[TUT] iPAQ 512/514 SKU ID ROM Update Hack

[tjlabais]

I managed to crack the ROMupdate.dll of the hpRUU primarily because there is no RUU for iPAQ 512 with SKU ID #UUF. It has ROM Revision 1.08 and the rest of the iPAQ 512/514s out there have an update with ROM Revision 2.05.0X

This will also work if you want to update your iPAQ 512/514 to another language. Here are the steps:

1. Download your desired iPAQ 512/514 ROM update
2. Unpack the RUU files by executing the SPXXXXX.exe file
3. Click next until you see green screen with 'iPAQ Update Utility'
4. Cancel the 'iPAQ Update Utility'
5. goto C:\iPAQ\SPXXXXX and change ROMupdate.dll with the attached file
6. Run hpRUU.exe from the same folder and proceed with updating your iPAQ 512/514

Enjoy! :cool:

EDIT: Flash at your own risk.

[TryOG]

Very nice...

By the way, I've seen you've patched it...
What exactly did you patch? Does it skip the SKU check? Or did you do something else?

[tjlabais]

Very nice...

By the way, I've seen you've patched it...
What exactly did you patch? Does it skip the SKU check? Or did you do something else?

I just made it skip SKU check.

I was doing some reading and plan to develop a tool to un-encrypt and encrypt the HP ROM file. Since you mentioned earlier that our HP device is manufactured by CMCS, I was looking at CMCSIMG tool. BUT, I think there is an additional encryption by HP like what he did for other IPAQs.

It would be nice if we have this tool working; so, we can start working on cooking for this device.

[defcomg]

I just made it skip SKU check.

I was doing some reading and plan to develop a tool to un-encrypt and encrypt the HP ROM file. Since you mentioned earlier that our HP device is manufactured by CMCS, I was looking at CMCSIMG tool. BUT, I think there is an additional encryption by HP like what he did for other IPAQs.

It would be nice if we have this tool working; so, we can start working on cooking for this device.

Yo Man Please do that man by the way whats that CMCSIMG supposed to do .

when i use pdocread.exe to get part02.raw and viewimgfs i get 70mb but i use imgfstodump i get 107mb dump folder with all the rom contents then i use imgfsfromdump to get Part02.bin can this bin be flashed to device like htc typhoon using MiTTy and DBSloader ?

and Decrypting The Nbf What tool do you use and as for the password wouldnt it be CMCS or Debussy or yssubed just like htc did with xda2nbf the himalayas nbf pass was himalaya in reverse

if u compare hp ipaq 514 with cmcs the specs are identicle

[tjlabais]

maybe the difference of 107mb vs 70mb is due to the processing of recmod.exe (its that file responsible for generating the actual files from modules with corrected PE headers)

I didn't use imgfsfromdump tool, I just use the ordinary mamaich tool because it does the job.

we have a very slight problem of flashing using pdocwrite. When you change the content of IMGFS and XIP, their overall size changes thereby causing them to be written to supposedly different ROM addresses respectively. which calls for an additional step of computing and modifying their location and references.

that's why we need the encryption and decryption tool, BUT i'm really swamped with work right now. can't find time to sit and look at it.

you just can't switch one ROM from a device to another device because it contains drivers specific to a device. You need to cook ROM (combine ipaq 510 series drivers with new OS files)

cmcsimg tool is from manufacturer cmcs. It's their own encryption tool used in most devices they manufacture, not necessarily HP. HP have their own encryption tool as well... I haven't recognized the format yet.

[defcomg]

The HP IPAQ 514 is The CMCS if you open The Part01.raw with win winrar file viewer at the bottom seems to be a log written by the development it has diffrent dates and what changes where made etc i will try and log later and it says the debussy is the codename for the ipaq Voice Messanger Series The Header for Part01.raw is the same as smarphone.nb0 emulator image im going to google mayb the debussy goes under another brand name.

Firmware 2.05 vs 2.08 its Wierd Because the 2.08 Dump Part01.raw seems to have an older log dat which is march 2007 whilst 2.05 is July 2007

[defcomg]

i Attached a text file when i try cmcsimg i get header not b000ff

[cingibi]

debussey

http://www.phonescoop.com/news/item.php?n=1780

http://www.newsmobile.it/telefoni/news/chimei.jpg

http://www.newsmobile.it/telefoni/news/chimei1.jpg

[defcomg]

If you compare both device its the same Just The DBS has a diffrent Look. After Googling i Check They Say the CMCS has WM5.0 so it was originaly wm2003 in 2006 and then wm5.0 then wm6 it was ment for T-Mobile but ended up being modified for hp no wonder it had a resololution of 176x220 because back in the wm2003 days QQVGA was the standard So it Quite an Old Device in Design

[tjlabais]

can you get hold of a ROM encrypted using CMCSIMG tool? that would be the first step to see if our ROM update really uses CMCSIMG for encryption.

[defcomg]

The main ROM file's formats.
CMCS Image. Files with *.img extension. That's the format of the upper level. Actually used while flashing. It's a coded BIN (B00FF) format version (see below). Another possible extension is *.rom - the same *.img but additionally coded with the special utility. It can not be used for flash procedure with the standard flash utility because it should be decoded before or the special flashing utility is to be used.

