Hi,
I'm wondering if exists a method to extract the FileSystem image from the internal memory of a PDA/Smartphone.
I need it because I'm developing a forensic tool to extract all user's files and to try to recover deleted files as well.
All tools I tried till now (grab_it, dumprom, etc), seems to extract only operating system files (.dll, XIP and so on...).
Any help?
thanks a lot.
f.
Related
hi all, i have a .nb0 file which extracted from a wm5 ppc phone ( cant remember the model), and i need some help here to view this nb0 and extract some cab file from there.
This .nb0 consist a lot useful softwares, for example, soundcover (background sound during conversation), answering machine, conversation recorder and it works flawlessly on wm5 ppc phone.
Any expert??? please help.
**ok, I found the phone model, its GIGA, this is the nb0 file, latest update from thier website http://www.higiga.com/HigigaFrontStage/event/download/update/V1.12.80.zip
Hi,
Congratulations on extracting an .nb0 file. There are many methods to do so, depending on the device. Out of curiosity, which method did you use? Assuming that you correctly extracted the .nbo file of the CE image, you can treat it the same as an .nb or .bin file. use "viewimgfs *.nb0". the * of course meaning the name of your nb0 file like MSFLSH50_2.nb0, or what ever. This will give you all the files and what not. You can then use the DSMtool by bepe. This will organize all the files into packages. Then you can use cabwiz or some other program to create a cab installer. Good posts to follow are mamiach, bepe, buzzlightyear, and others, if you didn't already know. The dsmtool is found in bepe's WM5 kitchen. the viewimgfs and other imgfs tools were created by mamiach.
Regards,
Jason
thanks for your reply, i will try to use the tools to see whether i can extract anything out of it...thanks again.
I think i have successfully dump the rom to a dump folder, but i cannot see anything but only some dll files, what else i need to do??? do i need to use some tools to convert all these dll files to view the rom content?? please advise, thanks.
I tried to copy a bunch of .dll files from \Windows
I encountered a couple of problems doing that:
1. Some files are not shown on the PC in Windows Explorer though I've enabled viewing hidden and system files. However, these files are shown on the device in Resco Explorer, but can't be copied to e.g. \Storage Card
2. Some files are shown on PC in Windows Explorer but are in use and therefore can't be copied
What are the tricks to back up those files?
PS: My device (S710 Vox) is unlocked using M$ Security Manager
No tricks.
If you bothered to learn anything about your device you would know that these files are part of ROM and can not be copied out.
Don't mean to be rude but this was asked and answered many times before. Do a search on "ROM dump"
Yeah stupid me...
Dumped the ROM and got the files I want
(http://wiki.xda-developers.com/index.php?pagename=Vox_HowToDumpRom)
Actually I can't find coredll.dll in my ROM dump.
I used viewimgfs.exe to dump Part02. I can't use viewimgfs.exe on Part00 and Part01.
Is there another tool which can retrieve coredll.dll and perhaps other missing files?
Another question: can the S710 be flashed by using imgfs tools v1.82 to create the image(s) and a generic HTC flash tool?
Hello,
I am trying to copy a file (from my smartphone to SD card), which have a 'ROM' attribute set and... it is impossible - acces denied is showed (even in Resco Explorer, Total Commander). I can't even change that attribute.
Please help me to find any solution
Best greetings,
RA
You should be able to extract files from the ROM file on your PC thanks to the tools provided in one of the sticky about ROMs modifications.
Unfortunatelly...
Cricri said:
You should be able to extract files from the ROM file on your PC thanks to the tools provided in one of the sticky about ROMs modifications.
Click to expand...
Click to collapse
I have extracted an 'nb' file from my ROM file, but WinImage can't open it ("not FAT16, FAT32 file"). It is WM6 image file, what tools to open this 'nb' file?
Best greetings,
RA
I, too, am trying to find a way to copy some ROM attributed files.
Ultimately, I am trying to move/copy some apps from one smartphone (WM5) to another (WM6). Is there a way to copy them to a zip file and move the files that way or maybe even using a backup copy (i.e. using Sprite Backup?) and restoring to a different phone?
Any help or direction would be appreciated. If there is another thread out there, please be sure to point me to it since searching brings up a lot of different threads.
u need to extract the rom.
Funny, but you make it sound so easy... ;-) I've been searching to figure out how to do that and found some instructions I'm hoping I can follow for the one phone, but not sure it it will apply to the old phone (WM5). If I do manage to dump the ROM, where does it go and does it extract the files in cab format for easy upload?
Update: I found a file extractor at http://pdaphonehome.com/forums/ppc-6700-xv6700/56057-6700-rom-dump.html which may have originally come from Buzz... (thanks Buzz!)? so now I have all the files and modules off the old phone, but am running into some issues installing. I can transfer the files indirectly, and can find the specific application file, but when trying to run the app, it tells me that it's still missing files to enable the program. Any ideas on how to determine which files they might be or how to install the files via Activesync?
I have been looking to free up space in the ROM by reducing the size of the squashfs files in the System partition. These files contain ODEX files for some of the ROM packages. When pruning out some of these packages, the squashfs files are usually untouched, leading to wasted space. I have compiled the squashfs tools (a regular linux package) with the correct compression method for the xperia ROMs ('xz') in cygwin, together with a couple of cmd files with the correct parameters included for ease of use and the relevant cygwin support DLLs. These are latest versions as of 5th October 2016 and uses v4.3 of squashfs tools. This will allow you to:
1. Unpack the odex.app.sqsh, odex.priv-app.sqsh and odex.framework.sqsh files
- e.g. type: "unsq odex.app" to unpack odex.app.sqsh to a subdirectory called odex.app
2. Prune or add files to the folders (ensure you don't disturb the directory structure)
3. Repack the sqsh files
- e.g. type: "mksq odex.app" to pack file odex.app.sqsh from a subdirectory called odex.app
Download and extract the files from the following archive: https://drive.google.com/open?id=0B1H2QbfukxKxQmt1Umd3ZDc1elU
hey bro,im using Z3C stock rom based android 6.0.
i repacked and replaced sqsh file(changed own 644) ,when i make factory reset,it cant boot up again(after boot animation,show a black screen,after a while,it restart automaticly...finally,i got any FC stopped...) ......canyou help me to solove this ?(im sorry for my poor english)
I have made a backup of the flash memory of a radio that has windows ce, but I cannot extract the files from the .bin that the programmer generates.
Would someone give me a hand?
Binwalk! Send it over and ill have a go!