NBH format used in Hermes (TyTN) roms

---

NOTE: I've already posted this into the Development & Hacking forum, but got no reply yet. As it is an Hermes specific topic it is probably better to place it here, sorry for reposting if you've already read this.


The available original shipped ROMs for the HTC Hermes have .nbh files with the RUU, instead of the usual .nbf files found in other HTC rom updates.

By now, there are two shipped ROMs available, containing:

• HERMIMG_Dopod_1.23.707.1_SHIP.nbh
  hermimg_QtekNOR_1.18.255.3_Ship.nbh

So, it seems that the usual nk.nbf file is no longer used by the Hermes RUU

I cannot extract the various rom components (ExtROM, OS, IPL/SPL, SplashScreen, GSM radio, etc...) out of these files using the usual TyphoonNbfTool, however mamaich's prepare_imgfs finds the imgfs and dumps it apparently ok, but it cannot be read using viewimgfs or itsme's rdmsflsh.pl, so I guess the dumped file is invalid.

Anybody knows about this new format?
is it possible to convert it to nk.nbf so we can cook our own roms?
Would it be possible for example to extract the radio rom from Dopod and replace it on QtekNOR rom?

I think we will have to wait for the rom guru's to advise on this. I hope this would be possible so we can get the best rom possible.

I've tried to decode.nbh files with alpinenbfdecode.pl, himalayanbfdecode.pl and typhoonnbfdecode.pl. None of them works, so this must be a completely new format.

Opening nbh files in hex heditor shows interesting strings, but I don't know how to procede to identify each part and decompress or decrypt it...

Is it possible to decrypt Extended_ROM of HTC TyTN? I'v found a great extRom, but I can't upgrade my ExtRom because I have only borrowed tytn from my friend and Iam looking for one special aplicattion which is included in this. Any solutions ? Thanks

Jerry, you can unlock & unhide the ExtRom just with a registry tweak, look here:

http://wiki.xda-developers.com/index..._Unhide_Extrom

Downloading a ROM now to experiment
If I crack it, you guys better donate something to my get-theblasphemer-a-hermes-too-fund :P (yet to set up that fund though )

Mate if you crack it I'll be donating to your fund!

Hmmm, a very weird file format indeed :S
All files start with "R000FF\r", next 16 bytes of what appears to be random data.
After that it consists of several blocks.
Each block starts with a header:
4-bytes block-length
4-bytes footer-length
1-byte always 1
After that follows the actual data (block-length bytes) + a footer, which appears to be random data but which I suspect to be some kind of checksum

I'm uploading a full USB log of a complete ROM-flash here:

ftp://xda:xda@ftp.xda-developers.com/Hermes/Technical/

Watch for the file Dopod2-FullRomUpgrade.txt.gz, when it is full uploaded it will be around 102Mb.

This is from this ROM file:

HER_DopodAsia_1237074_1060010_WWE_SHIP.exe

______
EDIT: Upload finished.

I created a wiki page with all the info we have about NBH format:

http://wiki.xda-developers.com/index...ame=Hermes_NBH