• Welcome, Guest. Please login.

[GUIDE] Edit DRM event code to Run ELF

Started by ritza_ll, October 10, 2009, 08:06:59 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.


October 10, 2009, 08:06:59 AM Last Edit: October 10, 2009, 08:13:42 AM by ritza_ll
[GUIDE] Edit DRM event code to Run ELF

SOmetimes we want to run some ELF from phone menu, not from ELF runner
But not all phone menu can be use for running elf
You can use 'ELF Open" but the access is not fast

1.First you must activated/show what phone menu ( MobileQQ, AIM, Chat, Activation ) that you want to run the ELF. Sometimes u need seem edit and modify mma ucp icon to make your phone show that menu. Add the menu using MMA Advance Editor. In this tutor I want to make Activation List to run LRCPlayer.elf

2.Now check what happen if you run that menu (Activation List) It's show nothing happen or go to original menu ( MobileQQ, AIM, Chat ). Check the Activation List event code. Simply using p2k Tools VS.
Activation List=03FF

3.Backup your phone DRM.

Than open the *.smg file using hex editor. Find Activation List Event Code (03FF).

After you found it,

4.edit 03FF value to other value, better set to 02XX
I want edit to 02A6
Press Edit>Overwrite>Hex String=02A6

5.Save, than compile to *shx than flash to your phone
After flash, edit your elf setting.
Exp, Tunes.elf is Tunes.cfg
MotoCMD.elf is Motocmd.ini
Startmenu.elf is Startmenu.ini
LRC Player.elf is LRC Player.cfg

6.I'm trying run LRC Player from Activation List that the event code edited to 02A6, so I set LRC Player.cfg to 02A6

7.Now, install the elf, put in auto.run and check It should be work
Activation List to run LRC Player :)

By this method, you can run MotoCMD, start menu from phone menu :)
This my v3i configuration
MobileQQ=Edit to 02DC to run startmenu
AIM=Edit to 02DF to run motocmd

Thanks to Osta and Fenja from motofan

The most important you must sure that DRM event code that you edit is correct coz sometimes you'll found more than one same Hex value

To make you found the correct one,ordinary DRM event code store in begin address of CG15 and you must check the 3 bit

after the event code.

Check this, I found two 03FF, first is it

Second is it

We got this

03 FF 00 01 00 00 00 00 00 08 0E

and the second

03 FF 01 00 14 15 01 00 02 DF 12

See 14 15 is String ID for the LP that named to the phone menu, in this tutor is Activation List. U can check it by open

your LP using MLE

So, you must edit the second from 03 FF to 02 A6 :)
And by found that, u can easy edit your LP string to matched with the ELF menu



ENJOY this, tested on E398 and v3i  ::)

PDF version can be download here
EDIT: Very slow connection, cannot upload yet.



October 10, 2009, 11:04:18 AM #1 Last Edit: October 10, 2009, 11:11:10 AM by ZduneX25
Thank you for this guide ++
but I think easier:

See 14 15 is String ID for the LP that named to the phone menu, in this tutor is Activation List. U can check it by open your dnp.prf file (a/mobile) using DNP Elf Editor

Mine 1BC0 for you 1415
Z.d.u.n.e.X's Stuff: Personal Site | My skins


Thanks masta Z :)
14 15 is just to make sure u edit the correct value in DRM.
To edit the LP, is up to you what method that u want.



I´m sammdie.:D


October 20, 2009, 02:17:02 AM #4 Last Edit: October 20, 2009, 08:45:44 PM by morjul
Zdune, has PP_DnpEditor.elf operate in English?
Because it only works for Chinese language, and causes reboot.


Edit: Solved!

Edit my dnp.prf on my PC, eliminating unreadable characters, then PP_DNPEditor.elf run smoothly.