yashsingh1/xdaforums huggingface dataset:
[General Questions and Answers] Ricousandel:
Hi all

I have a Superpad - i like android on it but i feel it is missing the windows elements that something with a 10 inch screen and all the functions that are available on it can be used for -

So what im asking is it possible to change from a Andriod rom to windows rom with out killing it and if so is there any guides and links to rooms which would work with it.

IF possible dual bot rom would be great - i dont mind what version of Windows it is but upto date version on andriod on a dual boot would be nice

Any help on this will be appreciated
[Vibrant Q&A, Help & Troubleshooting] Hammervic:
* Yes i know I spelled opinion wrong didnt see it till after i posted

Im new on here been reading for about a month about all the different roms and such. I'm not 'scared" or "Afraid" to do the upgrades as described on the site here.

But I have a few questions and looking for a little guidance.

1. If I update or flash a new rom does it wipe out all my apps and and ringtones and email settings and such? I have 1 app that I payed 20 bucks for that I need for work and would hate to have to pay for it again.

2. anyone know if any of the roms downgrade the blue tooth issue. meaning from what i read on the phone now is a newer version of bt that doesnt work with keyboards or game pads now.

3. Im looking for a very stable daily driver as my phone is used all day. Im looking for one with little maintence and pretty much fully functional.

Thanks for your time,
[Vibrant Q&A, Help & Troubleshooting] xtone:
1. yes it'll wipe all user apps and settings, use titanium backup to backup your apps and app data. as for paid apps, they follow your google account. they will be shown as purchased as soon as you login to market.

2. no idea, i dont use bluetooth

3. Personally use Nero 4.1 , but there's also Axura and M10

cheers
[Bada Software and Hacking General] adfree:
For investigation I'm searching for oldest Firmware...

At the moment I found "only".

S8500XXJB6.rar

Differences:

1.

Few adresses not same in Multiloader

2.

Not running on my handset... accept amss.bin

3.

TriX can't extract anything... :confused:

PSAS can't decrypt apps_compressed.bin :confused:

4.

Bootloader different

Best Regards
[Bada Software and Hacking General] b.kubica:
older firmware, like S8500XXJB6 is a bit different (is much closer in structure to S8000)

ad. 2, i assume you have newer bootloader in phone (it won't accept older one)

ad. 3, shp, csc file signature is a bit different (will be fixed soon). FS file is just fat16 image (TriX support fat images via FATe plugin, i have no idea fat images was used before, i will add FATe plugin in next build)

ad. 4, if someone still has that firmware in phone is very luky guy. I can bet with jet android port can be ported to it with any problem - JB6 bootloader is not crypted.
[Bada Software and Hacking General] adfree:
5.

Rsrc2_S8500(Low).rc2 works also in JI5 for instance...

Different Boot Pics... maybe this helps to identify location of each Pic.

Battery...

Samsung Logo...

.

.

.

Maybe we find out, which Format... maybe also QMG. :confused:

Best Regards
[Bada Software and Hacking General] faenil:
you can already extract rc2 files ;)

use the same program that is used for older samsungs :)

this one if I'm not wrong :)

http://code.google.com/p/samsung-firmware-tools/
[Bada Software and Hacking General] adfree:
I've used Tool WinImage for extraction of *.FFS... renamed into *.img

Usefull also for FFS of other bada handsets like:

S5250

S5330

S5750

S7230

In CSC of S8500XXJB6 I navigate via 005C00 to see where folder/file is.

Best Regards
[Bada Software and Hacking General] adfree:
Still problem.

That I can't bypass Bootloader Security... :( :rolleyes:

Not with Multiloader nor with JTAG...

My knowledge how Boot is correct written + activated... = 0 :o

I saw some other Firmware from other models... it seems IMRC is still used...

Maybe someone found Algo or Tool to decode RC1. :)

Thanx.

Best Regards
[Bada Software and Hacking General] adfree:
:o

Blub...

XXJB6 unfinished mission... :(

2 new Firmware good for research. :D

XXJEB as bada 1.x Firmware... nearly all Certs removeable... :D

Only Integrity check for *.so files left.

For bada 2.x

XPKG5 very interesting...

Only bad, I can't find where these 2 last Certs are stored?

