Hi folks,
I did some kind of research regarding the problem that some of us are facing when it comes to new rom versions and the Blackberry Connect software.
I found a few things out, including a way to enable debug logging for BBC on the PPC.
Now I'm stuck and need some help of people who have crypto-skills or know something about pseudo number generators.
If you are interested in my current findings, please take a look at the following posts:
http://forum.xda-developers.com/showpost.php?p=1110712&postcount=123
http://forum.xda-developers.com/showpost.php?p=1137145&postcount=125
The first one describes how to enable debug logging, and the second one shows what I have found out so far...
Cheers
EDIT: If you are interested on how this is done, please read post number 3, and after that read post number 64 and 152.
EDIT2: Depending on your device there might be a way to get BBC Version 4 running see post #302
Manipulate GetVersionEx call?
I found out that the Blackberry Connect Client uses standard GetVersionEx function to query the OS Version and build information of the device it is running on. So instead of analyzing how the pseudo random version generator works, maybe there is a way to build some kind of wrapper around it that intercepts the GetVersionEx call and provides manipulated version strings to the BBC...just an idea...
Got it...
OK folks, I've got it done. BBC is finally working in WM6 on my Universal...
I was able to prove my theory about the pseudo random os version string. If you have the right string, BBC will work with every ROM.
Here are the steps you need to do in order to get it working (shown on the example of WM6 (J.Wright's last ROM 2.01.08 and BBC 2.1.2.31):
1. Use the famous HTC64 Extended ROM Tool to decode the .nbf from the above ROM
2. Open the resulting .fat (or .nba) file with your favorite HEX-Editor
3. Search the follwing hex value (there will be two locations for this, you have to edit both of them)
4F 3F A0 E3 02 30 83 E3 45 2F A0 E3 05 10 A0 E3 02
4. Change it to:
C3 30 A0 E3 02 30 83 E3 45 2F A0 E3 05 10 A0 E3 01
5. Save the changes to your .fat (or .nba) file
6. Use the famous HTC64 Extended ROM Tool again to encode the file back to a .nbf file (ignore the warning about to big .fat file)
7. Flash the .nbf to your device
8. After flashing use a registry editor and go to the following key:
HKLM\System\Versions and edit the Aku string from .0.0.0 to .2.0.0
9. Reboot and install the blackberry connect client
10. From here on do the same steps that nessecary on a normal BBC install
11. You're done..it should work now
The above hex-magic patches the coredll.dll from OS Version 5.2.318 to 5.1.195. In combination with BBC Version 2.1.2.31 this will result in a pseudo random os version string that is allowed to connect to the blackberry network.
Have fun!
Cheers
c0rnholio said:
OK folks, I've got it done. BBC is finally working in WM6 on my Universal...
I was able to prove my theory about the pseudo random os version string. If you have the right string, BBC will work with every ROM.
Here are the steps you need to do in order to get it working (shown on the example of WM6 (J.Wright's last ROM 2.01.08 and BBC 2.1.2.31):
1. Use the famous HTC64 Extended ROM Tool to decode the .nbf from the above ROM
2. Open the resulting .fat (or .nba) file with your favorite HEX-Editor
3. Search the follwing hex value (there will be two locations for this, you have to edit both of them)
4F 3F A0 E3 02 30 83 E3 45 2F A0 E3 05 10 A0 E3 02
4. Change it to:
C3 30 A0 E3 02 30 83 E3 45 2F A0 E3 05 10 A0 E3 01
5. Save the changes to your .fat (or .nba) file
6. Use the famous HTC64 Extended ROM Tool again to encode the file back to a .nbf file (ignore the warning about to big .fat file)
7. Flash the .nbf to your device
8. After flashing use a registry editor and go to the following key:
HKLM\System\Versions and edit the Aku string from .0.0.0 to .2.0.0
9. Reboot and install the blackberry connect client
10. From here on do the same steps that nessecary on a normal BBC install
11. You're done..it should work now
The above hex-magic patches the coredll.dll from OS Version 5.2.318 to 5.1.195. In combination with BBC Version 2.1.2.31 this will result in a pseudo random os version string that is allowed to connect to the blackberry network.
Have fun!
Cheers
Click to expand...
Click to collapse
Hi and many thanks for this work! It's the only reason I haven't moved accross to wm6 yet.
Can you tell me which version of wm6 you edited the .nbf file of? or should it work with all versions? I tried it on JWrightMCPS's version 2.01.06WWE version but it didn't work.
Many thanks.
Sham
it's 2.01.08 like I wrote in the my last post ;-)
you can do it with every rom if you know the right hex-string to look for. I will write detailed instructions on monday or tuesday. In general this trick will work for every device and every os version including all the aku 3.x roms for all devices.
cheers
c0rnholio said:
it's 2.01.08 like I wrote in the my last post ;-)
you can do it with every rom if you know the right hex-string to look for. I will write detailed instructions on monday or tuesday. In general this trick will work for every device and every os version including all the aku 3.x roms for all devices.
cheers
Click to expand...
Click to collapse
what hex editor do you recomend?
beginner said:
what hex editor do you recomend?
Click to expand...
Click to collapse
I used hexEdit. I don't have a link for you currently, cause I'm not at my PC . Surfing with a Simpad (a CE based webpad).
it doesn't work for me
for me, after a soft reset it leaves to work...
is it possible to get a patch made in cab format. much easier for newbies.
beginner said:
for me, after a soft reset it leaves to work...
Click to expand...
Click to collapse
have you made the changes to both occurances of the string?
what does you system report as os version now?
have you used version 2.1.2.31 of bbc connect?
it works 100% for me and a handful of others that I know.
cheers
aniel1 said:
is it possible to get a patch made in cab format. much easier for newbies.
Click to expand...
Click to collapse
No, this is not possible.
c0rnholio said:
have you made the changes to both occurances of the string?
what does you system report as os version now?
have you used version 2.1.2.31 of bbc connect?
it works 100% for me and a handful of others that I know.
cheers
Click to expand...
Click to collapse
Same versions as you said (rom, bb)
Radio is 1.13, but it was working previously with bb and other roms
I insist on this question, in your case, after a soft reset it works?
Note: I think I made correctly decode-modification rom- encode, but jut in the case... could you upload rapidshare or other place the nbf resulting file please?
beginner said:
Same versions as you said (rom, bb)
Radio is 1.13, but it was working previously with bb and other roms
I insist on this question, in your case, after a soft reset it works?
Note: I think I made correctly decode-modification rom- encode, but jut in the case... could you upload rapidshare or other place the nbf resulting file please?
Click to expand...
Click to collapse
yes, it works, even after multiple softresets, uninstallation and reinstallation of the bb client. I also have radio 1.13.
c0rnholio said:
yes, it works, even after multiple softresets, uninstallation and reinstallation of the bb client. I also have radio 1.13.
Click to expand...
Click to collapse
IT WORKS!!!!!
THANKS A LOT, YOU ARE GREAT.
Note: I followed again the process from zero. Maybe related some intermediate step not covered correctly.
network parameters to surf internet
cOrnholio:
it works great after several hours and softreset. VERY GOOD JOB.
Going ahead with details. When BB is connected and you surf internet, BB is disconnected and is difficult to put it again to work, do you have some idea?
Other question: I think BB service offers the capability to surf internet by their services, do you know how to do it in the APN parameters?
beginner said:
Going ahead with details. When BB is connected and you surf internet, BB is disconnected and is difficult to put it again to work, do you have some idea?
Click to expand...
Click to collapse
No, sorry. You can only try to restart the service.
beginner said:
Other question: I think BB service offers the capability to surf internet by their services, do you know how to do it in the APN parameters?
Click to expand...
Click to collapse
AFAIK your provider has to enable this feature in order to use it. After it has been unlocked in your service plan you should be able to use it. I think the APN is pushed to your device by the network, or if you have bb enterprise it will be pushed by the blackberyy desktop client.
Cheers
c0rnholio said:
have you made the changes to both occurances of the string?
what does you system report as os version now?
have you used version 2.1.2.31 of bbc connect?
it works 100% for me and a handful of others that I know.
cheers
Click to expand...
Click to collapse
Hi c0rnholio, many thanks again for all your hard work on this. Could you please tell me where to find the BBC 2.1.2.31 version? Many thanks,
Sham
monster said:
Hi c0rnholio, many thanks again for all your hard work on this. Could you please tell me where to find the BBC 2.1.2.31 version? Many thanks,
Sham
Click to expand...
Click to collapse
You can find it here:
http://support.vodafone.de/spopup41.html
and on th eT-Mobile Download page.
c0rnholio said:
OK folks, I've got it done. BBC is finally working in WM6 on my Universal...
I was able to prove my theory about the pseudo random os version string. If you have the right string, BBC will work with every ROM.
Here are the steps you need to do in order to get it working (shown on the example of WM6 (J.Wright's last ROM 2.01.08 and BBC 2.1.2.31):
1. Use the famous HTC64 Extended ROM Tool to decode the .nbf from the above ROM
2. Open the resulting .fat (or .nba) file with your favorite HEX-Editor
3. Search the follwing hex value (there will be two locations for this, you have to edit both of them)
4F 3F A0 E3 02 30 83 E3 45 2F A0 E3 05 10 A0 E3 02
4. Change it to:
C3 30 A0 E3 02 30 83 E3 45 2F A0 E3 05 10 A0 E3 01
5. Save the changes to your .fat (or .nba) file
6. Use the famous HTC64 Extended ROM Tool again to encode the file back to a .nbf file (ignore the warning about to big .fat file)
7. Flash the .nbf to your device
8. After flashing use a registry editor and go to the following key:
HKLM\System\Versions and edit the Aku string from .0.0.0 to .2.0.0
9. Reboot and install the blackberry connect client
10. From here on do the same steps that nessecary on a normal BBC install
11. You're done..it should work now
The above hex-magic patches the coredll.dll from OS Version 5.2.318 to 5.1.195. In combination with BBC Version 2.1.2.31 this will result in a pseudo random os version string that is allowed to connect to the blackberry network.
