Related
we are trying to unlock and or dump the rom on the treo 750v. this is a newly released treo made by htc. the treo has an awesome feature called theeaded sms which does chat style sms.
we have tried the grab it program that was on this site with no luck.
does anyone no of a way to get this done? does any have any ideas of why the grab it program doesn't work. does anyone want to help?
thanks, cody
So far we've manage to get someone to try the grab_it tool from
http://forum.xda-developers.com/showthread.php?t=238945
But they are getting a write error. I assumed since the Treo 750v uses a mini-sd card the appropriate version of grab_it would be grab_it_128_minisd_468.exe. I'm trying to get someone to try the grab_it_128_150.exe version to see if that works, since that is the version BeyondTheTech used to extract the Treo 700w rom. The 700w uses a regular sd card though.
I asked the guy that tried grab_it_128_minisd_468.exe what the storage card folder name was set to and they verified that the registry was set to "Storage Card". So it's unclear to me why they are getting a write error. Maybe the minisd version expects something else? The card used was a 2GB minisd so it should have plenty of room for the rom.
Anyone familiar with grab_it know what is different about the minisd version? I read through the thread but it wasn't clear to me what the difference is.
Ok, I'm the one who's run the grabit tool on a 750v
It runs Ok and creates a 128Mb dump.bin file but the file appears to be mostly empty. If I zip the file up it only takes 147Kb which seems to confirm this. Am I doing something wrong or is it a bug in the tool
i have hope 750v user and appreciate your efforts
750v_User said:
Ok, I'm the one who's run the grabit tool on a 750v
It runs Ok and creates a 128Mb dump.bin file but the file appears to be mostly empty. If I zip the file up it only takes 147Kb which seems to confirm this. Am I doing something wrong or is it a bug in the tool
Click to expand...
Click to collapse
Can you upload the bin file please. I think someone here may be able to figure this out by looking at the contents of it.
If anyone has a source for a unlocked 750v let me know i really need one.
File and registry dump.
750v_User said:
Ok, I'm the one who's run the grabit tool on a 750v
It runs Ok and creates a 128Mb dump.bin file but the file appears to be mostly empty. If I zip the file up it only takes 147Kb which seems to confirm this. Am I doing something wrong or is it a bug in the tool
Click to expand...
Click to collapse
Hi, please can you do me favor? I have idea which can help us get SMS threading application and other palm features as well. If isn't possible dump ROM in this moment can you download Total Commander (freeware) http://www.ghisler.com/pocketpc.htm and do following.
1, Create foder on memory card and go to the Total commander.
2, go to the root of your device and copy to SD everything what is possible specially from Windows folder and Program Files (rest will be fine as well)
- this will take some time and in case of problem with file just skip that file.
3, When this will be done please go into the "\\" in the root and then to "registry"
4, now select registry tree one by one and copy again to card.
This will give us most probably files which will be required for hack and registry keys which will be required as well i think.
Thank you very much for your help.
Here's a zipped up copy of the dump.bin file, hope it helps
I extracted that dump.bin and it looks like a 256 byte block of data that is repeated at each 16 meg boundary 8 times.
Does this ring any bells to the experts?
The only readable text is "CHEETAH IPL EVT".
wow! that's great!
I don't have a Cheetah, but there's some info on the hermes forum that might be of interest to you:
http://forum.xda-developers.com/showpost.php?p=1019171&postcount=22
750v_User please try this program to extract the rom image.
unzip and copy TestDump.exe to your device and run it. In the "Path to file" enter the path for the dump file (i.e. \Storage Card\dump.bin). In the "Mbytes to dump" enter 128. Then press the "Dump" button. It should make a dump of the ROM file.
Zip it up and upload here. Thanks!
pof said:
I don't have a Cheetah, but there's some info on the hermes forum that might be of interest to you:
http://forum.xda-developers.com/showpost.php?p=1019171&postcount=22
Click to expand...
Click to collapse
Thanks. That post appears to be for updating the rom. I wonder if there is some key combo like this to extract the rom.
hannip said:
Thanks. That post appears to be for updating the rom. I wonder if there is some key combo like this to extract the rom.
Click to expand...
Click to collapse
Based on the Hermes experience, there's no knonw way yet to extract it in a form that after is flashable on another device, but you can follow these instructions to dump some parts:
http://wiki.xda-developers.com/index.php?pagename=Hermes_HowtoDumpRom
You can also use pmemdump to copy some of the ROM contents to a file. Once you've dumped SPL you can search for strings on it and you'll see the bootloader commands.
HTC has removed all the "d2s, s2d, r2sd..." and like commands in the hermes bootloader, probably you are lucky and you have some command to dump the rom to sd in your bootloader.
Hope that helps
The ROM dump // extract discussion is over my head...one question though has anyone sorted out how to unlock this device?
codyppc said:
we are trying to unlock and or dump the rom on the treo 750v. this is a newly released treo made by htc. the treo has an awesome feature called theeaded sms which does chat style sms.
we have tried the grab it program that was on this site with no luck.
does anyone no of a way to get this done? does any have any ideas of why the grab it program doesn't work. does anyone want to help?
thanks, cody
Click to expand...
Click to collapse
im just a noob but cant we use the combination of StyleTap and AdvBackup to create a complete rom backup of the treo 750v and then grab what we want from that?
will that work????
just tryin to help........
what if someone get the .nbh file..can that be extracted??
750v ROM dump uploaded
I put a rom dump from the TestDump.exe tool on ftp.xda-developers.com. userid: xdaupload pw: xda
file: treo750v_dump_rom.zip
I used the dumprom tool to extract files, but it looks like it's only extracting the first rom section it finds and stops. Can one of the experts take a look at the dump and see if you can extract the other sections please.
Thanks.
What are you getting from the first rom section?
Sounds weird... was the dump complete?
It looked like a bunch of system files. The kernel, img.dll, filesystem drivers and the like.
There is 59MB of data in the dump so there has to be more stuff in there.
hey folks,
Does anyone know if anyone has extracted the radio from the latest Cingular 2125 (Faraday) ROM (version 2.0.13.0, from the HTCamerica website)?
I like the qtek 2.0.9.0 ROM, but I am running on Cingular network, and it would be nice to try that radio version. I'd rather not use the ROM, because I'd have to fool with it to reactivate wifi and a whole lot of other modifications.
thanks!
Do you have the download address? Please show me the address, I can extract the radio for you.
wow! thank you very much, here is the link...
http://www.america.htc.com/support/2125/software-downloads.html
good luck, and thanks again!
bluehanson said:
Do you have the download address? Please show me the address, I can extract the radio for you.
Click to expand...
Click to collapse
can you post the instructions please? It can be helpfull for others.
instructions...
Hey,
in a previous post/different thread, sp3dev posted the following instructions to extract the radio ROM from a full update, and reinsert the file into an updating package to install...I have never done anything of this nature, but I have used extracted ROMs to update a smartphone. The tools are all posted on xda-developers, and spv-developers, but I am just not sure how to use any of them.
Instructions:
so, goto spv-developers, find info how to setup perl and typhoonnbfdecode.pl. then, unpack the update with winrar, open nk.nbf with typhoonnbftools 0.4, select gsm, select extract decrypted, then save as gsm.n_d
then, use
typhoonnbfdecode.pl -r gsm=gsm.n_d -t -c radio.nbf. then, open radio.nbf with nbf tools and remove cdl___02 and save nbf into the folder with romupdate.exe enterbootloader.exe ruugetinfo.exe ruuresource.dll. run romupdate.exe and flash.
and i advise you to set supercid.
Here are more instructions for setting up perl and typhoonnbfdecode:
http://wiki.xda-developers.com/index.php?pagename=RomTools/typhoonnbfdecode.pl
Can you post the extracted radio rom Plz...
hardcore technie help needed
hey, ok I got the tools working. I have extracted radio roms from a couple of old qtek ROM updates. however, I am having problems with the cingular 2.0.13.0 ROM. I can extract the GSM component using typhoonnbftools, when I try to convert using typhoonnbfdecode.pl, the resulting file is empty. Any ideas?
Sorry I cant give you an answer to your question but I take advantage of your post to ask you one:
when I try to run the Perl script, it gives me runtime error when it tries to load the DES dll:
"R6034 An application has made an attempt to load the C runtime library incorrectily"
Did you had any similar problems to run the tool ?
Hello,
I did get a similar error, though I can't remember the exact syntax. If you are using Activeperl, add the following PPM repository, and install all the packages there. I think that should clear up this particular error...
http://www.soulcage.net/ppds/ppds.58/
I don't know, though...maybe this repository is bad? I have absolutely no experience with perl or programming, so I don't know how to tell. It might be worth trying to find a different repository with the crypt/des package?
Thanks. The repo link solved my problem !
dragonii said:
Thanks. The repo link solved my problem !
Click to expand...
Click to collapse
Hey, were you able to create a radio.nbf from the cingular ROM? Even after isntalling those perl packages, the resulting radio.nbf file was empty . If you've got it, would you mind please posting it?
Hello All,
Please post the radio rom if any one has extracted... Thanks...
You never told anybody how to do it and then you complain of constant requests
I don't want to cook Wm6 I just want to change some files in my current WM5 Rom!
Could you please tell me how can I do it?
It does not need to be told how to do it, but told how to search ! A lot of people here know how to do it, just GOOGLE it !
sorry, I've already searched... Maybe I'm searching badly!
Could you please help me?
Basically you need to extract the ROM installer, you will find an nbf file in it, then get an NBF file converter, to convert it into some sort of editable format, then you start cooking the ROM, placing whatever you want, and in the end, convert it back into NBF
Hello,
You might find something useful here:
http://www.modaco.com/index.php?showtopic=255064
It would be more helpful if people genuinely try to help others instead of directing them to Google.
A
hey
if you can wait a day or two, i will write up a nice simple guide for everyone and have it stickied
i will also provide links to the tools required. it really isnt as difficult as some people thing! it just LOOKS difficult!
and we are a community here, so lets just help rather than-use the fricking search!lol. we were all n00bs once!
duke_stix said:
hey
if you can wait a day or two, i will write up a nice simple guide for everyone and have it stickied
i will also provide links to the tools required. it really isnt as difficult as some people thing! it just LOOKS difficult!
and we are a community here, so lets just help rather than-use the fricking search!lol. we were all n00bs once!
Click to expand...
Click to collapse
if all were like you ...
I know it isn't but in so much amount of infos it's not easy to find ones that apply to your device or even thing you wanna do!
Need help too
Yea, Please..my probs are the reconverting my data into a .nb->nbf file...after flashing My phone hangs in First Bootscreen...please help!Only Reflashing helps...i really want to cook a rom by myself.
Ive used THIS kitchen...but it is for Wizard-devices only....but i think,it can be used for Tornado,too.
as far as we tried we could not make a proper dump of the wm5 tornado...
but i did manage to build a rom kitchen with wm6 for the tornado...this was a whileago and the base rom is the same as the current available...if ther is enougth request i may be inclined to update the RK and release it.
to get you started here is some pointers.... you can use the same tools from the wizard, imgfs tools.
When I use nb2nbf_wizard.exe, is this created nk.nbf flashable for my Tornado (german XDA Phone aka HTC Douton)?
There is an nb2nbf_Tornado File out there,too, but my Phone stuck in first BootScreen.If i use the Wizard-Tools here and use the nb2nbf_Tornado,(by retyping the Start Adress from 8004000(for Wizard) to 8204000 (for Tornado)) it works well fine, Flashing works well,too,but stuck in first Screen every time.Ive only delete the Solitaire-Folder,but it dont work for me..maybe you have more luck!Or...faria may Post a RomKitchen exclusive for our lovely Tornado..
Have you removed the first two bytes of the initflashes.dat? When not, it can't be booting correctly! That was my mistake when I started to cook my own ROM's for my HTC Prophet (XDA Neo)!
What?
really?I may think,it is only needed after a Registryedit....thank you.!
edit:did not work...
arpy said:
There is an nb2nbf_Tornado File out there,too, but my Phone stuck in first BootScreen.If i use the Wizard-Tools here and use the nb2nbf_Tornado,(by retyping the Start Adress from 8004000(for Wizard) to 8204000 (for Tornado)) it works well fine, Flashing works well,too,but stuck in first Screen every time.Ive only delete the Solitaire-Folder,but it dont work for me..maybe you have more luck!Or...faria may Post a RomKitchen exclusive for our lovely Tornado..
Click to expand...
Click to collapse
i have the same problem like you.
I've made a nk.nbf from the *.nb files with nb2nbf_tornado.exe.
I've also extracted *.nb (OS, IPL, SPL, etc) from nk.nbf from windows mobile 6 alpha and then 'translated' those nb files with nb2nbf_tornado.exe. Same result: succesfull flash, stuck in first screen every time..
so not the "initflashes.dat" file is guilty..
...and nobody out there may help us?
arpy, it seems that if I include only OS without IPL & SPL in nb2nbf, all are OK..
But still with my modified OS does not get over the first splash screen.. maybe i've done smth wrong. In dump folder, I've added some files (some overwritten), i've removed some files, modified initflashfiles.dat (last line blank, + removed the two first bytes with winex), modified the hv files (saved in unicode standard, first line REGEDIT4, last line blank.. complied: no errors). replaced carrier_splash and shutdown
that's all what I've modified ...
edit:
arpy, try to translate only the OS module with nb2nbf_tornado. and tell me the result. also, tell me what changes you've made
edit2: found this: http://forum.xda-developers.com/showthread.php?t=298327 . improved tools
edit3: i've dumped my modified OS module with tadzio's ImgfsTools and discovered that initflashfiles.dat had the two bytes that i've removed with win hex.. what the?!
i've removed again, and run the whole build rom process again , but this time with tadzio's ImgfsTools.
Same result.. (stuck in first screen)
Maybe i've modified something wrong.
edit4: i've repeated the whole process and OS module flash and work ok . I haven't tried yet with all modules, only OS. I think I've made some mistakes when trying to replace drivers.
@DSF
Can you post a Step-By-Step Solution?I want to figure out my prob...which tools do you use?And how?May you Post your ROM?
well, i will post summary. i hope to release a "tornado romcook kitchen" and more detailed steps these days.
here is my OS module:
http://rapidshare.com/files/45915194/RUU.rar.html
right now i'm trying to figure out how to make the sd driver from iphone/other roms to work on my custom rom. every time i try other sd driver, i cannot view the card.
i'm using the tadzio's ImgfsTools (see link in my previous post).
steps:
- download typho5.exe, ImgfsTools, nb2nbf_tornado (you can get them by searching via gogole)
- copy all those files in the same folder, eg: ROMDEV
- copy nk.nbf in ROMDEV
Commands:
1) typho5.exe -x nk.nbf
2) imgfsfromnb.exe 82040000-OS.nb imgfs_raw_data.bin
3) imgfstodump.exe imgfs_raw_data.bin
Now the OS files are dumped in dump folder. Do the changes (delete, copy, modify, etc). When editing registry and initflashfiles.dat file, perform the important steps describeb at http://www.molski.biz/romcooking.html (turn off word wrap and use UNICODE in notepad, etc). If you're dune with those things do next:
4) imgfsfromdump imgfs_raw_data.bin imgfs_new.bin
5) imgfstonb imgfs_new.bin 82040000-OS.nb 82040000-OS_final.nb
if no error occured in the whole process, run 6) nb2nb_tornado.
There, chose the nb files, OS will be 82040000-OS_final.nb and not 82040000-OS.nb. Don't forget to use the correct image name. (eg: for 82040000-OS_final.nb chose OS)
The language, oem, operator version, cid can be left blank.
When you're done, press translate.
Copy the generated nk.nbf file in the rom update folder (RUU), execute ROMUpdateUtility.exe and follow the normal flash steps..
That's all.
Thanks to all those ppl that made this possible
PS: if you flash only the OS module (without IPL & SPL), even if the update proces crashes, you will not 'brick' your phone . Mine happen to crash on 2%.. i transpired instantly
kartam said:
You never told anybody how to do it and then you complain of constant requests
I don't want to cook Wm6 I just want to change some files in my current WM5 Rom!
Could you please tell me how can I do it?
Click to expand...
Click to collapse
Actually, I have some files about how to cook a rom, but they all Chinese, and may be useless for you.
DSF: the way you describe works with the tornado. thx. ive testest
an usefull app to edit initflashfiles.dat and the registry files is "notepad2".
Hi guys....
I've been a member of this comunity for 2 years now, but posted very litle, because I would be mostly spamming, re-interating what others have said, with" wow, this is fast...nice job"...and such..so i only post when I realy have to.
I downloaded the hypercore kitchen, and after some reading of the contained links and txt files, decided to have a go at it...
I would like to target Tomal's v8 but although very fast, it seems to have a significant number of com bugs...So maybe I'll go with v7.7...
I copied the nk.nbf file to the correct directory, and ran the decoder, but it errors on the next step saying that there is no OS.nb file...
Should this file be extrated from the nk.nbf?
Is this a problem with the nk.nbf file I'm using?
I would apreciate some help on this, as I'm looking for a full flavored cake, but to my taste...see I'm "diabetic" so I have to be extremly caution with what I cook...
When you decoding nk.nbf, decode it to OS.nb (change second line) instead nk.nba.
Something else to be aware of with Tomal's ROMs is that he ships all his RGUs in a single RGU.cab file.
You'll need to extract the contents of this file into the dump directory AFTER the imgfstodump and BEFORE the pkgtool step.
-PJC
Thanks for the quick answers, guys...
Something pop-up as a doubt...can I cook from an usb stick?(installing the kitchen, and workind directly trought the usb stick)???
I'm getting starved.....I can't even turn on the oven...
I have nstaledthekitchen over and ove again.
Changed the settings so it reads "Universal", copied the nk.nbf of my choice to the Extract/source folder, and whent to the Panel/extract and runned "DumpRom"...So far so good....
The DOS windows warns me that the file must be in the correct folder, so I double check....I press return...HTC Extender Rom Tool starts and prmpts me what I want to do and were is the extended rom...I thought it was embeeded in the nk file, but since Tomal provided with and empty extenden Rom, I downloade it and poited to it...Hit decode...
A big window opens with some file paths, so I check them to know were the files are going to...and using the above tip, change the name of the fat file to OS.nb, Hit decode...I'm happy, the window says "Decode sucessfull", so I hit "OK"...
I am agin at the Htc Extended Rom tool, so I hit exit(? done it right ?)...
The Dos window now tells me that it cannot find the ON.nb(? Didnt I just created it?)....
So I'm stuck....
The constructions workers haven't yet finished furnishing my kitchen, so I have no ingredients to work with....
Any chef willing to help me make a simple meal?????
psapg said:
I'm getting starved.....I can't even turn on the oven...
I have nstaledthekitchen over and ove again.
Changed the settings so it reads "Universal", copied the nk.nbf of my choice to the Extract/source folder, and whent to the Panel/extract and runned "DumpRom"...So far so good....
The DOS windows warns me that the file must be in the correct folder, so I double check....I press return...HTC Extender Rom Tool starts and prmpts me what I want to do and were is the extended rom...I thought it was embeeded in the nk file, but since Tomal provided with and empty extenden Rom, I downloade it and poited to it...Hit decode...
A big window opens with some file paths, so I check them to know were the files are going to...and using the above tip, change the name of the fat file to OS.nb, Hit decode...I'm happy, the window says "Decode sucessfull", so I hit "OK"...
I am agin at the Htc Extended Rom tool, so I hit exit(? done it right ?)...
The Dos window now tells me that it cannot find the ON.nb(? Didnt I just created it?)....
So I'm stuck....
The constructions workers haven't yet finished furnishing my kitchen, so I have no ingredients to work with....
Any chef willing to help me make a simple meal?????
Click to expand...
Click to collapse
With HTC Extender Rom Tool you must extract nk.nbf not ext_rom, and when extracting name it OS.nb (i thing it is 2nd line in tool)
Perhaps the would-be chef should read a cookery book?
There's a very, very good guide in this forum, which is what I started off with and had no problems whatsoever, but I can't for the life of me remember if it was beasty or thingonaspring who wrote it (apologies to the real author if I missed them out!). It also includes some fixes for the batch files.
Remember - the wiki and search are your best friends...
PJC
Hi Again...
The construction workers finaly had done some real work, so now my kitchen is properly furnished with all the CABinets i need...so now to try to cook me a simple meal, and try to learn from it....
Can't rebuild Ranju 7.7
Hi all.
I gave it a go and tried to rebuild Ranju 7.7.
I could decode it, dump it (yes, I extracted the contents of RGU.CAB to the dump directory), convert the dump to packages etc. So far, so good.
But when I tried to rebuild it, the ImgfsToNb tool gave this error message:
"Partition with file system 0x01 found after IMGFS partition. It's safer to abort here, sorry."
What should I do now?
jandevries12 said:
Hi all.
I gave it a go and tried to rebuild Ranju 7.7.
I could decode it, dump it (yes, I extracted the contents of RGU.CAB to the dump directory), convert the dump to packages etc. So far, so good.
But when I tried to rebuild it, the ImgfsToNb tool gave this error message:
"Partition with file system 0x01 found after IMGFS partition. It's safer to abort here, sorry."
What should I do now?
Click to expand...
Click to collapse
imgfstonb doesn't seem to support the FLASH disk that's in Tomal's ROMs. I don't know what he uses, but when I've based things on his work, I use a different 'donor' OS.nb for the imgfstonb stage. Obviously, I lose the FLASH disk, but as I don't use it anyway, that's not an issue for me.
^^ yup, exactly, it is due flash disk.
Ok, I understand.
But what is the "donor" os.nb used for?
I've extracted the OEM, SYS en XIP parts. Isn't that enough to compose a new ROM?
What parts are re-used from the original os.nb? And must an alternative donor os.nb be of the same version/build?
jandevries12 said:
Ok, I understand.
But what is the "donor" os.nb used for?
I've extracted the OEM, SYS en XIP parts. Isn't that enough to compose a new ROM?
What parts are re-used from the original os.nb? And must an alternative donor os.nb be of the same version/build?
Click to expand...
Click to collapse
As I understand it (and I'm sure someone can correct me if I'm wrong), the donor OS.nb is used as a 'template' for storing the IMGFS into an NB structure. As far as I've been able to tell, pretty much *any* OS.nb from *any* ROM can be used as the template.
Basically, imgfstonb takes 3 arguments - the imgfs file itself, a 'donor' OS.nb, and the 'target' OS.nb final output. This is all hidden by the scripting, but is what I've found by playing with the underlying utilities.
The only restriction I've found is that ROMs that contain Flash disk can't be used as the donor OS.nb.
PJC
Could one of the senior members of this forum please comment on pjc007's statements above?
Is it correct that the donor os.nb is only used to determine the right structure for the ROM?
(I'm asking because I got the impression from other posts on this excellent site that the donor os.nb is used as source for the XIP part, but I don't know for sure)
Well, I have the same matter now, I really want to cook sth to use the way I want a rom to be and share with others as I feel really bad just to download, I hope to upload my own rom and share but I read the instructions again and again , look for sth on the internet, download all the things to my PC that will be used to cook, still not certain what I'm going to do.
My question is if I cook a bad rom, then I up it to my EXEC, Is there any chances for it to die ? Or simply just install another well-known rom to rescue it if my rom jail to boot?
Hi,
I'm trying to recreate my original ROM and have a problem with creating the nbh file with buildOS. Whole process seems doing fine, but at the end there is no RUU_Signed.NBH file in the main directory. Last thing which buildOS do is "creating registry" and then simply show "done". Pagepool Changer doesn't start and i don't get any error message. Any idea where can be problem?
I'm noob in cooking ROMs, so if someone can create nbh file for me, it would be great. Here are my raw files:
rapidshare.com/files/409577803/Part01.raw
rapidshare.com/files/409599604/Part02.raw
Is still here anyone who can help? Thank you very much, have to reclaim my Raph.
Can't you just download the stock rom? There are a lot of them available, if you search around or check the wiki. It's a lot easier than re-building.
Thank you for your response. There was some special Czech ROM by O2 and I can't find it anywhere. Maybe they will not care about type of ROM because It's hardware malfunction but I want to be sure.