Welcome guest, is this your first visit? Click the "Create Account" button now to join.
Page 5 of 8 FirstFirst ... 34567 ... LastLast
Results 41 to 50 of 74
  1. #41
    haute
    Guest

    Default

    If not too much trouble, and your time allows, could you share with us your Ida Database?

    Thank you very much ..

  2.    Advertissements


  3. #42
    haute
    Guest

    Default

    Hello, I have no good news. After reviewing a motherboard of a etrex 30 and compare it with a model etrex20, I have seen the 3 sensors missing in the x20 model.
    Therefore, the only valid 20to30 etrex firmware to activate the elevation plot in x20 models.
    Of the three missing sensors, and barometer, is perhaps, which might add.
    The chip would model: MS5607-02BA01. only 8 pin solder.
    This would work with firmware 20to30.

    If people are interested might further information.

  4. #43
    haute
    Guest

    Default

    Patch etrex 20to30

    FIRMWARE 2.87 Beta (offset Fw_all.bin)

    OLD NEW
    10A546: 18 40
    10A547: 70 1C
    10A549: 78 70

    FIRMWARE 2.87 Beta (offset *.gcd)

    OLD NEW
    18C7F1: 18 40
    18C7F2: 70 1C
    18C7F4: 78 70

  5. #44
    haute
    Guest

    Default

    leave a link for you to try with the last two versions of firmware 2.87 Beta eTREX20-30
    - Patched version JNX
    - Patched version JNX + 20to30.

    [Only registered and activated users can see links. ]

    If someone can try to communicate results.
    A greeting.

  6. #45
    haute
    Guest

    Default

    hello.

    This is a comparison of the PCB of the two models of Garmin GPS Etrex 20 and 30.
    As you can see, the Model 20 has no more sensor if they are in version 30.
    That is why the 20to30 firmware does not work exactly like a etrex 30.

    In the images leave the 3 models of chips used, if anyone WANT add.
    Although I think only the barometric sensor is easy to solder.

    Furthermore you can see in the last picture the 3 main chips used in these models.

    CPU: STA8088EXG
    2GB Memory: Samsung KLM2G1DEHE-B101 This memory can have two configurable boot. ¿Region 5 - Boot Block? and ¿region 12- Boot.bin?
    256kb Memory: K5N5629ATA [NOR 256Mb] Could this be the NV?


    Combining KLM2G1DEHE-B101 + K5N5629ATA [NOR 256Mb] is widely used in some mobile phones, so maybe you could read and write these memories with some software used in phones, to repair firmwares (boots corrupt).

    Someone can provide more info?

    [Only registered and activated users can see links. ]
    Last edited by haute; 15th October 2012 at 01:56 PM.

  7. #46
    haute
    Guest

    Default

    Code:
    Please Login or Register to see the links
    I thank Kunix, assistance

  8. #47
    Navigation software Moderator kunix's Avatar
    Join Date
    Sep 2011
    Location
    Belarus
    Posts
    908
    Rep Power
    438

    Default

    I've written a new disasm script. I think it's better than the previous one I posted in this topic. It works by treating all the 4-bytes aligned 4-byte integers as pointers and judging if each one points to a function. Also smart_disasm requires that the firmware entry point is named "fw_base".

    Code:
    Please Login or Register to see the links
    Last edited by kunix; 22nd November 2012 at 09:38 AM.

  9. #48
    haute
    Guest

    Default

    you are going to upgrade too, the ida pro loader?

  10. #49
    Navigation software Moderator kunix's Avatar
    Join Date
    Sep 2011
    Location
    Belarus
    Posts
    908
    Rep Power
    438

    Default

    Do you think I should incorporate the script into the loader? Hm, I don't know... It's much easier to keep them separated. Also starting disassembling right after loading the firmware is a bad idea, so disassembling should be called by a separate function, and I don't know how to add a new function from a plugin.
    Last edited by kunix; 22nd November 2012 at 11:30 AM.

  11. #50
    haute
    Guest

    Default

    Do not quite understand that improving this script (IDC), I tested with a firmware without using the (IDA Pro loader).
    smart_disasm_region (0x80100000, 0x803C0000), and located only a few functions, very few.
    I do not know if this script is a complement (IDA Pro loader).
    I mean, what is the procedure?
    Loading a firmware with (IDA Pro loader) and then apply this script?.

    Honestly, the (IDA Pro loader) does a very good job, just need a script to look and put some names of important functions.

    Do not really understand the function of this script you have posted, if we have the (IDA Pro loader)

 

 

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •