HTC Hermes's WM 6 on Breeze

[Sergey55555]

As I understand "Also the Breeze Hardware shares most of the Parts with the Hermes" is it possible to convert it's WM 6 for Breeze?




(sorry for my bad English):)

[sp3dev]

Probably it is, need to look into it. at first we need to crack spl to avoid nbh check

[futureshock]

hi,

maybe hard spl v7 works...

i have experimented today... but i need my phone, because of that i finaly didn't click on the "flash now" button ;)

[oirad]

Hermes is a PocketPC and Breeze is a Smartphone...

Both WM5 and WM6 have separate OS editions for PocketPC and Smartphone. If I were you, I wouldn't try to force "WM6 Professional" (Pocket PC) for Hermes on a Breeze (Smartphone - "WM6 Standard").:rolleyes:

[sp3dev]

So, you need to decompress the xip segment and get a memory map of breeze. if memory addresses are the same as hermes, you need to replace a coredll.dll in second xip segment and you need to build imgfs using wm6 os from excalibur/vox and breeze wm5 drivers and applications. to load this into the phone, you need to avoid nbh check

[futureshock]

how can we decompress the xip segment ???

what is exactly the coredll.dll ???

[futureshock]

HI,

today i have played a little bit with bootloader...

task 32 says FF ... so its definitly not supercided... but i don't really know why a few other persons here can flash a dopod rom.. maybe they are all the same cid ??

also i'm searching for a usb sniffer ... have found a few in the web but all costs money and noone had give me understandable commands while using the romupdate tool from the actuell htc rom...

[futureshock]

ok found some other interresting info..

the RUU_BREE100_1.34.251.1_1.38.00.10_HTCEUR_SHIP ROm has a QTEK_Z12 CID ....

but we all can update it to breeze device...

quite interesseting is also that:

Cmd>info 2
HTCSQTEK_Z12Û.oÂHTCE

... as we can see i my HTC Device has a QTEK_Z12 CID ... maybe someone can check what CIDS und the Breeze's out there...

[iNNoCeNT]

Hi, could you explain how have the CID of the phone. Because i tried with info2 but it didn't work. Thanks. ++

[futureshock]

----------------------------
just go in bootloader:

turn off device and restart it with hold cam button...

attach usb cabel the serial line on the 3color screen should change to usb...

also you have to deactivate the activesync usb connection...

then start the mtty app choose the usb connection...

then youll see the cmd> line... after this enter info 2 ... and you should become a output like mine...
------------------------
what ipl/spl version's are shown on the 3 color screen ??

[Alexx_B]

i read that HTC announced S730 (wings)
it is like s710 but with MTeoR's hardware and WM6

I hope that it is possible use s730 ROM to take WM6 for MTeoR
So we need wait for s730 i think

I hope that i can see WM6 on my MTeoR :-[

[futureshock]

concerning to his thread: http://forum.xda-developers.com/showpost.php?p=1257924&postcount=10

i say it a second time now...

we need the excalibur wm6 rom

why...

simply ... the excalibur has likley the same hardware as breeze !!!

all other devices are based on the hardware like wizard... (200mhz cpu etc.)



I'm just working on all the needs...

cookin with wm5 works!! i had cooked a German only version from the actuell rom! with a few tools on it...

also cooked an costumized bootscreen:

also there has to be somewhere in rom a "Shutdown" Screen.. i flashed the 2 Bootscreens and when shutting down the phone theres the old htc screen... ;)

[Alexx_B]

excalibur (s620) based on Tornado. So it have OMAP chipset, other radio w/o 3G etc.
at this time there is no MTeoR's based smartphones on the market as I know. Announcement only (Wings/Erato/"excalibur replace")

[futureshock]

... damn ... what t.. f...

i searched a few days a ago and i had a website where the info was that excalibur is like the mteor...

....

ok so far i can see the next mteor hardware like phone should be the s730 (Wings)....

sorry that was my fault...


...


ok maybe i tought that excalibur was the right because this is the only one where i can find a wm6 rom for download... on all others there are no shipped roms available??

hmm

[futureshock]

Hi,

ok just played a little bit with the excalibur rom...

the mainproblem is that i cant extract the files out of the nbh file...

because of that i can't modifiy a hermes rom...

i will look forward and hope to find an solution for it...

