Jump to content

VERIZON i910: I have ROM Dump. What next?


Recommended Posts

Posted (edited)

Hello, Long time lurker, first time poster.

I have managed to follow along many excellent guides on modaco and was able to get Part00.raw, Part01.raw and Part002.raw files of the Verizon i910 Omnia rom. now i searched the forum but was unable to go any further.

I found a posting for i780 raw file conversion, but it seemed like you needed a existing *.bin file to make it work.

If there is any guru out there who knows how to go on from here or at least point me to the right direction, you will have undying gratitude from me and all Verizon Omnia owners.

Thank you.

Edited by nahyah
Posted

bump? anyone? I can post the *.raw files if someone can make us of it.

Guest smilepak
Posted
Hello, Long time lurker, first time poster.

I have managed to follow along many excellent guides on modaco and was able to get Part00.raw, Part01.raw and Part002.raw files of the Verizon i910 Omnia rom. now i searched the forum but was unable to go any further.

I found a posting for i780 raw file conversion, but it seemed like you needed a existing *.bin file to make it work.

If there is any guru out there who knows how to go on from here or at least point me to the right direction, you will have undying gratitude from me and all Verizon Omnia owners.

Thank you.

At least you've gotten farther than I. I've been curious on how to even produce one in the first place. What I am trying to ponder on is

1) Produce a clean rom for VZ i910 (remove junk software)

2) Include SPB Mobile Shell and some registry hack in it

3) and being able to flash it back to my phone.

Of course keep an original version just in case as well.

Posted

Thanks !

I managed to extract the dump into the OEM-SYS-XIP structure using the information from the link I posted.

However, I wasn't able to find a way of repacking this, as I lack the complete OS partition image (os.nb).

In the above link, there's an alternative method for dumping roms, which generates an os.nb. Maybe this should do the trick.

Also, in case you missed it, here's a thread devoted to making an i910 kitchen:

http://www.modaco.com/index.php?s=&showtopic=276739

Posted

sorry i;ve been away for so long. got krazie buzy at work. i will get around to posting the other file this weekend. i hope we can get the ball rolling on the i910 people!

Posted (edited)

Tried it now, and the format seems to be what's needed for conversion to a flashable format.

But I'm getting the following when I try to work with it:

OS ROM Partition Tool V1.48 By Weisun :> PDAclan.com

Sector size : 0x00000800

Extra data bytes : 0x00000000

OS IMAGE found.

Partitions infomation:

**************************************

Part-0 type: BOOT SECTION image

Part-1 type: XIP RAM Image

Part-2 type: IMGFS file system

**************************************

Total size of partitions is not match!
Also, XIP extracts fine, but when I try to extract IMGFS I'm getting
ERROR - Part-2 size is wrong!

The image is probably truncated.

When you ran the command:

psdread -1 0 0x8076000 os.nb

Did you use the right value given by "pdocread -l" (the value near "DSK1") instead of the example 0x8076000 ?

Also, it would be better if you zipped the image before uploading, so there would be some checksum for detecting transfer errors.

Edited by liads
Posted

I ran pdocread -l to get the size and ran

psdread -l 0 0x82ad000 os.nb to obtain the os.nb file. (0x82ad000) is the size of the DSK1

How do you screen capture the MS-DOS Prompt screen?

Posted (edited)

1. Right mouse click in cmd window -> "Mark"

2. Select the text with the left mouse button

3. Right mouse click (this copies the selected text to the clipboard)

4. Paste here wrapped in code tags

(If "QuickEdit Mode" is enabled, you don't need step 1)

I'm re-downloading the image now, just in case something went wrong in the first transfer.

Edited by liads
Guest lastnikita
Posted (edited)

hi guys, anyone know how to dump eboot/CSC/phone parts ? Thanks !

I saw you use OS ROM Partition Tool V1.48

I think the latest is 1.55..

Edited by lastnikita
Guest iTnkD4iAm
Posted

Hey guys :) Just thought I'd take a peek on the i910 ROM. I'm also having trouble with the OS.nb file like liads. BUT I did use the part02.raw to get the OEM/SYS files by running the following command: ImgfsToDump.exe part02.raw > dump.log

Posted (edited)

Yeah, yesterday I found that the latest version of osnbtool is 1.56. Downloaded it (luckily Google can translate Chinese :) ), tried it, but still the same problem.

Apparently, the nb image nahyah uploaded is ok (I compared the end of the image with part02.raw).

It's the tool which is unable to cope with something unusual in this image. Apparently, angel12, who tried to build a kitchen for the i910, had the same problem. He didn't say how he fixed it, but he did say he bricked 3 devices before deciding to wait for an official update.

I was able to extract imgfs using nb0_kitchen, but was unable to repack it into the nb.

The nb can be converted into a flashable bin using "osnbtool -2bin os.nb". (result is os.nb.bin)

If someone is ready to take the (big) risk and flash it to the PDA part using Grandprix and succeed, you would have a way of restoring the original i910 ROM. After that, people can start working on the repack method by trial and error (knowing that the original image can be restored).

Perhaps it would be best to check with angel12, as to not needlessly brick more devices.

anyone know how to dump eboot/CSC/phone parts ? Thanks !

I think the CSC is embedded in the imgfs when the device is flashed.

I believe the eboot and phone roms are written on other chips, which cannot be easily dumped like the OS rom.

For the phone part, it probably requires some software that uses the "Samsung Modem Driver".

Edited by liads
Posted

think we need to wait for the official rom. i dont think we can use the existing software to convert the os.nb. :) sad day for all of us i910 owners

Guest lastnikita
Posted (edited)

Cool I saw your post on the other topic, thanks for the cmd line to dump os.nb mate :D

Yeah, yesterday I found that the latest version of osnbtool is 1.56

Could you please post it here ? Thanks :)

I think the CSC is embedded in the imgfs when the device is flashed.

So is there a way to extract it from os.nb ?

I believe the eboot and phone roms are written on other chips, which cannot be easily dumped like the OS rom.

For the phone part, it probably requires some software that uses the "Samsung Modem Driver".

True.... the problem is if we mix pda part with different eboot/CSC (and maybe phone too), then neither the warranty problem nor operator settings/customisation are solved.

Well at least you can cook the ROM now, but that's all..

Thanks for your answers, I'm working on i900 dump btw.

Edited by lastnikita
Posted
Cool I saw your post on the other topic, thanks for the cmd line to dump os.nb mate ;)

Gladly :)

Could you please post it here ? Thanks :D

osnbtool V.1.56 attached. Zip password is: pdaclan.com

So is there a way to extract it from os.nb ?

I think the CSC is "installed" into the OS image, so the original cabs and provisioning xmls do not exist in the image.

However, since the OS image includes all the data (just not conveniently packed), you shouldn't loose functionality by re-flashing the dumped image, without another CSC.

If it's certain modules or programs you want to remove from the image, you can still do it by cooking the imgfs to your needs.

True.... the problem is if we mix pda part with different eboot/CSC (and maybe phone too), then neither the warranty problem nor operator settings/customisation are solved.

CSC is just a convenience extension to the OS rom.

I don't know about operator warranty (bought my i900 on ebay :P ), but flashing only pda part shouldn't brick your device, as long as you have the original pda image to return to. Sometimes different combinations of phone/eboot and pda are possible.

I tried searching again for leads and saw your post on xda-developers :)

osnbtool_v1.56_by_Weisun.rar

  • 2 weeks later...
Guest lastnikita
Posted

sadly it did not help me to get a valid os.nb file, osnbtool always reports that "Part-2 size is wrong", and I couldn't find any workaround except than using another os.nb which is not proper.

looks like weysun's tools won't do it for i900 :(

Has anyone ever be able to flash a dumped ROM back ?

  • 2 weeks later...
Guest smilepak
Posted

I think at this point for me, all I need is a nice clean ROM for the Verizon i910. Meaning don't need all the fancy TF2D and GPS unlock, etc. All I need is a clean VZW i910 ROM, removing of RSS, Mobile IM, VZ App Store, PodCast, etc. All those bloatware.

Then I can easily hard reset, install whatever I need as base, use SPB Backup and create my image.

  • 1 month later...
Guest jxa4508
Posted (edited)

Was anyone able to get a stock VZW rom file? I will pay anyone up to 20 bucks via paypal for the factory WM6.1 rom/img file. I need to re-flash my phone to the stock rom to send it to verizon, would like to be able to open UMDL v2.3 and insert the .img file to flash...I believe the build number should be 20276.1.3.3. Anyone have any success in a dump to re-flash and not worry about modifying?

Edited by jxa4508

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.