Asus P552w ExtRom ( Extended Rom ) - Upgrading, Modifying and Unlocking

Hello. This is my first post here so please take me easy
I've just dumped 6 raw images from an Asus P552w:
2 of them have in the header some "ECEC" string and I guess those are some ROM images from that phone (just like other ROMs I've seen)
1 of them has some "XPR Rf" string in header and I guess is related with Radio ROM (I've saw inside other strings like: GSM, BLuetooth...)
2xFAT16 raw images with files. I can mount Fat16 images (using DaemonTools or from Linux) to see what is inside and I saw is the main FS of the phone and another one has only a few configuration files.
My problem is with the last image EXTROM (it has 16MB and is full with phone operator string "Orange" and operator settings):
1xFAT32 raw image which I cannot mount. This image has the FAT32 structure:
- MBR (end with 0x55 0xAA)
- File System Information Sector (begin with: 0x52 0x52 0x61 0x41 and end with: 0x55 0xAA)
and then after ~3000 bytes is the MBR (ended with 0x55 0xAA) again then only 0x00 and after ~6000 bytes is the MBR one more time , then some 0x0 bytes and then I think there are some files.
Here you have a diagram how it looks:
---MBR
---FileSystemInformationSector
---0x00... 0x00 (~3000 bytes)
---MBR (identical with the 1st one)
---0x00... 0x00 (~6000 bytes)
---MBR (identical with the 1st one)
---0x00... 0x00 (~37000 bytes)
---RAW FILES (I saw a lot of strings there)
Can someone explain to me what is with that ExtROM ? I've searched on this site and I didn't find some tools to dump files inside that image.
I've tried to mount this images with DaemonTools and under linux with no luck. (I've even tryed to do some edit inside that image)

Question
Hi.
This is my first post here too. If I don't bother you too much can you send me on private message how you did the backup for the p552 phone? I have one too locked to orange. I have also got from another forum a P552w rom image that the user I got it from Asus site. The update is no longer available from Asus and this is very strange. I didn't want to put that image on the phone yet because I want to do a backup first (ROM backup).

Check this tutorial: http://wiki.xda-developers.com/index.php?pagename=Hermes_HowtoDumpRom

I have tried following the tutorial but I was able only to dump the data from the extended ROM. When I was trying to save the other partitions I first checked for their length with -t parameter and I always got an error. It only worked for the EXT Rom (partition DSK4 and for the SD card.
By the way, you have dumped the rom from the ASUS P552W (the one that it is NOT sold by Orange) and has the wifi or you have dumped the ROM of P552 (that do not have the wi-fi ... or it is disabled by Orange)? Can you share your rom? If you want I can upload the Ext ROM from my device. I have a Asus P552 (from Orange Romania). It does not have wifi ... or it is disabled.
I have been able to make the firmware from Asus run on my phone ... but I don't want to use it until I can backup my ROM ... and find a way to put the original ROM back if I break something during upgrade.

I gave you a PM with my contact detalis. Talk there

eusuntdexter1 go to downloads extROM p552w
http://asusmobile.ru/board/viewtopic.php?p=201255#201255
You must be registered at forum for download
Filelist_ExtROM_p552w_ROU00:
- GM2WiFiDriver.CAB
- CABforLauncher.CAB
- CallFilter_0409.ARMV4I.CAB
- Disable_NITZ_registries_signed.CAB
- EnableSL.CAB
- EnableTATHidenMode.CAB
- install.OBM.NetworkSetting.CAB
- install.OBM.NetworkSetting1.CAB
- Micco_Battery2.cab
- MoveGettingStarted.CAB
- NVMProxyPatch_Signed_20081009.CAB
- PwrBtn_1022.CAB
- SetDefaultTheme.CAB
- shsettingsCountryCab.CAB
- StartupNetworkSetting.CAB
- Update_MSSIP_size.CAB
- BSP_GM2_MSLRIL_1028.CAB
- BSP_GM2Audio_570_1024.CAB
- ASUSTekBookmarksList.cab
- 1008CameraPatch.CAB
- CLENBOOT.GIF
- PWRONANI.GIF
- Installer.xml
- language_pack_ROU00
Click to expand...
Click to collapse

where?
I didn't see any thing.It's P535 ROM, not for P552w.Please check again.thanks
oh,are there all parts to cook a ROM? how to packet them to new ROM?

hpdefalcon said:
I didn't see any thing.It's P535 ROM, not for P552w.Please check again.thanks
oh,are there all parts to cook a ROM? how to packet them to new ROM?
Click to expand...
Click to collapse
extROM_P552w_WWE.7z - its attached file in to my post , available for downloads registetred users in attached file in to my post , for not registered users can not see file
process of preparing/dump/cooking for 552 ROM described previously posts on forum Asusmobile.ru
We users P535 dumped rom P552 to pull the new Asus Glide end etc. from OEM P552
so,mirror for download ExtROM http://upload.com.ua/get/900647107/

Hello,
Can any one of you share the "broadcom xxx.cab" .
I have an O2 Xda Zest that is made by Asus, but this phone has the microsoft stack and i think that Broadcom is a lot better.
Thanks.

Hi everyone, this is my first post on this forum so please, be cool as i'm kinda newb to windows mobile device
Has anybody been able to download the extended ROM provided by pak1to?
The upload.com.ua link does not seem to work...
thx.

ok, just forget it...google translation works fine, after all.
btw, same file, new link :
http://rapidshare.com/files/190571370/extROM_P552w_WWE.zip.html
Someone try out this archive? especially the "GM2WiFiDriver.CAB" file that is relevant to my interest..?
FYI, i recently get a p552 (without w, delivered by Orange France) and my aim here is to see if it's possible to activate wifi (and asus glide).

lezioul said:
ok, just forget it...google translation works fine, after all.
btw, same file, new link :
http://rapidshare.com/files/190571370/extROM_P552w_WWE.zip.html
Someone try out this archive? especially the "GM2WiFiDriver.CAB" file that is relevant to my interest..?
FYI, i recently get a p552 (without w, delivered by Orange France) and my aim here is to see if it's possible to activate wifi (and asus glide).
Click to expand...
Click to collapse
EXTROM is very easy to reach. The hidden partition name is ASUS_ROM. You type in TotalCommander the path \ASUS_ROM and there it is. It can be copied, deleted, writhed!!!
The GM2WiFiDriver.CAB is an updated driver (sdio.dll) for wifi, but the file is existing also in P552 Orange but is disabled by provider. I haven't find a way to enable it, yet.

i wasn't aware of that, thanks.
btw, even if you install the update for the wifi drv, it won't enable it 'cause if think the device is disabled from bootloader.

Can someone upload the p552w to mediafire filehost.
or send me this file 1008CameraPatch.CAB to test on wm6.5.

here you go :
http://meuhfolle.free.fr/asus/extROM_P552w_WWE/1008CameraPatch.CAB

lezioul said:
here you go :
http://meuhfolle.free.fr/asus/extROM_P552w_WWE/1008CameraPatch.CAB
Click to expand...
Click to collapse
Thank you!

Related

Original Rom dump LG KS20 WM6 - FR - SFR

Sorry for my bad English the translation FR-> EN made by an on-line translator
Hello,
The objective of this post is to allow each to modify its Rom in particular to correct the small youth defects of this quite new PPC under WM6.
Presentation of the animal...
Networks: GSM, GPRS and EDGE, 3G and 3G + ( HSDPA) ·
Mobile Windows 6 Professional ·
Processor tribande: ARM 1136EJS MSM 7200 400 Mhz ·
Screen QVGA of 320 x 240 pixels of 2,8 thumbs ·
internal Memory: 256 Mb ROM and 128 Mb RAM ·
removable Memory: microSD
http://www.pdadb.net/index.php?m=pdamaster&posted=1&cpu=a7200
From these characteristics we notice resemblances at the level of the processor and the reports with Kaiser.
1/Dump of Rom following the tuto of KS20_en_colère.
One thank you to him and in forums of http: // www.forummobiles.com
We have now four files
Part00 = 1.12M
Part01 = 5.00M
part02 = 65.38M
part03 = 150.13M
2/Reconstruction of Rom
Basic hypothesis - > the KS20 is close enough to Kaiser to apply him(her) the same step(initiative).
Thanks to BEDAV for excellent sound tuto on the www.win-mobile.com site http: // qtek9100.forumpro.fr/htc-p4550-tytn-ii-kaiser-f41/kaiser-reconstruction-d-une-rom-t8849.htm
We obtain reconstituted Rom named RUU_signed.nbh = 79 451 Kb
3/Construction of new Rom
Again thanks to BEDAV and www.win-mobile.com
http://qtek9100.forumpro.fr/htc-p4550-tytn-ii-kaiser-f41/kaiser-tuto-rom-custom-t9322.htm
Finally we have 4 files:
- Temp (contains the temporary files for your works)
- SYS (contains the logs of the builder(manufacturer))
- OEM (contains the logs of the operators phone)
- ROM (contains the BASIC BONE)
Check has this step of progress I can say that we find a multitude of thing, progs, the keys of the base of register, icones, DLL...
4/Questions
How to verify the integrity of Rom extracted to confirm or not my hypothesis?
How to relieve this Rom to obtain a base work (transfer the menu Lg and the other one superfluous!) the Seine and without bug (or almost).
How CID unlock the KS20? The dump can he help us?
Thanks to all for your precious help.
oh ... its on xda ftp ^_^ thx ... i will try to extract the videodriver and put on the HTC Niki!
Hello,
If you want I can put the directory OEM or SYS (or Dump) on the XDA FTP.
@+
lg-kS20
Hi all
probably this should not be posted under this thread ... but this is the closest on i could find
so applologies in advance
my issue is like that ... i just bought a brand new KS20 ..i was really happy in the beggining until i found that i am stuck with the GREEK WM6
is there anyway to change the ROM to English
let me point out that i am not looking for an original version of the ROM
thank you all in advance
G
Hello,
I think that it is possible. See the attached file for example. It is a translation in Chinese with 0804.mui
hi, how do you dump ks20?
have you the "ks20 usb modem driver"?
oussbaba said:
hi, how do you dump ks20?
have you the "ks20 usb modem driver"?
Click to expand...
Click to collapse
No, he do it with applications availible from this forum. And this dump cant be used with that LG flashing aplication
Do any body knows where I can find how to dump KS20 ROM from my KS20 for Backup purpose? I wanna backup my Traditional Chinese ROM for backup and flash EN 10c ROM. Thanks all.

Asus P525 NB0 Kitchen by Anper

russian version can be found on:
http://asusmobile.ru/board/viewtopic.php?t=7816
version 080302_1843
This is english translated version of tool for editing of P525 ROM made by Anper.
Sorry for not so quite good english.
Additionally attached utilities for preparing of GIF "AsusP525GIFConverterByMrToto.zip"
About util KitchenNB0.exe:
Warranty: not any, only can say, that not especially include any harmful code to that utility. And before new version posting was firmware changes in mine PPC that made by that util.
don't known if that util works on other models (don't have it), it's tested only on my own ASUS P525. Flashing was made only thru USBloader.exe (don't knew how - read asusmobile.ru or anywhere in other places).
On mine device installed unchanged bootloader from WM6 official.
On WM5 was tested process completion on pc, but without real tests on pocket.
That Utility allow process images ROMGalaxy.NB0 and Galaxy.NB0
(Advised to use ROMGalaxy.NB0 (withiut bootloader), as more safe variant for Your device).
That images can be got by decoding of Galaxy.cap (decode can be done from that util).
First part of tool allow split to parts, and correcterrors in CHS, cut off bootloader, unpack galaxy.cap to ROMGalaxy.nb0 (used data from tool made by Ingvarr).
Second part allow you process IMGFS partition (partition that contain main
software). In that part partition IMGFS can be extracted to file. Get from that DUMP (in future You can do anything you want with that). After that combine DUMP to IMGFS and at the end combine and recalculate checksum of NB0.
splitting and combining functions of IMGFS to DUMP and back executed by Tadzio made utilities. But so they is made for HTC devices, so I'm correct that accordely to ASUS specific. That functions is called from mine tool (execute bat files is not necessary). Correction may be done by pressing button CORRECTION. ROM size is REALLY CHANGED WITH DECREASING OF nb0 image and accordely to size User storage INCREASED - checked (by recompressing of misar firmwares and by other firmwares corrections).
Checksum calculating made is done by tool, but algorhitm is taken from Ingvarr tools (slightly modified to this tool, that does not create all of file image in memory, but recalculate by chunks).
Process ROMs can in different directories, for no all in one place files garbage.
To flash ready file I'm advise thru bootloader and exactly ROMGalaxy.NB0 (without bootloader). Existence of bootloader you can check in first part of tool.
In that complect persist other tools, needed for coocing your rom.
But accordely to them - you must teach it yourself. I'm don't made that.
Also added in third part possibility to change any of parameters in XIP part of ROM (for correct processing parameters must be changed in order: firstly unpacking, changing, packing, and combining NB0).
Work examples:
1. Open NB0, if that not persist - make it from galaxy.nb0 (by cutting off of bootloader) or from galaxy.cap.
2. If that is homemade firmware, possible will be CHS error in MBR. Correct that by pressing button CORRECT MBR. (Why error persist? - Possible our firmware makers ignore that, or firmware was combined by utilities from Tadzio or other that was not adopted for ASUS (also possible CHS not so sensitive)).
Also may appear message about file size differences with sum of sizes of all partitions - it's not harmful - in most cases simple ignore that.
3. Next is Operations with IMGFS tab. In that part can simple do next processes in shown order. Get IMGFS, Create DUMP, edit DUMP as you wish, from DUMP create IMGFS, combine NB0 new and it's all, can flash. For checking you may open newly created NB0 in first part of tool.
4. Flashing may be done by USBLoader.exe.
Another example - correction and optimization of firmware size:
Shortly about compression:
I'm has provided an opportunity to combine IMGFS.new from DUMP with LZX compression (greatest, but slower starting) and XPR.
Choose by pressing needed button. At once want to warn you about not all firmwares have library with compression LZX, accordely to that after flashing, it will not run further to blue screen.
If you have not broke bootloader, this all is reperable (Many peoples through it passed).
Well, like everything, write at a forum.
And a long life for yoursdevices.
P.S. if you found translation errors - please PM to me.
20080303
Translation fixes, exe packed in own archieve as mainly only it changed
1. unpack kitchen ASUS_P525_NB0_Kitchen.zip
2. place ASUS_P525_NB0_Kitchen.exe from exe.zip to directory from 1.
Thanks DaLiV.
Thanks anper.
Great tools.
Wait for Eng version for a long time.
vivi
thanks anper & Daliv
great tools, Great work!
updated translation.
thanks!
Thanks DaLiV, anper!!
Have been looking for the English version!!
gabz
nice. looks interesting.
will give it a try.
but will it work using wm6/wm6.1 as base ROMs?
cheers!
ericjm said:
nice. looks interesting.
will give it a try.
but will it work using wm6/wm6.1 as base ROMs?
cheers!
Click to expand...
Click to collapse
tool work with WM5, WM6, WM6.1 only for ASUS P525.
anper said:
tool work with WM5, WM6, WM6.1 only for ASUS P525.
Click to expand...
Click to collapse
sweeeeet!
thanks for this one anper (and DaLiV for the english translation!)
can't wait!
How
How can we add additional OEM packages into our rom using this kitchen?
as in all other roms ... split by packages by other tools, if you want, but to that tool return ready dump directory
sorry
DaLiV said:
as in all other roms ... split by packages by other tools, if you want, but to that tool return ready dump directory
Click to expand...
Click to collapse
Sorry, But I cannot understand what you mean. Could you please elaborate?
search forum for tool like "buildos+packagetools" or "dmp2pkg" - then edit packages and after that make conversion back packages to dump
Sweet kitchen
Just letting everyone know that this kitchen can also be used for Dell Axim X51's - I have
For X51 users, make sure you don't click "Repair CHS" - it's for ASUS PDAs only and will result in a bricked ROM
btw You can also use recookstruct as well to sort the dump into packages, you may have to get rid of some entries in "HKEY_LOCAL_MACHINE\System\Inbox\Settings\WelcomeEmail\Templates\ServiceTemplates" because recookstruct can't parse the "®" symbol sometimes found in the key
(Only works with IMGFS, not XIP)

M600+ on X500 at M600+ :: OS Image is NOT compatible with this hardware [ SOLVED ]

