I searched the TP2 forum (for "rom dump" and "rom backup"), but haven't found any threads about how to dump the original factory ROM of my device. I'd like to save the factory rom before fiddling with flashing other cooked roms, or just to have a rom at hand to restore if something goes bad. I would need the factory rom to flash it back if i need to get it back to service, so i wouldnt loose my warranty. Any help appreciated.
I also tried XDA OS image tool, with no luck (i think its too old to support my device)
there are step by step guides in trinity,raphael and hermes forums and wiki....they can all be applied to all devices,...with minor differences...so search again
You may well find your stock ROM on the HTC website, or linked on the Wiki here.
farukb said:
there are step by step guides in trinity,raphael and hermes forums and wiki....they can all be applied to all devices,...with minor differences...so search again
Click to expand...
Click to collapse
I did not know they could be applied to newer devices. Thanks for pointing me in the right direction. I think i have found my answer for dumping my HTC TP2 ROM. I did dump the ROM of my good old ASUS A636N in the old days with itsutils-bin but i never thought it would still work on these new HTC series.
Anyway, for the technical minded who want to backup their HTC TP2 ROM, this is a good link to start with: (the beginning of the link was removed because i cant post links until i am verified)
"forum.xda-developers.com/showthread.php?t=427507"
steviewevie said:
You may well find your stock ROM on the HTC website, or linked on the Wiki here.
Click to expand...
Click to collapse
This one is surely not on the site, because this is a WWE rom with a Hungarian localization language installer started after first (re)boot of the device.
If anyone is interested in a RAW rom dump of my stock T-Mobile branded MDA Vario V (Touch Pro 2) Hungarian ROM i will have it uploaded to sendspace - but only after i am sure i've done the dump correctly.
pdocread sectorsize -b
From where do i know the right sectorsize parameter to use with pdocread ?
I've seen tutorials with and without using the sectorsize "-b" parameter.
What value shall i use in my case of dumping my TP2 ROM ?
(for the first try i did use 0x800 but i don't know if its right in my case)
My pdocread -l output looks like this:
(Note: DSK7: is my 8GB microSDHC card)
459.63M (0x1cba0000) FLASHDR
| 3.12M (0x31f000) Part00
| 4.63M (0x4a0000) Part01
| 174.25M (0xae40000) Part02
| 277.63M (0x115a0000) Part03
7.42G (0x1db000000) DSK7:
| 7.42G (0x1dac00000) UVi
STRG handles:
handle#0 ebe22332 7.42G (0x1dac00000)
handle#1 6fe37bd6 277.63M (0x115a0000)
handle#2 6ff5f876 174.25M (0xae40000)
handle#3 0ff5f852 4.63M (0x4a0000)
handle#4 8ff5f74a 3.12M (0x31f000)
disk ebe22332
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 6fe37bd6
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 6ff5f876
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 0ff5f852
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 8ff5f74a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
I dumped with the following commands - after reading the tutorials:
pdocread -w -d FLASHDR -b 0x800 -p Part00 0 0x31f000 Part00.raw
pdocread -w -d FLASHDR -b 0x800 -p Part01 0 0x4a0000 Part01.raw
pdocread -w -d FLASHDR -b 0x800 -p Part02 0 0xae40000 Part02.raw
pdocread -w -d FLASHDR -b 0x800 -p Part03 0 0x115a0000 Part03.raw
The results are the following files:
2010.02.09. 23:06 3 272 704 Part00.raw
2010.02.09. 23:08 4 849 664 Part01.raw
2010.02.09. 23:12 182 714 368 Part02.raw
2010.02.09. 23:21 291 110 912 Part03.raw
4 File(s) 481 947 648 bytes
Did i do everything right ?
hello to everybody, I'm interested to dump an official brand ROM, but I see that nobody answer about DUMP the ROM from this device.
Can anybody post a link o some useful tips in order to do it?
thank you
Caio said:
hello to everybody, I'm interested to dump an official brand ROM, but I see that nobody answer about DUMP the ROM from this device.
Can anybody post a link o some useful tips in order to do it?
thank you
Click to expand...
Click to collapse
Try here http://forum.xda-developers.com/showthread.php?t=427507
ok thank you very much, I have dumped the content of one device and now I only need to reconstruct the image to flash.
In the thread you linked (related to the Touch pro device) we need to:
After dumping the ROM you'll have 4 RAW files. Move in one folder the Part01.raw that contains the XIP and Part02.RAW that contains the IMGFS, both needed for the reconstruction process.
Click to expand...
Click to collapse
but in this guide that explain how to make the dump, I read that:
Extract (IMGFS is in Part02):
1) imgfstodump Part02.raw - This will create a folder called dump, and extract the contents to it.
Click to expand...
Click to collapse
so what file we need for the Rhodium, only the part02 or the part01 too?
And where can we find the kitchen for our device?
rgb-rgb said:
Try here http://forum.xda-developers.com/showthread.php?t=427507
Click to expand...
Click to collapse
Dear rgb-rgb!
Could you andswer my question of the blocksize parameter of pdocread i mentioned few posts above ? Thanks!
If i know i've done my dump right, i'll try to reconstruct my stock rom with a rom kitchen.
PNut said:
Dear rgb-rgb!
Could you andswer my question of the blocksize parameter of pdocread i mentioned few posts above ? Thanks!
If i know i've done my dump right, i'll try to reconstruct my stock rom with a rom kitchen.
Click to expand...
Click to collapse
I'm interested too!
I think that you've made the dump correctly, dumping all the content of your device (including the program and all the storage space).
Like explained by the person who wrote the guide I linked in my previous post seems that the IMGFS is in Part02. But what does it means? That we no need other files from those dumped?
And what are the next steps to reconstruct the image?
thank you!
PNut said:
Dear rgb-rgb!
Could you andswer my question of the blocksize parameter of pdocread i mentioned few posts above ? Thanks!
If i know i've done my dump right, i'll try to reconstruct my stock rom with a rom kitchen.
Click to expand...
Click to collapse
The only thing I can tell you is that if you follow the directions in the first post of that thread, you should be good to go. That's what I did when I dumped my rom originally. If I remember correctly, you have to issue a command to the device and then get some numbers off of it. Then you have to use those numbers in the pdocread command. I can try to look at it a little later when I have some more time.
Caio said:
I'm interested too!
I think that you've made the dump correctly, dumping all the content of your device (including the program and all the storage space).
Like explained by the person who wrote the guide I linked in my previous post seems that the IMGFS is in Part02. But what does it means? That we no need other files from those dumped?
And what are the next steps to reconstruct the image?
thank you!
Click to expand...
Click to collapse
I wrote up a little cheat sheet for myself the other day when I was dumping a ROM. Later this afternoon, I will try to post what I did. But I can tell you that Ervius kitchen can extract everything from the .raw files you got from your device.
It will be a few hours before I can post it though. Maybe in about 3-4 hours.
rgb-rgb said:
I wrote up a little cheat sheet for myself the other day when I was dumping a ROM. Later this afternoon, I will try to post what I did. But I can tell you that Ervius kitchen can extract everything from the .raw files you got from your device.
It will be a few hours before I can post it though. Maybe in about 3-4 hours.
Click to expand...
Click to collapse
Thank you very much, we wait it impatiently!
if you got 4 raw files without any errors...then you're good to go
farukb said:
if you got 4 raw files without any errors...then you're good to go
Click to expand...
Click to collapse
OK, thats good to hear.
Can you provide me with some simple instructions on how to make these raw files into a simple file that can be used with a RUU, so i could save a whole package with my stock dumped rom that i could easily restore later anytime if something goes bad ? I saw i need a kitchen, but since i am a noob atm, it does look complicated to me yet. I dont want any modification, just make a normal (NBH file if i understood right) rom file, just for the sake of sanity
...and of course so i can have my own backup in case the phone goes bad i can flash back so i do not loose my warranty. Please, if you have some time, point me to a simple solution. Thank you!
PNut said:
OK, thats good to hear.
Can you provide me with some simple instructions on how to make these raw files into a simple file that can be used with a RUU, so i could save a whole package with my stock dumped rom that i could easily restore later anytime if something goes bad ? I saw i need a kitchen, but since i am a noob atm, it does look complicated to me yet. I dont want any modification, just make a normal (NBH file if i understood right) rom file, just for the sake of sanity
...and of course so i can have my own backup in case the phone goes bad i can flash back so i do not loose my warranty. Please, if you have some time, point me to a simple solution. Thank you!
Click to expand...
Click to collapse
Simple instructions here:
1) First you need Ervius Kitchen latest version 1.8.2 will work fine. Get it here http://forum.xda-developers.com/showthread.php?t=469420 You will need to download the complete version and then also download the 1.8.2 .exe file. It's the first two links in the first post of that thread.
2) Extract the complete Kitchen.
3) Extract the .exe file and place it in the kitchen root directory, overwritting the file already there. This will give you Ervius Visual Kitchen 1.8.2
4) Open Ervius Kitchen by double clicking the erviuskitchen.exe in the Root directory of the kitchen. If you are using Windows Vista or Windows 7, you will need to run the kitchen in administrator mode. You may also have to turn off your antivirus if you start getting errors from it.
5) In the Kitchen,click on the Extra Buttons button at the lower left side.
6) Click the RAWS2NBH button.
7) Locate the folder where the extracted .raw files from your ROM dump are located and click Ok. Do not put the .raw files in a folder in the Kitchen, make a new folder for them in a seperate directory otherwise, you may run into problems.
8) This creates a os-new.nb file in the same directory as your (4) .raw files.
9) In Ervius Kitchen click the Dump nbh/nb/payload button.
10) Locate the os-new.nb button which should now be in the same folder as your 4 .raw files were in and click OK.
11) Wait for it to complete, it takes a little while.
Now you have a complete kitchen with the packages.
To get an .nbh file, you can build the package in the Kitchen or there are other ways to create the .nbh file without having to create the build in the Kitchen, but I have not done that yet so I won't be a whole lot of help on that.
Just curious, what device do you have that there is not a stock ROM available to download?
rgb-rgb said:
Simple instructions here:
..CUT
Just curious, what device do you have that there is not a stock ROM available to download?
Click to expand...
Click to collapse
thank you very much, your explaination is quick and effective!
Like Pnut I have tried to cook my ROM starting from my dump, all seems to be fine but I have a couple of simple questions.
When I start the program I have a lot of popup errors, from "You need to specify the 'EXT Build first'" to "Folder OEM not found". Is it normally? I tried both on 7 64bit and XP 32 but the result is the same.
