How to dump xip from Windows.nb ? - HTC Vox

Hi,
I search how to dump XIP from HTC 1.34 rom.
I try to understand how to cook my rom :
- Extract RUU_Signed.nbh ok
- Extract Windows.nb to OEM/SYS folders ok
- Extract XIP, not ok...
I can't build os without XIP.
Could you help me ???
Thanks.

I have tried nbsplit/rommaster/dumprom/buildxip, but nothing... Errors errors and errors...
Could someone help me ?

Related

Convert .nbh to nk.nbf

Is it possible to convert .nbh to nk.nbf to be able to flash this rom on a prophet?
It depends on where the nbh is from. To do it, you'll have to dump it into SYS/OEM (I'd use a hypercore related tool for this) and then rebuild it into an OS.nb before converting it to nk.nbf for flashing.
Its HTC ELF original Rom...where can i find all tools?
thanks dude
In the prophet WM6 forum, there is a link to HyperCore kitchen.
I'm not sure if the ROM will work straight away on a Prophet, as they have different hardware...
edit: to dump the ROM you will need to use the attached files. Put the *.nbh in the same directory as the two files and then run the batch file.
thanks man,am gonna work on it right now
hey guy .. when i use the nbh extract .. there write could not open the nbh file ..
how ?? can you all please help me ??

Xipport & Kaiser

I'd like to prepare a new kitchen but I have some problem to extract XIP from actual Kaiser Rom. I'm using Xipport (the bepe's tools) to dump Xip.bin, but when I press "dump xip.bin" button, i have a crash of the Xipport and i have any dump.
Someone has suggestion to me?!
Thanks
Are you using an original rom or are you dumping from a phone????
The reason I ask is that if you are using an original rom or a customized rom and you use the KaiserKitchen, it already dumps the file for you if you follow the steps. Under folder XIP.
ryncppr said:
Are you using an original rom or are you dumping from a phone????
The reason I ask is that if you are using an original rom or a customized rom and you use the KaiserKitchen, it already dumps the file for you if you follow the steps. Under folder XIP.
Click to expand...
Click to collapse
I'm using a customized rom. I Think that Xip.bin has some relocation in your internal byte like a repack...it's possibile? There is some program that it can analize the file to see if the xip is packed?
furb3t said:
I'm using a customized rom. I Think that Xip.bin has some relocation in your internal byte like a repack...it's possibile? There is some program that it can analize the file to see if the xip is packed?
Click to expand...
Click to collapse
i noticed using any os other than vista could help you.
redbandana said:
i noticed using any os other than vista could help you.
Click to expand...
Click to collapse
I use win xp I think that the chef has crypted or packed some file so, it's impossibile to extract XIP from rom. But, what are the tools to do this? And how to reverse?
just to give you an attention, make sure that you have extracted the exact xip.bin.
i extracted before but after 10 days of problems in porting, i found it was because of xip.bin wasn't 100% correct.
good luck.
Maybe someone can make a complete tutorial for XIP porting ?
its right said:
just to give you an attention, make sure that you have extracted the exact xip.bin.
i extracted before but after 10 days of problems in porting, i found it was because of xip.bin wasn't 100% correct.
good luck.
Click to expand...
Click to collapse
i agree with you, but the answer is: how do you have found the xip.bin correct?!? what are tools that you have used?
Thanks
furb3t said:
i agree with you, but the answer is: how do you have found the xip.bin correct?!? what are tools that you have used?
Thanks
Click to expand...
Click to collapse
for kaiser, sometimes the current tools for extracting xip don't work well, i have no exact idea in kaiser.
but in general, i'm using the famous tools used in many public kitchens.
ItsRight this is a development forum not a crypted forum, so could i know the name of tool and how to use it?! thanks
furb3t said:
ItsRight this is a development forum not a crypted forum, so could i know the name of tool and how to use it?! thanks
Click to expand...
Click to collapse
lol... who told you i'm crypting something !!!
anyway, have a look in kaiser_kitchen which contains good tools for extracting xip.bin
use a hex editor
extract whatever.nbh
then
nbsplit -kaiser os.nb
this gives you os.nb.payload and os.nb.extra.
your xip is in os.nb.payload- open it in a hexeditor
run imgfsfromnb os.nb.payload imgfs.bin
note the start of imgfs address
jump to that address in your hexeditor and delete from there to the end of the file
now move back to the beginning of your remaining data in hexeditor
search for the start of xip part: FE0300EA
(if not a custom rom the address is probably 0x00320000)
when you find that start of xip, delete from there to beginning of file
the data you are now left with is your xip. save it as xip.bin
hope this helps...
My problem is not to find xip.bin, but dump the xip.bin. When I use Xipport, i have a crash of the program.
Tanks for sharing dcd1182, and for rebuilding ?
furb3t said:
My problem is not to find xip.bin, but dump the xip.bin. When I use Xipport, i have a crash of the program.
Click to expand...
Click to collapse
what we are trying to tell you is that your problem dumping xip.bin is probably a result of a problem extracting xip.bin
if you have a proper xip.bin you should be able to dump it in xipport as normal.
edit: or you're missing a dependency of xipport, probably .net 2.0 but im guessing.
ok i did XIPPORT on hermes with buildxip and insert
now on kaiser how do i insert the xip back to OS.nb
is it write xip_out.bin to os.nb.payload at adress 00320000 or ? is it different
1 - i got os.nb 19212 official running in my kitchen --- OK
2 - from payload extracted xip ---- OK
3 - XIPPORT dump OK
- realloc P ERROR " Unknown o32 region flags: d0000040 "
change 72.......dsm - OK
NEED HELP please
- packages and undo OK
- write maps OK
skip to step 5
5 - buid xip_out OK
6 - insert xip_out into os.nb.payload at 00320000 OK
7 - nbmerge to OS.NB OK
8 - OS.nb to kitchen ????????? lets seee OK ......... IT IS BOOTING OK
9 - move new xip MSmodules into XIP BUT HOW WITHOUT REALOC WORKING HMMM
anryl said:
ok i did XIPPORT on hermes with buildxip and insert
now on kaiser how do i insert the xip back to OS.nb
is it write xip_out.bin to os.nb.payload at adress 00320000 or ? is it different
1 - i got os.nb 19212 official running in my kitchen --- OK
2 - from payload extracted xip ---- OK
3 - XIPPORT dump OK
- realloc P ERROR " Unknown o32 region flags: d0000040 "
NEED HELP please
- packages and undo OK
- write maps OK
skip to step 5
5 - buid xip_out OK
6 - insert xip_out into os.nb.payload at 00320000 OK
7 - nbmerge to OS.NB OK
8 - OS.nb to kitchen ????????? lets seee OK ......... IT IS BOOTING OK
9 - move new xip MSmodules into XIP BUT HOW WITHOUT REALOC WORKING HMMM
Click to expand...
Click to collapse
don't care about this error. go to make xip_out.bin and write it into os.nb.payload
sure can change just the DSM file to get new number but i wanted to fuly xipport all the new ms-modules
anryl said:
ok i did XIPPORT on hermes with buildxip and insert
now on kaiser how do i insert the xip back to OS.nb
is it write xip_out.bin to os.nb.payload at adress 00320000 or ? is it different
1 - i got os.nb 19212 official running in my kitchen --- OK
2 - from payload extracted xip ---- OK
3 - XIPPORT dump OK
- realloc P ERROR " Unknown o32 region flags: d0000040 "
change 72.......dsm - OK
NEED HELP please
- packages and undo OK
- write maps OK
skip to step 5
5 - buid xip_out OK
6 - insert xip_out into os.nb.payload at 00320000 OK
7 - nbmerge to OS.NB OK
8 - OS.nb to kitchen ????????? lets seee OK ......... IT IS BOOTING OK
9 - move new xip MSmodules into XIP BUT HOW WITHOUT REALOC WORKING HMMM
Click to expand...
Click to collapse
Did this method of buildxip and then inserting the out.bin into payload via xipport tool work brother? i'm trying desperately to full port xip for diamond myself... nobody suddenly seems to know how to do full xip porting manually

