Develop Bugs

WM5 on BA - Why Upgrade?

In all the excitement of the hacked ROM coming out - I need to ask one question. Why should I upgrade my BA to the WM5 ROM? What benefits does it offer over the existing WM2003SE ROMS?
I'm tempted like everyone else just to bung it on and update it every day for the next few weeks until it's working properly - I'm also tempted to wait for the official O2 1.4 ROM that works properly.

I must admit that I'm going to wait before upgrading to WM5. I see no compelling reason to upgrade other than "beacuse I can". I wouldn't necessarily wait for the official O2 1.40 ROMs though, you might be waiting forever. I use the imate 1.40 ROMs with no problems.
Having said that, I hope to get hold of a "spare" Blue Angel this week & might experiment with WM5 on it

The existing 1.4 ROMs are annoying for me because I have problems with GPRS and disconnections and a few other niggles that are hard to live with - whereas tghe O2 ROMs have these niggles fixed - hence the wait for the O2 1.4 ROM.
I was thinking of tinkering with the WM5 ROM, but not for a little while until a few things are sorted out, just to see what the interface was like but if it's too much hassle.....
I've got my heart set on an O2 Exec which looks like it might be out soon.

I use it and apart from lack of camera function and a longer boot up time, I MUCH prefer it over 2003SE. First it has a revamped design and it makes 2k3se looks boring.
OK, there are some stability issues but what can you expect for a leaked rom?
If you don't vitally depend on your BA i'd give it a try, and if you don't like it, get activesync 4 and flash back.

Now, seeing how we came accross WM5, is there reason to believe we will be getting the FINAL version of the WM5 firmware for the BA??
In other words, is Mamaich's patched WM5 version the best we're going to get??
What do y'all think?

man(darkblak) is askins simple...if someone knows what benefits gets with wm5...if someone had experience should tell us...im interested in that to... will be blueangel with wm5 faster or slower how will be in performances and itc...
10x in advance

WM5 on SX66 (Blue Angel)
I updated my SX66 to WM5 before the ROM was patched (by Mamaich)... and then spent the next few days working on the issues of performance/sound.
With sound disabled (prior to patch), the device was undoubtedly faster. I made registry changes to increase cache size, disable animations, etc. but I had made those changes in 2003SE as well... and WM5 still outperformed it by a significant margin.
As for the areas not dealing with speed/performance, the new OS requires some getting used to. Hardware buttons that are unassignable (old Windows and OK buttons are softkeys now) and a few other issues (such as GPRS on only when activated by Internet Explorer and Bluetooth shutdown on power off) were a little unnerving, but nothing that would make the OS unusable.
What makes WM5 indispensable is PERSISTENT STORAGE. This is the Holy Grail for all Windows Mobile devices prior to this OS. When your battery dies and your backup battery dies, you must re-load all of your aftermarket software and PIM info. Software such as Sprite Backup made this process easy... but what if you're mid-flight to another country without a laptop and your PDA crashes? This is not an issue with WM5. All after-market software and PIM data is stored to ROM (software install location is optional)... which means that it is stored in non-volatile memory. It is not lost during power/system failure. What this means in terms of device security is that the person that finds your PDA on your desk at work cannot simply "hard reset" it to remove all of your info and use it themselves... Your password/PIM data and software will still be secure/in place and only downgrading the device to 2003 and repartitioning the ROM will clear it.
At the moment, I have no issues with WM5 on my SX66. Editing the camera keys in the registry solved the issues with sound and there are plenty of patches available to reconfigure the hardware buttons, etc. But I'm learning to like the OS as shipped...
I've been using Windows Mobile for more than three years and this iteration is undoubtedly worth the upgrade. If you have the time and patience to read through these forums, make an installation checklist and then follow it to do the upgrade.
My checklist would read:
-Download patched WM2005 ROM
-Download MaUpgradeUT_NoID.exe
-Download all patch CABS
-Download DOC tool (Disk On Chip partition tool)
-Run DOC tool (if successful, the ROM size is now ~63MB in control panel)
-Copy and rename the HTCRUU.dll and HTCRUU.conf files to RUU.dll and RUU.conf
-Run MaUpgradeUT_NoID.exe (if the first try is unsuccessful, put device into bootloader mode. Rec/Media/Power/Reset all at once)
-After upgrade check functionality BEFORE applying any patches, there are as many differences between just SX66's as there are between all of the Blue Angel devices... some patches may NOT be required.
-Apply patch CAB's
-Apply registry edits suggested in the forums for performance improvement
I hope this enlightens those waiting to see the efficacy of this ROM upgrade. I have had a good experience with WM5, in spite of the initial problems. I'm happy with its performance and will not downgrade to 2003SE unless I screw up WM5 bad enough to make it necessary to re-partition the ROM... then I'll go right back to WM5.
Cheers all...

MRwheeler2: Where is the edited rom on the FTP site? I cannot find it where it says it was, BA/test or something like that. Where can I get it from
Also, I have noticed that using the standard rom I cannot change bootup images. It is constantly the stupid colour thing (how about that for a name!) and it's more like a TV test screen.

Download locations for patched ROM
Sorry for the delay... I was out.
You can download the patched ROM from: ftp://xda-developers.com/Uploads/Blueangel/WM5Pack/
There currentyly isn't a fix for the boot screen... I'm looking right now at the MSDN site for CE5.0 and searching their registry settings for Bluetooth and boot screen. Nothing yet... I'll post a new thread if I figure it out.
Hope this helps...

any reason that I'm getting permission denied errors?
I'm logged in but can't do it withe IE or FF, and firewall on or off.
One says permission denied, the other says can't find.

Download locations for patched ROM... continued.
Looks as if it was moved... Try the BlueAngel/BA_WM5/Shipped_Extracted_Updates folder and look for WM5_pack_v1.rar
That should do it...
Good luck.

Still says 530 permission denied. I tried looking in some of the higher level folders and still no joy.

Download locations for patched ROM... continued.
A 530 error is an incorrect login... Go to the "File" pull-down in Internet Explorer and click on "Log In" then when prompted, enter xda for both user name and password.
The default setting for Internet Explorer is to log in anonymously... most non-public FTP sites require some type of non-anonymous log in to ensure that the user has been referred from a site and not someone searching FTP servers.
Once you've logged in, you should be able to see a list of folders/files. You can use the "Folders" button if you would like to see a directory tree in the left panel.
Post a reply if you're successful (or if you're not)...
Later,
Mick...

10x mwheeler2 i will hawe that what u write in my mind...but 530 error i hawe still in ftp ... hope that will solve soon...

Download locations for patched ROM... continued.
For those still looking for the patched ROM...
try this:
ftp://xda:[email protected]/BlueAngel/BA_WM5/Shipped_Extracted_Updates/WM5_pack_V1.rar
The above link is on the wiki page for the upgrade:
http://wiki.xda-developers.com/index.php?pagename=BA_5.1.1700_build_14343_Upgrade
There is a walkthrough on the site and some helpful information...
Later,
mick...

Well - after reading all the stories about persistent storage and speed I was about to go ahead with the install until I found out that my main application TomTom 5 would not install - a quick search later found a workaround - seems like everyone is pulling together on this.
So I'm now running WM5 on my O2 XDA IIs and it's not too bad - it's no worse that O2's existing "beta/official" ROM (1.31) and there is very little reason not to go for the upgrade as it's easy to install - just a little hairy with the funny screens at the start.
I can't say that the I have noticed much difference with the speed issues once all my baggage is loaded on the machine. I'll keep checking the reg fixes etc from time to time.
The interface is much the same as the old interface apart from a few nice touches - but as someone said earlier the ability to re-map certain keys is a pain - until you become used to the context sensitive buttons.
All in all - probably worth the upgrade - you just have to get used to the new ways that some things work.

