Beta: WM5 ROM editing tool

Search This thread

roozbeh

Senior Member
Feb 13, 2004
209
1
is this normal that i dont have initflashfiles.dat?
it seems some kitchen tools require this?
is it safe that i create a null one?
 

naoki66

Member
May 2, 2007
22
2
D:\tt2\os\TOOLS>viewimgfs.exe imgfs.bin
guidBootSignature: F8 AC 2C 9D E3 D4 2B 4D BD 30 91 6E D8 4F 31 DC
dwFSVersion: 00000001
dwSectorsPerHeaderBlock: 00000001
dwRunsPerFileHeader: 00000001
dwBytesPerHeader: 00000034
dwChunksPerSector: 00000008
dwFirstHeaderBlockOffset: 00000200
dwDataBlockSize: 00001000
szCompressionType: LZX
dwFreeSectorCount: 00002B22
dwHiddenSectorCount: 00000100
dwUpdateModeFlag: 00000000

Address: 00000200, dwBlockSignature: FFFFFEFE
dwNextHeaderBlock: 00000000 (size: FFFFFE00)

Header type: 00000270, Addr: 00000208
Unknown header type, FS_DATA_TABLE??

Header type: 00760070, Addr: 0000023C
Unknown header type, FS_DATA_TABLE??

Header type: 000002A4, Addr: 00000270
Unknown header type, FS_DATA_TABLE??

Header type: 000002D8, Addr: 000002A4
Unknown header type, FS_DATA_TABLE??

Header type: 0000030C, Addr: 000002D8
Unknown header type, FS_DATA_TABLE??

Header type: 00000000, Addr: 0000030C
Unknown header type, FS_DATA_TABLE??

Header type: 000003A8, Addr: 00000340
Unknown header type, FS_DATA_TABLE??

Header type: 0072006F, Addr: 00000374
Unknown header type, FS_DATA_TABLE??

Header type: 00300053, Addr: 000003A8
Unknown header type, FS_DATA_TABLE??

What's wrong??
 

hollandg

Senior Member
Apr 7, 2007
62
0
Unable to Load Compression DLL

I'm stumped!

I've got the DLL file in the same dir as buildimgfs but I'm still getting the error
Unable to load compression dll!

Any ideas?

I'm following the trinity dumping instructions so I'm not exactly sure what to do when things go wrong :confused:
 

sservati

Senior Member
May 16, 2006
141
4
Windsor
how can we change splash screen with this tool?

I already cooked a rom for Hyundai A200 but I want to change the Splash screen of Hyundai to a picture!!!

please help me guys
 

jiggs

Senior Member
Jan 27, 2006
953
4
To mamaich - Structure of .ROM module

Hello mamaich,

We are trying to build a new ROM for the XDA Atom, and we encountered some problems with the .ROM module. Described as follows is the original imageinfo.bin content for each device. Our objective was to port the AKU3.5 system files into our old AKU2.2.

ATOM AKU2.2: 00 00 1E 01 00 00 10 02 02 00 00 00 00 00 E5 01
ATOM LIFE AKU3.3: 00 00 28 01 00 00 02 02 02 00 00 00 00 00 E4 01
BENQ P51 AKU3.5: 00 00 25 01 00 00 02 02 02 00 00 00 00 00 E4 01

Now, if we used the .ROM module of BENQ, our XDA Atom would not boot. If we use the .ROM module of Atom along with the BENQ system files, the device will boot, but the today screen won't show, the control panel applets are missing, etc.

I changed the ATOM .ROM imageinfo.bin into:
00 00 1E 01 00 00 02 02 02 00 00 00 00 00 E5 01

and the today screen showed, as well as the control panel applets. However, there are still some things left out like the SD Card and Active Sync not functioning properly. We suspect this is so because if we use the .ROM module of Atom Life together with BENQ system files, active sync works but SD Card is not functioning.

If you can enlighten us with this, we will not be guessing as to what are the appropriate values to be placed. Thanks and hope to hear from you. :)
 

jiggs

Senior Member
Jan 27, 2006
953
4
FINISHED!!!

sorry wrong post. I transferred to proper thread.
 
Last edited:

sg10

Senior Member
Jun 22, 2007
135
4
edit: forget it, my mistake, awaiter didn't produce the required .bin unless I do -force.
thank's for great util.
 
Last edited:

famsanr

Member
Jul 10, 2007
37
0
rom HTC PU10

Hi everybody. I upgraded the rom in my htc pu 10 but after of finishing instalation with the reset for initializing the device only appears the logo and no more. I've instalated the rom again and again but in the fist screen doesn't apears any rom, radio and extended rom. I'll be grateful with any answer for fixing my trouble. Thank for reading this.
 

DSF

Senior Member
Apr 16, 2007
1,353
222
mowned.com
You are a bit wrong. You can replace any module (i.e directory) with a file. Just delete the directory and add the file with the same name.

Yes.. but it does not work in case of OS modules... I've tried to copy directly modules from OS, SHELL, MEdiaOS from another ROM and phone booted OK, but programs aren't working normally.
Then i've copied all the files from those modules, deleted the modules from my rom, copied the files back and flashed. Surprise: stuck in the first splash screen...

Is there a solution for this, please?

Using on TORNADO smartphone, many tools for wizard are working also on tornado.

Thanks
 
Last edited:

4blue

Member
Sep 27, 2007
15
0
Hi ! I tried to extract the imgfs_raw_data.bin file. RecMod.exe and viewimgfs.exe are in te same directory. If I run in CMD viewimgfs.exe imgfs_raw_data.bin I get the error message: Cannot map file imgfs_raw_data.bin

Any solution(s) to this?

THX!
 

spgi

Senior Member
IPAQ HW69xx (aka HTC SABLE) modification of prepare_imgfs (-ipaq argument):

Hi all,
First my english very very bad. Sorry
Any help to kitchen rom wm6 for htc sable (hw6915)

Im kitchen rom from Microsoft SDK and dumped CEOS.nbf. My not posible end proekt.
This link: http://rapidshare.com/files/94461173/BuildWM6_hw6915.rar is Rar arhive :
1. Dumped rom from hw6915 - imgfs_removed_data.bin, imgfs_raw_data.bin;
2. Dumped Microsoft WM6 SDK - a.BIN.extra, a.BIN.payload
3. Scoter kitchen rom - CEImage.bin.
My not posible create from CEImage.bin this CEOS.nbf.

Use Scoter kitchen.
Collect boot.rgu from windows of your device.
Dump ROM and create packages by bepe Package Tool.
Keep OEM.
Use SYS as you want.
But the hardest part is XIP section.

Not work tools (buildimgfs, viewimgfs and any tools from xda-developers) for this device. :confused:
 
Last edited:

wickednomad

Member
Apr 7, 2008
46
4
Belo Horizonte
Hi! I´m trying to dump my original HTC Touch XL´s (ELFIN) ROM in order to try some of the other systems available in this forum.

:D I´m using this guide:

http://wiki.xda-developers.com/index.php?pagename=Elf_HowtoDumpRom

:mad: Unfortunately i´m getting an error here:

D:\_ROM>buildimgfs.exe

it stops when processing the file wmvdmoe.dll:

"Processing "wmvdmoe.dll" as module" :confused:

I get an error message and windows asks to send a crash report to microsoft.

If i try to run the buildimgfs command again, i get the error:

"Unable to load compression DLL!"

Any ideas what might be happening?



brs,

Gus



Ps. Dump_memorymap.txt shows:

01E8F000 - 01ECCFFF ( 253951 bytes): wmvdmoe.dll


.
 
Last edited:

apex123

New member
May 14, 2008
1
0
Help needed

Hi ,
I'm a beginner for creating and editing a ROM and loading it on my windows mobile 5.0,
please help about how to create a ROM , take a backup of my existing original ROM , and how to dump the WM5.0 changed ROM on my PDA , I'm having
HP IPAQ rw6928 running WM5.0,
Also is it possible to change the OS on my device,i.e., the ROM. ?
Also is it possible to load WM6.0 on my PDA?
 
Last edited:
Jul 11, 2008
6
0
Campina Grande
Help-me I need to restore my rom

Please i need your help, i have a MIO P550B flashed with rom "Osc260A R05_P09" but this rom is not totaly compatible with
P550B (screen not centralized and deslocated to righ side and audio is too low), i need to put your original versio back "OSCAR 270a UT R02"
i have a original backup rom "part00.raw,
part01.raw,
part02.raw
and part03.raw"

rom of P550B

Oscar 270a_ut_r02
127.00M (0x7f00000) SMFLASH
| 1023.00k (0xffc00) Part00
| 1.63M (0x1a0000) Part01
| 34.88M (0x22e0000) Part02
| 89.50M (0x5980000) Part03
1.88G (0x78000000) DSK1:
| 1.87G (0x77fe0200) Part00
STRG handles:
handle 83f74666 1.87G (0x77fe0200)
handle 63ec3892 89.50M (0x5980000)
handle a3ec319e 34.88M (0x22e0000)
handle c3f74faa 1.63M (0x1a0000)
handle c3f74fce1023.00k (0xffc00)
disk 83f74666
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 63ec3892
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk a3ec319e
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk c3f74faa
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk c3f74fce
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00



i tryed the methods to make nb0:

1) prepare_imgfs.exe Part02.raw -nosplit - Sucess
2) viewimgfs.exe imgfs_raw_data.bin - Sucess
3) buildimgfs.exe - Sucess

now i need a "ruu_signed.nbh" of P550 or P550B to proceed with next step.
where i found ruu_signed ???
somebody help-me. thanks.
 

efjay

Senior Member
Nov 18, 2004
1,549
64
Can anyone help with converting .raw files extracted from a Samsung Omnia to a flashable file? Thanks.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    Topogigi said:
    Hi Mamaich,

    Firstly I want to thank you very much for your great work.

    I tried to use your rom tools, and I can successfully extract all the files from the Universal WWE rom set. But whenever I try to add a file with addfile.exe or build the imgfs back, Windows XP reports an error and then your software hangs. I think that this could have something to do with the dll that makes file compression (cecompr_nt.dll). Am I missing something? Perhaps I have to install something more before launching buildimgfs?
    Universal is not tested. I'll look at its ROM when I'll have time. Its format may differ from BA/Hima.
    Maybe you've added too many files? My program don't check for a free space and would crash.
    1
    @KTamas

    your .rgu format is wrong

    MS-Editor "Save As..." and select Unicode
    1
    hdubli said:
    I hv dump(from mamaich tool) for Atom...and want to extract or locate Media Plus App...Can anyone tell me how to find..I hv checked the modules..but it is unclrear...files do not contain anything related to media plus.
    This application may be in extended ROM. So look there for a CAB file.
    1
    Mamaich,

    Looking at imgfs_removed_data.bin in hex we have 0x82 blocks of 0x1000 bytes looking approximately like one below,

    80 04 00 00 FF FF FB FF 81 04 00 00 FF FF FB FF 82 04 00 00 FF FF FB FF 83 04 00 00 FF FF FB FF 84 04 00 00 FF FF FB FF 85 04 00 00 FF FF FB FF 86 04 00 00 FF FF FB FF 87 04 00 00 FF FF FB FF 88 04 00 00 FF FF FB FF 89 04 00 00 FF FF FB FF 8A 04 00 00 FF FF FB FF 8B 04 00 00 FF FF FB FF 8C 04 00 00 FF FF FB FF 8D 04 00 00 FF FF FB FF 8E 04 00 00 FF FF FB FF 8F 04 00 00 FF FF FB FF 90 04 00 00 FF FF FB FF 91 04 00 00 FF FF FB FF 92 04 00 00 FF FF FB FF 93 04 00 00 FF FF FB FF 94 04 00 00 FF FF FB FF 95 04 00 00 FF FF FB FF 96 04 00 00 FF FF FB FF 97 04 00 00 FF FF FB FF 98 04 00 00 FF FF FB FF 99 04 00 00 FF FF FB FF 9A 04 00 00 FF FF FB FF 9B 04 00 00 FF FF FB FF 9C 04 00 00 FF FF FB FF 9D 04 00 00 FF FF FB FF 9E 04 00 00 FF FF FB FF 9F 04 00 00 FF FF FB FF A0 04 00 00 FF FF FB FF A1 04 00 00 FF FF FB FF A2 04 00 00 FF FF FB FF A3 04 00 00 FF FF FB FF A4 04 00 00 FF FF FB FF A5 04 00 00 FF FF FB FF A6 04 00 00 FF FF FB FF A7 04 00 00 FF FF FB FF A8 04 00 00 FF FF FB FF A9 04 00 00 FF FF FB FF AA 04 00 00 FF FF FB FF AB 04 00 00 FF FF FB FF AC 04 00 00 FF FF FB FF AD 04 00 00 FF FF FB FF AE 04 00 00 FF FF FB FF AF 04 00 00 FF FF FB FF B0 04 00 00 FF FF FB FF B1 04 00 00 FF FF FB FF B2 04 00 00 FF FF FB FF B3 04 00 00 FF FF FB FF B4 04 00 00 FF FF FB FF B5 04 00 00 FF FF FB FF B6 04 00 00 FF FF FB FF B7 04 00 00 FF FF FB FF B8 04 00 00 FF FF FB FF B9 04 00 00 FF FF FB FF BA 04 00 00 FF FF FB FF BB 04 00 00 FF FF FB FF BC 04 00 00 FF FF FB FF BD 04 00 00 FF FF FB FF BE 04 00 00 FF FF FB FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF .......
    always ending with
    FF FF FF FF FF FF FF FF 06 21 55 C1 D5 29 9C DF B8 EA B8 BA F3 F9 D3 82 47 8A 43 3B E6 2A D9 A9 31 67 39 09 53 67 BF 12

    followed by 0x164 empty blocks (FFs),(TFAT16?)

    then followed by 2 blocks of interchanging multiple FFs and multiple B2 BA sequences looking like this

    FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A B2 2A FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

    and ending with the last 1 block of 0x00-s.

    At this point my conclusions are:
    1. there are 0x82 sequential x40000 blocks of data - so, there no hole in this ROM.
    2. last block of 00 is probably signalling the end of ROM or end of TFAT.

    What the 2 blocks with 2AB2 stand for, maybe remainder of FAT TABLE?

    What those 504 bytes long sequences of

    80 04 00 00 FF FF FB FF 81 04 00 00 FF FF FB FF 82 04 00 00 FF FF FB FF
    stand for, maybe they need to be in imgfs_raw_data.bin?

    I look also at imgfs_raw_data.bin - it has slightly different structure
    -there is also 0x82 sequential 0x3F000 long blocks of data,
    -followed by only 20 blocks of FFs (instead of 0x164 blocks of FF in removed_data.bin)
    -here the TFAT16 image begins - one block is filled mainly with 0x00-s and then it is follwed by the rest of blocks filled with FFs.
    -last 2 blocks contain those BA B2 sequences again. FAT table? Is it incomplete because part of it is removed? Does it affect work of viewimgfs?

    Sorry for so many questions. :roll: