Upgrade Extended ROM from I-Mate 1.52 to T-Mobile 1.60 [Archive]

View Full Version : Upgrade Extended ROM from I-Mate 1.52 to T-Mobile 1.60

rpc

05-01-2004, 09:34 AM

Upgrading Extended ROM from Imate to TMobile Extended ROM, Easy As 123 Please follow the Steps

1. Get hexeditor
2. Download TMobile 1.60 and extract it to get ms_.nbf
3. Download I-Mate Ruu15283WWE and extract to get ms_.nbf
4. Open Both Files in hexeditor, please remember both files so you will get confused.
5. if you are having T-mobile and want to upgrade to I-mate Extended ROM you have to do the following in reverse.
6. Copy "2d 43 44 4c 00 00 00 00 " (-CDL....) and paste it to T-Mobile ms_.nbf, location "2d 54 4d 4f 42 49 4c 45" (-TMOBILE) , This is the Version.
7. Copy "62 34 34 39 38 64 31 34" (b4498d14) and paste it to T-Mobile ms_.nbf, location "65 38 34 31 37 61 63" (e8417acd), this is the CountryID
8. Save the T-mobile File to c:\New folder\ms_.nbf
9. Include in the New Folder "HimaClearJumpCode.exe","HimaGetDeviceData.exe", and "HimaUpgradeUt.exe".
10. Start to run the "HimaUpgradeUt.exe" and it will start updating your mobile.

Have fun and enjoy your new extended rom.
8)

ROM Version : 1.52.00WWE
ROM Date: 10/23/03
Radio version: 1.06.01
Protocol version : 1337.16
ExtROM version : 1.60.06

Next i will try to update my I-mate 1.52 nk.nbf to T-mobile nk.nbf but not the radio because radio will not work with my area. :D

killercheung

05-01-2004, 02:34 PM

Thanks!!!! :P

Let me try it!

itsme

05-01-2004, 09:51 PM

the 8 hex digit number is not the country code, it is the sum of crc's of 256k blocks of data of the file.

see http://www.xs4all.nl/~itsme/projects/xda/xdaii-update-format.html
for a tool to calculate it.

soon an adaptrom version will follow.

a warning though: if an upgrade fails, you may be left with an unbootable device. you can use xda2dmp (http://www.xs4all.nl/~itsme/projects/xda/xda-ii.html) to fix this in most cases. ( I hope )

also DO NOT consider trying out 'HimaClearJumpCode.exe', it will make your device unbootable. and you will have to figure out how to use xda2dmp (http://www.xs4all.nl/~itsme/projects/xda/xda-ii.html) to fix it.

noviur

05-01-2004, 10:03 PM

Hello,
I have an I-MATE and sometime ago updated to T-MOBILE ROM 1.6
Later on I-MATE released their own ROM update and when I tried to install it, even knowing that it is "lower" version - I got message that "Country Code ID is incorrect" (I am sure it is already known issue for XDA II community :-) )
1. Is it make since to go waist a time and try go back in lower I-MATE ROM?
2. and if 1 is YES, how to change Country Code ID so installation of I-MATE will proceed further?
I would really appreciate reply from XDS developers.

Thank you
Paul

killercheung

05-01-2004, 10:42 PM

I did test it.
This method not only allow to install the extended rom it self , but allow the machine to flash the full set of rom!

Moreover, after flash the new rom, it will keep the country id of the new rom, not the old rom.

itsme

06-01-2004, 12:45 AM

I found the bug, the problem is that the language of the device is reported as 'WWE'

maybe you can change one of the language identifiers in the binary of HimeUpgradeUt.exe.

or as I just noticed. the update tool in the Update.rar attachement in this thread http://forum.xda-developers.com/viewtopic.php?t=4785 has a updated version of the upgrade tool, which does know 'WWE'.

killercheung

06-01-2004, 12:56 AM

More interesting things :

1.All rom files (extended / radio / ce rom) has countryid inside the files. However if the ms_.nbf passed the countryid check, the rest of the rom will be allowed to flash, even the country id is wrong.

2.If you just want to upgrade a radio that not belongs to that countryid, just rename the company name of the radio rom by hexeditor to the machine's countryid (it is in the first few lines of the radio.nbf),

3. I can't find the country id inside the nk.nbf but it seems himaupgradeut.exe may not regonize a nb.nbf from different upgrade set.
For safe , use the himaupgradeut.exe comes with nk.nbf to upgrade the cerom

4. If you want to upgrade the CE ROM will different countryid, you must upgrade the extended with modified countryid too.

For example, I want to upgrade the CEROM to T-Mobile 1.60 CE ROM, but I want to keep the O2 1.52 extended rom, I have to

a. mod the T-Mobile extended rom's country ID / CRC to O2 countryid /CRC
b. upgrade the moded t-mobile extended rom with himaupgradeut.exe
c. Your device is now recognized a a t-mobile device. Use T-Mobile's himaupgradeut.exe to upgrade the CE rom to T-Mobile 1.60.
d. mode the o2 extneded rom's country ID / CRC to T-Mobile's countryid /CRC
e. upgrade the moded o2 extended rom with himaupgradeut.exe

It looks like very stupid, so we need want a new adapt rom and we love XDA-developers 8) .

itsme

06-01-2004, 02:43 AM

1: also the checksums is only verified for the nk.nbf

3: nk.nbf is encrypted, decrypt it with xda2nbftool. then you can see the countryid.

4: I saw that the extended rom, is where HimaGetDeviceData gets the language/country id from.

rpc

06-01-2004, 07:09 AM

"XDA developer Itsme" the 8 hex digit number is not the country code, it is the sum of crc's of 256k blocks of data of the file.

ahhh ic.. :?

rpc

06-01-2004, 07:32 AM

It looks like very stupid, so we need want a new adapt rom and we love XDA-developers 8) .

I agree with this :wink:

I try to search difference between nk.nbf and the other version nk.nbf, the Qtek2020 ver 1.60 nk.nbf is almost the same as I-Mate 1.52 nk.nbf, but with T-Mobile, it is totally different.

I will still try untill my unit becomes a paper weight, just to get that countryID error. it should be flexible like the old one.

rpc

06-01-2004, 07:36 AM

rpc

06-01-2004, 07:43 AM

rpc

06-01-2004, 09:14 AM

Suceed!!!!!.. because I update Already my I-mate 1.52WWE Extended ROM to T-mobile 1.60 Extended ROM, I successfully update all the upgrade within T-mobile 1.60 (nk.nbf, ms_.nbf, radio_.nbf), The CountryID error didn't appear anymore, the upgrade that I done with Extended ROM change my Country ID to what ever Extended ROM I update my device, the countryID is in extended rom(ms_.nbf) , now everybody can change thier unit to whatever update they want.

Thanks for the Help of XDA-Developer Team. More power 8)

itsme

06-01-2004, 02:25 PM

killercheung

06-01-2004, 03:52 PM

Thanks for XDA developer Itsme again :P

Finally I can change countryid of a TMOBILE rom to flash on an O2 Device.
However I found that himaupgradeut.exe v0500 come with the TMOBILE can't flash the rom (It reported MODEL ID error), but v0600 is OK.

I got an XDA2 , it will report country ID error when use TMobile's upgrade utility, but I want to upgrade the CE ROM to TMOBILE 1.60 WWE version.

Here is what I did :
1. decrypt the T-Mobile 1.60 CE image
run "xda2nbftool -d nk.nbf nk.nba HTC"

Because T-Mobile 160 upgrade rom is come with himaupgradeut v0500, therefore the decrypt code is "HTC"

2. Use HEX Editor change the nk.nba countryid from T-MOBILE to O2 (It is in the first line of the rom)

3. update the crc checksum of the nk.nba
run "xda2nbftool -c nk.nba -u"

4. encrypt the T-Mobile 1.60 CE image. Because I cannot use himaupgradeut v0500 to update, I have to use v0600 and the encrypt code is 921211

run "xda2nbftool -e nk.nba nk.nbf 921211"

5. Run the himaugradeut.exe v0600 to upgrade your rom!

killercheung

06-01-2004, 05:47 PM

I got one more question.

Is that the rom content inside the decrypted nk.nba identical to the rom dump by xda2dump ?

Because I tried to copy a xda2dump version of XDA2 Chinese 1.52 rom and copy the content from address 0x1000h ( Something like D300A0E300F0 in HEX code) to the end, and overwrite the 0x411150h - the end of a TMOBILE 1.60 nk.nba with the chinese rom content , and fill the end of the file to 0x1f80030h with 00 . I can flash the rom to the device without any problem, but it stop in the 1st boot screen.

The chinese is working with the bootloader SD card upgrade method.
What's wrong with me?

Thanks.

rpc

07-01-2004, 06:56 AM

another thing I noticed is that the password used for the nk.nbf encryption is different for each upgrade tool version:v0500 uses password 'HTC'
v0600 uses password '921211'

so, yet another update to my xda2nbftool (http://www.xs4all.nl/~itsme/projects/xda/xdaii-update-format.html)

now also has an option to change the crcsum in the file.

Hello XDA developer Itsme, can you send me this file/site "xda2nbftool", because i can not access it here, i think the site is forbiden here, thanks in advance

:)

itsme

07-01-2004, 08:59 AM

here are the tools attached

rpc

07-01-2004, 11:49 AM

here are the tools attached

Thanks... :lol:

itsme

07-01-2004, 06:42 PM

killercheung: it is almost the same. the decypted file has a 64 byte header, followed by the rom found with xda2dump at offset 0x80040000.

I don't think you can mix roms like you describe.

plu

08-01-2004, 12:38 AM

Does rom 1.60 fix problems with serial gps profile?
tnx a lot
pLu

plu

08-01-2004, 12:39 AM

Does rom 1.60 fix problems with serial gps profile?
tnx a lot
pLu

Looking Glass

09-01-2004, 05:19 PM

Does rom 1.60 fix problems with serial gps profile?
tnx a lot
pLu

It shows COM ports 4 and 5 available as outbound and inbound, under BT settings. I'm unsure if this fits every GPS needs.

Good Luck!
:wink:

dav.fal

22-02-2004, 02:12 PM

I have a new T-mobile MDA2 German and I want to change the to Italian.
Please, how to do this?

rpc

23-02-2004, 09:21 AM

I have a new T-mobile MDA2 German and I want to change the to Italian.
Please, how to do this?

Please follow the threed, it is either edit the ms_.nbf by hex editor, or by using the xda2ndftool. :o