[TUT]Dump Diamond ROM

[MaroO]

Before going for a new ROM I wanted to first backup mine.

My actual ROM version is 1.37.406.1 FRE.

Is the dumping process the same for all HTC models?

[adwinp]

There are a LOT of threads regarding backup on the diamond.


Search is also your best friend.

[pof]

Dump the ROM:

C:\bin>pdocread.exe -l
210.38M (0xd260000) DSK1:
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 106.38M (0x6a60000) Part02
| 96.50M (0x6080000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle e6932666 3.75G (0xf0000000)
handle e7cae8da 96.50M (0x6080000)
handle c7db27be106.38M (0x6a60000)
handle a7db279a 4.38M (0x460000)
handle 67db2752 3.12M (0x31f000)
[...]

C:\bin> pdocread.exe -w -h 0x67db2752 -b 0x800 0 0x31f000 Part00.raw
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)

C:\bin> pdocread.exe -w -h 0xa7db279a -b 0x800 0 0x460000 Part01.raw
CopyTFFSToFile(0x0, 0x460000, Part01.raw)

C:\bin> pdocread.exe -w -h 0xc7db27be -b 0x800 0 0x6a60000 Part02.raw
CopyTFFSToFile(0x0, 0x6a60000, Part02.raw)

C:\bin> pdocread.exe -w -h 0xe7cae8da -b 0x800 0 0x6080000 Part03.raw
CopyTFFSToFile(0x0, 0x6080000, Part03.raw)


Dump the bootloader:

C:\bin> pmemdump.exe 0xa8000000 524288 SPLdumped.nb
CopyProcessMemoryToFile(00000042, a8000000, 00080000, SPLdumped.nb)


Enjoy :)

[MaroO]

Thanks a lot pof, but how do I use that? :)

There are a LOT of threads regarding backup on the diamond.


Search is also your best friend.
Could you please link to one because I failed to find any personally? That would really help. Thanks a lot.

[Dpakrawal]

Hay the dump of part 02 is taking a long time for my device !?!?.. is it generally like that !?!?

[akil3x]

How can i do this, can o give a little lesson about this???

I appreciate a lot :)

Dump the ROM:

C:\bin>pdocread.exe -l
210.38M (0xd260000) DSK1:
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 106.38M (0x6a60000) Part02
| 96.50M (0x6080000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle e6932666 3.75G (0xf0000000)
handle e7cae8da 96.50M (0x6080000)
handle c7db27be106.38M (0x6a60000)
handle a7db279a 4.38M (0x460000)
handle 67db2752 3.12M (0x31f000)
[...]

C:\bin> pdocread.exe -w -h 0x67db2752 -b 0x800 0 0x31f000 Part00.raw
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)

C:\bin> pdocread.exe -w -h 0xa7db279a -b 0x800 0 0x460000 Part01.raw
CopyTFFSToFile(0x0, 0x460000, Part01.raw)

C:\bin> pdocread.exe -w -h 0xc7db27be -b 0x800 0 0x6a60000 Part02.raw
CopyTFFSToFile(0x0, 0x6a60000, Part02.raw)

C:\bin> pdocread.exe -w -h 0xe7cae8da -b 0x800 0 0x6080000 Part03.raw
CopyTFFSToFile(0x0, 0x6080000, Part03.raw)


Dump the bootloader:

C:\bin> pmemdump.exe 0xa8000000 524288 SPLdumped.nb
CopyProcessMemoryToFile(00000042, a8000000, 00080000, SPLdumped.nb)


Enjoy :)

[MaroO]

I'm sorry to insist but I've really researched the forum and can't find something clear enough.

[pof]

To follow my isntructions, you need a working Activesync / WMDC connection with the diamond, and itsutils (http://www.xs4all.nl/~itsme/projects/xda/tools.html) installed on your windows PC. The dump of part02 and part03 takes a while, because those are big files, this is normal.

Once you have the *.raw files, you can use Part01.raw (XIP) and Part02.raw (OS) into a flashable ROM using any ROM kitchen that supports it (either diamond specific, or kaiser's kitchen will work also).

[MaroO]

What should I so with the itsutils files? Which should I run? Could you please give a step-by-step explanation of how the dump actually goes? That would be great. Thanks again.

[SecureGSM]

Hello pof!

I have just dumped my radio but TouchFlo 3D still very sluggish. What is the next step?

P.S. hello, mate, glad to see you posting in Diamond forums ;)

http://forum.xda-developers.com/attachment.php?attachmentid=102816&d=1217430691

[scorpio16v]

As I understand, part03 is the RAM that contains your personal data like contacts and SMS.
So it isn't realy needed to rebuild the ROM.
But what's part00 ?? A second XIP part ?

[mr_cat]

Your a legend POF.

Extracted SPL 1.38 from Telstra DIAM130 now have a backup in order to load a hard SPL.

Thank you

[blue_base]

Hey everyone!

I downloaded and ran (from the command prompt) "pdocread.exe -l". The following error occurred:

"Could not update itsutils.dll to the current version, maybe it is inuse?
try restarting your device, or restart activesync
or maybe your device is application-locked"

Hopefully someone can tell me what to do next, I beleive the problem lies in the "application-locked"-thing. I can see the .dll on my device in explorer, but I can't see it when I try to use it in the "Programs" list with "TF3D Config" (I am able to see other .dll files in the "windows" directory. Furthermore, I currently have a Vodafone branded ROM version (of which I would like to have a backup before flashing it)

[Cy_the_Slider]

Same problem here.

Using Vista 64Bit - Windows mobile device center.

I really want to Dump my OS so I fanlly can flush a new rom!!! PLZ help soon.

Thx,
CySlider

[hms666]

Did you try enablerapi for itsutils.dll error ?
You can get it from
http://forum.xda-developers.com/showpost.php?p=2306937&postcount=11

[Cy_the_Slider]

Unfortunately this does not work. It gives me this error:

Config failed (0x80070005): Access denied

[BentPovlsen]

Try to read here

http://wiki.xda-developers.com/index.php?pagename=Hermes_HowtoDumpRom

and go to the link on this line

Check this wiki article on information about how to avoid that. Basically you have to modify this registry key, and then softreset using power button:

[Cy_the_Slider]

Thats it!! Thanks a lot BentPovlsen.

To keep it short for others:

HKLM\Security\Policies\Policies
valuename '00001001' was set to dword:2, change it to dword:1

After that it works.

CySlider

[Cy_the_Slider]

Dump the ROM:

C:\bin>pdocread.exe -l
210.38M (0xd260000) DSK1:
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 106.38M (0x6a60000) Part02
| 96.50M (0x6080000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle e6932666 3.75G (0xf0000000)
handle e7cae8da 96.50M (0x6080000)
handle c7db27be106.38M (0x6a60000)
handle a7db279a 4.38M (0x460000)
handle 67db2752 3.12M (0x31f000)
[...]

C:\bin> pdocread.exe -w -h 0x67db2752 -b 0x800 0 0x31f000 Part00.raw
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)

C:\bin> pdocread.exe -w -h 0xa7db279a -b 0x800 0 0x460000 Part01.raw
CopyTFFSToFile(0x0, 0x460000, Part01.raw)

C:\bin> pdocread.exe -w -h 0xc7db27be -b 0x800 0 0x6a60000 Part02.raw
CopyTFFSToFile(0x0, 0x6a60000, Part02.raw)

C:\bin> pdocread.exe -w -h 0xe7cae8da -b 0x800 0 0x6080000 Part03.raw
CopyTFFSToFile(0x0, 0x6080000, Part03.raw)


Dump the bootloader:

C:\bin> pmemdump.exe 0xa8000000 524288 SPLdumped.nb
CopyProcessMemoryToFile(00000042, a8000000, 00080000, SPLdumped.nb)


Enjoy :)

If I get it right, then the Sizes differ from device to device. this is irritating, since you didn't color those numbers too. First I thaugt they were static.

Here is how I think it should be. correct me if I´m wrong:

Dump the ROM:

C:\bin>pdocread.exe -l
210.38M (0xd260000) DSK1:
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 106.38M (0x6a60000) Part02
| 96.50M (0x6080000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle e6932666 3.75G (0xf0000000)
handle e7cae8da 96.50M (0x6080000)
handle c7db27be106.38M (0x6a60000)
handle a7db279a 4.38M (0x460000)
handle 67db2752 3.12M (0x31f000)
[...]

C:\bin> pdocread.exe -w -h 0x67db2752 -b 0x800 0 0x31f000 Part00.raw
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)

C:\bin> pdocread.exe -w -h 0xa7db279a -b 0x800 0 0x460000 Part01.raw
CopyTFFSToFile(0x0, 0x460000, Part01.raw)

C:\bin> pdocread.exe -w -h 0xc7db27be -b 0x800 0 0x6a60000 Part02.raw
CopyTFFSToFile(0x0, 0x6a60000, Part02.raw)

C:\bin> pdocread.exe -w -h 0xe7cae8da -b 0x800 0 0x6080000 Part03.raw
CopyTFFSToFile(0x0, 0x6080000, Part03.raw)

[blue_base]

Thats it!! Thanks a lot BentPovlsen.

To keep it short for others:

HKLM\Security\Policies\Policies
valuename '00001001' was set to dword:2, change it to dword:1

After that it works.

CySlider

Thanks man! This made all the difference. I'm dumping my ROM right now :D Now, I'm just looking for someone to test it by flashing it... Hopefully someone will try that.

[Rassal]

Do you think that this rom dump procedure will work on the new CDMA Telus version of the Diamond? It has different memory config than the Euro version of the Diamond, different back plate, bigger battery...

Since the memory is bigger, can the rom itself be bigger?

Once i get my phone, the 1st thing i want to do is dump the rom.. to have a local copy in case of a major glitch...

I will try this procedure and report back...

BTW, once i dump it, is there a tutorial on how to restore a dump? Will the current ones work with a CDMA version of the Diamond?

I am willing to test and help the community, but not really willing to "brick" or "scrap" my brand new phone.... so i better ask before i make a mistake

[thedoctor81]

Hi there..

i'm trying to dump the ROM..

i'm following the instructions on the first page, but i'm crashing against the following error while doing:

C:\Documents and Settings\u117242\Desktop\ROM>nbhextract.exe RUU_Signed.nbh
=== NBHextract v1.0
=== Extract contents from HTC NBH files
=== (c)2007 xda-developers.com
=== by: pof & TheBlasphemer based on itsme perl scripts

Device: DIAM*****
CID: 11111111
Version: 1.00.Diamond
Language: WWE
Extracting: 00_SPL.nb

C:\Documents and Settings\u117242\Desktop\ROM>make_imgfs.exe 00_SPL.nb -nosplit
Searching for IMGFS start... Not found!

WHY?!?!? Can anyone help me?!

thanks!

[Rassal]

This is the result of my dump on a Touch Diamond CDMA version from Telus..

Guess i am the 1st one to dump a CDMA phone?

E:\Download\Pocket PC\Touch Diamond\itsutilsbin-20080731-2>pdocread -l
215.50M (0xd780000) FLASHDR
| 3.12M (0x31f000) Part00
| 4.00M (0x400000) Part01
| 105.50M (0x6980000) Part02
| 102.88M (0x66e0000) Part03
3.75G (0xf0000000) DSK8:
| 3.75G (0xf0000000) PART00
STRG handles:
handle#0 8e6e6762 3.75G (0xf0000000)
handle#1 2fed9756 102.88M (0x66e0000)
handle#2 4ff90baa 105.50M (0x6980000)
handle#3 4ff90b86 4.00M (0x400000)
handle#4 4ff908d2 3.12M (0x31f000)
disk 8e6e6762
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 2fed9756
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 4ff90baa
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 4ff90b86
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 4ff908d2
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


E:\Download\Pocket PC\Touch Diamond\itsutilsbin-20080731-2>pdocread.exe -w -h 0x
4ff908d2 -b 0x800 0 0x31f000 Part00.raw
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)

E:\Download\Pocket PC\Touch Diamond\itsutilsbin-20080731-2>pdocread.exe -w -h 0x
4ff90b86 -b 0x800 0 0x400000 Part01.raw
CopyTFFSToFile(0x0, 0x400000, Part01.raw)

E:\Download\Pocket PC\Touch Diamond\itsutilsbin-20080731-2>pdocread.exe -w -h 0x
4ff90baa -b 0x800 0 0x6980000 Part02.raw
CopyTFFSToFile(0x0, 0x6980000, Part02.raw)

E:\Download\Pocket PC\Touch Diamond\itsutilsbin-20080731-2>pdocread.exe -w -h 0x
2fed9756 -b 0x800 0 0x66e0000 Part03.raw
CopyTFFSToFile(0x0, 0x66e0000, Part03.raw)

E:\Download\Pocket PC\Touch Diamond\itsutilsbin-20080731-2>pmemdump.exe 0xa80000
00 524288 SPLdumped.nb
CopyProcessMemoryToFile(00000042, a8000000, 00080000, SPLdumped.nb)

E:\Download\Pocket PC\Touch Diamond\itsutilsbin-20080731-2>

[unknownserv]

So do I use the instructions in this (http://forum.xda-developers.com/showpost.php?p=2528994&postcount=19) post, or the ones in the original post of this thread?
Thanks.

[itoYo]

ok i think ive just followed the instructions on here to dump the data on my UK 02 xda ignito, so i have the files and the spl.nb! can some one direct me to a kitchen where i can convert these to an nb file?

thanks in advance

[Addicteddddd]

could you provide links to the kitchens? I've only found one specific Diamond kitchen and i can't even find that thread anymore :(

[itoYo]

could you provide links to the kitchens? I've only found one specific Diamond kitchen and i can't even find that thread anymore :(

same here, there was one with a video in the thread, cant seem to locate it

[mst46]

Try this one ...

http://forum.xda-developers.com/showthread.php?t=413782

Have fun,

mst

[pinolaura]

hi boys and you excuse my English I am using a translator I have tried to extract my rom but the program me from this result. What must I do??? Thanks
C:\itsutils>pdocread
Copying C:\itsutils\itsutils.dll to WCE:\windows\itsutils.dll
(C) 2003-2008 Willem jan Hengeveld itsme@xs4all.nl
Usage: pdocread [options] start [ length [ filename ] ]
when no length is specified, 512 bytes are assumed
when no filename is specified, a hexdump is printed
-t : find exact disk size
-l : list all diskdevices
-v : be verbose
-s OFS : seek into source file ( for writing only )
-b SIZE: specify sectorsize used to calculate sector offsets
-B SIZE: specify blocksize to use when reading the disk
-G SIZE: specify blocksize to use when transfering over activesync
-u PASSWD : unlock DOC device
-S BK1x : specify alternate disksignature ( e.g. BIPO, BK1A .. BK1G )
-W OFS : specify optional 'writeenable' flag ptr
Source:
-d NAME : devicename or storename
-p NAME : partitionname
-h HANDLE : directly specify handle
either specify -d and optionally -p, or specify -h
Method:
-n NUM : binarypartition number ( normal p if omitted )
-w : read via windows disk api
-o : read OTP area
if the filename is omitted, the data is hexdumped to stdout
if no length is specified, 512 bytes are printed

numbers can be specified as hex (ex: 0x8000) or decimal (ex: 32768)

[predatorftp]

Hi,

Thanks for the guides and everything, I have a Diamond Touch Flashed with WWE version.

I was able to change the registry key in the phone to do thepdocread.exe -l
command but the rest doesnt work !
i get:
C:\itsutils>pdocread -w -d FLASHDR -p Part00 0 0x31f000 Part00.raw
ERROR: ITTFFSGetInfo - The device is not ready for use.

WARNING: using default 512 bytes for sectorsize
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)
ERROR: ITReadDisk: outbuf==NULL
- The device is not ready for use.


What should i do ?

Thanks

[golaner]

Dump the bootloader:

C:\bin> pmemdump.exe 0xa8000000 524288 SPLdumped.nb
CopyProcessMemoryToFile(00000042, a8000000, 00080000, SPLdumped.nb)


Enjoy :)[/QUOTE]

thanks a lot for this info.
i just don't understand the numbers by the bootloader dump
are these numbers "0xa8000000 524288 SPLdumped.nb[/B]" for every device? or i should take them from somewhere else?, and what is the /b for?
i have a touch diamond

thanks again

[ghafarpour]

how can I backup radio?

[gsp1]

Tried lot of times various things for dumping my ROM and having a flashable file again.. Sorry for asking and in this thread too but no answer found...

Trying the kitchen guide, when reaches the buildos.exe file i get a windows error message.. I have read some stuff about this but still cannot find a solution...:confused:

Any WORKING guide for windows xp SP3 ? I have the RAW files from my original ROM..

Thank you

[gsp1]

Dump the bootloader:

C:\bin> pmemdump.exe 0xa8000000 524288 SPLdumped.nb
CopyProcessMemoryToFile(00000042, a8000000, 00080000, SPLdumped.nb)


Enjoy :)

thanks a lot for this info.
i just don't understand the numbers by the bootloader dump
are these numbers "0xa8000000 524288 SPLdumped.nb[/B]" for every device? or i should take them from somewhere else?, and what is the /b for?
i have a touch diamond

thanks again[/QUOTE]

I am also wondering the same thing for the numbers...

Also is there any way to make a FULL ROM file from RAW files? I saw that only XIP and OS are in this procedure...

[Harry8521]

Thanks for the tools, I am pretty new to this, and still trying to learn how to do all this...
I bricked my diamond, and is about to get a new one soon, waiting for dilevery...

[viperbjk]

how can I backup radio?

You need mfg spl (hard spl 1.40) and security unlocked device to do that.

Using QMAT, you can use "pdump" to dump the complete nand, also radio.

Have a look at the wiki on how to use pdump. For the radio to be restored, you will have to fix the structure or write it using "fwfactory". Fixing the structure is preferred.

Cya,

Viper BJK

[dotexe]

I`m trying to save my orange stock ROM but i got this error !

ERROR: ITReadDisk : read 00000000 bytes - The handle is invalid.

C:\itsutils>pdocread.exe -l
210.88M (0xd2e0000) DSK1:
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 126.00M (0x7e00000) Part02
| 77.38M (0x4d60000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle#0 a69647b2 3.75G (0xf0000000)
handle#1 87c91942 77.38M (0x4d60000)
handle#2 47db27be 126.00M (0x7e00000)
handle#3 e7db279a 4.38M (0x460000)
handle#4 47db2752 3.12M (0x31f000)
disk a69647b2
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 87c91942
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 47db27be
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk e7db279a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 47db2752
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00


C:\itsutils>pdocread.exe -w -h 47db2752 -b 0x800 0 0x31f000 Part00
CopyTFFSToFile(0x0, 0x31f000, Part00)
ERROR: ITReadDisk : read 00000000 bytes - The handle is invalid.


C:\itsutils>pdocread.exe -w -h 47db2752 -b 0x800 0 0x31f000 Part00.raw
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)
ERROR: ITReadDisk : read 00000000 bytes - The handle is invalid.

THE PROBLEM HAS BEEN SOLVED !!!!
C:\itsutils>pdocread.exe -l
210.88M (0xd2e0000) DSK1:
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 126.00M (0x7e00000) Part02
| 77.38M (0x4d60000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle#0 a69647b2 3.75G (0xf0000000)
handle#1 87c91942 77.38M (0x4d60000)
handle#2 47db27be 126.00M (0x7e00000)
handle#3 e7db279a 4.38M (0x460000)
handle#4 47db2752 3.12M (0x31f000)
disk a69647b2
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 87c91942
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 47db27be
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk e7db279a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 47db2752
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


C:\itsutils>pdocread -w -d DSK1: -b 0x800 -p Part00 0 0x31f000 Part00.raw
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)

C:\itsutils>pdocread -w -d DSK1: -b 0x800 -p Part01 0 0x460000 Part01.raw
CopyTFFSToFile(0x0, 0x460000, Part01.raw)

C:\itsutils>pdocread -w -d DSK1: -b 0x800 -p Part02 0 0x7e00000 Part02.raw
CopyTFFSToFile(0x0, 0x7e00000, Part02.raw)

C:\itsutils>pdocread -w -d DSK1: -b 0x800 -p Part03 0 0x4d60000 Part03.raw
CopyTFFSToFile(0x0, 0x4d60000, Part03.raw)

C:\itsutils>

[sumitescp]

To follow my isntructions, you need a working Activesync / WMDC connection with the diamond, and itsutils (http://www.xs4all.nl/~itsme/projects/xda/tools.html) installed on your windows PC. The dump of part02 and part03 takes a while, because those are big files, this is normal.

Once you have the *.raw files, you can use Part01.raw (XIP) and Part02.raw (OS) into a flashable ROM using any ROM kitchen that supports it (either diamond specific, or kaiser's kitchen will work also).

Hey pof I am trying to dump my Xperia's Rom.
Can you please give me the exact download link for itsutils because there are too many files there and I do not know which one to download. Thanks

[DaveShaw]

Hey pof I am trying to dump my Xperia's Rom.
Can you please give me the exact download link for itsutils because there are too many files there and I do not know which one to download. Thanks

Latest itsme's itsutils binaries are here: http://www.xs4all.nl/~itsme/download/itsutilsbin-20080923.zip

Ta
Dave

[Lord Spectre]

Thanks for this usefull post.
Now I dump my already coocked ROM and I have 4 .RAW files ...

How can now edit these files??
I just need to delete some application for my own use.... I tried to search on XDA, but it's little bit harder because I don't know what serch!!! :p

[DaveShaw]

Thanks for this usefull post.
Now I dump my already coocked ROM and I have 4 .RAW files ...

How can now edit these files??
I just need to delete some application for my own use.... I tried to search on XDA, but it's little bit harder because I don't know what serch!!! :p

The process is called reconstructing... ;)

Ta
Dave

[Lord Spectre]

Thanks for reply.... ;)
But I have now DUMP directory will all ROM content. I delete all uneeded software and now I need to "reconstructing", but how... Is there any guide?? I can't find it! :(

[Lord Spectre]

OK Find a way, just usebuildimgfs to rebuild again RAW file... But DAMN IT, this is what got after I run buildimgfs:

http://img384.imageshack.us/img384/4998/18309849pp0.jpg

[okokur]

hello,

i have this error when the prog. dont find the needed files for executing.
but excuse me - i have forgot it which files there where missed... :-(

okokur

[LazPL]

Hi all.
Could someone share their Part00.raw with me? I was dumping ROM from another phone (Raphael) and forgot to rename my original Diamond ROM dumps. I realised my mistake after overwriting the Part00 one :eek:. As far as I know, this one doesn't differ from Diamond to Diamond - I'd very much appreciate if someone could send it/post it to me!!
Here are the memory addresses I used when I orginally dumped it:
pdocread.exe -w -h 0xc7db2752 -b 0x800 0 0x31f000 Part00.raw
CopyTFFSToFile(0x0, 0x31f000, Part00.raw
The file was 3.12 Mb big.

I really need it fast because I need to make a warranty return of my Diamond...

PLEASE HELP, FRIENDS!

[itoYo]

here you go! i didnt know they were all the same

[LazPL]

here you go! i didnt know they were all the same

THANKS MATE!! You've saved my diamond from certain... eh... refusal of warranty servicing.
Heh... I don't know for sure if this dump is the same for all Diamonds. I'll find out, soon enough... But as far as I recall, the 00 part is the Image Update Kernel XIP, so, I am hoping it won't be unique from phone to phone.
(If someone has other info, I'd be happy to hear it!)
Thanks again!
T

[squ1zzy]

I'm getting the following message when I try to dump the rom or SPL:

Could not update itsutils.dll to the current version, maybe it is inuse?

What's wrong?

[DaveShaw]

I'm getting the following message when I try to dump the rom or SPL:

Could not update itsutils.dll to the current version, maybe it is inuse?

What's wrong?

Is your device still application Locked?

Check in the registry at HKLM\Security\Policies\Polices\

00001001 should be set to 1 for this to work, it will probably be set at 2 at the moment.

Ta
Dave

[yeche]

Dump the ROM:

C:\bin>pdocread.exe -l
210.38M (0xd260000) DSK1:
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 106.38M (0x6a60000) Part02
| 96.50M (0x6080000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle e6932666 3.75G (0xf0000000)
handle e7cae8da 96.50M (0x6080000)
handle c7db27be106.38M (0x6a60000)
handle a7db279a 4.38M (0x460000)
handle 67db2752 3.12M (0x31f000)
[...]

C:\bin> pdocread.exe -w -h 0x67db2752 -b 0x800 0 0x31f000 Part00.raw
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)

C:\bin> pdocread.exe -w -h 0xa7db279a -b 0x800 0 0x460000 Part01.raw
CopyTFFSToFile(0x0, 0x460000, Part01.raw)

C:\bin> pdocread.exe -w -h 0xc7db27be -b 0x800 0 0x6a60000 Part02.raw
CopyTFFSToFile(0x0, 0x6a60000, Part02.raw)

C:\bin> pdocread.exe -w -h 0xe7cae8da -b 0x800 0 0x6080000 Part03.raw
CopyTFFSToFile(0x0, 0x6080000, Part03.raw)


Dump the bootloader:

C:\bin> pmemdump.exe 0xa8000000 524288 SPLdumped.nb
CopyProcessMemoryToFile(00000042, a8000000, 00080000, SPLdumped.nb)


Enjoy :)

Hi
After the dump how can I restore it back in case I would like to go back to my old ROM?

[yeche]

Hi
When I try to dump the big file Part02
The device alway get unconnected
What can I do in order to manage it?
Thanks

[okokur]

Hi
When I try to dump the big file Part02
The device alway get unconnected
What can I do in order to manage it?
Thanks

the easiest and fastest way is a second xp/vista - system. or vmware.
this fault is a combination of activesync and registry of device or so. try to put your device out from activesync (menu file than the third menupart, dont know english name, in german was "Mobiles Gerät entfernen"). or find the registry of time for activesync on pda.

[le_pims]

Hi Pof,

thank you very much for your instructions on how to dump an existing ROM.

Would you be kind enought to give us the way back ?
That is, the pdocwrite commands that would be necessary to write the dumpf file back at the correct place (and offset, size) so that the device is fully recovered ?

Thank you in advance dude

Keep up with the good info :D

[eranyanay]

For that you should try and search for recostruct method and cooking this files into flashable ROM.

[Wanaco]

Thanks a lot!
This worked for me!

[Wanaco]

Once you have the *.raw files, you can use Part01.raw (XIP) and Part02.raw (OS) into a flashable ROM using any ROM kitchen that supports it (either diamond specific, or kaiser's kitchen will work also).

So...
Part00.raw --> ?
Part00.raw --> XIP
Part02.raw -> OS
Part03.row --> ?

SPLdumped.nb --> Original SPL

Thanks guys!

[Wanaco]

Hummm... no answer since last post:(

How about the radio?
Does this procedures dumps the original radio aswell? or did I just lost my original radio (cuz I've already flash my Diamond :o )

Thanks again... And please respond if you have any answer!

[DaveShaw]

Hummm... no answer since last post:(

How about the radio?
Does this procedures dumps the original radio aswell? or did I just lost my original radio (cuz I've already flash my Diamond :o )

Thanks again... And please respond if you have any answer!

Dumping the radio can't be done this way. If you want your orginal radio, try searching around, someone is likely to have extracted the radio from a Shipped Exe and posted it here.

Thanks
Dave

[pgrzebyk]

Dump the ROM:

C:\bin>pdocread.exe -l
210.38M (0xd260000) DSK1:
| 3.12M (0x31f000) Part00
| 4.38M (0x460000) Part01
| 106.38M (0x6a60000) Part02
| 96.50M (0x6080000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle e6932666 3.75G (0xf0000000)
handle e7cae8da 96.50M (0x6080000)
handle c7db27be106.38M (0x6a60000)
handle a7db279a 4.38M (0x460000)
handle 67db2752 3.12M (0x31f000)
[...]

C:\bin> pdocread.exe -w -h 0x67db2752 -b 0x800 0 0x31f000 Part00.raw
CopyTFFSToFile(0x0, 0x31f000, Part00.raw)

C:\bin> pdocread.exe -w -h 0xa7db279a -b 0x800 0 0x460000 Part01.raw
CopyTFFSToFile(0x0, 0x460000, Part01.raw)

C:\bin> pdocread.exe -w -h 0xc7db27be -b 0x800 0 0x6a60000 Part02.raw
CopyTFFSToFile(0x0, 0x6a60000, Part02.raw)

C:\bin> pdocread.exe -w -h 0xe7cae8da -b 0x800 0 0x6080000 Part03.raw
CopyTFFSToFile(0x0, 0x6080000, Part03.raw)


Dump the bootloader:

C:\bin> pmemdump.exe 0xa8000000 524288 SPLdumped.nb
CopyProcessMemoryToFile(00000042, a8000000, 00080000, SPLdumped.nb)


Enjoy :)

This method will be work on HTC Diamond 2 (Topaz)??

[DaveShaw]

This method will be work on HTC Diamond 2 (Topaz)??

Yes, but the SPL might be at a different address though ;).

Dave

[pgrzebyk]

Yes, but the SPL might be at a different address though ;).

Dave

I do not have this line

(...)
STRG handles:
handle e6932666 3.75G (0xf0000000)
(...)

This is my HTC Topaz

454.38M (0x1c660000) FLASHDR
| 3.12M (0x31f000) Part00
| 4.50M (0x480000) Part01
| 139.25M (0x8b40000) Part02
| 307.50M (0x13380000) Part03
STRG handles:
handle#0 2fa184f2 307.50M (0x13380000)
handle#1 afb68816 139.25M (0x8b40000)
handle#2 2fb687f2 4.50M (0x480000)
handle#3 8fb686ca 3.12M (0x31f000)

Is correctly?

[DaveShaw]

I do not have this line

(...)
STRG handles:
handle e6932666 3.75G (0xf0000000)
(...)

This is my HTC Topaz

454.38M (0x1c660000) FLASHDR
| 3.12M (0x31f000) Part00
| 4.50M (0x480000) Part01
| 139.25M (0x8b40000) Part02
| 307.50M (0x13380000) Part03
STRG handles:
handle#0 2fa184f2 307.50M (0x13380000)
handle#1 afb68816 139.25M (0x8b40000)
handle#2 2fb687f2 4.50M (0x480000)
handle#3 8fb686ca 3.12M (0x31f000)

Is correctly?

Use this guide instead ;)

http://forum.xda-developers.com/showthread.php?t=501871

Dave

[samuelcariri]

Ok Pof, i try as you show on you posts, i get the 1st one, part00.raw but when i try any other i get erros. Here is my Dump:

D:\HTC BIN>pdocread.exe -l
Copying D:\HTC BIN\itsutils.dll to WCE:\windows\itsutils.dll
210.88M (0xd2e0000) DSK1:
| 3.12M (0x31f000) Part00
| 4.50M (0x480000) Part01
| 121.50M (0x7980000) Part02
| 81.75M (0x51c0000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle#0 87c2e8fe 3.75G (0xf0000000)
handle#1 a7e958ea 81.75M (0x51c0000)
handle#2 07fb27be 121.50M (0x7980000)
handle#3 07fb279a 4.50M (0x480000)
handle#4 a7fb2752 3.12M (0x31f000)
disk 87c2e8fe
[...]


D:\HTC BIN>pdocread.exe -w -h a7fb2752 -b 0x800 0 0x31f000 part00.raw
CopyTFFSToFile(0x0, 0x31f000, part00.raw)

D:\HTC BIN>pdocread.exe -w -h 07fb279a -b 0x800 0 0x480000 Part01.raw
CopyTFFSToFile(0x0, 0x480000, Part01.raw)
ERROR: ITReadDisk : read 00000000 bytes - Identificador invßlido.


D:\HTC BIN>pdocread.exe -w -h 07fb27be -b 0x800 0 0x7980000 part02.raw
CopyTFFSToFile(0x0, 0x7980000, part02.raw)
ERROR: ITReadDisk : read 00000000 bytes - Identificador invßlido.


D:\HTC BIN>pdocread.exe -w -h a7e958ea -b 0x800 0 0x51c0000 part03.raw
CopyTFFSToFile(0x0, 0x51c0000, part03.raw)
ERROR: ITReadDisk : read 0000e000 bytes - O endereþo dos blocos de controle de a
rmazenamento Ú invßlido.

I would like to save my ROM cuz its a brazilian from VIVO and it has some cabs that i want. I'm just waiting for that dump to mod my Diamond. I will be so gald if someone can gimme a hande here.

