Help me find page pool offset in Tosh g900 rom - Windows Mobile Development and Hacking General

Hi,
I'm trying to find the location in ROM where the page pool size is stored on my Toshiba g900. I dumped the file from ROM as described in "Paul's guide" on MoDaCo (http://www.modaco.com/Paul-s-guide-to-changi-t256280.html) but his method to find the offset doesn't work here.
Looking for the first string ('NKKD8') twice is not a problem, but the second (hex) string ('FF FF FF FF FF FF FF FF 9B 4F FF FF 64 B0 00 00') just doesn't exist in this file. I've tried a lot of possible variations.
Could someone please take a look for me? I'm going crazy here. This is my ROM dump: http://rapidshare.com/files/54236179/Part02.zip.html
Thanks in advance...

Related

Menus' content turns white...

I installed PPC2003 yesterday and since, twice, the menus (start menu, new menu, edit menu) content turned white (font not visible) but still working (if I click on the edit, the text appears under the stylus) .
A soft reboot brings back everyting ok. :?
Any idea why ? :?:
I run PPC 2003 A.30.09 ENG
Radio A.33.02
on a PW10B1, with a 256 Kb SD card, and
Storage: 12 Mb free
Programs: 6 Mb free
Hmm, I had the menu turning white problem, and I eventually worked out that it was from too many menu items being on the start menu so that it had to scroll. Removing unnecessary items from the start menu brings the theme colours back to the start menu background. Maybe if you have a theme running that has a white font, the font is disappearing onto the white background?
ebswift said:
... Maybe if you have a theme running that has a white font, the font is disappearing onto the white background?
Click to expand...
Click to collapse
Your comment made me realize one thing. The problem occured with the PPC 2003 Windows' default theme from the new installation just made available by ATT/Siemens (ie white font over a blue background) with the default Today's menu, and it's not the font that turned white, but the background (it was a white rectangle rather than the nice blue one I was expecting).
But once the problem came, it was also noticeable on the small Note or Contact edit menu (cut/paste...) where rather than having black or greyed font over a white background, everything was white.
As the upgrade was installed just 2 or 3 days ago (2004.02.01) and I was playing with it, reinstalling tools (and toys ), it's a bit hard to tell you the exact situation where it occurs.
Bernard
Hi guys!
It happened to me while updating and tweaking my XDAII ROM.
I've found that the problem arises when switching themes: looks like the system remains with the font colour changed, even after returning to the original theme, making everything unreadable (although still workable).
I think this is an issue related to PPC 2003, since this is both undocumented and there is no way to change the font colour either.
Today Colours - White Start Menu
This will change your Start Menu Font Colour to Black. WM2003 Inherits the font colour from the Today Scheme. Use a registry editor like PHM
Registry - Color Settings
Search exact match > Color
Value Name: SHColor
Value Data:
FF 00 00 00 00 00 00 00 DD DD DD 00 FF FF CC 00 00 3D 79 00 00 66 FF 00 30 80 CF 00 65 BB 26 00 00 33 99 00 FF FF FF 00 65 BB 26 00 65 BB 26 00 65 BB 26 00 05 24 99 00 4F 9A F6 00 FF FF FF 00 B4 CE F3 00 2A 2C C5 00 2A 2C C5 00 FF FF FF 00 00 33 99 00 00 66 FF 00 FF FF FF 00 C0 C0 C0 00 84 84 C3 00 FF 66 00 00 FF 66 00 00 FF FF FF 00 FF FF FF 00 00 00 00 00 FF FF FF 00 FF FF FF 00 FF FF FF 00 FF FF FF 00 FF FF FF 00 FF FF FF 00 FF FF FF 00 D1 E3 F7 00 FF FF FF 00 00 00 00 00 FF 00 00 00
This is easier http://forum.xda-developers.com/viewtopic.php?t=6782&highlight=
Today Colours - White Start Menu
Thanks - A much more elegant solution
Alex
:idea:

change window back color

Hi all
I was wondering if there's a way to change the default white Color of a window, e.g. the Programs window change the Color to black or something.
Thanks all
I found this
http://msdn.microsoft.com/library/d...lui5/html/wce50conCustomizingSystemColors.asp
every time I try to change one of the values I get an error "Error in line 1, not a valid hex string!"
I tried changing the value Corresponding to COLOR_WINDOW from FF FF FF 00 to 00 00 00 00 but the same error. Is there Something I'm missing here?
Thanks for your help

Pagepool on ppc-6800?

