yashsingh1/xdaforums huggingface dataset:
[Bada Software and Hacking General] adfree:
You could check if memory is full...

I mean if enough free space is available...

Also you can try to set Debug Mode to Mid or High...

Maybe S8600 gives usefull hints...

If you would no files missing...

You can try to use Multiloader and flash Firmware full... I mean Full Firmware with all files...

Remember to Backup all your files... before.

Halfdead S8600 are perfect as testdevice...

You need only alive Bootloader... to use Multiloader for my files.

Best Regards
[Bada Software and Hacking General] Taxidriver05:
Well....

Bad news...

Rebellos is officially out of Android development on Wave devices...

http://xdaforums.com/showpost.php?p=52923129&postcount=12

This might be the end of all developments of Android on Wave devices...

I cannot understand... :(

Wave phones might be old...

But they are pretty good...

Why are all devs leaving on this state?
[Bada Software and Hacking General] Galaxy3HELL:
well [MENTION=1030585]adfree[/MENTION] is this end of porting project? :rolleyes:
[Bada Software and Hacking General] mirhl:
Bootloader has been hijacked

Now every willing developer could help us
[Bada Software and Hacking General] Galaxy3HELL:
finaly question:

is bootloader finally hacked and free for new OS?

edit 1

http://xdaforums.com/showthread.php?t=1827674

http://xdaforums.com/showthread.php?t=1790836

maybe usefull for [MENTION=1030585]adfree[/MENTION]

also fastboot: maybe you could try it. https://docs.google.com/file/d/0B1S0LCuXCnnmSWh6NGJmSE1BUWc/edit

again universal drivers: dottech.org/26188/usb-adb-and-fastboot-drivers-for-windows-for-all-android-phones/
[Bada Software and Hacking General] adfree:
1.

With my real I9001 I can do some tests... for better understanding...

UART output also work... :cool:

http://xdaforums.com/showpost.php?p=52944982&postcount=29

No idea why... if nothing pressed... only this is visible...

AST_POWERON

BOOTING COMPLETED

If I hold Volume - and Power key... I can see Log via UART... :cool:

Need some time for study...

2.

http://xdaforums.com/showpost.php?p=52937097&postcount=18

Big thanx BenzoX

:good:

[MENTION=535343]all[/MENTION]

Good for study, but please remember... this is only Little Kernel...

Damn name convention... but this is NOT Android Kernel... boot.img

Also damn... because boot.img let us think about Bootloader... :rolleyes: :rolleyes:

Anyway, still we have nothing more then emmcboot/appsboot...

For compare check this:

http://xdaforums.com/showpost.php?p=37200735&postcount=7

Best Regards

Edit 1.

Found via Google... no idea which handset...

http://pastebin.com/Ns8f13yb

kernel @ 208000 (3952400 bytes)
ramdisk @ 1200000 (865852 bytes)
cmdline = 'console=ttyMSM1,115200'

Booting Linux
smem ram ptable found: ver: 0 len: 6
booting linux @ 0x208000, ramdisk @ 0x1200000 (865852)
cmdline: console=ttyMSM1,115200

Search is for :

dfirstsec = 212992

Taken from I9001 UART Log...

Edit 2.

http://pastebin.com/w03JLZJg
[Bada Software and Hacking General] adfree:
[MENTION=5540748]BenzoX[/MENTION]

Here my test results.

I have 2 compiled Binaries from Gunter33, 1 file is here:

http://xdaforums.com/showpost.php?p=52235344&postcount=137

Second file:

http://www.handy-faq.de/forum/bada_..._badadroid_support_thread-25.html#post2851607

Both LK hang few looooong Seconds, then restart.

No Fastboot driver request...

Orange Screen is normal... See Video:

http://xdaforums.com/showpost.php?p=52077290&postcount=98

Now your compiled Version from here:

http://xdaforums.com/showpost.php?p=52937097&postcount=18

Orange Screen passed... but then hangs few looong Seconds on black Screen...

No Driver Request...

Then also Reboot automatically...

To be sure, I am not drunken, braindead or some funny other mistake occured.

http://xdaforums.com/showpost.php?p=37200735&postcount=7

Tested again oleg_k attached Binary...

Orange Screen passed, black Screen also...

Log output like in Video or Screenshots...

Reboot seems normal... if I do nothing... after few Seconds self Reboot...

Anyway.

build-s8600.zip very helpfull for study.

:good:

For instance *.raw... So I can see *.mbn has 24 Bytes Header...

Best Regards
[Bada Software and Hacking General] BenzoX:
Silly me, i didn't saw that the commandline needed to build is in first post. But i don't get same size as Oleg one, maybe different compiler, or not the same version...

Here is the new one, and this time there is an emmcboot.mbn inside.

http://www.multiupload.nl/ISJVZHANJC
[Bada Software and Hacking General] Galaxy3HELL:
LK bootloader

http://www.phonesdevelopers.com/1784861/

www.phonesdevelopers.com/1741495/

maybe something usefull.
[Bada Software and Hacking General] Galaxy3HELL:
[MENTION=1030585]adfree[/MENTION]

i asked Oleg wheres his kernel of 4MB, and he reply:

kernel need store to mmcblk0p5 partition

boot.bin or boot.img named

i think he doesnt understand good, maybe its usefull but doubt it. :p

edit 1...

www.4shared.com/get/Z5Yb_Vqg/mmcblk0p5-flasher.html

maybe usefull
[Bada Software and Hacking General] adfree:
Hmmm...

Partition 5 is only 2 MB...

Partition 4 or 6 is not bigger...

If I write I9001 Kernel... with 4,5 MB... ( I have nothing else :rolleyes: )

This destroyes partition table...

So partition 6 with 1 MB seems mandatory...

As Soon as I know what is inside, I will add...

I have downloaded and tried mmcblk0p5-flasher.zip...

Is this from oleg_k ?

:confused:

Best Regards
[Bada Software and Hacking General] Galaxy3HELL:
no. flasher is something what i found, maybe usefull, probably not.

i dont know what to tell, thats what he said.. :cowboy:
[Bada Software and Hacking General] ghoslslender124:
YES! YES! YES!

WE HAVE KERNEL!

https://github.com/Oleg-k/kernel_source_s8600

[MENTION=270883]oleg_k[/MENTION] is, big thanks :*

But he tell, we can brick our device
[Bada Software and Hacking General] SWTR:
Yes:)

But what I don't understand is, why he doesn't come back to xda.
[Bada Software and Hacking General] Galaxy3HELL:
yes, same source he gived me today :good: :laugh:

[MENTION=5540748]BenzoX[/MENTION] can you build it for us? ;)
[Bada Software and Hacking General] adfree:
Thanx oleg_k. :good:

Now I need someone, who compile source to make Binary...

So I can try...

Thanx in advance.

Best Regards
[Bada Software and Hacking General] Galaxy3HELL:
[MENTION=5540748]BenzoX[/MENTION] or [MENTION=2386505]Alberto96[/MENTION] could compile it fast :cowboy:
[Bada Software and Hacking General] vishnu2014:
thanks you

thanks you

oleg_k

you r big player
[Bada Software and Hacking General] Galaxy3HELL:
[MENTION=1030585]adfree[/MENTION] this is what oleg_k wrote:

my bootladert is work, load kernel to RAM...but...it's 3-th stage

2nd stage bootlader from s8600 also load bada kernel...and android kernel conflict with bada kernel..it's my opinion

:eek:
[Bada Software and Hacking General] adfree:
Short tested...

bada Kernel aka apps_compressed.bin is in eMMC at address 0x08000000

Strange, I can not find it via partition...

:confused:

If I erase first 512 Byte of "apps_compressed.bin"... then Bootcycle...

OSBL ("2nd stage bootlader") checks something, before proceed with appsboot/eMMCboot...

I can not test oleg_k Kernel, because I can NOT compile it... :o

Best Regards

Edit 1.

Test 2...

Erased 1 sector at 0x08000400...

oleg_k EMMCBOOT is executed... :D

So OSBL checks maybe only header...:confused:

Later I will try to make empty dummy or erase apps_compressed content...

To check if apps_compressed must be alive to proceed...
[Bada Software and Hacking General] ghoslslender124:
[MENTION=1030585]adfree[/MENTION]

Today i try third time to compile it.

Oleg say, that he compile it, and public on his site on xda? Maybe second profile? i dont know.

I know only that we need to name like zImage.

Today, i try to compile.
[Bada Software and Hacking General] Galaxy3HELL:
benzoX tried to compile it, its giving some error, he will try to compile it after exams. :)
[Bada Software and Hacking General] Ghostv33:
wave 3 Android

Will i get android for wave 3 in the future???
[Bada Software and Hacking General] Galaxy3HELL:
No :D
[Bada Software and Hacking General] Ghostv33:
wave 3 Android

Why?? :confused: :crying:
[Bada Software and Hacking General] Galaxy3HELL:
well it is imbossible right now, sell you phone, buy android, or better windows phone :laugh:
[Bada Software and Hacking General] adfree:
Little progress in my studies...

http://xdaforums.com/showpost.php?p=53311603&postcount=63

Also little progress in disable apps_compressed.bin aka bada Kernel...

It seems I can boot with EMMCBOOT from oleg_k without full bada kernel...

To be sure I need more tests... but without compiled Kernel from oleg_k... no further tests possible... :o

http://xdaforums.com/showpost.php?p=53023568&postcount=324

[MENTION=5540748]BenzoX[/MENTION]

Please, can you try to compile source from oleg_k...

If you allready tried... please tell us where problems or what is missing...

:confused:

Maybe Kernel Developer from I8150 and/or I9001 could help. Maybe somebody could ask... please.

[MENTION=5833757]ghoslslender124[/MENTION]

Any kind of news from oleg_k ?

I have no Facebook...

[MENTION=270883]oleg_k[/MENTION]

Please, without Binary from Android Kernel I can't try... :o

Not enough brain to compile self... :o

Thanx in advance.

Best Regards
[Bada Software and Hacking General] BenzoX:
I got lot of errors during compilation (undeclared variables, missing files..) and when i correct a bug, another come some files later.

Maybe because my "fixs" create new errors, i don't know...

But i think i'm not good enough to correct all the code without breaking it and compiling a non functionnal kernel.

If i have bugless sources i can compile... Or maybe i use wrong options/flags...

this is what i did ;

export CROSS_COMPILE=/opt/codesourcery/arm-2009q1/bin/arm-none-linux-gnueabi- //(my toolchain, maybe bad one)

make s8600_defconfig

make

But maybe Oleg can provide a compiled version
[Bada Software and Hacking General] ghoslslender124:
[MENTION=1030585]adfree[/MENTION]

Oleg isn't in house now. He tell me only that, he compile it and public on his xda page? :confused:
[Bada Software and Hacking General] Taxidriver05:
I think, he will post on Facebook...
[Bada Software and Hacking General] ghoslslender124:
I wrote to him later. But Today.
[Bada Software and Hacking General] adfree:
Meanwhile we could collect some PDFs from Qualcomm for study...

Example...

http://read.pudn.com/downloads149/doc/project/643560/MSM7200.pdf

For S8600 we "need" something like this:

[B]MSM8255[/B]

Found in:

GT-S8600_SVCM_final_Anyservice_111019.pdf

SME_S8600.pdf

Also I can see this as info in my RIFF JTAG Software...

MSM8255

MSM8255T

Will check again Pictures from S8600 PCB...

Forgotten why MSM7x30...

:confused:

Best Regards

Edit 1.