[DaveShaw]

Ok Pof, i try as you show on you posts, i get the 1st one, part00.raw but when i try any other i get erros. Here is my Dump:

D:\HTC BIN>pdocread.exe -l
Copying D:\HTC BIN\itsutils.dll to WCE:\windows\itsutils.dll
210.88M (0xd2e0000) DSK1:
| 3.12M (0x31f000) Part00
| 4.50M (0x480000) Part01
| 121.50M (0x7980000) Part02
| 81.75M (0x51c0000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle#0 87c2e8fe 3.75G (0xf0000000)
handle#1 a7e958ea 81.75M (0x51c0000)
handle#2 07fb27be 121.50M (0x7980000)
handle#3 07fb279a 4.50M (0x480000)
handle#4 a7fb2752 3.12M (0x31f000)
disk 87c2e8fe
[...]


D:\HTC BIN>pdocread.exe -w -h a7fb2752 -b 0x800 0 0x31f000 part00.raw
CopyTFFSToFile(0x0, 0x31f000, part00.raw)

D:\HTC BIN>pdocread.exe -w -h 07fb279a -b 0x800 0 0x480000 Part01.raw
CopyTFFSToFile(0x0, 0x480000, Part01.raw)
ERROR: ITReadDisk : read 00000000 bytes - Identificador invßlido.


D:\HTC BIN>pdocread.exe -w -h 07fb27be -b 0x800 0 0x7980000 part02.raw
CopyTFFSToFile(0x0, 0x7980000, part02.raw)
ERROR: ITReadDisk : read 00000000 bytes - Identificador invßlido.


D:\HTC BIN>pdocread.exe -w -h a7e958ea -b 0x800 0 0x51c0000 part03.raw
CopyTFFSToFile(0x0, 0x51c0000, part03.raw)
ERROR: ITReadDisk : read 0000e000 bytes - O endereþo dos blocos de controle de a
rmazenamento Ú invßlido.

I would like to save my ROM cuz its a brazilian from VIVO and it has some cabs that i want. I'm just waiting for that dump to mod my Diamond. I will be so gald if someone can gimme a hande here.


Try following the steps from the guide I posted above :).

Dave

[samuelcariri]

Ok, Ty for help me Dave but it didnt solve, my dump result was that:

D:\bin>pdocread.exe -l
210.88M (0xd2e0000) DSK1:
| 3.12M (0x31f000) Part00
| 4.50M (0x480000) Part01
| 121.50M (0x7980000) Part02
| 81.75M (0x51c0000) Part03
3.75G (0xf0000000) DSK7:
| 3.75G (0xf0000000) PART00
STRG handles:
handle#0 46b1fa92 3.75G (0xf0000000)
handle#1 27e968ea 81.75M (0x51c0000)
handle#2 c7fb27be 121.50M (0x7980000)
handle#3 67fb279a 4.50M (0x480000)
handle#4 87fb2752 3.12M (0x31f000)
disk 46b1fa92
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 27e968ea
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk c7fb27be
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 67fb279a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 87fb2752
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


D:\bin>pdocread -w -d DSK1 -b 0x800 -p Part00 0 0x31f000 part00.raw
CopyTFFSToFile(0x0, 0x31f000, part00.raw)
ERROR: ITReadDisk: outbuf==NULL
- O dispositivo nÒo estß pronto para uso.


D:\bin>pdocread -w -d DSK1 -b 0x800 -p Part01 0 0x480000 Part01.raw
CopyTFFSToFile(0x0, 0x480000, Part01.raw)
ERROR: ITReadDisk: outbuf==NULL
- O dispositivo nÒo estß pronto para uso.


D:\bin>pdocread -w -d DSK1 -b 0x800 -p Part02 0 0x7980000 part02.raw
CopyTFFSToFile(0x0, 0x7980000, part02.raw)
ERROR: ITReadDisk: outbuf==NULL
- O dispositivo nÒo estß pronto para uso.


D:\bin>pdocread -w -d DSK1 -b 0x800 -p Part03 0 0x51c0000 part03.raw
CopyTFFSToFile(0x0, 0x51c0000, part03.raw)
ERROR: ITReadDisk: outbuf==NULL
- O dispositivo nÒo estß pronto para uso. <- It should mean "The Device isn't ready to use"

So, i try as i saw, them i intalled TP2 and try again and i get the same error, them i try the REG fix, i'm using w7 x64 pro, but i couldnt change the security keys, even with running as adm, so i try on my desk with windows xp pro, and the same erros shows up. :confused::confused:

Now i'm thinking that the registry that i should edit is the WM6.1 of the diamond, but i dont know how to do it.

I dont know if you can, but if someone knows how to fix it, i'll ty so much.

[samuelcariri]

Ok, i've downloaded the windows mobile registry on:

http://handheld.softpedia.com/progDownload/Mobile-Registry-Editor-Download-10636.html

to see if the register was right, and it was, so, i tryed everything i saw on this post to dump my rom and i couldnt do it. anyone can help me?