Rom cooking tutorial for hx2000 series
We will need:
mamaich's tools:http://mamaich.uni.cc/wm_re/imgfs_tools.rar
hx2000_tool: http://rapidshare.com/files/7435199/hx2000_Tool.rar.html
PEID: http://rapidshare.com/files/10292835/PEiD.rar.html
1. Open the program hx2000_tool.exe
2. There are two buttons: unpack & pack. Push unpack and select the nbf file of your rom. From extraction we take the nk.nba in the same folder as the nbf file is. put this file in mamaich tools folder
3. Now we will use mamaich tools.
Open a command prompt window and go to mamaich tools folder. Then run:
prepare_imgfs nk.nba
viewimgfs imgfs_raw_data.bin
And now we have the Dump folder with the extracted rom's files.
4. With this commands:
addfile(filename)
delfile(filename)
we can add or remove files.
When we finish all changes that we want to do we use the command:
buildimgfs
5. After run the command:
make_imgfs.exe nk.nba
6. We execute again hx2000_tool.exe to pack the new rom.This time we select pack(we must move the nk.nba back to the folder of the nbf), we check the option Pool size and we select from the list the pool size.
7 Correct the crc
For this we use the PEID program. Run PEID and select your rom's nbf file. Push the arrow on the lower right corner and select plugins -> crc32. Appears a small window.Enter the crc of our rom(for sp33752 the crc is E7A8B309) in collumn New crc. Check the "Overwrite mode" and press Fix.
8. The rom is ready for flash to the device.
Note:
These are translated from 4pda.ru( thanks to russian developers)
and I haven't more information for you. More you can find in 4pda.ru
great
Great!!
I think this is instruction of how to delete and add files from and to a ROM.
Dump a ROM out then delete/add files then pack it back...
Great work translator and the Russ.
Dancer69 and others... can you find me the info how to flash my hx2190b ?
I keep getting mismatch SKU when I tried to flash ROM WM6 from Rom version 1.00.00H
Thank you and waiting for your answers
I don't know if you already tried this but I read in 4pda.ru(from what I understand cause I don't know russian and I use wordlingo for translation and its not good) that someone with 2190b succeed to flash with this way:
He run the ruu utility from sp33003 and when pass the check he replace the EPAKROM.nbf with the nbf from wm6(first rename it).
XIP extraction
Additional information to your cooking tutorial : How-to extract XIP for HP2xxx
RomMaster 2.3 is needed (with -b option)
http://rapidshare.com/files/84961371/XIP_Tools.rar
You need nk.nba (from step 2 of dancer_69's tutorial):
> Rommaster.exe nk.nba -w 5 -b 0x00280000 -x -o xip.bin
Create an empty directory named XIP (aka : > mkdir XIP)
> Dumprom.exe xip.bin -5 -d XIP​
You wil found the XIP in XIP directory!
WM 6.5 rom cooking newbie
Ok...I am trying to remove as much unneccesary stuff off the wm6.5 rom for my iPAQ hx2410 as possible like bubble breaker,etc. I dont really know what else I can remove witout hurting the whole system so I am wondering what else I can remove that can make it lighter...also I want to replace windows media player with core player but I only have the cab file for core player and when I try to build it, there is an error...How can I add new programs without these errors??? Also, I followed all the necessary steps posted above except the last part with the peid file i was supposed to download...It says it was a virus so I found an updated Peid but i didnt see the option to finish that last step..I am very very new at cooking so anything u can advise me about doing so would be helpful..THANK YOU IN ADVANCE!!!
Is there a semi-specific list of files which are safe to remove? I followed the steps and I have a dumped ROM, but now that I can play with the files, I don't know what to remove without destroying dependencies or killing the functionality.
Related
how i can edit WM2003SE ROM file? (NK.nbf) the er2003edit open the file...
write "ROM Type: Unknown" and i cant do nothing... no add file no remove files no extract... just nothing... someone know about this something?
ROM: http://forum.xda-developers.com/viewtopic.php?t=13588&postdays=0&postorder=asc&start=0
With ER2003Edit you can not remove/add file from NK.nbf, only from MS_.nbf
Make sure in the file open dialog window (the one that opens when you choose file/open) you do NOT select "Auto Detect" as file type.
Where i can get or how i can create MS_.nbf file ?
And how i upload it to my Device ?
i got the rom with 2 files Radio.nbf and NK.nbf ... if i put it in same directory the Upgrade will upload the MS_.nbf too ?
