yashsingh1/xdaforums huggingface dataset:
[AT&T Samsung Galaxy S II SGH-I777] Rebellos:
Thank you guys very much. iRAM dumps are very helpful, because it does contain iROM stack, most of IBL image and IBL stack. :)

I've noticed something very weird.

SBL dumps of Entropy are from MMC interface, also in UART logs we can notice alot of MMC booting info. Is it possible that Samsung gave up oneNAND memory for bigger LPDDR and instead of oneNAND they are using moviNAND only?

Can you post list of all block devices in system? (I don't know how to obtain these)

Also can you try dumping mmcblk0p1 and mmcblk0p0 if these are possible?

Last question: How big is internal moviNAND of SGS2? Is it 16GBytes?

Thanks in advance.
[AT&T Samsung Galaxy S II SGH-I777] Entropy512:
By oneNAND, do you mean the old stl/bml scheme?

If so - I think you are correct. They're using eMMC (embedded MMC) now based on all evidence I can see. (Bonus for us in this regard - the kernel is 100% open source, no proprietary modules.)

Attached is a dump of mmcblk0p1 and an ls of /dev/block on the system. mmcblk0p0 doesn't exist.

Given the compression ratio, it looks like most of mmcblk0p1 is empty.

(edit, removed this dump - it's EFS which is device-unique.)
[AT&T Samsung Galaxy S II SGH-I777] Poulsen8r:
Here's mine also.
[AT&T Samsung Galaxy S II SGH-I777] XorZone:
I'm very happy to see this thread. Will do my dumps in 24 hours (wife's birthday today).

Keep going :)
[AT&T Samsung Galaxy S II SGH-I777] Rebellos:
Thanks again for fast response.

Bootsector of moviNand is probably somewhat protected. Is it possible to dump "mmcblk0", please? Also if anyone of you has got experience in walking around drivers and getting direct access to devices - try to get dump of first 16 blocks of moviNAND.

//edit:

Also I'm wondering what is dm~~, if you think this may be another interface to access moviNAND, please dump dm-0 also.

//edit2:

Please don't post your dumps anymore, but sent these to me by PM, eventually to Adam.
[AT&T Samsung Galaxy S II SGH-I777] pokey9000:
scotty2 might be the guy to ask about MMC protection. He figured out that post-bootloader locking of emmc on some HTC phones could be defeated by bouncing the supply for the device.

https://github.com/tmzt/g2root-kmod/tree/master/scotty2
[AT&T Samsung Galaxy S II SGH-I777] Entropy512:
I'll do the first 16 blocks of mmcblk0 later.

As to why it's impossible to dump blk0p0 - it doesn't exist as a device and I think this is why, from Adam's partition dump:

ID : BOOT (0x1)
DEVICE : MMC
FIRST UNIT : 0
[B] NO. UNITS : 0[/B]

I'll try to look into this "dm-0" you're asking about. I don't see it in /dev/block - but I need to reread those UART output dumps.
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
If you'd like the direct logs which were gathered using

minicom -D /dev/ttyUSB0|tee logfile

they're attached to this post. In order to clear them up from all the minicom codes, you'll need to know some regex. They appear in plain text on-screen.

I removed the entire lines containing ATAG_SERIAL at the request of the device owner.
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
Grab the GalaxyS2 hack pack here. http://xdaforums.com/showthread.php?t=1316501

This is a compilation of this generations documentation and other materials
[AT&T Samsung Galaxy S II SGH-I777] axis01:
Off topic here but since this is Adams thread, thought i'd ask.

Are you planning on getting and deving the GSII or just concentrating on the recovery aspect of android now?
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
Just trying to help out. I don't know what Samsung has planned, but this device is not capable of fully supporting all features in android 4. The galaxy nexus has dual core with two additional cortex m3 video processors and a dedicated video processor. I don't think this particular device is good for me.
[AT&T Samsung Galaxy S II SGH-I777] Entropy512:
cortex-M3 = NOT a video processor.

We've got a dedicated video processor too, the Mali-400.

The M3 might be great for power management and reducing wakes (offloading low-level stuff like battery polling to a slow power-efficient microcontroller core), in a similar manner to ARM's big.LITTLE approach with the A7+A15. But a microcontroller has nothing to do with video whatsoever.
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
You misunderstood. there is a video processor Imagination Technologies PowerVR SGX 540.

and then there is this:

The dual CortexTM-M3 microprocessor (MPU) subsystem controls the imaging subsystem (ISS) and
manages some controls of the video and display subsystem. It contains two ARM® Cortex-M3 processors
(CPUs) that share a common level 1 (L1) cache (shared cache). One of the CPUs is dedicated to
sequencing still image coprocessor (SIMCOP) accelerators, and the other CPU is dedicated to the ISS
and display subsystem control. A single image real-time operating system (RTOS) runs on both cores,
thereby minimizing the code size. The integrated interrupt handling of the dual Cortex-M3 MPU allows
efficient control of the ISS. Figure 7-1 is a high-level block diagram of the dual Cortex-M3 MPU
subsystem.

which is separate from this:

The dual CortexTM-A9 microprocessor unit (MPU) subsystem of the device is based on the symmetric
multiprocessor (SMP) architecture, thus the dual Cortex-A9 MPU subsystem delivers higher performance
and optimal power management, debug and emulation capabilities.
The dual Cortex-A9 MPU subsystem incorporates two Cortex-A9 central processing units (CPUs), level 2
(L2) cache shared between the two CPUs, and uses PL310 as L2 cache controller. Each CPU has 32KB
of level 1 (L1) instruction cache, 32KB of L1 data cache, separate dedicated power domain, and includes
one NeonTM and Vector Floating Point Unit (VFPv3) coprocessors. The dual Cortex-A9 MPU subsystem
also includes standard CoreSightTM components to support SMP debug and emulation, snoop control unit
(SCU), interrupt controller (GIC), and clock and reset manager

That's 5 processors for video and imaging.. the dual core CORTEX M3 could theoretically be repurposed for audio or any other task.
[AT&T Samsung Galaxy S II SGH-I777] Entropy512:
It's a power management feature, it sure as hell isn't for performance.

Seriously - do you REALLY think an M3 (highly simplified core with no FPU, no SIMD, no out of order execution, usually running at 50-100 MHz at most) is going to be that much of a performance booster? All it's doing is handling low-level housekeeping so the main CPU doesn't need to wake.

(I've got a few Cortex-M3 devel boards... neat chips, massively powerful when you're graduating from 8-bit AVRs, but they sure as hell are NOT doing video processing beyond basic low-level power management housekeeping.)

What you quoted is a pile of marketing department kool-aid that you apparently drank...

We've got dedicated video processors beyond the Mali too - the G2D subsystem.
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
What I quoted is the datasheets. They're the javadocs of electronics. They are written by those who design the chips.

it's not a power management feature. You can't use these for anything except ADDITION to processing power. they are real time processors. they are designed to handle a stream of data and perform operations on them. They're not application processors. they are special purpose.

Power management would be removing those two processors all-together. They're not capable of power management, only consumption. They get shut down when unused if you want to talk about power management.

The cortex M3 processor is actually an ideal real-time video processor. it's capable of taking in a video stream, modifying it and spitting it back out.
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
Trust me.. I know what an ARM CORTEX M3 processor is capable of and what it's designed for.

if you'll take a look at http://adamoutler.com, you'll see my ARM Cortex M3 processor running my website :)... Just don't click refresh too quick or it will crash... this is something I need to work on :(.
[AT&T Samsung Galaxy S II SGH-I777] Entropy512:
Yeah... So it would be useful to figure out how a 50 MHz (MAYBE 100 MHz at most) chip with no SIMD, no floating point, and no out of order execution can possibly be doing video processing.

Throwing in a low-power M3/M4 core is usually done for offloading the main CPU so it doesn't have to wake up as often. In fact that's the stated purpose of the dual M4s in the OMAP5.
[AT&T Samsung Galaxy S II SGH-I777] agh1701:
I dumped 8192 blocks of mmcblk0. You will find that is the actual partition table followed by the pit at 0x4400. As best I can tell the primative boot loader is hidden. I believe mmcblk0p0 is not there because the boot partition size is zero.
[AT&T Samsung Galaxy S II SGH-I777] jjesusfreak01:
Here's a question for Adam Outler, based on a comment you made earlier in the thread.

What parts of ICS do you think the Galaxy S2 cannot support?

