how to unlock rom on treo 750v - made by htc [Archive]

View Full Version : how to unlock rom on treo 750v - made by htc

codyppc

9th October 2006, 02:47 PM

hannip

9th October 2006, 09:51 PM

So far we've manage to get someone to try the grab_it tool from
http://forum.xda-developers.com/showthread.php?t=238945

But they are getting a write error. I assumed since the Treo 750v uses a mini-sd card the appropriate version of grab_it would be grab_it_128_minisd_468.exe. I'm trying to get someone to try the grab_it_128_150.exe version to see if that works, since that is the version BeyondTheTech used to extract the Treo 700w rom. The 700w uses a regular sd card though.

I asked the guy that tried grab_it_128_minisd_468.exe what the storage card folder name was set to and they verified that the registry was set to "Storage Card". So it's unclear to me why they are getting a write error. Maybe the minisd version expects something else? The card used was a 2GB minisd so it should have plenty of room for the rom.

Anyone familiar with grab_it know what is different about the minisd version? I read through the thread but it wasn't clear to me what the difference is.

750v_User

10th October 2006, 10:13 AM

100thMonkey

10th October 2006, 02:37 PM

i have hope 750v user and appreciate your efforts

hannip

10th October 2006, 05:27 PM

robdes

10th October 2006, 08:55 PM

If anyone has a source for a unlocked 750v let me know i really need one.

boer

10th October 2006, 09:56 PM

Ok, I'm the one who's run the grabit tool on a 750v :D

It runs Ok and creates a 128Mb dump.bin file but the file appears to be mostly empty. If I zip the file up it only takes 147Kb which seems to confirm this. Am I doing something wrong or is it a bug in the tool :confused:

Hi, please can you do me favor? I have idea which can help us get SMS threading application and other palm features as well. If isn't possible dump ROM in this moment can you download Total Commander (freeware) http://www.ghisler.com/pocketpc.htm and do following.

1, Create foder on memory card and go to the Total commander.
2, go to the root of your device and copy to SD everything what is possible specially from Windows folder and Program Files (rest will be fine as well)
- this will take some time and in case of problem with file just skip that file.
3, When this will be done please go into the "\\" in the root and then to "registry"
4, now select registry tree one by one and copy again to card.

This will give us most probably files which will be required for hack and registry keys which will be required as well i think.

Thank you very much for your help.

750v_User

10th October 2006, 11:36 PM

Here's a zipped up copy of the dump.bin file, hope it helps :)

hannip

11th October 2006, 12:09 AM

I extracted that dump.bin and it looks like a 256 byte block of data that is repeated at each 16 meg boundary 8 times.

Does this ring any bells to the experts?

The only readable text is "CHEETAH IPL EVT".

100thMonkey

11th October 2006, 02:55 AM

wow! that's great!

pof

11th October 2006, 03:25 AM

I don't have a Cheetah, but there's some info on the hermes forum that might be of interest to you:

http://forum.xda-developers.com/showpost.php?p=1019171&postcount=22

hannip

11th October 2006, 05:28 AM

750v_User please try this program to extract the rom image.

unzip and copy TestDump.exe to your device and run it. In the "Path to file" enter the path for the dump file (i.e. \Storage Card\dump.bin). In the "Mbytes to dump" enter 128. Then press the "Dump" button. It should make a dump of the ROM file.

Zip it up and upload here. Thanks!

hannip

11th October 2006, 05:35 AM

I don't have a Cheetah, but there's some info on the hermes forum that might be of interest to you:

http://forum.xda-developers.com/showpost.php?p=1019171&postcount=22

Thanks. That post appears to be for updating the rom. I wonder if there is some key combo like this to extract the rom.

pof

11th October 2006, 10:01 AM

Thanks. That post appears to be for updating the rom. I wonder if there is some key combo like this to extract the rom.

Based on the Hermes experience, there's no knonw way yet to extract it in a form that after is flashable on another device, but you can follow these instructions to dump some parts:

http://wiki.xda-developers.com/index.php?pagename=Hermes_HowtoDumpRom

You can also use pmemdump (http://wiki.xda-developers.com/index.php?pagename=XdaUtils%2Fpmemdump.exe) to copy some of the ROM contents to a file. Once you've dumped SPL you can search for strings on it and you'll see the bootloader commands.

HTC has removed all the "d2s, s2d, r2sd..." and like commands in the hermes bootloader, probably you are lucky and you have some command to dump the rom to sd in your bootloader.

