Neta 980 Lost its Mind

I wonder if anyone succeeded in ViewSonic's ViewPad 100 re-flashing?

I am trying to get an AirPanel 100 "Communicator" image (WinCE 4.1) so I am booting from 32MB Lexar CF card with nk.bin, eboot.bin and eboot.nb0.

ViewPad seemingly boots from CF as it says: "Load Image (ATA)". Progress indicator bar reaches the end mark where everything stops.
Device stops responding (even to Soft reboot) and requires battery disconnect/reconnect to get going.

I know that other people successfully loaded this image on their Neta 980s which are the "same" device.

Is there solution for ViewPad 100 or not?

I wonder if ROM board (the one under the lid on the back) is interchangeable between AirPad 100 and Neta 980?
Is there a Neta's owner in Seattle area who is willing to try to flash my ROM in his Neta so I can put it back in AirPad?

Thanks,
Vadym

Well, this isn't *exactly* true. They are the same hardware, but the NETA 980 has CE 4.1 pre-loaded and has 64MB of Flash ROM (compared to the Viewpad 100's 32MB Flash ROM).

I also cannot get the Airpad 100 ROM image installed on my Viewpad 100. My guess is that the system software (the splash screen that comes up and displays the "Loading Image (ROM)" stuff you see) can't flash a CE 4.1 image correctly. I have also tried using the "System Upgrade Utility" on the Viewpad to do the same thing, but to no avail. It locks up after a certain point and just sits there, same as the CF flashing method. My guess is they anticipated people would try such things, and made sure it couldn't be done. Which kinda stinks, but oh well.

My first suggestion would be to try the smaller "Thin Client" image from Viewsonic. The communicator image is very close to 32mb and may not load on the Viewpad 100. The thin client image is missing some software but it is still fully functional CE .net 4.1. Also try formatting your CF card. I had quite a few failures trying to load the images on my NETA before I tried reformatting. Using Windows to format the CF card doesn't always work. There is a utility from HP called "HP usb disk storage format tool" that I use to format CF Cards. You can do a google search and find it. Let me know if any of this works.

Have you checked the readme file with the image for notes on memory needs? When I looked into using one of the images, it specified that it was meant for platforms with 128MB.

do you guys think is possible to create a windows 5.0 image for the viewpad 100?
microsoft has a 120 day trial for windows mobile 5.0, it comes with a BSP for ARM, I havent' had a chance to play with it, but I wonder if would be worth a try especially with the processor and memory on the viewpad 100.

I tried both, comunicator and thin client on 32mb and 64mb.....also from the internal upgrade utility...no luck

Also, viewsonic website shows the winCE 4.1 module upgrade for viewpad 100 as out of stock, has anybody seen an updated viewpad 100? does anybody has the module?

can I increase the flash rom?
regards.

Microsoft did not include support for the SA1100 in CE.net 5.0. Other ARM chips are supported. I had considered doing the same for my NETA 980.

I'm still more interested in a Linux port. Then adding functionality like WPA and a decent, modern web browser would be a piece of cake.

Anyone make any progress towards this?

gee good old SA is no longer supported?

toganet, for wpa you'd need cenet 4.2. or of course linux... dunno which would be harder to do.

According to this google thread it is possible to port the SA11X0BD BSP from ce.net 4.1 to 4.2, with a few minor modifications. I would like to build a 4.2 image for my airpanel 100. I already have ce.net 4.2 platform builder, but I need this BSP from 4.1. Does anybody here have ce.net 4.1 platform builder and is willing to share the SA11X0BD BSP ?

The Platform Builder for Microsoft Windows CE 5.0 BSP Migration article indicates: (http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wcehardware5/html/wce50conBSPandDriverMigration.asp)
If your OS design requires the Assabet Development Kit, you can use the BSP for the Intel Mainstone II Development Platform, which is included in Windows CE 5.0, or a BSP from a third-party vendor.

Windows CE .NET 4.2 and later supports the Assabet CSP drivers for the integrated peripherals on the SA1100 CPU or the SA1111 CPU companion chip. These drivers are located in the %_WINCEROOT%\Public\Common\Oak\CSP directory.

Because the Boston hardware and SDB and the Assabet Development Kit are no longer available for purchase, the BSPs for these target devices are not included in Windows CE .NET 4.2 and later; their use is deprecated.


