yashsingh1/xdaforums huggingface dataset:
[Windows Mobile Development and Hacking General] Andy Phillips:
Been a while...

It's been a while but I thought I'd share my experiences with getting bbc4 to work.

I had it working on NBD7.1 no problem..I even flashed that same rom to a friends wizard and got it working.

Flashed NBD7.4 - no go.

Flashed back to NBD7.1 and guess what....NO GO!

What I did notice is that when installing, the client registers itself on the RIM network (message in the system folder)...this did not happen when trying to reinstall bbc4 on NBD7.1.

Another friend wanted BBC4, so I installed NBD7.1 and it would not register!

So to recap...

Three devices all on NBD7.1

One still works

One did work but after reflashing the same rom, wouldn't.

One has never worked!

I'm now back on Core2.0Blackberry rom and BBC2..31 :mad:

I don't think RIM is blocking IMEI numbers unless v4 of the client sends that info when registering on the network!

My feelings are that v4 of the client uses a combination of OS, AKU, Device type and possibly IMEI number....

Maybe one day RIM will release a version that just WORKS!!:D

Have fun...

Andy.
[Windows Mobile Development and Hacking General] Ratze:
Not for me.
[Windows Mobile Development and Hacking General] edsub:
52 and 54 did not work on a hacked WM5 Wizard

31 does work

Thats the diff for me
[Windows Mobile Development and Hacking General] NetrunnerAT:
i hate blackberry!

i have a HTC S710 and he have get for a short moment a PIN ... after first contact to rim ... they have kill the PIN -> status Anstehend/pending

its realy a provider blocking up and running!!! i cant use bbc4 on any devices!!! we use a1 ak vodafone austria :-/

Only i can say ... sucky ****y ... long time bukko san ARGL *kick some as via A1 Hotline*
[Windows Mobile Development and Hacking General] Chrislaing:
I'm trying to follow the steps that are layed out in post #3 of this thread but I am confused.

I was able to obtain a copy of HTC64 Extended Rom Tool as per the original thread posting requiring it from the below link

http://xdaforums.com/showthread.php?t=294218

The part that I am stumped on now is what am I supposed to decode with this? I downloaded the complete update from (attached link)

http://wiki.xda-developers.com/index...ermes_Upgrades

And chose; HTC English QTEK_001 2.11.255.1 03/07/07 2.11.255.102 1.38.00.10 32.71.7020.12H 15673.3.3.1 3.3.1 1.11 108 .

This is what is currently on the device. When I try to access this ROM it does not recognize the complete Shipped Full ROM. Does this mean that I need to try and find a copy of the ROM 2.11.255.1 or the Extended Rom 2.11.255.102 by themselves? And if this is correct that I need these separately, do you know where I would find these files?

I know that to you these are probably "beginner" questions and I appreciate your patience with me.

Thank you again for all of your assistance with this.
[Windows Mobile Development and Hacking General] shughes:
BBC 4 working with WM6

I'm running Black 3.01 and Blackberry Connect 4.0. No registry hacking at all. So hopefully someone can cook ROMS that work with BBC 4 after looking at this.

http://xdaforums.com/showthread.php?t=305940
[Windows Mobile Development and Hacking General] beginner:
I am trying to find the way for Athena. My problem -due obviously I am not expertised and still being a beginer for ever- is how to change

5.1.465

1D3EA0E3013083E3452FA0E30510A0E301

into 5.1.195

OK, finally I changed and load the hacked version of the windows.nb, same parameters as Black, but only connected for first time...

going back to 2.54...
[Windows Mobile Development and Hacking General] moisha:
a) black 3.01 is WAY too old and had few issues

b) if you'll pay attention:

"Build: 17743.0.2.3

Kernel (CE): 5.2.1238

HEX Edited above to: 5.1.195 (17743.2.3.0)

This enables BBconnect and Goodlink compatibility"
[Windows Mobile Development and Hacking General] moisha:
5.2.1238 (Build 17745.0.2.3) on HERM100 does not work.
[Windows Mobile Development and Hacking General] beginner:
5.1.195 17944.2.3.0

hi sirs, could you give me the hex of 5.1.195 17944.2.3.0?

