[TOOL] rkDumper (utility for backup firmware of RockChip's devices)

Search This thread

ldrrp

New member
Sep 20, 2011
4
0
And what conclusion/proposal?

I have solved the issue, Using the linux_update_tool_v1.21 i am able to flash the rockchip with new firmware. but it does not help me dump however. Do you have a linux rkdumper?

I tried many driver assistant versions, windows versions, cables and more with no luck. Now flashing works on linux :)
 

ldrrp

New member
Sep 20, 2011
4
0
Last edited:

nazhowo

Member
Sep 1, 2019
9
0
Hi, I have a rk 3326 and I can't make a dump, I try all and nothing work
can you help me please :(
 

nazhowo

Member
Sep 1, 2019
9
0

Hi, I tried but the program crashed
zOI1mh1.png



and if I use rk androit tool to make a dump, this happened

fetch



sorry my bad english

thank you
 

nazhowo

Member
Sep 1, 2019
9
0
I need a log when running the utility with options /log /debug /test


rkDumper (version 1.08)
Utility for Rockchip's firmware backup

(c) RedScorpio, Moscow, 2014-2019
RedScorpio@land.ru

==========================[ START ]==========================

Detected OS: Windows 8 Pro [build 9200] x64
Real OS: Windows 10 Pro [build 17134] x64
-- Devices enumerating --

USB devices table (found 7 devices):
1 Device #0: USB Root Hub (ports: 5)
2 Device #1: USB Root Hub (ports: 5)
3 Device #2: USB Root Hub (ports: 5)
3.4 Device #3: Dispositivo compuesto USB
VID = 0x05c8, PID = 0x0361, REV = 0x0104 (USB 2.0)
Driver version = 10.0.17134.1 (6-21-2006)
4 Device #4: USB Root Hub (ports: 4)
4.3 Device #5: Rockusb Device
VID = 0x2207, PID = 0x330d, REV = 0x9999 (USB 2.0)
Driver version = 4.40.0.0 (10-30-2015)
5 Device #6: USB Root Hub (ports: 5)

Untested Rockchip device found.
If you agree to test please contact RedScorpio
 

nazhowo

Member
Sep 1, 2019
9
0
http://ge.tt/9SdTWsx2

PS. This isn't log-file with options /log /debug /test
PPS. What the names of device and chipset

Finnaly I can do it, that versión doesn't crash for me

2019.09.05 02:42:13 rkDumper (v.1.09a_test)
2019.09.05 02:42:13 (c) RedScorpio, Moscow, 2014-2019
2019.09.05 02:42:13
2019.09.05 02:42:13 Command parameters: "/log" "/debug" "/test"
2019.09.05 02:42:13
2019.09.05 02:42:13 Run parameters:
2019.09.05 02:42:13 log = 1
2019.09.05 02:42:13 debug = 1
2019.09.05 02:42:13 quiet = 0
2019.09.05 02:42:13 mono = 0
2019.09.05 02:42:13 includelist = ""
2019.09.05 02:42:13 excludelist = ""
2019.09.05 02:42:13 last = 0
2019.09.05 02:42:13 part = 0
2019.09.05 02:42:13 nrst = 0
2019.09.05 02:42:13 load = 0
2019.09.05 02:42:13 memsize = 134217728
2019.09.05 02:42:13 basecfgpath = ""
2019.09.05 02:42:13 loadername = ""
2019.09.05 02:42:13
2019.09.05 02:42:13 ==========================[ START ]==========================
2019.09.05 02:42:13
2019.09.05 02:42:13 .DEBUG. Windows version = 6.2.9200
2019.09.05 02:42:13 .DEBUG. PlatformId = 2
2019.09.05 02:42:13 .DEBUG. _isWOW64() = 1
2019.09.05 02:42:13 .DEBUG. ProductType = 48
2019.09.05 02:42:13 Detected OS: Windows 8 Pro [build 9200] x64
2019.09.05 02:42:13 .DEBUG. RtlGetNtVersionNumbers = 10.0.17134
2019.09.05 02:42:13 .DEBUG. Compatibility mode detected
2019.09.05 02:42:13 Real OS: Windows 10 Pro [build 17134] x64
2019.09.05 02:42:13
2019.09.05 02:42:13 .DEBUG. Version of OS is later of Windows XP (need to check rights)
2019.09.05 02:42:13 .DEBUG. TokenElevationType: Full (2)
2019.09.05 02:42:13 .DEBUG.
2019.09.05 02:42:13 -- Devices enumerating --
2019.09.05 02:42:13
2019.09.05 02:42:13 .DEBUG. Devs.TypeMask = 3
2019.09.05 02:42:13 USB devices table (found 7 devices):
2019.09.05 02:42:13 1 Device #0: USB Root Hub (ports: 5)
2019.09.05 02:42:13 .DEBUG. SymLink = "\\.\USB#ROOT_HUB#4&18a53192&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"
2019.09.05 02:42:13 .DEBUG.
2019.09.05 02:42:13 2 Device #1: USB Root Hub (ports: 5)
2019.09.05 02:42:13 .DEBUG. SymLink = "\\.\USB#ROOT_HUB#4&15f27f3f&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"
2019.09.05 02:42:13 .DEBUG.
2019.09.05 02:42:13 3 Device #2: USB Root Hub (ports: 5)
2019.09.05 02:42:13 .DEBUG. SymLink = "\\.\USB#ROOT_HUB20#4&cc9d698&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"
2019.09.05 02:42:13 .DEBUG.
2019.09.05 02:42:13 3.4 Device #3: Dispositivo compuesto USB
2019.09.05 02:42:13 VID = 0x05c8, PID = 0x0361, REV = 0x0104 (USB 2.0)
2019.09.05 02:42:13 .DEBUG. SymLink = "\\?\USB#VID_05C8&PID_0361#5&27F0ECF0&0&4#{a5dcbf10-6530-11d2-901f-00c04fb951ed}"
2019.09.05 02:42:13 .DEBUG. DriverKeyName = "{36fc9e60-c465-11cf-8056-444553540000}\0008"
2019.09.05 02:42:13 .DEBUG. Driver version = 10.0.17134.1 (6-21-2006)
2019.09.05 02:42:13 .DEBUG.
2019.09.05 02:42:13 4 Device #4: USB Root Hub (ports: 4)
2019.09.05 02:42:13 .DEBUG. SymLink = "\\.\USB#ROOT_HUB30#4&261c5523&0&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"
2019.09.05 02:42:13 .DEBUG.
2019.09.05 02:42:13 4.4 Device #5: Rockusb Device
2019.09.05 02:42:13 VID = 0x2207, PID = 0x330d, REV = 0x9999 (USB 2.0)
2019.09.05 02:42:13 .DEBUG. SymLink = "\\?\USB#VID_2207&PID_330D#5&3324F9A0&0&4#{a5dcbf10-6530-11d2-901f-00c04fb951ed}"
2019.09.05 02:42:13 .DEBUG. DriverKeyName = "{79dfc2a8-2574-493c-ae71-52958e41bb00}\0002"
2019.09.05 02:42:13 .DEBUG. Driver version = 4.40.0.0 (10-30-2015)
2019.09.05 02:42:13 .DEBUG.
2019.09.05 02:42:13 5 Device #6: USB Root Hub (ports: 5)
2019.09.05 02:42:13 .DEBUG. SymLink = "\\.\USB#ROOT_HUB20#4&25ab3043&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"
2019.09.05 02:42:13 .DEBUG.
2019.09.05 02:42:13
2019.09.05 02:42:13 Found: LOADER device (RK3388/RK3308 2207:330d) #5
2019.09.05 02:42:13 .FATAL ERROR. Unknown command
2019.09.05 02:42:13
2019.09.05 02:42:13 ==========================[ STOP ]==========================


Model: kioto tablet 7'' Rainbow

in the processor appears rk3326
cpu z rk3066
 
Last edited:

nazhowo

Member
Sep 1, 2019
9
0
Wrong command. Use
rkDumper /log /debug /test dump

ready
2019.09.05 11:47:18 rkDumper (v.1.09a_test)
2019.09.05 11:47:18 (c) RedScorpio, Moscow, 2014-2019
2019.09.05 11:47:18
2019.09.05 11:47:18 Command parameters: "/log" "/debug" "/test" "dump"
2019.09.05 11:47:18
2019.09.05 11:47:18 Run parameters:
2019.09.05 11:47:18 log = 1
2019.09.05 11:47:18 debug = 1
2019.09.05 11:47:18 quiet = 0
2019.09.05 11:47:18 mono = 0
2019.09.05 11:47:18 includelist = ""
2019.09.05 11:47:18 excludelist = ""
2019.09.05 11:47:18 last = 0
2019.09.05 11:47:18 part = 0
2019.09.05 11:47:18 nrst = 0
2019.09.05 11:47:18 load = 0
2019.09.05 11:47:18 memsize = 134217728
2019.09.05 11:47:18 basecfgpath = ""
2019.09.05 11:47:18 loadername = ""
2019.09.05 11:47:18
2019.09.05 11:47:18 ==========================[ START ]==========================
2019.09.05 11:47:18
2019.09.05 11:47:18 .DEBUG. Windows version = 6.1.7601
2019.09.05 11:47:18 .DEBUG. PlatformId = 2
2019.09.05 11:47:18 .DEBUG. _isWOW64() = 1
2019.09.05 11:47:18 .DEBUG. ProductType = 1
2019.09.05 11:47:18 Detected OS: Windows 7 Ultimate SP 1.0 [build 7601] x64
2019.09.05 11:47:18 .DEBUG. RtlGetNtVersionNumbers = 6.1.7601
2019.09.05 11:47:18
2019.09.05 11:47:18 .DEBUG. Version of OS is later of Windows XP (need to check rights)
2019.09.05 11:47:18 .DEBUG. TokenElevationType: Full (2)
2019.09.05 11:47:18 .DEBUG.
2019.09.05 11:47:18 -- Devices enumerating --
2019.09.05 11:47:18
2019.09.05 11:47:18 .DEBUG. Devs.TypeMask = 3
2019.09.05 11:47:19 USB devices table (found 7 devices):
2019.09.05 11:47:19 1 Device #0: USB Root Hub (ports: 5)
2019.09.05 11:47:19 .DEBUG. SymLink = "\\.\USB#ROOT_HUB#4&18a53192&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"
2019.09.05 11:47:19 .DEBUG.
2019.09.05 11:47:19 2 Device #1: USB Root Hub (ports: 5)
2019.09.05 11:47:19 .DEBUG. SymLink = "\\.\USB#ROOT_HUB#4&15f27f3f&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"
2019.09.05 11:47:19 .DEBUG.
2019.09.05 11:47:19 3 Device #2: USB Root Hub (ports: 5)
2019.09.05 11:47:19 .DEBUG. SymLink = "\\.\USB#ROOT_HUB20#4&25ab3043&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"
2019.09.05 11:47:19 .DEBUG.
2019.09.05 11:47:19 3.1 Device #3: Rockusb Device
2019.09.05 11:47:19 VID = 0x2207, PID = 0x330d, REV = 0x9999 (USB 2.0)
2019.09.05 11:47:19 .DEBUG. SymLink = "\\?\USB#VID_2207&PID_330D#5&2975C8B7&0&1#{a5dcbf10-6530-11d2-901f-00c04fb951ed}"
2019.09.05 11:47:19 .DEBUG. DriverKeyName = "{79dfc2a8-2574-493c-ae71-52958e41bb00}\0001"
2019.09.05 11:47:19 .DEBUG. Driver version = 4.50.0.0 (5-30-2016)
2019.09.05 11:47:19 .DEBUG.
2019.09.05 11:47:19 4 Device #4: USB Root Hub (ports: 5)
2019.09.05 11:47:19 .DEBUG. SymLink = "\\.\USB#ROOT_HUB20#4&cc9d698&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"
2019.09.05 11:47:19 .DEBUG.
2019.09.05 11:47:19 4.4 Device #5: Dispositivo compuesto USB
2019.09.05 11:47:19 VID = 0x05c8, PID = 0x0361, REV = 0x0104 (USB 2.0)
2019.09.05 11:47:19 .DEBUG. SymLink = "\\?\USB#VID_05C8&PID_0361#5&27F0ECF0&0&4#{a5dcbf10-6530-11d2-901f-00c04fb951ed}"
2019.09.05 11:47:19 .DEBUG. DriverKeyName = "{36fc9e60-c465-11cf-8056-444553540000}\0008"
2019.09.05 11:47:19 .DEBUG. Driver version = 6.1.7601.24138 (6-21-2006)
2019.09.05 11:47:19 .DEBUG.
2019.09.05 11:47:19 5 Device #6: USB Root Hub (ports: 4)
2019.09.05 11:47:19 .DEBUG. SymLink = "\\.\AMDUSB30#ROOT_HUB30#4&261c5523&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"
2019.09.05 11:47:19 .DEBUG.
2019.09.05 11:47:19
2019.09.05 11:47:19 Found: LOADER device (RK3388/RK3308 2207:330d) #3
2019.09.05 11:47:19
2019.09.05 11:47:19 --- Firmware dumping ---
2019.09.05 11:47:19
2019.09.05 11:47:19
2019.09.05 11:47:19 Found LOADER Rockchip device
2019.09.05 11:47:19
2019.09.05 11:47:19 .DEBUG. Run command 'MkDir("C:\rkDumper2\Output")'
2019.09.05 11:47:19 .DEBUG. Create parent dir = "C:"
2019.09.05 11:47:19 .DEBUG. Create parent dir = "C:\rkDumper2"
2019.09.05 11:47:19 First 0x0010 NAND blocks reading
2019.09.05 11:47:19
2019.09.05 11:47:19 .DEBUG. (PartRead) Offset = 0x0000000000000000, iDataSize = 0x0000000000002000
2019.09.05 11:47:19 .DEBUG. (PartRead) iBlOffset = 0x00000000, iBlCount = 0x00000010
2019.09.05 11:47:19 .DEBUG. (DevRead) BlOffset = 0x00000000, iBlToRead = 0x10
2019.09.05 11:47:19 .DEBUG. Command to read NAND: iBlToRead = 0x00000010 (16)
2019.09.05 11:47:19 .DEBUG. WriteFile(): iRet = 1; iRetSize = 0x0000001f (31)
2019.09.05 11:47:19 .DEBUG. Command to read (16 blocks) sent successfully
2019.09.05 11:47:19 .DEBUG. NAND reading (LBA)
2019.09.05 11:47:19 .DEBUG. ReadFile(): iRet = 1; iRetSize = 0x00002000 (8192)
2019.09.05 11:47:19 .DEBUG. Data (16 blocks) was read
2019.09.05 11:47:19 .DEBUG. Resp reading
2019.09.05 11:47:19 .DEBUG. ReadFile(): iRet = 1; iRetSize = 0x0000000d (13)
2019.09.05 11:47:19 .DEBUG. Command confirmed
2019.09.05 11:47:19
2019.09.05 11:47:19 -- Rockchip device resetting --
2019.09.05 11:47:19
2019.09.05 11:47:19 Found LOADER Rockchip device
2019.09.05 11:47:19
2019.09.05 11:47:19 .DEBUG. Command to reset device
2019.09.05 11:47:19 .DEBUG. WriteFile(): iRet = 1; iRetSize = 0x0000001f (31)
2019.09.05 11:47:19 Command to reset sent successfully
2019.09.05 11:47:19 .DEBUG. Resp reading
2019.09.05 11:47:19 .DEBUG. ReadFile(): iRet = 1; iRetSize = 0x0000000d (13)
2019.09.05 11:47:19 .DEBUG. Command confirmed
2019.09.05 11:47:19
2019.09.05 11:47:19 .FATAL ERROR. Unknown begining of dump
2019.09.05 11:47:19
2019.09.05 11:47:19 ==========================[ STOP ]==========================
 

nazhowo

Member
Sep 1, 2019
9
0
You can try the new test version of the utility with RKFP support. Unfortunately I have no devices on such firmware and I have no confidence in the correctness of its work.
http://ge.tt/5no3H0y2

thanks a lot!

it worked perfect for me but I can't find the parameter file, how can I do it because it's required by the other program

OQxyZG8.png



dug2y21.png




here is the log
2019.09.12 10:36:02 rkDumper (v.1.09a_test)
2019.09.12 10:36:02 (c) RedScorpio, Moscow, 2014-2019
2019.09.12 10:36:02
2019.09.12 10:36:02 Command parameters: "dump"
2019.09.12 10:36:02
2019.09.12 10:36:02 Run parameters:
2019.09.12 10:36:02 log = 1
2019.09.12 10:36:02 debug = 1
2019.09.12 10:36:02 quiet = 0
2019.09.12 10:36:02 mono = 0
2019.09.12 10:36:02 includelist = ""
2019.09.12 10:36:02 excludelist = ""
2019.09.12 10:36:02 last = 0
2019.09.12 10:36:02 part = 0
2019.09.12 10:36:02 nrst = 0
2019.09.12 10:36:02 load = 0
2019.09.12 10:36:02 memsize = 134217728
2019.09.12 10:36:02 basecfgpath = ""
2019.09.12 10:36:02 loadername = ""
2019.09.12 10:36:02
2019.09.12 10:36:02 ==========================[ START ]==========================
2019.09.12 10:36:02
2019.09.12 10:36:02 .DEBUG. Windows version = 6.1.7601
2019.09.12 10:36:02 .DEBUG. PlatformId = 2
2019.09.12 10:36:02 .DEBUG. _isWOW64() = 1
2019.09.12 10:36:02 .DEBUG. ProductType = 1
2019.09.12 10:36:02 Detected OS: Windows 7 Ultimate SP 1.0 [build 7601] x64
2019.09.12 10:36:02 .DEBUG. RtlGetNtVersionNumbers = 6.1.7601
2019.09.12 10:36:02
2019.09.12 10:36:02 .DEBUG. Version of OS is later of Windows XP (need to check rights)
2019.09.12 10:36:02 .DEBUG. TokenElevationType: Full (2)
2019.09.12 10:36:02 .DEBUG.
2019.09.12 10:36:02 -- Devices enumerating --
2019.09.12 10:36:02
2019.09.12 10:36:02 .DEBUG. Devs.TypeMask = 3
2019.09.12 10:36:02 USB devices table (found 8 devices):
2019.09.12 10:36:02 1 Device #0: USB Root Hub (ports: 5)
2019.09.12 10:36:02 .DEBUG. SymLink = "\\.\USB#ROOT_HUB#4&18a53192&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"
2019.09.12 10:36:02 .DEBUG.
2019.09.12 10:36:02 2 Device #1: USB Root Hub (ports: 5)
2019.09.12 10:36:02 .DEBUG. SymLink = "\\.\USB#ROOT_HUB#4&15f27f3f&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"
2019.09.12 10:36:02 .DEBUG.
2019.09.12 10:36:02 3 Device #2: USB Root Hub (ports: 5)
2019.09.12 10:36:02 .DEBUG. SymLink = "\\.\USB#ROOT_HUB20#4&25ab3043&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"
2019.09.12 10:36:02 .DEBUG.
2019.09.12 10:36:02 3.1 Device #3: Rockusb Device
2019.09.12 10:36:02 VID = 0x2207, PID = 0x330d, REV = 0x9999 (USB 2.0)
2019.09.12 10:36:02 .DEBUG. SymLink = "\\?\USB#VID_2207&PID_330D#5&2975C8B7&0&1#{a5dcbf10-6530-11d2-901f-00c04fb951ed}"
2019.09.12 10:36:02 .DEBUG. DriverKeyName = "{79dfc2a8-2574-493c-ae71-52958e41bb00}\0001"
2019.09.12 10:36:02 .DEBUG. Driver version = 4.50.0.0 (5-30-2016)
2019.09.12 10:36:02 .DEBUG.
2019.09.12 10:36:02 4 Device #4: USB Root Hub (ports: 5)
2019.09.12 10:36:02 .DEBUG. SymLink = "\\.\USB#ROOT_HUB20#4&cc9d698&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"
2019.09.12 10:36:02 .DEBUG.
2019.09.12 10:36:02 4.4 Device #5: Dispositivo compuesto USB
2019.09.12 10:36:02 VID = 0x05c8, PID = 0x0361, REV = 0x0104 (USB 2.0)
2019.09.12 10:36:02 .DEBUG. SymLink = "\\?\USB#VID_05C8&PID_0361#5&27F0ECF0&0&4#{a5dcbf10-6530-11d2-901f-00c04fb951ed}"
2019.09.12 10:36:02 .DEBUG. DriverKeyName = "{36fc9e60-c465-11cf-8056-444553540000}\0008"
2019.09.12 10:36:02 .DEBUG. Driver version = 6.1.7601.24138 (6-21-2006)
2019.09.12 10:36:02 .DEBUG.
2019.09.12 10:36:02 5 Device #6: USB Root Hub (ports: 4)
2019.09.12 10:36:02 .DEBUG. SymLink = "\\.\AMDUSB30#ROOT_HUB30#4&261c5523&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"
2019.09.12 10:36:02 .DEBUG.
2019.09.12 10:36:02 5.3 Device #7: Dispositivo de entrada USB
2019.09.12 10:36:02 VID = 0x045e, PID = 0x00cb, REV = 0x0100 (USB 1.1 Low Speed)
2019.09.12 10:36:02 .DEBUG. SymLink = "\\?\USB#VID_045E&PID_00CB#5&BEC8BA6&0&3#{a5dcbf10-6530-11d2-901f-00c04fb951ed}"
2019.09.12 10:36:02 .DEBUG. DriverKeyName = "{745a17a0-74d3-11d0-b6fe-00a0c90f57da}\0001"
2019.09.12 10:36:02 .DEBUG. Driver version = 6.1.7601.24386 (6-21-2006)
2019.09.12 10:36:02 .DEBUG.
2019.09.12 10:36:02
2019.09.12 10:36:02 Found: LOADER device (RK3388/RK3308 2207:330d) #3
2019.09.12 10:36:02
2019.09.12 10:36:02 --- Firmware dumping ---
2019.09.12 10:36:02
2019.09.12 10:36:02
2019.09.12 10:36:02 Found LOADER Rockchip device
2019.09.12 10:36:02
2019.09.12 10:36:02 .DEBUG. Run command 'MkDir("C:\RKFP\Output")'
2019.09.12 10:36:02 .DEBUG. Create parent dir = "C:"
2019.09.12 10:36:02 .DEBUG. Create parent dir = "C:\RKFP"
2019.09.12 10:36:02 First 0x0010 NAND blocks reading
2019.09.12 10:36:02
2019.09.12 10:36:02 .DEBUG. (PartRead) Offset = 0x0000000000000000, iDataSize = 0x0000000000002000
2019.09.12 10:36:02 .DEBUG. (PartRead) iBlOffset = 0x00000000, iBlCount = 0x00000010
2019.09.12 10:36:02 .DEBUG. (DevRead) BlOffset = 0x00000000, iBlToRead = 0x10
2019.09.12 10:36:02 "EFI PART" sign found (RKFP FW dump)
2019.09.12 10:36:02
2019.09.12 10:36:02 .DEBUG. Part[1].PartName = "trust"
2019.09.12 10:36:02 .DEBUG. begin = 0x00006000 (0x0000000000c00000)
2019.09.12 10:36:02 .DEBUG. end = 0x00007fff (0x0000000000fffe00)
2019.09.12 10:36:02 .DEBUG. Part[2].PartName = "misc"
2019.09.12 10:36:02 .DEBUG. begin = 0x00008000 (0x0000000001000000)
2019.09.12 10:36:02 .DEBUG. end = 0x00009fff (0x00000000013ffe00)
2019.09.12 10:36:02 .DEBUG. Part[3].PartName = "resource"
2019.09.12 10:36:02 .DEBUG. begin = 0x0000a000 (0x0000000001400000)
2019.09.12 10:36:02 .DEBUG. end = 0x0000bfff (0x00000000017ffe00)
2019.09.12 10:36:02 .DEBUG. Part[4].PartName = "kernel"
2019.09.12 10:36:02 .DEBUG. begin = 0x0000c000 (0x0000000001800000)
2019.09.12 10:36:02 .DEBUG. end = 0x0001bfff (0x00000000037ffe00)
2019.09.12 10:36:02 .DEBUG. Part[5].PartName = "boot"
2019.09.12 10:36:02 .DEBUG. begin = 0x0001c000 (0x0000000003800000)
2019.09.12 10:36:02 .DEBUG. end = 0x0002bfff (0x00000000057ffe00)
2019.09.12 10:36:02 .DEBUG. Part[6].PartName = "recovery"
2019.09.12 10:36:02 .DEBUG. begin = 0x0002c000 (0x0000000005800000)
2019.09.12 10:36:02 .DEBUG. end = 0x0004bfff (0x00000000097ffe00)
2019.09.12 10:36:02 .DEBUG. Part[7].PartName = "backup"
2019.09.12 10:36:02 .DEBUG. begin = 0x0004c000 (0x0000000009800000)
2019.09.12 10:36:02 .DEBUG. end = 0x00055fff (0x000000000abffe00)
2019.09.12 10:36:02 .DEBUG. Part[8].PartName = "security"
2019.09.12 10:36:02 .DEBUG. begin = 0x00056000 (0x000000000ac00000)
2019.09.12 10:36:02 .DEBUG. end = 0x00057fff (0x000000000afffe00)
2019.09.12 10:36:02 .DEBUG. Part[9].PartName = "cache"
2019.09.12 10:36:02 .DEBUG. begin = 0x00058000 (0x000000000b000000)
2019.09.12 10:36:02 .DEBUG. end = 0x00087fff (0x0000000010fffe00)
2019.09.12 10:36:02 .DEBUG. Part[10].PartName = "system"
2019.09.12 10:36:02 .DEBUG. begin = 0x00088000 (0x0000000011000000)
2019.09.12 10:36:02 .DEBUG. end = 0x00387fff (0x0000000070fffe00)
2019.09.12 10:36:02 .DEBUG. Part[11].PartName = "metadata"
2019.09.12 10:36:02 .DEBUG. begin = 0x00388000 (0x0000000071000000)
2019.09.12 10:36:02 .DEBUG. end = 0x0038ffff (0x0000000071fffe00)
2019.09.12 10:36:02 .DEBUG. Part[12].PartName = "vendor"
2019.09.12 10:36:02 .DEBUG. begin = 0x00390000 (0x0000000072000000)
2019.09.12 10:36:02 .DEBUG. end = 0x0040bfff (0x00000000817ffe00)
2019.09.12 10:36:02 .DEBUG. Part[13].PartName = "oem"
2019.09.12 10:36:02 .DEBUG. begin = 0x0040c000 (0x0000000081800000)
2019.09.12 10:36:02 .DEBUG. end = 0x0041bfff (0x00000000837ffe00)
2019.09.12 10:36:02 .DEBUG. Part[14].PartName = "frp"
2019.09.12 10:36:02 .DEBUG. begin = 0x0041c000 (0x0000000083800000)
2019.09.12 10:36:02 .DEBUG. end = 0x0041c3ff (0x000000008387fe00)
2019.09.12 10:36:02 .DEBUG. Part[15].PartName = "userdata"
2019.09.12 10:36:02 .DEBUG. begin = 0x0041c400 (0x0000000083880000)
2019.09.12 10:36:02 .DEBUG. end = 0x00e6ffde (0x00000001cdffbc00)
2019.09.12 10:36:02 .DEBUG. Run command 'MkDir("C:\RKFP\Output\Image")'
2019.09.12 10:36:02 .DEBUG. Create parent dir = "C:"
2019.09.12 10:36:02 .DEBUG. Create parent dir = "C:\RKFP"
2019.09.12 10:36:02 .DEBUG. Create parent dir = "C:\RKFP\Output"
2019.09.12 10:36:02 .DEBUG. arrMemMap: current size = 4194304; requested size = 12582912
2019.09.12 10:36:02 .DEBUG. Reallocated (new size = 12582912)
2019.09.12 10:36:02 .DEBUG. (PartRead) Offset = 0x0000000000000000, iDataSize = 0x0000000000c00000
2019.09.12 10:36:02 .DEBUG. (PartRead) iBlOffset = 0x00000000, iBlCount = 0x00006000
2019.09.12 10:36:02 .DEBUG. (DevRead) BlOffset = 0x00000000, iBlToRead = 0x80
2019.09.12 10:36:02 .DEBUG. (DevRead) BlOffset = 0x00000080,
 
Last edited:

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    but all the partitions are filled with CC CC except BOOT ,UBOOT AND TRUST and i cant find that magic bytes to patch FD 7B BE A9 someone have a easier method?

    Pay attention to the message

    Then, I opened my stock uboot.bin in the hex editor, searched for `81 00 01 8B 24 00 02 8B 9F 40 40 F1 49 01 00 54` and in that sequence replaced `40 40` with `00 60`, saved, repacked, flashed and done! I don't know whether this sequence is present in most uboots or just mine. Maybe you could research this @RedScorpioXDA , because if that's the case you could maybe automate this process in your tool.

    Also please note that if you use Rockchip's AndroidTool to dump, use an old version like v2.38 as newer ones also deny dumping after 32 MB.
    In case it's helpful to anyone, I'm documenting the research of my Rockchip device on GitHub
  • 17
    rkDumper
    Utility for backup firmware of RockChip's devices


    Version 1.1.1.0 Windows

    1. Makes dump of NAND by partitions according "parameter" information (RKFW/RKAF formats)
    2. Creates config.cfg for RKAndroidTool (1.xx, 2.xx)

    Notes:
    1. All drivers must be installed
    2. Administrator rights are required


    Known bugs:
    -
    Old versions:
    6
    Tested on:
    WinXP (32), WinVista (32), Win7 (32/64), Win10 (64)

    0bb4:2910 MSC device (USB debug off)
    0bb4:0c02 MSC device (USB debug on)

    2207:0000 MSC device (USB debug off)
    2207:0010 MSC device (USB debug on)

    2207:350A RK3566 x88 Pro
    2207:330D RK3308/RK3326/RK3388/PX30 Evoo EV-A-81-8-1
    2207:330C RK3399/PX6 CSA96
    2207:330A RK3368/PX5 Artway X6/HCT MTCD (Car head unit) SOM
    2207:320C RK3318/RK3328/PX4 A5X Plus mini
    2207:320B RK3229 MXQ 4K
    2207:320A RK3288 Jesurun T034
    2207:310D RK3126 Proscan PLT9650G
    2207:310C RK3128 CS918-rk3128
    2207:310B RK3188/PX3 PIPO Max M9 Pro
    2207:301A RK3036 Wecast E8
    2207:300B RK3168 Starmobile Engage7+
    2207:300A RK3066/PX2 UG802
    2207:292C RK3026/RK3028 ONYX BOOX C67SML COLUMBUS/?
    2207:292A RK2928 Lexibook Tablet Master 2
    2207:290A RK2906 TeXeT TB-138
    2207:281A RK2818 ChinaLeap M3


    If you have another Rockchip SoC send me result of "rkDumper scan" and name of device. I'II send you personal version for test
    6
    Hi everyone!

    I've made a breakthrough on dumping devices that have a 32mb limit or dump `CC` `CC` `CC`. It turns out this "read protect" function is actually implemented in uboot. The uboot partition is typically in the first 32mb, so you should have no problem dumping it and it is possible to edit out the 32mb limit and flash the uboot partition back.

    Here's how I did it:

    First of all, I could not have figured this out if it weren't for DorianRudolph on github, who documented installing linux on a PineNote, which happens to have the same RK3566 chip I've been struggling with. They figured out where in the source code rockchip implements this, so they unpack the uboot.bin from uboot.img, disassemble it, and find that function. They patche it to always jump to a certain location instead of spitting out `CC`. The result is the chip behaves like all rockchip socs before it.

    After looking at my uboot.bin versus theirs, I figured out we're running different versions of uboot, and I couldn't use their uboot image, or their scripts without modification. I dumped as much as I could with rkdumper, then took uboot.img, edited uboot_img.py to point to my img file and ran it. It spit out uboot.bin.

    I downloaded and installed ghidra, created a project, imported uboot.bin, set its language as AARCH64 V8A little-endian. Double click to decompile, then go looking for something that looks like this picture, or in my case, like this. Then patch the `b.ls` instruction to be a `b` instruction. I found the easiest way to find the correct function was to search for `FD 7B BE A9 FD 03 00 91 ?? 18`. There were a ton of functions that started with the same 8 btes, which is probably like "push the stack" or something, but there were only two that used `0x18` as the parameter for the `ldr` instruction.

    After patching it with ghidra I took the uboot.img, put it in a directory with uboot_img.py, edited it to comment out `check_hash_and_dump()` and run patch();, edit lines 29 and 30 to match the size and positon of uboot.bin. The `sz` is the size in bytes, in hex. The `pos` can be found by running `dtc -I dtb -O dts uboot.img`

    That's pretty much it. I used RkDevTool to flash the modified uboot, by right clicking the first screen, hitting load config, choose the config output by rkDumper, hit dev partition, then check the checkbox to the left of uboot, click the blank space to the right of uboot, choose your uboot.img, and hit Run.

    Next time you boot into LOADER mode, you'll be able to dump all partitions!
    4
    This happens as a result of "unsure" reading.
    Try
    - change the cable (preferably short and thick)
    - exclude USB hubs (if used)
    - change the USB socket (preferably on the back of the computer)
    - change the USB version (2.0 instead of 3.0)
    - use a different computer

    No

    Hi @RedScorpioXDA,
    Thanks again for your reply.

    I have confirmed the issue is not hardware, the issue is rkdumper is incompatible with rockchip driver greater than 4.5 - 4.91 is latest as of writing.


    • By installing driver version 4.3. - Rockchip_DriverAssistant_v4.3 - was able to dump images with rkdumper v1.08.
    • Just to clarify - Rockchip Driver assistant version 4.5 on do not work with Rkdumper.

    This was first identified by @nalor in post 85 (thanks @nalor!) here: https://xdaforums.com/showpost.php?p=78805354&postcount=85

    Would you please update your first post with this information - known bugs?
    2
    Hi! Just tried to backup my new Onyx Boox Poke Pro and failed at the beginning with the following message:

    Code:
            Found:  LOADER device (RK3288 2207:320a) #5
    
            --- Firmware dumping ---
    
    
            Found LOADER Rockchip device
    
            First 0x0010 NAND blocks reading
    
            Command to read failed
    
            -- Rockchip device resetting --
    
            Found LOADER Rockchip device
    
            Command to reset failed

    I'm using Windows 10 x64 as operating system.

    Finally I noticed the problem came from the used driver - I used the most recent 'Driver Assistant 4.7' directly from the github rockchip site and it's not working with this one.
    I tried all 'Driver Assistant 4.x' beginning with 4.1 and the backup is working without problems up to DriverAssistant 4.5 - but beginning with DriverAssistant 4.6 it's failing with the error message above.

    I don't know if this problem also occurs for other devices and or chipsets, but at least my device with the Rockchip RK3288 requires to downgrade to 'Driver Assistant 4.5' or lower.

    Maybe it would be a good idea to include the driver-version into the output of rkDumper?