Have fun!
Cheers
Click to expand...
Click to collapse
Great work Cornholio! One thing though, is that radio version seems to matter in experiments thus far.. do you think you can do some tests to see if the pseudo number changes if your radio version changes?
Is the "core" version basically WM5 (5.1.195) as opposed to WM6 (5.2.318)
This would imply that most people can just use the BB version you used (2.1.2.31), any WM5 AKU 2.x rom, and simply change the AKU string back to 2.0 and all will be well.. no need to hex edit if all you want is WM5 with an updated/stable rom...
titus666 said:
Great work Cornholio! One thing though, is that radio version seems to matter in experiments thus far.. do you think you can do some tests to see if the pseudo number changes if your radio version changes?
Is the "core" version basically WM5 (5.1.195) as opposed to WM6 (5.2.318)
This would imply that most people can just use the BB version you used (2.1.2.31), any WM5 AKU 2.x rom, and simply change the AKU string back to 2.0 and all will be well.. no need to hex edit if all you want is WM5 with an updated/stable rom...
Click to expand...
Click to collapse
Hi,
The radio version is not involved in the generation of the pseudo random os string. I've just only tested the BBC client on WM6 with radio 1.13. It should run on 1.14 also.
Well, the OS version 5.1.195 is the version string that is reported by the original AKU 2.0 update from T-Mobile. The only requirement in this hole thing is to find a combination of versions that are allowed to run. For example the hermes has an aku version of 3.3 and a matching BBC version of 2.1.2.52 (as far as I've read int the hermes forum). This combination is allowed to connect to the network. So if you edit the coredll.dll to the same OS-Version string of the hermes aku3.3 one and use the 2.1.2.52 bbc client it should also work.
So to answer your question (if I understood you right), yes, as long as the os version is 5.1.195, the blackberry client 2.1.2.31 should run if you set the aku string back to .2.0.0
But AFAIK each AKU higher that AKU2 (which is 5.1.195 on universal) has a different os version string hardcoded in the coredll.dll.
Related
Hello all,
well it is not 100% free, you need to earn it.
The price is to allow me to downgrade the RSU to 4.16
I am unable to do this and have tried so many things so far without any success.
I have RSU 3.23 now
ROM wise, I have no problem, I can change it using the SD method and the ismgtool.
Well, I am sure you will ask, what is the guarntee? Tkae my word for it for the time being and try me.
You can send me a private message or e-mail me ([email protected])
If I receive the solution from more than person, I will look at the time I have received the pm/e-mail and the prize will go to the eriler responder.
HURRY :!:
and the winner is: to be updated
and the winner is:
no winner yet!!
Work harder folks
You have "RSU 3.23" and want to **downgrade** to "4.16"? What am I missing :?: :?:
yeah, numbers are meaninless!
Anyway, just solve to me the issue of downgrading 3.23
Hmmm ! i guess you can't
Hello
as far i know and if my memory still works i read something which says you Can not roll back to older version and that was on the 3.23.01 release note.
HTC Advice not to try to downgrade your GSM cause you might distroy your device and lose the GSM capabilities.
also few other issues include
Fixed: SIM unlock code hacked
1. Disable memory dump function.
2. Unlock code encryption.
Fixed: Do not auto-reactivate PDP context when network reject PDP context activation
Fixed: Specific message should store in SIM without affecting the VMI
Solution: Change the DCS of specific OTA message from 0x00 to 0xf2 (Store message to SIM)
Fixed: After dail a wrong number, dail second call with correct number within 30 seconds,
this call will be established for 2 seconds, then be automatically cancelled.
Solution: ACI state is not syncronize to MMI state. Syncronize the state of ACI and MMI.
Fixed: USSD Problem
Fixed: Inter-SGSN Issue
regards
Othman
www.pocketpc4arab.com
Othman,
are you replying to a different topic? :?
What is the relation between what you have written and the downgrading issue?
Place adaptrom.exe in the up or down grade application folder.
run adaptrom, then the up or downgrade application.
This will change the rom as well as the radio stack.
einas_canada said:
Hello all,
well it is not 100% free, you need to earn it.
The price is to allow me to downgrade the RSU to 4.16
I am unable to do this and have tried so many things so far without any success.
I have RSU 3.23 now
ROM wise, I have no problem, I can change it using the SD method and the ismgtool.
Well, I am sure you will ask, what is the guarntee? Tkae my word for it for the time being and try me.
You can send me a private message or e-mail me ([email protected])
If I receive the solution from more than person, I will look at the time I have received the pm/e-mail and the prize will go to the eriler responder.
HURRY :!:
and the winner is: to be updated
Click to expand...
Click to collapse
you can send me the device, i can run over it with my car, get AT&T to replace it with a new one ( I have insurance from them) and BAM! start from scratch
OK, how about this:
1. Obtain the RSUpdate.exe and accompanying files for the radio stack version you want to upgrade/downgrade to.
2. Copy them to the \Windows folder on your device
3. On the device (use File Manager), run RSUpdate.exe. This will manually update the radio stack.
4. Send the free XDA to me, since a winner is me!
JoshB
2JoshB: It is not so easy as you wish.
