[vagus]

Dell Axim x51v WM6 WPA fix
Requirements: Dell Axim x51v wm6 ROM ( I suppose it will help to axim x50v, HP hx4700 and HTC Universal users)
Overview: Fixes the bug: You need to quickly turn-off/turn-on wifi while connecting to wpa psk/tkip protected WLAN's with WlanUtility.exe or need to use Odyssey Client
..

..
..

More Info: This is signed wzcsvc.dll extracted from HTC Universal AKU 0.0 ROM image (Jwrightmcps Crossbow ROM Update 2.02.02 WWE)
Looks easy but it took my weeks. Now my reverse engineering abilities are improved. It is just like happened: Axim users hired a sniper for this bug

Code: Select allhttp://4pda.ru/forum/index.php?showtopic=51979
http://forum.xda-developers.com/showthread.php?t=331803

Download Instructions: download archive http://rapidshare.com/files/59123134/x51v_wm6_wpa_fix.rar.html
You must copy wzcsvc.dll to your \windows folder
You can't do that in your PDA.
1- Turn-off wifi, then soft-reset your PDA
2- Connect to your PC via activesync
3- Copy wzcsvc.dll from PC to \windows folder of PDA via ActiveSync's explorer
4- Maybe a reset needed again
5- OR try to install this cabinet file (thanks to LazyMind from 4pda) on your PDA
http://rapidshare.com/files/59249613/LazyMind_WM6_WiFi_fix_by_Vagus.cab.html
Important (maybe for x50v / Universal users) : If it doesn't work, you must rename (to x.dll) it before deleting, because this is a ROM file. If it doesn' work, try to look at device.exe process with sktools. Look at the picture below:


If wzcsvc.dll is not in the list, you must sign the file with another certificate that included in your cooked ROM. Try this http://rapidshare.com/files/59370060/wzcsvc_signed_smartphone.rar.html
If it is in the list, then this trick will not work for you

Please test the stability, and give feedbacks to Football, so that he will include this fix in his final rom
Note: I tried this with wm6 A03 Pre rom (not with the A03 final one). I resetted a lot to conclude that it really works
Although this post may be part of viewtopic.php?f=60&t=31149, it deserves a new release due to high demand
Special thanks to cmonex, lord yuz, makuu, lifehacker, and big thanks to football who made wm6 possible for us
Especially cmonex helped me to differentiate important and unrelated things in programs, dll's etc.

Now my complaint is battery drainage of wm6 (I am not sure if my CF memory card uses power even i don't access it)

Mirror:
http://www.4shared.com/file/25329726/1ea115d9/x51v_wm6_wpa_fix.html

this is for Football, or Kozhura, or Maglite or Chamine, or any other ROM Cooker
(archived unsigned HTC Universal's wm6 AKU 0.0 module folder).
It doesn't work on Dell Axim x51v without signing. If you need this, it is here:
http://rapidshare.com/files/59152817/wzcsvc.dll.rar.html
Please do not delete odysseyimce.dll (it is an intermediate passthru driver between tiacxwln.dll and microsoft drivers such as Ndis.dll), and please do not un-install odyssey client in future ROM releases. This way works, so let it be.

[LZF]

Excellent release! 25 WRZ$ cracker reward. Category: Internet/Network Utilities

I tried it also on my HX4700 because it lacks the same problem with WPA as the Axim, and guess what? It works bloody great, no need for Odyssey anymore!!

As a personal thanks I donate another 100 WRZ$, and add it to the HX4700 WM6 ROM from kozhura

vagus,
pls more links, rs is full!!!!!

[vagus]

Sorry
Please ask from LZF or another person. i am only a brute force cracker/reverse engineer.
Believe me, it is really too hard for me to make mirrors

vagus,
pls more links, rs is full!!!!!

[LZF]

I've added a mirror to the main post.

[vagus]

Please someone warn HTC Universal users also:
http://forum.xda-developers.com/showthread.php?t=327928
They have the same problem, they have the solution but were not aware.
if i did'nt download wm6 AKU 0.0 rom there, this solution won't be possible

someone already made a software that turns off/on wifi quickly
http://forum.xda-developers.com/showthread.php?t=330481

[Lord Yuz]

Awesome, works fine on mine too (A03 RTM). Nicely done, vagus congratulations!

[LZF]

I added it to the link to xda-dev, and that worked, it's now also on 4pda in the HX4700 topic: http://4pda.ru/forum/index.php?showtopic=50050&st=1200

Let's hope both football and kozhura will include it in their next ROM.

Thank you vagus this is great being able to use wifi again.
No problems with Opera and IE.

[ChillyCat]

Great work vagus

Tested & working with mutible re-sets. Both preview & RTM are now fully [wifi] functional.

Thanks

[cmonex]

wow congrats

how did you find this in the end?

SO how can a USER of Axim and Football ROM get this thing to work?

Would we have to completely reflash with new edited ROM to get this fix to work?


THANKS A BUNCH!


I can't replace the original file.... there is write protection...

[vagus]

You know i examined every suspicious file, including nk.exe. Look at my post #62 at the lounge
I found that wzcsvc.dll is the program that automatically connecting software. It is between WlanUtility.exe and ndis.dll

wow congrats
how did you find this in the end?

I dis-assembled and compared 3 wzcsvc.dll from (i always compared 3 files when hunting):
1- wm5 A17 (wpa works on axim)
2- wm6 AKU 0.0 (wpa said to be works on HTC universal)
3- wm6 A03pre (doesn't work on axim)

At first sight, differences are:
wm6 Axim file uses RequestPowerNotifications of coredll,
also uses registry values of PowerMsgQName and TriggeredScanDampenSeconds and RandomSSID and UseDisassociateOID
from Software\Microsoft\WZCSVC\Parameters

Two days ago I copied Universal's file without signing, 1 day ago i realised that it is not loaded by device.exe. If i sign it, it is loaded and works. So my suspicion is: tiacxwln's driver (tiacxwln.dll or OdysseyIMCe.dll) is not adequately responding to RequestPowerNotifications But a power transition (wifi off/on) generates required for necessary message. Important: OdysseyIMCe.dll is a passthru intermediate driver and creates ODIM device. It may also have bugs.
It is better to patch tiacxwln.dll, but i am not a programmer / wifi engineer. Also i can-not debug wzcsvc.dll with idapro, because it is loaded by device.exe. These are technical so i must create a new thread in cracking subforum or in xda developers forum.

[vagus]

You must find a way to copy it \windows folder. If it is running, it is hard to copy over, but generally after a fresh soft reset, it can be overwritten

SO how can a USER of Axim and Football ROM get this thing to work?
Would we have to completely reflash with new edited ROM to get this fix to work?
THANKS A BUNCH!
I can't replace the original file.... there is write protection...

Or wait and it will be include (i suppose) in a newer ROM

[ChillyCat]

SO how can a USER of Axim and Football ROM get this thing to work?

Would we have to completely reflash with new edited ROM to get this fix to work?


THANKS A BUNCH!


I can't replace the original file.... there is write protection...

You are joking ? Right ?

The COMPLETE instructions are contained in vagus's first post.

Real simple........ follow the instructions