DENOVA Novatek FW unpacking script.

[nutsey]

DENOVA script v0.8. download | mirror | mirror

Unpacks single- and dual-partition Novatek FW files.
Unpacked file(-s) will be saved at /DENOVA folder.

Supported Novatek firmware types:

• 2 BCL partitions in a row.
• 1 FullComp BCL partition.
• 1 PartComp BCL partition.

Usage: denova.bat <filename>
Example: denova.bat FW96660A.bin

List of extracted files for firmwares, containing two BCL partitions:
1.bcl - Original 1st BCL partition without the footer (tailing 40 bytes)
1.bin - Unpacked 1st BCL partition
2.bcl - Original 2nd BCL partition (IQ) with 1st BCL partition footer in the beginning of the file

Firmwares, consisting of one BCL partition will be extracted to 1.bin file.

Run GETBITS.BAT to extract the bitrate values and offsets. Note: Only NT96660 firmwares are supported now.

Run DUMP2BIN.BAT to convert SPI-flash dump to firmware update file. Works with NT96660 4 and 8 Mb dumps.

[nutsey]

DENOVA script v0.3 download

List of extracted files for firmwares, containing two BCL partitions:
1.bcl - Original 1st BCL partition without the footer (tailing 40 bytes)
1.bin - Unpacked 1st BCL partition
2.bcl - Original 2nd BCL partition (IQ) with 1st BCL partition footer in the beginning of the file

Firmwares, consisting of one BCL partition will be extracted to 1.bin file.

[[email protected]]

I've found a bug/problem: DENOVA only works with FullComp firmwares.
This happens with NonComp (BCL1 @0x000b0000)

DENOVA Novatek firmware unpacking script by nutsey for GoPrawn.com v0.3

1 partition found.

decompress tempfile.bin to DENOVA/1.tmp...
Input file: 2574288 bytes
Output file: 0 bytes
error: end offset is lower than start offset
1 errors occurred.
error: no such output file: DENOVA/1.bin
1 errors occurred.

Sample file: http://download1485.mediafire.com/nebjgi9j19tg/mw791y87jbw8188/SG9665GC_V2_Firmware_update_latest.zip

[nutsey]

@[email protected] Thank you for the bug report. Fixed in v0.4.

[nutsey]

DENOVA script v0.4 download

Supported Novatek firmware types:

• 2 BCL partitions in a row.
• 1 FullComp BCL partition.
• 1 PartComp BCL partition.

[nutsey]

Updated to v0.5.

GETBITS v0.1 script added.

[dimok135]

Thanks! Hope you will have time to make support for Elephone EleCam Explorer Elite 4K

[dimok135]

Hello. Trying to unpack firmware from Elephone EleCam Explorer Elite 4K because it has too low bitrate. In the begining of .bin there is such text: BCL1 ... NT96660 ... 1000000020100701 but ntfwtool.exe
crashes on unpack. (using DENOVA script v0.5)

"
error: end offset is lower than start offset 1 errors occurred. error: no such output file: footer.bin 1 errors occurred. "

Firmware link:
FW: 2017-01-06: https://mega.nz/#!80hW3ZjY!0xBdK-rJU...NCp6v0zEMBo-o8
Loader 2017-02-08: https://mega.nz/#!dwIxDbIY!ag__fyN0PTRlASL2izsZJWa_yDtIBiB53IRHB2q ur20

Old: https://mega.nz/#!qhhyWQgA!LvgfzIc1w...m2Ml1b_bLSK-z0
No luck with other utilities.

[nutsey]

Unpacked it without any errors: https://drive.google.com/file/d/0B4t...ew?usp=sharing

[dimok135]

O_O It's strange.

[dimok135]

Can you please explain me if I have found some text which is probably responsible for bitrate, how to find here ordinary digits? What should I change?
Thanks in advance.

[nutsey]

Run GETBITS script with 1.bin in DENOVA folder and you'll get OFFSETS.TXT from which you can learn all bitrates offsets.

[dimok135]

nutsey, thank you. I've seen instruction. The second problem is that I see hex values of bitrate but I don't know in what form is it and what values to change. I understand that I'm newbie and you don't have to explain me all stuff of reverse ingeniering but I guess this task is not super hard. I'm trying to convert hex to dec with windows calculator. Is it right?

[nutsey]

Real values are divided by 2, stored in reversed ordered hex.

[nutsey]

Updated to v0.6.

DUMP2BIN v0.1 script added.

[yspance]

very usefull, saved my life !

[dimok135]

Ok, I almost found what is what. Hex to dec helped. Stil don't understand bitrate values.

[nutsey]

Ok. The first bitrate stored as 0x00E02E -> reverse it -> 2EE0 -> dec -> 12000 -> the real value is x2 as I said above = 24000

[dimok135]

Great! Thanks!

[dimok135]

Now how to pack firmware again after modding?

[nutsey]

This script is not ready yet

[cad_andry]

Firefly 7s firmware https://drive.google.com/open?id=0B4...lRyNWdMeWhDTDQ unpacking fails (version 0.6)

>>decompress tempfile.bin to DENOVA/1.tmp...
>>Input file: 3937964 bytes
>>Output file: 5470228 bytes
>>error: end offset is lower than start offset
>>1 errors occurred.
>>error: no such output file: DENOVA/1.bin
>>1 errors occurred.

[nutsey]

cad_andry

Win 10 64bit

[cad_andry]

Was successful on other env. Probably some framework libs were missed.
Thanks.

Are there any plans to implement bitrate editing scripts?

[Olitsch]

I get the same error with the Firefly Q6 firmware https://drive.google.com/open?id=0Bx...VRBSG1NZVhwWTg
What did you change to get it working?

[cad_andry]

Just run under my working VM. Did not try to ivestigate the issue source.

[nutsey]

GETBITS script was updated to v0.2. Now you can get more informative data layout with bitrate values in dec.

[petesimon]

link please to this GETBITS v0.2

[nutsey]

GETBITS script (getbits.bat file) is included into DENOVA package

[petesimon]

aah, gotcha. ok