TrueFFS store device name - Upgrading, Modifying and Unlocking

I have two WM phones: amsam M810 and Mio A700.
On M810, WM5torage can show all 3 store devices: TRUEFFS, DSK2:, DSK1:
On A700, WM5torage can only show 2 store devices: TRUEFFS, DSK1:
The second store (66.38M) on A700 is not able to be recognized by WM5torage as it has the same device name of "TRUEFFS" (only the first one is displayed).
Would like to have different device name for each TRUEFFS store on my A700 like M810 does.
How to change a TrueFFS store name?
I guess it should be changed via boot.hv in the XIP, but do not know which registry controls the device name of a TrueFFS store.
M810 partition info:
C:\Scoter Kitchen\Utilities\TOOLS\itsutils> pdocread -l
60.00M (0x3bf1000) TRUEFFS ---> Firmware
| 1.37M (0x15fc00) Part00 ---> XIP0 of Firmware
| 1.88M (0x1e0000) Part01 ---> XIP1 of Firmware
| 56.69M (0x38b1000) Part02 ---> CE OS of Firmware
870.00M (0x365b0000) DSK2: ---> System
| 133.32M (0x8552400) Part00 ---> User Partion (folder "\")
| 729.48M (0x2d97bc00) Part01 ---> Extended ROM partition (folder "\Mounted Volume")
1.90G (0x79b00000) DSK1: ---> SD Card
| 1.90G (0x79ae1200) Part00
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
A700 partition info:
C:\Scoter Kitchen\Utilities\TOOLS\itsutils> pdocread -l
50.00M (0x3200000) TrueFFS ---> Firmware
| 1.06M (0x10fc00) Part00
| 1.63M (0x1a0000) Part01
| 44.94M (0x2cf0000) Part02
| 2.38M (0x260000) Part03
66.38M (0x4261200) TrueFFS ---> System
| 1.06M (0x10fc00) Part00
| 1.63M (0x1a0000) Part01
| 44.94M (0x2cf0000) Part02
| 2.38M (0x260000) Part03
1.90G (0x79b00000) DSK1: ---> SD Card
| 1.90G (0x79ae1200) Part00
Part of boot.hv on A700:
Code:
[HKEY_LOCAL_MACHINE\System\StorageManager]
"PNPUnloadDelay"=dword:1f4
"Dll"="fsdmgr.dll"
[HKEY_LOCAL_MACHINE\System\StorageManager\AutoLoad\TrueFFS1]
"Order"=dword:1
"BootPhase"=dword:0
"LoadFlags"=dword:1
"DriverPath"="Drivers\\BuiltIn\\TrueFFS1"
[HKEY_LOCAL_MACHINE\System\StorageManager\AutoLoad\TrueFFS]
"Order"=dword:0
"BootPhase"=dword:0
"LoadFlags"=dword:1
"DriverPath"="Drivers\\BuiltIn\\TrueFFS"
[HKEY_LOCAL_MACHINE\System\StorageManager\Profiles]
"Folder"="Mounted Volume"
"PartitionDriverName"="MSPART"
"DefaultFileSystem"=""
"MountFlags"=dword:0
"AutoFormat"=dword:0
"AutoPart"=dword:0
"AutoMount"=dword:1
[HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\TRUEFFS_DOC1]
"BootPhase"=dword:0
"Folder"="Storage"
"Name"="DiskOnChip M-Systems"
"DefaultFileSystem"="FATFS"
[HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\TRUEFFS_DOC1\FATFS]
"DataCacheSize"=dword:800
"CheckForFormat"=dword:1
"EnableWriteBack"=dword:1
"FormatTFAT"=dword:1
"Flags"=dword:14
"MountAsRoot"=dword:1
"MountAsBootable"=dword:1
[HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\TRUEFFS_DOC1\FATFS\Filters\fsreplxfilt]
"Order"=dword:1
"Dll"="fsreplxfilt.dll"
[HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\TRUEFFS_DOC]
"BootPhase"=dword:0
"MountFlags"=dword:11
"Folder"="IMGFS"
"Name"="TrueFFS"
[HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\TRUEFFS_DOC\FATFS]
