Vox Sim unlock - HTC Vox

EDIT: This thread is superseded by this one here.
The idea is to sim unlock your Vox by entering a sim unlock code when a 'wrong' sim card is in the phone.
I can prolly find that unlock code. If one of you is interested to test this method please drop me a PM. You will need to make a bkondisk sd dump and also read out a few bytes from memory with pmemdump. If you don't know these proggies then don't bother PM me!
Only the first will be served
PS: if it works I will release a program to do it yourself some time sooner or later
EDIT:
Ok, my method works fine and allows to *SIM* unlock the Vox and branded versions of the Vox (E650, etc.)
I won't develop a program to find the codes. There are a couple of reasons: there are people who will use my sw to rip-off users on e.g. ebay; I have too little time to do the development; HTC wouldn't like the idea of me publishing a program using their intellectual property.
To find unlockcodes, I'm running firmware code in an ARM simulator. It takes about an hour to find the code and it's quite a laborous and delicate task to set it all up.
So I'm currently unlocking excalibur, vox and oxygen phones on a case-by-case basis. Contact me by PM and I will make you a reasonable offer.
You will have to send me 2 files which allow me to find your unique unlockcode. See description below.
Make sure your phone is application unlocked before carrying out these steps. In this post you find a simple description and program to do that.
1. run:
Code:
pmemdump 0xB002709C 16 > docid.txt
This creates a text file docid.txt. The first two bytes are usually 0xEC 0x00. The tool pmemdump is part of the itsutil toolset by itsme, download here
2. do a bkondisk dump (for further details see here):
first copy bkondisk.exe to \windows on your device, then:
Code:
prun bkondisk -v0 -p2
This creates a 4MB file bk_02_0005.img in \ on your device. The tool prun is also part of the itsutil toolset by itsme.
Zip both files (docid.txt and bk_02_0005.img) and email them to me. Contact me by PM first to get my email address

Are there any progress with that?? I can be a volunteer but I don't know how to get those information from my phone that you need :]
Regards

macmaz said:
Are there any progress with that?? I can be a volunteer but I don't know how to get those information from my phone that you need :]
Regards
Click to expand...
Click to collapse
I can also try~!

id like to volunteer
i hope you can find a method to unlock my phone
thanks alot

I won't develop a program to find the codes. There are a couple of reasons: there are people who will use my sw to rip-off users on e.g. ebay; I have too little time to do the development; HTC wouldn't like the idea of me publishing a program using their intellectual property.
To find unlockcodes, I'm running firmware code in an ARM simulator. It takes about an hour to find the code and it's quite a laborous and delicate task to set it all up.
So I'm currently unlocking excalibur, vox and oxygen phones on a case-by-case basis. Contact me by PM and I will make you a reasonable offer.
You will have to send me 2 files which allow me to find your unique unlockcode. See description below.
Make sure your phone is application unlocked before carrying out these steps. In this post you find a simple description and program to do that.
1. run:
Code:
pmemdump 0xB002709C 16 > docid.txt
This creates a text file docid.txt. The first two bytes are usually 0xEC 0x00. The tool pmemdump is part of the itsutil toolset by itsme, download here
2. do a bkondisk dump (for further details see here):
first copy bkondisk.exe to \windows on your device, then:
Code:
prun bkondisk -v0 -p2
This creates a 4MB file bk_02_0005.img in \ on your device. The tool prun is also part of the itsutil toolset by itsme.
Zip both files (docid.txt and bk_02_0005.img) and email them to me. Contact me by PM first to get my email address

Where do I need to write this comands ??
pmemdump 0xB002709C 16
prun bkondisk -v0 -p2
Regards
Only what I could get it that but I dont know is it correct or not...

macmaz said:
Whre do I need to write that comands ??
pmemdump 0xB002709C 16
prun bkondisk -v0 -p2
Regards
Click to expand...
Click to collapse
pmemdump and prun are both part of itsutils from itsme and are executed from a CMD window

ok but when I double click on prun the CMD window open for 1 s and close :/
Ok I think I got it
Here's my files
If something is wrong please tell my what should I do:]
Regards

looks good, I will send a code in a few hours

try with 66612476
and if it works make another bkondisk dump and post it here please

Man I LOVE YOU IT WORKS!!!!!!! :
Here you are my bkondisk dump
You are the best!!!!
Thanks a lot finally I can use my lovely spv e650
Bless that man he's the god

Congrats on your unlock device
Jocky you are a star and macmaz just cidunlock it and put a rom of your choice I am using 1.15 HTC and so far so good not glitches or errors.

dragon546 said:
Jocky you are a star and macmaz just cidunlock it and put a rom of your choice I am using 1.15 HTC and so far so good not glitches or errors.
Click to expand...
Click to collapse
Do you know a rom with polish language maybe ??

Mac
Have a look at this link
http://forum.xda-developers.com/showthread.php?t=331458&highlight=polish+Rom

hi guys I have a little problem with my spv e650 after unlocking :] I cant instal any softwar. when I wanted to instal cab from orange with security disable it wants me to chose the destination, i click ok and that four colour circle shows up and doesn't stop rotating :/ I need to remove my batery and put in again, after that I see that security software has been installed becouse it's in Remove Programs , in Settings :] That happen with all software: htc reboot, opera and so on : instaling, desitnation, circle dont stop rotating... I don't know it is becouse of unlocing procedure but I noticed it after that... Any ideas?? I did hard reset but it didn't help...
Regards

Try switching your TXT input to T9 and then try installing your apps.

installs hang when keyboard is out or input is not in XT9 mode:
You might want to look at this link:
http://www.modaco.com/content/Smartphone-Standard-News/255845/SPV-E650-de-Brand-Fix-Pack-0-5/

thanks a lot that file fixed my problem
Now I can start to explore full capabilities of my phone

hi
this come from one s710 SFR FRANCE hope this help you

This thread can be closed. My sim unlock method works, as proven by macmaz. As written in my first post I'd only support the first user.

Related

how to unlock rom on treo 750v - made by htc

we are trying to unlock and or dump the rom on the treo 750v. this is a newly released treo made by htc. the treo has an awesome feature called theeaded sms which does chat style sms.
we have tried the grab it program that was on this site with no luck.
does anyone no of a way to get this done? does any have any ideas of why the grab it program doesn't work. does anyone want to help?
thanks, cody
So far we've manage to get someone to try the grab_it tool from
http://forum.xda-developers.com/showthread.php?t=238945
But they are getting a write error. I assumed since the Treo 750v uses a mini-sd card the appropriate version of grab_it would be grab_it_128_minisd_468.exe. I'm trying to get someone to try the grab_it_128_150.exe version to see if that works, since that is the version BeyondTheTech used to extract the Treo 700w rom. The 700w uses a regular sd card though.
I asked the guy that tried grab_it_128_minisd_468.exe what the storage card folder name was set to and they verified that the registry was set to "Storage Card". So it's unclear to me why they are getting a write error. Maybe the minisd version expects something else? The card used was a 2GB minisd so it should have plenty of room for the rom.
Anyone familiar with grab_it know what is different about the minisd version? I read through the thread but it wasn't clear to me what the difference is.
Ok, I'm the one who's run the grabit tool on a 750v
It runs Ok and creates a 128Mb dump.bin file but the file appears to be mostly empty. If I zip the file up it only takes 147Kb which seems to confirm this. Am I doing something wrong or is it a bug in the tool
i have hope 750v user and appreciate your efforts
750v_User said:
Ok, I'm the one who's run the grabit tool on a 750v
It runs Ok and creates a 128Mb dump.bin file but the file appears to be mostly empty. If I zip the file up it only takes 147Kb which seems to confirm this. Am I doing something wrong or is it a bug in the tool
Click to expand...
Click to collapse
Can you upload the bin file please. I think someone here may be able to figure this out by looking at the contents of it.
If anyone has a source for a unlocked 750v let me know i really need one.
File and registry dump.
750v_User said:
Ok, I'm the one who's run the grabit tool on a 750v
It runs Ok and creates a 128Mb dump.bin file but the file appears to be mostly empty. If I zip the file up it only takes 147Kb which seems to confirm this. Am I doing something wrong or is it a bug in the tool
Click to expand...
Click to collapse
Hi, please can you do me favor? I have idea which can help us get SMS threading application and other palm features as well. If isn't possible dump ROM in this moment can you download Total Commander (freeware) http://www.ghisler.com/pocketpc.htm and do following.
1, Create foder on memory card and go to the Total commander.
2, go to the root of your device and copy to SD everything what is possible specially from Windows folder and Program Files (rest will be fine as well)
- this will take some time and in case of problem with file just skip that file.
3, When this will be done please go into the "\\" in the root and then to "registry"
4, now select registry tree one by one and copy again to card.
This will give us most probably files which will be required for hack and registry keys which will be required as well i think.
Thank you very much for your help.
Here's a zipped up copy of the dump.bin file, hope it helps
I extracted that dump.bin and it looks like a 256 byte block of data that is repeated at each 16 meg boundary 8 times.
Does this ring any bells to the experts?
The only readable text is "CHEETAH IPL EVT".
wow! that's great!
I don't have a Cheetah, but there's some info on the hermes forum that might be of interest to you:
http://forum.xda-developers.com/showpost.php?p=1019171&postcount=22
750v_User please try this program to extract the rom image.
unzip and copy TestDump.exe to your device and run it. In the "Path to file" enter the path for the dump file (i.e. \Storage Card\dump.bin). In the "Mbytes to dump" enter 128. Then press the "Dump" button. It should make a dump of the ROM file.
Zip it up and upload here. Thanks!
pof said:
I don't have a Cheetah, but there's some info on the hermes forum that might be of interest to you:
http://forum.xda-developers.com/showpost.php?p=1019171&postcount=22
Click to expand...
Click to collapse
Thanks. That post appears to be for updating the rom. I wonder if there is some key combo like this to extract the rom.
hannip said:
Thanks. That post appears to be for updating the rom. I wonder if there is some key combo like this to extract the rom.
Click to expand...
Click to collapse
Based on the Hermes experience, there's no knonw way yet to extract it in a form that after is flashable on another device, but you can follow these instructions to dump some parts:
http://wiki.xda-developers.com/index.php?pagename=Hermes_HowtoDumpRom
You can also use pmemdump to copy some of the ROM contents to a file. Once you've dumped SPL you can search for strings on it and you'll see the bootloader commands.
HTC has removed all the "d2s, s2d, r2sd..." and like commands in the hermes bootloader, probably you are lucky and you have some command to dump the rom to sd in your bootloader.
Hope that helps
The ROM dump // extract discussion is over my head...one question though has anyone sorted out how to unlock this device?
codyppc said:
we are trying to unlock and or dump the rom on the treo 750v. this is a newly released treo made by htc. the treo has an awesome feature called theeaded sms which does chat style sms.
we have tried the grab it program that was on this site with no luck.
does anyone no of a way to get this done? does any have any ideas of why the grab it program doesn't work. does anyone want to help?
thanks, cody
Click to expand...
Click to collapse
im just a noob but cant we use the combination of StyleTap and AdvBackup to create a complete rom backup of the treo 750v and then grab what we want from that?
will that work????
just tryin to help........
what if someone get the .nbh file..can that be extracted??
750v ROM dump uploaded
I put a rom dump from the TestDump.exe tool on ftp.xda-developers.com. userid: xdaupload pw: xda
file: treo750v_dump_rom.zip
I used the dumprom tool to extract files, but it looks like it's only extracting the first rom section it finds and stops. Can one of the experts take a look at the dump and see if you can extract the other sections please.
Thanks.
What are you getting from the first rom section?
Sounds weird... was the dump complete?
It looked like a bunch of system files. The kernel, img.dll, filesystem drivers and the like.
There is 59MB of data in the dump so there has to be more stuff in there.

