[X]Assistant

[_faber_]

The material presented by the author is unofficial; in the event of unsuccessful firmware or loss of the device, the author of the software and the Administration do not bear responsibility for the resource! All actions are performed at your own risk!
FirmwareGinza MS100
Description | Discussion пїЅ | FAQ пїЅ | Firmware

Before you ask a question - lookour FAQ. Respect your and other people's time.


>>Firmware info<<

Post has been editedperduemonocle - 05.08.09, 13:15

[Alex_DFR]

and you have a DOC, you do not need to dump through the handles
write
pdocread -t
it will show the size (for example 0x3c00000)
you write
pdocread 0x0 0xsize dump.nb0

eg
pdocread 0x0 0x3bf1000 dump.nb0


how to dump a bootloader (crooked, but valuable for research)
pdocread -n0 -t
will give the size
pdocread -n0 0x0 0xsize spl.nb0
eg
pdocread -n0 0x0 0x80000 spl.nb0

[AEBus]

C: \ itsutils> pdocread -w -d TrueFFS -p Part00 -t
real nr of sectors: 2814 - 1.37Mbyte (0x15fc00)

C: \ itsutils> pdocread -w -d TrueFFS -p Part01 -t
real nr of sectors: 5120 - 2.50Mbyte (0x280000)

C: \ itsutils> pdocread -w -d TrueFFS -p Part02 -t
real nr of sectors: 90368 - 44.13Mbyte (0x2c20000)

C: \ itsutils> pdocread -w -d TrueFFS -p Part00 0 0x15fc00 Part00.raw
CopyTFFSToFile (0x0, 0x15fc00, Part00.raw)

C: \ itsutils> pdocread -w -d TrueFFS -p Part01 0 0x280000 Part01.raw
CopyTFFSToFile (0x0, 0x280000, Part01.raw)

C: \ itsutils> pdocread -w -d TrueFFS -p Part02 0 0x2c20000 Part02.raw
CopyTFFSToFile (0x0, 0x2c20000, Part02.raw)

03/14/2008 6:36 PM 1 440 768 Part00.raw
03/14/2008 6:37 PM 2,621,440 Part01.raw
3/14/2008 18:43 46 268 416 Part02.raw

uploaded here:http://rapidshare.com/files/99502959/Ginza...an_Rom.zip.html

C: \ itsutils> pdocread -t
real nr of sectors: 122880 - 60.00Mbyte (0x3c00000)

C: \ itsutils> pdocread 0x0 0x3c00000 dump.nb0
CopyTFFSToFile (0x0, 0x3c00000, dump.nb0)

03/14/2008 8:05 PM 62 914 560 dump.nb0

uploaded here:http://rapidshare.com/files/99521029/Ginza...n_dump.zip.html

C: \ itsutils> pdocread -n0 -t
real nr of sectors: 4 - 256.00kbyte (0x40000)

C: \ itsutils> pdocread -n0 0x0 0x40000 spl.nb0
CopyTFFSToFile (0x0, 0x40000, spl.nb0)

03/14/2008 8:08 PM 262 144 spl.nb0

uploaded here:http://rapidshare.com/files/99522575/Ginza...an_spl.zip.html

[kozhura]

AEBus,
Alex wrote everything correctly :) OS was left only namutit ... I would try, but Alex has more experience with smarts, I haven’t dealt with them yet ... :) although in theory I can help

Added @ 14.03.2008, 20:44

and by the way, if you make a mess of it, you need to write it down again ... And in addition: the skidding request does not have a bad block and you can build it there without problems :) I will try to see right now, but I promise to put something on Saturday evening or Sunday, or If I’m keeping up with etenom today, I’ll try to help in any way as I can :)

[AEBus]

I also went through imgfs_tools and PKGTool (on this manualhttp://wiki.xda-developers.com/index.php?p...f_HowtoDumpRom)

that's what PKGTool gave me

[Core OS]
Windows Mobile-based Smartphones

[Versions]
SYS: 5.1.15671.3300
OEM: 5.1.0.3300
SYS: 1.0.4294.0
SYS: 5.1.15671.0

[Language]
0409 - English (United States)
0419 - Russian (Russia)

[DPI]
96

[Certificates]
CN = Microsoft Windows Mobile PCA, O = Microsoft Corporation, L = Redmond, S = Washington, C = US
CN = Windows Mobile 5.0 - Lenovo Root

[Missing Manifests]
b5332311-48f1-4b76-ad70-8efa5db8fa3a.dsm
06643136-a4b6-e0d8-67f2-1e3b621844f8.dsm
42d1aab7-6dfa-4c03-9797-d66f7620883d.dsm
65a5386c-0b77-c0b9-d673-4daafbf007aa.dsm

what happened when I clicked Build Packages uploaded here:http://rapidshare.com/files/99532431/Packages.zip.html

Post has been editedAEBus - 14.03.08, 23:01

[paladin7]

M

Combined 2 topics on requestAEBus.

[Alex_DFR]

kozhura
That's right, there are no bad blocks in the DOC. more precisely for them signatures :). Nevertheless, little joy (
It is necessary as you said, "write down" ... at least in spl in the explicit form of file names there, so you need to sew through the flasher. and there it is not known which header format

[Yerofich]

Alex_DFR @ 03/15/08 11:16:13

kozhura
That's right, there are no bad blocks in the DOC. more precisely for them signatures :). Nevertheless, little joy (
It is necessary as you said, "write down" ... at least in spl in the explicit form of file names there, so you need to sew through the flasher. and there it is not known which header format

And it is impossible through pdocwrite -pdocwrite OS.nb, or in raw raw only imgfs? :)

[AEBus]

Alex_DFR @ 03/15/08 10:16:13

Need to sew through the flasher. and there it is not known which header format

The flasher attached. is this ordinary OST_Host from OMAP Software Tools only slightly modified ...
Here are the files he supports:

Attached files

OST_Host.zip(1.4 MB)


Post has been editedAEBus - 15.03.08, 13:46

[Alex_DFR]

[b] Erofich]
and here did not guess. we also need to be able to roll back if the rum does not load (and through the pdocrite the error probability is about 90%) .. plus my constant inattention when assembling the rum

[TrueNeytral]

I joined the ginzovods society, I also want to participate in the development of firmware. There is an experience of creating WM6 for prophets, here I first encountered WM Smartphone. From previous firmware it is clear that you need to start with the XIP part, edit the kernel of the current firmware for WM6. To do this, you will probably have to replace the entire devayson-independent part with the corresponding one from WM6. Plus, of course, you will have to stick the native drivers from WM5. With this, there are fewer problems now - all the tools are there and adapted what is called "for dummies." If anyone needs it, I can tell you what I know, write in a personal or in koumiss. I’m still collecting information myself, then I want to try to flash our 5k for a start, check if everything I did before works here.

[TrueNeytral]

Assembled xip and axle. Trying to be scary, you must first patch it up so that in any case you can roll back. Does anyone have information on how this is done?

[Yerofich]

And what are you going to roll back?

[Quarx]

TrueNeytral 03/20/08 05:05:47

Assembled xip and axle. Trying to be scary, you must first patch it up so that in any case you can roll back. Does anyone have information on how this is done?

Lay out the firmware that I collected! I'm going to ... I'm not afraid of anything :)

[TrueNeytral]

Erofich, you can try to pour back the native dump. But this is again pdocwrite. Otherwise, without a patched SPL you will not. Still there is an option to pick open the firmware that was laid out here. It has tools for dumping and firmware running from the command line inside. You can try to root them out. You can also disable CID checking. Although there is another option - take a full-featured OST and add support for our proc.

Quarx, not yet worth it. I'd rather try it on the emulator for a start.

[AEBus]

TrueNeytral @ 03/20/08 7:45:35 PM

Still there is an option to pick open the firmware that was laid out here.

I picked the restaurateur, changed the dialogues, made the menu to tear out the settings dialog ....

TrueNeytral @ 03/20/08 7:45:35 PM

It has command line dumps and firmware tools inside.

sure about this?

TrueNeytral @ 03/20/08 7:45:35 PM

You can try to root them out.

if you know how - try

TrueNeytral @ 03/20/08 7:45:35 PM

You can also disable CID checking.

Again, if you find something like - try ...

TrueNeytral @ 03/20/08 7:45:35 PM

Although there is another option - take a full-featured OST and add support for our proc.

I tried ... I can't ........

[Taks]

Pret topic
Well done boys.
ready to sacrifice ginza, stitching.
The one that lay out what they collected.
if this flash driver finally can sew: suicide:: wink_kind:

[AEBus]

Taks @ 03/22/08 05:56:27

If this flash driver can finally sew

already doubt it.
so it will have to be done through pdocwrite and the probability of messing up the device using pdocwrite is 90%

[kozhura]

Erofich @ 03/15/08 1:28:41 PM

Is it impossible through pdocwrite - pdocwrite OS.nb, or in raw raw only imgfs? 

it is impossible, it is necessary to write down in hex the size and address where to write :)

[Yerofich]

kozhura @ 03/22/08 9:18:40

Erofich 03/15/08 1:28:41 PM

Is it impossible through pdocwrite - pdocwrite OS.nb, or in raw raw only imgfs?

it is impossible, it is necessary to write down in hex the size and address where to write :)

Doesn't OS.nb already contain these addresses? I told everyone that it was still necessary to add the ADERS (when the unofficial Roma were in their infancy), but the old people were already stitchingpdocwrite OS.nb

[Shabudabu]

I think you should be interested in this topic:. Smartphone Ginza MS100 is developed by Techfaith as Puma_t aka FLY IQ110, aka IMATE SPL, AMOI E70, GRESSO AVANT GARDE & BLACK DIAMONDS.

http://www.modaco.com/content/i-mate-SPL-S...IQ-110-is-here/

Here is a dump of WM6 from the machine. Made on this platform.