that looks like the .mbn files from the TPT image
still reading on how to extract
Jump to content
You want the last 4 too. A few of those files aren't in the original tpt update, but grab them anyway if you can.
will do, still reading through the 198 page user guide
FULL_SDRAM dump file with QPST Memory Debug contains AMSS
Edited by hecatae, 21 March 2011 - 01:59 PM.
Isn't the multi-image downloader a way to flash multiple devices at the same time?
Just asking, I'm not sure!
Also hecatae, can you please send me some DL links to your tools? Can't find most of them :S
Edited by hecatae, 21 March 2011 - 10:12 PM.
... already got a successful memory dump
Is it straightforward enough for an 'ordinary user' to dump the Gen2 files safely? (And it would probably be a user without English as their first language)
you'd have to boot the device in FTM mode and use QPST 2.7 build 348 to do a full Memory Debug dump, simply a case of choose the same com port as the DFU port is registered to
So are you saying you have managed to extract all the internal memory from a blade? does that mean it will be possible to flash gen1/gen2 files between phones?
Also how do you boot into FTM Mode? is the the one where you hold down both volume buttons or a different one?
As you have a Gen2 device, it is not yet been rooted, flashed with CWM, etc, right?
If so, FTM mode is achieved as recovery mode: hold down the Volume Down button while switching on the phone.
The DFU mode should equal the FTM mode (same debug interface is loaded) what you were talking about (hold down both volume buttons), but I'm not sure it will work!
hecatae, please share the method, so some more experienced Gen2 users can dump their phone -> we can make a TPT of it
Edited by Slash.it, 22 March 2011 - 08:55 AM.
Unfortunately , you can't get a raw nand image dump by just using QPST. You can however get a full RAM dump by putting the phone in download mode (by switching it on while holding the Vol+ and Vol- keys) and using revskills. You can then "cut" the obtained image and extract oemsbl & C.
P.S. Diagnostic (FTM) Mode and Download Mode are not the same. While in Download Mode, you can send the phone a bootloader and have it run on the ARM9 (baseband) processor. With a properly written/patched bootloader you have full access to the phone hardware, including the nand. Phone flasher sends its own bootloader (armprgZTE.bin) to the phone and then use it to flash the images... we could patch it to allow nand reading.
P.P.S. NV items contain values that must be stored in a Non-Volatile way (e.g. IMEI, lock status, ...).
Edited by hecatae, 22 March 2011 - 09:16 AM.
so what on earth did QPST Memory Debug dump then?
You can dump the RAM, but not the nand. In fact, I bet that's what "Memory" in "QPST Memory Debug" means.
reversing QC mobiles for beginners
Edited by wbaw, 22 March 2011 - 09:48 AM.
We need to be able to convince somebody with a new 2.2 phone to get them from a phone, unless we can get an official zte 2.2 update. starting to sound like it might be easier to get a zte update than mess around getting it off a phone.
0 members, 0 guests, 0 anonymous users