llbasha - Latest WM5 using AKU3.5 - with KitchenUtnsils

Read end of post for updates .. Thank you .......
====================================
WM2005 AKU3.5 by LLBASHA
ROM: 3.50pp16a1
dated: 02.02.2007
OS 5.1.195 (Build 15698.3.5.0)
RamDisk 48mb
PagePool 16mb
Storage 30.53mb
Program 61.29mb
For Himalaya PH10B (XDAii MDA2 Qtec2020 Imate Pocket PC)
=============================================
Hi everybody,
This is, I guess, what MANY, I believe, is looking for.
A good clean stable and fast WM5 rom based on AKU3.5 that you can change easily to your liking... right?
Well, your wishes come true. Here you will find my new ROM, the tools, and procedure to modify it!!!
It does NOT include ANY personal info.
It include clean original splash screen theme
It includes lots of Today-plug-in that you can disable if you do not want (disabled by default).
Modifications involve, beside adding & removing files, changes of hklm.reg, hkcu.reg, default.hv, and system initflashfiles.dat files. The ROM has been optimized to the extremes, hence if you decided you want to modify it please make sure what ever you add MUST be less or equal to what ever you delete.
It took me continuous 10 days of work and 8 flashes to get this procedure and ROM right.
I have tested the room and it works perfect ... however, please forgive me if I have overlooked something.
Note: I suggest you test the rom BEFORE you install any extra programs of your own ... and then again AFTER installation... so you can determine the source of the problem or the violating program, if any.
If you want to automate the installation of additional programs, stick the cabs file in the ExtROM directory in the SD-card and edit the config.txt accordingly.
To use the modification tools, just drop your favourit NK.NPF file in the RomEditor directory and click on steps 1 to 7 and follow the prompt.
It could not be easier ... Well, is it??? You will soon find out!!!!!!!!!!
Final word of thanks to tjlabais for his detailed tutorial, scripts and support. Many thanks to Mamaich for his incredible tools, as well as to Helmi_c, Buzz_lighter, Tofclock, and all those who contributed indirectly or in the past to get WM5 working on our Himalaya.
http://www.megaupload.com/?d=6FCT36YH
Filesize: 27.96 MB
Filename: llbasha-WM5-AKU35pp16a1.rar
Description: llbasha Himalaya WM5-AKU35pp16a1
Good luck and enjoy.
LLBASHA
Note: You can refer to tjlabais original tutorial here:
http://buzzdev.net/index.php?option=com_phorum&Itemid=125&phorum_query=read,26,27196,page=1
-------------------------------------------------------------------------------------------------------------------------------
Edit1: Guys, please note I did not invent the wheel here!!! I only picked already existing work and put it into organized specific working method with example (my rom). So please no nag where did I get this or that from. What I am giving you here is next to perfect ROM that you CAN edit to suit your own taste.
Edit2: This method is NOT for new users - noob. It is NOT like the kitchen method. Also, question about the tools should be posted in the original thread by tjlabais.
Edit3: If you have problem download from MegaUpload, use this one: http://www.4shared.com/file/10238126/881bdc5f/llbasha-WM5-AKU35pp16a1.html?s=1
Edit4: Copy this file: \windows\iexplore.lnk to to here: \Windows\Start Menu\Programs\iexplore.lnk
Edit5: If you have slow startup or problem delete this file: \Windows\StartUp\psShutXP.lnk
Edit6: I got report of 500+ downlaods and 2000+ views bu no reports here on anything. Please file in your actual experence so others can benefit, regarding the ROM itself or the RomEditor tools. Thank you.
Edit7: Changing ramdisk size from registery only is not sufficient to pass the difference to program. New versions shall be released soon with different ramdisk size, but will keep 16mb pagepool.
Edit8: an new update rom version with 96mb program 16 ramdisk 16 pagepole
has been posted here:
http://forum.xda-developers.com/showthread.php?t=294016
New Version here
WM2005 AKU3.5 by LLBASHA
ROM: 3.50pp16A2
dated: 13.02.2007
OS 5.1.195 (Build 15698.3.5.0)
RamDisk 48mb
PagePool16mb
Storage 30.53mb
Program 64mb
For Himalaya PH10B (XDAii MDA2 Qtec2020 Imate Pocket PC)
This version is basically a simple update. Changes from version 3.50pp16a1
Removed SpeedDial and InternetCachiClean
Added cLaunch (great free today plugin)
Fixed startup delay caused by psShutXP
Fixed links and arranged icons in folders.
No known problem has been reported after intial version 450 downloads
Filesize: 28.0 MB (29,410,652 bytes)
Filename: llbasha-WM2005-AKU35pp16A2.rar
Description: llbasha Himalaya WM2005-AKU35pp16A2
Download links:
http://www.megaupload.com/?d=GVFL6OJD
http://www.4shared.com/file/10571804/ce7f3d8c/llbasha-WM2005-AKU35pp16A2.html
I have uploaded an alternative version, details of it you can find it here:
http://forum.xda-developers.com/showpost.php?p=1168356&postcount=79
It is not an upgrade to above but rather a special version custom made requested by some members.
Total download to date 3100+
Enjoy
llbasha
--------------------------------------------------------------------------------------------------------------------------------
llbasha - Latest WM5 using AKU3.5 - more screen shots
Here are some new screen shots
Engjoy
llbasha
THANX A lot
thanx for this rom. U have done a good job cause u had not puted any personal info and non removable applications.
CAN u tell me how can i change sms background as u did
Alternative download from here:
http://www.4shared.com/dir/1965106/cd5aba6f/sharing.html
I hope this works better.
llbasha
does it give also on German ?
Tahnks llbasha
While I'm dowenloading:
1) Do u mean that u include the cooking way in ur uploads?
I read the tutorial u mention and it was not clear for me (as the subject here 4 the Ramdisk and pagepool, by the way thanks 4 the explanation there)
I hope u can find time to make some easy explanation.
The_hesham said:
Tahnks llbasha
While I'm dowenloading:
1) Do u mean that u include the cooking way in ur uploads?
Click to expand...
Click to collapse
Yes, I did put all the cooking tools and steps to take to modify ANY rom to your liking.
llbasha
Question started
Dear llbasha
Please explain more:
In the text file "llbasha-WM5-AKU35pp16a1.txt
