Hi
I'm searching for information about ROMcooking for ATOM Life, but unfortunately there are not many informations about this device.
1.The Wiki explains only the ATOM Romupdate:
ROM Update File Composition:
* diskimage_Ver.nb0 - ROM file
* EBOOT.nb0 - bootloader file
* ExtendedRom.img - hidden partition image file
* nova_pda_033105.mot - checksum partition ??????
* vl1d_pda_Ver.mot - radio file
* Device Software Update Utility.exe - ROM upgrade utility file
Click to expand...
Click to collapse
The ATOM Life Update .exe contains:
Device Software Update Utility.exe
EBOOT.nb0 - Bootloader ?
IPL.nb0 - initial Bootloader ?
cpld.img
XLDR.nb0
FLASH.DIO - OS image ?
ExtRom.img - ExtROM ?
pass.32
and some .mbn files
Click to expand...
Click to collapse
Can someone explain the different files ?
OK I read some threads and learned Howto dump the OS image with Scooterkitchen. Howto add or remove files is an easy job (I hope),
but how can I rebuild this dump to a flashable image?
Hope some of you can lightup me. and sorry for my bad english
thank you
scorpio16v
FLASH.DIO - OS
ExtRom.img - ExtROM
now,get a new rom update method:
it's get from atom life room replant from exec
filename is
AL1.DIO -os
EXROM.IMG -extrom
copy these 2 files to mini sd card,reboot+record enter bootloader mode
system updated!
and use this rom we can updta life to chinese rom version
based on this method
i guess we can copy these FLASH.DIO,ExtRom.img,2 files to mini sd card,reboot+record enter bootloader mode
loading OS
u can try to update your own room update in life.
Thank you for reply
yes, but that'll be the easier part of the job.
My problem is, if I dump the FLASH.DIO in Scooterkitchen I use the following way, posted in an other thread:
To dump files from FLASH.DIO use "Scoter Kitchen".
Just remove first 12 bytes from this file, then use
\Scoter Kitchen\Utilities\TOOLS\SRPX tools>msflshtool.exe
after this use
\Scoter Kitchen\Utilities\TOOLS\imgfs_tools\viewimgfs.exe
Click to expand...
Click to collapse
This pocedure runs fine, but If you running the FLASH.DIO throug msflshtool.exe it splits in 3 parts. (OS and 2 ?? XIP parts).
At this point, I don't know how to rebuild.
The second problem is:
The device will be released as XDA Comet in germany (my country) in about 2 weeks with german language WM6 and at this state I have no backup ROM to restore it to manufacturer settings if something went wrong.
I will try to dump my german ROM and rebuild it with the XIP part of the english XDA ATOM Life ROM but I need an experienced guide to do that.
Is this AL1.DIO SD-update on Developer FTP the actual english version? Where comes it from ?
I don't find the thread about it.
"AL1.DIO" seems the same like the name "HERM.img" for the HTC Hermes. If you update via SD the Bootloader recognized it as the OS-file.
another edit (thanks again to ferryboat):
3.Before next step, go to \windows\temp , u will find the extractable files.
4.find the file "pass.32"
5.Use ultraedit-32 to open it
6.Check first line,u will find "WWE"
7.Change "WWE" to "CHT" then save it.
8.Go to next step, u will pass the phone-check.
9.About 15 mins, u atom life will be the WM6 ENG.
Click to expand...
Click to collapse
That explains the pass.32 file, but you don't need it to SDcard update ?
"buildimgfs.exe" command to build rom and
"make_imgfs FLASH.NB0 -nosplit" update FLASH.NB0 file
rename it to "Flash.dio"
i havn't test rom made by this method.i also try to find an safe method to update rom so i can try my own rom.it's not so much info about life 's rom
i see this chinese rom from blow links,and a lots of people have updated their life to this version.
http://www.52dopod.net/thread-33648-1-1.html
modify 'pass.32' file is only used when use USB link cable to update rom simultaneity you want to change your life rom language from eng to chn or chn to eng.this method is replant from atom and exec.we do not need to modity this file when we update rom in bootloader mode.
ferryboat said:
"buildimgfs.exe" command to build rom and
"make_imgfs FLASH.NB0 -nosplit" update FLASH.NB0 file
rename it to "Flash.dio"
i havn't test rom made by this method.i also try to find an safe method to update rom so i can try my own rom.it's not so much info about life 's rom
Click to expand...
Click to collapse
I've made a short test with mamaich's imgfstools like in your example, if I dump the ROM and rebuild it without any changes (with -nosplit option) the rebuild file has the same size.
