Change Splash Screen and Customize EXT Rom in 2.16.9.1 WWE

[flexchen]

I just managed to change the second splash screen and customize my extrom with the help of SD Card and NBF manipulation, this task is usually done by aWizard for me, but now it can't do that again due to the DOC write protection after the recent ROM upgrade.

Here is what I did with my wizard, it may not be applicable to yours, so take your own risk if you want to do it by yourself.

1) Change splash screen
[1] Found a 128MB or other size > 64MB SD card, and fill all sectors with zero using WinHEX
[2] Enter USB bootloader mode, open MTTY with USB, type "r2sd splash", this will backup your current splash screen into that SD card.
[3] Clone the SD card content to splash.sdimg using WinHEX
[4] Run "perl typhoonnbfdecode.pl splash.sdimg" to dump the parameters like blversion and docuniqueid, and save those infos.
[5] Run "perl typhoonnbfdecode.pl -x splash.sdimg" to dump your current splash screen file. Usually, you will get a file named as 800c0800-splash.nb.
[6] Open the dumped 800c0800-splash.nb using WinHEX, fill offset 0-0x2fbff with 0, open your cooked binary format splash file ( make sure it is started with "This is smartphone signature.", and exactly 0x2581e bytes in length) in WinHEX also, copy and paste the cooked splash content to the dumped one from offset 0, and make sure other part of the dumped one remains untouched, then save it as 800c0800-cooked.nb
[7] Run "perl typhoonnbfdecode.pl -r splash=800c0800-cooked.nb -p docuniqueid=00000000241001041c0811de0c0905b6 -p blversion=2.16.0000 -d cooked-splash.sdimg", remember changing the docuniqueid and blversion in the cmdline to the values you save in [4]
[8] Clone the cooked-splash.sdimg to your SD card using WinHEX
[9] Put that SD in, and boot into bootloader, and press voice dial when it asks for restoring splash screen from SD card.
[10] Reboot to normal when it is finished, and see your own splash screen again.

**** Please make a full "r2sd all" SD backup in case you messed up.

2) Customize EXT Rom
[1] Same as 1.1
[2] "r2sd extend" to save your current extend rom
[3] save to extend.sdimg
[4] "perl typhoonnbfdecode.pl extend.sdimg" to save all parameters it shows
[5] "perl typhoonnbfdecode.pl -x extend.sdimg" to save the dumped extended rom file, it is 0743d4c0-unknown_0743d4c0.nb for me.
[6] Downloading WinImage 8.0 from its web site, and open 0743d4c0-unknown_0743d4c0.nb for any customization you want below \__TFAT_HIDDEN_ROOT_DIR__, then save it to 0743d4c0-cooked.nb
[7] "perl typhoonnbfdecode.pl -r extend=0743d4c0-cooked.nb -p docuniqueid=00000000241001041c0811de0c0905b6 -p blversion=2.16.0000 -d cooked-extend.sdimg", remember changing the docuniqueid and blversion in the cmdline to the values you save in [4]
[8] Clone the cooked-extended.sdimg to your SD card using WinHEX
[9] Put that SD in, and boot into bootloader, and press voice dial when it asks for restoring extended rom from SD card.
[10] Reboot to normal when it is finished, and run Unlock extrom Wizard.cab to unhide your extrom.

**** You need my own updated typhoonnbfdecode.pl to have the ability to add extend module into SD image or NBF file, and it is attached, thanks for itsme for his excellent contributation to the XDA community.

Although I could cook the extended rom freely, but I found there are stiil limitations:
1) If I dare to delete one file in \Extended_Rom2, the FATFS of it will be destoryed totally
2) The read access to ext rom will stall definitely if I read a lot from it. For example, I put acrobat into ext rom, the first running will be ok, but it will stall the system in the second acrobat launching.

Hopes this information helpful for someone.

[lewcamino]

Alright first thing is first... That is almost the most cryptic guide I have ever read...that being said, THANK YOU!

I will write an indepth tutorial on this monday maybe.

my head hurts; Lew

BTW: This replaces the screen after HTC on the 2.17 ROM.

HTC SCREEN, CUSTOM SCREEN, WINDOWS MOBILE SCREEN

[xelencin]

THANK YOU! Now I can edit my extended rom nb easily.

[FalconGrey]

Alright first thing is first... That is almost the most cryptic guide I have ever read...that being said, THANK YOU!

I will write an indepth tutorial on this monday maybe.

my head hurts; Lew

My head hurts too... :shock:

BTW: This replaces the screen after HTC on the 2.17 ROM.

HTC SCREEN, CUSTOM SCREEN, WINDOWS MOBILE SCREEN

BTW:... Anyone figure out or know how to replace the HTC and/or Mobile boot screens? Would be nice to FULLY customize the way my Wizard boots up! :twisted:


Grey

[flexchen]

Alright first thing is first... That is almost the most cryptic guide I have ever read...that being said, THANK YOU!

I will write an indepth tutorial on this monday maybe.

my head hurts; Lew

My head hurts too... :shock:

BTW: This replaces the screen after HTC on the 2.17 ROM.

HTC SCREEN, CUSTOM SCREEN, WINDOWS MOBILE SCREEN

BTW:... Anyone figure out or know how to replace the HTC and/or Mobile boot screens? Would be nice to FULLY customize the way my Wizard boots up! :twisted:


Grey

Sorry for my pool writing style, and I just listed my steps for the skilled Wizard DIYer, an in-depth tutorial would be great for all the Wizard users.

HTC Screen is chanagable, actually it is contained in the remaining untouched part of my steps 1.6, the problem is its format is unknown to me, please refer to belowing for its headers, looks like a BITMAP, but can't be loaded into any pic editor, seems being encrypted in some way.

The whole part of the HTC splash screen is attached, it is dumped from NK.NBF by typhoonnbfdecode.pl.

00000000h: 42 43 4C 31 00 00 00 09 00 03 84 36 00 00 2F 85 ; BCL1......?../?
00000010h: AF 42 4D 36 84 03 00 00 00 00 00 36 00 00 00 28 ; 疊M6?.....6...(
00000020h: 00 00 00 F0 00 00 00 40 01 00 00 01 00 18 AF 05 ; ...?..@......?
00000030h: 18 AF 04 04 23 2E AF 04 04 AF 09 0F 00 FF FF FF ; .?.#.?.?..
00000040h: FF AF 04 04 AF 08 08 AF 10 10 AF 20 20 AF 40 40 ; ?.?.?.? 疈@
00000050h: AF 81 00 81 00 AF 82 00 82 00 AF 84 00 84 00 AF ; 瘉.?瘋.?瘎.??
00000060h: 88 00 88 00 AF 90 00 90 00 AF A0 00 A0 00 AF C0 ; ??瘣.?癄.?
00000070h: 00 C0 00 AF 81 80 00 81 80 00 AF 82 80 00 82 80 ; .?瘉€.亐.瘋€.個

[xelencin]

I am having the problem where after it is written onto the device, if I do a hard reset and it tries to run my customizations it pauses while installing the second file on the list and doesnt move any further. Then after performing a manual soft reset if I open /extended_rom/ in pocket commander the entire directory structure is screwed up. Any ideas?

[lewcamino]

I didnt hard reset, but maybe I should check my EXT rom eh?

Well I checked it out, looks ok to me.

Sorry, perhaps you made a mistake with the hexediting?

Later; Lew

[xelencin]

I didnt hard reset, but maybe I should check my EXT rom eh?

Well I checked it out, looks ok to me.

Sorry, perhaps you made a mistake with the hexediting?

Later; Lew

I got it not to corrupt (I set the file properties in winimage to read only) the problem now is when I boot up after a hard reset and it tries to autorun customization it doesnt install any of the unsigned programs in the list. I see it go through all the files, and the config.txt is setup properly, but it actually doesnt install unsigned cabs. Any idea?

[arc]

flexchen
I think here it is necessary to correct :)

sub validate_extend {
my ($data)= @_;
if (substr($$data, 0x003, 8) ne "MSWIN4.1") {
warn "no ECEC at 0x0040 in SPL image\n";
return 0;
}


on

sub validate_extend {
my ($data)= @_;
if (substr($$data, 0x003, 8) ne "MSWIN4.1") {
warn "no MSWIN4.1 at 0x003 in Extended ROM image\n";
return 0;
}

[Button]

... when I boot up after a hard reset and it tries to autorun customization it doesnt install any of the unsigned programs in the list. I see it go through all the files, and the config.txt is setup properly, but it actually doesnt install unsigned cabs. Any idea?
Try 'Cert_SPCS.cab', whether it works at new ROMs.. If yes, just place it in ext.rom and run first.

[xelencin]

... when I boot up after a hard reset and it tries to autorun customization it doesnt install any of the unsigned programs in the list. I see it go through all the files, and the config.txt is setup properly, but it actually doesnt install unsigned cabs. Any idea?
Try 'Cert_SPCS.cab', whether it works at new ROMs.. If yes, just place it in ext.rom and run first.

