FORUMS
Remove All Ads from XDA

[DEV] The project to port Android(froyo) on S8500 (8530)

183 posts
Thanks Meter: 624
 
By oleg_k, Retired Recognized Developer on 29th March 2011, 04:26 AM
Thread Closed Email Thread
30th May 2011, 08:28 AM |#1001  
Member
Thanks Meter: 46
 
Donate to Me
More
that thread is not for that...

you will get adb service runing, and you can comunicate with the phone through it, and somehow you can get screenshots from the phone and do some debugging work.
(ive compiled, but not installed cuz you need JEE, and i like bada 1.2)
android gets installed on sdcard, so bada still untouched:
you press callbutton while powering up -> android
normal power up -> bada
The Following User Says Thank You to mushrom For This Useful Post: [ View ] Gift mushrom Ad-Free
 
 
30th May 2011, 09:58 AM |#1002  
Retired Recognized Developer
Flag Warsaw
Thanks Meter: 393
 
More
Quote:
Originally Posted by mushrom

(ive compiled, but not installed cuz you need JEE, and i like bada 1.2)

clarification:
1. You don't need JEE - just JEE bootloader, works with the JL2 apps without problems.
2. You don't need JEE bootloader if you compile FOTA with the right include file (for your bootloader version). I don't know the current status whether there are all the necessary addresses for JL2 bootloader in the .inc file, but finding them is 10 minutes of disassembly.
30th May 2011, 10:40 AM |#1003  
Senior Member
Flag Launceston
Thanks Meter: 258
 
Donate to Me
More
currently our XXJL2.inc file contains next to nothing compared to our XXJEE.inc file, after the weeks we were attempting to find the functions inside XXJL2 it almost seems possible that whoever was compiling these firmwares opted to include less functions in the newer bootloaders (such as JL2) or the actual code for the functions was altered somewhat. The main reason creating .inc files for XXJEE and JPKA(an S8530 bootloader) was easier is because the bootloader symbols for these versions were readily available.

S8500XXJEE.inc: http://code.google.com/p/badadroid/s...S8500XXJEE.inc
S8500XXJL2.inc: http://code.google.com/p/badadroid/s...S8500XXJL2.inc
S8530JPA1.inc: http://code.google.com/p/badadroid/s...S8530JPKA1.inc
The Following User Says Thank You to nbates66 For This Useful Post: [ View ] Gift nbates66 Ad-Free
30th May 2011, 10:51 AM |#1004  
Retired Recognized Developer
Flag Warsaw
Thanks Meter: 393
 
More
I don't see a reason for looking up stuff that's not going to be used, so it doesn't matter that not every address known for JEE is known for JL2. Anything needed can be found in several minutes. What is missing (be specific)?
The Following User Says Thank You to mijoma For This Useful Post: [ View ] Gift mijoma Ad-Free
30th May 2011, 11:18 AM |#1005  
Member
Flag Minsk
Thanks Meter: 116
 
More
dump from OneNAND
I made dump from OneNAND:
Code:
# toolbox dd if=/dev/block/bml0!c of=/mnt_ext/bml0.bin bs=1024
513024+0 records in
513024+0 records out
525336576 bytes transferred in 154.195 secs (3406962 bytes/sec)
and sent it to oleg. He will write my dump into his OneNAND. If BADA will works fine on his phone, at the next step i'll write his android dump into my S8500.

Is there somebody who analyzed file "S8500_0x00000000_512M_RAW.bin"? Need info about placing "boot_loader.mbn" in it.

Edit1:
bml0.bin (offset=0x0 size=0x20000) = decrypted_boot_loader.bin (offset=0x0 size=0x20000)
bml0.bin (offset=0x40000 size=0x180000) = decrypted_boot_loader.bin (offset=0x20000 size=0x180000)
last 1024 bytes of "decrypted_boot_loader.bin" not found, maybe it's used for secure ROM...

