Extracting mpx200's ROM?

[nicktgr15]

hi.
How can extract files from a mpx200 rom? I tried to use tools from the forum but with no success. Mpx200's rom is a file with .img extension. As i see so far in forum, rom's file extension for pda is .nbf. Is there any way to convert .img file into .nbf so i can use er2003edit program? Any other idea-guide that could help to extract the rom from my mpx200(wm 2003) would be very welcome. I couldn't find any resources on the web about extracting mpx200 rom and that's why i posted in this forum. I hope that i'm not totally off topic.
Thank you.
Nikos

[vijay555]

I had a play with this a while back, to try to get MPX300 compatibility with VJCandela.

I believe the rom files have have a "B000FF header" (open it with a hex editor). Apparently splitrom (http://www.xs4all.nl/~itsme/projects/xda/romtools.html) can reassemble them into a rom we can play with, but it became more urgent to finish VJCandela then continue with this, so I put it aside. If you get anywhere on this, please PM or post so that I can see if I can make VJCandela cross compatible.

Many thanks!

V

[mamaich]

I can upload a dumped mpx200 WM5 ROM to xda-developers FTP if needed.

These IMG files are somehow non-standard B000FF, I was unable to use splitrom to convert them to normal file.
You should dump ROM from a device, then remove a hole in the middle (probably MPx200 has 2 ROM chips at different addresses), then edit it manually because some idiot incorrectly edited that ROM to remove DevAuth.exe and broken its internal structure. After that you'll get a complete dump with broken ril.dll and gx.dll.
I wonder how that incorrectly patched ROM can even boot.

[vijay555]

:) That would be interesting Mamaich. I'd appreciate it if you can.

Can we dump a live rom normally then? I'll try to speak to a guy with an MPX300 to get it dumped if possible, and try to upload it if he's successful.

V

[nicktgr15]

hi.
I found so far that it's possible to convert the .img file, which is
used to update mpx200, into a .bin file. I opened the .bin file with a
hex editor and it starts with B000FF as you said. I don't know where i
can use this information or what it means. As you said it's the
header. When i try to dump rom with dumprom.exe i get an error message saying "unable to determine loading offset for out.bin". Looks like i have to find this offset myself and give it to dumprom. Could you help
me somehow on this?

Also where i can read a few things about the rom structure, xip and
stuff to understand what's going on.

Thanks!

EDIT1

Also tried with splitrom.pl.
With command splitrom.pl out.bin it gives me the following

B000FF entrypoint: 00000000
!!! your rom is not known to me: md5:
68847f4d859a242753798d9d0e205144
!!! your bootloader is not known to me: md5:
ea25e7468c09bf09a384a94cb4dcc67c

no operator rom found
no bitmap found
xip regions not found: 82d80000=LANG, 82040000=SMARTFON,

82d00000=OPERATOR, 82f2
0000=OE

And a lazy question. If i finally do it, i will get a folder in my
disk with all windows components unlocked and ready for modification?

EDIT2

Reading a few things about splitrom it says that it can handle bin
files with B000FF header. In our case(mpx200) we have a bin with
B000FF header. Right? So we can use splitrom to make the nk.nbf file.

An example on how to use splitrom.pl is the following.

perl splitrom.pl cfg/rom.nb1 \
-rm tmp/xda1.bin:0x81740000 \
-rm tmp/xda2.bin:0x81b00000 \
-rx tmp/xipchain \
-rb cfg/bootimage.bmp -ob 0x81ec0000 \
-rl cfg/bootloader.nb0 \
-wo nk.nbf -t nbf -n PW10A1-ENG-4.01-007

On the above, he opens rom.nb1 which is his rom file. Probably the
plain rom image format, i don't know the type. Then he refers to
another 2 files xda1.bin and xda2.bin. In my case i have only one
file, out.bin . He also uses bootloader.nb0, i don't have it or
something similar. Finally he writes nk.nbf file and gives it a
header. In my case i will give a B000FF header.
End.

[onk]

nicktgr15, for extract files from 2002 and 2003 firmware you can use tools from http://onk.nm.ru/mpx200

[nicktgr15]

Great site my friend onk. Great site. I hope i'll find something. Thank you.

[konker]

Hi nicktgr15!
Any luck with the ROM extraction for MPx200?
Anyone here on this board can comment too.
I went to the link http://onk.nm.ru/mpx200 but can't really get thinks going with the WM2003 for MPx200.
I've the ROM but using dumprom.exe, I got something like 'can't determine the memory offset'.
So...where so I start?
I really need the SIMManager & Resource Manager for my WM5 MPx200.
Also, would like to have the SIM Tool Kit working on my phone since there's no way to interact with the SIM features.
Thanks anyone!

[benenglish]

Please Upload the Dumped WM5 MPx200 Rom you are saying about!It will be a huge step!!!We can edit it,fix some bug,even make it work without the need of the SD Card...!!!

[mamaich]

I've uploaded ROM dump to uploads/mpx200_dump directory on xda-developers FTP.

Buildimgfs tool is useless on this ROM, because 2 files in it are broken. Maybe addfile/delfile would work (but they would break data in imgfs_removed_data.bin). And of cause you have to manually remove hole inside ROM before working, and inject the removed data back before flashing. And figure out the format of imgfs_removed_data.bin and recreate it yourself.

[onk]

For dump WM5 files you can use tool http://buzzdev.net/index.php?option=com_remository&Itemid=100&func=fileinfo&id=83

You must create directory "\Storage Card\" on SD and run this program on smartphone

I think this program work on many other devices with wm5

PS. you can read http://www.wce.by/forum/viewtopic.php?t=1517 (Russian language) about tools for firmware

[benenglish]

Onk nice site but i can understand a thing!!!
Have you made a fixed version of wm5 for Mpx200?If yes where i can download it?
My goal is to make a cut down wm5 version that can fit on the 32MB ROM of MPx200...can that be possible?

[onk]

I'm downloadl WM 2005 for MPX200 smartphone Build 14343 from sendmefile , but link id dead ;(

after extract files from archive, I convert part2.bin and part3.bin to CMCS IMGAGE (use BINtoIMG) and flash images to mpx200 (use Motorola Upgrade Wizard 1.8.x)

wm5 for mpx200 used SD card like /Storage on wm2003 and wm2002 (for save config, datafiloes, program etc)
Internal flash used only for firmware

for replace some files from firmware you can place it to /Windows on SD card

BUT! This build of WM5 work on 80-90% of mpx200 devices ;(
some devices can't run wm5.
And the speed of operation WM5 strongly depends of speed used SDcard (x80..x132 recomended)

Your file mpx200_wm5_bin_B00FF.7z (17460816 Bytes) is now online.
Your Download-Link: http://rapidshare.de/files/14495499/mpx200_wm5_bin_B00FF.7z.html

for extract files you must use 7zip archiver www.7zip.org

[benenglish]

what?is this a fixed wm5 version?

[benenglish]

does it works without the need of the SD?

[onk]

NO
this version NEED SD

[benenglish]

is there ANY chance to remove some files (Images,Sounds,maybe some prorams) from the WM5 ROM and make it work without the need of the SD?
I believe then,the OS would be STABLE and work Faster.
Let's make a Try!!!
What do you think?

[onk]

part1.bin сontains magneto with use built-in flash memories (WM5 build 14122)

It is necessary to correct a little. Find in an firmware

0BFC440: 65 6D 72 65 67 69 73 74 │ 72 79 2E 64 6C 6C 00 44 emregistry.dll D
0BFC450: 65 76 41 75 74 68 2E 65 │ 78 65 00 62 74 68 61 74 evAuth.exe bthat
and change DevAuth.exe to AuthDev.exe for disable Device ID check

But this firmware contains one more "protection" - works before some date.
If before flashing set date 2004 - works normally. If the current date - show a modal system window with the message that is the version for developers.

How to disable this "protection" - it is not known yet
And it is not known about locking the register in this firmware

PS: In Firmaware structure ROM similar 2002/2003 is used. Use dumprom for extract files

PPS: my page is updated. Added simple manual about firmware and tools

[rrunner]

I've uploaded ROM dump to uploads/mpx200_dump directory on xda-developers FTP.


Can you please upload this dump somewhere once again? as it seems /mpx200_dump is already deleted from FTP.