[DEV][R&D] FW & Partition Tables (Here!)

[E:V:A]

I'm working on a project doing Firmware/Bootloader analysis and documentation.
This will eventually be crucially important in providing service, repair and
unbricking of these device. And if you think that these will not soft-brick,
just remember that the OS have "Windows" in it's name...

However, this project requires detailed knowledge of the following two components:

1. Bootloader & Firmware files
2. Partition Table

To make things more simple for this project, I have chosen to only focus on devices using the Qualcomm
Snapdragon S4 Plus/Pro processors, these are also known as the MSM8960, MSM8960T and MSM8930.

So if you have any of the devices shown in the list below, please try to extract and post these details,
when and if they become available. (I recommend using Sendspace to upload large files.)

[SIZE=2]HTC Windows Phone 8X LTE ADR6990                Verizon
HTC Windows Phone 8X LTE
Nokia Lumia 820                 (Nokia Arrow)
Nokia Lumia 820.2               (Nokia Arrow)
Nokia Lumia 822                 (Nokia Atlas)   Verizon 
Nokia Lumia 920                 (Nokia Phi)
Nokia Lumia 920.2               (Nokia Phi)
Samsung GT-i8750 Ativ S 16GB    (Samsung Odyssey)
Samsung GT-i8750 Ativ S 32GB    (Samsung Odyssey)[/SIZE]

[Obtained from the PDAdb web site.]

This list is in no way exhaustive, and it may be very likely that you have another device or still using
Windows Phone 7 (?) with that same processor. That would also be interesting. Another thing that may
be very useful, is documentation related to the Windows Phone build structure.

The results of this project will be published here and will benefit the development community
in several different ways.

Please do not post any general unrelated questions here, they will be removed.
And I will not answer to any support related PM's.

Thanks in advance.

 

[E:V:A]

< Here Be Snap ! Dragons >

 

[tids2k]

Good start .. E.V.A have u trued to contact Cotulla on htc-linux or DFT team. They might have something that might interest you . I'll post once i grab my hands on them.

Sent from my GT-I9300 using xda premium

 

[E:V:A]

If someone has a working Windows Phone 8, and if at all possible, please follow these instructions to dump the partition tables. As you're on a windows phone, you may need to connect it to a linux based PC, to get these...

 

[WPMan]

Hi, I am in possession of an HTC 8X engineering unit (see here http://forum.xda-developers.com/showthread.php?t=1966327). How can I help? Someone on my thread suggested that I should post here.

 

[E:V:A]

Hi! Yes, you could be of great help, if you could provide the partition tables from that device. I know it's politically incorrect to ask you to use a linux tool for doing this, but that is (probably) the only way it will be useful, as you cannot trust native windows partition information...

The way to do it, is by connecting your WP to a linux computer or possibly by using some linux distribution under a virtual machine (VirtualBox, VMware etc.) Then follow the instructions found here.

Thanks in advance.

 

[pYlOne75]

8X Partition table

Hello. Also have a 8X engineering unit. This is the Partition Info:

# fdisk -l /dev/sdb

WARNING: GPT (GUID Partition Table) detected on '/dev/sdb'! The util fdisk doesn't support GPT. Use GNU Parted.


Disk /dev/sdb: 15.6 GB, 15634268160 bytes
1 heads, 32 sectors/track, 954240 cylinders
Units = cylinders of 32 * 512 = 16384 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x00000000

   Device Boot      Start         End      Blocks   Id  System
/dev/sdb1               1      444417     7110656   ee  GPT
Partition 1 does not end on cylinder boundary.


# parted /dev/sdb
GNU Parted 2.3
Using /dev/sdb
Welcome to GNU Parted! Type 'help' to view a list of commands.
(parted) p                                                                
Model: Qualcomm MMC Storage (scsi)
Disk /dev/sdb: 15,6GB
Sector size (logical/physical): 512B/512B
Partition Table: gpt

Number  Start   End     Size    File system  Name              Flags
 1      1049kB  62,9MB  61,9MB               pg1fs
 2      62,9MB  66,1MB  3146kB               MODEM_FSG
 3      66,1MB  67,1MB  1049kB               board_info
 4      67,1MB  75,5MB  8389kB               DPP
 5      75,5MB  77,6MB  2097kB               SSD
 6      77,6MB  78,6MB  1049kB               SBL1
 7      78,6MB  79,7MB  1049kB               SBL2
 8      79,7MB  81,8MB  2097kB               SBL3
 9      81,8MB  83,9MB  2097kB               UEFI
10      83,9MB  84,9MB  1049kB               RPM
11      84,9MB  86,0MB  1049kB               TZ
12      86,0MB  87,0MB  1049kB               WINSECAPP
13      87,0MB  88,1MB  1049kB               BACKUP_SBL1
14      88,1MB  89,1MB  1049kB               BACKUP_SBL2
15      89,1MB  91,2MB  2097kB               BACKUP_SBL3
16      91,2MB  93,3MB  2097kB               BACKUP_UEFI
17      93,3MB  94,4MB  1049kB               BACKUP_RPM
18      94,4MB  95,4MB  1049kB               BACKUP_TZ
19      95,4MB  96,5MB  1049kB               BACKUP_WINSECAPP
20      96,5MB  138MB   41,9MB               RADIO
21      138MB   139MB   262kB                UEFI_BS_NV
22      139MB   140MB   262kB                UEFI_NV
23      141MB   149MB   8389kB               PLAT
24      149MB   192MB   43,0MB  fat16        EFIESP
25      192MB   193MB   1049kB               pg2fs
26      193MB   194MB   1049kB               RFG_0
27      194MB   195MB   1049kB               RFG_1
28      195MB   196MB   1049kB               RFG_2
29      196MB   197MB   1049kB               RFG_3
30      197MB   198MB   1049kB               RFG_4
31      198MB   199MB   1049kB               RFG_5
32      199MB   200MB   1049kB               RFG_6
33      200MB   201MB   1049kB               RFG_7
34      201MB   202MB   1049kB               RFG_8
35      202MB   207MB   4194kB               MODEM_FS1
36      207MB   211MB   4194kB               MODEM_FS2
37      211MB   211MB   262kB                UEFI_RT_NV
38      212MB   212MB   131kB                UEFI_RT_NV_RPMB
39      213MB   214MB   1049kB               MFG
40      214MB   215MB   1049kB               MISC
41      215MB   228MB   13,4MB  fat16        MMOS
42      235MB   2698MB  2463MB  ntfs         MainOS
43      2698MB  5114MB  2416MB  fat32        CrashDump
44      5117MB  15,6GB  10,5GB  ntfs         Data

(parted) q                                                                


# gdisk -l /dev/sdb
GPT fdisk (gdisk) version 0.8.5

Partition table scan:
  MBR: protective
  BSD: not present
  APM: not present
  GPT: present

Found valid GPT with protective MBR; using GPT.
Disk /dev/sdb: 30535680 sectors, 14.6 GiB
Logical sector size: 512 bytes
Disk identifier (GUID): AE420040-13DD-41F2-AE7F-0DC35854C8D7
Partition table holds up to 128 entries
First usable sector is 34, last usable sector is 30535646
Partitions will be aligned on 2048-sector boundaries
Total free space is 27687 sectors (13.5 MiB)

Number  Start (sector)    End (sector)  Size       Code  Name
   1            2048          122879   59.0 MiB    FFFF  pg1fs
   2          122880          129023   3.0 MiB     FFFF  MODEM_FSG
   3          129024          131071   1024.0 KiB  FFFF  board_info
   4          131072          147455   8.0 MiB     0700  DPP
   5          147456          151551   2.0 MiB     FFFF  SSD
   6          151552          153599   1024.0 KiB  FFFF  SBL1
   7          153600          155647   1024.0 KiB  FFFF  SBL2
   8          155648          159743   2.0 MiB     FFFF  SBL3
   9          159744          163839   2.0 MiB     FFFF  UEFI
  10          163840          165887   1024.0 KiB  FFFF  RPM
  11          165888          167935   1024.0 KiB  FFFF  TZ
  12          167936          169983   1024.0 KiB  FFFF  WINSECAPP
  13          169984          172031   1024.0 KiB  FFFF  BACKUP_SBL1
  14          172032          174079   1024.0 KiB  FFFF  BACKUP_SBL2
  15          174080          178175   2.0 MiB     FFFF  BACKUP_SBL3
  16          178176          182271   2.0 MiB     FFFF  BACKUP_UEFI
  17          182272          184319   1024.0 KiB  FFFF  BACKUP_RPM
  18          184320          186367   1024.0 KiB  FFFF  BACKUP_TZ
  19          186368          188415   1024.0 KiB  FFFF  BACKUP_WINSECAPP
  20          188416          270335   40.0 MiB    FFFF  RADIO
  21          270336          270847   256.0 KiB   FFFF  UEFI_BS_NV
  22          272384          272895   256.0 KiB   FFFF  UEFI_NV
  23          274432          290815   8.0 MiB     FFFF  PLAT
  24          290816          374783   41.0 MiB    0700  EFIESP
  25          374784          376831   1024.0 KiB  FFFF  pg2fs
  26          376832          378879   1024.0 KiB  FFFF  RFG_0
  27          378880          380927   1024.0 KiB  FFFF  RFG_1
  28          380928          382975   1024.0 KiB  FFFF  RFG_2
  29          382976          385023   1024.0 KiB  FFFF  RFG_3
  30          385024          387071   1024.0 KiB  FFFF  RFG_4
  31          387072          389119   1024.0 KiB  FFFF  RFG_5
  32          389120          391167   1024.0 KiB  FFFF  RFG_6
  33          391168          393215   1024.0 KiB  FFFF  RFG_7
  34          393216          395263   1024.0 KiB  FFFF  RFG_8
  35          395264          403455   4.0 MiB     FFFF  MODEM_FS1
  36          403456          411647   4.0 MiB     FFFF  MODEM_FS2
  37          411648          412159   256.0 KiB   FFFF  UEFI_RT_NV
  38          413696          413951   128.0 KiB   FFFF  UEFI_RT_NV_RPMB
  39          415744          417791   1024.0 KiB  FFFF  MFG
  40          417792          419839   1024.0 KiB  FFFF  MISC
  41          419840          446031   12.8 MiB    0700  MMOS
  42          458752         5269094   2.3 GiB     0700  MainOS
  43         5269504         9988095   2.2 GiB     0700  CrashDump
  44         9994240        30535646   9.8 GiB     0700  Data
#

 

[E:V:A]

^^ Very nice!

Also for everybody's information. I was looking into one of the FFU files of the WP7 (?) Nokia Lumina 800 (RM-801), and it appears that hidden partitions (or mounts) are set in a registry key...

[SIZE=2][HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\MMC\IMGFS]
    "MountHidden"=dword:1
    "MountAsROM"=dword:1
    "XIP"=dword:0
[HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\SDMemory\IMGFS]
    "MountHidden"=dword:1
    "MountAsROM"=dword:1
    "XIP"=dword:0
[HKEY_LOCAL_MACHINE\Drivers\BlockDevice\UniBlk]
    "InternalStoreProfile"="MMC"
    "InternalPartitionType"=dword:4[/SIZE]

and that the write protection is set by these registry items:

[SIZE=2][HKEY_LOCAL_MACHINE\System\StorageManager\WMPART\WriteProtectRegions\Region1]
       "StartSector"=dword:0
       "SectorCount"=dword:60000

[HKEY_LOCAL_MACHINE\System\StorageManager\WMPART]
"EnableHardwareWriteProtection"=dword:1
"PadAlignment"=dword:10000[/SIZE]

of course I could be wrong, since there are loads of similar items in there.
But it will perhaps help someone finding out where to look.