[futureshock]

ok...

extraced excalibur rom...

cooked a bit...

but no working rom yet!!

also have flashed a wm6 hermes rom with a few files modified to breeze...

device didn't boot on bootscreens...

when flashing an unmodified excalibur rom, breeze directly goes to bootloader ....


next thing i want to try is to use the original 1,34.251.1 Rom ...

[ookedwin]

wow... I hope you manage to get a working WM6 rom for the MteoR... :cool:

[futureshock]

Hi guys!

i have cooked today the wm6 rom with base wm5 ... but windows did not start up after 2nd boot screen!

i think that all goes to hard work ....

if anyone knows what the real core file of winmobile are then please post it!!

[sp3dev]

Hi guys!

i have cooked today the wm6 rom with base wm5 ... but windows did not start up after 2nd boot screen!

i think that all goes to hard work ....

if anyone knows what the real core file of winmobile are then please post it!!

No, it`s not the way. Just contact me via ICQ and we`ll work. but now no time for that

[drasterlx]

HI, first sorry ofr my englis, i am from argentina, and i have a t-mobile SDA and i need know if with programs i can make a wm6 rom or if i can custimize the wm5 rom por my tornado. thank

[sdamion]

When i look at this post http://forum.xda-developers.com/showpost.php?p=1269579&postcount=1 and i compair the breeze http://pdadb.net/index.php?m=pdacomparer&id1=505&id2=676. There will be a wm6 rom for the breeze very soon i hope

[Alexx_B]

i hope so
AFAIK WM6 supports SDHC, so WM6 update is interesting for me

[darrellr]

You can download its ROM here (ftp://ftp.xda-developers.com/Uploads/Smartphone/Cavalier/Shipped_Complete_Updates/Dopod/). Looks very similar to Hermes/breeze format.

The NBH file contains:

Device: CAVA100**
CID: DOPOD001
Version: 1.16.707.7
Language: ENG
Extracting: 00_IPL.nb
Extracting: 01_SPL.nb
Extracting: 02_MainSplash.nb
Encoding: 02_MainSplash.bmp
Extracting: 03_SubSplash.nb
Encoding: 03_SubSplash.bmp
Extracting: 04_Unknown.nb
Extracting: 05_GSM.nb
Extracting: 06_OS.nb

[darrellr]

Just gave it a try i.e unpacking the OS.nb and repacking with a BREE100 header.

Not surprisingly it's a no-go. Phone won't boot, just endlessly cycles on the HTC start screen

[sdamion]

Just gave it a try i.e unpacking the OS.nb and repacking with a BREE100 header.

Not surprisingly it's a no-go. Phone won't boot, just endlessly cycles on the HTC start screen
'

We need somone who can fix this first.

[darrellr]

'

We need somone who can fix this first.

Ya don't say :D I'm assuming that the registry needs messing with to get the correct hardware drivers initialised at start up but don't really know where to start.

I've added the WM6 dump of filenames just for info.

[sdamion]

Im not a rom chef so i asked Andot the guy who changed the tornado rom for some input.

But i know you also need the registry extract from a file and open it with a hex editor. So you cab change it. But thats the only thing i know. So i hope a chef will come and help the breeze users.

[darrellr]

Im not a rom chef so i asked Andot the guy who changed the tornado rom for some input.

But i know you also need the registry extract from a file and open it with a hex editor. So you cab change it. But thats the only thing i know. So i hope a chef will come and help the breeze users.

I've got the reg opened and I can read and edit but lack the knowledge of where to look first, so I'm looking everywhere!

[edit] Attached registry from cavalier

[sdamion]

I've got the reg opened and I can read and edit but lack the knowledge of where to look first, so I'm looking everywhere!

[edit] Attached registry from cavalier

But if you look at the hardware its the same so the only thing wee need to change are the keypad drivers and remove the wirless drivers.

