[REQ] Toshiba folio 100 BCT and partition dumps

Search This thread

Dexter_nlb

Senior Member
Feb 12, 2009
5,459
4,550
Copenhagen
I have somehow messed up my folio 100, and its BCT and bootloader information.

So im hoping someone else with little experience, knows how to use the nvflash utilities and dump the information for me and send me a link on where to get it.

the combo to get into bootloader mode is: POWER button pressed 4 times + VOL- key and it will go into bootloader mode.
 
  • Like
Reactions: raptor92

tshoulihane

Senior Member
Jun 16, 2010
579
109
Redmi Note 12 5G
I can extract these tomorrow evening.
Can you be clearer with the bootload sequence?

Tried to get the booload seq. Ended up with a partial reset of settings...
 
Last edited:

Dexter_nlb

Senior Member
Feb 12, 2009
5,459
4,550
Copenhagen
I can extract these tomorrow evening.
Can you be clearer with the bootload sequence?

Tried to get the booload seq. Ended up with a partial reset of settings...

well, i dont think you should try it..!!

another user did, he ended up with a semi-bricked device too.. so thanks but now the fun stops.. it seems that Toshiba included a very,very bad key combo that terminates the device to a deadlocked machine..

so ill just figure out another way to get the partitions off it.. but my 4xpower + vol- is really scary, do NOT try it
at least until is cleared on how to get out of this bootloader state again.
 

tshoulihane

Senior Member
Jun 16, 2010
579
109
Redmi Note 12 5G
I dumped the partitions which are visible from android already. Don't quite know what got resentment with your key sequence - DATA wiped? Some of the preloaded apps are broken now, but they were a bit broken before.
 

Dexter_nlb

Senior Member
Feb 12, 2009
5,459
4,550
Copenhagen
I dumped the partitions which are visible from android already. Don't quite know what got resentment with your key sequence - DATA wiped? Some of the preloaded apps are broken now, but they were a bit broken before.

so you mean, you can extract all partitions from a shell?
ie. bootloader of partition2 and so forward?

i didnt notice that all 8 partitions were accessable there?
can you upload the dump of them somewhere?
 
  • Like
Reactions: M-XXXX

bootoo

Member
May 2, 2006
26
6
London
A guy made the dumps of the ROM (not the recovery image though) on the forum of Frandroid DOT fr but I cannot post you the link directly here (anti spam as I do not have many messages on the forum).

I will PM you (if it allows me)
 

Dexter_nlb

Senior Member
Feb 12, 2009
5,459
4,550
Copenhagen
A guy made the dumps of the ROM (not the recovery image though) on the forum of Frandroid DOT fr but I cannot post you the link directly here (anti spam as I do not have many messages on the forum).

I will PM you (if it allows me)

i have the dump of the /system i need all of the other partitions ie. 0 to 8

i cannot restore system, as i got no bootable tablet at all, i need raw partition dumps which i hope can be used using nvflash
 

roglio

Senior Member
Sep 29, 2006
204
20
ok!

I was hoping you did it because I'm a little tired of android (apple fan :)).

My idea was to build and flash linux (ubuntu 10.10 works on toshiba AC100).

But if there isn't a way to restore the factory default (bootloader, etc.), I'll give up.
 

Dexter_nlb

Senior Member
Feb 12, 2009
5,459
4,550
Copenhagen
My idea was to build and flash linux (ubuntu 10.10 works on toshiba AC100).
when i was debugging bootloader configs, i was provided some config files that Ac100 users said would work on our folio, but i see now partition setup is very different, so we need to make proper configs for our folio before experimenting with the bootloader..

again, as you metion backup seems to do , when recover seems unavailable currently. it will be hard to verify if the parition table layout is working.
 

DerArtem

Senior Member
Apr 13, 2010
210
610
Bad Homburg
Hi,

sorry, maybe I missunderstood someting, but I cannot understand your problem in reading out the whole flash.

1. I have opened / disassembled my Filio 100. And like I have suspected there is a 16GB micoSD card connected (soldered) to the PCB and fixed with glue. One could read out the whole flash in a card reader.

2. You have fully access to the microSD card out of Android:

/dev/block/mmcblk0


sh-4.1# cd /dev/block
cd /dev/block
sh-4.1# pwd
pwd
/dev/block
sh-4.1# ls -l
ls -l
brw------- root root 254, 1 2010-12-07 08:46 dm-1
brw------- root root 254, 0 2010-12-07 08:46 dm-0
drwxr-xr-x root root 2010-12-07 08:45 vold
brw------- root root 179, 17 2010-12-07 08:45 mmcblk1p1
brw------- root root 179, 16 2010-12-07 08:45 mmcblk1
brw------- root root 7, 7 2010-12-07 08:45 loop7
brw------- root root 7, 6 2010-12-07 08:45 loop6
brw------- root root 7, 5 2010-12-07 08:45 loop5
brw------- root root 7, 4 2010-12-07 08:45 loop4
brw------- root root 7, 3 2010-12-07 08:45 loop3
brw------- root root 7, 2 2010-12-07 08:45 loop2
brw------- root root 7, 1 2010-12-07 08:45 loop1
brw------- root root 7, 0 2010-12-07 08:45 loop0
brw------- root root 179, 8 2010-12-07 08:45 mmcblk0p8
brw------- root root 179, 7 2010-12-07 08:45 mmcblk0p7
brw------- root root 179, 6 2010-12-07 08:45 mmcblk0p6
brw------- root root 179, 5 2010-12-07 08:45 mmcblk0p5
brw------- root root 179, 4 2010-12-07 08:45 mmcblk0p4
brw------- root root 179, 3 2010-12-07 08:45 mmcblk0p3
brw------- root root 179, 2 2010-12-07 08:45 mmcblk0p2
brw------- root root 179, 1 2010-12-07 08:45 mmcblk0p1
brw------- root root 179, 0 2010-12-07 08:45 mmcblk0
sh-4.1#


Regards, Artem
 

roglio

Senior Member
Sep 29, 2006
204
20
Hi DerArtem! Nice first post indeed!!!!

Thank you for your information.

A micro SD soldered is a nice gift from toshiba!!! This means upgrades, full dumps, etc.

Great :)

A request: could you please post some pictures?
 

Dexter_nlb

Senior Member
Feb 12, 2009
5,459
4,550
Copenhagen
sorry, maybe I missunderstood someting, but I cannot understand your problem in reading out the whole flash.
did i write i had problem dumping the entire mmc device? not really.
Yes, you misunderstood,Writing a proper cfg file describing the different areas is required.. dumping is easy part, documenting is harder..
but feel free to contribute and document the .cfg file for bootloader, that is of course appreciated...
 

DerArtem

Senior Member
Apr 13, 2010
210
610
Bad Homburg
I just got back from my business trip, and finally had some more time to take a closer look at the device.

Hi DerArtem! Nice first post indeed!!!!

Thank you for your information.

A micro SD soldered is a nice gift from toshiba!!! This means upgrades, full dumps, etc.

Great :)

A request: could you please post some pictures?

The device has a warranty seal inside. If you open the device completly the seal will break. I have just opened the device soo far, that the seal will not break. To make photos I will have to open it copletly. I will think about it....

did i write i had problem dumping the entire mmc device? not really.
Yes, you misunderstood,Writing a proper cfg file describing the different areas is required.. dumping is easy part, documenting is harder..
but feel free to contribute and document the .cfg file for bootloader, that is of course appreciated...

Ok, I see. I have duped the mmc and mounted the partitions on my pc:

Here is the partition table on my PC:

Code:
artem@gandalf ~/bin/folio $ /sbin/fdisk -u -l folio.img

Platte folio.img: 15.9 GByte, 15920005120 Byte
1 Köpfe, 63 Sektoren/Spur, 493551 Zylinder, zusammen 31093760 Sektoren
Einheiten = Sektoren von 1 × 512 = 512 Bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x00000000

    Gerät  boot.     Anfang        Ende     Blöcke   Id  System
folio.img1            2048      526335      262144   83  Linux (/system) 
folio.img2          526336     2623487     1048576   83  Linux (/cache) 
folio.img3         2623488     2627583        2048   83  Linux (/misc) 
folio.img4         2627584    31093759    14233088    5  Erweiterte
folio.img5         2628608     2644991        8192   83  Linux (???)
folio.img6         2646016     4743167     1048576   83  Linux (/data) 
folio.img7         4744192     4754431        5120   83  Linux (???)
folio.img8         4755456    31093759    13169152   83  Linux (13G - storage)

Now you can mount the partitions on your pc:

Code:
sudo mount -o loop,ro,offset=$((512*2048)) folio.img /mnt/floppy/

I was not able to find the kernel or the bootloader or the root partition in the dump. I have also checked it with a hex editor.

Is the Folio using an other storage for kernel and bootloder? Does it have more NOR/NAND flash inside?

While looking at the size of the microSD (15920005120 bytes) I think that the bootloader is hiding a part of the microSD from the OS where the kernel and the bootloader are...

Where is the .cfg file you are talking about located?
 

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    this is working nvflash for Toshiba Folio 100

    this will bring life for bricked Toshiba Folio 100(in APX mode)
    may be this can be reference to create a working solution for full system recovery

    !!! Warning !!!
    this will not make your device back to usable state


    Working :
    - bootloader (toshiba logo)
    - fastboot
    - working boot and recovery if flashed from nvflash or fastboot

    still confusing : partition table layout

    we need manualy made parition table using fdisk command from cwm recovery

    i have made script for creating partition on /dev/block/mmcblk0 using parameter found on part.txt

    the partition table still need to be adjusted

    files :

    folio.bct - downloaded from xda
    new.bct - downloaded form my folio 1000 (don't know if it's the right bct)
    bootloader.bin - downloaded from xda
    folio100.xls - my summary about partition table on folio 100 and ac100
    env.cmd - start command prompt with adb,fastboot and nvflash support
    flash.cfg - i created this config file based on my summary
    part.txt - fdisk partition parameter
    part-table.txt - partition table after created
    NVFlash.txt - nvflash documentation
    cwm-fdisk.cmd - make partition table using adb shell on CWM Recovery mode

    need to download recovery.img for working nvflash script

    http://xdaforums.com/showthread.php?t=923722
    http://xdaforums.com/showthread.php?t=1065009

    in flash.cfg i have place recovery.img as image for linux and recovery,after fresh flash from nvflash the device should booting to recovery

    Hacking the Toshiba AC100
    http://tosh-ac100.wetpaint.com/

    download : nvflash-folio100.zip

    APX recovery mode : on toshiba logo press power 4x + vol-
    fastboot mode : on toshiba logo press power 3x + vol-
    2
    I have installed Gentoo Linux on the Folio and am dumping the whole internal sdmmc right now.

    We can extract the BCT and stuff from it later :)
    2
    Hi,

    I have extracted the BCF from the folio.
    Also the first 10MB of the internal sdmmc are in the attachment.

    If I understand this corretly the BCT is the bootloader.

    Can you try:

    nvflash.exe --bct bootloader.bin --setbct --bl bootloader.bin --configfile
    flash.cfg --odmdata 0x000c0075 --create --go

    with the bootloader.bin inside my zip?


    Sorry, the BCT is something different. I will try to extract it...

    Update: I have also extracted the BCT. Please see attached zip.
    1
    I have somehow messed up my folio 100, and its BCT and bootloader information.

    So im hoping someone else with little experience, knows how to use the nvflash utilities and dump the information for me and send me a link on where to get it.

    the combo to get into bootloader mode is: POWER button pressed 4 times + VOL- key and it will go into bootloader mode.
    1
    I dumped the partitions which are visible from android already. Don't quite know what got resentment with your key sequence - DATA wiped? Some of the preloaded apps are broken now, but they were a bit broken before.

    so you mean, you can extract all partitions from a shell?
    ie. bootloader of partition2 and so forward?

    i didnt notice that all 8 partitions were accessable there?
    can you upload the dump of them somewhere?