_vxworks.c fwAddMatch(fw,sadr+nl,32,0,1102); fw 2693 tools/finsig_vxworks.c int match_strsig103(firmware *fw, string_sig *sig, int j) fw 2695 tools/finsig_vxworks.c int ofst = vxworks_offset(fw, sig); fw 2698 tools/finsig_vxworks.c if (isSTMFD_LR(fw,j1)) fw 2701 tools/finsig_vxworks.c j1 = find_Nth_inst(fw,isBL,j1+1,20,3); fw 2704 tools/finsig_vxworks.c j1 = idxFollowBranch(fw,j1,0x01000001); fw 2706 tools/finsig_vxworks.c j1 = find_Nth_inst(fw,isB,j1+1,32,1); fw 2709 tools/finsig_vxworks.c j1 = idxFollowBranch(fw,j1,0x01000001); fw 2710 tools/finsig_vxworks.c fwAddMatch(fw,idx2adr(fw,j1),32,0,1103); fw 2730 tools/finsig_vxworks.c int match_strsig104(firmware *fw, string_sig *sig, int j) fw 2732 tools/finsig_vxworks.c int ofst = vxworks_offset(fw, sig); fw 2743 tools/finsig_vxworks.c uint32_t sadr = idx2adr(fw,j); // string address fw 2747 tools/finsig_vxworks.c if (isLDR(fw,j1)) // LDR ? fw 2749 tools/finsig_vxworks.c uint32_t pval = LDR2val(fw,j1); fw 2752 tools/finsig_vxworks.c int j2 = find_Nth_inst_rev(fw,instid,j1-1,sig->offset,ninst); fw 2755 tools/finsig_vxworks.c fwAddMatch(fw,idx2adr(fw,j2-ofst),32,0,1104); fw 2766 tools/finsig_vxworks.c int find_strsig(firmware *fw, string_sig *sig) fw 2770 tools/finsig_vxworks.c case 1: return fw_string_process(fw, sig, match_strsig1, 1); fw 2771 tools/finsig_vxworks.c case 2: return fw_string_process_unaligned(fw, sig, match_strsig2); fw 2772 tools/finsig_vxworks.c case 3: return fw_string_process(fw, sig, match_strsig3, 1); fw 2773 tools/finsig_vxworks.c case 4: return fw_string_process(fw, sig, match_strsig4, 1); fw 2774 tools/finsig_vxworks.c case 5: return fw_string_process(fw, sig, match_strsig5, 1); fw 2775 tools/finsig_vxworks.c case 6: return fw_string_process(fw, sig, match_strsig6, 1); fw 2776 tools/finsig_vxworks.c case 7: return fw_string_process(fw, sig, match_strsig7, 1); fw 2777 tools/finsig_vxworks.c case 8: return find_strsig8(fw, sig); fw 2778 tools/finsig_vxworks.c case 9: return find_strsig9(fw, sig); fw 2779 tools/finsig_vxworks.c case 11: return fw_string_process(fw, sig, match_strsig11, 0); fw 2781 tools/finsig_vxworks.c case 13: return fw_string_process_unaligned(fw, sig, match_strsig13); fw 2782 tools/finsig_vxworks.c case 15: return fw_string_process(fw, sig, match_strsig15, 1); fw 2783 tools/finsig_vxworks.c case 16: return fw_process(fw, sig, match_strsig16); fw 2784 tools/finsig_vxworks.c case 17: return find_strsig17(fw, sig); fw 2785 tools/finsig_vxworks.c case 19: return find_strsig19(fw, sig); fw 2791 tools/finsig_vxworks.c uint32_t fadr = followBranch2(fw,func_names[j].val,sig->offset); fw 2792 tools/finsig_vxworks.c fwAddMatch(fw,fadr,32,0,120); fw 2797 tools/finsig_vxworks.c case 21: return fw_process(fw, sig, (int (*)(firmware*, string_sig*, int))(sig->ev_name)); fw 2798 tools/finsig_vxworks.c case 22: return ((int (*)(firmware*))(sig->ev_name))(fw); fw 2799 tools/finsig_vxworks.c case 100: return fw_string_process(fw, sig, match_strsig100, 0); fw 2800 tools/finsig_vxworks.c case 101: return fw_string_process(fw, sig, match_strsig101, 0); fw 2801 tools/finsig_vxworks.c case 102: return fw_string_process(fw, sig, match_strsig102, 0); fw 2802 tools/finsig_vxworks.c case 103: return fw_string_process(fw, sig, match_strsig103, 0); fw 2803 tools/finsig_vxworks.c case 104: return fw_string_process(fw, sig, match_strsig104, 0); fw 2814 tools/finsig_vxworks.c void find_str_sig_matches(firmware *fw, const char *curr_name) fw 2826 tools/finsig_vxworks.c if (find_strsig(fw, &string_sigs[i])) fw 2847 tools/finsig_vxworks.c void find_matches(firmware *fw, const char *curr_name) fw 2865 tools/finsig_vxworks.c fwAddMatch(fw,func_names[i].val,32,0,120); fw 2876 tools/finsig_vxworks.c if (find_strsig(fw, &string_sigs[i])) fw 2904 tools/finsig_vxworks.c for (n = fw->br; n != 0; n = n->next) fw 2926 tools/finsig_vxworks.c if ((fw->buf[n->off+i+s->value] & 0x0F000000) == 0x0A000000) // B fw 2928 tools/finsig_vxworks.c idx = adr2idx(fw, followBranch2(fw, idx2adr(fw,n->off+i+s->value), 0xF0000001)); fw 2929 tools/finsig_vxworks.c if ((idx >= 0) && (idx < fw->size)) fw 2932 tools/finsig_vxworks.c p1 = &fw->buf[idx]; fw 2971 tools/finsig_vxworks.c if (isLDR_PC_cond(fw,n->off+i+s->offs)) fw 2973 tools/finsig_vxworks.c int m = adr2idx(fw,LDR2val(fw,n->off+i+s->offs)); fw 2974 tools/finsig_vxworks.c if ((m >= 0) && (m < fw->size) && (strcmp((char*)(&fw->buf[m]),"Mounter.c") == 0)) fw 2979 tools/finsig_vxworks.c else if (isADR_PC_cond(fw,n->off+i+s->offs)) fw 2981 tools/finsig_vxworks.c int m = adr2idx(fw,ADR2adr(fw,n->off+i+s->offs)); fw 2982 tools/finsig_vxworks.c if ((m >= 0) && (m < fw->size) && (strcmp((char*)(&fw->buf[m]),"Mounter.c") == 0)) fw 2993 tools/finsig_vxworks.c fwAddMatch(fw,idx2adr(fw,i+n->off),success,fail,func_list[j].ver); fw 3024 tools/finsig_vxworks.c void print_results(firmware *fw, const char *curr_name, int k) fw 3033 tools/finsig_vxworks.c osig* ostub2 = find_sig(fw->sv->stubs,curr_name); fw 3130 tools/finsig_vxworks.c void output_modemap(firmware *fw, int k, int l) fw 3134 tools/finsig_vxworks.c bprintf("%08x\n",idx2adr(fw,k)); fw 3136 tools/finsig_vxworks.c if (fw->buf[k] & 0xffff0000) fw 3139 tools/finsig_vxworks.c uint16_t *p = (uint16_t*)(&fw->buf[k]); fw 3143 tools/finsig_vxworks.c osig *m = find_sig_val(fw->sv->modemap, *p); fw 3164 tools/finsig_vxworks.c uint32_t *p = (uint32_t*)(&fw->buf[k]); fw 3168 tools/finsig_vxworks.c osig *m = find_sig_val(fw->sv->modemap, *p); fw 3171 tools/finsig_vxworks.c osig *m = find_sig_val(fw->sv->modemap, (*p)&0xffff); fw 3205 tools/finsig_vxworks.c osig *m = fw->sv->modemap; fw 3221 tools/finsig_vxworks.c int find_modelist(firmware *fw, uint32_t fadr) fw 3226 tools/finsig_vxworks.c j1 = fwval(fw,adr2idx(fw,fadr)); fw 3227 tools/finsig_vxworks.c k1 = adr2idx(fw,j1); fw 3230 tools/finsig_vxworks.c k2 = find_inst_rev(fw,isLDMFD_PC,k1-1,50); fw 3234 tools/finsig_vxworks.c k2 = find_Nth_inst_rev(fw,isMOV,k1-1,16,2); fw 3238 tools/finsig_vxworks.c k1 = find_inst_rev(fw,isLDR,k2,5); fw 3241 tools/finsig_vxworks.c j1 = LDR2val(fw,k1); fw 3242 tools/finsig_vxworks.c k1 = adr2idx(fw,j1); fw 3245 tools/finsig_vxworks.c j1 = fwval(fw,k1); fw 3246 tools/finsig_vxworks.c k1 = adr2idx(fw,j1); fw 3249 tools/finsig_vxworks.c k1 = find_inst_rev(fw,isMOV,k1-1,120); fw 3252 tools/finsig_vxworks.c if (fwval(fw,k1) != 0xe1a0f00e) // mov pc, lr fw 3255 tools/finsig_vxworks.c if (!(isLDR(fw,k1) && (fwRd(fw,k1)==0))) // ldr r0, fw 3258 tools/finsig_vxworks.c j1 = LDR2val(fw,k1); fw 3259 tools/finsig_vxworks.c k1 = adr2idx(fw,j1); fw 3263 tools/finsig_vxworks.c bprintf("// Firmware modemap table found @%08x -> ",idx2adr(fw,k1)); fw 3264 tools/finsig_vxworks.c output_modemap(fw,k1,k2-k1); fw 3271 tools/finsig_vxworks.c int match_FlashParamsTable2(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 3273 tools/finsig_vxworks.c if (fw->buf[k] == v1) fw 3275 tools/finsig_vxworks.c FlashParamsTable_address = idx2adr(fw,k); fw 3281 tools/finsig_vxworks.c int match_FlashParamsTable(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 3283 tools/finsig_vxworks.c if ((fw->buf[k] > fw->base) && (fw->buf[k+1] == 0x00010000) && ((fw->buf[k+2] == 0xFFFF0000)||(fw->buf[k+2] == 0xFFFF0002))) fw 3285 tools/finsig_vxworks.c if (search_fw(fw, match_FlashParamsTable2, idx2adr(fw,k), 0, 1)) fw 3289 tools/finsig_vxworks.c if ((fw->buf[k+1] > fw->base) && (fw->buf[k] == 0x00000000) && (fw->buf[k+2] == 0x00000001) && fw 3290 tools/finsig_vxworks.c (fw->buf[k+3] == 0x00000000) && (fw->buf[k+4] == 0xffffffff)) fw 3292 tools/finsig_vxworks.c if (search_fw(fw, match_FlashParamsTable2, idx2adr(fw,k), 0, 1)) fw 3298 tools/finsig_vxworks.c void find_modemap(firmware *fw) fw 3303 tools/finsig_vxworks.c search_fw(fw, match_FlashParamsTable, 0, 0, 1); fw 3314 tools/finsig_vxworks.c find_modelist(fw,FlashParamsTable_address); fw 3320 tools/finsig_vxworks.c int find_FileAccessSem(firmware *fw) fw 3322 tools/finsig_vxworks.c void print_stubs_min(firmware *fw, const char *name, uint32_t fadr, uint32_t atadr); fw 3323 tools/finsig_vxworks.c int s1 = find_str(fw, "FileSem.c"); fw 3326 tools/finsig_vxworks.c s1 = find_inst(fw, isLDR_PC, s1+2, 16); fw 3329 tools/finsig_vxworks.c uint32_t u1 = LDR2val(fw, s1); fw 3330 tools/finsig_vxworks.c if (u1 > fw->memisostart) fw 3332 tools/finsig_vxworks.c print_stubs_min(fw,"fileio_semaphore",u1,idx2adr(fw,s1)); fw 3338 tools/finsig_vxworks.c int find_DebugAssert_argcount(firmware *fw) fw 3340 tools/finsig_vxworks.c int s1 = find_str_ref(fw, "Memory.c"); fw 3343 tools/finsig_vxworks.c int k = isLDR_PC(fw, s1); fw 3346 tools/finsig_vxworks.c k = fwRd(fw, s1); fw 3367 tools/finsig_vxworks.c void find_platform_vals(firmware *fw) fw 3520 tools/finsig_vxworks.c k1 = adr2idx(fw,FlashParamsTable_address); fw 3523 tools/finsig_vxworks.c uint32_t fadr = fwval(fw,k); fw 3524 tools/finsig_vxworks.c int k2 = adr2idx(fw,fadr); fw 3525 tools/finsig_vxworks.c if (idx_valid(fw,k2)) fw 3527 tools/finsig_vxworks.c uint32_t sadr = fwval(fw,k2); fw 3528 tools/finsig_vxworks.c k2 = adr2idx(fw,sadr); fw 3529 tools/finsig_vxworks.c if (idx_valid(fw,k2)) fw 3531 tools/finsig_vxworks.c char *s = adr2ptr(fw,sadr); fw 3532 tools/finsig_vxworks.c if (((fw->cam != 0) && (strcmp(s,fw->cam) == 0)) || (strcmp(s,"Unknown") == 0)) fw 3542 tools/finsig_vxworks.c find_DebugAssert_argcount(fw); fw 3547 tools/finsig_vxworks.c uint32_t find_viewport_address(firmware *fw, int *kout) fw 3552 tools/finsig_vxworks.c k = find_str_ref(fw, "VRAM Address : %p\r"); fw 3557 tools/finsig_vxworks.c if (isLDR(fw,k1) && isLDR(fw,k1+1)) fw 3559 tools/finsig_vxworks.c uint32_t v1 = LDR2val(fw,k1); fw 3560 tools/finsig_vxworks.c uint32_t v2 = LDR2val(fw,k1+1); fw 3572 tools/finsig_vxworks.c int match_vid_get_bitmap_fb(firmware *fw, int k, int v) fw 3574 tools/finsig_vxworks.c if (isBL(fw,k-1) && // BL fw 3575 tools/finsig_vxworks.c isLDR_PC(fw,k)) fw 3577 tools/finsig_vxworks.c uint32_t v1 = LDR2val(fw,k); fw 3578 tools/finsig_vxworks.c bprintf("//void *vid_get_bitmap_fb() { return (void*)0x%08x; } // Found @0x%08x\n",v1,idx2adr(fw,k)); fw 3582 tools/finsig_vxworks.c if (isBL(fw,k-1) && // BL fw 3583 tools/finsig_vxworks.c (isLDR_PC(fw,k+1))) fw 3585 tools/finsig_vxworks.c uint32_t v1 = LDR2val(fw,k+1); fw 3586 tools/finsig_vxworks.c bprintf("//void *vid_get_bitmap_fb() { return (void*)0x%08x; } // Found @0x%08x\n",v1,idx2adr(fw,k)); fw 3593 tools/finsig_vxworks.c int match_get_flash_params_count(firmware *fw, int k, int v) fw 3595 tools/finsig_vxworks.c if ((fw->buf[k] & 0xFFF00FFF) == 0xE3C00901) // BIC Rn, Rn, #0x4000 fw 3597 tools/finsig_vxworks.c uint32_t r = (fw->buf[k] & 0x0000F000)<<4; // Register fw 3601 tools/finsig_vxworks.c if (((fw->buf[n] & 0xFFF00000) == 0xE3500000) && ((fw->buf[n] & 0x000F0000) == r)) // CMP, Rn #val fw 3604 tools/finsig_vxworks.c bprintf("//int get_flash_params_count(void) { return 0x%02x; } // Found @0x%08x\n",(fw->buf[n]&0xFFF)+1,idx2adr(fw,n)); fw 3614 tools/finsig_vxworks.c int match_uiprop_count(firmware *fw, int k, int v) fw 3618 tools/finsig_vxworks.c if (isB(fw, k+6)) fw 3620 tools/finsig_vxworks.c j = idxFollowBranch(fw,k+6,0x01000001); fw 3627 tools/finsig_vxworks.c if (isLDMFD_PC(fw,m)) break; fw 3628 tools/finsig_vxworks.c if (isCMP(fw,m)) fw 3630 tools/finsig_vxworks.c uint32_t v1 = ALUop2(fw,m); fw 3644 tools/finsig_vxworks.c osig *o = find_sig(fw->sv->stubs_min,name); fw 3647 tools/finsig_vxworks.c bprintf("//DEF_CONST(%-34s,0x%08x) // Found @0x%08x",name,uic,idx2adr(fw,j)); fw 3659 tools/finsig_vxworks.c bprintf("DEF_CONST(%-34s,0x%08x) // Found @0x%08x",name,uic,idx2adr(fw,j)); fw 3665 tools/finsig_vxworks.c int isMOVLRPC(firmware *fw, int offset) fw 3667 tools/finsig_vxworks.c return (fwval(fw,offset) == 0xE1A0E00F); // MOV LR, PC fw 3670 tools/finsig_vxworks.c int match_imager_active(firmware *fw, int k, int v) fw 3676 tools/finsig_vxworks.c if (fwval(fw,k) == 0xe49df004) // POP {PC} fw 3678 tools/finsig_vxworks.c int k1 = find_inst_rev(fw, isBL, k-1, 10); fw 3685 tools/finsig_vxworks.c if (isLDR(fw,k1) || isADR(fw,k1)) fw 3687 tools/finsig_vxworks.c if (isADR(fw,k1)) fw 3689 tools/finsig_vxworks.c a = ADR2adr(fw, k1); fw 3693 tools/finsig_vxworks.c a = LDR2val(fw, k1); fw 3695 tools/finsig_vxworks.c if ((a>fw->base) && ((a&3) == 0)) fw 3697 tools/finsig_vxworks.c int k3 = adr2idx(fw, a); fw 3698 tools/finsig_vxworks.c if (isSTMFD_LR(fw,k3)) fw 3700 tools/finsig_vxworks.c k3 = find_inst(fw, isMOVLRPC, k3+1, 6); fw 3706 tools/finsig_vxworks.c if (isSTR_cond(fw,k3+k4)) fw 3708 tools/finsig_vxworks.c reg = fwRn(fw,k3+k4); fw 3709 tools/finsig_vxworks.c o = fwval(fw,k3+k4) & 0xff; // offset, should be around 4 fw 3710 tools/finsig_vxworks.c where = idx2adr(fw,k3+k4); fw 3712 tools/finsig_vxworks.c if (reg>=0 && isLDR_cond(fw,k3+k4) && fwRd(fw,k3+k4)==reg) fw 3714 tools/finsig_vxworks.c adr = LDR2val(fw,k3+k4); fw 3715 tools/finsig_vxworks.c if (adr < fw->memisostart) fw 3739 tools/finsig_vxworks.c void find_lib_vals(firmware *fw) fw 3823 tools/finsig_vxworks.c search_saved_sig(fw, "GetParameterData", match_get_flash_params_count, 0, 0, 30); fw 3828 tools/finsig_vxworks.c void print_stubs_min(firmware *fw, const char *name, uint32_t fadr, uint32_t atadr) fw 3830 tools/finsig_vxworks.c osig *o = find_sig(fw->sv->stubs_min,name); fw 3851 tools/finsig_vxworks.c int print_exmem_types(firmware *fw) fw 3856 tools/finsig_vxworks.c int ii = adr2idx(fw, exm_typ_tbl); fw 3860 tools/finsig_vxworks.c bprintf("// %s %i\n",adr2ptr(fw, fwval(fw,ii+n)),n); fw 3866 tools/finsig_vxworks.c int find_exmem_alloc_table(firmware *fw) fw 3868 tools/finsig_vxworks.c int i = get_saved_sig(fw,"exmem_assert"); fw 3873 tools/finsig_vxworks.c i = adr2idx(fw, func_names[i].val); fw 3878 tools/finsig_vxworks.c if ( ((fwval(fw,i+n)&0xffff0000)==0xe59f0000) ) // ldr rx, [pc, #imm] fw 3880 tools/finsig_vxworks.c u = LDR2val(fw, i+n); fw 3881 tools/finsig_vxworks.c if (u>fw->base && u<fw->base+fw->size*4-4 && (u&3)==0) fw 3891 tools/finsig_vxworks.c int ii = adr2idx(fw, exm_typ_tbl); fw 3895 tools/finsig_vxworks.c if ( (fwval(fw,ii+n)!