"CacheSize"=dword:800
"DataCacheSize"=dword:800
"XIP"=dword:0
"MountAsROM"=dword:1
"MountAsHidden"=dword:1
[HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\TRUEFFS_DOC\IMGFS]
"XIP"=dword:0
"MountAsROM"=dword:1
"MountAsHidden"=dword:1
[HKEY_LOCAL_MACHINE\Drivers\BuiltIn\TrueFFS1]
"BootPhase"=dword:0
"UseCache"=dword:1
"AutoDPDMode"=dword:1
"IClass"=multi_sz:"{A4E7EDDA-E575-4252-9D6B-4195D48BB865}"
"WindowBase"=dword:0
"Ioctl"=dword:4
"Order"=dword:0
"Index"=dword:1
"Prefix"="DSK"
"Dll"="TrueFFS.dll"
"Profile"="TRUEFFS_DOC1"
[HKEY_LOCAL_MACHINE\Drivers\BuiltIn\TrueFFS]
"UseCache"=dword:1
"AutoDPDMode"=dword:1
"IClass"=multi_sz:"{A4E7EDDA-E575-4252-9D6B-4195D48BB865}"
"WindowBase"=dword:0
"Ioctl"=dword:4
"Order"=dword:0
"Index"=dword:1
"Prefix"="DSK"
"Dll"="TrueFFS.dll"
"Profile"="TRUEFFS_DOC"
"Flags"=dword:11000
As a comparision, here is the part of boot.hv for M810 (which can have different store device name):
Code:
[HKEY_LOCAL_MACHINE\System\StorageManager]
"PNPUnloadDelay"=dword:1000
"Dll"="fsdmgr.dll"
[HKEY_LOCAL_MACHINE\System\StorageManager\Profiles]
"Folder"="Mounted Volume"
"PartitionDriverName"="MSPART"
"DefaultFileSystem"=""
"MountFlags"=dword:0
"AutoFormat"=dword:0
"AutoPart"=dword:0
"AutoMount"=dword:1
[HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\TRUEFFS_DOC\IMGFS]
"XIP"=dword:0
"MountAsROM"=dword:1
"MountHidden"=dword:1
[HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\TRUEFFS_DOC2]
"DefaultFileSystem"="FATFS"
"AutoPart"=dword:1
"AutoFormat"=dword:1
"Order"=dword:1
"BootPhase"=dword:0
"LoadFlags"=dword:1
"DriverPath"="Drivers\\BuiltIn\\TrueFFS2"
[HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\TRUEFFS_DOC2\FATFS]
"CheckForFormat"=dword:1
"DataCacheSize"=dword:80
"EnableWriteBack"=dword:1
"FormatTFAT"=dword:1
"Flags"=dword:400014
"MountAsRoot"=dword:1
"MountAsBootable"=dword:1
[HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\TRUEFFS_DOC2\FATFS\Filters\fsreplxfilt]
"Order"=dword:1
"Dll"="fsreplxfilt.dll"
[HKEY_LOCAL_MACHINE\Drivers\BuiltIn\TrueFFS2]
"IClass"="{A4E7EDDA-E575-4252-9D6B-4195D48BB865}"
"WindowBase"=dword:c000000
"AutoDPDMode"=dword:1
"Order"=dword:1
"Index"=dword:2
"Prefix"="DSK"
"Dll"="TrueFFS.dll"
"Profile"="TRUEFFS_DOC2"
"Flags"=dword:10000
[HKEY_LOCAL_MACHINE\Drivers\BuiltIn\TrueFFS]
"IClass"="{A4E7EDDA-E575-4252-9D6B-4195D48BB865}"
"WindowBase"=dword:c000000
"AutoDPDMode"=dword:1
"Order"=dword:1
"Index"=dword:1
"Prefix"="DSK"
"Dll"="TrueFFS.dll"
"Profile"="TRUEFFS_DOC"
"Flags"=dword:10000

After further investigation, I found that the name of the second device should be "TrueFFS1", but has been cut as "TrueFFS" due to the limitation of 7 characters length of device name in WM5/WM6.
So I managed to change the device name by modification to the boot.hv file in XIP:
change:
[HKEY_LOCAL_MACHINE\System\StorageManager\AutoLoad\TrueFFS1]
to:
[HKEY_LOCAL_MACHINE\System\StorageManager\AutoLoad\rTueFFS1]
(I tried many times for the parameters in boot.hv, and finally got this trick)
Then hard-reset A700.
Great! WM5torage can now show three storage devices!
(TrueFFS, rTueFFS, DSK1
And pdocread can aslo show three storage devices:
C:\Scoter Kitchen\Utilities\TOOLS\itsutils> pdocread -l
50.00M (0x3200000) TrueFFS
| 1.06M (0x10fc00) Part00
| 1.63M (0x1a0000) Part01
| 44.94M (0x2cf0000) Part02
| 2.38M (0x260000) Part03
66.38M (0x4261200) rTueFFS
| 66.38M (0x4260000) Part00
1.90G (0x79b00000) DSK1:
| 1.90G (0x79ae1200) Part00

Related

[REQ] Italian HTC rom

Ane1 has already dumped original Italian HTC Rom?
Before to dump new WWE rom i would like to have the chance to go back to my original italiann rom.
Thanks
dennydb said:
Ane1 has already dumped original Italian HTC Rom?
Before to dump new WWE rom i would like to have the chance to go back to my original italiann rom.
Thanks
Click to expand...
Click to collapse
I'd like to have the same before starting try the WWE new releases...
I would like to see an italian rom too.
I just upgraded the diamond rom to 1.37 and it's a lot faster but it's in english
However it's not a big problem....sometimes the translation is worse than the original.
When I will have some spare time I will start to learn how to cook a rom
thor486 said:
I would like to see an italian rom too.
I just upgraded the diamond rom to 1.37 and it's a lot faster but it's in english
However it's not a big problem....sometimes the translation is worse than the original.
When I will have some spare time I will start to learn how to cook a rom
Click to expand...
Click to collapse
Which version do you've installed? 404 ot 707? I'm thinking to upgrade, but without an official Italian ROM to use to go back....
It's great request! i'm searching an italian rom for upgrade my diamond!
ciao ragazzi i have a diamond too with WWE and i am waiting for an italian ROM...at the moment i an using the Elite1.0 based on 1.35.404 and it is pretty much faster then 1.34..
dennydb said:
Ane1 has already dumped original Italian HTC Rom?
Before to dump new WWE rom i would like to have the chance to go back to my original italiann rom.
Thanks
Click to expand...
Click to collapse
Can you backup your rom?...... You can find more info using the WIKI....
flaviopac said:
Can you backup your rom?...... You can find more info using the WIKI....
Click to expand...
Click to collapse
i've got original ita rom too but i cannot find an easy explanation on how dump diamond rom
itsutils download this
connect you diamond aat your pc insert this comand in prompt dos
pdocread -w -d DSK1: -b 0x800 -p Part00 0 0x31f000 Part00.raw
and you have the dump your diamomd internal storage
Don't make things harder than they are. I have succesfully dumped a Diamond device earlier. Watch closely:
210.75M (0xd2c0000) DSK1:
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 117.13M (0x7520000) Part02
| 86.13M (0x5620000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
The disk name is not DSK1, but DSK1:! So, the correct command would be:
pdocread -w -d DSK1: -b 0x800 -p Part00 0 0x31f000 Part00.raw
original post here
i got this error message!!
Could not update itsutils.dll to the curren
try restarting your device, or restart acti
or maybe your device is application-locked.
dennydb said:
i got this error message!!
Could not update itsutils.dll to the curren
try restarting your device, or restart acti
or maybe your device is application-locked.
Click to expand...
Click to collapse
first whit regeditor you need change this in your diamod:
HKLM\Security\Policies\Policies
valuename '00001001' was set to dword:2, change it to dword:1
Ok ..it's working..
part00.raw is in my pc HD and it-s only 2,688kb.
NOw i would like to understand how to backup other partitions and how to join them for a flashed rom.
dennydb said:
Ok ..it's working..
part00.raw is in my pc HD and it-s only 2,688kb.
NOw i would like to understand how to backup other partitions and how to join them for a flashed rom.
Click to expand...
Click to collapse
you have a pm
error again:
pdocread -w -d DSK1: -b 0x800 -p Part03 0 0x5620000 Part03.raw
CopyTFFSToFile(0x0, 0x5620000, Part03.raw)
ERROR: ITReadDisk : read 00000000 bytes - The storage control block address is i
nvalid.
caxio said:
itsutils download this
connect you diamond aat your pc insert this comand in prompt dos
pdocread -w -d DSK1: -b 0x800 -p Part00 0 0x31f000 Part00.raw
and you have the dump your diamomd internal storage
Don't make things harder than they are. I have succesfully dumped a Diamond device earlier. Watch closely:
210.75M (0xd2c0000) DSK1:
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 117.13M (0x7520000) Part02
| 86.13M (0x5620000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
The disk name is not DSK1, but DSK1:! So, the correct command would be:
pdocread -w -d DSK1: -b 0x800 -p Part00 0 0x31f000 Part00.raw
original post here
Click to expand...
Click to collapse
Thanks a lot, but after 1 sec in the command i've got:
C:\itsutils>pdocread -w -d DSK1: -b 0x800 -p Part00 0 0x31f000 Part00.raw
Copying C:\itsutils\itsutils.dll to WCE:\windows\itsutils.dll
Could not update itsutils.dll to the current version, maybe it is inuse?
try restarting your device, or restart activesync
or maybe your device is application-locked.
lightman3dd said:
Thanks a lot, but after 1 sec in the command i've got:
C:\itsutils>pdocread -w -d DSK1: -b 0x800 -p Part00 0 0x31f000 Part00.raw
Copying C:\itsutils\itsutils.dll to WCE:\windows\itsutils.dll
Could not update itsutils.dll to the current version, maybe it is inuse?
try restarting your device, or restart activesync
or maybe your device is application-locked.
Click to expand...
Click to collapse
you need this registry hack
first whit regeditor you need change this in your diamod:
HKLM\Security\Policies\Policies
valuename '00001001' was set to dword:2, change it to dword:1
Edit/Delete Message
caxio said:
you need this registry hack
first whit regeditor you need change this in your diamod:
HKLM\Security\Policies\Policies
valuename '00001001' was set to dword:2, change it to dword:1
Edit/Delete Message
Click to expand...
Click to collapse
got it thanks...and now?
dennydb said:
Ok ..it's working..
part00.raw is in my pc HD and it-s only 2,688kb.
NOw i would like to understand how to backup other partitions and how to join them for a flashed rom.
Click to expand...
Click to collapse
me too...i'd like to create the default ita rom
for first read the right andress whit pdocread.exe -l and after dump the raw file
the instruction are in the post:
this example have the raw andress for nld rom not for italian
Originally Posted by caxio
itsutils download this
connect you diamond aat your pc insert this comand in prompt dos
pdocread -w -d DSK1: -b 0x800 -p Part00 0 0x31f000 Part00.raw
and you have the dump your diamomd internal storage
Don't make things harder than they are. I have succesfully dumped a Diamond device earlier. Watch closely:
210.75M (0xd2c0000) DSK1:
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 117.13M (0x7520000) Part02
| 86.13M (0x5620000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
The disk name is not DSK1, but DSK1:! So, the correct command would be:
pdocread -w -d DSK1: -b 0x800 -p Part00 0 0x31f000 Part00.raw
original post here
Done.. i got 4 raw part of my rom.
And now?

[TUT]Dump Diamond ROM

Before going for a new ROM I wanted to first backup mine.
My actual ROM version is 1.37.406.1 FRE.
Is the dumping process the same for all HTC models?
There are a LOT of threads regarding backup on the diamond.
Search is also your best friend.
Dump the ROM:
Code:
C:\bin>pdocread.exe -l
210.38M (0xd260000) DSK1:
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 106.38M (0x6a60000) Part02
| 96.50M (0x6080000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle e6932666 3.75G (0xf0000000)
handle [COLOR="red"]e7cae8da[/COLOR] 96.50M (0x6080000)
handle [COLOR="blue"]c7db27be[/COLOR]106.38M (0x6a60000)
handle [COLOR="green"]a7db279a[/COLOR] 4.38M (0x460000)
handle [COLOR="orange"]67db2752[/COLOR] 3.12M (0x31f000)
[...]
C:\bin> [B]pdocread.exe -w -h [color="orange"]0x67db2752[/color] -b 0x800 0 0x31f000 Part00.raw[/B]
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)
C:\bin> [B]pdocread.exe -w -h [color="green"]0xa7db279a[/color] -b 0x800 0 0x460000 Part01.raw[/B]
CopyTFFSToFile(0x0, 0x460000, Part01.raw)
C:\bin> [B]pdocread.exe -w -h [color="blue"]0xc7db27be[/color] -b 0x800 0 0x6a60000 Part02.raw[/B]
CopyTFFSToFile(0x0, 0x6a60000, Part02.raw)
C:\bin> [B]pdocread.exe -w -h [color="red"]0xe7cae8da[/COLOR] -b 0x800 0 0x6080000 Part03.raw[/B]
CopyTFFSToFile(0x0, 0x6080000, Part03.raw)
Dump the bootloader:
Code:
C:\bin> [B]pmemdump.exe 0xa8000000 524288 SPLdumped.nb[/B]
CopyProcessMemoryToFile(00000042, a8000000, 00080000, SPLdumped.nb)
Enjoy
Thanks a lot pof, but how do I use that?
adwinp said:
There are a LOT of threads regarding backup on the diamond.
