Hi,
I am new to this site and have been reading various posts and sites trying to piece this together, but I definitely have areas in which I am confused.
Please correct anything I have wrong.
I have a xv6700 and been attempting to extract the ROMs out of curiosity.
If I am correct these (HTC) phones have 3 separate ROM sections.
ROM - main OS
Extended ROM - Provider add ons
Radio ROM - Deals with radio hardware specific to the device
I used mamaich's TestDump.exe to dump what I assume is my main ROM. This file was 60 meg.
I then used dumprom -5 to extract files from this image file. I read some where that the imports table may be shifted by a DWORD but for example coredll.dll looks fine.
The resulting files don't look to be the whole OS.
For example: Some programs I downloaded have imports from cellcore.dll which is missing from my dump.
Are this the appropriate path for extracting the ROM?
I have seen mention of unlocking the Extended ROM and have looked at a download of said Extended ROM. It does appear to contain cabs related to provider software.
What is in the Radio ROM and how does one extract it?
There are also some terms I can't seem to find definitions for, mostly file types.
I have downloaded other ROMs in order to study them and have seen these types.
.nbk
.nba
PRL
PRI
I really want to understand the OS before I consider modifying it. Has anyone been successful modifying the ROM for this phone?
Thank you for any help provided and will gladly take links to the information. I am not looking to be spoon fed information but rather I am a fellow traveler asking for directions.
dumprom can dump files only from XIP section
You should use my viewimgfs tool to dump files from IMGFS section or rdmsflsh.pl script by itsme. itsme's script reconstructs DLLs to a normal form that are ready for decompilation.
I have an iPAQ hx2790 (JPN) with WM5 and I was wondering if someone can point me in the right direction of extracting files from the ROM area. I did some searching and also looked at the WM5 ROM Tools thread, but I tried all these tools in vain. I tried dumping a ROM image from my ppc (using the tool that auto-dumps ROM into storage card) and extracting that but it didn't work (I believe it locked up). I tried dumping the original .nbf ROM upgrade file provided by HP but that didn't work as well. I just need to extract 3 .dll files so if someone can point me in the right direction, I'd greatly appreciate it!
You should decrypt NBF file, then the tools would work.
Currently there is no decryption tool available, you should make it yourself.
I don't remember the encryption used in HP NBF format, but it should be simple, maybe XOR with a constant string, and maybe some garbage added after each block.
Thanks for your reply mamaich, I didn't know HP's NBF was encrypted. Is there source code for a decryption tool someone made for another NBF format already?
Hi all,
I'm trying to edit ROM on a new device (FSC Loox T830) using the provided tools for the Scoter Kitchen.
First thing that I'm trying to do is unpacking the ROM, repacking again and flashing to see if everything is working.
1) I have already a ROM image, by using the following commands I have the dump:
* prepare_imgfs myrom.rom -n
* viewimgfs imgfs_raw_data.bin
2) Then I repacked everything again with the reversed tools and flashed the device -> Result was OK
--
as the result was ok, now the second try starting again from the beginning:
This time I've dumped the ROM again with the same tools and then run DMP2PKG program, which highlighted yellow as missing the following:
d92a4f0a-378a-4482-8fd3-bd127a05e4de
723fb954-d931-4348-b672-82a188e587b5
but worked error free, then I've copied into ROM\XIP folder boot.rgu (taken from my device) and run PKG2DMP. It worked and halted with an error "initflashfiles.dat not found"
I have then compared the original default.hv user.hv and packages.sof files (converted to .txt) with the unpacked/repacked by PKG2DMP program. Here are the differences:
differences on user.hv:
Original Dump:
[HKEY_CURRENT_USER\Software\Microsoft\Windows]
"LangDbPath"="\\mxip_lang.vol"
"DbPath"="\\mxip_initdb.vol"
Repacked:
[HKEY_CURRENT_USER\Software\Microsoft\Windows]
*missing line*
"DbPath"="\\mxip_initdb.vol"
Difference on default.hv:
Original Dump:
[HKEY_LOCAL_MACHINE\System\ObjectStore\RegistryUpdate]
"packages.sof"=hex:C6,E4,A2,C5,90,21,C8,D4,C0,BD,B5,B2,6D,1E,12,D5
"6461d201-3f67-9f90-77bf-e6f0a2bfed3b.rgu"=hex:3B,EC,29,3E,E8,6B,48,B1,B0,85,CA,55,C4,EB,58,B3
"boot.rgu"=hex:47,C0,24,EC,58,60,53,AA,38,48,F0,BB,50,91,44,E6
Repacked:
[HKEY_LOCAL_MACHINE\System\ObjectStore\RegistryUpdate]
"packages.sof"=hex:9E,EE,79,81,ED,31,54,86,5E,0F,0F,A9,78,4F,28,3B
*missing line*
"boot.rgu"=hex:F8,AB,E2,1C,48,C7,75,A3,1B,8F,E6,69,B0,25,EA,14
This is very strange IMO as I've made no changes to the packages...Just unpacked/repacked to test...Obviusly the flash with the above changes blocked the device prior to boot.
Any help is really appreciated! (Bepe , JKR?)
PS: I've opened the same topic on buzzdev.net forums
Thanks & BR
Hi, you have to find that 6461d201-3f67-9f90-77bf-e6f0a2bfed3b.rgu... is in on your device?
bepe said:
Hi, you have to find that 6461d201-3f67-9f90-77bf-e6f0a2bfed3b.rgu... is in on your device?
Click to expand...
Click to collapse
Hi Bepe, first of all thanks for lightning fast reply!
Yes, both .dsm and .rgu are on the device, but not present in the dump.
.rgu content is the missing line from user.hv:
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Windows]
"LangDbPath"="\\mxip_lang.vol"
Why boot.rgu, initflashfiles.dat and this file are present on the device but not in the dumped Rom (which I downloaded from the official web page of FSC) ?!
I have now looked and found also the other missing files which I'm attaching for you to have a look.
There is no .rgu file and they're not present in the dump as well as the previously mentioned files...
read your PMs ...
Hi all, I'm dilagently working on a wm6 rom for the htc startrek flip phone.
I was wondering if anyone knows how to dump a nk.nbh and re-copile it?
Also is it possible to take an os.nb and convert it to nk.nbh for uploading?
Any help would be great if you're interested in assisting see these threads:
http://forum.xda-developers.com/showthread.php?t=330694
http://forum.xda-developers.com/showthread.php?t=311776
Thanks!!!
decode the nbh file with NBHextract
then dump the OS nb file with mamaich's tools
and for building the nbh back.. don't know any tool for htc startrk.. (and I doubt that the nb2nbf_tornado works also with this. this generates a nbk not a nbf image)
I'm having an "old folks moment here". I'm cooking a ROM for my Fuze using OSBuilder and it will only get me as far as creating a new imgfs.bin. I need to convert that to an os.nb file and I can't remember how I did it manually with my old Hermes using the imgfs tools. I Would some kind cook be willing to help here? I have the ROM tool for conversion of a .nb file to a .nbh file.
jwzg said:
I'm having an "old folks moment here". I'm cooking a ROM for my Fuze using OSBuilder and it will only get me as far as creating a new imgfs.bin. I need to convert that to an os.nb file and I can't remember how I did it manually with my old Hermes using the imgfs tools. I Would some kind cook be willing to help here? I have the ROM tool for conversion of a .nb file to a .nbh file.
Click to expand...
Click to collapse
I suggest you ask your questions in 'Chef Central' forum here: http://forum.xda-developers.com/forumdisplay.php?f=612