Download Text - ETH E-Collection

Appendix A
Full Listings
1
2
3
4
5
6
7
8
9
10
A.1
Samsung GT-B3740 USB LTE Stick, Firmware B3740BUKA2
A.1.1
AutoHook Configuration File
[DEFAULT]
endian
= CS_MODE_LITTLE_ENDIAN
# "manual" patches - redirect stdout to uart, clear place where log_flag
is stored and place that holds pointer to temp_buf
post_cmds
= mww 0x401BA04C 0x27B8DB
mww 0x404358F8 0x0
mww 0x404358EC 0x0
mww 0x404358F4 0x0
load_image custom_uart.bin 0x40435900 bin
resume
11
12
13
# interrupt vector hooks! target is printf function
# wrapper will go to endless loop after calling target.
14
15
16
17
18
19
20
21
22
23
24
[undefined_instruction]
patch_method
= pointer
source_loc
= 0x40000040
source_instr_set
= Thumb2
wrap_loc
= 0x405C7000
target
= 0x401BA018
target_instr_set
= Thumb2
custom_stub
= halt_hook_thumb2_eq.wrap
CUSTOM_1
= Undefined Instruction!
CUSTOM_2
= BLX 0x405C7300
25
45