Author Topic: 1st dumping of a TI-Nspire CAS+ Boot1  (Read 8326 times)

0 Members and 1 Guest are viewing this topic.

Offline critor

  • Editor
  • LV11 Super Veteran (Next: 3000)
  • ***********
  • Posts: 2079
  • Rating: +439/-13
    • View Profile
    • TI-Planet
1st dumping of a TI-Nspire CAS+ Boot1
« on: October 31, 2012, 04:10:05 am »
After performing the 1st dump of a TI-Nspire CAS+ OS in may 2012 and then making those OSes installable, today is another great day!
The next greatest event in TI-Nspire CAS+ history has just occured: the first dumping of a TI-Nspire CAS+ Boot1, performed by myself with Goplat's help!

The Boot1 is the one coming with the P1-EVT2 CAS+ prototype I've had on loan from datamath .org for months/years, which was running OS 1.0.1.0.334T.

The method uses the RS232 console Datalight. This console is disabled on later models, so we'll need to find another method.

It's this Boot1 which is showing us "Texas Instruments" instead of "TI-Nspire" when booting on this prototype.

The Boot1 is stored in a 512KB Flash NOR ROM, like on later TI-Nspire:



As already seen in the RS232 bootlog from this prototype, the Boot1 is named "Boot Loader Stage 1" and has no version number - it is simply identified by its build date: 27 February 2006.

Note that the CPU frequency of 78MHz is actually hard-coded into the Boot1.

Note also that Boot1 confirms the possibility of launching a diagnostics software, although its presence have never been confirmed so far on any CAS+.



Now that the first boot1 TI-Nspire CAS+ has finally been dumped, let's go on! ;D



Source:
http://tiplanet.org/forum/viewtopic.php?f=43&t=10658
« Last Edit: October 31, 2012, 04:12:39 am by critor »
TI-Planet co-admin.

Offline DJ Omnimaga

  • Clacualters are teh gr33t
  • CoT Emeritus
  • LV15 Omnimagician (Next: --)
  • *
  • Posts: 55942
  • Rating: +3154/-232
  • CodeWalrus founder & retired Omnimaga founder
    • View Profile
    • Dream of Omnimaga Music
Re: 1st dumping of a TI-Nspire CAS+ Boot1
« Reply #1 on: October 31, 2012, 05:00:32 am »
That is great! Good job guys! :thumbsup:

By the way was that prototype the one that had even more motion blur than the regular models and also took almost a minute to boot?
Now active at https://discord.gg/cuZcfcF (CodeWalrus server)

Offline willrandship

  • Omnimagus of the Multi-Base.
  • LV11 Super Veteran (Next: 3000)
  • ***********
  • Posts: 2953
  • Rating: +98/-13
  • Insert sugar to begin programming subroutine.
    • View Profile
Re: 1st dumping of a TI-Nspire CAS+ Boot1
« Reply #2 on: October 31, 2012, 05:11:41 am »
sounds like it, judging from the lower clock speed.

Very cool news!

Offline critor

  • Editor
  • LV11 Super Veteran (Next: 3000)
  • ***********
  • Posts: 2079
  • Rating: +439/-13
    • View Profile
    • TI-Planet
Re: 1st dumping of a TI-Nspire CAS+ Boot1
« Reply #3 on: October 31, 2012, 05:58:43 am »
That is great! Good job guys! ;D

By the way was that prototype the one that had even more motion blur than the regular models and also took almost a minute to boot?


Yes, it's the prototype with the worst screen.
And yes, it takes a minute and a half to boot because it does extract/reinstall the OS on each boot.

You've got a good memory ;)
TI-Planet co-admin.

Offline critor

  • Editor
  • LV11 Super Veteran (Next: 3000)
  • ***********
  • Posts: 2079
  • Rating: +439/-13
    • View Profile
    • TI-Planet
Re: 1st dumping of a TI-Nspire CAS+ Boot1
« Reply #4 on: October 31, 2012, 01:15:19 pm »
Let's go on!

The first TI-Nspire CAS+ Boot2 has just been dumped! ;)
http://tiplanet.org/forum/viewtopic.php?p=131679#p131679
TI-Planet co-admin.

Offline Jim Bauwens

  • Lua! Nspire! Linux!
  • Editor
  • LV10 31337 u53r (Next: 2000)
  • **********
  • Posts: 1881
  • Rating: +206/-7
  • Linux!
    • View Profile
    • nothing...
Re: 1st dumping of a TI-Nspire CAS+ Boot1
« Reply #5 on: October 31, 2012, 02:24:11 pm »
Great :)

Offline ElementCoder

  • LV7 Elite (Next: 700)
  • *******
  • Posts: 611
  • Rating: +42/-2
    • View Profile
Re: 1st dumping of a TI-Nspire CAS+ Boot1
« Reply #6 on: October 31, 2012, 02:33:39 pm »
Wow great job :thumbsup:
[offtopic]So how does a dump like this go like steps etc. Could I find guides to this stuff somewhere?[/offtopic]

Some people need a high five in the face... with a chair.
~EC

Offline critor

  • Editor
  • LV11 Super Veteran (Next: 3000)
  • ***********
  • Posts: 2079
  • Rating: +439/-13
    • View Profile
    • TI-Planet
Re: 1st dumping of a TI-Nspire CAS+ Boot1
« Reply #7 on: November 01, 2012, 06:31:50 am »
Wow great job ;D
[offtopic]So how does a dump like this go like steps etc. Could I find guides to this stuff somewhere?[/offtopic]

Dumping the CAS+ OS is quite easy.

You just have to telnet the CAS+ IP on port 10002, and enter some copy commands to get the OS files in the /documents folder.

Then, they can be sent like a normal tns documents to the computer.

The Boot1/Boot2 dumping methods rely on the Datalight shell which is enabled on early CAS+ prototypes (EVT) but disabled on later CAS+ prototypes (DVT/PVT).
So in order to dump later/common CAS+ Boot1/Boot2, we'll have to study what we just got and find reusable exploits.
« Last Edit: November 01, 2012, 06:33:23 am by critor »
TI-Planet co-admin.

Offline apcalc

  • The Game
  • CoT Emeritus
  • LV10 31337 u53r (Next: 2000)
  • *
  • Posts: 1393
  • Rating: +120/-2
  • VGhlIEdhbWUh (Base 64 :))
    • View Profile
Re: 1st dumping of a TI-Nspire CAS+ Boot1
« Reply #8 on: November 03, 2012, 07:30:06 pm »
Cool, great job! :D