After the step n°7 I see a popup that asks me:
-need the rom "nbmerge" command?
what do we have to answer here?
After that I see another popup telling:
-execute nbhutils to build nbh file?
what's the right answer here?
After that we have a os-new.nb file of about 180MB here, and I think it's right.
Then, in order to have the Dump nbh/nb/payload button enabled, we have to close and restart the kitchen, is right?
And after done that, I found in the same folder where the .nb was created a file named os-new.nb.payload, but none .nbh file. Something was wrong?
Thanks a lot, all your answers are really worth
EDIT: About me, I need to dump the rom of my device because I bought it like a branded one and now I'm unable to find the original rom (necessary for warranty)
Caio said:
thank you very much, your explaination is quick and effective!
Like Pnut I have tried to cook my ROM starting from my dump, all seems to be fine but I have a couple of simple questions.
When I start the program I have a lot of popup errors, from "You need to specify the 'EXT Build first'" to "Folder OEM not found". Is it normally? I tried both on 7 64bit and XP 32 but the result is the same.
Click to expand...
Click to collapse
You might get this when you start the Kitchen and you don't have anything in it. Don't really remember, but it shouldn't matter, your going to build all of that stuff into another kitchen.
Caio said:
After the step n°7 I see a popup that asks me:
-need the rom "nbmerge" command?
what do we have to answer here?
Click to expand...
Click to collapse
I think I answered Yes here, but not really sure it matters.
Caio said:
After that I see another popup telling:
-execute nbhutils to build nbh file?
what's the right answer here?
Click to expand...
Click to collapse
If you want to create a .nbh file you can answer yes. I didn't do it because I was after the packages, so let me know if it does create the .nbh
Caio said:
After that we have a os-new.nb file of about 180MB here, and I think it's right.
Then, in order to have the Dump nbh/nb/payload button enabled, we have to close and restart the kitchen, is right?
Click to expand...
Click to collapse
Shouldn't need to, but there is a Red X button at the right side of the screen Just above the large buttons in the middle. Hit that Red X to get back to the Kitchen main screen.
Caio said:
And after done that, I found in the same folder where the .nb was created a file named os-new.nb.payload, but none .nbh file. Something was wrong?
Click to expand...
Click to collapse
May depend on what you answered for the nbmerge command. You might have to try it again and answer the opposite of what you did last time.
Caio said:
Thanks a lot, all your answers are really worth
EDIT: About me, I need to dump the rom of my device because I bought it like a branded one and now I'm unable to find the original rom (necessary for warranty)
Click to expand...
Click to collapse
Like I said earlier, I been doing it just long enough to be dangerous. As you can tell, I don't have all the answers but that hasn't stopped me from tyring something so far!
rgb-rgb said:
If you want to create a .nbh file you can answer yes. I didn't do it because I was after the packages, so let me know if it does create the .nbh
Click to expand...
Click to collapse
ok, the strange is that if I select yes then I have to select my phone model (in the popup the automatically opened), but the Rhodium is missing.
Well, but seems that here I'm loosing the last step...when I have coocked my ROM, what I have to expect to have in my folder? A new nbh file that I can use with a CustomRUU file extracted from a cooked ROM?
Related
First all, thanks to Pof, here his original thread.
Download pdocread: http://nah6.com/~itsme/itsutilsbin-20080923.zip
LIST NAND PARTITIONS
Code:
$ ./pdocread.exe -l
210.38M (0xd260000) FLASHDR
| 3.12M ([COLOR=DarkRed][B]0x31f000[/B][/COLOR]) Part00
| 3.50M ([COLOR=DarkOrange][B]0x380000[/B][/COLOR]) Part01
| 69.38M ([COLOR=Olive][B]0x4560000[/B][/COLOR]) Part02
| 134.38M ([COLOR=Teal][B]0x8660000[/B][/COLOR]) Part03
STRG handles:
handle e7489c1a134.38M (0x8660000)
handle 474960e6 69.38M (0x4560000)
handle c74b0fda 3.50M (0x380000)
handle 074b0eee 3.12M (0x31f000)
disk e7489c1a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 474960e6
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk c74b0fda
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 074b0eee
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
DUMP THEM!
Code:
pdocread -w -d FLASHDR -b 0x800 -p Part00 0 [COLOR=DarkRed][B]0x31f000[/B][/COLOR] Part00.raw
pdocread -w -d FLASHDR -b 0x800 -p Part01 0 [COLOR=DarkOrange][B]0x380000[/B][/COLOR] Part01.raw
pdocread -w -d FLASHDR -b 0x800 -p Part02 0 [COLOR=Olive][B]0x4560000[/B][/COLOR] Part02.raw
pdocread -w -d FLASHDR -b 0x800 -p Part03 0 [COLOR=Teal][B]0x8660000[/B][/COLOR] Part03.raw
The most important files are part01 (XIP) and part02 (ROM).
Have fun.
I have a Jade with the folowing dutch specs:
ROM:1.40.404.3 (21259)
10/27/08
Radio 0.27.30.09
If anybody wants it, just learn me how to dump it
sorry, i don´t know.
some master can help us?....
Can a webmaster help?
Ik wil graag de dutch versie ;-)
Any guides to dumping Jade's ROM?? The first post seems confusing..Please help..many thanks bro~
I have dumped the Jade ROM, how do I restore it back to the machine?
I just want to delete some junk files and put it back to the machine.
