Database Users

How to extract WM5 .nbf?

Anyone know how I can extract .nbf files? I need to see what is in this nbf file. Refer to this thread if you are curious
http://forum.xda-developers.com/viewtopic.php?p=250201#250201

Use the tools made by Buzz on this page:
http://buzzdev.net/index.php?option=com_content&task=view&id=65&Itemid=1
To see the contents of the nbf (converted to nba using the above method) file, you need to use these tools:
http://wiki.xda-developers.com/index.php?pagename=WM5EditROM
Its rather simple and hardly takes about 5 minutes for the whole thing
Cheers!

Thanx for the fast response. I gave it a go and it dosent seam to work. I get the .nba from the .nbf then when trying to
"prepare_imgfs.exe nk.nba"
I get this
"Searching for IMGFS start... Not found!"
I think that the .nbf is password protected. If anyone more gifted than me can help out with this one I know we will find a way to change the splash screen on all the newer (2.17 an so forth) ROMS.
Thanx again; Lew

then how do you extract NBF file from 8125 instead of NBA file ? Is there a way to do this ?

I would like input on this as well. I think we are missing a password here or something.

universaldoc said:
Use the tools made by Buzz on this page:
http://buzzdev.net/index.php?option=com_content&task=view&id=65&Itemid=1
Click to expand...
Click to collapse
I don't believe this works with (newer?) wizard nbf's.

Is there anyone here that could crack this would be "encryption" on the .nbf in question? I tried encoding my splash backup from aWizard using the project file from the "decoded" nk.nbf from "ruu_forcedalias_splash_245_425.exe" and it was a no go. It said that my storage was the wrong size for this ROM update (or something to the effect of NO). So it looks as if this nk.nbf from "ruu_forcedalias_splash_245_425.exe" is the key to unlocking the ability to change splash screens to custom images.
Later; Lew

u can try the tools in the attachment to extract files from image file.
the typho2 can extract parts from a SD card image, and the typhoonnbftool_04 can extract parts from a NBF file. they work well while do with the 1.x ROM, but I've never experienced it in extracting a 2.x ROM.
any exciting info, pls let me know,

Ok, good news, thanx to BrightMoonHeart I have been able to extract the BMP from the NBF using "typhoonnbftool_04.exe". The bad news is so far I can't seem to add an image (bmp) to the nbf or remove the current image. So this was a great step forward, just need a little help to get r done. I tried "typho2.exe" but I couldn't get it to do anything except give me the same info "typhoonnbftool_04.exe", It says it can extract the ".NBF" to an ".SPL" and that may allow us to edit it but I was not able to get it to convert. Any ideas guys? Always appreciated
Thanx; Lew

Ok I'm even closer now. I am using "typhoonnbfdecode.pl" and I can extract the ".nb" from the ".nbf". I can create custom splash using "nb_image_converter_859_418_826.exe" and make a ".nb" but when trying to put it back to ".nbf" i get this error
Code:
read 00030000 for splash from 92000000-Splash.nb
no sm signature at 0 in Splash
If anyone can help me out with any of this I would really appreciate it. I keep getting held up with all these conversions. I think some out there must know how to do this already, and I'm close but I keep hitting road blocks.
my head hurts; Lew

Changing the First Splash Screen on 2.24 ROM

The standard programs -- wizSplash and splash_bmp_to_wizard -- produce an error message (ITWRITEDISK). Does anyone know how to change the first splash screen? (I'm using Xelencin's wonder T-Mobile customized version.)
I can change the second splash screen simply by dropping the appropriately sized 320 X 240 24bit png file named welcomehead.96.png in the /Windows directory. But I would like to change the T-Mobile first screen, too.

i am super new in these
but i tried like you described, nothing changed after a reset.