Jose

I am still messing with my ViewPad 100.

So far I found that the only thing that works is flashing ViewPad with its original WinCE 3.0 image (v 0.96) through its own FlashBin.exe (refered to as "Start\Programs\Accessories\Update Utility", physically located in \Windows).
FlashBin.exe could be copied and run from different location (like "\Storage Card" which opens it up for potential hex-hacking, but it still looks for nk.bin in a "\Temp" folder ("absolute" path/name is hardcoded in).
I also discovered that the only way I could copy nk.bin into "\Temp" is through an ActiveSync's Explorer's session as direct copy from CF card fails mid-way (says "no space"?!).

Original nk.bin works fine and produces an impressive long log output in console (console could be set to have 132-wide and 20'000+ lines long bufer prior to run; settings hold accross sessions).

Here is beginning of a "successful" log:

dwBuf size is 262144
dwLen = 26817179
pDestination : 90040000, SizeInDWORD : 10000

fp : f
EndAddressInBytes : 90080000, Vaddr : 90040000
NeedBytes revised to 40000
Vaddr : 90040000, BlockRestSize : 199329b, BufferIndex : 0, dwImgStart : 9004000
0, StartAddressInBytes : 90040000, NeedBytes : 40000
dwBuf address: c0000, Write to address c0000, Write bytes : 40000
BufferIndex : 0, numBytes(Read bytes) : 40000
BufferIndex : 40000
Read Block finished
Step 8
Step 9
Step 10
Step 11
Step 12
call GetImageData function
pDestination : 90080000, SizeInDWORD : 10000
Vaddr : 90040000, BlockRestSize : 195329b, BufferIndex : 40000, dwImgStart : 900
40000, StartAddressInBytes : 90080000, NeedBytes : 40000
dwBuf address: c0000, Write to address c0000, Write bytes : 40000
BufferIndex : 40000, numBytes(Read bytes) : 40000
BufferIndex : 80000
Read Block finished
Step 13
Step 11
Step 12
..... etc ....

When I copied a "rogue" (AirPanel's "Communicator" nk.bin ) it failed like this:

dwBuf size is 262144
dwLen = 30919232
pDestination : 80080000, SizeInDWORD : 10000
fp : f

EndAddressInBytes : 800c0000, Vaddr : 80080000
NeedBytes revised to 40000
Vaddr : 80080000, BlockRestSize : 4, BufferIndex : 0, dwImgStart : 80080000, Sta
rtAddressInBytes : 80080000, NeedBytes : 40000
dwBuf address: c0000, Write to address c0000, Write bytes : 4
BufferIndex : 0, numBytes(Read bytes) : 4
BufferIndex : 4
fp : 1f
EndAddressInBytes : 800c0000, Vaddr : 80080040
NeedBytes revised to 3ffc0
Vaddr : 80080040, BlockRestSize : 8, BufferIndex : 0, dwImgStart : 80080000, Sta
rtAddressInBytes : 80080000, NeedBytes : 3ffc0
dwBuf address: c0000, Write to address c0040, Write bytes : 8
BufferIndex : 0, numBytes(Read bytes) : 8
BufferIndex : 8
fp : 33
EndAddressInBytes : 800c0000, Vaddr : 80081000
NeedBytes revised to 3f000
Vaddr : 80081000, BlockRestSize : 28afa8, BufferIndex : 0, dwImgStart : 80080000
, StartAddressInBytes : 80080000, NeedBytes : 3f000
dwBuf address: c0000, Write to address c1000, Write bytes : 3f000
BufferIndex : 0, numBytes(Read bytes) : 3f000
BufferIndex : 3f000
Read Block finished
IOCTL_HAL_FLASH_PREQUEL error as error code : 9

Note that starting addresses are all different.
I also tried "Thin Client" version and it produced slightly different lines but failed with the same error code:

dwBuf size is 262144
dwLen = 20895848
pDestination : 80080000, SizeInDWORD : 10000
fp : f