Thanks again button.

[flexchen]

flexchen
I think here it is necessary to correct :)

sub validate_extend {
my ($data)= @_;
if (substr($$data, 0x003, 8) ne "MSWIN4.1") {
warn "no ECEC at 0x0040 in SPL image\n";
return 0;
}


on

sub validate_extend {
my ($data)= @_;
if (substr($$data, 0x003, 8) ne "MSWIN4.1") {
warn "no MSWIN4.1 at 0x003 in Extended ROM image\n";
return 0;
}


Yes, you are right, I just copied that func from validate_spl().

[arc]

I converted this in exe file

[lvlolvlo]

Well I've had an easier way to change your boot screen for awhile...and I've posted it a few times suprisinly no one has taken notice so I'll post it here....

1. Use aWizard to backup your original ROM, Radio, GSM, etc...(make sure to run the enable rapi and unlock cid)
2. Flash your Wizard with the iMate 2.16 ROM
3. Again enable rapi and unlock cid (the cid will generate an error it's okay)
4. Backup only the new iMate ROM using aWizard
5. Use aWizard to write the original ROM (Original T-Mobile, Cingular, whatever).
6. Use aWizard and enable rapi and unlock cid (might give error again...it's okay)
7. Use aWizard and write the splash screen that you backed up in step 1 or use your custom slapsh screen.
8. Use aWizard and write iMate ROM only (the one backed up in step 4)

That's all.....I've done this on 4 wizards with success on all of them. They were all the T-Mobile MDA (US Version).

Also if you have T-Mobile US and want to get the functionality back download this zip and install the cabs include the registry cab.

As fot the extended ROM....I'm trying to figure something out that's not soo cryptic.....perhaps more of a click and you're done kinda thing...

[edsub]

I suppose this shoul work on 'official' Qtek AKU2 rom as well?

[shanksv]

Well I've had an easier way to change your boot screen for awhile...and I've posted it a few times suprisinly no one has taken notice so I'll post it here....

But this method does not get rid of the HTC and the Windows splash right? It basically replaces the iMate, Qtek etc splash with the Cingular one correct?

I have tried this but I can't seem to get rid of the HTC and Windows splash. It is just 2 too many splashes for me :x

Shankar.

[lvlolvlo]

But this method does not get rid of the HTC and the Windows splash right? It basically replaces the iMate, Qtek etc splash with the Cingular one correct?

I have tried this but I can't seem to get rid of the HTC and Windows splash. It is just 2 too many splashes for me :x

Shankar.

yeah it doesn't get rid of the HTC splash, or the Windows Mobile (which is just the png file in the windows directory)......but i fig'd the HTC one isn't too distracting but a big blue iMate for life, for...is kinda annoying

[ZeBoxx]

I'm curious... how often do you people soft reset? >_<
Before this morning, when I tested some theme thing for another thread, I hadn't seen a single splash screen in days - and that time before was again just because I was tweaking something.

Seems to me it's perfectly typical that a person may not see a splash screen for weeks on end.

Not complaining about people wanting to make their own splash screens - I think that's cool :) I'm just curious as to why some people make it out to be such a big issue like "oh no! 3 splashes! I can't live with this!11!!!!1!" when those 3 splashes speed by in just a few minutes and you won't see them again until you soft (or hard) reset -_-

[hrb]

Not complaining about people wanting to make their own splash screens - I think that's cool :) I'm just curious as to why some people make it out to be such a big issue like "oh no! 3 splashes! I can't live with this!11!!!!1!" when those 3 splashes speed by in just a few minutes and you won't see them again until you soft (or hard) reset -_-

Right you are - but the related problem (not being able to use the space of the Ext ROM) is a REAL problem !
Cheers
hrb

[ZeBoxx]

'twas my understanding that the steps in the first post - although cumbersome - do allow you to modify the ExtROM, no?

[hrb]

As you say: cumbersome !
There must be an easier way.

Cheers
hrb

[summiter]

As you say: cumbersome !
There must be an easier way.

Cheers
hrb

There is - use the as yet unrwritten ext rom unlocker... =)

[steverae]

Has anyone (Buzz?) managed to unlock the 2.17 qtec ext_rom for wizard yet ?

What is the current state of development on this ?

[kelu]

I got "crc mismatch" while trying the commands from step 4&5 described by flexchen. Would you please be so nice and let me know if it is OK to go on with the procedure ?