Develop Bugs

Restore the radio rom via sd card dumped from a 6515

Hi everyone,
I have an hw6515 that can not have Rom update via USB cable and Active Sync (error 606 timeout between UBS and bootloader). However, I got roms images like Bigrom or Ipaq disks for SD card that works fine, but having no Radio rom working. I have only PDA functions not Cell phone.
I see the solution from xda-developers for Blueangel xda, but it is not for my model of ipaq. Then I need to know if there is any Rom image for hw 6515 with Radio Rom working that I could get or way to upgrade Rom using USB.
Hence I would be eternally grateful if someone have a radio rom image dumped from a 6515 or is willing to help me out by extracting it from their 6515.
If successful, I will announce my findings and host the radio rom.
Thanks

Radio Stack problems hw651x why cant we get some help with this model Ipaq?
I have the same issue with a Ipaq HW6515a which thinks it's a HW6510a now.
I have been reading the forums for about a month now, and have tried almost everything to fix the Radio Stack misssing on this "HTC Beetles" device.
my best guess is that either a CID lock is preventing it, or seems to be missing the CID all together. When I do a Info 2 .. nothing is returned.
After exentisive logging and analyzing it seems that when I run a offical rom update for my device.. it enters after it enters into the radio flash by external bootloader it does a "rtask 10 1" command, then a "rinfo" command.
the whole proccess seems to stop/lockup and fail at that porint.
I have searched the whole web, many long hours looking for the p10504_BT_HP_PATCH_BETA.EXE file.. not sure what the offical name of the beetle gsm radio fix is called.
I cant seem to locate it, but would love a copy or even a log of the successfull output from running it.
the only other thing I can think of is manualy uploading the RadioOS and RadioFS to the device. which isnt hard to do, but what I lack is the adress location to place them.
Also not sure if I need to erase some areas first of if I can just lnb them up with the correct syntax.
What I have writen here is not all inclusive. I willing to be more detailed about what I have tried and failed and what seems to work, or even what I know I'm missing if anyone wants to know.
In general the HP IPAQ HW561(0,5) users need help fixing a botched radio rom upgrade that an offical HP rom release caused.
Thanks!

Reply
makebillions said:
I have the same issue with a Ipaq HW6515a which thinks it's a HW6510a now.
I have been reading the forums for about a month now, and have tried almost everything to fix the Radio Stack misssing on this "HTC Beetles" device.
my best guess is that either a CID lock is preventing it, or seems to be missing the CID all together. When I do a Info 2 .. nothing is returned.
After exentisive logging and analyzing it seems that when I run a offical rom update for my device.. it enters after it enters into the radio flash by external bootloader it does a "rtask 10 1" command, then a "rinfo" command.
the whole proccess seems to stop/lockup and fail at that porint.
I have searched the whole web, many long hours looking for the p10504_BT_HP_PATCH_BETA.EXE file.. not sure what the offical name of the beetle gsm radio fix is called.
I cant seem to locate it, but would love a copy or even a log of the successfull output from running it.
the only other thing I can think of is manualy uploading the RadioOS and RadioFS to the device. which isnt hard to do, but what I lack is the adress location to place them.
Also not sure if I need to erase some areas first of if I can just lnb them up with the correct syntax.
What I have writen here is not all inclusive. I willing to be more detailed about what I have tried and failed and what seems to work, or even what I know I'm missing if anyone wants to know.
In general the HP IPAQ HW561(0,5) users need help fixing a botched radio rom upgrade that an offical HP rom release caused.
Thanks!
Click to expand...
Click to collapse
Nice that you have much more experience than me. Just few questions:
1 - How can we update manually the Radio Rom and Radio file system?
2 - Do you know the syntax and program to do that?
3 - Is in Windos, DOS or Linux plataform?
4 - Have you tried to execute the process of decrypt the Radio Rom files and tried to map the memory?
I think I´ve ready some thing about this patch in mobility today (http://mobilitytoday.com/forum/showthread.php?t=12702). I´m about to start to analize (hexeditor) my entire rom trying to find what are the address that we should use in this case, of updating manually.

can we update manually the Radio Rom and Radio file system
Nice that you have much more experience than me. Just few questions:
1 - How can we update manually the Radio Rom and Radio file system?
** best I can tell if normaly with the offical Rom upgrade utility, just remove the CeOS and Extrom lines from the .ini file... However that is not working for me. If we knew where the radioOS and RadioFS files where to be placed in rom, we could use mtty to manualy erase the rom address areas and then upload the radio stack to that location and then finalize it by writing it to rom, probably would need to hard boot afterwards.
2 - Do you know the syntax and program to do that?
this is very rough and off the top of my head, dont attempt this.. just an basic example (taken from another thread, which I tried and didnt work for me)
open mtty
USB> password 0000000000000000
USB> set 1e 1
USB> password 0000000000000000
HTCSPass1.CMˆËHTCEUSB> erase a0040000 c80000
HTCST ÚÈÒHTCEUSB>password 0000000000000000
HTCSPass1.CMˆËHTCEUSB> erase a0cc0000 c80000
HTCST ÚÈÒHTCEUSB>password 0000000000000000
HTCSPass1.CMˆËHTCEUSB> erase a1940000 640000
HTCST ÚÈÒHTCEUSB> set 1e 0
USB>
USB>lnb c:\ipaq651x\RadioOS.nb0
Dont have an example of the output at moment.. but you need to edit the file and remove part of the begining before you are able to upload it with the lnb command. ( used a program do that for me, HX4700_BootLoader) I just used it to exit the files, it does auto try and upload them, but I dont think it places it in the correct place in rom.
USB> password 0000000000000000
USB> set 1e 1
USB> password 0000000000000000
HTCSPass1.CMˆËHTCEUSB> wdata a0040000 c80000
HTCST ÚÈÒHTCEUSB>password 0000000000000000
HTCSPass1.CMˆËHTCEUSB> wdata a0cc0000 c80000
HTCST ÚÈÒHTCEUSB>password 0000000000000000
HTCSPass1.CMˆËHTCEUSB> wdata a1940000 640000
HTCST ÚÈÒHTCEUSB> set 1e 0
USB>
Then would have to repeat for the RadioFS...
I know the address above are not correct, and my method is a bit of a guess from what I've seen from how quite a few of the other phones radio upgrade.
I have not seen how to Radio Stack Flash via SD... best I can tell we need a specail SD chip from HTC that has "special" encoding to flash the GSM Radio Rom to the phone.
3 - Is in Windos, DOS or Linux plataform?
windows for most of what I've attempted.. Well alot in the CMD prompt in windows.
Also Active sync 3.8 seems to be alot better with the 6515 then the newer version.
I know you need to have a full battery and be pluggedinto the power, also need a direct connection into the usb.. NO USB HUB in the middle..
I seen a few people who pulled the battery out for a bit.. then placed it back in.. when it got to the aline screen, they placed it into bootloader mode.. (Power-joystickDown-&-Reset) at same time.. just press the reset while holding the other too.. till the logo is in the middle and Serial is on top and .21 on bottem.. .. place it in the charger and run an offical rom upgrade.
Didnt work for me (tried like 150 times) but seems like it should.
4 - Have you tried to execute the process of decrypt the Radio Rom files and tried to map the memory?
you can use mtty to get a memory map.. didnt seem as usefull as it sounds.
I think I´ve ready some thing about this patch in mobility today (http://mobilitytoday.com/forum/showthread.php?t=12702). I´m about to start to analize (hexeditor) my entire rom trying to find what are the address that we should use in this case, of updating manually.
let me know if you figure anything out. I know there are people here who probably have a copy of the HTC Beetles GSM BT HP Radio Patch Beta that was circulating earlier this year, I would love a copy. I wish someone would just write us a patch, cause there are lots of 651x(5,0{a-?}) phone that the cellular part is missing.
Meanwhile I need to go rebuild my laptop.. I downloaded an stupid evil (HTC Atom Unlocker.exe) from the xda ftp site and it trashed the other computer I was working on. didnt get my data, just I'm at game over on that computer.. need to format and start reloading my o/s. almost want to donate my ipaq 6500 to the person who wrote the program that messed up my windows install.. then I know they would be busy for quite a while trying to get the gsm working, and have less time to try and creatively distroy stuff that is not broken.
Hope I helped sorry took a day or so..
Mb

help for dll

hallo friend, i ve a big problem on my p3300, i have downloaded program much important for my job as FIELD TEST, but on artemis does not works.
so i have read on web more more pages and i understand that the problem is a dll that in p3300 /windows there isnt: rilgsm.dll.
without this dll some port are closed on my htc i suppose com 9 and 6 (network ) so field test doesnt work propely!
can someone explane me how i can solve this problem or i can extract or add this dll.
i have actually italian wm6 official on my p3300 , but i can install also a unofficial rom with rilgsm.dll.
i wait for help as soon as possible
thanks

rilgsm.dll is in the Artemis Touch 4.01 WM6.1 WWE ROM - Lite without cube ROM as well as the other versions (full, vanilla, etc) I suppose.
But, I'm not sure that is the complete answer to your problem. I was trying to run a program which ran fine on my previous PPC using com6 but would not run on my Artemis using com4 (needed to run TomTom). Today, I found a solution here that works. It's called portsplitter. I installed it today and sucessfully used TomTom (requires com4) and the other program (requires com6) as well on the newly created com8! (see the link above to makes sense of that). Maybe what you need?
Here's another link in the Artemis forum discussing this issue.

runningtiger said:
rilgsm.dll is in the Artemis Touch 4.01 WM6.1 WWE ROM - Lite without cube ROM as well as the other versions (full, vanilla, etc) I suppose.
But, I'm not sure that is the complete answer to your problem. I was trying to run a program which ran fine on my previous PPC using com6 but would not run on my Artemis using com4 (needed to run TomTom). Today, I found a solution here that works. It's called portsplitter. I installed it today and sucessfully used TomTom (requires com4) and the other program (requires com6) as well on the newly created com8! (see the link above to makes sense of that). Maybe what you need?
Here's another link in the Artemis forum discussing this issue.
Click to expand...
Click to collapse
thanks for answer, maybe can you explane how i can set ports?
i need only field test works , it is only excutable file, no need installation, there isnt configuration to do , is very simple, maybe i can send to ou the file to test.
i wait for help thanks again

pls help me

I don't know how to copy just the rilgsm.dll file you want. It's part of the rom and so access is denied on both the phone and via activesync.
Also, I don't know how to set ports. Did you try the portsplitter application I linked to above? I am using an application on my phone right now that uses port 6 thanks to the portsplitter application. Try it!
Upload your application here or post a link, and I'll see if I can give it a try.

i ve uploaded file here: http://www.megaupload.com/it/?d=ZL2OLMS0
please try it, anyway i dont know how to use port spkitter right mode, maybe i wrong to setup it
for it i need help

no one answeres.........

what's up with the (mad) face man? I have been trying to help you. I had a busy weekend and we are in totally different time zones - so relax.
Here, I will spell out very clearly how to use portsplitter...
Artemis settings:
start menu\settings\system tab\external GPS
programs tab...com8
hardware tab...com9/baud 4800
access tab...tick (select) manage GPS automatically
PortSplitter settings:
input: using your keyboard type COM8
baud: select 4800
output: select com6 and press 'add' then press 'start splitter'
the program will then be running in the background
Now go to your fieldtest app and set it to use com6 at 4800 baud. Or, if you know it uses com6 by default, just open it and see if it works.
If it works, you have two options. You can either start portsplitter each time you want to use it. Or, go back to the portsplitter app and tick 'autostart' so a link will be placed in the \windows\startup folder and you won't have to start it manually each time you reboot. It will always just run in the background. (edited to ad...) Actually, selecting 'autostart' only saves your settings so each time you open portsplitter it will run on com8 etc. You need to manually put a shortcut in the windows\startup folder for it to actually start up each time you turn your phone off and back on.
Now, if you use the portsplitter AND any other GPS programs (i.e. TomTom), you'll need to set that program (i.e. TomTom) to use com6.
In TomTom you do this by pressing the lower right hand corner of the screen where the clock and signal strength bars are. On the next screen press the right hand side of the screen where the battery status and signal strength bars are. Now press the lower left corner button called 'configure' and choose 'other NMEA GPS receiver' and press 'select'. Set the baud rate on the next screen for 4800 and press 'done'. Finally, press 'com:6 Port Splitter' and press done!
It works fantastic on my Artemis. I have another GPS program and I set up the GPS communications to use com6 at 4800 and it works like a charm as well. I've set PortSplitter to autostart after each boot, and I haven't given it a thought since. It just works.
I tried to download your app but there is a message that says "The file you are trying to access is temporarily unavailable."

I have fieldtest running on my Artemis right now. It looks like it auto sets itself to refresh every 3 seconds. The right hand side of the screen is called 'GSM' the left is called 'data'. Almost all data fields say N/A except for RSSI and Rx Quality. So, it looks like it runs, but does not work.
Probably due to this:
"fieldtest is not compatible with 9100/Prophet/Artemis. For those devices you need to use GSMTestMode.exe"
However, just in case you might still find this info useful...before trying fieldtest on my phone, I searched what it was about and found the info here. You may have already read it, but if not, there you go. BTW, (if you DID read it) you could have just directed me there to download the program rather than how you did it.
Lastly, I tried the registry edit:
HKEY_LOCAL_MACHINE -> SOFTWARE -> HTC -> EngineerMode -> BuildInEngineeringModeApp = 1
It changed nothing, the program is still mostly full of N/A responses. Also, ran the program from \windows and got the same responses as when I ran it from the memory card.

GSMTestMode.exe exists on my Artemis in the \windows folder.
To use it check this registry setting:
HKEY_LOCAL_MACHINE -> SOFTWARE -> HTC -> EngineerMode -> BuildInEngineeringModeApp = 1
Mine was 0 originally. I changed it to 1 and soft reset the phone. Then, opened the \windows folder and clicked on GSMTestMode.exe and all the info shows up instantly.
That was with portsplitter running in the background. So, I disabled portsplitter, soft reset and clicked on GSMTestMode.exe again - and it worked. Using/not using portsplitter made no difference. I did not check the values reported since I don't care enough. The rest is up to you.

thank you very much runningtiger, your info were very very precious for me, now works all fine.
only 1 problem: after i edit value from 0 to 1 in registry, gsm test mode works fine , but if i reboot artemis or shutdown and restart registry value back 0.
is there any way to solve?
bye and thanks again

This isn't an issue on my phone. I made the registry change using TotalCommander and used the exit command on the menu to close TotalCommander (rather than the X in the upper right hand corner). Then, I soft reset by pressing the reset button with the stylus. When my phone was ready to go again, I opened GSMTestMode.exe used it, closed it, then reset my phone again, used GSMTestMode.exe again and it worked again. So, the registry change sticks on my phone.
Usually the reason registry changes don't stick is not enough time passed before soft-resetting the device. Some registry changes are ready to use immediately, but others take a moment to actually write to the registry and if that process is interrupted then the change isn't actually made.
Three thoughts on your phone...
1) did you wait about a minute after making the registry change before soft-resetting your phone? This allows plenty of time for the change to be actually written to the registry.
2) wait a minute after doing the registry change, then try instead of soft-resetting doing a full power down by holding the power button until you are asked if you for sure want to turn off the phone and then let it sit a minute (off) before starting it up again?
3) can you try using TotalCommander to make the registry change like I described above?

runningtiger said:
This isn't an issue on my phone. I made the registry change using TotalCommander and used the exit command on the menu to close TotalCommander (rather than the X in the upper right hand corner). Then, I soft reset by pressing the reset button with the stylus. When my phone was ready to go again, I opened GSMTestMode.exe used it, closed it, then reset my phone again, used GSMTestMode.exe again and it worked again. So, the registry change sticks on my phone.
Usually the reason registry changes don't stick is not enough time passed before soft-resetting the device. Some registry changes are ready to use immediately, but others take a moment to actually write to the registry and if that process is interrupted then the change isn't actually made.
Three thoughts on your phone...
1) did you wait about a minute after making the registry change before soft-resetting your phone? This allows plenty of time for the change to be actually written to the registry.
2) wait a minute after doing the registry change, then try instead of soft-resetting doing a full power down by holding the power button until you are asked if you for sure want to turn off the phone and then let it sit a minute (off) before starting it up again?
3) can you try using TotalCommander to make the registry change like I described above?
Click to expand...
Click to collapse
i resolved upgrading to wm6 official and now works all fine, so my friend thanks again for support and precious infos

[REQ] Wake On Lan

Hi Guys & Gals,
Quick question.....
Has anybody come across a Wake On Lan app for WM6. I have a small home network that I start up from a central PC using Wake On LAN function in the system BIOS. I would like to be able to start my PC's from the Blackstone over my WLAN.
Everything within the LAN & WLAN is running reserved DHCP from the router side so all IP's are constant including the Blackstone.
Cheers for any replies.........
Gilgamesh.......

I don't know if any solution exists but I've read a tutorial (in french sorry) on how to make a wake on line application for wm
http://blogs.msdn.com/pierreca/archive/2009/03/19/wake-on-lan-depuis-votre-t-l-phone.aspx
Hope that could help you

Try this..

jpl69 cheers.........The app works like a charm but is a little basic. Needs the full MAC to be entered manually each time.
What would be really nice is some way of associating the MAC to a short meaningful name that could then be listed so it could just be selected from a list rather than enter the full MAC each time. In this way multiple PC's coud be listed.
While we're at it would also be nice to have a standby button as well so PC's within the LAN could be started and shut down form the app.
I've never written an app before and would either like a few pointers to see if I could do it or see if anyone out there would consider building on the app already posted.
Any suggestion welcome.......

Besides developing an app to that (no time) i could sugest make several shortcuts using resco and parsing the mac as parameter. At least you only had to make it once.

Thanks jpl69 for your continued replies...much appreciated.
I have seen Resco but not realy sure which component to download to edit the exe. I have used PEG (parsing) in other apps at work but just need something to get me started on WM6. I could the replicate the exe per MAC and create a single file or each PC

Might be worth looking at vxUtil: http://www.cambridgevx.com.
This has Wake-On-LAN (among other things), and I think it remembers previously entered values. You can't give things memorable names but it might help.

Gilgamesh1066 said:
Thanks jpl69 for your continued replies...much appreciated.
I have seen Resco but not realy sure which component to download to edit the exe. I have used PEG (parsing) in other apps at work but just need something to get me started on WM6. I could the replicate the exe per MAC and create a single file or each PC
Click to expand...
Click to collapse
i think he means, like, create new shortcut with parameters. Just for example the same as on pc creating a shortcut to c:\quake\quake.exe and use the string "c:\quake\quake.exe" +bind mouse1 shoot +set mode opengl blablabla

Again thanks for the continued replies.....
Downloaded vxUtil and had a play and it does have a working WOL option but again it's messy and not really the simple solution I was looking for. It does have some other features (ping/sweep, tracert & DNS lookup) but I don't really have a use for these.
Still really after a single icon to start each PC as per the shortcut suggestion above.
All suggestions still welcome and appreciated.

I will just try to clarify what was the idea of jpl69.
Please read the README file included in the attached archive (posted by jpl69).
It says:
"Command Line:
===============
Please use as following:
WakeOnLan.exe [MACAddress]
MacAddress can be either 01E4523AEE22 or 01:E4:52:3A:EE:22 "
Now with Resco Explorer (or with Total Commander, which is freeware) one can make several different shortcuts to WakeOnLan.exe, each ending with the specific MAC.
In Total Commander, after creating the shortcut, one must select it, choose "properties", then "shortcut" tab, then manually add the MAC at the end of the "target" line.
Copy the ready shortcut several times, name the new copies whatever you want and place those shortcuts in a folder. Dont forget to change the MAC for each machine.
Hope it helps.

Now I get it......Sorry for the slow uptake but been a busy boy and head has been fried by other things. Will have a play tomorrow and post back results.
Many thanks..........

I dont know if you still looking to do this but I got this working & figured I would reply here for future reference.
First i have a linksys DD-WRT router, so I followed these steps:
http://www.dd-wrt.com/wiki/index.php/WOL
Then I downloaded the attached cab & its one click & works great!

RichTJ99 said:
I dont know if you still looking to do this but I got this working & figured I would reply here for future reference.
First i have a linksys DD-WRT router, so I followed these steps:
http://www.dd-wrt.com/wiki/index.php/WOL
Then I downloaded the attached cab & its one click & works great!
Click to expand...
Click to collapse
I have been using the WakeOnPocketPC from Depicus happilly with WM 6.1. Now, after upgrade to WM 6.5 (Dutty ROM Leo Holy Grail), the cab fails to install ("...installation was unsuccessful.")
Any other program with capability to send WOL packets to a particular IP address (and not just broadcast over LAN)?

Although this thread is about one year old, before I developed my WoL everywhere program, I searched for programs like mine here and came to this thread... None of the programs I've found fit my requirements, so I made a program myself...
So I hope your search is over and you've found what you need with my little WoL everywhere... you can download it here:
http://forum.xda-developers.com/showthread.php?t=695524
Greetings @ all!
LichtiMC

Create a shortcut to WakeOnLan with a MAC address
Hi,
I'm pasting to this old thread since I found the WakeOnLan tool here and want to share my tips with others.
If you want to create a shortcut so that you have a separate executable (say in your Start Menu) then follow these steps:
Install WakeOnLan from the above link. I put it in "\Program Files\WakeOnLan\WakeOnLan.exe"
Browse to this location with explorer on your PPC. Select the WakeOnLan executable and click "copy"
Browse to where you want the shortcut to appear:
"\Windows\Start Menu" will show in your start menu
"\Windows\Startup" will be run when you reset or power cycle the device
"\Windows\Programs" will apear in your Start Menu > Programs folder
"\Windows\Settings" will appear in your system settings
Select on some empty space (not an existing file) in your chosen folder and choose "Paste shortcut"
Use a text editor on Windows / Linux to edit this new file, or one on your device (I didn't have any that would open on my device so I copied it to Linux, edited in emacs, then copied it back)
Edit the line that looks like:
Code:
40#"\Program Files\WakeOnLan\WakeOnLan.exe"
essentially this is a character count, a "#", the location the shortcut points to, and arguments. Add your MAC address like this and take note of the quotes:
Code:
58#"\Program Files\WakeOnLan\WakeOnLan.exe" AA:BB:CC:DD:EE:FF
count the characters of the shortcut, mac address, and space, then add one. This is your new number (in my case, 58).
An easy way to do this is to use "wc" on Linux:
Code:
echo "\Program Files\WakeOnLan\WakeOnLan.exe AA:BB:CC:DD:EE:FF" | wc -c
57
(remember to add 1!)
Now you can repeat the process and paste as many different WoL shortcuts as you like! I've made just one and called it "WoL MythTv" to wake up my media centre at home. Neat
I'll post my sources in the next post since new users aren't allowed to post links...

Owner's info

Why can't we insert the owner's info in the newest roms (23025-23028)?
Remind that some software can´t be registered without that info...

I don't have one of these versions flashed right now, but check your registry under :
HKEY_CURRENT_USER\ControlPanel\Owner

ricardo1976 said:
Why can't we insert the owner's info in the newest roms (23025-23028)?
Remind that some software can´t be registered without that info...
Click to expand...
Click to collapse
One other thing you could do is start Notepad on you desktop computer and put the following in there (this works on 6.1, and "hopefully" might work on 6.5 but I can't verify it as never tried)
20#ctlpnl cplmain.cpl,2
Save the file, rename it to have a .lnk extension to the end of it (i.e. myfile.txt now becomes myfile.lnk). Copy this to your device (c:\windows\Start Menu\Programs) and try and open it off your Start menu. I would recommend if it's something you'll use often (as a workround) because the Owner Icon under Settings, Personal is gone (which is bizarre!) use Restart (credit to Showaco) to give it a better icon (search for Restart in forums).
You can do it the registry way but a couple of the fields might give you a problem as they're binary fields although it might be fine!
I did a search and found a thread on it here : http://forum.xda-developers.com/showthread.php?p=1646851#post1646851

WINCE 5 PNA unlock - MD5 hash for multiple files

I want to unlock my PNA GPS device – Alpine PND-K3. It’s a WinCE 5 device, and it runs only one application – PocketMap Navigator- from 4GB internal flash.
My goal is to reach WinCE Desktop. I tried different combinations of hardware buttons – no luck.
It does not start any application from SD card, I tried all possible unlockers.
ActiveSync does not see the device.
But the device exposes 2 USB mass storage drives (100MB each) when connected via USD to PC. First drive contains PC application, which downloads and unzips update file to second drive. Then PC application asks to disconnect USB, the device sees the update and updates itself. PC application (the updater) is very simple NET app and reflector did not reveal anything useful – it just downloads and unzips.
Here is the structure of update:
K3\chain.bin
K3\chain.lst
K3\EBOOT.nb0
K3\NK.bin
K3\TINYNK.bin
LITEON\CK5052_ROMRAM_RLS_PARROT.plf
$FileList.txt
$md5.bin
AlpineTool.exe
Interop.Shell32.dll
Navi090428.CAB
PND-K3manual.pdf
VERSIONS.txt
Everything under K3 folder is WinCE update, Liteon – Bluetooth, Navi090428.CAB – Pocket map update, AlpineTool.exe, Interop.Shell32.dll – the update app, which runs under PC
My idea is to modify Navi090428.CAB to replace PoketMap executable with explorer.exe or something, but update failes, and main reason I believe is MD5 checksum.
There is a 16 bytes file - $md5.bin. here is the content - >о?д?ДД¤■Н♣K♂mа▼, HEX view - 3E EE 9C E4 9D C4 C4 A4 16 CD 05 4B 0B 6D E0 1F. Probably HEX view represents the real MD5 – am I right?
I used the original update, but modified $md5.bin file and it failed with the same message – so the device definitely checks MD5.
That MD5hash does not match any MD5 hashes of other files, so my assumption is it somehow represents hashes of all files. Similar named file -$FileList.txt – contains list of all files in the update, so it might be used in MD5 calculations.
I checked the Internet, but all I found was hashes for each file, not for the list of files.
So my issue right now is to how calculate one 16 byte MD5 hash for group of files. Could anybody help, please?
Thank you

Please be aware that these forums are for Windows Mobile devices, not Windows CE in general.
It is unlikely that you can convert (or "unlock") your PNA into a normal Windows CE device merely by using a .cab; I recommend trying to find a similar forum for the brand of your PNA and asking on there