Upload Mode

Search This thread
By:
Advanced…
M

mijoma

Retired Recognized Developer
Feb 5, 2011
249
393
Warsaw
There are several modes that Wave bootloader supports for certain purposes. The normal mode and low power mode just start the Nucleus kernel. I'm also pretty sure everybody knows what a DOWNLOAD MODE is (one with the red letters, but if initiated from Bada it can also display a download picture) that you use to change the firmware installed in the phone OneNAND. There is, however, another interesting mode that bootloader executes if something dies - it's an UPLOAD MODE that looks a bit similar to download mode (text written with yellow letters). There is a different set of commands that bootloader accepts when in this state and there should be some tool able to communicate with the phone. The mode is not really wave specific as SBL bootloader for Galaxy does also implement it.

Does anybody have information about the mode itself or the tool for that? I can provide some more details about commands if necessary.
 
  • Like
Reactions: lbyao and adfree
M

mijoma

Retired Recognized Developer
Feb 5, 2011
249
393
Warsaw
Thanks, but these are just random links... having nothing to do with what I'm asking
 
R

Rebellos

Senior Recognized Developer
May 13, 2009
1,353
3,428
Gdańsk
Please try to look for that "Debug File" and send it to me if you can.

Upload Mode can be easily accessed by modifying bTerm, but I'm too lazy to do it in next days.
 
  • Like
Reactions: adfree
M

mijoma

Retired Recognized Developer
Feb 5, 2011
249
393
Warsaw
adfree said:
:D

Again wrong... from me.

I can see it under Modem in device manager...
Multiloader shows me 2 Ports... same like in "normal mode"
1 for modem
second is my Diag Port... for Debug

Best Regards
Click to expand...
Click to collapse

Thanks. I think it might be related to my debug settings - how did you configured it? Are you using rsrc2 in mid?
 
A

adfree

Senior Member
Jun 14, 2008
10,619
6,175
Samsung Galaxy Watch 4
Samsung Galaxy S22
Are you using rsrc2 in mid?
Click to expand...
Click to collapse

During Multiloader Flash it is not more "mandatory"... for me.
So sometime I take Low, sometimes Mid..
I don't know what actually I've taken. :eek:

But as I often use WinComm... so I enter manually:
*#33284*#
I use High...

Second thing, depend on Firmware... maybe go in handset to USB blabla... set Debug. Maybe mandatory in bada 2.0 Firmware...

Best Regards
 
M

mijoma

Retired Recognized Developer
Feb 5, 2011
249
393
Warsaw
OK. It seems I'm able to communicate and receive acknowledgements. Later I'll try to find out what params I need to pass to the dataxfer command to retrieve something useful.
 
  • Like
Reactions: ho1od and adfree
M

mijoma

Retired Recognized Developer
Feb 5, 2011
249
393
Warsaw
I've made a quick modification to bterm with new upload command.
It takes two addresses as arguments that are ranges of mapped memory to be dumped.
Bootloader also implements some special values:
- 1EEEFFC 1EEEFFF returns size of the flash dump (FSR_BML_GetDumpSize)
- 1FFFFFC 1FFFFFF returns 3 little-endian values: [BuildInfoAddr] 0x12345678 0xA0000000
- 3FFFFFC 3FFFFFF executes UploadReset
 
Last edited:
  • Like
Reactions: Rebellos, ho1od and b.kubica
A

adfree

Senior Member
Jun 14, 2008
10,619
6,175
Samsung Galaxy Watch 4
Samsung Galaxy S22
Nice this sounds great.

Maybe we can also handle DEV Command ...
Memcpy address length

In every situation to see what is in RAM stored...
In U700 I can do this... :cool:
In S8500 failed... :confused: :(


I know bterm can this. But it seems only once at start.

Thanx for research. :D :cool:

Best Regards
 
M

mijoma

Retired Recognized Developer
Feb 5, 2011
249
393
Warsaw
In upload mode you have basically several different options depending on the address. You can read RAM, FTL or FSR dump, CP side RAM and it's a standard functionality so you don't need to install anything in the phone. Works in with any bootloader and apps.
 
