[Bada Software and Hacking General] adfree:
Please help. :angel:

Attached is Original HEX Boot from this package:

[B]S8600_JTAG_120125.zip[/B]

ENPRG7x30.hex
NPRG7x30.hex

To convert into BINary I've used WinHex and cut... so end/length is not correct... but start/begin should be correct.

I need start adresses... to load into RAM and execute...

Then I could try with:

JTAG

or

Revskills

or

.

.

.

Maybe then possible to download all necessary files via QPST or something similar... Qualcomm related... SOFTWARE solution.

Thanx in advance.

Best Regards

Edit 1.

Please wait...
Sending ping.
Uploading bootloader.
Executing init command.
Uploading.
Sending bootloader page success : 02
Sending bootloader page success : 02
Sending bootloader page success : 03
Sending bootloader page success : 02
Sending bootloader page success : 03

Seems Revskills upload into RAM... :good:

Short tested result with JTAG...

Used address 0x8000 0000 (address is wrong, but I have read/write access to this area)

Edit 2.

After I have found my Logfiles from QPST... :D :rolleyes: :o

It seems QPST do something...

Upload into RAM seems to work...

In Logfile also addresses can be found:

NPRG7x30.hex from S8600_JTAG_120125.zip

2014/05/14 02:52:24.792 Restart timeout set to 10 seconds
2014/05/14 02:52:24.792 StartSB2Download
2014/05/14 02:52:24.792 Begin SB2.0 Software Download
2014/05/14 02:52:24.792 Skip Reset: 1
2014/05/14 02:52:24.792 Lock phone
2014/05/14 02:52:24.792 Examine phone mode
2014/05/14 02:52:24.792 Get partition file name
2014/05/14 02:52:24.792 User specified flash programmer: ...\NPRG7x30.hex
2014/05/14 02:52:24.792 Flash Programmer file: ...\NPRG7x30.hex
2014/05/14 02:52:24.792 Examine phone mode
2014/05/14 02:52:24.792 Prepare to load the flash programmer
2014/05/14 02:52:24.823 Initialize the downloader
2014/05/14 02:52:24.823 Ping the downloader
2014/05/14 02:52:24.823 Sending Ping Request
2014/05/14 02:52:24.823 Response: 0x2 : Ticks: 0
2014/05/14 02:52:24.823 Wait For Download Response Succeeded.
2014/05/14 02:52:24.823 Get downloader parameters
2014/05/14 02:52:24.823 Sending Flash Programmer Parameter Request
2014/05/14 02:52:24.823 Wait For Parameter Response Succeeded.
2014/05/14 02:52:24.823 Load the flash programmer
2014/05/14 02:52:24.823 Search RAM image for erase pattern
2014/05/14 02:52:24.823 Skipped search - base address equals start address
2014/05/14 02:52:24.823 Using 32-bit write
2014/05/14 02:52:24.823 Sent Write: Address: [B]0x4500000[/B]	Size: 0x100
2014/05/14 02:52:24.823 Response: 0x3 : Ticks: 0
2014/05/14 02:52:24.823 Wait For Download Response [COLOR="Red"][B]Failed[/B][/COLOR].
2014/05/14 02:52:24.823 Sent Write: Address: 0x4500000	Size: 0x100
2014/05/14 02:52:24.838 Response: 0x3 : Ticks: 16
2014/05/14 02:52:24.838 Wait For Download Response [B][COLOR="Red"]Failed[/COLOR][/B].

0x4500000 seems... but...

0x8000000 for ENPRG7x30.hex

2014/05/14 02:47:52.760 Restart timeout set to 10 seconds
2014/05/14 02:47:52.760 StartSB2Download
2014/05/14 02:47:52.760 Begin SB2.0 Software Download
2014/05/14 02:47:52.760 Skip Reset: 1
2014/05/14 02:47:52.760 Lock phone
2014/05/14 02:47:52.760 Examine phone mode
2014/05/14 02:47:52.760 Get partition file name
2014/05/14 02:47:52.760 User specified flash programmer: ...\ENPRG7x30.hex
2014/05/14 02:47:52.760 Flash Programmer file: ...\ENPRG7x30.hex
2014/05/14 02:47:52.760 Examine phone mode
2014/05/14 02:47:52.760 Prepare to load the flash programmer
2014/05/14 02:47:52.792 Initialize the downloader
2014/05/14 02:47:52.792 Ping the downloader
2014/05/14 02:47:52.792 Sending Ping Request
2014/05/14 02:47:52.792 Response: 0x2 : Ticks: 0
2014/05/14 02:47:52.792 Wait For Download Response Succeeded.
2014/05/14 02:47:52.792 Get downloader parameters
2014/05/14 02:47:52.792 Sending Flash Programmer Parameter Request
2014/05/14 02:47:52.792 Wait For Parameter Response Succeeded.
2014/05/14 02:47:52.792 Load the flash programmer
2014/05/14 02:47:52.792 Search RAM image for erase pattern
2014/05/14 02:47:52.792 Skipped search - base address equals start address
2014/05/14 02:47:52.792 Using 32-bit write
2014/05/14 02:47:52.792 Sent Write: Address: [B]0x80000000[/B]	Size: 0x100
2014/05/14 02:47:52.792 Response: 0x2 : Ticks: 0
2014/05/14 02:47:52.792 Wait For Download Response [B]Succeeded[/B].
.
.
.

