How to dump HTC Kaiser ROM

pof

Retired Moderator

Mar 18, 2005

3,571

74

43

Barcelona

pof.eslack.org

• Oct 6, 2007

• #1

To dump Kaiser's ROM use itsutils pdocread.exe from itsme:

LIST NAND PARTITIONS

Code:

$ ./pdocread.exe -l
210.38M (0xd260000) FLASHDR
|           3.12M ([COLOR="DarkRed"][B]0x31f000[/B][/COLOR]) Part00
|           3.50M ([COLOR="DarkOrange"][B]0x380000[/B][/COLOR]) Part01
|          69.38M ([COLOR="Olive"][B]0x4560000[/B][/COLOR]) Part02
|         134.38M ([COLOR="Teal"][B]0x8660000[/B][/COLOR]) Part03
STRG handles:
handle e7489c1a134.38M (0x8660000)
handle 474960e6 69.38M (0x4560000)
handle c74b0fda  3.50M (0x380000)
handle 074b0eee  3.12M (0x31f000)
disk e7489c1a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 474960e6
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk c74b0fda
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 074b0eee
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

DUMP THEM!

Code:

pdocread -w -d FLASHDR -b 0x800 -p Part00 0 [COLOR="DarkRed"][B]0x31f000[/B][/COLOR] Part00.raw
pdocread -w -d FLASHDR -b 0x800 -p Part01 0 [COLOR="DarkOrange"][B]0x380000[/B][/COLOR] Part01.raw
pdocread -w -d FLASHDR -b 0x800 -p Part02 0 [COLOR="Olive"][B]0x4560000[/B][/COLOR] Part02.raw
pdocread -w -d FLASHDR -b 0x800 -p Part03 0 [COLOR="Teal"][B]0x8660000[/B][/COLOR] Part03.raw

 

austinsnyc

Senior Member

Mar 24, 2007

1,298

20

New York City

www.austinluker.com

• Oct 6, 2007

• #2

and then rebuilding?

 

F

Frontline

Senior Member

Apr 25, 2003

55

0

• Oct 6, 2007

• #3

Hi, what's the best method (Vista) to upload the orginal HTC rom to a phone? What tool do i search for?

 

jcespi2005

Senior Member

Feb 15, 2006

2,394

196

53

Madrid

OnePlus 9 Pro

Samsung Galaxy S23 Ultra

• Oct 6, 2007

• #4

pof said:

To dump Kaiser's ROM use itsutils pdocread.exe from itsme:

Click to expand...

Click to collapse

Thanks for the guide to dump... manage to dump the spanish HTC WM6 ROM, and now i have two questions...

First is easy (i think), what is every partition of the dump? i suppose part03 is the imgfs, but can you give us more information about this?

Second one is do you think can be interesting uploading the dumped ROMs to the wiki (like in the hermes wiki)? If "yes" i can upload the spanish one.

Thanks again for your efforts.

 

S

sparky77

Senior Member

Apr 10, 2006

73

2

Norwich

• Oct 6, 2007

• #5

i have followed the links but only downloaded pdocread.cpp
Anyone got pdocread.exe direct link

 

jcespi2005

Senior Member

Feb 15, 2006

2,394

196

53

Madrid

OnePlus 9 Pro

Samsung Galaxy S23 Ultra

• Oct 6, 2007

• #6

sparky77 said:

i have followed the links but only downloaded pdocread.cpp
Anyone got pdocread.exe direct link

Click to expand...

Click to collapse

You can download latest version here...


http://www.xs4all.nl/~itsme/projects/xda/tools.html

 

S

sparky77

Senior Member

Apr 10, 2006

73

2

Norwich

• Oct 6, 2007

• #7

Think i will leave it untill someone does a site like mrvanx
thanks the only thing i could download "pdocread.cpp". no idea were to go fron here, and don't understand the Wiki (i may leave it to the pro's)
http://nah6.com/~itsme/cvs-xdadevtools/itsutils/src/pdocread.cpp

 

U

ultimate

Senior Member

Jul 25, 2005

50

0

• Oct 7, 2007

• #8

Thanks a lot!!!


But when i run pdocread.exe an error mag:

"Could not update itsutils.dll to the current version, maybe it is inuse?
try restarting your device, or restart activesync
or maybe your device is application-locked."

I restarted my Kaiser, still the same error...

Anyone could help?

 

U

ultimate

Senior Member

Jul 25, 2005

50

0

• Oct 7, 2007

• #9

ultimate said:

Thanks a lot!!!


But when i run pdocread.exe an error mag:

"Could not update itsutils.dll to the current version, maybe it is inuse?
try restarting your device, or restart activesync
or maybe your device is application-locked."

I restarted my Kaiser, still the same error...

Anyone could help?

Click to expand...

Click to collapse

ok now

HKLM\Security\Policies\Policies
valuename '00001001' was set to dword:2, change it to dword:1

 

U

ultimate

Senior Member

Jul 25, 2005

50

0

• Oct 7, 2007

• #10

ok now, I have the

3.12M (0x31f000) Part00
4.38M (0x380000) Part01
73.38M (0x4560000) Part02
129.88M (0x8660000) Part03

From my CHT Hong Kong version Kaiser, how can i flash it to my friend's WWE Kaiser?

 

U

ultimate

Senior Member

Jul 25, 2005

50

0

• Oct 7, 2007

• #11

ultimate said:

ok now, I have the

3.12M (0x31f000) Part00
4.38M (0x380000) Part01
73.38M (0x4560000) Part02
129.88M (0x8660000) Part03

From my CHT Hong Kong version Kaiser, how can i flash it to my friend's WWE Kaiser?

Click to expand...

Click to collapse

I've uploaded my CHT Chinese version ROM here:
http://www.sendspace.com/file/dc9abe

 

H

Harsesis

Senior Member

Sep 5, 2007

109

2

• Oct 7, 2007

• #12

How do you put the .raw parts together to make a flashable image?

I want to upload t-mobile uk kaiser image.

 

jcespi2005

Senior Member

Feb 15, 2006

2,394

196

53

Madrid

OnePlus 9 Pro

Samsung Galaxy S23 Ultra

• Oct 7, 2007

• #13

Harsesis said:

How do you put the .raw parts together to make a flashable image?

I want to upload t-mobile uk kaiser image.

Click to expand...

Click to collapse

For now there is no way to repack the dumpeds ROM, we need to wait and make more research, seems we are near to get the way to do.

You need NBH file and HardSPL/KaiserCustomRUU (thanks to Pof) to flash a Kaiser.

Regards.

 

Deathace

Senior Member

Apr 8, 2006

83

0

Sitting here aint I

• Oct 8, 2007

• #14

T-Mobile UK
210.13M (0xd220000) FLASHDR
| 3.12M (0x31f000) Part00
| 3.50M (0x380000) Part01
| 68.00M (0x4400000) Part02
| 135.50M (0x8780000) Part03

Raw files available online here should anyone want them (62MB).

Russ

 

Last edited: Oct 8, 2007

K

Krypt

Senior Member

Feb 16, 2005

107

2

• Oct 9, 2007

• #15

Is it possible to use pdocwrite to write back the raw files to your own device?

 

vfrvulcan

Senior Member

Mar 7, 2006

153

28

• Oct 9, 2007

• #16

Deathace said:

T-Mobile UK
210.13M (0xd220000) FLASHDR
| 3.12M (0x31f000) Part00
| 3.50M (0x380000) Part01
| 68.00M (0x4400000) Part02
| 135.50M (0x8780000) Part03

Raw files available online here should anyone want them (62MB).

Russ

Click to expand...

Click to collapse

Strange. On my T-Mob UK...
210.00M (0xd200000) FLASHDR
| 3.12M (0x31f000) Part00
| 3.50M (0x380000) Part01
| 68.00M (0x4400000) Part02
| 135.38M (0x8760000) Part03

Notice the slightly smaller Part03.
Same ROM, same dates. Wierd!

ROM: 1.56.110.4
Date: 01/09/07
Radio: 1.27.12.11
Protocol: 22.45.88.07H

 

H

Harsesis

Senior Member

Sep 5, 2007

109

2

• Oct 12, 2007

• #17

Has anyone figured out how to put the rom back together?

I want to flash my device once I get my rom backed up. I've got the customised cab files for t-mobile uk.

can anyone help?

 

Last edited: Oct 12, 2007

RacerII

Senior Member

Jun 2, 2007

236

0

• Oct 12, 2007

• #18

Dumping my t-mobile NL rom right now.
210.38M (0xd260000) FLASHDR
3.13M (0x31f000) Part00
3.50M (0x380000) Part01
67.25M (0x4340000) Part02
136.50M (0x8880000) Part03
If anyone wants the raw files , please let me know.

 

D

dan13l

Senior Member

Aug 3, 2005

360

15

• Oct 12, 2007

• #19

On my UK T-Mobile Vario III:

210.25M (0xd240000) FLASHDR
| 3.12M (0x31f000) Part00
| 3.50M (0x380000) Part01
| 68.00M (0x4400000) Part02
| 135.63M (0x87a0000) Part03

Which is really odd...

Recap:

Deathace
210.13M (0xd220000) FLASHDR
| 3.12M (0x31f000) Part00
| 3.50M (0x380000) Part01
| 68.00M (0x4400000) Part02
| 135.50M (0x8780000) Part03

vfrvulcan
210.00M (0xd200000) FLASHDR
| 3.12M (0x31f000) Part00
| 3.50M (0x380000) Part01
| 68.00M (0x4400000) Part02
| 135.38M (0x8760000) Part03

All using T-Mobile Vario IIIs.

 

D

dan13l

Senior Member

Aug 3, 2005

360

15

• Oct 12, 2007

• #20

jcespi2005 said:

First is easy (i think), what is every partition of the dump? i suppose part03 is the imgfs, but can you give us more information about this?

Click to expand...

Click to collapse

I'd quite like to know this as well - I'm assuming one of the sections is the SPL. It'd be nice to know which, so I can revert back to the factory SPL if needs be.