SamsungSBRootCA.cer
Samsung_RootCA.crt

:confused:

Best Regards
[Bada Software and Hacking General] adfree:
New attempt with JTAG... but again failed... :o :crying:

Magic is now CMM Script...

BUT I have only ELF from XXJEB...

Maybe this is the reason why Multiloader not flash XXJB6 Bootloader...

Now I could learn more about CMM... :D

To flash correct file to correct address...

Or maybe way to extract RC1 ... because old IMRC Algo...

Not sure if maybe broken for other Samsung handsets... :confused:

Best REgards
[Bada Software and Hacking General] adfree:
Hmm, I can see S8000 Jet use for RC1 also IMRC...

Maybe possible to flash RC1 XXJB6 to S8000, then copy content from handset...

:confused:

Best Regards
[Bada Software and Hacking General] adfree:
Please help.

I am searching for friendly S8000 Jet User.

Can someone confirm working Command:

FmSecureMode off

And I wish content of S8000 folder System please.

See here what I mean:

http://xdaforums.com/showpost.php?p=12436452&postcount=1

Thanx in advance.

Best Regards
[Bada Software and Hacking General] adfree:
http://xdaforums.com/showpost.php?p=34508619&postcount=132

Now I have own S8000 Jet...

First try to flash RC1 from XXJB6 fail...

NAK_invalid_len

Need more knowledge about S8000... :rolleyes:

Best Regards

Edit 1.

Maybe no chance... I have forgotten to check size... :rolleyes:

Rsrc_S8000_Open_Benelux_OCE.rc1 is 80 MB

Rsrc_S8500_Open_Europe_Common.rc1 is 100 MB

Maybe S8000 not reserved 100 MB for RC1... :eek: :crying:

Edit 2.

I have removed 20 MB...

S8000 Jet start with reduced XXJB6 RC1 :cool: :cool: :cool: :cool: :cool: :cool:

Now I copy System folder...

Maybe few files corrupted and over 20 MB missing...

But better then nothing. :victory:
[Bada Software and Hacking General] adfree:
http://xdaforums.com/showpost.php?p=34518982&postcount=34

Okay, second attempt successfully read few files from XXJB2 RC1... :D

And I found limit for RC1 in S8000...

> FLASH_RSRC1_SIZE : [B]0X04B00000[/B]
> FLASH_RSRC1_START_ADDR : 0X03700000
> FLASH_RSRC1_END_ADDR : 0X08200000

So ""80 MB"" ... :eek:

Will check older Firmware, maybe more place in other Versions reserved...

Best Regards
[Bada Software and Hacking General] adfree:
http://www.mediafire.com/?um7dr5ufti7h0dx

Here is folder with RBMs from XXJB6. :cowboy:

Also not all are visible with Wave_Remaker...

Few are funny and interessting...

Later I will upload more... but again.

During small reservation of S8000 I was only able to flash 75 MB of 100 MB from RC1.

Maybe also few files are corrupt... Not checked all.

Best Regards
[Bada Software and Hacking General] adfree:
I'm trying to collect few other Firmware from other Samsung devices...

U700 IMRC seems other algo maybe...

Bluescreen ... on S8000

FmMountVolume

Fm_FS_LFS

FM_PARTITION_LFS_C

Next try is M8910 RC1...

Btw. I have forgotten XXJC5 is also IMRC and bigger then XXJB6...

Later more...

Best Regards

Edit 1.

M8910 RC1 without problems work on S8000...

Remember only end.bin last 1024 Byte have to be modified for correct addresses...

Edit 2.

S5620 RC1 tested...

It seems more compatible then U700 RC1 but also loop...

Maybe if I can disable Animation Power ON then chance to check next Error...
[Bada Software and Hacking General] adfree:
New Year... New attempt :D

Bootfiles Mixed with XXJEB...

boot_loader.mbn from XXJEB

dbl.mbn from XXJB6

Multiloader can flash this combination and it seems XXJEB then work...

I hope if I manage to understand how to use Binary instead ELF in CMM Script, then maybe I am 1 day able to flash Boot from XXJB6...

Best Regards
[Bada Software and Hacking General] adfree:
IMRC related... there are more Samsung devices with IMRC compressed RC1...

RC1(IMRC)	compatible	size
S8000	x	75/80
S8500	XXJB6	x	100+
M8910	x	75/?
S5620	-
U700	-
F480	-
S5510	-
S7350	-
G800
U900

I am not sure if different IMRC Versions... because mandatory few RBM files needed in System folder...

Best Regards

Edit 1.

Sometimes I can see Power ONOFF Animation...

Edit 2.

It seems IMRC different Versions... see first 8 Byte...

F480 for instance compared with S8500...

I think at 0x14 4 Bytes for DEcompressed size stored... Little Endian
[Bada Software and Hacking General] carver:
yes, the header is different.

index - also. but it is clear.

the compression algorithm - still a mystery

//magick //always1 //index_type //size??? //count //array of tail size or offset
G80LXEIE1 0x43524D49 0x00001000 0x0000000B 0x00000006 0x02464A38 0x00002466 0x00000000 0x00000338 0x000004A0 0x000007C8 0x00000924 0x00000BA4 0x00000CFC 0x00000F94 0x000010E4
U70BXEIF1 0x43524D49 0x00001000 0x0000000B 0x00000006 0x01E5BB48 0x00001E5D 0x00000000 0x00000338 0x00000498 0x00000774 0x000008B8 0x00000BC4 0x00000D28 0x00000EF8 0x00001028
F480XEHE1 0x43524D49 0x00001000 0x0000000C 0x00000006 0x01A55024 0x00001A56 0x00000170 0x0000030F 0x0000013A 0x000002F6 0x00000147 0x000002B6 0x000000E4 0x00000295 0x00000144
F48FXEID1 0x43524D49 0x00001000 0x0000000C 0x00000006 0x01EF4A6C 0x00001EF5 0x0000016C 0x000002E7 0x0000014B 0x00000335 0x0000012D 0x000002A1 0x000000E0 0x00000277 0x0000013F
S5510XEIJ1 0x43524D49 0x02000400 0x00001000 0x0000000C 0x00000006 0x01CC581C 0x00001CC6 0x00000165 0x00000358 0x000000AE 0x00000277 0x000000BD 0x00000284 0x0000015D 0x00000327 0x000000EC
S735EXEII2 0x43524D49 0x02000400 0x00001000 0x0000000C 0x00000006 0x02A74E80 0x00002A75 0x00000147 0x0000033A 0x000000D4 0x000002A0 0x000000B5 0x0000027E 0x00000125 0x00000315 0x00000111
S8500XXJB6 0x43524D49 0x02000400 0x00001000 0x0000000C 0x00000006 0x09BF64A0 0x00009BF7 0x00000141 0x000002DC 0x00000116 0x00000280 0x0000014B 0x000002FB 0x00000155 0x000002D4 0x00000124
U90UXEIE3 0x43524D49 0x00001000 0x0000000C 0x00000006 0x032BAF08 0x000032BB 0x00000168 0x0000030B 0x0000012F 0x000002C3 0x0000013F 0x000002D0 0x00000103 0x00000272 0x000000D0
[Bada Software and Hacking General] adfree:
I don't understand if RC1 is decompressed by Bootloader or by apps_compressed.bin... :o

QMD in Header is in later Firmware from S8500...

Short tested...

I can change this in RC1...

QAB

S8500 starts normal...

If I try to change all 3 letters... then short Bluescreen... But I can't see Error message fast enough... maybe later...

I have changed into 123 instead QMD...

Will check again... Maybe I can capture Bluescreen...

Video or something else...

Later I will try this with S800 and IMRC textstring...

I want to identify if Boot or apps_c task to decompress RC1...

Best Regards

Edit 1.

I hope Pic is readable... Tested with Debug Level high and on XXJEB S8500...

Looks like something like this...

QuramMduceRFlashInitM((void*)pFotaRsrcCompHeader[QURAM_RSRC_BIN_TYPE_LFS]

Found in apps_compressed.bin...

Hmmmmmmmmmmmm. In theory it seems I don't need Bootloader from XXJB6...

BUT... damn apps_compressed.bin is also secured by something ugly... :eek:

Last 1024 Byte... aka end.bin...

Anyway... will now check again IMRC Header in S8000...

Maybe here also possible to force Bluescreen in Debug Level High...

Best Regards
[Bada Software and Hacking General] adfree:
If I destroy IMRC Header on S8000... XPJA1... Debug Mid...

Later I will try to catch all 5 Bluescreens..

Here 1/5...

Best Regards
[Bada Software and Hacking General] adfree:
RC1(IMRC)	compatible	size
S8000	x	75/80
S8500	XXJB6	x	100+
M8910	x	75/?
S5620	-
U700	-
F480	-
S5510	-
S7350	-
G800	-
U900
S5600	-
B5310	-

Found few more devices...

It seems - not ever means incompatible... I can see sometimes Power ONOFF Animation... smaller Resolution then 480 x 800... So maybe reason is smaller *.rbm files force to Reboot... Will check "later" with Debug Mid...

Best Regards
[Bada Software and Hacking General] adfree:
:D

Maybe new chance for me, to see XXJB6 running on my Wave...

http://xdaforums.com/showpost.php?p=43597348&postcount=28

Will check again if dream... but it seems I was also able to upload BL3 from XXJB6 to address:

0x42380000

I saw Battery Pic...

Firmware was JE7 from Poland... so wrong apps, RC1 etc...

Will check tommoorrooww again with open eyes... :angel:

Maybe I have to prepare Image via hand... and flash with JTAG... before...

Best Regards
[Bada Software and Hacking General] adfree:
Little progress with CMM Script + BL3 of XXJB6.

:D

I can flash all files now WITHOUT Modification.

Accept Bootloader still unflashable with Multiloader :confused:

Because I see only Logo from RC2... I thought DBL is missing...

But... after DBL flashing same...

I set Debug Level High via RC2...

But no idea yet why Wave not boot complete...

Maybe later an idea...

My Wave has no IMEI yet, so no NV items etc...

I hope not this is the reason...

Best Regards
[Bada Software and Hacking General] adfree:
:D

I can see Blue Screen with Mass Storage Initializing...

:cyclops:

:victory: :victory: :victory: :victory: :victory:

With Explorer I have access...

Phone is here 1,4 GB...

Will try with sTune etc. and will try to make few Screenshots...

Best Regards

Edit 1.

sTune 1.07 work, I can copy files...

So I will make first Backup... :cool: :cool:
[Bada Software and Hacking General] adfree:
Few Screenshots from XXJB6 on my Retail S8500...

Nothing really special yet...

But interesting in Dolfin Button for Fullscreen... :rolleyes:

Best Regards
[Bada Software and Hacking General] adfree:
It seems different settings for Fullscreen Browser... possible.

WinComm also work... for Logging something.

Best Regards
[Bada Software and Hacking General] adfree:
This is funny...

XXJB6 BL3 starts correct XXLA1 bada 2...

So it seems RC1 Algo is not in Boot, but in apps_compressed.bin. :o

Best Regards
[Bada Software and Hacking General] adfree:
XXJB6 can not flash XXJB6 Boot... but can flash XXLA1 Boot etc.

So maybe it is one of the first SEED Encryption enabled Bootloader... also for Boot.

Will try to find more Firmwareversion before XXJB6...

I think I can remember about XXJA... in Bluscreen...

In Docs I can see, How_to_download_S8500.doc :

Found Bluescreen about XXJA7h

Best Regards
[Bada Software and Hacking General] adfree:
About IMRC...

RC1 from XXJC5 and XXJC7 have IMRC Algo in RC1...

Short tested... RC1 address is then 4200000 instead 4000000...

Bootloader is not included, also FFS is missing...

First try with modified RC1 in XXJC7 failed... :(

So it seems XXJB6 FFS is maybe not the base for XXJC...

I have seen Bluescreen about Sound blablabla...

XXJC5 and XXJC7 are taken from here:

http://netfolder.in/folder.php?folder_id=M4w7E4h

Best Regards
[Bada Software and Hacking General] Rizwaan1:
Can i install the firmware S8500XXJB6 on my samsung wave s8500, will it work.

I heard that the music player has more presets.
[Bada Software and Hacking General] adfree:
Remember XXJB6 is from february 2010.

It is buggy too and not 100 % compatible... Risk to damage your Retail device.

Yesterday I have realized very hot Display...

Apps are not compatible... because bada -1 ... 0.9 or something Beta...

And the main problem, if you ignore warnings.

You need Bootloader of XXJB6...

2 ways...

