yashsingh1/xdaforums huggingface dataset:
[Bada Software and Hacking General] mylove90:
Any idea how to patch apps_compressed.bin of S8500BUKI1 to try this on bada 2.0:confused::o

I know how to decyrept and encyrept with wave remaker

Also i have a little knowledge in using hex-editior

I can flash back XXJEE bootloader for its security hole

I just need address and data to write :D

Best Regards
[Bada Software and Hacking General] b.kubica:
follow these posts

http://xdaforums.com/showpost.php?p=17872425&postcount=383

http://xdaforums.com/showpost.php?p=17876128&postcount=385
[Bada Software and Hacking General] adfree:
I have only bada_term.fota from v0.11 :confused: :o

Results...

In v0.13

>dumpram 20000000 100000
dumping 1.0 MB at 0x20000000: 14%
Error receiving packet (8192 bytes at 0x20026000). Received 0 bytes only.
>dumpram 40000000 100000
dumping 1.0 MB at 0x40000000: 16%
Error receiving packet (8192 bytes at 0x4002A000). Received 0 bytes only.
>dumpram 41000000 100000
dumping 1.0 MB at 0x41000000: 16%
Error receiving packet (8192 bytes at 0x4102A000). Received 0 bytes only.
>dumpram 42000000 100000
dumping 1.0 MB at 0x42000000: 16%
Error receiving packet (8192 bytes at 0x4202A000). Received 0 bytes only.
>dumpram 43000000 100000
dumping 1.0 MB at 0x43000000: 16%
Error receiving packet (8192 bytes at 0x4302A000). Received 0 bytes only.
>dumpram 44000000 100000
dumping 1.0 MB at 0x44000000: 16%
Error receiving packet (8192 bytes at 0x4402A000). Received 0 bytes only.

:confused:

I can't read more then 177 KB...

I can see such text like:

is_dirty :D

is_syncing

.

.

.

With v0.15 seems no successfully connection possible.

:confused:

close report success, but check false and commands also...

>open
COM5 port opened with success

>check
Phone response FAIL

My PC is XP powered. :D

Firmware is JE7... old T-Mobile bada 1.x...

Thanx.

Best Regards
[Bada Software and Hacking General] b.kubica:
u need to compile fota from sources - it is frequently updated so there is no sense to put assembled one in badadroid downloads
[Bada Software and Hacking General] adfree:
Sorry, I'm an user. Not an Coder or user with Coding skills.

So my head explode before compiling something successfully. :o

There is enough space to upload FOTA + corresponding bTerm Version.

Maybe FOTA here as attachment.

Please. :D :cool:

Thanx.

Best Regards
[Bada Software and Hacking General] b.kubica:
fair enough ;)

http://badadroid.googlecode.com/files/bada_term.zip
[Bada Software and Hacking General] adfree:
:cool:

Thank you very much, now v0.15 works on my XP with the new FOTA.

First success :cool::cool::cool::cool::cool:

>dumpram 20000000 8000000
dumping 128.0 MB at 0x20000000: 100%

Seems the 128 MB unit as bigger range interrupt...

I'll try now at 0x40000000

Best Regards

Edit 1.

Result:

>dumpram 40000000 10000000
dumping 256.0 MB at 0x40000000: 59%
Connection failed!

Abandoning dump with total received 0x0997C000 bytes.

Size is now around 157 MB...

Anyway... :cool:

I have some files for study.