CMCS RSA Image. That's the format of the "upper" level. Actually used while flashing MPx220. It's a coded the ROM IMAGE format.

BIN (B00FF). Files with *.bin extension. This format is generated while creating the ROM with M$ Platform Builder. It contains the data blocks, the destination address of each data block in the ROM and the checksum of the data block.

RAW, ROM IMAGE. Files with *.img, .bin, .raw, .hex, .dmp. extension. It's memory image in FLASH/ROM as the CPU interprets it. You need to know the exact address of each image. The info about it is usually contained in the file name, attended text file or nowhere at all...

Very often the FLASH/ROM file is distributed as a built into installer file. Usually you can find a flash file by itself in the Temp folder straight after starting such kind of distribution file. The flash rom file has a size from 20 to 32 Mb (with new devices - up to 64 Mb) and it has .nbf, .bin or .img. extension. In each case you should define your own way of work with the file.

More INFo HERE (http://onk.nm.ru/mpx200/index2.html)

[sony66]

Power up with these keys pressed:
vol up: loads bootloader from ROM (not flashrom)
vol down: boots into updater, install modem driver to issue AT commands.
I did not jet figured out what you can do here...
Middle joypad button: hard reset to factory settings.
* + # : enable debugging! (but where can we play???)

[defcomg]

Power up with these keys pressed:
vol up: loads bootloader from ROM (not flashrom)
vol down: boots into updater, install modem driver to issue AT commands.
I did not jet figured out what you can do here...
Middle joypad button: hard reset to factory settings.
* + # : enable debugging! (but where can we play???)

Volume Down + Power Key I Get DBS Loader
+ Mitty u Get
http://www.ipaq514.ru/wp-content/uploads/bootloader_ipaq514.png
XKL:PLT-0-2050-4017-0.XKL As on The Pic is also used in RoverPC N1 -> C:\N Rover\boot\cmcsimg\cmcsimg.exe" DVD-3-0430-0080-0.xkl DVD-3-0430-0080-0.bin Check Here (http://translate.google.com/translate?hl=en&sl=ru&u=http://forum.wimbo.ru/showthread.php%3Fp%3D69414&sa=X&oi=translate&resnum=6&ct=result&prev=/search%3Fq%3Dcmcsimg%26hl%3Den%26client%3Dopera%26 rls%3Den%26hs%3DHO2%26sa%3DG)
Power up with these keys pressed:
vol up: loads bootloader from ROM (not flashrom)
When i Press Vol Up + Power i Get 0.00.00 instead of 2.05.00

[defcomg]

sp38077.exe
Files Contained In PLT_2.05.00_1007.BLOSGSM.nbf Are:
*PLT-0-2050-1007-0-A01.mlf
*DBS-FL-0760.m0
*PLT-0-2050-1007-0.MAX
*DBS-XL-0760.xl
*DBS-YL-0760.yl
*DBS-BL-0760.bl
*DBS-1-1080-000.gsm
*PLT-0-2050-1007-0.MBR
*PLT-0-2050-1007-0.ULD
*PLT-0-2050-1007-0.XKL
*PLT-0-2050-1007-0.OS0
*PLT-0-2050-1007-0.OS1
*PLT-0-2050-1007-0.OS2
*PLT-0-2050-1007-0.OS3
*PLT-0-2050-1007-0.OS4
*PLT-0-2050-1007-0.OS5
*PLT-0-2050-1007-0.OS6

[Package Download Profile]
PROFILE VER = 1.0
MODEL = DBS
VERSION = 2.050
PACKAGE NUMBER = 14
NEW PACKAGE INFO = 0
[Package Info Main Body]
IMAGE FILE = SKIP THIS SETTING BUT DO NOT MODIFY THIS SECTION
[Package Info Main]
IMAGE FILE = PLT-0-2050-1007-0.MAX
[Package Info 1]
IMAGE FILE = DBS-XL-0760.xl
START ADDRESS = 0
INDEX = 1
[Package Info 2]
IMAGE FILE = DBS-YL-0760.yl
START ADDRESS = 0
INDEX = 2
[Package Info 3]
IMAGE FILE = DBS-BL-0760.bl
START ADDRESS = 0
INDEX = 3
[Package Info 4]
IMAGE FILE = DBS-1-1080-000.gsm
START ADDRESS = 0
INDEX = 4
[Package Info 5]
IMAGE FILE = PLT-0-2050-1007-0.MBR
START ADDRESS = 0
INDEX = 5
[Package Info 6]
IMAGE FILE = PLT-0-2050-1007-0.ULD
START ADDRESS = 0
INDEX = 6
[Package Info 7]
IMAGE FILE = PLT-0-2050-1007-0.XKL
START ADDRESS = 0
INDEX = 7
[Package Info 8]
IMAGE FILE = PLT-0-2050-1007-0.OS0
START ADDRESS = 0
INDEX = 8
[Package Info 9]
IMAGE FILE = PLT-0-2050-1007-0.OS1
START ADDRESS = 0
INDEX = 9
[Package Info 10]
IMAGE FILE = PLT-0-2050-1007-0.OS2
START ADDRESS = 0
INDEX = 10
[Package Info 11]
IMAGE FILE = PLT-0-2050-1007-0.OS3
START ADDRESS = 0
INDEX = 11
[Package Info 12]
IMAGE FILE = PLT-0-2050-1007-0.OS4
START ADDRESS = 0
INDEX = 12
[Package Info 13]
IMAGE FILE = PLT-0-2050-1007-0.OS5
START ADDRESS = 0
INDEX = 13
[Package Info 14]
IMAGE FILE = PLT-0-2050-1007-0.OS6
START ADDRESS = 0
INDEX = 14

Ver2.20 CMCS Download Firmware Image. Build Date : 2007 November 21
The NBF Contains Lots Of Data Sections With The Above As The Header For Each Section
Section 1 offset DC7520
Section 2 offset 8EF2EE
Section 3 offset 8EF986
Section 4 offset BA407E
Section 5 offset E79D56
Section 6 offset 16C23BE

[sony66]

The ipaq514 is the same as the RoverPC M5 (sold with WM5)
Somewere I read that someone cooked a wm6 rom for the RoverPC M5 but faled to find any details of this.

What command did you type to get that output?

[defcomg]

The ipaq514 is the same as the RoverPC M5 (sold with WM5)
Somewere I read that someone cooked a wm6 rom for the RoverPC M5 but faled to find any details of this.

What command did you type to get that output?

At + L was the command
you right its the rover pc m5 here is the cooked wm6 rom http://translate.google.co.za/translate?hl=en&sl=ru&u=http://mobingo.ru/forum/showthread.php%3Ft%3D1649&sa=X&oi=translate&resnum=6&ct=result&prev=/search%3Fq%3DRoverPC%2BM5%2Bwm6%26hl%3Den%26client %3Dms-opera-mini%26sa%3DG

[tjlabais]

hmmm.... hp has sometimes its own encryption. For example, the hp rw6828 has the same hardware as xda atom, but it formatted its ROM in a different way so it can't interchange it's updates with xda atom. Then hp encrypts it with its own too; so, you won't go unpacking all the goodies it has included in its ROM.

But for rw6828, the encryption was a mere alteration of the main file header and the header of each section; thus, by removing it you can already unpack the hp ROM pretty much like the xda atom.

hp never uses a file convention. It uses nbf interchangeably with a variety of formats it can think of.

[defcomg]

The RoverPC M5 USES WMIPL.DIP + WMUPDAT.DIP To Flash the phone The Same as IMATE SPL (http://forum.xda-developers.com/showthread.php?t=406879) IF You Open Rover M5 WMIPL.DIP You Can See its ment for the IMATE SPL Because its Got Omap 730 text blah blah here are ROVERPC M5 Official Roms FTP (ftp://ftp.roverbook.com/RoverPC/RoverPC_M5/)
Im going to try use IMATE SPL Cooking Tools (http://rapidshare.com/files/131721695/WM6_ROM__32534___36753___24037___20855__Puma-T_-Cooking.rar).

Can Some Translate That Russian Text In the FLASH.txt it contains information on how to Flash with SD

[defcomg]

http://rapidshare.com/files/96517662/Constructor_M5.7zThis is the tool that was used to create WM6 Rom for RoverPC M5

[cingibi]

The RoverPC M5 USES WMIPL.DIP + WMUPDAT.DIP To Flash the phone The Same as IMATE SPL (http://forum.xda-developers.com/showthread.php?t=406879) IF You Open Rover M5 WMIPL.DIP You Can See its ment for the IMATE SPL Because its Got Omap 730 text blah blah here are ROVERPC M5 Official Roms FTP (ftp://ftp.roverbook.com/RoverPC/RoverPC_M5/)
Im going to try use IMATE SPL Cooking Tools (http://rapidshare.com/files/131721695/WM6_ROM__32534___36753___24037___20855__Puma-T_-Cooking.rar).

Can Some Translate That Russian Text In the FLASH.txt it contains information on how to Flash with SD


Roverpc m5 (http://pdadb.net/index.php?m=specs&id=582)
this site says roverpc m5 using omap 850 and all specs are same as ipaq514

[defcomg]

What Will Happen i try RoverPc M5 Rom on HP Ipaq 514
Brick ? or Succes? dat is the question:confused: if it does work maybe then we can cook 6.1 using *.dip instead of NBF:D

[defcomg]

I Was Curious To What the Mpx 200 Update Wizard Would With My Device So I downloaded the Wm6.1 and installed the Update Wizard to My Pc It Did Something Wierd When i Pluged in My phone in DBSloader it said usb device detected then asked for driver i then used the motorola mpx200 drivers then it said HP USB Sync Found And It Installed the Drivers i Then Open Mitty there Was .\\\WCEUSB001 i selected that i Wrote At + L the mitty wrote ok i then got bored started writing on keyboard random letterz then mitty went all wierd.

it started displaying wierd fonts and then the more i typed it no matter what i typed i got a font that looked like an L but smaller with even sides and then i noticed my phone started saying Downloading… all the way at the bottom so i quicky pulled out the usb.

i noticed u can get into DBSLoader without the battery By Pressin Vol down And the insert usb.

[defcomg]

Something I Did by Accident to get \\.\WCEUSBSH001 Is You Press Vol Down + Left Joypad button and Insert USB With Battery or Without the Battery it Works if you dont hold left joypad button you dont get WCEUSBSH.

What Will Happen if attempt to Flash The MPX200 wm6.1 Rom Because i Got The Update Wizard to detect my Device as a Mpx200 Will it Brick?

WHEN HP RUU IS UPDATING THE IPAQ 514 WHERE DOES IT PUT THE EXTRACTED FILES OUT OF THE .NBF BECAUSE IN THE ROMUPDATE.DLL THE COMMANDS TO EXTRACT AND CONVERT THE NBF I USED WINHEX TO CHECK

HAS ANYONE TRIED PUTING WMUPDAT.DIP OR WMUPDATE ON A BLANK MICRO SD AND HOLDING VOL UP + 6 + POWER KEY

[tjlabais]

Something I Did by Accident to get \\.\WCEUSBSH001 Is You Press Vol Down + Left Joypad button and Insert USB With Battery or Without the Battery it Works if you dont hold left joypad button you dont get WCEUSBSH.

What Will Happen if attempt to Flash The MPX200 wm6.1 Rom Because i Got The Update Wizard to detect my Device as a Mpx200 Will it Brick?

WHEN HP RUU IS UPDATING THE IPAQ 514 WHERE DOES IT PUT THE EXTRACTED FILES OUT OF THE .NBF BECAUSE IN THE ROMUPDATE.DLL THE COMMANDS TO EXTRACT AND CONVERT THE NBF I USED WINHEX TO CHECK

HAS ANYONE TRIED PUTING WMUPDAT.DIP OR WMUPDATE ON A BLANK MICRO SD AND HOLDING VOL UP + 6 + POWER KEY

Dude, mpx200 have totally different hardware. You will brick it if you use it on IPAQ 514. Besides the update utility was meant to update 32MB of Flash ROM vs. 514 with 128mb.

[adempozhari]

what do you mean for "you will brick it...." ?

[defcomg]

what do you mean for "you will brick it...." ?

brick it means it will become a paper weight as useful as a brick dead haha.
Vol Down + Left Softkey +POWER UP = UART BOOTLOADER

VOL DOWN + POWER UP= USB BOOTLOADER JUST LIKE MPX220.

THERE GENERIC FIRMWARES FOR MPX220 AND THE OFFLINE UPDATES IS SUPPOSED TO SPLIT THE MPX 220 BEFORE IT GETS UPDATED. check here www.alienhq.com

[icush]

db 'CFlashEnvironment::IsCustomTypeValid(): Device asset data for CustomType is [blank]: PASS!',0

it won't let me run on my unicel phone because the id is not =[BLANK]

if you get me one working ill send 20$ paypal, ty

[NickDaniels]

Same problem here, my unicel ipaq cannot be updated either.

[ENTERPRISE1701]

Hey there guys. I am new here so be gentle haha.

I have a UK Ipaq514 with the original ROM that came flashed with it which I do believe is 1.0. Now I know there are Multi language ROMs now out at version 2.05.03. However the new ROMS do not support my device SKU which is FA908AT#ABB.

I have located a Hacked Flashing Utility and I know where to get the new ROM.

However what is the chance that this would completely brick my phone if I flashed the new ROM to it ?

Thanks in advance.

[TryOG]

0% to 100%

Just try it and if it doesn't work, you'll find a solution to unbrick it.

[TryOG]

0% to 100%

Just try it and if it doesn't work, you'll find a solution to unbrick it.

[ENTERPRISE1701]

Well I did the update to 2.05.03 and all works great. However I want to get my hands on the 2.08.00 Rom. Has it bee uploaded anywhere for use do you know ?

Cheers

[issacchua]

wow... is that hacker website?! Really awesome!!
this site may become the topless site here!

[Gnukleus]

I managed to crack the ROMupdate.dll of the hpRUU primarily because there is no RUU for iPAQ 512 with SKU ID #UUF. It has ROM Revision 1.08 and the rest of the iPAQ 512/514s out there have an update with ROM Revision 2.05.0X

This will also work if you want to update your iPAQ 512/514 to another language. Here are the steps:

1. Download your desired iPAQ 512/514 ROM update
2. Unpack the RUU files by executing the SPXXXXX.exe file
3. Click next until you see green screen with 'iPAQ Update Utility'
4. Cancel the 'iPAQ Update Utility'
5. goto C:\iPAQ\SPXXXXX and change ROMupdate.dll with the attached file
6. Run hpRUU.exe from the same folder and proceed with updating your iPAQ 512/514

Enjoy! :cool:

EDIT: Flash at your own risk.

Hi i bought a HP 514 than vas old 1.08.xx ROM after i TRY to upgrade official ROM 2.05.02 RUU deleted my PHONE and couldn't FLASH.
I used 2.05.03 with your's SKU ID hack. And works great.
LOT of Thanks, you SAVE my ASS :)

[fengboxp]

It's very nice!I'd updated my iPAQ to CHS ROM

[phd1234]

I have a ipaq 510, with english/french/spanish language ROM, want to flash to Chinese laguage, will this method gonna work?

[Frontier]

Hello,

This is a bit off-topic, but do iPaq 514 WM6 Standard devices (official ROM) contain Greek T9?
I am trying to obtain these files, but I cannot decrypt and dump the latest official ROM for the iPaq 514.

Many thanks in advance.

[cimony]

I've flashed my ipaq 514 with WM6.1 RC1 LiTE 4 HP IPAQ 510 512 514 by
Strik3r nd SiliX (HP514[V1RC1L] from ifolder.ru) but now it is bricked.

