Docomo Phones by Sharp

Check the dumping hardware overview for a list of known preservation hardware.

If you need help, please come chat with us on the VGPC or No-Intro discord servers.

Sharp Docomo phones generally run on a customized version of Symbian. These phones will have no reaction when plugged into a debug adapter.

Note: For the models SH903i and before, we do not have a way to exploit these phones through USB because they do not appear as connected to a PC once their battery is removed. Some phones can be chip dumped directly, but there is a lot of proprietary information we are missing on these early Sharp phones.

Extracting Data

1. ktdumper

Reading File Systems

1. assemble_sh704i_d904i
2. b4-ftl-extract
3. fugue-tools
4. Symbian SDK

File Processing

1. Keitai Tools

Ktdumper is a tool for extracting data from feature phones that are compatible with the Foma debug adapter, which includes all Docomo phones and select SoftBank phones. Please note that ktdumper will not work unless you have the Foma debug adapter.

Ktdumper is compatible with Linux and WSL (Windows System on Linux). It can be used as a command line tool or as a live Linux iso with a GUI.

Ktdumper Command Line

sudo ./ktdumper.sh d904i dump_nand

Ktdumper Live Iso

Before using assemble_sh704i_d904i.py, you must separate the NAND and OOB (out of bounds) data.

1. Download the separate_nand_oob.py script from Github and place it into the folder generated by ktdumper
2. Execute the following script

   python separate_nand_oob.py nand_mixed.bin

3. When given a set of options, select 0 (the other options are not needed for D904i/SH904i devices)

   0: Data = 512 Bytes, OOB = 16 bytes, divisible = True

To remove the FTL:

1. Download the assemble_sh704i_d904i.py script from Github
2. Execute the following command

   python assemble_sh704i_d904i.py nand_mixed_separated_512.bin output.bin

After this, you must use TestDisk to acquire the data.

1. Download the assemble_sh900i.py script from Github
2. Execute the following command with your dump-specific variables

   python assemble_sh900i.py <input file> <output file>

After this, you must use TestDisk to acquire the data.

1. Download the b4-ftl-extract scripts from Github
2. Place scripts in the same folder as nand.bin
3. EITHER drag nand.bin into b4b4.bat or enter the following command

   python extract.py -s nand.bin output_dir

   This code will unscramble the FTL and place all data into a folder called output_dir

After this, you must use TestDisk to acquire the data.

Fugue Nand Regular

1. Download the fugue-tools repository from Github
2. Place extract.py from fugue-tools into the same folder with nand.bin and nand.oob. Run this command:

   python extract.py nand.bin output.bin

The file system can now be read and extracted with TestDisk.

Fugue Nand A+B

1. Rename the files in the Part A dump folder to nand_a.bin and nand_a.oob
2. Rename the files in the Part B dump folder to nand_b.bin and nand_b.oob
3. Place all of these files into the same folder along with extract.py from fugue-tools.
4. Execute the following command

   python extract.py nand_a.bin nand_b.bin output.bin

The file system can now be read and extracted with TestDisk.

EPOC32 is a mobile operating system. It is a predecessor to Symbian, and its data can be extracted using tools from the Symbian 3 SDK.

1. Install the Symbian SDK (Windows)
2. Find readimage.exe. In a typical Symbian 3 SDK install, it will be located here.

   C:\Nokia\devices\Nokia_Symbian3_SDK_v1.0\epoc32\tools\readimage.exe

   Put the dump into the same folder as readimage.exe

3. Open the command line in that folder and paste the following:

   .\readimage.exe <file name> -z <output folder name>

   This script will create an output folder and place all files inside of it.

NOTE: For Sony Ericsson phone NOR dumps, you may need to cut out the data before 0x100000

TestDisk can be used on either Windows or Linux. It is available for download here. Once you have downloaded TestDisk, use the program to open your current .bin file.

1. When you open a .bin file with TestDisk, you will have the option to select a media. There should only be

   >Disk <your file>

   Press enter to proceed.

2. When asked to select a partition table type, select None

   [None ] Non partitioned media

3. On the following page, press q to quit or select

   [ quit ]

4. In the new menu, move up the menu and select

   [ Analyse ]

5. Press enter to continue with

   [Quick Search]

6. You should now see a partition labeled with a file system like FAT16 or FAT32. Don’t press ENTER. Instead, press p to list files.
7. Press a to select all files.
8. Press C (note the capitalization and hold the shift button!) to copy the selected files.
9. Choose the output folder. Press C when the folder is correct.

You should now have all the extracted files.

Note: For select devices (such as F905i and D905i), you need to select None → Undelete rather than the usual TestDisk procedure.

WIP