But if I compare both files shouldn't the new file be a perfect clone from the scource ?
The new file has the same structure in some parts, but most of it is different.
Please help me!
I want to upgrade only radio Atom Life (not ExtROM, OS) by bootleader mode! what file it need? how will i do? ...
Please help me!
Many thanks.
scorpio16v said:
I've made a short test with mamaich's imgfstools like in your example, if I dump the ROM and rebuild it without any changes (with -nosplit option) the rebuild file has the same size.
But if I compare both files shouldn't the new file be a perfect clone from the scource ?
The new file has the same structure in some parts, but most of it is different.
Click to expand...
Click to collapse
Nope. It wouldn't be a perfect clone. Even in the ATOM, it does not generate a perfect clone. But it still works with mamaich tools anyway. If you want just to edit the IMGFS section, I think it's okay. Just test...
Just don't touch the bootloader eboot.nb0; so, you won't brick your phone. Also, if possible, always update in bootloader mode. Because if you can't update in bootloader mode, You won't be able to restore your device if you have a none working ROM.
Here's a batch file I wrote in opening and closing part1 of atom life. The user who requested was afraid to try it anyway. The purpose of this was to modify the pagepool for the atom life. There are tools available now that can edit the pagepool on the fly, but the atom is not supported. I don't know with atom life.
Code:
<<<< breakdown >>>>
msflshtool.exe flash.dio -d -p1
SRPX2XIP flash.dio.part1
del flash.dio.part1
<<<< rebuild >>>>
XIP2SRPX flash.dio.part1.xip
msflshtool.exe flash.dio -r flash.dio.part1.xip.xiporg
Well I only use breakdown because we will just import the atom life components into our atom devices anyway.
The Atom Life sure could use some update... official AKU0.7 is coming out and atom life is still at AKU0.2.
Our Atoms have AKU0.3 already and we're moving to AKU0.4
Rom Dumper
search for buzz romgrabber / romdumper and dump it to your SDCARD or you internal memory.
This is the RAW file that should be read during bootloader update thru SDCARD. For the ATOM, (if we compare dump with update file) only the header was removed. I don't know with atom life. I don't recommend updating bootloader file with SDCard because SDCard might have a bad block and it will kill your device.
Related
NOTE: I've already posted this into the Development & Hacking forum, but got no reply yet. As it is an Hermes specific topic it is probably better to place it here, sorry for reposting if you've already read this.
The available original shipped ROMs for the HTC Hermes have .nbh files with the RUU, instead of the usual .nbf files found in other HTC rom updates.
By now, there are two shipped ROMs available, containing:
HERMIMG_Dopod_1.23.707.1_SHIP.nbh
hermimg_QtekNOR_1.18.255.3_Ship.nbh
So, it seems that the usual nk.nbf file is no longer used by the Hermes RUU
I cannot extract the various rom components (ExtROM, OS, IPL/SPL, SplashScreen, GSM radio, etc...) out of these files using the usual TyphoonNbfTool, however mamaich's prepare_imgfs finds the imgfs and dumps it apparently ok, but it cannot be read using viewimgfs or itsme's rdmsflsh.pl, so I guess the dumped file is invalid.
Anybody knows about this new format?
is it possible to convert it to nk.nbf so we can cook our own roms?
Would it be possible for example to extract the radio rom from Dopod and replace it on QtekNOR rom?
I think we will have to wait for the rom guru's to advise on this. I hope this would be possible so we can get the best rom possible.
I've tried to decode.nbh files with alpinenbfdecode.pl, himalayanbfdecode.pl and typhoonnbfdecode.pl. None of them works, so this must be a completely new format.
Opening nbh files in hex heditor shows interesting strings, but I don't know how to procede to identify each part and decompress or decrypt it...
Is it possible to decrypt Extended_ROM of HTC TyTN? I'v found a great extRom, but I can't upgrade my ExtRom because I have only borrowed tytn from my friend and Iam looking for one special aplicattion which is included in this. Any solutions ? Thanks
Jerry, you can unlock & unhide the ExtRom just with a registry tweak, look here:
http://wiki.xda-developers.com/index.php?pagename=Hermes_Unhide_Extrom
Downloading a ROM now to experiment
If I crack it, you guys better donate something to my get-theblasphemer-a-hermes-too-fund (yet to set up that fund though )
Mate if you crack it I'll be donating to your fund!
Hmmm, a very weird file format indeed :S
All files start with "R000FF\r", next 16 bytes of what appears to be random data.
After that it consists of several blocks.