=0) && isASCIIstring(fw, fwval(fw,ii+n)) ) fw 3897 tools/finsig_vxworks.c extyp = adr2ptr(fw, fwval(fw,ii+n)); fw 3912 tools/finsig_vxworks.c if ( ((fwval(fw,i+n)&0xffff0000)==0xe59f0000) ) // ldr rx, [pc, #imm] fw 3914 tools/finsig_vxworks.c u = LDR2val(fw, i+n); fw 3915 tools/finsig_vxworks.c if (u>fw->data_start && u<fw->data_start+fw->data_len*4 && (fwRd(fw,i+n)>3)) fw 3924 tools/finsig_vxworks.c print_stubs_min(fw,"exmem_alloc_table",u,idx2adr(fw,i+n)); fw 3928 tools/finsig_vxworks.c print_stubs_min(fw,"exmem_types_table",exm_typ_tbl,exm_typ_tbl); fw 3937 tools/finsig_vxworks.c int match_levent_table(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 3939 tools/finsig_vxworks.c if ((fw->buf[k] > fw->base) && (fw->buf[k+1] == 0x00000800) && (fw->buf[k+2] == 0x00000002)) fw 3941 tools/finsig_vxworks.c print_stubs_min(fw,"levent_table",idx2adr(fw,k),idx2adr(fw,k)); fw 3943 tools/finsig_vxworks.c uint32_t levent_tbl = idx2adr(fw,k); fw 3945 tools/finsig_vxworks.c write_levent_table_dump(fw, levent_tbl); fw 3951 tools/finsig_vxworks.c int match_movie_status(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 3953 tools/finsig_vxworks.c if (isLDR_PC(fw, k) && // LDR R0, =base fw 3954 tools/finsig_vxworks.c ((fw->buf[k+1] & 0xFE0F0000) == 0xE20F0000) && // ADR R1, =sub fw 3955 tools/finsig_vxworks.c isSTR(fw, k+2) && // STR R1, [R0,N] fw 3956 tools/finsig_vxworks.c (fw->buf[k+3] == 0xE3A01003) && // MOV R1, 3 fw 3957 tools/finsig_vxworks.c isSTR(fw, k+4) && // STR R1, [R0,ofst] fw 3958 tools/finsig_vxworks.c (LDR2val(fw,k) < fw->base)) fw 3960 tools/finsig_vxworks.c uint32_t base = LDR2val(fw,k); fw 3961 tools/finsig_vxworks.c uint32_t ofst = fw->buf[k+4] & 0x00000FFF; fw 3962 tools/finsig_vxworks.c print_stubs_min(fw,"movie_status",base+ofst,idx2adr(fw,k)); fw 3966 tools/finsig_vxworks.c if (isLDR_PC(fw, k) && // LDR R1, =sub fw 3967 tools/finsig_vxworks.c isLDR_PC(fw, k+1) && // LDR R0, =base fw 3968 tools/finsig_vxworks.c isSTR(fw, k+2) && // STR R1, [R0,N] fw 3969 tools/finsig_vxworks.c (fw->buf[k+3] == 0xE3A01003) && // MOV R1, 3 fw 3970 tools/finsig_vxworks.c isSTR(fw, k+4) && // STR R1, [R0,ofst] fw 3971 tools/finsig_vxworks.c (LDR2val(fw,k+1) < fw->base)) fw 3973 tools/finsig_vxworks.c uint32_t base = LDR2val(fw,k+1); fw 3974 tools/finsig_vxworks.c uint32_t ofst = fw->buf[k+4] & 0x00000FFF; fw 3975 tools/finsig_vxworks.c print_stubs_min(fw,"movie_status",base+ofst,idx2adr(fw,k)); fw 3979 tools/finsig_vxworks.c if (isLDR_PC(fw, k) && // LDR Rx, =base fw 3980 tools/finsig_vxworks.c isLDR(fw, k+1) && (fwRd(fw,k) == fwRn(fw,k+1)) && // LDR R0, [Rx, ...] fw 3981 tools/finsig_vxworks.c isCMP(fw, k+2) && (fwRd(fw,k+2) == fwRd(fw,k+1)) && // CMP R0, #... fw 3982 tools/finsig_vxworks.c (fwval(fw,k+3) == 0x03A00005) && fw 3983 tools/finsig_vxworks.c isSTR_cond(fw, k+4) && (fwRn(fw,k+4) == fwRd(fw,k)) && // STRxx R0, [Rx,ofst] fw 3984 tools/finsig_vxworks.c (LDR2val(fw,k) < fw->base)) fw 3986 tools/finsig_vxworks.c uint32_t base = LDR2val(fw,k); fw 3987 tools/finsig_vxworks.c uint32_t ofst = fwOp2(fw,k+4); fw 3988 tools/finsig_vxworks.c print_stubs_min(fw,"movie_status",base+ofst,idx2adr(fw,k)); fw 3994 tools/finsig_vxworks.c int match_full_screen_refresh(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 3996 tools/finsig_vxworks.c if (((fw->buf[k] & 0xFF1FF000) == 0xE51F0000) && // LDR R0, =base fw 3997 tools/finsig_vxworks.c (fw->buf[k+1] == 0xE5D01000) && // LDRB R1, [R0] fw 3998 tools/finsig_vxworks.c (fw->buf[k+2] == 0xE3811002) && // ORR R1, R1, #2 fw 3999 tools/finsig_vxworks.c (fw->buf[k+3] == 0xE5C01000) && // STRB R1, [R0] fw 4000 tools/finsig_vxworks.c isBX_LR(fw,k+4)) // BX LR fw 4002 tools/finsig_vxworks.c uint32_t base = LDR2val(fw,k); fw 4003 tools/finsig_vxworks.c print_stubs_min(fw,"full_screen_refresh",base,idx2adr(fw,k)); fw 4008 tools/finsig_vxworks.c int match_canon_shoot_menu_active(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4010 tools/finsig_vxworks.c if (((fw->buf[k] & 0xFF1FF000) == 0xE51F1000) && // LDR R1, =base fw 4011 tools/finsig_vxworks.c ((fw->buf[k+1] & 0xFFFFF000) == 0xE5D10000) && // LDRB R0, [R1, #n] fw 4012 tools/finsig_vxworks.c (fw->buf[k+2] == 0xE2800001) && // ADD R0, R0, #1 fw 4013 tools/finsig_vxworks.c ((fw->buf[k+3] & 0xFFFFF000) == 0xE5C10000) && // STRB R0, [R1, #n] fw 4014 tools/finsig_vxworks.c (isB(fw,k+4))) // B fw 4016 tools/finsig_vxworks.c uint32_t base = LDR2val(fw,k); fw 4017 tools/finsig_vxworks.c uint32_t ofst = fw->buf[k+1] & 0x00000FFF; fw 4018 tools/finsig_vxworks.c print_stubs_min(fw,"canon_shoot_menu_active",base+ofst,idx2adr(fw,k)); fw 4021 tools/finsig_vxworks.c if (((fw->buf[k] & 0xFF1FF000) == 0xE51F0000) && // LDR R0, =base fw 4022 tools/finsig_vxworks.c ((fw->buf[k+1] & 0xFFFFF000) == 0xE5D01000) && // LDRB R1, [R0, #n] fw 4023 tools/finsig_vxworks.c (fw->buf[k+2] == 0xE2811001) && // ADD R1, R1, #1 fw 4024 tools/finsig_vxworks.c ((fw->buf[k+3] & 0xFFFFF000) == 0xE5C01000) && // STRB R1, [R0, #n] fw 4025 tools/finsig_vxworks.c (isB(fw,k+4))) // B fw 4027 tools/finsig_vxworks.c uint32_t base = LDR2val(fw,k); fw 4028 tools/finsig_vxworks.c uint32_t ofst = fw->buf[k+1] & 0x00000FFF; fw 4029 tools/finsig_vxworks.c print_stubs_min(fw,"canon_shoot_menu_active",base+ofst,idx2adr(fw,k)); fw 4034 tools/finsig_vxworks.c int match_playrec_mode(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4036 tools/finsig_vxworks.c if (((fw->buf[k] & 0xFF1FF000) == 0xE51F1000) && // LDR R1, =base fw 4037 tools/finsig_vxworks.c ((fw->buf[k+1] & 0xFFFFF000) == 0xE5810000) && // STR R0, [R1, #n] fw 4038 tools/finsig_vxworks.c ((fw->buf[k+3] & 0xFF1FF000) == 0xE51F0000) && // LDR R0, =base fw 4039 tools/finsig_vxworks.c ((fw->buf[k+4] & 0xFFFFF000) == 0xE5900000) && // LDR R0, [R0, #n] fw 4040 tools/finsig_vxworks.c ((fw->buf[k+6] & 0xFF1FF000) == 0xE51F1000) && // LDR R1, =base fw 4041 tools/finsig_vxworks.c ((fw->buf[k+9] & 0xFF1FF000) == 0xE51F0000) && // LDR R0, =base fw 4042 tools/finsig_vxworks.c ((fw->buf[k+12] & 0xFF1FF000) == 0xE51F1000) && // LDR R1, =base fw 4043 tools/finsig_vxworks.c ((fw->buf[k+15] & 0xFF1FF000) == 0xE51F0000) && // LDR R0, =base fw 4044 tools/finsig_vxworks.c ((fw->buf[k+18] & 0xFF1FF000) == 0xE51F1000) && // LDR R1, =base fw 4045 tools/finsig_vxworks.c (LDR2val(fw,k) == LDR2val(fw,k+3)) && fw 4046 tools/finsig_vxworks.c (LDR2val(fw,k) == LDR2val(fw,k+6)) && fw 4047 tools/finsig_vxworks.c (LDR2val(fw,k) == LDR2val(fw,k+9)) && fw 4048 tools/finsig_vxworks.c (LDR2val(fw,k) == LDR2val(fw,k+12)) && fw 4049 tools/finsig_vxworks.c (LDR2val(fw,k) == LDR2val(fw,k+15)) && fw 4050 tools/finsig_vxworks.c (LDR2val(fw,k) == LDR2val(fw,k+18))) fw 4052 tools/finsig_vxworks.c uint32_t base = LDR2val(fw,k); fw 4053 tools/finsig_vxworks.c uint32_t ofst = fw->buf[k+1] & 0x00000FFF; fw 4054 tools/finsig_vxworks.c print_stubs_min(fw,"playrec_mode",base+ofst,idx2adr(fw,k)); fw 4059 tools/finsig_vxworks.c int match_some_flag_for_af_scan(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4061 tools/finsig_vxworks.c if (isB(fw,k) && // B loc fw 4062 tools/finsig_vxworks.c isB(fw,k+1) && // B loc fw 4063 tools/finsig_vxworks.c isB(fw,k+2) && // B loc fw 4064 tools/finsig_vxworks.c isB(fw,k+3) && // B loc fw 4065 tools/finsig_vxworks.c isB(fw,k+4) && // B loc fw 4066 tools/finsig_vxworks.c isB(fw,k+5) && // B loc fw 4067 tools/finsig_vxworks.c isB(fw,k+6) && // B loc fw 4068 tools/finsig_vxworks.c isB(fw,k+7) && // B loc fw 4069 tools/finsig_vxworks.c (followBranch(fw,idx2adr(fw,k),1) != followBranch(fw,idx2adr(fw,k+1),1)) && fw 4070 tools/finsig_vxworks.c (followBranch(fw,idx2adr(fw,k),1) == followBranch(fw,idx2adr(fw,k+2),1)) && fw 4071 tools/finsig_vxworks.c (followBranch(fw,idx2adr(fw,k),1) == followBranch(fw,idx2adr(fw,k+3),1)) && fw 4072 tools/finsig_vxworks.c (followBranch(fw,idx2adr(fw,k),1) != followBranch(fw,idx2adr(fw,k+4),1)) && fw 4073 tools/finsig_vxworks.c (followBranch(fw,idx2adr(fw,k),1) != followBranch(fw,idx2adr(fw,k+5),1)) && fw 4074 tools/finsig_vxworks.c (followBranch(fw,idx2adr(fw,k),1) == followBranch(fw,idx2adr(fw,k+6),1)) && fw 4075 tools/finsig_vxworks.c (followBranch(fw,idx2adr(fw,k),1) == followBranch(fw,idx2adr(fw,k+7),1)) && fw 4076 tools/finsig_vxworks.c (isLDR_PC(fw,adr2idx(fw,followBranch(fw,idx2adr(fw,k),1))))) // LDR R0, =base fw 4078 tools/finsig_vxworks.c uint32_t base = LDR2val(fw,adr2idx(fw,followBranch(fw,idx2adr(fw,k),1))); fw 4079 tools/finsig_vxworks.c if (base < fw->base) fw 4080 tools/finsig_vxworks.c print_stubs_min(fw,"some_flag_for_af_scan",base,followBranch(fw,idx2adr(fw,k),1)); fw 4085 tools/finsig_vxworks.c int match_palette_data(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4087 tools/finsig_vxworks.c if ((fw->buf[k] == 0) && (fw->buf[k+1] == 0x00FF0000) && fw 4088 tools/finsig_vxworks.c (fw->buf[k+577] == 1) && (fw->buf[k+578] == 0x00FF0000) && fw 4089 tools/finsig_vxworks.c (fw->buf[k+1154] == 2) && (fw->buf[k+1155] == 0x00FF0000)) fw 4091 tools/finsig_vxworks.c return idx2adr(fw,k); fw 4093 tools/finsig_vxworks.c else if ((fw->buf[k] == 0) && (fw->buf[k+1] == 0x00FF0000) && fw 4094 tools/finsig_vxworks.c (fw->buf[k+513] == 1) && (fw->buf[k+514] == 0x00FF0000) && fw 4095 tools/finsig_vxworks.c (fw->buf[k+1026] == 2) && (fw->buf[k+1027] == 0x00FF0000)) fw 4097 tools/finsig_vxworks.c return idx2adr(fw,k); fw 4102 tools/finsig_vxworks.c int match_palette_buffer_offset(firmware *fw, int k) fw 4104 tools/finsig_vxworks.c int idx2 = idxFollowBranch(fw, k, 0x01000001); fw 4105 tools/finsig_vxworks.c if (isLDR(fw, idx2+2) && isBL(fw, idx2+3)) fw 4107 tools/finsig_vxworks.c uint32_t palette_size = LDR2val(fw,idx2+2); fw 4110 tools/finsig_vxworks.c bprintf("// Offset from start of palette_buffer to color data = %d (Found @0x%08x)\n",palette_size-0x400,idx2adr(fw,idx2+2)); fw 4114 tools/finsig_vxworks.c else if (isADR(fw, idx2+2) && isBL(fw, idx2+3)) fw 4116 tools/finsig_vxworks.c uint32_t palette_size = ALUop2(fw,idx2+2); fw 4119 tools/finsig_vxworks.c bprintf("// Offset from start of palette_buffer to color data = %d (Found @0x%08x)\n",palette_size-0x400,idx2adr(fw,idx2+2)); fw 4126 tools/finsig_vxworks.c int match_palette_data3(firmware *fw, int k, uint32_t palette_data, uint32_t v2) fw 4128 tools/finsig_vxworks.c if (isLDR_PC(fw, k) && (LDR2val(fw,k) == palette_data) && isLDR_PC(fw,k-1) && isLDR_PC(fw,k-6) && isLDR(fw,k-5)) fw 4130 tools/finsig_vxworks.c int palette_control = LDR2val(fw,k-6); fw 4131 tools/finsig_vxworks.c int ptr_offset = fwOp2(fw,k-5); fw 4132 tools/finsig_vxworks.c uint32_t fadr = find_inst_rev(fw, isSTMFD_LR, k-7, 30); fw 4135 tools/finsig_vxworks.c int k1 = search_fw(fw, find_B, fadr, 0, 1); fw 4136 tools/finsig_vxworks.c if ((k1 > 0) && isLDR_PC(fw,k1-2) && isLDR(fw,k1-1) && (LDR2val(fw,k1-2) == palette_control)) fw 4138 tools/finsig_vxworks.c int active_offset = fwOp2(fw,k1-1); fw 4139 tools/finsig_vxworks.c print_stubs_min(fw,"active_palette_buffer",palette_control+active_offset,idx2adr(fw,k1-1)); fw 4140 tools/finsig_vxworks.c print_stubs_min(fw,"palette_buffer_ptr",palette_control+ptr_offset,idx2adr(fw,k-5)); fw 4141 tools/finsig_vxworks.c if (isBL(fw,k+8)) fw 4143 tools/finsig_vxworks.c fadr = followBranch(fw, idx2adr(fw,k+8), 0x01000001); fw 4144 tools/finsig_vxworks.c int idx = adr2idx(fw, fadr); fw 4145 tools/finsig_vxworks.c if (isLDR(fw, idx+2) && isBL(fw, idx+3)) fw 4147 tools/finsig_vxworks.c uint32_t palette_size = LDR2val(fw,idx+2); fw 4150 tools/finsig_vxworks.c bprintf("// Offset from start of palette_buffer to color data = %d (Found @0x%08x)\n",palette_size-0x400,idx2adr(fw,idx+2)); fw 4161 tools/finsig_vxworks.c int match_palette_data2(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4163 tools/finsig_vxworks.c if (isLDR(fw,k) && (LDR2val(fw,k) == v1)) fw 4168 tools/finsig_vxworks.c if (isBL(fw,k1) && isLDMFD(fw,k1+2)) fw 4170 tools/finsig_vxworks.c uint32_t fadr = followBranch(fw, idx2adr(fw,k1), 0x01000001); fw 4171 tools/finsig_vxworks.c int idx = adr2idx(fw, fadr); fw 4175 tools/finsig_vxworks.c if (isSTR(fw,k2) && isLDMFD(fw,k2+1)) fw 4177 tools/finsig_vxworks.c int ptr_offset = fwval(fw,k2) & 0xFFF; fw 4178 tools/finsig_vxworks.c print_stubs_min(fw,"palette_buffer_ptr",v2+ptr_offset,idx2adr(fw,k2)); fw 4182 tools/finsig_vxworks.c if (isBL(fw,k) && isCMP(fw,k+1) && isADR_PC(fw,k+2)) fw 4184 tools/finsig_vxworks.c fadr = ADR2adr(fw,k+2); fw 4185 tools/finsig_vxworks.c idx = adr2idx(fw, fadr); fw 4189 tools/finsig_vxworks.c if (isBL(fw,k3)) fw 4191 tools/finsig_vxworks.c if (match_palette_buffer_offset(fw,k3)) fw 4201 tools/finsig_vxworks.c else if (isLDR_cond(fw,k1) && isLDMFD(fw,k1+2) && isBL(fw,k1-2)) fw 4203 tools/finsig_vxworks.c int ptr_offset = fwval(fw,k1) & 0xFFF; fw 4204 tools/finsig_vxworks.c print_stubs_min(fw,"palette_buffer_ptr",v2+ptr_offset,idx2adr(fw,k1)); fw 4205 tools/finsig_vxworks.c match_palette_buffer_offset(fw, k1-2); fw 4213 tools/finsig_vxworks.c int match_SavePaletteData(firmware *fw, int idx, int palette_data) fw 4215 tools/finsig_vxworks.c if (isBL(fw,idx+13)) fw 4217 tools/finsig_vxworks.c uint32_t fadr = followBranch(fw, idx2adr(fw,idx+13), 0x01000001); fw 4218 tools/finsig_vxworks.c idx = adr2idx(fw, fadr); fw 4219 tools/finsig_vxworks.c if (isLDR(fw,idx) && isLDR(fw,idx+1) && isB(fw,idx+2)) fw 4221 tools/finsig_vxworks.c uint32_t palette_control = LDR2val(fw,idx); fw 4222 tools/finsig_vxworks.c print_stubs_min(fw,"palette_control",palette_control,idx2adr(fw,idx)); fw 4223 tools/finsig_vxworks.c int active_offset = fwval(fw,idx+1) & 0xFFF; fw 4224 tools/finsig_vxworks.c print_stubs_min(fw,"active_palette_buffer",palette_control+active_offset,idx2adr(fw,idx+1)); fw 4225 tools/finsig_vxworks.c fadr = followBranch(fw,idx2adr(fw,idx+2),1); fw 4226 tools/finsig_vxworks.c idx = adr2idx(fw, fadr); fw 4227 tools/finsig_vxworks.c if (isLDR(fw,idx+17) && isLDR(fw,idx+18) && isLDR(fw,idx+12) && (LDR2val(fw,idx+12) == palette_control)) fw 4229 tools/finsig_vxworks.c if (isLDR(fw,idx+13)) fw 4231 tools/finsig_vxworks.c int ptr_offset = fwval(fw,idx+13) & 0xFFF; fw 4232 tools/finsig_vxworks.c print_stubs_min(fw,"palette_buffer_ptr",palette_control+ptr_offset,idx2adr(fw,idx+13)); fw 4235 tools/finsig_vxworks.c if ((fwval(fw,idx+18) & 0x0000F000) == 0) fw 4237 tools/finsig_vxworks.c palette_buffer = LDR2val(fw,idx+17); fw 4238 tools/finsig_vxworks.c print_stubs_min(fw,"palette_buffer",palette_buffer,idx2adr(fw,idx+17)); fw 4242 tools/finsig_vxworks.c palette_buffer = LDR2val(fw,idx+18); fw 4243 tools/finsig_vxworks.c print_stubs_min(fw,"palette_buffer",palette_buffer,idx2adr(fw,idx+18)); fw 4245 tools/finsig_vxworks.c if (isBL(fw,idx+26)) fw 4247 tools/finsig_vxworks.c fadr = followBranch(fw, idx2adr(fw,idx+26), 0x01000001); fw 4248 tools/finsig_vxworks.c idx = adr2idx(fw, fadr); fw 4249 tools/finsig_vxworks.c if (isLDR(fw, idx+2) && isBL(fw, idx+3)) fw 4251 tools/finsig_vxworks.c uint32_t palette_size = LDR2val(fw,idx+2); fw 4254 tools/finsig_vxworks.c bprintf("// Offset from start of palette_buffer to color data = %d (Found @0x%08x)\n",palette_size-0x400,idx2adr(fw,idx+2)); fw 4260 tools/finsig_vxworks.c else if (isLDR(fw,idx) && isLDR(fw,idx+6) && isLDR(fw,idx+7) && isBX(fw,idx+8)) fw 4263 tools/finsig_vxworks.c if ((fwval(fw,idx+6) & 0x0000F000) == 0) fw 4264 tools/finsig_vxworks.c active_offset = fwval(fw,idx+6) & 0xFFF; fw 4265 tools/finsig_vxworks.c else if ((fwval(fw,idx+7) & 0x0000F000) == 0) fw 4266 tools/finsig_vxworks.c active_offset = fwval(fw,idx+7) & 0xFFF; fw 4269 tools/finsig_vxworks.c uint32_t palette_control = LDR2val(fw,idx); fw 4271 tools/finsig_vxworks.c print_stubs_min(fw,"active_palette_buffer",palette_control+active_offset,idx2adr(fw,idx+1)); fw 4272 tools/finsig_vxworks.c search_fw(fw, match_palette_data2, palette_data, palette_control, 1); fw 4281 tools/finsig_vxworks.c int match_viewport_address3(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4283 tools/finsig_vxworks.c if (isLDR_PC(fw,k) && (LDR2val(fw,k) == v1)) fw 4286 tools/finsig_vxworks.c int k1 = find_inst_rev(fw, isSTMFD_LR, k-1, 1000); fw 4290 tools/finsig_vxworks.c if (isLDR_PC(fw,k1+1) && isLDR_PC(fw,k1+2) && isLDR(fw,k1+3) && fw 4291 tools/finsig_vxworks.c (fwRd(fw,k1+1) == fwRn(fw,k1+3))) fw 4293 tools/finsig_vxworks.c uint32_t a = LDR2val(fw,k1+1); fw 4294 tools/finsig_vxworks.c print_stubs_min(fw,"viewport_buffers",v1,idx2adr(fw,k)); fw 4295 tools/finsig_vxworks.c print_stubs_min(fw,"active_viewport_buffer",a,idx2adr(fw,k1+1)); fw 4299 tools/finsig_vxworks.c if (isLDR_PC(fw,k1+1) && isLDR_PC(fw,k1+3) && isLDR(fw,k1+4) && fw 4300 tools/finsig_vxworks.c (fwRd(fw,k1+1) == fwRn(fw,k1+4))) fw 4302 tools/finsig_vxworks.c uint32_t a = LDR2val(fw,k1+1); fw 4303 tools/finsig_vxworks.c print_stubs_min(fw,"viewport_buffers",v1,idx2adr(fw,k)); fw 4304 tools/finsig_vxworks.c print_stubs_min(fw,"active_viewport_buffer",a,idx2adr(fw,k1+1)); fw 4308 tools/finsig_vxworks.c if (isLDR_PC(fw,k1+1) && isLDR_PC(fw,k1+4) && isLDR(fw,k1+5) && fw 4309 tools/finsig_vxworks.c (fwRd(fw,k1+1) == fwRn(fw,k1+5))) fw 4311 tools/finsig_vxworks.c uint32_t a = LDR2val(fw,k1+1); fw 4312 tools/finsig_vxworks.c print_stubs_min(fw,"viewport_buffers",v1,idx2adr(fw,k)); fw 4313 tools/finsig_vxworks.c print_stubs_min(fw,"active_viewport_buffer",a,idx2adr(fw,k1+1)); fw 4321 tools/finsig_vxworks.c int match_viewport_address2(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4323 tools/finsig_vxworks.c if (fw->buf[k] == v1) fw 4325 tools/finsig_vxworks.c if (search_fw(fw, match_viewport_address3, v1, 0, 1)) fw 4331 tools/finsig_vxworks.c int match_viewport_address(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4333 tools/finsig_vxworks.c if (fw->buf[k] == v1) fw 4336 tools/finsig_vxworks.c if (search_fw(fw, match_viewport_address2, idx2adr(fw,k), 0, 1)) fw 4342 tools/finsig_vxworks.c int match_physw_status(firmware *fw, int k, int v) fw 4344 tools/finsig_vxworks.c if (isLDR_PC(fw,k)) fw 4346 tools/finsig_vxworks.c print_stubs_min(fw,"physw_status",LDR2val(fw,k),idx2adr(fw,k)); fw 4352 tools/finsig_vxworks.c int match_physw_run(firmware *fw, int k, int v) fw 4354 tools/finsig_vxworks.c if (isLDR_PC(fw,k)) fw 4356 