[Windows Mobile Development and Hacking General] thierryb:
>pdocread -l
C:\itsutils>pdocread -l
60.68M (0x3caf000) StrataF
| 1.24M (0x13e000) Part00
| 8.00M (0x800000) Part01
| 51.43M (0x336f000) Part02
1.71G (0x6d3f8000) TFFS1
| 1.71G (0x6d240000) Part00
151.85M (0x97da000) TFFS2
| 151.84M (0x97d7a00) Part00
2.00M (0x200000) DSK1:
| 2.00M (0x1ffc00) PART00
STRG handles:
handle c7ae4e9e 2.00M (0x1ffc00)
handle 27e06902151.84M (0x97d7a00)
handle 47faca26 1.71G (0x6d240000)
handle c7fbfa16 51.43M (0x336f000)
handle c7fbf90e 8.00M (0x800000)
handle c7fbf7e6 1.24M (0x13e000)
disk c7ae4e9e
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 27e06902
2 partitions, 0 binary partitions
customerid=062a0000 uniqueid= 00 00 2a 06 f5 35 0a 58 00 00 00 49 00 00 00 93
disk 47faca26
2 partitions, 0 binary partitions
customerid=062a0000 uniqueid= 00 00 2a 06 f5 35 0a 58 00 00 00 49 00 00 00 93
disk c7fbfa16
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk c7fbf90e
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk c7fbf7e6
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

I already know that TFFS1 is propably the working nvram

And StrataF is probably the Rom.

C:\itsutils>pdocread -d StrataF -p Part00 -t
real nr of sectors: 1 - 512.00byte (0x200)

It is not consistent with the previous value (0x13e000)

C:\itsutils>pdocread -w -d StrataF -p Part00 -t
real nr of sectors: 1 - 512.00byte (0x200)

Not better. Tried to dump this part with -G option

C:\itsutils>pdocread -w -d StrataF -p Part00 -G 0x13e000 0 0x13e000 stratafpart0
0.nb
CopyTFFSToFile(0x0, 0x13e000, stratafpart00.nb)
ERROR: ITReadDisk : read 00026000 bytes - Adresse de bloc de contr¶le de stockag
e non valide.

C:\itsutils>pdocread -w -d StrataF -p Part00 -G 0x26000 0 0x26000 stratafpart00.
nb
CopyTFFSToFile(0x0, 0x26000, stratafpart00.nb)

C:\itsutils>dir stratafpart00.nb
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 207B-79DF

Répertoire de C:\itsutils

24/08/2007 22:37 155 648 stratafpart00.nb
1 fichier(s) 155 648 octets
0 Rép(s) 9 667 854 336 octets libres

That is consistent 155648 = 0x26000

Then whatever the position I want to start to read (below 0x100000), I get always the same error :

C:\itsutils>pdocread -w -d StrataF -p Part00 0x100000 0x1000 rom0000.1.nb
CopyTFFSToFile(0x500000, 0x1000, rom0000.1.nb)
ERROR: ITReadDisk : read 00000000 bytes - Adresse de bloc de contr¶le de stockag
e non valide.

Always get 0 bytes, so faild.

Why I can not get more ?

What I make wrong ?

And it is the same for 2 other partitions :

Part01 : i get 1 048 576 (=0x100000) bytes and nothing more

Part02 : i get 6 737 920 bytes using pdocread 3 times and nothing more (I am waiting 51 Mbytes !)

C:\itsutils>pdocread -w -d StrataF -p Part02 0x00000 0x336f000 part02.nb
CopyTFFSToFile(0x0, 0x336f000, part02.nb)
ERROR: ITReadDisk : read 0000c000 bytes - Adresse de bloc de contr¶le de stockag
e non valide.

C:\itsutils>dir part02.nb
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 207B-79DF

Répertoire de C:\itsutils

24/08/2007 23:05 6*684*672 part02.nb
1 fichier(s) 6*684*672 octets
0 Rép(s) 9*653*018*624 octets libres

C:\itsutils>pdocread -w -d StrataF -p Part02 0x660000 0xc000 part02.1.nb
CopyTFFSToFile(0x660000, 0xc000, part02.1.nb)

C:\itsutils>pdocread -w -d StrataF -p Part02 0x66c000 0x1000 part02.2.nb
CopyTFFSToFile(0x66c000, 0x1000, part02.2.nb)

C:\itsutils>pdocread -w -d StrataF -p Part02 0x66d000 0x1000 part02.3.nb
CopyTFFSToFile(0x66d000, 0x1000, part02.3.nb)
ERROR: ITReadDisk : read 00000000 bytes - Adresse de bloc de contr¶le de stockag
e non valide.

but the last part is unconsistent :

C:\itsutils>pdocread -w -d StrataF -p Part02 0x66c000 0x1000
HexdumpTFFSToStdout(0x66c000, 0x1000)
ofs=66c000 len=00001000 want=00001000 read=00001000 buf=00000000 need=00001000
0066c000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*
0066d000:

C:\itsutils>dir part02*.nb
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 207B-79DF

Répertoire de C:\itsutils

24/08/2007 23:06 49 152 part02.1.nb
24/08/2007 23:07 4 096 part02.2.nb
24/08/2007 23:07 0 part02.3.nb
24/08/2007 23:05 6 684 672 part02.nb
4 fichier(s) 6 737 920 octets

So can somebody help me to understand what I have done badly and give me pointer to read more. Thanks