[darrellr]

I'm assuming that the keyboard stuff is all the KTL_0804 _*.DLL files and the wireless is refered to as TNETW12511 (.DLL)

the init sequence is:

"Launch10"="shell.exe"
"Launch20"="device.exe"
"Launch21"="coldinit.exe"
"Launch28"="gwes.exe"
"Launch30"="ciphaseui.exe"
"Launch40"="telshell.exe"
"Launch46"="connmgr.exe"
"Launch60"="services.exe"
"Launch61"="ciphase2.exe"
"Launch80"="home.exe"
"Launch85"="appman.exe"
"Launch90"="cdial.exe"
"Launch95"="cprog.exe"
"Launch96"="nwstart.exe"
"Launch98"="TimeWizard.exe"
"Launch99"="\\Windows\\SAPSettings.exe"
"Launch100"="uptimesqm.exe"

I'm assuming that nwstart.exe may well be a problem

This is the current Breeze init:

"Launch10"="shell.exe"
"Launch20"="device.exe"
"Launch21"="coldinit.exe"
"Launch30"="gwes.exe"
"Launch40"="telshell.exe"
"Launch46"="connmgr.exe"
"Launch55"="srvtrust.exe"
"Launch60"="services.exe"
"Launch61"="ciphase2.exe"
"Launch80"="home.exe"
"Launch85"="appman.exe"
"Launch90"="cdial.exe"
"Launch95"="cprog.exe"
"Launch98"="TimeWizard.exe"
"Launch99"="\Windows\SAPSettings.exe"

[sdamion]

I'm assuming that the keyboard stuff is all the KTL_0804 _*.DLL files and the wireless is refered to as TNETW12511 (.DLL)

the init sequence is:

"Launch10"="shell.exe"
"Launch20"="device.exe"
"Launch21"="coldinit.exe"
"Launch28"="gwes.exe"
"Launch30"="ciphaseui.exe"
"Launch40"="telshell.exe"
"Launch46"="connmgr.exe"
"Launch60"="services.exe"
"Launch61"="ciphase2.exe"
"Launch80"="home.exe"
"Launch85"="appman.exe"
"Launch90"="cdial.exe"
"Launch95"="cprog.exe"
"Launch96"="nwstart.exe"
"Launch98"="TimeWizard.exe"
"Launch99"="\\Windows\\SAPSettings.exe"
"Launch100"="uptimesqm.exe"

I'm assuming that nwstart.exe may well be a problem

This is the current Breeze init:

"Launch10"="shell.exe"
"Launch20"="device.exe"
"Launch21"="coldinit.exe"
"Launch30"="gwes.exe"
"Launch40"="telshell.exe"
"Launch46"="connmgr.exe"
"Launch55"="srvtrust.exe"
"Launch60"="services.exe"
"Launch61"="ciphase2.exe"
"Launch80"="home.exe"
"Launch85"="appman.exe"
"Launch90"="cdial.exe"
"Launch95"="cprog.exe"
"Launch98"="TimeWizard.exe"
"Launch99"="\Windows\SAPSettings.exe"

Nwstart is somthing for the network wizard. People with the s630 had problems with it the changed it with a registry setting

HKEY_Local_Machine\init\ and scroll down to Launch96 and change the value from nwstart.exe to the word null.

Link:
http://www.howardforums.com/archive/topic/1177709-1.html

[darrellr]

A quick check of devices shows the following 'new' entries:

[HKEY_LOCAL_MACHINE\Drivers\BuiltIn\OEM_Misc2]
"Dll"="OEM_Misc.Dll"

[HKEY_LOCAL_MACHINE\Drivers\BuiltIn\H2W]
"Dll"="PeriMgr.dll"

[HKEY_LOCAL_MACHINE\Drivers\BuiltIn\TPDMGR]
"Dll"="TPDMgr.Dll"

[HKEY_LOCAL_MACHINE\Drivers\BuiltIn\CODEC_MSG711]
"WrappedDLL"="msg711.dll"
"Dll"="acmdwrap.dll"

[HKEY_LOCAL_MACHINE\Drivers\BuiltIn\GPSID]
"Dll"="GPSID.dll"

[HKEY_LOCAL_MACHINE\Drivers\BuiltIn\SqmEngine]
"Dll"="sqmce.dll"

None of which are WiFi related. I need someone to point me in the right direction!

[pof]

To load custom SPL on breeze you can use Hermes SSPL, as both device's IPL is compatible, instructions:

1) use Hermes SSPL *but* pass it as parameter a Breeze SPL.
2) patch this SPL to avoid NBH signature checking,
Note: if no one is able to patch a breeze SPL let me know and i'll try when i have time (in 2-3 weeks... i hope!).

Next, to port a wm6 rom to a wm5 device is not as simple as replace rom files and registy settings... follow instructions from sp3dev in post #5 of this thread, and spend many many hours reading posts in this forum, it's all explained but you need to read a lot, don't expect it to be a 5min job.

[darrellr]

Pof, as you maybe can see from the last few posts I've already loaded a cavalier ROM into the Breeze no problem. My problem is knowing what approach to take to replace cavalier stuff with breeze stuff. Clearly the keyboard and WiFi are different. What I want to know is what files am I looking for and how to change driver loading?

Coredll.dll is obviously one.

[Electronic Punk]

You have WM6 running on a Breeze?

edit: Ok, you think you have got it but you need to disable GPS and Wifi?
Just a curious outsider looking in :)

[darrellr]

You have WM6 running on a Breeze?

edit: Ok, you think you have got it but you need to disable GPS and Wifi?
Just a curious outsider looking in :)

No, I've modified a cavalier WM6 OS and flashed it into a Breeze. However, it doesn't boot - I'm looking to modify the files/registry to remove the incompatible drivers and replace with WM5 stuff from the Breeze but I'm not sure exactly what to do.

It appears I need to:

1. Replace coredll.dll with old breeze one
2. Remove Wifi drivers
3. Replace keyboard drivers.
4. Other stuff.

From post #5 in this thread it was hinted that the problem may be that the Breeze is trying to execute code in a memory location that differs from the memory location of the code in a Cavalier ROM. XIP DLL's are location dependant and so if Cavalier and Breeze have different memory maps then I need to .... (dunno!)

[darrellr]

It has been hinted to me by Pof that I need to look at the XIP DLLs to see if they are incorrectly mapped in memory as a start point. To this end I've attached the two memory maps onto this post.

Anyone that can help with advice, guidance or even better action would be appreciated.

How do you work out the entry point of the cavalier and breeze?

[sdamion]

It has been hinted to me by Pof that I need to look at the XIP DLLs to see if they are incorrectly mapped in memory as a start point. To this end I've attached the two memory maps onto this post.

Anyone that can help with advice, guidance or even better action would be appreciated.

How do you work out the entry point of the cavalier and breeze?

I am looking at the to files and a see that the breeze does not use some of the memory locations for example

01A50000 - 01A6AFFF ( 110591 bytes): SpeechEnh_DLL.dll
Does not exist on the Breeze. So if i am right we need to use de memory maps/locations on the breeze and map the cavalier files to them

I am compairing them now will take some time

[darrellr]

AAAAAAAAAAAAAaHHHHHHHHHh

Now I get it! I've extracted the XIP portion of the ROM and am comparing to the Breeze. I couldn't understand why coredll.dll wasn't in the memory maps!

[sdamion]

AAAAAAAAAAAAAaHHHHHHHHHh

Now I get it! I've extracted the XIP portion of the ROM and am comparing to the Breeze. I couldn't understand why coredll.dll wasn't in the memory maps!

But what are u compairing becaus i am compairing the two memory maps

[darrellr]

Both XIP extracts gave error messages on extraction refering to overlapping segments for NK.EXE

Breeze WM5 AKU 3.3.1 XIP


42d1aab7-6dfa-4c03-9797-d66f7620883d.dsm
7ad45f14-7c25-fe62-cada-395d09d0cb45.dsm
7da1c1a8-1fd2-4a18-a081-84e4825266b1.dsm
b5332311-48f1-4b76-ad70-8efa5db8fa3a.dsm
boot.hv
boot.rgu
busenum.dll
cecompr.dll
ceddk.dll
certmod.dll
coredll.dll
device.exe
devmgr.dll
diskcache.dll
fatfsd.dll
fatutil.dll
filesys.exe
FLASHDRV.DLL
fsdmgr.dll
fsreplxfilt.dll
hd.dll
imgfs.dll
mspart.dll
mxip_initdb.vol
nk.exe
osaxst0.dll
pm.dll
regenum.dll
relfsd.dll
wince.nls

Cavalier WM6 XIP


42d1aab7-6dfa-4c03-9797-d66f7620883d.dsm
74f0f64d-858f-794e-8369-44554f2f2b37.dsm
b5332311-48f1-4b76-ad70-8efa5db8fa3a.dsm
b5332311-48f1-4b76-ad70-8efa5db8fa3a.rgu
boot.hv
boot.rgu
busenum.dll
cachefilt.dll
cecompr.dll
ceddk.dll
certmod.dll
coredll.dll
device.exe
devmgr.dll
diskcache.dll
encfilt.dll
fatfsd.dll
fatutil.dll
filesys.exe
FLASHDRV.DLL
fsdmgr.dll
fsreplxfilt.dll
hd.dll
imgfs.dll
mspart.dll
mxip_initdb.vol
nk.exe
osaxst0.dll
pm.dll
regenum.dll


Attached is the boot registry from the cavalier

[darrellr]

Progress of sorts. I used Tadzio's tools and now it hangs on the boot screen.

"Must try harder" :D

[sdamion]

Progress of sorts. I used Tadzio's tools and now it hangs on the boot screen.

"Must try harder" :D

My progres:

Compaired all the Cavalier memory maps with the breezes. Added the maps that did not match to the breeze file.

Removed the file names from the miss matches file sizes. I did this so i can allocate cavalier files with the same size to that memory location

Now i am matching the Breeze files with the Cavaliers and removing the file names from the breeze memory locations (same as above).

When this is done i will Past the Cavalier file names in the memory location where i removed the breeze miss matched and not exsisting files memory location. But i think some memory locations need to be created (i don't know how) when its done i will upload the new file and the file names a could not match on a breeze memory location.

Can you still onderstand me. Its a hell of a job respect to all the rom chefs

[darrellr]

My progres:

Compaired all the Cavalier memory maps with the breezes. Added the maps that did not match to the breeze file.

Removed the file names from the miss matches file sizes. I did this so i can allocate cavalier files with the same size to that memory location

Now i am matching the Breeze files with the Cavaliers and removing the file names from the breeze memory locations (same as above).

When this is done i will Past the Cavalier file names in the memory location where i removed the breeze miss matched and not exsisting files memory location. But i think some memory locations need to be created (i don't know how) when its done i will upload the new file and the file names a could not match on a breeze memory location.

Can you still onderstand me. Its a hell of a job respect to all the rom chefs

Not sure this is required as the non-XIP files can be anywhere???

The XIP files however have loads of hard-coded links, hence focusing on this. Search for XIPPORT - it's quite enough fiddling with this! I'm about to give in tonight but I'll carry on fiddling 'til friday. What I'm currently unclear on is which NK.EXE I should be using. I assume I need the 'new' one as only it can link to the WM6 core ... but if this is non-compliant with the breeze then that's that.

[sdamion]

Not sure this is required as the non-XIP files can be anywhere???

The XIP files however have loads of hard-coded links, hence focusing on this. Search for XIPPORT - it's quite enough fiddling with this! I'm about to give in tonight but I'll carry on fiddling 'til friday. What I'm currently unclear on is which NK.EXE I should be using. I assume I need the 'new' one as only it can link to the WM6 core ... but if this is non-compliant with the breeze then that's that.

When you need it il here it

[gaxy]

and,,, is there a working upgrade for the Mteore to WM6 ?

[sdamion]

and,,, is there a working upgrade for the Mteore to WM6 ?

Im also waiting on darrellr

[alexnvidia]

keep up the good worK! looking forward to WM6 on dopod 595/breeze

[darrellr]

Sorry guys, got distracted by work! I've got a spare day tomorrow so I'll have another go at messing with the XIP files but so far I've tried 11 builds and all failed.

I've had PMs from three people with previous experience all saying they will have a go and so my fingers are crossed but it seems that you either need to have previous experience of rebuilding a XIP block or just get bloody lucky!

[sdamion]

Sorry guys, got distracted by work! I've got a spare day tomorrow so I'll have another go at messing with the XIP files but so far I've tried 11 builds and all failed.

I've had PMs from three people with previous experience all saying they will have a go and so my fingers are crossed but it seems that you either need to have previous experience of rebuilding a XIP block or just get bloody lucky!

Maby pof can help us out rebuilding the Xip. But thx for trying.

[madds]

just to bring this thread to top.

No progress????

[futureshock]

sorry, but haven't found a solution yet to remap all needed memory maps from cav rom to breeze rom...

just write HTC to release a official one... if many people did this maybe the do it ....