tools/finsig_vxworks.c uint32_t base = LDR2val(fw,k); fw 4357 tools/finsig_vxworks.c uint32_t fadr = followBranch(fw, idx2adr(fw,k+1), 1); fw 4358 tools/finsig_vxworks.c uint32_t ofst = fw->buf[adr2idx(fw,fadr)] & 0x00000FFF; fw 4359 tools/finsig_vxworks.c print_stubs_min(fw,"physw_run",base+ofst,idx2adr(fw,k)); fw 4361 tools/finsig_vxworks.c ofst = fw->buf[k+2] & 0x00000FFF; fw 4362 tools/finsig_vxworks.c print_stubs_min(fw,"physw_sleep_delay",base+ofst,idx2adr(fw,k)); fw 4368 tools/finsig_vxworks.c int match_canon_menu_active(firmware *fw, int k, int v) fw 4370 tools/finsig_vxworks.c if (isLDR_PC(fw,k)) fw 4372 tools/finsig_vxworks.c uint32_t base = LDR2val(fw,k); fw 4376 tools/finsig_vxworks.c if (isLDR(fw,k1)) fw 4378 tools/finsig_vxworks.c uint32_t ofst = fw->buf[k1] & 0x00000FFF; fw 4379 tools/finsig_vxworks.c print_stubs_min(fw,"canon_menu_active",base+ofst,idx2adr(fw,k)); fw 4387 tools/finsig_vxworks.c int match_zoom_busy(firmware *fw, int k, int v) fw 4389 tools/finsig_vxworks.c if (isBL(fw,k)) fw 4391 tools/finsig_vxworks.c int idx1 = idxFollowBranch(fw,k,0x01000001); fw 4395 tools/finsig_vxworks.c if ((fw->buf[k1] & 0xFFFF0000) == 0xE8BD0000) // LDMFD fw 4398 tools/finsig_vxworks.c if (isADR_PC(fw,k1+1)) fw 4400 tools/finsig_vxworks.c fadr = ADR2adr(fw,k1+1); fw 4402 tools/finsig_vxworks.c else if (isADR_PC(fw,k1+2)) fw 4404 tools/finsig_vxworks.c fadr = ADR2adr(fw,k1+2); fw 4406 tools/finsig_vxworks.c else if (isADR_PC(fw,k1-3)) fw 4408 tools/finsig_vxworks.c fadr = ADR2adr(fw,k1-3); fw 4410 tools/finsig_vxworks.c else if (isLDR_PC(fw,k1+1)) fw 4412 tools/finsig_vxworks.c fadr = LDR2val(fw,k1+1); fw 4414 tools/finsig_vxworks.c else if (isLDR_PC(fw,k1+2)) fw 4416 tools/finsig_vxworks.c fadr = LDR2val(fw,k1+2); fw 4420 tools/finsig_vxworks.c int idx2 = adr2idx(fw,fadr); fw 4421 tools/finsig_vxworks.c if (isLDR_PC(fw,idx2+1) && isLDR(fw,idx2+2)) fw 4423 tools/finsig_vxworks.c int base = LDR2val(fw,idx2+1); fw 4424 tools/finsig_vxworks.c int ofst = fw->buf[idx2+2] & 0xFFF; fw 4425 tools/finsig_vxworks.c print_stubs_min(fw,"zoom_busy",base+ofst-4,fadr); fw 4436 tools/finsig_vxworks.c int match_focus_busy(firmware *fw, int k, int v) fw 4438 tools/finsig_vxworks.c if ((fw->buf[k] & 0xFFFF0000) == 0xE8BD0000) // LDMFD fw 4441 tools/finsig_vxworks.c if (isBL(fw,k-2)) fw 4443 tools/finsig_vxworks.c k1 = idxFollowBranch(fw,k-2,0x01000001); fw 4445 tools/finsig_vxworks.c if (isBL(fw,k-1)) fw 4447 tools/finsig_vxworks.c k1 = idxFollowBranch(fw,k-1,0x01000001); fw 4451 tools/finsig_vxworks.c if (isLDR_PC(fw,k1+1) && isLDR(fw,k1+3)) fw 4453 tools/finsig_vxworks.c int base = LDR2val(fw,k1+1); fw 4454 tools/finsig_vxworks.c int ofst = fw->buf[k1+3] & 0xFFF; fw 4455 tools/finsig_vxworks.c print_stubs_min(fw,"focus_busy",base+ofst-4,idx2adr(fw,k1)); fw 4464 tools/finsig_vxworks.c int match_bitmap_buffer2(firmware *fw, int k, int v) fw 4466 tools/finsig_vxworks.c uint32_t screen_lock = idx2adr(fw,k); fw 4467 tools/finsig_vxworks.c if (isBL(fw,v) && (followBranch(fw,idx2adr(fw,v),0x01000001) == screen_lock) && isBL(fw,v+2) && isBL(fw,v+3)) fw 4469 tools/finsig_vxworks.c uint32_t fadr = followBranch2(fw,idx2adr(fw,v+3),0x01000001); fw 4470 tools/finsig_vxworks.c int k1 = adr2idx(fw,fadr); fw 4471 tools/finsig_vxworks.c if (isLDR_PC(fw,k1+1)) fw 4473 tools/finsig_vxworks.c int reg = (fwval(fw,k1+1) & 0x0000F000) >> 12; fw 4474 tools/finsig_vxworks.c uint32_t adr = LDR2val(fw,k1+1); fw 4478 tools/finsig_vxworks.c if (isLDR_PC(fw,k2) && isLDR(fw,k2+1) && (((fwval(fw,k2+1) & 0x000F0000) >> 16) == reg)) fw 4480 tools/finsig_vxworks.c uint32_t bitmap_buffer = LDR2val(fw,k2); fw 4483 tools/finsig_vxworks.c uint32_t active_bitmap_buffer = adr + (fwval(fw,k2+1) & 0xFFF); fw 4484 tools/finsig_vxworks.c print_stubs_min(fw,"bitmap_buffer",bitmap_buffer,idx2adr(fw,k2)); fw 4485 tools/finsig_vxworks.c print_stubs_min(fw,"active_bitmap_buffer",active_bitmap_buffer,idx2adr(fw,k2+1)); fw 4495 tools/finsig_vxworks.c int match_bitmap_buffer(firmware *fw, int k, int v) fw 4497 tools/finsig_vxworks.c search_saved_sig(fw, "ScreenLock", match_bitmap_buffer2, k, 0, 1); fw 4501 tools/finsig_vxworks.c int match_raw_buffer(firmware *fw, int k, uint32_t rb1, uint32_t v2) fw 4503 tools/finsig_vxworks.c if (((fwval(fw,k) == rb1) && (fwval(fw,k+4) == rb1) && (fwval(fw,k-2) != 1)) || fw 4504 tools/finsig_vxworks.c ((fwval(fw,k) == rb1) && (fwval(fw,k+4) == rb1) && (fwval(fw,k+20) == rb1))) fw 4506 tools/finsig_vxworks.c uint32_t rb2 = fwval(fw,k+1); fw 4509 tools/finsig_vxworks.c bprintf("// Camera has 2 RAW buffers @ 0x%08x & 0x%08x\n", rb1, rb2, idx2adr(fw,k)); fw 4512 tools/finsig_vxworks.c print_stubs_min(fw,"raw_buffers",idx2adr(fw,k),idx2adr(fw,k)); fw 4516 tools/finsig_vxworks.c else if ((fwval(fw,k) == rb1) && (fwval(fw,k-2) == 2) && (fwval(fw,k-7) == rb1)) fw 4518 tools/finsig_vxworks.c uint32_t rb2 = fwval(fw,k+3); fw 4521 tools/finsig_vxworks.c bprintf("// Camera has 2 RAW buffers @ 0x%08x & 0x%08x\n", rb1, rb2, idx2adr(fw,k)); fw 4524 tools/finsig_vxworks.c print_stubs_min(fw,"raw_buffers",idx2adr(fw,k),idx2adr(fw,k)); fw 4533 tools/finsig_vxworks.c int find_DoMovieFrameCapture_buf(firmware *fw) fw 4536 tools/finsig_vxworks.c int k = get_saved_sig(fw,"DoMovieFrameCapture"); fw 4537 tools/finsig_vxworks.c int ka = get_saved_sig(fw,"ClearEventFlag"); fw 4540 tools/finsig_vxworks.c k = adr2idx(fw, func_names[k].val); fw 4541 tools/finsig_vxworks.c ka = adr2idx(fw, func_names[ka].val); fw 4544 tools/finsig_vxworks.c int k2 = find_inst(fw,isBL,k,14); fw 4545 tools/finsig_vxworks.c if (k2 == -1 || idxFollowBranch(fw,k2,0x01000001) != ka) fw 4552 tools/finsig_vxworks.c if (reg < 0 && isLDR_PC(fw,k1)) fw 4554 tools/finsig_vxworks.c uint32_t v = LDR2val(fw,k1); fw 4555 tools/finsig_vxworks.c if (v>uncached_adr && v<uncached_adr+fw->maxram && (v&3)==0) fw 4558 tools/finsig_vxworks.c frsp_buf_at = idx2adr(fw,k1); fw 4562 tools/finsig_vxworks.c if (isMOV_immed(fw,k1) && ALUop2a(fw,k1)>uncached_adr) fw 4564 tools/finsig_vxworks.c reg = fwRd(fw,k1); fw 4565 tools/finsig_vxworks.c frsp_buf = ALUop2a(fw,k1); fw 4566 tools/finsig_vxworks.c frsp_buf_at = idx2adr(fw, k1); fw 4570 tools/finsig_vxworks.c if ((fwval(fw,k1)&0xfffff000) == (0xe2800000+(reg<<12)+(reg<<16))) // ADD Rx, Rx, #imm fw 4572 tools/finsig_vxworks.c frsp_buf += ALUop2a(fw,k1); fw 4573 tools/finsig_vxworks.c frsp_buf_at = idx2adr(fw, k1); fw 4579 tools/finsig_vxworks.c k = get_saved_sig(fw,"WBInteg.DoCaptMovieFrame_FW"); fw 4582 tools/finsig_vxworks.c k = adr2idx(fw, func_names[k].val); fw 4583 tools/finsig_vxworks.c ka = find_inst(fw,isLDR_PC,k,6); fw 4586 tools/finsig_vxworks.c uint32_t v = LDR2val(fw,ka); fw 4587 tools/finsig_vxworks.c if (v>uncached_adr && v<uncached_adr+fw->maxram && (v&3)==0) fw 4590 tools/finsig_vxworks.c frsp_buf_at = idx2adr(fw,ka); fw 4597 tools/finsig_vxworks.c void find_stubs_min(firmware *fw) fw 4607 tools/finsig_vxworks.c search_fw(fw, match_levent_table, 0, 0, 1); fw 4611 tools/finsig_vxworks.c print_stubs_min(fw,"FlashParamsTable",FlashParamsTable_address,FlashParamsTable_address); fw 4613 tools/finsig_vxworks.c find_FileAccessSem(fw); fw 4933 tools/finsig_vxworks.c find_exmem_alloc_table(fw); fw 4936 tools/finsig_vxworks.c search_saved_sig(fw, "ImagerActivate", match_imager_active, 0/*v*/, 0, 30); fw 4946 tools/finsig_vxworks.c search_saved_sig(fw, "PTM_SetCurrentItem", match_uiprop_count, 0, 0, 30); fw 4951 tools/finsig_vxworks.c int find_ctypes(firmware *fw, int k) fw 4965 tools/finsig_vxworks.c if (k < (fw->size*4 - sizeof(ctypes))) fw 4967 tools/finsig_vxworks.c if (memcmp(((char*)fw->buf)+k,ctypes,sizeof(ctypes)) == 0) fw 4969 tools/finsig_vxworks.c bprintf("DEF(ctypes, 0x%08x)\n", fw->base + k); fw 4976 tools/finsig_vxworks.c int match_nrflag3(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 4978 tools/finsig_vxworks.c if (isBL(fw,k) && (idxFollowBranch(fw,k,0x01000001) == v1)) fw 4985 tools/finsig_vxworks.c if ((fwval(fw,k3) & 0x0F0FF000) == 0x020D3000) // Dest = R3, Src = SP = skip fw 4987 tools/finsig_vxworks.c if ((fwval(fw,k3) & 0xFF0FF000) == 0xE2033000) // ADD/SUB R3,R3,x fw 4990 tools/finsig_vxworks.c if ((fwval(fw,k3) & 0x00F00000) == 0x00400000) // SUB fw 4991 tools/finsig_vxworks.c ofst1 -= (fwval(fw,k3) & 0x00000FFF); fw 4993 tools/finsig_vxworks.c ofst1 += (fwval(fw,k3) & 0x00000FFF); fw 4995 tools/finsig_vxworks.c if (isLDR_PC(fw,k3) && (fwRd(fw,k3) == 3)) fw 4997 tools/finsig_vxworks.c int ofst2 = LDR2val(fw,k3); fw 4998 tools/finsig_vxworks.c if (ofst2 > (fw->data_len*4 + fw->data_start)) // has to be in the preinited data section fw 5003 tools/finsig_vxworks.c bprintf("DEF(_nrflag,0x%04x) // Found @ %08x (0x%04x)\n",ofst2,idx2adr(fw,k3),ofst2); fw 5004 tools/finsig_vxworks.c bprintf("//static long *nrflag = (long*)(0x%04x); // Found @ %08x\n",ofst2,idx2adr(fw,k3)); fw 5008 tools/finsig_vxworks.c bprintf("DEF(_nrflag,0x%04x) // Found @ %08x (0x%04x) & %08x (-0x%02x)\n",ofst2+ofst1,idx2adr(fw,k3),ofst2,idx2adr(fw,k),-ofst1); fw 5009 tools/finsig_vxworks.c bprintf("//static long *nrflag = (long*)(0x%04x-0x%02x); // Found @ %08x & %08x\n",ofst2,-ofst1,idx2adr(fw,k3),idx2adr(fw,k4)); fw 5013 tools/finsig_vxworks.c bprintf("DEF(_nrflag,0x%04x) // Found @ %08x (0x%04x) & %08x (+0x%02x)\n",ofst2+ofst1,idx2adr(fw,k3),ofst2,idx2adr(fw,k),ofst1); fw 5014 tools/finsig_vxworks.c bprintf("//static long *nrflag = (long*)(0x%04x+0x%02x); // Found @ %08x & %08x\n",ofst2,ofst1,idx2adr(fw,k3),idx2adr(fw,k4)); fw 5023 tools/finsig_vxworks.c int match_nrflag(firmware *fw, int idx, int v) fw 5028 tools/finsig_vxworks.c if (isLDR(fw, idx+1) && isLDR(fw, idx+2)) fw 5031 tools/finsig_vxworks.c int ofst2 = LDR2val(fw, k3); fw 5035 tools/finsig_vxworks.c if (isB(fw, k1)) fw 5037 tools/finsig_vxworks.c k2 = idxFollowBranch(fw,k1,0x01000001); fw 5038 tools/finsig_vxworks.c if (isSTR(fw, k2)) fw 5044 tools/finsig_vxworks.c if (isSTR(fw, k2)) fw 5054 tools/finsig_vxworks.c int ofst1 = fw->buf[k2] & 0x00000FFF; fw 5056 tools/finsig_vxworks.c bprintf("DEF(_nrflag,0x%04x) // Found @ %08x (0x%04x) & %08x (+0x%02x)\n",ofst2+ofst1,idx2adr(fw,k3),ofst2,idx2adr(fw,k2),ofst1); fw 5057 tools/finsig_vxworks.c bprintf("//static long *nrflag = (long*)(0x%04x+0x%02x); // Found @ %08x & %08x\n",ofst2,ofst1,idx2adr(fw,k3),idx2adr(fw,k2)); fw 5065 tools/finsig_vxworks.c int match_nrflag2(firmware *fw, int k, int v) fw 5068 tools/finsig_vxworks.c if (isBL(fw,k)) fw 5070 tools/finsig_vxworks.c k = idxFollowBranch(fw,k,0x01000001); fw 5071 tools/finsig_vxworks.c return search_fw(fw, match_nrflag3, k, 0, 1); fw 5080 tools/finsig_vxworks.c int isADD_0x220000(firmware *fw, int offset) fw 5082 tools/finsig_vxworks.c return ((fwval(fw,offset) & 0xfff00fff) == (0xe2800822)); fw 5091 tools/finsig_vxworks.c int find_leds(firmware *fw) fw 5095 tools/finsig_vxworks.c int k1 = find_str_ref(fw,"LEDCon"); fw 5098 tools/finsig_vxworks.c k1 = find_inst_rev(fw,isSTMFD_LR,k1,96); fw 5101 tools/finsig_vxworks.c j1 = find_inst(fw,isBL,k1,80); fw 5102 tools/finsig_vxworks.c j2 = find_Nth_inst(fw,isBL,k1,80,3); fw 5106 tools/finsig_vxworks.c if (followBranch(fw,idx2adr(fw,j1),0x01000001) != followBranch(fw,idx2adr(fw,j2),0x01000001)) fw 5108 tools/finsig_vxworks.c k1 = find_Nth_inst(fw,isBL,k1,80,2); fw 5110 tools/finsig_vxworks.c k1 = idxFollowBranch(fw,k1,0x01000001); fw 5113 tools/finsig_vxworks.c bprintf("// LED table init @ 0x%x\n",idx2adr(fw,k1)); fw 5117 tools/finsig_vxworks.c j1 = find_Nth_inst(fw,isADD_0x220000,k1,40,j2); fw 5120 tools/finsig_vxworks.c led.reg = fwRd(fw,j1); fw 5124 tools/finsig_vxworks.c while (!isSTMFD_LR(fw,n)) fw 5126 tools/finsig_vxworks.c if ((fwval(fw,n)&0xfffff000) == (0xe2800000+(led.reg<<12)+(led.reg<<16))) // ADD Rx, Rx, #0xc00000yz fw 5128 tools/finsig_vxworks.c if ( ALUop2a(fw,n) >= 0xc0000000 ) fw 5130 tools/finsig_vxworks.c led.addr += ALUop2a(fw,n); fw 5133 tools/finsig_vxworks.c else if ((fwval(fw,n)&0xfffff000) == (0xe3a00000+(led.reg<<12))) // MOV Rx, #imm fw 5135 tools/finsig_vxworks.c led.addr += ALUop2a(fw,n); fw 5137 tools/finsig_vxworks.c while (!isLDMFD_PC(fw,m)) fw 5139 tools/finsig_vxworks.c if ((fwval(fw,m)&0xfff0f000) == (0xe5800000+(led.reg<<12))) // STR Rx, [Ry, imm] fw 5141 tools/finsig_vxworks.c led.offs = fwval(fw,m) & 0xfff; fw 5168 tools/finsig_vxworks.c void find_other_vals(firmware *fw) fw 5175 tools/finsig_vxworks.c print_exmem_types(fw); fw 5176 tools/finsig_vxworks.c find_leds(fw); fw 5179 tools/finsig_vxworks.c search_saved_sig(fw, "NR_GetDarkSubType", match_nrflag2, 0, 0, 20); fw 5184 tools/finsig_vxworks.c void print_kval(firmware *fw, uint32_t tadr, int tsiz, int tlen, uint32_t ev, const char *name, char *sfx) fw 5186 tools/finsig_vxworks.c int tidx = adr2idx(fw,tadr); fw 5190 tools/finsig_vxworks.c if (fw->buf[tidx+k+1] == ev) fw 5192 tools/finsig_vxworks.c kval = fw->buf[tidx+k]; fw 5193 tools/finsig_vxworks.c tadr = idx2adr(fw,tidx+k); fw 5238 tools/finsig_vxworks.c uint32_t add_kmval(firmware *fw, uint32_t tadr, int tsiz, int tlen, uint32_t ev, const char *name, uint32_t xtra) fw 5240 tools/finsig_vxworks.c int tidx = adr2idx(fw,tadr); fw 5246 tools/finsig_vxworks.c if (fw->buf[tidx+k+1] == ev) fw 5248 tools/finsig_vxworks.c kval = fw->buf[tidx+k]; fw 5249 tools/finsig_vxworks.c tadr = idx2adr(fw,tidx+k); fw 5336 tools/finsig_vxworks.c int match_GetSDProtect(firmware *fw, int k, int v) fw 5338 tools/finsig_vxworks.c if (isB(fw,k)) // B fw 5340 tools/finsig_vxworks.c k = idxFollowBranch(fw,k,1); fw 5341 tools/finsig_vxworks.c if (isLDR_PC(fw,k)) fw 5343 tools/finsig_vxworks.c return LDR2val(fw,k); fw 5350 tools/finsig_vxworks.c void find_key_vals(firmware *fw) fw 5358 tools/finsig_vxworks.c uint32_t tadr = search_saved_sig(fw, "GetSDProtect", match_GetSDProtect, 0, 1, 1); fw 5361 tools/finsig_vxworks.c k = find_str_ref(fw,"SD Not Exist\n"); fw 5366 tools/finsig_vxworks.c if (isBL(fw,k1)) // BL fw 5368 tools/finsig_vxworks.c uint32_t fadr = followBranch(fw,idx2adr(fw,k1),0x01000001); fw 5369 tools/finsig_vxworks.c int k2 = adr2idx(fw,fadr); fw 5370 tools/finsig_vxworks.c if (isLDR_PC(fw,k2)) fw 5372 tools/finsig_vxworks.c tadr = LDR2val(fw,k2); fw 5381 tools/finsig_vxworks.c if (fw->buf[adr2idx(fw,tadr)+2] == 0) tsiz = 3; fw 5383 tools/finsig_vxworks.c uint32_t madr = fw->base + (fw->size*4-4); fw 5384 tools/finsig_vxworks.c for (k=0; k<(tadr-fw->base)/4; k++) fw 5386 tools/finsig_vxworks.c if (isLDR_PC(fw,k)) fw 5388 tools/finsig_vxworks.c uint32_t adr = LDR2val(fw,k); fw 5398 tools/finsig_vxworks.c k1 = adr2idx(fw,tadr); fw 5401 tools/finsig_vxworks.c if ((fw->buf[k1+k+1] == 0xFFFFFFFF) && (fw->buf[k1+k+4] == 0xFFFFFFFF)) fw 5411 tools/finsig_vxworks.c if (fw->dryos_ver >= 49) fw 5414 tools/finsig_vxworks.c print_kval(fw,tadr,tsiz,tlen,0x20A,"SD_READONLY","_FLAG"); fw 5415 tools/finsig_vxworks.c print_kval(fw,tadr,tsiz,tlen,0x202,"USB","_MASK"); fw 5419 tools/finsig_vxworks.c print_kval(fw,tadr,tsiz,tlen,0x90A,"SD_READONLY","_FLAG"); fw 5420 tools/finsig_vxworks.c print_kval(fw,tadr,tsiz,tlen,0x902,"USB","_MASK"); fw 5423 tools/finsig_vxworks.c uint32_t key_half = add_kmval(fw,tadr,tsiz,tlen,0,"KEY_SHOOT_HALF",0); fw 5424 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,1,"KEY_SHOOT_FULL",key_half); fw 5425 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,1,"KEY_SHOOT_FULL_ONLY",0); fw 5426 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,2,"KEY_ZOOM_IN",0); fw 5427 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,3,"KEY_ZOOM_OUT",0); fw 5428 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,4,"KEY_UP",0); fw 5429 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,5,"KEY_DOWN",0); fw 5430 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,6,"KEY_LEFT",0); fw 5431 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,7,"KEY_RIGHT",0); fw 5432 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,8,"KEY_SET",0); fw 5433 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,9,"KEY_MENU",0); fw 5434 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,0xA,"KEY_DISPLAY",0); fw 5435 tools/finsig_vxworks.c if (fw->dryos_ver <= 47) fw 5437 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,0x601,"KEY_PLAYBACK",0); fw 5438 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,0x600,"KEY_POWER",0); fw 5439 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,0x12,"KEY_VIDEO",0); fw 5443 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,0x101,"KEY_PLAYBACK",0); fw 5444 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,0x100,"KEY_POWER",0); fw 5445 tools/finsig_vxworks.c if (fw->dryos_ver == 49) fw 5447 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,0x19,"KEY_VIDEO",0); fw 5449 tools/finsig_vxworks.c else if(fw->dryos_ver == 50) fw 5451 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,0x1A,"KEY_VIDEO",0); fw 5452 tools/finsig_vxworks.c add_kmval(fw,tadr,tsiz,tlen,0x14,"KEY_HELP",0); fw 5466 tools/finsig_vxworks.c int get_eventproc_val(firmware *fw, int k) fw 5468 tools/finsig_vxworks.c if (isADR_PC(fw,k) && (fwRd(fw,k) == 0)) fw 5469 tools/finsig_vxworks.c nadr = ADR2adr(fw,k); fw 5470 tools/finsig_vxworks.c else if (isADR_PC(fw,k) && (fwRd(fw,k) == 1)) fw 5471 tools/finsig_vxworks.c eadr = ADR2adr(fw,k); fw 5472 tools/finsig_vxworks.c else if (isLDR_PC(fw,k) && (fwRd(fw,k) == 0)) fw 5473 tools/finsig_vxworks.c nadr = LDR2val(fw,k); fw 5474 tools/finsig_vxworks.c else if (isLDR_PC(fw,k) && (fwRd(fw,k) == 1)) fw 5475 tools/finsig_vxworks.c eadr = LDR2val(fw,k); fw 5511 tools/finsig_vxworks.c void add_func_name2(firmware *fw, uint32_t nadr, uint32_t eadr, char *suffix) fw 5513 tools/finsig_vxworks.c char *n = (char*)adr2ptr(fw,nadr); fw 5516 tools/finsig_vxworks.c if (isB(fw,adr2idx(fw,eadr))) fw 5521 tools/finsig_vxworks.c eadr = followBranch(fw,eadr,1); fw 5527 tools/finsig_vxworks.c int match_eventproc(firmware *fw, int k, uint32_t fadr, uint32_t v2) fw 5530 tools/finsig_vxworks.c if (isBorBL(fw,k)) fw 5532 tools/finsig_vxworks.c uint32_t adr = followBranch(fw,idx2adr(fw,k),0x01000001); fw 5538 tools/finsig_vxworks.c get_eventproc_val(fw, k); fw 5540 tools/finsig_vxworks.c get_eventproc_val(fw, k); fw 5544 tools/finsig_vxworks.c get_eventproc_val(fw, k); fw 5549 tools/finsig_vxworks.c get_eventproc_val(fw, k); fw 5553 tools/finsig_vxworks.c add_func_name2(fw, nadr, eadr, "_FW"); fw 5563 tools/finsig_vxworks.c int k1 = find_Nth_inst_rev(fw, isLDR_PC, k, 15, c); fw 5566 tools/finsig_vxworks.c uint32_t k2 = LDR2val(fw,k1); fw 5567 tools/finsig_vxworks.c if ((k2 > fw->base) && (k2 < (fw->base + fw->size*4 - 1))) fw 5573 tools/finsig_vxworks.c if ((fwval(fw,k3) & 0xfff0fff0) == 0xe7901000) // ldr r1, [ry, rz] fw 5577 tools/finsig_vxworks.c if ((fwval(fw,k3) & 0xfff0fff0) == 0xe7900000) // ldr r0, [ry, rz] fw 5583 tools/finsig_vxworks.c if ((fwval(fw,k-1) & 0xfff00000) == 0xe2800000) // add fw 5590 tools/finsig_vxworks.c k1 = adr2idx(fw,k2); fw 5592 tools/finsig_vxworks.c while (fwval(fw,k1) != 0) fw 5595 tools/finsig_vxworks.c if (!idx_valid(fw,adr2idx(fw,fwval(fw,k1)))) break; fw 5596 tools/finsig_vxworks.c if (!idx_valid(fw,adr2idx(fw,fwval(fw,k1+1)))) break; fw 5597 tools/finsig_vxworks.c add_func_name2(fw, fwval(fw,k1), fwval(fw,k1+1), "_FW"); fw 5611 tools/finsig_vxworks.c else if (isLDR_PC(fw,k) && (fwRd(fw,k) == 0) && isLDR_PC(fw,k+1) && (fwRd(fw,k+1) == 1) && fw 5612 tools/finsig_vxworks.c (fwval(fw,k+2) == 0xE1A0E00F) && (fwval(fw,k+3) == 0xE1A0F004)) fw 5614 tools/finsig_vxworks.c nadr = LDR2val(fw,k); fw 5615 tools/finsig_vxworks.c eadr = LDR2val(fw,k+1); fw 5616 tools/finsig_vxworks.c add_func_name2(fw, nadr, eadr, "_FW"); fw 5621 tools/finsig_vxworks.c int match_registerlists(firmware *fw, int k, uint32_t fadr, uint32_t v2) fw 5623 tools/finsig_vxworks.c if (isBorBL(fw,k)) fw 5625 tools/finsig_vxworks.c uint32_t adr = followBranch2(fw,idx2adr(fw,k),0x01000001); fw 5631 tools/finsig_vxworks.c if (isLDR_PC(fw,k1) && (fwRd(fw,k1) == 0)) fw 5633 tools/finsig_vxworks.c int j = adr2idx(fw,LDR2val(fw,k1)); fw 5634 tools/finsig_vxworks.c if (!idx_valid(fw,j)) fw 5636 tools/finsig_vxworks.c j = adr2idx(fw,LDR2val(fw,k1) - fw->data_start + fw->data_init_start); fw 5638 tools/finsig_vxworks.c if (idx_valid(fw,j)) fw 5640 tools/finsig_vxworks.c while (fwval(fw,j) != 0) fw 5642 tools/finsig_vxworks.c add_func_name2(fw, fwval(fw,j), fwval(fw,j+1), "_FW"); fw 5654 tools/finsig_vxworks.c int match_registerlistproc(firmware *fw, int k, uint32_t fadr, uint32_t v2) fw 5656 tools/finsig_vxworks.c if (isSTMFD_LR(fw,k) && isBL(fw,k+6) && isLDMFD_PC(fw,k+11)) fw 5658 tools/finsig_vxworks.c uint32_t adr = followBranch2(fw,idx2adr(fw,k+6),0x01000001); fw 5661 tools/finsig_vxworks.c fadr = idx2adr(fw,k); fw 5662 tools/finsig_vxworks.c search_fw(fw, match_registerlists, fadr, 0, 6); fw 5669 tools/finsig_vxworks.c void find_eventprocs(firmware *fw) fw 5671 tools/finsig_vxworks.c int j = get_saved_sig(fw,"ExportToEventProcedure_FW"); fw 5675 tools/finsig_vxworks.c search_fw(fw, match_eventproc, fadr, 0, 1); fw 5677 tools/finsig_vxworks.c j = get_saved_sig(fw,"RegisterEventProcedure_FW"); fw 5681 tools/finsig_vxworks.c search_fw(fw, match_eventproc, fadr, 0, 1); fw 5682 tools/finsig_vxworks.c search_fw(fw, match_registerlistproc, fadr, 0, 12); fw 5687 tools/finsig_vxworks.c int isLDR_PC_r0(firmware *fw, int offset) fw 5689 tools/finsig_vxworks.c return ((fwval(fw,offset) & 0xFE1FF000) == (0xE41F0000)); fw 5693 tools/finsig_vxworks.c int isLDR_PC_r3(firmware *fw, int offset) fw 5695 tools/finsig_vxworks.c return ((fwval(fw,offset) & 0xFE1FF000) == (0xE41F3000)); fw 5698 tools/finsig_vxworks.c int match_createtask(firmware *fw, int k, uint32_t fadr, uint32_t v2) fw 5700 tools/finsig_vxworks.c uint32_t adr = followBranch(fw,idx2adr(fw,k),0x01000001); fw 5705 tools/finsig_vxworks.c j1 = find_inst_rev(fw,isLDR_PC_r3,k,16); fw 5706 tools/finsig_vxworks.c j2 = find_inst_rev(fw,isLDR_PC_r0,k,16); fw 5711 tools/finsig_vxworks.c if ((find_inst(fw,isBL,j1,16)!=k) || (find_inst(fw,isBL,j2,16)!=k)) fw 5714 tools/finsig_vxworks.c uint32_t sadr = LDR2val(fw,j2); fw 5715 tools/finsig_vxworks.c uint32_t tadr = LDR2val(fw,j1); fw 5718 tools/finsig_vxworks.c char *s = adr2ptr(fw,sadr); fw 5720 tools/finsig_vxworks.c if ((isalnum(s[0])&&isalnum(s[1])) && (idx_valid(fw,adr2idx(fw,tadr)))) fw 5732 tools/finsig_vxworks.c void find_tasks(firmware *fw) fw 5734 tools/finsig_vxworks.c int k = get_saved_sig(fw,"CreateTask"); fw 5737 tools/finsig_vxworks.c search_fw(fw, match_createtask, func_names[k].val, 0, 5); fw 5739 tools/finsig_vxworks.c k = get_saved_sig(fw,"CreateTaskStrictly"); fw 5742 tools/finsig_vxworks.c search_fw(fw, match_createtask, func_names[k].val, 0, 5); fw 5746 tools/finsig_vxworks.c void find_builddate(firmware *fw) fw 5748 tools/finsig_vxworks.c int j = get_saved_sig(fw,"GetBuildDate_FW"); fw 5751 tools/finsig_vxworks.c int idx = adr2idx(fw, func_names[j].val); fw 5752 tools/finsig_vxworks.c idx = LDR2idx(fw, idx); fw 5753 tools/finsig_vxworks.c uint32_t adr = fwval(fw, idx); fw 5754 tools/finsig_vxworks.c idx = adr2idx(fw, adr); fw 5755 tools/finsig_vxworks.c fw->fw_build_date = (char*)&fw->buf[idx]; fw 5758 tools/finsig_vxworks.c fw->fw_build_date = 0; fw 5760 tools/finsig_vxworks.c j = get_saved_sig(fw,"GetBuildTime_FW"); fw 5763 tools/finsig_vxworks.c int idx = adr2idx(fw, func_names[j].val); fw 5764 tools/finsig_vxworks.c idx = LDR2idx(fw, idx); fw 5765 tools/finsig_vxworks.c uint32_t adr = fwval(fw, idx); fw 5766 tools/finsig_vxworks.c idx = adr2idx(fw, adr); fw 5767 tools/finsig_vxworks.c fw->fw_build_time = (char*)&fw->buf[idx]; fw 5770 tools/finsig_vxworks.c fw->fw_build_time = 0; fw 5790 tools/finsig_vxworks.c int find_ptp_handler_imm(firmware *fw, int k) fw 5800 tools/finsig_vxworks.c if (isLDR_PC(fw,k+o)) fw 5802 tools/finsig_vxworks.c if(fwRd(fw,k+o) == 0) fw 5804 tools/finsig_vxworks.c op = LDR2val(fw,k+o); fw 5806 tools/finsig_vxworks.c else if(fwRd(fw,k+o) == 1){ fw 5807 tools/finsig_vxworks.c handler = LDR2val(fw,k+o); fw 5811 tools/finsig_vxworks.c else if (isADR_PC(fw,k+o) && (fwRd(fw,k+o) == 1)) fw 5813 tools/finsig_vxworks.c handler=ADR2adr(fw,k+o); fw 5818 tools/finsig_vxworks.c if (isORR(fw,k+o) && (fwRd(fw,k+o) == 0) && (fwRn(fw,k+o) > 3)) fw 5820 tools/finsig_vxworks.c int reg = fwRn(fw,k+o); fw 5825 tools/finsig_vxworks.c if (isMOV_immed(fw,k1) && (fwRd(fw,k1) == reg)) fw 5827 tools/finsig_vxworks.c u1 = ALUop2a(fw,k1); fw 5838 tools/finsig_vxworks.c op = ALUop2a(fw,k+o) | u1; fw 5841 tools/finsig_vxworks.c else if (isADD(fw,k+o) && (fwRd(fw,k+o) == 0) && (fwRn(fw,k+o) <= 3)) fw 5843 tools/finsig_vxworks.c int reg = fwRn(fw,k+o); fw 5848 tools/finsig_vxworks.c if (isMOV_immed(fw,k1) && (fwRd(fw,k1) == reg)) fw 5850 tools/finsig_vxworks.c u1 = ALUop2a(fw,k1); fw 5860 tools/finsig_vxworks.c op = ALUop2a(fw,k+o) + u1; fw 5873 tools/finsig_vxworks.c int match_ptp_handlers(firmware *fw, int k, uint32_t fadr, uint32_t v2) fw 5876 tools/finsig_vxworks.c if(fwval(fw,k) == 0x1004 fw 5877 tools/finsig_vxworks.c && fwval(fw,k+2) == 0x1005 fw 5878 tools/finsig_vxworks.c && fwval(fw,k+4) == 0x1006 fw 5879 tools/finsig_vxworks.c && fwval(fw,k+1) > fw->base fw 5880 tools/finsig_vxworks.c && fwval(fw,k+3) > fw->base fw 5881 tools/finsig_vxworks.c && fwval(fw,k+5) > fw->base) fw 5887 tools/finsig_vxworks.c uint32_t op=fwval(fw,k+i*2); fw 5888 tools/finsig_vxworks.c uint32_t handler=fwval(fw,k+i*2+1); fw 5897 tools/finsig_vxworks.c if (!isBorBL(fw,k)) fw 5901 tools/finsig_vxworks.c uint32_t adr = followBranch2(fw,idx2adr(fw,k),0x01000001); fw 5905 tools/finsig_vxworks.c find_ptp_handler_imm(fw,k); fw 5911 tools/finsig_vxworks.c void find_ptp_handlers(firmware *fw) fw 5913 tools/finsig_vxworks.c int k = get_saved_sig(fw,"add_ptp_handler"); fw 5916 tools/finsig_vxworks.c search_fw(fw, match_ptp_handlers, func_names[k].val, 0, 128); fw 5920 tools/finsig_vxworks.c void write_levent_table_dump(firmware *fw, uint32_t tadr) fw 5935 tools/finsig_vxworks.c val = *(uint32_t*)adr2ptr(fw, tadr); fw 5936 tools/finsig_vxworks.c if ((val == 0xffffffff) || (val == 0) || (*(uint32_t*)adr2ptr(fw, tadr+4) < lid)) { fw 5939 tools/finsig_vxworks.c lid = *(uint32_t*)adr2ptr(fw, tadr+4); fw 5940 tools/finsig_vxworks.c str = (char*)adr2ptr(fw,val); fw 5942 tools/finsig_vxworks.c fprintf(f,"0x%08x 0x%04x 0x%08x %s\n",tadr,lid,*(uint32_t*)adr2ptr(fw, tadr+8),str); fw 5951 tools/finsig_vxworks.c void output_firmware_vals(firmware *fw) fw 5955 tools/finsig_vxworks.c if (fw->firmware_ver_str == 0) fw 5961 tools/finsig_vxworks.c uint32_t j = idx2adr(fw,fw->fwver_idx); fw 5962 tools/finsig_vxworks.c char *c = strrchr(fw->firmware_ver_str,' ') + 1; // points after the last space char fw 5963 tools/finsig_vxworks.c uint32_t k = j + c - fw->firmware_ver_str; fw 5966 tools/finsig_vxworks.c bprintf("// %s // Found @ 0x%08x, \"%s\" @ 0x%08x\n",fw->firmware_ver_str,j,c,k); fw 5971 tools/finsig_vxworks.c bprintf("// %s // Found @ 0x%08x, \"%s\" @ 0x%08x\n",fw->firmware_ver_str,j,fw->firmware_ver_str,j); fw 5975 tools/finsig_vxworks.c if (fw->fw_build_date != 0) fw 5977 tools/finsig_vxworks.c bprintf("// Firmware build timestamp: %s %s\n",fw->fw_build_date, (fw->fw_build_time==0)?"":fw->fw_build_time); fw 5980 tools/finsig_vxworks.c if (fw->fsize > (fw->size + 256)) fw 5982 tools/finsig_vxworks.c bprintf("// Possible corrupt firmware dump - file size too small for start address 0x%08x\n",fw->base); fw 5983 tools/finsig_vxworks.c bprintf("// file size = %.2fMB, should be %.2fMB\n", ((double)fw->size*4.0)/(1024.0*1024.0),((double)fw->fsize*4.0)/(1024.0*1024.0)); fw 5986 tools/finsig_vxworks.c if (fw->cam != 0) fw 5988 tools/finsig_vxworks.c bprintf("// %s\n",fw->cam); fw 5997 tools/finsig_vxworks.c if (fw->pid != 0) fw 5999 tools/finsig_vxworks.c bprintf("// PLATFORMID = %d (0x%04x) // Found @ 0x%08x\n",fw->pid,fw->pid,fw->pid_adr); fw 6002 tools/finsig_vxworks.c if (fw->maxram != 0) fw 6003 tools/finsig_vxworks.c bprintf("// MAXRAMADDR = 0x%08x\n",fw->maxram); fw 6005 tools/finsig_vxworks.c if (fw->memisostart != 0) fw 6007 tools/finsig_vxworks.c osig *o = find_match(fw->sv->makevals, "MEMISOSTART", fw->memisostart); fw 6008 tools/finsig_vxworks.c if (o && (o->val == fw->memisostart)) fw 6009 tools/finsig_vxworks.c bprintf("// MEMISOSTART = 0x%08x\n",fw->memisostart); fw 6011 tools/finsig_vxworks.c bprintf("// MEMISOSTART = 0x%08x (*** DOES NOT MATCH MAKEFILE VALUE 0x%08x***)\n",fw->memisostart,(o)?o->val:0); fw 6016 tools/finsig_vxworks.c uint32_t u = fw->base+fw->fsize*4; fw 6021 tools/finsig_vxworks.c bprintf("// %-8s 0x%08x - 0x%08x (%7d bytes)\n","ROM",fw->base,u,fw->fsize*4); fw 6022 tools/finsig_vxworks.c bprintf("// %-8s 0x%08x - 0x%08x copied from 0x%08x (%7d bytes)\n","RAM data",fw->data_start,fw->data_start+fw->data_len*4,fw->data_init_start,fw->data_len*4); fw 6044 tools/finsig_vxworks.c void write_funcs(firmware *fw, char *filename, func_entry *fns[], int (*compare)(const func_entry **p1, const func_entry **p2)) fw 6059 tools/finsig_vxworks.c osig* ostub2 = find_sig(fw->sv->stubs,fns[k]->name); fw 6080 tools/finsig_vxworks.c firmware fw; fw 6096 tools/finsig_vxworks.c fw.sv = new_stub_values(); fw 6097 tools/finsig_vxworks.c load_stubs(fw.sv, "stubs_entry_2.S", 1); fw 6098 tools/finsig_vxworks.c load_stubs_min(fw.sv); fw 6099 tools/finsig_vxworks.c load_modemap(fw.sv); fw 6100 tools/finsig_vxworks.c load_platform(fw.sv); fw 6101 tools/finsig_vxworks.c load_makefile(fw.sv); fw 6106 tools/finsig_vxworks.c load_firmware(&fw,argv[1],argv[2],(argc==5)?argv[4]:0, OS_VXWORKS); fw 6107 tools/finsig_vxworks.c find_eventprocs(&fw); fw 6108 tools/finsig_vxworks.c find_ptp_handlers(&fw); fw 6109 tools/finsig_vxworks.c find_builddate(&fw); fw 6110 tools/finsig_vxworks.c output_firmware_vals(&fw); fw 6119 tools/finsig_vxworks.c find_tasks(&fw); fw 6128 tools/finsig_vxworks.c find_matches(&fw, curr_name); fw 6129 tools/finsig_vxworks.c print_results(&fw,curr_name,k); fw 6137 tools/finsig_vxworks.c find_modemap(&fw); fw 6138 tools/finsig_vxworks.c find_stubs_min(&fw); fw 6139 tools/finsig_vxworks.c find_lib_vals(&fw); fw 6141 tools/finsig_vxworks.c find_platform_vals(&fw); fw 6142 tools/finsig_vxworks.c find_other_vals(&fw); fw 6152 tools/finsig_vxworks.c write_funcs(&fw, "funcs_by_name.csv", fns, compare_func_names); fw 6153 tools/finsig_vxworks.c write_funcs(&fw, "funcs_by_address.csv", fns, compare_func_addresses); fw 53 tools/firmware_load.c void addBufRange(firmware *fw, int o, int l) fw 56 tools/firmware_load.c n->p = fw->buf + o; fw 60 tools/firmware_load.c if (fw->br == 0) fw 62 tools/firmware_load.c fw->br = n; fw 66 tools/firmware_load.c fw->last->next = n; fw 68 tools/firmware_load.c fw->last = n; fw 72 tools/firmware_load.c void findRanges(firmware *fw) fw 77 tools/firmware_load.c fw->br = 0; fw->last = 0; fw 79 tools/firmware_load.c for (i = 0; i < fw->size; i++) fw 81 tools/firmware_load.c if (fw->buf[i] == 0xFFFFFFFF) // Possible start of block to skip fw 97 tools/firmware_load.c addBufRange(fw,j,k - j); fw 110 tools/firmware_load.c addBufRange(fw,j,k - j); fw 117 tools/firmware_load.c addBufRange(fw,j,i - j); fw 136 tools/firmware_load.c int idx_valid(firmware *fw, int i) fw 138 tools/firmware_load.c if ((i >= 0) && (i < fw->size)) fw 140 tools/firmware_load.c if ((fw->dryos_ver >= 51) && (fw->alt_base) && (i >= fw->size)) fw 142 tools/firmware_load.c i = ((i * 4) - (fw->alt_base - fw->base)) / 4; fw 143 tools/firmware_load.c if ((i >= 0) && (i < fw->size)) fw 146 tools/firmware_load.c if (fw->dryos_ver >= 50) fw 148 tools/firmware_load.c int i2 = ((i * 4) + (fw->base - fw->base2)) / 4; fw 149 tools/firmware_load.c if ((i2 >= 0) && (i2 < fw->size2)) fw 152 tools/firmware_load.c if (idx2adr(fw,i)>=fw->base && idx2adr(fw,i)<(fw->base+fw->size*4)) fw 159 tools/firmware_load.c uint32_t idx2adr(firmware *fw, int idx) fw 161 tools/firmware_load.c return fw->base + (idx << 2); fw 165 tools/firmware_load.c int adr2idx(firmware *fw, uint32_t adr) fw 167 tools/firmware_load.c if (adr < fw->base) fw 168 tools/firmware_load.c return -((fw->base - adr) >> 2); fw 170 tools/firmware_load.c return (adr - fw->base) >> 2; fw 174 tools/firmware_load.c char* adr2ptr(firmware *fw, uint32_t adr) fw 176 tools/firmware_load.c if ((fw->dryos_ver >= 51) && (fw->alt_base) && (adr >= fw->alt_base)) fw 178 