  • Like
Reactions: ho1od
R

Rebellos

Senior Recognized Developer
May 13, 2009
1,353
3,428
Gdańsk
adfree said:
Nice this sounds great.

Maybe we can also handle DEV Command ...
Memcpy address length

In every situation to see what is in RAM stored...
In U700 I can do this... :cool:
In S8500 failed... :confused: :(


I know bterm can this. But it seems only once at start.
Click to expand...
Click to collapse

Because Windows is trashcan and can't properly handle transfering anything through virtual COM USB without hundreds of codelines. bTerm for linux works few times faster and better IMO, if u got some linux installation - try it out, all you need is download sources, use apt-get install gcc (or just install gcc package if you don't have apt-get), browse to sources directory in commandline and type "make", then you can execute bTerm in the same commandline.
 
A

adfree

Senior Member
Jun 14, 2008
10,619
6,175
Samsung Galaxy Watch 4
Samsung Galaxy S22
I am complete Unix Idiot :eek:

In 20 years I have maybe 10 times installed Linux... SUSE...
Maybe used 10 minutes... :eek:

Last time for 10 years...

This is also an reason, why I can't help with Android...
My little brain too small and ZERO Unix/Linux knowledge nor compiler skills.
:(

I am an stupid Windows Fan Boy. :D
Especially my beloved XP. :cool:


Best Regards

P.S.:
Not enough space in my brain, to learn also Linux/Unix thingies...
I am tooooo old for this.
 
Last edited:
You must log in or register to reply here.

Similar threads

A
  • Sticky
Example for modified Firmware for S8500
Replies
225
Views
135K
J
JIexa-xa
K
Application to modify .RBM files (help needed)
Replies
493
Views
89K
R
rafaelvasconcelos
7
NEW bada 2.0 for s8500 updated 17/08!!
Replies
182
Views
67K
Z
zmajster01
R
Wave S8500/S8530 Development Platform Mod AKA UnBrickable Mod
Replies
61
Views
40K
A
adfree
V
[Q] Can't get into DOWNLOAD mode.
Replies
19
Views
10K
shazzy1
shazzy1

Top Liked Posts

24 Hours All time
  • There are no posts matching your filters.
  • 3
    M
    mijoma
    I've made a quick modification to bterm with new upload command.
    It takes two addresses as arguments that are ranges of mapped memory to be dumped.
    Bootloader also implements some special values:
    - 1EEEFFC 1EEEFFF returns size of the flash dump (FSR_BML_GetDumpSize)
    - 1FFFFFC 1FFFFFF returns 3 little-endian values: [BuildInfoAddr] 0x12345678 0xA0000000
    - 3FFFFFC 3FFFFFF executes UploadReset
    View
    2
    M
    mijoma
    There are several modes that Wave bootloader supports for certain purposes. The normal mode and low power mode just start the Nucleus kernel. I'm also pretty sure everybody knows what a DOWNLOAD MODE is (one with the red letters, but if initiated from Bada it can also display a download picture) that you use to change the firmware installed in the phone OneNAND. There is, however, another interesting mode that bootloader executes if something dies - it's an UPLOAD MODE that looks a bit similar to download mode (text written with yellow letters). There is a different set of commands that bootloader accepts when in this state and there should be some tool able to communicate with the phone. The mode is not really wave specific as SBL bootloader for Galaxy does also implement it.

    Does anybody have information about the mode itself or the tool for that? I can provide some more details about commands if necessary.
    View
    2
    A
    adfree
    Finally found Tool... after years... :cool:

    Best Regards
    View
    2
    M
    mijoma
    OK. It seems I'm able to communicate and receive acknowledgements. Later I'll try to find out what params I need to pass to the dataxfer command to retrieve something useful.
    View
    2
    R
    Rebellos
    It appears to be dump of small part of CP memory. Like few KB near PC and SP, nothing really useful. I think it has been made only for AMSS debugging by Samsung devs.
    View

New posts