[HTC Universal] How to dump the ROM using d2s command

11:55 pm in HTC devices, How To, Mobile Security, Windows Mobile by buzz_lightyear

Here are some bootloader commands to dump parts of HTC Universal ROM.

Security level check

Before you can do any dumps off of your device, you must first pass the security check. You need to issue this command before any set of “d2s” commands.

task 32

Typical output looks like this:

USB>task 32
SD:Waiting for card insert.........

CMD3 for SD, it's OK, ready to get RCA from response.

SD:Detected one card

SD:ready for transfer OK

d.total_lba=F1F00
d.block_size=200
d.RCA=80CA
d.drv_type=40000000
d.busWidth=1
Total card size=1E3E0000

Level = FF

If the last line of output is Level=00 you are OK and your device is so called SuperCID device and you are allowed to dump the ROM content.
In case you’ll get Level=FF, you need to make your device SuperCID (see below).

Dump Bootloader

d2s 70000000 80000

OS ROM + splash

d2s 70100000 3FA0000

XtendedROM

d2s 74100000 A00000

Radio ROM

d2s 60000000 a24200

If you want to have them all on single SD card, you must add “sd a” at the end of each command except the first one.

OS ROM + Xtended ROM + Radio

d2s 70100000 3FA0000
d2s 74100000 A00000 sd a
d2s 60000000 a24200 sd a

Which program you use to do this?

We use good old mtty.exe version 1.16
mtty116 (64) - 15.18 kB

Important notice

Never copy & paste commands into mtty.exe. You always have to write it down there.
Use mtty.exe version 1.16, newer versions (1.42) are not working properly.

There are some devices, where the commands above are locked and you always get “Not allow operation” as response.
For these devices you have to use Universal SIM unlocker first, which will also unlock the CID of your device.

Related posts:

  1. grab_it – invisible ROM dumper- rename 'grab_it_xx.exe' to 'autorun.exe' - create folder '2577' on...
  2. [HTC Universal] How to create and prepare bootsplash imagenice picture, which will become our bootsplash bitmap editor XnView...
  3. Changing Your Himalaya's BOOTLOADERDO this only for the last resort Fourth Method is...
  4. [HTC Universal] SIM Unlock – free for $0 !!!itsme for his wonderfull scripts and efforts put into researching...
  5. How to Unlock/Flash HTC Universal using Windows VistaStrictly - AT YOUR OWN RISK Your device should be...

Tags: , , , , , ,
1 Comment »