| 01:50.44 | *** join/#openezx Simon- (i=simon@proxima.lp0.eu) |
| 02:07.41 | *** join/#openezx sabrod (n=sabrod@mic92-8-82-234-143-184.fbx.proxad.net) |
| 04:31.17 | *** join/#openezx muromec (n=muromec@212-178-24-207.broadband.tenet.odessa.ua) |
| 04:39.00 | *** join/#openezx gDD (n=gDD@unaffiliated/gdd) |
| 06:13.49 | *** join/#openezx toi (n=toi@d51A49C45.access.telenet.be) |
| 06:21.05 | *** join/#openezx l403 (n=l@85.132.159.239) |
| 06:50.39 | *** join/#openezx muromec (n=muromec@95.69.233.37) |
| 07:06.01 | *** join/#openezx muromec (n=muromec@95.69.233.37) |
| 07:26.46 | *** join/#openezx l403 (n=l@85.132.159.239) |
| 07:38.53 | *** join/#openezx alvinjacky (n=huzhangl@59.175.215.69) |
| 07:43.18 | *** join/#openezx Tox (n=Tox@s01.de) |
| 07:46.03 | *** part/#openezx Tox (n=Tox@s01.de) |
| 08:24.17 | *** join/#openezx florian_kc (n=fuchs@port-217-146-132-69.static.qsc.de) |
| 08:26.02 | *** join/#openezx borman92 (n=quassel@94.103.229.24) |
| 08:56.23 | *** join/#openezx yang (i=yang@62.75.255.125) [NETSPLIT VICTIM] |
| 08:56.23 | *** join/#openezx lclaudio (n=lclaudio@189.4.27.111) [NETSPLIT VICTIM] |
| 09:50.01 | tmzt | WyrM: does gen-blob do anything with pcap/spi? |
| 09:50.34 | tmzt | and what state should spi cs gpio be in at boot? |
| 09:50.42 | tmzt | and gpio 1 |
| 10:05.20 | tmzt | whar's at 0x800000? |
| 10:08.03 | tmzt | sorry, forget that one |
| 10:09.39 | *** join/#openezx ao2 (n=u@2001:1418:117:0:0:0:0:1) |
| 11:12.53 | *** join/#openezx marex (n=marex@thor.hackndev.com) |
| 11:46.47 | *** join/#openezx FeLLa (n=46241@95.116.250.169) |
| 12:08.44 | *** join/#openezx stefan__n (n=swelker@132.230.105.16) |
| 12:09.24 | stefan__n | hi , does anybody know where gpe saves the screen calibration ? can i reset this somehow when it is miscalibrated ? |
| 12:23.39 | tmzt | '/etc/pointercal |
| 12:51.57 | *** join/#openezx johanbr (n=j@blk-7-129-35.eastlink.ca) |
| 12:58.23 | stefan__n | ok cool thanks |
| 13:24.42 | muromec | tmzt, are you working on gen-blob for motoq? |
| 13:29.42 | tmzt | no, motoq for qemu |
| 13:30.01 | tmzt | well sort of |
| 13:30.14 | tmzt | I don't know the memory map very well |
| 13:30.42 | tmzt | but getting gen_blob into rom would be good |
| 13:30.50 | tmzt | rom/nor |
| 13:32.06 | tmzt | with a rom dump from my q I can get the pc into ram |
| 13:32.37 | tmzt | r15=a0060084 |
| 13:41.25 | muromec | tmzt, why gen-blob not loading via usb? |
| 13:42.04 | muromec | is this related to rsa protection or not? |
| 13:44.36 | tmzt | probably |
| 13:44.45 | tmzt | since the phone turns off |
| 13:44.59 | tmzt | gen blob boots with haret though |
| 13:46.50 | muromec | hmm |
| 13:48.11 | muromec | so i can boot gen-blob via haret and the work with it via usb as usial, right? |
| 13:48.15 | muromec | *then |
| 13:49.36 | tmzt | yeah |
| 13:49.51 | tmzt | with wyrm's patched version |
| 13:50.10 | *** join/#openezx sten (n=mheinzes@160.129.138.83) |
| 13:50.15 | tmzt | people.openezx.org/wyrm should have it |
| 13:51.27 | muromec | this one http://people.openezx.org/wyrm/tmzt-blob ? |
| 13:58.18 | tmzt | probably |
| 13:58.28 | tmzt | sounds right |
| 13:58.36 | tmzt | it defaults to usb mode |
| 13:59.25 | muromec | huh, so only changed thing was usb mode by default |
| 14:00.04 | tmzt | yeah |
| 14:00.15 | muromec | afaik haret can set usb flag itself |
| 14:00.21 | tmzt | because the keycodes didn't work |
| 14:00.29 | tmzt | how is that? |
| 14:00.45 | muromec | it have scripting language |
| 14:00.47 | tmzt | or that's the one that dumps keycodes |
| 14:00.52 | tmzt | yes |
| 14:01.04 | tmzt | but not for gen-blob params |
| 14:01.20 | muromec | all you need is to set one little word |
| 14:02.28 | muromec | at 0xa1000000 |
| 14:02.53 | muromec | value 0x0D3ADCA7 means usb, 0x1EE7F1A6 menas keycodes |
| 14:02.58 | muromec | *means |
| 14:04.49 | muromec | so haret command should be PFW 0xa1000000 1 0x0D3ADCA7 |
| 14:05.14 | tmzt | ok |
| 14:05.16 | tmzt | cool |
| 14:05.25 | muromec | will you try this? |
| 14:05.25 | tmzt | didn't know that |
| 14:05.38 | tmzt | which? |
| 14:05.44 | tmzt | gen blob? |
| 14:06.04 | muromec | yep, non patched version with this haret command |
| 14:06.40 | muromec | with this we can hack mbm and disable rsa checks |
| 14:06.47 | muromec | with blob |
| 14:07.59 | tmzt | don't think I can withou ac charger |
| 14:08.15 | muromec | hmm, whats with it? |
| 14:08.30 | tmzt | battery is dead |
| 14:08.35 | tmzt | actually |
| 14:08.46 | tmzt | no, phone's here |
| 14:09.22 | muromec | bad |
| 14:09.22 | tmzt | I haven't tried flashing it before |
| 14:09.32 | muromec | dont try to flash mbm |
| 14:09.50 | tmzt | I need a way to return to ce with a rdl |
| 14:09.56 | muromec | yep |
| 14:10.21 | muromec | AFAIK, you can flash everything after mbm |
| 14:10.29 | tmzt | any idea what nor and nand chips are used? |
| 14:10.35 | muromec | nope |
| 14:10.41 | tmzt | what's mbm? |
| 14:10.52 | muromec | mbm is that black screen bootloader |
| 14:11.03 | tmzt | ok |
| 14:11.22 | tmzt | I plan to replace xip |
| 14:11.24 | tmzt | not mbm |
| 14:11.53 | muromec | mbm is CG34 |
| 14:12.14 | tmzt | actually, if both are in nor this qemu support might be enough |
| 14:12.23 | tmzt | to make that work |
| 14:12.50 | tmzt | I can't tell if it's probing nor or nand though |
| 14:13.12 | muromec | can nand be at 0x0 ? |
| 14:13.51 | tmzt | not unless it's like doc |
| 14:13.59 | tmzt | can be mapped |
| 14:15.43 | muromec | hm |
| 14:19.48 | muromec | do you want reverse engeneered mbm from gen2? |
| 14:20.16 | tmzt | source? |
| 14:20.30 | tmzt | I really just need mem map |
| 14:20.52 | muromec | hm |
| 14:20.57 | muromec | flash starts at 0x0 |
| 14:21.10 | muromec | same as ezx gen2 |
| 14:21.21 | muromec | as i see in sbf file |
| 14:21.34 | tmzt | size? |
| 14:22.00 | muromec | dunno |
| 14:22.03 | tmzt | does it cfi probe the nor? |