When updating the process was slowly to 43% but then the progressbar has skip to 100% and device reboot.
After reboot i see only "No image exists !!" message

I make make hard reset i see only "No image exists !!" message
and if i conect my device my pc not recognizes my device I'm very angry

Help me plase

[defcomg]

I've flashed my ipaq 514 with WM6.1 RC1 LiTE 4 HP IPAQ 510 512 514 by
Strik3r nd SiliX (HP514[V1RC1L] from ifolder.ru) but now it is bricked.

When updating the process was slowly to 43% but then the progressbar has skip to 100% and device reboot.
After reboot i see only "No image exists !!" message

I make make hard reset i see only "No image exists !!" message
and if i conect my device my pc not recognizes my device I'm very angry

Help me plase

Hi Did You Try a Hard Reset Hold middle button then boot the device
2nd Did You Flash The Rom to Russian Before trying wm6.1
if not do it next time.

How Revive Device Download The Original Rom Or Use The Russian one turn off the phone Hold the Volume button + Left Joypad Button then insert usb then Run HPRuu.exe it will restore the OS:cool:

[cimony]

I do that but i see alwase "No image exists !!" message
and my pc not recognizes my device I think that the bootloader cant star

Thank you for your help

[cimony]

Can I use a JTAG or a driver for device so that my pc know my device :confused:

[defcomg]

Can I use a JTAG or a driver for device so that my pc know my device :confused:

i had the same issue after i tried the first beta but i managed to fix my device. Do this Go here ftp://ftp.hp.com/ftp2/pub/softpaq/sp38001-38500/ then Download Sp38066.exe 4 russian sp38077.exe for english now once youve done that open the one you downloaded it Nomally extracts to C:\iPAQ then inside You Will Find hpruu.exe run that first then plug the usb in another port than the one its nomally in Hold The Down Volume button Whilst Still Holding IT(dont let GO) Push The left joypad button Now youl be holding two buttons Then Insert the USB while holding those two buttons The device should go into bootloder mode and youl see Dound new Hardware HP USB SYNC let it install the Just Flash Like you would nomally do the device is not dead just doesnt have boot image hope that helps

[cimony]

I trying this method mutch time but alwase i have the same message "No image exists"

The grate probleme that s The device cant go into bootloder mode :confused:

Thank you Defcomg for your sincerly Help

[cimony]

I trying this method mutch time but alwase i have the same message "No image exists"

The grate probleme that s The device cant go into bootloder mode :confused:

Thank you Defcomg for your sincerly Help

[djsynchron]

How to fix "No image exists !!" or a bricked iPAQ 5xx Voice Messenger

Note : Try to do this on a XP computer

1. Check your SKU ID (Example : FA908AA#ABB)
2. Download the right ROM Update for your SKU ID for HP's site (sp******.exe)
3. Disconnect your phone (if it is connected)
4. Run "sp******.exe" (it will extract to c:\ipaq and run the ipaq update utility), DON'T PRESS NEXT
5. Now, hold down the "Volume down" key, and while holding it , hold down the "Left" key (on 4-ways) and while holding both keys connect the usb cable.
6. Now phone will enter DBS Loader (you can release "Volume down" and "Left" keys) and your computer will install HP USB Sync drivers.
7. Hit the next button on HP iPAQ Update Utility and proceed as a normal update.
8. TADA...Your iPAQ 5xx Voice Messenger is alive again.

[cimony]

WHEN I hold down the "Volume down" key, and while holding it , I hold down the "Left" key (on 4-ways) and while holding both keys I connect the usb cable But device cant go to the boot loader i have alwase the message "No image exists"

I think that the Bootloader has dead :(

[djsynchron]

Your bootloader is not dead because most probably you don't have a bootloader anymore on the phone, or your bootloader is corrupted.... That's why you have to run iPAQ Update Utility before holding down the mentioned keys and connect the usb cable. If iPAQ Update Utility is not running, your phone wont go in bootloader mode!

try again and let me know if it's working

[cimony]

one week I have trying all of your solution but without any change

I think the device has totaly dead :mad: :mad: :mad:

If i has upgrading the ROM i see Formating in TFAT what thas it mean .

Thanks for all XDA members

[djsynchron]

"Formating in TFAT" means that phone's partition is formated.
TFAT - phone's file system
if you saw "Formating in TFAT" , that means that your phone is formated, and then rom image will be downloaded from pc to phone

[djsynchron]

"Formating in TFAT" means that phone's partition is formated.
TFAT - phone's file system
if you saw "Formating in TFAT" , that means that your phone is formated, and then rom image will be downloaded from pc to phone

[cimony]

Is ther a solution with ITAG ??? Plase :(

[cimony]

I dont Know Russan

Методика перепрошивки:
1. Зарядить полностью АКБ, отфрматировать micro-SD карту в формате FAT16. Объем карты должен быть минимум 128мб.
2. Скопировать на micro-SD карту 2 приложенных *.dip - файла.
3. Снять АКБ, установить micro-SD карту в аппарат.
4. Удерживая клавишу "6" включить аппарат.
5. В процессе перепрограммирования ROM появится сначала зеленый, затем синий прогресс-индикатор,
по завершению процесса аппарат автоматически перезагрузится.