Has anyone looked into changing the pagepool on these devices? Do the hacks elsewhere on the board ( http://forum.xda-developers.com/showthread.php?t=324676 ) work on this device?
I would *love* to free up another ~4mb of memory...
-mark
you wouldn't want to free 4mb anyways
i've tried every hack on adjusting the pagepool on my mogul. The closest i have come to success was using the same method as the TMobile Wing tutorial. Needless to say, it didn't work. But I was able to determine that the Mogul has a 6mb pagepool by default. If you "freed another 4mb" like you stated, you would be down to 2mb pagepool and running really slow.....
Just my two cents....
What did you use in pdocread in order to find out it was 6mb?
This may have been how he did it...
1. Dump the ROM image
2. open it in a hex viewer...
3. search for "FF FF FF FF FF FF FF FF 9B 4F FF FF 64 B0 00 00"
4. search for the same hex values again...
This is what I get at offset 003B9090:
FF FF FF FF FF FF FF FF 9B 4F FF FF 64 B0 00 00 64 00 00 00 50 BF 04 80 00 00 60 00
Looking at stuff around XDA Developers I came up with the same conclusion that we have a 6mb page pool.
Now because this was done with information from other devices, this may not be the correct one as CDMA devices can sometimes be different. There are two occurrences of this string and all instructions say take the second one...
This is what I used as a guide to find the page pool size:
http://www.modaco.com/Paul-s-guide-to-changi-t256280.html&
Geoff
WHY did HTC release this phone with only 47mb memory usable??? THis sucks.. this phone would be perfect with 128mb memory (or even 96mb memory..)
I'm seriously considering dropping voice command to free up the ~4mb or so of mem that it takes..
-mark
gzub said:
This may have been how he did it...
1. Dump the ROM image
2. open it in a hex viewer...
3. search for "FF FF FF FF FF FF FF FF 9B 4F FF FF 64 B0 00 00"
4. search for the same hex values again...
This is what I get at offset 003B9090:
FF FF FF FF FF FF FF FF 9B 4F FF FF 64 B0 00 00 64 00 00 00 50 BF 04 80 00 00 60 00
Looking at stuff around XDA Developers I came up with the same conclusion that we have a 6mb page pool.
Now because this was done with information from other devices, this may not be the correct one as CDMA devices can sometimes be different. There are two occurrences of this string and all instructions say take the second one...
This is what I used as a guide to find the page pool size:
http://www.modaco.com/Paul-s-guide-to-changi-t256280.html&
Geoff
Click to expand...
Click to collapse
Thats precisely what i did. I tried changing it from 6MB to 8MB just for kicks but wasn't successful......

Add Cities to Weather-Tab?

Hi, Weather Database Editor doesnt work with my Girlfriends Touch 3G (german).
Is there any Solution to manually add Cities?
Thanks. =)
Same problem here
Try this one..
http://forum.xda-developers.com/showpost.php?p=2488224&postcount=73
Thanks but it does no show any cities...
yepp, seems that the database has another filename...
i try investigating this...
Ok, found the Database. =)
Its HH_0407_WeatherCities.xml (for German Users i think).
Bad news:
Its hidden/system/in rom
Any ideas how to rename it?
I copied it to the PC and edited the Cities in but i cant copy it back to the phone...
You can easily overwrite the file with resco explorer after disabling touchflo from the today screen but I have yet to find a way to copy the file to the pc. Could you share your xml please?
Ok I am getting nearer.
Disable touchflo
Copy HH_0407_WeatherCities.xml from the /windows folder to your pc.
Edit the xml to include your new city.
Copy it back to the phone into somewhere like "My Documents" then use resco explorer to move it to /windows and overwrite the original file.
Copy manil2d.exe from windows to your pc,
download XVI32 from http://www.chmaas.handshake.de/delphi/freeware/xvi32/xvi32.htm
download sign code from N2A's site http://weather.not2advanced.com/files/SignCode.zip
Open manila2d.exe in XVI32 and do a search for "weather.manila1.htc.com" ( make sure Unicode check box is checked )
You will see the update URL in unicode , which means that if you want to replace it , there has to be a hex 00 between every letter !
It needs to be changed to something like weather.not2advanced.com/htcweather/forecastdata.php?locCode=%s%s%s
save manila2d.exe and sign it using N2A's batch file
Copy it back to the phone into somewhere like "My Documents" then use resco explorer to move it to /windows and overwrite the original file.
Now I have the new city listed but when I update, all the temperatures = 0
I'm not sure what I have done wrong but I think the URL is wrong.
Any ideas?
Ok, the URL was different for me.
Done that but without the %s%s%s.
Still not working.
I can select the cities but i cant see them in the tab.
Update says that it cannot get updates for the selected city.
Hi Vibez
I reply here instead of the PM , so the others can read it aswell
I don't have a touch 3G so I cannot experiment for you , but 1 thing is sure ,
people had the same issue on the Diamond ( cities not updating after hex-edit ) when the hex-edit was not done 100% correctly ...
So 2 questions :
1) Did any of you try the reigistry hack from the diamond ?
In stock ROM, the URL used to update the weather is a specific Accuweather URL. WDE change it to point to N2A'website ( http://weather.not2advanced.com/ ).
Registry key=HKEY_CURRENT_USER\Software\HTC\Manila
String value Name=Weather.ServerURLOverride
Click to expand...
Click to collapse
2) when u tried patching , did the replacement weather string have EXACTLY the same length as the original ? On the diamond , it was an absolute no-go when the length was different
Open manila exe in XVI32 and do a search for "weather.manila1.htc.com" ( make sure Unicode check box is checked )
You will see the update URL in unicode , which means that if you want to replace it , there has to be a hex 00 between every letter !
I then replaced : http://weather.manila1.htc.com/widget/htc/forecast-data_v3.asp?locCode=%1s&?ac=TR2cra9U
with : http://weather.not2advanced.com/htcweather/forecastdata.php?locCode=%1s&ac=XDADevs1234
Those two lines have exactely the same length upto there ( That's why i added 1234 to the XDAdevs , thankfully that's ok with N2A's site ) so the rest of the URL ( &device=innovation etc.. ) can remain unchanged !
Click to expand...
Click to collapse
If that fails to work , send me a copy of the manila app ( modded and original maybe so I can see what u did ) , I'll look at it , patch it & send it back for you to try ...
I can't promise anything of course , but I'm on holidays this week , so I've got a little time to spare ;-)
cheers,
Claude
Thanks for the info!
Unicode-Strings should be NULL-terminated to, so all i've done was to zero out the remaining chars.
I give it a try and answer here asap.
//edit:
Ok, works but Temps are at 0°C.
Seems that the XML-Format has been changed.
BTW: String used for Patching Mainila2D.exe was:
000D8858 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 77 00 65 00 61 00 74 00 68 00 h.t.t.p.:././.w.e.a.t.h.
000D8870 65 00 72 00 2E 00 6E 00 6F 00 74 00 32 00 61 00 64 00 76 00 61 00 6E 00 e.r...n.o.t.2.a.d.v.a.n.