Hi.
I'm know, that I am stupid in this situation, but...
I'm flashed X500 ROM on M600+. Ya, stupid.
With many manipulations, I have enter in bootloader.. This was very havy work.
Using USBDL_B02_0012_Lite.exe I'm can upload any ROM at my device, but after calculating checksum (he is OK), device print the message: "OS Image is NOT compatible with this hardware" and go in reboot.
I'm think, that device not real check hardware, but compare hardware, wroted in his ROM with hardware in flashing ROM.
Is anybody can help me - where in ROM file I can change his hardware configuration. Maybe his need just change one-two bytes... (I'm very hope this ) Or how another way to flash right ROM?
P.S. Windows can see the "Windows CE USB Devices\Microsoft USB Sync", but ActiveSync is not - in that first problem. Second - device not seen any SD-cards (but early, on original ROM hi was). Therefor, I can use only USBDL.
May be, anyhow can split ROM info block and ROM OS data, then change ROM info block between x500 ROM and m600+ ROM, and assemble new combined ROM?
Problem solved.
I'm change X500 ROM usbdl module's code for his take any ROM as compatible (just set one byte from 1 to 0). In this case I'm can't flash X500 ROM, but can flash any other ROMS. Now I'm select M600+ ROM. ))
Blake-R said:
Problem solved.
I'm change X500 ROM usbdl module's code for his take any ROM as compatible (just set one byte from 1 to 0). In this case I'm can't flash X500 ROM, but can flash any other ROMS. Now I'm select M600+ ROM. ))
Click to expand...
Click to collapse
World like to tech me How to change ROM usbdl module's code ,
because I also flashed my X500+ ROM on my M700 ,
when I reflash M700 ROM , the screen display
USB Downloader 0019
Flash Capacity=128MB
USB Downloader Ready.
SD Card In
Find SDMMC Card.
File= TEMP BIN
Program Image from SDMMC
update OS image
Please Waiting.
about 3 seconds later
USBUL & OS version is others
Then it autoreset, and play
USB Downloader 0019
Flash Capacity=128MB
USB Downloader Ready.
SD Card In
Find SDMMC Card.
File= TEMP BIN
Program Image from SDMMC
update OS image
Please Waiting.
OS Image is NOT compatible with
this hardware
USB host is not connected yet
Can you solve this problem
thank you http://forum.xda-developers.com/images/smilies/smile.gif
I'm try...
alfredlai said:
World like to tech me How to change ROM usbdl module's code ,
because I also flashed my X500+ ROM on my M700 ,
when I reflash M700 ROM , the screen display
Click to expand...
Click to collapse
Because my M600+ and your M700 have different ROM's, useless send to you my utilities, sorry.
I'm use:
USBDL_B02_0012_Lite for flash (in my case phone can't take ROM from SD)
kitchen-x500plus-shift-sequel-v9 for reversing ROM
IDAPro for disassembling
HEX Editor for change bytes
In the process of work, I learn, that ROM in BIN-file not compressed (in your case - I don't know), therefore this kitchen fully not needed - just a part. Just need to compute begining of USBDL section in ROM and in IDA start disassemble from that address.
And, of course, you need to know some assembler for understanting disassebled code (it is enought knowning assembler x86 in my case).
maybe magicbyte trick can help
look at this post:
http://eten-users.eu/index.php?s=&showtopic=14146&view=findpost&p=90874
it will guide you to change 4 bytes of the original ROM, and you will be able to flash it

LG KS20 english version (rom v10b modem firmware v10f)