:confused: :confused: :confused: :confused::confused::confused::confused:

[alexalx]

I dont Know Russan

Методика перепрошивки:
1. Зарядить полностью АКБ, отфрматировать micro-SD карту в формате FAT16. Объем карты должен быть минимум 128мб.
2. Скопировать на micro-SD карту 2 приложенных *.dip - файла.
3. Снять АКБ, установить micro-SD карту в аппарат.
4. Удерживая клавишу "6" включить аппарат.
5. В процессе перепрограммирования ROM появится сначала зеленый, затем синий прогресс-индикатор,
по завершению процесса аппарат автоматически перезагрузится.

:confused: :confused: :confused: :confused::confused::confused::confused:

Method for upgrading:

1 Charge the battery, Format micro-SD card (FAT16). Capacity of micro SD must be at least 128MB.
2. Copy 2 *.dip files to micro-SD card.
3. Remove the battery and plug the micro-SD card in phone.
4. Hold on button 6 and switch on the phone.
5. In process of upgrading ROM, at first will show green and after that blue progress indicator.
After finishing of upgrade the phone will restart automatically.

Basically this is the Russian text. :)

[djsynchron]

First of all, the micro-SD card should be formated in RAW FS, then you have to copy rom image to card in raw (binary) format (you can use pdocwrite for this)....but i don't know if iPAQ 5xx has an SD Loader.... If it doesn't it won't be able to load rom from sd card, so this method won't work...

[cimony]

Thank you my freind but iPAQ 5xx has not a SD Loader

:mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad:

Thank for all membere had help me

[defcomg]

Thank you my freind but iPAQ 5xx has not a SD Loader

:mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad:

Thank for all membere had help me

Try the volume down plus left softkey insert usb but do all this without the battery i think the no image error come up because you either put it in two early or not pressing the key all the way in try and get someone else to put the usb in for you you just hold in the keys do it on windows xp sp2 im sure the device is not bricked on hp it first flashez the bootloader before the rom that way even if the lights went out at 50 percent so i know your bootloader is intact

[defcomg]

oh yeah once the bootloader active put the battery in and also what was the charge on the battery it could be the battery to low to to allow bootloader try charging with one of those univesal charger things

[cimony]

Thank you Defcomg

When I hold down the "Volume down" key, and while holding it , I hold down the "Left" key (on 4-ways) and while holding both keys with battery plugged in , then I connect the USB cable : I have always the same message "No image exists" and the bootloader cant starts

And when I try without battery : The device flash in the background

Is this the correct Keys mentioned on the image below ?

Thank you

[djsynchron]

Yes, those are the keys that you have to hold down. I had the same problem as you...and the method that mentioned before worked for me and for many other people with the same problem.

and btw, you don't have to remove the battery...

8-Steps Guide HOW TO FIX iPAQ 5xx.zip (guide with images) is attached

[robbani]

i hv do the update....
it was a fully update....
after the update....
my display become like this....
"No image exists !!"
what do i hv to do now....
please someone help me.....
ASAP.....

[djsynchron]

i hv do the update....
it was a fully update....
after the update....
my display become like this....
"No image exists !!"
what do i hv to do now....
please someone help me.....
ASAP.....

Read my posts from this thread and download guide posted before,. i'm sure you will find the solution

P.S.:if you want to update to silix's wm6.1 for ipaq 500 you have to FLASH YOUR DEVICE WITH ORIGINAL RUSSIAN ROM FIRST FROM HP WEBSITE

[robbani]

i hv tried the "hold volume button+left joypad button & insert usb"
it's remain the same....
keep displaying "No image exists"
what do i hv to do...
please reply...

[djsynchron]

robbani, try on other usb port and run hp ipaq update utility before connecting the usb cable

[cimony]

Because if WE want to update to silix's wm6.1 for ipaq 500 WE have NOT FLASH our DEVICE WITH ORIGINAL RUSSIAN ROM FIRST we are skip the steps

then the bootloader has corrupted I think the only solution is a JTAG but How ? :confused::confused::confused::confused::confused: :confused:

[cimony]

OR this software :http://focus.ti.com/docs/toolsw/folders/print/tmdssdsfru.html

[djsynchron]

FOR ALL OF YOU THAT TRIED TO UPDATE TO SILIX'S WM6.1 FOR IPAQ 500 AND GOT "NO IMAGE EXISTS !!"

I just tried (to see what happens) to update to Silix's WM6.1 for iPAQ 500 without flashing to original russian rom and I've got "No image exist" too. So I fallowed my own guide and everything is ok

Device is not dead...but it does not no have a valid bootloader anymore (it's corrupted beacause update stopped when bootloader was written). That's why you have to run sp*****.exe before connectig the usb cable as I said in guide (A valid bootloader will be loaded from HP iPAQ Update Utility when you connect your phone to computer). Follow all steps from guide and pay attention to all details.

Download my guide (page 6 of this thread "8-Steps Guide HOW TO FIX iPAQ 5xx.zip" ) ... Will work 100%

[cimony]

Thank you Djsynchron

I followed all the steps in the guide with attention to every detail
Unfortunately, the bootloader does not want start and the PC no longer recognizes the device :mad::mad::mad::mad::mad::mad::mad::mad:

Thank you

[djsynchron]

use other usb port and try again...it seems to be a problem when you try to connect to the same usb port.