You may not downgrade 4.21 radio to 3.19 and below in this way (though it is Ok for greater versions). The restriction is by design and appears during actual uploading to radio module due to some kind of _internal_ checking.
I can suggest the following:
-convert RSUpgrade.cp64 you want to upload to binary format. Let it be 3.19 for example
-try to find 03 13 and 13 03 entries (= 3.19 in hex)
-If entries are exists -try to replace them with 04 15 or 15 04 accordingly (= 4.21 in hex).
-convert RSUpgrade.cp64 back to text
-try to flash these files in the usualj way (upload to windows etc...)
But this way is very dangerous. I mean that such a stupid replacement may corrupt radio stack code, so your radio will be broken completely.
More than that: radio stack version checking may be implemented not by number but features available in RSU. So version changes may not be enough to downgrade radio.
the more reliable way is to disassemble radio stack and bypas version checking in more sensible way. But unfortunately my qualification is not enough for doing this.
falconeyez said:
you can send me the device, i can run over it with my car, get AT&T to replace it with a new one ( I have insurance from them) and BAM! start from scratch
Click to expand...
Click to collapse
Can we send you a whole box to drive over ?
Till now, there is no winner
Will there ever be............
Prove the solution is working and there will be.
Soultions that work once like driving the car over it are not acceptable :lol:
Come On guys!
I have chose everything i want in Jeff's Kitchen but none of the things i selected was installed into my XDA...
anyone who faced this problem exactly like me also?? developers??
please enlighten me on why this happen
thanks a million
Same for me with every room version.
it seams ther's a bug int jeffs module for the moment.
Same here. And its causing me lots of stress. I have tried several combinations in the kitchen but all didn't work out. The selected programs were found in the XDA Windows folder but the shortcuts and more importantly the "Misc' and "System tools" folder icons were not created at all.
I should have read this thread before deciding to downgrade from 4.00.11 to 4.00.05. Now I am stucked.
I would like to take this opportunity to thank Jeff for providing us his kitchen to cook our own ROM all this while. But I hope Jeff could help us further by fixing up this minor problem in his kitchen.
this is wad i got when i CLICK HERE FOR LOG
echo Warning: OS type not detected, you may need to set tounicode variable manually./mkrom.sh: line 89: ./tounicode: Permission deniedwrite xip block starting at 81740000, with 3 fileswrite xip block starting at 81b00000, with 89 filesCan't exec "./dumprom": Permission denied at drparse.pl line 22.readline() on closed filehandle FH at drparse.pl line 24.Can't exec "./dumprom": Permission denied at drparse.pl line 22.readline() on closed filehandle FH at drparse.pl line 24.Can't exec "./dumprom": Permission denied at drparse.pl line 22.readline() on closed filehandle FH at drparse.pl line 24.this rom seems to be 4.00.05 ENG 2003-06-05 ppc2003this bootloader seems to be V5.22 2003-05-15 17:46:55no operator rom found80000000 - 80040000 -- bootloader 0 files 1 modules80040000 - 8015d5d0 9 XIPKERNEL 5 files 5 modules80180000 - 80375bc0 8 KERNEL 10 files 14 modules80380000 - 8064306c 7 OS 20 files 36 modules80670000 - 80be66a8 6 SHELL 107 files 88 modules80c00000 - 8102ce98 5 BROWSING 11 files 36 modules81050000 - 813ef114 4 COREAPPS 95 files 44 modules81400000 - 815d2238 3 EXAPPS 34 files 7 modules815f0000 - 8171bc7c 2 PHONE 56 files 19 modules81740000 - 8177ffec 10 XDA_DEVELOPERS1 3 files 0 modules81780000 - 81781c34 -- xip chain 11 xip entries817c0000 - 81ae1750 1 MISC 108 files 42 modules81b00000 - 81cc41b8 11 XDA_DEVELOPERS2 89 files 0 modules81ec0000 - 81ee5800 -- bitmap : ffffffff .. ffffffff adding: NK.nb1 (deflated 48%)
Jeff kind to explain wats going on??
To ohtwo
Why do you want to downgrade to 4.00.5?
For my self I was trying to upgrade to 4.00.11 but Jeff’s rom seams to have a bug for the moment.
I you want I have Jeff rom 4.00.5 nbf file but it's done with my own receipt, it has almost all options on it.
yann said:
To ohtwo
Why do you want to downgrade to 4.00.5?
For my self I was trying to upgrade to 4.00.11 but Jeff’s rom seams to have a bug for the moment.
I you want I have Jeff rom 4.00.5 nbf file but it's done with my own receipt, it has almost all options on it.
Click to expand...
Click to collapse
Thanks Yann but I usually took out most of the options so your 4.00.05 may not be ideal for me.
Anyway after using 4.00.11 for almost a month, me and other XDA users from our local forum felt that 4.00.05 was more stable than 4.00.11. In fact some of them have successfully downgraded back to 4.00.05.