Search is also your best friend.
Click to expand...
Click to collapse
Could you please link to one because I failed to find any personally? That would really help. Thanks a lot.
Hay the dump of part 02 is taking a long time for my device !?!?.. is it generally like that !?!?
How can i do this, can o give a little lesson about this???
I appreciate a lot
pof said:
Dump the ROM:
Code:
C:\bin>pdocread.exe -l
210.38M (0xd260000) DSK1:
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 106.38M (0x6a60000) Part02
| 96.50M (0x6080000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle e6932666 3.75G (0xf0000000)
handle [COLOR="red"]e7cae8da[/COLOR] 96.50M (0x6080000)
handle [COLOR="blue"]c7db27be[/COLOR]106.38M (0x6a60000)
handle [COLOR="green"]a7db279a[/COLOR] 4.38M (0x460000)
handle [COLOR="orange"]67db2752[/COLOR] 3.12M (0x31f000)
[...]
C:\bin> [B]pdocread.exe -w -h [color="orange"]0x67db2752[/color] -b 0x800 0 0x31f000 Part00.raw[/B]
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)
C:\bin> [B]pdocread.exe -w -h [color="green"]0xa7db279a[/color] -b 0x800 0 0x460000 Part01.raw[/B]
CopyTFFSToFile(0x0, 0x460000, Part01.raw)
C:\bin> [B]pdocread.exe -w -h [color="blue"]0xc7db27be[/color] -b 0x800 0 0x6a60000 Part02.raw[/B]
CopyTFFSToFile(0x0, 0x6a60000, Part02.raw)
C:\bin> [B]pdocread.exe -w -h [color="red"]0xe7cae8da[/COLOR] -b 0x800 0 0x6080000 Part03.raw[/B]
CopyTFFSToFile(0x0, 0x6080000, Part03.raw)
Dump the bootloader:
Code:
C:\bin> [B]pmemdump.exe 0xa8000000 524288 SPLdumped.nb[/B]
CopyProcessMemoryToFile(00000042, a8000000, 00080000, SPLdumped.nb)
Enjoy
Click to expand...
Click to collapse
I'm sorry to insist but I've really researched the forum and can't find something clear enough.
To follow my isntructions, you need a working Activesync / WMDC connection with the diamond, and itsutils installed on your windows PC. The dump of part02 and part03 takes a while, because those are big files, this is normal.
Once you have the *.raw files, you can use Part01.raw (XIP) and Part02.raw (OS) into a flashable ROM using any ROM kitchen that supports it (either diamond specific, or kaiser's kitchen will work also).
What should I so with the itsutils files? Which should I run? Could you please give a step-by-step explanation of how the dump actually goes? That would be great. Thanks again.
Hello pof!
I have just dumped my radio but TouchFlo 3D still very sluggish. What is the next step?
P.S. hello, mate, glad to see you posting in Diamond forums
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
As I understand, part03 is the RAM that contains your personal data like contacts and SMS.
So it isn't realy needed to rebuild the ROM.
But what's part00 ?? A second XIP part ?
Thanks
Your a legend POF.
Extracted SPL 1.38 from Telstra DIAM130 now have a backup in order to load a hard SPL.
Thank you
Error dumping ROM
Hey everyone!
I downloaded and ran (from the command prompt) "pdocread.exe -l". The following error occurred:
"Could not update itsutils.dll to the current version, maybe it is inuse?
try restarting your device, or restart activesync
or maybe your device is application-locked"
Hopefully someone can tell me what to do next, I beleive the problem lies in the "application-locked"-thing. I can see the .dll on my device in explorer, but I can't see it when I try to use it in the "Programs" list with "TF3D Config" (I am able to see other .dll files in the "windows" directory. Furthermore, I currently have a Vodafone branded ROM version (of which I would like to have a backup before flashing it)
Same problem here.
Using Vista 64Bit - Windows mobile device center.
I really want to Dump my OS so I fanlly can flush a new rom!!! PLZ help soon.
Thx,
CySlider
Did you try enablerapi for itsutils.dll error ?
You can get it from
http://forum.xda-developers.com/showpost.php?p=2306937&postcount=11
Unfortunately this does not work. It gives me this error:
Config failed (0x80070005): Access denied
Try to read here
http://wiki.xda-developers.com/index.php?pagename=Hermes_HowtoDumpRom
and go to the link on this line
Check this wiki article on information about how to avoid that. Basically you have to modify this registry key, and then softreset using power button:
Thats it!! Thanks a lot BentPovlsen.