Can anyone write a simple tutorial?
Can the Kaiser kitchen work?
I would like to copy a rom to install it in a brand new phone...
Is it possible to hav a little step by step tutorial ?
Thanks in advance.
Dan
thanks to my brother he dump a PTG JADE ROM, my question is why a can dump the raw files to reconstruct the ROM!!? any help!?
i get some fail massage about locked
"Could not update itsutils.dll to the current version, maybe it is inuse?
try restarting your device, or restart activesync
or maybe your device is application-locked."
it's possible that i need first the Hard SPL do dump the ROM with this tool??? or can i unlock the application in a other way??
i need dump this ROM for all they want a chines ROM because as soon i can flash it i will change it to engish!!
ok i fund the solution
(changing HKLM\Security\Policies\Policiesvaluename '00001001' was set to dword:2, change it to dword:1)
but now i even understand lesser?!?? so many Joice to select and then even i'm absolutely not in DOS commands!? will search for a WIKI now!
i did it, now i go to save the cheerleader!!
I have a french rom. Does that mena hardspl is out?
i guess when it is out it will appear here on this web side
Dump for Dummies
It´s easy to dump... connect the device to pc with usb...
take pdocread.exe and the 2 dll´s files of the zip in the first post, go to ms-dos and then execute "pdocread -l", only a seconds and appear the firs image on first post. See part01 and part02 (Coloured numbers) and type: pdocread -w -d FLASHDR -b 0x800 -p part01 0 0xYOURNUMBERSHERE part01.raw (Take 1 minute)
pdocread -w -d FLASHDR -b 0x800 -p part02 0 0xYOUR NUMBERS HERE part02.raw (Take 10 minutes)
Now you have the two .raw files. Part01 for XIP and Part02 for ROM! Thanks
DON´T PUT THE NUMBERS OF THE EXAMPLE! YOU NEED TO TYPE THE NUMBERS YOU TAKE ON "pdocread.exe -l"
Q1: How do we "mount" these raw files to explore contents?
Q2: Is restoring these raw files with pdocwrite possible/safe?
hello I did dump the rom of jade not brand ITA hours I do not know how to use RAW files (as in convert nbh? thanks
XXALEX said:
hello I did dump the rom of jade not brand ITA hours I do not know how to use RAW files (as in convert nbh? thanks
Click to expand...
Click to collapse
Check out the Jade Kitchen.
Ta
Dave
DaveShaw said:
Check out the Jade Kitchen.
Ta
Dave
Click to expand...
Click to collapse
if we can not load the raw file someone help me? thanks
DaveShaw said:
Check out the Jade Kitchen.
Ta
Dave
Click to expand...
Click to collapse
Actually, I have downloaded the Jade Kitchen but I still have no idea how to use it with my 4 dumb files. Please help! Thanks!
and what means the 4 .raw files? part01 and part02 are XIP and ROM, but the other 2?
Parts
the part00.raw is the splash (First image and logo on htc), part01 is the xip, part02 is the rom, where is the software (Windows) and part03 are your data.
Only part01 and part02 are necesary to compile the rom in kitchen
The only way to know how to use kitchen is reading a lot of post in this forum!?
and, for ex. if i want to insert another splash screens, and another data's how can i compile them in another "part00 and part03"?
When looking at RUU_signed.nbh extracted out of RUU_BlackStone_HTC_WWE_EastEurope_1.14.479.3_Radio_52.49a.25.26_1.09.25.14_Ship
I find at
00 00 00 00 40h BLAC10000
00 00 00 1e 0hh HTC__032
00 00 00 20 00h 1.14.479.3
00 00 00 21 10h USA
It looks like the ModelID, CID, Rom Version and the Country code.
How can I find out what those values are of my device so that I can match a shipped rom with it ??
Model ID should be under the battery.
Have you tried using ATCommander to query the CID with the:
[email protected]? command?
Ta
Dave
MDAIIIUser said:
When looking at RUU_signed.nbh extracted out of RUU_BlackStone_HTC_WWE_EastEurope_1.14.479.3_Radio_52.49a.25.26_1.09.25.14_Ship
I find at
00 00 00 00 40h BLAC10000
00 00 00 1e 0hh HTC__032
00 00 00 20 00h 1.14.479.3
00 00 00 21 10h USA
It looks like the ModelID, CID, Rom Version and the Country code.
How can I find out what those values are of my device so that I can match a shipped rom with it ??
Click to expand...
Click to collapse
could perhaps help cmonex, when she has gained enough...
DaveShaw said:
Model ID should be under the battery.
Have you tried using ATCommander to query the CID with the:
[email protected]? command?
Ta
Dave
Click to expand...
Click to collapse
No I did the old approach based on the blueangel.
Here flashing software gave you a getdevicedata.exe so I had a look at an extracted HD_ship.exe and found RUUGetInfo.exe.
So I put it on my device, ran it and sorted my windows dir by date.
I found:
RUUImei.txt ---- > contains the IMEI of my device
RUUInfo.txt-----> Gives me the same info the rom version under Divice info
here is how
gd day
here is how
put your phone into boot loader model by pressing power and volume down till 3 color s screen comes.
in active sync right click the mouse and go into connection settings and move the v from allow us connection
connect your phone and run mtty software
http://rapidshare.com/files/173474965/mtty_0513.zip.html
after your install it just go in and chose usb instead of com port
when its open press one time enter and you can see answer back cmd>
then key in cmd2
u can see the details
gd luck
he means "info 2" for CID.
but DaveShaw is right too.
anyway. it won't flash that way without hardspl.
MDAIIIUser said:
00 00 00 00 40h BLAC10000
00 00 00 1e 0hh HTC__032
00 00 00 20 00h 1.14.479.3
00 00 00 21 10h USA
Click to expand...
Click to collapse
What if I change cid in that nbh file? To match cid of my device. Will I be able to flash that rom?
lipa47 said:
What if I change cid in that nbh file? To match cid of my device. Will I be able to flash that rom?
Click to expand...
Click to collapse
Unless you can sign the NBH file with the Private Key of the Carrier (or whoevers signs them), you won't have much luck.
The HardSPL is patched so it doesn't check the signature on the file.
Ta
Dave
Now that is cool
Here is a working link
http://wiki.xda-developers.com/uploads/mtty.exe
So do we know the other codes for the rest of the stuff I found in the nbh ??
May I know that the CID will be changed or not if the hardspl is install? As I know, HTC will check the CID if it is taken for repair, and they will not repair if the CID is not valid.
CID will not be changed. Hard-spl only bypasses checking CID, signature, overwriting spl etc.
It means that there is a CID stored in the phone and also in the ROM file so that the SPL will check between them during ROM upgrade. If it is that case, is there any means to change the CID & country code stored in the phone?
Yes it is but is not available for HD at the moment.
Anyway hard-spl is bit better method because you can flash custom roms, radios only etc.
If you only change cid you can only flash HTC signed roms.
Determine CID from mtty 'info 2' output
Hi guys,
If you consider this useful keep it if not delete it ...
When issued the 'info 2' command, I got:
Cmd>info 2
Card inserted
SD clk rate 19MHz
Cmd5 CMD_TIMEOUT
SD clk rate 144KHZ
SD 2.0 HC card
SD Clk rate 24 MHz
SD Init OK
-- The
Card inserted
...
SD Init OK
-- was repeated 2 more time.
HTCSHTC__032ðúÔ•HTCE
Cmd>
Then it was not clear for me which was the CID. But http://wiki.xda-developers.com/index.php?pagename=Hermes_BootLoader was quite useful. It is stated "Returns "HTCS" + CID + (4-byte checksum) + "HTCE"" so I presume the CID is 'HTC__032'. HTCS/HTCE (Start/End) seems to be only control strings.
As written on the mentioned page 'info 4' would have shorter output and still providing the CID.
Thanks for the good doc.
Stolen from udk's Jade Dumping thread
First all, thanks to Pof, here his original thread and cmonex for her orginal post here.
Download itsme's utils: http://nah6.com/~itsme/itsutilsbin-20080923.zip
List NAND Partitions
Code:
pdocread.exe -l
210.38M (0xd260000) [COLOR="DarkOrchid"]FLASHDR[/COLOR]
| 3.12M ([COLOR=DarkRed][B]0x31f000[/B][/COLOR]) Part00
| 3.50M ([COLOR=DarkOrange][B]0x380000[/B][/COLOR]) Part01
| 69.38M ([COLOR=Olive][B]0x4560000[/B][/COLOR]) Part02
| 134.38M ([COLOR=Teal][B]0x8660000[/B][/COLOR]) Part03
STRG handles:
handle e7489c1a134.38M (0x8660000)
handle 474960e6 69.38M (0x4560000)
handle c74b0fda 3.50M (0x380000)
handle 074b0eee 3.12M (0x31f000)
disk e7489c1a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 474960e6
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk c74b0fda
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 074b0eee
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dump Them!
Code:
pdocread -w -d [COLOR="DarkOrchid"]FLASHDR [/COLOR]-b 0x800 -p Part00 0 [COLOR=DarkRed][B]0x31f000[/B][/COLOR] Part00.raw
pdocread -w -d [COLOR="DarkOrchid"]FLASHDR [/COLOR]-b 0x800 -p Part01 0 [COLOR=DarkOrange][B]0x380000[/B][/COLOR] Part01.raw
pdocread -w -d [COLOR="DarkOrchid"]FLASHDR [/COLOR]-b 0x800 -p Part02 0 [COLOR=Olive][B]0x4560000[/B][/COLOR] Part02.raw
pdocread -w -d [COLOR="DarkOrchid"]FLASHDR [/COLOR]-b 0x800 -p Part03 0 [COLOR=Teal][B]0x8660000[/B][/COLOR] Part03.raw
The most important files are part01 (XIP) and part02 (ROM).
Dumping the SPL
Code:
pmemdump 0x9a000000 0x80000 spl.nb
As monx points out below you may need to "App Unlock" your device before pdocread will work.
Either follow his reg hack, or just use this CAB by Chainfire : http://forum.xda-developers.com/showthread.php?p=3973249#post3973249.
Have fun.
Thanks to d474rpr for testing SPL dumping
Dave
For those interested here is the extracted SPL from the Rhodium.
Rhodium SPL
enjoy!
Just an additional info. need to apply this reg :
[HKEY_LOCAL_MACHINE\Security\Policies\Policies]
"0000101a"=dword:1
"00001001"=dword:1
(Dumping with Vista SP2 x64 + WMDC6.1 with virgin Rhodium )
EDIT: Done. Will upload in case somebody want it.
