yashsingh1/xdaforums huggingface dataset:
[Windows Mobile Software Development] Mik-el:
Interesting Old Dump

About 4-5 years ago I was still using a Windows Mobile phone, the Toshiba Portege G910, a very rare device.

I used this tool to dump its rom because I wanted to help the community to build the first ever custom rom for this device, but the passion for Win Mobile was alrerady waned...

Today I found on my HDD my old dump, I would like to know how to extract its content. Toshiba included a fantastic all-in-one txt/pdf/image app that would be really cool to export and preserve, since none has the .cab;

If anyone wants my dump or wants to tell me how to extract its files, I'm here!

Thank you
[Windows Mobile Software Development] shamus:
I think that this info will make some interesting possibility in bluetooth matter :twisted:

http://www.newscientist.com/article.ns?id=dn7461&feedId=online-news_rss20
[Windows Mobile Software Development] ccrrazzzy:
****!!! I am VERY thankful you are not some asshole virus writer.. :twisted: VERY SMART.. Dangerous. I hope no asshole, virus writing, geek is reading this! :roll: :shock:

I have another and very useful "mission" for this program.

If it keeps the ROM intact after it dumps it and if it can dump the contents of the RAM too, (IE all memory), that it would be a very cool back up tool too!

I use Sprite Back up now but it does not retain the email very well and I have to re-sync all email and calendar and Contacts after a restore and change the clock and re-pair a bluetooth device.

If you program can dump all the memory, safely, I would love to see it dump every day on a schedule and only keep 3 of the latest ROMs.

Maybe you could make them dump into different folders for each day and then have a "restore.exe" in each folder for easy restore and organization by date of file.

Also, I bought a new PDA2. Will this dump it's ROM? I think it would need to be 128 though, right? :roll:
[Windows Mobile Software Development] buzz_lightyear:
why would you dump the ROM daily?

Once you flash it, it stays there till next flash... well untill i'll finish my new "LiveFlasher" tool :o)))

THis will make OS ROM chip writable on the live device, and you can then for example replace files in the ROM, which you don't like... welcome.exe etc... change the images and so on.. :o)))

buzz
[Windows Mobile Software Development] HDuser:
Buzz

Stop givng me a buzz ever time I read one of your posts:

My poor heart can't take the excitment.

My brain can't adjust to the fact that when I grow up I will never be as smart as you.

My body goes into spasams each time I see your name as a recent post in the index.

All in all I am a mess due to you.

Thank you for this feeling!

Thank you for your great contributions, ... and...

Thank you for allowing me to beta test your new tool (Thats a hint not a fact).
[Windows Mobile Software Development] tunekas:
but it only backup 64 mb of the rom :( .......why not all the rom, 96mb or even more... :?:
[Windows Mobile Software Development] buzz_lightyear:
can you please tell me, which device has 96MB or more ROM?
[Windows Mobile Software Development] tunekas:
Qtek 9090 (XDAIII) has 96MB ROM!!!!!!!!!!!!!! :D
[Windows Mobile Software Development] buzz_lightyear:
i dont think so, are you sure?
[Windows Mobile Software Development] tunekas:
Complete sure!

And i've seen one pda with 128mb ROM (imate pda2)

see it with your eyes:

http://www.clubimate.com/t-DETAILS_PDA2.aspx
[Windows Mobile Software Development] toenailed:
hi guys ..

sowee for butting in .. :) but the grab_it intention is to get the OS rom .. which is in Himalaya is 32mb and in Blueangel currently in 32mb (in SD backup d2s 80000000 02000000 or in virtual A0000000 to A2000000).. but in magician it uses 36mb .. maybe thats the reason it was design only to get the 64mb ..(A0000000 to A4000000) :wink:

anyway im not sure in blueangel .. but you can check it in hex and see that it only repeated the entry after the first 32mb if he only find a 32mb partition for OS .. :)

But that is for now .. we cannot tell on the next ROM how they design it ..

but anyway you can see it in the first page(or second) that the KING OF WM2005 my big brother buzz_lightyear .. already said that he will design a config.txt .. so we can set an offset and the size .. we just need to wait .. :) .. as you can see in other thread .. he is doing a lot of GREAT JOB .. that even MS is to ENVY FOR HIS WORK .. :twisted:

so far i find the 64mb is enough to get the ROM.. :)

-toe
[Windows Mobile Software Development] simonxda:
Buzz, is there a way to copy WM2005 from NK to SD card and flash from there instead of using USB connection. , :roll:
[Windows Mobile Software Development] ccrrazzzy:
I used it on the new I-mate PDA2

It came in the mail the other day. Your program Seemed to work great. :wink:

To delete the files and get past the Autorun stuff, I reboot with the SD card in and then I was able to delete autorun.exe so it would not try to reflash, etc.

I put it on ftp://ftp.xda-developers.com/Alpine/i-mate_PDA2/ for those that have an XDAIIi and want to try the new I-mate ROM.. (this may unlock the XDAIIi too :D )

(If it does not work, let me know.. It times out at 10 seconds left and just sat there when I uploaded it. That is why I uploaded it twice.. That means they are BOTH THE SAME FILE.. IE. Dump2.bin and dump.bin)

Also, I have read that the ROM on the PDA2 is 128, if so, your program only dumped half of it.. :? :shock: Someone with big nads that has an XDAIIi will let us know!!!! :shock: :twisted:
[Windows Mobile Software Development] xda:
hi all

can some one post to the ftp the extracted files from the wm5 rom image?

Buzz can you help or create tool just like dumprom?

please help

:?:
[Windows Mobile Software Development] zohaer21:
hey,..i managed to get a pda2 rom today.. its about 65mb and i need to know how to get it to use on my xda2i..

as it is the newer version of rom

thanks
[Windows Mobile Software Development] zohaer21:
at the dude above me who posted the pda2 .bin file...

is it the english version .. cos the one i managed to get has arabic ext rom aswell (which i dont need)
[Windows Mobile Software Development] ccrrazzzy:
it is WWE also extended rom is there now too!

ftp://ftp.xda-developers.com/Uploads/Alpine/i-mate_PDA2/
[Windows Mobile Software Development] buzz_lightyear:
it is 1.11.00 WWE

how would you like it?

nbf or SD format?

buzz
[Windows Mobile Software Development] zohaer21:
both wod be nice.. coz im sure a nbf format will definatley give a country id error..
[Windows Mobile Software Development] buzz_lightyear:
New Versions

Hi,

as i was too lazy to implement the config option... i did, as a temporary workaround, few verions of grab_it.

here they are...

also, some devices with Mini-SD poped up last days, so i must adapt the grab_it tool to write the dump into it's execution directory. This can in case of Mini-SD be called '\Mini-SD' instead of '\Storage Card'

buzz
[Windows Mobile Software Development] simonxda:
Great...Now if someone can dump a 64MB for me to test.If not I would have to wait till next month when I return back home.. :(
[Windows Mobile Software Development] BoSJo:
Hey Buzz nice work, you just can't stop can you :wink:

Can you please edit your first post to include these new Dumpers, makes it so much easier for others to find them then.

Keep it going.
[Windows Mobile Software Development] buzz_lightyear:
THANX for reminding me :o)))

I just did...

buzz
[Windows Mobile Software Development] rictec:
the cooker is also a grabber lol

so does this mean we will not soon see a 128/32 buzz mobile?

cos i m starving for it :-)

why my grab it says cannot create file at the end of dump there is a dump.bin created .....

well you are the one and only Buzz tank you for this too
[Windows Mobile Software Development] TofClock:
Oooooh buzz ...

I've a little problem :/

I want to make a dump of wm20051.50f.01FRE with your usefull grabit ... but ... it says to me :

Cannot create file ....

perhaps a problem with the Storage Card folder ? (Carte de Stockage in french) ....
[Windows Mobile Software Development] TofClock:
have i wrong ???

If grab_it search the folder "Storage Card" to write the dump.bin file , it can't find this folder on the french version of wm2005 because the folder have not the same name ...

I've tried to change the folder's name on registry but it's wrong :/

Buzz , can you suggest to me an idea to solve this problem ?
[Windows Mobile Software Development] dampil:
Storage Name error confirmation

Hi !!

Here is my result :

I Had the same problem then "TofClock"

I confirmed that my French PPC (Asus Mypal a620BT - PPC 2003) had only "Carte de stockage" instead of "Storage Card".

For Tests, I creat a new Folder with the name "Storage Card" and then

=> VOILA !! It Work....

But the file size is not Enougth... 64Rom... 23Ram that's why there are an 'error'

I hade a German Rz1710, that i can test later. It whil help you too now if their are a other name for "Storage card", in this version of PPC 2003 GER.

Here is my Question ?

This .Bin File, what does i can do with it Later (other than to trade).

I sea some progz too modify different sort of Files (uprgades from HP, or Winhex for the D2S methode, etc...)

I hope with your methode we can creat easy a database of Exchange for Rom.bin, that allows too anyone to change is OS one is mobile device!

Actually i'll research A or THE French Bin for the rz1710, and i found Nothing....

That why your methode can help me and Other more People. it's so simple to found a other one who and the good Rom and just in a few seconds can transfer it to You...

Many thanks for your Job Buz!!! The force be withe You!!! LOL
[Windows Mobile Software Development] toenailed:
for the meantime guys you need to change the carte de stockage to Storage Card .. :D

http://wiki.xda-developers.com/index.php?pagename=Himalaya_2005_FolderName

i believe buzz is already aware of this and already working on it .. just be patience guys .. buzz is little busy at the moment .. but the upgraded version will be relase soon .. :D

-toe
[Windows Mobile Software Development] dampil:
Reg-Change Work ! !

Hi

Thanks for the Reg Editor Trick !

Yes it Work, i change it on my A620BT asus PPC 2003 :

* Compact Flash Card (CF)

1. Goto this registry Section [HKEY_LOCAL_MACHINE\System\ StorageManager\Profiles\PCMCIA]

2. Change the Value of "Folder" to 'storage card' (default was 'Carte de Stockage')

3. Then Soft Reset

It's Done ! And I can Now Lauch the Grap_it 64Mo => Résult i had now a 64Mo Bin file.. but I do not now what I can do With it... Help...

Thanks

PS : Reg modification do with PHM regedit

http://www.phm.lu/downloads/download.aspx?{940B734A-C437-41C7-ADED-2A4418802FD3}
[Windows Mobile Software Development] kawaguchi:
help me !

After created dump.bin file . How to extract it ?

Pls help me !
[Windows Mobile Software Development] rick83:
Hi, When i do the steps to dump the rom, it will create a dump file right...

But, how do i flash my device back. If i leave the autorun.exe in there, wont it do a dump yet again? If i remove it, how will the system know wat to do.

Kindly Advise...
[Windows Mobile Software Development] rick83:
hey guys,

any ideas ??? Ive been waiting for a reply for quite some time...
[Windows Mobile Software Development] Borg Number One:
Hi.

Reffering to the

Ultimate Pocket PC hacking thread

I tried the mentioned methods (...renaming the CF-II-FLASH-Disk/Minidisk to "Storage Card"),

which were posted here to get to run the dump utility.

The methods seemed to work and after reaching to rename the drive to:

"Storage Card", I could successfully start the dump_it utility.

The resulted dump.bin file has a size of: 32MB,

but it just contains 16384 times the same stuff.

For example:

If you look for: "nk.exe"-string inside the file,

you will find it 16384 times. :(

See attachment:
[Windows Mobile Software Development] Borg Number One:
Hi.

Thanks for your answer,

but why did you publish a new/re-built/updated version for 64MB? :D

The Asus MYPAL A620BT just have a 32MB ROM.

Well, I tested the new 64MB release.

Now it works without problems, if the drive's name is "Speicherkarte".

But the resulted 64MB dumped ROM file also just contains many, ...., many times the same byte area/byte strings.
[Windows Mobile Software Development] hailang_82:
is it workable in palm OS 5 and above?

i try.. but the file could not execute in my laptop...
[Windows Mobile Software Development] JGUI:
with HW6515

I tried to use it with HW6515.

dump.bin seems to be created fine.

has 131MB size, but I thought HW6515 has only 64M of ROM

:o

small bug: on square screen of HW6515 there is no red line on the buttom of the screen. but after several seconds the been was hear.

tip:

remove SD card,

make soft-reset

insert MiniSD with autorun.exe

wait....

then I try to use dumprom.exe

I see the list of files in new .txt file,

but I don't see any files.

where should they be?

or I missed something?
[Windows Mobile Software Development] weasley:
when i trying to use ijust give me this erro

Error is creating files
[Windows Mobile Software Development] buzz_lightyear:
make sure, there is enough free space on your SD card.

buzz
[Windows Mobile Software Development] BeyondtheTech:
I have modified the grab_it_128.exe to support the \SDMMC path that is on the E-TEN M500 and possibly the TORQ P100.

It made a 128MB dump, but only the first 4096 characters contain any code, and the rest is all zeroes.

Within the 4096 characters, I see phrases like [ECC OK!] and Dump Memory and Run Loader.

I got something, but how different is this PocketPC from others that make it unable to perform a full dump?
[Windows Mobile Software Development] buzz_lightyear:
oh, how's that?

maybe it will help, if I publish the source code...

;o)))

buzz
[Windows Mobile Software Development] mamaich:
some devices have a different memory layout. This program assumes that ROM is mapped to the physical adress 00000000. But some devices can have it on different addresses or completely hide it after Windows starts, so you'll get garbage.

and for M500 you can extract ROM image from its R05 update.
[Windows Mobile Software Development] hailang_82:
Is it possible to publish the source code?

thanks...
[Windows Mobile Software Development] rodnav:
will this work with benq p50?
[Windows Mobile Software Development] buzz_lightyear:
sure...

but first 2morrow, coz i have to go now...

buzz
[Windows Mobile Software Development] buzz_lightyear:
pls, try to do a regular SD backup and post its header here.

buzz
[Windows Mobile Software Development] mamaich:
2 BeyondtheTech and owners of other devices where this tool does not work. I've made a program that uses a completely different method to dump ROM image of the device. Can you test this on E-TEN M500?

The code should work both under WM2003 and 2K5 (tested under emulator).

Usage:

copy the EXE file to device and run it. In the "Path to file" enter the complete path and filename of a dump, in the "Mbytes to dump" enter the size of your ROM (typically 32Mb) and press "Dump" button. It should make a dump of the ROM file.

If this method would work - I'll publish the source code so that buzz_lightyear would modify his dumper to use my method.

This method currently cannot dump the bootloader under 2K3 OS and IPL under 2K5. But this can be fixed.
[Windows Mobile Software Development] buzz_lightyear:
cool mamaich... THANX

buzz
[Windows Mobile Software Development] hailang_82:
Hi, can i know where did u publish it?

Cos i am still pretty new here....

cheers
[Windows Mobile Software Development] buzz_lightyear:
sorry, i'm still way too busy...

here it is.

buzz
[Windows Mobile Software Development] Pyrofer:
Hi, I used the rom dumper to backup my Magician before doing some major rom hacking and playing about, but I have no idea what to do with the dump.bin file to get it back onto the device?

What format is it in?

Can i just use ntrw write dump.bin I:

and then put SD into the phone and let it flash itself from SD, or do i need to do something clever with the dump first?
[Windows Mobile Software Development] hailang_82:
U r too kind... I am using a old HP pda which is running on Win CE. Is it possible to run ur program? But the only slot available in the pda is compact Flash...
[Windows Mobile Software Development] buzz_lightyear:
hi hailang,

I will modify it to save the dump into same place, where you run it from.

that will make it easier to use any storage device and any OS language.

buzx
[Windows Mobile Software Development] universaldoc:
Buzz, please check your PM, its important :)

Universaldoc.
[Windows Mobile Software Development] buzz_lightyear:
any news?

buzz
[Windows Mobile Software Development] san:
I tested your tool on my HP1940, but I only got 1.8M of the dump.bin. It's strange, but a few files can extract from the small dump.bin.

It succeed on MS Device Emulator, and I can extract every file from the dump.bin.

I also tested grab_it, but it got incorrect data that I cann't extract by dumprom.

I saw that grab_it uses VirtualCopy to copy physical memory, and TestDump uses LoadLibraryEx to load dll file and obtain its handle and then copy its memory. I don't why they failed in my enviroment, did you succeed all?
[Windows Mobile Software Development] hailang_82:
I not trying to rush u.. but can u edit the program such that it can run in CF card too? I need it quite urgently...

sorry to rush u...
[Windows Mobile Software Development] Asukal:
I got dumped ROM(128MB) from Jasjar with TestWM5, then i ried mtty.exe,

but still not effect the commands

d2s 70000000 08000000

or just the extended_rom

d2s 74100000 00a00000

pls see the thread about that here

http://xdaforums.com/viewtopic.php?t=27881&postdays=0&postorder=asc&start=0

any way

Can i make bin or nbf file with my own files into that?

then. i want to reflash to Jasjar.

i just want to replace just one file [wince.nls] on my Jasjar!

Becuase just replace it onto flying device, OS will ignore that as i

told Mr,Mamaich.
[Windows Mobile Software Development] cr2:
Was it a "raw" dump, or the file you have posted before ?

Can you tell us if the 'haret.exe' program

i have mentioned before, is working on the Universal ?

I would have done it myself, but my

MDA Pro is stuck somewhere in the

delivery chain :(
[Windows Mobile Software Development] Asukal:
Thanks, That 128MB was Row dumped one, not files,

i should know what sclipt on the haret?

Now i cant proceed....sorry newbie question!

i followed the instruction as follows.

The Error [Failed to load Kernel \Storage Card\zImage]
[Windows Mobile Software Development] cr2:
Ok. You don't want to run the script that loads linux, because it does not exist (yet) ;)

So:

1. Does the program run at all?

2. If yes, put these lines in default.txt:

print "Welcome to Hardware (Handheld?) Reverse Engineering Tool!"

print "Some basic info about your PDA:"

print "MMU L1 descriptor table address is %08x" MMU

print "Video RAM address is %08x" VRAM

and run the default.txt script. What do you see in the output window ?

3. If you are a brave guy, you

can add 'dump gpio' and 'dump mmu jasjar.mmu' commands.

It will be good to put haret on the SD card, so at least some information will

be written to the disk and MMU dump is big.

That can crash your machine requiring the hard reset, though.

The program can be remotely controlled

over telnet, but it is too much for the first time :)

When we will get the MMU dump, it

will be possible to say what memory area

should be dumped.

Is it a real image, or just repeating blocks?
[Windows Mobile Software Development] Asukal:
--------------------------------------------------------------------------------

this was dumed with grab_it....so i dont know which kinds dumed image??

@this was the Default.txt i typed as yu said.

is this correct??

@then i got some file named Jaja, just this file.

then PLS see the Picture
[Windows Mobile Software Development] cr2:
This file expands into 128MB, but it has

only the startup code (<2KB), that repeats over and over.

These commands are for booting linux, you don't need them, but looking on you results, they didn't really hurt.

Great!!! Wow! You have dumped the MMU, i'll look at this file. Thanks!!!

Probably the last wish- can you put only the 'dump gpio' command into default.txt

and post the output ?
[Windows Mobile Software Development] Asukal:
re 128mb file, so sad to herar that!

but i did something with it!

ok i will do it again after 3hours.

now i am out to have a chinese noodel,

i didnt have any thing since noon.

now its 23:30 here.!

thanks for u r beeing my teacher! pls wait a while.
[Windows Mobile Software Development] cr2:
I have learned that the top 1MB of the RAM

is (partially) used as a framebuffer.

It is interesting that they put the page table

with a 8MB offset from the memory bottom.

I can't see the memory-mapped ROM (XIP pages), looks like XIP was too much

of a headache to the microsofties :-)

We can dump the first (mapped) megabyte, there should be some code

that mounts the 'root filesystem'.

The development was done on a 128MB RAM machine, but it is usual on

wince devices to strip it of RAM for the

"consumers".
[Windows Mobile Software Development] cr2:
You have done a great job!

So, to dump the GPIO:

dump gpio jasgpio

to dump the first megabyte of the memory:

pdump jasboot 0x0 0x100000

to dump the ASIC:

pdump jasasic3c 0xc000000 0x100000

The jasgpio is a very small file, jasboot and

jasasic3c are each 1MB.

The full haret documentation can be found here:

http://zap.eltrast.ru/en/haret.html
[Windows Mobile Software Development] Asukal:
if i see the ROM files with Total Commander, just 31 files on the ROM.

Is this the one you mentioned?

But cant access them, just see it.

PLS see the Picture.

Tried dump gpio, nothing happen. Just this command on Defautlt.txt :?

Are there any new tool like pdump.exe for WM5?

[/quote]
[Windows Mobile Software Development] cr2:
It should be

dump gpio jasgpio

No, these are builtin commands of haret.

You put them into the default.txt and

they create output files.
[Windows Mobile Software Development] Asukal:
you have just ansewered me.thanks!

now finish one of them/// seems to be

it the name of first one is 0x100000 right?

or another name after finished it?

not sure finshe or not, no proceeding in visual!

-----------------------------------------------------------------------

i got it, now proceeding on haret.

pdump is the command of Haret, right?

i will dumpe both of jasboot and jas asic3c! very soon!

Warten Sie,bitte!
[Windows Mobile Software Development] Asukal:
i got one of them.

pdump jasboot 0x0 0x100000

its size 4.19MB...bigger than estimate.

After this size, still keeped on as it, but pased 30 minuites, no more sized.

So i think it was finished.

i tried to another asci one,

the Screen was blue.....

moment later, i stopped it by soft reset. but not happend harde reset or crashed.

so i dont know i can do it or not......
[Windows Mobile Software Development] cr2:
Ok. I see. It doesn't bring us further. It's

the same code as in the older dump,

that calls nk.exe.

Hmm. Do you have the 'jasgpio' too ?

Thanks for your assistance, anyway :)
[Windows Mobile Software Development] Asukal:
yes just 2.65kb

corect?
[Windows Mobile Software Development] cr2:
Yes. It is very interesting. Thank you very much!!!
[Windows Mobile Software Development] Asukal:
OK! i will sleep a while.

i must work after 2 hours! :cry:

i hope you can get some hints for the replacement wince.nls file!

Good luck!
[Windows Mobile Software Development] cr2:
Is it possible to these settings ?

[HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\MSFlash]

"PartitionDriver"="mspart.dll"

"MountAsROM"=dword:1

"MountHidden"=dword:1

"Folder"="Flash Disk"

"Name"="FLASH Disk Block Device"