where are .dsm files?

Sorry for my English ...
I'm trying to learn how to build a kitchen and I followed the BEPE's guides perfectly but I have a problem:
When I use "NBHextract.exe" on "RUU_signed.nbh" the file that I get is "00_OS.nb" and not "OS.nb" as in BEPE's guide, same for the file "00_OS.nb.playload" has the same characteristics, and I know not explain why.
Also, I can not use in any way the "packagebuilder" tool to rebuild the "xip" folder because after having dumped "00_OS.nb.playload" the xip folder that I know, does not contain within it the file "*. dsm " essential to the operation of the tool.
can someone help me? (sorry but I translate before answering for now)
Thank you!
PS: other problem..
When I use "Dump_800" on "00_OS.nb" the files that I get are "00_OS.nb.playload", the IMGFS folder and the IMGFS.BIN.
This IMGFS.BIN was to be automatically erased at the end of the process of dumping, but strangely still active and has a size of about 63 MB, and in the prompt window, at the end of the process of dumping, i read this:
C:\xxxxxxxxxx\IMGFS.BIN
Access denied.
Where I wrong?
Thanx 4 all..
Any idea?...
Anything?...
That relief, then I am not the only one who does not understand anything!
ciko84xp said:
Any idea?...
Anything?...
That relief, then I am not the only one who does not understand anything!
Click to expand...
Click to collapse
I can't help you either ... try to PM one of the Chef you knew from the forum.
ciko84xp said:
Sorry for my English ...
I'm trying to learn how to build a kitchen and I followed the BEPE's guides perfectly but I have a problem:
When I use "NBHextract.exe" on "RUU_signed.nbh" the file that I get is "00_OS.nb" and not "OS.nb" as in BEPE's guide, same for the file "00_OS.nb.playload" has the same characteristics, and I know not explain why.
Also, I can not use in any way the "packagebuilder" tool to rebuild the "xip" folder because after having dumped "00_OS.nb.playload" the xip folder that I know, does not contain within it the file "*. dsm " essential to the operation of the tool.
can someone help me? (sorry but I translate before answering for now)
Thank you!
PS: other problem..
When I use "Dump_800" on "00_OS.nb" the files that I get are "00_OS.nb.playload", the IMGFS folder and the IMGFS.BIN.
This IMGFS.BIN was to be automatically erased at the end of the process of dumping, but strangely still active and has a size of about 63 MB, and in the prompt window, at the end of the process of dumping, i read this:
C:\xxxxxxxxxx\IMGFS.BIN
Access denied.
Where I wrong?
Thanx 4 all..
Click to expand...
Click to collapse
What rom are you trying to dump? if it is a custom rom....built by the new kitchen, it won't be dumpable. You will have to get a base from a chef or dump a factory rom.
parleyp said:
What rom are you trying to dump? if it is a custom rom....built by the new kitchen, it won't be dumpable. You will have to get a base from a chef or dump a factory rom.
Click to expand...
Click to collapse
I downloaded this "RUU_Kaiser_HTC_WWE_1.56.405.5_radio_sign_22.45.88.07_1.27.12.11_Ship", which should be the Official HTC ROM for TYTN II (my device), but I have the same errors described in the first post using the BEPE's kitchen!
What do you mean by "You will have to get a base from a chef?
I do not believe that any chef would give me his base, should give me the entire folder containing the kitchen built! Or not?
sorry for my english...
I try to dump the various types of ROM, but I always make the same mistakes! I do not know how ... believe me I tried all possible solutions!
But I do not surrender ... sooner or later arrive at a solution! Even at the cost of start over with another kitchen!
How many kitchens are there? tell me if you know there are others beyond that of bepe?
I am having the same issue with Bepes kitchen - I have the official signed rom from Sprint for the Mogul and every time I try to use dump_800.bat on the OS.nb file, it fails and says access is denied...
ciko84xp said:
sorry for my english...
I try to dump the various types of ROM, but I always make the same mistakes! I do not know how ... believe me I tried all possible solutions!
But I do not surrender ... sooner or later arrive at a solution! Even at the cost of start over with another kitchen!
How many kitchens are there? tell me if you know there are others beyond that of bepe?
Click to expand...
Click to collapse
There is KaiserKitchen by _Alex_ or KaiserChef by mbarvian and a few others - They both exist on the Wiki.
If the IMGFS.bin won't delete it's not that bad, just try and delete it afterwards.
If you are getting 00_OS.nb it might not be the orginal nbh you are dumping. I get 03_OS.nb when I dump the 3.34 HTC Kaiser ROM (which I rename to OS.nb before dumping). I also get 00_Unknown.nb, 01_SPL.nb 02_MainSplash.bmp (and .nb). Do you get any other nb files?
What the link for the ROM, and why are you using that one for the base? There are newer builds (like the 3.34).
Ta
Dave
DaveShaw said:
There is KaiserKitchen by _Alex_ or KaiserChef by mbarvian and a few others - They both exist on the Wiki.
If the IMGFS.bin won't delete it's not that bad, just try and delete it afterwards.
If you are getting 00_OS.nb it might not be the orginal nbh you are dumping. I get 03_OS.nb when I dump the 3.34 HTC Kaiser ROM (which I rename to OS.nb before dumping). I also get 00_Unknown.nb, 01_SPL.nb 02_MainSplash.bmp (and .nb). Do you get any other nb files?
What the link for the ROM, and why are you using that one for the base? There are newer builds (like the 3.34).
Ta
Dave
Click to expand...
Click to collapse
Sorry for my english.. i try to write wath i want tell you....
Problem solved... with "KaiserKitchen" by _Alex_ I have solved all problem with one file called "KaiserKitchen.batch"... this little application, extract .nbh file, dump IMGFS.BIN and create a SYS and OEM folders, dump OS.nb.payload and create a XIP folder... ALL IN ONE STEP!!! IT'S FANTASTIC...!
Yesterday I have cooked and flashed my 1st ROM... really ruins... but the feel thrill don't have comparisons!!!
Now i don't understand wath should i do to take the SYS folder by one ROM and build inside another ROM.. ex. i want to take the SYS folder by your ROM and build in my own ROM...! to do this, i need to copy also your XIP folder?
Sorry for the english and for the ignorance... but I'm beginners for now...!
ciko84xp said:
Sorry for my english.. i try to write wath i want tell you....
Problem solved... with "KaiserKitchen" by _Alex_ I have solved all problem with one file called "KaiserKitchen.batch"... this little application, extract .nbh file, dump IMGFS.BIN and create a SYS and OEM folders, dump OS.nb.payload and create a XIP folder... ALL IN ONE STEP!!! IT'S FANTASTIC...!
Yesterday I have cooked and flashed my 1st ROM... really ruins... but the feel thrill don't have comparisons!!!
Now i don't understand wath should i do to take the SYS folder by one ROM and build inside another ROM.. ex. i want to take the SYS folder by your ROM and build in my own ROM...! to do this, i need to copy also your XIP folder?
Sorry for the english and for the ignorance... but I'm beginners for now...!
Click to expand...
Click to collapse
There are a few tutorials on porting the SYS and XIP. The concept in bepe's kitchen videos is the same for the SYS in most kitchens (be aware of resolution and language specific files).
For the XIP, have a read around, there are many threads and tutorials on how to do it. But normally the XIP and SYS versions should match (or be very close).
Dave
DaveShaw said:
There are a few tutorials on porting the SYS and XIP. The concept in bepe's kitchen videos is the same for the SYS in most kitchens (be aware of resolution and language specific files).
For the XIP, have a read around, there are many threads and tutorials on how to do it. But normally the XIP and SYS versions should match (or be very close).
Dave
Click to expand...
Click to collapse
ok Dave.. I follow your advice! then you story if I have made progress ...! thanks!

ROM cooking

I'm stuck
I'm trying to understand process of creating ROM, I've done thise steps:
1. Decompile *.NBH to *.NB files
a. Dutty's NBHTool http://forum.xda-developers.com/showthread.php?t=296311
b. NBHextract http://forum.xda-developers.com/showthread.php?t=289830
2. Deprotect ROM (Ervius ROM Deprotector http://forum.xda-developers.com/showpost.php?p=3102543&postcount=1)
3. OS.NB to OS.nb.payload (NBSplit.exe -kaiser Windows.nb) nb-> nb.payload+nb.extra
4. Extract imgfs (ImgfsFromNb.exe Windows.nb.payload imgfs.bin)
5. Create dump (imgfstodump imgfs.bin) imgfs.bin ->\dump\*.*
in the Dump folder many folders-files of DLLs, imageinfo.bin and imageinfo.txt for each of them.
Now how to decide where is OS and where is App's ?
what to \EXT of kitchen, what to \OEM, \ROM, \SYS ?
or I'm going wrong way ?
Pls "GooRoo of ROMs" help me
You only need ervius visual kitchen to do it all (has dutty's tool included). Open the erviuskitchen.exe and click on dump rom, navigate to the nbh file and the rest will be automatic (unless you are trying to decompile a protected (user-made) ROM)
Side note: this is not development related so I moved this to Q&A
Thanks 12aon
sorry for post not-in-thread

Ripping an original WM5 ROM

I would like to get SYS, XIP and OEM fram an original Wizard WM5 ROM. Can anyone help?
I tried HyperCore Kitchen but that didn't work.
What I have done so far:
- unzipped nk.nbf file from original installer
- used typho5.exe to extract nb files from nk.nbf (typho5.exe nk.nbf -x)
Now I ave the os.nb file and don't know what to do.
For ImgfsFromNb.exe I need an os.nb.payload file.
May I use NBSplit.exe with a Wizard ROM? Which parameter do I have to use?
What else do I have to do?
Thank you for your help!
mate.. use this:
typho5 -x nk.nbf
ren *OS.nb OS.nb
imgfsfromnb OS.nb imgfs.bin
imgfstodump imgfs.bin
pkgtool
Click to expand...
Click to collapse
Thank you very much!
I got the OEM and SYS folders but there is still one last problem: The names of the subfolders are strange. Seems to be the GUID. Is there a way to get the original names?
I ripped the official german Vodafone WM5 AKKU2 ROM.
Cyberdyne said:
Thank you very much!
I got the OEM and SYS folders but there is still one last problem: The names of the subfolders are strange. Seems to be the GUID. Is there a way to get the original names?
I ripped the official german Vodafone WM5 AKKU2 ROM.
Click to expand...
Click to collapse
No, it's bug in T-Mobile releases.
A bug in T-Mobile releases make my Vodafone realease look strange?
Here they are from the
Code:
RUU_Wizard_225111_22511102_022511_CWS_WWE_Ship_1.exe
Some packages also have GUID instead of a name, but I do not think that should affect the cooking. You could rename the folder based on what is inside it.
http://rapidshare.com/files/345802803/Dumped_Original_Cingular_ROM.7z

Categories

Resources