yashsingh1/xdaforums huggingface dataset:
[Bada Software and Hacking General] adfree:
LK Boot NO need change.

It is allready booting from SD Card...

Gunter33 found this in june 2014:

http://www.handy-faq.de/forum/bada_..._badadroid_support_thread-31.html#post2881914

My first info about SD success:

http://xdaforums.com/showpost.php?p=53452344&postcount=356

I am using this method since 2 weeks = more then 1 day:

http://xdaforums.com/showpost.php?p=53630565&postcount=367

Remember LK Boot is from January 2013:

http://xdaforums.com/showpost.php?p=37200735&postcount=7

This LK boot can start boot.img since over 1 year from SD card.

For copy 200 MB to SD Card you can use WinHex under Windows.

boot.img is at address 0x09000000

You can jump to this address...

EVERY S8600 User can try this method at home, without JTAG.

Only needed:

Hardware

S8600
SD Card

Software

Multiloader
my modified [B]apps_compressed.bin[/B] with oleg_k LK Boot inside
Windows or Linux Tools, to write data to SD card, for instance [B]WinHex[/B]
200 MB I9001 Image...

I can upload next hours 200 MB from I9001 with few comments...

Then "we" could make workshop, how to copy correct to SD Card...

Maybe before, I can upload Video...

then you know what you can expect with wrong/incomplete not for S8600 boot.img...

You have less then 1 second some output from LK Boot on Screen, before Display goes weired...

Best Regards

Edit 1.

Added Videos for SD booting from SD Card.

I mean the external SD Card which you can remove from S8600. :D

v1.avi is with full I9001 Image on SD... autoreboot.

v2.avi is the bad, more dangerous version... because you have to hold Power key to shutdown... Otherwise I think your Display could be damaged.

Now I hope it is clear, why I am not so excited to test every unkown zImage or test allready as wrong detected zImage more then 1 time... ;)

Best Regards
[Bada Software and Hacking General] ghoslslender124:
[MENTION=1030585]adfree[/MENTION]

:fingers-crossed:

But Oleg said that kernel is OK and WE CAN TEST. :))

Please. Try it
[Bada Software and Hacking General] adfree:
:eek: :confused:

Feel free to test self.

Maybe I have something not seen or my failure or too hot weather...

I did MANY tests... since weeks, months...

I have spend much time and money...

I've bought I9001 AND I8150 for testing...

I am testing with 2 of my S8600.

What you have tried?

Go find someone else.

To confirm your zImage working or not...

I am pretty sure it is NOT working, because it is NOT complete...

Only Tigrouzen knows what is inside this zImage:

I have tested Tigrouzen zImage in many different combinations and ALL failed...

So expected result with your file is NOT different to this...

http://xdaforums.com/showpost.php?p=53888371&postcount=425

Only hint, that zImage is DEcompressed in RAM... is console info...

mem=100 console=ttyMSM2,115200

All other addresses are from boot.img Header and could be totally WRONG...

Because Tigrouzen not told addresses... nor other usefull comments...

I can change easily all Text output from boot.img... which we can find in LK boot output...

But this is not helpfull if zImage is wrong... :rolleyes:

Best Regards

Edit 1.

"We" will make little workshop about Image... and how to copy to SD card... 1:1 sector by sector...

Full I9001 EMMC dump is here:

i9001_Riff_unlocked_cm_JB 4.1.2 JZO54K ..bin

http://xdaforums.com/showpost.php?p=49065791&postcount=6

Sorry, not my file so it is uncompressed 7000 MB +...

If compressed then 3 GB or less possible...

But I have NO time nor my Internet speed is good enough for reupload 3 GB nor 7 GB...

Somewhere I have smaller I9001 found... forgotten where... but for FULL dump this 7 GB is perfect.

Also for understanding how EMMC content looks like...

Edit 2.

Smaller, but not complete dump of I9001... 256 MB compressed.

Samsung_GTI9001_2GB.rar

http://xdaforums.com/showpost.php?p=52224177&postcount=27

https://www.boot-loader.com/app/webroot/medusa_free_section/SAMSUNG/GTI9001/

DEcompressed, unpacked it is big enough... 2 GB...

Later more...

I will check short result, if I copy Samsung_GTI9001_2GB.bin fully to my SD card...

Edit 3.

http://xdaforums.com/showpost.php?p=53972867&postcount=42

Please, these files could be helpfull for study...

[B]I8150_Manual_JTAG_PROGRAM.zip
I9001_Manual.zip[/B]

From dlgsm Server...

[MENTION=270883]oleg_k[/MENTION]

Please, maybe you or your frinds have access to the files from dlsgsm...

[MENTION=5833757]ghoslslender124[/MENTION]

Please ask oleg_k for these files...

Thanx in advance.

[MENTION=346843]mom[/MENTION]

Sorry that I am talking with me my self and I... :D
[Bada Software and Hacking General] adfree:
Again...

Please check these logs...

http://pastebin.com/u/downthemachine

This:

http://pastebin.com/Ns8f13yb

and this:

http://pastebin.com/w03JLZJg

Now check with first post... and compare with Log files...

Who is this?

Who archieved this?

On what?

Tried Google...

Downthemachine

Found this:

https://github.com/downthemachine/

...

Later more, if I know what to write...

Best Regards

Edit 1...

Forked...

https://github.com/DooMLoRD/semc-kernel-msm7x30

DooMKernel (CM7/MiUI) for Xperia 2011 line based on FXP CM Kernel for Xperia 2011 line

https://github.com/freexperia/semc-kernel-msm7x30

kernel configs of supported devices:
------------------------------------

<CM7>

[fxp_anzu_defconfig]
Device : Xperia Arc
Model No.: LT15 / LT18
Codename : anzu

[fxp_zeus_defconfig]
Device : Xperia Play
Model No.: R800
Codename : zeus

<MiUI>

[doom_anzu_miui_defconfig]
Device : Xperia Arc
Model No.: LT15 / LT18
Codename : anzu

[doom_zeus_miui_defconfig]
Device : Xperia Play
Model No.: R800
Codename : zeus

Edit 2.

http://xdaforums.com/showthread.php?t=1631754

http://xdaforums.com/showthread.php?t=1477845
[Bada Software and Hacking General] TStaudigl:
Thumbs up adfree very good work so far. If you are in a stage where you don't need a SD Card for Testing i'll participate as a Betatester
[Bada Software and Hacking General] adfree:
But maybe we will never get this stage... :o

My skills limited...

My support with active testers "limited".

Ganz zu schweigen das keiner am Kernel arbeitet...

Maybe I have not seen something, or someone find better way or solution.

Remember how old S8600, I9001 and I8150 are...

These are CHEAP devices now. With luck less then 50 $ on ebay...

Broken display or with other defect...

Best Regards
[Bada Software and Hacking General] TStaudigl:
I bet we will reach this stage!
[Bada Software and Hacking General] adfree:
I will hope we reach this.

But I am also pretty sure, more active helper could increase speed of finding solution.

Otherwise we have 2015 and nothing really new. ;)

Best Regards
[Bada Software and Hacking General] volk204:
Hello [MENTION=1030585]adfree[/MENTION]

Oleg's kernel sources looks like broken, many errors during building kernel and it need many time to fix all this errors

From my point of view the best way to use https://github.com/arco/samsung-kernel-msm7x30 this kernel as base

and add device specific files from Oleg's kernel sources, based on this example: https://github.com/arco/samsung-kernel-msm7x30/commit/3be667255bc7f6d864968740a0ab41abf35d5734

Probably someone will try to do it, but it need time, and kernel base is different: on Oleg's kernel - 3.0.x, on arco's kernel 3.4.x

On Arco github also available all files for building for ancora (Galaxy W), need to change for wave3, Also partition layout doesn't matter on this stage, main thing now is to boot recovery on Wave3 and init internal SD card

Maybe i will try one day to do it, but i have no enough free time now for it and test device.

Regards

Nikolay
[Bada Software and Hacking General] adfree:
Thank you very much volk204.

:good:

arcor deliver also for I9001 sources...

https://github.com/arco

Here for instance:

https://github.com/arco/android_device_samsung_ariesve

About I9001 Image for SD card tests...

[MENTION=4619000]Gunter33[/MENTION]

Thanx again:

http://www.handy-faq.de/forum/bada_..._badadroid_support_thread-33.html#post2894055

He uploaded example with full structure...

http://www.file-upload.net/download-9182805/dump_i9001.zip.html

Only 40 MB for download.

Caution, extracted full 7000 MB...

I will use this as base...

And will try to show, how to create SD card for testing with S8600 boot.img in future...

For now we need only 200 MB from 7000 MB dump...

Later more...

Best Regards
[Bada Software and Hacking General] adfree:
Based on Gunter33 dump_i9001.zip...

Thanx.

Rename file after Decompression into .img...

So you can open via WinHex and jump through partitions...

I have shrinked Image ... cut after partition 8...

So Image for SD card is now 155 MB... attached 13 MB Download:

smallDump_v1.zip

It is possible to use WinHex to write to SD card...

I have no Linux nor tested other Tools.

This method works for me.

Best Regards
[Bada Software and Hacking General] TStaudigl:
I did some first tests with oleks Bootloader on my S8600 with the modified apps binary. I mailed the results to [MENTION=1030585]adfree[/MENTION] :) Ready to try next steps with fastboot...
[Bada Software and Hacking General] TStaudigl:
Maybe i could set up a VM in my Office PC to build the kernel for testing. Best way might be Ubuntu like in the XDA Kitchen i guess?
[Bada Software and Hacking General] adfree:
My I9001 UART output...

cmdline = 'console=ttyMSM2,115200 androidboot.hardware=qcom androidboot.emmc=true hw=[B]7[/B]'

My I8150:

cmdline = 'console=ttyMSM2,115200 androidboot.hardware=qcom androidboot.emmc=true hw=[B]8[/B] lcd_hw=3'

output attached in this Thread:

http://xdaforums.com/showpost.php?p=53993204&postcount=30

http://xdaforums.com/showpost.php?p=54011915&postcount=31

Now we could compare and find few differences...

Maybe this could help to switch output to my UART... in oleg_k LK Boot...

It seems it is possible to activate or deactivate some output...

http://xdaforums.com/showpost.php?p=39363282&postcount=20

Not tested nor fully understood... :o

Will try to find some infos about "console"... in Google and Search...

https://www.kernel.org/doc/Documentation/serial-console.txt

http://oreilly.com/linux/excerpts/9780596100797/kernel-boot-command-line-parameter-reference.html

Best Regards
[Bada Software and Hacking General] adfree:
2 ideas...

Idea 1 is to check Tigrouzen zImage in my I9001 PCB... maybe some UART output visible...

Idea 2 I have forgotten....

Later more...

Best Regards

Edit 1.

Now I remember my idea 2...

Machine: GT-I9001 Board

Machine: GT-I8150 Board

Searched in oleg_k EMMCBOOT...

Can not find GT-I9001...

Only S8600...

Also found this:

mem=100M console=ttyMSM2,115200

in EMMCBOOT from oleg_k ...

So in my opinion this is not from zImage, but from oleg_k LK Boot...

Check this Picture...

http://xdaforums.com/showpost.php?p=53888371&postcount=425
[Bada Software and Hacking General] TStaudigl:
Maybe there you can Change something for an UART Output..

Btw i'm Setting up a Ubuntu VM at the Moment for compiling and programming purposes ;)
[Bada Software and Hacking General] adfree:
Btw...

Also my I9001 with JTAG RIFF connected makes "funny" things... :rolleyes:

It is possible to reach different "modes" where Drivers are visible, but Odin not detect... :eek:

Since few days I can't enter Download Mode via Jig... :confused:

Then I had 1 time luck with key pressing...

Now I find 1 more procedure... if ADB Driver is detected... then command:

adb reboot-bootloader

Highest chance, if only Modem Driver detected... only 1 port

All combinations with 2 Ports are wrong... Odin nothing detect...

See screenshots for wrong...

Hmmmm...

Maybe 1 combination with this Diagnostic port... is wrong driver...

I can remember... my old Siemens handset used own Drivers... but also can use Original Qualcomm driver...

Maybe this is Qualcomm stuff... :confused:

Maybe 1 day I know more...

Odin Multi Downloader is really weired stuff... sometimes it hangs...

:confused:

Not start really...

Also strange... it seems boot.img is mandatory... without kernel no Download Mode possible... :silly:

This is really total different stuff, as I know from S8500... :o

Best Regards
[Bada Software and Hacking General] TStaudigl:
:good: Most of this Output comes from the Bootloader so there is not much boot specific information
[Bada Software and Hacking General] adfree:
:good:

Exactly.