5. If you want to change the image/rom version (show on first splash screen bottom right corner), Go to address: 19, 82CDF, 1C1C18
search for old version and replace it with exact number of digits.
6. If you want to change the rom version and date that show when accessing device information from settings, search for the version in unicode, and the date stamp in ANSI.
7- Save your file and run 6ReassembleNPF.bat
[Correction is 7ReassembleNPF.bat]
And
In step no. 2
"When done, remove all HIDDEN attributes for ALL files.
Note: use Registery Workshop as editor for HKLM & HKCU even if nothing changed (not all rom modifications would require registery editing), i.e. open the file and save again irrespective)."
Please explain?
The_hesham said:
Dear llbasha
Please explain more:
In the text file "llbasha-WM5-AKU35pp16a1.txt
5. If you want to change the image/rom version (show on first splash screen bottom right corner), Go to address: 19, 82CDF, 1C1C18
search for old version and replace it with exact number of digits.
llbasha: Open the nk.nba with hex editor... search for the older version you want to change. In my case, I find it at the above addresses. This process change only the image version that you see on first splash screen... ok
6. If you want to change the rom version and date that show when accessing device information from settings, search for the version in unicode, and the date stamp in ANSI.
llbasha: The same version shows also when you start you device, go to settings, device info. To change this, again open nk.npa with hex editor and search for it but in this case search using unicode. To change the date of the version, search for the old version date in ANSI and when you find it change it... OK
7- Save your file and run 6ReassembleNPF.bat
[Correction is 7ReassembleNPF.bat]
llbasha: There is no 6........bat anyway. Thanks
And
In step no. 2
"When done, remove all HIDDEN attributes for ALL files.
llbasha: I suspected that some hidden files may not be picked up by the compiler, so I removed all hiden attributes ...
Note: use Registery Workshop as editor for HKLM & HKCU even if nothing changed (not all rom modifications would require registery editing), i.e. open the file and save again irrespective)."
llbasha: What do you want me to explain? ... please rephrase..
Please explain?
Click to expand...
Click to collapse
I hope this helps
Some Apps like Schekar rom...
Hi,
Is this screeshots from your new ROM?
I think there is some apps like Schekar ROM presente in this new rom.
I've returned to Helmi's rom, just because is almost 100% clean.
Thanks anyway for your work.
zipzop said:
does it give also on German ?
Click to expand...
Click to collapse
Sorry ... This is English ROM but sure there is someone out there who knows how to localize it.
Regards
llbash
superxx said:
Hi,
Is this screeshots from your new ROM?
I think there is some apps like Schekar ROM presente in this new rom.
I've returned to Helmi's rom, just because is almost 100% clean.
Thanks anyway for your work.
Click to expand...
Click to collapse
Yes, above screen shoots are from my rom on my O2XDAii and no one else.
This is clean ROM ... what are you taking about??? Please be specific... What is 100% clean???????????
There was some remaining space in the rom so I filled it with some VERY small today plugin and utilities and are disabled by default. So where is the problem. This remaing space you can't use it anyway once you cocked the rom.
Any I included the tools and steps to remove/add to your liking... So....
Hello Sir,
I will try to use this rom frist.Thank you to much.
sorry
Hello Sir,
After I use it .Almost OK but my Internet exploer icon lost .How I get it back ?
krishan2207 said:
HI
i found a bug.Whenever i tried to open download agent it opens with a blank screen nothing to do in that application so check it out.
Click to expand...
Click to collapse
Where did you get that??????????????
Are you talking about my ROM??????????????
Question started ....contenue
llbasha said:
I hope this helps
Click to expand...
Click to collapse
Dear llbasha
The_hesham: regarding no.5
I search for 19, 82CDF, 1C1C18 as shown ,
Then what to do?
Regarding no.6
6. If you want to change the rom version and date that show when accessing device information from settings, search for the version in unicode, and the date stamp in ANSI.
llbasha: The same version shows also when you start you device, go to settings, device info. To change this, again open nk.npa with hex editor and search for it but in this case search using unicode. To change the date of the version, search for the old version date in ANSI and when you find it change it... OK
The_hesham: Search for what see photo no4 & How to change?
Regarding step no.2
llbasha: I suspected that some hidden files may not be picked up by the compiler, so I removed all hiden attributes
The_hesham: Do u mean to delet all hidden files & which files I suspect it will not be picked by the compiler?
Regarding :
Note: use Registery Workshop as editor for HKLM & HKCU even if nothing changed (not all rom modifications would require registery editing), i.e. open the file and save again irrespective)."
The_hesham: Which workshop as editor & which file to edit?
I'm sorry for to much questions but I did cooking by bepe tools and I want to know about this way.
sorrawut said:
Hello Sir,
After I use it .Almost OK but my Internet exploer icon lost .How I get it back ?
Click to expand...
Click to collapse
Copy this file: \windows\iexplore.lnk
to here: \Windows\Start Menu\Programs\iexplore.lnk
Thanks
llbasha said:
Copy this file: \windows\iexplore.lnk
to here: \Windows\Start Menu\Programs\iexplore.lnk
Thanks
Click to expand...
Click to collapse
Thank Sir,
krishan2207 said:
thanx for this rom. U have done a good job cause u had not puted any personal info and non removable applications.
CAN u tell me how can i change sms background as u did
Click to expand...
Click to collapse
Do you know about HTML, STYLEs, and JAVA scripting???????????
If you do then you want be asking this question, and if you do not know then my answer to you is I do not either!!!!!!!!!!!
You need an expert from Delhi to answer this. Do you know anyone??? May be you can ask him about your 'download agent bug' problem as well.
Thanks