| 14:22.20 | muromec | dunno too |
| 14:22.44 | muromec | i only started to read mbm from motoq |
| 14:23.25 | muromec | its little diffetent from ezx gen2 one |
| 14:23.45 | tmzt | does gen2 probe Ci? |
| 14:23.47 | tmzt | cfi |
| 14:24.06 | muromec | kernel does |
| 14:24.12 | tmzt | I have the same write commands each time |
| 14:24.17 | tmzt | linux? |
| 14:24.34 | muromec | yep |
| 14:24.41 | muromec | writes commands? |
| 14:24.50 | tmzt | write to address |
| 14:24.55 | tmzt | not flash |
| 14:25.04 | muromec | hm |
| 14:25.34 | tmzt | 100c=0005 cmd 0 |
| 14:26.05 | tmzt | 1072=00fa cmd 0 |
| 14:26.21 | tmzt | 101a=1000 cmd 0 |
| 14:41.27 | *** join/#openezx LoneStar (n=xinzhen@114.92.183.49) |
| 14:43.26 | *** join/#openezx LoneStar (n=xinzhen@114.92.183.49) |
| 14:45.31 | *** join/#openezx LoneStar (n=xinzhen@114.92.183.49) |
| 14:50.56 | muromec | damn |
| 14:51.08 | muromec | cant find even mmu table in motoqs fw |
| 14:53.57 | *** join/#openezx ao2 (n=u@2001:1418:117:0:0:0:0:1) |
| 15:00.18 | *** join/#openezx xLoneStar (n=xinzhen@114.92.183.49) |
| 15:10.36 | *** join/#openezx LoneStar (n=xinzhen@114.92.183.49) |
| 15:25.42 | *** join/#openezx marex (n=marex@thor.hackndev.com) |
| 15:26.56 | *** join/#openezx johanbr (n=j@JBrannlund2.MathStat.Dal.Ca) |
| 16:05.30 | *** join/#openezx pH5 (n=ph5@e178194063.adsl.alicedsl.de) |
| 16:21.17 | *** join/#openezx toi (n=toi@d54C2AAB7.access.telenet.be) |
| 16:22.21 | *** join/#openezx gmzhuo (n=gmzhuo@110.184.102.2) |
| 17:24.19 | *** join/#openezx l403 (n=l@85.132.159.239) |
| 17:57.26 | *** join/#openezx sten (n=mheinzes@160.129.138.83) |
| 18:45.05 | *** join/#openezx flo_lap (n=fuchs@f049073045.adsl.alicedsl.de) |
| 19:30.26 | *** join/#openezx tombhadAC (n=tombhad@pD95DC624.dip.t-dialin.net) |
| 19:53.32 | *** join/#openezx sabrod (n=sabrod@mic92-8-82-234-143-184.fbx.proxad.net) |
| 20:03.32 | *** join/#openezx muromec (n=muromec@212-178-18-91.broadband.tenet.odessa.ua) |
| 20:03.44 | muromec | tmzt, |
| 20:03.56 | muromec | flash looks like 64mb starting from 0x0 |
| 20:04.11 | muromec | i think its intel nor, but not checked |
| 20:05.04 | muromec | you can try to use nor command to read flash id |
| 20:05.33 | muromec | its 0x90 for intel |
| 20:07.53 | *** join/#openezx FeLLa (n=46241@89.14.79.132) |
| 20:18.30 | muromec | hah |
| 20:18.42 | muromec | same crap as in haret dump |
| 20:30.21 | *** join/#openezx sten (n=mheinzes@160.129.138.83) |
| 20:35.00 | *** join/#openezx Simon- (i=simon@proxima.lp0.eu) [NETSPLIT VICTIM] |
| 20:35.00 | *** join/#openezx CIA-17 (n=CIA@208.69.182.149) [NETSPLIT VICTIM] |
| 21:12.02 | *** join/#openezx lclaudio (n=lclaudio@189.4.27.111) |
| 21:22.04 | *** join/#openezx FeLLa (n=46241@89.13.137.71) |
| 22:14.30 | *** join/#openezx FeLLa_ (n=46241@95.116.254.96) |
| 23:00.22 | *** join/#openezx Sleep_Walker (n=Sleep@gprs8.vodafone.cz) |
| 23:19.21 | *** join/#openezx Sleep-Walker (n=Sleep@netlife.cust.sloane.cz) |