NBHextract to nb , but just Htcrt.exe cannot flash rom - Touch Cruise ROM Development

sorry for that , It seems solved
He everyone,
I try to use Kaiser_Kitchen to compile ROM ,
but finally found one thing.....
the first step extract OS.nb cannot flash ROM
1.NBHtract RUU_signed.nbh
2.use Htcrt , choose Polaris , Model POLAxxxxxx , System OS choose OS.nb
3.use Polaris CustomRUU flash ROM , but stop at "Smart Mobility" screen.
If I just use CustomRUU flash Rom , everything ok ,
If extract OS.nb then compact NBH , can't flash Rom
how can I do ?
ps. tool is from Swtos :
http://forum.xda-developers.com/showthread.php?t=373482&highlight=Swtos_WM6.1_polaris_kitchen

sorry for that , It seems solved , but I have problem dump XIP from other rom.(my ROM still fail , too)
still trying.............
..\tools\RomMaster.exe -x -w 5 -b 0x320000 OS.nb.payload -o xip.bin
this the error code:
[Info] It is a common ROM.
[Error] File is damaged, end address small than start address.
[Error] File is damaged, end address small than start address.
xip.bin: No such file or directory

RomMaster.exe -x -w 5 -b 0x020000 OS.nb.payload -o xip.bin

udK said:
RomMaster.exe -x -w 5 -b 0x020000 OS.nb.payload -o xip.bin
Click to expand...
Click to collapse
It works ..........
Thanks very much

Related

Problem with DumpRom

Hi,
I am experiencing some problems using dumprom. I downloaded it and extracted the content of an exe updater to get the "nk.nbf" os rom (w2k3).
After that, I tried ... :
Code:
dumprom nk.nbf -v -d toto
... to extract the content of this os rom but nothing happens ... dumprom seems to launch because the dos promt doesn't reappear and i need to quit using ctrl+c.
How can I extract files from 1.4x "nk.nbf" os rom (w2k3) ?
Thanks in advance,
Tristan
dumprom is working only with nk.nba files ...
you have to decompress nk.nbf in nk.nba with xda2nbftool or xda3 nbftool
First, thanks for your reply.
I tried to use xda3nbftool with the nk.nbf file I want to use but I got an error saying the password seems to be incorrect :
Code:
D:\HTC\ROMs\2003\BA_TMNL_14200_115_11300_Ship>xda3nbftool -x -t NK.nbf
xda3nbftool -x NK.nbf NK.nba 0xef29def0
WARNING: this does not look like a nbf header, possible you provided the wrong p
assword
xda3nbftool -x ms_.nbf ms_.nba 0x8e86c6cc
WARNING: this does not look like a nbf header, possible you provided the wrong p
assword
If I use the outputed nk.nba file, I got the same error ... dumprom hanging ...
I also tried to use the "Blue Angel Extended ROM Tool.exe" tool and got a nk.fat file but when I tried the dumprom tool on it, I got an error message :
Code:
D:\HTC\ROMs\2003\RUU_2.2_OrangeFR_v5.31.2.138_ship>dumprom nk.fat -v -d dump
unable to determine loading offset for nk.fat
I saw on Wiki that this tool only works with type I rom and the rom I am playing with is type II. They are talking about some tricks but I don't find them in the Wiki. If someone, know how to trick type II rom ...
No idea ?

Modify XIP

Hi, I am trying to modify the XIP of Hermes (e.g. modify boot.hv and FLASHDRV.DLL for big storage). Here's my steps:
>nbsplit -hermes os.nb
>RomMaster -w 5 OS.nb.payload -x -o xip.bin
Run the XIPPORT
"dump xip.bin"
"realloc P"
"build xip_out.bin"
write xip_out.bin to 00320000 of OS.nb.payload
>nbmerge -hermes os.nb
Although I haven't modified any file yet. But the reversed os.nb cannot boot after flashing. Anything I have missed? Any idea? Thanks.

Extracting XIP.bin from NK.NBA (MPX200)

Hi All,
I am trying to extract the xip.bin portion from the NK.NBA file (mpx200).
When I use rommaster I get an xip.bin file which I can use with XIPPORT but I don't like the size of this file. I do get usable files as output from XIPPORT
I use:
ROMMASTER -w 5 -b 0x001000 nk.nba -x -o xip.bin
it produces:
C:\romtool\XIPtool>rommaster -w 5 -b 0x01000 nk.nba -x -o xip.bin
[Info] It is a common ROM.
[Warning] o32_rom(0x820c5ea0)'s o32_data at 0x00000000 is zero.
[Warning] Found dif-referenced region [OLD] Address=0x821732a0 Length=0x00
014e00 ObjectType=0x00200000
[Warning] Found dif-referenced region [New] Address=0x821732a0 Length=0x00
014e00 ObjectType=0x00008000
[Warning] Memory Block(0x80141000,0x8019ad0c) overlap with Block(0x80142d3
c,0x80142d68).
[Info] New rom filename is 'xip.bin'.
xip.bin is now 33.936.532 bytes ?? it should not be so big ??
Using the file with XIPPORT produces about 1,78 Mb of usable data. I can unpack and pack the modules and files just fine.. creating an xip_out.bin however is not the same size
xip_out.bin is 33.927.840 bytes ??
Any ideas what I'm doing wrong???
Thanks
Thanks to all the ROM Guru's for not keeping this secret
I thought that you guys would be happy when someone is still interested in supporting this old device ??
Anyway to answer my own question:
dump -o 0x140000 nk.nba xip.bin
use this xip.bin in xipport
dump / add / delete / modify as required
write address in xipport 140000
write back in nk.nba
For what you do it?
For istall WM 6.1 ?

Reconstruct my own ROM

EDIT: progress in post #10
I'm trying to reconstruct my own Polaris ROM for warranty purposes. It's been a quest, since the information is very fragmented. So in this post I'm trying to get all the information together and also ask a question. So far I have managed to do this:
I have extracted the RAW files from my device with pdocread from this thread, executing from the command prompt:
Code:
pdocread -w -d FLASHDR -b 0x800 -p Part00 0 0x31f000 Part00.raw
pdocread -w -d FLASHDR -b 0x800 -p Part01 0 0x380000 Part01.raw
pdocread -w -d FLASHDR -b 0x800 -p Part02 0 0x4560000 Part02.raw
pdocread -w -d FLASHDR -b 0x800 -p Part03 0 0x8660000 Part03.raw
That gave me Part00.raw, Part01.raw, Part02.raw and Part03.raw.
Then I put Part01.raw and Part02.raw in the BaseRom folder of the Kaiserkitchen_01-20-08, according to this thread. I also put the RUU_signed.nbh file there from a ROM I downloaded. That happens to be a 1.28.404.2 Dutch ROM I downloaded from here, my current ROM is Dutch 1.27.404.1, so not the same.
Then I choose option e; b and finally d in the Kaiser Kitchen (running KAISERKITCHEN.CMD) and it creates an OS.NB file and a XIP folder in the ROM folder.
I would like to proceed with extracting the OS.NB file (that's what I need right?) using ImgfsTools 2.1rc2 using the commands according to udk's post:
Code:
nbsplit -kaiser OS.nb
imgfsfromnb OS.nb.payload imgfs.bin
imgfstodump imgfs.bin
and then use package tool to create the OEM and SYS folders that can be used in the Polaris kitchen.
However, when I do a binary compare of the OS.NB file created by the Kaiser Kitchen and the OS.NB file I can extract from the 1.28.404.2 RUU_signed.nbh (using NBH extract) they are exactly the same! So somehow, the Kaiser Kitchen is not taking anything from my dumped ROM's RAW files, but everything from the downloaded 1.28.404.2 RUU_signed.nbh. What am I doing wrong?
Thanks!
deechte said:
I also put the RUU_signed.nbh file there from a ROM I downloaded. That happens to be a 1.28.404.2 Dutch ROM I downloaded from here
Click to expand...
Click to collapse
I think you have to use an original WWE baseROM, but i might be wrong.
As a ROM cooking newbie, I don't actually understand why the RUU_signed.nbh is needed anyway. Isn't everything present in the dump I made? So how can my reconstructed ROM be identical to the original if it contains parts from another ROM?
Sorry, still learning...
If you are sending your phone back for warranty reasons you will need to put it back to all it's origional settings...
You will need to flash the origional Splash Screen, and flash the origional rom (assuming the Netherlands is the country you purchased the phone from, you will need the dutch one). The origional Dutch rom can be found here - http://forum.xda-developers.com/showthread.php?t=416165
You will then need to flash your origional SPL. How to flash origional SPL can be found here - http://forum.xda-developers.com/showthread.php?t=381600
Good Luck
tvrtim said:
You will need to flash the origional Splash Screen, and flash the origional rom (assuming the Netherlands is the country you purchased the phone from, you will need the dutch one). The origional Dutch rom can be found here - http://forum.xda-developers.com/showthread.php?t=416165
You will then need to flash your origional SPL. How to flash origional SPL can be found here - http://forum.xda-developers.com/showthread.php?t=381600
Click to expand...
Click to collapse
Thanks for your reaction. The problem is that the dutch ROM in that thread is not the same as mine, neither is the radio ROM. So it won't take my device back to it's original settings. That's why I wanted to use that one in combination with the raw files from my own device.
SPL is the next problem. I know I have to go back to the original one too. However, the thread only offers SPL 1.25.0000 and 1.28.0000, mine is supposed to be 1.27.0000.
have you made any progres from your last post ?
i would be interested in this procedure aswell.
Ravest.
Unfortunately not. I'm still hoping some experienced cook will take a look at it. I think it would be nice if there would be a complete procedure for how to do this in this post. Right now it's a big puzzle.
Why do you really want to get to the original ROM? Is there a chance that HTC knew wich Radio version they did put on your Polaris?
No offence btw... I really don't know
EbOoZ said:
Is there a chance that HTC knew wich Radio version they did put on your Polaris?
Click to expand...
Click to collapse