I need a little clarity for the upgrade/downgrade process

Hi,
I have been on this site for about a week now. I was drawn here by the desire to take my Imate JamIn up to WM6.
So I pulled from the web the file:
RUU_Prophet_220734_2207114_024721_NVID_QTEK and hurled it onto my PDA
It went from Imate to QTEK but still worked pretty well. So I then went and loaded Upgrade Happy from a site in Roumania.
This loaded but was distinctly unimpressive and unstable so I managed to downgrade to the WM5 file above again.
Then I tried Smart1's v2 WM6 file and this went on OK. However, I have experienced a few issues with the battery and other things like Timewizard, etc.
So I have gone back to the NVID_QTEK WM5 file again.
BUT I would really like to put back on my Imate ROM which I have stored away. Sadly, whenever I try and load the ROM it states that the version is lower and I can only do an UPGRADE ( I get a 286 error).
I have searched here and Google and think that I can Un CID my phone (not actually sure what this does mind). I have read posts suggesting that once done I can load any version of any Prophet ROM on my PDA.
I went off and ended up on PDAMobiz and pulled down a file called:
PDAMobiz.com_ProphetAKU2_unlockCID.rar
But this site is incredibly slow and the file is corrupt when I finally get it down.
Can anyone explain to me whether it is possible to get to reload my earlier ROM version Imate ROM? If it is can anyone explain what I need to do and perhaps put up a link to an area where I can pull the tools down.
This website has a great reputation for helping each other out and I am sure that my ignorance will be forgiven,
Kind Regards,
Sam.
Hi
This is because you have upgraded your ipl/spl and these can't be downloaded.
But don't worry it's not a problem
if you have the original rom you should have a .nbf file?
You can use typho5.exe -x xxx.nbf (whatever it is called) this will extract the individual elements (ipl/spl/os/extrom/radio/splash screens) as .nb files.
Then use nb2nbf to build a new nbf file without spl/ipl parts. copy this file back to your backup folder (rename the original one first) and install again
Good Luck
Thanks - I have just a couple more dumb questions...
FlykThewiz,
Many thanks for your help.
I have the file:JAMin_WWE_213923_2139123_022021_shi.exe
Do you know how I get the .NBF out of it?
Also,
You couldn't point me to the tools you mention could you?
If I do what you said then do I get back my own Imate Splash screen too?
Do you know if I will suffer any problems with things being different versions?
Once again many thanks I will let you know how I get on.
Kind Regards,
Sam.
You can use winrar (free download - search google if you don't have it) to extract the files in your exe.
One of the file will be the nbf.
I will sort out the instructions for you but I have to go out for a couple of hours at the moment.
T H A N K Y O U
flykthewiz,
You are simply The MAN
Many, Many thanks,
Sam.
I don't know about being the man - i had the same problem myself.
Attached is a zip file with the two tools you need.
I suggest you create a folder called c:\rom and copy the contents of your exe file and these to programs into it.
goto a dos cmd window and cd \rom
type "typho5 -x nk.nbf" (no quotes)
you will then have a number of *.nb files in c:\rom
rename nk.nbf to nk.org
send me the list of nb files you have.
ZIPPED with winzip 12
Hi flykthewiz
is 92000000-Splash.nb is the imate pic when softreset
cause am using AKU3.3.13.ASERG after I unlocked my Jamin with RUU_Prophet_220734_2207114_024721_NVID .... and want to go back only for the Imate screen instead of QTEK, and can I flash with it only
thanks
Splash Screens
There are two splash screens - the one you mention is the first (often blank)
The second is 9d000000-xxx.nb this is the one that is displayed most of the time when the phone is booting. To enter this in nb2nbf you need to manually enter "HTC Logo" as the image name.
secoseco said:
Hi flykthewiz
is 92000000-Splash.nb is the imate pic when softreset
cause am using AKU3.3.13.ASERG after I unlocked my Jamin with RUU_Prophet_220734_2207114_024721_NVID .... and want to go back only for the Imate screen instead of QTEK, and can I flash with it only
thanks
Click to expand...
Click to collapse
FlykTheWiz,
Thanks for the tools.
The files I have are as follows:
30/03/2007 13:50 59,768,832 80040000-OS_0.nb
30/03/2007 13:50 786,432 91000000-SPL_1.nb
30/03/2007 13:50 786,432 91000000-SPL_2.nb
30/03/2007 13:50 196,608 92000000-Splash.nb
30/03/2007 13:50 2,621,440 96000000-GSM_0.nb
30/03/2007 13:50 10,485,760 9b000000-Extension.nb
30/03/2007 13:50 65,536 9d000000-HTC.nb
28/03/2006 15:51 74,713,088 nk.nbf
16/09/2005 12:20 53,248 nb2nbf.exe
13/03/2006 19:09 784,972 typho5.exe
I have loaded up the nb2nbf file but have no idea what to do with it - The only option appears to be for a Tornado...
Thanks,
Sam.
Ok
fill in nb2nbf like the image in the attached zip file.
Important notes:
1. use the ... browse buttons to select your files and the length field will be filled in for you (the image shows mostly zeros)
2. the image name for the extended rom is Extension Rom (not Extended) and you have to type it manually - its not in the drop dow list.
