SHX files

[cyph]

As you know, a 3 SHX files of C5 firmware have been leaked only recently. I took the oppurtunity to compare them with the older C3 SHX file, trying to decipher the chunk of binary code before the start of the S-format records. Here's what I found:

0x000 - 0x2ff Strings describing this file, NULL padded. All Strings seems to start on a 32-byte boundary.
0x300 - 0x301 16-bit little-endian integer. Number of 32-byte chunks that follows.
0x302 - 0x4e1 The 32-byte chunks. (depending on the value at 0x300 actually, this range is based on 15 chunks)
0x4e2 - end   S-format records

For each of the 32-byte chunks I've only manage to infer these

0x001 - 0x001 8-bit integer. The code group number.
0x004 - 0x007 32-bit little-endian integer. Start offset of some sort.
0x008 - 0x00b 32-bit little-endian integer. End offset of some sort.

I'm not sure what these are for, but my guess is that it is involved in the splitting into and checksumming of the .smg files.

Inspecting E680I_G_0D.C3.A8P_0D.B0.B1P_T674VE_L001_S001_P006_GSOE680IT674VE006_full.shx, I found that:

There were 14 S0 and S7 records
There were 15 of the 32-byte chunks in the headers
silvio extracted 17 .BIN files using binex
If you take the (end offset - start offset + 1) you get lengths that corresponds to most of the .BIN files.

Interesting....

And I've written a little perl script to display some info extracted from the SHX header.

Gotta go back to the army (stupid singapore conscription) in a few hours, so see you guys this weekend Hope someone can make more sense of the other fields.

[maxx_730]

Eyesonly from hofo also did some research on the header of the .shx file. Here are his findings: http://www.motorolafans.com/forums/download.php?id=428

[yantz]

yup i tried his and motox guide, but realise its totally different from e680. i was hoping maybe we can flash just a part of the system, it'll be great

[maxx_730]

yup, it will. Eyesonly's pdf's are the only reason i keep visiting hofo lol