yashsingh1/xdaforums huggingface dataset:
[Windows Mobile Software Development] mashi:
what the limitation on tornado ? i extracted Tmo USA sda flash.

dump is over 800M. i try to put chinese font file to it.. it can't be buildimgfs. the file is 5M.

thanks
[Windows Mobile Software Development] nedge2k:
Not really as it would probably get me in a lot of sh*t with Gigabyte. Why would you want it anyway?
[Windows Mobile Software Development] le_toubib:
i m just rtyin to clean it

""""""""""""""""Rebuilding universal's ROMs is not tested. I'll fix that when I'll get Universal."""""""""""""""""

i tried even to delfile.exe without making a dump folder .... but still , an error arised ....

i m just trying to CLEAN this rom , full of dog barking junk useless file :cry: :cry:
[Windows Mobile Software Development] TofClock:
because i have a dump , but a dump made with WM5Dumper , and some files are corrupted :/

all files are working , like answer machine and others , but i've problems with modules like cprog.exe and tapres.dll
[Windows Mobile Software Development] TofClock:
Hey mamaich , i've seen the tools are updated ....

your RecMod.exe tool is very very usefull :)

Is it possible to do the revert tool ?

RecMod.exe : Module -> File

i' would use a tool that makes File -> Module

is it possible ?
[Windows Mobile Software Development] mamaich:
Such set of tools is present in PlatformBuilder 5.1x, but I don't have it.

And reimplementing them would be extremely difficult. You have to find RAM holes, rebase each code/data section of a DLL, etc.
[Windows Mobile Software Development] TofClock:
ok , thanks for your fast reply ..

i've asked that because because i've found a lot of things in moduiles ....

the welcomehead.96.png display on each boot is generated by gwes.exe , i'm actually testing to disable it ....

i'm working on the battery icon display .... i think i can find the soluce :)
[Windows Mobile Software Development] bepe:
please help,

how to dump the WM5 boot XIP partition.

Using gmap's tool I can relpace them but how to extract this files?

dumprom only dumps nk.exe...
[Windows Mobile Software Development] alligator:
Hello,

I tried to create manually some entries on the registry to enable the french dictionary for the transcriber, but without any success...

Could someone help me ? many thanks
[Windows Mobile Software Development] bepe:
This is the German registry, try to finde this entries for French...
[Windows Mobile Software Development] zohaer21:
doenst work with latest imate jamin rom...
[Windows Mobile Software Development] baniaczek:
Maybe this way - convert all modules into files and convert them back one by one?

Yes. It's still extrmely difficult :(
[Windows Mobile Software Development] summiter:
Howdy all -

I've run into a problem working with a WM5 (Wizard) rgu file. Per instructions here, I do:

rgucomp.exe -o dump\default.hv -nologo > default.rgu

Which for the sake of testing, I edit by ONLY adding REGEDIT4 to the first line, and then save in unicode to boot.rgu. When I run rgucomp.exe -b this is what I get:

---------------------------------------------------------------------------------

Microsoft (R) RGUComp Version 1.0.000

Registry file processor and hive builder.

Copyright (C) 2004 Microsoft Corporation All Rights Reserved.

built: Nov 19 2004 15:17:13

importing registry file ".\boot.rgu"...

Failed to parse value name HKEY_CLASSES_ROOT\awbfile\Shellex\ContextMenuHandlers

\{E88B4A18-6F77-4bb6-8E0D-DCD4B1F8F1DA}!!!

InitRegistry FAILED in file ".\boot.rgu" within a few lines of line 10.

