Bug in viewimgfs.exe with Trinity P3600 ROM - P3600 General

I'm trying to extract the tnetw1251.dll from the Trinity P3600.
The ROM Version is 1.23.405.2 dated 03/11/07.
I followed the instructions in extracting the ROM from the device from the following webpage :
http://wiki.xda-developers.com/index.php?pagename=Hermes_HowtoDumpRom
First I got the imgfs partition (Part02) info via:
> pdocread -w -d FLASHDR -p Part02 -t
real nr of sectors: 98816 - 48.25Mbyte (0x3040000)
I then extracted Part02:
> pdocread -w -d FLASHDR -p Part02 0 0x3040000 Part02.raw
CopyTFFSToFile(0x0, 0x3040000, Part02.raw)
Next, I extracted the files:
> viewifgfs Part02.raw
Then I looked at the dump\TNETW1251\TNETW1251.dll file and found that it is about 10K larger than the same file listed in the ROM of the device:
08/27/2007 11:21 AM 512,000 TNETW1251.dll
On the ROM:
03/11/2007 16:47 501,296 TNETW1251.dll
I then looked at the dump\TNET1251 directory and saw 4 segment files:
08/27/2007 11:21 AM 463,244 S000
08/27/2007 11:21 AM 16,896 S001
08/27/2007 11:21 AM 18,720 S002
08/27/2007 11:21 AM 2,228 S003
With a HEX edit and comparison utility, I saw the layout of the extracted TNETW1251.dll file:
Addr Size Description
00000000 000000D0 (208) MZ Header
000000D0 00000330 (816) PE Header
00000400 0007118C (463,244) S000 with many relocations
0007158C 00000074 (116) Padding
00071600 00004200 (16,896) S001 with some relocations
00075800 00004920 (18,720) S002 all relocations
0007A120 00002EE0 (12,000) Looks like garbage data
-----------------------------------------------------------------------
0007D000 (512,000) Total Size of file
It appears that the ~2K S003 segment is missing and in it's place is a 12K garbage segment.
Can anyone assist with this problem?
Thanks,
((&->

Related

Please help with extracting files from non-xda ROM CE 4.0

I did a dump of non-xda device running CE 4.0 .net and am trying to extract the individual files. Here is the first 3F bytes:
00000000 4230 3030 4646 0A00 0022 0068 F5F5 0100 B000FF...".h....
00000010 0022 0010 0000 0057 0700 0090 9090 90E9 .".....W........
00000020 0F2F 0000 9090 9090 9090 9040 0022 0008 ./[email protected]"..
00000030 0000 0087 0200 0045 4345 432C B217 8200 .......ECEC,....
I have tried to used splitrom.pl to put convert to a format that dumprom.exe would like.
"splitrom.pl dtr.bin -wo out.bin" creates empty binary file
and..
Webpad_CE4>splitrom.pl dtr.bin
B000FF image: 00220000-0217f568, entrypoint: 00222f18
!!! your rom is not known to me: md5: a520f0d1093b36f0a3cfd9323ea99155
this bootloader seems to be No bootloader present
no xipchain found
Microsoft's viewbin.exe yields plenty of good results, but I am not sure how to apply them to splitrom.pl and dumprom.exe. Knowing starting starting offsets and lengths of individual files in ROM, can I manually extract/decompress files from ROM. Do I need the XIP chain to do this?
Thanks!
Success using dumprom on B000FF file type (non-xda)
Had to convert the nk.bin to a file that dumprom recognized using the platform builder tool "cvrtbin.exe" This created a nk.nb0 file that was dumped with dumprom.
Image start and length parameters for cvrtbin was obtained using viewbin.exe
cvrtbin.exe -r -a 00220000 -l 01F5F568 -w 32 nk.bin
Then I could dump the files using dumprom:
dumprom -3 nk.nb0 -d c:\dump
Had to use -3 decompression option even though this is a win ce 4.0 .net rom.

Anyone tried WM5 backup/restore procedure?

B.R. has made this procedure to backup original Artemis ROM. Has anyone successfully tried this and managed to restore? If so, I and many of us would be so glad if someone could post a link to a original (Dutch) WM5 HTC Rom...
Hi guys, I have been looking for a while now how to backup the Artemis ROM. I put up a little
tutorial, hope you guys think it is usefull.
----------------------------------------------------------
1. Download ITSUTILS by Itsme: http://nah6.com/~itsme/itsutilsbin-20070323.zip
2. Extract the files to a directory.
3. You will find pdocread.exe inside the extracted directory.
4. Make a directory somewhere on a disk, where you want to save the parts to lets say for example
C:\ROM
5. You have to type these commands in the DOS command window (Click Start -> Run..., type CMD on
the Open box then Click OK)
Backup the following parts like this:
SPL:
pdocread -n 0 -b 0x20000 0 0x100000 C:\ROM\bdk0-spl.nb
CID:
pdocread -n 1 -b 0x10000 0 0x40000 C:\ROM\bdk1-0-cidarea.nb
GSM Data:
pdocread -n 1 -b 0x4000 0x10000 0x4000 C:\ROM\bdk1-4-gsmdata.nb
GSM Radio ROM:
pdocread -n 1 -b 0x40000 0x140000 0x280000 C:\ROM\bdk1-5-gsmcode.nb
Splash Screen:
pdocread -n 1 -G 0x30000 -b 0x10000 0xF0000 0x30000 C:\ROM\bdk1-f-splash.nb
Extended ROM:
pdocread -h 0x[HANDLE] 0 0xf00000 C:\ROM\ExtROM.nb
Change [HANDLE]. You can get the handle by typing pdocread -l Watch out! the Handle is different every time.
Locate 7.99Mb or 14.9Mb depend of model,
pdocread -l
Example:
If
handle ee9de576 7.99MB 0x7fe000
the correct sintax is:
pdocread -h 0xee9de576 0 0x7fe000 c:\rom\ExtROM.nb
OS (for HTC P3300):
pdocread 0x0 0x3900000 c:\ROM\OS.nb
furthermore they are different from Artemis derivations
for ARTE100 (HTC P3300) it is 0x3900000
for ARTE200 (O2 Orbit) it is 0x3500000
for ARTE300 (LOVE, i.e Dopod M700) it is 0x3E00000
B.R.
Click to expand...
Click to collapse

Problem Save IMGFS to DiskOnChip with pdocwrite

Use utilities itsutilsbin_20070705 http://www.xs4all.nl/~itsme/projects/xda/tools.html
Command pdocwrite.exe -d dsk1: -p Part02 -v imgfs.raw 0x000000 0x2d0f400
show message: "ERROR: ITWriteDisk - The disk is protected from record."
Device: Asus P526 OMAP850 ROM 6.0.9 RUS
PS: As flashing IMGFS & GSM to Asus P526?

612c - How to [pdocwrite diskimage_Ver.nb0] or flash.dio???