We all fail to see any differences at all between 4.00.05 and 4.00.11 so if 4.00.05 is stable for you I suggest that you keep it until another version that has apparent improvement comes along.
ohtwo said:
yann said:
To ohtwo
Why do you want to downgrade to 4.00.5?
For my self I was trying to upgrade to 4.00.11 but Jeff’s rom seams to have a bug for the moment.
I you want I have Jeff rom 4.00.5 nbf file but it's done with my own receipt, it has almost all options on it.
Click to expand...
Click to collapse
Thanks Yann but I usually took out most of the options so your 4.00.05 may not be ideal for me.
Anyway after using 4.00.11 for almost a month, me and other XDA users from our local forum felt that 4.00.05 was more stable than 4.00.11. In fact some of them have successfully downgraded back to 4.00.05.
We all fail to see any differences at all between 4.00.05 and 4.00.11 so if 4.00.05 is stable for you I suggest that you keep it until another version that has apparent improvement comes along.
Click to expand...
Click to collapse
I agree with that, anything that is suitable for your taste... that's why there are a lot of selection on the kitchen to choose.
Jeffs Kitchen 2003 roms DONT INSTALL ANY SHAREWARE ?!
I have just tried BOTH PPC 2003 rom images and they *do not* install any of the extra Shareware apps that I had selected.
I have not seen PPC2003 before so it was nice to play with the new options and I even found PocketTV gives me better frame rates from my 512mb sd card. BUT I miss all the nice shareware...
I DO HOPE THIS IS NOT A FAKE SITE and that it is just a glitch...
Can someone email me when its working again - or if anyone has a saved 2003 rom with the shareware apps ?
Greg
[email protected]
and the theft protection thing doesnt work for me also..can you guys verify that??
thanks!!!
david beckham said:
and the theft protection thing doesnt work for me also..can you guys verify that??
thanks!!!
Click to expand...
Click to collapse
Same here Hope Jeff can come to our rescue soon.
Jeff's Kitchen works!
Jeff's Kitchen works great. I have tried all options and all base ROMs and all of them work.
Make sure that all of you have checked the boxes in front of the main heading, that is, "Add software and Modify ROM", "Theft Protection" etc. This is important, otherwise the freeware will not be installed.
Re: Jeff's Kitchen works!
samohile said:
Jeff's Kitchen works great. I have tried all options and all base ROMs and all of them work.
Make sure that all of you have checked the boxes in front of the main heading, that is, "Add software and Modify ROM", "Theft Protection" etc. This is important, otherwise the freeware will not be installed.
Click to expand...
Click to collapse
Yes. Done all that. Just say that we are not using the kitchen for the first time.
When was the last time you cook from the kitchen and all options worked fine?
Re: Jeff's Kitchen problem
Last was more than a month. Never tried later. Will try. But if you say so, there must be a problem. Never meant to disbelieve you.
Noticed that 2 - thought it was just I
Hey guys I noticed the prob 2. Thought twas just me and that maybe it had somethin to do wit d theft protection. Thought I would come on d site and see what others were sayin and here I am now writin. I reckon its been like this since about Wednesday of last week. Anyhows somethin is better than nothin and most of the progs are under Windows, so's I guess we just have 2 wait for those that know. Good Luck
Jeff's Kitchen problem
They are there! All the freeware selected is there under windows. However, the folders such as Internet, Misc, Phone, System Tool etc are not created under programs, and the links are not located there. If you select the tdLaunch option, all the selected freeware appears as buttons and they all work.
The problem could be in running the mkrom, but I am not techie and don't know about unix.
No Tdlaunch either !
I have just tried another download of the PPC2003 rom and Tdlaunch is not installed. Some of the other apps are , all installed into the windows dirctory but non of the short cuts are created :-(
I'm gonna stick with this version and hope that JEFF can fix it soon.
Keep up the good work.
Greg
Code:
3 partitions, 2 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 38 1b 01 01 35 3a 02 3f 11 0b 05 24
CopyFileToTFFS(SplashBMP\splash-temp.bin:0, 2d0000, 0002581e)
ERROR: ITWriteDisk - An internal error occurred.
I get this when trying to use the "c" option to install a splash screen, also when I try the "s" option to restore a backup splash screen, and when I use the "splash_bmp_to_wizard.exe" (i think it just uses awizard anyway, so no surprise there). Does anyone know the solution or have the same problem?
It worked just fine on my stock 8125, this is only since the ROM 2.17 upgrade.
Please check it out, Later; Lew
Lew:
Same thing happend to me. It is, as of now, locked. The lokiwiz and aWizard do not work with the new rom like the old ones.
I was able to change my screen using
ruu_forcedalias_splash_245
Run this and you will have new WM5 GSM splash. I have not tested to set if I can change to my splsh now.
The ruu_forcedalias_splash_245 had a.nbf file for the splash. I wonder if it is possible to change a .bmp file to a .nbf file. If so, one could make whatever splash loader they wanted.
