View Full Version : I want to Flash the dumped-RomImage to Hermes-TFFS.
yoshito tagashira
14th November 2006, 07:35 AM
pdocwrite can write the dumped ROM image to Hermes-FlashROM.
(Hermes-FlashROM is m-sys tffs chip).
Is there any person who had actually written the partition data obtained by pdocread in hermes?
now,I Upload the "SoftBank X01HT Dumped Image"!!
Is there any person who can change this image into NBH format?
pof
14th November 2006, 11:23 AM
pdocwrite can write the dumped ROM image to Hermes-FlashROM. (Hermes-FlashROM is m-sys tffs chip).
Sorry to say that hermes uses NAND flash (Samsung K5D5657) and not m-sys disc-on-chip. pdocwrite can't wirte to this type of flash.
Is there any person who had actually written the partition data obtained by pdocread in hermes?
None that I know.
now,I Upload the "SoftBank X01HT Dumped Image"!!
Is there any person who can change this image into NBH format?
Create an NBH is easy, sign the NBH so that it can be flashed into device without getting an "invalid cert" error... is not possible unless you have HTC private key or you patch the SPL to use your own certificate.
yoshito tagashira
14th November 2006, 03:24 PM
Hi Pof
Thanks res to me!
If what is necessary is just to write a raw image to Flash,There is a method.
Surely, the WInCE version for "iPAQ-Linux bootloader-source" can be used.
There is much source of a CFI interface about Flash writing.
Now,I am just using X01HT By Docomo firmware as HTCz.
pof
14th November 2006, 03:28 PM
Do you mean you rewrite imgfs on X01HT using HTCz extracted raw image? Can you post step-by-step instructions?
yoshito tagashira
15th November 2006, 01:22 AM
The following is my opinion.
It cannot actually judge whether it is possible.......
For example, in Linux, if the MTD driver for FlashROM is installed in the system, the contents of FlashROM can be written by the dd command.
I think it possible to make the program which can perform this on WinCE.
If the raw data which I extracted from X01HT using "pdocread" comes to correct, this data can be returned to an original state by writing in simply on CFI type ROM.
is it?
pof
15th November 2006, 01:45 AM
The following is my opinion.
It cannot actually judge whether it is possible.......
For example, in Linux, if the MTD driver for FlashROM is installed in the system, the contents of FlashROM can be written by the dd command.
Right, the MTD subsystem allows you to do this, dd just does a raw copy.
I think it possible to make the program which can perform this on WinCE.
I'm not wince programmer, but i guess it should be possible, there are such programs for windows plaform (rawrite.exe or psdwrite.exe (http://wiki.xda-developers.com/index.php?pagename=XdaUtils%2Fpsdwrite.exe) from itsme).
If the raw data which I extracted from X01HT using "pdocread" comes to correct, this data can be returned to an original state by writing in simply on CFI type ROM.
is it?
I'm not sure if you can 'hot-overwrite' it while the device is running wince, i'm not an expert in that area... probably itsme (the author of itsutils) can point you to the right direction on this.
yoshito tagashira
24th November 2006, 02:42 AM
■Outline
pdocread and pdocwrite are delivering the command to the itutils.dll thread which moves on wince.
It seems that the reading and writing which went via WindowsAPI will be performed if -w option is attached to pdocread.
Therefore, it can be said that the raw data read by pdocread is reflecting the contents of FlashROM as it is.
However, when pdocwrite writes in FlashSOM via ituils.dll, the WinCE itself will rewrite itself.
"An act which replaces the head, living "->Danger
It seems that there are all contents of FlashROM in a NBH file.
But IPL is an OneTimeProgramr Aria.-> CanNot rewrite?!?!
What NBH contains IPL?
Since I want to use HermesOS of SoftBank somewhat newer than HermesOS of Docomo, I want to rewrite WM5.0 carried in SoftBank.
the product made from SoftBakk -- I want to kill that annoying SIM check thread from X01HT
If bootloader is started via mtty, although it will think that FlashROM can be rewritten directly ???
cr2
24th November 2006, 11:14 AM
For example, in Linux, if the MTD driver for FlashROM is installed in the system, the contents of FlashROM can be written by the dd command.
I think it possible to make the program which can perform this on WinCE.
It will be better to make Linux work on hermes :D
vBulletin® v3.8.7, Copyright ©2000-2012, vBulletin Solutions, Inc.