Questions to rom gurus, who can help?

[pof]

Hello,

I have some questions, if someone could help me with any of these I would really appreciate it, I am quite newbie, but I learn fast... now the questions:

1. is it possible to full dump the Hermes ROM to microSD using 'd2s' in bootloader? if yes, would it be possible to use 's2d' to restore it?

2. anybody can provide more information on the Hermes ROM layout, virtual and physical memory maps, offsets, sizes, etc..? If yes, how do you find this?

3. anybody managed to run pmemdump or psdread on Hermes?

4. The existing ROM upgrades for Hermes do not have .nbf files, they use a "new(?)" format .nbh, the file RUU.dll has functions GetNBHInfo() and UpdateNBH(), anyone with windows debugging skills could help to decode this format? Inside this file you should find:

- Extended ROM
- OS
- IPL (part of bootloader)
- SPL (part of bootloader)
- Splash screen
- HTC Logo (normally uses the same image as the splash)
- GSM radio code

5. Can someone make something like xda2nbftool to work with this .nbh format?

6. I think the security password should be possible to extract from RUU.dll too, as it calls SecurityPass() function, but I don't know how.

7. Is there an up to date list of bootloader commands? I found those, but I think some info is wrong or missing:
http://wiki.xda-developers.com/index.php?pagename=HimalayaBootloaderCommands
http://www.xs4all.nl/~itsme/projects/xda/bl-ii-usage.html

8. anyone could provide photos of a disassembled device? chipset references, etc...?

9. anyone interested on linux port for Hermes?? :D

BIG thanks :oops:

[pof]

Now I can answer myself some questions... who can answer the rest?? :D


1. is it possible to full dump the Hermes ROM to microSD using 'd2s' in bootloader? if yes, would it be possible to use 's2d' to restore it?


Nope that I have found.


6. I think the security password should be possible to extract from RUU.dll too, as it calls SecurityPass() function, but I don't know how.


The password is dinamically generated, changes everytime, here's how to access the bootloader with the right password:
http://wiki.xda-developers.com/index.php?pagename=Hermes_BootLoaderPassword

Also wrote a post in the forum about this, and made a cool pdf explaining the process:
http://forum.xda-developers.com/viewtopic.php?p=346002

BTW, the password seems to be not useful for anything :(


7. Is there an up to date list of bootloader commands?


Yes, I've written it on the wiki, but some info is still missing:

http://wiki.xda-developers.com/index.php?pagename=Hermes_BootLoader