| 00:38.23 | *** join/#htc-linux WizMaui (n=WizMaui@62.112.90.179) |
| 02:57.30 | *** join/#htc-linux senaqueue (n=scarface@adsl-020.isp.net.au) |
| 03:02.28 | *** join/#htc-linux pof (n=pof@62.57.1.173) |
| 03:17.50 | pof | anyone interested in linux port to HTC Hermes have a look here: http://wiki.xda-developers.com/index.php?pagename=Hermes_Linux |
| 03:17.59 | pof | :) |
| 03:41.43 | *** join/#htc-linux senaxue (n=scarface@adsl-020.isp.net.au) |
| 03:53.19 | *** join/#htc-linux psokolovsky (n=psokolov@236.usernat.ip.net.ua) |
| 09:24.44 | *** join/#htc-linux psokolovsky (n=psokolov@236.usernat.ip.net.ua) |
| 09:37.21 | *** join/#htc-linux psokolovsky_ (n=psokolov@236.usernat.ip.net.ua) |
| 10:47.52 | *** join/#htc-linux psokolovsky__ (n=psokolov@236.usernat.ip.net.ua) |
| 10:51.20 | *** join/#htc-linux rob_w (n=bob@p85.212.178.73.tisdip.tiscali.de) |
| 12:08.12 | *** join/#htc-linux skodde (n=skodde@213-140-16-178.fastres.net) |
| 13:20.04 | *** join/#htc-linux WizMaui (n=WizMaui@62.112.90.179) |
| 15:54.22 | Kevin2 | Hi |
| 16:02.26 | rob_w | hi Kevin2 |
| 16:09.12 | Kevin2 | It's been quiet this weekend, huh? |
| 16:51.05 | rob_w | yeah |
| 17:09.39 | *** join/#htc-linux jeanseb (n=jeanseb@88.164.32.155) |
| 17:12.21 | *** join/#htc-linux skodde (n=skodde@213-140-16-178.fastres.net) |
| 17:25.06 | *** join/#htc-linux skodde (n=skodde@213-140-16-178.fastres.net) |
| 18:06.49 | *** join/#htc-linux skodde (n=skodde@unaffiliated/skodde) |
| 18:07.58 | *** join/#htc-linux psokolovsky__ (n=psokolov@236.usernat.ip.net.ua) |
| 19:21.49 | *** join/#htc-linux lpotter_ (n=ljp@c210-49-127-23.rochd1.qld.optusnet.com.au) |
| 19:29.41 | cr2 | somebody alive? |
| 19:31.15 | pof | yup |
| 19:31.52 | cr2 | hi pof. i have written something at xda-dev. |
| 19:32.17 | pof | i've just seen it |
| 19:33.01 | cr2 | the ATI chip is not used for the display. imho it is just a framegrabber + audio. |
| 19:33.01 | pof | do u think the wl3422 is the wifi? |
| 19:33.21 | cr2 | do you have a decoded rom ? |
| 19:33.34 | pof | what do you mean by "decoded"? |
| 19:33.43 | pof | nbh extracted in parts? |
| 19:33.54 | cr2 | htc leaves a lot of crap in their code, but we can guess. |
| 19:34.02 | cr2 | no. the actual *.exe/dll files. |
| 19:34.35 | pof | ah yes... |
| 19:34.49 | pof | ftp://ftp.xda-developers.com/Hermes/Dumped_ROMs/ --> dumped imgfs for several roms is here |
| 19:35.34 | pof | can be extracted with itsme's rdmsflsh.pl |
| 19:35.52 | pof | http://wiki.xda-developers.com/index.php?pagename=Hermes_HowtoExtractImgfs --> instructions :) |
| 19:35.54 | cr2 | on linux ? |
| 19:36.20 | pof | mmm.... |
| 19:36.47 | cr2 | the decompress stuff is not really portable there afaik. |
| 19:37.19 | pof | yes... it depends on nbf-utils and CompressUtils, but CompressUtils only works in windoze |
| 19:37.58 | pof | I have the contents extracted on some vmware image... |
| 19:38.36 | cr2 | i don't have/use windows. if it was a windows exe file, i could have tried it with wine. |
| 19:39.01 | cr2 | can you post the list of files ? |
| 19:39.40 | pof | wait, let me find the right vmware image... i can't start vmware cos i'm running out of disk space now, grr!! |
| 19:42.18 | pof | cr2: http://forum.xda-developers.com/attachment.php?attachmentid=29906&d=1156256094 |
| 19:46.01 | cr2 | ok. some more questions :-) |
| 19:46.15 | cr2 | do you know the memory map of the cpu ? |
| 19:47.46 | pof | do u mean the 'dump mmu' output from gnuharet? |
| 19:48.10 | psokolovsky__ | Hi! |
| 19:48.23 | cr2 | no, i have seen it. where is RAM and ROM mapped in the address space. |
| 19:48.45 | cr2 | psokolovsky__: hi |
| 19:49.05 | psokolovsky__ | cr2: Hope you got my mail ;-) I tested recent gnuharet you gave me link to, dump asic3/asic3gpio seems to work. Thanks for working on that! |
| 19:49.05 | pof | nope sorry... how does one know that? |
| 19:51.50 | cr2 | psokolovsky__: to hh.org ? i have forgot where it is redirected :) does "asic3gpio" work for you too ? |
| 19:52.23 | cr2 | pof: i'll try to look into it, but i don't know samsung arms cpus very good. |
| 19:53.31 | cr2 | tiacxwln.dll fw_dcr_1150_sta.bin |
| 19:53.38 | psokolovsky__ | cr2: yep, oleg@hh ;-) . yes, it *seems* to work. I didn't check it thoughly, but at least GPIO directions were sensible. "boot2" works too (well, it did in prev. versions too) |
| 19:54.24 | cr2 | looks like TI wifi chipset. is it "g" ? |
| 19:54.34 | pof | yes, it's a "g" wifi |
| 19:54.49 | cr2 | hehe. then it will be tough for you :) |
| 19:55.17 | cr2 | usb is on the cpu. sc2440usbfn.dll |
| 19:55.39 | psokolovsky__ | cr2: you're on kernel-discuss ML, right? |
| 19:56.10 | cr2 | psokolovsky__: no. i have a lot of other things to do ;-) |
| 19:56.19 | cr2 | qctusb.dll |
| 19:56.48 | cr2 | interesting. is there an usb host in sc244x ? |
| 19:57.46 | pof | i don't know, sorry. The tytn itself has no usb host, but probably the cpu is capable of it |
| 19:58.24 | cr2 | qctusb means that your umts goes through usb. like on the universal. |
| 19:58.30 | cr2 | BT_Init_Script_TI_223.txt |
| 19:58.36 | psokolovsky__ | cr2: well, please subscribe, it's not much of work ;-). or give me an email I can cc: you to (mail is better for some things, as at least it leaves trace in easily searchable archives). |
| 19:59.01 | cr2 | this is something new. can you look into this file ? |
| 19:59.13 | pof | yes, 1sec |
| 19:59.22 | psokolovsky__ | cr2: https://handhelds.org/mailman/listinfo/kernel-discuss ;-) |
| 19:59.38 | cr2 | psokolovsky__: ok. i will. |
| 20:01.47 | pof | cr2: do u want me to post the file? 0 |
| 20:02.10 | pof | it has "060\n006 01 37 fe 02 04 1b\n ..." etc... |
| 20:02.15 | cr2 | pof: no. are there any readable comments there ? |
| 20:02.35 | pof | no comments, only something that seems the output of an "hexdump" |
| 20:03.01 | cr2 | ok. it's a usual ascii TI *.bts script. |
| 20:03.27 | cr2 | but i don't know for which chipset. afaik brf61xx are deprecated |
| 20:03.43 | cr2 | and there should be something newer. |
| 20:04.18 | cr2 | BT_FIR_Param.txt |
| 20:04.23 | cr2 | this is also interesting. |
| 20:05.07 | pof | also seems the output of an hexdump, at the end it has the string "Hermes0612" |
| 20:06.00 | cr2 | pof: your RAM is at 0x30000000. can you heaxdump the first 256K ? it should be your SPL, if it is not damaged by wince. |
| 20:06.43 | pof | cr2: how should I do this? using pdocread? |
| 20:07.29 | cr2 | pmemdump |
| 20:08.06 | cr2 | you can also do it in haret. |
| 20:08.13 | pof | ok, I have two hermes to try... one is HTC TyTN WWE, the other is a preproduction version |
| 20:08.25 | pof | SuperCID and seclevel=0 |
| 20:08.52 | pof | ok, will do it in haret then... |
| 20:11.17 | pof | cr2: which command should I run ?? |
| 20:11.33 | cr2 | pd 0x30000000 0x40000 |
| 20:11.38 | cr2 | or better: |
| 20:11.48 | cr2 | pwf |
| 20:12.02 | cr2 | i think the syntax is |
| 20:12.13 | cr2 | pwf xxx 0x30000000 0x40000 |
| 20:12.29 | cr2 | so you get the binary "xxx" file. |
| 20:12.35 | pof | <PROTECTED> |
| 20:12.37 | pof | done :) |
| 20:15.46 | cr2 | you framebuffer address is 0x10800000. it does not look like RAM. |
| 20:15.52 | pof | yes, it dumped the SPL :D |
| 20:15.56 | cr2 | not main RAM :) |
| 20:16.20 | pof | 00000000 8c 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 |................| |
| 20:16.20 | pof | 00000010 48 45 52 4d 31 30 30 20 53 50 4c 20 44 56 54 00 |HERM100 SPL DVT.| |
| 20:16.20 | pof | 00000020 31 2e 30 34 00 00 00 00 00 00 00 00 00 00 00 00 |1.04............| |
| 20:16.20 | pof | 00000030 f2 ff ff ea 67 00 00 ea c4 04 9f e5 00 10 a0 e3 |....g...........| |
| 20:16.20 | pof | 00000040 00 10 80 e5 bc 04 9f e5 bc 14 9f e5 04 10 80 e5 |................| |
| 20:16.20 | pof | 00000050 b8 24 9f e5 00 20 80 e5 32 1e a0 e3 14 10 80 e5 |.$... ..2.......| |
| 20:16.29 | pof | do u want the file ? |
| 20:16.39 | cr2 | pof: i need to understand if your IPL at 0x0 or 0x20000000 |
| 20:16.59 | cr2 | you can get the static memory allocation table from SPL. |
| 20:17.33 | cr2 | to get such a table: |
| 20:17.35 | cr2 | http://wiki.xda-developers.com/index.php?pagename=UniversalMemoryMap |
| 20:20.23 | cr2 | yes. you have usb host support in the cpu. |
| 20:20.52 | pof | how do you get this table out of the SPL ? |
| 20:22.49 | cr2 | post the first, let's say 8K or the file somewhere. |
| 20:23.18 | pof | ok |
| 20:24.10 | pof | http://pof.eslack.org/tmp/testfile |
| 20:27.47 | *** join/#htc-linux WizMaui (n=WizMaui@62.112.90.179) |
| 20:27.47 | cr2 | interesting. at@startgps ? |
| 20:28.22 | pof | yes, i seen that before :) |
| 20:28.35 | pof | but i don't know how to run at commands from the bootloader |
| 20:28.44 | cr2 | at@go_usb is ok. |
| 20:29.08 | cr2 | ti acx100 ? |
| 20:29.21 | cr2 | are you sure you have "g" ? |
| 20:29.39 | pof | yes |
| 20:30.36 | cr2 | hmm. |
| 20:30.58 | cr2 | jump to physical address 0x301*. it is the first megabyte... |
| 20:32.44 | cr2 | the structure of the file is different, but maybe it is damaged by wince. |
| 20:33.08 | pof | do you want the SPL.nb extracted from a ROM ? |
| 20:33.10 | cr2 | then it is better to look at nk.exe |
| 20:33.17 | cr2 | for the table. |
| 20:33.32 | pof | nk.exe?? what's that? |
| 20:33.52 | cr2 | pof: at commands in the bootloader ? rtask 7 ? |
| 20:34.11 | pof | cr2: I've tried that but no luck |
| 20:34.17 | cr2 | ok. |
| 20:34.18 | pof | i can talk to gsm bootloader |
| 20:34.26 | pof | but get no output or weird output |
| 20:34.32 | cr2 | it is ok. |
| 20:34.42 | pof | i tried using 'cu', 'minicom' and mtty.exe in windoze |
| 20:34.53 | cr2 | i hope to do it in linux soon. |
| 20:35.05 | cr2 | on /dev/ttyUSB0 ? |
| 20:35.09 | pof | yes |
| 20:35.18 | cr2 | ok. |
| 20:35.43 | cr2 | hmm. you don't have mdoc g3. |
| 20:35.46 | pof | i tried the at@simlock? commands I found on the universal wiki |
| 20:36.02 | pof | mdoc g3? what's it? |
| 20:36.14 | cr2 | it does not matter. |
| 20:36.26 | cr2 | flash chip in the universal and others. |
| 20:36.33 | cr2 | "pdocread" |
| 20:36.53 | pof | ah no... the hermes doesn't have disc-on-chip |
| 20:37.03 | cr2 | you should create your own gsm command list. |
| 20:37.13 | cr2 | does it log the at commands in wince ? |
| 20:37.42 | cr2 | you can also run "strings" on rilgsm.dll, but it's not so accurate. |
| 20:39.01 | *** part/#htc-linux WizMaui (n=WizMaui@62.112.90.179) |
| 20:39.24 | *** join/#htc-linux LunohoD_ (n=alex@e180099042.adsl.alicedsl.de) |
| 20:40.08 | cr2 | i'm confused that acx100 runs as you say at "g". can you upload the wifi firmware to xda-dev ? |
| 20:40.29 | pof | yes, where do I find it? |
| 20:40.34 | cr2 | fw_dcr_1150_sta.bin |
| 20:40.39 | pof | ok |
| 20:40.40 | pof | 1sec |
| 20:43.10 | cr2 | TI says 22mbit, but we run only at 11mbit. |
| 20:45.33 | pof | ftp://xda:xda@ftp.xda-developers.com/Hermes/Technical/fw_dcr_1150_sta.bin |
| 20:46.05 | pof | I think the 22mbit is a non-standard rate |
| 20:46.16 | pof | the AP must be compatible with it |
| 20:49.45 | cr2 | ok. |
| 20:50.20 | cr2 | btw, can you write a simple wince program ? |
| 20:51.29 | pof | which does what ? |
| 20:51.45 | pof | i don0't have visual studio or things like that... |
| 20:53.45 | cr2 | evc4 is also ok. haret works with gcc :) |
| 20:54.14 | cr2 | i'm thinking about a basic stuff like RIL_initialze, RIL_Dial. |
| 20:54.37 | cr2 | there is a lot of code in itsutils, but it's too complex. |
| 20:55.40 | pof | yes, it's far too complex for me... i'm not that "low level" |
| 20:57.47 | cr2 | tracing a "real" phone operation pulls too much gpios. i'd like to separate the steps. |
| 20:59.12 | cr2 | strings * |grep -i brf |
| 20:59.24 | cr2 | you can try it for the ROM files. |
| 20:59.53 | pof | 1sec. |
| 21:16.16 | pof | Binary file files/1-nature_15fps.mp4 matches |
| 21:16.16 | pof | Binary file files/ahimm_dspimage.dll matches |
| 21:16.16 | pof | Binary file files/cumbwi__.mtf matches |
| 21:16.17 | pof | Binary file files/EmMp4SbrDec.dll matches |
| 21:16.17 | pof | Binary file files/target.img.zip matches |
| 21:16.17 | pof | Binary file files/THOWB___.mtf matches |
| 21:16.35 | pof | that's it |
| 21:16.45 | pof | not very useful I guess |
| 21:18.33 | pof | # strings * |grep -i brf |
| 21:18.33 | pof | M bRf |
| 21:18.33 | pof | AACDEC_GetSBRFrameInfo |
| 21:18.33 | pof | *71:bRFsK8Bv^/ |
| 21:18.33 | pof | BREBRFBRG |
| 21:18.34 | pof | BRFBRGBRE |
| 21:18.36 | pof | RHBRFBRGBRE |
| 21:18.38 | pof | vBRfJ7bY |
| 21:20.09 | cr2 | ok. it does not help. |
| 22:56.21 | pof | cr2: r u still here? |
| 23:13.53 | *** join/#htc-linux pof (n=pof@173.red-62-57-1.user.auna.net) |
| 23:14.27 | pof | i've tried 'pwf testfile 0x30000000 0x40000' on my preproduction hermes, it dumped something but doesn't seem to be the SPL |
| 23:14.36 | *** join/#htc-linux pof (n=pof@173.red-62-57-1.user.auna.net) |
| 23:15.01 | pof | 'dump mmu' output is different in production and preproduction devices |