Need files to trace OpenGl

[newkidd]

maybe this is a dumb question, but is there anywhere exactly we can see exactly what haret does? perhaps there isnt a problem with the builds per-say, but something haret does that the TP2 doesnt like. such as with sound, since its calling the asdp and its replaying already functioning, or already operating, i forget which, maybe haret needs to be modified. does hw3d give an error or does it just show that it doesnt exist to call?

[[ACL]]

Originally Posted by newkidd

maybe this is a dumb question, but is there anywhere exactly we can see exactly what haret does? perhaps there isnt a problem with the builds per-say, but something haret does that the TP2 doesnt like. such as with sound, since its calling the asdp and its replaying already functioning, or already operating, i forget which, maybe haret needs to be modified. does hw3d give an error or does it just show that it doesnt exist to call?

Hw3d at this point just doesnt respond. We have the drivers and code that works on other devices but something about the tp2 that we dont have working 100%.

On wince the gpu runs when we tell it to. It doesnt run all the time. So the wince kernel or maybe one of the dlls makes a call that activate the gpu. Once its all done, the gpu goes down again. So we are missing that call to activate.

I do know that harent isnt the issue.

[newkidd]

Originally Posted by [ACL]

Hw3d at this point just doesnt respond. We have the drivers and code that works on other devices but something about the tp2 that we dont have working 100%.

On wince the gpu runs when we tell it to. It doesnt run all the time. So the wince kernel or maybe one of the dlls makes a call that activate the gpu. Once its all done, the gpu goes down again. So we are missing that call to activate.

I do know that harent isnt the issue.

post one has all of the files that make a call to the gpu, or just the ones you think? feel free to ignore me if i am making you lower your brain capacity at any rate, but what exactly are you trying to factor out? the exact call to the gpu? or the location of that call? or what chip(s) activate the gpu?

[[ACL]]

Originally Posted by newkidd

post one has all of the files that make a call to the gpu, or just the ones you think? feel free to ignore me if i am making you lower your brain capacity at any rate, but what exactly are you trying to factor out? the exact call to the gpu? or the location of that call? or what chip(s) activate the gpu?

Hmm. All of the above?

ahi2dati uses all of those dlls. a while back i made a small app to load ahi dll directly to display stuff on screen. It worked and i also noticed all these other dlls loading. So i wanted them to see what kinda calls ahi makes.

Since we dont know whats missing, i kinda have to look all over the place. I was busy for father's day so i didnt get a chance to do anything. Hopefully this week i can dive back in.

[[ACL]]

If anyone wants to help figuring this out. Feel free to jump in.

So thanks to fathers day i didn't get a chance to dig deep. But i did dump some information before and during 3d operation.

http://pastebin.com/btqgbBgH

Both top chunks are made with the command below on haret console. I'm looking for "..000030 " or all rpc related info.

od -A x -t x4 -w16 mysmem | grep "..000030 "

One of them is with no 3d, the other is with 3d running. There are few differences.

The last part is the wince dmesg right after 3d is activated again. Note there are some rpc calls as well. Anyone want to help there?

[WoZZeR999]

Don't know if this helps, but I was looking through DDI.dll in IDA, and it has

.text:1000C6F8 aDrvescapeHtc_s unicode 0, <DrvEscape::HTC_SET_3D_LAUNCHING_FLAG.>
.text:1000C6F8                                         ; DATA XREF: .text:off_1002E198o
.text:1000C6F8                 DCW 0xD
.text:1000C6F8                 DCW 0xA
.text:1000C6F8                 unicode 0, <>,0

It also has:

IMPORT __imp_gles_init  ; DATA XREF: .text:off_1003A990o

being imported from ahi2dati

.idata:10043210                 IMPORT __imp_gles_init  ; DATA XREF: .text:off_1003A990o
.idata:10043214                 IMPORT __imp_AhiInit    ; DATA XREF: .text:off_1003A980o
.idata:10043218                 IMPORT __imp_AhiDevEnum ; DATA XREF: .text:off_1003A970o

May be helpful as well.

A lot of things seem to be printing to the NKDebugconsole (my interpretation of ASM,which I know very little about).

Hope this helps a little, if not ignore please.

