I have a US Cellular 6800 that has the factory ROM. I was going to dump it to my defective one, but pdocread doesn't seem to work. Does anyone have any suggestions, maybe we can get ourselves a USCC factory ROM out of the deal?
It doesn't look like pdocread can latch onto the partitions properly. Maybe I have to try the Windows XP machine instead of the Windows Server 2K3 machine.
Radio ver is - 1.64.00
Software Ver is - 2.17
ActiveSync is - 4.5
C:\ITSUTILS>pdocread -lvt
220.50M (0xdc80000) FLASHDR
| 3.12M (0x31f000) Part00
| 3.38M (0x360000) Part01
| 54.38M (0x3660000) Part02
| 159.63M (0x9fa0000) Part03
10.00M (0xa00000) EXT_FLA
| 10.00M (0xa00000) PART00
STRG handles:
handle 436f3a8e 10.00M (0xa00000)
handle 8387a65a159.63M (0x9fa0000)
handle a3891f3e 54.38M (0x3660000)
handle e3891f1a 3.38M (0x360000)
handle 63891d5a 3.12M (0x31f000)
disk 436f3a8e
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 8387a65a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk a3891f3e
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk e3891f1a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 63891d5a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
C:\ITSUTILS>pdocread -w -d FLASHDR -p Part00 -t
real nr of sectors: 1 - 512.00byte, 0x200
C:\ITSUTILS>pdocread -w -d FLASHDR -p Part01 -t
real nr of sectors: 1 - 512.00byte, 0x200
C:\ITSUTILS>pdocread -w -d FLASHDR -p Part02 -t
real nr of sectors: 1 - 512.00byte, 0x200
C:\ITSUTILS>pdocread -w -d FLASHDR -p Part00 0 0x31f000 Part00.raw
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)
ERROR: ITReadDisk : read 00000000 bytes - The parameter is incorrect.
Any updates??
Anyone find any info at all about a uscc stock rom??? I've been searching for weeks,,,n have to ship my phone in tomorrow for repairs.... =(
I don't believe it would be possible to roll it back even if someone had because once you go to radio V3 you can't go back to V1 without either bricking the phone or potentially messing something up. At least, that's what I read.
I drowned my previous USCC phone in a mud puddle and Signal still took it back no problem. I'm not so sure the software version ultimately matters.
Related
Dear All,
Thanks so much for the great info. and experience sharing. As an Pro-Palm user switched to PPC it was excited PPC OS/ROM can be tweaked and cooked in many ways...
Anyhow, I followed the How to dump HTC Kaiser ROM and here is my pdocread -l :
=========================================================
211.25M (0xd340000) FLASHDR
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 90.00M (0x5a00000) Part02
| 113.75M (0x71c0000) Part03
968.75M (0x3c8c0000) DSK1:
| 968.50M (0x3c880e00) Part00
STRG handles:
handle 2732d70e968.50M (0x3c880e00)
handle 47482462113.75M (0x71c0000)
handle 874b3d42 90.00M (0x5a00000)
handle 274b3d1e 4.38M (0x460000)
handle 874b3a6a 3.12M (0x31f000)
disk 2732d70e
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 47482462
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 874b3d42
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 274b3d1e
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 874b3a6a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=========================================================
But my ROM dump is much smaller:
02/21/2008 16:12 3,272,704 Part00.raw
02/21/2008 16:13 4,587,520 Part01.raw
02/21/2008 16:13 5,898,240 Part02.raw
02/21/2008 16:14 7,454,720 Part03.raw
Did I miss sth
Thanks & Cheers!
write your pdoread commandos you use!
you have only print the info screen!
OK, here ya go...
pdocread -w -d FLASHDR -b 0x800 -p Part00 0 0x31f000 Part00.raw
pdocread -w -d FLASHDR -b 0x800 -p Part01 0 0x460000 Part01.raw
pdocread -w -d FLASHDR -b 0x800 -p Part02 0 0x5a0000 Part02.raw
pdocread -w -d FLASHDR -b 0x800 -p Part03 0 0x71c000 Part03.raw
actually i made a .bat file with the above 4 line... Thx
is your device CID unlocked?
