How to modify atom rom version? - iPAQ rw6828, XDA Atom Software Upgrading

anybody know?
I use winhex to open diskimage_ver.nb0,but i cant't find the Rom version strings that displayed in the device information program.
also to radio version.

you can search 2006 word string. however some devices won't update when this is changed because it's hardcoded into oem files.

Related

New version of ER2003Edit (1.2.20) available

Hi guys,
a new version of ER2003Edit is available from the wiki page:
http://wiki.xda-developers.com/wiki/ER2003Edit
New features and improvements:
- provides support for the new upgrade tool version (0.9.1.0) used by the latest T-Mobile and O2 updates
- supports editing of the header information (DeviceID, Operator and Language) in order to circumvent the country code error
- some other fixes and improvements
Best regards,
softworkz
Thnx dude! At last we got a program to modify the header. I guess this makes a lot of XDA owners very happy.
Great work!
Late...
Thanks Softworkz, great work again. It really looks like an even more powerful tool, but there seems to be a little bug (or I am doing something wrong):
After upgrading ER2003Edit to the new version, I cannot open the ms_.nbf anymore. When I try to open the file, ER2003Edit always crashes, although I left the file unbmodified.
Downgraded to the old version again and there it works, although I have to decode and encode the files by myself.
Any suggestions?
No problems opening the ms_.nbf here after doing the upgrade. Running Win XP sp1.
Try uninstalling the old one completely then install the new one...
Works great!
Late...
is it a misunderstanding between header-information and encryping ???
I think Er2003edit does not do the encryption/decryption so far.
Hey Softworkz...
this would be a great improvement as I guess all coming
extended roms will be encrypted.
Alex
Tried uninstalling and re-install but that didn't help. As far as I remember, Softworkz tool is not able to edit encrypted ms_.nbf.
But on my machine (Win XP pro 2002 SP1) the program always crashes when opening an non-encrypted ms_.nbf...
I will use the old one as a workaround, I don't need to change the header so this should be fine.
some programming tips:
It should not be very difficult to implement the xor decryption, just xor each DWORD in the file with 0x25863614 after loading it in memory, and before saving it back to the file.
also, if you verify the header checksum after loading the file, you should be able to detect that the file you are loading is actually a decrypted nbf file.
and another check to see if at offset 0x70040 there is a valid bootsector, with
the 'MSWIN4.1' and 'FAT16' strings should prevent it from crashing on invalid files.
Ouch, I just found out that the wrong version of xda2tools.dll was included with the setup. I have made available a new version (1.2.20) to fix this. (see wiki page)
Some details about ER2003Edit:
You do not need to uninstall old versions before installing newer ER2003Edit versions.
The new version (1.2.x) is able to perform XOR-De-/Encryption. When opening an extended ROM file ER2003Edit first checks if it is encrypted by looking for the presence of the dashes in the header.
If those are present in the right places ER2003Edit opens the file as usual. If the dashes are absent ER2003Edit tries to decrypt with all of the three XOR-Passwords (). If none of those passwords produces a file with a correct header a prompt is shown which lets you enter your own password.
The decrypted (or a copy of the unencrypted) ROM file is saved to the temp folder. When saving with ER2003Edit the file is encrypted again (in case the original file was encrypted) and is saved to the original location overwriting the initial file.
Itsme: The "dash-check" was used because the CRC-check in your code was always true (didn't look into it further).
The new version supports auto-detection of the ROM type in order to edit the header of the other 2 ROM files (NK and Radio_), too. The "error accessing image files" message is now suppressed for these files.
Nevertheless modifying the header of those files is useless and I didn't figure out how to access the file structure in those files (doesn't look like a FAT image).
Best regards,
softworks
Okay, that explains the problems I experienced. As soon as I am back home I will give it a try. If it works it will be a nice & powerful tool...
==> seems to work perfectly. So there are no more obstacles. Next stage will be an Upgrade to 1.66.xx... :shock:
ok, now it works.
currently, a non-matching crc value only results in a printed warning, maybe I/you could add an extra parameter to the file processing functions, which get the result of the crc-check.
or maybe even better, raise an exception, for the warnings.
ER2003 crashes opening new O2 extended ROM Files
Hi softworkz,
first off all thanks for your great work!
Using the new version of er2003 i cant open the ms_.nbf file of the latest O2 upgrade (1.60.52). It crashes every time. Opening and editing my self created ext. ROM based on T-Mobile Update 1.60.07 works great.
Whats wrong with my installation? If you wish i can send u my Win XP error report.
Escargotet
Sorry for posting, was 2 stupid to read forum first!
Sorry for posting, was 2 stupid to read forum first!
Hi all
Please help to clarify as there are some inconsistances...
(or I am wrong, but will run into this problem)
Er2003edit will try to modify the header information in the NK and Radio_mbf but this will not be successfull and I still will get the Country ID error, is that right ???
As far as bobopopo expierenced the new upgrade utility will not run parts of the upgrade but rather leave the machine useless.
So there is a missing link...
Alex
itsme said:
ok, now it works.
currently, a non-matching crc value only results in a printed warning, maybe I/you could add an extra parameter to the file processing functions, which get the result of the crc-check.
or maybe even better, raise an exception, for the warnings.
Click to expand...
Click to collapse
The CRC check does not work in your code. XORing with a wrong password results in the following message:
WARNING: this does not look like a nbf header, possible you provided the wrong password
But this gets printed as a result of the "dash-check". If the crc-check would fail, a different message would be printed:
WARNING: checksum is not ok, possibly you provided the wrong password
But this message never gets printed because (filecrc != crcsum) never occurs (for whatever reason).
Xant said:
Hi all
Er2003edit will try to modify the header information in the NK and Radio_mbf but this will not be successfull and I still will get the Country ID error, is that right ???
Click to expand...
Click to collapse
No. Er2003Edit can open NK and radio ROM files and edit the header. Er2003Edit automatically re-encrypts the newer ROM files (XOR-Method).
Er2003Edit decrypts older ROM files (DES-Encrpytion), lets you edit the header and save the file but it does not re-encrypt these ones (use xda2nbftool). A message is displayed in this case to remind you to encrypt the file.
Xant said:
As far as bobopopo expierenced the new upgrade utility will not run parts of the upgrade but rather leave the machine useless.
Click to expand...
Click to collapse
AFAIK the upgrade tool will only look at the extended ROM's operator field. Anyone please correct me if I'm wrong about that.
softworkz said:
Xant said:
As far as bobopopo expierenced the new upgrade utility will not run parts of the upgrade but rather leave the machine useless.
Click to expand...
Click to collapse
AFAIK the upgrade tool will only look at the extended ROM's operator field. Anyone please correct me if I'm wrong about that.
Click to expand...
Click to collapse
I confirm what bobopopo claims, i tried only flashing the ms_.nbf, and it totally messed up my machine (stuck in bootloader), i had to reflash all three to get it to work again
nargalzius said:
softworkz said:
Xant said:
As far as bobopopo expierenced the new upgrade utility will not run parts of the upgrade but rather leave the machine useless.
Click to expand...
Click to collapse
AFAIK the upgrade tool will only look at the extended ROM's operator field. Anyone please correct me if I'm wrong about that.
Click to expand...
Click to collapse
I confirm what bobopopo claims, i tried only flashing the ms_.nbf, and it totally messed up my machine (stuck in bootloader), i had to reflash all three to get it to work again
Click to expand...
Click to collapse
I knew about this. I was just stating that the header of NK and Radio is irrelevant for the upgrade tool and is not responsible for the country code error.
SPV M1000
Does it work with SPV M1000 version
loade ER2003 started it and stay on the ROM info screen :?

How to open new ROMs (like ITA) with ER2003Edit

Hi,
just a tip for opening the latest ROM files with ER2003Edit:
ER2003Edit has a file type selector in the file open box which is by default set to autodetect.
in autodetect mode ER2003Edit tries all encryption passwords it knows for any type of ROM (NK,Radio,ms_)
when using autodetect mode and your ROM does not get detected and you enter the correct password manually, you will receive an "Error accessing image files" message
To prevent this message choose the correct type of ROM (ms_.nbf) from the file type selector of the file open dialog and enter the password
ER2003Edit can open and edit all types of ROM files now in order to let you change the language and device type settings (to prevent country code error)
Tip: Opening ROM files is always faster when you do not use autodetect mode!
BTW here are the passwords for the ITA-Rom:
ms_.nbf: 0x20040305
nk.nbf: 0x20040304
radio_.nbf 0x20040306
A new version of ER2003Edit will have these passwords built in, but I currently do have no time for a new release just to include the passwords.
Enjoy!
fantastic
thank you very much
Works
Thanks
Softworks, are the the old passwords hardcoded into the app?
I reckon on your next update, maybe you could just make the app read an XML (or text, whatever) file with the passwords. So you can easily just add passwords in the future onto the text without having to recompile a newer version.
Also, since when talking about XDAII files, we're only talking about 3 filenames which never change. Maybe you could make a load process to simply check the filename which has been opened and use the corresponding "file process" to open it. Sort of like instead of autodetect when you open files. Have a simple check that checks wether one clicked either of the 3 files, then have a script that mimmicks selecting manually the filetype instead of "autodetect." That should eliminate the "nuances" of opening files (especially helpful for us n00bs hehe)
Cheers,
Carlo
Sorry, Iwould like to ask how / where to find the password of the images?
Thanks!
Hi All,
I have images which can't open by ER2003edit V1.2.20, it say the password is incorrect. Anyone can help or teach?
The rom image is from O2, the rom version is 1.60 or higher.
Thanks!
Can someone help me out too, it won n't seem to work with me.
d.zee said:
Can someone help me out too, it won n't seem to work with me.
Click to expand...
Click to collapse
Cant find them either.... Please help
See here:
http://wiki.xda-developers.com/wiki/HimalayaRomFlashing
Here is a patched version of ER2003Edit.exe that has the new 3 passwords. Auto detection now works. :lol:
Just unzip then copy it over installed ER2003Edit.exe usually found in
C:\Program Files\softworkz\ER2003Edit\ER2003Edit.exe
RE
Hi!
Thanks. It works.
:lol:
PDA: O2 XDA II
ROM Version: 2.06.00WWE
Radio Version: 1.18.00
ExtROM Version: 1.12.924WWE (from IIs)
OS: Windows Mobile 2003 Second Edition
OS Version: 4.21.1088 (Build 14132)
Any reason I am getting shcksum errors?
I chenaged the content of ms_.nbf save it, and tried to flash it, but I gor error 122 - checksum error?
Any known reason for that?
Looks like I am out of my depth but its worth a try
I have a blueangle and have worked out that there are more tools on in Himalaya than for us.
I have further worked out that the upgrade works in the same way.
So I would think that this tool does, Well I am either wrong or just dumb.
Is my undersatnding correct that this application would only have the paswords for the at that time Known rom realeases.
Is my understanding that even with a password out of a xda3nbtool this toll will not work if you add it in the dialog.
Thus I seem to find that if I fill in the device name, op and lang as well as pasword I fail, same is true if leave them blank.
Please help me out or point me in the correct direction
Thanks
Hi,
does anyone know a program or a howto for editing Asus MyPal ROM Updates? In fact I only have to add a single file.
Thanks for any response
Martin

Passwords for ROM files

Is there a site where all the known passwords for all the different ROMS are published? I have the passwords for 2.06, 1.72 and 1.66 but I'm trying to open the original 1.03.00 ROM files. ER2003Edit tries to guess with some defaults but none seem to work?
I tried searching, but didn't find anything for that ROM version.
Thanks
JamesManios said:
Is there a site where all the known passwords for all the different ROMS are published? I have the passwords for 2.06, 1.72 and 1.66 but I'm trying to open the original 1.03.00 ROM files. ER2003Edit tries to guess with some defaults but none seem to work?
I tried searching, but didn't find anything for that ROM version.
Thanks
Click to expand...
Click to collapse
There is a very good chance that the 1.03 ROM files are not encrypted at all. Try viewing one with a hex editor and if the content is readable (i.e. contains real words not just all gibberish) then they are not encrypted.
Passwords
Hey DCS, (btw: excellent work on the 2.06 ROM).
I think you're right. I've found words in the radio ROM, and the ExtRom... These files both end in .nb where the OS (which is encrypted ends in .nbf)
So I have a question then, (if you can lend a hand). I have the original ROM from HTC, (at least according to the iMate tech who sent it to me). It's the original 1.03.00 OS, Radio 1.05.12. When I run the downgrade it writes the OS and Ext but erases the radio and gets to 12% of the 1.05.12 radio and fails? Is it possible it's because this radio is not encrypted and the HimaUpgradeUt.exe thinks it can't read it? Shouldn't it have failed at the ExtRom? Using ER2003Edit it is not able to open any of the files so I don't know what the password UpgradeUt.exe is using to try to re-encrypt these two files?
Thanks,
What is the version of the upgrade program?
Passwords
The updater (HimaUpgradeUt.exe) is...
Version 0.0.7.0
Re: Passwords
JamesManios said:
The updater (HimaUpgradeUt.exe) is...
Version 0.0.7.0
Click to expand...
Click to collapse
That is ancient Maybe you could zip up all the nb* files plus the upgrade programs and send them to me. If so let me know and I'll send you a URL to use. Hopefully I can convert them to use a later upgrade program.
Passwords
Sure, I would appreicate the help. I think people might be interested in this update because it doesn't seem to care what you have installed it will overwrite anything and it's very clean; before vendors added any of their stuff to the Ext ROM.

