In case you have a preproduction HERMES and you can not update the ROM (due to the fact that your bootloader is <1.04) here the very easy solution:
- format a SD card with FAT32
- extract the .NBH file from the rom image you like
- rename the .NBH to HERMIMG.NBH and copy it to your SD card
- put SD card in phone and start it in bootloader (hold OK button on left side and POWER button at same time and stick with stylus in RESET on bottom)
- confirm flashing on screen
- flashing might hang after some time but this is normal. Just wait. Complete flash takes about 30 minutes.
This also works for normal (non preproduction) devices but keep in mind that if the CID does not match the flashing might not work.
John
P.S. Same applies to other devices: BREEIMG.NBH, STARIMG.NBH, ...
Re: Solution for flashing HERMES preproduction devices found
Hi J.S.!
This is a very great finding!! How did you find that???
J.S. said:
This also works for normal (non preproduction) devices but keep in mind that if the CID does not match the flashing might not work.
Click to expand...
Click to collapse
Preproduction devices are superCID, so they should be able to flash any image using that method.
J.S. said:
P.S. Same applies to other devices: BREEIMG.NBH, STARIMG.NBH, ...
Click to expand...
Click to collapse
I guess BREEIMG is for HTC Breeze and STARIMG for HTC Startrk, right?
Holy Sweet Jiminy Cristmas, OK, now this is what mine is doing so far, (which is further than any thing else we have done)
Sitting at Checking..., and has been for around 10 minutes or so now
Will keep you updated, hey anyone able to get access to the holy grail of HTC support site?
Excellent news!
I just need to get my hands on a micro SD card and I'll give it a whirl!
Thanks again, buddy.
I'll let you all know how I get along.
Oz
So how long did your screen stay with the Checking..., as I am now on my 4th IMG to try, and all have taken over 10mins each while on the checking.
I need some slepp so this one i will let run while i sleep.
Any way of changing the CID, as mine is not preproduction.
darkoverlord said:
Any way of changing the CID, as mine is not preproduction.
Click to expand...
Click to collapse
No known method yet...
But you have a TyTN as I have seen in your other post, so you can flash the HERMIMG.nbh from HTC TyTN rom which will match your CID.
OK, but how can I know my CID, and which one to choose.
darkoverlord said:
OK, but how can I know my CID, and which one to choose.
Click to expand...
Click to collapse
The bootloader command "info 2" returns your CID, on a TyTN that is:
"HTCS" + "QTEK_001" + (4-byte checksum) + "HTCE"
You can also find it by running GetDeviceData.exe.
These are the ROMs an it's CID lock:
HTC: QTEK_001
Dopod: DOPOD001
JasJam: CDL__001
Cingular: CWS__001
O2: O2___102
great stuff, J.S. )
buzz
Hi Guys, At this point is it possible to get an .NBH file from a .RAW file and so flash back to my original shipped ROM?
wwaveydave: It is not possible, see my answer here:
http://forum.xda-developers.com/viewtopic.php?t=62730
The Hermes SPL searches for two files on SD card, one is HERMIMG.nbh as pointed out by J.S. on this topic, the other one is HERMDIAG.nbh.
Anyone knows about what is HERMDIAG? looking at the name seems some kind of DIAGnostic SD card... :?
I've been told by itsme that HTC StarTrek supports 2 ways of sd-card flashing:
1) with 'starimg.nbh' on a fat32 filesystem (same as in hermes, but using hermimg.nbh instead)
2) with a typhoonnbfdecode.pl generated sdcard
I've tried to generate a cooked rom for TyTN using typhoonnbfdecode.pl, but the .nb files extracted using nbh2dbh.pl and dbhdecode.pl are not valid, it seems that typhoonnbfdecode.pl expects the .nb files to be decoded as sd header image (using flag "-i" of typhoonnbfdecode.pl itself), but this tool is not useful to handle NBH files.
Also trying to make a NBF file with typhoonnbfdecode.pl out of .nb files extracted from original shiped NBH file gives an image validation error on each module specified in ' -r '.
Any help will be much appreciated!
hermdiag.nbh is a diagnostic/setup/lock/unlock SPL image.
buzz
If you compare the NBF file you've created to the NHB file pulled from one of the shipped ROMs will that help? I'd like to help, but need time to get up to speed on the whole ROM cooking process.
The problem is that I cannot even create the NBF... I get a validation error in every module, like if all the .nb files where invalid:
- no sm signature at 0 in Splash
- no 7 * jump +5 at start of gsm
- no ECEC at 0x40 in OS image
- no IPL at 4 in IPL image
- no ECEC at 0x0040 in SPL image
any ideas?
Right guys,
I've tried the method outlined in the originating post but it doesn't seem to work for me on my Preproduction Hermes. This is what happens:
1) Format 1GB Micro SD card to FAT32 via Windows (right click and select Format).
2) Extract .nbh file from ROM image.
3) Rename .nbh file to HERMIMG.nbh and copy to SD card.
4) Put SD card in phone and start in bootloader (as specified)
5) The screen goes white for a second and then an error message pops briefly (about a millisecond! I had to do about 20 times before I could be sure about what it said). The error message was "No Image file!"
6) Reverts back to bootloader.
Have tried this with all of the English ROMs listed on the Wiki and get the same result each time. I'm not connected to the PC during all of this. The only file that exists on the SD card is the HERMIMG.NBH (exactly that naming format).
Any help would be much appreciated.
Oz
ok, follow these instructions:
1) Use the "Explore" option on activesync
2) Erase all the files in storage card
3) Copy HERMIMG.nbh
4) Enter into bootloader
No need to remove the microSD card from your device at all... this is how it worked for me.
No such luck for me I'm afraid. I still get the same error. I don't understand it, what is this Image file it's looking for? Is there anyway of determining it?
@pof - is your Hermes preproduction?
I've tried a smaller SD card of 128MB and renamed the file to HERMIMG.NBH but still no luck. I don't know if it's my phone or if preproduction phones except the filename to be different.
Is a .nbh file an image file?
mine is not preproduction, it's an HTC TyTN (HERM200). My microSD card is 1Gb.
I renamed the .nbh file extracted from the rom upgrade exe to "HERMIMG.nbh", I don't know if it's case sensitive or not. It worked for me this way...
And yes, nbh files are rom upgrade files which contain all the rom parts (splash image, radio, ipl, spl, etc...) and are signed by HTC.
Related
NOTE: I've already posted this into the Development & Hacking forum, but got no reply yet. As it is an Hermes specific topic it is probably better to place it here, sorry for reposting if you've already read this.
The available original shipped ROMs for the HTC Hermes have .nbh files with the RUU, instead of the usual .nbf files found in other HTC rom updates.
By now, there are two shipped ROMs available, containing:
HERMIMG_Dopod_1.23.707.1_SHIP.nbh
hermimg_QtekNOR_1.18.255.3_Ship.nbh
So, it seems that the usual nk.nbf file is no longer used by the Hermes RUU
I cannot extract the various rom components (ExtROM, OS, IPL/SPL, SplashScreen, GSM radio, etc...) out of these files using the usual TyphoonNbfTool, however mamaich's prepare_imgfs finds the imgfs and dumps it apparently ok, but it cannot be read using viewimgfs or itsme's rdmsflsh.pl, so I guess the dumped file is invalid.
Anybody knows about this new format?
is it possible to convert it to nk.nbf so we can cook our own roms?
Would it be possible for example to extract the radio rom from Dopod and replace it on QtekNOR rom?
I think we will have to wait for the rom guru's to advise on this. I hope this would be possible so we can get the best rom possible.
I've tried to decode.nbh files with alpinenbfdecode.pl, himalayanbfdecode.pl and typhoonnbfdecode.pl. None of them works, so this must be a completely new format.
Opening nbh files in hex heditor shows interesting strings, but I don't know how to procede to identify each part and decompress or decrypt it...
Is it possible to decrypt Extended_ROM of HTC TyTN? I'v found a great extRom, but I can't upgrade my ExtRom because I have only borrowed tytn from my friend and Iam looking for one special aplicattion which is included in this. Any solutions ? Thanks
Jerry, you can unlock & unhide the ExtRom just with a registry tweak, look here:
http://wiki.xda-developers.com/index.php?pagename=Hermes_Unhide_Extrom
Downloading a ROM now to experiment
If I crack it, you guys better donate something to my get-theblasphemer-a-hermes-too-fund (yet to set up that fund though )
Mate if you crack it I'll be donating to your fund!
Hmmm, a very weird file format indeed :S
All files start with "R000FF\r", next 16 bytes of what appears to be random data.
After that it consists of several blocks.
Each block starts with a header:
4-bytes block-length
4-bytes footer-length
1-byte always 1
After that follows the actual data (block-length bytes) + a footer, which appears to be random data but which I suspect to be some kind of checksum
I'm uploading a full USB log of a complete ROM-flash here:
ftp://xda:[email protected]/Hermes/Technical/
Watch for the file Dopod2-FullRomUpgrade.txt.gz, when it is full uploaded it will be around 102Mb.
This is from this ROM file:
HER_DopodAsia_1237074_1060010_WWE_SHIP.exe
______
EDIT: Upload finished.
I created a wiki page with all the info we have about NBH format:
http://wiki.xda-developers.com/index.php?pagename=Hermes_NBH
i added my scripts to extract nbh files to the wiki page
willem
itsme said:
i added my scripts to extract nbh files to the wiki page
Click to expand...
Click to collapse
Cool :shock:
you always come with splendid work, so pleasant to see... thanks a lot!
Hmmm... just took a peek at the USB-dump of a ROM upgrade.
It appears that the whole file is just sent to the device.
The flashing utility doesn't even look at the CID or even the device type, it was happy to start flashing my Universal (however it didn't get very far, as the bootloader doesn't understand all commands ).
This makes it incredibly difficult to make a RomUpgradeUtility that doesn't look at the CID, or to figure out how the signatures in the .nbh files are generated
willem,
I've been trying to extract the roms using your commands, everything runs fine until I have to run the gsmsplit batch file, as in this line you call "bcl" and I don't know what bcl is:
Code:
for %%i in (_bcl*) do bcl d %%i _x%%i.nb
I am runing it on WinXP SP2 + cywin 1.5.21-1, this is the error I get:
Code:
[email protected] /cygdrive/c/nbh/files
$ gsmsplit.bat GSM.nb gsm.nbx
'bcl' is not recognized as an internal or external command,
operable program or batch file.
'bcl' is not recognized as an internal or external command,
operable program or batch file.
[...]
'bcl' is not recognized as an internal or external command,
operable program or batch file.
'bcl' is not recognized as an internal or external command,
operable program or batch file.
_x_bcl*.nb
The system cannot find the file specified.
0 file(s) copied.
Could Not Find c:\nbh\files\cing\_x_bcl*
[email protected] /cygdrive/c/nbh/files
$ dir
GSM.nb MainSplash.nb SPL.nb nksigned.dbh signatures.txt
IPL.nb OS.nb SubSplash.nb nksigned.nbh unknown_601.nb
Is the line correct? if yes, what is bcl and where can I get it?
Thanks!
Ok, almost everything went fine... i don't know yet about the bcl command i asked before, and i cannot extract the contents of imgfs from OS.nb using rdmsflsh:
Code:
$ rdmsflsh.pl -d files OS.nb > rd.txt
could not find imgfs header
I've also tried prepare_imgfs.exe with OS.nb, it found IMGFS there and dumped it to imgfs_raw_data.bin, but then I cannot use viewimgfs.exe with this file, it complains about "unknown header type", and the file seems corrupt as it is only 6Mb...
BTW... SubSplash.nb seems to be the ExtROM, not the SubSplash.
I get a "Check cert error!" from the bootloader when I try to flash a modified NBH file (thanks TheBlasphemer for your help).
From spv-developers:
"getting a developer CID (SuperCID) will allow you to flash your system with a ROM that is not digitally signed (i.e. a ROM that you have modified). If you do not modify it, you'll not be able to install a modified ROM on the device."
Click to expand...
Click to collapse
Is it possible that we can flash NBH files without signing in the Hermes if we get a SuperCID?
I tried using SPV-Services to change the Hermes CID, but when I execute the CID tool (Alpha) I get the error: INVALID Storage Manager Handle (SAFE)
The NBH format is also used by HTC STARTrek, more info here.
bcl is from bcl.sourceforge.net, and in the latest release called 'bfc'.
willem
pof said:
Ok, almost everything went fine... i don't know yet about the bcl command i asked before ...
Click to expand...
Click to collapse
Hey pof, you need to rename the bfc.exe to bcl.exe ...! then you dont get the error but alot other zero lenght values ...
so did anyone manage to get the extraction of the OS.nb done correctly?
Hi! Do you think is possible to manage that NBH file and change htc logo splashscreen in some ways?
I'd like to create a ROM file upgrade with different spalshcreen for my TYTN.
Hi,
have got m3100 which is stuck on the winodws mobile screen...so tried everything frm the wiki page and now want to try flash it thru the sd card.
I have got 512mb MicroSD ...
can someone pls explain me abt the root folder...i just copied the HERMIMG.nbh onto the sdcard and the screen wont go beyond "checking".
i dont knw abt the Root folder...how shall i create it? if anybody can help me pls
thx in advance!
XtremeGG said:
can someone pls explain me abt the root folder...i just copied the HERMIMG.nbh onto the sdcard and the screen wont go beyond "checking".
Click to expand...
Click to collapse
The root folder means the folder which "holds" all other folders: If your microSD card is on "F:", the root folder of your microSD card is "F:\".
It is on the instructions to make sure you don't copy the NBH file in "F:\My Documents\".
The card has to be formatted in fat32 and empty: should only contain HERMIMG.nbh in the root folder
The NBH image must match the CID on your device: You have a M3100 and there's no shipped rom with "ORANG001" CID, most probably your problem is this.
Hi pof...thanks for ya explaination.
if there is no shipped rom..does that mean..the HERMIMG.nbh file i got frm wiki...it wont work?
thanks agn
P.S. yes...i downloaded the Orange one frm wiki...if that doesnt come with ROM...can i flash it with the Radio ROM u supplied for the unlock? rename it HERMIMG.nbh
M3100 from Orange UK has CID: ORANG001
The rom on the wiki is from Orange Romania and has CID: ORANG008
You need to use a NBH file with the same CID on your device.
You can make your device SuperCID to avoid this restriction:
http://wiki.xda-developers.com/index.php?pagename=Hermes_SimUnlock
ohhhh...k..can i flash that patch thru the SD card as well? the radio patch..
i really appreciate ur help pof
thanks!
XtremeGG said:
ohhhh...k..can i flash that patch thru the SD card as well? the radio patch..
Click to expand...
Click to collapse
No, only through USB.
ok..doing that now...on my pc...its syin "Cheking information on your device...please wait..."
will it flash the patch radio ...even tho my m3100 wasnt startin well before? (was gettin stuck on windows screen)
once its done..i will post the result
POF....thank you very much m8...absolutely fantastic..i flashed the Radio ROM Patch..and the phone back alive agn...unlocked it as well
brilliant ..brilliant...thanks agn man!
XtremeGG
cool! glad it's back to live
i just brick my NIKI, it hung at the WM61 green screen, so far I can enter the rainbow screen, but I can't upgrade the device by Custom_RUU tools.
I get to know flash elf by SD was rename NBH file to ELF0IMG.nbh, is there anybody know how to rename the nbh file for NIKI? what is the file name for NIKI?
Thanks in advance!!!
xttt2005 said:
i just brick my NIKI, it hung at the WM61 green screen, so far I can enter the rainbow screen, but I can't upgrade the device by Custom_RUU tools.
I get to know flash elf by SD was rename NBH file to ELF0IMG.nbh, is there anybody know how to rename the nbh file for NIKI? what is the file name for NIKI?
Thanks in advance!!!
Click to expand...
Click to collapse
why cant you upgrade from the bootloader (rainbow). did you security unlock or use hardspl? have you tried a hard reset?
if you are not unlocked/hardspl and hardreset doesnt work then you must flash an origional carrier ROM meant for your device.
You jast need to rename your .nbh file to nikeimg.nbh, and then push the camera button while turning on device. Then follow the onscreen instructions.
if i do that, i see a white screen with "loading" on it. after a 30 minutes still the same?
What is the problem?
xttt2005 said:
i just brick my NIKI, it hung at the WM61 green screen, so far I can enter the rainbow screen, but I can't upgrade the device by Custom_RUU tools.
I get to know flash elf by SD was rename NBH file to ELF0IMG.nbh, is there anybody know how to rename the nbh file for NIKI? what is the file name for NIKI?
Thanks in advance!!!
Click to expand...
Click to collapse
you must rename in "NIKEIMG" ....see that
http://forum.xda-developers.com/showthread.php?t=437392
kenshin-J said:
if i do that, i see a white screen with "loading" on it. after a 30 minutes still the same?
What is the problem?
Click to expand...
Click to collapse
when i flash from mcrosd,the update,start immediately after loading....i think that in your case,something is wrong....are you sure that you rename in caps letters?...is "NIKEIMG.nbh" and not "nikeimg.nbh",for example...
But what is meant with "two files"? One file must be the NBH Image but what's the other file? CustomRUU.exe?
animelover said:
But what is meant with "two files"? One file must be the NBH Image but what's the other file? CustomRUU.exe?
Click to expand...
Click to collapse
yes it is!...NIKEIMG.nbh & CustomRUU.exe....exactly!
then NIKI can't flash by SD in the end?
i got a same probrom,it hung at "loading"
card from is fat32
name is nikeimg.nbh
0pod0 said:
then NIKI can't flash by SD in the end?
i got a same probrom,it hung at "loading"
card from is fat32
name is nikeimg.nbh
Click to expand...
Click to collapse
The filename must be NIKEIMG.nbh! Try it with big letters instead of normal letters!
i've already use NIKEIMG.nbh but it still hung at "loading"
and i tried to flash hspl by SD,
i run sspl-1.16-niki.exe,it still hung at 'loading"as well.
is the sspl-1.16-niki.exe cant flash anyrom by SD,or only cant work by USB?
if you havent hardspl ... it only work via USB!!!
SD-Card works too ... if you dont need load Software SPLs first.
you mean that i have to unlock/hspl first,than it will done?
but i cant unlock/hspl with usb
no USB = no chance!
Hi apologies for the question in advance!!!
Im trying to flash a radio onto my O2 stock rom .. i ave successfully put hspl on device but when i try to flash the radio nothig happens????
I have renamed radio RUU_Signed.nbh and when i run custom ruu i get a prompt from computer to allow programme which i do and then nothing happens
THIS IS DRIVING ME MAD I HAVE SEARCHED THE FORUMS WATCHED THE YOU TUBE DEMO AND CANT THINK OF ANYTHING IM DOING THAT IS WRONG ????????????????????????????????????????????
Have you tried to copy the radio file (rename it to LEOIMG) to your SD card, reboot while holding volume down, and flash from there?
Will give it a go now thanks for the help much appreciated
NO LUCK STILL WONT WORK IM SURE IM JUST DOING SOMETHING WRONG BUT I DONT KNOW WHAT...
ABOUT TO THROW PHONE
you did unzip teh radio file and extract the .nbh, right? you didnt just rename the zip(or rar, or 7z, whatever) to .nbh did you?
(by teh way, for usb flashing, no need to change teh filenmame at all, just extract the .nbh, put in folder with customruu.exe, and run customruu. And of course this wont work if your spl ends .0000)
So you copied the radio file (named LEOIMG) to the root of your SD card?
You get past the 3 colored bootloader?
What msg do you get, whats happening?
Edit: What samsamuel said, you have to unzip the file first ofc
Hi yes to above i did extract, tried custumruu no joy, tried renaming LEOIMG AND SAVING TO SD CARD ROOT hold power and down volume , it goes into bootloader and just sits there doing nothing in the red band it says SPL-2.08 HSPL, and in the white band it says SERIAL?????????????????
does your pc run avast or mcafee? they can disable customruu. you can tell because when you run it nothing at all happens.
as for sd card failing, have you formatted it since you got it? cos the o2 stock one comes formatted to FAT but need to be FAT32 for flashing.
also, many 16gb and some 8gb cards can be temperemental
Thank you everyone
problem was with the computer not the process tried it on the desktop instead of lap top and it worked first time
Hey guys ,
i am a novice so please help me,
i downloaded chucky rom for my htc hd2 and also put hspl
it worked properly but there is is some problem with some software and now i need to get it repaired through warranty so i need to put spl 3.03 or spl 2.08 and remove HSPL,please tell me how i can do that,
1.Remove HSPL
2.Put Spl 3.03
Also i do not use an sd card so can it be done without that(sd card)
please explain step by step since i am a beginner
thanks a lot
nishankyadav said:
Hey guys ,
i am a novice so please help me,
i downloaded chucky rom for my htc hd2 and also put hspl
it worked properly but there is is some problem with some software and now i need to get it repaired through warranty so i need to put spl 3.03 or spl 2.08 and remove HSPL,please tell me how i can do that,
1.Remove HSPL
2.Put Spl 3.03
Also i do not use an sd card so can it be done without that(sd card)
please explain step by step since i am a beginner
thanks a lot
Click to expand...
Click to collapse
You need SD card and get and official ROM, rename ruu_signed.nbh to LEOIMG and copy to SD card turn device off , hold volume down and power button together and commence update
Hi thanks for your reply,
I Have Downloaded The Following OFFICIAL ROM:
RUU_Leo_S_hTC_Asia_India_3.14.720.3_Radio_15.42.50.11U_2.15.50.14_LEO_S_Ship.exe
But how do i find The RUU_Signed.nbh and should i rename it to LEOIMG.NBH or leoimg.nbh (will the uppercase or lower case make a difference)
nishankyadav said:
Hi thanks for your reply,
I Have Downloaded The Following OFFICIAL ROM:
RUU_Leo_S_hTC_Asia_India_3.14.720.3_Radio_15.42.50.11U_2.15.50.14_LEO_S_Ship.exe
But how do i find The RUU_Signed.nbh and should i rename it to LEOIMG.NBH or leoimg.nbh (will the uppercase or lower case make a difference)
Click to expand...
Click to collapse
extract the offiical rom and look inside the folder, upper or lower cases doesnt matter
nishankyadav said:
Hi thanks for your reply,
I Have Downloaded The Following OFFICIAL ROM:
RUU_Leo_S_hTC_Asia_India_3.14.720.3_Radio_15.42.50.11U_2.15.50.14_LEO_S_Ship.exe
But how do i find The RUU_Signed.nbh and should i rename it to LEOIMG.NBH or leoimg.nbh (will the uppercase or lower case make a difference)
Click to expand...
Click to collapse
you may extract the file by 7-zip, then you will find the file.