FiziFetch Memory/ROM Dumper

[FooBar69]

Attached is a file I found on google when searching for the virtualalloc and virtualcopy functions. I don't know who made it or where it came from.

All source code and executables are included.

It works the same way grab_it from buzz lightyear "appears" to work, by using virtualalloc and virtualcopy.

This doesn't work on my ETEN M600 but maybe it will help someone in the forum.

All the stuff is in chinese it appears, i'm waiting for my friend to see if it is infact chinese and he will translate all the comments and I'll put up the translated version in english when I get a chance.

Apparently you need to run this in a high privledged mode. If anyone knows what exactly that means in relation to Windows Mobile/CE devices and how you can change the way a process runs on Windows CE, please post it here on this forum.

Regards,

FB

[vijay555]

Is it functionally different to Buzz's app?

V

[mamaich]

If it don't work on your eten - you should search forum for TestDump.exe program I've posted somewhere. It uses alternate method to find ROM start.

By the way, buzz also uses VirtualAlloc/Copy. This is the only way to access physical memory directly.

[FooBar69]

It has flexible input options like starting location and size and file location, plus source code... I guess those are the main differences.

In regards to the TestDump.exe, I've tried that and it appears to dump the RAM, however it would be really nice if it dumps the ROM. Because if you put in 128, which is the size of the ROM, it fails to retrieve the data, after 64mb, it fails... It only gets 64mb whenever I tried it, and it is the stuff in RAM it appears.

For further info regarding the testdump test, I put a post here:

http://www.eten-users.net/topic1085

Regards,

FB