Develop Bugs

ROM Extractor

ROM Extractor 1.0
This program can extract modules from ROM.
Program only can extract modules (exe,dll,cpl,...)
(files which have FILE_ATTRIBUTE_ROMMODULE)
but not designed to copy other ROM files, like bmp.
You can copy other ROM files by using a file manager.
Program can handle both XIP and EXTIMAGE files.
You should understand that all files comes without relocations.
They are stripped from image and not stored in ROM at all.
(Most of EXE files works fine)
Compatible:
Should work with Windows CE 4.2 and Windows CE 5.0.
Tested in WM 2003 SE and WM 5.0.
Please report about WM 2003 and WM 6.0.
Interface
*Enter path to module
You should enter path to module, always \Windows\... ?
*Save to:
You should enter output filename.
*"Set security offset to zero"
clear security RVA and size fields.
*"Set fixup offset to zero"
clear relocations RVA and size fields.
*"..." button
you can chouse file from list.
Double click on item will select it, "OK" will close.
Program set some fields to:
Linker version = 8.0
Operating system version = 4.0
Image version = 0.0
Stack commit = 4096
Heep commit = 4096
Heap reserve = 0x100000
Also you will have resources in .pdata section.
(This will be fixed in the next release)

Thank you for your program.
Would you change the font of this program?
MS Shell Dlg -> Tahoma..

the program is great.
however you should consider adding a default output path (say, "\") for those like me tampering with a CE.NET device with no chance yet to activate "Input Panel".

wm6.1
It seems to work just fine in wm6.1 as well.
However I do agree with crusher;
"however you should consider adding a default output path (say, "\") for those like me tampering with a CE.NET device with no chance yet to activate "Input Panel"."

ok I'm having a blond moment... what is my save to path if I want to save to my SD card? I tried '\storage card\' and \storage card\my documents\ and neither worked. Help me help my brain work this early in the morning! thanks

This one works great too: http://forum.xda-developers.com/showthread.php?p=2122307
For extracting NBH files

How do you dump the file back in \Windows? I am modifying shellres.dll.0409.mui to change the "Start" word (String Data 321 if you are interested - Thank you joemanb), but I cannot place the file back. I have tried using both Explorer and Resco 2008 without any luck. Any ideas will be much appreaciated.

use Active Sync

patr!k said:
use Active Sync
Click to expand...
Click to collapse
I realized it after playing with it for a while. Thanks anyway.

Thanks This App is great just messed with photoshop n made a icon for your program if you like it
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Is there an update for this program?
Preferably one where you can select multiple files at once and don't have to type in EVERY output filename (it's much slower when you can't copy-paste on the Touch HD)

do not work.
can`t create output file

active sync as in XP? how can one do it in Vista? The device's Windows folder is not visible in desktop explorer

Actually i found a way to view the device's windows folder in Vista but the mui file is read-only with no way of changing that. How can i replace it in Vista. PLEASE help !

Worked for me. Get the Notify.dll.0407.mui without any problems extracted...

i keeep getting cant create output file.

DexterTan said:
i keeep getting cant create output file.
Click to expand...
Click to collapse
you wil have to type the full name of what u whant to copy
\StorageCard\Stuff\shellres.dll.0409.mui

it's amazing!! works perfect with WM6.5!
Congratulations and many thanks!

Bparan said:
you wil have to type the full name of what u whant to copy
\StorageCard\Stuff\shellres.dll.0409.mui
Click to expand...
Click to collapse
I'm getting that message too. What are we doing wrong? (Screenshot in attachment.)

You have to also type in the full path and file name for where you want to store it.

For cookers: how to modify xip in order to retain clock after hard reset

Hello guys, I have one question for you: what should I modify in os.nb.payload or in xip in order to not have the time and date (clock) reseted after hard reset of after flashing a new ROM? Is very annoing to set each time the date and time. I know that are ROMs that do this and I wonder what I have to change?
I already searched the forum and the net but no luck so far.
Thank you in advance.

To change this in the os.nb.payload :
1) Open os.nb.payload with an hexeditor.
2) Search for the string "2008"
3) Check each occurence until you find one surrounded by "O.E.M.S.e.t.A.l.a.r.m.T.i.m.e." and "O.E.M.S.e.t.R.e.a.l.T.i.m.e"
(See the printscreen for an example with my device)
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
4) Change the date of this occurence with the new date (Highlighted stuff on printscreen)
5) Save the file and cook.
6) If not working, you probably changed the wrong occurence. Check the displayed date at first boot and search for it on the payload. Replace each occurence until it works.

What purpose would that serve?
1: You still have to set your time after a reset
2: You don't have to bother with this if your operator has a time server running.

adwinp said:
What purpose would that serve?
1: You still have to set your time after a reset
Click to expand...
Click to collapse
Correct but you can just click on next instead of changing year, month, day each time you flash (once a day for myself).
You can even save the calibration settings and remove the first boot customization screen...
adwinp said:
2: You don't have to bother with this if your operator has a time server running.
Click to expand...
Click to collapse
Unfortunately, mine hasn't got such a server...

adwinp said:
What purpose would that serve?
1: You still have to set your time after a reset
2: You don't have to bother with this if your operator has a time server running.
Click to expand...
Click to collapse
What he means is something that I have been trying to figure it out myself He means the (R)eal (T)ime (C)lock, something that was shown to us by cmonex back in the ElfIn days , but not working for Diamond
Aman has a nice tutorial on it in the Elf section
What it basically does is, sets the time of ROM flashing-5 minutes

Ameet said:
What he means is something that I have been trying to figure it out myself He means the (R)eal (T)ime (C)lock, something that was shown to us by cmonex back in the ElfIn days , but not working for Diamond
Aman has a nice tutorial on it in the Elf section
What it basically does is, sets the time of ROM flashing-5 minutes
Click to expand...
Click to collapse
Yeah that was an awesome hack for the Elfin .. just modify a byte or two in the nk.exe in your OEMXIPKernel, and you never have to change it again if you re-use OEMXIPKernel.
Still looking for this fix for the Diamond. When I re-flash, it gives me the time from 2008... and if I do an ActiveSync right after, it adjusts the date but the clock is off by 3 hours (until I manually set it).
Also, grabbing the time from the provider's server is not a good idea, because it conflicts with QuickGPS and resets the time to a different hour.

dsixda said:
Yeah that was an awesome hack for the Elfin .. just modify a byte or two in the nk.exe in your OEMXIPKernel, and you never have to change it again if you re-use OEMXIPKernel.
Still looking for this fix for the Diamond. When I re-flash, it gives me the time from 2008... and if I do an ActiveSync right after, it adjusts the date but the clock is off by 3 hours (until I manually set it).
Also, grabbing the time from the provider's server is not a good idea, because it conflicts with QuickGPS and resets the time to a different hour.
Click to expand...
Click to collapse
Yeah. Aman and me did a lot of test on Diamond when I bought this but nothing worked So my conclusion is either Diamond doesnt support RTC at all or something's in there deeper that needs modification

dsixda said:
Yeah that was an awesome hack for the Elfin .. just modify a byte or two in the nk.exe in your OEMXIPKernel, and you never have to change it again if you re-use OEMXIPKernel.
Still looking for this fix for the Diamond. When I re-flash, it gives me the time from 2008... and if I do an ActiveSync right after, it adjusts the date but the clock is off by 3 hours (until I manually set it).
Also, grabbing the time from the provider's server is not a good idea, because it conflicts with QuickGPS and resets the time to a different hour.
Click to expand...
Click to collapse
Well, basically, you just need to hex edit your os.nb.payload container just before you make your new imgfs and set the date.

adwinp said:
Well, basically, you just need to hex edit your os.nb.payload container just before you make your new imgfs and set the date.
Click to expand...
Click to collapse
Ok, so do you have the solution?
EDIT: Nevermind.. yeah I know you can hex edit the date, but that doesn't really solve our problem

Hi guys, first of all thank you all for quick responses.
Indeed I had a trinity device until a few days ago and there I had an os.nb.payload that just keeped the time and date after ROM flash or hard reset.
I've change the date with Ervius Visual Kitchen but still I have to set the time. As I said very annoing. I will investigate further. It must be a way to do this also for Diamond as was the case with some older devices.
Regards

editing eT9.Excalibur.0409.kmap.txt

I need to change the keymapping file in the windows section of the 6.5 roms for a norwegian version of the htc 620s.
I dont seem to be able to access the windows section from my pc (hidden) and the eT9.Excalibur.0409.kmap.txt seems the be protected from editing/replacement while trying to work with it from the phone.
Ive read some threads where people have written that have been able to edit the txt to suit some keymapping issues. But how do you do it ?
Any guidelines would be most appreciated

Hi, bruv. In attach u can find my eT9 for english keyboard. For editing it u need edit 2-nd column(it's letters then show then u tap button), 2-nd column(symbols produced by Fn + key), 3-d column (symbols in 123 mode).
NOTE!!! 1-st and last columns don't need editing!!!

For example u need printed 'W' then u pressed 'Q' button
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
just edit 2-nd column.

Ok, so ive put the bindings (hopefully right) according to your template. But how do i get it to replace the english keymap in the wm6 windowsfolder ? It seems read only protected?

Try put it in over dir on your PPC and juts copy with replace or make *.cab and install it or copy from PC- i do it and all successfully .

View attachment eT9.Rose.0409.kmap.txtUploaded modified rose-file

You need rename it as name file in your sysrem.

Hmmm,
The keymapping text is write-locked, and seems both undeletable and unreplacable.
Is the any way i can make the windows folder show it self to my pc ?
(Im on a vista-machine with newest device center)
Any sure-trick i can do get the new text in and the old out ? Its the latest EVO version im playing with.
Really appreciate your help AlekSS

Ahaa..
Well I guess Im swearing to total commander too. Full success !!
Thanks all

Update:
Well, the rom, as it turned out, resat the original keymap after reboot, and TC somehow stopped wanting to work on it.
But as a final solution I disassembled the evo rom and substituted the keymap with the one I wanted, and built and reflashed. And it works well.
If anybody needs the 6.5 evo rom with norwegian layout ill upload and link.

You make a long way . You can make *.cab file with your *.kmap.txt and install it on your phone. It's worked well .

ramdoubler said:
Update:
Well, the rom, as it turned out, resat the original keymap after reboot, and TC somehow stopped wanting to work on it.
But as a final solution I disassembled the evo rom and substituted the keymap with the one I wanted, and built and reflashed. And it works well.
If anybody needs the 6.5 evo rom with norwegian layout ill upload and link.
Click to expand...
Click to collapse
How did you customize your keymap?
After I flash up new rom, when I press and hold "Q" it appear % (not !), hold "N" => & (not @)...
I have tried to install et9 full, EnglishTegicEt9US... but can not solve it, I also tried to replace file Et9.Excalibur.0409.Keymap.txt in Window folder but there was nothing changed
I have this trouble with both of rom: 6.5 3VO 1.30 and 6.5 3VO 1.40
Could you help me to solve it?

ramdoubler said:
Hmmm,
The keymapping text is write-locked, and seems both undeletable and unreplacable.
Is the any way i can make the windows folder show it self to my pc ?
(Im on a vista-machine with newest device center)
Click to expand...
Click to collapse
You can go into your control panel in classic mode and choose folder options and choose to unhide everything so you can see the system files.. but unfortunately that won't work since your device controls the permissions for those windows files on your phone. when you try to edit them your computer will still tell you that you do not have the permissions needed

ramdoubler said:
Update:
Well, the rom, as it turned out, resat the original keymap after reboot, and TC somehow stopped wanting to work on it.
But as a final solution I disassembled the evo rom and substituted the keymap with the one I wanted, and built and reflashed. And it works well.
If anybody needs the 6.5 evo rom with norwegian layout ill upload and link.
Click to expand...
Click to collapse
Yes!
I would very much like the rom with norwegian layout

go...
I would also like this....

akristiansen said:
I would also like this....
Click to expand...
Click to collapse
Copy the attached Norwegian keyboard file in the Windows folder of your s620 and soft reset. Make sure the file is set as read-only.
You should then have Norwegian keyboard!
Works for me....

As far as i know you can customize FN symbols this way:
- with a regedit program take note of the filname (eT9.*.kmap.txt) in this key:
HKEY_LOCAL_MACHINE\Software\Tegic\eT9\Ime\KeyboardLayouFiles\07FF
- copy this *.kmap.txt file from phone Windows folder to PC
- edit 4th and 5th row with the special charachters you need
- save as Unicode with another name (say eT9.Rhodium.0410custom.kmap.txt for a Rhodium phone)
- copy new file from PC to phone
- with a regedit program modify this key with the new file name:
HKEY_LOCAL_MACHINE\Software\Tegic\eT9\Ime\KeyboardLayouFiles\07FF
- soft reset
I've done it on a Rhodium but should be the same with other phones.

[TUT] Editing Resources .dll etc

How to edit resources:
I have attached the software needed File Editor Suite, also you can get a 30 day free trial of PE Explorer Here
It's all very simple to do just follow the guide any questions feel free to ask.
Also take a look @ Making custom icons to replace the standard icons
Step 1:
Unsign the .dll .dla with File Editor Suites UnSigner.exe, just drag the .dll over the Unsign.exe as show in the picture you wont see much maybe just a CMD "black box" quickly pop up.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Step 2: Open with ResHacker\PE In PE you have to click the circled item and you will see the resources.
Step 3: Find the resource you want to edit, remebering that the file you will be replacing needs to be same size and bit
Step 4: Save your resource and in File Editor Suite you have siggner.exe click it locate the .dll and press start the process, the .txt file out put will say "Warning: This file is signed, but not timestamped.
Succeeded"
That's it your done
Now use the appropriate software whether it be File Changer or just using Resco File Explorer/Total Commander to replace, if you have a file that can not be overwriten go into the phone find the file change the extension to .bak example: bronzeres.bak

Nice job bud! I like the look of the PE Explorer R5
lets keep the [TUT] going!
PS. for all, make sure to keep the same pixel size on the icons for better quality when displaying on device, for panels not as much, since the .cpr adjusts the size of the panels on the homescreen.

roloracer said:
Nice job bud! I like the look of the PE Explorer R5
lets keep the [TUT] going!
PS. for all, make sure to keep the same pixel size on the icons for better quality when displaying on device, for panels not as much, since the .cpr adjusts the size of the panels on the homescreen.
Click to expand...
Click to collapse
Thanks bruv

isn't this all covered in jdshifflets [TUT] ?

Kemekill Products said:
yeah but he deleted it when stylez pissed him off. then he got banned...
And to fianlize what happened he broke the rules with reagrds to direcspect to members no more needed to be said... If anyone has a problem PM me directly
Click to expand...
Click to collapse
And then jdshifflets went on and created a new Sock Puppet account using his own address so we'd easily find out he's actually Kemekill.
And if that wasn't enough he didn't do a good enough job covering his IP address.
So until further notice Kemekill will Join jdshifflets in his/their split personality, until this is discussed and investigated.
To add to the Tute.
Sometimes when a file has only one Icon file (like for instance some .cpl files)
You can actually get away by using a bigger .icon file to replace it.
But best practice is to always use the same size and resolution to replace these.
Another Good Resource editor is CFF explorer http://www.ntcore.com/products.php
Or the Classic ResourceHacker.
Also until now i got away without unsigning files just fine, but i always sign them with new cert.
Yes I also wrote a Tute like this , but that has nothing to do with me stepping in here.
I'm just following up and the policy for creating Sock Puppet Accounts after a Ban.
Kemekill won't be back ever, and we (The Moderation Team) are not sure yet how this affects jdshifflets ban.

I've gotten this to work pretty good except for one slight hiccup... the "signer" gives me an error that the signature has expired... any thoughts on how to correct this?

New signer with certs, i'll change the full download when got time.
Edit: Updated File Editor Suite

stylez said:
New signer with certs, i'll change the full download when got time.
Click to expand...
Click to collapse
Sweet... thanks alot!!

I see a new Avatar there, cool.
Also when using PExplorer or CFF explorer sometimes you will need to rebuild the header for the file not to break.
At least i know that was the only way of removing \Noui from the first Marketplace exe (and also replacing it with my icon.
So with DLL files i don't expect this to be needed, but if you edit an .exe file and quickly see the .exe icon being replace by a blank icon you know you need to redo it with recompile header.