But failed later... :D :(

2014/05/14 02:47:58.557 Finish switching to streaming download mode
2014/05/14 02:47:58.557 SynchronizeConnection starting...
2014/05/14 02:47:58.557 Sending Hello to flash programmer...
2014/05/14 02:48:01.557 [B][COLOR="Red"]Timeout[/COLOR][/B]
2014/05/14 02:48:01.557 Sending Hello to flash programmer...
2014/05/14 02:48:04.557 Timeout
2014/05/14 02:48:04.557 Sending Hello to flash programmer...
2014/05/14 02:48:07.557 Timeout
2014/05/14 02:48:07.557 Sending Hello to flash programmer...
2014/05/14 02:48:10.557 Timeout
2014/05/14 02:48:10.557 Sending Hello to flash programmer...
2014/05/14 02:48:13.557 Timeout
2014/05/14 02:48:13.557 Sending Hello to flash programmer...
2014/05/14 02:48:16.557 Timeout
2014/05/14 02:48:16.557 Sending Hello to flash programmer...
2014/05/14 02:48:19.557 Timeout
2014/05/14 02:48:19.557 Sending Hello to flash programmer...
2014/05/14 02:48:22.557 Timeout
2014/05/14 02:48:22.557 Sending Hello to flash programmer...
2014/05/14 02:48:25.557 Timeout
2014/05/14 02:48:25.557 Sending Hello to flash programmer...
2014/05/14 02:48:28.557 Timeout
2014/05/14 02:48:28.557 Sending Hello to flash programmer...
2014/05/14 02:48:31.557 Timeout
2014/05/14 02:48:31.557 Sending Hello to flash programmer...
2014/05/14 02:48:34.557 Timeout
2014/05/14 02:48:34.557 Sending Hello to flash programmer...
2014/05/14 02:48:37.557 Timeout
2014/05/14 02:48:37.557 Sending Hello to flash programmer...
2014/05/14 02:48:40.557 Timeout
2014/05/14 02:48:40.557 Sending Hello to flash programmer...
2014/05/14 02:48:43.557 Timeout
2014/05/14 02:48:43.557 Sending Hello to flash programmer...
2014/05/14 02:48:46.557 Timeout
2014/05/14 02:48:46.557 Sending Hello to flash programmer...
2014/05/14 02:48:49.557 Timeout
2014/05/14 02:48:49.557 Sending Hello to flash programmer...
2014/05/14 02:48:52.557 Timeout
2014/05/14 02:48:52.557 Sending Hello to flash programmer...
2014/05/14 02:48:55.557 Timeout
2014/05/14 02:48:55.557 Sending Hello to flash programmer...
2014/05/14 02:48:58.557 Timeout
2014/05/14 02:48:58.557 Exceeded Hello tries.
2014/05/14 02:48:58.557 Could not initialize the protocol stack.
2014/05/14 02:48:58.557 Download end, status 103, error 138
2014/05/14 02:48:58.557 Exit SB 2.0 download with status 0x00000000

Edit 3.

2014/05/14 03:11:45.057 StartSB2Download
2014/05/14 03:11:45.057 Begin SB2.0 Software Download
2014/05/14 03:11:45.057 Skip Reset: 0
2014/05/14 03:11:45.057 Lock phone
2014/05/14 03:11:45.057 Examine phone mode
2014/05/14 03:11:45.057 Get partition file name
2014/05/14 03:11:45.057 Partition file (and path for flash programmer): C:\S8600_JTAG_120125_By_AnycallMongolia\jsdcc\bin\partition.mbn
2014/05/14 03:11:45.057 Flash Programmer [B]prefix: e[/B]
2014/05/14 03:11:45.057 Flash Programmer file: C:\S8600_JTAG_120125_By_AnycallMongolia\jsdcc\bin\[B]eARMPRG.HEX[/B]
2014/05/14 03:11:45.057 Examine phone mode
2014/05/14 03:11:45.057 Prepare to load the flash programmer
2014/05/14 03:11:45.057 ERROR: Error opening flashprg file.
2014/05/14 03:11:45.057 MILoadFlashprg: fopen() returned NULL for ARM file E:\Downloads\S8600_JTAG_120125_By_AnycallMongolia\jsdcc\bin\eARMPRG.HEX
2014/05/14 03:11:45.651 Download end, status 103, error 111
2014/05/14 03:11:45.651 Exit SB 2.0 download with status 0x00000000

Maybe it is because I am too stupid... :rolleyes:

Seems QPST expect file with this name:

[B]eARMPRG.HEX[/B]