Where can I download the files to update my SX66 to WM5
I did try to search the fourm but can someone please send me the web link to where I can down load the files to upgrade my Cingular/Siemens SX66 to WM5?
Thank you and I have donate to BA***
mwheeler2 said:
I updated my SX66 to WM5 before the ROM was patched (by Mamaich)... and then spent the next few days working on the issues of performance/sound.
With sound disabled (prior to patch), the device was undoubtedly faster. I made registry changes to increase cache size, disable animations, etc. but I had made those changes in 2003SE as well... and WM5 still outperformed it by a significant margin.
As for the areas not dealing with speed/performance, the new OS requires some getting used to. Hardware buttons that are unassignable (old Windows and OK buttons are softkeys now) and a few other issues (such as GPRS on only when activated by Internet Explorer and Bluetooth shutdown on power off) were a little unnerving, but nothing that would make the OS unusable.
What makes WM5 indispensable is PERSISTENT STORAGE. This is the Holy Grail for all Windows Mobile devices prior to this OS. When your battery dies and your backup battery dies, you must re-load all of your aftermarket software and PIM info. Software such as Sprite Backup made this process easy... but what if you're mid-flight to another country without a laptop and your PDA crashes? This is not an issue with WM5. All after-market software and PIM data is stored to ROM (software install location is optional)... which means that it is stored in non-volatile memory. It is not lost during power/system failure. What this means in terms of device security is that the person that finds your PDA on your desk at work cannot simply "hard reset" it to remove all of your info and use it themselves... Your password/PIM data and software will still be secure/in place and only downgrading the device to 2003 and repartitioning the ROM will clear it.
At the moment, I have no issues with WM5 on my SX66. Editing the camera keys in the registry solved the issues with sound and there are plenty of patches available to reconfigure the hardware buttons, etc. But I'm learning to like the OS as shipped...
I've been using Windows Mobile for more than three years and this iteration is undoubtedly worth the upgrade. If you have the time and patience to read through these forums, make an installation checklist and then follow it to do the upgrade.
My checklist would read:
-Download patched WM2005 ROM
-Download MaUpgradeUT_NoID.exe
-Download all patch CABS
-Download DOC tool (Disk On Chip partition tool)
-Run DOC tool (if successful, the ROM size is now ~63MB in control panel)
-Copy and rename the HTCRUU.dll and HTCRUU.conf files to RUU.dll and RUU.conf
-Run MaUpgradeUT_NoID.exe (if the first try is unsuccessful, put device into bootloader mode. Rec/Media/Power/Reset all at once)
-After upgrade check functionality BEFORE applying any patches, there are as many differences between just SX66's as there are between all of the Blue Angel devices... some patches may NOT be required.
-Apply patch CAB's
-Apply registry edits suggested in the forums for performance improvement
I hope this enlightens those waiting to see the efficacy of this ROM upgrade. I have had a good experience with WM5, in spite of the initial problems. I'm happy with its performance and will not downgrade to 2003SE unless I screw up WM5 bad enough to make it necessary to re-partition the ROM... then I'll go right back to WM5.
Cheers all...
Click to expand...
Click to collapse

Need Rom Asus P525

Hi all , I 've bought a ppc Asus P525 chinese ROm . Now I want to change the WWE Rom . ANyone have this Rom plwase PM me bye Yahoo messenger or this forum , thanks . Y!M : [email protected]

Any luck?
Did anyone contacted you?
I am looking for such a ROM myself.

Anyboby have it ? Please send it to me

i wrote so big post about my experiens with P525 and at last pressed on smile and opened new page deleted all i wrote
have no mood to write it again. I will tell shortly:
I also have P525 chinese version (TW CHT version)
1) currently, i don't know how to grab whole ROM from P525.
itsutils can grab whole ROM excluding bootloader. Grabber like Grab_it grabs only garbage and thus completely useless. ROM type is DOC (TrueFFS) which according what i found is hard to grab. If anyone knows how to grab ROM fully - tell me how.
2) Flashing only OS rom and without checksum is at first unknown procedure and at second can make from your P525 just expensive brick. Size of different language ROMs of P525 varies greately. Also, some P525 ROMS have extended ROM while others no. Taiwanese version has 3MB extended rom where KKBOX installer resides. It's easy to unhide it and remove KKBOX to free space for some other apps. HK version has no KKBOX, so i don't know is extended ROM present there or not. TW model has 61.75 of user storage space. IS there any HK users? how much user storage space in HK version? it can answer question: is there extended ROM in HK version or not. English version has 74MB (!!!) of free storage space and has no extended ROM. So, flashing different language OS (if to know how to flash) will probably lead device to non-responsible state.
3) there is bootloader flasher. you can enter it by holding down "record" button and press reset. But this flasher doesn't accept neither standard ROM update from ASUS site nor decrypted and renamed ROM. For me it tells that language is different. Ridiculous.. May be it will accept english ROM? Also, quick looking in hex editor i can see that bootloader can accept different file names and some strings relative to serial mode (console). Seems bootloader can be switched to different modes, but i don't know how to do this. Currently, in flasher mode P525 not recognized by desktop computer. even no any sound or other reaction telling that something pluggen into USB. Would be good to find more info about bootloader of ASUS P525.
Summary of key combination while pressing reset button (or turn on)
1) Hold jostick up -> enter to hard reset menu
2) Hold down record button (it's near camera button) -> enter to bootloader's flasher.
Meantime i mage english transformation installer for P525. After that P525 becomes fully english, till next hard reset of course. It eats user storage space of course, but at least my P525 is fully english!
Well, i'm not sure what is better: have CHT version + english transformation or ENG + chinese font and input because i need to read and write both languages. Actually, my chinese is very bad (only beginning) i defnately need english interface. What i like most in english ROM is 74MB of user storage space!!
May be some guru will have this wonderful device (much better than any available HTC device now) and will share some hacks :roll:

by the way, a week ago, ASUS had new update for HK and TW versions. After couple of days it has been removed. Anyone knows why?
I compared files: changes in couple of BT files, many updated files in Voice commander. That's all if i recall right. I didn't try to flash it yet.

ok. i programmed english ROM to my P525! works great!
now Storage space is 74MB! (61MB was with chinese version)

i'm continuing my monolog. Seems everybody with P525 only waiting for info..
after digging in bootloader code i found:
- found procedure to calculate checksum. this allowed me to flash english ROM dumped from english P525.
- Bootloader has several modes.
- key combinations for flashing different part of ROM. You need keep these buttons while pressing "reset" button (or while turning on):
1) Photo - update ROMGalaxy.nb0 (ROM without bootloader)
2) Record - update BootGalaxy.nb0 (only bootloader)
3) Photo+Record - update Galaxy.nb0 (whole ROM)
4) Photo+Record+Joistick_Action - USB Console mode
There is some check for Jostick_UP mode. I'm not sure if it can switch to another update mode or it's just for hardreset because Jostick_Up used for HR as well. ARM assembler for me is new. I used to read x86 assembler
Also, bootloader can accept standard ROM update from ASUS site - Galaxy.cap, but i didn't find the way of activate such mode. Probably it may be activated only by update application by calling this mode through IOCTRL function.
Another unclear thing is USB Console mode. I can connect to phone by mtty as to USB COM (something like \\USB_blah_blah - i don't remember exact name), but any attempt to type something doesn't produce any echo to screen. Either bootloader can not echoing or requires to type some authorisation command to unlock console mode. Or may be this mode support only direct file transfer without any commandline interface..
Bad thing is that nobody except me explore P525
Good thing about P525 ROM is that understandable by imgfs tools! No extra work required to dump all files and modules. and with no error! I guess, imgfs tools can compile new ROM also without errors. Opened door to ROM kitchen as for himalaya in the past?
Actually, i would like to add/modify/remove some components (like T9 languages). Since, i can flash old ROM anytime if cooked ROM will not work, why don't try.. just need to find some spare time and enough courage

Well mate, all this sound very good.
I am waiting to have some money and get one of those p525.

sorg. Great work!!
I also had lots of fun with the Flash process. Just found out that if I use the AC adaptor, the bootloader will complain "checksum error" while using the USB cable will not. I believe this is due to the design of the USB port (remember that the cable's 2nd,3nd legs are shorted)
I had successfully flashed the ENG ROM. However, now I would like to get the T9 CHT input back. I had tried to use the Asus "official" rom to flash the CHT version back (HK ver.) but the device keep complaining the "region" is not correct (I had already set the language ID to 0 , I believe this "error" should be caused by the extended ROM, but will try later when I got the CHT ROM )
Is there any tricks I had to do to modify the original galaxy.cap ROM image so that I could flash it though the boot loader instead of the ASUS official flash tools? or could you kindly upload the HK-CHT .nb0 ROM?
Deeply apprciate your help!
Cheers!

Hum, maybe using imgfs to dump the T9 input module out should be fine for us, sorg. (coz I need both ENG and CHT but need the ENG interface.... )
haha, mind to share how to manage the official ROM to .nb0 ROM? so that I could cook the ROM as well. HUM, getting the answering machine from GSMART-i and background-mixer than cook them into P525 should be very delicious. wahahaha

i gave you CHT ROM for bootloader flasher in PM.
Currently, i'm in final stage of my cooked ROM. It's based on english v3.29. I added chinese font/nls/input(T9, HW and SIP) and some other useful utilities. Also, since i'm russian i added russian input as well.
I think i will finish testing in couple of days.

Dear sorg,
Thanks a million for your guidience. I am browsing online materials and want to try to cook my own ROM. I had a friend who have a g-smart i WM phone. The phone comes with a s/w answering machine and a very good "background mixer" (which you can pretend you are in a busy environment during telephone call). Therefore, I would like to dump his ROM and check to see if I could use fsimg tool to get these 2 program out. can you show me a road to useful information?
(P.S. I had suspected that the ASUS autorun.exe block the flash process.... but just can't find where the "regional setting" is located in..... thanks for your bright help! YOU ARE NOW ANNOUNCED THE P525 GURU!!! )
Cheers! Cheers! Cheers!

can you extract files and registry related to cheating utility from GSMART's ROM (or give me link to such ROM and name of exe file)?
i will try to put it into ROM.
Structure of P525 ROM is relatively easy. To decrypt ROM you have to XOR whole galaxy.cap file by mask A87BC0DF. Then you may use imgfs_tools utilities
But to flash ROM back you have to calculate checksumm of new ROM. I don't want publush function right now because it's still dangerous. not much known yet about P525 ROM. For example, flashing with wrong language and fail will lock your device to that language which probably you don't know. And if device will not able to finich boot to OS you will not able to use language unlock utility. I also found problem to flash bigger ROM update through bootloder's flasher. it always fail. Only way to update to bigger ROM is to use official chinese update galaxy.cap and only after that use hand-made ROM with the same or smaller size. Once you programmed smaller size, you will not able to program bigger one. Again have to use chinese official update.
I don't know why it happens. So, it's not right time to spread tools. When most things will be known then it will be safe to release.

ah, didn't see question about ROM dumping.
I thing, it's better to find update first.
Dumping works not on all phones. You may try to use itsutils. There is utility pdocread.exe which can dump TrueFFS DOC.

Hi sorg,
I had copied the pdocread.exe to the sd-card and run it on my friend's g-smart-i. It caused his phone to freeze..... I re-tried for a few time and now he refused to borrow it to me to continue the experiment... >_< (I should not do the experiment in front of him, and should poke the reset button secretly, hahaha) Well, I will continue to try to get the ROM, once I had successfully dump it out, will let you know at once!
What I intended to do is to use an ENG rom, use a 3rd party CHINESE engine (which I can turn off when not needed) and have the T9 input always resident in memory...... I had tried to copy all T9*.* to the /windows directory and imported the T9IME registry entry from CHT ROM to ENG ROM. It doesn't work at all, the result is that I am unable to change T9's mode (e.g. only able to input 123, can't even change to input ENG / T9 ENG). Waiting for your advice!
Cheers!

pdocread should be run on Desktop computer while PDA connected through activesync. Also you should enable RAPI on PDA (look for enable_rapi.cab on this forum).
Actually, i revised my archive or ROMs and found one version from GSmart. So, i think, no need frighten your friend anymore
unfortunately, i couldn't make neither AnswerMachine nor PhoneRec/Environment Cheater to work. Actually, all these three apps are pretending to work on P525. I can listen example of environment cheater in settings, AnswerMachine picks the phone in right time, PhoneRec opens dialog where progess of recording should be visible, but neither playback to phoneline nor record from there are workining There is topic about porting these apps on buzzdev board but so far no any positive results. Probably, gigabyte has some specific hardware allowing to interat with phone line, but all other Phones has no such ability
We are lucky that at least P525 allows record phone conversation (through any available recording software)! Most HTC devices have no even such feature!

please follow to this topic http://forum.xda-developers.com/showthread.php?t=279777
there is discussion about P525 ROM(s) with modified version i published.
any questions to me please ask in that topic.

sorg said:
i'm continuing my monolog. Seems everybody with P525 only waiting for info..
after digging in bootloader code i found:
- found procedure to calculate checksum. this allowed me to flash english ROM dumped from english P525.
- Bootloader has several modes.
- key combinations for flashing different part of ROM. You need keep these buttons while pressing "reset" button (or while turning on):
1) Photo - update ROMGalaxy.nb0 (ROM without bootloader)
2) Record - update BootGalaxy.nb0 (only bootloader)
3) Photo+Record - update Galaxy.nb0 (whole ROM)
4) Photo+Record+Joistick_Action - USB Console mode
There is some check for Jostick_UP mode. I'm not sure if it can switch to another update mode or it's just for hardreset because Jostick_Up used for HR as well. ARM assembler for me is new. I used to read x86 assembler
Also, bootloader can accept standard ROM update from ASUS site - Galaxy.cap, but i didn't find the way of activate such mode. Probably it may be activated only by update application by calling this mode through IOCTRL function.
Another unclear thing is USB Console mode. I can connect to phone by mtty as to USB COM (something like \\USB_blah_blah - i don't remember exact name), but any attempt to type something doesn't produce any echo to screen. Either bootloader can not echoing or requires to type some authorisation command to unlock console mode. Or may be this mode support only direct file transfer without any commandline interface..
Bad thing is that nobody except me explore P525
Good thing about P525 ROM is that understandable by imgfs tools! No extra work required to dump all files and modules. and with no error! I guess, imgfs tools can compile new ROM also without errors. Opened door to ROM kitchen as for himalaya in the past?
Actually, i would like to add/modify/remove some components (like T9 languages). Since, i can flash old ROM anytime if cooked ROM will not work, why don't try.. just need to find some spare time and enough courage
Click to expand...
Click to collapse
hey sorg, i cant get usb console mode, can you get me a hand???
i want to make a spanish WM6 version, based on the rom of misar.
can you help me here?
thanks..!!!

how do I downgrade my 2750?

I have PDAVIET rom on my 2750 - version 5.2.00H on the boot rom.
I want to go back to the HP version of Windows 2003. So, I unpack the files from HP (SP29856 - fresh download from HP), perform a clean reset of the 2750 and start the "downgrade".
When it starts transferring the data, what I see on the Ipaq is a new window called FUU with "Hello World" right in the middle. The upgrade seems to proceed OK - but the system stays on WM6.
So, what is going on? Where is this FUU coming from and why isn't my Ipaq being put into boot mode?
Any help appreciated

I get exactly the same thing as Alan trying to downgrade my hx2795 using the same ROM (SP29856.exe) from HP. Yeah I know the ROM is for the 2750 but the hardware specs look very similar between the 2750 and the 2795 so I was hoping I could use the ROM to downgrade from WM5 to PPC2003.

The rompaq is for all versions of the HX2000 series so it is designed for us. Something else is going on which we don't understand. Anyone elso got any clues?

alan sh said:
I have PDAVIET rom on my 2750 - version 5.2.00H on the boot rom.
I want to go back to the HP version of Windows 2003. So, I unpack the files from HP (SP29856 - fresh download from HP), perform a clean reset of the 2750 and start the "downgrade".
When it starts transferring the data, what I see on the Ipaq is a new window called FUU with "Hello World" right in the middle. The upgrade seems to proceed OK - but the system stays on WM6.
So, what is going on? Where is this FUU coming from and why isn't my Ipaq being put into boot mode?
Any help appreciated
Click to expand...
Click to collapse
After the update did you perform a clean reset? Cause when I downgrade to wm5 from wm6 I mention that nothing seems to change(the device boots in wm6) until I perform a clean reset.

I have done many upgrades on both my 4700's and my 2750. Each time, whether it is using the HP method, or Chris's bootloader program, the Ipaq ends up in bootloader mode before the upgrade starts.
On this occasion, it didn't. I got a program called FUU starting up - and I could access the today screen etc while the flashing was apparently working (the HP utility was gayly counting up the percent numbers). At the end of it, Activesync happily reconnected to my old profile.
I did also try a hard reset - but that still came up with WM6 as the base O/S.
Since BOOTLOADER itself will not work either, I think the latest rom upgrade on there has screwed something up - not sure what, why or how.
Alan

Yep, what Alan said. The HP update utility apparently thought it was updating the device but the device was just showing the FUU "Hello World" window. And during the alleged update I can go to the Today screen and access my programs.
If I hadn't downloaded this directly from HP I would think this was a joke.
I am able to re-flash WM5.0 to my hx2795 using sp33752.exe downloaded from HP. Everything works as expected, the HP utility puts my 2795 into bootloader mode before flashing the device.

I cannot find sp33752 - can you give me a pointer?
Thanks
Alan

Hmm... I just tried searching for sp33752.exe on HP's support & drivers webpage and it found it. Otherwise try:
http://h20000.www2.hp.com/bizsuppor...x=sp33752.exe&pc=0&sc=1&nh=10&rf=0&lkc=1&lk=1
Any luck with downgrading to PPC2003?

Many thanks - I'll try that sometime today and see what happens.
Alan

downgrade
Hi,
I'm trying to do the same. From some searching around I found out that what you need to do is use the WWE-hx2000_PPC03_downgrade.exe program which comes with the WM2003 upgrade CD.
I don't have the cd, and I have problems with P2P (it's avail both on torrent and ed2k), so if you get that file, and it works for you it'd be wonderful if you can upload it to rapidshare or something and post a reply here.
Good luck and cheers

I tried that SP - get the error "Could not initialise the device".
My Ipaq is in the cradle and activesynced to my PC.
So, it looks like i am stuck with this WM6 version. Something about it has stopped any form of upgrade or downgrade.
Alan

So, next thing I tried is to copy the FUU.EXE file to the older SP directory and run that. But all that does is appear to download the nbf file, but the IPAQ hasn't gone into bootloader mode, so nothing happens.
I think what I am missing is why we need these files (RUUClientdriver.dll, FUU.EXE etc) and what changes in each of the OS upgrades to require a different version. Any one know these sorts of answers?
Alan

success!
I found the file (http://rapidshare.com/files/17084671/WWE-hx2000_PPC03_downgrade.exe) and succeeded to downgrade to 2003.
I had to reset to bootloader mode (contacts+itask buttons+reset -> connect to cradle -> calender button*) and then run the hpRUU.exe from extracted directory (c:\ipaq\hx2000) and it works like a charm.
hope it helps. g'luck
(* contacts - 2nd from left, itask - 4th, calendar - 1st.)

That seems to be doing something. I put it into bootloader mode and it's flashing. 66% through and the bar on the Ipaq agrees.

Success!
Worked for me too! Thank you spring777. Now I can run PPC2003, WM5 or WM6 on my hx2795. This is such an awesome forum.

Creating HardSPL for HTC5800/S720/LIBRA

Alright,
I notice this phone gets very little attention by the community, however, I like the phone, form factor, etc..
I am looking to "cook" my own HardSPL for this phone. Other providers now support GPS, EVDO RevA, Win Mobile 6.1, and I'm still stuck in what I feel is the ice age..
Please note that any instructions with a prompt are to be done in dos..
So far, I have done the following to extract the SPL:
1) Download HTC update for phone and extract using appropriate zip program
2) c:\>NBHextract RUU_***.nbh
This should leave you with a slew of .nb files - one will be named XX_SPL.nb
Now, to disasm this SPL, you can either go straight to IDA PRO or take an intermediate step using dumprom - dumprom creates a pe.exe and handles the offsets for you, so it puts you a step ahead, imo.
1) c:\>mkdir SPLDISASM
2) c:\>dumprom -5 -d SPLDISASM XX_SPL.nb
Now, in the SPLDISASM folder, you should have an exe file that you can now open in IDA PRO.
Now, here's where it is starting to get foggy for me. I followed the same process to dump the stock SPL and the HardSPL from a Hermes phone and I am in the process of hand tracing and hand comparing it to see how SuperCID/Write protection/Protected FF writes is implemented in the HardSPL - hoping that I can port the differences to my phone.
So, I pose the following to the experts:
1) In order to test my HardSPL once it is complete, can I run it as a SSPL and load a new ruu as a test - or will that mean certain death to my device?
2) Now that I'm this far into the code, i've come to realize that reassembling the code will be a lot of pain. Do you guys disasm/asm, or do you just hand edit in a hex editor?
3) Any suggestions to look out for, any ideas, etc?
Let me finish with a few disclaimers
1) To the experts: I have no intention of reverse engineering the HardSPL codebase - if I do use any of the code I have found, I will be sure to give props to the people involved and ask for permission before distributing. I am not looking to profit or scam or steal ideas, i am simply looking at how to make my phone better.
2) To the beggers: I have nothing to release at this time, this is all vaporware, I don't know when it will be done, I don't even know if it's do-able. I'm just trying ATM.
3) To the beginners: any or all of the advice above can probably wreck your device. This is by no way a means to unlock your phone, it's just my thought stream as I take what I believe are the preliminary steps to make my Libra the phone it's meant to be.

desquirr decompiler
I am now using the desquirr decompiler plugin for IDA PRO - it's dumping the subroutines into rudimentry c code.
I am now far closer to understanding what it is my device does; as well as understanding some of the hardspl code.
I recommend this tool if you are also SPL "cooking"

More Progress!
No Replies yet? Man, this is starting to feel like a blog..
Okay, I have managed to dump my Libra SPL, and I have disassembled it, and I have also decompiled it - Well, partially.
All the subfunctions are now represented in C - it's not particularily the most efficient c code I've ever seen, but it's readable. You'll get a hang for it and start to notice the FOR loops, IF/ELSE, WHILE structures.. Multiple return values.. etc.. etc.
I have decided to attach the Stock Libra SPL - I am hoping that I can eventually turn this into a tutorial to build your own custom SPLS for devices that aren't supported by the general community (note, this is high risk stuff..)
Hopefully this will serve as a reference to the community as I progress.
I do hope I get a little feedback too. If I'm going down the wrong path in terms of my approach, or for sharing this project with the community, it would be good to know.
Once again, small disclaimer - this file will not do anything for your phone as of yet.. Just a development step.. (I hope...)

MegaHambone said:
1) In order to test my HardSPL once it is complete, can I run it as a SSPL and load a new ruu as a test - or will that mean certain death to my device?
Click to expand...
Click to collapse
The hard part is to make a patched SPL run as Soft SPL from within OS.
You can try pof's JumpSPL and/or Haret to start your SPL, however I'm not sure these will run on smartphone platform at all. If not, JumpSPL source code should be available, so you can try to figure it out.
Be sure you don't overwrite your stock SPL or radio when flashing a custom ROM with RUU, this is the best way to brick it!
Unless you really can't go without flashing a HardSPL, IMO it's safer to keep the stock SPL flashed for recovery purposes.

HardSpl to add new commands
I'm happy to hear that somebody is working on a hard SPL for HTC S720. Here's the deal, I really want to change esn in this phone but I realized that for now it's not possible.
It's a MSM7500.
**I've tryied QPST but the version 2.7 only support MSN6500.
**I've tried QXDM 3.9.19 and still can't write the new esn. It says read only.
_________________________
How to put it not in read only?
Could I use a anykind of ready/writer to change info directly on the chip?
-----------------------------
**CDMA Workshop 2.7 all kind os ESN write doesn't work.
-----So, two options left:
1- either I desolder the esn chip and change it for a new one (to be honest, I haven't discovered yet if the esn is inside the MSM or on a different chip. If it's the case (on a diff. chip) it's a bit a pain in the but to do but it's still an option.
2 - I want to try shadowmite's method for writing the ESN into a PPC6800. Again it need to be done in high level via MTTY.
Concerning MTTY I cannot run commands because I can't put the phone on the boot loader screen.
I will try to run RUU wich will put the phone in bootloader screen. And then try mtty.
If this fail, I guess my only hope will be a hard spl.
I guess I've said a ton of thing that gonna make me look like a newbie (wich I am in prgramming).
Any suggestion...? Or any help I could bring to create this hard spl?

I am using HTC S720 in India. Currently I am using windows 6. Is it possible to make it work for windows 6.1. Telus ROM for HTC S720 is already available.

HardSPL for HTC5800/S720/LIBRA
I am currently trying to create a HardSPL for this phone and am having a hard time. I really need a solution for this and if anyone can create a HardSPL the company I work for is willing to pay a reward.

Why not try get a goldcard for it.Try ask at http://psas.revskills.de/ or if you know anyone with a axebox i think they do goldcards

Need help with hp 4700 Upgrade tools and know-how...

Hi, Need some help here....tired of the same whole mix-mash from htc (recycled phones) so going back to basics - htc s620 (wm6) + my just acquired used 4700. Intend to upgrade it to WM6.1, I've been using htc phones so I am used to rom flashing... or so i thought. I downloaded some of the wm6 and 6.1 roms only to find that dont come with an ruu built in. Not a problem I thought,just get a carrier and replace the nbf file. Unfortunately despite an extensive search on brighthand and here and yahoo searches galore i havent been able to find a suitable guide with the necessary utilities to carry out the flash. The "universal bootLoader" no longer seems to be around (404 errors) samething with other Ruu's (from ru websites etc) yet I can still see thru the long 220 - 251 pg threads that people are flashing with something. In the interest of new 4700 owners would it be possible to have a particular "How-to-flash" thread possibly as a sticky? If not at least can someone help me with a how-to guide and any link to the relevant ruu or bootLoader utility for the rom flash.
Thanx all appreciate it.

You can find all the neccessary information on this page; different ROM's, a bootloader, and instructions in PDF format..

Thanks a lot ridolfo. that has helped a great deal. Slight problem that you hopefully know a way around. After downloading the BootLoader.exe rar file, I tried to open it to proceed but it kept on coming up with an error... "windows cannot open the selected path file...you may not have the appropriate permissions to open them" I just cant get past that altough it has apparently opened and expanded showing a whole lot of other files but i cannot basically get past that stage to run the rom nbf file... Any ideas please?

Right sorted!
Very simple but unexpected solution especially since i hadn't seen the issue mentioned elsewhere.
Simply disconnected all connections to the internet especially wifi (for safety/protection etc) and then disabled zone alarm!
Everything went thru as normal,updated and now just waiting for boot-up.
thanx a lot Ridolfo!!!