Hacking Wii U Hacking & Homebrew Discussion

Sammi Husky

Well-Known Member
Member
Joined
Jul 6, 2014
Messages
312
Trophies
0
Age
29
XP
498
Country
United States

Are you positive it's crashing on the load and not during the branch afterwards? If you are and it is indeed a race condition type situation then the only thing i can think of is issues with out of order execution ... but afaik it shouldn't even apply in this situation. In any case, throw a sync (or eieio) instruction after the stores and see if it fixes it. I have my doubts, but hey it's worth a shot.

EDIT:
Seems like using "lwz r1" is not always safe. It was safe in my previous code, but unsafe this time. Used lwz with all other registers and no freeze. So the code handler can be saved now. Just need to rewrite a lot of code...

Well it's not all bad, at least you know the problem now.
 
  • Like
Reactions: CosmoCortney

Rob Blou

Well-Known Member
Member
Joined
Jul 16, 2013
Messages
754
Trophies
0
Age
41
XP
1,508
Country
Canada
nice! Hykem was active on Wiiubrew in the last 2 days :)


hykem.JPG
 

Datalogger

Living the Dream
Member
Joined
Dec 21, 2009
Messages
416
Trophies
1
Location
Maui
XP
706
Country
United States
While we wait, we all should be preparing the tools we will need to work with data we will soon have access to.

Why not start learning how the FW works using IDA Pro?
There's lots of things in here that should be of interest everyone!


Hykem is posting all the information you will ever need up on wiiubrew.
He's cracking the can wide open for all to learn and enjoy!

For example, using some of the information Hykem and others have already posted , here's a small sampling of the ARM/Thumb SysCall's you can build in IDA Pro.
Code:
IOS_CRYPTO:04015FA0 ; =============== S U B R O U T I N E =======================================
IOS_CRYPTO:04015FA0
IOS_CRYPTO:04015FA0 ; int get_pid()
IOS_CRYPTO:04015FA0 ; Get the current process' ID
IOS_CRYPTO:04015FA0 ; -> Current processid
IOS_CRYPTO:04015FA0 ; Attributes: noreturn
IOS_CRYPTO:04015FA0
IOS_CRYPTO:04015FA0 SysCall_0x05_IOS_CRYPTO                                     ; CODE XREF: sub_4014FE8+68p
IOS_CRYPTO:04015FA0                 UND             #0x50
IOS_CRYPTO:04015FA0 ; End of function SysCall_0x05_IOS_CRYPTO
IOS_CRYPTO:04015FA0
IOS_CRYPTO:04015FA4 ; ---------------------------------------------------------------------------
IOS_CRYPTO:04015FA4                 BX              LR
IOS_CRYPTO:04015FA8
IOS_CRYPTO:04015FA8 ; =============== S U B R O U T I N E =======================================
IOS_CRYPTO:04015FA8
IOS_CRYPTO:04015FA8 ; int get_process_name(int pid, char *out_buffer)
IOS_CRYPTO:04015FA8 ; Get the specified process' name string
IOS_CRYPTO:04015FA8 ; -> 0 on success
IOS_CRYPTO:04015FA8 ; Attributes: noreturn
IOS_CRYPTO:04015FA8
IOS_CRYPTO:04015FA8 SysCall_0x06_IOS_CRYPTO                                     ; CODE XREF: IOS_CRYPTO:0401505Cp
IOS_CRYPTO:04015FA8                 UND             #0x60
IOS_CRYPTO:04015FA8 ; End of function SysCall_0x06_IOS_CRYPTO
IOS_CRYPTO:04015FA8
IOS_CRYPTO:04015FAC ; ---------------------------------------------------------------------------
IOS_CRYPTO:04015FAC                 BX              LR
IOS_CRYPTO:04015FB0
IOS_CRYPTO:04015FB0 ; =============== S U B R O U T I N E =======================================
IOS_CRYPTO:04015FB0
IOS_CRYPTO:04015FB0 ; int IOS_StartThread(int threadid)
IOS_CRYPTO:04015FB0 ; Resume the specified thread
IOS_CRYPTO:04015FB0 ; -> 0 on success
IOS_CRYPTO:04015FB0 ; Attributes: noreturn
IOS_CRYPTO:04015FB0
IOS_CRYPTO:04015FB0 SysCall_0x07_IOS_CRYPTO                                     ; CODE XREF: IOS_CRYPTO:040057D8p
IOS_CRYPTO:04015FB0                 UND             #0x70
IOS_CRYPTO:04015FB0 ; End of function SysCall_0x07_IOS_CRYPTO
IOS_CRYPTO:04015FB0
IOS_CRYPTO:04015FB4 ; ---------------------------------------------------------------------------
IOS_CRYPTO:04015FB4                 BX              LR
IOS_CRYPTO:04015FB8
IOS_CRYPTO:04015FB8 ; =============== S U B R O U T I N E =======================================
IOS_CRYPTO:04015FB8
IOS_CRYPTO:04015FB8 ; int thread_suspend(int threadid)
IOS_CRYPTO:04015FB8 ; Suspend the specified thread
IOS_CRYPTO:04015FB8 ; -> 0 on success
IOS_CRYPTO:04015FB8 ; Attributes: noreturn
IOS_CRYPTO:04015FB8
IOS_CRYPTO:04015FB8 SysCall_0x08_IOS_CRYPTO                                     ; CODE XREF: IOS_CRYPTO:04005700p
IOS_CRYPTO:04015FB8                                                             ; IOS_CRYPTO:04006248p
IOS_CRYPTO:04015FB8                 UND             #0x80
IOS_CRYPTO:04015FB8 ; End of function SysCall_0x08_IOS_CRYPTO
IOS_CRYPTO:04015FB8
IOS_CRYPTO:04015FBC ; ---------------------------------------------------------------------------
IOS_CRYPTO:04015FBC                 BX              LR

IOS_USB:1012EABC ; =============== S U B R O U T I N E =======================================
IOS_USB:1012EABC
IOS_USB:1012EABC ; int IOS_CreateThread(u32 (*proc)(void* arg), void* arg, u32* stack_top, u32 stacksize, int priority, BOOL detached)
IOS_USB:1012EABC ; Creates a thread (in paused state)
IOS_USB:1012EABC ; -> New threadid or error (negative value)
IOS_USB:1012EABC ; Attributes: noreturn
IOS_USB:1012EABC
IOS_USB:1012EABC SysCall_0x00_IOS_USB  ; CODE XREF: sub_10101478+48p
IOS_USB:1012EABC  ; sub_10103A88+54p ...
IOS_USB:1012EABC  UND  #0
IOS_USB:1012EABC ; End of function SysCall_0x00_IOS_USB
IOS_USB:1012EABC
IOS_USB:1012EAC0 ; ---------------------------------------------------------------------------
IOS_USB:1012EAC0  BX  LR
IOS_USB:1012EAC4 ; ---------------------------------------------------------------------------
IOS_USB:1012EAC4
IOS_USB:1012EAC4 SysCall_0x01_IOS_USB  ; CODE XREF: sub_1010EE74+A8p
IOS_USB:1012EAC4  ; sub_101104D0+C8p ...
IOS_USB:1012EAC4  UND  #0x10  ; int thread_join(int threadid, u32 *returned_value)
IOS_USB:1012EAC4  ; Waits for a thread to finish executing
IOS_USB:1012EAC4  ; -> 0 on success
IOS_USB:1012EAC8 ; ---------------------------------------------------------------------------
IOS_USB:1012EAC8  BX  LR
IOS_USB:1012EACC ; ---------------------------------------------------------------------------
IOS_USB:1012EACC
IOS_USB:1012EACC SysCall_0x02_IOS_USB  ; CODE XREF: sub_1010EF7C+148p
IOS_USB:1012EACC  ; sub_1010F118+290p ...
IOS_USB:1012EACC  UND  #0x20
IOS_USB:1012EAD0 ; ---------------------------------------------------------------------------
IOS_USB:1012EAD0  BX  LR
IOS_USB:1012EAD4
IOS_USB:1012EAD4 ; =============== S U B R O U T I N E =======================================
IOS_USB:1012EAD4
IOS_USB:1012EAD4 ; int get_tid()
IOS_USB:1012EAD4 ; Get the current thread's ID
IOS_USB:1012EAD4 ; -> Current threadid
IOS_USB:1012EAD4 ; Attributes: noreturn
IOS_USB:1012EAD4
IOS_USB:1012EAD4 SysCall_0x03_IOS_USB  ; CODE XREF: IOS_USB:loc_10100274p
IOS_USB:1012EAD4  ; sub_1012CC88:loc_1012CCF0p
IOS_USB:1012EAD4  UND  #0x30
IOS_USB:1012EAD4 ; End of function SysCall_0x03_IOS_USB
IOS_USB:1012EAD4
IOS_USB:1012EAD8 ; ---------------------------------------------------------------------------
IOS_USB:1012EAD8  BX  LR
IOS_USB:1012EADC ; ---------------------------------------------------------------------------
IOS_USB:1012EADC  UND  #0x40
IOS_USB:1012EAE0 ; ---------------------------------------------------------------------------
IOS_USB:1012EAE0  BX  LR
IOS_USB:1012EAE4
IOS_USB:1012EAE4 ; =============== S U B R O U T I N E =======================================
IOS_USB:1012EAE4
IOS_USB:1012EAE4 ; int get_pid()
IOS_USB:1012EAE4 ; Get the current process' ID
IOS_USB:1012EAE4 ; -> Current processid
IOS_USB:1012EAE4 ; Attributes: noreturn
IOS_USB:1012EAE4
IOS_USB:1012EAE4 SysCall_0x05_IOS_USB  ; CODE XREF: sub_1012CC88+70p
IOS_USB:1012EAE4  ; sub_1012E818+68p
IOS_USB:1012EAE4  UND  #0x50
IOS_USB:1012EAE4 ; End of function SysCall_0x05_IOS_USB
IOS_USB:1012EAE4
IOS_USB:1012EAE8 ; ---------------------------------------------------------------------------
IOS_USB:1012EAE8  BX  LR
IOS_USB:1012EAEC
IOS_USB:1012EAEC ; =============== S U B R O U T I N E =======================================
IOS_USB:1012EAEC
IOS_USB:1012EAEC ; int get_process_name(int pid, char *out_buffer)
IOS_USB:1012EAEC ; Get the specified process' name string
IOS_USB:1012EAEC ; -> 0 on success
IOS_USB:1012EAEC ; Attributes: noreturn
IOS_USB:1012EAEC
IOS_USB:1012EAEC SysCall_0x06_IOS_USB  ; CODE XREF: sub_1012E818+74p
IOS_USB:1012EAEC  UND  #0x60
IOS_USB:1012EAEC ; End of function SysCall_0x06_IOS_USB
IOS_USB:1012EAEC
IOS_USB:1012EAF0 ; ---------------------------------------------------------------------------
IOS_USB:1012EAF0  BX  LR
IOS_USB:1012EAF4
IOS_USB:1012EAF4 ; =============== S U B R O U T I N E =======================================
IOS_USB:1012EAF4
IOS_USB:1012EAF4 ; int IOS_StartThread(int threadid)
IOS_USB:1012EAF4 ; Resume the specified thread
IOS_USB:1012EAF4 ; -> 0 on success
IOS_USB:1012EAF4 ; Attributes: noreturn
IOS_USB:1012EAF4
IOS_USB:1012EAF4 SysCall_0x07_IOS_USB  ; CODE XREF: sub_10101478+64p
IOS_USB:1012EAF4  ; sub_10103A88+70p ...
IOS_USB:1012EAF4  UND  #0x70
IOS_USB:1012EAF4 ; End of function SysCall_0x07_IOS_USB

IOS_FS:107F6924 ; =============== S U B R O U T I N E =======================================
IOS_FS:107F6924
IOS_FS:107F6924 ; void* access_ipc_buffer_pool()
IOS_FS:107F6924 ; Gets the per-thread IPC buffer pool's address
IOS_FS:107F6924 ; -> The IPC buffer pool address value
IOS_FS:107F6924 ; Attributes: noreturn
IOS_FS:107F6924
IOS_FS:107F6924 SysCall_0x04_IOS_FS  ; CODE XREF: sub_107F4B90:loc_107F4BB0p
IOS_FS:107F6924  UND  #0x40
IOS_FS:107F6924 ; End of function SysCall_0x04_IOS_FS
IOS_FS:107F6924
IOS_FS:107F6928 ; ---------------------------------------------------------------------------
IOS_FS:107F6928  BX  LR
IOS_FS:107F692C
IOS_FS:107F692C ; =============== S U B R O U T I N E =======================================
IOS_FS:107F692C
IOS_FS:107F692C ; int get_pid()
IOS_FS:107F692C ; Get the current process' ID
IOS_FS:107F692C ; -> Current processid
IOS_FS:107F692C ; Attributes: noreturn
IOS_FS:107F692C
IOS_FS:107F692C SysCall_0x05_IOS_FS  ; CODE XREF: sub_107F06E8+70p
IOS_FS:107F692C  ; sub_107F4AEC+68p ...
IOS_FS:107F692C  UND  #0x50
IOS_FS:107F692C ; End of function SysCall_0x05_IOS_FS
IOS_FS:107F692C
IOS_FS:107F6930 ; ---------------------------------------------------------------------------
IOS_FS:107F6930  BX  LR
IOS_FS:107F6934
IOS_FS:107F6934 ; =============== S U B R O U T I N E =======================================
IOS_FS:107F6934
IOS_FS:107F6934 ; int get_process_name(int pid, char *out_buffer)
IOS_FS:107F6934 ; Get the specified process' name string
IOS_FS:107F6934 ; -> 0 on success
IOS_FS:107F6934 ; Attributes: noreturn
IOS_FS:107F6934
IOS_FS:107F6934 SysCall_0x06_IOS_FS  ; CODE XREF: IOS_FS:107F4B60p
IOS_FS:107F6934  UND  #0x60
IOS_FS:107F6934 ; End of function SysCall_0x06_IOS_FS
IOS_FS:107F6934
IOS_FS:107F6938 ; ---------------------------------------------------------------------------
IOS_FS:107F6938  BX  LR
IOS_FS:107F693C
IOS_FS:107F693C ; =============== S U B R O U T I N E =======================================
IOS_FS:107F693C
IOS_FS:107F693C ; int IOS_StartThread(int threadid)
IOS_FS:107F693C ; Resume the specified thread
IOS_FS:107F693C ; -> 0 on success
IOS_FS:107F693C ; Attributes: noreturn
IOS_FS:107F693C
IOS_FS:107F693C SysCall_0x07_IOS_FS  ; CODE XREF: IOS_FS:107001DCp
IOS_FS:107F693C  ; sub_10700204:loc_10700364p ...
IOS_FS:107F693C  UND  #0x70
IOS_FS:107F693C ; End of function SysCall_0x07_IOS_FS

IOS_NIM_BOSS:E22603DC SysCall_0x00_IOS_NIM_BOSS  ; CODE XREF: sub_E221D22C+2Cp
IOS_NIM_BOSS:E22603DC  ; IOS_NIM_BOSS:E224A238p ...
IOS_NIM_BOSS:E22603DC  UND  #0  ; int IOS_CreateThread(u32 (*proc)(void* arg), void* arg, u32* stack_top, u32 stacksize, int priority, BOOL detached)
IOS_NIM_BOSS:E22603DC  ; Creates a thread (in paused state)
IOS_NIM_BOSS:E22603DC  ; -> New threadid or error (negative value)
IOS_NIM_BOSS:E22603E0 ; ---------------------------------------------------------------------------
IOS_NIM_BOSS:E22603E0  BX  LR
IOS_NIM_BOSS:E22603E4 ; ---------------------------------------------------------------------------
IOS_NIM_BOSS:E22603E4
IOS_NIM_BOSS:E22603E4 SysCall_0x01_IOS_NIM_BOSS  ; CODE XREF: sub_E221D1F0+8j
IOS_NIM_BOSS:E22603E4  ; sub_E224A100+38j ...
IOS_NIM_BOSS:E22603E4  UND  #0x10  ; int thread_join(int threadid, u32 *returned_value)
IOS_NIM_BOSS:E22603E4  ; Waits for a thread to finish executing
IOS_NIM_BOSS:E22603E4  ; -> 0 on success
IOS_NIM_BOSS:E22603E8 ; ---------------------------------------------------------------------------
IOS_NIM_BOSS:E22603E8  BX  LR
IOS_NIM_BOSS:E22603EC ; ---------------------------------------------------------------------------
IOS_NIM_BOSS:E22603EC
IOS_NIM_BOSS:E22603EC SysCall_0x02_IOS_NIM_BOSS  ; CODE XREF: sub_E221D1FC+8j
IOS_NIM_BOSS:E22603EC  ; IOS_NIM_BOSS:E224A150j ...
IOS_NIM_BOSS:E22603EC  UND  #0x20  ; int thread_cancel(int threadid, u32 unk)
IOS_NIM_BOSS:E22603EC  ; Cancels an active thread
IOS_NIM_BOSS:E22603EC  ; -> 0 on success
IOS_NIM_BOSS:E22603F0 ; ---------------------------------------------------------------------------
IOS_NIM_BOSS:E22603F0  BX  LR
IOS_NIM_BOSS:E22603F4 ; ---------------------------------------------------------------------------
IOS_NIM_BOSS:E22603F4
IOS_NIM_BOSS:E22603F4 SysCall_0x03_IOS_NIM_BOSS  ; CODE XREF: sub_E21E71D0+14p
IOS_NIM_BOSS:E22603F4  ; sub_E21E7204+18p ...
IOS_NIM_BOSS:E22603F4  UND  #0x30  ; int get_tid()
IOS_NIM_BOSS:E22603F4  ; Get the current thread's ID
IOS_NIM_BOSS:E22603F4  ; -> Current threadid
IOS_NIM_BOSS:E22603F8 ; ---------------------------------------------------------------------------
IOS_NIM_BOSS:E22603F8  BX  LR
IOS_NIM_BOSS:E22603FC ; ---------------------------------------------------------------------------
IOS_NIM_BOSS:E22603FC
IOS_NIM_BOSS:E22603FC SysCall_0x04_IOS_NIM_BOSS  ; CODE XREF: sub_E225DF60:loc_E225DF80p
IOS_NIM_BOSS:E22603FC  UND  #0x40  ; void* access_ipc_buffer_pool()
IOS_NIM_BOSS:E22603FC  ; Gets the per-thread IPC buffer pool's address
IOS_NIM_BOSS:E22603FC  ; -> The IPC buffer pool address value
IOS_NIM_BOSS:E2260400 ; ---------------------------------------------------------------------------
IOS_NIM_BOSS:E2260400  BX  LR
IOS_NIM_BOSS:E2260404 ; ---------------------------------------------------------------------------
IOS_NIM_BOSS:E2260404
IOS_NIM_BOSS:E2260404 SysCall_0x05_IOS_NIM_BOSS  ; CODE XREF: IOS_NIM_BOSS:E2203510p
IOS_NIM_BOSS:E2260404  ; IOS_NIM_BOSS:E2208C50p ...
IOS_NIM_BOSS:E2260404  UND  #0x50  ; int get_pid()
IOS_NIM_BOSS:E2260404  ; Get the current process' ID
IOS_NIM_BOSS:E2260404  ; -> Current processid
IOS_NIM_BOSS:E2260408 ; ---------------------------------------------------------------------------
IOS_NIM_BOSS:E2260408  BX  LR
IOS_NIM_BOSS:E226040C ; ---------------------------------------------------------------------------
IOS_NIM_BOSS:E226040C
IOS_NIM_BOSS:E226040C SysCall_0x06_IOS_NIM_BOSS  ; CODE XREF: IOS_NIM_BOSS:E225D08Cp
IOS_NIM_BOSS:E226040C  ; IOS_NIM_BOSS:E225DAB0p
IOS_NIM_BOSS:E226040C  UND  #0x60  ; int get_process_name(int pid, char *out_buffer)
IOS_NIM_BOSS:E226040C  ; Get the specified process' name string
IOS_NIM_BOSS:E226040C  ; -> 0 on success
IOS_NIM_BOSS:E2260410 ; ---------------------------------------------------------------------------

Here's a very small sample of the mapped Text Strings you can traceback in IDA.
Code:
IOS_TEST:E404239C 00000044 C bspRead(...,BSP_GFX_VI1_PLL_ATTRIBUTE,...) failed with rval 0x%08x\n  
IOS_TEST:E40423E0 00000007 C vi2pll  
IOS_TEST:E40423E8 00000004 C VI2  
IOS_TEST:E40423EC 00000044 C bspRead(...,BSP_GFX_VI2_PLL_ATTRIBUTE,...) failed with rval 0x%08x\n  
IOS_TEST:E4042430 0000001D C IOP CPU Utilization %d.%d%%\n  
IOS_TEST:E4042450 00000004 C cpu  
IOS_TEST:E4042454 00000006 C panic  
IOS_TEST:E404245C 0000000D C %s: Panic!!\n  
IOS_TEST:E404246C 00000004 C ddr  
IOS_TEST:E4042470 00000005 C ragu  
IOS_TEST:E4042478 00000004 C rpu  
IOS_TEST:E404247C 00000004 C rfs  
IOS_TEST:E4042480 00000006 C rviol  
IOS_TEST:E4042488 00000050 C IOS Resource Managers that completed IOS_CLOSE with pending resource requests:\n
IOS_TEST:E40424D8 0000001B C no violations, status %d.\n  
IOS_TEST:E40424F4 00000004 C txn  
IOS_TEST:E40424F8 00000003 C tp  
IOS_TEST:E40424FC 00000027 C began thread profiling with status %d\n  
IOS_TEST:E4042524 00000027 C ended thread profiling with status %d\n  
IOS_TEST:E404254C 00000003 C tt  
IOS_TEST:E4042550 00000025 C began thread tracing with status %d\n  
IOS_TEST:E4042578 00000025 C ended thread tracing with status %d\n  
IOS_TEST:E40425A0 0000002A C freed thread trace buffer with status %d\n  
IOS_TEST:E40425CC 00000024 C IOS_THREAD_TRACE:%02X %02X %u%u %d\n  
IOS_TEST:E40425F0 00000022 C IOS_THREAD_TRACE:%02X %02X %u %d\n  
IOS_TEST:E4042614 00000015 C tt: total %d idx %d\n  
IOS_TEST:E404262C 00000031 C tt: timer base %d timer val %08X uptime %d%d us\n  
IOS_TEST:E4042660 00000028 C detailed thread tracing with status %d\n  
IOS_TEST:E4042688 00000045 C IOS_THREAD_TRACE_TOTAL:BUSY %d %d\nIOS_THREAD_TRACE_TOTAL:IDLE %d %d\n  
IOS_TEST:E40426D0 00000049 C IOS_THREAD_TRACE_TOTAL:BUSY %d%d %d\nIOS_THREAD_TRACE_TOTAL:IDLE %d%d %d\n  
IOS_TEST:E404271C 00000029 C totals of thread tracing with status %d\n

IOS_FPD:E31A6E9C 00000027 C Keep sending data to get tossed away!\n  
IOS_FPD:E31A6EC4 00000010 C  HTTP/%d.%d %3d  
IOS_FPD:E31A6ED4 0000000A C  HTTP %3d  
IOS_FPD:E31A6EE0 00000010 C  RTSP/%d.%d %3d  
IOS_FPD:E31A6EF0 00000023 C HTTP 1.0, assume close after body\n  
IOS_FPD:E31A6F14 00000010 C Content-Length:  
IOS_FPD:E31A6F24 00000037 C Negative content-length: %lld, closing after transfer\n  
IOS_FPD:E31A6F5C 00000012 C Proxy-Connection:  
IOS_FPD:E31A6F70 0000000B C keep-alive  
IOS_FPD:E31A6F7C 0000002E C HTTP/1.0 proxy connection set to keep alive!\n  
IOS_FPD:E31A6FAC 00000006 C close  
IOS_FPD:E31A6FB4 00000026 C HTTP/1.1 proxy connection set close!\n  
IOS_FPD:E31A6FDC 0000000C C Connection:  
IOS_FPD:E31A6FE8 00000028 C HTTP/1.0 connection set to keep alive!\n  
IOS_FPD:E31A7010 00000013 C Transfer-Encoding:  
IOS_FPD:E31A7024 00000008 C chunked  
IOS_FPD:E31A702C 00000008 C deflate  
IOS_FPD:E31A7034 00000005 C gzip  
IOS_FPD:E31A703C 00000007 C x-gzip  
IOS_FPD:E31A7044 00000009 C compress  
IOS_FPD:E31A7050 0000000B C x-compress  
IOS_FPD:E31A705C 00000012 C Content-Encoding:  
IOS_FPD:E31A7070 0000000F C Content-Range:  
IOS_FPD:E31A7080 0000000F C Last-Modified:  
IOS_FPD:E31A7090 0000000A C Location:  
IOS_FPD:E31A709C 00000015 C Proxy-authorization:  
IOS_FPD:E31A70B4 0000000F C Authorization:  
IOS_FPD:E31A70C4 00000006 C %s:%s  
IOS_FPD:E31A70CC 00000007 C Proxy-  
IOS_FPD:E31A70D4 0000000C C User-Agent:  
IOS_FPD:E31A70E0 00000009 C Referer:  
IOS_FPD:E31A70EC 0000000E C Referer: %s\r\n  
IOS_FPD:E31A70FC 00000011 C Accept-Encoding:  
IOS_FPD:E31A7110 00000016 C Accept-Encoding: %s\r\n  
IOS_FPD:E31A7128 0000002B C Chunky upload is not supported by HTTP 1.0  
IOS_FPD:E31A7154 0000001D C Transfer-Encoding: chunked\r\n  
IOS_FPD:E31A7174 0000000F C Host: %s%s%s\r\n  
IOS_FPD:E31A7184 00000013 C Host: %s%s%s:%hu\r\n  
IOS_FPD:E31A7198 00000007 C ftp://  
IOS_FPD:E31A71A0 00000007 C ;type=  
IOS_FPD:E31A71A8 00000008 C Accept:  
IOS_FPD:E31A71B0 0000000E C Accept: */*\r\n  
IOS_FPD:E31A71C0 00000016 C Could not seek stream  
IOS_FPD:E31A71FC 00000006 C input  
IOS_FPD:E31A7204 00000021 C File already completely uploaded  
IOS_FPD:E31A7228 00000012 C Range: bytes=%s\r\n  
IOS_FPD:E31A723C 00000023 C Content-Range: bytes 0-%lld/%lld\r\n  
IOS_FPD:E31A7260 00000023 C Content-Range: bytes %s%lld/%lld\r\n  
IOS_FPD:E31A7284 0000001F C Content-Range: bytes %s/%lld\r\n  
IOS_FPD:E31A72A4 00000004 C 1.1  
IOS_FPD:E31A72A8 00000004 C %s  
IOS_FPD:E31A72AC 0000000F C ftp://%s:%s@%s  
IOS_FPD:E31A72BC 0000001F C Proxy-Connection: Keep-Alive\r\n  
IOS_FPD:E31A72DC 00000023 C %s HTTP/%s\r\n%s%s%s%s%s%s%s%s%s%s%s  
IOS_FPD:E31A7300 00000003 C ;  
IOS_FPD:E31A7304 00000009 C Cookie:  
IOS_FPD:E31A7310 00000016 C Content-Length: 0\r\n\r\n  
IOS_FPD:E31A7328 0000001C C Failed sending POST request  
IOS_FPD:E31A7344 0000001A C Internal HTTP POST error!  
IOS_FPD:E31A7360 00000017 C Content-Length: %lld\r\n  
IOS_FPD:E31A7378 00000028 C Could not get Content-Type header line!  
IOS_FPD:E31A73A0 0000001B C Failed sending PUT request  
IOS_FPD:E31A73BC 00000032 C Content-Type: application/x-www-form-urlencoded\r\n  
IOS_FPD:E31A73F0 00000005 C %x\r\n  
IOS_FPD:E31A73F8 00000008 C \r\n0\r\n\r\n  
IOS_FPD:E31A7400 00000021 C Failed sending HTTP POST request  
IOS_FPD:E31A7438 00000008 C request  
IOS_FPD:E31A7440 00000005 C HTTP  
IOS_FPD:E31A7448 00000006 C HTTPS  
IOS_FPD:E31A74DC 00000006 C %06ld  
IOS_FPD:E31A74E4 00000009 C %s:%s:%s  
IOS_FPD:E31A74F0 00000008 C %s:%.*s  
IOS_FPD:E31A74F8 00000009 C auth-int  
IOS_FPD:E31A7504 00000014 C %s:%s:%08x:%s:%s:%s  
IOS_FPD:E31A7518 00000077 C %sAuthorization: Digest username=\"%s\", realm=\"%s\", nonce=\"%s\", uri=\"%s\", cnonce=\"%s\", nc=%08x, qop=\"%s\", response=\"%s\"
IOS_FPD:E31A7590 00000005 C auth  
IOS_FPD:E31A7598 00000057 C %sAuthorization: Digest username=\"%s\", realm=\"%s\", nonce=\"%s\", uri=\"%s\", response=\"%s\"  
IOS_FPD:E31A75F0 00000010 C %s, opaque=\"%s\"  
IOS_FPD:E31A7600 00000013 C %s, algorithm=\"%s\"  
IOS_FPD:E31A7614 00000006 C nonce  
IOS_FPD:E31A761C 00000006 C stale  
IOS_FPD:E31A7624 00000005 C true  
IOS_FPD:E31A762C 00000006 C realm  
IOS_FPD:E31A7634 00000007 C opaque  
IOS_FPD:E31A763C 00000004 C qop  
IOS_FPD:E31A7640 00000002 C ,  
IOS_FPD:E31A7644 0000000A C algorithm  
IOS_FPD:E31A7650 00000009 C MD5-sess  
IOS_FPD:E31A765C 00000004 C MD5  
IOS_FPD:E31A7698 00000005 C %s%s  
IOS_FPD:E31A76A0 0000001B C %sAuthorization: NTLM %s\r\n  
IOS_FPD:E31A76BC 0000002A C gethostname() failed, continuing without!  
IOS_FPD:E31A7758 00000009 C %c%c%c%c  
IOS_FPD:E31A7764 00000022 C user + domain + host name too big  
IOS_FPD:E31A7788 00000008 C NTLMSSP  
IOS_FPD:E31A7BA0 00000021 C CONNECT %s:%hu HTTP/%s\r\n%s%s%s%s  
IOS_FPD:E31A7BC4 00000020 C Failed sending CONNECT to proxy  
IOS_FPD:E31A7BE4 00000025 C Proxy CONNECT aborted due to timeout  
IOS_FPD:E31A7C0C 0000002F C Proxy CONNECT aborted due to select/poll error  
IOS_FPD:E31A7C3C 00000016 C Proxy CONNECT aborted  
IOS_FPD:E31A7C54 00000014 C chunk reading DONE\n  
IOS_FPD:E31A7C68 00000023 C Read %zd bytes of chunk, continue\n  
IOS_FPD:E31A7C8C 00000024 C Ignore %lld bytes of response-body\n  
IOS_FPD:E31A7CB0 00000019 C %zd bytes of chunk left\n  
IOS_FPD:E31A7CCC 0000001B C CONNECT responded chunked\n  
IOS_FPD:E31A7CE8 0000000D C HTTP/1.%d %d  
IOS_FPD:E31A7CF8 0000002F C Received HTTP code %d from proxy after CONNECT  
IOS_FPD:E31A7D28 00000025 C Proxy replied OK to CONNECT request\n  
IOS_FPD:E31A7D50 00000027 C Establish HTTP proxy tunnel to %s:%hu\n  
IOS_FPD:E31A7D78 00000007 C %s:%hu  
IOS_FPD:E31A7D80 0000000B C Host: %s\r\n  
IOS_FPD:E31A7DA4 00000017 C SSL connection timeout  
IOS_FPD:E31A7DBC 0000001A C SSL: SSL context not set!  
IOS_FPD:E31A7DD8 0000002C C SSL: couldn't create a connection (handle)!  
IOS_FPD:E31A7E04 00000029 C SSL: NSSLSetSession failed with error:%d  
IOS_FPD:E31A7E30 00000019 C SSL re-using session ID\n  
IOS_FPD:E31A7E4C 00000025 C select/poll on SSL socket, errno: %d  
IOS_FPD:E31A7E74 0000001B C NSSL: Connecting to %s:%d\n  
IOS_FPD:E31A7E90 00000040 C NSSLDoHandshake failed with err:%d handshake err:%d cert err:%d  
IOS_FPD:E31A7ED0 0000000E C SSL connected  
IOS_FPD:E31A7EE0 00000027 C old SSL session ID is stale, removing\n  
IOS_FPD:E31A7F08 0000001C C failed to store ssl session  
IOS_FPD:E31A7F24 0000001F C NSSLWrite failed with error:%d  
IOS_FPD:E31A7F44 0000001E C SSL read failed with error:%d  
IOS_FPD:E31A7F64 00000005 C NSSL

