Hi all!
It is possible to downgrade the P6500 from WM6.1 to WM6?
If i have one device with W6.0, can i extract the ROM from it ?
Anyone have a WM6 original shipped french (1.10.406.63) ROM?
Thanks in advance!
Any ideas?
pls
Amokh said:
Any ideas?
pls
Click to expand...
Click to collapse
yes it is..
amokh if you have one device with a rom you want and want to put it on the other device ... yes it can definitely be done...
you need Qmat
and a kaiser kitchen
what works for kaiser works for sedna...
read other post as well as all you need has already been discusssed in other forums on this site... just takes time to find it... everybody had to do it , me included, so happy hunting
ask questions if you need help
ill do what i can...ok
also hard spl your device if you dont want to turn it into an expensive brick!
Thank you gardee005 for your answer...
My first idea was to take a WM6 WWE and trying to translate/ cook it with french files extracted from an WM6.1 french original shipped rom...
I have find the mui files, witch contains the lang, but i dont succeed to add to the OS.nb...
Other idea was to dump the ROM from the device with WM6 french, for that i tried to use itsutils pdocread.exe, according pof`s instructions for dumping Kaiser ROM
but, i have obtain this:
C:\itsutils\build>pdocread.exe -l
210.63M FLASHDR
| 3.12M Part00
| 3.63M Part01
| 78.50M Part02
| 125.38M Part03
980.00M DSK1:
| 980.00M PART00
STRG handles: 474f0f92(980.00M) 87484922(125.38M) 074b3d82( 78.50M) c74b3d5e(3.63M) 874b3aaa( 3.12M)
I don't know, how to dump them, because i don't have obtained the hex addresses, to proceed dumping...
How to do it??
As far as i know, i have to obtain something like:
3.12M (0x31f000) Part00
| 3.50M (0x380000) Part01
| 69.38M (0x4560000) Part02
| 134.38M (0x8660000) Part03
according to pof`s instructions, and i need to dump it like this:
"pdocread -w -d FLASHDR -b 0x800 -p Part00 0 0x31f000 Part00.raw
pdocread -w -d FLASHDR -b 0x800 -p Part01 0 0x380000 Part01.raw
pdocread -w -d FLASHDR -b 0x800 -p Part02 0 0x4560000 Part02.raw
pdocread -w -d FLASHDR -b 0x800 -p Part03 0 0x8660000 Part03.raw"
i have also change :
"HKLM\Security\Policies\Policies
valuename '00001001' was set to dword:2 to dword:1"
and now, what`s next?
http://rapidshare.com/files/85341969/kaiserkitchen_01-20-08.rar.html
get this kitchen... and qmat...
with this kitchen you should be able to extract the ROM and put it in the other device... you have part01 and part02 and get any ROM (.nbh file)
open KAISERKITCHEN.CMD in the kitchen then press m and u will see
let me know if this works..
then for step 9 use qmat to rebuild flashable ROM...
also this is not the kaiser so things wont be exactly the same but all should work...
also the radios on WM6.1 and WM6 dont mix..so u gotta have WM6 complete rom before u flash only WM6 OS rom..
please dont send private messages...ok
thanks for the kitchen.
still unable to extract it...how can i obtain the dumped part01 and part02 files?
I suppose that it must be extracted from device...but how?
here is the menu:
Requires RUU_signed.nbh in BaseROM folder
(1a) Extract NBH Content from shipped ROM
(2a) Extract IMGFS from shipped ROM
(3a) Extract XIP from shipped ROM
Requires RUU_signed.nbh, dumped part01.raw and part02.raw in BaseROM folder
(1b) Extract NBH Content from cooked ROM
(2b) Extract IMGFS from cooked ROM
(3b) Extract XIP from cooked ROM
(4) Copy ROM XIP
(5) PKGTool
(6) Move OEM and SYS
(7) Delete Boot
(8a) BuildOS
(8b) BuildOS+Package_Tools-2.7
(9) Create Kaiser ROM
(10) HTC ROM Tool
(11) Clean Up Temp files
(12) PagePool Changer
none of them cannot extract from device...or i`m doing something wrong?
now i`m confused...
u said you you got Part01 and part02 in your previous post...
but, i have obtain this:
C:\itsutils\build>pdocread.exe -l
210.63M FLASHDR
| 3.12M Part00
| 3.63M Part01
| 78.50M Part02
| 125.38M Part03
is this true .. that you got this ?
search in the kaiser threads ... im like you ..i dont know much! just gotta try and fail many times and search and search ...
but did you get part01 and part01 while you device was connected by activsync ?? You said you did... and if you got them then ur just there..
the kitchen i gave you is for use when you have part01 , 02 and ***.nbh.
I have never extracted a ROM from a device.... i have cooked ROMs but always worked with english ROMs, so i know how to dump , edit and recompile a ROM for flashing...
Also make sure you give things enough time to run.... not just when they say Done... sometimes ther are still running and you will see a flashing _ when its finished...
Amokh said:
but, i have obtain this:
C:\itsutils\build>pdocread.exe -l
210.63M FLASHDR
| 3.12M Part00
| 3.63M Part01
| 78.50M Part02
| 125.38M Part03
980.00M DSK1:
| 980.00M PART00
STRG handles: 474f0f92(980.00M) 87484922(125.38M) 074b3d82( 78.50M) c74b3d5e(3.63M) 874b3aaa( 3.12M)
Click to expand...
Click to collapse
i have obtain the list of the partitions, and i was trying to dump them...
Amokh said:
I don't know, how to dump them, because i don't have obtained the hex addresses, to proceed dumping...
How to do it??
As far as i know, i have to obtain something like:
3.12M (0x31f000) Part00
| 3.50M (0x380000) Part01
| 69.38M (0x4560000) Part02
| 134.38M (0x8660000) Part03
Click to expand...
Click to collapse
it must obtain something like this, for having the "0x31f000, 0x380000...etc " adrreses for start the dumping procedure...
Amokh said:
according to pof`s instructions, i need to dump it like this:
"pdocread -w -d FLASHDR -b 0x800 -p Part00 0 0x31f000 Part00.raw
pdocread -w -d FLASHDR -b 0x800 -p Part01 0 0x380000 Part01.raw
pdocread -w -d FLASHDR -b 0x800 -p Part02 0 0x4560000 Part02.raw
pdocread -w -d FLASHDR -b 0x800 -p Part03 0 0x8660000 Part03.raw"
Click to expand...
Click to collapse
and just after that you get the part01 and part 02...
It`s almost 3 weeks, since i have started to work on this issue, and still no solution...it`s depressive already
i think since i have the part01 and part02, i will able to reconstruct it to a flashable ROM...the only issue is to get them...
have you ever change the language by cooking a ROM?
if i will start extracting the french language from WM6.1 ROM (shipped), and put it to an WM6 WWE (shipped or not) can you help me with some instructions?
It seems like the -l option doesn't quite work, it didn't show the addresses required for dumping, so I followed an other way to get the address described (wiki /index.php?pagename=Hermes_HowtoDumpRom) but also adding the -b 0x800 option (/showthread.php?t=334680).
So basically you are doing -l get the partition names, after one by one get the addresses like this:
pdocread.exe -w -d FLASHDR -b 0x800 -p Part00 -t
real nr of sectors: 1598 - 3.12Mbyte (0x31f000)
pdocread.exe -w -d FLASHDR -b 0x800 -p Part01 -t
real nr of sectors: 1856 - 3.63Mbyte (0x3a0000)
..
now to dump
pdocread.exe -w -d FLASHDR -b 0x800 -p part00 0 0x31f000 part00.raw
pdocread.exe -w -d FLASHDR -b 0x800 -p part01 0 0x3a0000 part01.raw
..
so ur on the way... let me know if its sucessful !!
sorry if i did not help much but i only know a little..
Success!!!
It`s working!!
After i have obtain the part01 and part02.raw,it was not so difficult...using the kaiserkitchen...and finally rebuild .nbh with Psas to a flashable file!
Now i will test it for a few days, to see how stable is...
Thank you gardee005 for the kitchen and for your help, it is very good feeling to cook...
good to hear.... whats Psas?
it not so difficult when you know how, did you use Qmat to rebuild the .nbh file or the kaiser tool? i never use the kaiser tool but qmat only so if u used it and it worked id like to know.
anyway nice to hear you succeded
Psas is the newer version of Qmat...
nice tool .. it has what u needed .. Hardware forensics>WinCE ROM util...
and you get part00 and offseto1x0031f00 etc.
then right click and you can dump..
Related
I have in hand a SPV M3100 from orange and would like to backup the rom.
Can someone help me with this ?
I have done those command already, but don't know what to do after. This is new for me and would like to finalyse this has this rom is new.
pdocread -w -d FLASHDR -p Part00 0 0x31fc00 Part00.raw
pdocread -w -d FLASHDR -p Part01 0 0x2e0000 Part01.raw
pdocread -w -d FLASHDR -p Part02 0 0x32e0000 Part02_0.raw
pdocread -w -d FLASHDR -p Part02 0x2610000 0x800 Part02_1.raw
pdocread -w -d FLASHDR -p Part02 0x2610800 0xccf800 Part02_2.raw
Thanks in advance for the one who will help me....
>
Version d'Opérateur : 14.123.2.733
Version de ROM : 1.23.73.3
Version de Radio :1.06.00.00
Read Upgrading FAQs question #8:
http://wiki.xda-developers.com/index.php?pagename=Hermes_UpgradeFAQ
hi,
i got a german orange spv m3100 , is it possible to use a backup from a french spv m3100?
Theoretically you can use pdocwrite to rewrite the OS portion of the ROM, but I think no one has tried this on the hermes.
Dear all
I use RomMaster.exe get O2 ROM XIP Error info: please help,thanks!
E:\ROMEDIT\Atom18508>RomMaster.exe diskimage_Ver.nb0 -w 5 0x0054000C -x -o xip.bin
[Error] Invalid File Handle of '0x0054000C'.
Incorrect parameter!!!
Try this
Code:
RomMaster.exe diskimage_ver.nb0 -w 5 -b 0x0018000c -x -o xip.bin
abusalza said:
Incorrect parameter!!!
Try this
Code:
RomMaster.exe diskimage_ver.nb0 -w 5 -b 0x0018000c -x -o xip.bin
Click to expand...
Click to collapse
but same problem:
E:\ROMEDIT\Atom18508>RomMaster.exe diskimage_ver.nb0 -w 5 0x0018000c -x -o xip.b
in
[Error] Invalid File Handle of '0x0018000c'.
sanjian said:
but same problem:
E:\ROMEDIT\Atom18508>RomMaster.exe diskimage_ver.nb0 -w 5 0x0018000c -x -o xip.bin
Click to expand...
Click to collapse
please compare abusalza's commandline:
RomMaster.exe diskimage_ver.nb0 -w 5 -b 0x0018000c -x -o xip.bin
Click to expand...
Click to collapse
with yours.
Can't use -b options?
RomMaster.exe diskimage_ver.nb0 -w 5 -b 0x0018000c -x -o xip.bin
RomMaster V2.2
Usage: RomMaster [options] imagefile
-d[m] <dfile> - delete file
replace file/module together with -a option
'm' delete module, deleting module isn't suggested
-a[c] <afile> - add file into the rom
'c' means use compress(need CECompressv4.dll)
-o <ofile> - output imagefile name
-v <0~9> - print info, 0 detail, 9 only show errors, default is 5
-w <5> - 5 is 2005, default is 2003&SE
-x - only save XIP(OS) data, can use fix option
-s <0x...> - Fix XIP start address(Hex)
-e <0x...> - Fix XIP end address(Hex)
In replace mode, 'c'&'m' is useless
sanjian said:
Can't use -b options?
RomMaster.exe diskimage_ver.nb0 -w 5 -b 0x0018000c -x -o xip.bin
RomMaster V2.2
Click to expand...
Click to collapse
You can use ROMMASTER from Scoter ROM Kitchen.
It's v2.3 and use the -b option.
from what I understand, in order to dump our Niki/Touch Dual ROMs, instructions are similar to the Kaiser procedure, meaning :
1) download pdocread.exe from http://wiki.xda-developers.com/wiki/XdaUtils/pdocread.exe
2) open command prompt on your PC, then run : "pdocread.exe -l"
3) dump NAND partitions :
pdocread -w -d FLASHDR -b 0x800 -p Part00 0 0x31f000 Part00.raw
pdocread -w -d FLASHDR -b 0x800 -p Part01 0 0x380000 Part01.raw
pdocread -w -d FLASHDR -b 0x800 -p Part02 0 0x4560000 Part02.raw
pdocread -w -d FLASHDR -b 0x800 -p Part03 0 0x8660000 Part03.raw
However, when i try to run "pdocread.exe -l", i get the attached windows error pop-up... Anyone got this error also ?
What OS you use?
WinXP 32Bit, WinXP 64Bit or Vista32/64Bit?
NetrunnerAT said:
What OS you use?
WinXP 32Bit, WinXP 64Bit or Vista32/64Bit?
Click to expand...
Click to collapse
I'm using WinXP 32Bit, with admin privileges
mcoquet said:
I'm using WinXP 32Bit, with admin privileges
Click to expand...
Click to collapse
do you have the 16-bit subsystem installed? slimmed down editions of XP found on the internet usually have this removed
Midget_1990 said:
do you have the 16-bit subsystem installed? slimmed down editions of XP found on the internet usually have this removed
Click to expand...
Click to collapse
i have no idea, but this is a work computer, and I assume that my company does not get pirate copies of Windows
it would be good if i could solve this, i could then dump a french rom
please try a other WinXP Mashine ... for test! Try Windows95 Compatiblity Mode. Try to start with a other User!
For Frensh Rom -> netrunnerat.4shared.com possible i have it ... i have 1 OEM Frensh Roms in the moment (unbranded)!
companies don't use pirate versions
But they strip down the installer on their own very often.
i don't have another xp computer with me, but i'll try with a vista 32...
hello ppl m rutz from india have an HTC touch Dual aka p5500(india)
so i get to the pt .
i saw the new rom wm 6.1 like it so wanted to update mine .....
so as per the instruction
Code:
copy sspl-1.16-nike.exe to your device and run it (usb cable must be connected!)
- after a few seconds "USB" appears on the display
- unplug and replug the usb cable
this pajrt runs sucessfully ...i get a new splash screen showin (for test only . not for sale )
the next 2 steps
Code:
- you can now flash the uspl-1.16-nike.nbh by running ROMUpdateUtility.exe from flash-uspl-niki
- you can also flash the hardspl-1.16-nike.nbh by running ROMUpdateUtility.exe from flash-hardspl-nik
gives me some communication error....and the update is at stuck at 0%
ppl m new to WM .....plz let me know asp abt the updation process as m eger to use WM6.1....
thanx in advance
wrong!
if you start sspl you must in the bootloader! then you flash hardspl! dont reset or restart your device ... read the hardspl thread again ... begin @ the first post and read all sides!
can you dump your india rom first? i havent it and possible you need it in some days :->
dude m new to this tell me how to dump it ....willl dump it and upload it ......and plz gimme step by step instrution of installation ......plzzz help m ...i did not undersand a word ...can we talk on IM ...Yahoo or Hotmail....
[email protected]
[email protected]
we will help you doing it. please wait a few minutes ok?
To dump your Niki ROM follow the instructions:
1) READ and download pdocread.exe from http://wiki.xda-developers.com/wiki/...s/pdocread.exe
2) open command prompt on your PC, then run : "pdocread.exe -l"
3) dump NAND partitions :
pdocread -w -d FLASHDR -b 0x800 -p Part00 0 0x31f000 Part00.raw
pdocread -w -d FLASHDR -b 0x800 -p Part01 0 0x380000 Part01.raw
pdocread -w -d FLASHDR -b 0x800 -p Part02 0 0x4560000 Part02.raw
pdocread -w -d FLASHDR -b 0x800 -p Part03 0 0x8660000 Part03.raw
Hi,
I have a new UK/EU WWE Raphael:
ROM 1.90.401.1 WWE
Date 08/01/08
Radio 1.02.25.19
Protocol 52.33.25.17H
I would like to know how I can dump my ROM making a safe copy just in case of failures of ugrades.
Thanks.
Take a look here. Just a reminder : pls use search button I'm here as a friend, but get ready to be flamed by others/mods.
Thx,
I searched, but didn't came out anything useful :-(
huh????
the link the guy gave has step by step instructions?
1. First of all is to Dump the ROM from your device.
Here are the proces (thanks to RezzZ)...
HTC Touch Pro DUMP:
Open a reg editor (dooFred TaskManager, TotalCommander or PHM Registry...) on your Touch Pro
Change:
HKLM\Security\Policies\Policies
valuename '00001001'was set to dword:2, change it to dword:1
After this change you need to soft reset your device.
Download itsutilsbin (http://www.xs4all.nl/~itsme/projects/xda/tools.html)
Extract the zip file and copy itsutils.dll to \windows on the Touch Pro (don't do it using ActiveSync, instead copy the file first to SD, and using TotalCommander or Resco Explorer copy from SD to \Windows).
Run (copy paste):
“pdocread.exe -l” (it’s the letter L not a 1)
you get something like:
Code:
457.75M (0x1c9c0000) DSK1:
| 3.12M (0x31f000) Part00
| 4.50M (0x480000) Part01
| 126.50M (0x7e80000) Part02
| 323.63M (0x143a0000) Part03
7.61G (0x1e6e80000) DSK7:
| 7.60G (0x1e6a80000) Part00
.....
Now run:
“pdocread -w -d DSK1: -b 0x800 -p Part00 0 0x31f000 Part00.raw”
“pdocread -w -d DSK1: -b 0x800 -p Part01 0 0x480000 Part01.raw”
“pdocread -w -d DSK1: -b 0x800 -p Part02 0 0x7e80000 Part02.raw”
“pdocread -w -d DSK1: -b 0x800 -p Part03 0 0x143a0000 Part03.raw”
notice the part before Part0X.raw is the same as you got with pdocread.exe –l, same for the name of the disk.
dumping part02 and 03 wil take some time. be patient.
After dumping the ROM you'll have 4 RAW files. Move in one folder the Part01.raw that contains the XIP and Part02.RAW that contains the IMGFS, both needed for the reconstruction process.
2. Download the WWE BaseROM to use in the reconstruction process here http://rapidshare.com/files/138980371/RUU_Raphael_HTC_WWE_1.90.405.1_Radio_Signed_Raphae l_CRC_52.33.25.17_1.02.25.19_Ship.exe
3. Download the Raphael Kitchen v0.61 here, that allows to reconstruct the ROM from the dump. The Raphael Kitchen allows to cook a ROM from a dumped one and from base NBH shipped one. You need to put the NBH file from the step before in the BaseROM folder (the Shipped ROM is a huge EXE file, and you'll need WinRAR to extract the content), and put the RAW files too.
Then execute the RAPHAELKITCHEN.CMD and choose the next options from the menu it this order:
e, b (for dumped ROM),space key, c, a, press BuildOS Play icon and wait to finish, Close BuildOS, close PagePool Changer and press space to go back to main mene. As a result of this process you will have a RUU_Signed.NBH file you can flash on to your Touch Pro to go back using the F option from main menu.
Click to expand...
Click to collapse
if your having any problems with any of this i would post in that thread, i followed the instructions step by step and managed to do it farily easily, try and post what problems and im sure some one will help you (cant promise it would be me as im busy next week but will have a look if you at least try )
thanks to jcespi2005 and hang.tuah for their awesome contributions