yashsingh1/xdaforums huggingface dataset:
[Touch HD General] alphanimal:
I'm planning to put WM6.5 on my Touch HD.

First: Will there be an official one from HTC or do I have to get it here?

If I take one from here, which one would you recommend? I'd like a clean one with no software pre-installed. (except what you would expect from HTC like manila)

Thanks!
[Touch HD General] mancsoulja:
1) no there wont be an official 6.5 rom for the HD

2) the which rom should i choose question is frowned upon here cuz it starts arguments, all i can suggest is try diffrent roms, each one offers diffrent things, you'll soon find one you like :)
[Touch HD General] alphanimal:
alright, thanks!

is there somewhere a list of available roms?

i can't quite find any
[Touch HD General] tikiman7:
Not looking very hard, are you? Try Blackstone ROM Development or HTCPedia.
[Touch HD General] Fallen Spartan:
May also want to try this page in the wiki....should be almost up-to-date. If its not up-to-date then the rest can be found in rom development forum
[Touch HD General] alphanimal:
You are right I wasn't looking very hard. Thanks for the hint to the wiki!
[Touch HD General] alphanimal:
well i guess i'm just leaving my original rom...

i flashed my artemis and i remember having a hard time reading through many threads around here. i don't want to risk doing something wrong... i found a rom that seens good but i couldm't find any download link. what i've heard so far about WM6.5 is not really worth going through all that.

maybe i'll change my decision soon though

thanks!
[Touch HD General] 21gg:
I had the same problem

http://htcpedia.com/soft/htc-blackstone-rom.html

gav
[Touch Pro2, Tilt 2 Themes and Apps] Tofferbear:
I keep seeing these buzzwords, but can't find a single scrap of info on what they are...I mean before I can learn the difference between Sense 2.1 and 2.5 I'd like to know what Sense is in the first place. ;)

I "think" Manila is a codeword for the Touch Flo app, but I wasn't sure...any help would be appriciated. :)
[Touch Pro2, Tilt 2 Themes and Apps] joshkoss:
Well, first off. i moved you over to the software area since the section you posted in was rom develoupment.. this answer is more simple and can be found just by searching..

Serious, if you search sense 2.1 or sense 2.5, you'll find i'm sure plenty of screenshots.

next off you can flash the roms in the rhodium section and find out exactly how to use them.

and touchflo-manilla-sense are all the same thing, just different versions as you can see via the screenshots on many of the threads around here.

I wish you happiness in your flashing, :)

Josh
[Touch Pro2, Tilt 2 Themes and Apps] Tofferbear:
Ah yes...that probably would have improved my luck when searching. Doh! Thank you for moving the thread to the correct location and giving me the quick and dirty explination. :)
[Touch Pro2, Tilt 2 Themes and Apps] joshkoss:
yea sorry, it was a bit dirty. :).. basically try flashin.. it's great.. :)

Peace,

Josh
[Touch Pro2, Tilt 2 Themes and Apps] Tofferbear:
Oh yeah, I've been flashing my Fuze for some time now...just waiting for the Hard SPL folks to help me...it won't install for some silly reason and I got a trouble ticket in with them to get it figured out. hehehe.

Can you suggest anyone's ROM in specific? I've been using NATF's ROMs on my Fuze and loved them...but he's working on CDMA stuff currently so I guess I need to peruse someone elses efforts for the TP2. hehehe.

Oh yeah...another thing I've been having trouble finding info on is what the difference is between EnergyROM's Leo and Photon ROM's...I think I've read through the entire thread's of both posts and it's never mentioned. hehehe.
[Touch Pro2, Tilt 2 Themes and Apps] Tofferbear:
and now after I look at your sig I guess I could just try the ROM you made first. ;)
[Touch Pro2, Tilt 2 Themes and Apps] ai6908:
Rom is all personal preference. It all depends on what you want to your phone for and your personal taste. It takes a lot of flashing to find the right cook for you.

My personal choice is Josh in here for TP2, been using his ROMs from Hermes days...:)
[Touch Pro2, Tilt 2 Themes and Apps] pistou:
So (he said, scratching his head) does this mean that TF3d 2.1.x == Manila 2.1.x == Sense 2.1.x? Or are the versions more subtle than that, such that (for example, not designed to reflect reality) 2.1.189 == TF3D; 2.1.190 == Manila; 2.1.191 == Sense?
[Touch Pro2, Tilt 2 Themes and Apps] Shasarak:
Manila, TouchFLO and Sense are all basically the same thing - they all refer to the TouchFLO UI. "Manila" is an internal HTC codename, and you may find a file on your phone somewhere called manila.exe which is the actual executable (launched by the Windows Mobile "Today" screen). TouchFLO was the original marketing name for Manila; it was later renamed "TouchFLO 3D". It's now been renamed again to "Sense UI", and HTC is now marketing "Sense" as a sort of cross-OS platform; so "Sense" (as now used by HTC) can refer not only to the UI on the Touch Pro2, but also to the customised UI on the HTC Hero (which runs Android).

Manila version 2.0 is the one that appears on the original Touch Pro2 ROM (the one that includes Window Mobile 6.1). Manila 2.1 is the version that appears on the WM6.5 version of the standard Touch Pro2 ROM form HTC. Manila 2.5 is the version from the HTC HD2 phone.
[Touch Pro2, Tilt 2 Themes and Apps] pistou:
ahhh, the light goes on, thank you.
[Touch Pro2, Tilt 2 Themes and Apps] brycestejskal:
LEO is the Manila2.5 flavor of the rom from the HD2

PHOTON is the Manila2.1 flavor which now has the weather clock from Manila2.5, This version also come in a Chrome/Titanium only version.
[Touch Pro2, Tilt 2 Themes and Apps] Tofferbear:
Thanks...I didn't know that. :) Someone on the Photon thread also mentioned that the Leo doesn't use the slide out keyboard either...makes sense if it's for the HD2.
[Touch Pro2, Tilt 2 Themes and Apps] Tofferbear:
Wow...you need to write that up for a sticky post or something...that's the most definative answer I've ever seen about it. :) Thx!
[Touch Pro2, Tilt 2 Themes and Apps] techead:
I second that comment :)

Cheers for a Great Explanation The best I read so far

This should be put in all the HTC users manuals from now on.

Thanks
[Touch Pro2, Tilt 2 Themes and Apps] Blairware:
It is ABOUT TIME someone wrote this!

Yes, everyone could glean this info after days/weeks reading ROM Development forums, but thats not the point. When you come in a room in the middle of a complex discussion, it's

really nice

when someone stops the group and catches you up. By reading and making inferences, I have HTC's code-names mostly straight in my mind, but a post like this, (or one just like it)

as part of the 1st page of EVERY HTC DEVICE'S ROM Development Page would help a lot of people.

A side effect would be a reduction in the amount of stupid questions.

Yes, HTC likes to try and keep things fresh, by putting a new name, a new spin and a new face on basically the same concepts they have been pedaling since TouchFlo was introduced.

Heck, I work at IBM: Netfinity, eServer, X-Series, System X - whats different? Nothing. Whats in a name? A lot. Its how you make whats old new again!

Even works in reverse. Microsoft said when introducing Windows 95:

No more General Protection Faults (GPFs)! That was true. They just started calling them "Illegal Operations" (remember those?):cool:
[Touch Pro2, Tilt 2 Themes and Apps] da9th_one:
i try to search ALOT before asking questions on this forum...if you don't, the super geeks will strike...!!!

most here are friendly and courteous...i just ask all to remember that not everyone on these boards are tech freaks & non-searchers (if that is a word)...

i have used this site for a few years and have yet to flash a device...that may be about to change...
[Touch Pro2, Tilt 2 Themes and Apps] Blairware:
Go for it! Flashing has a LOT to offer

My experience with flashing has been good, if sometimes a bit frustrating. The cooks are

very

willing to accomodate ideas, fix things and generally give you what you want and need. However, most are always in the hunt for "the next great thing" (which we all are, in way) and that hunt sometimes causes things to get left behind.

Tell you what, I realized just the other day that if I am ever going to get my device to exactly where I want it (which changes for me too, from time to time) I am going to have to start cooking. Yes, I will have to learn a lot more and mistakes are iminent (as long as I don't brick my Touch Pro2 in the process) But my desires are not alltruistic. I just want things the way I want them LOL. :cool:
[Touch Pro2, Tilt 2 Themes and Apps] schumifer1:
Let me just add my thanks to the finest set of very few words that truly made a difference.
[Touch Pro2, Tilt 2 Themes and Apps] Shasarak:
Several people have been very kind about post #9 in this thread. I don't know that it really deserves all this positive attention, but it is appreciated, and you are all welcome. :)
[Upgrading, Modifying and Unlocking] Zacpod:
Progress so far

I still can't get this beasty to boot in to anything other than normal and safe modes.

I've tried the asroot2 method, but the process gets killed.

I've tried the Recovery Flasher tool. It identifies my device as a EBIO/32B but fails with a "Backup FAILED: Could not run command" error.

I think the Recovery Flasher uses asroot2, and this is a pretty new device, so no surprise that they've fixed that hole.

I tried using "adb root" but it won't run as root on a production device.

I tried using "adb reboot bootloader" and "adb reboot recovery" and they both fail with something along the lines of "Command stopped"

Not sure what else to try. I may have to resort to rebooting the thing and holding down a different key every time. Ugh.

Anyone have any advice or pointers?
[Upgrading, Modifying and Unlocking] Zacpod:
A little more progress:

I don't know enough about hacking to break in to root on the phone, so I'm not trying a different tactic. I've found a firmware .kdz file and am working on extracting the filesystem from that. If I can get the filesystem mounted on a linux box I can make the required modifications to allow root access to work. Then I just need to repack the firmware back in to a kdz, and fiddle with the lg update process to force it to use my firmware instead of the one it downloads. Fingers crossed!

So far, I have extracted the kdz and have the resulting dll and dz.

However, I'm not able to extract the dz. I get the first few files and then it bails as below.

C:\Users\Zac\Desktop\DZExtract>DZExtract.exe GW620R.dz
DZExtract v0.2 by jp

Header informations
--------------------------------------------------------------------------------

Checking magic code.............................Ok (MSTXMETX)
Checking hash...................................Ok (E88C-6D55-CA9A-6E41-CAF9-2
36F-BCD6-F6AD)
Phone model.....................................GW620R
ROM name........................................V10c
Chip model......................................MSM7200
OS name.........................................kuvic0611
Internal filename...............................GW620RAT-01-V10c-302-72-OCT-21
-2009-RGS-CA+0-DZ.dz

C:\Users\Zac\Desktop\DZExtract>DZExtract.exe -x GW620R.dz dz
DZExtract v0.2 by jp

Extracting subfiles...
--------------------------------------------------------------------------------

Reading sub-header @0x13c
Checking magic number...........................Ok
Checking hash...................................Ok (779D-3AF8-DE8A-57F9-04BC-2
093-441A-CAB0)
Extracting 'amss.mbn' (8717 kb).................Ok
Inflating...
Unhandled Exception: System.BadImageFormatException: An attempt was made to load
a program with an incorrect format. (Exception from HRESULT: 0x8007000B)
at DZExtract.ZLib.gzopen(String path, String mode)
at DZExtract.DZFile.Inflate(String srcPath, String srcDest, Byte[] md5Hash)
at DZExtract.DZFile.ExtractSubFile(FileStream hFile, Int64 nPosition)
at DZExtract.DZFile.ExtractContent(String sOutputDir)
at DZExtract.Program.Main(String[] args)

It may be because I'm running dzextract on a 64 bit win7 box. I may have to try to find an old 32 bit WinXP junker to see if it fares any better.
[Upgrading, Modifying and Unlocking] Zacpod:
Not much progress today. It's been a while since I booted in to Linux, and I had a tonne of updates to apply, and then I had to recompile my kernel to support the yaffs2 filesystem.

I think I have the file decompressed and it's now a yaffs2 fs ready to mount. It has a MBN extension, but I think it's just a binary blob that would normally be written to flash. I hope I'll be able to either mount it directly as a loopback yaffs2, or mount it indirectly as yaffs2 via a MTD emulator.

If I can't mount it I'm going to need something to pull the filesystem out of the MBN. Should be interesting either way. :)
[Upgrading, Modifying and Unlocking] Zacpod:
MBN headaches

Well,

I got my kernel recompiled, and yaffs is working. That, unfortunately, is the extent of my success.

I can not mount the Sytem.mbn file as a yaffs2 volume via loopback. Can't seem to find any info on the format of that file, or any tools to extract data from it. Ugh.

Can anyone shed some light, or point me in the right direction?

Do I need to use a virtual MTD and 'burn' the MBN to it, and then mount the /dev/mtd/mtd1 as yaffs2? That's what my instinct is telling me at this point, but that's just a stab in the dark really.
[Upgrading, Modifying and Unlocking] surfdev:
Thanks for keeping us posted about your progress! Although nobody else is posting in this thread, I am sure there are many of us keeping an eye on it. (like me!)

I already have the device and know for sure that this beast has SO much potential once rooted!

I'll keep my fingers crossed and you keep up the good work :)
[Upgrading, Modifying and Unlocking] Zacpod:
Ohoh!

I just found out that the G1 requires a signed file before it'll burn the new rom. if the LG utility wants something similar before it'll burn the image I'm creating then this method may be out of reach. I'm going to keep trying and at least get the rom ready to burn. Can't hurt to try, right. :)

I'll continue to keep y'all posted as I progress.

Thanks for the encouragment Surfdev! :)
[Upgrading, Modifying and Unlocking] panesingh:
Like Surfdev said, I am also watching this thread and would like to thank you for the updates. If you do end up accomplishing this task, would it be possible for you to make a easier way of updating the phone? As I am not that computer illiterate.

Thanks alot
[Upgrading, Modifying and Unlocking] Zacpod:
Of course! If I manage to crack the firmware I'll make it available online. :)

Some good news - I found out how to get in to emergency mode - which I think is fastboot mode. Take the battery out, hold down 1, put the battery back in, and then hit power while still holding down 1. Yay!

I also have an MTD (flash) emulator running, and have tried to copy the MBN to it, but the file is the wrong size. I think I need to extract the filesystem from system.mbn, but none of the tools I've seen work. Ugh. I really need to hunt down some specs for this filetype.
[Upgrading, Modifying and Unlocking] madmack:
Just wanted to say that I'm also watching this thread very closely.

God speed Zacpod ! Thanks for your "blog-like" posts.

Ah, the possibilities of having this phone rooted.. :D
[Upgrading, Modifying and Unlocking] routehero:
Another forum has some interesting info on this device:

http://www.devfrustrated.com/devBlog/how-to-upgrade-the-fw-of-lg-eve-gw620/

Long story short: enter in 3845#*620# in the dialer to get in to LG's hidden menu.
[Upgrading, Modifying and Unlocking] Zacpod:
Oh, the hidden menu is neat! Doesn't look like there's too much in there that'll help me, but it'll be good for testing stuff. Thanks! :)

I'm still trying to find out how to extract the yaffs2 file structure from the MBN. I've found a few tools for extracting filesystems from MBNs, but they all seem to be for WinMob devices and are therefore looking for a fat/fat32 filesystem. It's looking more and more like I'm going to have to code up a custom extractor but I need info on the format before I can start that.

I may be able to start with something simple - if I can figure out what the start of a yaffs2 in on a mtd looks like I may be able to scan the MBN for that, and extract from there. That, however, will be a one-way operation. I'll need the full specs on the MBN format before I can write something that would pack the filesystem back in to a file that the LG utility will flash on to the device.

I've also started looking at an exploit that I'm not sure has been tried from the console yet.

CVE-2009-3547 (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3547) can give local root access, and was discovered after the Eve's firmware was produced, so it may not be patched. I found some proof-of-concept code online and will probably spend a few cycles seeing if I can get it to compile under the android sdk. If it works, that would be way easier than my original approach given the lack of information/tools for extracting and repackaging the files.
[Upgrading, Modifying and Unlocking] Zacpod:
Been working on getting the CVE-2009-3547 expoit compiled for Android.

I have a cross compiling environment set up, and have been able to compile some simple programs that run from the Android console, but the expoit proof of concept code uses some inline x86 assembler, and I have almost no idea how to convert that to ARM code. I know a little x86 assembly, but the last time I did any real coding in assembly was on a Commodore 64 with 6502 assembly. I've never played with ARM machine code before, so this is going to be interesting. I may just have to see if I can convert it to C.

Here's the code in question if anyone who knows arm assembly wants to help. :)

static inline void *get_4kstack_top()
{
void *stack;

__asm__ __volatile__ (
"movl $0xfffff000,%%eax ;"
"andl %%esp, %%eax ;"
"movl %%eax, %0 ;"
: "=r" (stack)
);
return stack;
}

static inline void *get_8kstack_top()
{
void *stack;

__asm__ __volatile__ (
"movl $0xffffe000,%%eax ;"
"andl %%esp, %%eax ;"
"movl %%eax, %0 ;"
: "=r" (stack)
);
return stack;
}

As near as I can tell the code allocates a 4k or 8k stack. I tried commenting out the assembly and just letting the program use the stack as-is. but it segfaulted almost immediately. Can't say I was too surprised. ;)
[Upgrading, Modifying and Unlocking] Zacpod:
Actually - looking at the the x86 code it looks like it's just taking the stack pointer, cutting it so it's at a 4k or 8k address boundary, and returning the result.

Could I not do the same thing in C with something along the lines of:

void *get_4kstack_top()
{
int local_vars_are_stored_on_the_stack;
return (&local_vars_are_stored_on_the_stack && $0xffffe000);
}

Since local variables are stored on the stack, this should give us the same thing as the x86 assembly, and probably on be a few cycles slower...

At least I think local vars are stored on the stack - it's been a while since I've had to know stuff like that, lol.

I'm going to try this. I'll let y'all know what happens.
[Upgrading, Modifying and Unlocking] Zacpod:
No worky.

This exploit isn't going to work. :(

To quote to PoC source:

error("this box haz a motherf***in mmap_min_addr-like stuff! burn it if u can !@#*");

Soooo.... Now what? I'm basically out of ideas.
[Upgrading, Modifying and Unlocking] abatrour:
I found another way to get into emergency mode if you are interested.

After installing a 3rd party app for sms, i went into the settings for the default sms app and disabled everything.

Afterwards my phone crashed and asked if I wanted to perform a ramdump or go into emergency mode.
[Upgrading, Modifying and Unlocking] Grank:
just wanted to say, thanks for all your work on this so far! I'm as interested as everyone else in this thread seems to be in rooting this phone.

There's got to be a way... Keep trying!

I'm not much of a linux power-user (I'm a .NET developer; my experience in this stuff is limited to pre-built OpenWRT images) but I would love to help in any way I can.
[Upgrading, Modifying and Unlocking] Zacpod:
Thanks, but unless someone has any other ideas I think I'm at the end of my attempt. I'm keeping an eye out for other explots that would be valid against this version of the kernel, but so far it looks like it's just going to be a waiting game.
[Upgrading, Modifying and Unlocking] Grank:
I might be way out to lunch here, but let me muse out loud:

Apparently the MBN file format is just a standard flash BIN file that's been renamed. The M probably, as you mentioned, points out that it's been encrypted and signed. It would be worth it, though, to create a standard BIN file and rename it to MBN and see if somehow we can make the phone accept it without the LG signing...
[Upgrading, Modifying and Unlocking] Dennijr:
no, i know but thats why im asking, if we can't download/would prefer not to download anything via the phone, how do we get games on the phone? for example, lots of phones you can use a data cable to transfer games to the phone, would that ever be possible on the eve?
[Upgrading, Modifying and Unlocking] litui:
That's possible even with your Eve unrooted. You can enable "Settings/Application settings/Unknown sources" on your phone and simply put the .apk file on your SD Card for whatever application you want to install. You will, however, need a file manager application installed on the phone to install from SD.

Another approach is to use the "adb" tool from the Android SDK to install from your PC over USB cable.

This is, however, off topic for this thread and there is lots of info on how to do this in google.
[Upgrading, Modifying and Unlocking] datcon:
you dont just need to use the market app - apps can also be dowloaded to sdcard via browser and installed (.apk files) - they get saved to the sdcard. you may need to enable 'unknown sources' in settings > applications.

kudos to the devs trying to crack this nut! im keeping a keen eye on this thread in anticipation of a firmware upgrade!

Question about the pre-installed rogers apps - ive removed moxiermail and some of the other stuff, but I cant figure out how to remove the "bookmarks" my5, weather, java downloads etc... They are listed as 'programs' in the app list but are nowhere to be found in /system/app/.

They certainly dont launch an application, but rather open a browser instance onto a particular webpage.

Keep up the good work guys - the progress is exciting!
[Upgrading, Modifying and Unlocking] enkoopa:
Still looking on how to ditch MY5. It's not an APK, and I haven't found any entry forced into the sqlite database like the bookmarks were.

Java downloads is "Jbed".

Still going to try and get eclair built, probably more interest in that.
[Upgrading, Modifying and Unlocking] elfassy:
If in Canada, try http://www.androideveryware.com/archives/category/application for apps and games.
[Upgrading, Modifying and Unlocking] elfassy:
Ok, i can confirm that Rogers.apk has nothing to do with voicemail notification. The problem was an isolated event. Sorry for the trouble.
[Upgrading, Modifying and Unlocking] Zacpod:
Excellent! Wish we could find the key-combo to get us there without nuking mtd2, but beggars can't be choosers!

I've got the Android source as well, but I've been concentrating on getting adb working with OSX. It's not pretty - I was up till 4am last night looking thru the offending code, and I still don't know why it's ignoring non-htc devices. Grrr.

I'll try my hand at building Android 2 over the weekend now that we have an easy (Fastboot!) way to test the builds. It should be fairly easy with the config.gz, but I suspect we'll still be missing some drivers - it's the keyboard that I'm mainly worried about.
[Upgrading, Modifying and Unlocking] enkoopa:
Just downgraded to GCC 4.3 on my Ubuntu 9.10 VM... compiling eclair now.

I'm also worried about the keyboard driver. The camera as well, but obviously we can live without that for now. No keyboard would be a non starter, might as well go buy an HTC device.

We might be very limited by LG. If they don't plan to update any drivers, we're up the creek.

Tempting to email the lge addresses littered in init.rc :P Beg them for 2.0.