Each block starts with a header:
4-bytes block-length
4-bytes footer-length
1-byte always 1
After that follows the actual data (block-length bytes) + a footer, which appears to be random data but which I suspect to be some kind of checksum
I'm uploading a full USB log of a complete ROM-flash here:
ftp://xda:[email protected]/Hermes/Technical/
Watch for the file Dopod2-FullRomUpgrade.txt.gz, when it is full uploaded it will be around 102Mb.
This is from this ROM file:
HER_DopodAsia_1237074_1060010_WWE_SHIP.exe
______
EDIT: Upload finished.
I created a wiki page with all the info we have about NBH format:
http://wiki.xda-developers.com/index.php?pagename=Hermes_NBH
i added my scripts to extract nbh files to the wiki page
willem
itsme said:
i added my scripts to extract nbh files to the wiki page
Click to expand...
Click to collapse
Cool :shock:
you always come with splendid work, so pleasant to see... thanks a lot!
Hmmm... just took a peek at the USB-dump of a ROM upgrade.
It appears that the whole file is just sent to the device.
The flashing utility doesn't even look at the CID or even the device type, it was happy to start flashing my Universal (however it didn't get very far, as the bootloader doesn't understand all commands ).
This makes it incredibly difficult to make a RomUpgradeUtility that doesn't look at the CID, or to figure out how the signatures in the .nbh files are generated
willem,
I've been trying to extract the roms using your commands, everything runs fine until I have to run the gsmsplit batch file, as in this line you call "bcl" and I don't know what bcl is:
Code:
for %%i in (_bcl*) do bcl d %%i _x%%i.nb
I am runing it on WinXP SP2 + cywin 1.5.21-1, this is the error I get:
Code:
[email protected] /cygdrive/c/nbh/files
$ gsmsplit.bat GSM.nb gsm.nbx
'bcl' is not recognized as an internal or external command,
operable program or batch file.
'bcl' is not recognized as an internal or external command,
operable program or batch file.
[...]
'bcl' is not recognized as an internal or external command,
operable program or batch file.
'bcl' is not recognized as an internal or external command,
operable program or batch file.
_x_bcl*.nb
The system cannot find the file specified.
0 file(s) copied.
Could Not Find c:\nbh\files\cing\_x_bcl*
[email protected] /cygdrive/c/nbh/files
$ dir
GSM.nb MainSplash.nb SPL.nb nksigned.dbh signatures.txt
IPL.nb OS.nb SubSplash.nb nksigned.nbh unknown_601.nb
Is the line correct? if yes, what is bcl and where can I get it?
Thanks!
Ok, almost everything went fine... i don't know yet about the bcl command i asked before, and i cannot extract the contents of imgfs from OS.nb using rdmsflsh:
Code:
$ rdmsflsh.pl -d files OS.nb > rd.txt
could not find imgfs header
I've also tried prepare_imgfs.exe with OS.nb, it found IMGFS there and dumped it to imgfs_raw_data.bin, but then I cannot use viewimgfs.exe with this file, it complains about "unknown header type", and the file seems corrupt as it is only 6Mb...
BTW... SubSplash.nb seems to be the ExtROM, not the SubSplash.
I get a "Check cert error!" from the bootloader when I try to flash a modified NBH file (thanks TheBlasphemer for your help).
From spv-developers:
"getting a developer CID (SuperCID) will allow you to flash your system with a ROM that is not digitally signed (i.e. a ROM that you have modified). If you do not modify it, you'll not be able to install a modified ROM on the device."
Click to expand...
Click to collapse
Is it possible that we can flash NBH files without signing in the Hermes if we get a SuperCID?
I tried using SPV-Services to change the Hermes CID, but when I execute the CID tool (Alpha) I get the error: INVALID Storage Manager Handle (SAFE)
The NBH format is also used by HTC STARTrek, more info here.
bcl is from bcl.sourceforge.net, and in the latest release called 'bfc'.
willem
pof said:
Ok, almost everything went fine... i don't know yet about the bcl command i asked before ...
Click to expand...
Click to collapse
Hey pof, you need to rename the bfc.exe to bcl.exe ...! then you dont get the error but alot other zero lenght values ...
so did anyone manage to get the extraction of the OS.nb done correctly?
Hi! Do you think is possible to manage that NBH file and change htc logo splashscreen in some ways?
I'd like to create a ROM file upgrade with different spalshcreen for my TYTN.
Credits for finding/pointing to this solutution go to AirwolfUK.
This is also hidden somewhere in a thread, but I think it deserves it's own thread. We (G4 owners) don't need to flash all our roms in Italian language. In stead of copying all the Update Utility files just copy "ROMUpdateUtility_Wizard_NoID.exe" and it will stay in English.
