Flash Boot Image on WM2003SE - MDA, XDA, 1010 General

Dear all,
I've already did to download boot image from WM2003SE:
(from itsutils)
- pmemdump.exe 0x81900000 151672 3.bmp
- pmemdump.exe 0x81ec0000 153672 4.bmp
But none of them above can be read, although I've opened as raw image on Adobe Photoshop CS. It just blank.
When I tried to upload the new image:
pnewbmp -3 yournewimage.bmp
After I did that command, then my ROM was broken, my PC Communication was broken.
But thanks before, because I could flash with SD Flash successfully to be back to normal with your tutorial.
But, I still want change the boot image, since the image = "For Microsoft Internal Use Only"
Please help me.
Thanks a lot.

In the WM2003SE ROM the Bootimage location and type has changed.
Until now it is not possible to change it.
Stefan

That's okay
I see..
That's okay.
But I thought that Microsoft Mobile's programmer might know about it.
:lol: :lol: :lol: :lol: :lol:
I wish someday we would know the changed address..
LumpiStefan said:
In the WM2003SE ROM the Bootimage location and type has changed.
Until now it is not possible to change it.
Stefan
Click to expand...
Click to collapse

Related

The "KITCHEN" startup screen

Hi guys,
great work on the Kitchen.
Is there any way we can change the boot screen to perhaps say "Custom rom made in the kitchen by XXXXXx"
or is there any easy way to change the startup screen?
cheers
are u running ur own? if so, just place ur new _bootimage.bmp file in place of xda-developers one
Hi Kalex
thanks for your reply.
could you kindly tell me the path of this file so i my change it.
i cant seem to locate it on my xda.
I made the rom in Jeffs kitchen.
Kind regards.
Ali
its not on the xda. its in the rom when it gets created and it gets burned into memory location for it. problem is since u are running it off Jeff's kitchen, u going to have to ask him to insert the file (doubt he'll do it).
alex
i understand, thanks for your help
hello all,
I'm trying to make my own rom with the mkrom program and In didn´t find the Bmp you said.
how is it call??
and in what directory is it?? (files1,files2,cfg,...)
thanks
It's called 'bootimage.bmp' and it's in the cfg directory. Make sure it's a 240x320 bmp file saved with the properties 'Windows'. '16 bits', 'R5 G6 B5' and 'flip row order' (the above is using Photoshop).
If someone finds a Unix filter where I can specify these things, I guess I could make an upload button in the kitchen, but other things are higher on my list...
thanks XDA developer Peter Poelman for your fast answer,
I have another doubt: Do you know why I can´t open the bootimage.bmp file that comes with the ROM?
thanks again
clo said:
Do you know why I can´t open the bootimage.bmp file that comes with the ROM?
Click to expand...
Click to collapse
"can't open" with what?
which "the ROM"?
sorry
the ROM is 3.16.16 in Spanish
and Icant open the bmp with photoshop,paint,....
It maybe that I use a different ROM??
thanks
Since this is not a mkrom package we distributed, I suggest Itsme would know more of how his software writes the boot image. It may also be possible that you still need to find the correct address of this image in ROM (it differs...) before the software writes it correctly.
well as you say that this ROM coud not work , I tried with a 3.19.01 GER
and it didn´t work neither.
I obtain the bootimage.bmp but I can´t open it with any design program.
The bootimage is about 150kb and I suppose that this file couldn´t have this size. I suppose that this file is incremented with something like "\0" or something like this.
any ideas??
thanks for your patience "XDA developer Peter Poelman"
I read somewhere else that the 4.00.11 ROM Image in Jeffs Kitchen does have the splash screen changed from Test Only Not For Sale to something else. Is this True. My version I am running dtill has the old Splash Image-Test... Were there any other changes to this ROM since then, like newer versions of programs that can be added in the kitchen when cooking your own ROM or anything else?
Thanks,
erickbryce said:
I read somewhere else that the 4.00.11 ROM Image in Jeffs Kitchen does have the splash screen changed from Test Only Not For Sale to something else. Is this True. My version I am running dtill has the old Splash Image-Test... Were there any other changes to this ROM since then, like newer versions of programs that can be added in the kitchen when cooking your own ROM or anything else?
Thanks,
Click to expand...
Click to collapse
Yes, it's true , if you check : "in Add software and modify ROM , at "Today screen and appearance" , the box : "XDA-developers.com ROMkitchen boot image, you have that splash screen, instead of the annoying "test only...."
For ROM, choose : 4.00.11 ENG WM 2003, I did it, and I always have the "G" for GPRS :wink:

How to open new ROMs (like ITA) with ER2003Edit

Hi,
just a tip for opening the latest ROM files with ER2003Edit:
ER2003Edit has a file type selector in the file open box which is by default set to autodetect.
in autodetect mode ER2003Edit tries all encryption passwords it knows for any type of ROM (NK,Radio,ms_)
when using autodetect mode and your ROM does not get detected and you enter the correct password manually, you will receive an "Error accessing image files" message
To prevent this message choose the correct type of ROM (ms_.nbf) from the file type selector of the file open dialog and enter the password
ER2003Edit can open and edit all types of ROM files now in order to let you change the language and device type settings (to prevent country code error)
Tip: Opening ROM files is always faster when you do not use autodetect mode!
BTW here are the passwords for the ITA-Rom:
ms_.nbf: 0x20040305
nk.nbf: 0x20040304
radio_.nbf 0x20040306
A new version of ER2003Edit will have these passwords built in, but I currently do have no time for a new release just to include the passwords.
Enjoy!
fantastic
thank you very much
Works
Thanks
Softworks, are the the old passwords hardcoded into the app?
I reckon on your next update, maybe you could just make the app read an XML (or text, whatever) file with the passwords. So you can easily just add passwords in the future onto the text without having to recompile a newer version.
Also, since when talking about XDAII files, we're only talking about 3 filenames which never change. Maybe you could make a load process to simply check the filename which has been opened and use the corresponding "file process" to open it. Sort of like instead of autodetect when you open files. Have a simple check that checks wether one clicked either of the 3 files, then have a script that mimmicks selecting manually the filetype instead of "autodetect." That should eliminate the "nuances" of opening files (especially helpful for us n00bs hehe)
Cheers,
Carlo
Sorry, Iwould like to ask how / where to find the password of the images?
Thanks!
Hi All,
I have images which can't open by ER2003edit V1.2.20, it say the password is incorrect. Anyone can help or teach?
The rom image is from O2, the rom version is 1.60 or higher.
Thanks!
Can someone help me out too, it won n't seem to work with me.
d.zee said:
Can someone help me out too, it won n't seem to work with me.
Click to expand...
Click to collapse
Cant find them either.... Please help
See here:
http://wiki.xda-developers.com/wiki/HimalayaRomFlashing
Here is a patched version of ER2003Edit.exe that has the new 3 passwords. Auto detection now works. :lol:
Just unzip then copy it over installed ER2003Edit.exe usually found in
C:\Program Files\softworkz\ER2003Edit\ER2003Edit.exe
RE
Hi!
Thanks. It works.
:lol:
PDA: O2 XDA II
ROM Version: 2.06.00WWE
Radio Version: 1.18.00
ExtROM Version: 1.12.924WWE (from IIs)
OS: Windows Mobile 2003 Second Edition
OS Version: 4.21.1088 (Build 14132)
Any reason I am getting shcksum errors?
I chenaged the content of ms_.nbf save it, and tried to flash it, but I gor error 122 - checksum error?
Any known reason for that?
Looks like I am out of my depth but its worth a try
I have a blueangle and have worked out that there are more tools on in Himalaya than for us.
I have further worked out that the upgrade works in the same way.
So I would think that this tool does, Well I am either wrong or just dumb.
Is my undersatnding correct that this application would only have the paswords for the at that time Known rom realeases.
Is my understanding that even with a password out of a xda3nbtool this toll will not work if you add it in the dialog.
Thus I seem to find that if I fill in the device name, op and lang as well as pasword I fail, same is true if leave them blank.
Please help me out or point me in the correct direction
Thanks
Hi,
does anyone know a program or a howto for editing Asus MyPal ROM Updates? In fact I only have to add a single file.
Thanks for any response
Martin

Questions to rom gurus, who can help?

Hello,
I have some questions, if someone could help me with any of these I would really appreciate it, I am quite newbie, but I learn fast... now the questions:
1. is it possible to full dump the Hermes ROM to microSD using 'd2s' in bootloader? if yes, would it be possible to use 's2d' to restore it?
2. anybody can provide more information on the Hermes ROM layout, virtual and physical memory maps, offsets, sizes, etc..? If yes, how do you find this?
3. anybody managed to run pmemdump or psdread on Hermes?
4. The existing ROM upgrades for Hermes do not have .nbf files, they use a "new(?)" format .nbh, the file RUU.dll has functions GetNBHInfo() and UpdateNBH(), anyone with windows debugging skills could help to decode this format? Inside this file you should find:
- Extended ROM
- OS
- IPL (part of bootloader)
- SPL (part of bootloader)
- Splash screen
- HTC Logo (normally uses the same image as the splash)
- GSM radio code
5. Can someone make something like xda2nbftool to work with this .nbh format?
6. I think the security password should be possible to extract from RUU.dll too, as it calls SecurityPass() function, but I don't know how.
7. Is there an up to date list of bootloader commands? I found those, but I think some info is wrong or missing:
http://wiki.xda-developers.com/index.php?pagename=HimalayaBootloaderCommands
http://www.xs4all.nl/~itsme/projects/xda/bl-ii-usage.html
8. anyone could provide photos of a disassembled device? chipset references, etc...?
9. anyone interested on linux port for Hermes??
BIG thanks
Now I can answer myself some questions... who can answer the rest??
pof said:
1. is it possible to full dump the Hermes ROM to microSD using 'd2s' in bootloader? if yes, would it be possible to use 's2d' to restore it?
Click to expand...
Click to collapse
Nope that I have found.
pof said:
6. I think the security password should be possible to extract from RUU.dll too, as it calls SecurityPass() function, but I don't know how.
Click to expand...
Click to collapse
The password is dinamically generated, changes everytime, here's how to access the bootloader with the right password:
http://wiki.xda-developers.com/index.php?pagename=Hermes_BootLoaderPassword
Also wrote a post in the forum about this, and made a cool pdf explaining the process:
http://forum.xda-developers.com/viewtopic.php?p=346002
BTW, the password seems to be not useful for anything
pof said:
7. Is there an up to date list of bootloader commands?
Click to expand...
Click to collapse
Yes, I've written it on the wiki, but some info is still missing:
http://wiki.xda-developers.com/index.php?pagename=Hermes_BootLoader

reflashing original rom

ok right now i'm running the love rom on my g4 wizard. how do i reflash my original cingular rom? i know, it sounds like a nub question but here is the problem. it will flash then hang at 80% and the progress bar will turn red. it will then pick up again and continue to 95% then turn red, fail and say error 326 invalid command. i downloaded the updater directly from htc.
any ideas guys?
Yeah it doesnt work....Your now stuck with the Wizard Love Rom or you can upgrade to another rom but you cant go back to the original Cingular Rom.
internetadam4657 said:
ok right now i'm running the love rom on my g4 wizard. how do i reflash my original cingular rom? i know, it sounds like a nub question but here is the problem. it will flash then hang at 80% and the progress bar will turn red. it will then pick up again and continue to 95% then turn red, fail and say error 326 invalid command. i downloaded the updater directly from htc.
any ideas guys?
Click to expand...
Click to collapse
internetadam4657 said:
ok right now i'm running the love rom on my g4 wizard. how do i reflash my original cingular rom? i know, it sounds like a nub question but here is the problem. it will flash then hang at 80% and the progress bar will turn red. it will then pick up again and continue to 95% then turn red, fail and say error 326 invalid command. i downloaded the updater directly from htc.
any ideas guys?
Click to expand...
Click to collapse
That ROM is for a G3 Wizard, Check your PM's
ok i reflashed with your method and i'm back to my cingular rom. thanks a lot!
(big reason to go back was it was the only rom that my school's wifi app would work with, plus the love rom in combo with orwells wm6 wasn't cool. that splash was ugly IMO)
internetadam4657 said:
ok i reflashed with your method and i'm back to my cingular rom. thanks a lot!
(big reason to go back was it was the only rom that my school's wifi app would work with, plus the love rom in combo with orwells wm6 wasn't cool. that splash was ugly IMO)
Click to expand...
Click to collapse
If you were talkin' to me...glad I could help...one question though...
did your ext Rom install on its own?
no, i still had a blank ext rom as i had to setup all my internet settings, etc again. how can i fix that one?
internetadam4657 said:
no, i still had a blank ext rom as i had to setup all my internet settings, etc again. how can i fix that one?
Click to expand...
Click to collapse
All you have to do is download and install the Ext Rom cabs manually. This may still be available on the ftp. If not PM me.
It worked for me
Thanks a lot ercave1, the ROM flashed flawlessly, however the EXT ROM didn´t came up by itself. The features I´m missing are as follows:
1.- USB switch to select activesync mode to serial or RNDIS is missing, regardless this USB sync to PC (Activesync 4.5) is alive and working well.
2.- ClearVue pdf is missing, not a big loss and I really don´t care since there´s another alternatives to read and diisplay pdf documents.
3.- GetGood and in general all connection settings! I don´t give a s**t!!
4.- MIDlet Manager, big loss... I´m going to keep trying to download Risidoro_Intent_MIDlet_ Manager_V11 whenever the ftp be up and running again. So no worries.
5.- Voice Speed Dialing Settings icon in both the Program ans Setting screens are missing, however the software is running when I press the known VSD button.
6.- Cingular carrierlogo! I don´t care I have my own logo.
And I guess that´s it !
Regardless the comments above, I´d like to learn how to "extract" the correspondent EXT ROM cab files, if you guys have and advice on it would be great.
Thanks again ercave1 for the big help
internetadam4657 said:
no, i still had a blank ext rom as i had to setup all my internet settings, etc again. how can i fix that one?
Click to expand...
Click to collapse
luiggi said:
Thanks a lot ercave1, the ROM flashed flawlessly, however the EXT ROM didn´t came up by itself. The features I´m missing are as follows:
1.- USB switch to select activesync mode to serial or RNDIS is missing, regardless this USB sync to PC (Activesync 4.5) is alive and working well.
2.- ClearVue pdf is missing, not a big loss and I really don´t care since there´s another alternatives to read and diisplay pdf documents.
3.- GetGood and in general all connection settings! I don´t give a s**t!!
4.- MIDlet Manager, big loss... I´m going to keep trying to download Risidoro_Intent_MIDlet_ Manager_V11 whenever the ftp be up and running again. So no worries.
5.- Voice Speed Dialing Settings icon in both the Program ans Setting screens are missing, however the software is running when I press the known VSD button.
6.- Cingular carrierlogo! I don´t care I have my own logo.
And I guess that´s it !
Regardless the comments above, I´d like to learn how to "extract" the correspondent EXT ROM cab files, if you guys have and advice on it would be great.
Thanks again ercave1 for the big help
Click to expand...
Click to collapse
Yes, this is because the Ext Rom was wiped out by the G3 Rom having been flashed on your G4 devices. I don't remember reading about a fix for this, but you may want to search through the forum. The only solution I'm aware of is to install the Ext Rom manually.
I'm glad you guys got the device running again.
Regards,
ercave1
luiggi said:
Regardless the comments above, I´d like to learn how to "extract" the correspondent EXT ROM cab files, if you guys have and advice on it would be great.
Click to expand...
Click to collapse
What do you mean with 'extract'?
1-From the RUU exe file?
2-From nk.nba?
3-Phone disk dump?
4-WinCE disk reading?
Reflashing ExtROM CID Locked
Who knows Russian go to http://4pda.ru/forum/index.php?showtopic=32996 & read my post
And the one who does not know it?
thanks to: Murchelago
literal from the Russian to English
it is the first step. if someone can polish it (I do not speak English good).....
_________________________________________________________________________________________
Already many know that mun built Shell Of tool, which was capable of pouring axis into Wizard G4 with [lochennym] [Sidom], but to the enormous regret it does not know how to pour with [ekstrom].
Recently it decided to be played a little with the program of nb2nbf and to verify, is it possible by nevertheless any means to renew also Extended Of rom to CID-Locked apparatuses. And which there was my happiness, when I revealed after [pereproshivki] that he renewed.
It decided by the same method to try to flood Splash Of screen and HTC Of logo - everything proved to be very simply.
In view of the small quantity of information on the forum on [devaysu] Of wizard G4, it decided to build brief instruction on its [pereproshivke].
1. We stitch through apparatus by pure piercing - Wizard_Love_2.26.10.2_WWE_Novii+CF2.
http://rapidshare.com/files/8651097/Wizard...E_Novii_CF2.rar
2. By the program of typho5 we unpack nbf the file of piercing, which we desire to pour into the beast.
First we fill up into the folder with the program of nbf, and then start with the parameter of typho5.exe - x nk.nbf. After procedure we obtain several files, in number of which is contained OS itself, Extended Of rom, and also as a rule Splash Of screen and HTC Of logo.
([ZY]. For convenience in the use of program made [batnik]. Simply you will place nbf into the folder and will neglect typho.bat)
3. Now we gather our nbf file, each at will can include any desired components in it, naturally, except axis itself.
4. We go in very [progu] of nb2nbf and we make the following tuning:
- We establish Model ID: WIZARD
Language: it is empty
OEM: it is empty
Operator of version: it is empty
CID: it is empty ([ochen]_[vazhno]); remove the numbers, which are contained inside the field
- We establish [galochku] opposite “File of # 1”, we click on the button of survey (button with three points), we find the file Of extended Of rom' and (in the folder of typho5, the exemplary name of 9b000000-Extension.nb)
- In the field “Of start Of address” we enter 9b00000
- In the field “Of image Of name” we enter Extension Of rom (not Extended Of rom, you be attentive!!!)
- In the point “Of file of # 2” we find Splash Of screen, in the field of address we enter 92000000, in the field “of image of name” we write Splash Of screen.
- In the point “Of file of # 3” we find HTC Of logo, in the field of address we write 9d000000, in the field “of image of name” we write WITH HTC Of logo.
- We press button “Translate”
- Extended ROM is ready, it is possible to stitch through.
Unnecessary for you files it is possible simply not to include, but to insert, for example, only one by [ekstrom].
5. We place the obtained file of nbf into the folder [proshivalshchikom] and start. Procedure as with the usual piercing, lasts in all the pair of minutes.
6. We pour the axis Of shell Of tool' ohm from mun' of a.
Finale - valuable piercing
Don´t know
mestrini said:
What do you mean with 'extract'?
1-From the RUU exe file?
2-From nk.nba?
3-Phone disk dump?
4-WinCE disk reading?
Click to expand...
Click to collapse
I really don´t know from where and how mestrini, that´s the reason why I quoted the word extract and included the word learn
luiggi said:
I really don´t know from where and how mestrini, that´s the reason why I quoted the word extract and included the word learn
Click to expand...
Click to collapse
I enumerated the options since each have its own reason
1- Use Winrar to open RUU.exe and use typhoonnbfdecode.pl to extract the 10MB file (0xA00000 bytes) of the extended rom from nk.nbf
2- oops, same as 1 (and its nk.nbf- not nk.nba). hehe, my mistake
3- use pdocread.exe to read BDTL1 - or TRUEFFS_DOC1 (use my Wizard Service Tool as it can be done with a few clicks )
4- Unhide extended_rom and use Active Sync to copy the files to PC (or, once again use my tool to do the same )
cheers
Sounds great to me!
mestrini said:
I enumerated the options since each have its own reason
1- Use Winrar to open RUU.exe and use typhoonnbfdecode.pl to extract the 10MB file (0xA00000 bytes) of the extended rom from nk.nbf
2- oops, same as 1 (and its nk.nbf- not nk.nba). hehe, my mistake
3- use pdocread.exe to read BDTL1 - or TRUEFFS_DOC1 (use my Wizard Service Tool as it can be done with a few clicks )
4- Unhide extended_rom and use Active Sync to copy the files to PC (or, once again use my tool to do the same )
cheers
Click to expand...
Click to collapse
Thanks a lot mestrini, I appreciate your input and I´ll give it a try right away!