Step by step ROM upgrade instruction for newbie

Dear Fellas,
Where can I get a step by step ROM upgrade instruction to upgrade/flash my XDA II into WM2003SE? I have been through the forum, but still can not find a basic guide to do the upgrade.
I have downloaded "Customized_WM2003SE_Asian_Edition_Version2.zip" from ZeroXtreme. What can I do with this file? How can I start it?
Anyone can help me pleaseeee.......Thanks a lot.
Rgds,
Fendie
Ahoy there matey!
this is what you do:
1. decide on what version you want to use.
2. get them roms. (E.g. read through DCS's post on the ORIGINAL WMSE)
currently there are three versions of the WMSE namely 2.02,2.06, and 2.20.
3. check your device data for language and operator:
use getdevicedata.exe from the upgrade files, copy it to your device's windows directory, then tap on it.... it will produce a log file, copy the log file to your desktop pc, then use notepad.exe to view it.
look for the language setting e.g. WWE, CHT... etc.
look for operator settings e.g. O2, Qtek... etc.
now check your downloaded NK.nbf, MS.nbf and radio.nbf to see if they have the same settings as your device..... you can use ER2003edit.exe which can be downloaded from wiki.xda-developers.com.
if the files have the same settings, thats good... if not... change it so that they would be the same as your device.... better yet use DCS's batch file for easier conversion... (note, DCS's 2.02 rom is set to WWE,O2)
now... assuming you had made all the preparations... (language, operator settings, and that you have a complete set of roms e.g. NK.nbf, MS.nbf and radio.nbf)
put them all in one directory along with the other files that came with the upgrade package.
make sure you have a full battery before proceeding with the upgrade.
plug the charger to tha cradle and the cradle to the comnputer.
click on himalaya upgrade program.... then the program will run, put the device in the cradle and watch the screen for further instructions
goodluck...
be sure to read on DCS's post regarding upgrades for a more detailed info.
assuming everything goes well; during the upgrade do NOT take out the unit from the cradle; go watch tv or something...if you receive an error message; don't fret. the forum hosts a lot of topics on how to revive your unit...
and if your xda dies during the upgrade; make sure your tray tables are in their upright position, put your head between your legs and kiss your arse goodbye
what do guys suggest the ROM i use?
which one is the most stable?
mate, i noticed that you're from the philippines. i'm based in thailand i used the rom posted by zeroextreme; it's the wm2003 se asian rom. pretty stable that one; after upgrading my unit's power consumption improved noticeably. although as expected some apps may not display well when using landscape mode (those're the apps not designed for wm2003 use). but overall the rom upgrade was well worth it. stable and no hick ups; been using it for more than 2 weeks now i think.
others may have useful tips on the other roms they used for upgrading; not to mention experiences.
cheers
acid.... try 2.02.t1 they say its more stable than 2.06.
thanks mga kababayan!
Z-man said:
Ahoy there matey!
this is what you do:
1. decide on what version you want to use.
2. get them roms. (E.g. read through DCS's post on the ORIGINAL WMSE)
currently there are three versions of the WMSE namely 2.02,2.06, and 2.20.
3. check your device data for language and operator:
use getdevicedata.exe from the upgrade files, copy it to your device's windows directory, then tap on it.... it will produce a log file, copy the log file to your desktop pc, then use notepad.exe to view it.
look for the language setting e.g. WWE, CHT... etc.
look for operator settings e.g. O2, Qtek... etc.
now check your downloaded NK.nbf, MS.nbf and radio.nbf to see if they have the same settings as your device..... you can use ER2003edit.exe which can be downloaded from wiki.xda-developers.com.
if the files have the same settings, thats good... if not... change it so that they would be the same as your device.... better yet use DCS's batch file for easier conversion... (note, DCS's 2.02 rom is set to WWE,O2)
now... assuming you had made all the preparations... (language, operator settings, and that you have a complete set of roms e.g. NK.nbf, MS.nbf and radio.nbf)
put them all in one directory along with the other files that came with the upgrade package.
make sure you have a full battery before proceeding with the upgrade.
plug the charger to tha cradle and the cradle to the comnputer.
click on himalaya upgrade program.... then the program will run, put the device in the cradle and watch the screen for further instructions
goodluck...
be sure to read on DCS's post regarding upgrades for a more detailed info.
Click to expand...
Click to collapse
Hi Z-Man,
Thanks for your response. But still do not understand in some areas
I just got MS.nbf and some *.CAB files from the extended ROM of ZeroXtreme. There are no NK.nbf and Radio.nbf. Is it because it's an Extended ROM? Where can I get the "non-extended" ROM?
And I don't really understand on DCS's post.
Sorry, I am really really newbie.....
Many thanks.
Rgds,
Fendie
ms.nbf is the extended ROM, you still need to get the radio.nbf and nk.nbf
download the file here:
HIMALAYA_WM2003SE.zip and Operator update.zip:
http://forum.xda-developers.com/viewtopic.php?t=13588
extract all files to one directory... and add the ms.nbf that you have
you didnt mention the operator and languange settings of your device... check your device info....
then use DCS's batch file to convert the settings.... by default, DCS uses WWE and O2.
make sure all the nbf's are set to the same settings...
then begin upgrade
Himalya Romkitchen is still valid for SE

Windows ROM Editor 2003 Question

Dear all,
I use to use Windows ROM Editor 2003 to see, add files and change the bootloader image on the ROMs. For some reason now when I open WM6.1,6.0 or 5.0 the editor does not show any files. It just shows the version of the rom and that is it.
Am I doing something wrong or is it that 5.0 upward ROMs cannot be edit using Rom Editor 2003?
Here what I can see when I open the nbf files now. Please see attached image.
All the buttons, tabs above don't work. When I click on them nothing happens.
I am using Windows XP 32bit NTFS
Please advise.
Many thanks
Regards
J
hence the name ER2003 Edit ... its only for WM2003
Oh haha! Well where can I find one for WM6 then? I searched online but the only ROM editor I can find is 2003.
there is none for WM6 because that software was actually built to read ExtROM of WM2003 devices, ER2003Edit = Stands for ExtROM Editor for WM2003, though with few tricks (passwords actually) they were able to open the ROM too

Categories

Resources