Thanx for the reply and the program. So it changes the splash screen to something generic? It does not allow you to choose what the new image will be? You say that it uses ".nbf", I have a converter that will change a ".bmp" to ".nb" can you see if it works with that? I would but I am at work, plus I wouldent like a generic Splash screen, I suppose I would stick with the QTEK if those were my choces.
Do you have a picture of the generic splash screen?
Heres the converter, of course you have to be logged in =)
Thanks, that saved the day! As things were, I was too embarrassed to reboot in public. I mean, who'd like to be seen holding a sign saying "I MATE FOR BUSINESS, FOR PLEASURE, FOR LIFE"? Besides, mating "for business" is illegal where I live.
Mike.
LOL
Funniest post I have ever read on this forum, and the award goes to...
mpd
Take a bow!
still chuckling; Lew
p.s. I am working on changing the generic image, as we speak. I havent even tested this ".exe" but I assume by mpds enthusiasm it works. So now I am just trying to change the picture it uses. Any help is always welcome.
Alright I have come to know that the "ruu_forcedalias_splash_245_425.exe" is packaged so I was able to extract the files inside;
EnterBootLoader.exe
RUUGetInfo.exe
RUUResource.dll
ROMUpdateUtility_Wizard_NoID.exe
nk.nbf
This looks vary familar to me (anyone who changed the ROM or Radio on a Blue Angel would recognize this )
So the splash image (generic) would be in the nk.nbf.
I need to know how to extract the .nbf to see what is in there, and what can come out so I can find out what type of image I need to make and what to convert it to... so long story short (to late)...
I need to know how to extract an .NBF file.
Thanx; Lew
Lew, please tell me your working on replacing all the splash screens including the very first one when you start up your wizard. I am in a desperate need of replacing the initial image of HTC on my Cingular 8125. How do I replace this ?
Can anyone post a screenshot of the generic bootscreen? I would like to get rid of my ugly T-Mobile ( what designer thought it was so cool for pink, white, light & dark grey ) Splash Screen.
Best regards.
Is there anyone here that could crack this would be "encryption" on the .nbf in question? I tried encoding my splash backup from aWizard using the project file from the "decoded" nk.nbf from "ruu_forcedalias_splash_245_425.exe" and it was a no go. It said that my storage was the wrong size for this ROM update (or something to the effect of NO). So it looks as if this nk.nbf from "ruu_forcedalias_splash_245_425.exe" is the key to unlocking the ability to change splash screens to custom images.
DrBig74 where did you get "ruu_forcedalias_splash_245_425.exe" from? Maybe someone that made it will have the answer we need eh?
Later; Lew
Below is the Windows Mobile Splash screen. Those of us not using QTEK, it is a nice change.
ftp://xda:[email protected]/Uploads/HTC_Wizard/Splash_Screens/WMGSMSplash.bmp
I believe that I found "ruu_forcedalias_splash_245_425.exe" on the WIKI ftp server. I cannot remember. I did post a message to find this person. My attempts to make a .nbf file out of a splash screen have failed. With previous roms, one was able to run wizsplash and/or aWizard and change the 2nd splash screen with no problem. Oh, well.
Also, good luck changing the 1st HTC splash screen. At this point it cannot be done. Maybe some genius will figure this out soon.
Best,
DrBig74
Ok, good news, thanx to BrightMoonHeart I have been able to extract the BMP from the NBF using "typhoonnbftool_04.exe". The bad news is so far I can't seem to add an image (bmp) to the nbf or remove the current image. So this was a great step forward, just need a little help to get r done. I tried "typho2.exe" but I couldn't get it to do anything except give me the same info "typhoonnbftool_04.exe", It says it can extract the ".NBF" to an ".SPL" and that may allow us to edit it but I was not able to get it to convert. Any ideas guys? Always appreciated
Thanx; Lew
I have mixed feelings over the default Windows Mobile splash now that it is installed over the Qtek logo. However I have run across this... any ideas? have you seen this?
http://www.xs4all.nl/~itsme/projects/xda/xdaii-update-format.html
Hello ,
Have an idea?
look , good or bad track ? Partial ROM flashing
http://arisme.free.fr/TyphoonNBFTools/index.php
The remote client is necessary if you want to downgrade a ROM update having a bootloader version greater than 2.00
thanks
Bad track... NBF Tools use the same technique as aWizard, which was disabled by HTC in the AKU2 models.
Bye,
Ricardo
Can I change the pagepool (I want to set it to 8MB) without reflashing the ROM?
I searched in the forum but all the tools I found (PP chager, ...) don't work with Touch HD.
The only way I found is patching the ROM with a multiplatform tool found in Blackstone Kitchen.
Thank you.
No, you have to reflash the rom, the multiplatform page pool changer works just fine, but consider that you have also to patch your payload file in order to make the page pool change working correctly.
Ok, thanks.
And is there a method to read the pagepool size of my installed ROM?
Right now total amount of program memory is 195.58MB, from this value can I obtain pagepool size?
Try this if this work ?
http://forum.xda-developers.com/showthread.php?t=324955
This PagePool changer works just fine (and can also read the current pagepool of your rom).
But remember that you have to patch your xip in order to make pagepool changes working.
What is XIP ?
I tried it, but not work on my Dutty rom 1.7
johnpatcher said:
This PagePool changer works just fine (and can also read the current pagepool of your rom).
But remember that you have to patch your xip in order to make pagepool changes working.
Click to expand...
Click to collapse
Can you explain how to do it?
Anyone can help?
famusc said:
Can you explain how to do it?
Click to expand...
Click to collapse
You can have a look at this thread.
http://forum.xda-developers.com/showthread.php?t=466833&highlight=pagepool
It is for diamond but I tried on my HD rom and it works fine.
In short you should:-
1. Extract your rom (*.nbh).
2. In a hex editor search for the key 03 25 A0 E3 03 15 A0 E3 00 20 83 E5 (there should be 2 such strings)
3. Replace 20 83 E5 with 00 A0 E1 (for both strings, this disables this key and lets pagepool changer work)
4. Patch the rom with the pagepool changer suggested by johnpatcher.
5. Flash your rom back to you HD using CustomRUU (and USPL if necessary).
6. Enjoy!
For information, the default pagepool size for official rom should be 12mb, leaving approx. 194~195mb for program memory. I patched my rom to 16mb pagepool and my current program memory is 190.70mb.
Thank you. I noticed this thread and i was asking if it could work on the HD. This is a good news. Did you try it on various roms?
eugene85 said:
You can have a look at this thread.
http://forum.xda-developers.com/showthread.php?t=466833&highlight=pagepool
It is for diamond but I tried on my HD rom and it works fine.
In short you should:-
1. Extract your rom (*.nbh).
2. In a hex editor search for the key 03 25 A0 E3 03 15 A0 E3 00 20 83 E5 (there should be 2 such strings)
3. Replace 20 83 E5 with 00 A0 E1 (for both strings, this disables this key and lets pagepool changer work)
4. Patch the rom with the pagepool changer suggested by johnpatcher.
5. Flash your rom back to you HD using CustomRUU (and USPL if necessary).
6. Enjoy!
For information, the default pagepool size for official rom should be 12mb, leaving approx. 194~195mb for program memory. I patched my rom to 16mb pagepool and my current program memory is 190.70mb.
Click to expand...
Click to collapse
In the official 1.14.412.5 ROM HD this method does not work, tested at 100%!
: (
eugene85 said:
You can have a look at this thread.
http://forum.xda-developers.com/showthread.php?t=466833&highlight=pagepool
It is for diamond but I tried on my HD rom and it works fine.
In short you should:-
1. Extract your rom (*.nbh).
2. In a hex editor search for the key 03 25 A0 E3 03 15 A0 E3 00 20 83 E5 (there should be 2 such strings)
3. Replace 20 83 E5 with 00 A0 E1 (for both strings, this disables this key and lets pagepool changer work)
4. Patch the rom with the pagepool changer suggested by johnpatcher.
5. Flash your rom back to you HD using CustomRUU (and USPL if necessary).
6. Enjoy!
For information, the default pagepool size for official rom should be 12mb, leaving approx. 194~195mb for program memory. I patched my rom to 16mb pagepool and my current program memory is 190.70mb.
Click to expand...
Click to collapse
But it isn't without reflashing !
CrAzY_CbR said:
In the official 1.14.412.5 ROM HD this method does not work, tested at 100%!
: (
Click to expand...
Click to collapse
I did it only on the official CHT 1.19.832.0 ROM but I thought it would be same for other version of official ROMs.
I have no idea why is it not working on the 1.14.412.5 ROM ....it seems like we need some Pros to help solving this problem...
And, I don't think we can change the pagepool without reflashing so far (as it is something written into the rom).
With reflashing, it is very too simply to use PagePool_Changer_v2.21 ...
Nobody knows how to change the PP in ROM 1.14.412.5?
PP Changer 2.21 and changes in the post eugene85 not working
Sorry for my English
Hi,
I've been trying to make some apps to autorotate using the HTC Sensor SDK.
It used to work on COM2 builds, but I can't make it work on COM3.
I've read some threads/post saying that autorotation doesn't work on COM3, and others saying that they do work. I'm quite confused.
The sensor works ok (HTCSensorService.dll), as programs such us Manila (pictures and music tabs), Teeter and Opera rotates without problem.
I want to make autorotate some applications like HTC calculator, email, RSS, etc, using the white list, but it seems that the HTCSensorSDK.dll is not working
Can you please let me know if you it works on your kitchens and which combination of packages are you using.
what are the dependencies?
My rom is mainly based on the Leo 3.14, and using the Sensor SDK from Topaz (the latest working on the Blackstone)
EDIT 16/10/2011:
Found that the autorotation works fine with all the 'full screen' programs like: Notification enhacement, Opera, IE, tomtom, Albums etc. I can add and remove programs from white list and works fine.
The problem is occurring only with the normal programs which shows the taksbar and bottom bar.
It looks like the WM is avoiding the autorotation.
-----------------------
any idea of what could be the problem? could it be SYS related?