ExtRom

Hi there,
i have a problem, my hermes did a hard reset (after playing with Sktools) ,and the bad thing is that i took all the cabs out of the extrom to free space and install other( prog not cab).
Now, after using V3a unlocker and the cab mountAllExtom, i see the ext rom
and can erase progs in it but the memory remains in use . i only have 0.84 M free .
can someone help me to recover all that precious space
Thank you
Thierry
Belgium
mth said:
Hi there,
i have a problem, my hermes did a hard reset (after playing with Sktools) ,and the bad thing is that i took all the cabs out of the extrom to free space and install other( prog not cab).
Now, after using V3a unlocker and the cab mountAllExtom, i see the ext rom
and can erase progs in it but the memory remains in use . i only have 0.84 M free .
can someone help me to recover all that precious space
Thank you
Thierry
Belgium
Click to expand...
Click to collapse
I'm not sure if this is the best way, but try to upgrade to lastest LVSW that includes Extended ROM, so after the upgrade, you can unlock in the same way you do in the past and use the 10Mb extra space.
Of course, if you are not planning to upgrade to WM6, don't follow me
REgards.
thank you jcespi2005
but i prefer to stay with a french and stabel rom. Are they any french patche for this rom.
Th
flash a NBH containing only an extrom using HardSPL, this will fix your issue.
Thanks Pof,
but i am a beginner.
Where can i find it or how can i do it ?
TH
wiki and forum, search for: nbhextract, nbhgen, hardspl and customRUU.
1) Flash HardSPL (latest version) on your phone
2) Extract ExtROM.nb from any shipped NBH (it doesn't matter which one) using nbhextract
3) Convert ExtROM.nb to NBH using nbhgen
4) Flash your newly created NBH file containing only ExtROM into your device using CustomRUU, make sure to start the upgrade in bootloader mode with activesync disabled.
super
muchas gracias Pof
I'll let you know if i succed
Thierry
Use the same guide here but change the technique to Ext.ROM only and don't select the OS.nb. In other words it's exactly the same steps exept for one.
filehttp://www.mrvanx.myzen.co.uk/hermes_guide/Downgrade/
ok sniper251
this means i only have to "click" on the extrom button and disregard the others ?
Yes and don't forget step #4 in Pof post assuming you have Hard Spl 1.40olipro.
Also you can check wether the .nb file is good or not before conversion using the file attached.
It worked fine to extarct the extrom.nb but which command do i need to execute the NBHgen ?
BTW i could not download the koch generator
Thanks for help
Thierry
i succeed in doing all the works and....it works
Thank you so much for ur help Guys
Th
mth said:
i succeed in doing all the works and....it works
Thank you so much for ur help Guys
Th
Click to expand...
Click to collapse
congratulations
Wellcome to the game.....

Categories

Resources