I have a herald with ipl 1.006.1001 and spl 1.006.1001-MFG,
so i use "pdocread -n 0 -b 0x20000 0 0x100000 bdk0-spl.nb" to dump this SPL,can this SPL to help someone to make HARD SPL orUSPL?
use "pmemdump 0x82000000 0x800 ipl.nb" to dump IPL
SPL can b flashed in Super CID state.pdocwrite doesn't do that..
File is Corrupted
Help
use winrar
Still no anwser to the question if there could be made a Hard-SPL out of this MFG.. Would be sweet!
how to flash SPL at Botloadr mode?
please……always stop at bootloader，help！
You can't. Your bootloader will not allow it.
B.R. has made this procedure to backup original Artemis ROM. Has anyone successfully tried this and managed to restore? If so, I and many of us would be so glad if someone could post a link to a original (Dutch) WM5 HTC Rom...
Hi guys, I have been looking for a while now how to backup the Artemis ROM. I put up a little
tutorial, hope you guys think it is usefull.
----------------------------------------------------------
1. Download ITSUTILS by Itsme: http://nah6.com/~itsme/itsutilsbin-20070323.zip
2. Extract the files to a directory.
3. You will find pdocread.exe inside the extracted directory.
4. Make a directory somewhere on a disk, where you want to save the parts to lets say for example
C:\ROM
5. You have to type these commands in the DOS command window (Click Start -> Run..., type CMD on
the Open box then Click OK)
Backup the following parts like this:
SPL:
pdocread -n 0 -b 0x20000 0 0x100000 C:\ROM\bdk0-spl.nb
CID:
pdocread -n 1 -b 0x10000 0 0x40000 C:\ROM\bdk1-0-cidarea.nb
GSM Data:
pdocread -n 1 -b 0x4000 0x10000 0x4000 C:\ROM\bdk1-4-gsmdata.nb
GSM Radio ROM:
pdocread -n 1 -b 0x40000 0x140000 0x280000 C:\ROM\bdk1-5-gsmcode.nb
Splash Screen:
pdocread -n 1 -G 0x30000 -b 0x10000 0xF0000 0x30000 C:\ROM\bdk1-f-splash.nb
Extended ROM:
pdocread -h 0x[HANDLE] 0 0xf00000 C:\ROM\ExtROM.nb
Change [HANDLE]. You can get the handle by typing pdocread -l Watch out! the Handle is different every time.
Locate 7.99Mb or 14.9Mb depend of model,
pdocread -l
Example:
If
handle ee9de576 7.99MB 0x7fe000
the correct sintax is:
pdocread -h 0xee9de576 0 0x7fe000 c:\rom\ExtROM.nb
OS (for HTC P3300):
pdocread 0x0 0x3900000 c:\ROM\OS.nb
furthermore they are different from Artemis derivations
for ARTE100 (HTC P3300) it is 0x3900000
for ARTE200 (O2 Orbit) it is 0x3500000
for ARTE300 (LOVE, i.e Dopod M700) it is 0x3E00000
B.R.
Click to expand...
Click to collapse
EDIT: progress in post #10
I'm trying to reconstruct my own Polaris ROM for warranty purposes. It's been a quest, since the information is very fragmented. So in this post I'm trying to get all the information together and also ask a question. So far I have managed to do this:
I have extracted the RAW files from my device with pdocread from this thread, executing from the command prompt:
Code:
pdocread -w -d FLASHDR -b 0x800 -p Part00 0 0x31f000 Part00.raw
pdocread -w -d FLASHDR -b 0x800 -p Part01 0 0x380000 Part01.raw
pdocread -w -d FLASHDR -b 0x800 -p Part02 0 0x4560000 Part02.raw
pdocread -w -d FLASHDR -b 0x800 -p Part03 0 0x8660000 Part03.raw
That gave me Part00.raw, Part01.raw, Part02.raw and Part03.raw.
Then I put Part01.raw and Part02.raw in the BaseRom folder of the Kaiserkitchen_01-20-08, according to this thread. I also put the RUU_signed.nbh file there from a ROM I downloaded. That happens to be a 1.28.404.2 Dutch ROM I downloaded from here, my current ROM is Dutch 1.27.404.1, so not the same.
Then I choose option e; b and finally d in the Kaiser Kitchen (running KAISERKITCHEN.CMD) and it creates an OS.NB file and a XIP folder in the ROM folder.
I would like to proceed with extracting the OS.NB file (that's what I need right?) using ImgfsTools 2.1rc2 using the commands according to udk's post:
Code:
nbsplit -kaiser OS.nb
imgfsfromnb OS.nb.payload imgfs.bin
imgfstodump imgfs.bin
and then use package tool to create the OEM and SYS folders that can be used in the Polaris kitchen.
However, when I do a binary compare of the OS.NB file created by the Kaiser Kitchen and the OS.NB file I can extract from the 1.28.404.2 RUU_signed.nbh (using NBH extract) they are exactly the same! So somehow, the Kaiser Kitchen is not taking anything from my dumped ROM's RAW files, but everything from the downloaded 1.28.404.2 RUU_signed.nbh. What am I doing wrong?
Thanks!
deechte said:
I also put the RUU_signed.nbh file there from a ROM I downloaded. That happens to be a 1.28.404.2 Dutch ROM I downloaded from here
Click to expand...
Click to collapse
I think you have to use an original WWE baseROM, but i might be wrong.
As a ROM cooking newbie, I don't actually understand why the RUU_signed.nbh is needed anyway. Isn't everything present in the dump I made? So how can my reconstructed ROM be identical to the original if it contains parts from another ROM?
Sorry, still learning...
If you are sending your phone back for warranty reasons you will need to put it back to all it's origional settings...
You will need to flash the origional Splash Screen, and flash the origional rom (assuming the Netherlands is the country you purchased the phone from, you will need the dutch one). The origional Dutch rom can be found here - http://forum.xda-developers.com/showthread.php?t=416165
You will then need to flash your origional SPL. How to flash origional SPL can be found here - http://forum.xda-developers.com/showthread.php?t=381600
Good Luck
tvrtim said:
You will need to flash the origional Splash Screen, and flash the origional rom (assuming the Netherlands is the country you purchased the phone from, you will need the dutch one). The origional Dutch rom can be found here - http://forum.xda-developers.com/showthread.php?t=416165
You will then need to flash your origional SPL. How to flash origional SPL can be found here - http://forum.xda-developers.com/showthread.php?t=381600
Click to expand...
Click to collapse
Thanks for your reaction. The problem is that the dutch ROM in that thread is not the same as mine, neither is the radio ROM. So it won't take my device back to it's original settings. That's why I wanted to use that one in combination with the raw files from my own device.
SPL is the next problem. I know I have to go back to the original one too. However, the thread only offers SPL 1.25.0000 and 1.28.0000, mine is supposed to be 1.27.0000.
have you made any progres from your last post ?
i would be interested in this procedure aswell.
Ravest.
Unfortunately not. I'm still hoping some experienced cook will take a look at it. I think it would be nice if there would be a complete procedure for how to do this in this post. Right now it's a big puzzle.
Why do you really want to get to the original ROM? Is there a chance that HTC knew wich Radio version they did put on your Polaris?
No offence btw... I really don't know
EbOoZ said:
Is there a chance that HTC knew wich Radio version they did put on your Polaris?
Click to expand...
Click to collapse
I'm guessing they can know that. Futhermore, when I understand how to do this I can proceed modifying ROM's. I'd just like to learn.
Okay, it appeared I was doing some thing wrong. First of all, the pdocread commands were wrong cause I copied them from the Kaiser thread. You have to execute
Code:
pdocread.exe -l
first, with your Polaris connected via USB (no USB-hubs!). Then read the numbers that appear there, that appear coloured in this thread.
So then I had to do:
I have extracted the RAW files from my device with pdocread from this thread, executing from the command prompt:
Code:
pdocread -w -d FLASHDR -b 0x800 -p Part00 0 0x[COLOR="Red"][B]31f000[/B][/COLOR] Part00.raw
pdocread -w -d FLASHDR -b 0x800 -p Part01 0 0x[COLOR="Red"][B]3c0000[/B][/COLOR] Part01.raw
pdocread -w -d FLASHDR -b 0x800 -p Part02 0 0x[COLOR="Red"][B]5d40000[/B][/COLOR] Part02.raw
pdocread -w -d FLASHDR -b 0x800 -p Part03 0 0x[COLOR="Red"][B]6f40000[/B][/COLOR] Part03.raw
That gave me the correct Part00.raw, Part01.raw, Part02.raw and Part03.raw.
Then I put Part01.raw and Part02.raw in the BaseRom folder of the Kaiserkitchen_01-20-08, according to this thread. I also put the RUU_signed.nbh file there from the official WM6.0 RUU_Polaris_HTC_WWE_1.25.405.1_radio_sign_25.65.30.04_1.58.21.23_Ship ROM I downloaded. My current ROM is Dutch 1.27.404.1, so definitely not the same.
Then I executed KAISERKITCHEN.CMD and chose all the options subsequently, as described by jcespi2005 in this thread (so successively: e, b (for dumped ROM), c, b, choose BuildOS tab, Load ROM option, Choose the KaiserKitchen folder, Go > Option, Close BuildOS, in the HRT choose ROM Builder, Choose Kaiser in device list (then for Polaris enter POLA**** instead of KAIS**** under model ID, in the System button (looks like this: ...) choose the os-new.NB file from the Kaiser Kitchen folder, press the BuildROM button and save as RUU_signed.NBH). When I started this thread I only chose e and b and then ended the Kitchen, cause I thought that would be enough to reconstruct, but clearly it isn't.
I ended up with a RUU_signed.NBH that appears to contain MY dutch 1.27.404.1 ROM. How do I know that without having flashed it to my device yet? I extracted the nbh file again with NBHextract (you get 00_OS.nb, rename that to OS.nb) and dumped OS.nb with ImgfsTools 2.1rc2 using the commands according to udk's post:
Code:
nbsplit -kaiser OS.nb
imgfsfromnb OS.nb.payload imgfs.bin
imgfstodump imgfs.bin
Opened the /ImgfsTools/dump/ folder with package tools and it says it's a dutch ROM!
Now, I'll flash it to see if it works.
I hope this detailed howto makes it possible for others to reconstruct their ROM too. Let me know! Mind you, I only used the Kaiserkitchen to do this, no Polariskitchen. I think I will be needing that one though to make changes to ROM's in the future. But at least I have my original ROM now. Next step is to see if I can reconstruct the radio part too.
***** I'm no experienced chef, so the information above may not be right or complete. I'm just trying to get a grip on this stuff and to learn and I'm sharing my experiences. ROM cooking and flashing are your own risk. I take no responsability in any damage to your device.*****
Okay, I flashed my device to udk's Diamond R8, and then back to my own original ROM. Then hard reset and yeehaa, it works, almost. My device boots up normally and everything is back the way it was, in dutch. Except for some small things:
The HTC Home Plugin is absent on the today screen after the hard reset. I can select it to appear in the settings. Then it does appear, but it's totally empty. Just a grey empty space where all the tabs used to be. All other applications are in the start menu and appear to be working fine.
I wanted to see an overview of the listed ROM-version, radio-version etc, so went to settings > system. However the "device info" (I think that would be the english translation) option wasn't there anymore.
So somehow, my ROM is almost fine, but just not completely. What am I doing wrong?
Hello!
I try to flash my ROM with the WM6.1 ROM from this page.
Before FLASHING my ROM I would make a Image from my "original" ROM.
What Tool can I use to image my ROM and if anything goes wrong flash my "new" ROM again with my "old/ original" ROM?
Where can I get an GERMAN WM6 ROM for IPAQQ 614?
Thank you
I find a way to dump your rom:
1/ download this file:
http://nah6.com/~itsme/itsutilsbin-20080731-2.zip
and extract it C:\itsutilsbin.
2/ connect ipaq 614 to activsync
3/ copy itsutilsbin/itsutils.dll to your ipaq at the racine
4/ open a MS-DOS windows C:\itsutilsbin
5/ enter this command:
- pdocread -w -d TRUEFFS -p Part00 0 0x14fc00 Part00.raw
- pdocread -w -d TRUEFFS -p Part01 0 0x1e0000 Part01.raw
- pdocread -w -d TRUEFFS -p Part02 0 0x4cbc000 Part02.raw
6/ you obtain 3 files: Part00.raw, Part01.raw, Part02.raw
thank you
thank u. ok and then i've 3 files.
How can I flash back my original rom?
Any news on this? I've dumped also this 3 files! But how can I generate a flash.dio to recover my original German OS? Thanks
any answers? i like to know it too
from what i've been told the HP site has the original ROM (withs its 0.88v update) so if you flash to wm 6.1, and want to go back to your original HP rom, just runthe HP rom update.
I've onot tried this but some have and had no problems.
okay that helps the users with the englisch rom, but what is when you have a german rom?
Hi, I have got 2 mobile phones HTC Touch 3G T3238+. Both phones has got WM 6.5 PRO. First phone has got CE OS 5.2.21222 (build 21222.5.0.1), and second has got newest CE OS 5.2.21734 (Build 21734.5.0.20). I try to update phone, but windows update can't connect with server. How I can copy ROM form second phone ( CE OS 5.2.21734 (Build 21734.5.0.20)), and how to install it on the first phone? I try to use PDOCREAD (first i copy to the windows folder on the phone itsutils.dll, and install from cab file Cert_SPCS and EnableRapi; second I install mobireg, and change value on HKLM/Security/Policies/Policies/ in key 00001001, from 2 to 1. After that, I restart phone). I try to use PDOCREAD on two way, first: I use comand:
pdocread -l and I read value 0x13f000, and than pdocread -w -d FLASHDR -b 0x800 -p Part00 0 0x13f000 Part00.raw but I have got ERROR, that devoice is not redy . Second way, was pdocread -t and I read value 0x200, than pdocread –v 0x0 0x200 nk.nb0 , but don't work too.
PLEASE help me, and write what i have to do to copy rom from second phone, to first phone, or how to update first phone.