Okay here is RHODIUM_WWE_ASIA_v1.19.707.1(51489)_051509_OEM_FULL
DaveShaw said:
Dump Them!
Code:
pdocread -w -d FLASHDR -b 0x800 -p Part00 0 [COLOR=DarkRed][B]0x31f000[/B][/COLOR] Part00.raw
pdocread -w -d FLASHDR -b 0x800 -p Part01 0 [COLOR=DarkOrange][B]0x380000[/B][/COLOR] Part01.raw
pdocread -w -d FLASHDR -b 0x800 -p Part02 0 [COLOR=Olive][B]0x4560000[/B][/COLOR] Part02.raw
pdocread -w -d FLASHDR -b 0x800 -p Part03 0 [COLOR=Teal][B]0x8660000[/B][/COLOR] Part03.raw
The most important files are part01 (XIP) and part02 (ROM).
Click to expand...
Click to collapse
I assume it's a stupid question - but I need to change the storage adresses according to the list of the NAND Partitions?
Thank you
CHfish
yes. follow the address shown in ur prompt windows.
monx® said:
yes. follow the address shown in ur prompt windows.
Click to expand...
Click to collapse
Thank you monx® - faster then all support hotlines
@monx:
I have a Hong Kong CHT version of the Rhodium that I would like to switch to WWE. Can I use the RHODIUM_WWE_ASIA_v1.19.707.1(51489)_051509_OEM_FULL dump you provided to do so? If so, how?
Or is there an RUU package that I can use?
Pardon my ignorance...this is my first WinMo device and I'm still learning...
@e60202
Hi friend, my dump is not a complete rom (it is just rom sources to share)
Yes, we can rebuild the rom becomes the complete one but it wont have the required signature required by stock device SPL. So, we cant flash it until our device is flashed with Rhodium HardSPL (not available yet)
To change your device rom language, it is possible. U need to create GoldCard using QMAT (if i'm not mistaken u hv to buy this for full function to create GoldCard) & Mtty. Then u can flash stock shipped (signed) WWE rom.
For more info, pls search for GoldCard or u can try ur luck to ask for cmonex further help
so i take it then... if i do a rom/spl backup of my phone and then bugger it up, i'm unable to flash the backup back to the phone ?
drawflex said:
so i take it then... if i do a rom/spl backup of my phone and then bugger it up, i'm unable to flash the backup back to the phone ?
Click to expand...
Click to collapse
If you bugger up your phone, just Hard Reset to get it back to how it was.
You dump your ROM so that after flashing custom ROMs you can go back the one your phone came with. But we need Hard SPL to flash custom ROMs as well as dumped ones.
Dave
is there actually no problem in warranty? flash new rom .. **** it up.. flash original rom.. send it in
-adrian- said:
is there actually no problem in warranty? flash new rom .. **** it up.. flash original rom.. send it in
Click to expand...
Click to collapse
Re-flash original SPL so they dunno u hv modified it
well .. never tried it before .. hope it will work with the tmobile GER branded phone
already ordered.
monx® said:
Re-flash original SPL so they dunno u hv modified it
Click to expand...
Click to collapse
Doesn't this only work though if you have a signed ROM installed. I didn't think that you could use HardSPL to install a dump and then push the OEM SPL back.
Okay here is RHODIUM_GER_v1.19.407.0(51489)_051609_OEM_FULL
the German Version
wootty2000 said:
Doesn't this only work though if you have a signed ROM installed. I didn't think that you could use HardSPL to install a dump and then push the OEM SPL back.
Click to expand...
Click to collapse
yes, you can use HardSPL to do this! (when it comes out )
cmonex said:
yes, you can use HardSPL to do this! (when it comes out )
Click to expand...
Click to collapse
I know that with HardSPL I can install a cooked ROM, but my understanding is that if I install HardSPL, then a cooked ROM and then push the OEM SPL back, the OEM SPL will fail to validate the cooked ROM and refuse to boot it
Or does the OEM SPL only do validation when flashing and not booting?
wootty2000 said:
I know that with HardSPL I can install a cooked ROM, but my understanding is that if I install HardSPL, then a cooked ROM and then push the OEM SPL back, the OEM SPL will fail to validate the cooked ROM and refuse to boot it
Or does the OEM SPL only do validation when flashing and not booting?
Click to expand...
Click to collapse
No, if you have a cooked ROM and a stock SPL it will still boot. The SPL checks signing, device id, model id, etc when attempting to flash a ROM, not booting.
Dave
I already dumped the ROM/SPL of my Rhodium according to DAVE's guide.
And I know from the guide the Part01.raw is XIP and the Part02.raw is ROM. However, what's the part00.raw and part03.raw?
And how can I put all of these raw files together to a NBH file? It's need to be NBH file before flash back, am I right?
Does anyone have a copy of the T-Mobile USA TP2 stock rom?
hi,
check this link maybe the stock rom you're looking for is there.
regards,
twisted
thank you very much
twisted said:
hi,
check this link maybe the stock rom you're looking for is there.
regards,
twisted
Click to expand...
Click to collapse
the one that came with the phone is not there..
Here you go, I got it from ark666 so big thanks to him. I had a problem and I had to get back to the stock ROM.
Put your TP2 in bootloader mode before you flash.
Link: http://xda.caspersworld.co.uk/Downlo...igned_Test.exe
brings up the list but all I see is the TMo radios?