Hello,
I'd like to know please if someone could answer this important question
How can I safely write the diskimage_Ver.nb0 back to my 614c/612c PDA?
as far I was told there is 2 methods that I can use
I have the following 3 questions, I hope someone could answer:
1- Rename diskimage_Ver.nb0 to flash.dio and put it in an SD Card and enter the SD BootLoader option and it will restore it (is this correct?)
2- I used the following commands to create diskimage_Ver.nb0
3- If I rename diskimage_Ver.nb0 to FLASH.NBF (not flash.dio) can I use the HP update utility to update the flash without using an SD Card?
.\Tools1\pdocread -l
.\Tools1\pdocread -t
.\Tools1\pdocread 0x0 0x5000000 diskimage_Ver.nb0
Then there should be a way to write the image back to the PDA using the following command:-
pdocwrite diskimage_Ver.nb0 (but I am not sure what are the correct parameters to write next to pdocwrite)!
could someone please help me understand how I can do it safely. I am really stuck
Thanking you in advance.
anything I am stuck I wana know how I can restore the image file please !
Ok here is where I am at at the moment
1- backup pda images
2- restore pda images <--- dangerous
using the latest pdocread and pdocread itsutilsbin-20080731-2.zip from http://www.xs4all.nl/~itsme/projects/xda/tools.html
CODE79.92M (0x4fec000) TRUEFFS
| 1.31M (0x14fc00) Part00
| 1.88M (0x1e0000) Part01
| 76.73M (0x4cbc000) Part02
127.88M (0x7fe0000) TRUEFFS
| 1.31M (0x14fc00) Part00
| 1.88M (0x1e0000) Part01
| 76.73M (0x4cbc000) Part02
24.98M (0x18fc000) TRUEFFS
| 1.31M (0x14fc00) Part00
| 1.88M (0x1e0000) Part01
| 76.73M (0x4cbc000) Part02
7.61G (0x1e6e00000) DSK1:
| 7.60G (0x1e6a00000) Part00
The follwing 2 methods is what I used to back up the 3 parts, both methods produced exactly the same file lengths, I am not sure if one method is more accurate than the other, but both methods produced the exact file lengths.
Method 1
pdocread -w -d TrueFFS -b 0x800 -p Part00 0 0x14fc00 Part00.raw
pdocread -w -d TrueFFS -b 0x800 -p Part01 0 0x1e0000 Part01.raw
pdocread -w -d TrueFFS -b 0x800 -p Part02 0 0x4cbc000 Part02.raw
Method 2
pdocread -w -d TrueFFS -p Part00 0 0x14fc00 Part00.raw
pdocread -w -d TrueFFS -p Part01 0 0x1e0000 Part01.raw
pdocread -w -d TrueFFS -p Part02 0 0x4cbc000 Part02.raw
I have also backedup diskimage_Ver.nb0, to show the correct address I typed :-
pdocread -t
To back up I type
pdocread 0x0 0x5000000 diskimage_Ver.nb0
I tried this line:-
pdocwrite part02.raw -w -d TRUEFFS -p Part02 0 0x4cbc000
It produced the following error:
pdocwrite -w -d TRUEFFS -p Part02 0 0x4cbc000 Part02.raw
C:\tools>pdocwrite part02.raw -w -d TRUEFFS -p Part02 0 0x4cbc000
CopyFileToTFFS(part02.raw:0, 0, 04cbc000)
ERROR: ITWriteDisk - The media is write protected.
this is just a guess but could the reason I am getting this error be because the PDA CID is locked? any ideas how I can write the file back to the PDA now!
Thanks
just download the original image from this forum and use the sd update method ... its safe
Hello,
I have the same problem. I have dumped my ROM on ipaq 614c with pdocread and I want to write it on my phone.
Anyone know how I can .raw files to flash.dio?
I see in a post I could use osnbtool v1.41 to do this but how?
I see in a post I could use osnbtool v1.41 to do this but how?
Click to expand...
Click to collapse
Hi where did you read about the osnbtool v1.41 ? can you post a link please, thanks
Hello,
you say it here:
http://forum.xda-developers.com/showthread.php?t=404657&page=5
But I have succeded to dump my ROM. thank.

Backup and restore HP Ipaq 614

Today, I was trying to backup my HP Ipaq 614. To do so, I found this thread:
http://forum.xda-developers.com/showthread.php?t=427507
and this post:
http://forum.xda-developers.com/showpost.php?p=2832898&postcount=2
But the problem is that I don't get the parts. Everything seems to work fine, no errors or something, but no raw files.
I'm working on a Windows 7 and I used CMD in administrator mode.
An other question is what I have to do with those raw files. Do I have to put them in a kitchen and if so, which kitchen do I have to use?
Thanks in advance
Solution
After a lot of research I found a solution.
In this topic I found that there is a tool to dump the rom to diskimage_ver.nb0. This file have to be renamed to flash.dio and then it's just the normal way of flashing with an SD card.
About the first problem, not necessary but anyway, you have to typ
Code:
CD /D C:\itsutilsbin\
pdocread.exe -w -d TRUEFFS -p Part00 0 0x14fc00 Part00.raw
pdocread.exe -w -d TRUEFFS -p Part01 0 0x1e0000 Part01.raw
pdocread.exe -w -d TRUEFFS -p Part02 0 0x4cbc000 Part02.raw
And not C:\itsutilsbin\pdocread.exe -w -d TRUEFFS -p Part00 0 0x14fc00 Part00.raw etc.

Categories

Resources