NOTE: after your phone is plugged in and DBS Loader appears on phone's display your computer may ask you for some driver (HP USB Sync) or something like that. Also drivers are provided with ActiveSync 4.5. Install that driver and then proceed to next step

[cimony]

Thank you my freind
But always without any chance
:confused::confused::confused::confused::confused: :confused:

[cimony]

Robbani

Is That OK for YOU :confused: :confused:

[hastece]

does anyone have a good picture of a good working mainboard for ipaq 514 both sides cause i would really need some superfine pics?.. i screwed un somthin on it and i need to see what.. mail it to me on hastece at yahoo sorry and thanks

[cimony]

I dont know what do you want exactely

[cimony]

yes I found a solution, unfortunately I screwed up a circuit that does not matter it was just for the color so be careful not to damage your mobile phone;

That is the solution:

You must disassemble your mobile phone, specifically the keyboard with two screws as shown in step 15 on the video below,
http://www.youtube.com/watch?v=GGdYl9jr-_s

Let it disassembled a half hour

Assemble it again and follow this method to relive your mobile: 8-Steps Guide HOW TO FIX iPAQ 5xx.zip in
http://forum.xda-developers.com/showthread.php?t=391580&page=6

Made By Mohammad

[robbani]

i hv connect other usb's....
i hv 3 usb's.......
it still the same.....
still no image exists....

[Vik Vasilev]

I have the same problem
"No Image exists !!"
I got this error while installing Silix 6.1 rom(I didnt install the russian rom first...)
What can I do about it?
Is there any way to restore the bootloader(which is apparently missing), or do I have to send my Ipaq to an hp service.

[Vik Vasilev]

FOR ALL OF YOU THAT TRIED TO UPDATE TO SILIX'S WM6.1 FOR IPAQ 500 AND GOT "NO IMAGE EXISTS !!"

I just tried (to see what happens) to update to Silix's WM6.1 for iPAQ 500 without flashing to original russian rom and I've got "No image exist" too. So I fallowed my own guide and everything is ok

Device is not dead...but it does not no have a valid bootloader anymore (it's corrupted beacause update stopped when bootloader was written). That's why you have to run sp*****.exe before connectig the usb cable as I said in guide (A valid bootloader will be loaded from HP iPAQ Update Utility when you connect your phone to computer). Follow all steps from guide and pay attention to all details.

Download my guide (page 6 of this thread "8-Steps Guide HOW TO FIX iPAQ 5xx.zip" ) ... Will work 100%
Did you fix your device? This does not work for me ;/

[cimony]

As for me I tried all the solutions described in this forum, unfortunately it was always without result; up where I disassembled my mobile phone exactly when I posted the keyboard
In my opinion the tempo keyboard memory was blocked and when you pressed the volume button and the left button of joypad the system does not recognize, in truth your keyboard is blocked
the system recognizes that the power ON button and not power OFF.

So the only solution that has revived my mobile phone is the one I described earlier in the forum: Made by Mohammad

Français :

Quant à moi j'ai essayé toutes les solutions décrites dans ce forum malheureusement c'étaient toujours sans résultat positif ; jusqu'à où j'ai désassemblé mon GSM précisément lorsque j'ai détaché le clavier à mon avis la mémoire tempo du clavier c'était bloqué et lorsque vous appuyé sur la touche du volume et la touche gauche du joypad le système ne les reconnait pas ; en vérité votre clavier est bloqué
le système reconnait que la touche power ON et non power OFF .
Alors la seule solution qui a revit mon GSM c'est celle que j'ai décrit précédemment dans le forum : Made by Mohammad

[Vik Vasilev]

Isnt there any way to do this without having to disassemble my iPAQ ?

[defcomg]

Try pressin 5 and 8 together and boot up

[fisekovic]

1. Follow the instruction on this link : http://www.youtube.com/watch?v=GGdYl9jr-_s
2. Then do everything described on this thread “8 steps” : http://forum.xda-developers.com/showthread.php?t=391580&page=6
8-Steps Guide HOW TO FIX iPAQ 5xx.zip
This solution really work because I have done this by my self on my ipaq 514 phone.
regards

[djsynchron]

So...my guide is working....I don't know if you must have to dissamble your phone...maybe it's working if you only remove the battery for a couple of hours... (I did not dissambled my phone but I had removed the battery for a couple of hours before trying the method described in my guide)

For all who did not succeed reflashing : read carefully all information posted on this thread and keep on trying...I'm sure it will finally work

[Kosik01]

Hi, i have the same problem as robbani. I am really mad of that, in every case my phone writes "No image exist!!!" :(

So, i tried to open my phone for 30 minutes, and...tradaaaa, works! Im very, very happy! Thanks for all your posts!

[dexter127]

Very nice...

[hpdebug]

When I pulg my ipaq 500 in bootloader mode, windows xp ask for "Usb device" driver.
Can some body please upload the driver ar show me link to download the driver?
Help me pls.......

Thanks

[hpdebug]

Already search all over the world and i just could not found the driver!
What a great support from hp company.....damn! It just suck!

[hpdebug]

Could some body just upload the driver to help me...................please???????????

[hpdebug]

thanks you...
very helpful....

[hat007]

me to windows vista ask for driver help me plz

[benumeam]

I Can´t download this file... please help me!

[shantall1664]

i just connect my phone and driver search by windows by it self.try unplug then plug again

[beytullahgol]

is it work on ipaq 514?

[someoneelse999]

Hi chaps

Is there a version of the ROMUpdate.dll available for the HP Data Messenger (Win Mobile 6.1)?

I want to flash the firmware but am being told I have an "invalid SKU"

Many thanks

Uri

[vinculum]

I managed to crack the ROMupdate.dll of the hpRUU primarily because there is no RUU for iPAQ 512 with SKU ID #UUF. It has ROM Revision 1.08 and the rest of the iPAQ 512/514s out there have an update with ROM Revision 2.05.0X

This will also work if you want to update your iPAQ 512/514 to another language. Here are the steps:

1. Download your desired iPAQ 512/514 ROM update
2. Unpack the RUU files by executing the SPXXXXX.exe file
3. Click next until you see green screen with 'iPAQ Update Utility'
4. Cancel the 'iPAQ Update Utility'
5. goto C:\iPAQ\SPXXXXX and change ROMupdate.dll with the attached file
6. Run hpRUU.exe from the same folder and proceed with updating your iPAQ 512/514

Enjoy! :cool:

EDIT: Flash at your own risk.
Is this also possible for a Ipaq data messenger?
Can you change the ROMupdate.dll also?

tnx

[m3gab0y]

I've tried all except disassemble the unit (i will do it later, i don't have the apropriate tools @ work yet). And guess the results - nothing works for now. I just can't get out of the "No Image exists!!" screen. When i press vol. down + left the result is the same. But when i press both the vol. keys (when the phone was alive i entered the bootloader this way) the phone is completely blank screen. I have all the drivers in activesync and the new filmware updater. But the phone doesn't show up at all, it just drains power from usb, nothing more, no comunication at all. Even in the blank screen when i press both volume keys at the same time at startup. Even in this state i ran the updater and it didn't detected the phone.

Just for the record: anyone tried with the sd-card hacks? (insert raw formatted sd card with the filmware in it and boot from it)

Edit: I left the phone for 5 hours without battery and upon plogging the usb-cable i receive the same message. So there's nothing left except to disassemble it.

Edit 2: I did it. The phone is ALIVE! I didn't have to disassemble it! Follow the instructions below.

OK Here are the instructions to make it alive:

1. Remove the cable AND the battery!
2. Insert the battery, be carefull not to press any of the keys.
3. Press Volume down AND Joypad Left key AT THE SAME TIME. Keep the keys pressed.
4. Insert the USB Cable. It SHOULD give you the bootloader! If the message is "No image exists!!", try it again and again untill you get it right! If you do it right you WILL see the bootloader! Some folks complain that the keyboard doesn't always react on this key combination, so try it again and again untill you get it right. It's the hardest part, but you don't have much of a choise.
5. Download the appropriate rom and language for it (as for now rom 2.05.0 from hp.com in english for me)
6. Download this file (http://forum.xda-developers.com/attachment.php?attachmentid=85357&d=1210513722) from the first post and copy the ROMUpdate.dll to the folder where the setup files from the HP Update are located (usually theese files are in C:\iIpaq\SP******\).
7. Run the installer (open the sp***.exe where *** is the serial number of sorts) The installer should detect the phone and will not complain about sku id if you applied the patch correctly.
8. Press update and wait.
9. (re)Boot the phone again.

And there you go - you have windows 6.0 again.
But hey, look at the good side. It's better than dead device ;)

[Cryos]

Have tried all of the past information. Disssembly etc... however the phone still says "no image exists !!".

[kioevad]

hey guys, i found this.

WM6.5 для HP514, OS [RUS] v2[RC1] Full (http://proshivka.getbb.ru/viewtopic.php?f=2&t=9&st=0&sk=t&sd=a&sid=795af23487c580fdd4460ac257e49fa4)

[cingibi]

hey guys, i found this.

WM6.5 для HP514, OS [RUS] v2[RC1] Full (http://proshivka.getbb.ru/viewtopic.php?f=2&t=9&st=0&sk=t&sd=a&sid=795af23487c580fdd4460ac257e49fa4)

10 dolar and russian language only :(

[apple11]

Thanks,man,the hack worked for me! first i follow your instruction then i run the update unitity to install the chinese english rom after one error and a few minutes the frimware flash successfully and you rocks for this

[sony66]

What tools do I need to disassemble the nbf file?

[ralf_pp]

10 dolar and russian language only :(

$10 isn't much, but russian is a real party killer :-) Think of the _huge_ marked there is for russian on your old ipaq 514 :-)

[szabori]

Hello!
I've got some problem with my ipaq 514 vm. I was trying to upgrade it when it stoped. Is it a fatal error? Or is there any solution? What should i do?

[w()$k]

nowtime there is kitchen for hp ipaq 514
_ttp://hp-club.ru/forum/viewtopic.php?f=11&t=837
big thanx to Veliant

[bubimir13]

Yes but its only in Russian and if someone wont to translate it it'll be fine... otherwise it doesn't mean us much that the kitchen and ROM is only in Russian...

[Gans15]

Thank You!!!

[bubimir13]

Did someone did something with kitchen and ROM even in other languages but not in Russian?