Disassemble Sony Ericsson K500 flash file

[slappy]

Hello.. i'm trying to dissassemble SE K500 flash files for a little research, non commercial. i'm very new to this so need a big help from all of you.
The flash file (bin format) is ripped directly from K500, address is $44000000 until $46000000 (i got this range from somwhere else, please correct me if i'm wrong)
I tried a blind attempt to disassemble it using ida (selected procs is arm and leave other options to its default) but the result is a massive junk, only some interesting strings are returned. i don't event know where is the actual starting address.
Any guide on selecting the right processor, entry point, or anything at all will be highly appreciated.

thanks in advance

[Vishay]

useful link: http://www.gsmericsson.narod.ru/

[Taskeefoim]

i will happy if u check ufshwk becaze i recently flash a k500 when i click a option
named" Edit FS " i see many function like pic, tone , mp3 every thing that we can see in k500 ...........................
so this thing many question raise: 1 is that when a option is available in software why not in standalone software like samsung x100 firmwire editor
if u have canfusion in "edit fs "reply me i will post pic
keep it man very nice post
i realy appreciat your struggle

[slappy]

Thanks for the usefull info. Actually my main goal is to understand how is everything processed inside SE (K500) phone. That way we can manipulate it's behaviour as we please, not just read/write user files from/to it.
I'm also wondering about the datasheet in the above link, it's written that it has 256Mbit available space which means there is a big empty space that we can use (K500 firmware + FS < 50M).

So, do you guys have information about the entry point of SE K500 arm firmware?

[Dave.W]

some space in flash drive is used as ROM/RAM etc...

[slappy]

@Dave.W
I'm aware of that, but CMIIW, the 'untouchable core system' of it can't be more than 200M. What I mentioned about K500 firmware + FS < 50M is also already over estimated because actually it only about 30M.

[Vishay]

Entry point of SE arm firmware is, usually, in beginning of addressing space
(0x44000000), where located interrupt's vectors table, tipically that:
18, F0, 9F, E5, 18, F0, 9F, E5,18, F0, 9F, E5, 18, F0, 9F, E5, .... .

[Zaihtam]

big endian or small endian? nokia use big endian.

BR,

IRpaj Zaihtam

[ben_whiteus]

Originally Posted by Zaihtam

big endian or small endian? nokia use big endian.
BR,
IRpaj Zaihtam

not all nokia phones though. At least DCT4 WD2 uses small endian. Not too sure about others.