Sorry for my English...
A situation means following:
There is smartfon Ginza MS100, made a company Lenovo to order of to one known Russian company and spreads only in Russia. I am for him flasher, which is obtained insiders from an this company but firmware for device are not present and how to use flasher nobody knows. It would be desirable to create firmware on the basis of WM6. Is it possible? Are there what that general facilities? Is there possibility to tear out driver from the already existent firmware and to build them in what that base (if it exists)? What will say on this occasion?
Are there what that general facilities of tearing out of the native firmware from a device? A device can be loaded in what that Engine Test and during connecting to the computer of windows requires a driver, this driver is (for OMAP 750).
* Windows Mobile 5.0 Smartphone Edition
* Texas Instruments OMAP 750, 200 MHz
* 64 Mb RAM / 128 Mb ROM
* miсroSD
* display 1.8", 176x220, 64 k colors
* GSM 850/900/1800/1900
* GPRS: class 10
* miniUSB
* Bluetooth 1.2
FLASH: M - systems (Disk On Chip) M08832-d16-v3-X-P
RAM: HYE18M512 (160BF75)
Yes, any WM5 device can be converted to WM6.
You will either need to figure out how to use the flasher, or see if you can use pdocread and pdocwrite from itsutils. Search the forums for itsutils. To use itsutils, the device also needs to be Application Unlocked. I have found itsutils and SDA_Application_Unlock.exe both work fine on non-HTC devices like Samsung SGH-i607 for example.
There are many steps to this though. The first is to dump your existing ROM. For this, you use pdocread from itsutils.
Follow the instructions here:
http://wiki.xda-developers.com/index.php?pagename=Hermes_HowtoDumpRom
Once you get past that step, the other steps are:
1. Extract XIP.
2. Replace MSXIPKERNEL in XIP with WM6 MSXIPKERNEL.
3. Extract SYS and OEM from dump.
4. Replace SYS folder with WM6 SYS folder.
5. Flash phone and hope it boots.
That's just a brief overview, there is much more to do within each step, so see if you can get a dump with pdocread first and we'll go from there.
C:\itsutils>pdocread -l
59.94M (0x3bf1000) TrueFFS
| 1.37M (0x15fc00) Part00
| 2.50M (0x280000) Part01
| 44.13M (0x2c20000) Part02
54.20M (0x3632000) TrueFFS
| 1.37M (0x15fc00) Part00
| 2.50M (0x280000) Part01
| 44.13M (0x2c20000) Part02
STRG handles:
handle 87a20756 54.14M (0x3623200)
handle a7a7d932 44.13M (0x2c20000)
handle 67a7d736 2.50M (0x280000)
handle 87a7d712 1.37M (0x15fc00)
disk 87a20756
3 partitions, 1 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk a7a7d932
3 partitions, 1 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 9b 28 02 02 23 1f 11 29 1b 02 07 be
disk 67a7d736
3 partitions, 1 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 9b 28 02 02 23 1f 11 29 1b 02 07 be
disk 87a7d712
3 partitions, 1 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 9b 28 02 02 23 1f 11 29 1b 02 07 be
in the manual on step 7
pdocread -h 0xHANDLVALUE 0 0xSIZEVALUE diskimage.nb or pdocread -d storename -p partitionname StartValue LengthValue file.raw
in my case:
HANDLVALUE?
SIZEVALUE?
storename?
partitionname?
StartValue?
LengthValue?
Don't worry about that line in Step 7, you are ready to go to Step 8.
Where the example has FLASHDR, you would use TrueFFS.
On Step 9, also use TrueFFS instead of FLASHDR, and use the hex size values obtained in Step 8.
Code:
C:\itsutils>pdocread -w -d TrueFFS -p Part00 -t
real nr of sectors: 2814 - 1.37Mbyte (0x15fc00)
C:\itsutils>pdocread -w -d TrueFFS -p Part01 -t
real nr of sectors: 5120 - 2.50Mbyte (0x280000)
C:\itsutils>pdocread -w -d TrueFFS -p Part02 -t
real nr of sectors: 90368 - 44.13Mbyte (0x2c20000)
C:\itsutils>pdocread -w -d TrueFFS -p Part00 0 0x15fc00 Part00.raw
CopyTFFSToFile(0x0, 0x15fc00, Part00.raw)
C:\itsutils>pdocread -w -d TrueFFS -p Part01 0 0x280000 Part01.raw
CopyTFFSToFile(0x0, 0x280000, Part01.raw)
C:\itsutils>pdocread -w -d TrueFFS -p Part02 0 0x2c20000 Part02.raw
CopyTFFSToFile(0x0, 0x2c20000, Part02.raw)
C:\itsutils>
14.03.2008 18:36 1*440*768 Part00.raw
14.03.2008 18:37 2*621*440 Part01.raw
14.03.2008 18:43 46*268*416 Part02.raw
With no errors
Dump uploaded here: http://rapidshare.com/files/99502959/Ginza_MS100_Russian_Rom.zip.html
how I must do next steps?
Once you get past that step, the other steps are:
1. Extract XIP.
2. Replace MSXIPKERNEL in XIP with WM6 MSXIPKERNEL.
3. Extract SYS and OEM from dump.
4. Replace SYS folder with WM6 SYS folder.
5. Flash phone and hope it boots.
Code:
C:\itsutils>pdocread -t
real nr of sectors: 122880 - 60.00Mbyte (0x3c00000)
C:\itsutils>pdocread 0x0 0x3c00000 dump.nb0
CopyTFFSToFile(0x0, 0x3c00000, dump.nb0)
14.03.2008 20:05 62 914 560 dump.nb0
uploaded here: http://rapidshare.com/files/99521029/Ginza_MS100_Russian_dump.zip.html
Code:
C:\itsutils>pdocread -n0 -t
real nr of sectors: 4 - 256.00kbyte (0x40000)
C:\itsutils>pdocread -n0 0x0 0x40000 spl.nb0
CopyTFFSToFile(0x0, 0x40000, spl.nb0)
14.03.2008 20:08 262 144 spl.nb0
uploaded here: http://rapidshare.com/files/99522575/Ginza_MS100_Russian_spl.zip.html
[Core OS]
Windows Mobile-based Smartphones
[Versions]
SYS: 5.1.15671.3300
OEM: 5.1.0.3300
SYS: 1.0.4294.0
SYS: 5.1.15671.0
[Language]
0409 - English (United States)
0419 - Russian (Russia)
[DPI]
96
[Certificates]
CN=Microsoft Windows Mobile PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
CN=Windows Mobile 5.0 - Lenovo Root
[Missing Manifests]
b5332311-48f1-4b76-ad70-8efa5db8fa3a.dsm
06643136-a4b6-e0d8-67f2-1e3b621844f8.dsm
42d1aab7-6dfa-4c03-9797-d66f7620883d.dsm
65a5386c-0b77-c0b9-d673-4daafbf007aa.dsm
Sounds like you already figured out how to extract the dump and use PKGTOOL to separate into SYS and OEM, correct?
Either Part00.raw or Part01.raw is your XIP. The easiest way to find out which is the XIP is by using XIPPORT. Take each one and make a copy. Rename the copy to XIP.BIN and put in the same folder as XIPPORT. Then run XIPPORT and do a "Dump XIP.BIN". This will create an OUT folder. The one that creates an OUT folder with folders Modules and Files is the XIP.
Once you have the XIP dumped to an OUT folder, click "Write Maps". Then click "Make Packages". In Files and Modules will be the folder MSXIPKERNEL. Delete that folder in both Files and Modules and replace with MSXIPKERNEL from WM6. In MSXIPKERNEL from WM6, there may be a file oxast0.dll and hd.dll, you can remove them. This will make more space. Then use the tool M'Reloc to change the addresses of the modules to fit (use MAP.txt as your guide). You will also have to manually change the same addresses in ImageInfo.txt for each module. Once that's done, click "Realloc P". If that crashes, just click "Write Maps" and look in MAP.txt for anything with !!!!!!!! which means there's overlap. You'll have to tweak addresses or change XIP size by making changes on ROMHDR.txt. Once you have an XIP with no errors, write XIP_OUT.BIN. At this point, I don't really know what to do because I use the Rom Update Utility that HTC has for their phones, but I think you might be able to use PDOCWRITE to write the new XIP into the phone as I believe that was its intended purpose. If your new XIP boots, then the rest is easy. You would just replace the SYS folder of your WM5 with the SYS folder from WM6. Then run G'Reloc to relocate any modules. After that, run BuildOS which makes a dump folder. Then using Tadzio's tools (IMGFSFROMDUMP), you can build that back into a .bin file. After that, for HTC devices I convert .bin to .nb file with XIP embedded, and then an .nbf or .nbh file to flash using HTC's ROMUpdateUtility, but if you don't know what the normal format is for the flasher, you might just try pdocwrite to write the .bin file directly to the phone.
It normally will not brick the phone if you don't overwrite the bootloader, so be very careful not to accidentally overwrite the bootloader in any way. There is no easy way to repair the phone if the bootloader has been overwritten.
In fact, it is probably best for now to try to figure out how the flash utility for that phone works. For example, what kind of file format does it need?
It's safest to use the flash utility for your phone because there is usually a way to recover from a bad flash or one that doesn't boot.
For example, what kind of file format does it need?
Click to expand...
Click to collapse
I attached scrin from flasher
Greetings,
I have a PN820 Smartphone from Verizon (CDMA), and wonder if I could dump the rom, and update it to wm 6.x?
using pdocread -l:
55.95M (0x37f2000) TFFS
| 1.19M (0x12fc00) Part00
| 2.19M (0x230000) Part01
| 52.57M (0x3492000) Part02
59.94M (0x3bf1000) TFFS1
| 59.88M (0x3be2000) Part00
968.75M (0x3c8c0000) DSK1:
| 968.50M (0x3c880e00) Part00
STRG handles:
handle 03fabf8e968.50M (0x3c880e00)
handle 43f93a66 59.88M (0x3be2000)
handle a3f932e2 52.57M (0x3492000)
handle 23f930e6 2.19M (0x230000)
handle 43f930c2 1.19M (0x12fc00)
disk 03fabf8e
0 partitions, 0 binary partitions
Any one know the key sequence to get the Ipaq Rx5900 series into boot loader mode? or any other way of flashing the ROM? Please help
taket from here http://forum.xda-developers.com/archive/index.php/t-325554.html
Alfatv
06-01-2009, 04:26 AM
OK, here is something.
Bootloader mode:
Disconnect from USB or shut down Active sync processes
While holding Record button(near reset) and Quick Launch(top) press Reset.
It will reboot and the following will appear STEPLDR:1.00.01 BOOT:1.00.04 MVB.
Next press Rotate button, otherwise it will exit bootloader.
USB disconnect message will appear.
Now shut down Activesync processes if haven't done already and connect USB, USB disconnect message will change to USB.
Next, run mtty11a.
Select USB port, \\.\WCEUSBSH002 in my case
Terminal window opens, but unfortunately no messages or any prompt
Another more successful experiment with itsutils and imgfs_tools
Used instructions from this page:
http://wiki.xda-developers.com/index.php?pagename=Elf_HowToDumpOSManually
C:\5915>pdocread -l
47.95M (0x2ff4000) DSK1:
| 1.50M (0x17fc00) Part00
| 3.00M (0x300000) Part01
| 33.00M (0x2100000) Part02
| 10.45M (0xa74000) Part03
1.74G (0x6f3c0000) DSK2:
| 1.74G (0x6f200000) Part00
79.92M (0x4fec000) DSK3:
| 79.84M (0x4fd8000) Part00
C:\5915>pdocread -w -d DSK1: -p Part02 -t
real nr of sectors: 67584 - 33.00Mbyte, 0x2100000
The OS is in partition 2, I was able to dump and unpack it!
Next steps? Any experts?
First post - Hi all!
I've been searching and reading many post here regarding the chinese iClone, I have the CECT T32 and so far I'm pretty happy with it. I bought it with the intention of doing some customisation but have since learnt that no one has successfully flashed this device (Can't enter Bootloader). I've managed to dump solme stuff from it (Thanks Chuckbert) and I now have 4 files - PART00 /01 /02 /03 .. all .RAW ... have I got the correct files to start with?... I've also been looking for a 'ROM kitchen' but they all seem to be device specific... I've heard the T32 hardware is similar to the Wizard... not sure....
So many many question -
Can I start 'cooking' withe the files I've dumped?...
Can I extract the OS files/drivers and other stuff from these .RAW files?.. and with what tools?
Is there a way to flash my device? (MSFLASH) - M-Systems Flash Disk?
Can I do a full flash and load a new bootloader?...
I've made some progress by dumping those files but now I'm hitting brick walls!
Cheers
I used the following to dump -----------
C:\itsutils>pdocread -w -d msflash -p Part00 -b 0x800 0 0x11f000 Part00.raw
CopyTFFSToFile(0x0, 0x11f000, Part00.raw)
-l details ------------
C:\itsutils>pdocread -l
125.75M (0x7dc0000) MSFLASH
| 1.12M (0x11f000) Part00
| 1.75M (0x1c0000) Part01
| 47.13M (0x2f20000) Part02
| 75.75M (0x4bc0000) Part03
970.00M (0x3ca00000) DSK1:
| 969.88M (0x3c9e0e00) Part00
STRG handles:
handle#0 47a7de5e 969.88M (0x3c9e0e00)
handle#1 67a403da 75.75M (0x4bc0000)
handle#2 27a67aee 47.13M (0x2f20000)
handle#3 a7a67aca 1.75M (0x1c0000)
handle#4 a7a678fa 1.12M (0x11f000)
CECT/Daxian T32/X999 - ROM dev. and flashing
Just wondering how far you've got since you made this post? I'm attempting the same with my T32 and are finding the going slow. I haven't yet been able to create the 4 files yet successfully. I'm have trouble with the following command with the -b switch and obtaining the part correct size.
pdocread -w -d msflash -p Part00 -b 0x800 0 0x11f000 Part00.raw
I'm using the following command to extract the part sizing however it incorrectly tell me that all parts are 0x200 in size.
pdocread -w -d msflash -p Part00 -t
I've copied your command above to successfully dump part00.raw from my PDA but I cannot proceed any further with the other parts without the correct sizing. Could you tell me how you got the correct sizing?
Boot loader for Daxina T32
Found this Rom for Daxian T32, people on that forum said it works!
just copy content to flash disk and press
volume down + camera + power
best flash disk for this is 256 or 512 mb.
link
http://rapidshare.com/files/290170747/Dixian_x999_T32.zip.html
thank you Determo 13;
Do you mean a usb falsh disk with adatator for the daxian T32 ?
My daxian t32 stay on the windows logo since 1 year ;
Still waiting for a Rom to flash !
unfortunately your links http://rapidshare.com/files/29017074...9_T32.zip.html does not work ;
May you réupload ?
Thanks
bootloader
sand disk for your phone, just copy all content there and press
volume down + camera + power done.... new link to bootloader you can find
http://forum.xda-developers.com/showthread.php?t=390574&page=15
thanks Dertermo 13 , perfectly working now !! after one year block on windows logo;
phsh
Daxian T32 rom development
I can not download the link. Can you redownload it? or is there any other link to wonload it? Thank you
maybe I should have posted this here first ...
First post - Hi all!
I've been searching and reading many post here regarding the chinese iClone, I have the CECT T32 and so far I'm pretty happy with it. I bought it with the intention of doing some customisation but have since learnt that no one has successfully flashed this device (Can't enter Bootloader). I've managed to dump solme stuff from it (Thanks Chuckbert) and I now have 4 files - PART00 /01 /02 /03 .. all .RAW ... have I got the correct files to start with?... I've also been looking for a 'ROM kitchen' but they all seem to be device specific... I've heard the T32 hardware is similar to the Wizard... not sure....
So many many question -
Can I start 'cooking' withe the files I've dumped?...
Can I extract the OS files/drivers and other stuff from these .RAW files?.. and with what tools?
Is there a way to flash my device? (MSFLASH) - M-Systems Flash Disk?
Can I do a full flash and load a new bootloader?...
I've made some progress by dumping those files but now I'm hitting brick walls!
Cheers
I used the following to dump -----------
C:\itsutils>pdocread -w -d msflash -p Part00 -b 0x800 0 0x11f000 Part00.raw
CopyTFFSToFile(0x0, 0x11f000, Part00.raw)
-l details ------------
C:\itsutils>pdocread -l
125.75M (0x7dc0000) MSFLASH
| 1.12M (0x11f000) Part00
| 1.75M (0x1c0000) Part01
| 47.13M (0x2f20000) Part02
| 75.75M (0x4bc0000) Part03
970.00M (0x3ca00000) DSK1:
| 969.88M (0x3c9e0e00) Part00
STRG handles:
handle#0 47a7de5e 969.88M (0x3c9e0e00)
handle#1 67a403da 75.75M (0x4bc0000)
handle#2 27a67aee 47.13M (0x2f20000)
handle#3 a7a67aca 1.75M (0x1c0000)
handle#4 a7a678fa 1.12M (0x11f000)
can anyone help repair T32 Rom ? The screen hangs on the winodows mobile blue page. Pls help
i just flash it whit some files i download from here
The phone is gorking but now i have white screen the fon seens like it recive phonecalls and everytin but whit out screen there is nothing to touch
Hello
I dumped my user's file partition on my HTC S740 by pdocread like this
pdocread.exe -w -d FLASHDR -b 0x800 -p Part03 0 0x25e0000 Part03.raw
It creates a file named Part03.raw but when I mouted it as a Physical drive to recovery some file by mout image pro, it cant be read. The system said it must be formated.
What's wrong? help me please.
help me please