Thanks in advance
ypsmav
Make sure that the sensor sdk package matches your manilla package. Eg I am using sense from 2018 and my sensor SDK is v4.20164021.01.
If your snesor SDK is older than this it may not work correctly. When I first starting using sense 2018 I was trying to use one that had a version number of 2019 and I had major problems with it.
I would suggest using the one from the 3.14 rom to see if you can get it to work!
You may try "G Sensor Calibrator" & "Sensor SDK v4..." from a COM3 original kitchen like HUASAN.
You can also try a little app like G-Config (Makeveral).
You may include my compilation of registry keys in your kitchen.
Regards.
Hi,
I've tried several SensorSDK packages (Topaz 2.53, Rhodium 2.07, Leo 3.14 and Huasan 1.18) without luck.
Guess that I'm having other problem.
I'll review dependencies and see if I find what is missing.
This is issue is quite frustrating.
I've been trying to fix this issue without luck.
Does someone knows if any other dependency that I'm overlooking?
in 6.5 it used to work without problems.
Thanks
attach your sensorsdk packages working on 6.5.
Hi Ultrashot,
Attached the files that used to work without problems on 6.5.
I'm wondering if there is anything you are not able to fix!
Thanks
ypsmav said:
Hi Ultrashot,
Attached the files that used to work without problems on 6.5.
I'm wondering if there is anything you are not able to fix!
Thanks
Click to expand...
Click to collapse
please check in any taskmanager whether htcsensorservice.dll (SEN0/SEN1) runs at all. (in certain exe's module list)
I've checked with FDCtask manager.
HTCsensorservice.dll is loaded on services.exe.
functions are: SEN_close, SEN_Deinit, SEN_init, SEN_IOControl, SEN_Open, EN_Read, SEN_seek, and SEN_Write.
HTCsensorSDK.dll is not loaded on any exe.
Thanks
It is rather hard to understand what's going on blackstone. Htc debug log made by DebugTool will be much appreciated.
Hi Ultrashot,
I've been playing with the HTC debug, but I haven't been able to make it run.
How should i proceed to make it work and get the log?
Thanks
ypsmav
ypsmav said:
Hi Ultrashot,
I've been playing with the HTC debug, but I haven't been able to make it run.
How should i proceed to make it work and get the log?
Thanks
ypsmav
Click to expand...
Click to collapse
at least you should have debuglog.dll driver enabled (it is on by default), may be also some ms xip drivers should be left in rom.
Hi,
I found something quite interesting.
The autorotation works fine with all the 'full screen' programs like: Notification enhacement, Opera, IE, tomtom, etc. I can add and remove programs from white list and works fine.
The problem is occurring only with the normal programs which shows the taksbar and bottom bar.
It looks like the WM is avoiding the autorotation.
Would does it be related to the sys? (I'm on 29022)
any ideas?
Thanks
1) make a backup of package
2) open HTCSensorService.dll\S000 in hex editor
find following pattern: 1A0053E3 0C00000A 340053E3 0A00000A (without spaces, of course)
change first byte (0x1A) to 0x24.
3) save
4) enjoy. should work
ultrashot said:
1) make a backup of package
2) open HTCSensorService.dll\S000 in hex editor
find following pattern: 1A0053E3 0C00000A 340053E3 0A00000A (without spaces, of course)
change first byte (0x1A) to 0x24.
3) save
4) enjoy. should work
Click to expand...
Click to collapse
So this should solve it for all non-full screen apps as well? I thought the issue was the later version of WM6.5 were the issue and that auto-rotation only works with full-screen apps? I am more than happy to give this a go if it works for all apps.
Andy
[EDIT] can't find that string in HTCSensorService.dll anyway?
So this should solve it for all non-full screen apps as well? I thought the issue was the later version of WM6.5 were the issue and that auto-rotation only works with full-screen apps? I am more than happy to give this a go if it works for all apps.
Click to expand...
Click to collapse
yes.
[EDIT] can't find that string in HTCSensorService.dll anyway?
Click to expand...
Click to collapse
string? hex!
ultrashot said:
yes.
string? hex!
Click to expand...
Click to collapse
Sorry, can't find that HEX value. I am using the Sensor SDK from the Topaz (Sensor_SDK_4_2_19221329_01) and that value isn't in the HTCSensorService.dll. I am using HxD HEX Editor to open the file. I can find the first '1A0053E3' at offset 6920 but that's it
Andy
pattern is totally valid even for your HTCSensorService.dll\S000
ultrashot said:
pattern is totally valid even for your HTCSensorService.dll\S000
Click to expand...
Click to collapse
OK, I have the original file (the .dll) as well as the module (S000) and that value just isn't there. There is something fundamental here that we are missing.
If i search for the first 4 bytes (1A0053E3) I find this at offset 6920 (in the .dll file) and at offset 6520 in the module (S000) :
Code:
1A 00 53 E3 01 00 00 0A 34 00 53 E3 10 00 00 1A
Please explain as your 1-line answers don't help.
Andy
That's you who miss something fundamental, especially if you think that "1A0053E3" is 8 bytes