To keep it short for others:
HKLM\Security\Policies\Policies
valuename '00001001' was set to dword:2, change it to dword:1
After that it works.
CySlider
pof said:
Dump the ROM:
Code:
C:\bin>pdocread.exe -l
210.38M (0xd260000) DSK1:
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 106.38M (0x6a60000) Part02
| 96.50M (0x6080000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle e6932666 3.75G (0xf0000000)
handle [COLOR="red"]e7cae8da[/COLOR] 96.50M (0x6080000)
handle [COLOR="blue"]c7db27be[/COLOR]106.38M (0x6a60000)
handle [COLOR="green"]a7db279a[/COLOR] 4.38M (0x460000)
handle [COLOR="orange"]67db2752[/COLOR] 3.12M (0x31f000)
[...]
C:\bin> [B]pdocread.exe -w -h [color="orange"]0x67db2752[/color] -b 0x800 0 0x31f000 Part00.raw[/B]
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)
C:\bin> [B]pdocread.exe -w -h [color="green"]0xa7db279a[/color] -b 0x800 0 0x460000 Part01.raw[/B]
CopyTFFSToFile(0x0, 0x460000, Part01.raw)
C:\bin> [B]pdocread.exe -w -h [color="blue"]0xc7db27be[/color] -b 0x800 0 0x6a60000 Part02.raw[/B]
CopyTFFSToFile(0x0, 0x6a60000, Part02.raw)
C:\bin> [B]pdocread.exe -w -h [color="red"]0xe7cae8da[/COLOR] -b 0x800 0 0x6080000 Part03.raw[/B]
CopyTFFSToFile(0x0, 0x6080000, Part03.raw)
Dump the bootloader:
Code:
C:\bin> [B]pmemdump.exe 0xa8000000 524288 SPLdumped.nb[/B]
CopyProcessMemoryToFile(00000042, a8000000, 00080000, SPLdumped.nb)
Enjoy
Click to expand...
Click to collapse
If I get it right, then the Sizes differ from device to device. this is irritating, since you didn't color those numbers too. First I thaugt they were static.
Here is how I think it should be. correct me if I´m wrong:
Dump the ROM:
Code:
C:\bin>pdocread.exe -l
210.38M (0xd260000) DSK1:
| 3.12M ([COLOR="darkorange"][B]0x31f000[/B][/COLOR]) Part00
| 4.38M ([COLOR="darkgreen"][B]0x460000[/B][/COLOR]) Part01
| 106.38M ([COLOR="darkblue"][B]0x6a60000[/B][/COLOR]) Part02
| 96.50M ([COLOR="darkred"][B]0x6080000[/B][/COLOR]) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle e6932666 3.75G (0xf0000000)
handle [COLOR="red"]e7cae8da[/COLOR] 96.50M (0x6080000)
handle [COLOR="blue"]c7db27be[/COLOR]106.38M (0x6a60000)
handle [COLOR="green"]a7db279a[/COLOR] 4.38M (0x460000)
handle [COLOR="orange"]67db2752[/COLOR] 3.12M (0x31f000)
[...]
C:\bin> [B]pdocread.exe -w -h [color="orange"]0x67db2752[/color] -b 0x800 0 [COLOR="darkorange"][B]0x31f000[/B][/COLOR] Part00.raw[/B]
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)
C:\bin> [B]pdocread.exe -w -h [color="green"]0xa7db279a[/color] -b 0x800 0 [COLOR="darkgreen"][B]0x460000[/B][/COLOR] Part01.raw[/B]
CopyTFFSToFile(0x0, 0x460000, Part01.raw)
C:\bin> [B]pdocread.exe -w -h [color="blue"]0xc7db27be[/color] -b 0x800 0 [COLOR="darkblue"][B]0x6a60000[/B][/COLOR] Part02.raw[/B]
CopyTFFSToFile(0x0, 0x6a60000, Part02.raw)
C:\bin> [B]pdocread.exe -w -h [color="red"]0xe7cae8da[/COLOR] -b 0x800 0 [COLOR="darkred"][B]0x6080000[/B][/COLOR] Part03.raw[/B]
CopyTFFSToFile(0x0, 0x6080000, Part03.raw)
Can read now
Cy_the_Slider said:
Thats it!! Thanks a lot BentPovlsen.
To keep it short for others:
HKLM\Security\Policies\Policies
valuename '00001001' was set to dword:2, change it to dword:1
After that it works.