MS_.nbf contains the extended rom
several can be found in the himalya upgrading forum.
and yes an upgrade exist out of three files :
OS = NK.nbf
gsm... = radio_.nbf
Extended rom = MS_.nbf = a few updated drivers, extra applications, personalisations for each country/ operator,...
see http://wiki.xda-developers.com/index.php?pagename=HimalayaRomkitchen for more info
i wrote a new tool that you can use to read the rom image, it can be found at:
http://nah6.com/~itsme/bkondisk.zip
Code:
usage:
first copy bkondisk.exe to \windows on your device, then:
prun bkondisk [targetdir]
will save all partitions on all volumes in files on [targetdir]
prun bkondisk -v0 -p1 [targetdir]
will save a specific partition on [targetdir]
prun bkondisk -v0 -b0 -n1 \firstblock.img
will save the specified blocks to \firstblock.img
prun bkondisk -i
will only list disk info in the logfile "\bkondisk.log"
-v0 or -v1 to specify the volume
-p0, -p1, etc to specify a partition
-b0 etc to specify a starting block ( ignoring partioning )
-n32 specifies to read 32 blocks starting at the above block.
note: you DON'T need to put quotes around directories with spaces in it.
when no path is specified, files will be created in the root.
Thanks! I've got a couple of questions... it extracted the following files:
bk_00_0000.img
bk_02_0005.img
bk_03_0025.img
bk_06_0001.img
bk_08_0175.img
What do these files refer to (which one is the ROM, etc). Also, is there a way to write these backups back to the phone? It would be a great way to try out test roms and get back to my original T-Mobile ROM if necessary.
bk_00_0000.img - IPL : ONBL1 + ONBL2
bk_02_0005.img - GSM + splash + gsmdata + simlock + serialnrs
bk_03_0025.img - OS
bk_06_0001.img - SPL
bk_08_0175.img - userfilesystem
Is there a way to write them back to the phone? or is that not possible...
is it possible to get a .nbh files out of these files?
My idea would be to "glue" the 4 files together (bk_00 to bk_06) in one file, rename the file to RUU_signed.nbh and exchange the RUU_signed.nbh created by the RUU.exe in \Profiles\[user]\Local Settings\Temp\pftxx.tmp with this one and then run on the RUU.exe with the modified .nbh
for example in DOS:
copy /b bk_00_0000.img+bk_02_0005.img+bk_03_0025.img+bk_06_0001.img RUU_signed.nbh
Is it that simple?
EDIT:
Ok this easy way doesn't work.
RUU says "Error 238 - File read"
Maybe some kind of checksum is missing....
Three questions for itsme
1. Could these files be used to create a nbf file to flash from the sd card as a backup?
2. Would it be possible to modify sim/cid lock?
3. Are these files in raw (dump) format that could be edited in hex editor?
P.S. Thanks to your other posts (works) that helped me figure out the whole sd card flashing thing for the Dash.
Maybe this helps a little bit to get ideas.
I have been searching here for nights - this is what I found so far:
1. I think it's similar to the Hermes - nobody found a way till now - the first step is to modify a signed .nbh, deleting works but not adding a file:
Hermes - how to dump ROM
Hermes - new custom ROMs
Hermes - ROM cooking and Bootloader MFG 1.01
aChef ROM Utils
2. This is the way Imei-Check is CID-unlocking - investigated by pof:
Reverse Engineering the Herems imei-check unlocker
Maybe there is another way like Zone-MR is doing it for the Star100/Qtek 8500
Star100 Unlock procedure but here you have still to decryt/encrypt the block in my understanding and therefore you have to find out the key
3. I didn't find anything about this so far, but I think the information is anywhere at XDA-Developers
EDIT: here (nl)itsme wrote:
.... but i am still busy, have not had the time to look at creating a tool to convert a memdump to a updater file.
Click to expand...
Click to collapse
so I hope he will find the time to create this tool
P.S: @itsme and @pof: I also want to thank you very much - you are heroes!!!
mar11974 said:
1. Could these files be used to create a nbf file to flash from the sd card as a backup?
2. Would it be possible to modify sim/cid lock?
3. Are these files in raw (dump) format that could be edited in hex editor?
P.S. Thanks to your other posts (works) that helped me figure out the whole sd card flashing thing for the Dash.
Click to expand...
Click to collapse
I got different files ...
After running the tool I got :
bk_0__0000.img (IPL? Is it same as bk_00_0000.img?)
bk_02_0005.img (GSM + splash + gsmdata + simlock + serialnrs)
bk_03_0025.img (OS)
bk_06_0001.img (SPL)
bk_08_0185.img (?????)
I did not get bk_08_0175.img, though.
Hints?
On the other hand, is it possible to extract files out of IMG files?
Thanks.
1. Download perfect Rom Koch from Dutty http://forum.xda-developers.com/showthread.php?t=297257&highlight=koch
2. download HTC64 Extended ROM Tool & imgfs_tools
3. convert nk.nbf 2 nk.nb
4. run prepare_imgfs nk.nb -nosplit
5. run view_imgfs imgfs_raw_data.bin
6. somehow copy all filenames from dump directory to listimgfs.txt (except dirs and *.dsm) i use totalcmd
7. copy nk.nb to koch dir
8. make dir nk.nb
9. copy initflashes.dat, user.hv, default.hv & listimgfs.txt to nk.nb dir
10. run koch, select rom nk.nb, after that it should tell U that proj. already exist or smth like that
11. do what U need 2 do
12. compile-output is nk.nb
13. run prepare_imgfs nk.nb
14. run make_imgfs imgfs_raw_data.bin -nosplit
15. encode nk.nb 2 nk.nbf
15. flash
btw. i didnt try 2 flash rom yet, i was only curios if i can make it working. If anyone will try keep me posted
PS. i hope Dutty U are not against this post
PPS: it should work for other device that uses nosplit switch in prepare_imgfs
This work is just an edtension to Jugler's work which he has already posted hs kitchen.He has really made it so simple that anyone with average cooking skills can cook a ROM.Here are the steps, if any one needs
-Download Jugglerskitchen from here h**p://www.r*pidshare.com/files/47189318/Juggler_Samsung_WM6_Eng_ROM_Kitchen_0.1.rar.html
-Just use dumprom cmd and make dump of modules
-Use package tool to make OEM and SYS
-Manipulate/Change in SYS/OEM as per the desired result
-USe boot.rgu and boot.hv from any working Samsung i710/718 and place it in ROM/XIP folder
-Run Build OS tool, to et the dump
-Now RUN Build ROM cmd to make imgfs from dump..and Flasher ROM sunsequently
Flashing :
-Execute the blue exe file, and select "Detect"
-Disable all the things in Async, mean all, USB,COM etcetc
-connect the USB data cable to phone, after putting it off
-when connected, hold down the D Pad down direction and while doing so, power on
-Flasher will automatically detect and flash, Eboot, and ROM.
-After Flash Do hard reset by pressing Call end and Call accept buttons+power ON
Thanks to Juggler, and very good articles in 4pda.ru and other PDA Gods in this forum
hi! hdubli
had you test that roms with I710 ? i want change lang for i710
Any one knows ?
You try to search for "splash screen"
Which model of phone you have? I've made my own for 838 pro
yeah,i have 838 pro too...can u explain step by step how? thx before u explain...
Follow this link http://wiki.xda-developers.com/index.php?pagename=Hermes_Dialers
Here's the basic steps
1. The app you download only works on XP (some xp may missing some of the *.dll file, you may search on the internet for the missing dll file that required).
This Can ONLY Be Done On XP (nb_image_converter.exe dont like vista!!)
Firstly create your splashscreens using your favourite picture editor (PSP, Photoshop etc...), both these files MUST be 240x320 and saved as 24bit bitmaps:
Name of Image Size Type Description
* MainSplash.bmp 240x320 .bmp the first splashscreen you see
* SubSplash.bmp 240x320 .bmp the second splashscreen you see
* welcomehead.96.png 320x320 .png the WM splashscreen
Save mainsplash & sudsplash into Custom Splash
Save welcomehead.96.png and paste it into the /windows folder on your device (overwriting the current windows splashscreen).
Copy files "nb_image_converter.exe" & "padding.nb" into Custom Splash. Now run "nb_image_converter.exe" load both images, save them as Main.nb & Sub.nb.
Next open a command window, and place Custom Splash Folder in Root of C:
In the command window type the following:
cd c:\custom_splash (enter)
copy /b Main.nb+padding.nb MainSplash.nb (enter)
copy /b Sub.nb+padding.nb SubSplash.nb (enter)
dir (enter)
The final command (dir) will list the contents of the directory, the filesize of MainSplash.nb and SubSplash.nb MUST be exactly 262144 bytes
or you should NOT continue (would produce possibly FATAL results for the device)
We now need to repackage the two .nb files into a single nbh image so we can flash them, s
1) Start duttys good nbh tool:
2) click the "NB to NBH"
3) Click the First Splash and select the MainSplash.nb file, click the second splash and select the SubSplash.nb.
4) MAKE SURE that Device = HERM200, CID Type = SuperCID and Signature Size = 128 (my 838pro = herm100)
5) Now click the "Generate NBH File" button, save it on your desktop.
The next stage is to flash to the device using CustomRUU, simply place the custom ruu exe file in the same folder as the NBH file we just created and run it.
Select 'autodetect' and flash as normal.
Thanks to URPREY for the tutorial