[HTC Wildfire S] munjeni:
NO, radio parts and a lot of other parts like htc partition...etc is not possible to dump without jtag! I tried a lot of tools to dump whole nand but when I compare dumps dumped by jtag and dumps dumped by aplication tools (dd, nanddump, mtd dump, nand read, kernel side "readb(), readl, iomap()..., debian runing on phone and a lot of debian tools,...etc...etc), there is BIG diference!!! Yes you can do it, and you will think its sucesfully dumped, but you will see 0xff data on some parts! Its possible I think, but not now... we need to learn a lot a lot a lot of to understand how to do it by an "user space" aplication... do not waste your time in order to dump whole nand with an application tool, you will not do it without an hardware tool!

edit:

I have some progress with cracked revolutionary tool, all steps I have bypassed but still last step fail (fail on signature checking)... I analysed fastboot packets and there is nothing special. Only found misc partition is modified with arx-helper and revolutionary hboot have extra data at begining of hboot:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000 88 10 9F E5 88 20 9F E5 02 10 81 E0 01 10 81 E2 ..źĺ. źĺ...ŕ...â
00000010 00 20 D1 E5 FF 00 52 E3 FB FF FF 1A 00 30 A0 E3 . Ńĺ˙.Răű˙˙..0*ă
00000020 00 20 D1 E5 00 30 C1 E5 01 10 81 E2 03 00 52 E1 . Ńĺ.0Áĺ...â..Rá
00000030 F9 FF FF 1A 0F E0 A0 E1 68 F0 9F E5 00 00 50 E3 ů˙˙..ŕ*áhđźĺ..Pă
00000040 0E 00 00 0A 00 00 A0 E3 64 10 8F E2 04 10 81 E2 ......*ăd.Źâ...â
00000050 5C 20 9F E5 0F E0 A0 E1 44 F0 9F E5 4C 10 9F E5 \ źĺ.ŕ*áDđźĺL.źĺ
00000060 01 00 50 E1 05 00 00 1A 3C 00 9F E5 40 10 8F E2 ..Pá....<.źĺ@.Źâ
00000070 04 10 81 E2 38 20 9F E5 0F E0 A0 E1 1C F0 9F E5 ...â8 źĺ.ŕ*á.đźĺ
00000080 02 00 A0 E3 0F E0 A0 E1 0C F0 9F E5 04 F0 9F E5 ..*ă.ŕ*á.đźĺ.đźĺ
00000090 00 20 30 60 A0 00 00 00 48 8C 00 9D E4 6B 00 9D . 0`*...HŚ.ťäk.ť
000000A0 9C 5A 00 9D AC 8F 02 9D 98 6E 00 9D DF 1F 05 9D śZ.ť¬Ź.ť.n.ťß..ť
000000B0 B0 D7 49 BF 00 00 08 00 °×Iż....

something is coupled between the misc partition and hboot extra data! Going to try all steps manually without using revolutionary tool

edit2:

misc partition not modified:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
000000A0 32 2E 33 37 2E 37 30 39 2E 34 00 00 00 00 00 00 2.37.709.4......
000000B0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙
000000C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
000000D0 FF FF FF FF FF FF FF FF FF FF FF FF 04 04 04 04 ˙˙˙˙˙˙˙˙˙˙˙˙....
000000E0 48 54 43 4C 06 06 06 06 07 07 07 07 08 08 08 08 HTCL............
000000F0 09 09 09 09 0A 0A 0A 0A 0B 0B 0B 0B 04 21 30 60 .............!0`
00000100 01 02 03 04 04 10 9F E5 04 10 41 E2 04 F0 91 E5 ......źĺ..Aâ.đ‘ĺ
00000110 38 79 07 9D 00 00 00 00 00 00 00 00 00 00 00 00 8y.ť............
00000120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

misc partition after arx-helper:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
000000A0 32 2E 33 37 2E 37 30 39 2E 34 FF FF FF FF FF FF 2.37.709.4˙˙˙˙˙˙
000000B0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙
000000C0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙
000000D0 FF FF FF FF FF FF FF FF FF FF FF FF 04 04 04 04 ˙˙˙˙˙˙˙˙˙˙˙˙....
000000E0 05 05 05 05 06 06 06 06 07 07 07 07 08 08 08 08 ................
000000F0 09 09 09 09 0A 0A 0A 0A 0B 0B 0B 0B 04 21 30 60 .............!0`
00000100 01 02 03 04 04 10 9F E5 04 10 41 E2 04 F0 91 E5 ......źĺ..Aâ.đ‘ĺ
00000110 38 79 07 9D 00 00 00 00 00 00 00 00 00 00 00 00 8y.ť............
00000120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

will let you know now if revolutionary hboot with extra data is installable from fastboot...

etit3:

no! Fail on signature check:

C:\Documents and Settings\hghghgh\Desktop\adb>fastboot flash hboot liberty_revoluti
onary_extradata.img
sending 'hboot' (512 KB)...
OKAY [ 0.219s]
writing 'hboot'...
(bootloader) signature checking...
FAILED (remote: signature verify fail)
finished. total time: 0.328s

so my opinion after all steps: revolutionary have bypassed signature checking (last step when revolutionary write command download:000800b8)... and here is all snifed packets from fastboot between phone and usb:

- read: http://paste.ubuntu.com/1045317/

- write: http://paste.ubuntu.com/1045325/

Comparing again "extra data" from usb packets, there is the same extra data on begining of the hboot, so its static! Revolutionary have his own usb function so I think he doing something "hackish" to fastboot comand "flash" and from that way skipping signature check.

edit4:

Decompiled "extra data":

; Input	MD5 :	0C7FB57AFD475F6ECC164083E1B5F503
; Input	CRC32 :	F6893161

; ---------------------------------------------------------------------------
; File Name :	C:\Documents and Settings\hghghgh\Desktop\adb\Untitled1.bin
; Format :	Binary file
; Base Address:	0000h Range: 0000h - 00B8h Loaded length: 00B8h

; Processor	: ARM
; Target assembler: Generic assembler for ARM
; Byte sex	: Little endian

; ===========================================================================

; Segment type:	Pure code
AREA ROM, CODE,	READWRITE, ALIGN=0
CODE32
LDR	R1, =0x60302000
LDR	R2, =off_A0
ADD	R1, R1,	R2

loc_C	; CODE XREF: ROM:00000018j
ADD	R1, R1,	#1
LDRB	R2, [R1]
CMP	R2, #0xFF
BNE	loc_C

loc_1C	; CODE XREF: ROM:00000030j
MOV	R3, #0
LDRB	R2, [R1]
STRB	R3, [R1]
ADD	R1, R1,	#1
CMP	R2, R3
BNE	loc_1C
MOV	LR, PC
LDR	PC, =0x9D006E98
CMP	R0, #0
BEQ	loc_80
MOV	R0, #0
ADR	R1, dword_B4
ADD	R1, R1,	#4
[COLOR="Red"]LDR	R2, =0x80000[/COLOR]
MOV	LR, PC
LDR	PC, =0x9D028FAC
LDR	R1, =0xBF49D7B0
CMP	R0, R1
BNE	loc_80
LDR	R0, =0x9D051FDF
ADR	R1, dword_B4
ADD	R1, R1,	#4
LDR	R2, =0x80000
MOV	LR, PC
LDR	PC, =0x9D005A9C

loc_80	; CODE XREF: ROM:00000040j
; ROM:00000064j
MOV	R0, #2
MOV	LR, PC
LDR	PC, =0x9D006BE4
LDR	PC, =0x9D008C48
; ---------------------------------------------------------------------------
dword_90	DCD 0x60302000	; DATA XREF: ROM:00000000r
off_94	DCD off_A0	; DATA XREF: ROM:00000004r
off_98	DCD 0x9D008C48	; DATA XREF: ROM:0000008Cr
off_9C	DCD 0x9D006BE4	; DATA XREF: ROM:00000088r
off_A0	DCD 0x9D005A9C	; DATA XREF: ROM:00000004o
; ROM:0000007Cr ...
off_A4	DCD 0x9D028FAC	; DATA XREF: ROM:00000058r
off_A8	DCD 0x9D006E98	; DATA XREF: ROM:00000038r
dword_AC	DCD 0x9D051FDF	; DATA XREF: ROM:00000068r
dword_B0	DCD 0xBF49D7B0	; DATA XREF: ROM:0000005Cr
dword_B4	DCD 0x80000	; DATA XREF: ROM:00000048o
; ROM:00000050r ...
; ROM	ends

END

if you have idea let me know! I think "extra data" is executed before signature is checked? What you think?

edit5:

Why? Hboot I uploaded have size of the 513kb because contain extra data! :) So maybe thats thing why revolutionary have its own usb function!;) ...allso special command for "executing" extra data is not shown in snifed packets log, so I think that extra data is executed by self... or?