Maybe later usefull...

http://xdaforums.com/showpost.php?p=35588589&postcount=3
[Bada Software and Hacking General] adfree:
This is progress from user Gunter33 about compile Kernel:

http://www.handy-faq.de/forum/bada_..._badadroid_support_thread-30.html#post2879826

He seems to find this Toolchain Version...

http://www.handy-faq.de/forum/bada_..._badadroid_support_thread-30.html#post2880720

Link:

http://www.file-upload.net/download-9062353/toolchain_arm-eabi-4.4.3.tar.gz.html

Here we can see some result, but it seems not Error free during compiling... :o

http://www.handy-faq.de/forum/bada_..._badadroid_support_thread-30.html#post2880226

[MENTION=5540748]BenzoX[/MENTION]

Please, if time. Can you check with 4.4.3 Toolchain?

Maybe not perfect but less Errors...

:confused:

Thanx in advance.

Best Regards

Edit 1.

Will check if same file...

http://xdaforums.com/showpost.php?p=37187490&postcount=6

Edit 2.

kernel_source_s8600-master\kernel_source_s8600-master\arch\arm\configs\s8600_defconfig

and wave3_defconfig.txt have many differences...
[Bada Software and Hacking General] BenzoX:
Tried with this toolchain, no more success, always the same errors. I also tried with the old wave3_defconfig, looks like it's too old, lots of errors.

When i do a make -j4 i have same result as Gunter (look like there is no errors), but errors are way upper in the console. (I have some difficulty with german, i didn't understood the whole thing). If he had this result with a "make" and not "make -j4", compilation succeeded and he should find kernel somewhere in his folder.
[Bada Software and Hacking General] yakub234go:
i think u need this a specific toolchain from this site http://www.mentor.com/embedded-software/sourcery-tools/sourcery-codebench/editions/lite-edition/ to compile this kernel
[Bada Software and Hacking General] adfree:
Ehm... maybe because I am tired or something else...

I have written oleg_k EMMCBOOT at position 0x0800 8000... and it is executed...

Normally this part of apps_compressed.bin and this is position where my prior tests stoped start of bada...

But before I have written only 512 Byte empty to make this invalid...

During laziness I have now taken oleg_k EMMCBOOT to overwrite this position... :D

I will do some tests... if I am not drunken or braindead...

Maybe now higher chance to use appps_compressed.bin to use oleg_k LK...

Later more...

Remember... appsboot aka EMMCboot is at 0x0450 0000... normally... in S8600...

Best Regards

Edit 1.

:D :D

This seems to work...

Tested only with XXKJC...

You need only to flash apps_compressed.bin...

I will upload my result. Hopefully this time """more""" testers...

Sideeffect... no idea...

At your own risk...

But this is SECOND, better third way to flash oleg_k LK...

Remember way 1:

JTAG... used by oleg_k too

Way 2, I have found via QPST...

Software solution without JTAG

Way 3. Me again...

Software solution without JTAG

Need some time to upload 30 MB...

Edit 2.

http://www.mediafire.com/download/2aypae40na9l23c/apps_EMMCv1.rar

At your own risk!

All what you will get or see is oleg_k LK aka EMMCboot aka appsboot... in action...

NOTHING more...
[Bada Software and Hacking General] Galaxy3HELL:
[MENTION=1030585]adfree[/MENTION] what will we get with this test on screen? :) can i flash back my phone if this brick my phone? :good:
[Bada Software and Hacking General] adfree:
If nothing explode, you will see this:

http://xdaforums.com/showpost.php?p=52077290&postcount=98

status1and2.avi

Then somebody could support me to find correct Fastboot Driver...

Yes, Download Mode by Key combination should work...

So you can flash back apps_compressed.bin with Multiloader...

But NO guarantee, if deeper "tests"... or some kind of accident happens...

Own risk... this is experimental stuff.

But hey...

No risk no fun.

And S8600 is meanwhile really cheap device...

And your device maybe damaged or faulty...

You need only B A LL s to try. :angel:

Best Regards
[Bada Software and Hacking General] Galaxy3HELL:
wait few minutes, i will test and post results :) :p

---------- Post added at 08:54 AM ---------- Previous post was at 08:40 AM ----------

test.

flashed normally.... 100%..

i cant see wave 3 GT-S8600 logo...

i can see text, and in one line it saying reverting to fastboot.

windows detect it and searching and installing for driver: Android Sooner Single ADB Interface.

driver installed sucessfully.

device rebooted again with same text.

last line is showing fastboot: processing comands.

device rebooted again... :cool: :cool:

edit 2

again back to download mode and flashing new software
[Bada Software and Hacking General] adfree:
:good:

Can you please make Foto from Screen...

Then we could compare...

For instance oleg_k output from here:

[400] Product Name: SD16G
[400] Product revision: 3.0
[400] Product serial number: 7C88FF04
[400] Manufacturing date: 2 2012
[410] Serial number -[410] serial number:

From 1. post...

Is different to my...

:confused:

Fastboot... maybe my fault, because XP User?

:confused: :o

If you press some keys... then you see output...

"yes", key is pressed... :o

It is not much, but it is without JTAG. :D

Now you could go back with Download Mode Key combination...

You need only flash apps_compressed.bin from normal bada Firmware...

Thanx for trying.

Maybe if more user try and report success... Maybe then oleg_k comes back and upload Android Kernel for further tests.

Best Regards
[Bada Software and Hacking General] Galaxy3HELL:
yes, if i press key, i can see that '' yes, key is pressed or what else ''..

its the same output :)

for fastboot i dont know, after phone booted to that test, windows started installing that driver and succesfully installed.

with this i think other users can start to searching for fastboot driver.
[Bada Software and Hacking General] pippo96:
This is my test

I don't see wave 3, it's a problem of my pc?
[Bada Software and Hacking General] Galaxy3HELL:
well pippo, i haved same screen, but im using windows 7 and that driver is installed, but adb doesnt recognize any device in fastboot.

corrert drivers is needed, or they doesnt exist.

oleg_k doesnt reply to messages, so i dont know what can we do else :fingers-crossed:
[Bada Software and Hacking General] Galaxy3HELL:
www.driveridentifier.com/scan/drive...d=693371185&hardware_id=USB\VID_18D1&PID_D00D

PID is matched here, with android sooner single fastboot interface, i will try this driver and post result :D
[Bada Software and Hacking General] adfree:
It seems Gunter33 have good progress.

Thanx for tests. :good:

http://www.handy-faq.de/forum/bada_..._badadroid_support_thread-31.html#post2881914

Short "translation"...

He copied I9001 dump to EXTERNAL SD card...

And then he have few seconds to see more output on Screen...

See last Picture with lower quality...

I will check this in next days...

Also he attached Drivers for FASTBOOT...

Thank you very much.

Best Regards

Edit 1.

Drivers found by Gunter33 short tested... attached working Drivers.

successfully installed under my XP :cool:

Now I will try to find, how to use... Commands etc. for tests...

WARNING! Be carefully at this state...

If you use some Fastboot related Commands or Tools and send something to S8600. You can brick your device...

Untested and dangerous...

Edit 2.

Again, DANGER CAREFULLY you can brick your S8600 easily now!

For FASTBOOT Drviers you need FASTBOOT.exe...

Short tested from here and works:

http://xdaforums.com/showpost.php?p=24642160&postcount=1

Tested Commands:

[B]fastboot devices[/B]

answer:

???????????? fastboot

Short test with I9001 boot.img aka Android Kernel:

[B]fastboot boot boot.img[/B]

answer:

downloading 'boot.img'... OKAY
booting... OKAY

Screen is grey and looks bad... maybe some textoutput...

Maybe this is not good for S8600 Display

Be carefully you can damage not only Software... so you need JTAG for restore.

Also you can damage Hardware, like Display... if too long too wrong settings outside of specification...
[Bada Software and Hacking General] Galaxy3HELL:
try this command: adb devices to see if it is recognized in fastboot mode.

with fastboot you can flash kernel, recovery directly from PC

.
[Bada Software and Hacking General] adfree:
FASTBOOT Driver and Commands working. :good: :cool:

But now it is really dangerous to try without to know what you do...

I have JTAG to fix Software failures...

Enter help, you see some Commands:

fastboot help

result:

usage: fastboot [ <option> ] <command>

commands:
update <filename> reflash device from update.zip
flashall flash boot + recovery + system
flash <partition> [ <filename> ] write a file to a flash partition
erase <partition> erase a flash partition
getvar <variable> display a bootloader variable
boot <kernel> [ <ramdisk> ] download and boot kernel
flash:raw boot <kernel> [ <ramdisk> ] create bootimage and flash it
devices list all connected devices
reboot reboot device normally
reboot-bootloader reboot device into bootloader

options:
-w erase userdata and cache
-s <serial number> specify device serial number
-p <product> specify product name
-c <cmdline> override kernel commandline
-i <vendor id> specify a custom USB vendor id

Best Regards
[Bada Software and Hacking General] Galaxy3HELL:
[MENTION=1030585]adfree[/MENTION] i think this is END of bootloader hacking :highfive: everything what we need now is kernel, and developing can start :cool:
[Bada Software and Hacking General] adfree:
My tests with FASTBOOT...

I have tested boot.img from I9001 and I8150... with no success...

fastboot boot I8150.img
downloading 'boot.img'... OKAY
booting... OKAY

The, I have created empty file... FFFF and checked... to be sure valid Format...

fastboot boot leer.img
[B]creating boot image...
creating boot image - 4741120 bytes[/B]
downloading 'boot.img'... OKAY
booting... OKAY

1.

FASTBOOT create something... not sure what exactly... maybe only Header added...

2.

I saw complete white Screen, so this remembers me on RAW Picture Format...

Few tests later... I can see "some" Pics...

For instance if I upload this:

LogoExtractedv1.zip

http://xdaforums.com/showpost.php?p=52181248&postcount=115

Please remember, you can damage/destroy Display... as Parameters not correct...

I have next few days maybe not much time...

My next goal is to create visible example...

So I can understand better, how it works...

Memo to me...

Also I can test the 2 other "FASTBOOT *.HEX files..." via QPST...

Maybe these Drivers also here valid...

For today I will only short check again... maximum size in apps_compressed.bin...

To inject Code...

I think I know where the end is... I think somewhere before this text...

Type : Unofficial Version
Number : 1096
Builder : superuser
Host : S1-AGENT05
Date : 2011/10/26
Time : 17:26:52
Size : 55050240 bytes
CheckSum : 0x0d3edb3f
View :

Will test now.

Best Regards
[Bada Software and Hacking General] adfree:
My "results" for today...

1.

Hole/space in apps_compressed.bin for own Code is between addresses:

0x08000
0x80000 -->[B]QMD[/B] Header visible

So 491520 Bytes possible to use, without damage Security check of apps_compressed.bin

2.

Tested EMMCBOOT from 0x4500000...

Because not sure if 3. Bootloader is executed then second time if in apps_compressed.bin...

:confused:

Not sure if in Original apps_compressed.bin is appsboot/EMMCBOOT inside...

And OSBL can choose between 2 appsboot ?

:confused:

Anyway, no difference for using FASTBOOT...

3.

I've created 1 Byte file with FF inside... named as 1.img

Aha, seems FASTBOOT add something... 4096 Bytes...

Maybe I will use later Sniffer... to know what is add to my 0xFF ...

4.

Tested my 2 different HEX files with QPST...

FASTBOOT drivers seems others...

Not installed here...

Best Regards

Edit 1.

I have combined "Header" of I9001 0x1000 long... with ca. 256 KB 0xFF...

result is clear white Display and I can read output of FASTBOOT...

fastboot: processing commands
fastboot: download:00040000
fastboot:boot

My working file is leer6.img

Later I will upload my example...