http://code.google.com/p/htc-flasher/
HTCFlasher -formerly known as HERMflasher- is an open source tool which allows you to flash ROMs on most current HTC devices. It has some extra features that the original HTC RUU doesn't have, like for example it can present a serial prompt to the bootloader (replacing mtty).
YANG is Yet Another NBH Generator. A tool that allows you to generate custom NBH files out of ROM parts (.nb) files. You can choose the CID, ModelID, Language, etc. and also adjust the NBH signature size, thus making valid NBHs for all HTC devices. You need a way to flash custom/cooked ROMs (ie: HardSPL, USPL, SSPL, JumpSPL, etc...) to flash NBH files generated with YANG. YANG can also dump NBH file contents (.nb ROM parts), this is a command line replacement for windows tools like nbhextract or htcrt.
nbimg is a tool to convert NB splash screens to BMP images, it can also do the reverse, convert BMP images to NB splash screens. It can work with any resolution, and supports HTC PocketPC and Smartphone splash screen formats. This tool is command line only, I have not written a GUI for it yet.
Linux ROM Kitchen is a tool that allows you to cook your own Windows Mobile ROMs for HTC Windows Mobile devices. This means you can extract the contents of a Shipped or Dumped ROM, and add/remove files or Packages into the ROM.
See the Wiki for more information: http://code.google.com/p/htc-flasher/wiki/HomePage
So, no need for Windows anymore, some good news
Rottis said:
YANG is Yet Another NBH Generator. A tool that allows you to generate custom NBH files out of ROM parts (.nb) files. You can choose the CID, ModelID, Language, etc. and also adjust the NBH signature size, thus making valid NBHs for all HTC devices. You need a way to flash custom/cooked ROMs (ie: HardSPL, USPL, SSPL, JumpSPL, etc...) to flash NBH files generated with YANG.
Click to expand...
Click to collapse
Is it possible to pack a Linux zImage as .NBH, so it will be loaded into RAM and executed ? Something like that was possible to do before with the
SDcard update images on hima+.
Can someone please tell me how to use this to flash something more complex (specifically an HTC charmer) in BOOTLOADER mode using this tool?
People this info is already in a thread by the author of the software (pof). Please carry on the discussion HERE.
Related
I have begged my friend to dump the HK local ROM (from 838pro) for me. I have a Taiwanese CHT9000. After reading the previous articles, it seems that the files in my hand (3 raw files) cannot flash the ROM into my CHT9000. Is that correct? So, what's the purpose of dumping the ROM?
Sorry...I am the beginner here.
http://wiki.xda-developers.com/index.php?pagename=Hermes_UpgradeFAQ
Is it possible extract a ROM from a device and convert it to a flashable ROM? (to have a Backup or to flash it on another device)
Short answer: No, it is not possible.
Long answer: A ROM consists of 7 parts:
1. Extended ROM
2. OS Image
3. IPL (part of bootloader)
4. SPL (part of bootloader)
5. Splash screen
6. HTC Logo (normally uses the same image as the splash screen)
7. GSM radio code
You can dump the original rom, but only the things contained in the FLASH will be dumped, this does not include the IPL, SPL, splash and radio parts, so its unuseful for flashing it back.
Theoretically: if you would have the private keys for one of the 3 certificates stored in the bootloader, used to verify .nbh files, you would be able to create your own .nbh file, and flash it.
Click to expand...
Click to collapse
Hi pof,
Yes. I have read that. So, what's the answer? What does those raw files do? What's the purpose of getting the FLASH dumped? For development?
I used them mainly to see diffs betwen roms / vendors OS bundle and extract files from ROM. You can make a modified OS image out of a dumped OS rom, so when we will be able to flash our own code (see SD-image flashing on the wiki) you can delete unuseful files (help, images...) and add programs directly to the rom... but there's a lot of work to do until we reach that, and very few people can help in the research
Hi
I have another problem. I have dumped my MDA Vario II German ROM and extracted the Part02.raw.
If I try to use the extracted .cab files, the installation fails. Even I can't open the .cabs with Winrar.The files are damaged.
I've tested it with an other Part02.raw from the Developers FTP with the same result.
What's wrong ?
It semms, that the ROM dump ist useless.
Even, you can't use the midi and wave files.Also bmp and jpg files have the same problem.
Couriosity is, that some files work and most not.
I think it's the same problem with other parts of the romdump.
Hey guys
I dumped the black2.5 rom, hoping to make some modifications to the unlock app. Now I have a .raw image, but I am a little unsure as to reading it. I downloaded duttys koch, but I dont think that was the right approach. Im not seeing anything on the wiki, and my searching has brought me here. Can anyone point me in the right direction? Thanks.
@peezy:
Here's how to reconstruct a dumped rom:
http://wiki.xda-developers.com/index.php?pagename=Hermes_HowtoReconstruct
http://wiki.xda-developers.com/index.php?pagename=Trinity_HowtoReconstruct
But in your case, you have the NBH, so no need to dump & reconstruct, you can work with it with tadzio imgfs tools + bepe's packagetool.
pof said:
@peezy:
Here's how to reconstruct a dumped rom:
http://wiki.xda-developers.com/index.php?pagename=Hermes_HowtoReconstruct
http://wiki.xda-developers.com/index.php?pagename=Trinity_HowtoReconstruct
But in your case, you have the NBH, so no need to dump & reconstruct, you can work with it with tadzio imgfs tools + bepe's packagetool.
Click to expand...
Click to collapse
Hopefully a little humor won't get me in trouble, but with dutty's koch, tadzio's tool and bepe's package - you should have everything you need
@pof thanks a bunch!
@todd ahhhh yeeaaahh... <70's pr0n music.wav>
just thought I'd bring this to the attention of the Hermes people;
you can generate custom NBH files from the extracted .nb files yourself with a tool by bot called NBHGen - currently it's a sticky in the trinity forum.
http://forum.xda-developers.com/showthread.php?t=294046
as a note; before you generate the NBH, take the TRIN100 and substitute it for HERM100.
also, delete out any files you don't want to include in the NBH and you're done!
That should work nicely for producing radio roms in nbh for use with sspl...
Sleuth255 said:
That should work nicely for producing radio roms in nbh for use with sspl...
Click to expand...
Click to collapse
indeed, I've uploaded a Radio ROM to the wiki which I have used tonight since I needed to "retail" my PDA, it's a packaged file, and it works... also I made a few modifications to the updater to customise it somewhat for our new method of flashing, just to help the noobies.
it's the 1.06.04 radio.
Just an update; something Pof might like to do: I replaced EnterBL.exe with SSPL-HERM.exe (renamed it)... if you have your unlocker, you could very easily integrate it with this, obviously they need to tap "Yes" on their PDA to run the bootloader, but I've modified the updater to provide instructions... so you might like to check it out
The modified updater is here: ftp://xda:[email protected]/Uploads/Hermes/ModifiedRUUUpdater.rar
does anyone know if you can flash a non-SuperCID device with a generated nbh if you use it in tandem with SSPL?
I generated an NBH with OS,GSM,ExtROM and SplashScreens with the ORANG003 ID bu the flash failed, any ideas why?
SPECIAL NOTICE
If you want to include an ExtROM, change the 900 to 700 or you will brick your hermes (note that you *CAN* recover very easily from this... but it's better not to need to)
Sleuth255 said:
That should work nicely for producing radio roms in nbh for use with sspl...
Click to expand...
Click to collapse
THIS WORKS GREAT.
Here are Radio ROMs:
1.27 http://uploadingit.com/files/8194/NBH Radio Only 1.27.00.00.zip
1.33 http://uploadingit.com/files/8194/NBH Radio Only 1.33.31.00.zip
1.34 http://uploadingit.com/files/8194/NBH Radio Only 1.34.00.10.zip
Olipro said:
does anyone know if you can flash a non-SuperCID device with a generated nbh if you use it in tandem with SSPL?