Or if console "text" is in Header (first few Bytes) of boot.img

So 1 question could be...

Is available EMMCBOOT from oleg_k with problems...

:confused:

Also because FASTBOOT and SD makes different things...

Ich frage mich, ob man ein boot.img erstellen könnte, ähnlich wie "hello world"...

Welches einfach erkennen läßt, das es entpackt wurde...

My next attempts will be, to check debug settings in boot.img ...

Maybe then more infos visible why boot.img fail...

Best Regards
[Bada Software and Hacking General] TStaudigl:
I could try... btw i'm checking out the original Android Kernel for Samsung devices right now
[Bada Software and Hacking General] TStaudigl:
Update:

I downloaded the android 4.4.2_r1 sourcecode, tomorrow i'll try to compile. If this works we have a base for customization.

Does someone know where the LK Bootloader Source is located? With that i could make a diff on th723e sources to check for changes...
[Bada Software and Hacking General] Galaxy3HELL:
https://github.com/Oleg-k/LK_BOOT_S8600

and kernel source: https://github.com/Oleg-k/kernel_source_s8600
[Bada Software and Hacking General] TStaudigl:
Thanks you that might help alot :) Understanding the differences will push development alot especially because i am software developer (normally with Delphi but having basic knowledge in c programming)
[Bada Software and Hacking General] TStaudigl:
I have to try Anyway.... Maybe 14 yrs of development knowledge will help to identify the bugs...

Step 1: compile original kernel

Step 2:compare original sourcecode with the one from oleg

Step 3:merge differences and compile again...
[Bada Software and Hacking General] adfree:
Ich krieg das nicht gebacken mit dem Compiler und Linux sind b.hm.sche Dörfer für mich...

Mein Gehirn ist dafür nicht ausgelegt.

Ich muß mühevoll jedes Byte durchprobieren, von 00 bis FF... bis ich es geschnallt habe.

MfG

Edit 1. [MENTION=5936306]TStaudigl[/MENTION]

Gegenvorschlag...

Also mit oleg_k seiner angehängten LK haben wir momentan 4 Versionen... als Binaries vorliegen...

Variante A

Um Auszuschliessen das ich ein totaler Vollpfosten oder Sabotage betreibe...

Könnte ich beschreiben, wie man die apps_compressed.bin erstellt...

Hab ich schon ein paar Mal... aber macht ja nix...

Variante B.

Ich lade nochmal 3 apps_c hoch, wo die LKs drinne sind...

Könnte ich dann aber wieder in den Sand gesetzt haben... mit dem Restrisiko.

Das diese Dein S8600 in die ewigen JTAG-Gründe schießt...

Variante C.

Du lieferst ne LK Version zum Testen...

Bitte.

Edit 2.

Ehmm... no idea about *.APP inside...

U8800 V100R001C00B526G001 (Gingerbread) (International Version).zip

But here seems 1 kernel (boot.img) for investigation about U8800...

http://sourceforge.net/projects/icsaurora/files/aurora_2.08_kernelupdate1.zip/download

Taken from here:

http://sourceforge.net/projects/icsaurora/files/

Edit 3.

JTAG dump...

http://www.4shared.com/get/EyhqMo90/huawei_u8800_fullflash.html
[Bada Software and Hacking General] TStaudigl:
Ich nehm Variante C mit GT-S8600 statt S8600
[Bada Software and Hacking General] adfree:
Aha...

Check oleg_k EMMCBOOT... with WinHex for instance...

fastboot getvar product
[B]product: S8600[/B]

fastboot oem unlock
[B]... OKAY[/B]

fastboot oem device-info
[B]... INFO Device tampered: false
INFO Device unlocked: true
OKAY[/B]

fastboot getvar kernel
[B]kernel: lk[/B]

fastboot continue
[B]resuming boot... OKAY[/B]

fastboot getvar version
[B]version: 0.5[/B]

It is possible to find in EMMCBOOT via text search...

Will check if I can change s8600 in something else... Maybe few Bytes more reserved...

Caution with Commands... you can kill something...

Best Regards

Edit 1.

Maybe not enough Bytes reserved...

fastboot getvar product
[B]product: GT-S8600kernel[/B]

Next command still valid:

fastboot getvar kernel
kernel: lk

Hmmmm... I can do this by killing "kernel" Command...

fastboot getvar product
[B]product: GT-S8600[/B]

Now I could try to write:

GT-I8150
GT-I9001

Now same length with GT-S8600...

Will check later if relevant for boot.img execution...
[Bada Software and Hacking General] TStaudigl:
I have been able to compile the latest android kernel on my VM with aosp-arm environment. Now im have to find out how to compile for qualcomm and how to compile apps_compressed

Think we are making little steps forward
[Bada Software and Hacking General] hero355:
Compiling apps_compressed just funny :eek:
[Bada Software and Hacking General] TStaudigl:
[MENTION=4377945]hero355[/MENTION] i know it won't be easy.... Maybe you can give some advice on kernel compiling for Qualcomm or compiling the LK bootloader to generate an apps_compressed bin...
[Bada Software and Hacking General] BenzoX:
As far as i know, apps_compressed is only a bada file and isn't needed here.

What we do need is :

A Little Kernel (LK) able to boot an android kernel (the one provided by Oleg_k may work, but we are unable to get the same file from his sources, maybe sources are too old, maybe we use wrong toolchain or maybe wrong commandlines)

An android kernel able to start on wave 3 device, this is probably the hardest part (Oleg provided incomplete sources, and using sources from another device with same CPU isn't enough).

And finally, a rom, but if we have correct kernel it will be the easy part.

After that the port of all drivers (modem, screen, audio, wifi...) can begin.

I don't understand any of these low level thing with memory adresses, so i can't help a lot...
[Bada Software and Hacking General] ghoslslender124:
I try do talk with Oleg..

I think on His Github we have all needed files. Only think
[Bada Software and Hacking General] adfree:
Modified apps_compressed.bin included oleg_k LK...

Otherwise you need JTAG (solder wires to PCB) to write appsboot/emmcboot during f. Security checks...

Maybe we should be sure we mean same things... ;)

http://de.wikipedia.org/wiki/Compiler

http://en.wikipedia.org/wiki/Compiler

Decompress also known as unpack with any kind of Compression Tool...

ZIP... WINRAR... etc...

Decrypt and encrypt... is not the same like "compile"...

To put oleg_k LK into apps_compressed.bin you need:

WaveRemaker Tool for DEcryption and ENcryption.

Decompression is also possible, but NOT needed for this action...

Copy and Paste of few Bytes with WinHex possible.

[MENTION=5936306]TStaudigl[/MENTION]

apps_compressed.bin mit WaveRemaker ENTschlüsseln...

Dann mit WinHex LK einfügen.... dann mit WaveRemaker wieder VERschlüsseln.

Das hat 0 mit Compiler zu tun...

Best Regards
[Bada Software and Hacking General] TStaudigl:
[MENTION=1030585]adfree[/MENTION] we mean the same i just used the wrong words :) sorry for that
[MENTION=5833757]ghoslslender124[/MENTION] you once talked about a environment config for make for the S8600. Would you please attach it here or send it to me via PM?
[Bada Software and Hacking General] adfree:
Short to my Driver phenomenon...

If appsboot/emmcboot erased at 0x09000000...

Here from I9001 dump...

Diagnostic...

USB\VID_04E8&PID_6640&MI_02\6&2949281B&0&2_02

Modem...

USB\VID_04E8&PID_6640&MI_00\6&2949281B&0&2_00

Later more...

If I google for VID then I can find something about Bitpim...

Maybe this is really more Qualcomm then Samsung...

Best Regards

Edit 1....

VID_04E8&PID_6640&MI_00 leads to ADB ...

Hmmm...

Edit 2.

I am to stupid to edit Driver *.inf ...

So I will try to sniff ADB if Commands send...

http://xdaforums.com/showpost.php?p=54038941&postcount=466

Especially this one:

adb [B]reboot-bootloader[/B]
[Bada Software and Hacking General] ghoslslender124:
[MENTION=1030585]adfree[/MENTION]

I an make small edit in .inf drivers :3

But tell me only what you need :D And here we go
[Bada Software and Hacking General] ghoslslender124:
[MENTION=1030585]adfree[/MENTION]

New info from oleg! :)

He use codesourcery Toolchain (but he dont remember what number) for compiling source WITHOUT errors ;)

Edit 1

CodeSourcery ARM-4.4.3

gcc 4.4.3

or gcc 4.4.5

:)) Maybe usefull
[Bada Software and Hacking General] adfree:
Please, can you ask him...

Why he can not come back to XDA?

:confused:

Or why he can't read only XDA posts...

So maybe we can easier communicate... :cyclops:

Thanx in advance.

[MENTION=270883]oleg_k[/MENTION]

Please, if you are alive...

Come back to XDA...

Nobody will punish you... :D

At the moment I don't think you are reading any posts here...

Magic... it is possible to read XDA Threads/posts without to be an XDA member nor you need to login to read... sometimes...

What is with Fastboot in your LK Boot?

Yes ?

No ?

Ignore?

In Germany we play as kids "Topfschlagen"...

You close your eyes (you are blind)... and you try to find something "hidden"...

And all other kids around can "help" if they say warm or cold...

Or for instance Batmans friend... The Riddler... :D

My moschem pobroujut poroski gavarivat... :D

Oder deutsch?

So ist das momentan echt "lustig"... :eek:

Best Rgards
[Bada Software and Hacking General] ghoslslender124:
[MENTION=1030585]adfree[/MENTION]

Maybe fast you can make facebook? I can give you mine second account, only change Name xD

When I ask him about comeback he write: I post something. Wait. or something like that:

Me:

- Why not post

anything on xda? Dont like adfree or what? I dont

know.

Oleg:

-i will post later))

i promise)
[Bada Software and Hacking General] Galaxy3HELL:
[MENTION=5936306]TStaudigl[/MENTION]

please, try to use this toolchain for compiling Oleg_K kernel.

CodeSourcery ARM-4.4.3

gcc 4.4.3

or gcc 4.4.5

Thank you :D
[Bada Software and Hacking General] adfree:
Only as short info...

My S8600 is booting my I9001 dump... 0 - 0x09000000 + mixed with few MB from other dump...

Video will follow...

I can see:

Samsung Logo
Galaxy S plus Logo
Intro Animation
short I can see Lockscreen and russian language...
Then Reboot.

:cool:

Best Regards
[Bada Software and Hacking General] ghoslslender124:
Very good info! You are big player [MENTION=1030585]adfree[/MENTION]

Have you read my Private Messeage?

Edit.1

From where you have kernel? :D
[Bada Software and Hacking General] adfree:
Yes, thank you very much for your offerS...

I don't need any gift nor money donation...

About Facebook account...

I am too lazy...

I can create Facebook account, but I am paranoid...

My browser is blocking Facebook... :good:

About my lucky finding... again by "mistake", maybe more luck and hundrets of hours flashing, trying, flashing again and so on...

For now my solution is 2000 MB big... 0 - 0x8000 0000

It is without oleg_k LK...

I have used again RIFF JTAG...

Display will be very hot... :eek:

Later I will try to write whole 4 GB of 7 GB... maybe then more luck...

2 GB of 7 GB is less then 30 % of I9001 Firmware dump... so I am pretty sure many things are missing...

For Video I need "few" minutes...

Best Regards
[Bada Software and Hacking General] ghoslslender124:
Awwww JTAG -.-

But it is big step. Very big step.

Why screen is hot?
[Bada Software and Hacking General] adfree:
:o

I know, sorry for this...

But "solution" is 100 % I9001 dumped Software... nothing really modified...

Magic was only to use 150 MB dump from my I9001...

No idea why the other I9001 dumps all failed...

I will dump my whole 4 GB EMMC to be sure... "magic" is not also behind address 0x8000 0000... :D

Display could be hot because wrong parameter...

Its I9001 Firmware... boot + kernel...

Booting is also very slow...

DL Mode JIG not work...

Later I will try UART... if I can see something usefull...

My evidence Video is soon uploaded... 9 MB ZIP... contain AVI Video...

Best Regards

Edit 1.

I9001onS8600v1.zip

Video attached... 1 or 2 posts before...
[Bada Software and Hacking General] Galaxy3HELL:
i cant belive what i saw in that video. i9001 boot animation and lockscreen... amazing.

so, if you write 4GB, maybe you think you will get more progress like no restart on lockscreen? :good:

waiting for next post :cool: