Editing Splash Screen on V26-09a Beta - Page 13

RealShakaZulu · #**121** 02-20-2006, 01:19 AM

Quote:

Originally Posted by ambishop

It worked in my upgrade. Good Job. Cute logo.

So process is as follows, swap logo, adjust last 3 bytes of file with new 24 bit checksum.

Are you sure? I took "navboot" and checked the last 3 bytes (2D 4F A4) of the file. I then truncated those bytes and ran a CRC24 hex outputed checksum (java -jar jacksum.jar -E hexup -a crc24 navboot)... which returned 82 3B F4.

Am I doing it wrong?

PS I tried both (1) generating checksums of the whole file and (2) per Roscoe reducing the file to a single section defined by 4D AD 00 02 less the last 3 bytes both with and without the "4D AD 00 02" header... it still produces a checksum value that is different than the one in the last 3 bytes of the file/section.

-RSZ

Sponsored Links

Andrej_E39_535ia · #**122** 02-20-2006, 02:02 AM

Quote:

Originally Posted by RealShakaZulu

Are you sure? I took "navboot" and checked the last 3 bytes (2D 4F A4) of the file. I then truncated those bytes and ran a CRC24 hex outputed checksum (java -jar jacksum.jar -E hexup -a crc24 navboot)... which returned 82 3B F4.

Am I doing it wrong?

PS I tried both (1) generating checksums of the whole file and (2) per Roscoe reducing the file to a single section defined by 4D AD 00 02 less the last 3 bytes both with and without the "4D AD 00 02" header... it still produces a checksum value that is different than the one in the last 3 bytes of the file/section.

-RSZ

u must truncate 4 bytes and than calculate checksum

download program that calculates checksum for os 9000 files "crc24.exe" from yahoo "hacktheibus" group and see how program calculates checksum - there is source of program in "delphi"

RealShakaZulu · #**123** 02-20-2006, 02:31 AM

Quote:

Originally Posted by Andrej_E39_535ia

u must truncate 4 bytes and than calculate checksum

download program that calculates checksum for os 9000 files "crc24.exe" from yahoo "hacktheibus" group and see how program calculates checksum - there is source of program in "delphi"

Okay, I have the program (Thank you!!) and I tried to calculate the checksums to compare them to the value at the end of the sections... different values.

So just for giggles I left the checksum on the end of the section and BINGO! So can I assume that program automatically truncates the last 4 bytes?

----------------------------------------
Nevermind... figured it out. It does automatically truncate and compares the checksum of the file less the last 4 bytes to the value in the last 4 bytes. Off to the lab...

Andrej_E39_535ia · #**124** 02-20-2006, 03:22 AM

exactly

with crc24.exe u dont' hav to truncate bytes
program automaticaly do not use last bytes

again see source

RealShakaZulu · #**125** 02-20-2006, 04:39 AM

Quote:

Originally Posted by ambishop

I got word that nomad is working on it as well. He is also looking at the V26 code to see if he can turn it on with the released version.

Below are the details from Nomad that should be helpful to anyone trying to make an image swap program. Nomad has already proven that this process works in an earlier post. I installed his navboot file in my V26.09 image and it worked perfectly. Although his test version has the HACKED BMW logo, with skull and crossbones.... Not sure my wife would be hip to that splash screen.

Okay I am off to bed...

I am still searching for the switches in v26 and in parallel working on the splash screens.

I need to know how the heck Nomad was able to make a working navboot with the new splash screen??? My current process, based on all that we have learned, involves

- extracting navboot from v26 beta and opening it in a hex editor

- cut and pasting the section (defined by 4D AD 00 02) which has the GIF file to a blank editor page

- deleting the GIF ("GIF89a" to ":;") from the section (verified it was the beta logo by pasting it to a blank editor page, saving it and opening it in Paint).

- open new gif in a blank editor page and selecting it, then pasting the hex into the previously mentioned section.

- save the now modified section and run CRC24 against it. Take new checksum and overwrite the 6 bytes at the end of the section... save (re-ran CRC24 to verify I entered it correctly, got the "OK")

- select the modified section and insert it back into navboot

- save image, burn, install

and it fails on install. What's Nomad's secret recipe?

DaRkY · #**126** 02-20-2006, 04:59 AM

Quote:

Originally Posted by RealShakaZulu

Okay I am off to bed...

I am still searching for the switches in v26 and in parallel working on the splash screens.

I need to know how the heck Nomad was able to make a working navboot with the new splash screen??? My current process, based on all that we have learned, involves

- extracting navboot from v26 beta and opening it in a hex editor

- cut and pasting the section (defined by 4D AD 00 02) which has the GIF file to a blank editor page

- deleting the GIF ("GIF89a" to ":;") from the section (verified it was the beta logo by pasting it to a blank editor page, saving it and opening it in Paint).

