EC315_research.md

• https://pastebin.com/NcGy8Fr7

• https://androidforums.com/threads/virgin-mobile-sprint-help-qualcomm-hs-usb-qdloader-9008.869613/

  dbl.mbn - Device Boot Loader
  osbl.mbn - OS Boot Loader
  partition.mbn - MBR sector
  

• For http://forum.gsmhosting.com/vbb/f804/huawei-modem-universal-flasher-1495518/index23.html#post9851968

  Rename extracted firmware parts as follows:
  01.bin -> partition.mbn;
  02.bin -> dbl.mbn;
  03.bin -> osbl.mbn;
  04.bin -> amss.mbn;
  05.bin -> dsp1.mbn;
  06.bin -> dsp2.mbn.
  

• Reverse Engineering Android's Aboot

morpheus@Forge (~/S5/)% od -A d -t x4 aboot |head -5
                 Magic             Version             NULL            ImgBase
0000000          00000005          00000003          00000000          0f800000
                 ImgSize           CodeSize      ImgBase+CodeSize      SigSize
0000020          00107e24          000fed24          0f8fed24          00000100
         ImgBase+CodeSize+SigSize    Certs
0000040          0f8fee24          00009000          ea000006          ea005487
0000048          ea00548d          ea005493          ea005499          ea00549f
0000064          ea00549f          ea0054b6          ee110f10          e3c00a0b

• http://blog.azimuthsecurity.com/2013/05/exploiting-samsung-galaxy-s4-secure-boot.html

• http://blog.azimuthsecurity.com/2013/04/unlocking-motorola-bootloader.html

• https://askubuntu.com/questions/634180/minicom-status-stays-offline

• Reverse engineering a Qualcomm baseband

  Recomends to use AT$QCDMG to enable diag mode

• https://forum.xda-developers.com/showthread.php?t=2396752

• QC BQS Firmware Analyzer - learnt about efs2 magic stings

• [Res OS] (https://en.wikipedia.org/wiki/REX_OS)

• osa files from another device

• osa homepage

• osa_semaphore.h

• wpscli source (probably leaked)

• CBW and USBC explanantion

• Android/HTC/Vision/BootProcess – TJworld : Really detailed explanation of boot process

• Mobile Data modem user guide

• rtf file with links to some usefull codes

• some more qualcomm source codes and some more

• DIAG protocol description