I generated an NBH with OS,GSM,ExtROM and SplashScreens with the ORANG003 ID bu the flash failed, any ideas why?
Click to expand...
Click to collapse
Is there a way to make a nb file from an extracted custom rom in order to use this to make the complete nbh?
Hi folks!
I've got a few questions..
Dont burn me down with *search wiki* TRUST ME, I DID!..I didn't even want to start a thread.
I use "Der Hermes Rom Koch v0.99.6.1* It works great! *but it doesnt open (for example) 04_ExtROM.nb, I get the error; "...Critical Error: Couldn't create imgfs_raw_data.bin"
But what I wanted to know is;
#1 How can I make an extended rom .nb (with my own files (.CAB's))
#2 And when I want to edit an OS.nb, how do I know what the normal (os wm6) files are and how do I know what file's to remove that are added in the OS.nb, by another person.
*hope you understand my questions
*I really used search!!!!
Bram87 said:
#1 How can I make an extended rom .nb (with my own files (.CAB's))
Click to expand...
Click to collapse
At the moment there is no "autmatic" tool to create a ExtROM nb file, you can put what you want on your unlocked extROM folder and then use rbmc command from bootloader to dump the ExtROM, capture the output and reconstruc it with xxd (unix tool), but this is a very manual process and a Pain-in-the-Ass(tm). HOWEVER AnDim announced he'll release writing support for his ExtROM tool soon, see here:
http://forum.xda-developers.com/showthread.php?t=303049
Bram87 said:
#2 And when I want to edit an OS.nb, how do I know what the normal (os wm6) files are and how do I know what file's to remove that are added in the OS.nb, by another person.
Click to expand...
Click to collapse
There are several methods to do this, probably someone with more experience than me can tell u more clever methods, for a simple one, you can use bepe's package tool, and all that is not converted to a RK package means has been manually added to the rom by the person who did it.
pof said:
At the moment there is no "autmatic" tool to create a ExtROM nb file, you can put what you want on your unlocked extROM folder and then use rbmc command from bootloader to dump the ExtROM, capture the output and reconstruc it with xxd (unix tool), but this is a very manual process and a Pain-in-the-Ass(tm). HOWEVER AnDim announced he'll release writing support for his ExtROM tool soon, see here:
http://forum.xda-developers.com/showthread.php?t=303049
There are several methods to do this, probably someone with more experience than me can tell u more clever methods, for a simple one, you can use bepe's package tool, and all that is not converted to a RK package means has been manually added to the rom by the person who did it.
Click to expand...
Click to collapse
I learn more every day!.. many thx!
Hi everybody,
I just bought me a TyTN and did the Rom reconstruction procedure, this all worked very well (thx for the great guides), but with this procedure only the Part02 file is transformed into a .nbh file.
Is it possible to fully reconstruct the rom including, splash screen and most import the extrom. I still have all the four Part00 - Part03.raw files but don't know how to convert them to usable .nbh files, I also don't know what the other three PartXX.raw files are.
Cause at the moment when I load the reconstructed rom, I have the extrom from the last rom I had installed which of course is not the extrom of the reconstructed rom.
Any help on this would be great. Thanks.
wwwwwwiiiiiiikkkkkkkkiiiiiiii
Please read exactly what I'm asking for
@peezy: before shouting wiki, you should read my post exactly. I already succeeded in building an OS.nbh from my dumped ROM.
What I'm asking for is a FULL rom reconstruction, especially the extended rom is a problem if missing and I'm quite sure the extended rom and maybe also the boot images are in the other PartXX.raw files but I don't know how to create the missing .nbh files for flash and extended rom. What's not such a big problem is the radio rom. But in case I have to repair the phone I'd like to go back to the OS I had before flashing the WM6 LVSW including boot images and extended rom.
