Tutorial | Customizing W810 with FAR+SEFP, Without bruteforcing! + Works with other models too! Options

[pisanggoreng]

for all ye n00bs:

HowTo customize your w810 without bruteforcing

DISCLAIMER: I am not responsible for your actions. Use at own risk. This cán damage your phone.

BTW: This trick also works for SE w300 & z550 phones, but of course use other MAIN-fw files.
If you do it right, your settings/contacts, pictures won't get lost.
Remember, don't flash your filesystem (FS or .fbn), as it will overwrite your whole file system.

Context

First of all, a little story about how the phone works and some explaining terms:
Your phone's memory consists of (relevantly) two area's: FLASH and FS:

• FLASH houses the MAIN firmware area. This is where XS++ flashes the MAIN firmware (.mbn file) to.
• The MAIN fw is the piece of software where all software(i.e. walkman, camera, menus) is coded.
  This is hard to edit, though through patching MAIN firmware some minor things can be changed.
  FS stands for file system. Here are the files which the MAIN firmware uses (drivers for camera, sound, display etc.).

For W810i phones, you can currently only edit the FS part. Editing the files in the file system (FS) is possible in two ways: using XS++'s FSX function (a), or with FAR(b):

1. XS++ is an easy program where you can flash the MAIN and FS areas. The FSX function enables you to copy files to the file system, though for CID49 phones this involves bruteforce,which takes a lot of time. So there's another way to copy files to the file system WITHOUT bruteforce:
2. FAR is a program where you can manage files. SEFP is a plugin for FAR, enabling you to manage files on your Sony Ericcson phone. Recently, den_po wrote a new version of SEFP that enables you to enter the FS of a CID49 phone, though with a workaround: First you need to flash your MAIN with a fake MAIN fw, a breakloader (to get easy access to the filesystem without bruteforcing). Now you can enter the file system using FAR & SEFP and edit the files you want. Finally you need to flash your MAIN back with a real MAIN fw (because the breakloader is still loaded in your MAIN area).

Now you know how to replace certain files (for example: camera driver) in your file system. But when you want to ged rid of EVERYTHING, like the vodafone/tmobile icons/links etc, you need to unbrand your phone. This is pretty risky, and you might lose support from your provider, when they find out you unbranded your phone illegally. Unbranding is flashing your phone with original firmware from sony ericcson (not edited by vodafone/tmobile). When you unbrand, you need to flash the MAIN area (with a MAIN fw, a .mbn file) and the FS area (with a FS fw, a .fbn file). Important: After flashing the FS, you always need to customize the file system, or else you will get a Configuration Error. Customizing is like intializing the FS. Basically it's only copying some customization files to a certain place in the file system (tpa/preset/custom). You can do this in two ways:

1. with XS++ by putting a check at Customize file system (note that this involves bruteforce!), or
2. by manually upload the customization files using the FAR + SEFP method. See below for detailed instructions on how to unbrand.

This tutorial explains step-by-step how to use FAR + SEFP to edit the files in your phone's file system. So now you know the context.

Premeasures:
1. install USB Flash drivers (by installing SEUS for example)
2. install FAR-manager 1.70 here
3. extract the SEFP plugin (first SEFP v01004, then SEFP v010051 over it) to the plugin folder (C:\Program Files\Far\Plugins normally)
4. Extract den_po's CID49 pack db2010cid49_4_alpha.rar.zip to FAR\plugins
5. Get XS++ and a proper MAIN firmware(use same version as your FS !), download here:
   -download the latest XS++ here
   Firmwares can be found here:
   - topic: Files Upload Thread
   - archive: http://xsse.4shared.com/ pass = se-nse
   - site: WWW.IPROTEBE.CZ
   - else check the Stickies in the Firmware & Flasing subforum here on SE-NSE...
   
6. Remove your SIM-card and memorystick, just in case..
   
   Flash break-in loader:
7. Open XS++, connect, ONLY flash your MAIN with w810_p3k_dcu.49R.ssw (located in CID49 package).
   
   
   
   This is a break loader. If you flash this into your phone, your phone cannot be turned on anymore because it's not a real firmware, but only a workaround intended to access the filesystem without bruteforce (using den_po's CID49 pack for the SEFP plugin for FAR-manager). It's only 5 flash blocks, should not take more than 30secs. Just choose STOP if it hangs on 100%.
8. Remove your battery for 5secs and after that put it back in.
   
   Customizing with FAR+SEFP:
9. Open FARmanager, and press F11
10. Choose SEFP plugin
    1. If you get the error: "Unknown exception", Exception address: 0x7C812A5B...... The plugin will be Unloaded!
       This is a bug. It's because you don't have any COM-ports, so create a fake COM-port connection. I did it with my BT Dongle. Alternatively, here is a mini howto create a fake COM-port by Cold & Flu Relief.
    2. if you get the error: "<BIldr> can be used with Service Cable ONLY".... browse to the SEFP folder and patch sefp.dll with sefp0.10.0.51patch.exe.
    3. if you still get any errors, and just want a working phone back, skip this part and proceed at step 16.
11. Opening SEFP:
    
    
    
    
    choose Bootscript: w300_w810_z550_cid49 and press Enter The Matrix.
    After a while you'll be in the w810i, if not, try again, check settings above.
12. Choose /FS/, now you'll can customize everything you want; camdriver/ audiodriver/ etc.
    See below for some tips, or check out Links.
13. When done, Go back to root (choose '..' all the time) until FAR asks to exit CSFS loader, choose yes.
14. Exit FAR-manager
15. Disconnect cable and remove your battery for 5secs.
    
    Flash real MAIN:
16. Now go back to XS++ and connect your w810i.
17. Now only flash your real MAIN file (i.e. W810_R4EA031_MAIN_GENERIC_HN_RED49.mbn, 344 flash blocks).
    Don't check Customize File System! This will only take about 2 minutes.

If all went right, you're done, you have customized your w810i WITHOUT bruteforce!

credits go to den_po, Jagheterfredrik, Darkmen and other SE-gurus

Links:

• Another FS & MAIN firmware archive
• more info: den_po's topic DB2010 CID49 with SEFP
• topic First Experinces with a W810i
• topic W810i Additional Flash Menus
• spanish archive with many customfiles here
• This was a link to warez-site. illegal. sorry

extra: Unbranding your phone (getting rid of tmobile crap, enabling flash menu's etc)

1. Backup your files (contacts, settings, sms)
2. Download a FS (.fbn) file too (from topic: Topsony Files, or http://xsse.4shared.com/ pass = se-nse). Choose your own region, of course.
3. Also download a custompack (the customization files) for your own region. This must be compatible with your FS region.
   You can find them in the Custompack Library topic or also in http://xsse.4shared.com/ pass = se-nse.
4. Follow the tutorial above.
5. After step 7 in XS++, also flash your filesystem with the FS file (.fbn). Don't check Customize File System!
6. When you've entered your phone with FAR at step 13, browse to /tpa/preset/custom and copy all contents of your custompack in here, including subfolders. If you don't do this, you *WILL* get a configuration error. Make sure that customize.xml is copied, as this file is needed to finalize your phone.
7. Proceed with the tutorial above. Remember, do not flash your FS again, you'll lose the customization.

This post has been edited by pisanggoreng: 2007-08-20 19:43

[pisanggoreng]

here a list of things you can customize:

• installing a custompack:* Do THIS when you get the configuration error!*
  /tpa/preset/custom
  Get them from topic: Custpack Library.
  Custompacks contain files that finalize your fresh filesystem (FS). Customize.xml is editable with notepad.
  In theory you can use any custompack, you just need the right one so that SEUS knows from which country your phone is (if you plan on updating your phone with SEUS, hahah)
  
  
• replace camdriver:
  /ifs/settings/camera/camdriver0.dat
  This is the ZUZA v1 camdriver:  camdriver0.rar ( 3.49K ) Number of downloads: 2673
  
  Most people like ZUZA or SUPERCAM camdrivers the best. more info:
  http://www.topsony.com/foro/local_links.php?catid=114
  http://forums.se-nse.net/index.php?showtopic=5863
  
  
• replace audio drivers:
  ifs/settings/acoustic/
  Here are the acoustic drivers stored. Just overwrite them with custom maid ones; you can use these:
   acoustics.rar ( 46.71K ) Number of downloads: 2737
  Or you can use alternatives like qwerty12 or mongouse loudv2, check here:
  http://forums.se-nse.net/index.php?showtopic=5863
  
  
• add extra flash menus: (.swf files)
  /tpa/preset/system/desktop/flash
  download them here: http://www.sendspace.com/file/b1beya
  
  
• change your mediaplayer: *note: this sometimes causes errors like disabled flash menus/thumbnails etc *
  /tpa/system/multimedia/mp
  Put certain gif images in this folder, get them from topsony
  more info: topic: Pimp your Mediaplayer
  
  
• replace some system sounds:
  /tpa/preset/system/sound
  i.e. camerafocus.3gp, camerashutter.3gp
  
  
• remove locked java files:
  /tpa/preset/system/ams
  /tpa/preset/default/java
  
  
• change bootup/shutdown sounds/picture:
  /fs/tpa/preset/system/settings
  SPLASH - bootup picture: copy to your PC, edit PNG with paint/photoshop. And then, copy back
  STARTUP_SOUND_SEMC.mp3 - hmm
  SHUTDOWN_IMAGE_SEMC - animated GIF file (no extension)
  STARTUP_IMAGE_SEMC - idem dito
  
  
• remove locked music/pictures:
  /tpa/user/audio
  /tpa/user/audio/Ringtones
  /tpa/user/image
  
  
• editing layout.xml
  /tpa/system/layout/layout.xml (press F4 to edit - in FAR)
  Removing Operator Text:
  1. search for the object StatusIndication.
  2. set TitleMode to '4'.
  
  You can also set another font by editing certain values (or replace with another file).

