[EOS] TimerGen Tool

Since last year I helped a little developing Magic Lantern, a Firmware mod for Canon EOS DSLRs.
I reverse engineered some interesting registers and memory structures that make frame rate patching possible.

(yeah, as always I couldn’t resist reverse engineering the next device I bought :) )

Now I’ve coded a little tool that makes it possible to:
a) Calculate the exact timer frequency that generates frame rate
b) generate custom frame rates

The tool is available here.
Here some screenshot.



[GSM] Kraken

currently i am porting Kraken, the fantastic A5/1 cipher cracker to win32/x64.
it seems that i am done with most of the steps.

it starts, cracks the keys, supports ATI cards as the linux version does and is even able to run as a multi-client server application.

i also added support for older cards like the Radeon HD 3870 which will speed up the key search by maybe 10% depending on your HDD setup.

unfortunately its no GPL or even a more free license like MIT or BSD.
so i may not publish my changes. instead i will try to get them added to the original repository.
since i also changed a lot (!) in the internals of kraken, i am not sure if it will get added :)

but we will see….

[ARMada] small updates

there are small updates to ARMada. let me cite the SVN log:

Revision: 3585
Author: geggo
Date: 19:55:28, Mittwoch, 19. August 2009
fixed parameter limit check for ADD SP, val operation
Modified : /trunk/nokia/ARMada/compiler.c

Revision: 3579
Author: geggo
Date: 19:29:51, Mittwoch, 19. August 2009
fixed ADDSP, ADDPC, SUBPC descriptions to match new ADD/SUB type opcode
fixed ADD Rn, SP, val opcode
fixed .code description
Modified : /trunk/nokia/ARMada/ARM_Compiler.aps
Modified : /trunk/nokia/ARMada/ARM_Compiler.rc
Modified : /trunk/nokia/ARMada/ARM_Compiler.vcproj
Modified : /trunk/nokia/ARMada/code.c
Modified : /trunk/nokia/ARMada/code.h
Modified : /trunk/nokia/ARMada/compiler.c

[GSM] New FFT Visualizer Component

This time I built a new FFT Visualizer Component.
It’s a split “FFT Plot”+”Waterfall” view, which has the “FFT Plot” in the top and the waterfall in the bottom half.

In the video (watch fullscreen in HD mode) you cannot see the dB markers very clearly.
These are on the left and the right border of the “FFT Plot” (top part) and labelled in 50dB steps.

The “Waterfall” has a configurable upper and lower dB limit (changed with mouse wheel, see lower left corner).
Values above the upper limit are drawn cyan, those with a dB value lower than the lower limit are drawn black.
The values between are colored with a color between.

Here a video of that component:

[GSM] Code updates

On the videos you’ve maybe seen that my tool shows the bursts in some plot window. I used GDI for drawing the lines… damn this is soooo slooow…

Today i decided to switch to DirectX drawing for speedup. Ater some hours of playing around, I found out how to draw a plot easily. (using DrawUserPrimitives with LineStrip vertices)

The graph is reeeeaally fast now (displaying bursts in realtime) with just about 5% of CPU load. kewl :)

But the DirectX assemblies Microsoft provides seem to work only with x86.. oouch. So I looked for some solution and found SlimDX which is a managed DirectX library. Using this library I can now run my tools in x64 mode again.

How much faster my tool is in x64 mode?

Hm I think about 0.001% up to 0.002%… But hey, running 64 bit code is much cooler :)

I uploaded two dumps generated with my GSM Analyzer:

  • Dump 1 contains ~15 min dump without “SYSTEM INFORMATION” or “PAGING REQUEST” messages except those with an IMSI
  • Dump 2 contains just a few seconds with everything and is really ugly to read for this reason