F266 Firmware access

[xninjaz]

Thanks, I figured it out.

Any idea how to get the custom ringtone though?

[sbmotoracer]

Well judging from samsung's history they'll only allow ringtones OTA.... unless you mod the firmware. I've toyed with the idea of buying a phone repair box here the supports the f266 but honestly i can't justify spending $160-$250 to grab the firmware...

So im trying the next best thing and that is to either try and get running code "exploit" the code running outside of java and dump the firmware that way or try and attempt to figure out how the bootloader is started/loaded and hope that its like the Motorola and allows firmware dumping.

I've managed to find the phones trace settings to see if I can grab some more info off of it... but it seems ive got the daunting task now of trying to guess the code that starts/loads the tracing function.... Over 10,000 different numbers....

*to start the trace setting function punch in *#8999*5282#

If i had to take a likely stab at how the s/w that comes with the phone works is via java's JSR's.... JSR 75 to be exact (it allows file access to certain sections and allows access to the phonebook entries).

I'll post more when i've gone through *#8999*0000#-*8999*9999# or gone insane from punching them in over and over again... if you wanna give me a hand try some of them from *8999*5555# and up so we're not both trying the same numbers.

[xninjaz]

Lol, it's so much of a hassle just to get custom ringtones to your phone.

[guitarboyled]

Alrighty so now that have unlocked everything on my Samsung F266 what do I do to choose (transfer) my own ringtone if I don’t have internet data access with my cell phone?

Does the myringtoneserver option work?

If so, what DRM option should I select?

[babaliciouz]

just wanted to say thanks to sbmotoracer for getting us the unlock code...
I got mine unlocked no problem
have been trying to get the custom ringtones but no luck whatsoever....

any luck anyone?

[sbmotoracer]

Well after some testing of Sony's DRM wrapper seems dm files aren't listed wherever you store them and renaming them to mp3/acc dont work either. So samsung may have a Table Stored somewhere in the phone to reference which file is drm'd by how.

I was wondering if anyone knows any samsung phones that have info on how to start their bootloaders or better yet how they work/has a copy of it. Would like to use them to get a general idea of how samsung boots/manages their phones.

As well does any know what a TFS file really is? I understand its has something to do with java but any searches on TFS only bring up individual files.

Honestly from what i can tell I think only a firmware flash will allow non DRMd ringtones. Especially if a table is used.

P.S. is anyone willing to dissasemble their phone and take some pics/write down whats written on the chips. Would be really helpful if we know what kind of CPU is running the code in the firmware. Id disassemble mine but for the next couple of weeks i've lost the use of my right fingers(middle/ring finger). Thanks.

[przemeklach]

Hi,

Newb question here. I just got the f266 from fido and I want to unlock it. I understand the procedure mentioned here but I just have a couple of general questions:
1. Can I brick my phone by doing this?
2. Will my phone continue to work with fido or do I have to re-configure something?

Thanks in advance.

[przemeklach]

Oops sorry I'm on crack here. I have the Samsung SGH f736 from fido. Will these codes still work? Also, some two questions as before.

Thanks.

Originally Posted by przemeklach

Hi,

Newb question here. I just got the f266 from fido and I want to unlock it. I understand the procedure mentioned here but I just have a couple of general questions:
1. Can I brick my phone by doing this?
2. Will my phone continue to work with fido or do I have to re-configure something?

Thanks in advance.

[GreyWyvern]

Bump. Any news on hacking the F266 firmware for custom ringtones?

I, for one, appreciate all your hard work!

[GreyWyvern]

Oh, and if a way could be found to delete these annoying non-deletable demo games, that would be great too!

[russia4ever]

Unlocking:
THANKS for posting how to unlock the phone - the procedure is easy...


Ringtones:
sbmotoracer said that he put some ringtones on the phone, i was wondering how...I tried to follow his procedure, but for some reason it didn`t work for me..the website that he gave (http://www.getjar.com/products/17728...ander/versions), gives you:

JAD file (MiniCommander.jad) and JAR file (MiniCommander.jar).

I understood that you need to download both of them. I connected my F266 by USB cable and sent both jad.&jar. to my memory stick. Unfortunatly, the phone doesn`t recognise them...It doesn`t open it...I was thinking about downloading them via phone browser, but I didn`t, because I am not sure.

IF ANYONE DID BREAK THE SYSTEM (HOW TO PUT RINGTONES), PLEASE POST IT, STEP BY STEP...IT`S HARD TO FOLLOW IF YOU ARE A NEWBIE(

[fakelord]

any progress yet on exploiting this phone? I can't even install downloaded java applications and games

[sbmotoracer]

Hey

I'm back. Currently the only way to install a java app/ringtones onto your phone is through your phones own internal browser.

Looking through this site it seems the f266 has been out in the market for a while atleast in europe and asia. Though over there its called the J770. The firmware is out for the j770 so anyone with a bit of arm assembly knowledge can reverse engineer it. Arm 9 to be exact. Although there will be major diffrences(different standards and the like) I doubt the main OS is much different between the two. Can't see samsung designing two different operating systems for different regions.

I'll post more when I have some more info. As well if anyone happens to have a link to the J770's firmware I love to get a link to it. I've grabbed a version off this site but it would be nice to see if there are any differences between different countries.

[JetJock]

Firstly - thank you for all the work and clear instructions ~ I don't know why it's not working for me...

"First do a eeprom reset" - successful.

*7465625*77*00000000*00000000# ... I get "SP code personalized"
#7465625*77*00000000# ... I get "Inputs do not match" ?

*7465625*638*00000000*00000000# ... I get "already personalized".
#7465625*638*Code# ... I get "Inputs do not match" ?

My phone is :

SW EF266.01
FW F266UZHK3
HW Version Rev 0.1
IMEI xxxxxx xx xxxxxx /x xx

Other codes work for me like the Trace menu and the Lock summary.

If anyone know what I'm doing wrong, please let me know.

Thanks in advance.

[KingOfMEtal]

You need to have your sim card in the phone for this to work.