[HTC Wings] jockyw2001:
Excellent :)

I'm now dumping my FAT partition using the HardSPL command "fat2sd" (watch spelling!).

Of course you have to start up in bootloader mode (tri-color) for that and then connect with MTTY 1.42

You can call it with a parameter which can have the value 1,2,3 or 4

I think "fat2sd 3" is filemode, but since it is currently running and takes a long time I am not yet sure.

Ah it just finished :D

Here is a snapshot of the MTTY output

Cmd>fat2sd 3
Nand2SDReorder start...

Buildup mapping table now
dwTotalLength=0x484800, remain:0x8A09800

dwTotalLength=0x1111000, remain:0x7D7D000

dwTotalLength=0x1D9D800, remain:0x70F0800

dwTotalLength=0x2A2A000, remain:0x6464000

dwTotalLength=0x36B6800, remain:0x57D7800

dwTotalLength=0x4343000, remain:0x4B4B000

dwTotalLength=0x4FCF800, remain:0x3EBE800

dwTotalLength=0x5C5C000, remain:0x3232000

dwTotalLength=0x68E8800, remain:0x25A5800

dwTotalLength=0x7575000, remain:0x1919000

dwTotalLength=0x8201800, remain:0xC8C800

searching for boot sector, please wait a min
boot sector hit, start writing
remain 15147 sectors
remain 13867 sectors
remain 13355 sectors
remain 13099 sectors
remain 4139 sectors
remain 3883 sectors
remain 3627 sectors
remain 3371 sectors
remain 2859 sectors
remain 2347 sectors
remain 2091 sectors
remain 1579 sectors
remain 1323 sectors
Last Sector = 53803, encounter Last Logical Sector
Cmd>

Ok I have checked the SD after "fat2sd 3" and it wrote about 7.41MB in filemode (FAT32)

This is the contents of the rootdir. I think what it has dumped now are user files. Don't know how ROM cooks call this (user FAT partition??):

I:\>dir /a
Volume in drive I is TFAT
Volume Serial Number is 07E4-000A

Directory of I:\

01/09/2007 00:00 <DIR> Documents and Settings
01/09/2007 00:00 <DIR> Windows
01/09/2007 00:00 <DIR> Temp
03/01/2008 23:57 77,824 ReplStorVol
01/09/2007 00:00 <DIR> My Documents
01/09/2007 00:00 <DIR> Program Files
01/09/2007 00:00 <DIR> Application Data
01/09/2007 00:00 28,672 mxip_initdb.vol
03/01/2008 23:57 151,552 mxip_system.vol
03/01/2008 23:57 32,768 mxip_notify.vol
03/01/2008 23:57 53,248 mxip_lang.vol
01/09/2007 00:01 <DIR> ConnMgr
03/01/2008 23:57 172,032 cemail.vol
03/01/2008 23:57 385,024 pim.vol
8 File(s) 901,701 bytes
7 Dir(s) 133,283,840 bytes free

Will now try the other options.

Now running "fat2sd 4" This one takes a long time ~ 30 min

MTTY snapshot:

Cmd>fat2sd 4
Nand2SDReorder start...

Buildup mapping table now
dwTotalLength=0x484800, remain:0x8A09800

dwTotalLength=0x1111000, remain:0x7D7D000

dwTotalLength=0x1D9D800, remain:0x70F0800

dwTotalLength=0x2A2A000, remain:0x6464000

dwTotalLength=0x36B6800, remain:0x57D7800

dwTotalLength=0x4343000, remain:0x4B4B000

dwTotalLength=0x4FCF800, remain:0x3EBE800

dwTotalLength=0x5C5C000, remain:0x3232000

dwTotalLength=0x68E8800, remain:0x25A5800

dwTotalLength=0x7575000, remain:0x1919000

dwTotalLength=0x8201800, remain:0xC8C800

last sector = 53803
remain 15147 sectors
remain 14123 sectors
remain 13867 sectors
remain 13355 sectors
remain 13099 sectors
remain 4139 sectors
remain 3883 sectors
remain 3627 sectors
remain 3371 sectors
remain 2859 sectors
remain 2347 sectors
remain 1579 sectors
remain 1323 sectors
Last Sector = 53803, encounter Last Logical Sector

Cmd>

I analyzed the contents of the SD and it turns out a raw binary image is written on SD.

You must open the SD with for example the Winhex tool.

I think the data is the same as with "fat2sd 3", but now in raw mode.

Meanwhile I have studied the HardSPL again and I think I can trick it in dumping other partitions.