dll reconstruction of xip files in wm6

[dejfson]

Dear All,
i'm owner of omnia i900 from samsung, and i'm bit interested in adroid os and what would be eventual possibilities to port it to this pda/phone. I'd like to copy driver files from /windows/ directory on the phone and disasseble it to see the init of lcd etcetc. These files are copy-protected so I gues they are sort of executable-in-place because they do a core of wm6 system. is there any way how to disassemble/copy/reconstruct them? i've been looking around, but didn't find any specific info.

i'd be happy for any useful info.
thx.
d.

[Soul_Est]

Dear All,
i'm owner of omnia i900 from samsung, and i'm bit interested in adroid os and what would be eventual possibilities to port it to this pda/phone. I'd like to copy driver files from /windows/ directory on the phone and disasseble it to see the init of lcd etcetc. These files are copy-protected so I gues they are sort of executable-in-place because they do a core of wm6 system. is there any way how to disassemble/copy/reconstruct them? i've been looking around, but didn't find any specific info.

i'd be happy for any useful info.
thx.
d.

It's possible to disassemble and reconstruct the dlls. You would first have to download a ROM update for the phone and then dump the PDA part of the ROM using the an omnia kitchen. All this can be found over @ the MoDaCo forums. When you look in the ROM folder inside the XIP folder there will be the dlls you need. You should then get the IDA disassembler and disassemble the dlls with that. After finding the routines you need you'll need to get the HAReT bootloader and the Linux kernel to patch. from there on in you'll need to read up on dzo's android linux for the Vogue and HAReT's documentation and go from there. Hope it helps...

[dejfson]

Sorry for late response. Sort of busy. Thanks for info. Very useful. I'll try to look into....
d.

[dejfson]

Dear All,
maybe someone could give me some hint. I've got all the drivers I need thanks to post of Soul_Est. Unfortunately this is not a complete solution for me.

When I try to disassemble e.g. zylonite_usb driver, it ask me for reference to ceddk.dll library. this is unfortunately XIP file, therefore no ceddk.dll exists as this library is spread over many files (imageinfo.bin, imageinfo.txt, s000,s001,s002,s003). Of course when I cancel import of this DLL, the IDA disassembler will put into the decompiled zylonite_usb code links to call functions as CEDDK_37, CEDDK_62 etcetc. It would improve my guessing of what happens by degree of order if I would be able to import this CEDLL XIP file into IDA, thus instead of CEDLL_37 call I could see real function name...

could someone smart tell me how to do this? how can I prepare these ceddk files in order to import them into IDA?

thanksalot

[Soul_Est]

You could use ervius' buildos + pkgtools 4.3beta1 to re-assemble the module as it's called into the file you need. I can't remember where I found it though. You could also look into the haretconsole to look into the function calls. Documentation is here: http://www.handhelds.org/moin/moin.cgi/HaRET_20Documentation
There is also someone porting the Linux kernel to the Omnia as well. You should check here: http://forum.xda-developers.com/showthread.php?t=431329
The two of you could possibly work together on the project.

[nir36]

moved to the Q&A section