Thank you wanted to go back to my ninja but he disappeared..
Yeah i had this happening when tried to change everything in start menu to gray Good to know about header

Anyone having challenegs in copying tapres.dll? I can copy bronzeres.dll and open it using PE or Resource Hacker but can't seem to copy the tapres.dll (wchich containts the start menu icon) to my PC for modifying..=(

tapres.dll is a ROM file so you will have to use ROM Extractor and this is not easy as made for PPC, but can be done
In Top Box type\Windows\tapres.dll
In box bellow type tapres.dll
Click Extract.
This will extract it to root of phone memory.

hi folks,
i tried to unsign and open MMAppLauncherCore.dll (after copying to my workstation) which maximus.mobile has made but after the unsign step res.hacker opens a empty file, i do not know why.
can anybody try to open the file too to find out the mistake?
thx

[CDMA][W/VGA] Jmz Provisioning -- Select your carrier on first boot

Jmz Provisioning
Select your carrier on first boot​
Finally, the release of the bug free Jmz Provisioning. Many things have changed since the first beta so please read the notes below carefully.​
Release Notes:
Leave app.dat file alone.
Leave the package the way it is
Registry Entries are as follows
CarrierCount is how many provisioning cabs you are using
Carrier1, Carrier2, and so on are the carriers you want listed
Headertext is what you want it to say at the top of the app
Carriers is a changing number so don’t worry about that one
Firstrun — 1=runcc reboots phone on first boot, 2=runcc does not reboot your phone on first boot
Sometimes the app hides so you have to look at task manager to bring it forward. Currently trying to fix this small issue
Cab names are Carrier1.cab, Carrier2.cab and so on to match the above reg entries.
.NET 3.5 is required.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Download​

Certainly looks great. Maybe you should include in title that it is for CDMA ROMs. Does Connection setup not work on CDMA?
I hope to see a lot more applications with the same graphic ui. Can you please remake every app that exists? Do you have any more that us GSM folks can use? Thanks for your contributions.

Program crashes whenever i select a provider. Any help? Anyone else seeing this issue? Does it require .Net 2.0 or something

Bxsteez said:
Program crashes whenever i select a provider. Any help? Anyone else seeing this issue? Does it require .Net 2.0 or something
Click to expand...
Click to collapse
Yes it requires the latest .net package installed.

I have .net 3.5 installed and it still crashes

Bxsteez said:
I have .net 3.5 installed and it still crashes
Click to expand...
Click to collapse
can you post the error report. The first couple lines should suffice. Also, did you change any of the cab names? that is hard coded.

An Unexpected error has occured in Jmz Provisioning.exe
at System.IO._Error.WinIOError(Int32 errorCode, String str)
at System.IO.File.Delete(string path)
at SmartDeviceProject1.Form1.ManilaButton3_Click_1(Object sender, EventArgs e)
I didn't change any file names I just downloaded ur OEM package

Bxsteez said:
An Unexpected error has occured in Jmz Provisioning.exe
at System.IO._Error.WinIOError(Int32 errorCode, String str)
at System.IO.File.Delete(string path)
at SmartDeviceProject1.Form1.ManilaButton3_Click_1(Object sender, EventArgs e)
I didn't change any file names I just downloaded ur OEM package
Click to expand...
Click to collapse
did you change the app.dat file?

this is what is my app.dat
Directory("\windows\startup"):-File("Jmz Provisioning.lnk","\windows\Jmz Provisioning.lnk")

Bxsteez said:
this is what is my app.dat
Directory("\windows\startup"):-File("Jmz Provisioning.lnk","\windows\Jmz Provisioning.lnk")
Click to expand...
Click to collapse
well, how the program works is this. It puts that shortcut in startup. Then when you click an option in the program it deletes that shortcut so it doesn't run again on next boot. So for some reason it cannot delete that file in the startup folder. Ensure the lnk file is not read-only. Other than that I can't really know what is going on. But bottom line is that the lnk file cannot be deleted from the startup folder for some reason.

Hmmm... Its not read only. I'm not sure why it can't be deleted. I know i can delete it if i got into startup and delete it. Any ideas on a solution?

Bxsteez said:
Hmmm... Its not read only. I'm not sure why it can't be deleted. I know i can delete it if i got into startup and delete it. Any ideas on a solution?
Click to expand...
Click to collapse
Has it ever worked for your kitchen?

No not once

Bxsteez said:
No not once
Click to expand...
Click to collapse
does the cab actually install?

No it crashes once you hit the carrier.

there is a newer version on ppc geeks

Released R1