I still insisting trying to have bb 4 on athena....
[Windows Mobile Development and Hacking General] c0rnholio:
C330A0E3013083E3452FA0E30510A0E301
[Windows Mobile Development and Hacking General] beginner:
thanks a lot. but i obtain 17445 as build, do you know how to change it? or what the hex of 17745, that appears now in the pda and I will look for it in windows, and what is the corresponding to 17944?
[Windows Mobile Development and Hacking General] tom_codon:
Mr.c0rnholio..!

could you give me the hex of 5.2.1238 ?

Thanks man..!
[Windows Mobile Development and Hacking General] cyriljp:
Blackberry Connect 4.0.0.90

Hi guys,

I downloaded this from the Dopod Asia site. Have a try and let me know if it works for you. It supports the latest build of Windows Mobile 6 for Dopod 838 Pro. Unfortunately, something buggy with the browser integration and I can't configure my Blackberry Internet Service (BIS).

Thanks,

cyriljp

Link: http://rapidshare.com/files/45075798/BBConnect_WM6_Professional_BB_4.0.0.90.exe.html
[Windows Mobile Development and Hacking General] c0rnholio:
We cleared this via PM already. Just posting for others interest (if any).

Version 5.2.1238 in the dll you sent me is at this hex-values:

4D3EA0E3063083E3452FA0E30510A0E302

Change them to:

593EA0E30D3083E3452FA0E30510A0E302

This should result in 5.2.1437
[Windows Mobile Development and Hacking General] walshieau:
the site says for WM5 only... :)
[Windows Mobile Development and Hacking General] beginner:
what dll is this? I supposed we had to do changes or full rom .nbf or windows nb file.
[Windows Mobile Development and Hacking General] c0rnholio:
Yes, but he asked if I could help him. I answered that I would not download his rom, extract it and so on, so he send me his coredll.dll and I looked for the hex-string.

To make it short: You still have to change the hex-values in the full ROM file twice.
[Windows Mobile Development and Hacking General] cyriljp:
Yes it still does but I'm a member and I checked. By the way, as an update Blackberry Connect 4.0.0.90 is working with CE OS 5.2.1437 Build 17944.0.3.1 with no Hex Editing. What I did to get it to work properly was to install it on my device memory rather than on the Storage Card. Now it works like a charm.

I tried installing on Schaps 3.57a and a warning came out that it may not be compatible with the ROM. True enough, I'm connected to the Blackberry service but nothing gets through. Switched back to my own experimental cooked ROM using Dopod 838Pro official build and it works like a charm.

By the way, Walshieau, been waiting for your White ROM. What happened there? Can I try it?

Here's a copy of the text I got off the site. Please note the bottom which is the date it was uploaded by HTC. It went up on July 23, 2007.:

3

Blackberry Connect Client 4.0 for 838Pro (Supports Windows Mobile 6 Professional)

Download the latest BlackBerry Connect Client for your 838Pro to start using BlackBerry email services.

Note

1. Please perform a ActiveSync FIRST with your computer to backup your PIM (Contacts, Tasks, Calendar, Notes, etc.) before attempting to upgrade to BBC4.0.

This is to ensure that all latest PIM info on the handset is in sync with Outlook before installation. Otherwise, these unsynchronized PIM info will be wiped from handset when you enable BBC wireless synchronization for the first time.

2. Please note that if you uninstall the BBC client or disables Wireless Synchronization, the PIM database like Contacts will also be deleted from the device. Please backup your contacts to your computer first before you attempt to perform this action.

2007/07/23
[Windows Mobile Development and Hacking General] dekadence:
Hi...

i'm new where.

Anyone had BBC 4.0 working in HTC Athena (ATHE100)??? How???

thanks
[Windows Mobile Development and Hacking General] beginner:
I tried this bb connect 4.90, and the dopod update for athena, and no works. The wm is 5.2.1437 17994.0.3.1 We still being pending to hack the device control on bb.
[Windows Mobile Development and Hacking General] Melvince:
HTC touch and BB connect may be an issue ?

I have already made some test on HTC touch with Blackberry connect, see :

http://xdaforums.com/showthread.php?p=1367357#post1367357

I was unlucky, Pin Pending and no connection, after install of new version 4.0.0.90, things has changed, i received a pin with that version on my HTC touch ! Yeah Great ! I Tried successfully to register my "touch" on my provider portal. Unfortunatly the goods news were stopping there with BB connect 4.0.0.90.

After having registered my HTC touch With 4.0.0.90 i can have a pin with version 2.1.2.54, i also can connect when restart the service or "register" from device but only for a few second , i can receive some the book of services from my provider. ( 2 on 3 ! not all 3 account existing on my bb account ... why ? maybe time for good connection is too short ? )

I think I have 90% a the solution for connecting an HTC touch on BB service, is there any specialist to help me for the 10 % missing to solve this issue ?

Why does my HTC touch can't keep the connection for more that 3 or 4 second ?

Is it possible to fix that ? what could be the reason . I have seen som thread talking about Editing HEX etc... but is it possible to explain it step by step ... sorry don't understand about wich file to edit ? where to find it in my device ?

If I resume :

After have installed 4.0.0.90 and uninstalled (without keeping message parameters !) :

Running version 2.1.2.54 :

1. I have PIN

2. i have registred successfully to bb service with my new pin and Imei

3. My touch connect for a few second and received book of service

4. unfortunatly can't keep connection for more than 5 sec !

HTC touch with french ROM :

1.11.406.1B FRE (05/24/07)

Radio : 02.93.90

protocole :4.1.13.42

ROM ext : 1.11.406.101

AKU .0.2.3

BB connect 2.1.2.54

c0rnholio may you please help me ? Should be nice to have a bb connect working on HTC touch...

I would really like to understand your workaround with hex editing, can it be applied on touch too ?

Many thanks for help Guys....

Melvince
[Windows Mobile Development and Hacking General] lve0200:
There is a principle problem around SW version and checking for security. the 3-4 secs are to establish the datec tunnel (Layer 2) and then the application decided that you have the wrong non authorized SW version and disconnects you. There are ROMs which have a hex patch to 'simulate' another SW version for BBC. These work. I use Sleuth ROM. see Jasjammings remark:

HEX Edited above to: 5.1.195 (17743.2.3.0)

This enables BBconnect and Goodlink compatability

It has something to do w/ the provisioning data. On a virgin installation of bbc 4.0.0.67 it connects and gets you a pin, and IP addess, but no comms happenz. After you connect to your desktop and BBC desktop has downloaded the provisioning data to your device, it cannot anymore re-connect over the air, after you pulled the USB cable. You still have a pin, but no IP address. Apparently some services are downloaded via the desktop, but others are coming via the air i/f. those will not be supplied, if the version checking fails.

The hex editing is complex, because before you have to extract the ROM, do some magic and then combine everything. There are short tutorials on that in this forum.
[Windows Mobile Development and Hacking General] Melvince:
Hex Editing Step By Step Tutorial Request ...

Thank You Ive0200 for thoses explanations , can anybody make a step by step tutorial to explain how to do magic with Hex editor and finally have BB connection, this effort should be very very appreciated !!!

Please genie help us .... ;)
[Windows Mobile Development and Hacking General] Melvince:
Ive0200 are you personnaly able to do this kind of magic with HEX editor ? If yes, would you help ? Belgium to belgium help ???

Thank you, merci, bedankt...
[Windows Mobile Development and Hacking General] graphreak:
Thanks Melvince for pointing me in the right direction.

(Not sure if anyone else had followed a similar procedure).

Have an HTC Touch which on inserting AT&T SIM says 'incompatible with current network'.

Unit appears to have 850 MHz missing- & is tri-band only.

ROM Version: 1.11.707.1B WWE

ROM date: 05/24/07

Radio Version: 02.93.90

Protocol Version: 4.1.13.42

ExtROM Version: 1.11.707.101

BB Connect 4.0.0.90 for WM6 Pro. is working miraculously on BIS.

Followed install procedure (idea from reading Melvince's post) in this fashion:

1. Installed 4.0.0.90 and got no connection, no PIN, intermittent IP.

2. Uninstsalled 4.0.0.90 - opted to "delete Messages & settings"

3. Installed 2.1.2.54 and Registered with Network.

Received a PIN. But no connection established, no IP.

Managed to change Handheld on the BIS site (from original 7130c).

Even sent Service Books. Still no connection, no IP.

4. Uninstalled 2.1.2.54 - Opted to "Leave Messages & settings."

5. Re-installed 4.0.0.90 for WM6 Professional.

PIN stayed but no connection still. Kept Registering handheld with Network and

also sent Service Books from BIS site. Still no go.

Left it at that for a couple of days without using the Touch and had it switched off.

Today I just powered on the Touch and after a couple of minutes I suddenly

notice BIS service has connected & received an IP address alongwith the same PIN.

Checked Service Books and it did indeed show "Provisioning" enabled.

Sent Service Books from BIS site and in a few seconds my email was configured on the HTC Touch.

Sent myself a test email and it was received on the Touch in a few seconds!

Thanks again Melvince (and to others in this thread), hope you managed to get your's working too.
[Windows Mobile Development and Hacking General] beginner:
Did you softreset after the situation BB 4.90 running?

thanks.
[Windows Mobile Development and Hacking General] sime15:
It soft resets automatically.

Regarding the BB, now is working fine, but firts I followed the above intruction 4 times :( .

Of course, now my battery is 'leaking' very fast when BB is on.
[Windows Mobile Development and Hacking General] hchickers:
BB Connect on Treo 750c WM6 ?

Hi

Anyone know how to make BB Connect 4 or 2 to work onto the new leaked WM 6 rom for Treo 750 ?

Version: 5.2.1239

Build 17746.0.2.4

Software Version: TREO750-1.16-CNG

Firmware Version: 1.47.25.00

TIA

HC
[Windows Mobile Development and Hacking General] pt-1:
Hi,

I am trying to install the latest bbconnect_wm6_pro_4.0.0.90.cab on my UK o2 Orbit with a UK Vodafone sim in it.

I am using the o2 UK WM6 original Rom and after installation of BB 4.0.0.90 the phone is just stuck on the green Windows Mobile screen.

After a Hard Flash Reset the phone is able to boot up again.

CE OS 5.2.1238 Buil 17745.0.2.3

IPL 3.04.0001

SPL 3.04.0001

GSM 02.67.90

OS 3.4.0.0

ROM Versio 3.4.206.2WME

Protocol Version 4.1.13.28

ModelNo ARTE200

I have tried the bbconnect_pocketpc_bb_4.0.0.67.cab before using the Black&Blue 3.2 Rom WM6 Rom and the Phone was at least able to boot but BB was unable to get the PIN from the Server.

Any hints anyone ?
[Windows Mobile Development and Hacking General] LEBertram:
Did a similar thing. Was frustrated of Blackberry not working on my HTC Touch. Left the device for about 2 days switched-off in a corner...and today Blackberry was working. Got a PIN, the connection works and Provisioning is fine (vodafone, Germany). Perhaps it takes a while until you get your PIN and the device is registered??

In the info tab of the Blackberry software (4.0.90) it even identifies the device as being a HTC Touch (ELF). So the device is not banned from the Blackberry net...

Let's see how it works the next days....
[Windows Mobile Development and Hacking General] c0rnholio:
The way to happiness. Getting BBC4 to work (with maybe any HTC device)

Well, the following worked, at least for me. It would be nice to get it confirmed by others.

As you may be aware RIM started to implement additional checks in BBC4 to verifiy that only approved devices may connect. They already had some OS version checking in the 2.x version of their client software. When I last time looked at this, they changed the logging function to create binary log files only. Thus it was hard to debug the client and to see what is going on when a connection attemps was made with an "uncertified" device. The old trick by spoofing the OS version and AKU string did not work any longer for the BBC4 client. However, I was thinking what they could check in addition to this and came to the conclusion that it might be the device type.

Since BBC4 is already officially available for some devices, I looked at what might be the next step. One of the devices on which BBC4 is working is the Hermes. Even with the new official WM6 BBC4 seems to work like a charm on this device.

To speed thing up: I modified the ROM of my Athena so that it looks like a Hermes to the BBC4 client and flashed it to my athena. BTW: The official Athena ROM (from DOPOD) is the same version as the official Hermes ROM.

Guess what...After installation of the BB client (I used version 4.0.0.90 for WM6) my Athena directly connected to the RIM network. I used the desktop client software to configure everthing and am now able to use BBC4 on my Athena.

If you want to do the same, you have to edit the os part of your rom. In there is a hardcoded string for your devicetype. In my case it was "HTC-Athena". I used a hex-editor and changed that string on both locations, repacked it as an .nbh file and flashed it to my device.

It might be that this trick will allow most HTC devices (if not any) to get BBC4 up and running. It might also be that this will work only a few days like it did when BBC4 was available the first time, and RIM (or the operator) started to block devices. However, currently it works and I will report back if this changes.

Now some version info:

OS: 5.2.1437 Build 17944

AKU: 0.3.1

Device: HTC-Athena

Device-Type-String: HTC-Hermes (faked)

BBC Version: 4.0.0.90

Cheers
[Windows Mobile Development and Hacking General] decebal:
great news,

i was working onto tricking the 4.0 to believe that is 2.1.2.31 and succedded in reobtaining tha same old system code ... but still a long way to do it

can you please tell me if you get the change also in the settings>System>device info ?

thanks
[Windows Mobile Development and Hacking General] c0rnholio:
No, the Model No. in the identity tab ist still ATHE100 but it doesn't seem to be red out from the bbc client. The string I have changed it the OS file belongs to a function called OEM_GetDeviceInfo and Get_DeviceID (if I remember correctly). There are traces int the BB client that this function is called.

However, the info tab of the BB client now shows that my device is a HTC-Hermes ;-)
[Windows Mobile Development and Hacking General] Andy Phillips:
Struggling!

c0rholio!

Point me in the right direction!

I've got all my rom files extracted and I've been through all of the exe's and dll's in the rom folder with IDA but I cant find my device type or OEM_GetDeviceInfo....

Which file do I need to open/edit?

Many thanks,

Andy.:D
[Windows Mobile Development and Hacking General] beginner:
cornholio: sorry for my basic questions. I solved and install the profesional version of BB, says 4.0.0.90 and device HTC-Hermes.

My problem now is that desktop BB doesn't connect to the device,

where did you download your client for WM BB software? I have one from Dopod, but not sure if it is the correct one due the desktop has a message of error indicating that BB is not running on the device, that is not true.
[Windows Mobile Development and Hacking General] cychiam:
I am keen to try this hack on my HTC Wizard. Can you advise the location and the changed code (for HTC-Hermes) so that I may use the Hex-editor to change it?

Thanks.
[Windows Mobile Development and Hacking General] c0rnholio:
sorry guys, I was travelling today, so I was not able to reply. the string you have to search for is in unicode, not ascii. I forgot to mention that, so that migth be the reason you were not able to find it. you need a hex editor that is able to search for unicode also. there is no need to fully unpack the rom file. just unpack it with duttys nbh tool and edit the windows.nb file, repack it with the same tool and flash it.

I can post screenshots tomorrow or on friday if needed.

cheers
[Windows Mobile Development and Hacking General] beginner:
c0rnholio: sorry again for this stupid question, ¿unicode is equivalent to Ascii? I said this because I found 3 times the word Athena, not HTC-Athena, in the windows.nb from last Dopod update for Athena, that I think is what you mention, but you said 2 occurrences, not 3.

I am using ultraedit for hexediting, looking for Ascii.
[Windows Mobile Development and Hacking General] Andy Phillips:
Free hex editor!

Guys,

You need to use frhed - its a free hex editor (pretty good too!) from http://www.kibria.de/. When you click on search make sure that you check the unicode tick box in the find window.

Thanks to c0rnholio for pointing us in the right direction!!:D

Andy.
[Windows Mobile Development and Hacking General] Andy Phillips:
Hmmm...

Ok...should I be changing occurances of WIZA200 to HERM100 or HTC WIZARD to HTC HERMES?? Or both!

Me thinks its just the latter so I will give it a go. Hacking the rom this way to get it to work is soooo easy! If it works I will let you know!

Andy.
[Windows Mobile Development and Hacking General] beginner:
guau,,,,, it works

thanks cornholio for your guidelines and thanks to andy for the hexeditor. I was using ultraedit and the replacement wasn't correct.

you are the kings...
[Windows Mobile Development and Hacking General] decebal:
can you please tell me what system version you have and what's the string "HTC-HERMES" or other.

thanks
[Windows Mobile Development and Hacking General] c0rnholio:
Now some version info:

OS: 5.2.1437 Build 17944

AKU: 0.3.1

Device: HTC-Athena

Device-Type-String: HTC-Hermes (faked)

BBC Version: 4.0.0.90

And it's not HTC-HERMES. It's HTC-Hermes

See the attached screenshots.
[Windows Mobile Development and Hacking General] beginner:
what device is yours?
[Windows Mobile Development and Hacking General] c0rnholio:
As for the universal I don't know if and how this could be done as the uni only has PU10 as deviceid. The BBC client reads this (and it also seems to look for WIZA100 and WIZA200) and converts it to the string "HTC-Universal" (and "HTC-Wizard" for the wizard) internaly.

There are references in the BBMain.exe (formerly in 2.x version it was bbservice.dll) that point to this behaviour.

So I don't know hot to make it think that the uni is a hermes...
[Windows Mobile Development and Hacking General] beginner:
bb 4.0.67

may be the universal wm6 and 4.0.67 works
[Windows Mobile Development and Hacking General] decebal:
i'm trying at the nk.exe level to obtain the deviceid

i would like the bbconnect system version to see if i'll match yours
[Windows Mobile Development and Hacking General] beginner:
what do you mean? do you need to download bbconnect 4.0.67?
[Windows Mobile Development and Hacking General] hchickers:
Treo 750 Cingular ?

Hi

Anyone w/ a clue on how to do it on an ATT Treo 750 ? Or actually 750c ?

Thanks,

HC
[Windows Mobile Development and Hacking General] decebal:
... nope ... the system version is the x.x.x.x number generated by the bb client in base of the rom/aku/deviceid
[Windows Mobile Development and Hacking General] Andy Phillips:
Nope - no joy

I didn't work on the wizard :( - next job is to change the instances of WIZA200 in my rom....:D
[Windows Mobile Development and Hacking General] decebal:
wizard and universal have some special treatment from the bbconnect. the bbconnect does some mapping from wiza100 to the name because for me it seems that the 2 devices have some different getdeviceinfo approach
[Windows Mobile Development and Hacking General] Andy Phillips:
Hmmm

Still haven't had a chance to test it. I hacked the rom last night but I really need to be able to flash it where I can connect to my exchange server. I couldn't live that long without email!

Maybe sometime tomorrow (today).