wmeter
08-12-2004, 02:19 PM
Dear all,
While waiting for the new version of ER2003edit that can work also with the Blue Angels extended roms, here is a work-around to manipulate the extended ROM.
You need Linux, either installed normally on one of your machines, or if you do not have / want a dedicated machine you can use a 'Linux on CD'
distribution (Like KNOPPIX) for this.
The idea is that the Extended ROM in priciple just a container file for a VFAT filesystem, and can be mounted on a loopback device under Linux.
You need to uncrypt the extended ROM first, to be able to access it, but this can be done easily with the xda3nbftool tool.
The command to do this is:
xda3nbftool -x ms_.nbf ms_.nba 0x20040522
Now you need to move the file to the Linux box, or mount the filesystem so thay you can access the file.
The mount command under Linux is:
mount -t vfat -rw -o loop,offset=0x70080 ms_.nba /mnt/loop0
(The image starts at another offset then the old XDA images, therefore the ER2003edit program does not work correctly. Old offset was 0x70040, so anyone who wants to hexedit/patch the er2003edit.....)
You can now work in the ROM image as you want. The access is R/W and you can remove and replace files as your heart desires.
Once finished, you need to unmount the device, and transfer the file back to the windows machine. Once done, you need to re-calculate the CRC checksum with the xda3nbftool tool, this is done with the following command line:
xda3nbftool -c -u ms_.nba
Now you need to crypt the ER back, also with the help of xda3nbftool to have the BaUpdateUt recognize it correctly.
xda3nbftool -x ms_.nba ms_.nbf 0x20040522
If you remove the other ROM files (Radio and OS) from the directory, only the extended ROM will be flashed, and not the whole shebang.
Credit goes to Luchtmacht & Camarque, they are looking now at ways to extract the bitmaps of the splashscreens.
Hope it's usefull.
Willem.
While waiting for the new version of ER2003edit that can work also with the Blue Angels extended roms, here is a work-around to manipulate the extended ROM.
You need Linux, either installed normally on one of your machines, or if you do not have / want a dedicated machine you can use a 'Linux on CD'
distribution (Like KNOPPIX) for this.
The idea is that the Extended ROM in priciple just a container file for a VFAT filesystem, and can be mounted on a loopback device under Linux.
You need to uncrypt the extended ROM first, to be able to access it, but this can be done easily with the xda3nbftool tool.
The command to do this is:
xda3nbftool -x ms_.nbf ms_.nba 0x20040522
Now you need to move the file to the Linux box, or mount the filesystem so thay you can access the file.
The mount command under Linux is:
mount -t vfat -rw -o loop,offset=0x70080 ms_.nba /mnt/loop0
(The image starts at another offset then the old XDA images, therefore the ER2003edit program does not work correctly. Old offset was 0x70040, so anyone who wants to hexedit/patch the er2003edit.....)
You can now work in the ROM image as you want. The access is R/W and you can remove and replace files as your heart desires.
Once finished, you need to unmount the device, and transfer the file back to the windows machine. Once done, you need to re-calculate the CRC checksum with the xda3nbftool tool, this is done with the following command line:
xda3nbftool -c -u ms_.nba
Now you need to crypt the ER back, also with the help of xda3nbftool to have the BaUpdateUt recognize it correctly.
xda3nbftool -x ms_.nba ms_.nbf 0x20040522
If you remove the other ROM files (Radio and OS) from the directory, only the extended ROM will be flashed, and not the whole shebang.
Credit goes to Luchtmacht & Camarque, they are looking now at ways to extract the bitmaps of the splashscreens.
Hope it's usefull.
Willem.