3. the start address for OS.nb is 80040000 (not 82040000 which the program defaults to)
4. you need to manually type HTC Logo in image type - its not in the list.
Do not add the ipl and spl files! (these are the ones that are causing your problems)
When its all filled in click on Translate and when that is finished exit the program.
If you have copied all of the contents of your extracted exe to c:\ROM you should have a program called ROMUpdateUtility.
Connect your pda to usb and run this program and follow the instructions (you've done this before )
After its finished your phone will hard reset and you should have your original ROM.
It doesnt matter that ipl and spl are different versions
Good Luck
flykthewiz said:
There are two splash screens - the one you mention is the first (often blank)
The second is 9d000000-xxx.nb this is the one that is displayed most of the time when the phone is booting. To enter this in nb2nbf you need to manually enter "HTC Logo" as the image name.
Click to expand...
Click to collapse
thanks for replay
in Imate rom, splash screens and HTC Logo are differ from NVID QTEK rom
Can I flash only those 2 files to get back the Imate screen
thanks
Yes you can
secoseco said:
thanks for replay
in Imate rom, splash screens and HTC Logo are differ from NVID QTEK rom
Can I flash only those 2 files to get back the Imate screen
thanks
Click to expand...
Click to collapse
Nearly there
FlykTheWiz,
Many thanks for the instructions. I have done what you suggested with NB2NKF
However, When I try to run my RUU utility I get error code 238 Cannot Read the file.
I extracted all files into a single directory and replaced the default .NBF with my new one. Then ran the RUU tool.
Am I being a numpty?
Many thanks,
Sam.
hmmm
Try the appropriate RUU from the attached
If your ipl ends in .000 use G3 version
if ends in .0001 use G4 version
T H A N K Y O U
I would just like to thank you for your kindness and patience. I have now got the HTC device reblown to the original condition that I started from (with the exception of the IPL/SPL).
Using the G4 utility worked for me.
On the way I have learned a great deal and appreciate your assistance.
Thank you very much,
Sam.
No problem at all
flyk (definitely) thewiz !!!
Flykthewiz... Many thanks for your input to this thread... your tutorial has helped me (and many of us) more than almost ANY other on this site!!! You are obviously very knowledgeable in this "art"!!!!
Since we have not seen much input from Jesterz or Smart1 lately (I can understand that it is time-consuming...!) , can I suggest that maybe you could take up the reigns and offer to this community your first Prophet ROM build??? (Any +AKU base will be a help??)
Please do consider doing this - I *know* you can do this and although I appreciate it can take a lot of your personal time and effort to achieve.. I am sure that your contribution will be appreciated and valued by us all, if u were to attempt such a project!!?
If not, we do understand... but please stay around here and continue to help us all with your flykth-wiz-dom!!!
Moz.
Thanks for your vote of confidence, but I have to say - you must be joking
I only started looking at modifying ROM's 2 days ago and it is a minefield. I have absolutely every respect for Jesterz, Smart1, Nghianha, and all of the guys over at PDAMobiz. I think it will be a long while before I am anything like of their calibre!
Mozzerr said:
Flykthewiz... Many thanks for your input to this thread... your tutorial has helped me (and many of us) more than almost ANY other on this site!!! You are obviously very knowledgeable in this "art"!!!!
Since we have not seen much input from Jesterz or Smart1 lately (I can understand that it is time-consuming...!) , can I suggest that maybe you could take up the reigns and offer to this community your first Prophet ROM build??? (Any +AKU base will be a help??)
Please do consider doing this - I *know* you can do this and although I appreciate it can take a lot of your personal time and effort to achieve.. I am sure that your contribution will be appreciated and valued by us all, if u were to attempt such a project!!?
If not, we do understand... but please stay around here and continue to help us all with your flykth-wiz-dom!!!
Moz.
Click to expand...
Click to collapse
help for step by step help for change boot logo imate jamin
Hi all:
1. how to extract tools.zip on pc
2. my pda (i-mate jamin) and update smart1-new v2 . don't like change i-mate boot logo to Qtek how to change boot logo to original i-mate jamin?
thanks for step by step help.
"...a long while..."??? I don't think so!!! Still, your openess and willingness to share what you have learned in such a short while is refreshing to see on this forum!! I still say T H A N K Y O U ! !
flykthewiz said:
Thanks for your vote of confidence, but I have to say - you must be joking
I only started looking at modifying ROM's 2 days ago and it is a minefield. I have absolutely every respect for Jesterz, Smart1, Nghianha, and all of the guys over at PDAMobiz. I think it will be a long while before I am anything like of their calibre!
Click to expand...
Click to collapse