BuildBootHive: (RGUComp) !ERROR failed importing ".\boot.rgu"

wmain: (RGUComp) !ERROR failed building BOOT hive

----------------------------------------------------------------------------------

Here's the first 11 lines of the rgu file that rgucomp.exe created from my default.hv:

----------------------------------------------------------------------------------

REGEDIT4

[HKEY_CLASSES_ROOT\.giff]

@="gifimage"

[HKEY_CLASSES_ROOT\.wbm]

@="wbmpimage"

[HKEY_CLASSES_ROOT\awbfile]

"EditFlags"=dword:10000

[HKEY_CLASSES_ROOT\awbfile\Shellex\EventSoundHandlers\{DDDC2AE0-9CA8-4fbb-A7B0-088B6D202749}]

@="Ring Tone Plugin Player"

[HKEY_CLASSES_ROOT\awbfile\Shellex\ContextMenuHandlers\{E88B4A18-6F77-4bb6-8E0D-DCD4B1F8F1DA}]

"DelayLoad"=dword:1 @="Set as Ringtone"

-----------------------------------------------------------------------------------

Everything there looks properly formatted to me. Any ideas on the cause of the error?
[Windows Mobile Software Development] bepe:
Change

"DelayLoad"=dword:1 @="Set as Ringtone"

to

"DelayLoad"=dword:1

@="Set as Ringtone"
[Windows Mobile Software Development] summiter:
Hi Bepe - thanks for the reply! I found that fix works after playing around. Unfortunately I'm having to make that kind of correction to a lot of the file. =(
[Windows Mobile Software Development] bepe:
There is a problem with non-standard characters and "rgucomp -o"

There is another way:

Copy all rgu file to .\RGU\ and all dsm files to .\DSM\

Copy packages.sof and boot.rgu to .\

Run DsmToHive.bat

Copy all files out of your device because some files are located at the XIP patition of the rom, this dsm files and the boot.rgu will not be dumped by viewimgfs.exe !!!

(Or use dumprom.exe to dump the XIP patition)

without changes this will generat a 100% identical user.hv and default.hv (compared to that of the rom)

->make changes directly to the rgu files

This will not work with edited roms!!!!
[Windows Mobile Software Development] summiter:
Hi bepe,

Ok a couple questions:

So, the default.hv that is dumped by viewimgfs.exe into .\dump is not a full and proper dump of that file?

Also, when you say it won't work on edited ROMs, what do you mean? I've got a Wizard ROM dumped and have made many changes to it (added files some ringers and Compact Framework 2, etc). The default.hv that I am trying to work with was dumped from the original ROM using viewimgfs.exe.

Thanks for being so valuable to the community here.
[Windows Mobile Software Development] Bral:
I use this tool to extract X50V's SD update Rom "WM50_K_A01_X50v_WM5_ENG.nb0", It can extract many files, But 2 important file: "user.hv" and "default.hv" can't extract as file, it is 2 folder. How do i convert the folder to file?
[Windows Mobile Software Development] bepe:
@Bral

rename the S000 file to default.hv

@summiter

The original default.hv, boot.hv and user.hv of your rom where build that way so this three files have to be (Binary)identical to that one generated by DsmToHive.bat (without editing trh rgu files).

by edited ROMs I ment if somebody made changes directly to a hv file already, in this case this changes will be lost.

DsmToHive.bat will generate default.hv, boot.hv and user.hv at the same time, do not rename something!

If DsmToHive.bat generates only boot.hv some rgu or dsm is missing...

the last lines of the output should be:

...

(RGUComp) done!

Microsoft (R) RGUComp Version 1.0.000

Registry file processor and hive builder.

Copyright (C) 2004 Microsoft Corporation All Rights Reserved.

built: Nov 19 2004 15:17:13

importing registry file ".\boot.rgu"...

(RGUComp) done!
[Windows Mobile Software Development] Bral:
To: Bepe

I can't find the S000 file, in user.hv folder,there only 3 files: user.hv(2KB), imageinfo.txt(24KB),imageinfo.bin(56KB). in default.hv the file is: default.hv(2KB), imageinfo.txt(24KB), imageinfo.bin(524KB).

What wrong with is?
[Windows Mobile Software Development] bepe:
sorry, delete the existing default.hv and rename imageinfo.bin

if this is working:

replace the folder '.\dump\default.hv\' by the file default.hv
[Windows Mobile Software Development] panda88:
is there any emulator that can run nk.nbf? I am asking this question because i would like to try out the new rom before flashing to the device. any idea?
[Windows Mobile Software Development] bepe:
Moves all files and modules related to one package ('dump\xxxx-xx-xx-xx-xxxxxx.dsm') to 'dump\xxxx-xx-xx-xx-xxxxxx\'.

Usage:

dsmtool <file>

<file>: 'dsm file' or 'modul' or 'file' from 'dump\' directory.

just drop a file from 'dump\' at dsmtool.exe :wink:

Edit: this is my first real c++ tool, so all critic referring to source is welcome... (PM)
[Windows Mobile Software Development] hdubli:
I hv dump(from mamaich tool) for Atom...and want to extract or locate Media Plus App...Can anyone tell me how to find..I hv checked the modules..but it is unclrear...files do not contain anything related to media plus.
[Windows Mobile Software Development] mamaich:
This application may be in extended ROM. So look there for a CAB file.
[Windows Mobile Software Development] hdubli:
Thanks.Extended ROM is .img file and I opened it with Win Image.There are files related to that and are called as Media Center Skins...Hv checked but could not locate the exe for the same...it only contains the bmps and pngs and other files..

cabs are available but for operator settings.

Just to inform, atom's Ext ROm is of 15 MB.It takes less than a min to update the Ext ROM during the ROM update and interesting thing is that there is no Auto Run method, the phone boots up with all the contents of ext rom loaded except it asks for localisation for operator settings...

Can anyone inform about this..
[Windows Mobile Software Development] Excubator:
I've been trying to use the tools on a Tornado Rom however so far very unsuccessfull.

I extracted the decrypted nba-file from the nbf-file using "Typhoon NBF tools". I then used Prepare_IMGFS -nosplit to create the .Bin-files. (No errors reported whatsoever).

Using deletefile I removed a couple of files. After that I built the new nk.nba with make_imgfs and updated the checksum using "xda3nbftool -c -u"

I used "nb2nbf_tornado.exe" to create the nbf-file - still no errors reported from any program.

After I installed the new ROM on my Tornado the unit simple hangs on the boot menu.

Any ideas on this? Is it at all possible to extract the nba-file from the nbf-file using xda3nbftool? In that case, what are the password for the Tornado nbf-file?
[Windows Mobile Software Development] mamaich:
xda3nbftool is for BlueAngel. You'll get garbage if you use it on tornado.
[Windows Mobile Software Development] double_ofour:
I having trouble here about converting boot.rgu to boot.hv

Microsoft (R) RGUComp Version 1.0.000
Registry file processor and hive builder.
Copyright (C) 2004 Microsoft Corporation All Rights Reserved.
built: Nov 19 2004 15:17:13
importing registry file ".\boot.rgu"...
Failed to parse value name HKEY_CURRENT_USER\\Software\\Microsoft\\Windows!!!
InitRegistry FAILED in file ".\boot.rgu" within a few lines of line 4.
BuildBootHive: (RGUComp) !ERROR failed importing ".\boot.rgu"
wmain: (RGUComp) !ERROR failed building BOOT hive

Error on line 4, here my registry

REGEDIT4
[HKEY_CURRENT_USER\MUI]
"CurLang"=dword:409
[HKEY_CURRENT_USER\Software\Microsoft\Windows]
"DbPath"="\\mxip_initdb.vol" "LangDbPath"="\\mxip_lang.vol"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"EnableNegotiate"=dword:1 "EnableHttp1_1"=dword:1 "ProxyHttp1.1"=dword:1 "SecureProtocols"=hex:A8,00,00,00 "AggressiveCacheFlush"=dword:0 "ShowDialogFullScreen"=dword:1 "DialogTimeOut"=dword:493e0 "EnableAutodial"=dword:0 "MaxConnectionsPerServer"=dword:4 "DisableCachingOfSSLPages"=dword:1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache]
"Signature"="Client UrlCache MMF Ver 4.7" "QuotaAdjustCheck"=dword:1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\C.... BLAH BLAH]

this thing??

[HKEY_CURRENT_USER\Software\Microsoft\Windows]

what wrong with that line?