The TMO shipped one is 1.20.531.4 radio version 3.45.25.14
I have both of the test ones already here
Well if anyone gets the official one that T-Mobile HTC Touch Pro 2 dropped with please post here.
Thanks!
while waiting for the official stock tmob rom, maybe someone can dump their stock tmob rom (1.20.531.4 radio version 3.45.25.14), then later on we can reconstruct them using the old stock tmob roms available here.
regards,
twisted
I'm going to be getting a brand new one today and I'm going to dump it.
I have a new stock, just arrived, if you need a dump... teach me how to >. >
I got a pretty fast upload here so I can host on my server.
chiasoft said:
I have a new stock, just arrived, if you need a dump... teach me how to >. >
I got a pretty fast upload here so I can host on my server.
Click to expand...
Click to collapse
http://forum.xda-developers.com/showthread.php?t=501871
Dave
i looked in the dirs, but which one is the stock t-moblie usa rom ?
thank you !
murducky said:
i looked in the dirs, but which one is the stock t-moblie usa rom ?
thank you !
Click to expand...
Click to collapse
None of them- yet, unless someone posted their current ROM Dump.
The only ones available are the older 'Test' versions.
graphreak said:
None of them- yet, unless someone posted their current ROM Dump.
The only ones available are the older 'Test' versions.
Click to expand...
Click to collapse
thanks for the info.
we need a stock tmobile usa rom. im still looking for one also
I am working on trying to get the *raw files, but when i try to dump my device the pdocread.exe file just opens displays text real fast and shuts down.
I have already accepted the DLL on my device.. once i have raw 01 and 02 we can make a .NBH file and get this rollin
I would like one as well. Just in case! Not too happy with the signal bar readout on this new rom.,, would rather have signal than fluff,,,,
RAW dump of TMOUS Stock Rom Version: 1.20.531.4
TMOUS HTC Touch Pro 2
Rom Version: 1.20.531.4 (51986) WWE
Radio Version: 3.45.25.14
Followed the directions here: http://forum.xda-developers.com/showthread.php?t=501871
C:\itsutilsbin-20080923>pdocread.exe -l
459.38M (0x1cb60000) FLASHDR
| 3.12M (0x31f000) Part00
| 4.63M (0x4a0000) Part01
| 165.25M (0xa540000) Part02
| 286.38M (0x11e60000) Part03
STRG handles:
handle#0 6fe69bfa 286.38M (0x11e60000)
handle#1 eff62876 165.25M (0xa540000)
handle#2 0ff62852 4.63M (0x4a0000)
handle#3 4ff6274a 3.12M (0x31f000)
disk 6fe69bfa
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk eff62876
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 0ff62852
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 4ff6274a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
I have attached a rapidshare link of my dump. The files are .RAW
The files in the rar are:
Part00.raw
Part01.raw
Part02.raw
Part03.raw
sp1.nb
AS PROMISED: http://rapidshare.com/files/269690575/TMOUS_1.20.531.4_RAW_Stock_Rom_Complete.rar
Now I need to know how to put the above files in flashable format, I have been messing with alot of tools, can't seme to find correct tutorials, or information specific for the Rhodium.
If anyone can help. Please send me a private message, reply to this post, or contact me via Windows Messenger at: [email protected]
cdguider said:
TMOUS HTC Touch Pro 2
Rom Version: 1.20.531.4 (51986) WWE
Radio Version: 3.45.25.14
Followed the directions here: http://forum.xda-developers.com/showthread.php?t=501871
I have attached a rapidshare link of my dump. The files are .RAW
The files in the rar are:
Part00.raw
Part01.raw
Part02.raw
Part03.raw
sp1.nb
Download Link will be posted within 1 hour
Now I need to know how to put the above files in flashable format, I have been messing with alot of tools, can't seme to find correct tutorials, or information specific for the Rhodium.
If anyone can help. Please send me a private message, reply to this post, or contact me via Windows Messenger at: [email protected]
Click to expand...
Click to collapse
dont worry, someone will grab this up and make a custom RUU for this, and they will sticky it!
i will be all over it when it comes out and is proven! thanks for the hard work!
Can someone please, when you can..post the at&t tilt 2 rom so that any of us who should need to go back to it for various reasons can do so!
Thank You very much!!!
If there is a fairly quick & easy way to dump it, Id be happy to. My Tilt 2 should be arriving tomorrow afternoon (EST). I'd like to get an EnergyROM on it as soon as possible, but I'd be willing to take the time to dump the stock ROM if someone could point me to the tools to do so.
ROM dump & ril
Complete dump is here Thanks & credits to herg62123.
EDIT: removed extracted ril, does not seem to work with 4.47 radio
This appears to be the Fuze ROM? Are you sure you copied the right link?
I got my Tilt 2 2 days ago, I can dump it, but I have no idea how to do that.
I should have extracted mine, but I figured you party people would be on the ball already... oh well
I can't wait for it to be available to the chefs though cause I can't use my PTT button right now, and the contacts app isn't as nice as the one that was on the Tilt 2 stock (on the 6.5 manila 2.1 Rom from NRG)
beufford12 said:
This appears to be the Fuze ROM? Are you sure you copied the right link?
Click to expand...
Click to collapse
Yes it's the full Titlt2 dump. I extracted Rhodium OEM drivers, the 4.47.25.24 radio and some other stuff. This dump is strictly for those with WVGA, clearly won't run on the Fuze as is. It's 400 MB since the original NBH is included.
