| 00:01 |
cr2 |
90666264: a9b00000 ldmgeib r0!, {} |
| 00:01 |
cr2 |
90666268: a9b00014 ldmgeib r0!, {r2, r4} |
| 00:02 |
awelux |
hmm |
| 00:03 |
awelux |
why a9b? |
| 00:03 |
cr2 |
sorry. wrong table. |
| 00:03 |
awelux |
yep |
| 00:03 |
cr2 |
http://wiki.xda-developers.com/index.php?pagename=MagicianVirtualMemoryMapping |
| 00:03 |
awelux |
did you make a full dump and are searching for content ? |
| 00:04 |
cr2 |
a short look at the .data segment |
| 00:04 |
cr2 |
the non-const structs are there. |
| 00:05 |
cr2 |
it is 0x08000000 and 0x08000014 |
| 00:05 |
cr2 |
since you can't boot a "normal" way we need a bruteforce way ;) |
| 00:10 |
cr2 |
wheee. are they reusing the headers ? |
| 00:14 |
cr2 |
btw. how many leds do you have ? |
| 00:17 |
cr2 |
do you have 9640 or 9650 CAM ? afaik there are linux drivers for both. |
| 00:25 |
awelux |
hehe |
| 00:26 |
awelux |
I've got the new SD card. so I'm open to experiments there |
| 00:40 |
awelux |
0c000000 | 00000020 000000c0 000000e0 00000000 | ............... |
| 00:40 |
awelux |
0c000010 | 00000002 0000002a 00000008 00000004 | ....*........... |
| 00:41 |
awelux |
08000000 | 00000008 00000020 0000000c 00000019 | .... ........... |
| 00:41 |
awelux |
08000010 | 00000008 00000006 00000000 00000000 | ............... |
| 00:41 |
awelux |
hmm |
| 02:07 |
cr2 |
0x08* is some battery-related stuff. |
| 05:07 | => rob__w joins |
| 05:16 | <= rob_w left/quit |
| 05:50 | <= rob__w left/quit |
| 09:21 | <= awelux left/quit |
| 09:22 | => awelux joins |
| 10:40 | => JuNuKN joins |
| 11:22 | <= JuNuKN left/quit |
| 12:47 | => mndctrl_ joins |
| 12:47 | <= mndctrl left/quit |
| 18:57 | => lamikr joins |
| 19:05 | => AlphaPi[jr] joins |
| 23:09 | <= AlphaPi[jr] left/quit |