ER!! im getting crazy here now.. been tried everything "UNICODE" "REGEDIT4" "NO SPACE BETWEEN SOMETHING"
[Windows Mobile Software Development] bepe:
One entry per line:

REGEDIT4
...
[HKEY_CURRENT_USER\Software\Microsoft\Windows]
"DbPath"="\\mxip_initdb.vol"
"LangDbPath"="\\mxip_lang.vol"
...

and use unicode :wink:

bepe
[Windows Mobile Software Development] bepe:
@mamaich:

Is there a change to get tools like this for XIP Section? (moduls!)

I tried to understand the structure of XIP, but my abilities referring to c++ and my knowledge about the rom structure are far away from the state of making tools like this :cry:

Perhaps this would also help to port AKU2 to BA...
[Windows Mobile Software Development] double_ofour:
Thanks bepe GOT IT working now!

Thanks!
[Windows Mobile Software Development] double_ofour:
How do i know if the rom already reached the maximum space? and whats the maximum space for o2 XDA II ROM? Thanks!
[Windows Mobile Software Development] HyperMalac:
Hy there all!

Sorry for bothering you with this, but I want too to edit my ROM.

So all I need is to delete some files, to free up space (like anyone want too).

My problem is that I'm a complete idiot with the ROM editing. I've read the first pages of this topic, and saw there is quite hard to do. Can someone post a guide/how to? Because at the first pages all of you are worked with, such hard programs, and i think you've made developments, and now you are using easier programs, or not?

Thanks for the help and sorry for my English (I hope I wrote understandable)
[Windows Mobile Software Development] TauTau:
Hi,

I'm trying to extract a few things from this ROM http://www.vodafone.de/business/support_download/59345.html for the Wizard. HTC64 Extended Rom Tool doesn't recognize the rom. Typhoonnbftool doesn't see any sections (i.e. OS, Extended) in the nbf.

I have been able to extract files with typhoonnbfdecode.pl from the nbf, I then have some .nb files that look like the different parts of the ROM (IPL, SPL), and I can rename the ExtendedRom file to .rar and then open them with winrar, though I only get short filenames which don't give me a clue what's in there (looks like a old image format). renaming the OS file doesn't work though, winrar can't open that.

Am I using the wrong tools? Do I take wrong steps?

Lars
[Windows Mobile Software Development] farseer:
The followingc command:

viewimgfs.exe dump.bin

is resulting in this error:

Unable to load compression DLL!

i do see named "cecompr_nt.dll" in the same directory as viewimgfs.exe.

What could be the issue here?
[Windows Mobile Software Development] farseer:
i don't know what the secret password is...maybe i can get i can use my "Get One Free Help" card this once?
[Windows Mobile Software Development] solnyshok:
trying these tools on hx4700

Hi Guys, deep respect for the tools you developed for editing wm5 roms.

I tried to use those tools on my ipaq hx4700. Surprisingly, I found that wm5 update nbf is easy to steal from wm5 update utility and it looks like nbf is not encrypted. At least, all tools work on it (prepare, add/delfile, view, build, make). And, it is easy to flash it back to device by fooling the same update software, just replacing the original nbf at the last moment before flashing.

Ok, now it is not all that easy of course, and I need your advise. Yes, I have read the thread, and done about a dozen rom builds, even bricked device and restored with image from SD card.

First, I am not sure tools are 100% correct.

1) if I delete some 5mb with help, pictures and somesoftware (100% sure that it is not related to builtin wince - like dockware and pocketinformant) from rom, I add only some 500kb worth of utilities and then build it back, then I see some strange behaviour in wince functions - like messaging starts but you cannot write new mail; msnmessenge does not start at all, wifi does not start.

2) dll from dump, received with "view" tool has different size from dll in rom - e.g. I tried to take battery.dll from dump (39.5kb) and overwrite with battery.dll in ROM and I see it was only 37kb.

3) if do a test by prepare->view->did not change anything->build->make and flash resulting nbf to device - it bricks.

Any ideas what could be wrong with my approach or with tools? I know that tools have not been tested on hx4700, but I would love to see them working correctly. :roll:
[Windows Mobile Software Development] mamaich:
Re: trying these tools on hx4700

This is correct. The size of modules in ROM are calculated incorrectly by OS. Internally they are split in sections, etc, so the correct size cannot be known. My tool reconstructs files from modules, realigns and relocates them, so it may save some space or make the files larger.

prepare_imgfs/make_imgfs should be modified to support HP devices. prepare_imgfs moves unknown data to imgfs_removed_data.bin, make_imgfs does the reverse. Structure of this file is known (better to say "guessed") for BA and Himalaya devices, for HP it would contain trash, so your device would hang on boot. I.e. for devices different from Hima/BA this is only one side process - you can dump, but not recreate.

Somewhere I've published source code of these 2 tools, you should study contents of imgfs_removed_data.bin, and modify make_imgfs so that it recreates it correclty.
[Windows Mobile Software Development] solnyshok:
make_imgfs for hx4700

I thought that make_imgfs is just stitching together 2 files, hmmm... and that removed*.bin was not altered in the process at all. Now you say it contains FAT for image and affects the make_imgfs process?

Ok, I have sources for prepare/make_imgfs. where can I read about what is contained in removed*.bin on BA/Hima.
[Windows Mobile Software Development] solnyshok:
ipaq hx4700 wm5 nbf layout

some 20 hours later, only information I could dig out is more than a year old, so I am not sure even that it refers to WM5. It could be based on wm2003se (more likely).

_http://www.xs4all.nl/~itsme/projects/xda/wince-flashfile-formats.html

Is this true for WM5 roms too? How can I find something wm5 nbf layout?

Please help me guys.

:shock:
[Windows Mobile Software Development] mamaich:
Re: ipaq hx4700 wm5 nbf layout

No.

Source code of these 2 tools is in the first post. Structure of removed data is somehow obvious, you can examine it in any hex editor.
[Windows Mobile Software Development] zohaer21:
can anyone link the direct link to TyphoonNbfTool.exe

i cant seem to access the site in general as it keeps giving a network error???

thanks
[Windows Mobile Software Development] solnyshok:
imgfs sources

Mamaich,

I have couple of questions again :)

1. Is there possibility to add imgfs.h to sources published on the first page?

2. I'm a bit puzzled that while prepimgfs tool supports different approaches to mpx,emu,acer,etc images, it seems from the sources that makeimg doesn't take them into account. For example, in

prepimgfs:

WriteFile(H, ImgfsPtr+i, step, &Tmp, 0);

WriteFile(HT, ImgfsPtr+i+step, skip, &Tmp, 0);

here step & skip are variables defined for each device separately, but in makeimgfs, it seems, those are hardcoded values:

ReadFile(H,ImgfsPtr+i,0x3F000,&Tmp,0);

ReadFile(HT,ImgfsPtr+i+0x3F000,0x1000,&Tmp,0);

is it an old source of makeimgfs?, or it never supported mpx, acer, etc?
[Windows Mobile Software Development] solnyshok:
hx4700 nbf tools

I thought I'd bump this thread again after two weeks. Can anyone help me to figure out structure of this ROM based on data above?

Solnyshok
[Windows Mobile Software Development] kremo:
dll change

can someone help how to change a dll in wizzard rom?

I tried to change keyboard driver to work wizzard rom on prophet.

I tried delfile/addfile and change dump directory too, but after create nba file and flesh it, keyboard doesnt work.

can someone help how can I fix this?
[Windows Mobile Software Development] sorg:
i would like to ask couple of questions to mamaich if he is still around here.

i'm studying ASUS P525 ROM image. IMGFS tools work fine with key -nosplit. I guess, since no need split data building ROM should work fine as well.

according to what mamaich said, module is barely memory dump of exe/dll without any relocation and section info, PE header almost empty as well. But looking at any module inside P525 ROM i clearly see all info in PE header. Relocation/Section info is also present and it seems valid. Is it new generation of ROM? I read that TrueFFS DOC system doesn't allow XIPing, thus all files should be copied to RAM before execute. So, looks like original XIP idea is dead in present generation of ROMs and even modules look like normal portable executable files.

So, can mamaich give any comment about this?

Also, since module has no difference in comparing with normal PE files and TrueFFS DOC ROM has no real XIP support, may it be transferred from module-type to file-type? working with files is much easier, IMHO.
[Windows Mobile Software Development] ali4533:
can i edit imate PDA-N (HTC Galaxy) ROM?
[Windows Mobile Software Development] Oki:
In the New Magneto format there are not XIP chains. Instead of them there are other compressed sections with the "SRPX" signature, so NK.exe and the rest of the critical IO DLLs are not executed directly from the storage device anymore. Things are getting more and more like in the PC platform.

By the way, it is possible to get the source code of viewimgfs and buildimgfs?

Regards,

Oki
[Windows Mobile Software Development] hannip:
modules vs files

Hi, I'm using these tools not so much for creating a new rom, but for extracting files and cabing them up for install on other devices.

I've extracted a cheetah imgfs using

prepare_imgfs Part02.raw -nosplit

viewimgfs imgfs_raw_data.bin

Worked great. I am able to take any of the files and use them as is on another device. However when I try to use module files it appears unusable.

I see there is a RecMod tool for restoring a module but when I use it there is no output and it just exits. I read in the tool notes that if RecMod is in the current dir when extracting the modules it will restore them to files. Is the result the file inside each module dir? If so are these usable as is or do they still need header tweaking?

Thanks for your help.
[Windows Mobile Software Development] hannip:
It looks like I jumped the gun. I tried the dll's on another device and they work fine. Sorry and thanks for these great tools!
[Windows Mobile Software Development] Oki:
RecMod creates the executable file inside the module folder. you have to call it with the name of the folder:

recmod ".\MyModule.dll"

If recmod.exe is present in the same folder of viewimgfs.exe then the modules are reconstructed when being extracted from the IMGFS segment.

Regards,

Oki
[Windows Mobile Software Development] Johnnnnnnnnnny:
Step by step?

I can edit ROM, but I cant edit default.hv yet.

I have:

1. split all the tools + default.hv into same folder

2. use: <code>set _FLATRELEASEDIR=.

rgucomp -o default.hv -nologo > default.rgu</code>

and I have default.rgu

3. Edited it, and renamed onto boot.rgu and save as unicode

4. use <code>rgucomp -o</code> and it was extract me boot.hv, who has 28 KB!! What I doing wrong?
[Windows Mobile Software Development] jvelasco:
Help ROM hx4700 wm5?

Please Help...

How to add files to other folder (not Windows)?

Ex. \Windows\Startup\ ?

Not found "initifiles.dat"

I have hx4700 WM5, use:

prepare_imgfs.exe CEOS.nbf

viewimgfs.exe imgfs_raw_data.bin

... working... .\dump\

BuildImgfs.exe

make_imgfs.exe ceos.nbf

xda3nbftool -c -u ceos.nbf

ceos.nbf work fine.

thanks advanced..
[Windows Mobile Software Development] Oki:
The right name is initflashfiles.dat

Regards,

Oki
[Windows Mobile Software Development] jvelasco:
hx4700 "initflashfiles.dat"

Thanks for reply...

.\dump\initflashfiles.dat not found

This is found in \device\windows\initflashfiles.dat

...

Try copy \device\windows\initflashfiles.dat to .\dump\

...
[Windows Mobile Software Development] jiggs:
Reverse Recmod?

Hi Mamaich,

I know you are no longer working on this tools as you said in your first post. However, I thought it wouldn't hurt if I ask a reverse tool for recmod. Meaning files turned back to modules... if this is possible.

Thanks.
[Windows Mobile Software Development] mamaich:
I've already answered that earlier. Of cause it is possible, for example Microsoft has such toolchain. And I don't have time nor mood to recreate that stuff myself.