So if you get this error on you're G4:
ERROR[300]: INVALID UPDATE TOOL
This Update Utility cannot be used for your PDA phone. Please get newer Update Utility
Just replace the "ROMUpdateUtility_Wizard_NoID.exe"! (I'll attach it too)
If you want to turn an already Italian installer into English replace all the files from "English Update Utility Files G4.zip".
Great! Thanks a lot for these! Hepled me a lot
Guess it should be a sticky, as not many people know where to find these things.
I've tried ROMUpdateUtility_Wizard_NoID.exe but keep getting
"Error 208: File Open.
The update utility can not open the requested file. Please check your update utility".
Anyone got any ideas what I am doing wrong?
maybe you're not with the utility and the nk.nbf in the same folder(all in the root of the folder).
Thank you so much...this just saved my otherwise bricked phone!
thx worked perfect in flashing the radio rom on my g4 to 2.19 uk!
I can't figure out how to upgrade my rom. I keep getting the dreaded Error 300.
Can somebody provide instructions on how to run this?
How?
How do I do this?
What should I replace?
Where should I put the "ROMUpdateUtility_Wizard_NoID.exe" file?
I just normally run the updateroom from a folder on my laptop, so where should I place "ROMUpdateUtility_Wizard_NoID.exe"?
I am attemping to flash Superrom
orelse4054 said:
How do I do this?
What should I replace?
Where should I put the "ROMUpdateUtility_Wizard_NoID.exe" file?
I just normally run the updateroom from a folder on my laptop, so where should I place "ROMUpdateUtility_Wizard_NoID.exe"?
I am attemping to flash Superrom
Click to expand...
Click to collapse
If the rom is one exe file, unpack it first with winrar. You'll see the file afterwards.
Yes I knows it becomes a exe file after I have zipped it.
Ok here it goes:
I run a normal ROM update exe file, I get the
"ERROR[300]: INVALID UPDATE TOOL
This Update Utility cannot be used for your PDA phone. Please get newer Update Utility"
Then what shall I do with the "ROMUpdateUtility_Wizard_NoID.exe " if I just run this one the message: ""Error 208: File Open."
Can someone set up a step by step guide please?
Seems you haven't upacked the rom executable. You should have multiple files afterwards (e.g. ROMUpdateUtility_Wizard_NoID.exe and nk.nbf). Just replace the ROMUpdateUtility_Wizard_NoID.exe! The file error tells it can't find your nk.nbf.
Damnnnnn Vippie Rocks!!!!!!!
How to do it ..
is it just click and run ROMUpdateUtility_Wizard_NoID .. and the application will do all .. or we just need to but all stuff in unpack flash ( any flash ) and install it to firmware ??
thanks allot in advanced
help still not working
I got the ROMUpdateUtility_Wizard_NoID.exe and I run it in the same folder as the rest of the files from the program and I STILL get error 300
Thanks Wes
Thank you men !!!
Thank you very much men, you saved my life !!!
Ok this file just bricked my MDA !
deathblooms237 said:
Ok this file just bricked my MDA !
Click to expand...
Click to collapse
Impossible.... it's you who did something wrong.
vippie said:
Impossible.... it's you who did something wrong.
Click to expand...
Click to collapse
No... I think your half-ass instructions confused everyone! you posted the update utility yet did not instruct that it should have been extracted in the same folder as the new ROM of the user's choice.
If you were to create a folder then extract the utility to that folder, then click on the extracted file, then for sure you will get the error msg.
Download first the ROM you want in a folder, All New ROMs will extract to two files. One of those files is the rom update utility file that you will need to replace with the Update Utility exe file in this post. To do this just extract the update utility tool ( posted here ) in the same folder of the downloaded and extracted ROM folder. You will then be up and running. Follow the instructions.
To follow up with my previous post, I would suggest you start with the 'Wizard_Love rom or the Button Rom as basis. This will reset your download prompts on your device to accept any Wizard compatible ROM of your choice. After the first update most likely you will not need this utility to update your favorite rom onto your device.
asfoor said:
No... I think your half-ass instructions confused everyone! you posted the update utility yet did not instruct that it should have been extracted in the same folder as the new ROM of the user's choice.
Click to expand...
Click to collapse
And even than it wouldn't brick the device. So your "no" should be "yes, you're right vippie"!
Did you notice the "developers" in the websites name? What are people doing on this forum if they don't know how to REPLACE a file. It isn't necessary to spoon-feed people.