Hope that helps :)

robdes

11th October 2006, 11:51 AM

The ROM dump // extract discussion is over my head...one question though has anyone sorted out how to unlock this device?

treonu-b

12th October 2006, 12:07 AM

we are trying to unlock and or dump the rom on the treo 750v. this is a newly released treo made by htc. the treo has an awesome feature called theeaded sms which does chat style sms.
we have tried the grab it program that was on this site with no luck.
does anyone no of a way to get this done? does any have any ideas of why the grab it program doesn't work. does anyone want to help?

thanks, cody

im just a noob but cant we use the combination of StyleTap (http://styletap.com/index.php) and AdvBackup to create a complete rom backup of the treo 750v and then grab what we want from that?

will that work????

just tryin to help........

cali0028

13th October 2006, 06:43 AM

what if someone get the .nbh file..can that be extracted??

hannip

13th October 2006, 07:48 AM

I put a rom dump from the TestDump.exe tool on ftp.xda-developers.com. userid: xdaupload pw: xda
file: treo750v_dump_rom.zip

I used the dumprom tool to extract files, but it looks like it's only extracting the first rom section it finds and stops. Can one of the experts take a look at the dump and see if you can extract the other sections please.

Thanks.

Darth Pooh

13th October 2006, 04:24 PM

What are you getting from the first rom section?

Sounds weird... was the dump complete?

hannip

13th October 2006, 06:32 PM

It looked like a bunch of system files. The kernel, img.dll, filesystem drivers and the like.

There is 59MB of data in the dump so there has to be more stuff in there.

hannip

13th October 2006, 08:31 PM

Did some searching and found a post from mamaich that says:

"dumprom can dump files only from XIP section
You should use my viewimgfs tool to dump files from IMGFS section or rdmsflsh.pl script by itsme. itsme's script reconstructs DLLs to a normal form that are ready for decompilation."

So I guess the first thing we need to do is figure out how to dump the imgfs from the bin file. I'll keep searching, but it would be really cool if one of the experts could take a look at the treo750v_dump_rom just to verify it is good and maybe assist with the extraction. I'm a noob at extracting files from a rom so any help would be greatly appreciated. :)

750v_User

18th October 2006, 07:29 PM

I've run the itsutils tool and extracted the 3 parts, are these any use or not?

750v_User

18th October 2006, 07:55 PM

Here's a zip of the files Hannip mentioned earlier with the exclusion of smsReceiver_dll.dll which isn't in the dump file :confused:

hannip

18th October 2006, 07:56 PM

can you zip them up and upload to xda ftp please (or send me a link in PM). I'd like to compare it to the other dump. Thanks!

hannip

18th October 2006, 08:01 PM

Here's a zip of the files Hannip mentioned earlier with the exclusion of smsreceiver.dll which isn't in the dump file :confused:

That's exactly what I wanted to check. Hey can you download the TaskMgr app posted in the dev and hacking area. If you could use that to list the services, I'd like you to check if there is an SMSReceiver service running.

Thanks!

750v_User

18th October 2006, 08:03 PM

Uploading to the FTP server now :D

It's called 750v.zip and is in the Treo750v folder :cool:

hannip

18th October 2006, 08:26 PM

Got it. Looks the same as the other one, which is good news. :)

I am confused about the missing SMSReceiver dll. If there is an SMSReceiver service running on the 750 I don't know where it's finding it.

750v_User

18th October 2006, 08:27 PM

If there is an SMSReceiver service running on the 750 I don't know where it's finding it.

Doesn't appear to be running and it's not listed in the Windows directory on the device :confused:

hannip

18th October 2006, 08:34 PM

Doesn't appear to be running and it's not listed in the Windows directory on the device :confused:

Ah ok, maybe Palm's sms app doesn't use it then. I bet they just forgot to clean up the registry for that service. Good news. Thx

750v_User

19th October 2006, 12:03 AM

It appears someones done it :eek:

http://forum.xda-developers.com/showthread.php?t=280256

hannip

19th October 2006, 12:41 AM

yes and it works great!

t5turner

18th December 2006, 01:06 PM

Hello:

Does anyone know if the ROM grab will work on a Treo 650? I copied autorun to the 2577 folder on my 2GB SD card and it did not work. I am trying to grab the rom off my phone and to get media. The screen on my phone is broken and the device is to full to run a hotsync. I even tried using Shadowmite ROM Tool to retrieve the data but I have a security password on my phone so the tool does not work. Any ideas on how to retrieve the data?

Houz74

20th December 2006, 01:11 PM

Hello:

Does anyone know if the ROM grab will work on a Treo 650? I copied autorun to the 2577 folder on my 2GB SD card and it did not work.
This works only on a Windows Mobile Phone, PalmOS won't work.

treonu-b

1st February 2007, 12:29 AM

This works only on a Windows Mobile Phone, PalmOS won't work.

correct.......but you could use This ROM tool (http://grack.com/romtool).......

it works perfectly for the treo 650.......can even edit the tokens........
(sorry for off topic a bit but thought i could help....)