Big thanx.
[Bada Software and Hacking General] b.kubica:
maybe I set to small timer intervals. I will increase it in next release

btw, u can start now dump from 0x4997C000 and then combine it with previous one
[Bada Software and Hacking General] Tigrouzen:
Working on S8530 ?
[Bada Software and Hacking General] b.kubica:
yes if you have correct fota assembled
[Bada Software and Hacking General] Tigrouzen:
Its seem's my Xp have some PATH problem cant find COM says COM0, tested in another comp Win7 worked, Thank you.
[Bada Software and Hacking General] b.kubica:
its not path problem - looks like you have not installed samsung drivers

could you check something for me? connect phone in download mode, open regedit and go to HKLM\HARDWARE\DEVICEMAP\SERIALCOMM and send me all values stored in this key
[Bada Software and Hacking General] Tigrouzen:
Reinstalled driver properly now works but check fail

Compiled bada_term.asm on BADA2.01

Flashin bada_term.fota

DLMODE

i tried also CHARGING 0 same

; FOTA_SHADOWING equ 1

CHARGING_CONTROL equ 1

include 'S8530JPKA1.inc'

include 'macros.inc'

include 'vars.inc'

include 'functions.inc'

Maybe i need other firmeware ?

Im on original Orange firmware bada 1.2
[Bada Software and Hacking General] b.kubica:
S8530JPKA1 is not bada 2.01
[Bada Software and Hacking General] Tigrouzen:
Ok thank flash this one tell you later.

All in order thank you

Needed flash it with Fota enabled.
[Bada Software and Hacking General] Tigrouzen:
The problem its verry sensitive dont like if you open Adobe flash plugin or touch file on desktop then connection failed same on xp and Seven .

In Nand i can maximum dump 390M and Ram 20000000 128Mo 40000000 256Mo !!

Works verry well !!

Thank you
[Bada Software and Hacking General] adfree:
http://xdaforums.com/showpost.php?p=22520515&postcount=2

@ b.kubica

Sorry I have request in other thread... :o

Please if possible.

I failed with unsecdload.fota to dump with bTerm.

So I'm not sure if I made mistake or newer bTerm Version is needed.

It would be very nice also to dump in bada 2.0. :cool:

Thanx in advance.

Best Regards
[Bada Software and Hacking General] adfree:
Thanx for info...

I will check soon.

Best Regards
[Bada Software and Hacking General] b.kubica:
as i mentioned before i don' have access to my pc with all stuff (hdd) and i don't have any c compiler to build newer version from sources
[Bada Software and Hacking General] b.kubica:
visual express is really express

I compiled newest bTerm 0.18 and attached unsecdload fota for KL5 (works with most KLx)
[Bada Software and Hacking General] adfree:
Short overview. :cool:

Thank you.

Later more, after view tests... with XXLA1...

Best Regards
[Bada Software and Hacking General] Rebellos:
As a sidenote - bTerm module is compiled into every latest ARMLinux boot FOTAs (dropped 2 binaries in badadroid sticky thread), it's accessible by booting with middle key pressed.
[Bada Software and Hacking General] adfree:
Thanx...

You mean this one?

http://xdaforums.com/showpost.php?p=26343019&postcount=10

Nice, so we have more users with knowledge to use bTerm.

Best Regards
[Bada Software and Hacking General] b.kubica:
hmmm, to be honest in very basic level bTerm after small coding should be able to work with AT commands - i modified some command in amss.bin to return what i wanted and it works

maybe dumping ram etc via at (i mean from booted bada) should be possible also

no time to coding yet
[Bada Software and Hacking General] adfree:
Short tested... later more...

I have forgotten adresses...

Few should be changed in bada 2...

I will search and try.

Best Regards
[Bada Software and Hacking General] adfree:
Someone work with bTerm?

Best Regards
[Bada Software and Hacking General] Rebellos:
"with"? It is included in all Badadroid FOTAs for long time already, and recently I utilized it to dump dmesg logs of kernel. (info in OP: http://xdaforums.com/showthread.php?t=1851818)
[Bada Software and Hacking General] adfree:
Thanx.

Need noob workshop to upload something into RAM... :o

Still unsolved to boot XXJB6 or generally to play with Bootloader... :o

bTerm has more advanced features... but how to use them... :confused:

Maybe with examples... please. :angel:

Best Regards
[Bada Software and Hacking General] Rebellos:
You cannot directly upload BL3 in place of old one using bTerm, as bTerm is working inside BL3 and one does not simply overwrite bootloader that's currently operating. So you'd need to upload BL3 + some relocating payload, then jump into payload that would relocate BL3 into its desired place and jump into new BL3. Sorry, I see not really point of doing it so I'm not going to code it, some FOTAs were overwriting BL3 in RAM and running it then. :rolleyes:

It's also more complicated to re-execute whole bootchain (BL1, BL2, BL3) in RAM, as BL1 is designed to load BL2 from flash, and BL2 is there to load BL3 from flash.
[Bada Software and Hacking General] adfree:
Dangerous, but funny... :D

With Multiloader and ETC you can write at:

0x100001

Warning this kills Bootarea... but maybe usefull to restore something...

at higher adresses.

First idea would be JTAG dump...

Please, DON'T try without JTAG.

Best Regards

Edit 1.

Amazing Speed... instead JTAG writing...

Short tested with bigger 500 MB... interesting... direct writing into OneNAND

Maybe I can find way to modify ML to accept als 0x0...
[Bada Software and Hacking General] adfree:
Few tests with S8500 and XXLA1 Boot...

+

bterm.exe

+

armlinux_boot_S8500XXKL5_for_0_07.zip

Taken from here:

http://xdaforums.com/showpost.php?p=30671851&postcount=1

Thanx Rebellos.

1.

bterm shows

bTerm v0.18

But seems not 1:1 same file...

http://xdaforums.com/showpost.php?p=26559282&postcount=27

2.

Short tests...

dumpram 0x4FF00000 0x100000

1 MB without problem... :good:

Now other Range + Start tried...

>dumpram 20000000 8000000
dumping 128.0 MB at 0x20000000: 75%term_send: only sent 0 bytes of 7
term_send: only sent 0 bytes of 7

Connection failed!

Abandoning dump with total received 0x06000000 bytes.

Ca. 98 MB from 128 MB is written to my HD...

Later will more adresses try, also OneNAND...

Older tests with other files + driver +... looong time ago...

http://xdaforums.com/showpost.php?p=18953541&postcount=14

I have/had few problems with bterm before...

Maybe my fault... :D

But now I have time to make some tests... to be sure it works.

Best Regards
[Bada Software and Hacking General] adfree:
dump 0 20000000

dumping 512.0 MB at 0x00000000: 33%term_send: only sent 0 bytes of 7
term_send: only sent 0 bytes of 7

Connection failed!

Abandoning dump with total received 0x0AC40000 bytes.

Tried to dump 512 MB OneNAND...

I can remember that it is not possible to dump in 1 piece...

Long time ago... :o

dumpram 40000000 10000000

dumping 256.0 MB at 0x40000000: 100%

This seems 100 % dumping. :good:

This is with bada 2... XXLA1 on S8500...

Later I could check S8530 with XXLA1.

Maybe someone could please try also... and share results...

I mean success or not. No upload yet needed...

Thanx in advance.

Best Regards
[Bada Software and Hacking General] Rebellos:
Samsung protocol nor bTerm aren't flawless, so sometimes it can just hang at random point and not work until you restart bTerm and phone. ;)

And yep, sometimes we don't increase version number while doing a changes. ^^'

//edit: Interesting it stopped dumping oneDRAM right where shared area starts. Probably oneDRAM chip is blocking access there. You can probably request it manually.

First dump 4 bytes (if it fails try with 1 byte) from 0x20FFF800 - it should succeed and dump hex 01 00 00 00 - this means AP gained exclusive access to shared area. Then you should be able to dump nearly 128MB of oneDRAM (In fact it's abit smaller, as last 2048 or 4092 bytes are special area, containing semaphore, mailboxes and other signaling fields.

Not sure if reading 0x20FFF800 will work, as it's recommended to use 32bit read there. And AFAIR bTerm is using 8bit reads.
[Bada Software and Hacking General] adfree:
Me myself and I can also produce many funny mistakes. :laugh:

So this is no problem...

I am here to learn. :angel:

Best Regards
[Bada Software and Hacking General] Rebellos:
Sorry, I edited after you replied, please have a look at previous post. ;)
[Bada Software and Hacking General] adfree:
S8530 Test... with armlinux_boot_S8530NELH2_for_0_07.zip and coresponding Boot NELH2

No idea why no XXLA1 FOTA exists? Or I am blind...

All other files from XXLA1 DBT...

dump 0 20000000

dumping 512.0 MB at 0x00000000: 29%term_send: only sent 0 bytes of 7
term_send: only sent 0 bytes of 7

Connection failed!

Abandoning dump with total received 0x09800000 bytes.

Hmm, seems differ from S8500... will compare also other dumps and make more tests...

http://xdaforums.com/showpost.php?p=37266470&postcount=39

Best Regards

Edit 1.

It seems bTerm only work if apps_compressed.bin is alive... better, modified FOTA functions only work if apps_c is alive and working... otherwise key combo not work...
[Bada Software and Hacking General] adfree:
In Upload Mode with this Tool:

RAM Dump eXtractor

http://xdaforums.com/showpost.php?p=39658811&postcount=23

It seems full access to Memory dump...

Best Regards
[Bada Software and Hacking General] adfree:
2013...

New attempt... :rolleyes:

debug print to current debug output
print <message>

This means you can see text on Display. :D

Normally you can see in red letter

FOTA OUTPUT ENABLED

-- BL3 Dload Mode & bTerm--

Now you can send own text... example:

print testtext...

Then you can see on Display:

FOTA OUTPUT ENABLED

-- BL3 Dload Mode & bTerm--

testtext

I will try to understand the other commands too... have few troubles...

Maybe my Windowsdriver...

Best Regards

Edit 1.

>loadbin s5pc110_testcode.bin 49000000
term_send: only sent 0 bytes of 7
loading 0x4000 bytes from s5pc110_testcode.bin under 0x49000000
splitting into 3 packets
term_send: only sent [B]0[/B] bytes of 7950
33%term_send: only sent [B]0[/B] bytes of 7949
66%term_send: only sent [B]0[/B] bytes of 525
100%
DONE!
term_send: only sent [B]0[/B] bytes of 7
[B]FAIL[/B]

I will check my Configuration, as I can remember this is not first time...

Edit 2.

Seems more luck with older bTerm...

>run s5pc110_testcode.bin
OK - 0

For my test I will downgrade to v0.13...
[Bada Software and Hacking General] adfree:
:o

Too long ago... not enough instructions... for noobs like me. :o

Tested S8500 and S8530...

My problem is this...

>open
COM10 port opened with success
[COLOR="Red"]Unknown command![/COLOR]

>run zImage
[COLOR="Red"]FAIL[/COLOR]

:confused:

I will concentrate on this Version:

bTerm_0.18.zip

http://xdaforums.com/showpost.php?p=26559282&postcount=27

Corresponding FOTA is in ZIP...

Sorry, my fault, v0.15 and prior seems bada 1.x...

Version 0.18 have most features...

bTerm v0.18

Enter command you want to send or press enter to exit
Available commands:
open the COM port
open

close the COM port
close

check the connection
check

dump NAND area
dump <address> <length>

dump RAM area
dumpram <address> <length>

execute the code from file
run <path_to_file>

load binary into memory under specified address and store its size
loadbin <path> <addr> <optional|sizeaddr>

branch target without link to specific address
branch <addr>

debug print to current debug output
print <message>

read sys info to specified RAM address
readsysinfo <addr>

write sys info from specified RAM address to flash
CAUTION: THIS CAN BRICK PHONE, HANDLE WITH CARE!
writesysinfo <addr>

open the COM port for upload
uopen

upload mode operation
upload <address_from> <address_to>

terminate program
exit

Only need brain to understand them... :D

Best Regards

Edit 1.

Bootloader XXKL5 for S8500 ... (I can not remember I have this Firmware... :confused: :o )

Anyway... here:

http://code.google.com/p/badadroid/downloads/detail?name=S8500XXKL5_BOOTFILES.zip&

Edit 2.

Sorry, I ever thought XXKL5 is misstype...

Because I have not found... in my collection... :o :o :o

At the moment I have found only:

S8500XXKL6_S8500OXAKL6_XEO.zip

Will check after download finished...

Edit 3.

Seems something is not stable... maybe Driver...

1 test with luck...

>loadbin zImage 40000000
loading 0x503CE0 bytes from zImage under 0x40000000
splitting into 663 packets
100%
DONE!
[Bada Software and Hacking General] adfree:
>run zImage
FAIL

:confused: :(

Tested with S8500 and S8530 on 2 different PCs... XP and Win 7...

Where is my failure?

Tried different Versions of bTerm...

Please help.

Thanx in advance.

Best Regards
[Bada Software and Hacking General] adfree:
After tiny little hint from Rebellos...

Today I found what he meant... after reading again... post 1 of this Thread:

http://xdaforums.com/showthread.php?t=1459391

Clicking weired around... Found this:

http://code.google.com/p/badadroid/source/browse/#svn/trunk/bterm

Usefull stuff and finally needed files for zImage uplaod via bTerm...

http://code.google.com/p/badadroid/source/browse/#svn/trunk/bterm/fastboot

:victory:

Soon I will test, after downloading all files...

Best Regards
[Bada Software and Hacking General] adfree:
>readsysinfo 40000000
OK

After I know what is... :o

I can upload and dump it from this address...

Used bTerm_0.18.zip with armlinux_boot.fota, because no succes with FOTA in this ZIP... no idea why...

Used Firmware XXLA1 S8500...

Best Regards

Edit 1.

>loadbin sysinfoversuch1.bin 40000000
loading 0x2000 bytes from sysinfoversuch1.bin under 0x40000000
splitting into 2 packets
100%
DONE!
OK

Edit 2.

This work for me. :good: :good: :good:

This is another way to restore JTAG Fulldumps...

And now I understand little bit more... :cool:
[Bada Software and Hacking General] dimonp25:
Execume me, but i don't understand, how disable security check apps_compressed.bin ?
[Bada Software and Hacking General] adfree:
@ dimonp25

Please model name.

S8500 ?

S8600?

Or ?

:confused:

Best Regards
[Bada Software and Hacking General] dimonp25:
S5380 or s5250
[Bada Software and Hacking General] adfree:
:o

I have no S5380 to try self...

And my S5250 is now Dads handset...

What you want to try?

Maybe WaveRemaker or TriX can do this...

Best Regards
[Windows Phone 7 General] GManLynx:
What do you guys think that have gone from android to WP7 think of the transistion? Do you regret it?
[Windows Phone 7 General] dkp1977:
Please not another thread like that. -_-
[Windows Phone 7 General] arturobandini:
Yes, it will only create some troubles....

Most people here are not ready to criticize or judge WP7 honestly anyway. So what do you expect?
[Windows Phone 7 General] machhho:
yes you will regret it , if you still want these features :

1- Bluetooth file transfer

2- ability to make folder

3 - icon view

4- rooting device

5- backing up ROM

6- backing up apps

7- much much more free apps and games

8- if you google around , you find paid apps for free

9- widgets

and alot more , but these are the most important features that are missing in WP7

If you think I helped , please hit thanks
[Windows Phone 7 General] arturobandini:
...and decent storage (i mean more than 8 or 16Gb)

...and ability to read DivX|Avi movies (without wasting your time converting them :mad:)

...and USB mass storage

...and ability to download files from the IE browser

...and ability to select and send PDF files

...or ability to edit forwarded emails

...or if ever you like the Swype keyboard
[Windows Phone 7 General] efjay:
Who said? Most sane WP7 users can acknowledge its not perfect but why is it this forum is filled mainly with threads criticizing WP7, mostly from people who dont use it? If they dont like it, why not post in forums of the OS they do like?

Thats the problem, this thread will be filled with posts by the usual haters spouting the same BS. By this time, 1 year later, shouldnt they have moved on to the platform that suits them? Yet any good point of WP7 is shouted down and discarded. You say people here arent ready to judge WP7 honestly, the haters are just as guilty of not being able to be honest and admit any positive in WP7.

---------- Post added at 04:54 PM ---------- Previous post was at 04:53 PM ----------

I rest my case.
[Windows Phone 7 General] jake2046:
Why are people keep comparing a 5+ yr old OS to a 1 yr OS is beyond me. We all know WP still have some growing to do. The rate it's growing is alot faster than we all anticipated.
[Windows Phone 7 General] GManLynx:
I didn't mean to start any trouble... I really am just curious. I read a lot on engaget of windows 7 phones being efficient. My main question is what I want to do. I guess I'll stick to android and get the prime, and in 2 years rethink my options.
[Windows Phone 7 General] Purple11:
nevermind................
[Windows Phone 7 General] sylau90:
agree with dkp1977...What an another troll-bait thread.

LOL,please close this thread man....there are dozens of similar thread out there.
[Windows Phone 7 General] FiyaFleye:
I just don't know why people who genuinely hate the OS continue to come to this section... I went from WinMo, to Android, used an iPhone for a while as well, and can tell you that WinPhone is the best there is, especially at its young age. These people who want to own a phone to have to flash it weekly, or daily, can keep their Androids.
[Windows Phone 7 General] mdcykkk9:
Windows phone 7.5 is great phone os. Is a nice looking os with few great built in features but is not a smartphone. I am using lg otimus 7 and i haven't any problems. Very solid and stable... And i love it... But i find my self using my 7inch Android tablet instead of my phone all the time. If someone wants a phone that can check emails and listen music wp7 is great. But if you want a mobile Internet device that can make phone calls wp7 is not an option.
[Windows Phone 7 General] GManLynx:
Thanks your guy's insight. and you can tell i'm not a troll due to the fact if you look at my other topics started, I'm switching to verizon soon.

On the side note, for you wp7 people, do you guys go here for all your needs? like when I had an iphone i went to blah blah site, android is xda.

And I do flash A LOT. I almost wnat to break the habit. I liked cydia back on the iphone, I want the OS to be perfect, but if the apps arent, I want to fix that (thats what jailbreakign did me for the iphone)

I guess the main problem with windows 7 phones for me right now are:

No LTE? why not. If I'm going to Verizon shouldn't I get a LTE phone?

Pros:

I feel that it will give me "my life back". I'm not addicted to flashing phones, but it definately sucks that I probably send 30 mintes - hour a day scanning these forums about stuff and specs baout the "newest" phone. I see that wp7 phones aren't realized every 3 months, causing you not to regret your purchase.

Another question I have for the people who follow WP7 phones is, when are they going to release a new one for Verizon? Or ATT. But I think we are going to switch to Verizon.
[Windows Phone 7 General] GManLynx:
What do you mean by making phone calls and browse the internet? Are you saying the browse cause it doesn't have 4g?

And phone calls: why is that?
[Windows Phone 7 General] doministry:
All I can say is I moved from WinMo-Android-WP7-Android.

You will read alot of bull**** here about Android by WP7 maniacs btw.

I am one of those who wanted to use MS latest platform but discovered it's really not for me. Because even if the concept is really good and different, it's very limiting.

I wait to make my final judgement once I upgrade to Mango.

I think WP7 is perfect entry level OS, for people who are not crazy about the most advanced features. For less "business" or "pro" users it's perfect. It's for youngsters and people who don't need much but like reliability and simplicity.

Otherwise stay with Android because it's ahead in every regard.

So ask yourself why do you want to switch and what you expect from your future device.