Attached are 6 themes that use flash menus. Have fun
 themes.rar ( 1.81MB ) Number of downloads: 5942


This post has been edited by pisanggoreng: 2007-08-20 00:04

[pisanggoreng]

oh yes, if you screwed up something, or want some original file back:

1. download the FS you want from topsony, i.e. W810_R4ED001_FS_EUROPE_3_RED49.fbn
2. download MAIN2RAW and SEFSTOOL attached to this reply
3. extract them in some temp folder, i.e. C:\w810i\
4. rename (if you like) the fbn file for easy-typing purposes only, i.e. W810i.fbn
5. go to MSDOS (type cmd) and go to temp folder (type cd\w810i)
6. type 'main2raw <name of fbn file>', i.e 'main2raw W810i.fbn'
7. press enter to quit main2raw. It now created a file W810i.RAW.
8. type 'sefstool <name of raw file>', i.e 'sefstool W810i.RAW'
9. sefstool now created a folder with all standard GENERIC files. Browse them to find your original file.

more info at topic K790/800 Filesystem Parser.

credits go to darkmen!

This post has been edited by pisanggoreng: 2007-04-03 15:29

Attached File(s)

 main2raw.zip ( 27.05K ) Number of downloads: 1520
 sefstool.zip ( 34.15K ) Number of downloads: 1652

 

[jazzaj]

Fantastic work

I've wait for long time to have such a clear tuto about customizing w810 ! Many thanks too to Den_po and Jagheterfredrik, both incredibles SE Sorcers !

[xFoX]

Finishing Flash = 100%?

and i think i bricked my phone cuz of this .

This post has been edited by xFoX: 2007-01-27 18:33

[xFoX]

# Flash real MAIN:
16. Now go back to XS++ and connect your w810i.
17. Now only flash your own MAIN file (344 flash blocks), takes about 2 minutes.

could someone tell me how and where to get "your own" MAIN file?

[Primie.uk]

Brilliant, wonder for ages how people were modding there W810i's without bruteforcing and all along the information was here on SE-NSE, i just didn't look hard enough!

Many thanks for the easy-to-follow tutorial!

Primie.uk

Damnit: I killed my fone

This post has been edited by Primie.uk: 2007-01-27 18:46

[superman2002ai]

could someone tell me how and where to get "your own" MAIN file?

You dont, You just note down your current main firmware version and region (example R4DB005, America_2) and get the generic firmware from topsony or seuniverse.
For example: I use: W810_R4DB005_MAIN_GENERIC_HN_CID49.mbn (originally my w810i came with R4EA031 Cingular)

[xFoX]

mine's CHINA and R4EA031.. so do i get CHINA_HN or GENERIC_HN?

and my files wont go missing unless FS is flashed right?

This post has been edited by xFoX: 2007-01-27 18:56

[xFoX]

alrite!!! got it all back on, thanks superman2002..!!

[godmode]

in Canada which main firmware is used?

This post has been edited by godmode: 2007-01-28 03:13

[ikjadoon]

I love it. Clear and concise.

I'm glad this is working great. So this is for adding custom menus or audio drivers but you can't fully flash a phone, yet can you? Like Main/FS/Custom Pack?

~Ibrahim~

[Karun]

gr8 work! Now even the w810i users wont be left out of the party!

[hab_ull]

i download "W810_R4EA031_MAIN_GENERIC_HN_RED49.mbn" (21mb) can i use this to reflash.
will my contacts messeges settings lost?

[Eggy]

I forgot to mention I pinned this, nice work Dutchie

[skindeep]

I love it. Clear and concise.

I'm glad this is working great. So this is for adding custom menus or audio drivers but you can't fully flash a phone, yet can you? Like Main/FS/Custom Pack?

~Ibrahim~

just flash main/fs to unbrand your phone with xs++. after that, flash w810_p3k_dcu.49R.ssw as main, use farmanger to finalize and reflash orginal main back

@ hab_ull

if you had R4EA031 before, then you can reflash W810_R4EA031_MAIN_GENERIC_HN_RED49.mbn as main. your contacts/sms wont get lost.

[hab_ull]

just flash main/fs to unbrand your phone with xs++. after that, flash w810_p3k_dcu.49R.ssw as main, use farmanger to finalize and reflash orginal main back

@ hab_ull

if you had R4EA031 before, then you can reflash W810_R4EA031_MAIN_GENERIC_HN_RED49.mbn as main. your contacts/sms wont get lost.

@ skindeep
Ya i have R4EA031 in my W810

This post has been edited by hab_ull: 2007-01-28 13:14

[harry23419]

when will it be possible to enter in the FLASH part.....?

[skindeep]

only den_po knows

[pisanggoreng]

I forgot to mention I pinned this, nice work Dutchie

yeah thanks for doing that

btw, i was wondering:
If one wants to unbrand his phone, can't he just:
1. flash w810_p3k_dcu.49R.ssw as MAIN & a FS as FS
2. not choose to customize
3. after that, upload the custpack manually with FAR.
4. then flash a real MAIN as MAIN??

some daredevil out there who can try this??
edit:

just flash main/fs to unbrand your phone with xs++. after that, flash w810_p3k_dcu.49R.ssw as main, use farmanger to finalize and reflash orginal main back

@skindeep: did you try that and did it work?

This post has been edited by pisanggoreng: 2007-01-28 17:11