my english is very poor,so i have to write in chinese
感谢各位大侠,尤其是misterjp,利用了他的工具LGFlashParser,非常了不起的工具(见这里http://forum.xda-developers.com/showthread.php?p=2310043#post2310043)
1、首先用LGFlashParser分解法文的v10f dz格式rom
2、将生成的flash.bin进一步分解成法文dump文件夹
3、从论坛上下载了一个raw格式的英文rom(原谅我找不到原链接了),将Part02.raw分解后成英文dump文件夹
4、用英文dump文件夹替换法文dump文件夹
5、合成成新的flash.bin
6、用刷机工具LGMDP_EURO.exe刷机
结果生成了一个不伦不类的rom(rom:v10b;bootloader:v10b;modem firmware:v10f)
相信用来分解的raw格式英文rom是v10b版本的,如果能找到raw格式的v10f英文rom,相信结果将是
rom:v10f;bootloader:v10f;modem firmware:v10f
中国时区 已经是晚上4点37分了,要休息了,具体的内容,我明天有空将进一步补充
Google translation
my english is very poor, so i have to write in chinese
Thank you Daxia, especially misterjp, using his tools LGFlashParser, very great tools (see here http://forum.xda-developers.com/show...310043)
1, the first by the French LGFlashParser decomposition v10f dz format rom
2, will generate further broken down into the flash.bin French dump folder
3, downloaded from the Forum on a raw format of the English rom (forgive me if I can not find the original link), and will be decomposed into English Part02.raw dump folder
4, in English dump folder to replace French dump folder
5, synthesized into a new flash.bin
6, with brush brush machine tools LGMDP_EURO.exe
The results generated a grotesquely rom (rom: v10b; bootloader: v10b; mod em firmware: v10f)
Believe that the decomposition of the raw format used to the English version of the rom is v10b, if we can find the raw format of the English rom, believe that the result will be
rom:v10f;bootloader:v10f;modem firmware:v10f rom: v10f; bootloader: v10f; modem firmware: v10f
China time zone is 16:37, to rest, the specific content, available tomorrow, I will further add
I follow you until step 5 : how did you synthesized a new flash.bin ?
subsidiary question : did you flash only flash.bin file or full folder with mbn with "brush brush machine tools" ?
感谢帮忙翻译
第一个问题的回答(如何合成新的flash.bin?)
1、具体过程是我先将原flash.bin截取成boot.bin、os.bin、foot.bin三部分,os.bin经过处进一步处理,生成OS.nb.payload.payload,是一个标准格式的raw文件,等同于英文raw格式rom part02.raw,然后分解成dump.
2、合成步骤同上面步骤恰好相反,生成一个新的os.bin,并加上头尾boot.bin、foot.bin文件,即是一个新的flash.bin。关键是boot.bin头(十六进制数值E9FDFF前的那部分)不要弄错,否则有可能刷成砖头!!
第二个问题的回答:刷机不仅仅刷取flash.bin,是所有的*.mbn和*.bin文件
Today, Google translate is my friend
Thank the help of translation
The first response to the question (of how the new flash.bin?)
1, the specific process is my first interception into the flash.bin boot.bin, os.bin, foot.bin three parts, os.bin after the further processing, generate OS.nb.payload.payload, is a standard format ra w documents, equivalent to the English raw format rom part02.raw, then broken down into dump.
2, with the steps of the above steps to the contrary, a new generation of os.bin, plus Touwei boot.bin, foot.bi n paper, which is a new flash.bin. The key is the first boot.bin (hexadecimal numerical E9FDFF before that part) not made a mistake, or else they might brush into a brick!
The second question to answer: not just brush-brush from flash.bin, is all the *. mbn and *. bin documents
老大能不能直接把你的合成的英文rom发出来,可能整个英文世界都在等吧。
我用的繁中,也想刷个英文。
China time zone is 16:37
Google的错误还是挺严重的。
spocky12 said:
Thank the help of translation
The first response to the question (of how the new flash.bin?)
1, the specific process is my first interception into the flash.bin boot.bin, os.bin, foot.bin three parts, os.bin after the further processing, generate OS.nb.payload.payload, is a standard format ra w documents, equivalent to the English raw format rom part02.raw, then broken down into dump.
2, with the steps of the above steps to the contrary, a new generation of os.bin, plus Touwei boot.bin, foot.bi n paper, which is a new flash.bin. The key is the first boot.bin (hexadecimal numerical E9FDFF before that part) not made a mistake, or else they might brush into a brick!
The second question to answer: not just brush-brush from flash.bin, is all the *. mbn and *. bin documents
Click to expand...
Click to collapse
it looks like you made it, but these descriptions are so hard to understatnd... can you make a stepby step description. we all can extract thye 3 files out of flash.bin, but how do you replace these file with the english version, and recreate the flash.bin?
Lg Ks20定制工具
LG KS20定制工具
注意一:使用本工具之前,请用LGMDP_EURO.exe备份您的*.nv2文件,这点非常重要!!
我忘了备份nv文件,刷法文v10f版本后,丢失imei号等信息,只能找了疯丫头的机子备份的nv还原,结果我的imei号同她的一模一样了。
注意二:这个工具仅仅适用于法文v10f当中的flash.bin的分解,如果您用于其他rom分解,请修改两个相应的数值
分别位于dump.bat的两条命令中:
.\Tools\Split flash.bin 20227
.\Tools\Split flash.bin-2.bin 3D5E8FB
修改方法:用winhex打开flash.bin,搜索十六进制数值“E9FDFF”,用e9对应的偏移值替换“20227”;到bin文件末尾,找到“0000000000000000000”,“00”对应的偏移值替换“3D5E8FB"
工具使用方法:
1、将*.dz rom文件放到工具文件夹,用鼠标拖动到dz2bin.bat上,解开*.dz,生成*.mbn,*.bin在rom文件夹中。
2、运行dump.bat,分解成dump文件夹
3、对dump文件夹进行编辑
4、运行build.bat合成,生成flash_new.bin
5、将flash_new.bin复制到rom文件夹,并改名为flash.bin
6、运行LGMDP_EURO.exe刷机
如何生成英文rom?
用英文dump替换法文dump文件夹合成即可
我合成了一个英文rom,下载地址是ftp://ppchome:[email protected]//ROM/LG/lg_ks20_english_vesion.rar
Thanks peng8
LG KS20 customization tools
Note 1: The use of this tool, please use LGMDP_EURO.exe *. nv2 backup your files, this is very important! !
I forgot the backup nv documents, brush v10f French version, lost imei, and other information, can only find a crazy Yatou the machine back up the nv reduction, the results of my imei, the same with her.
Note 2: This tool only applies to French v10f the decomposition of the flash.bin, if you used for other rom decomposition, edit the corresponding numerical
Dump.bat respectively in the two orders:
. \ Tools \ Split flash.bin 20227
. \ Tools \ Split flash.bin-2.bin 3D5E8FB
Laws Methods: winhex open flash.bin, search hexadecimal numerical "E9FDFF", offset by the corresponding value of e9 replace the "20227" to bin end of file, find the "0000000000000000000", "00" offset the corresponding value Replace "3 D5E8FB" 
Tools to use:
1, *.dz rom files on Tools folder, use the mouse to drag the dz2bin.bat, untied *.dz, generate *.mbn, *.bin in the rom folder.
2, running dump.bat, broken down into dump folder
3, the dump folder to edit
4, running build.bat synthesis, generating flash_new.bin
5, will be copied to flash_new.bin rom folder, and renamed the flash.bin
6, brush-run LGMDP_EURO.exe
How to run English rom?
English replaced French dump dump folder can be synthesized
I prepared an English rom, download address is ftp://ppchome:ppchome @ ftp.ppchome.ne ... ish_vesion.rar
spocky12 said:
LG KS20 customization tools
Note 1: The use of this tool, please use LGMDP_EURO.exe *. nv2 backup your files, this is very important! !
I forgot the backup nv documents, brush v10f French version, lost imei, and other information, can only find a crazy Yatou the machine back up the nv reduction, the results of my imei, the same with her.