000D8888 63 00 65 00 64 00 2E 00 63 00 6F 00 6D 00 2F 00 68 00 74 00 63 00 77 00 c.e.d...c.o.m./.h.t.c.w.
000D88A0 65 00 61 00 74 00 68 00 65 00 72 00 2F 00 66 00 6F 00 72 00 65 00 63 00 e.a.t.h.e.r./.f.o.r.e.c.
000D88B8 61 00 73 00 74 00 64 00 61 00 74 00 61 00 2E 00 70 00 68 00 70 00 3F 00 a.s.t.d.a.t.a...p.h.p.?.
000D88D0 6C 00 6F 00 63 00 43 00 6F 00 64 00 65 00 3D 00 25 00 31 00 73 00 00 00 l.o.c.C.o.d.e.=.%.1.s...
Ahw F...!
Tested the original URL:
first, city in original database:
http://htc.accuweather.com/widget/htc/forecast-data.asp?ac=TR2cra9U&locCode=EUR|DE|GM011|AACHEN
second, city manually added:
http://htc.accuweather.com/widget/h...ac=TR2cra9U&locCode=EUR|DE|GM017|SCHMALKALDEN
second URL does NOT give any information back in the XML...
Seems that the database is also online and it trys to find the city there...
OK, tried the not2advanced URL, XML Format has changed heavily...
*sniff*
Garfield1970,
Thanks for helping out.
The registry trick did not work.
I did find a patched version of manila2d.exe from another rom that works perfect on our phone, but ideally I would like to see how to patch the original version that our phone ships with. The hex surrounding the URL string in our manilla2d.exe looks a little different. I'm not 100% there is enough room to fit the full N2A url in!
I will post all 3 versions later for you to play with.
Weltherrscher said:
Ahw F...!
Tested the original URL:
first, city in original database:
http://htc.accuweather.com/widget/htc/forecast-data.asp?ac=TR2cra9U&locCode=EUR|DE|GM011|AACHEN
Click to expand...
Click to collapse
Ok
second, city manually added:
http://htc.accuweather.com/widget/h...ac=TR2cra9U&locCode=EUR|DE|GM017|SCHMALKALDEN
second URL does NOT give any information back in the XML...
Seems that the database is also online and it trys to find the city there...
Click to expand...
Click to collapse
That's normal as that city is unknown to the HTC Server
OK, tried the not2advanced URL, XML Format has changed heavily...
*sniff*
Click to expand...
Click to collapse
Indeed , I just compared the XML Outputs for Aachen from HTC & N2A , they changed the format .... But if you ask N2A very very nicely and if he has some time to spare , he might eventually adapt a version of his script to reflect the other XML format
You can clearly see the differences between the following two outputs :
http://weather.not2advanced.com/htc...hp?locCode=EUR|DE|GM011|AACHEN&ac=XDADevs1234
is the Diamond compatible format
http://htc.accuweather.com/widget/htc/forecast-data.asp?ac=TR2cra9U&locCode=EUR|DE|GM011|AACHEN
is the format the touch 3g seems to need ....
I'll crosspost the URL's to N2A's main thread so he can maybe have a look
Claude
Just for info the XML format that ships with our ROM works fine with N2A.
To me it seems N2A provides extra elements which I assume is for compatibility with HTC home.
So no need as far as I can tell to ask him to change anything.
Unless i'm getting confused in what you are saying?
vibez said:
Just for info the XML format that ships with our ROM works fine with N2A.
To me it seems N2A provides extra elements which I assume is for compatibility with HTC home.
So no need as far as I can tell to ask him to change anything.
Unless i'm getting confused in what you are saying?
Click to expand...
Click to collapse
Are you sure that the N2A output works for you ?
Because if you look at the XML's , what your device expects is to see includes blocks titled :
Today
Tonight
Tomorrow
and then the following weekdays
whereas on my Diamond it's just current and the different Weekdays being reported
Claude
I'm 100% sure it works with this version of manila2d.exe that i'm using. Now it may be that this version I have uses the old format.
We don't have
Today
Tonight
Tomorrow
we just have current temp, and hi, lo for each day
You mean using the patched manila from the other rom that you mentionned earlier ?
Might be that the format switch has happened between differen Rom versions ?
Claude
Garfield1970 said:
You mean using the patched manila from the other rom that you mentionned earlier ?
Might be that the format switch has happened between differen Rom versions ?
Claude
Click to expand...
Click to collapse
Yes it could be that. Although the end result is the same. The original version only showed Current and hi/lo temps
Ok i've attached the files
Manila2D_original.exe
This is the original unpatched file
Manila2D_original_patched_not_working.exe
This the original file I tried to patch without success
Manila2D_patched_ok.exe
This is the patched file from another rom that works ok.

S4 GT-I9500 Lost - Fake IMEI

Hi, i know there is many threads with similar problem, but nothing i've tried solved the problem, so i post a new one.
Yesterday, on my work, my phone lost signal (is common on my rom Gear CM12.1 & country) and i reboot to solve..... but only show the "samsung" and i get a bootloop in CM12 logo. i thinks is a cache problem and go to TWRP, clean cache&dalvik and reboot but i get the same problem so tried again twrp and this time i notice that show "Error: Unable to mount /efs", because of my work just turn it off to fix it later. In my home the problems is that twrc says that efs backup is wrong and can't restore it (says some md5 related).
Watever...today I did something really stupid, accidentally format the internal sd where the backup was saved, and now i can't get it back.
the current state of my S4 is:
-Fake imei (show default 00499010640000 / 01)
-Baseband: I9500XXUFNA6
-Carrier: Telcel
-Country: Mexico
-PhoneStatus: Unlocked (form factory)
-Rom: Stock 4.4 SER-I9500XXUFNB3-20140220172446.zip - I9500XXUFNB3_I9500SERFNB3_I9500XXUFNA6_HOME.tar
-I get signal (Show "Telcel, only emergency calls")
What i've tried:
1. How to fix - E:failed to mount /efs (Invalid argument) solve the efs mount problem....
2. Install stock rom 4.4 (also modem.bin)..... fake imei but correct baseband, telcel signal
3. Install stock rom 5.1 (also modem.bin)..... unknow imei and unknow baseband, no signal at all
4. Backup whit EFS Professional 2.1.80 BETA, but if restore is the fake
5. wanam's EFS☆IMEI☆Backup becaue i read efs is stored in a partition not in efs folder, but if restore efs is the fake
well, other post i tried but whit same results...
IMEI & Baseband unknow [SOLVED]
IMEI NULL fixed
also many others.... (4 pages of result on google for site:forum.xda-developers.com/galaxy-s4/help/ "imei" "i9500" )
Questions:
1. Is possible that the problem is "EMMC chip"?, many people say's this but mention that if is the problem the baseband is loset too, and i have my baseband.
2. i do this: Solved:Hex Editor Route, but the phone can't read simcard, so change the information for my phone but not work, what i'm doing wrong?
Code:
00188000: FF FF FF FF 4D 50 20 30 2E 38 30 30 00 00 00 49
00188010: 4E 55 00 00 00 00 47 54 2D 49 39 35 30 30 5A 4B
00188020: 41 49 4E 55 00 00 00 00 00 00 FF FF FF FF FF FF
MP 0.800...INU....GT-I9500ZKAINU......
00188000: FF FF FF FF 4D 50 20 30 2E 38 30 30 00 00 00 53
00188010: 45 52 00 00 00 00 47 54 2D 49 39 35 30 30 5A 4B
00188020: 41 53 45 52 00 00 00 00 00 00 FF FF FF FF FF FF
MP 0.800...SER....GT-I9500ZKASER......
Another solution
pd: sorry for my english.
Hardware damage. Your EMMC chip is damaged. Find someone who can replace it. The part is not that expensive but requires soldering.
Lennyz1988 said:
Hardware damage. Your EMMC chip is damaged. Find someone who can replace it. The part is not that expensive but requires soldering.
Click to expand...
Click to collapse
thanks for answering
in the oficial service they said they could fix it, but it would take a week.
A particular technician could restore the IMEI (or so I thought), early check start with 55 and end at 9, but when I got home confirme which is another IMEI (the IMEI of a S3).
He fix it with this tool: Z3X Box http: //z3x-team.com/
Anyone can tell me if i can change the imei on my own? or i need go to ask if they can restore my emai?
Status:
Signal: Ok (Telcel)
IMEI: Ok (but is from another phone)
Baseband: OK
Rom: Stock 4.4.2
Root & BussyBox
Efs: Backup (EFS Professional 2.1.80 BETA)
Asking whether you can change the IMEI, or how to do it, is something that can get XDA into deep s#!^. So don't do it. Keep in mind that XDA is hosted on a US server and has to abide by US law. In the US, cloning the IMEI of a phone for any reason whatsoever is illegal. Thus discussion of it falls under XDA rule 9, "Don't get us into trouble."
Strephon Alkhalikoi said:
Asking whether you can change the IMEI, or how to do it, is something that can get XDA into deep s#!^. So don't do it. Keep in mind that XDA is hosted on a US server and has to abide by US law. In the US, cloning the IMEI of a phone for any reason whatsoever is illegal. Thus discussion of it falls under XDA rule 9, "Don't get us into trouble."
Click to expand...
Click to collapse
well, i'm not trying to change my IMEI for other, I want to recover my original IMEI, so I do not think that's illegal (?) ...
Still thanks for the warning :good:
Moderators please close the thread, I will continue on my own, thanks.
When IMEI is wiped for whatever reason, your only recourse is to take it to manufacturer or Servicing Center. We do not discuss any methods pertaining to changing or restoring IMEI.
PERIOD. END OF DISCUSSION.
Thread Closed.

Categories

Resources