LG Dare Porting Project

[Shadow_Walker]

Well I figured I would start this thread in hopes of finding some Skilled fellow members that likes a good challenge.

I Need Help with under standing what has to be done in porting over a new OS to a Phone.

I have already Bypassed Sig issue so custom Apps can be loaded using any Test sig even if its expired
I know this really want do much for Porting over a new OS but for now it does give people the Opportunity to develop apps for the phone with out the heavy cost normal needed.

Me and a few others have been trying to figure out how extract all files from the BIN file and how we could compile it back but it seems that there are some header files missing and some compression methods used that we have not yet been able to figure out.

I am Green ..... Very Green to all of this so I am having to learn everything along the way...

I just want to say "THANKS" for all of you that would like to help me out.. I am a fast learner and to give you an example of what i mean.. The patch for the phone to allow you to up load custom apps took me about 3 months to figure out but I never used IDA before and have no assembly skills but by using info given to me on another type of brew handset was able to find the Magic numbers.

So even though i may not have all the skills needed if I have a guide i will find my way

I spoke to the LG Tech Support Guys one time about using there OS system and they told me that as long as the OS that i am using is coming from a phone that's like the Dare it should work and they even gave me few phones to look at but I was never able to get the real info needed to know if it my work.. Like the Processor and Qualcomm Chip used also the amount of internal Memory and size of that memory. Even if i had all of that I still wouldn't be able to use the phones that LG actual Makes since they are all GSM phones and this one is CDMA.

I got lucky with this phone and got the Service manual for it.

This phone comes with 2 Different version of the same firmware 1-ver is VZW's firmware and the 2-ver is the Telus firmware.

It seems that Telus is a subsidiary of VZW and the firmware that Telus uses is modified versions of VZW firmware. Telus blocks you from being able to load Brew apps and run them under their version and uses the IBM Jvm9 Java. Since it may be easier to extract and modify the 2 firmwares to make a firmware that has Java and also allows Brew apps to run. I figured i would through this info in here.

Please if all your going to post is that its a lost cause then just save your self the time.. I under stand that this may not ever pan out but Like i said before I am hear to learn as much as I can because this is not going to be the only phone i use in my life time and until WE THE PEOPLE Demand and get a ruling that the Carriers have to leave the phones Open and unrestricted we all well be hacking away at them.. By the way after talking to the MF of my phone it seems that in the USA they have a ruling that states that MF's can not make The phones and sale them that the carriers are the only ones allowed to do this.. Hence way LG only Makes GSM phones that they actual sale to the Public and not CDMA phones.. Just another way our carriers are F!@#$ us..

Thanks again for stopping by and looking forward at getting this started.

Best Regards

[Shadow_Walker]

Will I was up late last night hunting down some info and found that i had a few tools on my system to help with AMSS.. but after using the tools I am not sure if i have all of AMSS or not.

I used readelf and this is the output I got.

C:\Dev-Cpp\bin>readelf -h c:\vx9700wp\vx9700v06_05_AMSS.elf
ELF Header:
Magic: 7f 45 4c 46 01 01 01 00 00 00 00 00 00 00 00 00
Class: ELF32
Data: 2's complement, little endian
Version: 1 (current)
OS/ABI: UNIX - System V
ABI Version: 0
Type: EXEC (Executable file)
Machine: ARM
Version: 0x1
Entry point address: 0x0
Start of program headers: 4096 (bytes into file)
Start of section headers: 0 (bytes into file)
Flags: 0x2, has entry point, GNU EABI
Size of this header: 52 (bytes)
Size of program headers: 32 (bytes)
Number of program headers: 25
Size of section headers: 40 (bytes)
Number of section headers: 0
Section header string table index: 0

========================================

Reason i am not sure if i have all of AMSS is the fact that this shows no Section Headers.

Is this Possible? or am i missing something..

Now for the Program Headers I got this....

Program Headers:
Type Offset VirtAddr PhysAddr FileSiz MemSiz Flg Align
LOAD 0x002000 0x00000000 0x00000000 0x26a58 0x29610 RWE 0x8000
LOAD 0x029000 0xf0029620 0x00029620 0x01d14 0x049e0 RWE 0x8000
LOAD 0x02b000 0x00100000 0x00100000 0x1f658 0x1f658 R E 0x8000
LOAD 0x04b000 0x00127658 0x00127658 0x00424 0x12398 RW 0x8000
LOAD 0x04c000 0x00140000 0x00140000 0x0b096 0x0b096 R E 0x8000
LOAD 0x058000 0x00153098 0x00153098 0x001f0 0x00284 RW 0x8000
LOAD 0x059000 0x00160000 0x00160000 0x08a72 0x08a72 R E 0x8000
LOAD 0x062000 0x00170a74 0x00170a74 0x000f0 0x0017c RW 0x8000
LOAD 0x063000 0x00180000 0x00180000 0x0ab2a 0x0ab2a R E 0x8000
LOAD 0x06e000 0x00192b2c 0x00192b2c 0x000f0 0x00250 RW 0x8000
LOAD 0x06f000 0x001a0000 0x001a0000 0x080c2 0x080c2 R E 0x8000
LOAD 0x078000 0x001b00c4 0x001b00c4 0x000f0 0x00234 RW 0x8000
LOAD 0x079000 0x001d0000 0x001d0000 0x0a524 0x0e0f4 RWE 0x4
LOAD 0x084000 0x001e0000 0x001e0000 0x03000 0x03000 R E 0x1000
LOAD 0x087000 0x001e5000 0x001e5000 0x001f4 0x02000 R 0x1000
LOAD 0x089000 0x001e7000 0x001e7000 0x6de000 0x6de000 R E 0x1000
LOAD 0x767000 0x008c5000 0x008c5000 0xe2000 0xe2000 RWE 0x1000
LOAD 0x849000 0x009a7000 0x009a7000 0x2240000 0x2240000 R E 0x1000
LOAD 0x2a89000 0x02be7000 0x02be7000 0x199000 0x199000 RW 0x1000
LOAD 0x2c22000 0x02d81000 0x02d81000 0x01f80 0x504c000 RW 0x1000
LOAD 0x2c24000 0x07dcd000 0x07dcd000 0x00000 0x09248 RW 0x4
LOAD 0x2c24000 0x07dd6248 0x07dd6248 0x01d30 0x91db8 RW 0x1000
LOAD 0x2c26000 0x001c0000 0x001c0000 0x001fc 0x001fc 0x1
LOAD 0x2c27000 0x001c1000 0x001c1000 0x024f8 0x03000 0x1
LOAD 0x2c2a000 0x001c4000 0x001c4000 0x00180 0x01000 0x1

=================================

And actual 7zip can extract all 25 files
but how to I get them back to useful files that can be switched out and repacked?

I can manually find the .c and .cpp files but they are still compiled Does this matter.. Can you use the compiled files or do you have to disassemble them?

I found some really nice Tools to use but they have to compiled and they do come with Make files just not sure how to use them so I will have to do a little more research on this.. Feel free to share your know how with me if you would like...

The set of tools is ERESI..

Any way thinks for any help you can give.

Best Regards

[Shadow_Walker]

I was able to use Strip and this is what i got..

C:\Dev-Cpp\bin>strip --info c:\vx9700wp\vx970v06_05.bin
BFD header file version 2.15.91 20040904
pe-i386
(header little endian, data little endian)
i386
pei-i386
(header little endian, data little endian)
i386
elf32-i386
(header little endian, data little endian)
i386
elf32-little
(header little endian, data little endian)
i386
elf32-big
(header big endian, data big endian)
i386
srec
(header endianness unknown, data endianness unknown)
i386
symbolsrec
(header endianness unknown, data endianness unknown)
i386
tekhex
(header endianness unknown, data endianness unknown)
i386
binary
(header endianness unknown, data endianness unknown)
i386
ihex
(header endianness unknown, data endianness unknown)
i386

pe-i386 pei-i386 elf32-i386 elf32-little elf32-big srec
i386 pe-i386 pei-i386 elf32-i386 elf32-little elf32-big srec

symbolsrec tekhex binary ihex
i386 symbolsrec tekhex binary ihex

------------------------------------------------------------

Is there a way to get the Offsets of each area.. I figure that the Elf selections is AMSS but I did not see any options that would give me the offsets and size.

Any one care to help

[Shadow_Walker]

Will I was hoping for people to be more sharing of info but Yea that's all good I will figure it out one day I just was hoping for a little help with understanding the process to speed up progress.

This phone has 2 different sets of Firmware 1 through VZW which can only use Brew and 1 from Telus which is Brew based but has the Java VM and the only apps you can install and run are Java.

If i could get the firmware figured out to where we could unpack it like the KU990 using tools like the DZcreator or DZDecryptor then we could do a little mix and match for possibly getting a firmware that will let you run Brew and Java giving the dare the best of both worlds while also giving us access to the drivers needed to PORT another OS to phone..

I see that a lot of people have taken inters in what this Thread is about But No one seems to want to Join in.

If you have the skills all i am needed is your knowledge If you don't want to post here then just PM me Like is said before I am not looking for someone to do the work for me just some one to tell what work needs to be done and maybe the best way to go about doing..

Thanks in advance for any help you will share with me.?

Best Regards

[Shadow_Walker]

Well yesterday I found that the same program for developing the Linux Brew OS also builds windows CE 6 and for WinCE 6 they have the source code/ build for learning so I have the source files for windows CE build on the arm9 processor that the Dare uses

Now my question is does the MSM6800a Qc Chip mater? and what about drivers?

Thanks

Best Regards