Note 2: This tool only applies to French v10f the decomposition of the flash.bin, if you used for other rom decomposition, edit the corresponding numerical
Dump.bat respectively in the two orders:
. \ Tools \ Split flash.bin 20227
. \ Tools \ Split flash.bin-2.bin 3D5E8FB
Laws Methods: winhex open flash.bin, search hexadecimal numerical "E9FDFF", offset by the corresponding value of e9 replace the "20227" to bin end of file, find the "0000000000000000000", "00" offset the corresponding value Replace "3 D5E8FB" 
Tools to use:
1, *.dz rom files on Tools folder, use the mouse to drag the dz2bin.bat, untied *.dz, generate *.mbn, *.bin in the rom folder.
2, running dump.bat, broken down into dump folder
3, the dump folder to edit
4, running build.bat synthesis, generating flash_new.bin
5, will be copied to flash_new.bin rom folder, and renamed the flash.bin
6, brush-run LGMDP_EURO.exe
How to run English rom?
English replaced French dump dump folder can be synthesized
I prepared an English rom, download address is ftp://ppchome:ppchome @ ftp.ppchome.ne ... ish_vesion.rar
Click to expand...
Click to collapse
great job man, I'm downloadiung the image, but anyway, trying to build it myself... but I got an error from viewimgfs.exe... is it me or some file version bug??? And another thing,,, if I'm going to overwrite the dump folder of the french version with that of the english version, why do I have to make the dump folder of the french anyway?
by the way, you are doing a great job...
I flashed the phone, but the wifi is not available... any ideas?
Ok, now this is what I noticed...
I flashed the phone, but after that 2 things happened:
1 - Wireless gone, seems like the phone doesn't have it at all
2 - Cannot connect the phone to make a nv restore, so no phone to... After changing usb settings on the menu, could not make changes to the WinDiag regsitry... There was nothing there to change...
after noticing this, I changed back to italian, and to be sure, checked these stuff again. In italian I have to make changes to the WinDiag registry to connect and restore the NV files. In your ROM, there is nothing inside HKLM/Drivers/Builtin/Windiag... In the italian, Wifi is OK, but not with your ROM... Now that I noticed, in your pictures there is no wifi too... can't say nothing on phone service, cuz there may be no sim card there,,, but where is wifi service, and how to restore nv? Did y0ou guys miss smthng here?
能否上傳您原先的10b英文ROM, 和您改好了的(10b + 10f) ROM 到 www.sendspace.com? 您的分享可令更多人受惠. 謝謝
Please could you upload the Original 10b English ROM and your Modified (10b + 10f) ROM to www.sendspace.com? Your kindly share will let more people happy. Thanks
dorik2k said:
great job man, I'm downloadiung the image, but anyway, trying to build it myself... but I got an error from viewimgfs.exe... is it me or some file version bug??? And another thing,,, if I'm going to overwrite the dump folder of the french version with that of the english version, why do I have to make the dump folder of the french anyway?
by the way, you are doing a great job...
Click to expand...
Click to collapse
but I got an error from viewimgfs.exe
不知道您遇到的是什么错误?
dorik2k said:
Ok, now this is what I noticed...
I flashed the phone, but after that 2 things happened:
1 - Wireless gone, seems like the phone doesn't have it at all
2 - Cannot connect the phone to make a nv restore, so no phone to... After changing usb settings on the menu, could not make changes to the WinDiag regsitry... There was nothing there to change...
after noticing this, I changed back to italian, and to be sure, checked these stuff again. In italian I have to make changes to the WinDiag registry to connect and restore the NV files. In your ROM, there is nothing inside HKLM/Drivers/Builtin/Windiag... In the italian, Wifi is OK, but not with your ROM... Now that I noticed, in your pictures there is no wifi too... can't say nothing on phone service, cuz there may be no sim card there,,, but where is wifi service, and how to restore nv? Did y0ou guys miss smthng here?
Click to expand...
Click to collapse
对给您带来的困惑深感歉意,因为我没有用这个机子打电话,我今天试了一下,我也遇到类似您的这个问题。刷我修改的这个英文版本和法文v10f的原版,都会丢失imei和sim信号,只有用法文v10b的版本刷回去,才能restore nv,查找了一些资料,据说是unbranded和branded的区别?英文版本和法文v10f原版是unbranded的,而法文v10b是branded的?
因此问题只能仍回给大家?怎么样去restore nv?我和你一样非常期待答案!
dcoloane said:
能否上傳您原先的10b英文ROM, 和您改好了的(10b + 10f) ROM 到 www.sendspace.com? 您的分享可令更多人受惠. 謝謝
Please could you upload the Original 10b English ROM and your Modified (10b + 10f) ROM to www.sendspace.com? Your kindly share will let more people happy. Thanks
Click to expand...
Click to collapse
英文版本rom xda论坛有,但是我一下子找不到链接了,有知道的朋友麻烦贴上链接。
我上传了ftp,下载地址分别是
xda论坛的原英文rom:ftp://ppchome:[email protected]//ROM/LG/LG-KS20-Eng.zip
改好了的(10b + 10f) ROM:ftp://ppchome:[email protected]//ROM/LG/lg_ks20_english_vesion.rar
peng8 said:
英文版本rom xda论坛有,但是我一下子找不到链接了,有知道的朋友麻烦贴上链接。
我上传了ftp,下载地址分别是
xda论坛的原英文rom:ftp://ppchome:[email protected]//ROM/LG/LG-KS20-Eng.zip
改好了的(10b + 10f) ROM:ftp://ppchome:[email protected]//ROM/LG/lg_ks20_english_vesion.rar
Click to expand...
Click to collapse
ok, got it....我會今晚試試...
my french rom is v10b ! can i use this method and this rom?
is some body there that flash his phone whit out problem???
peng8 said:
对给您带来的困惑深感歉意,因为我没有用这个机子打电话,我今天试了一下,我也遇到类似您的这个问题。刷我修改的这个英文版本和法文v10f的原版,都会丢失imei和sim信号,只有用法文v10b的版本刷回去,才能restore nv,查找了一些资料,据说是unbranded和branded的区别?英文版本和法文v10f原版是unbranded的,而法文v10b是branded的?
因此问题只能仍回给大家?怎么样去restore nv?我和你一样非常期待答案!
Click to expand...
Click to collapse
OK, now I get it... so we face a problem with two solutions,,,,
1. Get un unbranded english NV file, but then you cannot restore it cuz we cannot connect the phone to pc, as the tricks to do it didn't work... only emergency mode was available, so I could flash it back in branded rom I had
2. wait till an english branded rom will be available, maybe this is the better choice, but we can do nothing but wait...
One thing I still don't get is, why does the wifi dissapear? does it have to do with phone, or is it a driver incompatibility?
Personal Note,,, it was interesting looking at my ks20 in english though....
For the nv2 restore problem, as you can see in the Engineering meun of KS20 under "Port Setting" then "Diag Setting"
>>Diag Setting can be applied in only "ship" OS Image.<<
It means Not all ROMs have enabled DIAG mode,which is needed to read-write NVM. Basically all newer ROMs not allows DIAG mode,it is enabled only in so called "ship" versions.
Referring to the post below, to avoid problems with NVM writing-phone must be flashed in emergency mode, but i am not sure is there any extra steps to take care of and is that necessary to flash with a "Vygis Box"
http://forum.gsmhosting.com/vbb/showthread.php?t=522053&highlight=ks20,+english+rom

SGH-i600 ROM cooking

1. The ROM of the SGH-I600 Phone can be dumped with the romdump tool from TxCaesar:
see the post
http://mobile.txcaesar.net/modules.php?name=Forums&file=viewtopic&t=83
or can be downloaded directly from:
http://rapidshare.com/files/125578441/romdump.rar.html
so...
dumprom.bat has 3 lines that need to be changed:
pdocread -w -d %yar0% -b 0x800 -p Part00 0 0x%yar1% Part00.raw
pdocread -w -d %yar0% -b 0x800 -p Part01 0 0x%yar2% Part01.raw
pdocread -w -d %yar0% -b 0x800 -p Part02 0 0x%yar3% Part02.raw
the block size "-b 0x800" may need to be altered to 0x200 or the part "-b 0x800" must be
completely removed .
this 2 options works and the results are identical (ich heve compared part02.bin with
hexeditor! )
i prefer option "remove the "-b 0x800" part completly "
the finished dump you can download from this links:
"romdump-i600xxgg2-raw" - part02.raw only
http://rapidshare.com/files/166620423/romdump-i600xxgg2-raw.zip.html
for further work we must rename the part02.raw to part02.bin
2. the dump can be easy extracted to the subfolder "dump" with all the .exe .dll .mui etc.
files with the ImgfsTools 2.1rc2.zip by tadzio .
see here :
http://forum.xda-developers.com/showthread.php?t=298327
because the part02.raw=part02.bin ist IMFGS file it can be easy extract with the comand :
ImgfsToDump part02.bin
the finished extraction from dump you can download from this link
rumdump-i600xxgg2-bin_dump.zip
http://rapidshare.com/files/166710445/rumdump-i600xxgg2-bin_dump.zip.html
3. for the further coocking we need to Extracting the OS payload from the Upgrader exe single
file , see here:
http://forum.xda-developers.com/showpost.php?p=1371344&postcount=8
i have made it with the hexeditor, see the file "i600XXGG2_BOOT_PDA_ROM_FIRMWARE-zip.zip":
http://rapidshare.com/files/166580241/i600XXGG2_BOOT_PDA_ROM_FIRMWARE-zip.zip.html
they are 3 parts:
1.Bootloader : xxgg2_boot2.nb0 (xxgg2_boot1.nb0 PROBABLY WORKS TOO - IN THE
i600UXXupdater.exe ARE 2 BOOTLOADER'S - THE FIRST IST ON BEGINN FROM UPDATER AND ITS
DIFFERENT FROM THE OTHER , THE SECOND IS BEFORE THE xxgg2_pda.bin - THIS IST TESTED - ITS
WORKS)
2.PDA : xxgg2_pda.bin
3.PHONE : xxgg2_phone_rom.bin
I EXTRACT IT FROM I600XXUPDATER.EXE . ALLOCATION OF THE PARTS ARE:
START ADRESS | END ADRESS | SIZE | SIZE
HEX HEX HEX MB
xxgg2_boot1.nb0 002D0240 | 003E2FFF | 112FFF | 1,07 -not tested
xxgg2_boot2.nb0 003E3000 | 04F5FFF | 112FFF | 1,07 - tested
xxgg2_pda.bin 004F6000 | 04CB3342 | 47BD343 | 71,7 - tested
xxgg2_phone_rom.bin 04CB3343 | 05A99B82 | DE6840 | 13,9 - tested
xxgg2_boot1.nb0 is not tested yet, but probably its works fine, but i need not it to test
now...for rom cooking is it no needed...
4. we need OS.nb.payload - file ending in nb0). this can be made with cvrtbin from the
xxgg2_pda.bin
link to download it (with the right cvrtbin ) :
I600XXGG2_PDA-NB0.zip:
http://www.megaupload.com/pl/?d=AJQQEP9B
then nbsplit -acer I600XXGG2_PDA.NB0
and we have payload...
for the next step read this post:
http://forum.xda-developers.com/showpost.php?p=1405555&postcount=28
p.s. by the way ...on the
http://forum.xda-developers.com/showthread.php?t=311078
is tutorial how to extract the files from winows mobile emulator from this site:
http://www.microsoft.com/downloads/details.aspx?FamilyID=38c46aa8-1dd7-426f-a913-4f370a65a582
&DisplayLang=en#filelist
for coocking we need the .mui with our language
windows mobile 6.0 standard polish (polski)
http://rapidshare.com/files/166723863/WM6STANDARD_PL_EMULATOR2.zip.html
and windows mobile 6.1 professional english
http://rapidshare.com/files/166731221/WM61PROF_ENG_EMULATOR2.zip.html
and some finished dumps for older i600 firmware:
for i600xxga2 firmware
raw:
http://rapidshare.com/files/167263876/dump-i600xxga2-raw.zip.html
subfolder "dump"
http://rapidshare.com/files/167275756/dump-i600xxga2-bin.zip.html
for i600xxgc6 firmware:
raw:
http://rapidshare.com/files/167283838/romdump-i600xxgc6-raw.zip.html
subfolder "dump"
http://rapidshare.com/files/167300177/romdump-i600xxgc6-bin.zip.html
for i600xxgd1 firmware
raw:
http://rapidshare.com/files/167311987/romdump-i600xxgd1-raw.zip.html
subfolder "dump"
http://rapidshare.com/files/167326229/romdump-i600xxgd1-bin.zip.html
see you
Satsohn
The kitchen for Samsung sgh-i600.
Probably works for i607
http://rapidshare.com/files/173102772/i600_V69.rar.html
Hier is all we need to modifying in many ways our firmware and make it flashable.
how to do it?
1. download i600XXGG2_BOOT_PDA_ROM_FIRMWARE-zip.zip.
rename xxgg2_pda.bin to i600.bin and run phase1....bat.
you get all nb0, payload , extra and "dump" with one click
2. cook your rom with the tools in the directory
3. click phase3...bat
4. flash it with wce downloader
Satsohn
I600XXGG2 moded - polish only:
http://rapidshare.com/files/175751823/i600_xxgg2_pl_mod.rar.html
aded :
total commander 2.51
virtual earth MOBILE 1.69
google maps 2.3.09
web camera plus 2.0
cool camera 1.15
TCPMP 0.81RC1
VOIP
I have removed all languages except polish (extra added) .
All unusable mui/dll/rgu/dsm etc. files are removed ...so the acces to the all aplication is faster
I've tested polish rom, it works faster and more stable, but there are some problems with sms reading and reciving, after hard reset and install- for example office wm6 I'cant recive any sms. Before install any aps - some times I can't open message from topic menu and I must restart phone.
aha...you dont read the "redme"...
after flashing go to "\my documents\my data" and instal "instalacja"
this should fix your problem
I have "Instalacja" installed.
When sms incoming - backlight on, but inbox is null and there is no way to restore incoming massages
I will try re-flash rom, but maby rom not works properly only with my operator (orange)?
you have absolutely right. mo sms receiving and no sms sending....
i try to fix this...
any progress?
http://rapidshare.com/files/185980447/I600_PL9.rar.html
so ... is fix yet.
this version is without start-animation and shutdown-animation and without voip.
Added Resco staff:
-Photo viewer
-resco audio recorder
-resco explorer
-resco radio
-resco registry
-resco screen capture
-system info
p.s sorry if you wait to long, but i was out of home
Great
I'm gonna test it after examinations session
rom i600
after flashing dosen't work anymore the sim all the other radio works fine but not the phne line
stay in plane mode
any suggestions?????????
All works fine for me but there's only one problem - I've installed SDHC driver, after a soft reset the Storage Card is not mounted to my card but in / is a second folder for microSD card - Storage Card 2.
Also in the Task Manager the capacity of my storage card is wrong, it's copied from the device storage....
EDIT:
heeh, I've fixed this problem:
1. remove your card
2. remove the Storage Card folder
3. put back your card
EDIT2:
I found a translation bug - Start -> Programy Użytkowe -> Device -> bthaudiotest -> Start -> Wprowadź adres i chasło...
EDIT3:
In Card Wheel there's a bad translation - 'all day' is translated to 'wszystkie dni', for me the correct translation is 'cały dzień'.
translation bug ?
so ... hm... i have yet no time for correct this bug...in future i fix this...because i permanently abroad
@AndrewSpec - thx for testing
Same problem
sergiulli said:
after flashing dosen't work anymore the sim all the other radio works fine but not the phne line
stay in plane mode
any suggestions?????????
Click to expand...
Click to collapse
I have the same problem. What can i do. I still have the original ROM dump from my phone, can i put onli the phone part from there? And haw do i obtain only that file from dumped result files. I think that is show in the first post but i can fiugre . Can any body help me pleas?
Before my Samsung i600 was with a Vodafone branded version of WM5. I'm from Romania and the original ROM was:
PDA: i600BUGD1
Phone: i600BUGD1
H/W: Mp 1.900
Pleas, any suggestion!
Upgrade to original WM6 from Samsung, that will change your boot and radio version. After that, flash your i600 with the modified ROM.
AndrewSpec said:
Upgrade to original WM6 from Samsung, that will change your boot and radio version. After that, flash your i600 with the modified ROM.
Click to expand...
Click to collapse
I don't have the original ROM from Samsung. The online upgrade is no longer available now .
I have the saved ROM files with the method posted here (part00.raw, part01.raw, part02.raw), but i don't know what to do with this files.
I don't want a modify ROM anymore, i just want to work, even with the original WM5, but i don't know how to do that.
Can anybody give me some advices?
s3mtex said:
I don't have the original ROM from Samsung. The online upgrade is no longer available now .
I have the saved ROM files with the method posted here (part00.raw, part01.raw, part02.raw), but i don't know what to do with this files.
I don't want a modify ROM anymore, i just want to work, even with the original WM5, but i don't know how to do that.
Can anybody give me some advices?
Click to expand...
Click to collapse
Nothing? Not even one suggestion?
Problem solved
s3mtex said:
Nothing? Not even one suggestion?
Click to expand...
Click to collapse
Ok, i have solve the problem, with some help from here: http://www.modaco.com/content-page/257857/unluckily-i-get-a-brick-i600-help/page/20/
*Hope that is allowed by administrators, at that address is many links to this forum, included in the post with the solution on my problem.
The drivers for my i600 was the problem.
I have downloaded the Samsung Composite Drivers and it work.
The drivers can be found here http://forum.xda-developers.com/showthread...968&page=40, at post 400.
It seems that Windows failed to found the drivers for the phone part of my device, without notice me about that, that was the reason why the device failed to download the phone part.
I will try to **** my own ROM now and see what's gonna result
All the best to all and i will keep the connection!
Hi. I've used dumprom to backup my original ROM. If I decide to reinstall this firmware with the Samsung MultiLoader, which file is the Boot (.nb0), which the PDA (part02.raw, renamed in pda.bin, I suppose) and which file is the Phone part?
Thank you.
after i rename part02.raw to part02.bin can i flashing with it?so it just like FULLY backup?

Categories

Resources