how can I cook a ROM by myself?

You never told anybody how to do it and then you complain of constant requests
I don't want to cook Wm6 I just want to change some files in my current WM5 Rom!
Could you please tell me how can I do it?
It does not need to be told how to do it, but told how to search ! A lot of people here know how to do it, just GOOGLE it !
sorry, I've already searched... Maybe I'm searching badly!
Could you please help me?
Basically you need to extract the ROM installer, you will find an nbf file in it, then get an NBF file converter, to convert it into some sort of editable format, then you start cooking the ROM, placing whatever you want, and in the end, convert it back into NBF
Hello,
You might find something useful here:
http://www.modaco.com/index.php?showtopic=255064
It would be more helpful if people genuinely try to help others instead of directing them to Google.
A
hey
if you can wait a day or two, i will write up a nice simple guide for everyone and have it stickied
i will also provide links to the tools required. it really isnt as difficult as some people thing! it just LOOKS difficult!
and we are a community here, so lets just help rather than-use the fricking search!lol. we were all n00bs once!
duke_stix said:
hey
if you can wait a day or two, i will write up a nice simple guide for everyone and have it stickied
i will also provide links to the tools required. it really isnt as difficult as some people thing! it just LOOKS difficult!
and we are a community here, so lets just help rather than-use the fricking search!lol. we were all n00bs once!
Click to expand...
Click to collapse
if all were like you ...
I know it isn't but in so much amount of infos it's not easy to find ones that apply to your device or even thing you wanna do!
Need help too
Yea, Please..my probs are the reconverting my data into a .nb->nbf file...after flashing My phone hangs in First Bootscreen...please help!Only Reflashing helps...i really want to cook a rom by myself.
Ive used THIS kitchen...but it is for Wizard-devices only....but i think,it can be used for Tornado,too.
as far as we tried we could not make a proper dump of the wm5 tornado...
but i did manage to build a rom kitchen with wm6 for the tornado...this was a whileago and the base rom is the same as the current available...if ther is enougth request i may be inclined to update the RK and release it.
to get you started here is some pointers.... you can use the same tools from the wizard, imgfs tools.
When I use nb2nbf_wizard.exe, is this created nk.nbf flashable for my Tornado (german XDA Phone aka HTC Douton)?
There is an nb2nbf_Tornado File out there,too, but my Phone stuck in first BootScreen.If i use the Wizard-Tools here and use the nb2nbf_Tornado,(by retyping the Start Adress from 8004000(for Wizard) to 8204000 (for Tornado)) it works well fine, Flashing works well,too,but stuck in first Screen every time.Ive only delete the Solitaire-Folder,but it dont work for me..maybe you have more luck!Or...faria may Post a RomKitchen exclusive for our lovely Tornado..
Have you removed the first two bytes of the initflashes.dat? When not, it can't be booting correctly! That was my mistake when I started to cook my own ROM's for my HTC Prophet (XDA Neo)!
What?
really?I may think,it is only needed after a Registryedit....thank you.!
edit:did not work...
arpy said:
There is an nb2nbf_Tornado File out there,too, but my Phone stuck in first BootScreen.If i use the Wizard-Tools here and use the nb2nbf_Tornado,(by retyping the Start Adress from 8004000(for Wizard) to 8204000 (for Tornado)) it works well fine, Flashing works well,too,but stuck in first Screen every time.Ive only delete the Solitaire-Folder,but it dont work for me..maybe you have more luck!Or...faria may Post a RomKitchen exclusive for our lovely Tornado..
Click to expand...
Click to collapse
i have the same problem like you.
I've made a nk.nbf from the *.nb files with nb2nbf_tornado.exe.
I've also extracted *.nb (OS, IPL, SPL, etc) from nk.nbf from windows mobile 6 alpha and then 'translated' those nb files with nb2nbf_tornado.exe. Same result: succesfull flash, stuck in first screen every time..
so not the "initflashes.dat" file is guilty..
...and nobody out there may help us?
arpy, it seems that if I include only OS without IPL & SPL in nb2nbf, all are OK..
But still with my modified OS does not get over the first splash screen.. maybe i've done smth wrong. In dump folder, I've added some files (some overwritten), i've removed some files, modified initflashfiles.dat (last line blank, + removed the two first bytes with winex), modified the hv files (saved in unicode standard, first line REGEDIT4, last line blank.. complied: no errors). replaced carrier_splash and shutdown
that's all what I've modified ...
edit:
arpy, try to translate only the OS module with nb2nbf_tornado. and tell me the result. also, tell me what changes you've made
edit2: found this: http://forum.xda-developers.com/showthread.php?t=298327 . improved tools
edit3: i've dumped my modified OS module with tadzio's ImgfsTools and discovered that initflashfiles.dat had the two bytes that i've removed with win hex.. what the?!
i've removed again, and run the whole build rom process again , but this time with tadzio's ImgfsTools.
Same result.. (stuck in first screen)
Maybe i've modified something wrong.
edit4: i've repeated the whole process and OS module flash and work ok . I haven't tried yet with all modules, only OS. I think I've made some mistakes when trying to replace drivers.
@DSF
Can you post a Step-By-Step Solution?I want to figure out my prob...which tools do you use?And how?May you Post your ROM?
well, i will post summary. i hope to release a "tornado romcook kitchen" and more detailed steps these days.
here is my OS module:
http://rapidshare.com/files/45915194/RUU.rar.html
right now i'm trying to figure out how to make the sd driver from iphone/other roms to work on my custom rom. every time i try other sd driver, i cannot view the card.
i'm using the tadzio's ImgfsTools (see link in my previous post).
steps:
- download typho5.exe, ImgfsTools, nb2nbf_tornado (you can get them by searching via gogole)
- copy all those files in the same folder, eg: ROMDEV
- copy nk.nbf in ROMDEV
Commands:
1) typho5.exe -x nk.nbf
2) imgfsfromnb.exe 82040000-OS.nb imgfs_raw_data.bin
3) imgfstodump.exe imgfs_raw_data.bin
Now the OS files are dumped in dump folder. Do the changes (delete, copy, modify, etc). When editing registry and initflashfiles.dat file, perform the important steps describeb at http://www.molski.biz/romcooking.html (turn off word wrap and use UNICODE in notepad, etc). If you're dune with those things do next:
4) imgfsfromdump imgfs_raw_data.bin imgfs_new.bin
5) imgfstonb imgfs_new.bin 82040000-OS.nb 82040000-OS_final.nb
if no error occured in the whole process, run 6) nb2nb_tornado.
There, chose the nb files, OS will be 82040000-OS_final.nb and not 82040000-OS.nb. Don't forget to use the correct image name. (eg: for 82040000-OS_final.nb chose OS)
The language, oem, operator version, cid can be left blank.
When you're done, press translate.
Copy the generated nk.nbf file in the rom update folder (RUU), execute ROMUpdateUtility.exe and follow the normal flash steps..
That's all.
Thanks to all those ppl that made this possible
PS: if you flash only the OS module (without IPL & SPL), even if the update proces crashes, you will not 'brick' your phone . Mine happen to crash on 2%.. i transpired instantly
kartam said:
You never told anybody how to do it and then you complain of constant requests
I don't want to cook Wm6 I just want to change some files in my current WM5 Rom!
Could you please tell me how can I do it?
Click to expand...
Click to collapse
Actually, I have some files about how to cook a rom, but they all Chinese, and may be useless for you.
DSF: the way you describe works with the tornado. thx. ive testest
an usefull app to edit initflashfiles.dat and the registry files is "notepad2".

Unlock help really needed

Hello people,
I bought an Imate SP5 from ebay and its from Orange. Now I need to application unlock it.
I know I know, first thing you will say is search older topics, which I did and its driving me crazy, here are the things I have already tried and nothing worked-
http://forum.xda-developers.com/showthread.php?t=330291
In archive three files.
The names begin with 1,2,3
In this order start all three
Attached Files
File Type: zip HTC.Device.Software.Unlock.zip
http://robertpeloschek.blogspot.com/2006/03/howto-application-unlock-your-windows.html
1) Simply put the *.zip file with the regeditSTG.exe in it with ActiveSync into a folder on your phone (but not onto the memory card).
2) Unzip the file with the *.zip program that comes with your phone.
3) Now start regeditSTG.exe and change the following Registry Keys...
I even downloaded an external registry editor and manged to change the registry values but it still did not unlock the phone.
http://forum.xda-developers.com/showthread.php?t=352749&highlight=application+unlock
Download this application.
1: Run program htcunlock cvs on PC
2: Find program that is created on your phone on the startmenu in on device
3: Run exe and cross fingers (It changes settings in registry, wait for the Smiley!)
4: Powerdown and Powerup!
And any other SPV Unlock applications. But they all fail since its pretty tightly locked. I can't run any third party applications.
I think the only thing left is maybe do a ROM update but I have no idea which one to use and how to go about doing it.
Please advise me on what I can do or send me in the right direction. I will be really grateful!
Thanks.
OK, I don't know what was it, but I tried running SPV Services and it ran successfully and let me set the SuperCID and I was able to update the ROM.
So I guess one of those earlier methods did work!
Thanks anyway and just want to say that I really appreciate the members of the community that work so hard to make our phones much better and more useful.
Here is a big vote of THANKS for you guys!

Categories

Resources