yashsingh1/xdaforums huggingface dataset:
[Windows Mobile Development and Hacking General] jelleeelco:
It works!!!!!!!!! :D :D :D :D

I compiled a new nbf file, flashed the phone, changed the AKU (if you don't do this, BB will connect but not pull any emails).

In the log it used the same data as with my previous rom (5.1.195, bb version 2.2.16 and AKU 0.2.0.0).

All thanks to c0rnholio. Everybody else with a wizard:

Use typhoonnbfdecode_v5 to extract the 800310000-os.nb

Then use HEXEDIT to change:

05 20 A0 E3 02 10 A0 E3 A5 EF A0 E3

into

05 20 A0 E3 01 10 A0 E3 C3 E0 A0 E3

Then use nb2nbf_tornado to recreate the nk.nbf. Put in:

Model: WIZARD

Language: WWE

OEM: empty

Version: empty

CID: Empty (very important)!

Select File 1 the changed 8... .nb file. Select OS and make sure you change the 82040000 (automatically defaulted) to 80040000.

then flash the nk.nbf to your phone, change the AKU and that's it!!!
[Windows Mobile Development and Hacking General] c0rnholio:
It think all the Wizard fans out there will appreciate your above instructions!

Congratulations! Welcome to the WM6 Blackberry Club ;)
[Windows Mobile Development and Hacking General] c0rnholio:
AKU 3.3 and 3.5 ROMs for Universal

The AKU 3.3 and AKU 3.5 ROMs have the OS Version 5.1.342

The hex value to change for these ROMs is:

Original: 55 3F A0 E3 02 30 83 E3 45 2F A0 E3 05 10 A0 E3 01

Change to: C3 30 A0 E3 02 30 83 E3 45 2F A0 E3 05 10 A0 E3 01
[Windows Mobile Development and Hacking General] adam_dublin:
Thats great news , I am trying to recreate the same myself , still trying to get some of the perl modules installed, Crypt-DES is giving me probs , when I run the ppm command it opens a windows gui version of the app , but I cannot add the new repositorys, any chance of getting the nk.nbf uploaded to rapid or somewhere?
[Windows Mobile Development and Hacking General] titus666:
Good work! I'm also on a wizard, and have been using a Qtek 2.17 rom with BB connect 2.1.2.16. I just updated to 2.1.2.31 (as clearly shown in this thread now both versions are on the supported list for a WM5 AKU2 rom).. 2.1.2.31 seems to be slightly faster, and also have proper lookups for corporate BES, so I recommend upgrading to 2.1.2.31 if you are still using 2.1.2.16.
[Windows Mobile Development and Hacking General] c0rnholio:
Try to add this to your repository list:

http://theoryx5.uwinnipeg.ca/ppms/package.xml

after that you should be able to install Crypt-DES. Be sure to use ActiveState Perl 5.8
[Windows Mobile Development and Hacking General] adam_dublin:
Thanks , have perl 5.8 , proxy seems to be blocking the downloads will try again when I get home, I will write down all the steps in case anyone else wants to do it as well.

adam
[Windows Mobile Development and Hacking General] c0rnholio:
Shameless copy from the PPM Manual :) :

-------------------------------------

PPM, Proxies and Firewalls

If you use a proxy server or firewall, you may need to set the http_proxy environment variable in order for PPM to work.

The http_proxy Environment Variable

Set the http_proxy variable with the hostname or IP address of the proxy server:

http_proxy=http://proxy.example.org

If the proxy server requires a user name and password, include them in the following form:

http_proxy=http://username:password@proxy.example.org

If the proxy server uses a port other than 80, include the port number:

http_proxy=http://username:password@proxy.example.org:8080

Setting http_proxy

Windows XP

1. Open the Control Panel and click the System icon.

The System Properties dialog is displayed.

2. On the Advanced tab, click on Environment Variables.

The Environment Variables dialog is displayed.

3. Click New in the System variables panel.

The New Sytem Variable dialog is displayed.

4. Add http_proxy with the appropriate proxy information (see examples above).
[Windows Mobile Development and Hacking General] adam_dublin:
Thank you , that has allowed me to install the updates for the ppm,

I have now decoded the 80040000-OS.nb from the rom, using the following command:

typhoonnbfdecode.pl -x nk.nbf

Got nb2nbf_tornado (to recode) here:

http://molski.biz/downloads/romediting/SplashScreenStuff.zip

I have uploaded a screenshot of how the nb2nbf_torbado app should look , see attached file.

this generated a new nk.nbf file , I then flashed this to my phone,

This did not work the first time , then I realised that when changing the hx strings in the 80040000-OS.nb file , I did not change it twice , i only changed the first occurance.

Fixed that , and rebuilt , now reflashing to my phone.
[Windows Mobile Development and Hacking General] adam_dublin:
Ok , for a while it was not workin...:-(

I checked the AKU and it had changed itself back to .4.0.V

I changed this in total commander to .2.0.0 hit the reset button , and it still set the aku back to 0.4.V

I reset a few times using the soft reset button , and it now stays at.2.0.0

blackberry seems to be working , going to reset a few times and see how it fares,

using PDAVI4 , may try the underground one later,
[Windows Mobile Development and Hacking General] c0rnholio:
Confirmed! I have Verison 2.1.2.52 now running on my universal... :D
[Windows Mobile Development and Hacking General] titus666:
So whats the difference between 2.1.2.31 & 2.1.2.52?
[Windows Mobile Development and Hacking General] beginner:
where is that version downloadable

Where you found 2.1.2.52 version? I tried to have from dopod website but no way.
[Windows Mobile Development and Hacking General] jelleeelco:
Changing Registry settings

Not sure if it's the same for the Universal, but on the Wizard it's best to switch off instead of using the reset button. If you use the Switch off button, the registry changes are kept. When using the reset button they change back again.
[Windows Mobile Development and Hacking General] c0rnholio:
It's on the XDA FTP Server:

ftp://xda:xda@ftp.xda-developers.com/Hermes/Tools_and_Programs/BlackBerry_Connect
[Windows Mobile Development and Hacking General] c0rnholio:
IMO 2.1.2.52 is running smoother and the connection seems to be more stable (with other versions I had frequent reconnections). The Lookup seems to get results near immediatly. There are no other oprions or anything else. It is build for AKU 3.x devices.
[Windows Mobile Development and Hacking General] jelleeelco:
how did you...

Hi c0rnholio,

Can you tell my how you found the values to change? I mean, from the string info that I gave you to the full line to search for and then what to change to what?

I want to do this for new roms as well...

Thanks in advance,

Jelle
[Windows Mobile Development and Hacking General] marcoscib:
BB connect for Eten PocketPC

Hi

I have an ETEN pocket pc, I installed a bb connect and I cannot make it working.

I have installed on it WM 5. Can you help me to solve the problem by doing what you did?

Thanks,
[Windows Mobile Development and Hacking General] c0rnholio:
Well, if there are any tools available that can extract the rom then it should be possible.
[Windows Mobile Development and Hacking General] c0rnholio:
OK, I'll try...

You gave me this string:

05 20 A0 E3 02 10 A0 E3 A5 EF A0 E3 03 40 A0 E3 00 50 A0 E3 00 30 80 E5

This values result in version 5.2.660

The 05 means major version 5

The 02 means minor version 2

Now to the complicated part (at least for me to explain).

Then you have A5 and a bit later the 00

Now do the following math:

Convert Hex A5 to binary = 10100101

Add the 00 to the end of this binary string = 1010010100

Reconvert this to dezimal = 660 which is you build number

So now let's do some more math to do the reverse and get it to os version 5.1.461 which is the OS version of the hermes aku3.3. The hermes aku3.3 is capable of running BBC 2.1.2.52.

I will conecntrate on the build number 461 since minor and major version change is pretty obvious.

Convert dezimal 461 to binary = 111001101

Strip the last to bits = 1110011

Convert 1110011 to hex = 73

Remember the striped bits = 01

Now look at your original string:

05 20 A0 E3 02 10 A0 E3 A5 EF A0 E3 03 40 A0 E3 00 50 A0 E3 00 30 80 E5

Looking at the results from above will guide you to the string you have to change it to:

05 20 A0 E3 01 10 A0 E3 73 EF A0 E3 03 40 A0 E3 00 50 A0 E3 01 30 80 E5

Now there is one thing left. There is this EF value directly behind the A5 in the original string. The E stands for the pointer in which the value is written, so NEVER change this. The F stands for the order in which the string (A5) is read AND for the shifting (that's what the assembler guru's call it, correct me if I'm wrong). So If you wnat to change the original os version 5.2.660 to 5.1.195 you have to turn of the shifting because dezimal 195 will result in C3 hex and no shifting is needed. Thus this F must be turned into a 0.

So to make it complete let's look at the Universal ROM.

The original Hex values for os version 5.2.318 are:

4F 3F A0 E3 02 30 83 E3 45 2F A0 E3 05 10 A0 E3 02

Wich means:

The 4F is in binary = 1001111

Now take the 02 from the values 02 30 83 E3 and convert it to binary = 10

Add this to the end of the 4F binary string = 100111110

Convert 100111110 to dezimal = 318 ;)

In order to change it to os version 5.1.461 change it to:

73 3F A0 E3 01 30 83 E3 45 2F A0 E3 05 10 A0 E3 01

That's it. Don't ask me how I got this info. I can't explain. It's just like looking at something you have never seen before, but you are somehow able to understand it or at least are able to modify it to fit your needs...

Cheers

EDIT: The above calculation has an error. For the correct calculation please look at post 152.
[Windows Mobile Development and Hacking General] marcoscib:
I looked at the AKU version and it is .2.2.0

Can you send me a general tool that can extract the rom?

how can I extract the ROM?
[Windows Mobile Development and Hacking General] c0rnholio:
Hi,

I don't know if there is a tool to extract the rom. I don't even know how a E-TEN looks like... :)

Maybe there are others that can help you on getting the rom extracted.

If you found a way to extract it, I will probably be able to get you any further.

BTW: what is the exact OS version string of your device?

Cheers
[Windows Mobile Development and Hacking General] marcoscib:
The OS version is: OS 5.1.195 (build 14928.2.2.0)

How did you extract your dates from your pocket pc? maybe I can do the same for my Eten pocket pc

I mean to change that strings.....
[Windows Mobile Development and Hacking General] c0rnholio:
OK, the OS version is the right one. Try the following:

Open a registry editor and go to HKLM\Systems\versions

there should be an Aku string with the value of .2.2.0

Change this value to .2.0.0 and install blackberry connect version 2.1.2.31 or 2.1.2.16.

Maybe it will work...

Good luck
[Windows Mobile Development and Hacking General] marcoscib:
I'm trying to change the AKU version by I receive an message: access is denied.

Any ideea?
[Windows Mobile Development and Hacking General] c0rnholio:
OK, this seems to be a common restriction on many devices. Look here

http://www.breaksoft.com/Blog/Posts/2005/8/Mobile_Registry_Editor_FAQ.aspx

or use google to find a solution.
[Windows Mobile Development and Hacking General] marcoscib:
I managed to change AKU and I installed both version of bb connect but still does not work :((

In the blackberry settings , status tab, service is: stopped. I tried to restart using the restart button but no a positive action.

Do I need to restart my pocket pc? how can I solve the problem? and to make my pocket pc working with bb connect
[Windows Mobile Development and Hacking General] MrTek:
Does anyone have a copy of BBconnect for WM5 Smartphone? I have a Pantech PN-820 I'd like to install it on. The version I saw here is for PocketPC, and when I try to install it, I get an error saying it's uncertified Software and will not install.

Also, my Blackberry is a 8700C on Cingular, and my WinMo phone is a Verizon phone with unlimited data plan? Since I'm an enterprise customer, could I get the APN on the phone from the desktop client since I'm on a different network?

thanks,

Jef
[Windows Mobile Development and Hacking General] c0rnholio:
You can try this one, but I don't know if it will fit on your device.

http://xdaforums.com/showpost.php?p=1073085&postcount=12
[Windows Mobile Development and Hacking General] MrTek:
Sweet! This installed! you rock!

I have a 1gig SD card for most things, and about 50mb free on the device :)

Now I have to see about getting it configured. Since I'm on a different network, I wonder how I get the service APN from Cingular to this. How will the BBberry software on my PC react to this device? Will it find it?

Currently my Identity settings say PIN is pending which makes sense.

Thanks!
[Windows Mobile Development and Hacking General] c0rnholio:
Blackberry Connect on Hermes WM6 ROMs

This is for the hermes WM6 ROMs (vanilla and XDA Live)

Original Hex values:

05 20 A0 E3 02 10 A0 E3 F2 EF A0 E3 03 40 A0 E3 00 50 A0 E3 00 30 80 E5

Change to:

05 20 A0 E3 01 10 A0 E3 73 EF A0 E3 03 40 A0 E3 00 50 A0 E3 01 30 80 E5

This will result in OS Version: 5.1.461

Use BBC 2.1.2.52

Change AKU String in Registry to .3.3.0

Please report if it works!
[Windows Mobile Development and Hacking General] beginner:
Do you mean?:

wm6 2.08 jmwrights

platfomr: universal

21.2.52

modifications:

nbf as you say in first page.

the dll you mention
[Windows Mobile Development and Hacking General] c0rnholio:
Yes. Please look at post #64. In the end of this post I wrote the values for 2.1.2.52 for the Universal with the JW 2.08 WM6 ROM.

Cheers
[Windows Mobile Development and Hacking General] marcoscib:
Hi

Any suggestions for ETEN pocket PC?

My reported AKu from registry is .2.2.0

OS version 5.1.195

Please help me on this.
[Windows Mobile Development and Hacking General] c0rnholio:
Mate, don't get me wrong, but I can't help you on this.

1. There seem to be no ROM Tools available for E-TEN G500+

2. The BBC Software we are talking about here is bound to HTC devices (hardcoded in the BBService.dll) and can not be manipulated because this is signed code
[Windows Mobile Development and Hacking General] baudy2:
Thank you for that ! I just have one question - i have one RUU_signed.nbh and one unpacked 02_OS.nb files from XDA-Live WM6 for Hermes.

When i try to find the string

05 20 A0 E3 02 10 A0 E3 F2 EF A0 E3 03 40 A0 E3 00 50 A0 E3 00 30 80 E5

I have it TWICE in both files. Do i need to do anything else with those files ? Means - to convert them further to binaries ? How ?

Please, help.
[Windows Mobile Development and Hacking General] c0rnholio:
Interesting that you find this string in the .nbh file. I thougth this one is somehow encrypted or something.

However, I can only speak for the Universal since I don't owe others. I suggest you stick with the extracted on (02_OS.nb).

You have to edit both occurances of the hex value in this file. There is no need to extract it any further, or to extract and disassemble the coredll.dll.

It _should_ work by just editing the hex values in the .nb file.

However, some guys in the Hermes forum say that one can brick his device by flashing manipulated binarys. Since I don't have such a device I cannot prove this. So be carefull.

Cheers
[Windows Mobile Development and Hacking General] beginner:
Sorry disturbing you with this stupid problem. I don't know how to copy the dll you mention into the pc... I'm using resco, changing the file properties but it doesn't want to copy.
[Windows Mobile Development and Hacking General] c0rnholio:
You can not copy the coredll.dll from a running device. In addition this is not the way this hack works. You have to decode the .nbf file. The you have to use a Hex-Editor and change the values I've posted in the .nba file. Then you have to re-encode the .nba file to a .nbf file and then you must FLASH this on your device.
[Windows Mobile Development and Hacking General] beginner:
was clearly an stupid question. Thanks a lot by your time.

- I have the nbf file modified on the way you describe at the beginning of the post, as needed for having running the hermes.

- I have to put other values to AKU, I suppose 3.3.0

thanks.
[Windows Mobile Development and Hacking General] baudy2:
Ok. Some 'negative' results for the XDA-Live ROM -

I found the string twice in Hermes OS.nb at addresses:

Address: 0018DB94

Address: 003E6030

1. Changed the string in both locations - device completely unstable. Version string is EMPTY (!!!)

2. Changed the string at address 0018DB94 - Device is fine, but the OS version is still 5.2.968 (Build 17217.0.0.0) - XDA. Changed registry as proposed.

3. Changed the string at address 003E6030 -device completely unstable. Version string is EMPTY (!!!) cannot run anything.

Any further suggestions ?
[Windows Mobile Development and Hacking General] c0rnholio:
OK, could you be so kind and just change the following on both locations and tell me what verson is reported then?

Original Hex values:

05 20 A0 E3 02 10 A0 E3 F2 EF A0 E3 03 40 A0 E3 00 50 A0 E3 00 30 80 E5

Change to:

05 20 A0 E3 01 10 A0 E3 73 EF A0 E3 03 40 A0 E3 00 50 A0 E3 00 30 80 E5

This should result in os version 5.1.460
[Windows Mobile Development and Hacking General] c0rnholio:
If the above doesnt work you can at least go to os version 5.1.195 and run BBC version 2.1.2.31 by doing th following hex edit:

Original Hex values:

05 20 A0 E3 02 10 A0 E3 F2 EF A0 E3 03 40 A0 E3 00 50 A0 E3 00 30 80 E5

Change to:

05 20 A0 E3 01 10 A0 E3 C3 E0 A0 E3 03 40 A0 E3 00 50 A0 E3 00 30 80 E5

This should result in os version 5.1.195
[Windows Mobile Development and Hacking General] baudy2:
BBC 2.1.2.52 works perfectly on my AKU 3.3 (5.1.x.x.x). I still would like to make BBC working with WM6.

Thanx anyway.
[Windows Mobile Development and Hacking General] c0rnholio:
the above IS for the wm6 rom. but by changing to these values your wm6 report to be os version 5.1.195. this will allow you to run bbc version 2.1.2.31 on your wm6 rom.
[Windows Mobile Development and Hacking General] baudy2:
You da man ! I have now version 5.1.460 (Build 17217.3.3.0) - XDA with applied registry changes.

Now installing BBC 2.1.2.52. Will keep you informed.
[Windows Mobile Development and Hacking General] c0rnholio:
NO! 5.1.460 will not work!

Currently the only way is to use the string to make the wm6 look like version 5.1.195.
[Windows Mobile Development and Hacking General] baudy2:
Yes, you are right. BBC 2.1.2.52 does not work.

Now i will try

Original Hex values:

05 20 A0 E3 02 10 A0 E3 F2 EF A0 E3 03 40 A0 E3 00 50 A0 E3 00 30 80 E5

-- -- --

Change to:

05 20 A0 E3 01 10 A0 E3 C3 E0 A0 E3 03 40 A0 E3 00 50 A0 E3 00 30 80 E5

With BBC 2.1.2.31

Will keep you informed.

Do i need to change the registry as well ?
[Windows Mobile Development and Hacking General] baudy2:
BBC setup

Ok,

I've made :

1. Changed the OS.nb (two places) from XDA-Live to:

Original Hex values:

05 20 A0 E3 02 10 A0 E3 F2 EF A0 E3 03 40 A0 E3 00 50 A0 E3 00 30 80 E5

Change to:

05 20 A0 E3 01 10 A0 E3 C3 E0 A0 E3 03 40 A0 E3 00 50 A0 E3 00 30 80 E5

2. Flashed the Hermes.

3. Changed HKLM\System\Versions and edit the Aku string from .0.0.0 to .2.0.0

4. Restarted Hermes (holding power button)

5. The resulting version is 5.1.195 (Build 17217.2.0.0) - XDA

6. Installed BBC 2.1.2.31

Synchronized with desktop as usual.

It still does not connect....

6.
[Windows Mobile Development and Hacking General] c0rnholio:
OK, according to the wiki the first os version the hermes was available on was 5.1.195 but with AKU 2.3.

So, could you please change the Aku string in the registry to .2.3.0 and see what happens.

I have mutliple more solutions how we can get this running on your device, but let's make ist step by step.

Cheers
[Windows Mobile Development and Hacking General] baudy2:
Thank you c0rnholio !

It works now !

Step by step.

1. Changed the OS.nb (two places) from XDA-Live to:

Original Hex values:

05 20 A0 E3 02 10 A0 E3 F2 EF A0 E3 03 40 A0 E3 00 50 A0 E3 00 30 80 E5

Change to:

05 20 A0 E3 01 10 A0 E3 C3 E0 A0 E3 03 40 A0 E3 00 50 A0 E3 00 30 80 E5

2. Flashed the Hermes.

3. Changed HKLM\System\Versions and edit the Aku string from .0.0.0 to .2.3.0

4. Restarted Hermes (holding power button)

5. The resulting version is 5.1.195 (Build 17217.2.3.0) - XDA

6. Installed BBC 2.1.2.31

Everything works !

I will publish it on XDA-Live forum. Thank again for a great job done !
[Windows Mobile Development and Hacking General] c0rnholio:
You're welcome buddy. Welcome to the club. I'll see what I can do to get the 2.1.2.52 version of bbc running for you hermes guys.

Cheers
[Windows Mobile Development and Hacking General] booffy:
Just for your information, it is working as well with the RUU_*.nbh file from the XDA-Live 0.1 rom. I use the 2.1.2.52 Blackberry version, and everything is working fine...Great Job Guys....

So Now I am please to say that I am using the XDA-Live Rom now....
[Windows Mobile Development and Hacking General] countfloyd:
Will this work to get BB connect working on my HTC Excalibur? I tried version 2.1.2.39 on the TMobile WM6 Dash test rom and it can install but won't pull any email...sending service books didn't work either. FYI the Dash/Excalibur is smartphone not ppc.

Thanks!

J
[Windows Mobile Development and Hacking General] c0rnholio:
I actually don't know. Someone has got it to work (or modified it to work) for a WM5 Smartphone look at this post: http://xdaforums.com/showpost.php?p=1073085&postcount=12

So maybe, if you change your OS version using the trick from this thread in combination with the BBC version of the post above it might work...

Feel free to give it a try and report back if you got it working.

Good luck!
[Windows Mobile Development and Hacking General] amexman:
I-Mate Jaq3 BBC

Anyone have any luck getting blackberry connect to run on the Jaq3?

I have it installed, but cannot get a pin to generate when running the desktop software for bbc for wm5.

Any help is appreciated...
[Windows Mobile Development and Hacking General] joshnat:
I'm having no luck with Hermes (8525) on the BBC-prepared version of the XDA Live rom and 2.1.12.52. I changed the version to .3.3.0 and it will not connect. Does anyone know where to find 2.1.12.32? I've also tried 2.1.12.16 with no luck.

EDIT: Nevermind, I found it. Now to see if it works!
[Windows Mobile Development and Hacking General] fegyvej:
Hi c0rnholio!

I hacked the MB edition (wm6 5.2.660) and it is working very fine on my K-JAM with BBConnect 2.1.2.31.

Thanks for your great work

Janos
[Windows Mobile Development and Hacking General] c0rnholio:
Hi, if I understood you right, you're planning to modify the coredll.dll on a running system, or are you trying to copy over a modified version of this dll to your device?

Both won't work. You cannot modify the coredll.dll directly on your device and in second the system does not accept a modified copy of the coredll if you simply copy it over to the device. It will always use the original one, because the coredll is loaded from XIP during the boot phase. Thus your modified copy will never be executed. The only way is to do it the way I described. I wish it would be easier since it's not everyones game to play with hex, but it's currently the only way I found it to work.
[Windows Mobile Development and Hacking General] KarmaNP:
Blackberry Emails and Voice Command

c0rnholio & all,

I would like to thank c0rnholio for the great hack that he discovered and shared with us. We finally have the BB connect working on our devices with newer roms.

When new emails are received via microsoft exchange server (e.g. pusmail from mail2web and others) and if apporpriate options are checked, notifications of new emails are annouced via voice command app. Since the new emails received thru BB connect are not announced by voice command, I was wondering if there is a registry hack (or any other solution) to do this.

TIA
[Windows Mobile Development and Hacking General] beginner:
yeah, it's true. I observe when you forward a new mail, it reads the subject. Maybe to do some investigation.

But left c0rnholio work in the new Jwright rom version announced, in order be compatible with BB.