Hello.

On Mon, 2007-12-10 at 20:18, Daniel Ribeiro wrote:
> 
> Daniel Willmann wrote:
> > Calling the kernel...
> > TX: JUMPA0DE0000BA ( 02 4a 55 4d 50 1e 41 30 44 45 30 30 30 30 42 41 03)
> > The phone displays
> > Critical Error:
> > DEA1
> > So it is likely that the kernel has to be signed somehow in order to
> > flash it. :-(
> Not necessarily.

Can be, but googling for DEA1 shows up Data Encryption Algorithm and a
lot forums also state that most of the CGs are signed on this devices.
Would make sense that it will be the same for the boot_usb protocol.

But of course we can't be 100% sure about it.

> Seems that the phone was recognized as A1200/E2/E6, is that right??

No. Different PID. So he had to add another phonetype. Just a one
liner. Daniel, can you commit this one? Even if the address is perhaps
not right it should go in as it breaks nothing.

> Maybe 0xa0de0000 is not suitable for jumping to. Try some other
> addresses, or sniff the moto software and see if RDL is executed from
> this area in RAM.

You have a good algorithm to test different addresses? Brute-force
would be pretty boring. :)

regards
Stefan Schmidt

Attachment: signature.asc
Description: Digital signature

Reply via email to