IOS_NIM_BOSS:E22BE440 0000001A C BOSS_FS_ERROR_MAX_VOLUMES  
IOS_NIM_BOSS:E22BE45C 0000001A C BOSS_FS_ERROR_MAX_CLIENTS  
IOS_NIM_BOSS:E22BE478 00000018 C BOSS_FS_ERROR_MAX_FILES  
IOS_NIM_BOSS:E22BE490 00000017 C BOSS_FS_ERROR_MAX_DIRS  
IOS_NIM_BOSS:E22BE4A8 0000001B C BOSS_FS_ERROR_ALREADY_OPEN  
IOS_NIM_BOSS:E22BE4C4 0000001D C BOSS_FS_ERROR_ALREADY_EXISTS  
IOS_NIM_BOSS:E22BE4E4 00000018 C BOSS_FS_ERROR_NOT_FOUND  
IOS_NIM_BOSS:E22BE4FC 00000018 C BOSS_FS_ERROR_NOT_EMPTY  
IOS_NIM_BOSS:E22BE514 0000001B C BOSS_FS_ERROR_ACCESS_ERROR  
IOS_NIM_BOSS:E22BE530 0000001F C BOSS_FS_ERROR_PERMISSION_ERROR  
IOS_NIM_BOSS:E22BE550 0000001D C BOSS_FS_ERROR_DATA_CORRUPTED  
IOS_NIM_BOSS:E22BE570 0000001B C BOSS_FS_ERROR_STORAGE_FULL  
IOS_NIM_BOSS:E22BE58C 0000001B C BOSS_FS_ERROR_JOURNAL_FULL  
IOS_NIM_BOSS:E22BE5A8 0000001E C BOSS_FS_ERROR_UNAVAILABLE_CMD  
IOS_NIM_BOSS:E22BE5C8 0000001E C BOSS_FS_ERROR_UNSUPPORTED_CMD  
IOS_NIM_BOSS:E22BE5E8 0000001C C BOSS_FS_ERROR_INVALID_PARAM  
IOS_NIM_BOSS:E22BE604 0000001B C BOSS_FS_ERROR_INVALID_PATH  
IOS_NIM_BOSS:E22BE620 0000001D C BOSS_FS_ERROR_INVALID_BUFFER  
IOS_NIM_BOSS:E22BE640 00000020 C BOSS_FS_ERROR_INVALID_ALIGNMENT  
IOS_NIM_BOSS:E22BE660 00000024 C BOSS_FS_ERROR_INVALID_CLIENT_HANDLE  
IOS_NIM_BOSS:E22BE684 00000022 C BOSS_FS_ERROR_INVALID_FILE_HANDLE  
IOS_NIM_BOSS:E22BE6A8 00000021 C BOSS_FS_ERROR_INVALID_DIR_HANDLE  
IOS_NIM_BOSS:E22BE6CC 00000017 C BOSS_FS_ERROR_NOT_FILE  
IOS_NIM_BOSS:E22BE6E4 00000016 C BOSS_FS_ERROR_NOT_DIR  
IOS_NIM_BOSS:E22BE6FC 0000001B C BOSS_FS_ERROR_FILE_TOO_BIG  
IOS_NIM_BOSS:E22BE718 0000001B C BOSS_FS_ERROR_OUT_OF_RANGE  
IOS_NIM_BOSS:E22BE734 0000001F C BOSS_FS_ERROR_OUT_OF_RESOURCES  
IOS_NIM_BOSS:E22BE754 0000001E C BOSS_FS_ERROR_MEDIA_NOT_READY  
IOS_NIM_BOSS:E22BE774 0000001A C BOSS_FS_ERROR_MEDIA_ERROR  
IOS_NIM_BOSS:E22BE790 0000001E C BOSS_FS_ERROR_WRITE_PROTECTED  
IOS_NIM_BOSS:E22BE7B0 00000016 C BOSS_FS_ERROR_UNKNOWN  
IOS_NIM_BOSS:E22BE7C8 00000010 C BOSS_TASK_ERROR  
IOS_NIM_BOSS:E22BE7D8 00000015 C BOSS_TASK_TR_UNKNOWN  
IOS_NIM_BOSS:E22BE7F0 00000015 C BOSS_TASK_TR_SUCCESS  
IOS_NIM_BOSS:E22BE808 00000023 C BOSS_TASK_INVALID_TASKRECORD_VALUE  
IOS_NIM_BOSS:E22BE82C 00000024 C BOSS_TASK_TR_LIBRARY_NOT_INITIALIZE  
IOS_NIM_BOSS:E22BE850 0000001F C BOSS_TASK_TR_INVALID_PARAMETER  
IOS_NIM_BOSS:E22BE870 0000001C C BOSS_TASK_TR_INVALID_FORMAT  
IOS_NIM_BOSS:E22BE88C 00000019 C BOSS_TASK_TR_INITIALIZED  
IOS_NIM_BOSS:E22BE8A8 00000017 C BOSS_TASK_TR_NOT_EXIST  
IOS_NIM_BOSS:E22BE8C0 0000001C C BOSS_TASK_TR_UNEXPECT_ERROR  
IOS_NIM_BOSS:E22BE8DC 00000016 C BOSS_TASK_TR_CANCELED  
IOS_NIM_BOSS:E22BE8F4 00000016 C BOSS_TASK_TR_FS_ERROR  
IOS_NIM_BOSS:E22BE90C 00000018 C BOSS_TASK_TR_HTTP_ERROR  
IOS_NIM_BOSS:E22BE924 00000025 C BOSS_TASK_TR_CANNOT_GET_NETWORK_TIME  
IOS_NIM_BOSS:E22BE94C 00000027 C BOSS_TASK_TR_CANNOT_READ_SYSTEM_CONFIG  
IOS_NIM_BOSS:E22BE974 00000021 C BOSS_TASK_TR_NOT_NETWORK_ACCOUNT  
IOS_NIM_BOSS:E22BE998 0000002C C BOSS_TASK_TR_RESTRICTED_BY_PARENTAL_CONTROL  
IOS_NIM_BOSS:E22BE9C4 0000001F C BOSS_TASK_TASKSHEET_ERROR_HTTP  
IOS_NIM_BOSS:E22BE9E4 00000029 C BOSS_TASK_TASKSHEET_ERROR_INVALID_FORMAT  
IOS_NIM_BOSS:E22BEA10 0000002A C BOSS_TASK_TASKSHEET_ERROR_BUFFER_OVERFLOW  
IOS_NIM_BOSS:E22BEA3C 0000002B C BOSS_TASK_TASKSHEET_ERROR_INVALID_TITLE_ID  
IOS_NIM_BOSS:E22BEA68 0000002A C BOSS_TASK_TASKSHEET_ERROR_INVALID_TASK_ID  
IOS_NIM_BOSS:E22BEA94 00000025 C BOSS_TASK_NBDL_ERROR_NSD_VERIFY_HASH  
IOS_NIM_BOSS:E22BEABC 00000023 C BOSS_TASK_NBDL_ERROR_NSD_HASH_SIZE  
IOS_NIM_BOSS:E22BEAE0 0000002F C BOSS_TASK_NBDL_ERROR_NSD_INVALID_HEADER_FORMAT  
IOS_NIM_BOSS:E22BEB10 00000033 C BOSS_TASK_NBDL_ERROR_NSD_DECRYPT_INITIALIZE_FAILED  
IOS_NIM_BOSS:E22BEB44 0000002B C BOSS_TASK_NBDL_ERROR_NSD_INVALID_DATA_SIZE  
IOS_NIM_BOSS:E22BEB70 0000002B C BOSS_TASK_NBDL_ERROR_GET_NEWS_STORAGE_INFO  
IOS_NIM_BOSS:E22BEB9C 00000030 C BOSS_TASK_NBDL_ERROR_PREPARE_BOSS_SAVEDATA_INFO  
IOS_NIM_BOSS:E22BEBCC 0000002F C BOSS_TASK_NBDL_ERROR_PREPARE_BOSS_STORAGE_INFO  
IOS_NIM_BOSS:E22BEBFC 0000002D C BOSS_TASK_NBDL_ERROR_CHECK_RESUME_FILE_EXIST  
IOS_NIM_BOSS:E22BEC2C 0000002B C BOSS_TASK_NBDL_ERROR_CHECK_DOWNLOAD_TARGET  
IOS_NIM_BOSS:E22BEC58 0000002E C BOSS_TASK_NBDL_ERROR_CALCULATE_CONTENT_LENGTH  
IOS_NIM_BOSS:E22BEC88 00000032 C BOSS_TASK_NBDL_ERROR_CHECK_BOSS_STORAGE_FILE_INFO  
IOS_NIM_BOSS:E22BECBC 00000037 C BOSS_TASK_NBDL_ERROR_CHECK_BOSS_STORAGE_REFERENCE_INFO
IOS_NIM_BOSS:E22BECF4 0000002F C BOSS_TASK_NBDL_ERROR_CHECK_MAX_FILE_TOTAL_SIZE  
IOS_NIM_BOSS:E22BED24 00000033 C BOSS_TASK_NBDL_ERROR_DELETABLE_FILE_INFO_NOT_EXIST  
IOS_NIM_BOSS:E22BED58 00000038 C BOSS_TASK_NBDL_ERROR_DELETABLE_REFERENCE_INFO_NOT_EXIST
IOS_NIM_BOSS:E22BED90 00000023 C BOSS_TASK_NBDL_ERROR_DOWNLOAD_FILE  
IOS_NIM_BOSS:E22BEDB4 00000023 C BOSS_TASK_NBDL_ERROR_DOWNLOAD_HTTP  
IOS_NIM_BOSS:E22BEDD8 0000002A C BOSS_TASK_NBDL_ERROR_GET_RESUME_FILE_INFO  
IOS_NIM_BOSS:E22BEE04 0000002A C BOSS_TASK_NBDL_ERROR_SET_RESUME_FILE_INFO  
IOS_NIM_BOSS:E22BEE30 0000002E C BOSS_TASK_NBDL_ERROR_UPDATE_BOSS_STORAGE_INFO  
IOS_NIM_BOSS:E22BEE60 0000002B C BOSS_TASK_NBDL_ERROR_ROLLBACK_BOSS_STORAGE  
IOS_NIM_BOSS:E22BEE8C 00000030 C BOSS_TASK_TR_ERROR_SET_ACCOUNT_NEW_ARRIVAL_FLAG  
IOS_NIM_BOSS:E22BEEBC 0000002E C BOSS_TASK_TR_ERROR_SET_TITLE_NEW_ARRIVAL_FLAG  
IOS_NIM_BOSS:E22BEEEC 00000012 C BOSS_TASK_UNKNOWN  
IOS_NIM_BOSS:E22BEF00 0000000F C BOSS_API_ERROR  
IOS_NIM_BOSS:E22BEF10 00000019 C BOSS_API_NOT_INITIALIZED  
IOS_NIM_BOSS:E22BEF2C 00000021 C BOSS_API_LIBRARY_NOT_INITIALIZED  
IOS_NIM_BOSS:E22BEF50 00000011 C BOSS_API_INVALID  
IOS_NIM_BOSS:E22BEF64 0000001B C BOSS_API_INVALID_PARAMETER  
IOS_NIM_BOSS:E22BEF80 00000018 C BOSS_API_INVALID_FORMAT  
IOS_NIM_BOSS:E22BEF98 00000015 C BOSS_API_INITIALIZED  
IOS_NIM_BOSS:E22BEFB0 00000013 C BOSS_API_NOT_EXIST  
IOS_NIM_BOSS:E22BEFC4 00000018 C BOSS_API_FILE_NOT_EXIST  
IOS_NIM_BOSS:E22BEFDC 00000017 C BOSS_API_NOT_COMPLETED  
IOS_NIM_BOSS:E22BEFF4 0000000E C BOSS_API_FULL  
IOS_NIM_BOSS:E22BF004 00000012 C BOSS_API_FINISHED  
IOS_NIM_BOSS:E22BF018 00000017 C BOSS_API_NOT_PERMITTED  
IOS_NIM_BOSS:E22BF030 0000000E C BOSS_API_FAIL  
IOS_NIM_BOSS:E22BF040 00000014 C BOSS_API_NO_SUPPORT  
IOS_NIM_BOSS:E22BF054 00000014 C BOSS_API_HTTP_ERROR  
IOS_NIM_BOSS:E22BF068 00000012 C BOSS_API_CANCELED  
IOS_NIM_BOSS:E22BF07C 0000001F C BOSS_API_STOPPED_BY_POLICYLIST  
IOS_NIM_BOSS:E22BF09C 00000011 C BOSS_API_UNKNOWN  
IOS_NIM_BOSS:E22BF0B0 00000012 C BOSS_API_FS_ERROR  
IOS_NIM_BOSS:E22BF0C4 0000001B C BOSS_API_FS_ERROR_NOT_INIT  
IOS_NIM_BOSS:E22BF0E0 00000017 C BOSS_API_FS_ERROR_BUSY  
IOS_NIM_BOSS:E22BF0F8 0000001B C BOSS_API_FS_ERROR_CANCELED  
IOS_NIM_BOSS:E22BF114 00000023 C BOSS_API_FS_ERROR_END_OF_DIRECTORY  
IOS_NIM_BOSS:E22BF138 0000001E C BOSS_API_FS_ERROR_END_OF_FILE  
IOS_NIM_BOSS:E22BF158 00000022 C BOSS_API_FS_ERROR_MAX_MOUNTPOINTS  
IOS_NIM_BOSS:E22BF17C 0000001E C BOSS_API_FS_ERROR_MAX_VOLUMES

IOS_NSEC:E10C3E84 0000000D C ASN1_INTEGER  
IOS_NSEC:E10C3E94 00000010 C ASN1_ENUMERATED  
IOS_NSEC:E10C3EA4 00000010 C ASN1_BIT_STRING  
IOS_NSEC:E10C3EB4 00000012 C ASN1_OCTET_STRING  
IOS_NSEC:E10C3EC8 0000000A C ASN1_NULL  
IOS_NSEC:E10C3ED4 0000000C C ASN1_OBJECT  
IOS_NSEC:E10C3EE0 00000010 C ASN1_UTF8STRING  
IOS_NSEC:E10C3EF0 00000015 C ASN1_PRINTABLESTRING 
IOS_NSEC:E10C3F08 0000000F C ASN1_T61STRING  
IOS_NSEC:E10C3F18 0000000F C ASN1_IA5STRING  
IOS_NSEC:E10C3F28 00000013 C ASN1_GENERALSTRING  
IOS_NSEC:E10C3F3C 0000000D C ASN1_UTCTIME  
IOS_NSEC:E10C3F4C 00000015 C ASN1_GENERALIZEDTIME 
IOS_NSEC:E10C3F64 00000013 C ASN1_VISIBLESTRING  
IOS_NSEC:E10C3F78 00000015 C ASN1_UNIVERSALSTRING 
IOS_NSEC:E10C3F90 0000000F C ASN1_BMPSTRING  
IOS_NSEC:E10C3FA0 00000009 C ASN1_ANY  
IOS_NSEC:E10C3FAC 0000000E C ASN1_SEQUENCE  
IOS_NSEC:E10C3FBC 0000000F C ASN1_PRINTABLE  
IOS_NSEC:E10C3FCC 0000000C C DISPLAYTEXT  
IOS_NSEC:E10C3FD8 00000010 C DIRECTORYSTRING  
IOS_NSEC:E10C3FE8 0000000D C ASN1_BOOLEAN  
IOS_NSEC:E10C3FF8 0000000E C ASN1_TBOOLEAN  
IOS_NSEC:E10C4008 0000000E C ASN1_FBOOLEAN  
IOS_NSEC:E10C4018 00000017 C ASN1_OCTET_STRING_NDEF
IOS_NSEC:E10C4030 00000012 C ASN1_SEQUENCE_ANY  
IOS_NSEC:E10C4044 0000000D C ASN1_SET_ANY  
IOS_NSEC:E10C4274 00000010 C asn1/tasn_utl.c  
IOS_NSEC:E10C4284 0000000B C X509_ALGOR  
IOS_NSEC:E10C4290 0000000C C X509_ALGORS  
IOS_NSEC:E10C429C 0000000A C algorithm  
IOS_NSEC:E10C42A8 0000000A C parameter

IOS_NET:124508B0 00000043 C Disabling card detect: read of device CCCR BICTRL register failed\n  
IOS_NET:124508F4 00000044 C Disabling card detect: write of device CCCR BICTRL register failed\n  
IOS_NET:12450938 00000018 C sdstd_bus_width failed\n  
IOS_NET:12450950 00000023 C %s: Could not enable ints in CCCR\n  
IOS_NET:12450974 00000013 C %s:SDHOST3-legacy\n  
IOS_NET:12450988 00000036 C Host Controller version 1.0, Vendor Revision: 0x%02x\n  
IOS_NET:124509C0 00000036 C Host Controller version 2.0, Vendor Revision: 0x%02x\n  
IOS_NET:124509F8 00000033 C %s: Host Controller version 0x%02x not supported.\n  
IOS_NET:12450A2C 0000002D C %s: Host cntrlr already in 4 bit mode: 0x%x\n  
IOS_NET:12450A5C 00000013 C set clock failed!\n  
IOS_NET:12450A70 0000001D C %s: CMD14: failed! retry:%d\n  
IOS_NET:12450A90 0000001D C %s: CMD14 send CMD7 failed!\n  
IOS_NET:12450AB0 00000028 C %s: Rounding up buffer to mod4 length.\n  
IOS_NET:12450AD8 00000022 C out of memory, malloced %d bytes\n  
IOS_NET:12450AFC 00000005 C read  
IOS_NET:12450B04 00000006 C write  
IOS_NET:12450B0C 0000001D C %s: cmd_issue failed for %s\n  
IOS_NET:12450B2C 0000004E C %s: Rsp5: nbytes %d, dma %d blockmode %d, read %d numblocks %d, blocksize %d\n  
IOS_NET:12450B7C 00000048 C %s: rsp5: Command not accepted: arg out of range 0x%x, bytes %d dma %d\n  
IOS_NET:12450BC4 00000019 C %s: Rsp5: General Error\n  
IOS_NET:12450BE0 00000037 C %s: rsp5 flags = 0x%x, expecting 0x10 returning error\n  
IOS_NET:12450C18 00000015 C %s: pio interrupted\n  
IOS_NET:12450C30 00000027 C %s: pio timeout waiting for interrupt\n  
IOS_NET:12450C58 00000005 C Read  
IOS_NET:12450C60 00000006 C Write  
IOS_NET:12450C68 00000055 C %s: Error or timeout for Buf_%s_Ready: intStat: 0x%x errint: 0x%x PresentState 0x%x\n  
IOS_NET:12450CC0 00000011 C %s: interrupted\n  
IOS_NET:12450CD4 00000023 C %s: timeout waiting for interrupt\n  
IOS_NET:12450CF8 00000077 C %s: Error or Timeout for xfer complete; %s, dma %d, State 0x%08x, intr 0x%04x, Err 0x%04x, len = %d, rcnt %d, tcnt %d\n
IOS_NET:12450D70 00000028 C %s: Restoring back buffer ptr and len.\n  
IOS_NET:12450D98 00000024 C %s: regread failed: Can't read CIS\n  
IOS_NET:12450DBC 00000030 C sdioh_attach: out of memory, malloced %d bytes\n  
IOS_NET:12450DEC 00000015 C %s:ioremap() failed\n  
IOS_NET:12450E04 0000001B C %s:driver_init() failed()\n  
IOS_NET:12450E20 00000034 C %s: Mapped DMA Buffer %dbytes @virt/phys: %p/0x%lx\n  
IOS_NET:12450E54 00000044 C %s: DMA_ALLOC failed for descriptor buffer. Disabling DMA support.\n  
IOS_NET:12450E98 00000041 C %s: Mapped ADMA2 Descriptor Buffer %dbytes @virt/phys: %p/0x%lx\n


Here's a small snippet of the massive mapped Functions
Code:
SysCall_0x00_IOS_CRYPTO IOS_CRYPTO 0000000004015F78 00000004  . . . . . . .
SysCall_0x03_IOS_CRYPTO IOS_CRYPTO 0000000004015F90 00000004  . . . . . . .
SysCall_0x05_IOS_CRYPTO IOS_CRYPTO 0000000004015FA0 00000004  . . . . . . .
SysCall_0x06_IOS_CRYPTO IOS_CRYPTO 0000000004015FA8 00000004  . . . . . . .
SysCall_0x07_IOS_CRYPTO IOS_CRYPTO 0000000004015FB0 00000004  . . . . . . .
SysCall_0x08_IOS_CRYPTO IOS_CRYPTO 0000000004015FB8 00000004  . . . . . . .
SysCall_0x0B_IOS_CRYPTO IOS_CRYPTO 0000000004015FD0 00000004  . . . . . . .
SysCall_0x0C_IOS_CRYPTO IOS_CRYPTO 0000000004015FD8 00000004  . . . . . . .
SysCall_0x0D_IOS_CRYPTO IOS_CRYPTO 0000000004015FE0 00000004  . . . . . . .
SysCall_0x0F_IOS_CRYPTO IOS_CRYPTO 0000000004015FE8 00000004  . . . . . . .
SysCall_0x10_IOS_CRYPTO IOS_CRYPTO 0000000004015FF8 00000004  . . . . . . .
SysCall_0x11_IOS_CRYPTO IOS_CRYPTO 0000000004016000 00000004  . . . . . . .
SysCall_0x12_IOS_CRYPTO IOS_CRYPTO 0000000004016008 00000004  . . . . . . .
SysCall_0x20_IOS_CRYPTO IOS_CRYPTO 0000000004016078 00000004  . . . . . . .
SysCall_0x22_IOS_CRYPTO IOS_CRYPTO 0000000004016088 00000004  . . . . . . .
SysCall_0x23_IOS_CRYPTO IOS_CRYPTO 0000000004016090 00000004  . . . . . . .
SysCall_0x25_IOS_CRYPTO IOS_CRYPTO 00000000040160A0 00000004  . . . . . . .
SysCall_0x27_IOS_CRYPTO IOS_CRYPTO 00000000040160B0 00000004  . . . . . . .
SysCall_0x28_IOS_CRYPTO IOS_CRYPTO 00000000040160B8 00000004  . . . . . . .
SysCall_0x29_IOS_CRYPTO IOS_CRYPTO 00000000040160C0 00000004  . . . . . . .
SysCall_0x2C_IOS_CRYPTO IOS_CRYPTO 00000000040160D8 00000004  . . . . . . .
SysCall_0x2D_IOS_CRYPTO IOS_CRYPTO 00000000040160E0 00000004  . . . . . . .
SysCall_0x33_IOS_CRYPTO IOS_CRYPTO 0000000004016110 00000004  . . . . . . .
SysCall_0x34_IOS_CRYPTO IOS_CRYPTO 0000000004016118 00000004  . . . . . . .
SysCall_0x38_IOS_CRYPTO IOS_CRYPTO 0000000004016138 00000004  . . . . . . .
SysCall_0x49_IOS_CRYPTO IOS_CRYPTO 00000000040161C0 00000004  . . . . . . .
SysCall_0x4C_IOS_CRYPTO IOS_CRYPTO 00000000040161D8 00000004  . . . . . . .
SysCall_0x4F_IOS_CRYPTO IOS_CRYPTO 00000000040161F0 00000004  . . . . . . .
SysCall_0x50_IOS_CRYPTO IOS_CRYPTO 00000000040161F8 00000004  . . . . . . .
SysCall_0x51_IOS_CRYPTO IOS_CRYPTO 0000000004016200 00000004  . . . . . . .
SysCall_0x52_IOS_CRYPTO IOS_CRYPTO 0000000004016208 00000004  . . . . . . .
SysCall_0x56_IOS_CRYPTO IOS_CRYPTO 0000000004016228 00000004  . . . . . . .

SysCall_0x5F_IOS_MCP IOS_MCP 0000000005056AE4 00000004  . . . . . . .
SysCall_0x65_IOS_MCP IOS_MCP 0000000005056B14 00000004  . . . . . . .
SysCall_0x6B_IOS_MCP IOS_MCP 0000000005056B44 00000004  . . . . . . .
SysCall_0x6D_IOS_MCP IOS_MCP 0000000005056B54 00000004  . . . . . . .
SysCall_0x71_IOS_MCP IOS_MCP 0000000005056B74 00000004  . . . . . . .
SysCall_0x72_IOS_MCP IOS_MCP 0000000005056B7C 00000004  . . . . . . .
SysCall_0x73_IOS_MCP IOS_MCP 0000000005056B84 00000004  . . . . . . .
SysCall_0x74_IOS_MCP IOS_MCP 0000000005056B8C 00000004  . . . . . . .
SysCall_0x75_IOS_MCP IOS_MCP 0000000005056B94 00000004  . . . . . . .
SysCall_0x76_IOS_MCP IOS_MCP 0000000005056B9C 00000004  . . . . . . .
SysCall_0x77_IOS_MCP IOS_MCP 0000000005056BA4 00000004  . . . . . . .
SysCall_0x78_IOS_MCP IOS_MCP 0000000005056BAC 00000004  . . . . . . .
SysCall_0x79_IOS_MCP IOS_MCP 0000000005056BB4 00000004  . . . . . . .
SysCall_0x7A_IOS_MCP IOS_MCP 0000000005056BBC 00000004  . . . . . . .
SysCall_0x7B_IOS_MCP IOS_MCP 0000000005056BC4 00000004  . . . . . . .

sub_812E74C  IOS_KERNEL 000000000812E74C 0000002C 00000000 00000044 R . . . . . .
disable_interrupts IOS_KERNEL 000000000812E778 00000014  R . . . . . .
sub_812E78C  IOS_KERNEL 000000000812E78C 00000014  R . . . . . .
sub_812E7A0  IOS_KERNEL 000000000812E7A0 00000044  R . . . . . .
sub_812E90C  IOS_KERNEL 000000000812E90C 0000002C  R . . . . . .
nullsub_211  IOS_KERNEL 000000000812E938 00000004  R . . . . . .

j_SysCall_0x5A_IOS_USB IOS_USB 000000001012E908 00000004  . . . . . . .
sub_1012E90C  IOS_USB 000000001012E90C 00000034  R . . . . . .
sub_1012E940  IOS_USB 000000001012E940 00000008  . . . . . . .
j_SysCall_0x59_IOS_USB IOS_USB 000000001012E948 00000004  . . . . . . .
sub_1012E958  IOS_USB 000000001012E958 00000090  R . . . . . .
SysCall_0x00_IOS_USB  IOS_USB 000000001012EABC 00000004  . . . . . . .
SysCall_0x03_IOS_USB  IOS_USB 000000001012EAD4 00000004  . . . . . . .
SysCall_0x05_IOS_USB  IOS_USB 000000001012EAE4 00000004  . . . . . . .
SysCall_0x06_IOS_USB  IOS_USB 000000001012EAEC 00000004  . . . . . . .
SysCall_0x07_IOS_USB  IOS_USB 000000001012EAF4 00000004  . . . . . . .
SysCall_0x08_IOS_USB  IOS_USB 000000001012EAFC 00000004  . . . . . . .
SysCall_0x0A_IOS_USB  IOS_USB 000000001012EB0C 00000004  . . . . . . .
SysCall_0x0B_IOS_USB  IOS_USB 000000001012EB14 00000004  . . . . . . .
SysCall_0x0C_IOS_USB  IOS_USB 000000001012EB1C 00000004  . . . . . . .
SysCall_0x0D_IOS_USB  IOS_USB 000000001012EB24 00000004  . . . . . . .
SysCall_0x0E_IOS_USB  IOS_USB 000000001012EB2C 00000004  . . . . . . .
SysCall_0x10_IOS_USB  IOS_USB 000000001012EB3C 00000004  . . . . . . .
SysCall_0x11_IOS_USB  IOS_USB 000000001012EB44 00000004  . . . . . . .
SysCall_0x12_IOS_USB  IOS_USB 000000001012EB4C 00000004  . . . . . . .
SysCall_0x13_IOS_USB  IOS_USB 000000001012EB54 00000004  . . . . . . .
SysCall_0x14_IOS_USB  IOS_USB 000000001012EB5C 00000004  . . . . . . .
SysCall_0x16_IOS_USB  IOS_USB 000000001012EB6C 00000004  . . . . . . .
SysCall_0x17_IOS_USB  IOS_USB 000000001012EB74 00000004  . . . . . . .
SysCall_0x19_IOS_USB  IOS_USB 000000001012EB84 00000004  . . . . . . .
SysCall_0x1A_IOS_USB  IOS_USB 000000001012EB8C 00000004  . . . . . . .
SysCall_0x24_IOS_USB  IOS_USB 000000001012EBDC 00000004  . . . . . . .
SysCall_0x25_IOS_USB  IOS_USB 000000001012EBE4 00000004  . . . . . . .
SysCall_0x27_IOS_USB  IOS_USB 000000001012EBF4 00000004  . . . . . . .
SysCall_0x28_IOS_USB  IOS_USB 000000001012EBFC 00000004  . . . . . . .
SysCall_0x29_IOS_USB  IOS_USB 000000001012EC04 00000004  . . . . . . .
SysCall_0x2A_IOS_USB  IOS_USB 000000001012EC0C 00000004  . . . . . . .

j_j_SysCall_0x59_IOS_FS_0 IOS_FS 000000001071DA08 00000004  . . . . . . .
sub_1071DA0C  IOS_FS 000000001071DA0C 00000004  . . . . . . .
j_j_SysCall_0x5A_IOS_FS  IOS_FS 000000001071DA10 00000004  . . . . . . .
j_j_SysCall_0x5A_IOS_FS_0 IOS_FS 000000001071DA14 00000004  . . . . . . .
sub_1071DA18  IOS_FS 000000001071DA18 00000010  R . . . . . .
sub_1071DA28  IOS_FS 000000001071DA28 00000010  R . . . . . .
j_j_SysCall_0x59_IOS_FS  IOS_FS 000000001071DA38 00000004  . . . . . . .
sub_1071DA3C  IOS_FS 000000001071DA3C 00000008  . . . . . . .

sub_FFFF0000 Kernel_SRAM 00000000FFFF0000 00000004  R . . . . . .
sub_FFFF004C Kernel_SRAM 00000000FFFF004C 00000014  R . . . . . .
_Reset  Kernel_SRAM 00000000FFFF0060 0000007C  R . . . . . .
sub_FFFFDA38 Kernel_SRAM 00000000FFFFDA38 00000070 00000008 00000000  R . . . . . .
sub_FFFFDACC Kernel_SRAM 00000000FFFFDACC 00000070 00000008 FFFFFFFFFFFFFFF8 R . . . . . .
sub_FFFFDB68 Kernel_SRAM 00000000FFFFDB68 00000028 00000014 FFFFFFFFFFFFFFEC R . . . . . .
sub_FFFFDB94 Kernel_SRAM 00000000FFFFDB94 000000A8  R . . . . . .
sub_FFFFDC48 Kernel_SRAM 00000000FFFFDC48 00000314  R . . . . . .
sub_FFFFDF5C Kernel_SRAM 00000000FFFFDF5C 0000006C 00000020 FFFFFFFFFFFFFFE0 R . . . . . .
sub_FFFFDFC8 Kernel_SRAM 00000000FFFFDFC8 000000A0  . . . . . . .
sub_FFFFE0D0 Kernel_SRAM 00000000FFFFE0D0 0000001C  R . . . . . .
sub_FFFFE0F4 Kernel_SRAM 00000000FFFFE0F4 000002F4 00000010 FFFFFFFFFFFFFFF0 R . . . . . .
sub_FFFFE3EC Kernel_SRAM 00000000FFFFE3EC 00000178 00000010 FFFFFFFFFFFFFFF0 R . . . . . .
sub_FFFFE574 Kernel_SRAM 00000000FFFFE574 00000130  R . . . . . .
sub_FFFFE6AC Kernel_SRAM 00000000FFFFE6AC 00000280 0000001C FFFFFFFFFFFFFFE4 R . . . . . .
sub_FFFFE95C Kernel_SRAM 00000000FFFFE95C 0000019C 00000014 FFFFFFFFFFFFFFEC R . . . . . .

These are just little snippets of the vast amount of data.
The actual dataset is way bigger than can be posted here.

We should all be saying "Thank You Hykem"
 

Datalogger

Living the Dream
Member
Joined
Dec 21, 2009
Messages
416
Trophies
1
Location
Maui
XP
706
Country
United States
Good to see at least someone trying to contribute.

There's still a lot to do in order to get the FW IDA Dump's "Ready for Prime-Time"

I've got about 98% of the Code Segments, and about 95% of the Strings mapped, but these Null-Spaced one's are a PITA to get a script to process cleanly.
As it is now, it's a lot of manual work to go back and gather the stragglers up and parse them one-at-a-time.
If everyone works on this, it would be done in no-time.

The unclear NULL-Spaced-Text Strings like seen in the IOS_NIM_BOSS segment take a ton of time to do manually, and so far scripts I've written don't get them all in one-shot.
I'll get it done, but it's going to take time to get it right.

Snippet of a few of the Null-Spaced Strings
Code:
IOS_NIM_BOSS:E22A5E08 00000030 C Ranking::NotImplemented              
IOS_NIM_BOSS:E22A5E38 00000038 C Unknown qResult Error Code            
IOS_NIM_BOSS:E22A5E70 00000028 C Transport::Unknown                    
IOS_NIM_BOSS:E22A5E98 0000003C C Transport::ConnectionFailure          
IOS_NIM_BOSS:E22A5ED4 0000002C C Transport::InvalidUrl                
IOS_NIM_BOSS:E22A5F00 0000002C C Transport::InvalidKey                
IOS_NIM_BOSS:E22A5F2C 00000034 C Transport::InvalidURLType            
IOS_NIM_BOSS:E22A5F60 0000003C C Transport::DuplicateEndpoint          
IOS_NIM_BOSS:E22A5F9C 00000028 C Transport::IOError                    
IOS_NIM_BOSS:E22A5FC4 00000028 C Transport::Timeout                    
IOS_NIM_BOSS:E22A5FEC 00000038 C Transport::ConnectionReset            
IOS_NIM_BOSS:E22A6024 00000054 C Transport::IncorrectRemoteAuthentication
IOS_NIM_BOSS:E22A6078 0000003C C Transport::ServerRequestError        
IOS_NIM_BOSS:E22A60B4 00000040 C Transport::DecompressionFailure      
IOS_NIM_BOSS:E22A60F4 00000050 C Transport::ReliableSendBufferFullFatal
IOS_NIM_BOSS:E22A6144 00000034 C Transport::UPnPCannotInit            
IOS_NIM_BOSS:E22A6178 00000040 C Transport::UPnPCannotAddMapping      
IOS_NIM_BOSS:E22A61B8 00000038 C Transport::NatPMPCannotInit          
IOS_NIM_BOSS:E22A61F0 00000044 C Transport::NatPMPCannotAddMapping    
IOS_NIM_BOSS:E22A6234 00000034 C Transport::UnsupportedNAT            
IOS_NIM_BOSS:E22A6268 00000028 C Transport::DnsError                  
IOS_NIM_BOSS:E22A6290 0000002C C Transport::ProxyError                
IOS_NIM_BOSS:E22A62BC 00000034 C Transport::DataRemaining              
IOS_NIM_BOSS:E22A62F0 00000028 C Transport::NoBuffer                  
IOS_NIM_BOSS:E22A6318 00000028 C Transport::NotFound                  
IOS_NIM_BOSS:E22A6340 00000040 C Transport::TemporaryServerError      
IOS_NIM_BOSS:E22A6380 00000040 C Transport::PermanentServerError      
IOS_NIM_BOSS:E22A63C0 0000003C C Transport::ServiceUnavailable        
IOS_NIM_BOSS:E22A63FC 00000044 C Transport::ReliableSendBufferFull    
IOS_NIM_BOSS:E22A6440 00000034 C Transport::InvalidStation            
IOS_NIM_BOSS:E22A6474 0000003C C Transport::InvalidSubStreamID        
IOS_NIM_BOSS:E22A64B0 00000038 C Transport::PacketBufferFull          
IOS_NIM_BOSS:E22A64E8 0000003C C Transport::NatTraversalError          
IOS_NIM_BOSS:E22A6524 00000034 C Transport::NatCheckError              
IOS_NIM_BOSS:E22A6558 0000002C C Core::NotImplemented                  
IOS_NIM_BOSS:E22A6584 0000002C C Core::InvalidPointer                  
IOS_NIM_BOSS:E22A65B0 00000030 C Core::OperationAborted                
IOS_NIM_BOSS:E22A65E0 00000028 C Core::AccessDenied                    
IOS_NIM_BOSS:E22A6608 00000028 C Core::InvalidHandle                  
IOS_NIM_BOSS:E22A6630 00000028 C Core::InvalidIndex                    
IOS_NIM_BOSS:E22A6658 00000024 C Core::OutOfMemory                    
IOS_NIM_BOSS:E22A667C 0000002C C Core::InvalidArgument                
IOS_NIM_BOSS:E22A66A8 0000001C C Core::Timeout                        
IOS_NIM_BOSS:E22A66C4 00000038 C Core::InitializationFailure          
IOS_NIM_BOSS:E22A66FC 00000038 C Core::CallInitiationFailure          
IOS_NIM_BOSS:E22A6734 00000030 C Core::RegistrationError              
IOS_NIM_BOSS:E22A6764 0000002C C Core::BufferOverflow                  
IOS_NIM_BOSS:E22A6790 00000030 C Core::InvalidLockState                
IOS_NIM_BOSS:E22A67C0 0000002C C Core::InvalidSequence                
IOS_NIM_BOSS:E22A67EC 00000034 C DOCore::StationNotReached            
IOS_NIM_BOSS:E22A6820 00000040 C DOCore::TargetStationDisconnect      
IOS_NIM_BOSS:E22A6860 00000038 C DOCore::LocalStationLeaving          
IOS_NIM_BOSS:E22A6898 00000030 C DOCore::ObjectNotFound                
IOS_NIM_BOSS:E22A68C8 00000028 C DOCore::InvalidRole                  
IOS_NIM_BOSS:E22A68F0 00000028 C DOCore::CallTimeout                  
IOS_NIM_BOSS:E22A6918 00000034 C DOCore::RMCDispatchFailed            
IOS_NIM_BOSS:E22A694C 00000038 C DOCore::MigrationInProgress          
IOS_NIM_BOSS:E22A6984 00000028 C DOCore::NoAuthority                  
IOS_NIM_BOSS:E22A69AC 00000044 C DOCore::NoTargetStationSpecified      
IOS_NIM_BOSS:E22A69F0 00000028 C DOCore::JoinFailed                    
IOS_NIM_BOSS:E22A6A18 00000028 C DOCore::JoinDenied                    
IOS_NIM_BOSS:E22A6A40 00000040 C DOCore::ConnectivityTestFailed
(IDA doesn't "see" these as Strings, so you have to process them with scripts and/or manually.)
 
Last edited by Datalogger,

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    Psionic Roshambo @ Psionic Roshambo: https://www.youtube.com/@legolambs