Hi
Now I'm trying once again tho change from M$ Windows to Linux. My experiences with Linux are only 3 weeks old, so I've many open questions.
I'm currently searching tools to extract, cook and repack .nbh files.
An tool to extract an complete ROM in his parts that works under Linux too is NBHDump from Olipro, but I haven't currently found an solution to repack this .nh parts in one .nbh again.
How can I extract the OS.nb ? Is it possible to extract in packages like Bepe's tool ?
I know many (stupid ?) questions, but a short help would be nice.
Thanks
scorpio16v
scorpio16v said:
I'm currently searching tools to extract, cook and repack .nbh files.
Click to expand...
Click to collapse
Extract: nbh2dbh.pl & dbhdecode.pl from itsme (see wiki), and to exctract the shipped roms exe use cabextract.
Repack: no tool available, i've one unfinished attempt, probably someday i can finish it.
scorpio16v said:
How can I extract the OS.nb ? Is it possible to extract in packages like Bepe's tool ?
Click to expand...
Click to collapse
No
And the usual tadzio / mamaich tools don't work under wine because of the ce compression dll dependancy.
But... you can also flash your hermes under linux too, i'm planning to release stable version soon, now in teesting phase:
http://forum.xda-developers.com/showthread.php?t=296436
Thanks for your answer pof.
Of course I've your HTCFlasher on my harddisk.
And it's possible to use it with Bootloader 1.01 MFG to flash an .nb, right ?
One additional question I have is, if I split the complete ROM in .nbh with NBHDump.exe in it's parts (under Linux), is it save to use this .nb files to flash ?
Or are the files corrupt, because NBHDump is written for Windows ?
Ok
Have tried a few things:
1. NBHDump.exe works
2. To extract to imgfs_raw_data.bin I can use aChef.jar
3. To make a Dump I can use Tadzio's ImgfsToDump.exe with the msvcr71.dll inside the directory.
4. Tadzio's tools, tested from OS.nb to Dump works too.
OS.nb ---(NBSplit)---> OS.nb.payload -->
--(ImgfsFromNb)---> imgfs.bin ---(ImgfsToDump)---> 'dump' directory
Click to expand...
Click to collapse
5. Tadzio's tool from Dump to OS-new.nb works too.
dump' directory ---(ImgfsFromDump)---> imgfs-new.bin ---(ImgfsToNb)--->
OS-new.nb.payload ---(NBMerge)---> OS-new.nb
Click to expand...
Click to collapse
Theoreticaly I can now add or delete something, right ?
I've tested this procedure with the T-Mobile WM5 germany OS.
I've attached the dll.
Unfortunately I have no clue, how I can use the two batch files from Tadzio (NBDump.bat /NBBuild.bat) to automate this procedure .
And the usual tadzio / mamaich tools don't work under wine because of the ce compression dll dependancy.
Click to expand...
Click to collapse
I've done this in a terminal not under Wine
pof said:
And the usual tadzio / mamaich tools don't work under wine because of the ce compression dll dependancy.
Click to expand...
Click to collapse
AFAIR it was a different bug, and tadzio has added a better error message
recently.
I don't know about assembling nbh (not really interested in that but
all dissecting tools worked with wine for me.
can anyone make a dump in *.bin format of the IPL (bootloader)?or extract it directly from the flash memory in *.hex format?i need it urgently...any help would be aprecciated
I'm looking for the same thing...
Hey, man... if you'll find it - post it here. if somebody needs a program for creating full rom backup -it's Awizard, I think..
Just unpack any official ROM nbf using typho5, then you will find the G4 version of IPL. (You should find 2 IPL files after extraction)
My X01HT is already Hard-SPL (2.10.Olipro), and ready for upgrading to WM 6.5 (considering TAI edition, thanks!) But suddenly I feel that I may have to backup my original ROM (6.0 CHT) which already came with the phone when I purchased. After search this forum with "backup rom", I've got the following:
http://wiki.xda-developers.com/index.php?auto_redirect=1&pagename=TitleSearch&s=backup+rom
(1) The links listed in the wiki, I think, are not for Hermes. Am I correct?
(2) Is there any other utility to backup original ROM? For Hermes, is it only possible to do so by "dumping" the ROM first as written in:
http://wiki.xda-developers.com/index.php?pagename=Hermes_HowtoDumpRom
I guess if only "dumping" is the only solution, there should be a long way to build the dumped files to a NBH file to flash.
(3) Or is it possible to reflash the official ROM such as:
http://www.asia.htc.com/download/838Pro_HK_CHT_WM6_Upgrade_20070712.zip
extract the NBH file inside and reflash?
Many thanks!