Docomo Phones by Panasonic

Check the dumping hardware overview for a list of known preservation hardware.

If you need help, please come chat with us on the VGPC or No-Intro discord servers.

Panasonic Docomo phones generally run on a customized form of Linux. They use a bootloader related to the one used in NEC and Casio Docomo phones. When a Panasonic phone is properly connected to a debug cable, an LED somewhere on the phone will light up for approximately one second, and then turn off.

Extracting Data

1. ktdumper

Reading File Systems

1. fs-tools (FSR II)
2. fs-tools (SSR200)
3. fs-tools (XSR1)
4. fs-tools (XSR2)
5. Jefferson

Ktdumper is a tool for extracting data from feature phones that are compatible with the Foma debug adapter, which includes all Docomo phones and select SoftBank phones. Please note that ktdumper will not work unless you have the Foma debug adapter.

Ktdumper is compatible with Linux and WSL (Windows System on Linux). It can be used as a command line tool or as a live Linux iso with a GUI.

Ktdumper Command Line

sudo ./ktdumper.sh d904i dump_nand

NOTE: This extraction method may not work on WSL. If you are having errors after trying all steps, try switching from WSL to a full Linux installation.

1. Download fs-tools from Github
2. Set up the environment with the following commands

   sudo apt install gcc-arm-linux-gnueabi
   pip3 install qiling

3. Build the tool with the following commands

   arm-linux-gnueabi-gcc -static -omain fsr.ko fsr_stl.ko main.c

4. Place onenand.bin and onenand.oob into the fsr_II folder. Then, run the following command

   python3 emu.py

The file system can now be read and extracted with TestDisk.

UPDATED

1. Downlod the ssr200 tools from fs-tools
2. Download assemble_ssr200.py from various-keitai-assemble
3. Place assemble_ssr200.py in the same folder as nand.bin and nand.oob
4. Use the following commands:

   python3 assemble_ssr200.py nand.bin nand_remapped.bin
   python3 carve_nec_fat.py nand_remapped.bin fat_dir
   python3 convert_fat.py fat_dir converted_fat_dir

Note: If you are extracting data from a P2102V, add the “–disable-normalize” option to the 3rd command

python3 assemble_ssr200.py nand.bin nand_remapped.bin
python3 carve_nec_fat.py nand_remapped.bin fat_dir
python3 convert_fat.py --disable-normalize fat_dir converted_fat_dir

The partitions can now be extracted with TestDisk.

Current tools for extracting XSR1 require Windows.

1. Download rfs_dumper_xsr1app.exe from here.
2. The input file should be stripped of everything before the first 91 5A 49 2C header. In HxD, you can do this by going to the menu and selecting Search>Find, then selecting the Hex-values tab and pasting in 91 5A 49 2C. Once you find this location, delete everything before it. Save this new file as input.bin.
3. Place onenand.bin, onenand.oob, and rfs_dumper.exe in one folder. Open a terminal in the folder with the dump (onenand + oob) and rfs_dumper.exe. Use the following command:

   .\rfs_dumper_xsr1app.exe onenand.bin output.bin

The file system can now be read and extracted with TestDisk.

1. Download assemble_xsr2.py from Github
2. IF onenand is split into onenand_a and onenand_b, combine the bin files and the oob files
3. Use the following command

   python .\assemble_xsr2.py onenand.bin output_dir

4. In the output directory, select the largest partition and use TestDisk

NOTE: If TestDisk says that the partition(s) can't be recovered, try [UNDELETE] instead of Analyze.

The JFFS2 file system can be extracted with Jefferson, which runs on Python. You can install Jefferson in a pre-existing Python using pip:

sudo apt-get install python3-pip
sudo pip3 install jefferson

The following command creates a folder called “jffs2_extracted” to contain the data extracted from nand.bin.

sudo jefferson -d jffs2_extracted nand.bin

If your phone uses onenand, use the following command instead:

sudo jefferson -d jffs2_extracted onenand.bin

Note: You may see the error

data_crc does not match!

The dump may still be working. Let it continue until the process is complete before trying other steps.

Helpful Extra Step: Remove root ownership of the files so they can be moved elsewhere

sudo chown -R <your_username>:<your_username> jffs2_extracted

Troubleshooting

If the jffs2_extracted folder contains no data, the offset will need to be removed from the .bin file.

You can determine the offset two ways:

• Using binwalk, look for the address where the JFFS2 file system begins.

binwalk nand.bin

• Using a hex editor such as HxD, look for the following four bytes:

85 20 19 E0

Or

85 19 02 E0

Delete all data before those four bytes and try again to extract with Jefferson.

Note: It is not possible to undelete files from a JFFS2 file system.

TestDisk can be used on either Windows or Linux. It is available for download here. Once you have downloaded TestDisk, use the program to open your current .bin file.

1. When you open a .bin file with TestDisk, you will have the option to select a media. There should only be

   >Disk <your file>

   Press enter to proceed.

2. When asked to select a partition table type, select None

   [None ] Non partitioned media

3. On the following page, press q to quit or select

   [ quit ]

4. In the new menu, move up the menu and select

   [ Analyse ]

5. Press enter to continue with

   [Quick Search]

6. You should now see a partition labeled with a file system like FAT16 or FAT32. Don’t press ENTER. Instead, press p to list files.
7. Press a to select all files.
8. Press C (note the capitalization and hold the shift button!) to copy the selected files.
9. Choose the output folder. Press C when the folder is correct.

You should now have all the extracted files.

Note: For select devices (such as F905i and D905i), you need to select None → Undelete rather than the usual TestDisk procedure.