yashsingh1/xdaforums huggingface dataset:
[Windows Mobile Development and Hacking General] samymdr:
BB connect on Universal WM 6.1

BB connect 4.0.0.90 works fine on Universal with the new WM6.1 19174 build CHS,CHT,WWE DFT rom .

http://xdaforums.com/showthread.php?t=365335

The only thing (!) you have to do is :

- decode the rom to produce the .fat file

- with a HEX editor (such as frhed from http://www.kibria.de ) replace within the fat file the unicode string HTC-Universal by HTC-Hermes. (replace the sal by 00 00 00)

- encode the modified fat to produce the .nbf

- upgrade the universal with the new .nbf

- change within the registry the AKU version 1.0.0 by 0.3.1

- install bbconnect

This procedure doesn't work with the 6.1 rom from Ranju. The Ranju rom returns PU10 as model type the the blackberry (as all other roms before), the DFT rom returns HTC-Universal (or HTC-Hermes after the rom patch)

Till now, i haven't see other problems with this patch and the bb connect works fine
[Windows Mobile Development and Hacking General] edsub:
I am strugling again with version numbers in order go get a working BBC on my 6.1 Wizard ROM.

The OS version is OS 5.2.19716 (19716.1.0.0)

Does anyone know the string to search for that resembles the minor version number (19716)??

If I need to get someting from thsi ROM, plz let me know. More than happy to upload what you need.

I prefer to use BBC 4, but I doubt if the fake device ID works on a Wizard ROM. I cant find any unicode string that resembles HTC-Wizard. Its at best WIZA200 I find, only once.

But BBC 2.1.2.31 would do alkso. I have this running on my WM5 AKU 3.3 ROM. To get this version working i have to hack the current OS version to 5.1.195.
[Windows Mobile Development and Hacking General] snadowitz:
Hi - anyone got this running on HTC Touch Cruise?
[Windows Mobile Development and Hacking General] usap:
And how about Samsung i780. Do you know if i could to change there the string to something like HTC Touch

PS hier the link to BB Connect for it http://support.vodafone.de/publicfiles/BBConnect_WM6_Professional_BB_4[1].0.0.84.exe
[Windows Mobile Development and Hacking General] letsgoflyers81:
I'm still holding out for compatibility with the Sprint Mogul, aka HTC Titan. I've explored all other avenues with getting e-mail at work, ActiveSync and Good, and this looks like the only possible solution for my device.
[Windows Mobile Development and Hacking General] alfredtv:
samymdr can you please verify that your bbconnect is working on the DFT ROM I have walked through your process some 4 or 5 times now and am not keeping a connection, although the bbconnect does create a pin it does not connect.
[Windows Mobile Development and Hacking General] blegedetz:
BB connect on XDA Stealth

Hi.. anyone installing BB connect on XDA stealth yet?

if yes please tell me how to do it. thanks
[Windows Mobile Development and Hacking General] titus666:
Its interesting that the radio does not seem to be involved, but there's evidence that the "wrong" radio version stops BB connect from working. I wonder if the radio rom influences the "transport version" then?

I was under the impression that there was no version greater than 195 with AKU2.. I thought all they did was change the build number after that...

Did the device type influence the pseudo number? I've seen posts where workers @RIM can tell the type of device that is being discussed, hence it must get transmitted, but maybe not as something that influences the pseudo number/connectivity.

ps, I'm using a Wizard, and hopefully you can explain how to find the OS version string in coredll.dll easy enough for others to duplicate in another rom...
[Windows Mobile Development and Hacking General] skenobi:
Hi all. Hi c0rnholio.

I'm a little confused by now. I have a Dopod 838pro (aka Tytn, i think, an HTC Hermes).

Windows Mobile OS 5.1.95 (Build 14955.2.3.0)

I have installed BBC v 2.1.2.31, although I also have the 2.1.2.52 version (uninstalled for now since it also failed to 're-start').

In the broad strokes, can you tell me what should be my next step(s)?

Many thanks in advance!
[Windows Mobile Development and Hacking General] c0rnholio:
Step by step guide...

OK folks, I'll try to explain the steps that I have gone through to get this stuff working.

First of all you need a handfull of tools wich are available in this forum or on the web.

- HTC64 Extended ROM Tool.exe

- dumpromx.exe

- RomMaster.exe

- imgfs_tools_182.rar

- a disassembler (I used IDA Pro Eval)

I short:

1. Decode the .nbf with HTC64 Extended ROM Tool.exe

2. Extract the XIP section with RomMaster.exe

3. dump the coredll.dll from the XIP with dumpromx

(Info for Step 2 and 3: http://xdaforums.com/showpost.php?p=1114860&postcount=41)

4. Disassemble the extracted coredll.dll

5. Search for the GetVersionEx function in your disassembly

There are some mov or movl in this function which are representing the hardcoded version info

6. Mark the hex string that repesents your version info (there three relevant mov or movl vommands: one will be loaded with a "0x5", one with "0x1" or "0x2" depending on the os you are editing, and one with something like "0xc3" (which is 195 in hex for example)

These three value represent the os version info you will see when you look in Start->Settings->System->About

7. Now open the Hex-Pane in your disassembler. The hex string you have marked in step 6 is no highlighted.

8. Note this string and open the .nba file (the one resulting from step 1) in a Hex-Editor

9. Search for the string you have found in step 6 and 7

10. Change the string to fit your needs (a.k.a. the required os version info) and save the file (Remember: There are two occrances of this string, edit both of them)

11. Encode the .nba file with HTC64 Extended ROM Tool.exe back to a .nbf

12. Flash it to your device

13. Boot and take a look in Start->Settings->System->About

14. If your version info has changed to what you need then you can install the blackberry client (don't forget to edit the Aku Version info in your registry like I wrote in one of my last posts). If it does not have changed , restart from step 1.

That's it. Uhm..A warning: using the above might brick your device if you do something wrong.

I hope you can follow my explainations somehow...

Cheers
[Windows Mobile Development and Hacking General] jelleeelco:
Thanks a lot for this. I tried to do all the steps, but when it comes to dissambling DLL's unfortunatly I have to stop...can't find a dissambler on the internet. I get the dll, but after that...

I tried to download the one you use, but the demo version doesn't work for this kind of dll (if I understood correctly).

I'm also not sure if I can use this hex change one-2-one on the Wizard 80031...nb that is generated by typhoonnbfdecode.

Anyone any luck with getting the right string?
[Windows Mobile Development and Hacking General] jelleeelco:
what strings to change

Ok, I've done what c0rnholio suggested. I have found the HEX for version 2.26 Tmobile, and for WM:

From WM6:

; Exported entry 17. GetVersionEx

; Exported entry 717. GetVersionExW

EXPORT GetVersionExW

GetVersionExW

STMFD SP!, {R4,R5,LR} ; GetVersionEx

MOV R3, #0x114

MOV R2, #5

MOV R1, #2

MOV LR, #0x294

MOV R4, #3

MOV R5, #0

STR R3, [R0]

STR R2, [R0,#4]

STR R1, [R0,#8]

STR LR, [R0,#0xC]

STR R4, [R0,#0x10]

STRH R5, [R0,#0x14]

MOV R0, #1

LDMFD SP!, {R4,R5,LR}

BX LR

; End of function GetVersionExW

----------------------------------------------------------------

text:03F6AAA0 1E FF 2F E1 CC 1C F9 03 08 BC FB 03 0D C0 A0 E1

----------------------------------------------------------------

From T-Mobile 2.26

; Exported entry 17. GetVersionEx

; Exported entry 717. GetVersionExW

EXPORT GetVersionExW

GetVersionExW

STMFD SP!, {R4,R5,LR} ; GetVersionEx

MOV R3, #0x114

MOV R2, #5

MOV R1, #1

MOV LR, #0xC3 ; '+'

MOV R4, #3

MOV R5, #0

STR R3, [R0]

STR R2, [R0,#4]

STR R1, [R0,#8]

STR LR, [R0,#0xC]

STR R4, [R0,#0x10]

STRH R5, [R0,#0x14]

MOV R0, #1

LDMFD SP!, {R4,R5,LR}

BX LR

; End of function GetVersionExW

----------------------------------------------------------------

text:03F7C470 1E FF 2F D1 00 00 A0 E3 1E FF 2F E1 30 40 2D E9

----------------------------------------------------------------

Should I know "Find & Replace" the upper string in the WM .nb file with the lower one? I'm a bit puzzled if that is the case...
[Windows Mobile Development and Hacking General] c0rnholio:
The WM6 ouptput means:

R2 = Major Version 5

R1 = Minor Version 2

LR = Dezimal 660

which result in an OS version of: 5.2.660

The WM5 ouptput means:

R2 = Major Version 5

R1 = Minor Version 1

LR = Dezimal 195

which result in an OS version of: 5.1.195

Now do the following:

In IDA pro mark the hex string (#0x294) of the command MOV LR, #0x294. You can do this by simply clicking on it. Then Switch to the Hex-View A tab and see what is highlighted. This is the string that has to be modified. Do the same for the "2" in MOV R1, #2 .

If you post the line I will tell you what you have to change.
[Windows Mobile Development and Hacking General] jelleeelco:
Dude, you rock...

I go into Functions, select GEtVersionExW and I go into IDA View-A.

Then I get what I posted before. Then I do what you said, and click on the various entries: single click. Then I go to Hex View-A.

I post the line before and after as well, cause when I click on it it only highlights a set of 4:

MOV R3, #0x114 1E FF 2F E1

MOV R2, #5 30 40 2D E9

MOV R1, #2 02 10 A0 E3

MOV LR, #0x294 02 10 A0 E3

MOV R4, #3 02 10 A0 E3

MOV R5, #0 A5 EF A0 E3

This is a copy of the three lines that include the above (just in case, since I really don't understand what line I should be looking at)

1E FF 2F E1 30 40 2D E9 45 3F A0 E3 05 20 A0 E3

02 10 A0 E3 A5 EF A0 E3 03 40 A0 E3 00 50 A0 E3

00 30 80 E5 04 20 80 E5 08 10 80 E5 0C E0 80 E5

can't wait...!!
[Windows Mobile Development and Hacking General] jelleeelco:
sorry man, somehow my spaces messed up a bit. I hope you can read it though?
[Windows Mobile Development and Hacking General] c0rnholio:
Change the following:

Original: 05 20 A0 E3 02 10 A0 E3 A5 EF A0 E3

To this: 05 20 A0 E3 01 10 A0 E3 C3 E0 A0 E3

That should do it. It should result in OS version 5.1.195. After flashing, pleaese report what your systems says about it's OS version.

I hope it works. Good luck!
[Windows Mobile Development and Hacking General] jelleeelco:
Thanks, that was quick...

Just to be 100% sure: I have to look into the original 800310000.nb file that I get from decoding the nbf file? Or do I change the dll file?

My problem is, I can't find that string! When I use the DLL from Tmobile, and use the string in there, I DO find it in the .nb file. BUt when I use the .dll from the WM6 rom, I can't find it in the .nb file of WM6...
[Windows Mobile Development and Hacking General] c0rnholio:
You should find this in WM6 .nb file: 05 20 A0 E3 02 10 A0 E3 A5 EF A0 E3

And should change it into : 05 20 A0 E3 01 10 A0 E3 C3 E0 A0 E3

I'm off for today. I'll get back to you tomorrow.
[Windows Mobile Development and Hacking General] jelleeelco:
got the error...

Hi

I THINK (pls check my logic) got the error….First I did ONLY the Coredll.dll to the XIP2 folder. Now I extracted all files, as in your manual…

Gives me the following result:

EXPORT GetVersionExW

GetVersionExW

STMFD SP!, {R4,R5,LR} ; GetVersionEx

MOVL R3, 0x1CD

MOV R2, #0x114

MOV R1, #5

MOV LR, #1

MOV R4, #3

MOV R5, #0

STR R3, [R0,#0xC]

STR R2, [R0]

STR R1, [R0,#4]

STR LR, [R0,#8]

STR R4, [R0,#0x10]

STRH R5, [R0,#0x14]

MOV R0, #1

LDMFD SP!, {R4,R5,LR}

BX LR

; End of function GetVersionExW

MOVL R3, 0x1CD	45 2F A0 E3

MOV R2, #0x114	05 10 A0 E3

MOV R1, #5	05 10 A0 E3

MOV LR, #1	00 50 A0 E3

MOV R4, #3	0C 30 80 E5

MOV R5, #0	0C 30 80 E5

3 lines around it:

03F7C470 1E FF 2F D1 00 00 A0 E3 1E FF 2F E1 30 40 2D E9

03F7C480 73 3F A0 E3 01 30 83 E3 45 2F A0 E3 05 10 A0 E3

03F7C490 01 E0 A0 E3 03 40 A0 E3 00 50 A0 E3 0C 30 80 E5

And these I do find in the .nb file.

So if you can tell me which ones to change!!

Thanks

Jelle
[Windows Mobile Development and Hacking General] c0rnholio:
Change: 73 3F A0 E3 01 30 83 E3 45 2F A0 E3 05 (which is version 5.1.461)

To: C3 30 A0 E3 01 30 83 E3 45 2F A0 E3 05 (which will be 5.1.195)
[Windows Mobile Development and Hacking General] jelleeelco:
string found, don't know how to encode .nb

I could change the strings in the .nb file. However I can't figure out how to encode the 800310000-os.nb file back to a nbf file.

Anyone an idea? I tried to use typhoonnbfdecode_v5, but I can't get the settings correct to work. Too bad there isn't a simple tool like HTC 64 for the Universal...or is there??

thanks

Jelle
[Windows Mobile Development and Hacking General] c0rnholio:
Dude, what have you done? The version in your last post is an AKU 3.3 ROM, not a WM6.

However, the hex values I've told you here

are the right one. I've donwloaded the Underground Version of WM6 for the Wizard and extracted the .nb file. I fired up my hex editor and looked for the hex values above. They are there, 2 times. Change them to the ones I told you and you should be fine.

Cheers
[Windows Mobile Development and Hacking General] jelleeelco:
Ha, I just found that out as well...I must have swapped up the files somewere...I'm going to do it one more time and see what I can find...

Do you know how to encode though again back from nb to nbf?
[Windows Mobile Development and Hacking General] jelleeelco:
I'm stupid

Oh boy, I'm very sorry that I have waisted your time so badly... I decoded the WM6 rom again and yep, there was the string....

I know what went wrong; in my WM6 folder I had the extracted files as well as a zip file named AKU3_Crossbow....I took the NFB twice from different places. :( :( :(

Now I've got my fixed .nb file (fixed on both places), all I have to do is encode and flash the phone... See my last question: any idea how to encode a nb file?? :confused:
[Windows Mobile Development and Hacking General] c0rnholio:
There is something regarding this in the wiki:

http://wiki.xda-developers.com/index.php?pagename=RomTools/typhoonnbfdecode.pl

Also there seems to be a util called nb2nbf_tornado (search for it in the wizard section of this forum). It seems to be able to rebuild the nbf file for the wizard.

cheers
[Windows Mobile Development and Hacking General] jelleeelco:
One last request?

Thanks...got it...

Now I decoded my changed .nb file. Just to be sure, I checked the original .nbf with the new .nbf and there are some differences. I just want to make sure it won't brick my phone when I flash; I'm particularly worried about the blversion (empty in the new nbf) and the fact that VERSION is not mentioned (nothing vs 3.0) and that the 80040000 now changed to 82040000.

New:

blversion

device	WIZARD

entrycount	1

flags	17

flags2	12

hdrcrc	0x70b6780e

language	WWE

magic	HTC

operator

rest2

version

82040000	03900000	bf6e8154	OS

---------------------------------------------------

Old:

blversion 332e30

device	WIZARD

entrycount	1

flags	17

flags2	12

hdrcrc	0x7aa01a5b

language	WWE

magic	HTC

operator

rest2

version	3.0

80040000	03900000	3fcb4aa7	OS
[Windows Mobile Development and Hacking General] c0rnholio:
Sorry, can't help you on this. I have zero experience regarding the wizard.
[Windows Mobile Development and Hacking General] stefanopolis:
Samsung i780 BB conect

Hi, does anybody have a clue where in Samsung i780 Rom change device type-name?
[Windows Mobile Development and Hacking General] flummie:
HTC Touch HD

Hi All,

Just got a Touch HD and it would be great if I got BB to run on it. My empl. refuses push to MS mobile.

Can any1 direct me in the right direction?

Cheers, Alwin
[Windows Mobile Development and Hacking General] gladiac:
Hey pal,

you should try the newest blackberry connect which is version 4.0.0.104. You can get it (and the older versions too) from HERE. With a little bit of luck and meditation you should get a pin after installation and should be able to connect. AFAIK versions greater or equal 4.0.0.103 are way more compatible than all the older versions.

Just give it a try, cheers!
[Windows Mobile Development and Hacking General] flummie:
thx gladiac! Im on my way, baby!
[Windows Mobile Development and Hacking General] rajesh242:
Can you give me the Hexedit value for 5.2.20764 and what needs to be changed to make it 5.1.195
[Windows Mobile Development and Hacking General] rajesh242:
Hi.. Can anybody help me in changing the WM6.1 version 5.2.20764 to 5.1.195. I use HTC universal and intend to use BB connect version 31.
[Windows Mobile Development and Hacking General] mnooony:
It ruined my phone .. :(

I had to hard reset my phone
[Windows Mobile Development and Hacking General] gotz:
hi all,

i have htc magician, i success to install and get pin, and imei but no IP addders (IP address not connected)

if my phone turn on, this automaticay dial to blackberry server (blackberry.net) but cannot conected to server. how i can using BBC? :(

thanks for help

sory for my bad english
[Windows Mobile Development and Hacking General] Dr. Mac:
i got BB connect working on my htc HD

and works great

i was woundering if i could use the instant massenger and web browser to work!

my manila is blocking the link to the blackberry program

im using version 4.0.0.0.106

anyone help
[Windows Mobile Development and Hacking General] ambush276:
ok maybe im kind of dumb here but i could use some help. I have the XV6800 on VZW and i was going to Dl one of the new Windows Mobile 6.5 roms over at ppcgeeks.com... I want to get this to work and i have teh desktopconnect installed and the bbconnect 4..... 106 downloaded as well. When trying to install on teh device on w/ the cab it gives me an error at the end and it will not install. Do i need to do one of those regedits, was there ever a guide made a cab? any help? Thanks so much!!!
[Windows Mobile Development and Hacking General] tqynnhoj:
Hi guys,

I am new at this and don't know much but the BBC 4.0.0.101 worked on my default OS that came with my X1a from Rogers, but when I flashed it to the Energy ROM is would install but wouldn't connect. After some research online I've noticed that the software detects for rom versions and that it would only work with version 1.05.631.10. How and what would I need to change in order to get BBC to work?

Any help would be appreciated.

Thanks
[Windows Mobile Development and Hacking General] hgrimberg:
Clarification

I live in Argentina and the cell phone service providers here offer a flat fee for 3G service from Blackberry and for Blackberry phones only of $18 dollars per month. This is much cheaper than the usual 3G service for any other phone that costs $30 dollars per month. Also Blackberry offers an International Roaming service of $20 dollars per month (on top of the other) and you get unlimited internet service wherever in the world you are. But..., this is only if you have a Blackberry device. Is it possible to emulate a Blackberry with our Windows mobile phones? Is there a program to do this? Is this post related to that? I didnt really understand the purpuse of this post and the "Blackberry connect".

Thank you.
[Windows Mobile Development and Hacking General] palmop:
I would recommend you to read http://na.blackberry.com/eng/ataglance/connect/, it explains what "Blackberry Connect" is. In short it allows you to use Blackberry Internet Service or Blackberry Enterprise Server from a Windows Mobile or Nokia phone. You'd need a Blackberry service enabled SIM along with your Windows Mobile device. Blackberry Connect with BIS allows you to push emails to your device like it is a Blackberry device. If you have a BES account (usually it is via work or a hosted Microsoft Exchange service), then you can also sync contacts and calendar as well. Blackberry Connect also allows you to browse the web via Blackberry service as well.

There is also upcoming Blackberry Application Suite for Windows Mobile devices, which will replace Blackberry Connect and it is a full Blackberry OS emulation on WinMo. I don't know when it will be released, last time I had seen a version of it was in December 2008.

So to sum up, yes, you can get Blackberry service from your provider and use it on a Windows Mobile device via Blackberry connect, but it is not something I'd recommend if you are not familiar with what you are doing. Only some devices are officially supported and for the rest, you'd have to rely on registry and other hacks.
[Windows Mobile Development and Hacking General] nnnpga:
I am using BBC 4.0.0.106 on hTC Touch HD and had the same problem after flashing WM6.5 roms (Dutty's or Energy). I found in the net following solution:

1. uninstall blackberry connect.

2. change following registry keys to given avalues:

[HKEY_LOCAL_MACHINE\Software\OEM]

"OperatorVersion"="20771"

[HKEY_LOCAL_MACHINE\Software\OEM]

"ROMVersion"="5.02.405.2"

[HKEY_LOCAL_MACHINE\System\Versions]

"Aku"=".1.6.0"​

3. install back the blackberry software.

"OperatorVersion" did not had any influence on BBC and it was working but I change it as well.

In one of roms I was testing I couldn't install BBC via ActiveSync but the .cab installation worked.

I hope it will work for you as well.
[Windows Mobile Development and Hacking General] uli1992:
HELP ME!!!!!

Hey,

i have a german blackberry curve 9800. I brought it to a shop to unlock it and it worked. then i switched it off cause i wanted to try if my new pincode is working. but now i need to type a password in but i don't know which one :( the lady of the shop told me that it has nothing to do with my new sim card but rather with my blackberry. nobody can help me cause the blackberry software is too safe blablabla :( pls i need a code or something like that to reset it ?! Is this possible?!

Thanks for your help!

Uli
[Windows Mobile Development and Hacking General] beginner:
Thanks a lot by your help

Cornholio: just to say that after some days using BB with WM6 jwr 2.08 all is fine. IT is incredible. You are the best.

Do you think we could improve some features I don't like or are missing in BB?

- not possible to call directly when push phone key over a mail to sender.

- not automatic suggestion of mail address when writing the "to" field.

- not connection to voice command as message, when comes new ones.

I thing is a matter of registry keys associated to msoutlook but should be changed to support bb accounts.
[Windows Mobile Development and Hacking General] c0rnholio:
If I want to call a person who sent me an email, I use th euparrow button to get the name highlighted and then I press enter or space. This brings up the call dialog.

It would be cool to have the automatic suggestion of an email-address but I've never had that in BBC, so it's normal to me. BTW: It's a good training to have thousands of email-addresses stored in the main memory of your brain ;)

Adn finaly, yes voice command doesn't tell the sender and subject of new mails coming from bb, but I don't need that. I don't know if it is possible at all.

If you find something, tell me about...

Cheers
[Windows Mobile Development and Hacking General] adam_dublin:
I am currently looking into doing this with the Wizard,

I have tried extracting the rom (PDAVIET 4)using HTC64 Extended ROM Tool.

This has given a message saying phone unknown, it does create a nk.fat file but I am not sure if it is right as htc64 does not recognise the model.

Is anyone else working on this for the wizard? maybe we should all work on the same versions?

I am currently running the

o2 uk rom, 2.21.4.1 wwe

radio: 02.07.10

ext rom 2.21.4.101

OS 5.1.195 (build 14847.2.0.0)

Blackberry version 2.1.2.16

BB Transpotr verision: 2.1.0.63

Blackberry system version: 189.118.59.239

PCBB from logfile: ed f5 6f da

This currently works with blackberry on the wizard

Rommaster available here: http://xdaforums.com/showthread.php?t=249015
[Windows Mobile Development and Hacking General] c0rnholio:
Hi,

you can't use this tool for Wizard ROMs. Use this one instead:

http://wiki.xda-developers.com/index.php?pagename=RomTools/typhoonnbfdecode.pl

Also please look at the previous posts (beginnig from #38) regarding recreation of the .nbf.