Database Users

DumpXip

I’m trying to run the dumpxip.pl perl script..
I Installed activestate Perl (maybe you recommend a better perl?)
I also downloaded the win32 patch at http://www.xs4all.nl/~itsme/projects/perl/Win32-API-0.41-wj2.tar.gz
And ran makefile.pl
Then nmake
I get several errors saying it cant find API.pm struct.pm etc etc
I put the files in the places it expects and I get:
Can't locate loadable object for module Win32::API in @INC (@INC contains: C:/Perl/lib C:/Perl/site/lib .) at C:\DOCUME~1\ADMINI~1\Desktop\N1 sw\dumpxip.pl line 9
Compilation failed in require at C:\DOCUME~1\ADMINI~1\Desktop\N1\sw\dumpxip.pl line 9.
BEGIN failed--compilation aborted at C:\DOCUME~1\ADMINI~1\Desktop\N1 sw\dumpxip.pl line 9.
I’m sure I’m not installing it properly.
Any ideas? Has anyone else sucesfully run this?

wm2003 file protection

hello !
is it possible to disable the file protection of the windows files ?
'cause I want to copy a file in to the "Windows" directory of my SDA ... and each time I restart the phone it disapears.
why I want to do that ? .. I want to replace the "keybddr.dll" driver, because .. i updated the rom of the SDA with a Qtek ROM... and the joystick doesn't work anymore, i tryed to downgrade to an older ROM... but it doesn't work , i tryed to put the keyboard driver in to a newer Qtek ROM doing this -> http://www.spv-developers.com/forum/showthread.php?t=394 but when i try to type this command "typhoonnbfdecode.pl -r os=keybddr.dll.nb -c nk.nbf" the perl script gives me this error:
"Can't locate loadable object for module XdaDevelopers::NbfUtils in @INC (@INC co
ntains: C:/Perl/lib C:/Perl/site/lib .) at typhoonnbfdecode.pl line 76
Compilation failed in require at typhoonnbfdecode.pl line 76.
BEGIN failed--compilation aborted at typhoonnbfdecode.pl line 76. "
the problem is that i can't compres back the "nb" to a "nbf" file, and i don't know perl at all...
i don't know what to do ..
please excuse my bad english

How to get binaries of files stored in ROM?

Does anybody know how to extract binaries of EXE's & DLL's packaged in ROM?
Particularly, I'd like to reverse engineer connmgr.exe to understand how it performs dirty things to other NDIS adapters when connected over RNDIS. Possibly, I could neutralize it somehow. By the way, is the source code for the Connection Manager available to anybody outside of MS?

http://www.xs4all.nl/~itsme/projects/xda/dumprom.html
Best of luck.

fawstahcu,
I tried this command:
dumprom.exe RUU_signed.nbh
and got:
unable to determine loading offset for RUU_signed.nbh
Does this tool support RUU images?

Solution
OK, here comes the solution
NBHextract.exe RUU_ROM_IMAGE.nbh
java -jar aChefs.jar -1 06_OS.nb
rmdsflsh.pl -d files imgfs_raw_data.bin

folderol said:
OK, here comes the solution
NBHextract.exe RUU_ROM_IMAGE.nbh
java -jar aChefs.jar -1 06_OS.nb
rmdsflsh.pl -d files imgfs_raw_data.bin
Click to expand...
Click to collapse
hi,
i encounter error on the last part.
C:\WM6 Repacked>d:\Perl\bin\perl.exe rdmsflsh.pl -d files\ imgfs_raw_data.bin
could not find imgfs header
any idea what is the causes and resolution? thanks.
cheers,
vibranze

A fair chunk of the WM sources are available with Microsoft Platform builder, under a shared source licence. Have you had a look if the component you are looking for is under that release?

gamefreaks said:
A fair chunk of the WM sources are available with Microsoft Platform builder, under a shared source licence. Have you had a look if the component you are looking for is under that release?
Click to expand...
Click to collapse
Hi gamefreaks,
Actually I'm looking for latest version of Esmertec Jeode and I'm not sure what is the platform builder.
I'm not a developer btw
Cheers,
Vibranze

[PROJ] ANDROID on XDAIIi (DOPOD 699)

I successfully boot (only) the ANDROID on XDA IIi (DOPOD 699).
It takes a minute to boot up and is only main screen.
It doesn't work anything at all ( except the reset button )
At boot up it shows :
-------lot's of stuff ------
init: HOW ARE YOU GENTLEMEN
init: reading config file
init: device init
ANDROID sh: can't access tty; job control turned off
Here is a small tut, how to get Android on the Alpine: (THANKS TO domi007!!!)
1. Boot up a linux PC machine, and get an SD card which you want to use for Android.
2. Download this zip in Linux:
http://www.4shared.com/file/110429839/cf8f50ee/HTC_Alpine_linux_boot_.html
3. You will find in it an image file, called android.img. Unzip this (leave the other files in the zip, we won't need them)
4. Attach your SD card to the Linux machine, but DO NOT mount it.
5. Then run the command:
dd if=/your-folder/android.img of=/dev/sdb1
sdb1 symbolizes here your SD card.
After it is complete grab this file, and unzip it to the Main storage from your Alpine.
http://www.4shared.com/file/110433713/44ed559b/android_3_.html
Insert the SD card into the uni, and run haret.exe, then wait.
Now I trying to compile the kernel (zImage) 2.6.23 or greater, but I have a lot of errors .
I will report the progress here
ErrHec
SUPPORT ANDROID ON XDA2i

Nice Job =D

go go go go!!!!

Wow!!

is it android 1.0?? or just 0.8?

It's only 0,8 when I try 1.0 it does boot but is not show nothing on display.
I need the kernel (zImage) greater then 2.6.23 , but i have a lot of trouble compiling it.

last time i compiled sucessfully after i comment 3 line regarding the phone signal... im not sure which one but i will try to find the SD card back... My alpine screen broken, so its been long time didnt play with it....

thanx
you guys, know how to make us happy....
thx in advance

What's error you have got? May be you should be use specific arm-gcc? Actually I made it like that... and was compiled quite well.
export CROSS_TARGET=arm-eabi
make ARCH=arm CC=${CROSS_TARGET}-gcc CXX=${CROSS_TARGET}-g++ AR=${CROSS_TARGET}-ar AS=${CROSS_TARGET}-as LD=${CROSS_TARGET}-ld RANLIB=${CROSS_TARGET}-ranlib READELF=${CROSS_TARGET}-readelf STRIP=${CROSS_TARGET}-strip OBJCOPY=${CROSS_TARGET}-objcopy bzImage
guys, could you give me your kernel .config?
That mine, but that want not booting on my alpine.
http://rapidshare.com/files/241712076/kcnf.zip.html
@edit
and in addition, I tried to build experemental and 1.5 android kernels(2.6.27).

http://www.4shared.com/file/110777742/b2ebd271/HTCALPINE_DEFCONFIG.html
Where is the tutorial for your way compiling the kernel?

Code:
#!/bin/sh
#######
#Actually, I getting it by this way...
#cd android
#repo init -u git://android.git.kernel.org/platform/manifest.git
#repo sync
#######
#But, if you want to get only tools, you must try this...
# git clone git://android.git.kernel.org/platform/prebuilt.git
#where your android tools
export CROSSTOOLS=/usr/src/android/prebuilt/linux-x86/toolchain/arm-eabi-4.3.1/bin
export PATH=$CROSSTOOLS/bin:$PATH
export CROSS_TARGET=arm-eabi
export CC="${CROSS_TARGET}-gcc"
export CXX="${CROSS_TARGET}-g++"
export AR="${CROSS_TARGET}-ar"
export AS="${CROSS_TARGET}-as"
export LD="${CROSS_TARGET}-ld"
export RANLIB="${CROSS_TARGET}-ranlib"
export READELF="${CROSS_TARGET}-readelf"
export STRIP="${CROSS_TARGET}-strip"
###############
I'm confused, but you really use 2.6.19-hh10, or where you've got this one?

Referring to OPIE that (partially) works on my Alpine is the kernel 2.6.21 ?

errhec said:
Referring to OPIE that (partially) works on my Alpine is the kernel 2.6.21 ?
Click to expand...
Click to collapse
Well, this is not android kernel. I did build linux-2.6.21-hh nearly two years ago. And I have got only warnings while compilation your .config. In this kernel version alpine does have specified implementation there ./arch/arm/mach-pxa/htcalpine/, therefore it kind of works. That should be ported to the android kernel.

I try to make android zImage but it needs patch-ing.
I can't make a working one ;(
Now I want to try with the linux kernel higher then 2.6.23.
Also I seek for the pxa pach for android.

Great to see how my tutorial works also for the Alpine.
I will also keep up my work, hopefully we will be able to boot Android on every PXA-based HTC machine.
DOMy

Tha android 2.0 doesn't work in alpine?

did anyone continue with this?

android?
Oh,I think,If Alpine can't use Windows Mobile, android also can use

[HSPL/SSPL][DISCUSSION] Hacking SPL [SSPL works - now flashing HSPL/closed testing]

Well this is just my second HTC device.. But has anybody ever wondered why information on creating HardSPL and stuff is seeded sparely? We're just waiting until olipro, cmonex (bless their work!!! ) or some other mod finishes the Hard-SPL.
If this is an illegal talk or something then just delete my thread..
I find this is an interesting topic.. So why not colaborate with each other and report status on this, so that we eventually could hack something together..? At least for the sake of interest.. I ever liked hacking embedded devices, but my knowledge in these things is not so good. Would like to dig more into this and solve this kind of mystery
I have found interesting bits of information at the following places:
http://wiki.xda-developers.com/index.php?pagename=Wizard_ROM_Layout
http://forum.xda-developers.com/showthread.php?t=334667
http://www.xs4all.nl/~itsme/projects/xda/tools.html
http://wiki.xda-developers.com/index.php?pagename=SPL%20Questions%3F
http://forum.xda-developers.com/showthread.php?t=501871
The first step seems to be extracting the stock SPL.. I read something about pmemmap, a tool to show the memory map of the phone and pmemdump, a tool to dump memory areas of the phone to disk.
This rises the question of how to find out the address, where the SPL lies in our LEOs and then how to dump it?
If there are any constructive comments on this, everybody is invited to add his thoughts here, or point out the right way
Update:
SPL seems to be dumped, credits go to cmonex. - Now it's time to investigate further steps. Currently looking into it.
Okay.. You can read the SPL from your LEOs with the following command:
pmemdump 0x8ff00000 0x80000 dump.bin
But i have attached it here for your convenience.
Update 2:
For all those people that are curious about the technical background behind SPL hacking i am giving an update of my research now (of course cmonex will finish that work, and she will do it good, but as you probably know, i want to get into that kind of stuff):
I managed to get an MFG SPL (the SPL that isn't shipped with stock ROMs and that is used by HTC to debug) now. This type of SPL is needed to do any further steps regarding flashing Hard-SPL.
This may not be complete or even correct, so if you have any information to add, please share it with us.
As far as i understood the rough procedure now would be to relocate the SPL and its .data section in RAM (that means all the data referenced by code) to a new address. This is needed because the address where the SPL and its data section lie now is protected by the MPU (Memory Protection Unit?), which is set up by the radio bootloader, which is running on another CPU (the ARM9). Every write there will lead to nowhere and as our SPL would execute, it would crash, because of missing data. This is why we need to relocate our SPL to a new address by changing all the hard coded references to data (such as strings etc.) in code.
I need someone to comment on the process of changing all the hard coded addresses to another one. I don't know how to do it yet.
If this is done and all code runs well (there could be further glitches, such as the NAND write/read issue - please comment on that) we would use JumpSPL to load our SPL in RAM into an unused address and execute it. This would give us all the tools needed for flashing HSPL.
I have attached a copy of the MFG SPL i obtained (if this is against any rules, please remove it) together with an analysis in IDA32, which i just made (for the lazy ones).
It would be nice, if we could get some further info here.
Btw.: I found this funky stuff on the PSAS forum. It is a tool that actually simulates an ARM processor and let's you step through the instructions. Really nice, if you want to understand what's going on.
If you want to flash another language ROM to your HTC device you can go here. Please don't use this thread for such requests. Let's keep it about SPL talking. Thanks

Thanks to share this information with the comunity.

Feel free to investigate and and have a go for it.
The itsme utils are extremely useful,
You could also read the posts from Pof, Des, jockeyw2001 regarding this subject.
After you got your SPL, you can read Jockyw2001's posts regarding bootloaders dissembling in IDA pro.
The actual patching of the SPL isn't the hardest part, Cmonex once told that the development of the Soft SPL was trickiest part.
Regards, and good luck.
EqX

Thank you.. I will have a go for it, when i have more time. It's over for today..

Very interesting thread. I would like to know how they are trying to hack the SPL. With due respect to Olinex, we rely on them but there must be also people around who can give a hand to accelerate the process. No ?

on a related note i tried to make my hd2 supercid without using QMAT so that i could flash wwe official rom...
i followed these steps and i got to Ad.7) part where i needed to run this command:
perl typhoonnbfdecode.pl -p cardid=<cardid> -p keys=tornado -p seclevel=0 -d goldcard.img
when i hit enter i get this message:
C:\itsutilsbin>perl typhoonnbfdecode.pl -p cardid=0085007b9394eb0000000000000000
00 -p keys=tornado -p seclevel=0 -d goldcard.img
Can't locate XdaDevelopers/NbfUtils.pm in @INC (@INC contains: C:/Perl/site/lib
C:/Perl/lib .) at typhoonnbfdecode.pl line 81.
BEGIN failed--compilation aborted at typhoonnbfdecode.pl line 81
if anybody can point me to the right direction or tell me what am i doing wrong i would be very grateful.

mr.vandalay said:
on a related note i tried to make my hd2 supercid without using QMAT so that i could flash wwe official rom...
i followed these steps and i got to Ad.7) part where i needed to run this command:
perl typhoonnbfdecode.pl -p cardid=<cardid> -p keys=tornado -p seclevel=0 -d goldcard.img
when i hit enter i get this message:
C:\itsutilsbin>perl typhoonnbfdecode.pl -p cardid=0085007b9394eb0000000000000000
00 -p keys=tornado -p seclevel=0 -d goldcard.img
Can't locate XdaDevelopers/NbfUtils.pm in @INC (@INC contains: C:/Perl/site/lib
C:/Perl/lib .) at typhoonnbfdecode.pl line 81.
BEGIN failed--compilation aborted at typhoonnbfdecode.pl line 81
if anybody can point me to the right direction or tell me what am i doing wrong i would be very grateful.
Click to expand...
Click to collapse
Did you install activeperl ?

yes , however now i see that packages Crypt-DES and XdaDevelopers-NbfUtils are not installed and i can't find them...
i select "all packages" but i can't find those two, and i tried by adding repositories but it doesn't download anything.
can i somehow add them manually?

mr.vandalay said:
yes , however now i see that packages Crypt-DES and XdaDevelopers-NbfUtils are not installed and i can't find them...
i select "all packages" but i can't find those two, and i tried by adding repositories but it doesn't download anything.
can i somehow add them manually?
Click to expand...
Click to collapse
You need to use the exact version of ActivePerl as stated on that page and you must use Windows.
You should also know that you cant use this goldcard image for your LEO with the typhoon option. This is for another HTC device.. If you look into that pl file you see that there is no entry for LEO. We need the LEO key.

I replied to your PM about dumping SPL 0x95000000

mr.vandalay said:
on a related note i tried to make my hd2 supercid without using QMAT so that i could flash wwe official rom...
i followed these steps and i got to Ad.7) part where i needed to run this command:
perl typhoonnbfdecode.pl -p cardid=<cardid> -p keys=tornado -p seclevel=0 -d goldcard.img
when i hit enter i get this message:
C:\itsutilsbin>perl typhoonnbfdecode.pl -p cardid=0085007b9394eb0000000000000000
00 -p keys=tornado -p seclevel=0 -d goldcard.img
Can't locate XdaDevelopers/NbfUtils.pm in @INC (@INC contains: C:/Perl/site/lib
C:/Perl/lib .) at typhoonnbfdecode.pl line 81.
BEGIN failed--compilation aborted at typhoonnbfdecode.pl line 81
if anybody can point me to the right direction or tell me what am i doing wrong i would be very grateful.
Click to expand...
Click to collapse
sorry this will never work on Leo. I can make the goldcard for you though (for a small donation)

Thanks a lot cmonex, for your PM, hope to flash my Holand device onto a WWE device to better understud.

just wondering, based on this, is it possible for me to flash my o2 branded device with the stock wwe rom?

Tung_meister said:
just wondering, based on this, is it possible for me to flash my o2 branded device with the stock wwe rom?
Click to expand...
Click to collapse
Yes, it should be

umh... I can't dump... I'm wondering ...why?
If I enter "pmemdump 0x95000000 0x80000 spl.nb" I get a 0bytes file, but if I don't enter the file name I'm seeing the errors that it gets.
Anyway, this is what I'm getting:
Code:
G:\itsutilsbin>pmemdump.exe 0x95000000 0x80000
ERROR: ITReadProcessMemory - Invalid access to memory location.
95000000: * * * * *
ERROR: ITReadProcessMemory - Invalid access to memory location.
ERROR: ITReadProcessMemory - Invalid access to memory location.
ERROR: ITReadProcessMemory - Invalid access to memory location.
ERROR: ITReadProcessMemory - Invalid access to memory location.
ERROR: ITReadProcessMemory - Invalid access to memory location.
ERROR: ITReadProcessMemory - Invalid access to memory location.
ERROR: ITReadProcessMemory - Invalid access to memory location.
Someone can help?

kholk said:
umh... I can't dump... I'm wondering ...why?
If I enter "pmemdump 0x95000000 0x80000 spl.nb" I get a 0bytes file, but if I don't enter the file name I'm seeing the errors that it gets.
Anyway, this is what I'm getting:
Someone can help?
Click to expand...
Click to collapse
You're not the only one. Currently working it out with cmonex.

just wanna say that cmonex helped me and i just flashed wwe rom on my german hd2

mr.vandalay said:
just wanna say that cmonex helped me and i just flashed wwe rom on my german hd2
Click to expand...
Click to collapse
Welcome to the club of dutch rom refugees

cmonex helped me and i just finish to flash my NEW WWE ROM.
Thank you mate.
To all who want to flash now, be in touch with this guy, he is going to help you really fast.

cidriver said:
cmonex helped me and i just finish to flash my NEW WWE ROM.
Thank you mate.
To all who want to flash now, be in touch with this guy, he is going to help you really fast.
Click to expand...
Click to collapse
She.. She's female!