CySlider
Click to expand...
Click to collapse
Thanks man! This made all the difference. I'm dumping my ROM right now Now, I'm just looking for someone to test it by flashing it... Hopefully someone will try that.

[ROM][WWE]Shipped:1.37.479.3 Help needed reconstructing

i got my hands on my first diamond so i made a dump:
ROM version:1.37.479.3 WWE
Rom date 06/24/08
Radio Version:1.00.25.03
Protocol version:52.26a.25.09H
CE OS 5.2.19591 (Build 19591.1.1.6)
I uploaded the raw files in case someone needs them
Sorry if not in the right thread, but it's a bit late and i'm running out of battery on my laptop.
pass: "xdadevs" without cuotes.
http://rapidshare.com/files/139086420/diamond.part1.rar.html
http://rapidshare.com/files/139088895/diamond.part2.rar.html
PS: if someone would be kind enough to make theese files into flashable roms, i would appreciate it,
Can someone extract the rom from this dump and convert it to a flashable one ?
I tried to reconstruct a rom for my polaris in the past and almost briked it.
I don't want to repeat that, and i'm eager to test some cooked roms but i need the original rom in case i want to send the device back to Vodafone.
Thanks in advance.
Thanks ravest.
That ROM is the same which I have in my Dimond. But I am beginner in flashing ROMs, so I am supporting you to beg somebody to make a flesheable ROMfrom your dump, and you personally I would like to ask to describe step by step how to do dump of ROM for me. I was reading some HOW TOs, but still I do not understand how to do it.
this is the guide i used for dumping:
http://forum.xda-developers.com/showthread.php?t=412447
and there is also a guide for kaiser where i found the tools needed:
http://forum.xda-developers.com/showthread.php?t=334680
you may also need to install sdkcert and enablerapi on your pda in order to be able to dump those files.
step by step guide:
1. extract itsutils (http://www.xs4all.nl/~itsme/projects/xda/tools.html) to hard drive
2. open command prompt (run "cmd"), go to the folder created above (use cd command)
3. run
pdocread.exe -l
and you will get a list like this:
210.38M (0xd260000) DSK1:
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 106.38M (0x6a60000) Part02
| 96.50M (0x6080000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle e6932666 3.75G (0xf0000000)
handle e7cae8da 96.50M (0x6080000)
handle c7db27be106.38M (0x6a60000)
handle a7db279a 4.38M (0x460000)
handle 67db2752 3.12M (0x31f000)
[...]
4. run
pdocread.exe -w -h 0x67db2752 -b 0x800 0 0x31f000 Part00.raw
and you will get a result like:
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)
4. run the same command changing the values acordingly
At the end you will have in the same folder 4 files: part00.raw, part01.raw, part02.raw, part03.raw
ravest said:
this is the guide i used for dumping:
http://forum.xda-developers.com/showthread.php?t=412447
and there is also a guide for kaiser where i found the tools needed:
http://forum.xda-developers.com/showthread.php?t=334680
you may also need to install sdkcert and enablerapi on your pda in order to be able to dump those files.
step by step guide:
1. extract itsutils (http://www.xs4all.nl/~itsme/projects/xda/tools.html) to hard drive
2. open command prompt (run "cmd"), go to the folder created above (use cd command)
3. run
pdocread.exe -l
and you will get a list like this:
210.38M (0xd260000) DSK1:
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 106.38M (0x6a60000) Part02
| 96.50M (0x6080000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle e6932666 3.75G (0xf0000000)
handle e7cae8da 96.50M (0x6080000)
handle c7db27be106.38M (0x6a60000)
handle a7db279a 4.38M (0x460000)
handle 67db2752 3.12M (0x31f000)
[...]
4. run
pdocread.exe -w -h 0x67db2752 -b 0x800 0 0x31f000 Part00.raw
and you will get a result like:
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)
4. run the same command changing the values acordingly
At the end you will have in the same folder 4 files: part00.raw, part01.raw, part02.raw, part03.raw
Click to expand...
Click to collapse
Thanks ravest - good work!
I have to read all paths first, download software and after that I will definitely try.
Thanks again.
up ?
Anyone can help ?
Thanks in advance.
And what do we have to do to the .raw files to make them usable for rom flashing?

[HELP]iPAQ 214 ROM&Flash

I need help with iPAQ 214 ROM cooking and flashing !
We have:
-Solution to dump current ROM:
pdocrean -l
pdocread -w -d DSK1: -b 0x800 -p Part00 0 0x17f000 Part00.raw
pdocread -w -d DSK1: -b 0x800 -p Part01 0 0x220000 Part01.raw
pdocread -w -d DSK1: -b 0x800 -p Part02 0 0x39e0000 Part0.raw
*Part01 is XIP (can be unpacked via romdump), Part02 is OS (can be unpacked via imgfstodump)
-Cooked orginal ROM:
http://rapidshare.com/files/2236847...n_marked_internally_with_custom_extra_data.7z
What we need:
-Someone who can cook for us:
--Clear (without HP customizations) WM 6 ROM
--WM 6.1 ROM
--WM6.5 ROM
-Someone who is good in mobile linux, who can make a full dump of ROM for analyzing, as it is described here: http://www.handhelds.org/moin/moin.cgi/HpIpaq214Flash
Then we finally need someone who can help find solution and test flashing.
Here are sources of informations which we have:
-Creating, Restoring WM Rom Backup, flashing Linux to ROM: http://www.handhelds.org/moin/moin.cgi/HpIpaq214Flash
-iPaq 214 mailing list (many informations): http://lists.linuxtogo.org/pipermail/hpipaq21x-devel/
-English forum about 214:
-- http://forum.brighthand.com/forumdisplay.php?f=1333
-- http://forum.brighthand.com/showthread.php?t=267928
-- http://forum.brighthand.com/showthread.php?t=265547
-- http://forum.brighthand.com/showthread.php?t=267862
-- http://forum.brighthand.com/showthread.php?t=268078
Please help us !
Are you saying that you can't make the updated rom (even if we all help you)? There's plenty of guides on this site to help you, you just have to do your homework (like the rest of us did).
iPAQ212 CHS ROM
iPAQ212 CHS ROM, released from a Chinese Forum:
http://bbs.pdafans.com/viewthread.php?tid=775254&extra=page=1&filter=type&typeid=183

[Script]RemEdit (Easy and quick remote file editing)

I made this script a while ago, its an easy yet effective script. the purpose is to directly edit (text) files from your rom, on your pc. it works like this: you enter the path of the file that you want to edit on your phone: "remedit /system/etc/gps.conf" for example, will open gps.conf from your phone in your default text editor, when you are done with the changes you just save it and close the window. then in the shell press enter and the file will be pushed back to your device with the same permissions. Not anything special but just a handy script to make modding/testing just a bit easier.
Global access to the adb binary is required, it can be done by adding this line to .bashrc
.bashrc
Code:
export PATH=${PATH}:~/android-sdk/platform-tools
The script:
~/bin/remedit
Code:
#!/bin/bash
#Edit files on your phone like editing local files
#Copyright 2013 broodplank.net
#Revision 3
if [[ $1 = "" ]]; then
echo "usage: remedit [remote path]"
echo " example: remedit /system/build.prop"
exit
else
DIR=${1%/*}
FILE=${1##*/}
fi;
if [[ -e mode ]]; then
rm -f mode
fi;
adb get-state > state
export DEVICESTATE=`cat state`;
rm -f state
if [[ ${DEVICESTATE} != 'device' ]]; then
echo "Waiting for device..."
echo "Make sure debugging mode is enabled"
adb 'wait-for-device'
echo "Device found"
fi;
adb -d shell ls -l ${1} | awk '{k=0;for(i=0;i<=8;i++)k+=((substr($1,i+2,1)~/[rwx]/) \
*2^(8-i));if(k)printf("%0o ",k);print}' > mode
if [[ -e modenew ]]; then
rm -f modenew
fi;
head -c 3 mode > modenew
export FILEMODE=`cat modenew`;
if [[ -e mode ]]; then
rm -f mode
fi;
if [[ -e modenew ]]; then
rm -f modenew
fi;
echo
echo "Remote Path: '${DIR}'"
echo "Remote File: '${FILE}'"
echo "Remote Mode: '${FILEMODE}'"
echo
cd ${PWD}
if [[ -e $FILE ]]; then
rm -f $FILE
fi;
adb pull $1 $FILE
xdg-open $FILE
echo
echo "Press enter when you're done editing the file"
read -p [enter]
echo
adb remount
adb push $FILE $1
adb -d shell busybox chmod ${FILEMODE} ${1}
echo
echo "Pushed new version of: ${FILE} located in: ${DIR} with mode: ${FILEMODE}"
if [[ -e $FILE ]]; then
rm -f $FILE
fi;
Output:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Categories

Resources