Confirmed and working via JTAG (RIFF Box):

http://xdaforums.com/showpost.php?p=43732228&postcount=116

But this is only temporary, you have to do this for every start... :eek:

Second way, WITHOUT additional Hardware.

But this is not fully working and I have no idea why. :o :(

http://xdaforums.com/showpost.php?p=43606737&postcount=45

Best Regards
[Bada Software and Hacking General] adfree:
In internal menus more options in XXJB6...

With this Code, I can use S8500 and WinComm at same time... otherwise in bada -1 it is not possible to use Wave...

1.MTP Mode On/Off Key string:
:[B]*#6870#[/B]

2.MTP means
: Media Transfer Protocol

Best Regards
[Bada Software and Hacking General] adfree:
s8500 nas.bin

This seems JTAG dump from Prototype... but Boot is destroyed by XXJEB...

Seems few files from XXJB7 inside...

Will check also NV items... maybe also more then 400...

Found in JTAG dumps... only text string in "Info Block"...

XXJB1
XXJB5d

Best Regards
[General Questions and Answers] 0brady0:
i installed the tsowen taskbar 5 and i really like it the only problem is my network bars dont show correctly. i have a touch pro 2 and it installed right and i installed the sdkcert thing before i installed it, so idk what i did wrong or why its not working? any help?
[General Questions and Answers] Dirk:
Taskbar mods can be very finnicky.

Have you tried posting in the Original thread where the work was published? Failing that, perhaps sending a pm to the developer himself might yield results.
[Droid X General] xDanVitox:
I hate to do this because it might be somewhere else but I have 2.3.15 on my X and I want to get back to stock so that I can get the OTA .340 to start clean. The reason I'm posting on here is on all of the guides I've read about sbfing I am a little confused and see things about bootloader 10.03 and .04 and I have .01 and don't wanna brick obviously so I was wondering if someone could tell me what steps I need to take to get to stock so I can OTA?
[Droid X General] artex101:
This...

http://xdaforums.com/wiki/index.php?title=File:Motorola_Droid_X.png
[Droid X General] mailman1175:
I'm in the same boat, but the wiki doesn't give this n00b quite enough detail. I want to learn, but there's so much information out there, the pace of development is so fast, and there are so many 50-page threads full of "dude this is awesome!" posts, it's hard for me to make any sense of it.

I'm on 2.3.150, rooted with Z4 -- just got the phone two weeks ago. I like where my phone is, for the most part, but I'd like to experiment with some custom ROMs, and they appear mostly to be built on 320/340. I've got Titanium Backup installed, with much of the bloat frozen.

I deleted the 340 OTA file with Root Explorer a couple of times, because I'd seen a couple of people post on here that they quit getting the Verizon nags about installing the update.

Not only has that not worked (I'm still getting nagged), but the phone keeps downloading the update again. So, I'm just going to go ahead and jump to 340 with the rest of the DX world. But I need to know how to get from where I am now through the update and back to a rooted phone.

Do I need to go all the way back to stock first? Can I just unfreeze all the bloat, un-root, and let the install proceed? Once I've installed the update, then, how do I get back to where I am now?

There are so many threads with so much differing information, I don't have any idea where to start or what to expect. I don't want a $300 paperweight.

Help me, Obi Wan, you're my only hope! :)
[Droid X General] blockhead42:
As long as bloat is not removed, you can just un-freeze it and update. You re-root in thi same way you did on 2.3.15
[Droid X General] kdkinc:
Check out this link much easier...

http://www.droidxforums.com/forum/droid-x-hacks/15666-maderstcok-ota-2-3-340-update-zip.html
[Android Software/Hacking General [Developers Only]] mariotenuta:
somebody plz help. I have a rogers quench and have been trying to root this thing for the past week and no methods work at all. I cant even get adb to respond to on windows 7 or vista..

does anyone have any ideas???
[G2 and Desire Z Q&A, Help & Troubleshooting] dontbes:
Everytime I get a mms and try to look at it, I get a message saying it didn't get the media content because of size or resolution. I'm running Cyanogen 6.1.1. Any help? :/
[G2 and Desire Z Q&A, Help & Troubleshooting] Utorrent76:
Try going into your mms app go to settings scroll down to custom user agent and see if "default android"is checked off.

Sent from my CyanogenMod powered G2.
[G2 and Desire Z Q&A, Help & Troubleshooting] dontbes:
Oh it was on the iPhone settings for some reason lol thanks!
[Desire HD Themes and Apps] redlinux:
hey guys

is there any battery widget that simply displays the battery level in percent as well as the number of hours your phone has been running?

any help is greatly appreciated.

much thanks!!
[Desire HD Themes and Apps] frea:
PowerTime could be what you are looking for
[Desire HD Themes and Apps] Krzysiec:
Or simple Battery Indicator (Battery Indicator Pro)
[Desire HD Themes and Apps] spxxx:
Try System Info Wigdet.....battery,batery temp,uptime,free ram,sd card.....you can choose from 1x1 wigdet to 4x1 widget
[Desire HD Themes and Apps] redlinux:
thanks for the reply guys!!

will surely try it later!!

:)
[Android Apps and Games] wxrjack:
There is a serious bug which prevent 136build Miren OTA. Sorry!!!

Please install the following APK to upgrade to a fixed version.

http://miren.cn/clientaccess/v1-testing/download/browser-testing.apk
[Galaxy S I9000 General] chevy2410:
Hi all,

I was wondering if any of you have had, or are having any problems with the soft touch keys (Menu and Back buttons) on their SGS? Mine don't work. I think I may have, by accident, updated the firmware and now they don't work. Is there a way to get it back working again? I installed Darkys V8 rom and I saw the SGS Tools app and within secret codes I saw Touchscreen Firmwareversion. I clicked on Touch Key FW update. I thought I would get a warning before it actually began to update. My version says Phone's Touch Key FW version :0xa9 and the other is part's Touch key FW version: 0xa9. Can someone with SGS Tools app run it and check to see if there's matches mine. So run the app and then go to Secret Codes and then scroll down to Touchscreen Firmwareversion and check what version you are using.

Thanks so much,

Chevy
[Galaxy S I9000 General] xmsnx:
Never done the update

Phone's Touch Key FW version: 0xa9

Part's Touch Key FW version: 0xa9

I would try flashing a stock firmware through odin to see if it would reversible. Sorry couldn't be of more help.
[Galaxy S I9000 General] chevy2410:
Thanks so much!!

Looks like maybe the firmware didn't get update because your numbers are the same as mine. I've tried that, but it didn't seem to work. I'll try again. Just wondering weather that firmware is in the rom or within the hardware.

Thanks,

Chevy
[Galaxy S I9000 General] iammodo:
I have had two Galaxy s bought to me with this problem and both times it was hardware.

If you are around Blackpool i would be able to fix it.
[Galaxy S I9000 General] chevy2410:
So it sounds like I'll have to get a replacement. BTW how can you fix it?

Chevy
[Galaxy S I9000 General] iammodo:
Replace the LCD. As its 80% of the phone in one part.

Phone only has like 4 parts its crazy

Sent from my NCC-74656!
[Galaxy S I9000 General] chevy2410:
So I guess there's no way to software fix it.
[Galaxy S I9000 General] iammodo:
It might work but the two I had did need hardware.

It is an in warranty fix if you have a service centre by you.
[Galaxy S I9000 General] pellos:
hey man. have the same problem as well.

mine are :

Phone's Touch Key FW version: 0x02

Part's Touch Key FW version: 0x0

anyone have an answer how to solve it?

should take it to service centre?
[Galaxy S I9000 General] iammodo:
Take it to the service centre

Sent from my NCC-74656!
[Galaxy S I9000 General] pellos:
than ks for the info iammodo. my question once more is : i live in cyprus, the mobile was bought from greece as a friend got it for me as a gift. will cyprus samsungs service centre fix my problem or should i ask for a new device. i am not in any contract.

and should i flash it back to any rom eu???
[Galaxy S I9000 General] iammodo:
I can accept any European phone to fix in the uk. But don't know about other country's. Flash to the phones stock to preserve warranty some are fussy I never am

Sent from my NCC-74656!
[Galaxy S I9000 General] pellos:
hey iammodo. was wondering man how much will it cost to be fixed? and how long will it take man? i LOVE my phone
[Galaxy S I9000 General] iammodo:
I'm probs not the fastest choice as in the uk but takes like 30mins to fix.

Sent from my NCC-74656!