Related
I have an original non-branded Qtek 2020i newest rom for anyone who wants it.
AL_DT_WWE_11100_112_10200_Ship-freezz-empty.zip
This is the original update without ANY software, it's totally empty.
bck-org-rom.zip
The .cab files stipped from the rom (if you want to install any by hand)
Qtek_original2020i_nobrandingWWE_11100_112_10200_Ship .zip
The original generic Qtek 2020i rom (no branding)
Use it if you want to change back to an empty original device with all provider stuff removed.
hmmm can't upload files
hmm error: can't upload files....
Using the FTP method
Upload Error: Could not upload Attachment to ./files/al_dt_wwe_11100_112_10200_ship-freezz-empty.zip
Upload Error: Could not upload Attachment to ./files/qtek_original2020i_nobrandingwwe_11100_112_10200_ship_.zip
Upload Error: Could not upload Attachment to ./files/bck-org-rom.zip.
Can you please send me the files and I'll try to upload them,
[email protected]
or send it via rapidshare.de
hi.
How can extract files from a mpx200 rom? I tried to use tools from the forum but with no success. Mpx200's rom is a file with .img extension. As i see so far in forum, rom's file extension for pda is .nbf. Is there any way to convert .img file into .nbf so i can use er2003edit program? Any other idea-guide that could help to extract the rom from my mpx200(wm 2003) would be very welcome. I couldn't find any resources on the web about extracting mpx200 rom and that's why i posted in this forum. I hope that i'm not totally off topic.
Thank you.
Nikos
I had a play with this a while back, to try to get MPX300 compatibility with VJCandela.
I believe the rom files have have a "B000FF header" (open it with a hex editor). Apparently splitrom can reassemble them into a rom we can play with, but it became more urgent to finish VJCandela then continue with this, so I put it aside. If you get anywhere on this, please PM or post so that I can see if I can make VJCandela cross compatible.
Many thanks!
V
I can upload a dumped mpx200 WM5 ROM to xda-developers FTP if needed.
These IMG files are somehow non-standard B000FF, I was unable to use splitrom to convert them to normal file.
You should dump ROM from a device, then remove a hole in the middle (probably MPx200 has 2 ROM chips at different addresses), then edit it manually because some idiot incorrectly edited that ROM to remove DevAuth.exe and broken its internal structure. After that you'll get a complete dump with broken ril.dll and gx.dll.
I wonder how that incorrectly patched ROM can even boot.
That would be interesting Mamaich. I'd appreciate it if you can.
Can we dump a live rom normally then? I'll try to speak to a guy with an MPX300 to get it dumped if possible, and try to upload it if he's successful.
V
hi.
I found so far that it's possible to convert the .img file, which is
used to update mpx200, into a .bin file. I opened the .bin file with a
hex editor and it starts with B000FF as you said. I don't know where i
can use this information or what it means. As you said it's the
header. When i try to dump rom with dumprom.exe i get an error message saying "unable to determine loading offset for out.bin". Looks like i have to find this offset myself and give it to dumprom. Could you help
me somehow on this?
Also where i can read a few things about the rom structure, xip and
stuff to understand what's going on.
Thanks!
EDIT1
Also tried with splitrom.pl.
With command splitrom.pl out.bin it gives me the following
B000FF entrypoint: 00000000
!!! your rom is not known to me: md5:
68847f4d859a242753798d9d0e205144
!!! your bootloader is not known to me: md5:
ea25e7468c09bf09a384a94cb4dcc67c
no operator rom found
no bitmap found
xip regions not found: 82d80000=LANG, 82040000=SMARTFON,
82d00000=OPERATOR, 82f2
0000=OE
And a lazy question. If i finally do it, i will get a folder in my
disk with all windows components unlocked and ready for modification?
EDIT2
Reading a few things about splitrom it says that it can handle bin
files with B000FF header. In our case(mpx200) we have a bin with
B000FF header. Right? So we can use splitrom to make the nk.nbf file.
An example on how to use splitrom.pl is the following.
perl splitrom.pl cfg/rom.nb1 \
-rm tmp/xda1.bin:0x81740000 \
-rm tmp/xda2.bin:0x81b00000 \
-rx tmp/xipchain \
-rb cfg/bootimage.bmp -ob 0x81ec0000 \
-rl cfg/bootloader.nb0 \
-wo nk.nbf -t nbf -n PW10A1-ENG-4.01-007
On the above, he opens rom.nb1 which is his rom file. Probably the
plain rom image format, i don't know the type. Then he refers to
another 2 files xda1.bin and xda2.bin. In my case i have only one
file, out.bin . He also uses bootloader.nb0, i don't have it or
something similar. Finally he writes nk.nbf file and gives it a
header. In my case i will give a B000FF header.
End.
nicktgr15, for extract files from 2002 and 2003 firmware you can use tools from http://onk.nm.ru/mpx200
Great site my friend onk. Great site. I hope i'll find something. Thank you.
Hi nicktgr15!
Any luck with the ROM extraction for MPx200?
Anyone here on this board can comment too.
I went to the link http://onk.nm.ru/mpx200 but can't really get thinks going with the WM2003 for MPx200.
I've the ROM but using dumprom.exe, I got something like 'can't determine the memory offset'.
So...where so I start?
I really need the SIMManager & Resource Manager for my WM5 MPx200.
Also, would like to have the SIM Tool Kit working on my phone since there's no way to interact with the SIM features.
Thanks anyone!
Please Upload the Dumped WM5 MPx200 Rom you are saying about!It will be a huge step!!!We can edit it,fix some bug,even make it work without the need of the SD Card...!!!
I've uploaded ROM dump to uploads/mpx200_dump directory on xda-developers FTP.
Buildimgfs tool is useless on this ROM, because 2 files in it are broken. Maybe addfile/delfile would work (but they would break data in imgfs_removed_data.bin). And of cause you have to manually remove hole inside ROM before working, and inject the removed data back before flashing. And figure out the format of imgfs_removed_data.bin and recreate it yourself.
For dump WM5 files you can use tool http://buzzdev.net/index.php?option=com_remository&Itemid=100&func=fileinfo&id=83
You must create directory "\Storage Card\" on SD and run this program on smartphone
I think this program work on many other devices with wm5
PS. you can read http://www.wce.by/forum/viewtopic.php?t=1517 (Russian language) about tools for firmware
Onk nice site but i can understand a thing!!!
Have you made a fixed version of wm5 for Mpx200?If yes where i can download it?
My goal is to make a cut down wm5 version that can fit on the 32MB ROM of MPx200...can that be possible?
I'm downloadl WM 2005 for MPX200 smartphone Build 14343 from sendmefile , but link id dead ;(
after extract files from archive, I convert part2.bin and part3.bin to CMCS IMGAGE (use BINtoIMG) and flash images to mpx200 (use Motorola Upgrade Wizard 1.8.x)
wm5 for mpx200 used SD card like /Storage on wm2003 and wm2002 (for save config, datafiloes, program etc)
Internal flash used only for firmware
for replace some files from firmware you can place it to /Windows on SD card
BUT! This build of WM5 work on 80-90% of mpx200 devices ;(
some devices can't run wm5.
And the speed of operation WM5 strongly depends of speed used SDcard (x80..x132 recomended)
Your file mpx200_wm5_bin_B00FF.7z (17460816 Bytes) is now online.
Your Download-Link: http://rapidshare.de/files/14495499/mpx200_wm5_bin_B00FF.7z.html
for extract files you must use 7zip archiver www.7zip.org
what?is this a fixed wm5 version?
does it works without the need of the SD?
NO
this version NEED SD
is there ANY chance to remove some files (Images,Sounds,maybe some prorams) from the WM5 ROM and make it work without the need of the SD?
I believe then,the OS would be STABLE and work Faster.
Let's make a Try!!!
What do you think?
part1.bin сontains magneto with use built-in flash memories (WM5 build 14122)
It is necessary to correct a little. Find in an firmware
Code:
0BFC440: 65 6D 72 65 67 69 73 74 │ 72 79 2E 64 6C 6C 00 44 emregistry.dll D
0BFC450: 65 76 41 75 74 68 2E 65 │ 78 65 00 62 74 68 61 74 evAuth.exe bthat
and change DevAuth.exe to AuthDev.exe for disable Device ID check
But this firmware contains one more "protection" - works before some date.
If before flashing set date 2004 - works normally. If the current date - show a modal system window with the message that is the version for developers.
How to disable this "protection" - it is not known yet
And it is not known about locking the register in this firmware
PS: In Firmaware structure ROM similar 2002/2003 is used. Use dumprom for extract files
PPS: my page is updated. Added simple manual about firmware and tools
mamaich said:
I've uploaded ROM dump to uploads/mpx200_dump directory on xda-developers FTP.
Click to expand...
Click to collapse
Can you please upload this dump somewhere once again? as it seems /mpx200_dump is already deleted from FTP.
Hi all,
I finally decied to upload my modifed ROM in case anyone wants it. Its at:
ftp://xda:[email protected]/Uploads/pauls_modified_alpine_extrom_plus_radio104.zip
This is a ROM image which I modifed, using the O2 version 1.11.169 as a base.
Most of the O2 stuff is now gone, except for the battery meter and the
connection settings (WAP, GPRS, MMS, etc).
It includes my own startup screen. If you don't like this, please write to me
sending your own startup screen. Size must be 240 pixels wide by 320 pixels
high, BMP or NB format. When (and if!) I get time, I will make a new ROM with
your picture and send it to you.
The Radio ROM version 1.04 is also included. If you don't want to install
this, simply delete the "radio.nbf" file from the ROM image directory before
running the ROM update program.
The OS ROM is not included. Unless you've really screwed up your PDA, you wont
need this. If you do, just copy "nk.nbf" from another ROM update file into the
directory where you unpacked my ROM, before running the ROM update program.
There is a file called README.TXT within the zip archive which gives further information and lists the entire contents of the ROM file.
Any questions, feel free to contact me.
cheers.
Hi!
Can anybody grab own English ROM, zip'ed it and send to me?
How to do it describes here:
Setup
- rename 'grab_it_xx.exe' to 'autorun.exe'
- create folder '2577' on your (better empty) Mini-SD card (You need card more then 128 Mb)
- copy 'autorun.exe' to this folder
That's it for the "setup"
Usage
Now every time, when you insert this card into PPC it will grab the ROM image and save it into root of the card as 'dump.bin'.
On my French device this tool asks me the confirmation. Once done, it will beep the default sound. After release card may be error message "Can't create card" - ignore it. Message boxes are only shown in case of error.
IMPORTANT NOTE (thanx MDAIIIuser)
YOU MUST NOT put it back into another device!!!
YOU MUST read the SD with card reader on your desktop PC.
Otherwise, you will rewrite the dump with your own ROM!!!!
This ROM dump file can be then further processed and converted to flashable formats. It is very good for compress.
Tool is here:http://forum.xda-developers.com/atta...4&d=1119937614
BR varix
[email protected]
same for me please
thanks and regards
mrking
Problem with my hw6915
Hi. I have hw6915 and i wont change rom from deutch to english. I have english_dupm_file.bin and i have question how I install this in my PPC??
tested! english rom
commanddos said:
I have successfully changed OS language follow by steps described by Drahtman
BTW Thank you man! You are the king!
I would also thank wikidorg and many of you people for your shared knowledge.
Conclusion is so simple and so funny at the same time. Before you start, always RTFM
To get process more easy and lazy I have added files I used to change the language:
CEOS.rar english OS (the real one not the fake!)
aWizard_1.2.zip - contain everything what Drahtman described
SpbPocketPlus4_setup.exe
You can reach this compressed packet over here.
http://rapidshare.com/files/76603189/ENG_CEOS.rar.html
Once you have it just follow by Drahtman steps.
Good Luck
Commanddos
Click to expand...
Click to collapse
Here you are but in future search the forum first for Drahtman instructions
ROM
Fully working!!
Please THERE IS NO NOTIFICATION of flashing ROM - DO NOT UNPLUG THE ipaq !!
Flashing program shows some numbers when it starts to flash and that's all.. After aprox 18minutes it's done with skip to the main flash menu and on ipaq there is NO SIGN of been flash..
Make HR and that's all ..
French, Deutch and all the others are gone..
Version ENGLISH 1.21
(PS: does exist any new one? )
ENG ROM
Pleas send me english rom for iPAQ 6915. Thanx my mail is [email protected]
MrKing said:
same for me please
thanks and regards
mrking
Click to expand...
Click to collapse
nbh english
http://rapidshare.com/files/279924399/englishOS.rar.html
English nbh
varix said:
Hi!
Can anybody grab own English ROM, zip'ed it and send to me?
How to do it describes here:
Setup
- rename 'grab_it_xx.exe' to 'autorun.exe'
- create folder '2577' on your (better empty) Mini-SD card (You need card more then 128 Mb)
- copy 'autorun.exe' to this folder
That's it for the "setup"
Usage
Now every time, when you insert this card into PPC it will grab the ROM image and save it into root of the card as 'dump.bin'.
On my French device this tool asks me the confirmation. Once done, it will beep the default sound. After release card may be error message "Can't create card" - ignore it. Message boxes are only shown in case of error.
IMPORTANT NOTE (thanx MDAIIIuser)
YOU MUST NOT put it back into another device!!!
YOU MUST read the SD with card reader on your desktop PC.
Otherwise, you will rewrite the dump with your own ROM!!!!
This ROM dump file can be then further processed and converted to flashable formats. It is very good for compress.
Tool is here:http://forum.xda-developers.com/atta...4&d=1119937614
BR varix
[email protected]
Click to expand...
Click to collapse
link die! ineed tool and guide,help mehp6915 "no gsm")
[email protected]
download no longer available
this file has been removed from server/
Hello developers,
maybe some people know, that there is a new TG01 section in this forum.
I personally own this phone and like it very much. Only the Rom that Toshiba provided us isn't very good and stable. It has many problems, that need to be solved
The friendly guys of WMPowseruser told us, that they want to try to cook a Rom for the Toshiba TG01.
But until now nothing happens, because nobody knows 100% sure what is needed to be done, to get a working Rom for the TG01 cooked...
So I decided to gain more information about the Rom Development process for WM-Phones.
I want to ask you what is needed to get a working cooked Rom for our Phone.
Do we need a Hard-SPL? Or do we need to extract the Rom out of our TG01, decrypt it so that we then can cook a new Rom?
You may notice, that I'm not an expert on this topic, so I rely on your help.
There is already a tool made by the member Cotulla to encode/decode TSW-files. http://cotulla.pp.ru/Misc.html
And it is also possible to flash every Rom that Toshiba provided us with this method:
http://forum.xda-developers.com/showpost.php?p=5405267&postcount=325
So it's possible to flash for example a german O2 Rom on an english TG01 that has the Orange UK Rom originally on it.
But I don't know if that helps us for our development.
We already gained 250$ for the development and I think that we're also able to gain even more money if it's needed!
We need serious help
I thank you in advance for your answers to this thread!
Every answer is welcome.
I also wish you a nice remaining Sunday!
Best regards,
Manuel
agree
TG01 have come to market for almost 1 year, hopping the cooked rom can be made early!
TG01
TGO1 MAIN bin file needs decrypted then it's full speed ahead
we need an experienced hacker
TG01
can the mods sticky this post we need it's full attention!!
Ok here is the acutal development status:
Progress of the Project WM6.5.3:
- With SDDL+ made by stepw we can flash any Rom on the TG01
- With Cotullas Tool we can decode/encode .tsw files
(The .tsw file is the file, that Toshiba offers to download from their homepage to update to WM6.5.3...so these .tsw files need to contain the whole OS and all system files that are needed to run the TG01)
Cotullas Tool can make a .bin file out of the .tsw file that we got from Toshiba.
But there are two problems with that:
1. We cannot be sure, that the Decoder works 100% right.
2. The .bin file we get when we use Cotullas tool seems to be not normal. We cannot extract it.
If I open it with Isobuster than I first see only the one track is included in the .bin file.
But then I let Isobuster search for more files after their signatures in the .bin file, Isobuster finds the following files:
00003808 , \Recovered File 01.mov
00112925 , \Recovered File 02.gz
00115498 , \Recovered File 03.png
00115530 , \Recovered File 04.png
00115533 , \Recovered File 05.png
00115563 , \Recovered File 06.png
00115791 , \Recovered File 07.cab
00115962 , \Recovered File 08.gz
00116325 , \Recovered File 09.png
00116351 , \Recovered File 10.cab
00116354 , \Recovered File 11.cab
00116385 , \Recovered File 12.cab
00116391 , \Recovered File 13.cab
00116417 , \Recovered File 14.png
00116420 , \Recovered File 15.png
00116421 , \Recovered File 16.gif
But for example the .cab files can't be extracted...it tells my, that the archive is damaged.
Well and we cannot be sure, that the above written files are the only content of the .bin file. Maybe Isobuster didn't find the others that are included in it...
So what we need:
- A person that understands the format of the .bin file (unencrypted .tsw file) so that we can extract the .bin file properly and get all of the system files and the OS out of it.
After that we can modify the files and create a new .bin file with the modified files included. Than we only need to encode it again, so that we have an flashable .tsw file again.
We could flash the new .tsw file with the SDDL+ made by the user stepw.
It would be very nice if someone would answer me and get in contact with me, that can help us to get a working WM6.5.3 Rom onto the TG01.
Thanks in advance!
I wish all of you a nice remaining Sunday evening!
Best regards,
DunkDream
hello,
to extract the rom, i used the raw-files.
i used "itsutilsbin"-tools. after dumping i get an extractet oem/sys-folder with known (typical) foldercontent and -structure.
here is a list of extractet raw-files
View attachment luste.zip
any lately news?
waiting...h
bird_9527 said:
waiting...h
Click to expand...
Click to collapse
The problem is in the nb0 file generated after using the cotulla tool.There are some extra bytes with checksum..i think only cotulla can make it possible.I tried manually with hexeditor..it fails..in short, we need another tool/program which can remove extea bytes, give us the normal nb0 file, which can be dumed recompiled and repacked with those removed extra bytes with the sme or modified checksum.Then we can have the custom ROM.