tools/firmware_load.c return ((char*)fw->buf) + (adr - fw->alt_base); fw 180 tools/firmware_load.c if ((fw->dryos_ver >= 50) && (adr < fw->base)) fw 182 tools/firmware_load.c adr = (adr - fw->base2) + fw->base_copied; fw 184 tools/firmware_load.c return ((char*)fw->buf) + (adr - fw->base); fw 188 tools/firmware_load.c int idxcorr(firmware *fw, int idx) fw 194 tools/firmware_load.c b2oidx = adr2idx(fw, fw->base_copied); fw 195 tools/firmware_load.c b2idx = adr2idx(fw, fw->base2); fw 199 tools/firmware_load.c if (fw->base2) fw 201 tools/firmware_load.c if ((idx >= b2oidx) && (idx < b2oidx + fw->size2)) fw 223 tools/firmware_load.c uint32_t* fwadr(firmware *fw, int i) fw 225 tools/firmware_load.c if ((i >= 0) && (i < fw->size)) fw 226 tools/firmware_load.c return &fw->buf[i]; fw 227 tools/firmware_load.c if ((fw->dryos_ver >= 51) && (fw->alt_base) && (i >= fw->size)) fw 229 tools/firmware_load.c i = ((i * 4) - (fw->alt_base - fw->base)) / 4; fw 230 tools/firmware_load.c if ((i >= 0) && (i < fw->size)) fw 231 tools/firmware_load.c return &fw->buf[i]; fw 233 tools/firmware_load.c if ((fw->dryos_ver >= 50) && (i < 0)) fw 235 tools/firmware_load.c i = ((i * 4) + (fw->base - fw->base2)) / 4; fw 236 tools/firmware_load.c if ((i >= 0) && (i < fw->size2)) fw 237 tools/firmware_load.c return &fw->buf2[i]; fw 241 tools/firmware_load.c return &fw->buf[0]; fw 249 tools/firmware_load.c uint32_t fwval(firmware *fw, int i) fw 251 tools/firmware_load.c return *fwadr(fw,i); fw 255 tools/firmware_load.c int fwRd(firmware *fw, int i) fw 258 tools/firmware_load.c return (*fwadr(fw,i) & 0x0000F000) >> 12; fw 262 tools/firmware_load.c int fwRn(firmware *fw, int i) fw 265 tools/firmware_load.c return (*fwadr(fw,i) & 0x000F0000) >> 16; fw 269 tools/firmware_load.c int fwRnMOV(firmware *fw, int i) fw 272 tools/firmware_load.c return (*fwadr(fw,i) & 0x0000000F); fw 276 tools/firmware_load.c int fwOp2(firmware *fw, int i) fw 279 tools/firmware_load.c return (*fwadr(fw,i) & 0x00000FFF); fw 285 tools/firmware_load.c uint32_t LDR2adr(firmware *fw, int offset) fw 287 tools/firmware_load.c uint32_t inst = fwval(fw,offset); fw 289 tools/firmware_load.c uint32_t fadr = (inst & 0x00800000)?idx2adr(fw,offset+2)+offst:idx2adr(fw,offset+2)-offst; fw 294 tools/firmware_load.c uint32_t LDR2idx(firmware *fw, int offset) fw 296 tools/firmware_load.c return adr2idx(fw,LDR2adr(fw,offset)); fw 300 tools/firmware_load.c uint32_t LDR2val(firmware *fw, int offset) fw 302 tools/firmware_load.c return fwval(fw,adr2idx(fw,LDR2adr(fw,offset))); fw 309 tools/firmware_load.c uint32_t ADR2adr(firmware *fw, int offset) fw 311 tools/firmware_load.c uint32_t inst = fwval(fw,offset); fw 318 tools/firmware_load.c fadr = idx2adr(fw,offset+2)-offst; fw 321 tools/firmware_load.c fadr = idx2adr(fw,offset+2)+offst; fw 334 tools/firmware_load.c uint32_t ALUop2(firmware *fw, int offset) fw 336 tools/firmware_load.c uint32_t inst = fwval(fw,offset); fw 354 tools/firmware_load.c uint32_t ALUop2a(firmware *fw, int offset) fw 356 tools/firmware_load.c uint32_t inst = fwval(fw,offset); fw 383 tools/firmware_load.c int idxFollowBranch(firmware *fw, int fidx, int offset) fw 389 tools/firmware_load.c uint32_t inst = fwval(fw,fidx); fw 398 tools/firmware_load.c fidx = adr2idx(fw,LDR2val(fw,fidx)); fw 406 tools/firmware_load.c uint32_t followBranch(firmware *fw, uint32_t fadr, int offset) fw 411 tools/firmware_load.c uint32_t fidx = adr2idx(fw,fadr); // function index fw 413 tools/firmware_load.c uint32_t inst = fwval(fw,fidx); fw 418 tools/firmware_load.c if (idx_valid(fw,fidx+o+2)) fw 419 tools/firmware_load.c fadr = idx2adr(fw,fidx+o+2); fw 423 tools/firmware_load.c fadr = LDR2val(fw,fidx); fw 430 tools/firmware_load.c uint32_t followBranch2(firmware *fw, uint32_t fadr, int offset) fw 432 tools/firmware_load.c fadr = followBranch(fw, fadr, offset); fw 434 tools/firmware_load.c fadr = followBranch(fw, fadr, offset); fw 443 tools/firmware_load.c int isLDR_PC(firmware *fw, int offset) fw 445 tools/firmware_load.c return ((fwval(fw,offset) & 0xFE1F0000) == 0xE41F0000); fw 449 tools/firmware_load.c int isLDR_PC_cond(firmware *fw, int offset) fw 451 tools/firmware_load.c return ((fwval(fw,offset) & 0x0E1F0000) == 0x041F0000); fw 455 tools/firmware_load.c int isLDR_SP(firmware *fw, int offset) fw 457 tools/firmware_load.c return ((fwval(fw,offset) & 0xFFFF0000) == 0xE59D0000); fw 461 tools/firmware_load.c int isLDR(firmware *fw, int offset) fw 463 tools/firmware_load.c return ((fwval(fw,offset) & 0xFE100000) == 0xE4100000); fw 467 tools/firmware_load.c int isLDR_cond(firmware *fw, int offset) fw 469 tools/firmware_load.c return ((fwval(fw,offset) & 0x0E100000) == 0x04100000); fw 473 tools/firmware_load.c int isADR_PC(firmware *fw, int offset) fw 475 tools/firmware_load.c return ((fwval(fw,offset) & 0xFE0F0000) == 0xE20F0000); fw 479 tools/firmware_load.c int isADR_PC_cond(firmware *fw, int offset) fw 481 tools/firmware_load.c return ((fwval(fw,offset) & 0x0E0F0000) == 0x020F0000); fw 485 tools/firmware_load.c int isADR(firmware *fw, int offset) fw 487 tools/firmware_load.c return ((fwval(fw,offset) & 0xFE000000) == 0xE2000000); fw 491 tools/firmware_load.c int isLDMFD(firmware *fw, int offset) fw 493 tools/firmware_load.c return ((fwval(fw,offset) & 0xFFFF0000) == 0xE8BD0000); fw 497 tools/firmware_load.c int isLDMFD_PC(firmware *fw, int offset) fw 499 tools/firmware_load.c return ((fwval(fw,offset) & 0xFFFF8000) == 0xE8BD8000); fw 503 tools/firmware_load.c int isSTMFD(firmware *fw, int offset) fw 505 tools/firmware_load.c return ((fwval(fw,offset) & 0xFFFF0000) == 0xE92D0000); fw 509 tools/firmware_load.c int isSTMFD_LR(firmware *fw, int offset) fw 511 tools/firmware_load.c return ((fwval(fw,offset) & 0xFFFF4000) == 0xE92D4000); fw 515 tools/firmware_load.c int isSTR(firmware *fw, int offset) fw 517 tools/firmware_load.c return ((fwval(fw,offset) & 0xFE100000) == 0xE4000000); fw 521 tools/firmware_load.c int isSTR_cond(firmware *fw, int offset) fw 523 tools/firmware_load.c return ((fwval(fw,offset) & 0x0E100000) == 0x04000000); fw 527 tools/firmware_load.c int isBX(firmware *fw, int offset) fw 529 tools/firmware_load.c return ((fwval(fw,offset) & 0xFFFFFFF0) == 0xE12FFF10); fw 533 tools/firmware_load.c int isBX_cond(firmware *fw, int offset) fw 535 tools/firmware_load.c return ((fwval(fw,offset) & 0x0FFFFFF0) == 0x012FFF10); fw 539 tools/firmware_load.c int isBX_LR(firmware *fw, int offset) fw 541 tools/firmware_load.c return (fwval(fw,offset) == 0xE12FFF1E); fw 545 tools/firmware_load.c int isBLX(firmware *fw, int offset) fw 547 tools/firmware_load.c return ((fwval(fw,offset) & 0xFFFFFFF0) == 0xE12FFF30); fw 551 tools/firmware_load.c int isBL(firmware *fw, int offset) fw 553 tools/firmware_load.c return ((fwval(fw,offset) & 0xFF000000) == 0xEB000000); fw 557 tools/firmware_load.c int isBL_cond(firmware *fw, int offset) fw 559 tools/firmware_load.c return ((fwval(fw,offset) & 0x0F000000) == 0x0B000000); fw 563 tools/firmware_load.c int isBLEQ(firmware *fw, int offset) fw 565 tools/firmware_load.c return ((fwval(fw,offset) & 0xFF000000) == 0x0B000000); fw 569 tools/firmware_load.c int isB(firmware *fw, int offset) fw 571 tools/firmware_load.c return ((fwval(fw,offset) & 0xFF000000) == 0xEA000000); fw 575 tools/firmware_load.c int isBorBL(firmware *fw, int offset) fw 577 tools/firmware_load.c return ((fwval(fw,offset) & 0xFE000000) == 0xEA000000); fw 581 tools/firmware_load.c int isCMP(firmware *fw, int offset) fw 583 tools/firmware_load.c return ((fwval(fw,offset) & 0xFFF00000) == 0xE3500000); fw 587 tools/firmware_load.c int isMOV(firmware *fw, int offset) fw 589 tools/firmware_load.c return ((fwval(fw,offset) & 0xFFF00000) == 0xE1A00000); fw 593 tools/firmware_load.c int isMOV_immed(firmware *fw, int offset) fw 595 tools/firmware_load.c return ((fwval(fw,offset) & 0xFFF00000) == 0xE3A00000); fw 599 tools/firmware_load.c int isORR(firmware *fw, int offset) fw 601 tools/firmware_load.c return ((fwval(fw,offset) & 0xFFF00000) == 0xE3800000); fw 605 tools/firmware_load.c int isADD(firmware *fw, int offset) fw 607 tools/firmware_load.c return ((fwval(fw,offset) & 0xfff00000) == 0xe2800000); fw 611 tools/firmware_load.c int isSUB(firmware *fw, int offset) fw 613 tools/firmware_load.c return ((fwval(fw,offset) & 0xfff00000) == 0xe2400000); fw 618 tools/firmware_load.c int isASCIIstring(firmware *fw, uint32_t adr) fw 620 tools/firmware_load.c if (idx_valid(fw, adr2idx(fw, adr))) fw 622 tools/firmware_load.c unsigned char *p = (unsigned char*)adr2ptr(fw, adr); fw 642 tools/firmware_load.c int find_Nth_str(firmware *fw, char *str, int N) fw 649 tools/firmware_load.c BufRange *br = fw->br; fw 666 tools/firmware_load.c int find_str(firmware *fw, char *str) fw 668 tools/firmware_load.c return find_Nth_str(fw, str, 1); fw 673 tools/firmware_load.c uint32_t find_str_bytes(firmware *fw, char *str) fw 675 tools/firmware_load.c BufRange *p = fw->br; fw 681 tools/firmware_load.c if (strcmp(((char*)fw->buf)+k,str) == 0) fw 682 tools/firmware_load.c return fw->base+k; fw 692 tools/firmware_load.c int find_inst(firmware *fw, int (*inst)(firmware*,int), int idx, int len) fw 695 tools/firmware_load.c for (k = idx; (k < fw->size) && (k < idx + len); k++) fw 697 tools/firmware_load.c if (inst(fw, k)) fw 705 tools/firmware_load.c int find_inst_rev(firmware *fw, int (*inst)(firmware*,int), int idx, int len) fw 710 tools/firmware_load.c if (inst(fw, k)) fw 718 tools/firmware_load.c int find_Nth_inst(firmware *fw, int (*inst)(firmware*,int), int idx, int len, int N) fw 721 tools/firmware_load.c for (k = idx; (k < fw->size) && (k < idx + len); k++) fw 723 tools/firmware_load.c if (inst(fw, k)) fw 733 tools/firmware_load.c int find_Nth_inst_rev(firmware *fw, int (*inst)(firmware*,int), int idx, int len, int N) fw 738 tools/firmware_load.c if (inst(fw, k)) fw 753 tools/firmware_load.c int find_strptr_ref(firmware *fw, char *str) fw 755 tools/firmware_load.c uint32_t sadr = find_str_bytes(fw, str); // string address fw 759 tools/firmware_load.c for (k=0; k<fw->size; k++) fw 761 tools/firmware_load.c if (fwval(fw,k) == sadr) fw 763 tools/firmware_load.c uint32_t fadr = idx2adr(fw,k); // string pointer address fw 765 tools/firmware_load.c for (j=0; j<fw->size; j++) fw 767 tools/firmware_load.c if (isADR_PC_cond(fw,j) && (ADR2adr(fw,j) == fadr)) fw 771 tools/firmware_load.c else if (isLDR_PC_cond(fw,j) && (LDR2val(fw,j) == fadr)) fw 786 tools/firmware_load.c int find_str_ref(firmware *fw, char *str) fw 788 tools/firmware_load.c int k = find_str(fw, str); fw 789 tools/firmware_load.c if (k >= fw->lowest_idx) fw 791 tools/firmware_load.c uint32_t sadr = idx2adr(fw,k); // string address fw 792 tools/firmware_load.c for (k=0; k<fw->size; k++) fw 794 tools/firmware_load.c if (isADR_PC_cond(fw,k) && (ADR2adr(fw,k) == sadr)) fw 798 tools/firmware_load.c else if (isLDR_PC_cond(fw,k) && (LDR2val(fw,k) == sadr)) fw 808 tools/firmware_load.c int find_nxt_str_ref(firmware *fw, int str_adr, int ofst) fw 810 tools/firmware_load.c if (str_adr >= fw->lowest_idx) fw 813 tools/firmware_load.c uint32_t sadr = idx2adr(fw,str_adr); // string address fw 814 tools/firmware_load.c for (k=ofst+1; k<fw->size; k++) fw 816 tools/firmware_load.c if (isADR_PC_cond(fw,k) && (ADR2adr(fw,k) == sadr)) fw 820 tools/firmware_load.c else if (isLDR_PC_cond(fw,k) && (LDR2val(fw,k) == sadr)) fw 830 tools/firmware_load.c int find_nxt_str_ref_alt(firmware *fw, char *str, int ofst, int limit) fw 835 tools/firmware_load.c if (isADR_PC_cond(fw,k) && idx_valid(fw,adr2idx(fw,ADR2adr(fw,k))) && (strcmp(str,adr2ptr(fw,ADR2adr(fw,k))) == 0)) fw 839 tools/firmware_load.c else if (isLDR_PC_cond(fw,k) && idx_valid(fw,adr2idx(fw,LDR2val(fw,k))) && (strcmp(str,adr2ptr(fw,LDR2val(fw,k))) == 0)) fw 851 tools/firmware_load.c int find_BL(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 853 tools/firmware_load.c if (isBL(fw,k)) fw 855 tools/firmware_load.c int n = idxFollowBranch(fw, k, 0x01000001); fw 864 tools/firmware_load.c int find_B(firmware *fw, int k, uint32_t v1, uint32_t v2) fw 866 tools/firmware_load.c if (isB(fw,k)) fw 868 tools/firmware_load.c int n = idxFollowBranch(fw, k, 0x00000001); fw 881 tools/firmware_load.c int search_fw(firmware *fw, int (*func)(firmware*, int, uint32_t, uint32_t), uint32_t v1, uint32_t v2, int len) fw 883 tools/firmware_load.c BufRange *p = fw->br; fw 889 tools/firmware_load.c int rv = func(fw,k,v1,v2); fw 903 tools/firmware_load.c int search_fw_bytes(firmware *fw, int (*func)(firmware*, int)) fw 905 tools/firmware_load.c BufRange *p = fw->br; fw 911 tools/firmware_load.c if (func(fw,k)) fw 923 tools/firmware_load.c void load_firmware(firmware *fw, const char *filename, const char *base_addr, const char *alt_base_addr, int os_type) fw 936 tools/firmware_load.c fw->buf2 = 0; fw 937 tools/firmware_load.c fw->base2 = 0; fw 938 tools/firmware_load.c fw->size2 = 0; fw 940 tools/firmware_load.c fw->os_type = os_type; fw 944 tools/firmware_load.c fw->size = (ftell(f)+3)/4; fw 948 tools/firmware_load.c fw->base = strtoul(base_addr, NULL, 0); fw 950 tools/firmware_load.c fw->alt_base = strtoul(alt_base_addr, NULL, 0); fw 952 tools/firmware_load.c fw->alt_base = 0; fw 956 tools/firmware_load.c fw->buf = malloc((fw->size+32)*4); fw 957 tools/firmware_load.c k = fread(fw->buf, 4, fw->size, f); fw 961 tools/firmware_load.c memset(&fw->buf[fw->size],0xff,32*4); fw 964 tools/firmware_load.c findRanges(fw); fw 968 tools/firmware_load.c fw->main_offs = 0; fw 971 tools/firmware_load.c k = find_str(fw, "gaonisoy"); fw 974 tools/firmware_load.c fw->main_offs = 0x10000 / 4; fw 978 tools/firmware_load.c fw->real_dryos_ver = fw->dryos_ver = 0; fw 981 tools/firmware_load.c k = find_str(fw, "DRYOS version 2.3, release #"); fw 984 tools/firmware_load.c fw->real_dryos_ver = fw->dryos_ver = atoi(((char*)&fw->buf[k])+28); fw 985 tools/firmware_load.c fw->dryos_ver_str = (char*)&fw->buf[k]; fw 990 tools/firmware_load.c fw->firmware_ver_str = 0; fw 991 tools/firmware_load.c k = find_str(fw, "Firmware Ver "); fw 996 tools/firmware_load.c k = find_str(fw, "Firmware Version GM"); // ixus700 fw 1000 tools/firmware_load.c k = find_str(fw, "Firmware Version "); // ixus30/40 fw 1005 tools/firmware_load.c fw->firmware_ver_str = (char*)&fw->buf[k]; fw 1006 tools/firmware_load.c fw->fwver_idx = k; fw 1010 tools/firmware_load.c fw->fsize = -((int)fw->base)/4; fw 1011 tools/firmware_load.c if (fw->alt_base) fw->fsize = -((int)fw->alt_base)/4; fw 1012 tools/firmware_load.c fw->cam_idx = -1; fw 1013 tools/firmware_load.c fw->pid_adr = 0xffffffff; fw 1014 tools/firmware_load.c fw->cam = 0; fw 1015 tools/firmware_load.c fw->pid = 0; fw 1018 tools/firmware_load.c if (fw->dryos_ver > 59) fw->dryos_ver = 59; // UPDATE when support is added for higher DryOS versions fw 1019 tools/firmware_load.c switch (fw->dryos_ver) fw 1025 tools/firmware_load.c fw->cam_idx = adr2idx(fw,0xFFFE0110); fw 1026 tools/firmware_load.c fw->pid_adr = 0xFFFE0130; fw 1030 tools/firmware_load.c fw->cam_idx = adr2idx(fw,0xFFFE00D0); fw 1031 tools/firmware_load.c fw->pid_adr = 0xFFFE0130; fw 1034 tools/firmware_load.c fw->cam_idx = adr2idx(fw,(fw->base==0xFF000000)?0xFFF40170:0xFFFE0170); fw 1035 tools/firmware_load.c fw->pid_adr = (fw->base==0xFF000000)?0xFFF40040:0xFFFE0040; fw 1041 tools/firmware_load.c if (fw->alt_base) fw 1043 tools/firmware_load.c fw->cam_idx = adr2idx(fw,(fw->alt_base==0xFF000000)?0xFFF40190:0xFFFE0170); fw 1044 tools/firmware_load.c fw->pid_adr = (fw->alt_base==0xFF000000)?0xFFF40040:0xFFFE0040; fw 1045 tools/firmware_load.c if (idx_valid(fw,fw->cam_idx) && (strncmp((char*)fwadr(fw,fw->cam_idx),"Canon ",6) != 0)) fw 1046 tools/firmware_load.c fw->cam_idx = adr2idx(fw,(fw->alt_base==0xFF000000)?0xFFF40170:0xFFFE0170); fw 1050 tools/firmware_load.c fw->cam_idx = adr2idx(fw,(fw->base==0xFF000000)?0xFFF40190:0xFFFE0170); fw 1051 tools/firmware_load.c fw->pid_adr = (fw->base==0xFF000000)?0xFFF40040:0xFFFE0040; fw 1052 tools/firmware_load.c if (idx_valid(fw,fw->cam_idx) && (strncmp((char*)fwadr(fw,fw->cam_idx),"Canon ",6) != 0)) fw 1053 tools/firmware_load.c fw->cam_idx = adr2idx(fw,(fw->base==0xFF000000)?0xFFF40170:0xFFFE0170); fw 1057 tools/firmware_load.c fw->cam_idx = adr2idx(fw,(fw->base==0xFF010000)?0xFFF40170:0xFFFF0170); fw 1058 tools/firmware_load.c fw->pid_adr = (fw->base==0xFF010000)?0xFFF40040:0xFFFF0040; fw 1062 tools/firmware_load.c fw->cam_idx = adr2idx(fw,(fw->base==0xFF010000)?0xFFFE0170:0xFFFF0170); fw 1063 tools/firmware_load.c fw->pid_adr = (fw->base==0xFF010000)?0xFFFE0040:0xFFFF0040; fw 1067 tools/firmware_load.c fw->cam_idx = adr2idx(fw,(fw->base==0xFF010000)?0xFFFE03A0:0xFFFF03A0); fw 1068 tools/firmware_load.c fw->pid_adr = (fw->base==0xFF010000)?0xFFFE0270:0xFFFF0270; fw 1079 tools/firmware_load.c int k = adr2idx(fw,vx_name_offsets[i]); fw 1080 tools/firmware_load.c if (idx_valid(fw,k) && (strncmp((char*)fwadr(fw,k),"Canon ",6) == 0)) fw 1082 tools/firmware_load.c fw->cam_idx = k; fw 1083 tools/firmware_load.c fw->pid_adr = vx_pid_offsets[i]; fw 1090 tools/firmware_load.c if (idx_valid(fw,fw->cam_idx) && (strncmp((char*)fwadr(fw,fw->cam_idx),"Canon ",6) == 0)) fw 1092 tools/firmware_load.c fw->cam = (char*)fwadr(fw,fw->cam_idx); fw 1096 tools/firmware_load.c if (idx_valid(fw,adr2idx(fw,fw->pid_adr)) && (fw->pid_adr != 0xffffffff)) fw 1099 tools/firmware_load.c fw->pid = (fwval(fw,adr2idx(fw,fw->pid_adr)) >> ((fw->pid_adr & 2)?16:0)) & 0xFFFF; fw 1103 tools/firmware_load.c fw->maxram = 0; fw 1106 tools/firmware_load.c if (((fw->buf[0x10 + fw->main_offs] & 0xFFFFFF00) == 0xE3A00000) && (fw->buf[0x11 + fw->main_offs] == 0xEE060F12)) fw 1108 tools/firmware_load.c fw->maxram = (1 << (((fw->buf[0x10 + fw->main_offs] & 0x3E) >> 1) + 1)) - 1; fw 1110 tools/firmware_load.c else if (((fw->buf[0x14 + fw->main_offs] & 0xFFFFFF00) == 0xE3A00000) && (fw->buf[0x15 + fw->main_offs] == 0xEE060F12)) fw 1112 tools/firmware_load.c fw->maxram = (1 << (((fw->buf[0x14 + fw->main_offs] & 0x3E) >> 1) + 1)) - 1; fw 1119 tools/firmware_load.c if ((fw->buf[k] & 0xFFFF0FFF) == 0xEE060F12) // mcr 15, 0, rx, cr6, cr2, {0} fw 1121 tools/firmware_load.c fw->maxram = (1 << (((fw->buf[k-1] & 0x3E) >> 1) + 1)) - 1; fw 1128 tools/firmware_load.c fw->memisostart = 0; fw 1131 tools/firmware_load.c for (k=0 + fw->main_offs; k<(100 + fw->main_offs); k++) fw 1133 tools/firmware_load.c if (isLDR_PC(fw,k) && (LDR2val(fw,k) == 0x1900) && isLDR_PC(fw,k+6)) fw 1135 tools/firmware_load.c fw->memisostart = LDR2val(fw,k+6); fw 1143 tools/firmware_load.c if (isMOV_immed(fw,k) && (ALUop2(fw,k) == 0x1900) && isLDR_PC(fw,k+11)) fw 1145 tools/firmware_load.c fw->memisostart = LDR2val(fw,k+11); fw 1147 tools/firmware_load.c if (isLDR_PC(fw,k-1) && isLDR_PC(fw,k-4) && ((fwval(fw,k-2) & 0xFFF0FFF0) == 0xE1500000)) fw 1149 tools/firmware_load.c uint32_t fadr = LDR2val(fw,k-1); fw 1151 tools/firmware_load.c uint32_t eadr = LDR2val(fw,k-4); fw 1152 tools/firmware_load.c if ((fadr > fw->base) && (dadr < fw->base)) fw 1154 tools/firmware_load.c fw->data_start = dadr; fw 1155 tools/firmware_load.c fw->data_init_start = fadr; fw 1156 tools/firmware_load.c fw->data_len = eadr / 4; fw 1161 tools/firmware_load.c else if (isMOV_immed(fw,k) && (ALUop2(fw,k) == 0x1900) && isLDR_PC(fw,k-2) && isLDR_PC(fw,k-3)) fw 1164 tools/firmware_load.c fw->maxram = 0x1FFFFFF; // 32MB, difficult to find fw 1165 tools/firmware_load.c fw->memisostart = 0x1900 + LDR2val(fw,k-3); fw 1167 tools/firmware_load.c fw->data_init_start = LDR2val(fw,k-2); fw 1168 tools/firmware_load.c fw->data_start = 0x1900; fw 1169 tools/firmware_load.c j = idxFollowBranch(fw, k+6, 1); fw 1172 tools/firmware_load.c k = idxFollowBranch(fw, j+1, 0x01000001); fw 1175 tools/firmware_load.c if ( isLDR_PC(fw,k+3) ) fw 1177 tools/firmware_load.c uint32_t eadr = LDR2val(fw,k+3); fw 1178 tools/firmware_load.c if ( (eadr>0x1000) && (eadr< fw->memisostart - 0x1900) ) fw 1180 tools/firmware_load.c fw->data_len = (eadr - 0x1900) / 4; fw 1187 tools/firmware_load.c else if (isMOV_immed(fw,k) && (ALUop2(fw,k) == 0x1900) && isLDR_PC(fw,k-2) && fw 1188 tools/firmware_load.c ((fwval(fw,k-1) & 0xFFFF0F00) == 0xE50B0000) && isLDR_PC(fw,k+28) && isLDR_PC(fw,k+4) fw 1192 tools/firmware_load.c fw->memisostart = LDR2val(fw,k+28); fw 1194 tools/firmware_load.c fw->data_init_start = LDR2val(fw,k-2); fw 1195 tools/firmware_load.c fw->data_start = 0x1900; fw 1196 tools/firmware_load.c fw->data_len = (LDR2val(fw,k+4) - 0x1900) / 4; fw 1203 tools/firmware_load.c fw->ksys_idx = 0; fw 1204 tools/firmware_load.c fw->ksys = 0; fw 1205 tools/firmware_load.c fw->dancing_bits_idx = 0; fw 1206 tools/firmware_load.c fw->dancing_bits = 0; fw 1209 tools/firmware_load.c uint32_t ofst = (fw->main_offs)?0:adr2idx(fw,0xFFFF0000); // Offset of area to find dancing bits fw 1210 tools/firmware_load.c if (idx_valid(fw,ofst) && isB(fw,ofst) && isLDR_PC(fw,ofst+1)) fw 1213 tools/firmware_load.c ofst = adr2idx(fw,LDR2val(fw,ofst+1)); // Address of firmware encryption key fw 1214 tools/firmware_load.c if (idx_valid(fw,ofst)) fw 1216 tools/firmware_load.c fw->ksys_idx = ofst; fw 1217 tools/firmware_load.c fw->ksys = "? Not found, possible new firmware encryption key."; fw 1218 tools/firmware_load.c switch (fwval(fw,ofst)) fw 1222 tools/firmware_load.c case 0x70726964: fw->ksys = "d3 "; break; fw 1223 tools/firmware_load.c case 0x646C726F: fw->ksys = "d3enc"; break; fw 1224 tools/firmware_load.c case 0x774D450B: fw->ksys = "d4 "; break; fw 1225 tools/firmware_load.c case 0x80751A95: fw->ksys = "d4a "; break; fw 1226 tools/firmware_load.c case 0x76894368: fw->ksys = "d4b "; break; fw 1227 tools/firmware_load.c case 0x50838EF7: fw->ksys = "d4c "; break; fw 1228 tools/firmware_load.c case 0xCCE4D2E6: fw->ksys = "d4d "; break; fw 1229 tools/firmware_load.c case 0x66E0C6D2: fw->ksys = "d4e "; break; fw 1230 tools/firmware_load.c case 0xE1268DB4: fw->ksys = "d4f "; break; fw 1231 tools/firmware_load.c case 0x216EA8C8: fw->ksys = "d4g "; break; fw 1232 tools/firmware_load.c case 0x45264974: fw->ksys = "d4h "; break; fw 1233 tools/firmware_load.c case 0x666363FC: fw->ksys = "d4i "; break; fw 1234 tools/firmware_load.c case 0xAE8DB5AF: fw->ksys = "d4j "; break; fw 1240 tools/firmware_load.c if (idx_valid(fw,ofst)) fw 1242 tools/firmware_load.c for (i=0; i<VITALY && !fw->dancing_bits; i++) fw 1244 tools/firmware_load.c fw->dancing_bits = i+1; fw 1245 tools/firmware_load.c for (j=0; j<8 && fw->dancing_bits; j++) fw 1247 tools/firmware_load.c if ((fwval(fw,ofst+j) & 0xFF) != _chr_[i][j]) fw 1249 tools/firmware_load.c fw->dancing_bits = 0; fw 1253 tools/firmware_load.c if (!fw->dancing_bits) fw 1257 tools/firmware_load.c for (i=0; i<VITALY && !fw->dancing_bits; i++) fw 1259 tools/firmware_load.c fw->dancing_bits = i+1; fw 1260 tools/firmware_load.c for (j=0; j<8 && fw->dancing_bits; j++) fw 1262 tools/firmware_load.c if ((fwval(fw,ofst+j) & 0xFF) != _chr_[i][j]) fw 1264 tools/firmware_load.c fw->dancing_bits = 0; fw 1269 tools/firmware_load.c if (fw->dancing_bits != 0) fw 1274 tools/firmware_load.c for (k = ofst; (k>adr2idx(fw,0xFFFF0000)) && need_dance; k--) fw 1276 tools/firmware_load.c if (isLDR_PC(fw,k) && (LDR2val(fw,k) == idx2adr(fw,ofst))) fw 1278 tools/firmware_load.c j = find_inst_rev(fw,isSTMFD_LR,k-1,10); fw 1281 tools/firmware_load.c uint32_t fadr = idx2adr(fw,j); fw 1284 tools/firmware_load.c if (isB(fw,i)) fw 1286 tools/firmware_load.c uint32_t badr = followBranch(fw,idx2adr(fw,i),1); fw 1292 tools/firmware_load.c if (isLDR(fw,l) && isCMP(fw,l+1) && isBX_cond(fw,l+2)) fw 1305 tools/firmware_load.c fw->dancing_bits_idx = ofst; fw 1307 tools/firmware_load.c fw->dancing_bits = 0; fw 1315 tools/firmware_load.c fw->lowest_idx = 0; fw 1320 tools/firmware_load.c if (fw->dryos_ver >= 50) fw 1324 tools/firmware_load.c for (i=3 + fw->main_offs; i<(100 + fw->main_offs); i++) fw 1326 tools/firmware_load.c if (isLDR_PC(fw,i) && isLDR_PC(fw,i+1) && (isLDR_PC(fw,i+2))) fw 1328 tools/firmware_load.c uint32_t fadr = LDR2val(fw,i); fw 1329 tools/firmware_load.c uint32_t dadr = LDR2val(fw,i+1); fw 1330 tools/firmware_load.c uint32_t eadr = LDR2val(fw,i+2); fw 1331 tools/firmware_load.c if ((fadr > fw->base) && (dadr < fw->base)) fw 1333 tools/firmware_load.c fw->buf2 = &fw->buf[adr2idx(fw,fadr)]; fw 1334 tools/firmware_load.c fw->base2 = dadr; fw 1335 tools/firmware_load.c fw->base_copied = fadr; fw 1336 tools/firmware_load.c fw->size2 = (eadr - dadr) / 4; fw 1337 tools/firmware_load.c fw->lowest_idx = adr2idx(fw,fw->base2); fw 1348 tools/firmware_load.c for (i=dx; i<(100 + fw->main_offs); i++) fw 1350 tools/firmware_load.c if (isLDR_PC(fw,i) && isLDR_PC(fw,i+1) && (isLDR_PC(fw,i+2))) fw 1352 tools/firmware_load.c uint32_t fadr = LDR2val(fw,i); fw 1353 tools/firmware_load.c uint32_t dadr = LDR2val(fw,i+1); fw 1354 tools/firmware_load.c uint32_t eadr = LDR2val(fw,i+2); fw 1355 tools/firmware_load.c if ((fadr > fw->base) && (dadr < fw->base)) fw 1357 tools/firmware_load.c fw->data_start = dadr; fw 1358 tools/firmware_load.c fw->data_init_start = fadr; fw 1359 tools/firmware_load.c fw->data_len = (eadr - dadr) / 4; fw 82 tools/firmware_load.h void load_firmware(firmware *fw, const char *filename, const char *base_addr, const char *alt_base_addr, int os_type); fw 87 tools/firmware_load.h int idx_valid(firmware *fw, int i); fw 90 tools/firmware_load.h uint32_t idx2adr(firmware *fw, int idx); fw 91 tools/firmware_load.h int adr2idx(firmware *fw, uint32_t adr); fw 92 tools/firmware_load.h char* adr2ptr(firmware *fw, uint32_t adr); fw 95 tools/firmware_load.h int idxcorr(firmware *fw, int idx); fw 98 tools/firmware_load.h uint32_t* fwadr(firmware *fw, int i); fw 100 tools/firmware_load.h uint32_t fwval(firmware *fw, int i); fw 102 tools/firmware_load.h int fwRd(firmware *fw, int i); fw 103 tools/firmware_load.h int fwRn(firmware *fw, int i); fw 104 tools/firmware_load.h int fwRnMOV(firmware *fw, int i); fw 105 tools/firmware_load.h int fwOp2(firmware *fw, int i); fw 108 tools/firmware_load.h int idxFollowBranch(firmware *fw, int fidx, int offset); fw 109 tools/firmware_load.h uint32_t followBranch(firmware *fw, uint32_t fadr, int offset); fw 110 tools/firmware_load.h uint32_t followBranch2(firmware *fw, uint32_t fadr, int offset); fw 113 tools/firmware_load.h uint32_t LDR2adr(firmware *fw, int offset); fw 114 tools/firmware_load.h uint32_t LDR2idx(firmware *fw, int offset); fw 115 tools/firmware_load.h uint32_t LDR2val(firmware *fw, int offset); fw 116 tools/firmware_load.h uint32_t ADR2adr(firmware *fw, int offset); fw 117 tools/firmware_load.h uint32_t ALUop2(firmware *fw, int offset); fw 118 tools/firmware_load.h uint32_t ALUop2a(firmware *fw, int offset); fw 121 tools/firmware_load.h int isLDR_PC(firmware *fw, int offset); fw 122 tools/firmware_load.h int isLDR_SP(firmware *fw, int offset); fw 123 tools/firmware_load.h int isLDR_PC_cond(firmware *fw, int offset); fw 124 tools/firmware_load.h int isADR_PC(firmware *fw, int offset); fw 125 tools/firmware_load.h int isADR_PC_cond(firmware *fw, int offset); fw 126 tools/firmware_load.h int isLDMFD(firmware *fw, int offset); fw 127 tools/firmware_load.h int isLDMFD_PC(firmware *fw, int offset); fw 128 tools/firmware_load.h int isLDR(firmware *fw, int offset); fw 129 tools/firmware_load.h int isLDR_cond(firmware *fw, int offset); fw 130 tools/firmware_load.h int isADR(firmware *fw, int offset); fw 131 tools/firmware_load.h int isSTMFD(firmware *fw, int offset); fw 132 tools/firmware_load.h int isSTMFD_LR(firmware *fw, int offset); fw 133 tools/firmware_load.h int isSTR(firmware *fw, int offset); fw 134 tools/firmware_load.h int isSTR_cond(firmware *fw, int offset); fw 135 tools/firmware_load.h int isBX(firmware *fw, int offset); fw 136 tools/firmware_load.h int isBX_LR(firmware *fw, int offset); fw 137 tools/firmware_load.h int isBLX(firmware *fw, int offset); fw 138 tools/firmware_load.h int isBL(firmware *fw, int offset); fw 139 tools/firmware_load.h int isBL_cond(firmware *fw, int offset); fw 140 tools/firmware_load.h int isBLEQ(firmware *fw, int offset); fw 141 tools/firmware_load.h int isB(firmware *fw, int offset); fw 142 tools/firmware_load.h int isBorBL(firmware *fw, int offset); fw 143 tools/firmware_load.h int isCMP(firmware *fw, int offset); fw 144 tools/firmware_load.h int isMOV(firmware *fw, int offset); fw 145 tools/firmware_load.h int isMOV_immed(firmware *fw, int offset); fw 146 tools/firmware_load.h int isORR(firmware *fw, int offset); fw 147 tools/firmware_load.h int isADD(firmware *fw, int offset); fw 148 tools/firmware_load.h int isSUB(firmware *fw, int offset); fw 150 tools/firmware_load.h int isASCIIstring(firmware *fw, uint32_t adr); fw 153 tools/firmware_load.h int find_str(firmware *fw, char *str); fw 154 tools/firmware_load.h int find_Nth_str(firmware *fw, char *str, int N); fw 156 tools/firmware_load.h int find_inst(firmware *fw, int (*inst)(firmware*,int), int idx, int len); fw 158 tools/firmware_load.h int find_inst_rev(firmware *fw, int (*inst)(firmware*,int), int idx, int len); fw 160 tools/firmware_load.h int find_Nth_inst(firmware *fw, int (*inst)(firmware*,int), int idx, int len, int N); fw 162 tools/firmware_load.h int find_Nth_inst_rev(firmware *fw, int (*inst)(firmware*,int), int idx, int len, int N); fw 165 tools/firmware_load.h int find_strptr_ref(firmware *fw, char *str); fw 166 tools/firmware_load.h int find_str_ref(firmware *fw, char *str); fw 167 tools/firmware_load.h int find_nxt_str_ref(firmware *fw, int str_adr, int ofst); fw 168 tools/firmware_load.h int find_nxt_str_ref_alt(firmware *fw, char *str, int ofst, int limit); fw 171 tools/firmware_load.h int find_BL(firmware *fw, int k, uint32_t v1, uint32_t v2); fw 172 tools/firmware_load.h int find_B(firmware *fw, int k, uint32_t v1, uint32_t v2); fw 175 tools/firmware_load.h int search_fw(firmware *fw, int (*func)(firmware*, int, uint32_t, uint32_t), uint32_t v1, uint32_t v2, int len); fw 176 tools/firmware_load.h int search_fw_bytes(firmware *fw, int (*func)(firmware*, int)); fw 13 tools/firmware_load_ng.c static void addBufRange(firmware *fw, int o, int l) fw 16 tools/firmware_load_ng.c n->p = fw->buf32 + o; fw 20 tools/firmware_load_ng.c if (fw->br == 0) fw 22 tools/firmware_load_ng.c fw->br = n; fw 26 tools/firmware_load_ng.c fw->last->next = n; fw 28 tools/firmware_load_ng.c fw->last = n; fw 32 tools/firmware_load_ng.c static void findRanges(firmware *fw) fw 37 tools/firmware_load_ng.c fw->br = 0; fw->last = 0; fw 39 tools/firmware_load_ng.c for (i = 0; i < fw->size32; i++) fw 41 tools/firmware_load_ng.c if (fw->buf32[i] == 0xFFFFFFFF) // Possible start of block to skip fw 57 tools/firmware_load_ng.c addBufRange(fw,j,k - j); fw 70 tools/firmware_load_ng.c addBufRange(fw,j,k - j); fw 77 tools/firmware_load_ng.c addBufRange(fw,j,i - j); fw 83 tools/firmware_load_ng.c BufRange *getBufRangeForIndex(firmware *fw,int i) fw 85 tools/firmware_load_ng.c BufRange *br = fw->br; fw 99 tools/firmware_load_ng.c int find_Nth_str(firmware *fw, char *str, int N) fw 106 tools/firmware_load_ng.c BufRange *br = fw->br; fw 123 tools/firmware_load_ng.c int find_str(firmware *fw, char *str) fw 125 tools/firmware_load_ng.c return find_Nth_str(fw, str, 1); fw 132 tools/firmware_load_ng.c uint32_t find_next_bytes_range(firmware *fw, const void *bytes, size_t len, uint32_t start_adr, uint32_t max_adr) fw 135 tools/firmware_load_ng.c start_adr = fw->base; fw 137 tools/firmware_load_ng.c if(start_adr < fw->base || start_adr >= fw->base + fw->size8) { fw 142 tools/firmware_load_ng.c max_adr = fw->base + fw->size8-1; fw 144 tools/firmware_load_ng.c if(max_adr < fw->base || max_adr >= fw->base + fw->size8) { fw 148 tools/firmware_load_ng.c int end_k = (max_adr - fw->base); fw 149 tools/firmware_load_ng.c BufRange *p = getBufRangeForIndex(fw,(start_adr - fw->base)/4); fw 153 tools/firmware_load_ng.c int k = start_adr - fw->base; fw 159 tools/firmware_load_ng.c if (memcmp(fw->buf8+k,bytes,len) == 0) { fw 160 tools/firmware_load_ng.c return fw->base+k; fw 174 tools/firmware_load_ng.c int find_bytes_all(firmware *fw, const void *bytes, size_t len, uint32_t adr, uint32_t *result, int max) fw 177 tools/firmware_load_ng.c for(i=0,adr=find_next_bytes_range(fw,bytes,len,0,0); adr && (i < max); adr=find_next_bytes_range(fw,bytes,len,adr+len,0),i++) { fw 183 tools/firmware_load_ng.c uint32_t find_next_substr_bytes(firmware *fw, const char *str, uint32_t adr) fw 187 tools/firmware_load_ng.c return find_next_bytes_range(fw,str,strlen(str),adr,0); fw 190 tools/firmware_load_ng.c uint32_t find_next_str_bytes_range(firmware *fw, const char *str, uint32_t adr,uint32_t max_adr) fw 193 tools/firmware_load_ng.c return find_next_bytes_range(fw,str,strlen(str)+1,adr,max_adr); fw 197 tools/firmware_load_ng.c uint32_t find_str_bytes_main_fw(firmware *fw, const char *str) fw 202 tools/firmware_load_ng.c if(fw->base + fw->size8 - 4096 > fw->rom_code_search_max_adr) { fw 203 tools/firmware_load_ng.c max_adr = fw->rom_code_search_max_adr + 4096; fw 205 tools/firmware_load_ng.c max_adr = fw->base + fw->size8; fw 208 tools/firmware_load_ng.c return find_next_bytes_range(fw,str,strlen(str)+1,fw->rom_code_search_min_adr,max_adr); fw 211 tools/firmware_load_ng.c uint32_t find_next_str_bytes(firmware *fw, const char *str, uint32_t adr) fw 214 tools/firmware_load_ng.c return find_next_bytes_range(fw,str,strlen(str)+1,adr,0); fw 219 tools/firmware_load_ng.c uint32_t find_str_bytes(firmware *fw, const char *str) fw 221 tools/firmware_load_ng.c return find_next_str_bytes(fw,str,fw->base); fw 224 tools/firmware_load_ng.c int isASCIIstring(firmware *fw, uint32_t adr) fw 226 tools/firmware_load_ng.c unsigned char *p = (unsigned char*)adr2ptr_with_data(fw, adr); fw 245 tools/firmware_load_ng.c adr_range_t *adr_get_range(firmware *fw, uint32_t adr) fw 248 tools/firmware_load_ng.c adr_range_t *r=fw->adr_ranges; fw 249 tools/firmware_load_ng.c for(i=0;i<fw->adr_range_count;i++) { fw 259 tools/firmware_load_ng.c int adr_get_range_type(firmware *fw, uint32_t adr) fw 261 tools/firmware_load_ng.c adr_range_t *r=adr_get_range(fw,adr); fw 268 tools/firmware_load_ng.c uint32_t ptr2adr(firmware *fw, uint8_t *ptr) fw 271 tools/firmware_load_ng.c return (ptr-fw->buf8)+fw->base; fw 274 tools/firmware_load_ng.c uint8_t* adr2ptr(firmware *fw, uint32_t adr) fw 276 tools/firmware_load_ng.c adr_range_t *r=adr_get_range(fw,adr); fw 289 tools/firmware_load_ng.c uint8_t* adr2ptr_with_data(firmware *fw, uint32_t adr) fw 291 tools/firmware_load_ng.c adr_range_t *r=adr_get_range(fw,adr); fw 345 tools/firmware_load_ng.c int adr_is_var(firmware *fw, uint32_t adr) fw 347 tools/firmware_load_ng.c return (adr > fw->data_start && adr < fw->memisostart); fw 351 tools/firmware_load_ng.c int adr_is_main_fw_code(firmware *fw, uint32_t adr) fw 353 tools/firmware_load_ng.c int adr_type = adr_get_range_type(fw,adr); fw 360 tools/firmware_load_ng.c if(adr < fw->rom_code_search_min_adr || adr > fw->rom_code_search_max_adr) { fw 369 tools/firmware_load_ng.c uint32_t find_u32_adr_range(firmware *fw, uint32_t val, uint32_t start,uint32_t maxadr) fw 373 tools/firmware_load_ng.c start=fw->base; fw 379 tools/firmware_load_ng.c uint32_t *p=(uint32_t *)adr2ptr(fw,start); fw 386 tools/firmware_load_ng.c p_end = (uint32_t *)adr2ptr(fw,maxadr); fw 388 tools/firmware_load_ng.c p_end = fw->buf32 + fw->size32 - 1; fw 393 tools/firmware_load_ng.c return ptr2adr(fw,(uint8_t *)p); fw 401 tools/firmware_load_ng.c uint32_t find_u32_adr(firmware *fw, uint32_t val, uint32_t start) fw 403 tools/firmware_load_ng.c return find_u32_adr_range(fw,val,start, fw->base + (fw->size8 -4)); fw 407 tools/firmware_load_ng.c uint32_t fw_u32(firmware *fw, uint32_t adr) fw 409 tools/firmware_load_ng.c uint32_t *p=(uint32_t *)adr2ptr(fw,adr); fw 418 tools/firmware_load_ng.c int fw_memcmp(firmware *fw, uint32_t adr,const void *cmp, size_t n) fw 420 tools/firmware_load_ng.c uint32_t *p=(uint32_t *)adr2ptr(fw,adr); fw 424 tools/firmware_load_ng.c if(n >= fw->size8 - (adr - fw->base)) { fw 658 tools/firmware_load_ng.c uint32_t* LDR_PC2valptr_thumb(firmware *fw, cs_insn *insn) fw 667 tools/firmware_load_ng.c return (uint32_t *)adr2ptr(fw,adr); fw 670 tools/firmware_load_ng.c uint32_t* LDR_PC2valptr_arm(firmware *fw, cs_insn *insn) fw 679 tools/firmware_load_ng.c return (uint32_t *)adr2ptr(fw,adr); fw 682 tools/firmware_load_ng.c uint32_t* LDR_PC2valptr(firmware *fw, cs_insn *insn) fw 685 tools/firmware_load_ng.c return LDR_PC2valptr_arm(fw,insn); fw 687 tools/firmware_load_ng.c return LDR_PC2valptr_thumb(fw,insn); fw 692 tools/firmware_load_ng.c uint32_t LDR_PC2adr(firmware *fw, cs_insn *insn) fw 705 tools/firmware_load_ng.c uint32_t ADRx2adr(firmware *fw, cs_insn *insn) fw 729 tools/firmware_load_ng.c uint32_t ADR2adr(firmware *fw, cs_insn *insn) fw 744 tools/firmware_load_ng.c uint32_t* ADR2valptr(firmware *fw, cs_insn *insn) fw 746 tools/firmware_load_ng.c uint32_t adr=ADR2adr(fw,insn); fw 747 tools/firmware_load_ng.c return (uint32_t *)adr2ptr(fw,adr); fw 751 tools/firmware_load_ng.c uint32_t LDR_PC2val(firmware *fw, cs_insn *insn) fw 753 tools/firmware_load_ng.c uint32_t *p=LDR_PC2valptr(fw,insn); fw 761 tools/firmware_load_ng.c uint32_t LDR_PC_PC_target(firmware *fw, cs_insn *insn) fw 766 tools/firmware_load_ng.c return LDR_PC2val(fw,insn); fw 770 tools/firmware_load_ng.c uint32_t B_target(firmware *fw, cs_insn *insn) fw 780 tools/firmware_load_ng.c uint32_t CBx_target(firmware *fw, cs_insn *insn) fw 789 tools/firmware_load_ng.c uint32_t BLXimm_target(firmware *fw, cs_insn *insn) fw 799 tools/firmware_load_ng.c uint32_t BL_target(firmware *fw, cs_insn *insn) fw 808 tools/firmware_load_ng.c uint32_t B_BL_target(firmware *fw, cs_insn *insn) fw 818 tools/firmware_load_ng.c uint32_t B_BL_BLXimm_target(firmware *fw, cs_insn *insn) fw 831 tools/firmware_load_ng.c int get_TBx_PC_info(firmware *fw,iter_state_t *is, tbx_info_t *ti) fw 861 tools/firmware_load_ng.c fw_disasm_iter_single(fw,adr_hist_get(&is->ah,i)); // thumb state comes from hist fw 862 tools/firmware_load_ng.c if(fw->is->insn->id == ARM_INS_B && fw->is->insn->detail->arm.cc == ARM_CC_HS) { fw 867 tools/firmware_load_ng.c if(found_bhs && fw->is->insn->id == ARM_INS_CMP) { fw 869 tools/firmware_load_ng.c if(fw->is->insn->detail->arm.operands[0].reg == i_reg fw 870 tools/firmware_load_ng.c || fw->is->insn->detail->arm.operands[1].type == ARM_OP_IMM) { fw 871 tools/firmware_load_ng.c max_count = fw->is->insn->detail->arm.operands[1].imm; fw 883 tools/firmware_load_ng.c uint8_t *p=adr2ptr(fw,adr); fw 928 tools/firmware_load_ng.c iter_state_t *disasm_iter_new(firmware *fw, uint32_t adr) fw 933 tools/firmware_load_ng.c is->insn=cs_malloc(fw->cs_handle_arm); fw 934 tools/firmware_load_ng.c disasm_iter_init(fw,is,adr); fw 948 tools/firmware_load_ng.c int disasm_iter_set(firmware *fw, iter_state_t *is, uint32_t adr) fw 952 tools/firmware_load_ng.c is->cs_handle=fw->cs_handle_thumb; fw 957 tools/firmware_load_ng.c is->cs_handle=fw->cs_handle_arm; fw 968 tools/firmware_load_ng.c uint8_t *p=adr2ptr(fw,adr); fw 979 tools/firmware_load_ng.c is->size=fw->size8 - (p-fw->buf8); fw 985 tools/firmware_load_ng.c int disasm_iter_init(firmware *fw, iter_state_t *is, uint32_t adr) fw 988 tools/firmware_load_ng.c return disasm_iter_set(fw,is,adr); fw 994 tools/firmware_load_ng.c int disasm_iter(firmware *fw, iter_state_t *is) fw 1008 tools/firmware_load_ng.c int disasm_iter_redo(firmware *fw,iter_state_t *is) { fw 1025 tools/firmware_load_ng.c int fw_disasm_iter_start(firmware *fw, uint32_t adr) fw 1027 tools/firmware_load_ng.c return disasm_iter_init(fw,fw->is,adr); fw 1031 tools/firmware_load_ng.c int fw_disasm_iter(firmware *fw) fw 1033 tools/firmware_load_ng.c return disasm_iter(fw,fw->is); fw 1038 tools/firmware_load_ng.c int fw_disasm_iter_single(firmware *fw, uint32_t adr) fw 1040 tools/firmware_load_ng.c fw_disasm_iter_start(fw,adr); fw 1041 tools/firmware_load_ng.c return fw_disasm_iter(fw); fw 1051 tools/firmware_load_ng.c size_t fw_disasm_adr(firmware *fw, uint32_t adr, unsigned count, cs_insn **insn) fw 1053 tools/firmware_load_ng.c uint8_t *p=adr2ptr(fw,adr); fw 1058 tools/firmware_load_ng.c return cs_disasm(fw->cs_handle, p, fw->size8 - (p-fw->buf8), adr, count, insn); fw 1072 tools/firmware_load_ng.c uint32_t fw_search_insn(firmware *fw, iter_state_t *is, search_insn_fn f, uint32_t v1, void *udata, uint32_t adr_end) fw 1075 tools/firmware_load_ng.c adr_range_t *r_start=adr_get_range(fw,adr_start); fw 1084 tools/firmware_load_ng.c adr_end = fw->rom_code_search_max_adr; fw 1089 tools/firmware_load_ng.c adr_range_t *r_end=adr_get_range(fw,adr_end); fw 1107 tools/firmware_load_ng.c if(disasm_iter(fw,is)) { fw 1108 tools/firmware_load_ng.c uint32_t r=f(fw,is,v1,udata); fw 1117 tools/firmware_load_ng.c if(!disasm_iter_init(fw,is,adr|is->thumb)) { fw 1125 tools/firmware_load_ng.c BufRange *br=fw->br; fw 1129 tools/firmware_load_ng.c uint32_t *p_adr=(uint32_t *)adr2ptr(fw,(uint32_t)adr); fw 1131 tools/firmware_load_ng.c uint32_t adr_chunk_end = ptr2adr(fw,(uint8_t*)br_end); fw 1137 tools/firmware_load_ng.c adr=ptr2adr(fw,(uint8_t *)br->p); fw 1138 tools/firmware_load_ng.c if(!disasm_iter_init(fw,is,(uint32_t)adr)) { fw 1141 tools/firmware_load_ng.c p_adr=(uint32_t *)adr2ptr(fw,(uint32_t)adr); fw 1145 tools/firmware_load_ng.c if(disasm_iter(fw,is)) { fw 1146 tools/firmware_load_ng.c uint32_t r=f(fw,is,v1,udata); fw 1155 tools/firmware_load_ng.c if(!disasm_iter_init(fw,is,adr|is->thumb)) { fw 1170 tools/firmware_load_ng.c uint32_t search_disasm_const_ref(firmware *fw, iter_state_t *is, uint32_t val, void *unused) fw 1173 tools/firmware_load_ng.c uint32_t av=ADRx2adr(fw,is->insn); fw 1181 tools/firmware_load_ng.c uint32_t *pv=LDR_PC2valptr(fw,is->insn); fw 1192 tools/firmware_load_ng.c uint32_t search_disasm_str_ref(firmware *fw, iter_state_t *is, uint32_t val, void *udata) fw 1196 tools/firmware_load_ng.c uint32_t av=ADRx2adr(fw,is->insn); fw 1199 tools/firmware_load_ng.c char *cmp=(char *)adr2ptr_with_data(fw,av); fw 1205 tools/firmware_load_ng.c uint32_t *pv=LDR_PC2valptr(fw,is->insn); fw 1208 tools/firmware_load_ng.c char *cmp=(char *)adr2ptr_with_data(fw,*pv); fw 1219 tools/firmware_load_ng.c uint32_t search_disasm_calls(firmware *fw, iter_state_t *is, uint32_t val, void *unused) fw 1222 tools/firmware_load_ng.c uint32_t sub=get_branch_call_insn_target(fw,is); fw 1232 tools/firmware_load_ng.c int search_calls_multi_end(firmware *fw, iter_state_t *is, uint32_t adr) { fw 1240 tools/firmware_load_ng.c uint32_t search_disasm_calls_multi(firmware *fw, iter_state_t *is, uint32_t unused, void *userdata) fw 1243 tools/firmware_load_ng.c uint32_t sub=get_branch_call_insn_target(fw,is); fw 1247 tools/firmware_load_ng.c return data->fn(fw,is,sub); fw 1265 tools/firmware_load_ng.c int get_call_const_args(firmware *fw, iter_state_t *is_init, int max_backtrack, uint32_t *res) fw 1300 tools/firmware_load_ng.c fw_disasm_iter_single(fw,adr_hist_get(&is_init->ah,i)); // thumb state comes from hist fw 1307 tools/firmware_load_ng.c arm_insn insn_id = fw->is->insn->id; fw 1313 tools/firmware_load_ng.c && fw->is->insn->detail->arm.cc == ARM_CC_AL) { fw 1319 tools/firmware_load_ng.c if(fw->is->insn->detail->arm.operands[0].type != ARM_OP_REG) { fw 1322 tools/firmware_load_ng.c arm_reg rd = fw->is->insn->detail->arm.operands[0].reg; fw 1337 tools/firmware_load_ng.c uint32_t *pv=LDR_PC2valptr(fw,fw->is->insn); fw 1344 tools/firmware_load_ng.c uint32_t v=ADRx2adr(fw,fw->is->insn); // assumes ADR doesn't generate 0, probably safe fw 1353 tools/firmware_load_ng.c && fw->is->insn->detail->arm.operands[1].type == ARM_OP_IMM) { fw 1354 tools/firmware_load_ng.c res[rd_i] += fw->is->insn->detail->arm.operands[1].imm; fw 1357 tools/firmware_load_ng.c } else if(isADDx_imm(fw->is->insn)) { fw 1358 tools/firmware_load_ng.c res[rd_i] += fw->is->insn->detail->arm.operands[1].imm; fw 1363 tools/firmware_load_ng.c } else if(isSUBx_imm(fw->is->insn)) { fw 1364 tools/firmware_load_ng.c res[rd_i] = (int)(res[rd_i]) - fw->is->insn->detail->arm.operands[1].imm; fw 1390 tools/firmware_load_ng.c uint32_t get_direct_jump_target(firmware *fw, iter_state_t *is_init) fw 1392 tools/firmware_load_ng.c uint32_t adr=B_target(fw,is_init->insn); fw 1397 tools/firmware_load_ng.c adr=LDR_PC_PC_target(fw,is_init->insn); fw 1408 tools/firmware_load_ng.c if(!fw_disasm_iter_single(fw,is_init->adr | is_init->thumb)) { fw 1409 tools/firmware_load_ng.c fprintf(stderr,"get_direct_jump_target: disasm single failed at 0x%"PRIx64"\n",fw->is->insn->address); fw 1413 tools/firmware_load_ng.c if(!(fw->is->insn->id == ARM_INS_MOVT fw 1414 tools/firmware_load_ng.c && fw->is->insn->detail->arm.operands[0].reg == ARM_REG_IP fw 1415 tools/firmware_load_ng.c && fw->is->insn->detail->arm.operands[1].type == ARM_OP_IMM)) { fw 1421 tools/firmware_load_ng.c adr = (fw->is->insn->detail->arm.operands[1].imm << 16) | (adr&0xFFFF); fw 1422 tools/firmware_load_ng.c if(!fw_disasm_iter(fw)) { fw 1423 tools/firmware_load_ng.c fprintf(stderr,"get_direct_jump_target: disasm 2 failed at 0x%"PRIx64"\n",fw->is->insn->address); fw 1427 tools/firmware_load_ng.c if(fw->is->insn->id == ARM_INS_BX fw 1428 tools/firmware_load_ng.c && fw->is->insn->detail->arm.operands[0].type == ARM_OP_REG fw 1429 tools/firmware_load_ng.c && fw->is->insn->detail->arm.operands[0].reg == ARM_REG_IP) { fw 1441 tools/firmware_load_ng.c uint32_t get_branch_call_insn_target(firmware *fw, iter_state_t *is) fw 1443 tools/firmware_load_ng.c uint32_t adr=B_BL_target(fw,is->insn); fw 1449 tools/firmware_load_ng.c adr=CBx_target(fw,is->insn); fw 1455 tools/firmware_load_ng.c adr=BLXimm_target(fw,is->insn); fw 1464 tools/firmware_load_ng.c adr=LDR_PC_PC_target(fw,is->insn); fw 1487 tools/firmware_load_ng.c int find_and_get_var_ldr(firmware *fw, fw 1495 tools/firmware_load_ng.c if(!insn_match_find_next(fw,is,max_search_insns,match_ldr_pc)) { fw 1502 tools/firmware_load_ng.c r.adr_base=LDR_PC2val(fw,is->insn); fw 1507 tools/firmware_load_ng.c if(!disasm_iter(fw,is)) { fw 1528 tools/firmware_load_ng.c if(!disasm_iter(fw,is)) { fw 1584 tools/firmware_load_ng.c int check_simple_func(firmware *fw, uint32_t adr, int match_ftype, simple_func_desc_t *info) fw 1600 tools/firmware_load_ng.c if(!fw_disasm_iter_single(fw,adr)) { fw 1606 tools/firmware_load_ng.c if(insn_match_any(fw->is->insn,match_mov_r0_imm)) { fw 1607 tools/firmware_load_ng.c found_val = fw->is->insn->detail->arm.operands[1].imm; fw 1610 tools/firmware_load_ng.c if(!fw_disasm_iter(fw)) { fw 1616 tools/firmware_load_ng.c if(!isRETx(fw->is->insn)) { fw 1641 tools/firmware_load_ng.c uint32_t find_last_call_from_func(firmware *fw, iter_state_t *is,int min_insns, int max_insns) fw 1647 tools/firmware_load_ng.c if(!disasm_iter(fw,is)) { fw 1669 tools/firmware_load_ng.c last_adr=get_branch_call_insn_target(fw,is); fw 1688 tools/firmware_load_ng.c if(!disasm_iter(fw,is)) { fw 1693 tools/firmware_load_ng.c return get_branch_call_insn_target(fw,is); fw 1750 tools/firmware_load_ng.c int insn_match_seq(firmware *fw, iter_state_t *is, const insn_match_t *match) fw 1753 tools/firmware_load_ng.c while(match->id != ARM_INS_ENDING && disasm_iter(fw,is) && insn_match(is->insn,match)) { fw 1848 tools/firmware_load_ng.c int insn_match_find_next(firmware *fw, iter_state_t *is, int max_insns, const insn_match_t *match) fw 1853 tools/firmware_load_ng.c if(!disasm_iter(fw,is)) { fw 1867 tools/firmware_load_ng.c int insn_match_find_nth(firmware *fw, iter_state_t *is, int max_insns, int num_to_match, const insn_match_t *match) fw 1873 tools/firmware_load_ng.c if(!disasm_iter(fw,is)) { fw 1895 tools/firmware_load_ng.c int insn_match_find_next_seq(firmware *fw, iter_state_t *is, int max_insns, const insn_match_t *match) fw 1901 tools/firmware_load_ng.c while(m->id != ARM_INS_ENDING && disasm_iter(fw,is) && insn_match(is->insn,m)) { fw 1920 tools/firmware_load_ng.c int fw_search_bytes(firmware *fw, search_bytes_fn func) fw 1922 tools/firmware_load_ng.c BufRange *p = fw->br; fw 1928 tools/firmware_load_ng.c if (func(fw,k)) fw 1939 tools/firmware_load_ng.c void fw_add_adr_range(firmware *fw, uint32_t start, uint32_t end, uint32_t src_start, int type, int flags) fw 1941 tools/firmware_load_ng.c if(fw->adr_range_count == FW_MAX_ADR_RANGES) { fw 1945 tools/firmware_load_ng.c if(src_start < fw->base) { fw 1946 tools/firmware_load_ng.c fprintf(stderr,"fw_add_adr_range: src_start 0x%08x < base 0x%08x\n",src_start,fw->base); fw 1949 tools/firmware_load_ng.c if(src_start >= fw->base+fw->size8) { fw 1950 tools/firmware_load_ng.c fprintf(stderr,"fw_add_adr_range: src_start 0x%08x outside dump end 0x%08x\n",src_start,fw->base+fw->size8); fw 1962 tools/firmware_load_ng.c if(len > fw->size8 - (start - fw->base)) { fw 1966 tools/firmware_load_ng.c adr_range_t *r=&fw->adr_ranges[fw->adr_range_count]; fw 1973 tools/firmware_load_ng.c r->buf=fw->buf8 + (r->src_start - fw->base); fw 1975 tools/firmware_load_ng.c fw->adr_range_count++; fw 1978 tools/firmware_load_ng.c void find_dryos_vers(firmware *fw) fw 1981 tools/firmware_load_ng.c fw->dryos_ver_count = find_bytes_all(fw,sig,strlen(sig),fw->base,fw->dryos_ver_list,FW_MAX_DRYOS_VERS); fw 1991 tools/firmware_load_ng.c if(fw->dryos_ver_count) { fw 1992 tools/firmware_load_ng.c if(fw->dryos_ver_count == FW_MAX_DRYOS_VERS) { fw 2000 tools/firmware_load_ng.c uint32_t maxadr = (fw->rom_code_search_max_adr - 0x800000 > fw->base)?fw->base + 0x800000:fw->rom_code_search_max_adr; fw 2003 tools/firmware_load_ng.c for(i=0; i<fw->dryos_ver_count; i++) { fw 2006 tools/firmware_load_ng.c uint32_t adr = find_u32_adr_range(fw,fw->dryos_ver_list[i],fw->rom_code_search_min_adr,maxadr); fw 2017 tools/firmware_load_ng.c fw->dryos_ver_str = (char *)adr2ptr(fw,fw->dryos_ver_list[match_i]); fw 2018 tools/firmware_load_ng.c fw->dryos_ver = atoi((char *)adr2ptr(fw,fw->dryos_ver_list[match_i]+strlen(sig))); fw 2019 tools/firmware_load_ng.c fw->dryos_ver_adr = fw->dryos_ver_list[match_i]; fw 2020 tools/firmware_load_ng.c fw->dryos_ver_ref_adr = min_adr; fw 2023 tools/firmware_load_ng.c fw->dryos_ver=0; fw 2024 tools/firmware_load_ng.c fw->dryos_ver_str=NULL; fw 2025 tools/firmware_load_ng.c fw->dryos_ver_adr=0; fw 2030 tools/firmware_load_ng.c void firmware_load(firmware *fw, const char *filename, uint32_t base_adr,int fw_arch) fw 2039 tools/firmware_load_ng.c fw->size8 = ftell(f); fw 2043 tools/firmware_load_ng.c if(fw->size8&3) { fw 2044 tools/firmware_load_ng.c fprintf(stderr,"WARNING: dump size %d is not divisible by 4, truncating\n",fw->size8); fw 2045 tools/firmware_load_ng.c fw->size8 &= ~3; fw 2049 tools/firmware_load_ng.c if(0xFFFFFFFF - base_adr < fw->size8) { fw 2050 tools/firmware_load_ng.c fprintf(stderr,"adjusted dump size 0x%08x->",fw->size8); fw 2051 tools/firmware_load_ng.c fw->size8 = 0xFFFFFFFC - base_adr; fw 2052 tools/firmware_load_ng.c fprintf(stderr,"0x%08x\n",fw->size8); fw 2055 tools/firmware_load_ng.c fw->arch=fw_arch; fw 2056 tools/firmware_load_ng.c fw->size32=fw->size8/4; fw 2058 tools/firmware_load_ng.c fw->base = base_adr; fw 2060 tools/firmware_load_ng.c fw->buf8 = malloc(fw->size8); fw 2061 tools/firmware_load_ng.c if(!fw->buf8) { fw 2062 tools/firmware_load_ng.c fprintf(stderr,"malloc %d failed\n",fw->size8); fw 2065 tools/firmware_load_ng.c fread(fw->buf8, 1, fw->size8, f); fw 2067 tools/firmware_load_ng.c findRanges(fw); fw 2069 tools/firmware_load_ng.c fw->adr_range_count=0; fw 2071 tools/firmware_load_ng.c fw_add_adr_range(fw,fw->base, fw->base+fw->size8, fw->base, ADR_RANGE_ROM, ADR_RANGE_FL_NONE); fw 2073 tools/firmware_load_ng.c fw->main_offs = 0; fw 2074 tools/firmware_load_ng.c int k = find_str(fw, "gaonisoy"); fw 2078 tools/firmware_load_ng.c if(find_str(fw,"VxWorks") == -1) { fw 2083 tools/firmware_load_ng.c if(fw_memcmp(fw,fw->base+0x20004,"gaonisoy",8) == 0) { fw 2084 tools/firmware_load_ng.c fw->main_offs = 0x20000; fw 2085 tools/firmware_load_ng.c } else if (fw_memcmp(fw,fw->base+0x10004,"gaonisoy",8) == 0) { // newer armv5 firmwares base ff81000 start at ff820000 fw 2086 tools/firmware_load_ng.c fw->main_offs = 0x10000; fw 2092 tools/firmware_load_ng.c fw->rom_code_search_min_adr = fw->base + fw->main_offs; // 0 if not found fw 2093 tools/firmware_load_ng.c fw->rom_code_search_max_adr=fw->base+fw->size8 - 4; // default == end of fw, may be adjusted by firmware_init_data_ranges fw 2095 tools/firmware_load_ng.c find_dryos_vers(fw); fw 2097 tools/firmware_load_ng.c fw->firmware_ver_str = 0; fw 2098 tools/firmware_load_ng.c k = find_str(fw, "Firmware Ver "); fw 2101 tools/firmware_load_ng.c fw->firmware_ver_str = (char *)fw->buf8 + k*4; fw 2104 tools/firmware_load_ng.c if(fw->arch==FW_ARCH_ARMv5) { fw 2105 tools/firmware_load_ng.c fw->thumb_default = 0; fw 2106 tools/firmware_load_ng.c } else if(fw->arch==FW_ARCH_ARMv7) { fw 2107 tools/firmware_load_ng.c fw->thumb_default = 1; fw 2114 tools/firmware_load_ng.c int do_blx_check(firmware *fw) fw 2141 tools/firmware_load_ng.c count = cs_disasm(fw->cs_handle_thumb, code, sizeof(code), 0xFF000000, 3, &insn); fw 2159 tools/firmware_load_ng.c int firmware_init_capstone(firmware *fw) fw 2161 tools/firmware_load_ng.c if (cs_open(CS_ARCH_ARM, CS_MODE_ARM, &fw->cs_handle_arm) != CS_ERR_OK) { fw 2165 tools/firmware_load_ng.c cs_option(fw->cs_handle_arm, CS_OPT_DETAIL, CS_OPT_ON); fw 2166 tools/firmware_load_ng.c if (cs_open(CS_ARCH_ARM, CS_MODE_THUMB, &fw->cs_handle_thumb) != CS_ERR_OK) { fw 2170 tools/firmware_load_ng.c cs_option(fw->cs_handle_thumb, CS_OPT_DETAIL, CS_OPT_ON); fw 2171 tools/firmware_load_ng.c fw->is=disasm_iter_new(fw,0); fw 2172 tools/firmware_load_ng.c do_blx_check(fw); fw 2184 tools/firmware_load_ng.c int find_startup_copy(firmware *fw, fw 2199 tools/firmware_load_ng.c while(disasm_iter(fw,is) && count < max_search) { fw 2200 tools/firmware_load_ng.c uint32_t *pv=LDR_PC2valptr(fw,is->insn); fw 2207 tools/firmware_load_ng.c if(*pv > fw->base) { fw 2211 tools/firmware_load_ng.c if(*pv < fw->base) { fw 2217 tools/firmware_load_ng.c if(*pv < fw->base && *pv > *dptr) { fw 2235 tools/firmware_load_ng.c void find_exception_vec(firmware *fw, iter_state_t *is) fw 2239 tools/firmware_load_ng.c if(fw->arch != FW_ARCH_ARMv7) { fw 2251 tools/firmware_load_ng.c disasm_iter_init(fw, is, fw->base + fw->main_offs + 12 + fw->thumb_default); fw 2252 tools/firmware_load_ng.c if(!insn_match_find_next(fw,is,4,match_bl_mcr)) { fw 2257 tools/firmware_load_ng.c uint32_t faddr = get_branch_call_insn_target(fw,is); fw 2260 tools/firmware_load_ng.c disasm_iter_init(fw, is, faddr); fw 2261 tools/firmware_load_ng.c disasm_iter(fw, is); fw 2269 tools/firmware_load_ng.c disasm_iter(fw, is); fw 2278 tools/firmware_load_ng.c if(adr_get_range_type(fw,va) != ADR_RANGE_ROM) { fw 2281 tools/firmware_load_ng.c disasm_iter(fw, is); fw 2287 tools/firmware_load_ng.c disasm_iter(fw, is); fw 2295 tools/firmware_load_ng.c if(adr_get_range_type(fw,vb) != ADR_RANGE_ROM) { fw 2301 tools/firmware_load_ng.c fw_add_adr_range(fw,0,vb - va, va, ADR_RANGE_RAM_CODE, ADR_RANGE_FL_EVEC | ADR_RANGE_FL_TCM); fw 2306 tools/firmware_load_ng.c fw->arch_flags |= FW_ARCH_FL_VMSA; fw 2308 tools/firmware_load_ng.c disasm_iter_init(fw, is, adr_hist_get(&is->ah,1)); fw 2309 tools/firmware_load_ng.c disasm_iter(fw, is); fw 2316 tools/firmware_load_ng.c void firmware_init_data_ranges(firmware *fw) fw 2323 tools/firmware_load_ng.c iter_state_t *is=disasm_iter_new(fw, fw->base + fw->main_offs + 12 + fw->thumb_default); fw 2325 tools/firmware_load_ng.c fw->data_init_start=0; fw 2326 tools/firmware_load_ng.c fw->data_start=0; fw 2327 tools/firmware_load_ng.c fw->data_len=0; fw 2329 tools/firmware_load_ng.c fw->memisostart=0; fw 2336 tools/firmware_load_ng.c while(find_startup_copy(fw,is,max_search,&src_start,&dst_start,&dst_end)) { fw 2340 tools/firmware_load_ng.c if(fw->data_init_start) { fw 2351 tools/firmware_load_ng.c fw->data_init_start=src_start; fw 2352 tools/firmware_load_ng.c fw->data_start=dst_start; fw 2353 tools/firmware_load_ng.c fw->data_len=dst_end-dst_start; fw 2354 tools/firmware_load_ng.c fw_add_adr_range(fw,dst_start,dst_end,src_start, ADR_RANGE_INIT_DATA, ADR_RANGE_FL_NONE); fw 2377 tools/firmware_load_ng.c fw_add_adr_range(fw,dst_start,dst_end,src_start,ADR_RANGE_RAM_CODE, ADR_RANGE_FL_NONE); fw 2391 tools/firmware_load_ng.c fw_add_adr_range(fw,dst_start,dst_end,src_start,ADR_RANGE_RAM_CODE, ADR_RANGE_FL_TCM); fw 2393 tools/firmware_load_ng.c if(fw->data_start && base2_found && base3_found) { fw 2405 tools/firmware_load_ng.c disasm_iter_init(fw,is,(data_found_copy-4) | fw->thumb_default); fw 2406 tools/firmware_load_ng.c while(disasm_iter(fw,is) && count < 20) { fw 2407 tools/firmware_load_ng.c uint32_t *pv=LDR_PC2valptr(fw,is->insn); fw 2414 tools/firmware_load_ng.c if(*pv == fw->data_start + fw->data_len) { fw 2418 tools/firmware_load_ng.c if(*pv < fw->base) { fw 2419 tools/firmware_load_ng.c if(*pv != fw->data_start + fw->data_len) { fw 2428 tools/firmware_load_ng.c fw->memisostart=*eptr; fw 2435 tools/firmware_load_ng.c find_exception_vec(fw,is); fw 2439 tools/firmware_load_ng.c if(fw->data_start) { fw 2440 tools/firmware_load_ng.c fw->rom_code_search_max_adr=fw->data_init_start; fw 2443 tools/firmware_load_ng.c if(fw->dryos_ver_adr) { fw 2444 tools/firmware_load_ng.c if(fw->dryos_ver_adr < fw->rom_code_search_max_adr) { fw 2445 tools/firmware_load_ng.c fw->rom_code_search_max_adr = fw->dryos_ver_adr; fw 2452 tools/firmware_load_ng.c void firmware_unload(firmware *fw) fw 2454 tools/firmware_load_ng.c if(!fw) { fw 2457 tools/firmware_load_ng.c if(fw->is) { fw 2458 tools/firmware_load_ng.c disasm_iter_free(fw->is); fw 2460 tools/firmware_load_ng.c if(fw->cs_handle_arm) { fw 2461 tools/firmware_load_ng.c cs_close(&fw->cs_handle_arm); fw 2463 tools/firmware_load_ng.c if(fw->cs_handle_thumb) { fw 2464 tools/firmware_load_ng.c cs_close(&fw->cs_handle_thumb); fw 2466 tools/firmware_load_ng.c free(fw->buf8); fw 2467 tools/firmware_load_ng.c memset(fw,0,sizeof(firmware)); fw 134 tools/firmware_load_ng.h uint8_t* adr2ptr(firmware *fw, uint32_t adr); fw 137 tools/firmware_load_ng.h uint8_t* adr2ptr_with_data(firmware *fw, uint32_t adr); fw 147 tools/firmware_load_ng.h uint32_t ptr2adr(firmware *fw, uint8_t *ptr); fw 150 tools/firmware_load_ng.h adr_range_t *adr_get_range(firmware *fw, uint32_t adr); fw 153 tools/firmware_load_ng.h int adr_get_range_type(firmware *fw, uint32_t adr); fw 156 tools/firmware_load_ng.h int adr_is_var(firmware *fw, uint32_t adr); fw 159 tools/firmware_load_ng.h int adr_is_main_fw_code(firmware *fw, uint32_t adr); fw 166 tools/firmware_load_ng.h int find_Nth_str(firmware *fw, char *str, int N); fw 169 tools/firmware_load_ng.h int find_str(firmware *fw, char *str); fw 175 tools/firmware_load_ng.h uint32_t find_next_bytes_range(firmware *fw, const void *bytes, size_t len, uint32_t start_adr, uint32_t max_adr); fw 179 tools/firmware_load_ng.h int find_bytes_all(firmware *fw, const void *bytes, size_t len, uint32_t adr, uint32_t *result, int maxmatch); fw 185 tools/firmware_load_ng.h uint32_t find_next_str_bytes(firmware *fw, const char *str, uint32_t adr); fw 188 tools/firmware_load_ng.h uint32_t find_next_substr_bytes(firmware *fw, const char *str, uint32_t adr); fw 192 tools/firmware_load_ng.h uint32_t find_str_bytes_main_fw(firmware *fw, const char *str); fw 195 tools/firmware_load_ng.h uint32_t find_str_bytes(firmware *fw, const char *str); fw 197 tools/firmware_load_ng.h int isASCIIstring(firmware *fw, uint32_t adr); fw 202 tools/firmware_load_ng.h uint32_t find_u32_adr_range(firmware *fw, uint32_t val, uint32_t start, uint32_t maxadr); fw 207 tools/firmware_load_ng.h uint32_t find_u32_adr(firmware *fw, uint32_t val, uint32_t start); fw 210 tools/firmware_load_ng.h uint32_t fw_u32(firmware *fw, uint32_t adr); fw 213 tools/firmware_load_ng.h int fw_memcmp(firmware *fw, uint32_t adr,const void *cmp, size_t n); fw 258 tools/firmware_load_ng.h uint32_t* LDR_PC2valptr_thumb(firmware *fw, cs_insn *insn); fw 259 tools/firmware_load_ng.h uint32_t* LDR_PC2valptr_arm(firmware *fw, cs_insn *insn); fw 260 tools/firmware_load_ng.h uint32_t* LDR_PC2valptr(firmware *fw, cs_insn *insn); fw 263 tools/firmware_load_ng.h uint32_t LDR_PC2adr(firmware *fw, cs_insn *insn); fw 299 tools/firmware_load_ng.h uint32_t ADRx2adr(firmware *fw, cs_insn *insn); fw 303 tools/firmware_load_ng.h uint32_t ADR2adr(firmware *fw, cs_insn *insn); fw 306 tools/firmware_load_ng.h uint32_t* ADR2valptr(firmware *fw, cs_insn *insn); fw 309 tools/firmware_load_ng.h uint32_t LDR_PC2val(firmware *fw, cs_insn *insn); fw 314 tools/firmware_load_ng.h uint32_t B_target(firmware *fw, cs_insn *insn); fw 317 tools/firmware_load_ng.h uint32_t CBx_target(firmware *fw, cs_insn *insn); fw 320 tools/firmware_load_ng.h uint32_t BLXimm_target(firmware *fw, cs_insn *insn); fw 325 tools/firmware_load_ng.h uint32_t BL_target(firmware *fw, cs_insn *insn); fw 328 tools/firmware_load_ng.h uint32_t B_BL_target(firmware *fw, cs_insn *insn); fw 331 tools/firmware_load_ng.h uint32_t B_BL_BLXimm_target(firmware *fw, cs_insn *insn); fw 343 tools/firmware_load_ng.h int get_TBx_PC_info(firmware *fw,iter_state_t *is, tbx_info_t *ti); fw 347 tools/firmware_load_ng.h iter_state_t *disasm_iter_new(firmware *fw, uint32_t adr); fw 354 tools/firmware_load_ng.h int disasm_iter_set(firmware *fw, iter_state_t *is, uint32_t adr); fw 358 tools/firmware_load_ng.h int disasm_iter_init(firmware *fw, iter_state_t *is, uint32_t adr); fw 365 tools/firmware_load_ng.h int disasm_iter(firmware *fw, iter_state_t *is); fw 373 tools/firmware_load_ng.h int fw_disasm_iter_start(firmware *fw, uint32_t adr); fw 376 tools/firmware_load_ng.h int fw_disasm_iter(firmware *fw); fw 380 tools/firmware_load_ng.h int fw_disasm_iter_single(firmware *fw, uint32_t adr); fw 400 tools/firmware_load_ng.h typedef uint32_t (*search_insn_fn)(firmware *fw, iter_state_t *is, uint32_t v1, void *udata); fw 411 tools/firmware_load_ng.h uint32_t fw_search_insn(firmware *fw, iter_state_t *is, search_insn_fn f,uint32_t v1, void *udata, uint32_t adr_end); fw 415 tools/firmware_load_ng.h uint32_t search_disasm_const_ref(firmware *fw, iter_state_t *is, uint32_t val, void *unused); fw 418 tools/firmware_load_ng.h uint32_t search_disasm_str_ref(firmware *fw, iter_state_t *is, uint32_t val, void *str); fw 423 tools/firmware_load_ng.h uint32_t search_disasm_calls(firmware *fw, iter_state_t *is, uint32_t val, void *unused); fw 427 tools/firmware_load_ng.h typedef int (*search_calls_multi_fn)(firmware *fw, iter_state_t *is, uint32_t adr); fw 437 tools/firmware_load_ng.h int search_calls_multi_end(firmware *fw, iter_state_t *is, uint32_t adr); fw 442 tools/firmware_load_ng.h uint32_t search_disasm_calls_multi(firmware *fw, iter_state_t *is, uint32_t unused, void *userdata); fw 454 tools/firmware_load_ng.h int get_call_const_args(firmware *fw, iter_state_t *is_init, int max_backtrack, uint32_t *res); fw 468 tools/firmware_load_ng.h uint32_t get_direct_jump_target(firmware *fw, iter_state_t *is_init); fw 475 tools/firmware_load_ng.h uint32_t get_branch_call_insn_target(firmware *fw, iter_state_t *is); fw 503 tools/firmware_load_ng.h int find_and_get_var_ldr(firmware *fw, fw 530 tools/firmware_load_ng.h int check_simple_func(firmware *fw, uint32_t adr, int match_ftype, simple_func_desc_t *info); fw 539 tools/firmware_load_ng.h uint32_t find_last_call_from_func(firmware *fw, iter_state_t *is,int min_insns, int max_insns); fw 615 tools/firmware_load_ng.h int insn_match_find_next(firmware *fw, iter_state_t *is, int max_insns, const insn_match_t *match); fw 618 tools/firmware_load_ng.h int insn_match_find_nth(firmware *fw, iter_state_t *is, int max_insns, int num_to_match, const insn_match_t *match); fw 621 tools/firmware_load_ng.h int insn_match_seq(firmware *fw, iter_state_t *is, const insn_match_t *match); fw 624 tools/firmware_load_ng.h int insn_match_find_next_seq(firmware *fw, iter_state_t *is, int max_insns, const insn_match_t *match); fw 634 tools/firmware_load_ng.h int fw_search_bytes(firmware *fw, search_bytes_fn func); fw 638 tools/firmware_load_ng.h void fw_add_adr_range(firmware *fw, uint32_t start, uint32_t end, uint32_t src_start, int type, int flags); fw 641 tools/firmware_load_ng.h void firmware_load(firmware *fw, const char *filename, uint32_t base_adr,int fw_arch); fw 644 tools/firmware_load_ng.h int firmware_init_capstone(firmware *fw); fw 647 tools/firmware_load_ng.h void firmware_init_data_ranges(firmware *fw); fw 650 tools/firmware_load_ng.h void firmware_unload(firmware *fw);