- open new gif in a blank editor page and selecting it, then pasting the hex into the previously mentioned section.

- save the now modified section and run CRC24 against it. Take new checksum and overwrite the 6 bytes at the end of the section... save (re-ran CRC24 to verify I entered it correctly, got the "OK")

- select the modified section and insert it back into navboot

- save image, burn, install

and it fails on install. What's Nomad's secret recipe?

I want to tell you one thing, that I discovered. I edit a Nomad file, cutting his logo from it and pasting 2609 logo. Files (original and hacked one) becomes one size and I compared them in WinHex. Here are the differences. So not only checksum changed. Because of that your image fails.
Forums is a great thing - you go to bed, I'm go to work

I try to deal with it in the evening (your morning).

Search for differences
1. C:\!!!\navboot2609: 12,631,320 bytes
2. C:\!!!\navboot_hacked_changed_for_compare: 12,631,320 bytes
B1F41E: 56 64
B1F41F: 74 D8
B1F46E: 61 53
B1F46F: 0B A7
B1F52E: 11 20
B1F52F: C0 24
B1F532: 1B 2A
B1F533: C8 2C
B1F53E: 2D 3C
B1F53F: C8 2C
B1F54A: 3F 4E
B1F54B: C8 2C
B1F556: 51 60
B1F557: C8 2C
B1F562: 63 72
B1F563: C8 2C
B1F56E: 75 84
B1F56F: C8 2C
B1F57A: 87 96
B1F57B: C8 2C
B1F586: 99 A8
B1F587: C8 2C
B1F592: AB BA
B1F593: C8 2C
B1F59E: BD CC
B1F59F: C8 2C
B1F5AA: CF DE
B1F5AB: C8 2C
B1F5B6: E1 F0
B1F5B7: C8 2C
B1F5C1: 00 01
B1F5C2: F3 02
B1F5C3: C8 2C
B1F5CE: 05 14
B1F5CF: C8 2C
B1F5DA: 17 26
B1F5DB: C8 2C
B1F5E6: 29 38
B1F5E7: C8 2C
B1F5F2: 3B 4A
B1F5F3: C8 2C
B1F5FE: 4D 5C
B1F5FF: C8 2C
B1F60A: 5F 6E
B1F60B: C8 2C
B1F616: 71 80
B1F617: C8 2C
B1F622: 83 92
B1F623: C8 2C
B1F62E: 95 A4
B1F62F: C8 2C
B1F63A: A7 B6
B1F63B: C8 2C
B1F646: AA B8
B1F647: 84 E8
B1F652: AD BB
B1F653: 40 A4
B1F65E: AD BB
B1F65F: 6C D0
B1F66A: AD BB
B1F66B: 90 F4
B1F676: AD BC
B1F677: B0 14
B1F682: B1 BF
B1F683: 7C E0
B1F68E: B3 C1
B1F68F: 84 E8
B1F69A: B6 C4
B1F69B: 0C 70
B1F6A6: B8 C6
B1F6A7: 94 F8
B1F6B2: BB C9
B1F6B3: 1C 80
B1F6BE: BD CC
B1F6BF: A4 08
B1F6CA: C0 CE
B1F6CB: 2C 90
B1F6D6: C2 D1
B1F6D7: B4 18
B1F6E2: C2 D1
B1F6E3: D4 38
B1F6EE: C2 D1
B1F6EF: F4 58
B1F6FA: C3 D1
B1F6FB: 14 78
B1F706: C3 D1
B1F707: 34 98
B1F712: C3 D1
B1F713: 5C C0
B1F71E: C3 D1
B1F71F: 84 E8
B1F72A: C3 D2
B1F72B: AC 10
B1F736: C3 D2
B1F737: E0 44
B1F742: C4 D2
B1F743: 00 64
B1F74E: C6 D4
B1F74F: 88 EC
B1F75A: C6 D5
B1F75B: A8 0C
B1F766: C6 D5
B1F767: C8 2C
B1F772: C6 D5
B1F773: E8 4C
B1F77E: C7 D5
B1F77F: 08 6C
B1F78A: C7 D5
B1F78B: 28 8C
B1F796: C7 D5
B1F797: 48 AC
B1F7A2: C7 D5
B1F7A3: 68 CC
B1F7AE: C7 D5
B1F7AF: 88 EC
B1F7BA: C8 D6
B1F7BB: 08 6C
B1F7C6: CA D8
B1F7C7: 08 6C
B1F7D2: CC DA
B1F7D3: 00 64
B1F7DE: CD DB
B1F7DF: 88 EC
B1F7EA: CE DC
B1F7EB: 84 E8
B1F7F6: CF DE
B1F7F7: D4 38
B1F802: D1 DF
B1F803: 24 88
B1F80E: D4 E3
B1F80F: A8 0C
B1F81A: D8 E6
B1F81B: 2C 90
B1F826: D9 E7
B1F827: 98 FC
B1F832: DB E9
B1F833: 04 68
B1F83E: DF EE
B1F83F: E4 48
B1F84A: E4 F3
B1F84B: C4 28
B1F856: E6 F4
B1F857: 68 CC
B1F862: E8 F6
B1F863: 0C 70
B1F86E: E9 F8
B1F86F: B0 14
B1F87A: EB F9
B1F87B: 54 B8
B1F886: ED FB
B1F887: 7C E0
B1F892: EF FE
B1F893: A4 08
B1F89D: 01 02
B1F89E: F1 00
B1F89F: A4 08
B1F8A9: 01 02
B1F8AA: F3 02
B1F8AB: A4 08
B1F8B5: 01 02
B1F8B6: F7 05
B1F8B7: 98 FC
B1F8C1: 01 02
B1F8C2: FB 09
B1F8C3: 8C F0
B1F8CD: 01 02
B1F8CE: FE 0C
B1F8CF: 04 68
B1F8DA: 00 0E
B1F8DB: 7C E0
B1F8E6: 05 13
B1F8E7: 68 CC
B1F8F2: 05 13
B1F8F3: 88 EC
B1F8FE: 05 14
B1F8FF: A8 0C
B1F90A: 05 14
B1F90B: C8 2C
B1F916: 06 14
B1F917: 48 AC
B1F922: 06 14
B1F923: 68 CC
B1F92E: 06 14
B1F92F: 88 EC
B1F93A: 07 16
B1F93B: F4 58
B1F946: 0A 18
B1F947: 7C E0
B1F952: 0D 1B
B1F953: 04 68
B1F95E: 10 1F
B1F95F: F0 54
B1F96A: 14 23
B1F96B: DC 40
B1F976: 18 27
B1F977: C4 28
B1F982: 1C 2A
B1F983: 68 CC
B1F98E: 20 2E
B1F98F: 4C B0
B1F99A: 32 40
B1F99B: 4C B0
B1F9A6: 44 52
B1F9A7: 4C B0
B44A89: F6 50
B44A8A: 74 4C
B44A8B: 6F B7
207 difference(s) found.

2Wires · #**127** 02-20-2006, 05:24 AM

I got the OS9 CRC24 running now and can exchange images and correct the checksum.
But didn't test whether it works.
I will upload the new program version to the known places.

@Darky
Since B1F41E and B1F41F define the length of the module, Nomad seems to have changed the module.
Original 26.09a filesize: 12,631,320
Nomad filesize: 12.635.004

3,684 bytes difference.

26.09a module length 00 02 56 74 = 153,204
Nomad module length 00 02 64 D8 = 156,888

156,888 - 153,204 = 3,684

He probably knew what he did...

EDIT:
Be sure using UltraISO for exchanging the navboot. I tried WinISO but it changed the size of the image. UltraISO didn't.

2Wires · #**128** 02-20-2006, 06:23 AM

I GOT IT!!!!!!!!!!!!!

I used my program to exchange the both 26.09a images found in the navboot with different images to find out which he uses.
Installing, restarting - NEW LOGO!
He uses the first one found at offset B1 F4 18.

The only problem is that we don't know how much space is reserved for those images.
Maybe I can figure that out when I get the OS9 system.

Here you can get my program:
GifExtractor

You need .NET 1.1 to run it:
http://www.microsoft.com/downloads/d...displaylang=en
Else there is an error like 0x00000035c.

I tried an image with 11,325 bytes and it worked:

Tino

DaRkY · #**129** 02-20-2006, 07:19 AM

Quote:

Originally Posted by 2Wires

@Darky
Since B1F41E and B1F41F define the length of the module, Nomad seems to have changed the module.
Original 26.09a filesize: 12,631,320
Nomad filesize: 12.635.004

3,684 bytes difference.

26.09a module length 00 02 56 74 = 153,204
Nomad module length 00 02 64 D8 = 156,888

156,888 - 153,204 = 3,684

I've got it. But there are 202 more differences.

2Wires · #**130** 02-20-2006, 07:45 AM

Ok,
I think I got a better idea how this all works. Still have to figure out more details.
For now my GifExtractor does what you want.
I'll work on updates to see what else can be changed.
I keep you posted.

Tino

Sponsored Links