Edit2:
bml0.bin (offset=0x200000 size=0x44b84) = dbl.mbn (offset=0x0 size=0x44b84)
The Following User Says Thank You to srg.mstr For This Useful Post: [ View ] Gift srg.mstr Ad-Free
30th May 2011, 11:48 AM |#1006  
Senior Member
Flag Launceston
Thanks Meter: 258
 
Donate to Me
More
Quote:
Originally Posted by mijoma

I don't see a reason for looking up stuff that's not going to be used, so it doesn't matter that not every address known for JEE is known for JL2. Anything needed can be found in several minutes. What is missing (be specific)?

i did manage to find some functions, but this is one that i never found, and seemed to be necessary(looking into fota thread you can see it was mis-identified at least once):
from XXJEE:
Code:
tfs4_opendir				  equ 0x424C7AC4
from XXJL2:
Code:
tfs4_init                                 equ 0x424C2CE4 
tfs4_mount                                equ 0x424C3A1C 
tfs4_open                                 equ 0x424C76F0 
tfs4_close                                equ 0x424C7864 
tfs4_read                                 equ 0x424C7C20
30th May 2011, 12:13 PM |#1007  
Retired Recognized Developer
Flag Warsaw
Thanks Meter: 393
 
More
XXJL2:
tfs4_opendir equ 0x424C6804
tfs4_closedir equ 0x424C6B00
tfs4_rmdir equ 0x424C6F44
tfs4_readdir equ 0x424C704C
tfs4_rewinddir equ 0x424C71E8
The Following User Says Thank You to mijoma For This Useful Post: [ View ] Gift mijoma Ad-Free
30th May 2011, 03:22 PM |#1008  
Junior Member
Thanks Meter: 1
 
More
I was wondering if you guys have contact with members of samfirmware.com, they have almost al the firmwares for wave as for the galaxy S, so they have to have some sources where they get them from (probably from people within samsung). So those people are likely to have more information about the firmwares and probably have some files you guys are looking for!
30th May 2011, 05:09 PM |#1009  
Senior Recognized Developer
Flag Gdańsk
Thanks Meter: 3,468
 
Donate to Me
More
Quote:
Originally Posted by srg.mstr

Edit1:
bml0.bin (offset=0x0 size=0x20000) = decrypted_boot_loader.bin (offset=0x0 size=0x20000)
bml0.bin (offset=0x40000 size=0x180000) = decrypted_boot_loader.bin (offset=0x20000 size=0x180000)
last 1024 bytes of "decrypted_boot_loader.bin" not found, maybe it's used for secure ROM...

Edit2:
bml0.bin (offset=0x200000 size=0x44b84) = dbl.mbn (offset=0x0 size=0x44b84)

first part is BL1, BL2_1 and BL2_2, it is equivalent to I9000 PBL (it is too splitted into few parts)
BL1 is loaded by iROM into iRAM, it does nothing but load BL2_1 into iRAM, BL2_1 can check integrity of BL2_2 (if SECKEY found under 0xE0E00_0000 reg) using SHA algorithm, does init of DMC0 and DMC1 (LPDDR & OneDRAM control) and some CPU flags, then loads BL2_2 into LPDDR.

Second part is BL3 - the final and main bootloader.

Decrypt tools doesn't cut last 1024 bytes of BL image and use the same decrypt function for them, so mess comes out, these are in fact Multiloader data, they aren't flashed, so you won't find them on oneNAND.

Note: In S8530 dbl.mbn is being written under 0x400000.
The Following 3 Users Say Thank You to Rebellos For This Useful Post: [ View ]
30th May 2011, 08:52 PM |#1010  
Junior Member
Thanks Meter: 0
 
More
Wink
i found something maybe important for the display.

h t t p : //blog.ribomation.com/index.php?s=droid

its a java programm witch shows you the display on your pc.
maybe usefull...

CartmanxD
30th May 2011, 09:02 PM |#1011  
mylove90's Avatar
Senior Member
Flag Cairo
Thanks Meter: 691
 
More
already have a one made by Dokugogagoji
look at here : http://forum.xda-developers.com/show...7&postcount=31
don't forget to say thanks to Dokugogagoji if you found his post useful
Thread Closed Subscribe to Thread

Tags
wave s8500 android
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes