Dumping firmware on Arnova G2 / Arnova G3 and other Rockchip based tablets - Forum

Latest product reviews
ARCHOS GamePad2
ARCHOS Smartphones
ARCHOS TV Connect
ARCHOS 101 XS

Topic RSS

Dumping firmware on Arnova G2 / Arnova G3 and other Rockchip based tablets

Topic Rating: 2.5 (2 votes)

2013/07/07
14:52

globula_neagra

Please donate to support my work

Moderator

Firmware Guru

Forum Posts: 2416

Thanks Received: 263

Member Since:
2012/01/05

Birmingham

Offline

My tablet:
Archos 101 XS

A more detailed method on how to DUMP the content of a tablet using Linux and RKFLASHTOOL

Linux Distro used: Ubuntu 12.04

Get your tablet in flashsing mode
lsusb (to find out your PID/VID which you will use later)

Download "rkflashtool.c" from here
https://github.com/justgr/arnova-tools/tree/master/rkflashtool

CD in the directory where you unpacked the rkflashtool.c

Open the rkflashtool.c and find the lines:
if (!(h = libusb_open_device_with_vid_pid(c, 0x2207, 0x290a)))
if (!(h = libusb_open_device_with_vid_pid(c, 0x2207, 0x281a)))
fatal("cannot open device\n");

Add your line corresponding to your device, here are some examples depending on the chipset RK 2818/2918/2928/3066/3188

if (!(h = libusb_open_device_with_vid_pid(c, 0x2207, 0x281a)))
if (!(h = libusb_open_device_with_vid_pid(c, 0x2207, 0x290a)))
if (!(h = libusb_open_device_with_vid_pid(c, 0x2207, 0x292a)))
if (!(h = libusb_open_device_with_vid_pid(c, 0x2207, 0x300a)))
if (!(h = libusb_open_device_with_vid_pid(c, 0x2207, 0x310b)))
fatal("cannot open device\n");

SAVE THE FILE WITH THE MODIFIED LINES

Install libusb-1.0-0-dev and compile:
sudo apt-get install libusb-1.0-0-dev
gcc -o rkflashtool rkflashtool.c -lusb-1.0 -O2 -W -Wall -s

A new executable rkflashtool will be created.

Usage of the rkflashtool executable
- it is imperative to use sudo

sudo ./rkflashtool b
this will reboot the tablet
sudo ./rkflashtool r
-this will read a user defined part of the nand.
sudo ./rkflashtool w
-this will write a user defined part of the nand (have in mind that if you write something wrong, the tablet may be permanently damaged

sudo ./rkflashtool r 0x0000 0x2000 > /tmp/parameter
With the above command you will dump the paramanter file, which will help in defining the values for the rest of the files that need to dumped.

In the parameter file you will find something similar to

androidboot.console=ttyFIQ0 init=/init initrd=0x62000000
,0x00800000 mtdparts=rk29xxnand:0x00002000@0x00002000(misc),0x00004000@0x00004000
(kernel),0x00008000@0x00008000(boot),0x00008000@0x00010000(recovery),0x00100000@0
x00018000(backup),0x0003a000@0x00118000(cache),0x00200000@0x00152000(userdata),0x
00002000@0x00352000(kpanic),0x00100000@0x00354000(system),-@0x00454000(user)

Lets say we want to dump the system partition
sudo ./rkflashtool r 0x00100000 0x00354000 > /tmp/system.loop
sudo ./rkflashtool r 0x00100000 0x00354000 > /tmp/system.img

It depends on you in what format you want the file to be saved, I prefer .img

You can do the same with the rest of the files that you need dumped.

Last edited by globula_neagra on 2013/08/13 - 00:04

THE FLASH/UNBRICK PROJECT

2012/07/02
12:41

admin

Please donate to support our work

admin

Forum Posts: 5759

Thanks Received: 3116

Member Since:
2010/09/11

Offline

My tablet:
JMI Pulse 10

Here are some instructions on how to dump a firmware of a Rockchip CPU based tablet.

Required Linux system, preferably an Ubuntu/Debian 64 bits (not running in a virtual machine like Vmware or Virtualbox).

You can use Steve (ttz642t) script to dump a Rockchip based tablet firmware:

http://www.arctablet.com/wiki/index.php/Rksp_an10g2_dump.pl

It uses rkflashtool from XDA: http://forum.xda-developers.com/showthread.php?t=1286305

We have compiled a package with binaries (64 bits) to make it easier for you, so what you need to do is open a console/opinions-on-teclast-p90hdrminal in Ubuntu, then download the archive using:

wget http://www.arctablet.com/assets/tools/Firmware/Rockchip_CPU_based/Rockchip_dump_Linux_01.tgz

then unpack it with

tar xvfz Rockchip_dump_Linux_01.tgz

change dir:

cd Rockchip_dump_Linux

install libusb:

sudo apt-get install libusb-1.0-0-dev

(you'll need to enter your root password when prompt)

Plug the power connector and the micro usb cable on your tablet and put your device in flash mode using a paper clip in the reset button (see Rockchip Flashing tool article to discover the right "key" combination for your tablet model to enter flash mode)

Finally run the dump script:

perl ./an10g2_dump.pl

You should have the dumped files in a subdirectory named after the date/time the script was run in the format like 20120702_1238

We'll need the backup.img file from that dump subdirectory.

Thanks to Steve (ttz642t) for the Rockchip and dump perl scripts

Last edited by admin on 2012/07/03 - 10:43

If you like our web site, applications and firmwares, feel free to support our site. Donations are used to pay the bills for our server hosting costs, development tools and purchase new tablets to support.

2012/08/03
09:00

admin

Please donate to support our work

admin

Forum Posts: 5759

Thanks Received: 3116

Member Since:
2010/09/11

Offline

My tablet:
JMI Pulse 10

In case you don't have a Linux machine available to run this firmware dump method, you can also use an alternative procedure that runs on any operating system that has ADB (Windows, Linux, Mac).

Thanks exelletor for this fine tutorial Wink

2012/08/05
22:15

Dolby

Regular Member

Forum Posts: 64

Member Since:
2012/07/31

Offline

My tablet:
Arnova 7d G3 capacitive

Thanx Admin & Excelletor,

For the help you gived me to make an firmware dump.

Regards,

Dolby

2x Archos Arnova 7D G3 tablets for my 2 sons. But i have problems to get microsd working on de arnova 7D G3. Help please!

2012/12/10
10:42

jbernardo

New Member

Forum Posts: 1

Member Since:
2012/12/08

Offline

My tablet:
No Archos/Arnova device

Thanks, with this I was able to do a full dump of the Lenco TAB-831.

2013/01/21
18:28

adginald

New Member

Forum Posts: 2

Member Since:
2013/01/13

Offline

My tablet:
Arnova 9 G3

Many thanks for this tutorial. It worked like a charm on my Arnova 9 G3. One sidenote: you need to set the .pl file to be executable with

chmod +x an10g2_dump.pl

before you can run it.

Dumb question: can I use the resulting backup.img file in the Rockchip flashing tool to restore my stock firmware? Or is there some sort of magic that needs to be performed on it before it can be used in that tool? "backup.img" seems to be the same size as the various custom firmwares available on this site, but I thought I'd ask before giving it a go.

2013/01/23
13:20

admin

Please donate to support our work

admin

Forum Posts: 5759

Thanks Received: 3116

Member Since:
2010/09/11

Offline

My tablet:
JMI Pulse 10

The easiest option is to take apart the different images out of the backup.img file.

Check the tools from here:

https://github.com/lamegopinto/rk2918tools

You'll need (on top of my head) : rkunpack and afptool.

Once you have all the image parts, just setup RKAndroidTool (available from here) and flash your device.

2013/01/23
18:01

adginald

New Member

Forum Posts: 2

Member Since:
2013/01/13

Offline

My tablet:
Arnova 9 G3

Thanks for the info, admin.

I'm still a little confused, though. I got the RK2918 tools working and used afptool on the backup.img file. It produced the following files:

------- UNPACK -------

package-file  0x00000800  0x0000021B

RK29xxLoader(L)_V2.14.bin  0x00001000  0x0002512E

parameter  0x00026800  0x00000255

Image/misc.img  0x00027000  0x0000C000

Image/kernel.img  0x00033000  0x006DD030

Image/boot.img  0x00710800  0x007BC000

Image/recovery.img  0x00ECC800  0x00958000

Image/system.img  0x01824800  0x0AF5E000

SELF  0x00000000  0x0C783804

Skip SELF file.

update-script  0x0C782800  0x000003A5

recover-script  0x0C783000  0x0000010A

UnPack OK!

As you can see, system.img is the big file, about 175MB. But it doesn't appear to have the all-important "RKFW" header, that all the custom firmwares ("update.img") seem to have.
Which file should I use? Or what else should I do?

Or, is there some documentation of the RK2918 tools somewhere?

Last edited by adginald on 2013/01/23 - 18:32

2013/01/23
18:39

admin

Please donate to support our work

admin

Forum Posts: 5759

Thanks Received: 3116

Member Since:
2010/09/11

Offline

My tablet:
JMI Pulse 10

Well, you should be able to flash all the firmware image part (system, boot, recovery,...) using RKAndroidTool as I mentioned. Just point the bootloader, parameter file and each image to the files you extracted and you should be fine.

For Rockchip firmware related info, you can learn a lot working with the tools I mentioned and experimenting by yourself. This site also has some info.

Cheers.

2013/04/09
13:51

me83

Member

Forum Posts: 13

Thanks Received: 1

Member Since:
2013/04/01

Offline

have followed the guide and got as far as running the script ,have made it excutable but when running iget

/Rockchip_dump_Linux# perl ./an10g2_dump.pl
./rkflashtool: 1: ./rkflashtool: ELF: not found
./rkflashtool: 1: ./rkflashtool: : not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: : not found
./rkflashtool: 2: ./rkflashtool: '

'��: not found
./rkflashtool: 1: ./rkflashtool: Z��@: not found
./rkflashtool: 1: ./rkflashtool: +@: not found
./rkflashtool: 1: ./rkflashtool: @: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: '�: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: : not found
./rkflashtool: 2: ./rkflashtool: CE��qX8��: not found
./rkflashtool: 1: ./rkflashtool:
                                 �: not found
�: not found: 1: ./rkflashtool:
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: : not found
: not foundol: 1: ./rkflashtool:
: not foundol: 1: ./rkflashtool: H��H��5z
./rkflashtool: 3: ./rkflashtool: �
: not found                        ��%2
./rkflashtool: 17: ./rkflashtool: Syntax error: ")" unexpected

Reading parameters...
Size of parameters is 0

./rkflashtool: 1: ./rkflashtool: : not found
./rkflashtool: 1: ./rkflashtool: ELF: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: : not found
./rkflashtool: 2: ./rkflashtool: '

./rkflashtool: 3: ./rkflashtool: �
: not found ��%2
./rkflashtool: 17: ./rkflashtool: Syntax error: ")" unexpected
./rkflashtool: 1: ./rkflashtool: ELF: not found
./rkflashtool: 1: ./rkflashtool: : not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: : not found
./rkflashtool: 1: ./rkflashtool: Z��@: not found
./rkflashtool: 2: ./rkflashtool: '

'��: not found
./rkflashtool: 1: ./rkflashtool: +@: not found
./rkflashtool: 1: ./rkflashtool: @: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: '�: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: : not found
./rkflashtool: 2: ./rkflashtool: CE��qX8��: not found
./rkflashtool: 1: ./rkflashtool:
                                 �: not found
�: not found: 1: ./rkflashtool:
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: : not found
: not foundol: 1: ./rkflashtool: H��H��5z
: not foundol: 1: ./rkflashtool:
./rkflashtool: 3: ./rkflashtool: �
: not found                        ��%2
./rkflashtool: 17: ./rkflashtool: Syntax error: ")" unexpected
./rkflashtool: 1: ./rkflashtool: ELF: not found
./rkflashtool: 1: ./rkflashtool: ./rkflashtool: 1: ./rkflashtool: �: not found: not found

./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: : not found
./rkflashtool: 2: ./rkflashtool: ./rkflashtool: 1: ./rkflashtool: Z��@: not found
'

'��: not found
./rkflashtool: 1: ./rkflashtool: +@: not found
./rkflashtool: 1: ./rkflashtool: @: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: '�: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: : not found
./rkflashtool: 2: ./rkflashtool: CE��qX8��: not found
./rkflashtool: 1: ./rkflashtool:
�: not found
�: not found: 1: ./rkflashtool:
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: : not found
: not foundol: 1: ./rkflashtool:
: not foundol: 1: ./rkflashtool: H��H��5z
./rkflashtool: 3: ./rkflashtool: �
: not found ��%2
./rkflashtool: 17: ./rkflashtool: Syntax error: ")" unexpected
./rkflashtool: 1: ./rkflashtool: ./rkflashtool: 1: ./rkflashtool: �: not found
: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: ELF: not found
./rkflashtool: 1: ./rkflashtool: : not found
./rkflashtool: 2: ./rkflashtool: '

'��: not found
./rkflashtool: 1: ./rkflashtool: Z��@: not found
./rkflashtool: 1: ./rkflashtool: +@: not found
./rkflashtool: 1: ./rkflashtool: @: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: '�: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: : not found
./rkflashtool: 2: ./rkflashtool: CE��qX8��: not found
./rkflashtool: 1: ./rkflashtool:
                                 �: not found
�: not found: 1: ./rkflashtool:
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: �: not found
./rkflashtool: 1: ./rkflashtool: : not found
: not foundol: 1: ./rkflashtool: ./rkflashtool: 1: ./rkflashtool:
: not found��5z
./rkflashtool: 3: ./rkflashtool: �
: not found                        ��%2
./rkflashtool: 17: ./rkflashtool: Syntax error: ")" unexpected
CRC = 00000000

have tried whilst connected via usb and put in black screen and also tried whilst in recovery and also just in normal usb mode but same not found error(following thetutorial directed to thepart after it says grab a paperclip is missing so maybe im missing something am using ubuntu

2013/04/09
14:08

globula_neagra

Please donate to support my work

Moderator

Firmware Guru

Forum Posts: 2416

Thanks Received: 263

Member Since:
2012/01/05

Birmingham

Offline

My tablet:
Archos 101 XS

you need to recompile the tools and use it on its own.

THE FLASH/UNBRICK PROJECT

2013/04/09
14:25

me83

Member

Forum Posts: 13

Thanks Received: 1

Member Since:
2013/04/01

Offline

these are the usb ids ??

first is just connected, second is flash mode black screen done by holding vol up then reset then release vol

Bus 001 Device 031: ID 18d1:4e21 Google Inc. Nexus S

Bus 001 Device 032: ID 0ac8:8820 Z-Star Microelectronics Corp.

any help as still showing nothing found??

2013/04/09
14:46

globula_neagra

Please donate to support my work

Moderator

Firmware Guru

Forum Posts: 2416

Thanks Received: 263

Member Since:
2012/01/05

Birmingham

Offline

My tablet:
Archos 101 XS

as i said earlier, the tools that is provided in the first post is more intended for rk2918 chips, not on the new 3066 and 3188, for these new ones, you need to recompile

http://forum.xda-developers.com/showthread.php?t=1286305
As a starting point

The following users say thank you to globula_neagra for this useful post:

Bsoft2007

THE FLASH/UNBRICK PROJECT

FEATURED

Archos 62 Xenon: Say hello to 2013 specifications

Archos to launch « dumb » phones, Pipo P7 rebrand and more

Le smartphone ARCHOS 50 Diamond devrait être disponible à la vente au mois de mars

POPULAR CATEGORIES