[Upgrading, Modifying and Unlocking] paullim29:
Hi,

Did u try this steps from Topogigi? (See below). Questions I have are:

a) Did u use the Italian ROM's _xip0.nb0?

b) For me I'm stuck at Step "2) Now let's update the i780.nb0.payload file. make_imgfs i780.nb0.payload -nosplit". It doesn't seem to update the "i780.nb0.payload" file.

-----------Extracted from Topogigi------------------

1) Extract the Italian ROM from the original .img file by running Mirage_LV_v1.8.exe, stopping it before downloading the rom to the phone (kill the process from the task Manager).

2) Copy c:\_xip0.nb0 to a safe location (another directory).

3) Copy the _xip0.nb0 to i780.bin so you'll have a backup of the file for later use.

4) Convert the _xip0.nb0 from the bynary format to the .ROM format with the command:

cvrtbin -r -a a0a00 -l 5211c00 -w 32 i780.bin

a file named i780.nb0 will be generated.

5) Now split the .ROM file and separate the device independent data:

nbsplit -data 2048 -extra 8 i780.nb0

Two files will be generated: i780.nb0.payload and i780.bin.extra.

6) Open i780.nb0.payload with an HEX Editor and search for the hex value "E9 FD FF". Cut as a block the part of the file before the first "E9 FD FF" occurrence (it should be at hex 20000) and paste it as a new file named i780.nb0.payload.header, then save the i780.nb0.payload stripped file.

7) It's time to use the tadzio tools and extract a dump:

prepare_imgfs i780.nb0.payload -nosplit

You'll obtain a new file called imgfs_raw_data.bin

8) Ok, then the final step:

imgfstodump imgfs_raw_data.bin

and the dump directory will be generated with all the contents of your original rom.

I personally tested all the procedure with complete success.

You can now modify your rom as you like using one of the available kitchens, adding or removing packages and so on.

Now it's time to rebuild the rom with the inverse path:

1) Let's rebuild the data from the dump directory:

imgfsfromdump imgfs_raw_data.bin new_imgfs.bin

then delete the old imgfs_raw_data.bin and rename new_imgfs.bin

del imgfs_raw_data.bin

ren new_imgfs.bin imgfs_raw_data.bin

2) Now let's update the i780.nb0.payload file

make_imgfs i780.nb0.payload -nosplit

3) Fire up your Hex editor and append your i780.nb0.payload.header file to the beginning of your new i780.nb0.payload file

4) Then, we can merge the device dependent data

nbmerge -data 2048 -extra 8 i780.nb0 -conservative

5) The final step is converting back to binary format

conv3 i780.nb0

a file named i780.nb0.b000ff wil be generated. This is the file (renamed to .bin) that you can use with the Mirage loader (update only the pda part).

If anyone wants to try....DO IT AT YOUR OWN RISK!!!!! I TAKE NO RESPONSABILITY AND I GIVE YOU NO WARRANTY!!!!! you only need a hex editor, tadzio tools and the conversion utilities attached.

The same thing can be performed from a rom dump, that you can easily obtain with pdocread from your running device. Then, you can use the i780.nb0.payload extracted from the original italian ROM as a template for make_imgfs with the imgfs_raw_data.bin generated from your dump.

When I'll have some more spare time, I'll write a tutorial on dumping the xip part, so that the rom cookers among us can try to port a wm 6.1 release on the i780. This device is very amusing and the form factor is really the best you can desire, but the current rom is full of bugs. Bluetooth Audio Gateway is awful, it connects and disconnects randomatically giving me headaches. When connected to a BT car kit, the most of the times the phone answers the calls from the device instead of passing the audio to the BT gateway. Sometimes it answers correctly and passes the call to the BT audio gateway, but two or three minutes later it switches back the audio to the device. Contacts are screwed up when the device tries to sync with the car kit and so on...It's a nightmare. I really hope that someone will cook a better rom.

-----------Extracted from Topogigi------------------