I've been trying to figure out the reset sequence for bjavaloader and
I'm a bit stuck. Attached is a condensed USB log containing just the
USB capture of the reset sequence with comments. For the most part I
have it figured out except the very first packet.
There is 8 bytes in the payload of the first packet that I can't seem
to figure out. They change each time a call to javaloader is
issued that causes a handheld reset. Possibly a timestamp?
Anyone have any ideas?
--
Josh Kropf <j...@slashdev.ca>
>>> Send packet
<<< Receive packet
The following series of packets occur after SB_COMMAND_CLOSE_SOCKET when
either loading or forcefully erasing a module that is in use (busy). This
sequence is strikingly similar to the one used by cfp.exe utility when it
resets the handheld.
>>> 00000000: 00 00 10 00 01 ff 00 03 bb 35 2d b9 01 00 00 00 .........5-.....
^^^^^ socket number
^^^^^ size of packet
^^ send package has 0x01, response has 0x02
^^^^^ SB_MODE_REQUEST_SOCKET in barry
^^ socket sequence
^^^^^^^^^^^^^^^^^^^^^^^
this data is unknown... it seems to change
each time javaloader issues reset/reboot
<<< 00000000: 00 00 10 00 02 ff 00 03 bb 35 2d b9 01 00 00 00 .........5-.....
>>> 00000000: 00 00 0c 00 05 ff 00 04 14 00 01 00 ............
^^ fetch attribute
^^^^^ SB_MODE_REQUEST_SOCKET
^^ socket sequence
^^^^^ SB_OBJECT_INITIAL_UNKNOWN
^^^^^ SB_ATTR_INITIAL_UNKNOWN
<<< 00000000: 00 00 20 00 06 ff 00 04 14 00 01 00 3c 41 30 3e .. .........<A0>
<<< 00000010: 1e 47 24 0d 99 92 3f b1 38 d6 a3 6e 75 cd c9 d7 .G$...?.8..nu...
>>> 00000000: 00 00 0c 00 05 ff 00 05 08 00 04 00 ............
^^^^^ SB_OBJECT_PROFILE
^^^^^ SB_ATTR_PROFILE_PIN
<<< 00000000: 00 00 14 00 06 ff 00 05 08 00 04 00 03 00 00 00 ................
<<< 00000010: 2e 36 61 20 .6a
>>> 00000000: 00 00 0c 00 05 ff 00 06 04 00 05 00 ............
^^^^^ SB_OBJECT_SOCKET_UNKNOWN
^^^^^ unknown
<<< 00000000: 00 00 0c 00 06 ff 00 06 00 00 00 00 ............
>>> 00000000: 00 00 0c 00 05 ff 00 07 04 00 06 00 ............
^^^^^ SB_OBJECT_SOCKET_UNKNOWN
^^^^^ unknown
<<< 00000000: 00 00 0c 00 06 ff 00 07 00 00 00 00 ............
>>> 00000000: 00 00 0c 00 05 ff 00 08 04 00 07 00 ............
^^^^^ SB_OBJECT_SOCKET_UNKNOWN
^^^^^ unknown
<<< 00000000: 00 00 10 00 06 ff 00 08 04 00 07 00 00 02 00 00 ................
>>> 00000000: 00 00 0c 00 05 ff 00 09 04 00 08 00 ............
^^^^^ SB_OBJECT_SOCKET_UNKNOWN
^^^^^ unknown
<<< 00000000: 00 00 0c 00 06 ff 00 09 00 00 00 00 ............
>>> 00000000: 00 00 0c 00 05 ff 00 0a 04 00 0a 00 ............
^^^^^ SB_OBJECT_SOCKET_UNKNOWN
^^^^^ unknown
<<< 00000000: 00 00 0c 00 06 ff 00 0a 00 00 00 00 ............
>>> 00000000: 00 00 08 00 03 ff 00 0b ........
<<< 00000000: 00 00 08 00 04 ff 00 0b ........
------------------------------------------------------------------------------
Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM)
software. With Adobe AIR, Ajax developers can use existing skills and code to
build responsive, highly engaging applications that combine the power of local
resources and data with the reach of the web. Download the Adobe AIR SDK and
Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
_______________________________________________
Barry-devel mailing list
Barry-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/barry-devel