I'm guessing they can know that. Futhermore, when I understand how to do this I can proceed modifying ROM's. I'd just like to learn.
Okay, it appeared I was doing some thing wrong. First of all, the pdocread commands were wrong cause I copied them from the Kaiser thread. You have to execute
Code:
pdocread.exe -l
first, with your Polaris connected via USB (no USB-hubs!). Then read the numbers that appear there, that appear coloured in this thread.
So then I had to do:
I have extracted the RAW files from my device with pdocread from this thread, executing from the command prompt:
Code:
pdocread -w -d FLASHDR -b 0x800 -p Part00 0 0x[COLOR="Red"][B]31f000[/B][/COLOR] Part00.raw
pdocread -w -d FLASHDR -b 0x800 -p Part01 0 0x[COLOR="Red"][B]3c0000[/B][/COLOR] Part01.raw
pdocread -w -d FLASHDR -b 0x800 -p Part02 0 0x[COLOR="Red"][B]5d40000[/B][/COLOR] Part02.raw
pdocread -w -d FLASHDR -b 0x800 -p Part03 0 0x[COLOR="Red"][B]6f40000[/B][/COLOR] Part03.raw
That gave me the correct Part00.raw, Part01.raw, Part02.raw and Part03.raw.
Then I put Part01.raw and Part02.raw in the BaseRom folder of the Kaiserkitchen_01-20-08, according to this thread. I also put the RUU_signed.nbh file there from the official WM6.0 RUU_Polaris_HTC_WWE_1.25.405.1_radio_sign_25.65.30.04_1.58.21.23_Ship ROM I downloaded. My current ROM is Dutch 1.27.404.1, so definitely not the same.
Then I executed KAISERKITCHEN.CMD and chose all the options subsequently, as described by jcespi2005 in this thread (so successively: e, b (for dumped ROM), c, b, choose BuildOS tab, Load ROM option, Choose the KaiserKitchen folder, Go > Option, Close BuildOS, in the HRT choose ROM Builder, Choose Kaiser in device list (then for Polaris enter POLA**** instead of KAIS**** under model ID, in the System button (looks like this: ...) choose the os-new.NB file from the Kaiser Kitchen folder, press the BuildROM button and save as RUU_signed.NBH). When I started this thread I only chose e and b and then ended the Kitchen, cause I thought that would be enough to reconstruct, but clearly it isn't.
I ended up with a RUU_signed.NBH that appears to contain MY dutch 1.27.404.1 ROM. How do I know that without having flashed it to my device yet? I extracted the nbh file again with NBHextract (you get 00_OS.nb, rename that to OS.nb) and dumped OS.nb with ImgfsTools 2.1rc2 using the commands according to udk's post:
Code:
nbsplit -kaiser OS.nb
imgfsfromnb OS.nb.payload imgfs.bin
imgfstodump imgfs.bin
Opened the /ImgfsTools/dump/ folder with package tools and it says it's a dutch ROM!
Now, I'll flash it to see if it works.
I hope this detailed howto makes it possible for others to reconstruct their ROM too. Let me know! Mind you, I only used the Kaiserkitchen to do this, no Polariskitchen. I think I will be needing that one though to make changes to ROM's in the future. But at least I have my original ROM now. Next step is to see if I can reconstruct the radio part too.
***** I'm no experienced chef, so the information above may not be right or complete. I'm just trying to get a grip on this stuff and to learn and I'm sharing my experiences. ROM cooking and flashing are your own risk. I take no responsability in any damage to your device.*****
Okay, I flashed my device to udk's Diamond R8, and then back to my own original ROM. Then hard reset and yeehaa, it works, almost. My device boots up normally and everything is back the way it was, in dutch. Except for some small things:
The HTC Home Plugin is absent on the today screen after the hard reset. I can select it to appear in the settings. Then it does appear, but it's totally empty. Just a grey empty space where all the tabs used to be. All other applications are in the start menu and appear to be working fine.
I wanted to see an overview of the listed ROM-version, radio-version etc, so went to settings > system. However the "device info" (I think that would be the english translation) option wasn't there anymore.
So somehow, my ROM is almost fine, but just not completely. What am I doing wrong?

A programe about XIP.BIN of Blue Angle?

I'm learning rom building.
I used Rommaster.exe to extract XIP.BIN from nk.nba.But nothing (had not xip.bin-no thing).I made Bat file with code:
Code:
RomMaster.exe -w 5 -b 0x001C0080 nk.nba -x -o xip.bin >nul
mkdir XIP
dumprom xip.bin -5 -d XIP >nul
But only XIP Folder was made.In XIP folder- no thing.
=>>>Please help me how to extract XIP.BIN From nk.nba???
Thanks a lot.
Please help me how to extract XIP.BIN From nk.nba???
I made XIP.BIN successfully.

Categories

Resources