EndAddressInBytes : 800c0000, Vaddr : 80080000
NeedBytes revised to 40000
Vaddr : 80080000, BlockRestSize : 4, BufferIndex : 0, dwImgStart : 80080000, Sta
rtAddressInBytes : 80080000, NeedBytes : 40000
dwBuf address: c0000, Write to address c0000, Write bytes : 4
BufferIndex : 0, numBytes(Read bytes) : 4
BufferIndex : 4
fp : 1f
EndAddressInBytes : 800c0000, Vaddr : 80080040
NeedBytes revised to 3ffc0
Vaddr : 80080040, BlockRestSize : 8, BufferIndex : 0, dwImgStart : 80080000, Sta
rtAddressInBytes : 80080000, NeedBytes : 3ffc0
dwBuf address: c0000, Write to address c0040, Write bytes : 8
BufferIndex : 0, numBytes(Read bytes) : 8
BufferIndex : 8
fp : 33
EndAddressInBytes : 800c0000, Vaddr : 80081000
NeedBytes revised to 3f000
Vaddr : 80081000, BlockRestSize : 3aff0, BufferIndex : 0, dwImgStart : 80080000,
StartAddressInBytes : 80080000, NeedBytes : 3f000
dwBuf address: c0000, Write to address c1000, Write bytes : 3aff0
BufferIndex : 0, numBytes(Read bytes) : 3aff0
BufferIndex : 3aff0
fp : 3b02f
EndAddressInBytes : 800c0000, Vaddr : 800bc000
NeedBytes revised to 4000
Vaddr : 800bc000, BlockRestSize : 14600c, BufferIndex : 0, dwImgStart : 80080000
, StartAddressInBytes : 80080000, NeedBytes : 4000
dwBuf address: c0000, Write to address fc000, Write bytes : 4000
BufferIndex : 0, numBytes(Read bytes) : 4000
BufferIndex : 4000
Read Block finished
IOCTL_HAL_FLASH_PREQUEL error as error code : 9

I tried to disassm it with IDA to learn what the heck IOCTL_HAL_FLASH_PREQUEL error code 9 means , but failed to trace it "cus me not smart enuff".

Any Platform Super Builders out there? Is it something you recognize? (Save on explaining me what HAL "usually means" though).

Is there similar (WinCE) "Update Utility" on Neta 980? Anyone willing to copy it for our/my tests?
Is there similar (WinCE) "Update Utility" on AirPanel 100? Anyone willing to copy it for our/my tests?

Just in case this attempt will fail -- I opened my ViewPad and made plenty of hi-res photos of both sides on "macro" in case we will have to start a "port" on Handhelds.org/OpenEmbedded ("Familiar" project). But that will be a long story as there are some "funny" chips onboard.

Thanks!

Moderator, I am sorry for this huge post! Just trying to share stuff that was hard to get.

hey, well, i'm not a super builder but i tried to look this function up in PB and didn't find anything. let alone any error codes...

i don't have IDA so can't help with that. (hmm it would be fun to check it out )

you could upload the pics somewhere.

oh and no problem with long posts! i personally love reading long posts

The Neta (to my knowledge), does not have a similar utility. (I've never been able to get a backup or updated image file either ... although I dumped a copy of my neta's image to a file a while back .. )

DG

Vadym, Can you send me a copy of the flashbin.exe file. I have some thoughts. (mikegrimsley76atyahoo.com)

David G, there might be such a utility for the NETA but you'd never get it from Futurecom. I've been shaking the tree over at Futurecom trying to get a boot image or a replacement ROM for my NETA (I'm still running the Viewsonic Thin Client image for the AP100). So far no one can help me and I'm getting ready to call their company pres (got his direct number). Do you still have the ROM dump that you did. I'd like a copy if possible.

The AP100 image works great but I'd still rather run what I bought originally.

I'll see if I have a copy. CmoneX may have it (and be able to host it.) I don't maintain enough web space to hold the file. I'm sure she will see this post and be able to help.

Actually, I had a long talk with the Futurecom folks a while back. They said, at the time, that they have no real tech support types. If the device is broke, they replace it. That's why I would not do too much with my Neta's flash stuff. After warranty, I figured once broke, it was broke forever.
They gave me the name of the company that built the Neta so that I could try to get a copy of the image from them. I tried with no success.....

Because the Viewsonic's image works, I now have a backup.

How to reprogram the flash with the image that I copied sounded pretty tough with the limited tech resources that we have available. (Not including the experts here!).

DG