Haven't go that far yet.. so I believe... still CID Locked?
BTW.. kind of stupid question => the phone bundled Sprite Backup, can it give a working OS if I messed up with the phone?
Ok ... you MUST cid unlock! if you dont do this ... yu cant make a full dump!
If your OS is messed or delete ... you cant do nothing with those kind of backupsoftware!!! Windows Mobile is not simulare with a PC.
If you have dumped ... please share your dump with me!
Would you mind to tell me the possible worst scenario for my CID Unlock... my phone's service provide seems putting a lot of proprietary stuffs in the phone, I don't want to end up I cannot use their voice and data services for my 2-year contract
Hi, I searched over and over and I can't seem to get an answer on this, so if anyone with more knowledge than me could answer I'd be thankful.
I was thinking of dumping the rom from my Touch Dual so I ran pdocread -l and I got a result differing from what the wiki, and other pages got.
Addresses in bold differs from the ones in wiki.
/..pdocread.exe -l
210.75M (0xd2c0000) FLASHDR
| 3.12M (0x31f000) Part00
| 3.50M (0x380000) Part01
| 80.38M (0x5060000) Part02
| 123.75M (0x7bc0000) Part03
1.90G (0x79b00000) DSK1:
| 1.90G (0x79ae1200) Part00
20.00k (0x5000) BTD1:
| 19.00k (0x4c00) PART00
STRG handles:
handle e5b4bf86 19.00k (0x4c00)
handle 072e038a 1.90G (0x79ae1200)
handle 6746c42e123.75M (0x7bc0000)
handle 874b3d52 80.38M (0x5060000)
handle a74b3d2e 3.50M (0x380000)
handle 074b3a7a 3.12M (0x31f000)
disk e5b4bf86
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 072e038a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 6746c42e
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 874b3d52
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk a74b3d2e
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 074b3a7a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Click to expand...
Click to collapse
Part02 and part03 differs from what the wiki says, now I wonder if this is specific to the phone and if I'm supposed to change the addresses
pdocread -w -d FLASHDR -b 0x800 -p Part02 0 0x4560000 Part02.raw
to
pdocread -w -d FLASHDR -b 0x800 -p Part02 0 0x5060000 Part02.raw
and same for part 03.
I really just want to be sure to be able to rebuild my old rom "just in case" beeing that it's clean and in swedish language.
The dump values you've seen might be only for the Kaiser, if you read the same dump tutorial like me!
And there are some differences between two ROMs from different providers or different versions, too! Take the values you get after the pdocread -l command, it's the safest way to dump your ROM in a valid RAW file!
To rebuild these RAW files later, you need Niki Kitchen from NetrunnerAT!
Thanks, i dumped with the new values and I'll try and rebuild it later. Is it in some way possible to see if the ROM rebuild was sucessfull, or do I have to flash it to be sure?
I'm pretty new to this stuff, this wasn't all too hard on my old S100
Doctajay or Doctaj or someone has some video tutorials up for the Kaiser. That's how I learnt. No linkage sorry.
The link to the video tutorials for the Kaiser are in the Niki Wiki. I've put it there a while ago.
Ok, I'm struggling here, trying to rebuild my current ROM..
It is mentioned in the video tutorial that I need a RUU_signed.nbh, question is, what does that file contain.
Can I just use any WWE rom for this or is this file language specific?
Also, do I have to flash a radio into the ROM or could I just leave it?
Sorry for beeing a n00b but I want the cooking to be done properly
Hi,
wanted to do a backup of the rom from my startrek, before i test wm6. I tried it with mtty but it did not work for me. Is there a special command row for the startrek to dump the rom via bootloader? An is it possible to restore the dump again, if for example wm6 fails?
would be nice if you can help me...
i have tried already:
Code:
C:\temp>pdocread.exe -l
36.99M (0x24fcc00) TrueFFS
| 2.06M (0x20fc00) Part00
| 2.38M (0x260000) Part01
| 32.55M (0x208cc00) Part02
17.30M (0x114c000) TrueFFS
| 2.06M (0x20fc00) Part00
| 2.38M (0x260000) Part01
| 32.55M (0x208cc00) Part02
483.88M (0x1e3e0000) DSK1:
| 483.70M (0x1e3b4600) Part00
STRG handles:
handle 0fb7ff2e483.70M (0x1e3b4600)
handle 6fad039e 17.05M (0x110ba00)
handle 6fb5e3f6 32.55M (0x208cc00)
handle 0fb5e1fa 2.38M (0x260000)
handle efb5e1d6 2.06M (0x20fc00)
disk 0fb7ff2e
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 6fad039e
2 partitions, 2 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 6fb5e3f6
2 partitions, 2 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 6c 19 02 15 01 19 0e 0f 11 04 06 b1
disk 0fb5e1fa
2 partitions, 2 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 6c 19 02 15 01 19 0e 0f 11 04 06 b1
disk efb5e1d6
2 partitions, 2 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 6c 19 02 15 01 19 0e 0f 11 04 06 b1
C:\temp>pdocread.exe -w -d TrueFFS -p Part02 -t
real nr of sectors: 66662 - 32.55Mbyte (0x208cc00)
C:\temp>pdocread.exe -w -d TrueFFS -p Part02 0 0x208cc00 foo.raw
CopyTFFSToFile(0x0, 0x208cc00, foo.raw)
but long time (30 mins) nothing happens...
IMO, Sticky is the key. Look through the forum, specifically the official ROMs sticky. Download your Official ROM there. Upgrade to WM6.x. If you want to go back to WM5, just reinstall your downloaded official ROM. This is an easier way to have an Official ROM back up without dumping.
well ok, so no easy method to dump original rom from the phone... thank your for your help anyway...
hi
how can i backup my rom with pdocread.exe?
this is my info with pdocread.exe -L
57.83M (0x39d5000) DSK1:
| 3.08M (0x313400) Part00
| 3.20M (0x333000) Part01
| 51.56M (0x338e800) Part02
10.09M (0xa17000) DSK2:
| 10.09M (0xa17000) PART00
49.96M (0x31f5000) DSK3:
| 49.96M (0x31f4c00) Part00
10.09M (0xa17000) ondisk2
| 10.09M (0xa17000) PART00
20.00k (0x5000) BTD1:
| 19.00k (0x4c00) PART00
977.00M (0x3d100000) DSK4:
| 976.88M (0x3d0e1600) Part00
STRG handles:
handle#0 aeecfd46 976.88M (0x3d0e1600)
handle#1 cfb8e922 19.00k (0x4c00)
handle#2 2fb8e946 10.09M (0xa17000)
handle#3 0fac9e02 49.96M (0x31f4c00)
handle#4 cfb1af76 10.09M (0xa17000)
handle#5 efb7de32 51.56M (0x338e800)
handle#6 2fb7de0e 3.20M (0x333000)
handle#7 4fb7ddc6 3.08M (0x313400)
disk aeecfd46
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk cfb8e922
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 2fb8e946
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 0fac9e02
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk cfb1af76
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk efb7de32
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 2fb7de0e
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 4fb7ddc6
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
thanks
wohhhhhhhhhhh
what is this ???
http://forum.xda-developers.com/showthread.php?t=382609
Is this what you are reffering?
http://wiki.xda-developers.com/index.php?pagename=XdaUtils%2Fpdocread.exe
vaibhav_batra_the_techguy said:
http://forum.xda-developers.com/showthread.php?t=382609
Click to expand...
Click to collapse
thanks i can see list with -l switch and i can read bootloader:
pmemdump.exe 0x8c000000 262144 SPL.nb
but i give this error for rom dump:
pdocread.exe -w -d DSK1 -b 0x800 -p Part00 0 0x313400 Part00.raw
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)
ERROR: ITReadDisk : read 00140178 bytes - The device is not ready for use.
whats happen?
pashaa said:
thanks i can see list with -l switch and i can read bootloader:
pmemdump.exe 0x8c000000 262144 SPL.nb
but i give this error for rom dump:
pdocread.exe -w -d DSK1 -b 0x800 -p Part00 0 0x313400 Part00.raw
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)
ERROR: ITReadDisk : read 00140178 bytes - The device is not ready for use.
whats happen?
Click to expand...
Click to collapse
use the attached to dump
IPL
SPL
EXT ROM
OS
vaibhav_batra_the_techguy said:
use the attached to dump
IPL
SPL
EXT ROM
OS
Click to expand...
Click to collapse
wow
thanks alot
i have 2 question:
1- now how can i write back dumed spl file to my gene(hardspl ok)?
2- and how can i change my gene imei?(is possible change imei in dumped file and write it back?)
thanks again.
I can see that you are going to something innovative for gene! Good Luck!
Another way to dump is using itsutils. (Its by Itsme, one of the mods).
Just search xda for it. You will get a descriptive guidelines about how - what - when.
Also there is a thread about imei changing in xda, either dev / hack or general forum.
Addicted2xda said:
Another way to dump is using itsutils. (Its by Itsme, one of the mods).
Just search xda for it. You will get a descriptive guidelines about how - what - when.
Also there is a thread about imei changing in xda, either dev / hack or general forum.
Click to expand...
Click to collapse
yes iam using that tool(see first post)
pashaa said:
yes iam using that tool(see first post)
Click to expand...
Click to collapse
There is a thread dedicated to itsutil, in the TD section most probably, which has everything you want to know about it (including how to write back the original spl from the dumped file).
Dump Rom
vaibhav_batra_the_techguy said:
use the attached to dump
IPL
SPL
EXT ROM
OS
Click to expand...
Click to collapse
Vaibhav,
I am Getting error message....No file created in the disk...What am i doing wrong?I hve 1gb space in the disk
Hi,
This is my first thread since I've become a member of this this forum.
I am trying to make a backup of my NIKI100 with original rom from TIM Brazil provider.
I just did a dump of my Niki100 ROM with the following commands and outputs:
pdocread -l
$ ./pdocread.exe -l
210.88M (0xd2e0000) FLASHDR
| 3.12M (0x31f000) Part00
| 3.50M (0x380000) Part01
| 79.13M (0x4f20000) Part02
| 125.13M (0x7d20000) Part03
STRG handles:
handle#0 8748c452 125.13M (0x7d20000)
handle#1 074b3d22 79.13M (0x4f20000)
handle#2 e74b3cfe 3.50M (0x380000)
handle#3 e74b3a4a 3.12M (0x31f000)
disk 8748c452
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 074b3d22
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk e74b3cfe
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk e74b3a4a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
and
pdocread -w -d FLASHDR -b 0x800 -p Part00 0 0x31f000 Part00.raw
pdocread -w -d FLASHDR -b 0x800 -p Part01 0 0x380000 Part01.raw
pdocread -w -d FLASHDR -b 0x800 -p Part02 0 0x4f20000 Part02.raw
pdocread -w -d FLASHDR -b 0x800 -p Part03 0 0x7d20000 Part03.raw
So I used the tutorial described on http://forum.xda-developers.com/showthread.php?t=361271 to rebuild my ROM.
I didn't test the result because my phone is still working with original ROM, then please, if someone of you can make this test for me, I would appreciate it very much!
I tried this way of rebuilding because the method that uses PKGTool doesn't work for my rom. PKGTool doesn't read information on packages.sop (file in my rom seems to be empty...). And the packaging doesn't work.
Well, I uploaded the raw files if someone interests, and the RUU with .nbh generated (at less I tried). Below the links:
raws-Niki100-WM6-PT-BR-(TIM_BRASIL).rar - http://www.mediafire.com/?fzzzimcly3j
WM6_RUU_Nike_TIM_Brazil_PTB_1.35.527.13_No_Radio.zip - http://www.mediafire.com/?omgyyjgegxz
Please tell me the result, if you can do it. Thanks for this great forum.
Not working: Camera and settings 3g internet
I install this ROM and NOT get them all working A CAMERA AND SETTINGS 3G INTERNET, you'd solve this problem?
Please send new link.. this link not working.. Tks
Can someone reupload please?
Could you please post the file again please.
I'm waiting.
If you can send me by e-mail "'faces.faces: hotmail.com'"
link. dead i need a file please....