I already found a thread on how to create the boot images, but the problem is I have to pull out the boot images from the dumped ROM and the even bigger problem is the extended rom which I also have to reconstruct from the dump files.
unhide extrom, copy the files and use AnDim ExtROM editor to create your new extrom.nb. See stickies in this forum for more info.
For splash screens see here:
http://forum.xda-developers.com/showthread.php?t=306896
http://forum.xda-developers.com/showthread.php?t=299049
stuck with splash dumps
@pof: Thanks for your help, I was able to create the ExtRom with AnDim ExtRom editor and I tried to extract to splash screens with mtty and usbmonitor.
But I got stuck there because USB Monitor is kind of strange to handle if you don't know what you're doing, so I tried to extract the dumps on my gentoo box. At first with your supplied 'cu' command but that fails for what reason exactly I don't know. So I used ser2net to made my ttyUSB1 accessible with telnet. And then I did a dump of my telnet session with the rbmc command one for each splash screen.
Can you please explain what I have to do in order to get the .bmp's out of the dump files? I assume at first I have to clear out the telnet command lines at top and bottom, but I don't know exactly up to where I have to cut the files and how to convert the resulting file into bmp. Cause I'd like to dump the images from a colleagues phone (which has special boot images and no downloadable rom upgrade).
or maybe you can give me a correct 'cu' command for dumping the stuff directly without having to capture the telnet session.
Thanks for you help
@marcelser: just remove everything before HTCS, and everything after HTCE. Then you have HTCS +262144 byte splash screen + 4byte checksum + HTCE.
So remove HTCS, 4byte checksum and HTCE and you have your splash screen in NB format
It worked
@pof: Thanks for you help. Made a little perl app which grabs only the portion between HTCS and HTCE minus 4 bytes at the end with a little regex and writes that to a new file.
Then used rombaker to make a new splash.nbh file and re-extracted the files in the new RUU_signed.nbh with nbhextract which also converts the extracted .nb splash images to .bmp and the .bmp's looked just fine.
Then I loaded a different wm6 rom which has other splash screens and flashed the RUU_signed.nbh with the created splash screens to the device and had the extracted splash screens back on the device.
I attached the perl file which converts any dump which has the HTCS and HTCE strings in it to splash .nb it should run on any perl version (win32 + linux) although its only tested on linux.
Does anyone have just the OS ROM portion of the new VZW MR1 update? If so could you link it or explain how you disassemble the NBH file? What tools did you use and do you know of a good thread to learn to make your own kitchen?
Yes, I have searched for these. Kitchen one just returns too many results. The Stock OS querry returns too many unrelated posts. I have seen it floating around before.
Any help is appreciated with any portion of this post.
Thanks!
scrosler said:
Does anyone have just the OS ROM portion of the new VZW MR1 update? If so could you link it or explain how you disassemble the NBH file? What tools did you use and do you know of a good thread to learn to make your own kitchen?
Yes, I have searched for these. Kitchen one just returns too many results. The Stock OS querry returns too many unrelated posts. I have seen it floating around before.
Any help is appreciated with any portion of this post.
Thanks!
Click to expand...
Click to collapse
First, you need to extract the self-extracting EXE that Verizon/HTC made.
Download the utility called NBHUtil. This will extract the NBH file and create NB files. In order to compile the individual files into an NBH again, use NBHGen, found in the kitchen under tools, with the following schema...
***Sample
TITA1000
00000000
VZW2.09
USA
200,0_SPL.nb
600,1_Splash.nb
601,2_SubSplash.nb
900,New_ExtROM.nb
300,3_Radio.nb
400,4_os-new.nb
*** End Sample
1 - is the phone model. Must be written as TITA1000
2 - CID
3 - Version
4 - Region Code
5 - 10 - these are the individual files.
first 3 digits is the area of memory to write the file. These MUST be as the sample. Then a comma and the "File Name". In order to create an NBH file that only has one, just delete the other lines. For OS only make it like this...
** OS Only
TITA1000
00000000
DCD_3.2.6
USA
400,4_os-new.nb
*** End OS Only
Edit: Forgot to explain NBHGen. It is a command line utility. Create the "Sample" text above and name it ****.txt (whatever you want to call it). Then run in CMD prompt..... nbhgen ****.txt. All the files must be in the same directory. If it finds the txt file, and the nb files, it will successfully create the NBH file as Ruu_signed.nbh
** OS Only
TITA1000
00000000
DCD_3.2.6
USA
400,4_os-new.nb
*** End OS Only
Click to expand...
Click to collapse
This isn't a dcd rom so why would you call it DCD_3.2.6? Should be whatever the output from nbhextract gives.
gc14 said:
This isn't a dcd rom so why would you call it DCD_3.2.6? Should be whatever the output from nbhextract gives.
Click to expand...
Click to collapse
Yes. I am aware... it's just a sample. You can call it whatever you want. Obviously don't use somebody's "Copyrighted" name. LOL.
gc14 said:
This isn't a dcd rom so why would you call it DCD_3.2.6? Should be whatever the output from nbhextract gives.
Click to expand...
Click to collapse
Thank you both very much. This is the info I needed. I want to delve into making my own kitchens. This is what I needed.
Thank you both!
nitro66215 said:
First, you need to extract the self-extracting EXE that Verizon/HTC made.
Download the utility called NBHUtil. This will extract the NBH file and create NB files. In order to compile the individual files into an NBH again, use NBHGen, found in the kitchen under tools, with the following schema...
Edit: Forgot to explain NBHGen. It is a command line utility. Create the "Sample" text above and name it ****.txt (whatever you want to call it). Then run in CMD prompt..... nbhgen ****.txt. All the files must be in the same directory. If it finds the txt file, and the nb files, it will successfully create the NBH file as Ruu_signed.nbh
Click to expand...
Click to collapse
Quick Question. I noticed the NBH tool you posted as the ability to make and NBH files as well as tear them down. Would you use the NBH Gen program to generate NBH files over this NBHUtil that you posted?
EDIT: Nevermind! I built my first OS only ROM from these two tools. My next question is how do I break the OS.NBH or NB down into the actual kitchen files. I would assume that is the next step to creating your own kitchen, correct? Long ago on my Apache I used the DogGuy Kitchen maker with success. I tried that the other day and it made a mess of my Titan, hehe. Any suggestions? Alos, I would prefer to learn command line if at all possible. I hate GUI's. Yes I really did say that. I hate GUI's.
These tools are in the kitchen as well. There is a readme attached.
scrosler said:
Quick Question. I noticed the NBH tool you posted as the ability to make and NBH files as well as tear them down. Would you use the NBH Gen program to generate NBH files over this NBHUtil that you posted?
EDIT: Nevermind! I built my first OS only ROM from these two tools. My next question is how do I break the OS.NBH or NB down into the actual kitchen files. I would assume that is the next step to creating your own kitchen, correct? Long ago on my Apache I used the DogGuy Kitchen maker with success. I tried that the other day and it made a mess of my Titan, hehe. Any suggestions? Alos, I would prefer to learn command line if at all possible. I hate GUI's. Yes I really did say that. I hate GUI's.
Click to expand...
Click to collapse
I've used the NBH tool to build it... but it came out funky. So I just use the NBHGen utility
nitro66215 said:
I've used the NBH tool to build it... but it came out funky. So I just use the NBHGen utility
Click to expand...
Click to collapse
Ok, same thing here. Otherwise everything is working exactly as you described. Thanks.
Will try the the IMAGEFS tool now.
This is too easy... So far...
Another question but sort of off topic. Is there a way to grab a ROM NB or NBH file from my phone? If so would it bring back all the custom apps and settings?