Thats all, and thanks for your hard work to make the GS2 better.
[AT&T Samsung Galaxy S II SGH-I777] XorZone:
I bet the key part in his message is:
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
the OMAP 4460 processor has an additional 2 CORTEX M3 cores for real-time video processing and picture encoding/decoding on top of having a pretty good video processor. People have been saying bad things about the video processor, but it's been clocked up twice as much as all previous versions of that particular video processor and it has two coprocessors. The Screen resolution is higher. The aspect ratio is true widescreen. The buttons are not physical. The SGSII cannot fully support the capabilities of ICS.
[AT&T Samsung Galaxy S II SGH-I777] Entropy512:
I disagree. Based on what those Cortex-M3s are doing, they are attempting to do in software what our device already does in dedicated hardware.

You have not provided any proof at all that these processors are needed for ICS. So far, all documentation you have provided indicates they are only used for camera control features, and possibly for color/gamma correction capabilities, which are built into our device using dedicated hardware (see Voodoo Screen Tune as an example - all it does is poke at registers in our display controller.)

The screen resolution is only slightly higher - since the Galaxy Nexus is crippled by using a PenTile subpixel arrangement, its subpixel density is only slightly higher than that of the GS2.
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
^^ If it has the capability to modify real-time video, that processing power comes from somewhere and it's not dedicated processing hardware. It will use the processor or the graphics chip. It's not just poking a register, that's some serious processing.

We need to figure out how to obtain the OM value for this device. It was printed at the start of the SBL 3.0, but 3.1 does not show it.

I belive I've located the xOM resistors. Altering these resistors will change bootmode. If anyone with UART cares to verify this, please do. I don't have a device I can work with.

The AT&T version should be the same as these below.

i9100 SGS2

Epic 4G Touch
[AT&T Samsung Galaxy S II SGH-I777] Entropy512:
Gamma and color correction isn't serious processing, it's just a lookup table in a RAMDAC on many video chipsets. Of course, on digital devices like the sAMOLED+ display, it's just a lookup table in hardware. In our case, it's the LD9040 display controller that handles it. Poke a few registers, change the LUT.

See Supercurio's Voodoo Screen Tune for more details. http://xdaforums.com/showthread.php?t=1313652
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
The Galaxy Nexus uses the M3 processors for video modification and real-time processing. I forget what they call it, but you can use a pinch gesture and it will squeeze someone's face. The face unlock feature uses another M3 processor for 0 lag processing. This is built into the processor in one way or another. I don't even know where gamma and color correction are handled... isn't that in the graphics processor?

Entropy, you keep going on about this.. it must bother you alot.. The OMAP processor has several advantages over the Exynos and they're being used in Android 4.0. The SGSII was released what, 6 months ago in Korea? The Galaxy Nexus has not even been released yet. There's performance increases. the SGS 3 will be released in a few months and it will likely include all of these new features.
[AT&T Samsung Galaxy S II SGH-I777] jjesusfreak01:
So, sounds to me that you're touting the fact that ICS is designed to take advantage of lower powered accessory processors, like the ones that are included in the 4460, and are lacking in the Exynos. I'm not a programmer, and I haven't taken a look at the SDK or any platform documents, so I don't know how ICS actually handles additional processing power. Ideally, it would take into account every processor onboard, including GPU resources for accelerating tasks such as photo editing or analysis for facial recognition. In fact, I would at least expect it to use the GPU for acceleration of the UI.

These extra processors available to the OS in the 4460 aren't however necessary to the ICS experience. A fast enough device (and the Exynos qualifies) should be able to run any necessary processes in ICS. You have to remember that for the first few months, most devices running ICS will have upgraded from Gingerbread.
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
Technically the GalaxyNexus has a dual core application processor.. however physically its a quad core. Two of the cores are lower power m class processors and dedicated to handle remedial tasks. This is the device which ICS is designed for. I'm not touting anything. I'm defending my decision not to purchase a sgs2. We all make our decisions on our devices based on one thing or another. Ill probly hold off for the galaxy s3 which is to be released in a few months if I don't get a nexus. I'm a big fan of Samsung. They make cutting edge stuff.

Can anyone get pictures of the xOM resistors on the i777 board? I could use them to establish the pattern on Exynos.

I see only 4 movable resistors which i have derermined are likely the xOMs. I was expecting 5 total. Two are located on the other side of the processor for a total of 7 xOMs. I need to see what the xOM layout on the i777 before beginning xOM mods for Exynos.

This device may be more difficult than others as we don't have OM values for boot modes. The development boards may reveal something in this respect as Samsung has a private Exynos manual which I still have not seen.

