@lupyuen The old ones are there still, the new ones should be far better.

@AmpBenzScientist I took a peek ... Wonder if you wanna unzip the new files and replace the old ones? Kinda hard for me to link to the source files in my toots and tweets. Thanks 🙏

@lupyuen Thank you sir for the advice. I will have it up in about 15 minutes.

@AmpBenzScientist
Drop a link Benz, i wanna have a peek both at evolution and at your new children alone.

@lupyuen

@AmpBenzScientist Thanks! This file that you have reverse-engineered...

https://github.com/BraveHeartFLOSSDev/bl602nutcracker1/blob/main/libwifi2/phy_bl602.o.c

Looks similar to this source file?

https://github.com/jixinintelligence/bl602-604/blob/37f2d7b36b4c2ba6f073029d351551c33f9610f3/components/bl602/bl602_wifi/plf/refip/src/driver/phy/bl602_phy_rf/phy_bl602.c

Trying to figure out how this code is used by the BL602 WiFi Driver. Is this only used when BL602 is running as Host AP?

In my recent posts you can see that BL602 running as WiFi client will just call the LMAC Firmware directly.

And where is the LMAC Firmware code?

Puzzling 🤔

@AmpBenzScientist Another possible match: This file...

https://github.com/BraveHeartFLOSSDev/bl602nutcracker1/blob/main/libwifi1/bl602_calib_data.o.c

Looks similar to this...

https://github.com/jixinintelligence/bl602-604/blob/37f2d7b36b4c2ba6f073029d351551c33f9610f3/components/bl602/bl602_wifi/plf/refip/src/driver/phy/bl602_phy_rf/rf/Src/bl602_calib_data.c

@lupyuen I reverse engineered the binaries, this looks like the developer. I remember the binaries I reverse engineered were compiled on a workstation by a user RJ Wang.

@lupyuen I think it is the same 人 王。

@AmpBenzScientist Haha what's 人 王?

I can't find a match for this file though:

https://github.com/BraveHeartFLOSSDev/bl602nutcracker1/blob/main/libwifi1/bl.o.c

I searched for "bl_init" in the other repo. Why are some files missing from the other repo? 🤔

@AmpBenzScientist I'm also checking this pic for CEVA RivieraWaves...

https://www.ceva-dsp.com/product/rivierawaves-wi-fi-platforms/

Could we be looking at the "WiFi Driver" in the pic below? Which is the code from RivieraWaves?

@lupyuen Or a modified version of it. I would think so.

@AmpBenzScientist Aha I found the link from BL602 Firmware to your RE code. Great job! 👍

@AmpBenzScientist wifi_main appears to be the entry point into the libwifi library ... Lemme trace it and see where it goes

@AmpBenzScientist Wonder if I should comb thru GitHub Code Search for wifi_main and see whether I can find the source 🤔

https://github.com/search?l=C&o=desc&q=wifi_main&s=indexed&type=Code

@AmpBenzScientist Oops cancel last order ... I searched GitHub for coex_wifi_pta_forece_enable and found nothing interesting.

Which proves that wifi_main doesn't exist in GitHub.

https://github.com/search?l=C&q=coex_wifi_pta_forece_enable&type=Code

@lupyuen Person Wang. He seems to be the developer and the code in that repo was made before Pine64 released a product with the BL602. I think it's the same RJ Wang who developed the code. If there are missing files, then they kept parts of the code hidden.

@AmpBenzScientist Ah haha ... 人王 is probably not a good thing to say because it sounds like 人亡 which means... 😉

@lupyuen
Hah intricacies of chinese language.

@AmpBenzScientist

@PawelK @lupyuen There is an entire story based on variations of ma.

@AmpBenzScientist
In thai too. Something with lady who burned piece of red silk. Whole sentemce with "ma"s or something.

@lupyuen

@lupyuen I rarely ever get to use Mandarin. It's usually English, Spanish or Russian.

@AmpBenzScientist I'll probably make the same mistake in Spanish and Russian 😂

@lupyuen
Maybe so maybe no. Much less likely. Its easier to train Chinese-native-speaker for western langs than other way round. Tones are way too abstract for us.

@AmpBenzScientist

@PawelK @lupyuen Pinyín helps to bridge the gap but one with HSK 3 certification will still have trouble at times.

@AmpBenzScientist

When trying to learn thai long time ago, tones drove me into so much despair i dropped the project.

Japanese whose chars are still insane makes way much more sense wrt phonetics.

Ill need to learn about pinyin.

@lupyuen

@PawelK @lupyuen Having 3 sets of characters is absurd.

@lupyuen I remember being shown footage from the FBI and an Agent asked us where it was from. I said Russia because of the Communist style housing, I heard some Russian shouting before the shootout with police and the neighbor was angry about the noise and responded with an AKM. It was actually Ukraine.

@lupyuen
Methinks it would be good for Amp to integrate symbol and var names from jixintelligence into Amps revver project. It might add missing data and help us better understand whats going on in the code.

@AmpBenzScientist

@lupyuen @AmpBenzScientist

With that I could try to help to do differential analysis and varname mapping etc. It could help give more granularity/details to your rev jobs on bl602.

@PawelK @lupyuen I'm busy with some other work so I'll have to decline for now at least. I need to push some code to Ghidra and I want get more involved in development for Ghidra.

@AmpBenzScientist
Kewl. Ill grab your freshest code and align it to code of this mr/mrs Wang. If its sweet, ill publish it on github.

@lupyuen

@PawelK @lupyuen Do as you wish but remember to include the Apache License v2 and contributors. It would be quite helpful to developers, you have my blessing if you do this.

@AmpBenzScientist
Ill try. Looks like a fancy job. Kind of ones i love. Going from lowc to highc.

@lupyuen

@PawelK @lupyuen Glad to hear that you are interested. It's always good to have Developer attached to one's name. It's also useful to keep up with the toolsets being used.

@AmpBenzScientist
What bugs me tiny bit is ghidra is written in java. Im looking for nicer alternative.

@lupyuen

@PawelK @lupyuen Cutter is quite capable now with a disassembler built off of Ghidra but rewritten in Cpp.

@AmpBenzScientist
Its on my radar-e. Mehehe.

Need to get back to ghidra radare cutter rizin bunch and play with those a little.

@lupyuen

@PawelK @lupyuen Radare2 and Cutter both crashed when trying to disassemble Risc-V code. I only used Ghidra and I had to modify it constantly to get better results. When you use Ghidra, do yourself a favor and compile from source then modify the launch script to allocate more ram to VM. I had to use 6GB for VM but it gave better results. Compiling from source makes Ghidra much more responsive. Eclipse is strongly suggested as it extends functionality.

@AmpBenzScientist
Ty for all the hints. Yea javas memory hunger drives me insane and im based on rather lowbie machine. Ill try to add something to radare and cutter to get them less crashy.

Im dreaming of collaborative ghidra workspaces githubbish style.

@lupyuen

@PawelK @lupyuen No problem.

@PawelK @lupyuen The goal was to get as close as possible to the source by only Reversing the binaries. I leave it open so that others can take the code and build off of it.

@AmpBenzScientist
Ok i might try to build up higher lev rev analysis over your child. I will try to do mappings between your lowered-c and his highlev-c and well see what comes out of it.

@lupyuen

@lupyuen I'll check on that.