How can the ROM be extracted from the phone?
Just got my Tilt2 today and noticed that the shipped ROM is build 21849.5.0.63. I believe the one posted above is perhaps a slightly earlier build.
Anyone know of a resource that has dumped the AT&T official ROM? I think I am like some others where I am a little gun-shy to flash unless I have an AT&T one to fallback on in case I need to do a warranty exchange.
l3it3r said:
I can't wait for it to be available to the chefs though cause I can't use my PTT button right now
Click to expand...
Click to collapse
ae button plus finds the ptt button. You wont have the at&t ptt service obviously, but it allows you to map it to whatever you'd like
I can confirm the build is 21849.5.0.63
I have extracted the ROMfollowing the steps at http://forum.xda-developers.com/showthread.php?t=501871
Code:
\itsutilsbin-20090515>pdocread.exe -l
461.75M (0x1cdc0000) FLASHDR
| 3.12M (0x31f000) Part00
| 4.75M (0x4c0000) Part01
| 226.75M (0xe2c0000) Part02
| 227.13M (0xe320000) Part03
7.42G (0x1db000000) DSK7:
| 7.42G (0x1dac00000) Part00
STRG handles:
handle#0 0ffa9b5e 7.42G (0x1dac00000)
handle#1 2fe19f0a 227.13M (0xe320000)
handle#2 cff4c8de 226.75M (0xe2c0000)
handle#3 cff4c8ba 4.75M (0x4c0000)
handle#4 6ff4c792 3.12M (0x31f000)
disk 0ffa9b5e
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 2fe19f0a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk cff4c8de
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk cff4c8ba
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 6ff4c792
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
itsutilsbin-20090515>pdocread -w -d FLASHDR -b 0x800
-p Part00 0 0x31f000 Part00.raw
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)
itsutilsbin-20090515>pdocread -w -d FLASHDR -b 0x800
-p Part01 0 0x380000 Part01.raw
CopyTFFSToFile(0x0, 0x380000, Part01.raw)
itsutilsbin-20090515>pdocread -w -d FLASHDR -b 0x800
-p Part02 0 0x4560000 Part02.raw
CopyTFFSToFile(0x0, 0x4560000, Part02.raw)
itsutilsbin-20090515>pdocread -w -d FLASHDR -b 0x800
-p Part03 0 0x8660000 Part03.raw
CopyTFFSToFile(0x0, 0x8660000, Part03.raw)
itsutilsbin-20090515>pmemdump 0x9a000000 0x80000 spl
.nb
CopyProcessMemoryToFile(00000042, 9a000000, 00080000, spl.nb)
The extracted files are sized:
Part00 3,196 KB
Part01 3584 KB
Part02 74,040 KB
Part03 137,600 KB
spl 512KB
I just want to make sure this is OK as these raw files are smaller than how big it says at the top.
I have 7-zipped the files and am sending the 112MB file to my Dropbox right now, it will take about 40 minutes to finish.
I may update this topic with the link once it is done, anyone interested please feel free to message me.
Here are the raw files:
Part00.raw
Part01.raw
Part02.raw
Part03.raw
spl.nb
It is Ultra compressed with 7-zip and available at:
::edit::
Link removed, I think I screwed up the offsets of the dump. I was wondering why the part 2 was so small.....
digitalmatrixio said:
Here are the raw files:
Part00.raw
Part01.raw
Part02.raw
Part03.raw
spl.nb
It is Ultra compressed with 7-zip and available at:
http://dl.getdropbox.com/u/62596/ATT TILT 2 ROM DUMP.7z
Click to expand...
Click to collapse
Thanks! Now the trick is to recompile into a flashable nbh file...I found a tutorial on this and will possibly try my hand at it...
pinoymutt said:
Thanks! Now the trick is to recompile into a flashable nbh file...I found a tutorial on this and will possibly try my hand at it...
Click to expand...
Click to collapse
if you look on the first page you'll the the link to where herg provides a dumped tilt2 rom. it already has the .nbh. i've downloaded it myself
noggind614 said:
if you look on the first page you'll the the link to where herg provides a dumped tilt2 rom. it already has the .nbh. i've downloaded it myself
Click to expand...
Click to collapse
The dump from Herg is build 21839 the shipped ATT build is 21849.
I am not having any luck with any of the kitchens converting the files to NBH. Maybe I'll have more luck after a good nights sleep.
digitalmatrixio said:
The dump from Herg is build 21839 the shipped ATT build is 21849.
I am not having any luck with any of the kitchens converting the files to NBH. Maybe I'll have more luck after a good nights sleep.
Click to expand...
Click to collapse
This is the tutorial I was reading through, not sure if you used the same one?
http://forum.xda-developers.com/showthread.php?t=560519
Keyboard
Can anyone verify that the keyboard layout is the same as the HTC original or will there be a need for a keyboard fix like the T-Mobs TP2 ?
mystikal87 said:
Can anyone verify that the keyboard layout is the same as the HTC original or will there be a need for a keyboard fix like the T-Mobs TP2 ?
Click to expand...
Click to collapse
will need a fix
I just tried building the nbh file and didn't have much success. Anyone else care to try?
ATT HTC Tilt 2 Keyboard
The keyboard is different. Here is a picture of it I snapped with my Fuze.