Edit: I'm looking through the nk.exe and there's a SPYapi and a GuardDog. Could this effect how haret boots at all?

[[ACL]]

Originally Posted by WoZZeR999

Don't know if this helps, but I was looking through DDI.dll in IDA, and it has

.text:1000C6F8 aDrvescapeHtc_s unicode 0, <DrvEscape::HTC_SET_3D_LAUNCHING_FLAG.>
.text:1000C6F8                                         ; DATA XREF: .text:off_1002E198o
.text:1000C6F8                 DCW 0xD
.text:1000C6F8                 DCW 0xA
.text:1000C6F8                 unicode 0, <>,0

It also has:

IMPORT __imp_gles_init  ; DATA XREF: .text:off_1003A990o

being imported from ahi2dati

.idata:10043210                 IMPORT __imp_gles_init  ; DATA XREF: .text:off_1003A990o
.idata:10043214                 IMPORT __imp_AhiInit    ; DATA XREF: .text:off_1003A980o
.idata:10043218                 IMPORT __imp_AhiDevEnum ; DATA XREF: .text:off_1003A970o

May be helpful as well.

A lot of things seem to be printing to the NKDebugconsole (my interpretation of ASM,which I know very little about).

Hope this helps a little, if not ignore please.

Edit: I'm looking through the nk.exe and there's a SPYapi and a GuardDog. Could this effect how haret boots at all?

I dumped the whole wince dmesg for the rhodium. Is this what you mean by NKDebugconsole ?

http://pastebin.com/M1Ad4YMv

I'm no asm dev, so its hard for me to make out that output. How well do you understand it? can you at least help me reverse engineer some of the functions? I've been able to call gles_oem_eglInitialize before assuming it just takes an int as a parameter, but i havent done gles_init yet because i dont know what parameters it takes.

[newkidd]

Originally Posted by [ACL]

I dumped the whole wince dmesg for the rhodium. Is this what you mean by NKDebugconsole ?

http://pastebin.com/M1Ad4YMv

I'm no asm dev, so its hard for me to make out that output. How well do you understand it? can you at least help me reverse engineer some of the functions? I've been able to call gles_oem_eglInitialize before assuming it just takes an int as a parameter, but i havent done gles_init yet because i dont know what parameters it takes.

ive been decompiling all of the .dll files you referenced. im not an asm dev, but I have been noticing that almost all of them all refer back to the clkregim. the clkregim makes several calls that register usb, uart, etc, but there are a few calls im not sure what they do. it seems like the clkregim does alot of clk switching, registering for cpu recources, and switch adsp_clk, etc.

what i dont understand is this dll references another resource, remote_apis_cInt. using that remote_ it makes a call clk_regime_sec_sel_icodec_clk.

dont know if this is any help, but im going to keep looking for anything suspicious. keep us posted on anything you find!

[[ACL]]

Originally Posted by newkidd

ive been decompiling all of the .dll files you referenced. im not an asm dev, but I have been noticing that almost all of them all refer back to the clkregim. the clkregim makes several calls that register usb, uart, etc, but there are a few calls im not sure what they do. it seems like the clkregim does alot of clk switching, registering for cpu recources, and switch adsp_clk, etc.

what i dont understand is this dll references another resource, remote_apis_cInt. using that remote_ it makes a call clk_regime_sec_sel_icodec_clk.

dont know if this is any help, but im going to keep looking for anything suspicious. keep us posted on anything you find!

i see the same thing. However i only see ahi2dati use 3 functions on clkregim.

clk_regime_deregister_for_cpu_resource
clk_regime_msm_disable
clk_regime_msm_enable

Do you see others?

Check this out. may help you understand those calls

http://htc-linux.org/wiki/index.php?title=MSM_RPC

[newkidd]

Originally Posted by [ACL]

i see the same thing. However i only see ahi2dati use 3 functions on clkregim.

clk_regime_deregister_for_cpu_resource
clk_regime_msm_disable
clk_regime_msm_enable

Do you see others?

Check this out. may help you understand those calls

http://htc-linux.org/wiki/index.php?title=MSM_RPC

im not sure. there might have been more. id have to look when i get off of work.