Works for me.
just convert your image in PNG format 24bit.
write the file name: welcomehead.96.png
do not forget the . between 96.
rotate the image and resize it to 320*240 EXACT size. you may need to change aspect ratio.
Then place the file on your storage card and from the storage card copy it or move it to the root windows directory.
Soft reset and enjoy.

damnation
i did it, as i read it, but there is still the beermug my adminfriend put when he changed the device from russian to english. blyadstvo.
nu shalomochka
i will try further

cizake said:
Works for me.
just convert your image in PNG format 24bit.
write the file name: welcomehead.96.png
do not forget the . between 96.
rotate the image and resize it to 320*240 EXACT size. you may need to change aspect ratio.
Then place the file on your storage card and from the storage card copy it or move it to the root windows directory.
Soft reset and enjoy.
Click to expand...
Click to collapse
Hi mate
are you saying i can change my tmobile splash screen to anything else..using your method?
do i need any special software or can i just change the image size etc then place it in the windows directory?
Thanks

Second splash screen
This procedure -- welcomehead.96.png -- replaces the second splash screen, which on my MDA says "Windows Mobile." You can replace that by pasting the right kind of file -- a png, 24 bit, 240 X 360 -- over the existing file. I used explorer on activesync, and then just "Cntl V" to past the file. I couldn't delete the original (it is protected) but just replaced it this way. A hard reset would recover the original, but this procedure survives a soft reset.
Replacing the first splash screen is more complicated. There are threads (search for splash_bmp_to_wizard) that tell you how to do it, but they only seem to work on the older ROMs, at least they don't work for me.

To change the 1st Splash Screen download this file:
ftp://xda:[email protected]/Wizard/Splash_images/SplashScreenStuff.zip
There's a ReadMe in the zip file, with these tools I replaced my 1st SplashScreen.
Regards,
Molski

molski said:
To change the 1st Splash Screen download this file:
ftp://xda:[email protected]/Wizard/Splash_images/SplashScreenStuff.zip
There's a ReadMe in the zip file, with these tools I replaced my 1st SplashScreen.
Click to expand...
Click to collapse
That really tests one's dedication to changing the splash screen.
Thanks!

molski said:
To change the 1st Splash Screen download this file:
ftp://xda:[email protected]/Wizard/Splash_images/SplashScreenStuff.zip
There's a ReadMe in the zip file, with these tools I replaced my 1st SplashScreen.
Regards,
Molski
Click to expand...
Click to collapse
Isn't there an easier, less complicated way?

Just read the ReadMe good. It's not hard to do

ITWRITEDISK problem
Hello, I was waiting for a long time for a post like this. I still have a question. Does this package handle the write protection (the ITWRITEDISK error message) of the new ROMs ? If someone would be so kind to confirm, then I will try it right away. Thank you all.

That is the allegation
My understanding is that molski's strategy does get around the writedisk error, since that was the problem I encountered.
Please post how it goes, I haven't had time to do this and the value seems low, since the screen is only on for 18 seconds on my unit. Changing the second screen was much easier and lasts a lot longer.

SplashScreenStuff and Checksum Error
I followed the steps from the tutorial. I ended up with the boot screen that showed my custom splash screen image, BUT ... on top of it there was the message "Formatting BinFS" and then at the bottom "CHECKSUM ERROR" and it wouldn't boot further on. PLEASE, could someone who has done it provide some support? I'm trying to change the splashscreen ( I could update the splashscreen before, with some ROMs that didn't have that write protection) for months now. PLEASE could someone help ?

Has anbody got this to work on 2.26.10.2 wwe?
Thanks

CHECKSUM error
It seems I cannot get rid of this "Checksum Error" message. I extracted the splash screen from the newly created ".nbf" with "TyphoonNbfTool_04.exe" and checked it - it's the one that I want to load. The device gets stuck at boot time with the new splash screen. PLEASE, can someone help with this error message?

This works
http://forum.xda-developers.com/viewtopic.php?t=52768&highlight=

How does it work?
Thank you for your reply. How does the splashes from this link work? I mean - can I change the splash screen with one I made or I have to use only the ones prepared by M. Faria?

His programs only install the splash screens illustrated there, I chose the bluish one. But there are also instructions on how to do your own.

Still cannot change splashscreen
I tried those ones, too, still I get the CHECKSUM ERROR message. I can reflash OK the device and it works OK, but any time I want to change the splashscreen with either LewCamino's or Faria's tool I get this message.
PLEASE HELP as I really don't know want to do any more. Thank you all!

I may have read the various tutorials wrong, because I have not been able to change the first (Tmo) screen in the 2.26 rom I am running.
Has anyone done this bootscreen change yet in the 2.26???
Any assistance would be appreciated.
Thanks.

Samsung i718 (i710, i718+) ROM Kitchen

Hello!
Thanks to ppl from this forum I've managed to assemble from various sources files required to dump, build and flash back to device WM6 English ROM. It is not a "plug & play" style kitchen yet, so I call it "ROM Kitchen essentials"
Most of files are made by other people. Mine part was converter and flasher hacking. As for now, you have to edit dumped ROM absolutely manually. There are no support for initflashes.dat automatisation. You may want to use rgucomp to make changes to default.hv and user.hv.
Thanks goes to (not in any order )
trinca
mamaich
bepe
itsme
faria
double_ofour
yhauwang
and many others...
Actual version is 0.1 and RAR archive is about 50Mb.
All required files (including WM6 Eng ROM distribution and flasher) can be downloaded from:
h**p://www.r*pidshare.com/files/47189318/Juggler_Samsung_WM6_Eng_ROM_Kitchen_0.1.rar.html
You also may want to download original WM6 English ROM from here:
h**p://r*pidshare.com/files/45439904/Juggler_WM6_i718ZMGF4_PDA_Eng.rar.html
And radio firmware (required for some i71x to work with WM6):
h**p://r*pidshare.com/files/45950071/Juggler_WM6_i718ZMGF4_Phone_Eng.rar.html
In case somebody don't know how to flash Samsungs i71x:
Make backup!
Have your your firmware at hand so in case of troubles you can flash your original firmware back!
Turn off device.
Disable all ActiveSync connectivity (usb, comm, etc).
Run flasher and click start.
Hold "down" button on device and turn it on while holding "down".
Flasher recongnize it and start to flash.
After flashing make a hard reset.
If GPRS/EDGE do not work your radio firmware is not compatible with new WM6. You have to go back to your original firmware or flash new radio!
To flash new radio firmware you should have SPECIAL FLASHING CABLE for samsung phones! It is not the one that comes with device!
Now you have options to buy such cable, build one yourself, flash your original fimware back or continue using WM6 without GPRS/EDGE - it is your choice.
So - to flash WM6 you need usual usb cable. New WM6 probably work with your radio. If not - you should flash radio!
Special flashing cable is the cable with USB-Serial adapter or plain serial cable:
h**p://www.fonefunshop.co.uk/datacables/samsung.htm
Search for UNLOCK / FLASH CABLES and you'll see
"Samsung D800 - T809 - E900 - D900 USB Cable
This cable is needed to unlock / flash the Samsung D800 - T809 - E900 - D900 etc."
Notice the difference with the usual USB cable supplied with device!

Have you read my thread on the Samsung i60x?
Hello, there,
Please refer to this thread:
http://forum.xda-developers.com/showthread.php?t=316647
It seems very familiar to the i600. I will download your image just for the sake of taking a look... The ROM with header B000FF is prepared with the Romimage tool from the MS WCE IDE and is named the Run-time image, the nb0 ROM (that works with the WM5 kitchen) is prepared by Romimage by splitting the nb0 ROM in 128 KB records, a header is added containing start address, record length and Checksum 32. Then all this chunks are added together and compressed with another tool named compbin, the "encryption" you are seeing is no other than the aftermath of this compbin tool.
If you read myu thread you will find I was able to extract the flat image using cvrtbin (also another MS tool that comes with visual studio) you may grab a copy from here:
http://www.toradex.com/colibri_downloads/Linux/linux_to_wince/?D=D
Then you will be able to use the common tools from xda-developers such as prepare_imgfs (with the switch -acer) and so on.
Making the ROM back to the B000FF format is going to be the trouble. Again, read the thread.
There is also an excellent article on Mobilepro BIN roms made by cmonex, you can get a copy of that tutorial inside his Romtool packege, get it from here:
http://hpcmonex.net/nec900/files/releases/romtoolpack.zip
Be informed the Mobilepro ROM is very different in the way the Runtime file is organized, however is the best resource I have seen so far.
Besides, there are some really good tools inside that package
Best regards and start cooking!
trinca

Thanks trinca, at least I have something to read to start with. But the first thing a can't figure out how correctly RIP rom image from EXE file and then after modifing it PUT it back to flasher. There s.b. some proprietary tools for samsung phones or pdas.

Extracting the i718 ROM image: a suggestion
JugglerLKR said:
Thanks trinca, at least I have something to read ...
Click to expand...
Click to collapse
My friend, we are all navigating uncharted waters..., this requires some research, and the courage to flash the phone with the outcome of your research.
Please read my post:
http://forum.xda-developers.com/showthread.php?p=1371344#post1371344
It will give you a hint on how I found out how to extract the O/S payloads for the i60x, pretty sure it may work for your model as well. A quick look to your executable shows the arrangement may be similar, I would say for the i718, the O/S ROM is located last as it is on the i60x, starting at address 0x01620000 now, just by looking for the end indicator (following the string B000F, 0x0A, 0x00000000 which is the ROM start address, 0x00CA5F03 which should be the offset -little endian-, actually would be 035FCA00), however be noticed the runtime image is compressed using compbin during preparation, therefore I would guess is a little more beyond. You may have to do some research here.
Start by cutting the area surrounding such an offset and use viewbin to determine the offset length and cvrtbin to find if your cut was successful.
BTW it would be nice to find a tool to just decompress B000FF Runtime ROMS. (differently of what it does cvrtbin converting and decompressing Runtime images)
One other thing you may do is to use xdautils, you may find those here:
http://wiki.xda-developers.com/index.php?pagename=XdaUtils.
This collection of utilities has pdocread allowing you to extract the contents of raw partitions in the pda. Make sure to use the handle to extract each raw partition.
Regards,
Trinca

I had no success with cvrtbin. How to decompress image after compbin? I've found pdocread and put it to phone, but it won't work :-( Are there any tools to dump ROM to flash card or something like that?

JugglerLKR said:
I had no success with cvrtbin. How to decompress image after compbin? I've found pdocread and put it to phone, but it won't work :-( Are there any tools to dump ROM to flash card or something like that?
Click to expand...
Click to collapse
To decompress the image:
Get a tool named viewbin, also part of the MS PE, run it on your file and will tell you the start address and the offset of the img files. THen use this information with cvrtbin. If viewbin reports the start address is 0, then use 1 in cvrtbin, otherwise the extraction will fail.
To use PDOCREAD, you run it from your computer, it will install itsutils.dll in your phone and you must accept this in the smartphone. Your phone must be unlocked to do that and the policies set to allow unsigned applications to be installed in your phone. TO accomplish the above you need to modify the registry on the phone. See how it is done here:
http://www.modaco.com/index.php?showtopic=244205
TO dump the ROM with PDOCREAD, see a detailed procedure here:
http://wiki.xda-developers.com/index.php?pagename=Hermes_HowtoDumpRom
Be informed some phones like the i607 require the disk kernel handle, reported with pdocread -l, if you follow the procedure in the above link with no results, then add the disk handle.
Wish you good luck....

CAn Anybody help PLEASE????
I have a i718 but was bought in China and the OS is in Chinese. The blur me can only read English. Is the ROM in English? If I were to download it (still struggling now with the russian words), how can I change it? All I need is the phone to be in English. I do not need to improve anything as WM5 is good enough. I know I am a newbie and I might not be in the right thread. Can anybody please help? Any links to show "how-to-change the ROM" would be most appreciated. Thank you in advance

Your phone is also known as i710
Your phone Samsung i718 is the chinese version of the Samsung i710, all you have to do is to install the phone serial/modem drivers from the companion CD and place the phone in bootloader mode. If you get the ROM package cited above in the first post of this thread by JugglerLKR you will find complete instructions on how to download the ROM into your phone.
Good Luck!

Thank you
Thank you very much for the quick response sir! Really appreciate it. I finally managed to download the ROM and will give it a go this weekend. Wish me luck. I will be reading more to make sure I am doing the right thing as I am definitely a nOObie. First time flashing a phone .
I looked at the CD that came with my phone and the only thing I see is the ActiveSync 4.2. Worse of all, everthing seems to be in Chinese. Guess I have to do more research to see where I can get the drivers you mentioned. There are also alot of things I do not understand like bootloader, how to do a hard reset, etc. I will continue searching and reading and will post the development of my virgin "flash" as I move along.
Thank you once again.

Trinca - so I dumped my ROM from device to .raw files. What can I do with them now? viewbin shows only zeros on b000f .bin image extracted using winhex from .exe

Use Mamaich's ROM Kitchen
You can find instructions to do some cooking and tools here:
http://forum.xda-developers.com/showthread.php?t=249836
This is self-explanatory, tell me if this is enough or you need some extra info. Once finished, the trouble would be to put that back in B000FF format for flashing, as there is no tool to do that yet, and you can't just download a raw image back into the phone. The Runtime image is formed as follows:
Byte---->--1--2--3--4---5--6--7--8---9--10--11--12--<----------- 128KB------------>
Record 0> 42-30-30-30-46-46-06 <Start add> <lenght of ROM> -----------------(42-30-30-30-46-46 = B000FF in ASCII ; 06 = end of header B000FF)
Record 1>--<Address> < length > < CHKSUM32 > <----Chunk of Raw image-->
Record 2>--<Address> < length > < CHKSUM32 > <----Chunk of Raw image-->
" "
" "
V V
Last Rec>-00-00-00-00--00-00-00-00--00-00-00-00
I am doing some crazy splitting and Hex scripts to achieve that, but it is a pain in the neck. So I have decided to make a proggie to help me out with that. Please see the thread
http://forum.xda-developers.com/showthread.php?t=316647
on the 2nd post you will see what I am talking about.
Regards,
trinca

Tried viewbin on my extracted from .exe bin file - Image Start = 0x00000000, length = 0x02C1D3E0
Start address = 0x00000000
Done.
Looks like something is missing. Also cvrtbin is not working also, as it cannot accept 0x00000 as start adress

JugglerLKR said:
Tried viewbin on my extracted from .exe bin file - Image Start = 0x00000000, length = 0x02C1D3E0
Start address = 0x00000000
Done.
Looks like something is missing. Also cvrtbin is not working also, as it cannot accept 0x00000 as start adress
Click to expand...
Click to collapse
Start address = 0001ffe0

So, How to convert dumped LZX packed rom to B000F format for flashing to device?

How to convert dumped LZX packed rom to B000F format
Please refer to my thread:
http://forum.xda-developers.com/showthread.php?p=1392761#post1392761

I am unable to download your file (can you post it on rapidshare ou megaupload?). I am in the same situation as well but I appiled the english patch from asukal and Buzzlightyear and it worked .. I now have a device in english ... I am waiting for the firmware in english.. I have wm6 roms in chinese that I have not tested it ...
I also have a i710 rom but it's also a .bin file dumped from a i710 device ...
Hope this helps,
-Hau

I have uploaded several files... Can you tell me which one you have trouble with?
trinca

Oops ... My message was intended for Juggler uploading his ROM ...
Thanks,
-Hau

Thanks to trinca and bepe, mamich and many others i've managed rom kitchen essentials - look at first page.

i downloaded your flasher but why when i run i718ZMGF4_PDA_Eng, i click detect but nothing detected....
phone is on and connected via active sync

Operator Screen

Hi mates, does anyone know, where is the operator screen located in the phone ?
By Operator Screen, i mean the wallpaper of the vendor like O2, Vodafone, i-Mate, T-mobile etc. whose ROM, you have installed in your device.
It comes before the Windows Mobile splash screen, after reboot.
I have searched my entire /Windows/ folder, couldn't get hold of it.

if it is before welcome96 than i doubt you can change it without cooking your own rom...

http://wiki.xda-developers.com/uploads/Custom Splash Screens.zip
Complete Guide & Tools To Create Custom Splash Screens - Compiled by Bennec83 from wiki

is this available for any wm5/6 device?

fuzzvirus said:
http://wiki.xda-developers.com/uploads/Custom Splash Screens.zip
Complete Guide & Tools To Create Custom Splash Screens - Compiled by Bennec83 from wiki
Click to expand...
Click to collapse
can you post the link for this thread ?
I hope we are not talkin' about the windows splash screen aka "welcomehead.192"

this what I am talking about
From the read me file inside the zip.
This Can ONLY Be Done On XP (nb_image_converter.exe dont like vista!!)
Firstly create your splashscreens using your favourite picture editor (PSP, Photoshop etc...), both these files MUST be 240x320 and saved as 24bit bitmaps:
Name of Image Size Type Description
* MainSplash.bmp 240x320 .bmp the first splashscreen you see
* SubSplash.bmp 240x320 .bmp the second splashscreen you see
* welcomehead.96.png 320x320 .png the WM splashscreen
Save mainsplash & sudsplash into Custom Splash
Save welcomehead.96.png and paste it into the /windows folder on your device (overwriting the current windows splashscreen).
Copy files "nb_image_converter.exe" & "padding.nb" into Custom Splash. Now run "nb_image_converter.exe" load both images, save them as Main.nb & Sub.nb.
Next open a command window, and place Custom Splash Folder in Root of C:
In the command window type the following:
cd c:\custom_splash (enter)
copy /b Main.nb+padding.nb MainSplash.nb (enter)
copy /b Sub.nb+padding.nb SubSplash.nb (enter)
dir (enter)
The final command (dir) will list the contents of the directory, the filesize of MainSplash.nb and SubSplash.nb MUST be exactly 262144 bytes
or you should NOT continue (would produce possibly FATAL results for the device)
We now need to repackage the two .nb files into a single nbh image so we can flash them, s
1) Start duttys good nbh tool:
2) click the "NB to NBH"
3) Click the First Splash and select the MainSplash.nb file, click the second splash and select the SubSplash.nb.
4) MAKE SURE that Device = HERM200, CID Type = SuperCID and Signature Size = 128
5) Now click the "Generate NBH File" button, save it on your desktop.
The next stage is to flash to the device using CustomRUU, simply place the custom ruu exe file in the same folder as the NBH file we just created and run it.
Select 'autodetect' and flash as normal.

Thanx a lot mate, can i use this on my Universal ? It's resolution is 640 by 480.
Is there any way, i can extract the operator splash screen i.e Main splash, from my current ROM ?

well I won't be able to help here as I have a hermes and I can tell about that. Hoping someone else might help you.

Custom bootsplash screen

hey there, this post's for anyone out there who's really into messing with their phone and wants to set up a personalized bootsplash screen (i.e. the first image on the screen when you boot the phone)
you'll probably be familiar with the start-up images that you see on powering on your phone...from what i've found, there are 3 different screens that are displayed before you reach you today screen-
1-the manufacturer's boot image (the one with the htc logo)
2-the operator's splash screen (if present, i've found some phones do not necessarily include this or leave it empty r black)
3-the gif animation
images 2 and 3 can be changed from the advanced config tool or adding files in '/windows' folder
but for those who really want their phone to be unique the boot splash image, no. 1 above, is really hard to get on (took me three days of searching trial and error to finally get it done)
so here's a simple walkthrough for anyone else like me who want to do it too...
first you need to get the right tools...
a) go to forum.xda-developers.com/showthread.php?t=351136 and get the flashbootsplash.zip
b) next go to forum.xda-developers.com/showthread.php?t=375980 and download the splashtool.zip
both threads have given their own methods but i couldn't get them to work on my (old) gene even after numerous tries and my poor gene was down with the horrid green bars of failed attempts
now to get our hands dirty...
0. extract the contents of the zips into their respective folders
1. find an image file that you want as your boot screen and get it into .bmp format with resolution of 240X320 and bit depth of 24 (you can open your .jpeg in paint and use the 'save as' function to do this)
2. now run nb_image_converter.exe from the flashbootsplash folder extracted from zip file from first link (link a) and load your edited .bmp file, and then save it as splash.nb
3. now run GeneBootSplash.exe, then open your splash.nb that was created in the previous step, a gene_splash.nb will be created in the folder
4. copy this gene_splash.nb file into the splashtool folder which was extracted from the zip file from the second link (link b)
5. now run htcrt.exe, click on build, select your device from device list, in the firmware section go to splash option (click on the '...' next to 'Splash') and select the gene_splash.nb file copied in step 4 and then click on build
save file as RUU_signed.nbh
6. lastly, copy this .nbh file into your ROMUpdateUtility folder and run ROMUpdateUtility.exe to flash the .nbh file and you're done!!
that's all there is to it...
special mentions to- Vukile and M-Amine whose threads helped me get the job done and to the site for being as amazing as it is!!
*this is my first thread here so pardon it if it sounded too tacky*