We could use some pictures to help establish a foundation for boot mode modification and UBM.
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
Hey guys. I've performed initial research here: http://xdaforums.com/showthread.php?p=20073062#post20073062

I need a device to work with.

If you have a dead device, please send it to me. I will recover it with JTAG and try making it unbrickable as well.
[AT&T Samsung Galaxy S II SGH-I777] jake:
My fault fellas I stand derped lol.

Cheers!

*edit*

sent via ICScrewed sans Entropy's DD
[AT&T Samsung Galaxy S II SGH-I777] jbradt:
Just wondering if you've read the entire thread before posting this...?
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
I'm wondering if he read the entire post before quoting it.
[AT&T Samsung Galaxy S II SGH-I777] gr8hairy1:
Have you received an i777 yet? Or donations for you to buy one?

Sent from my páhhōniē
[AT&T Samsung Galaxy S II SGH-I777] jjesusfreak01:
I believe he won an i777 from a web contest for developers.
[AT&T Samsung Galaxy S II SGH-I777] Blaze9:
Last time I checked the vote count on the contest here, he was beating everyone with atleast three times the votes than the next trailing contestant.
[AT&T Samsung Galaxy S II SGH-I777] gr8hairy1:
Sweet. Just got done doing the unbrickable mod to two captivates. Painfully small soldering, but huge pay off in having a phone that can never ever be ruined. That's pretty awesome.

Sent from my páhhōniē
[AT&T Samsung Galaxy S II SGH-I777] gr8hairy1:
Well adamoutler won the i777 and the asus transformer! Here's to really hoping the unbrickable mod comes to both!

He just now needs to have a sgsii sent to him. Here's a post from the focus s forum:

Sent from my páhhōniē
[AT&T Samsung Galaxy S II SGH-I777] trell959:
So uh, where's Adam?
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
I'm too damn busy.

[youtube]dw8ha5caex0[/youtube]
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
Actually, if anyone wants to help, look at the video...

On the resistor to the right of the "XOM4" resistor which i've labeled. Both sides of this resistor on my device are shorted to ground. I believe this resistor is "XOM6", and the resistor required to boot from USB. This seems to be a problem with my board.

There should be resistance, however it seems that my board was drawn with a bad trace. If someone could take the time to verify this resistor with a multimeter set for ohms, it would help.

If someone could measure from one side to the other, it would be very helpful for this project.
[AT&T Samsung Galaxy S II SGH-I777] :
So the AT&T phone that XDA gave you is defective?
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
I don't know. this is why i want someone else to verify my finding. Also, this phone came from Samsung, not XDA. XDA had the contest and Samsung sent it directly.
[AT&T Samsung Galaxy S II SGH-I777] Benjamin Dobell:
Adam, I disassembled my brand new Galaxy S II as a bit of a test run. I can't tell from the video exactly where the resistor is that you require checked. If you can upload one or two images that indicate where it is and how to get to it then I'll try again tomorrow.

Word of warning for people disassembling their Galaxy S II. It might be different on the i777, however for the GT-I9100(T) at least, the plastic surrounding the headphone jack is EXTREMELY thin on one side. Be careful not to crack it like I did!
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
Here's where we are at.

XOM1, XOM2 and XOM3 are designed to be "switched" from the top position to the bottom. Switching these resistors fails boot sequence and forces boot from USB, however the device will not boot normally. The device will attempt to boot from SDCard or from other unsupported methods. This is not ideal as using these will require an external switch to be mounted for use during recovery.

We want to find the XOM which switches the boot sequence from "normal", UART, USB to UART, USB, "Normal".

Because the development board for Exynos4210 shows the XOM0 and XOM7 hardwired... And because other CORTEX A9 devices (like OMAP4) use SYS_BOOT_6 and SYS_BOOT_7 to control internal/external clocks...... I believe the XOM we are after is XOM6.

In the following picture I've annotated the XOMs I've been able to locate. The layout on the international GS2 (i9100) is the same as the layout on the AT&T GS2 (i777). These are practically the same board with minor revisions.

On my I777, there is a resistor shorted. Both leads are reading the same potential and have a dead short between them.

This picture has a couple of errors. XOM0 is irrelevant. The rest are spelling and gramar errors

Benjamin, or anyone else, please verify this. I need readings from an i9100 and an i777 before I remove the resistor and start cutting traces on my board.

Please test the one I marked as shorted on both sides and the ones next to it which are unmarked. I am asking for a power-off resistance reading between ground, side 1, side 2 and across the resistor. if shorted ,they will read less than 2 ohms.
[AT&T Samsung Galaxy S II SGH-I777] Benjamin Dobell:
I'm reasonably confident that the one you're mostly interested in (left-most) is 10K and so it the one to the right of that. However I can't seem to get a reliable reading on the last one (right-most). My multimeter probe is pretty large and can't really get in there!
[AT&T Samsung Galaxy S II SGH-I777] Benjamin Dobell:
It's pretty difficult to check this stuff with the equipment I have. But here are the readings I came up with.
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
Here's mine

Kinda wierd differences here.. Still looking for XOM6.

Btw... got a new digital camera :)
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
And, here's the manufacturing defect... As you can see, my resistors are quite beat up from probing and reprobing... I guess that resistor must be removed and a board modification must be done before I can continue working on it.

It looks pretty clear to me in this picture that there's a bridge that was not intended.
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
I've been trying several things... I've got the device into sort of a UnBrickable mode..

Bus 002 Device 014: ID 04e8:1234 Samsung Electronics Co., Ltd

however I cannot make it boot. So, I believe a switch will be required.

I have tried a few things but I'm not sure where the IBL+PBL should be placed in memory.
[AT&T Samsung Galaxy S II SGH-I777] :
Its fairly disheartening to hear that the SGSII that you received (because we all wanted you to get it) from Samsung is defective and thus stalling you from working on the SGSII.
[AT&T Samsung Galaxy S II SGH-I777] E:V:A:
You probably already know this. But just in case, you can buy some silver based SMT PCB-repair paint, to fix it... It comes in a syringe or micro tipped pen.
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
I think you mean use a razor blade.

Anyway.. I got it, and it looks like UnBrickable Mod will require a switch to make the device attempt to boot from sdcard, fail and then boot USB. I need to get ahold of a "FPCB" switch like used on our volume buttons or the vibrant power button.
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
I want to follow up on this...

DON'T EVER ****ING TOUCH THIS RESISTOR!

(the one on the left)

It's the power button.. The device won't turn on without this resistor in place. You can use any other method to turn on the device except the power button... Plug in USB, 310K ohm resistor, 610kohm resistor... the power button will be inoperative without this resistor in place.... And it MUST be a resistor about 50 kohms. The stock is a 50kohm, I lost it, I replaced it with a 70kohm and it works to turn it on, but it does not want to act like a standby button.

Holey crap... seriously... This was about 14 hours of work which did not help out this project.
[AT&T Samsung Galaxy S II SGH-I777] AdamOutler:
Ground-breaking news. We have an UnBrickable Mod.

I just posted this on my Google Plus: https://plus.google.com/u/0/104711040110222472212/posts/dugmDLdNzNH

Basically, this grounds out XOM3

When you press on the battery, it presses on the switch, which grounds XOM3 and allows the device to connnect to the computer in UnBrickable Mode. This means normal operation is not affected. There is no difference between an UnBrickable I777 and a normal I777.

Here's some pictures: Keep in mind that this does not look clean because its gone through A LOT! It's quite literally a mess.

I could use another device to work with. This one has had it. This device has a broken power button and several missing resistors now. There's no way to get it out of standby mode once it stands by. The device is only good for testing methods of UnBrickable Mod and flashing firmware now. This is all due to my extensive probing and nearly 30 hours of work soldering and unsoldering on this board. I expected worse...

If anyone wishes to donate a i777, it would be VERY appreciated. I've never even used a Galaxy S2 as a phone.
[AT&T Samsung Galaxy S II SGH-I777] exynos5250x:
Im just glad adam has gotten this far, and besides he was very clear on his video(the oen that made him win the att sgs2) that he was going to basically take it apart and get an unbrickable mod going, if the people that voted expected something else, their in for a surprise lol, adamn dint say "im going to put this att sgs2 on a gold pedestal and probe it with telekinesis so i can get unbrikiblemod going" sorry if i sound harsh but thats how i see it =]
[AT&T Samsung Galaxy S II SGH-I777] LiLChris06:
Thanks for all the hours you put into this!!! :)

I've only done stuff like this to PC parts to test the limits and learn about it, never tried on a phone.