Hidden Palm Interface Config Screens

[phant0m_jester]

Hey fellow Angel owners,

I recently purchased a Dark Pewter Dust IR3 off of e-bay which came in a reasonable amount of time and worked great upon arrival.

In reading the manual I stumbled upon the area where it outlined the menu navigation via the buttons under the grip. With this information on attempted to change the mode from ATSM to EXTRA - and it worked. All modes available! Yay! This would mean that I have an unlocked IR3....this would be even cooler if I could show everyone else how to do it.....

....So with my curiosity in hand I went digging on this board and someone at some point posted something about the ability to do this is actually contained within the Palm software. I went on to download the software from WDP and decompiled it - and sure enough - the ability to unlock your IR3 is hidden in the software! However, the version that we download has no links within the actual Palm program to actually access these screens. I'm sure there is an ADMIN or TECH version that contains the links to the forms/screens so Master Tech's like Ken can do whatever they want for troubleshooting purposes.

I have attached screen shots of the screens. I encourage you to download a copy of "palmdeMON" from here:

http://palmdemon.schwump.net/

and give it a try.

Like I said - the screens and values to be sent to the IR3 are there - however , when you decompile - it only takes it down to machine code - not the actual "C" that was used to create the application. I'm sure if you could beam the actual HEX vaules to the IR3 it may take. Anyone have any ides...? It would be nice to here from a Master Tech on this....:puzzled:

[phant0m_jester]

This is another hidden screen....:puzzled:

[Vapaintballer400]

you are amazing i love you i am doing this as soon as i get my IR3

[Emmit]

that's all well and good, but unless you can get these options back onto your Palm, you can't use them.

[phant0m_jester]

whoa' - whatch out with all the emotion flyin' around in here...don't give the love out just yet....:sshh:

Like Emmit said - these screens are there - they are just hidden becasue there is no link to them from within the application. If you can't get them "unhidden" there will be almost no way to use them.....I really wish I knew more about 'C' and Palm programming, sorry but I'm an ASP/VB person....

When you get your IR3 it may be unlocked - mine was and I was totally not expecting it to be - nor was it mentioned by the seller. He claimed he did not know either. I know Master Tech's have a version of the software that has these screens available - why else would they be in there....?

[aerotcus]

I learned C a while back, but havent used it in a while. It makes sense that you would have to make some changes to the Palm software and recompile your own version in order to use the screens. It doesnt seem like it would be too hard to do in theory.

Adam

[Goryevilkitty]

I just downloaded the software and the files are all there but i have no idea how to put thoes menus on the palm, but someone out there has to be able to figure this one out!

[phant0m_jester]

That's what's driving me crazy! I can see the screens - but can't get at them! It's like WDP is laughing at us!:angry:

I think it's really dumb how none of the techs will "leak" this software someplace....they must have the good stuff....

I live in RI and I'm about 60 mins from Ken Crane - next tourney I'm gonna' have to see if I can pay him a visit. (Cape Cod Paintball is a pretty popular NEPL tourney location)

Thanks for all the feed back - I really hope someone can put a positive spin on this.

-Rob

[Emmit]

Originally posted by phant0m_jester
I think it's really dumb how none of the techs will "leak" this software someplace....they must have the good stuff....

it's not dumb, it's not funny, it's not anything except them keeping their jobs as WDP's Tech's, and continuing to get information and such from WDP. When they were all given their version of the software they had to sign a Non-Disclosure Agreement, and were pretty much sworn to the pain of death to never let the software into the hands of normal people. They're still doing so and will continue until WDP says otherwise.

[Goryevilkitty]

Originally posted by Emmit
it's not dumb, it's not funny, it's not anything except them keeping their jobs as WDP's Tech's, and continuing to get information and such from WDP. When they were all given their version of the software they had to sign a Non-Disclosure Agreement, and were pretty much sworn to the pain of death to never let the software into the hands of normal people. They're still doing so and will continue until WDP says otherwise.

if the techs are sworn to never release the software they have, why would WDP even bother to give them a spectial version of it that can unlock all the modes ect. when they would have practically no use for any of it. The only software that they would have a use for is the capability to change the serial numbers but thats about all.

[Emmit]

because it's still used for testing etc. If they do a board swap they need that extra stuff to give you back your number etc. Some techs have unlocked markers for event markers to show the capabilites of the marker etc.

[oohaohh]

now call me dumb. i just tried looking at what ur on about with the software i have and those screens dont come up at all. there is all the other but not the ones u show. I wonder do u have a different version or have WDP found this out and altered it to suit.

[oohaohh]

Doh silly me found it. I don't know much about this programming lark but surely all u have to do is find a way of cuttting it out of the place it's in and copying it to the IR3 prog so it will recognise it.

[fusion1o]

Originally posted by Emmit
Some techs have unlocked markers for event markers to show the capabilites of the marker etc.

Personally to me, if a representative from WDP showed me a marker that I could shoot 20 B.P.S. with only one depresion of the trigger. I would then expect the Angel that I bought to shoot 20 B.P.S. in the same manner that the tech/rep. showed me. What would be the point to show me "it could do this" but the one I buy won't do that. In a sense that sounds like false advertisement.
It will be just a matter of time before someone will crack it or WDP will realize that it will make alot of people happy to have the option to unlock their markers.

[phant0m_jester]

I agree - this is where I am coming from. If it's advertised - it should be available. Mine is unlocked and the modes are pretty cool and all - but I think it should be a freely available option to anyone who wants them.

I really wish I could recompile with these screens available....

[fusion1o]

Hey phantOm, do you think its possible to reach the person you bought the gun from and ask them if they were the ones to unlock it. If it was them. Then ask them to spred the love. :)

[newqlear]

I think you all are looking for a pink elephant. you see the palm simply contains no settings to unlock your IR3. The palm soft is simply used for transferral of information the menus you see have no code attached to the buttons. You see when a program is desinged in a visual editor you design the look or feel of the applicaion then attach code. Your IR3's in the built in memory have a rom (which performs power on self tests and then boot just a a computer would only it reads from memory and is designed only to run your gun. Modifying or accessing menus on your palm will do nothing but modify or access a menu on your palm. To crack the real nut you would have to download the rom from your ir3 and modify it to allow you to access the menu for extra modes. This can be done and despite rolling encryption I find that to be bs... I could be wrong but a 12 mhz processor is it's even that fast has better things to do than opractice rolling excryption routines , because if you could get into the rom chances are you are smart enough to know what you are dong in the first place.... if you really want to get to the bottom of any of this I suggest you go to warpig.com and read the article they did on desgning and creating your own boards to control your marker. I am happy with my 15bps and feel I don't really need this function the amount of time it would require to extract the current rom and then dissasembling it then reassembling and returning the newlypatch code to your ir3 is not an investment I would like to venture in to considering this requires unsoldering the rom from your board.

[phant0m_jester]

Fusion - I did contact the owner and he was not aware that it was even unlocked. Since I am the second owner of this IR3 and it is a Warped Dark - this would lead me to believe that someone from Warped unlocked it. No proof for this though....

newqlear - you have no proof that this is a ROM only item. It would be to the advantage of the WDP and the Master Techs to have a version of the Palm software to take care of regular maintenance issues. For example: a user comes into Ken Crane's shop, board is bad because the user got it wet. Marker is out of warranty and Ken has to fix it. After the board is replaced with a new one ($200) Ken will need to transfer serial number, cycles, service counter..etc. This something that would be common for a Master Tech. I doubt that would include hacking the ROM each time and getting past the encryption, it's just not feasible for a company to make it that complicated from a "service" perspective. On another note - the modes are "allowed" where applicable/approved - this would mean that an entire boat load of IR3 markers would have to be altered from time to time depending on their location - yet another example of why it would not be feasible from a "service" perspective to make changing those items such a complex procedure. Oh - and by the way - those buttons on the screen shots I posted - have hex codes behind them as values to be sent to the marker - I'm sure someone at WDP took the time to write that code because they were bored in their "pink elephant" illustrations....

from a metaphoric standpoint - the "pink elephant" has been found - it's just a matter of getting it on the truck and taking it to the zoo. :evilgrin:

Thanks for all of the responses,

-Rob

[newqlear]

ok if it were that simple then tell me why there have been guys decompiling and recompiling code on the palm without being able to make any of this work , I am not saying it is impossible because sure in theory it could be possible however!
If any of you know about programming (I myself have just dabbled in programming and understand the fundamental and if you run the palm files from the desktop emulator you will notice you can load gremlins ... which basically allows you load specific memory addresses , coupled with a dissassembly program tell you where the jumps are made , break points etc. In essence you can load these screens from their memory addresses and all though the code may be physically there it is removed from their appropriate button. I don't have the knowlecge to reassemble all this code and recompile it but tell me phantom you say I have no basis for my claim so share with me what claim you have to your research and what findings you have come up with ...and as far as master techs well corporate world does not always make sense nor does it ever seem logical.

[|ZooT]

I had a breef talk with Frazer over at WDP last week,
not about cracking their program but.. ;)
Last year there was a few people who gained access to
a 2.0 version of the WDP palm software, this version later not released, and i wanted to ask why.
The answer i got was that this was the TECH version,
there was no user/public version 2.0 (still is 1.8).
And there was no new release in the near future either
from what i could gather.
But looking at this 1.8 version i see the same as all of you did,
there is parts of the tech version here, but something is missing.
How to complete this program i think only a few persons know,
and they all work at WDP :)
But what you suggest newqlear, that it would be the gun you
need to 'hack'.. i find that nearly impossible to do, and i think it
would be alot easier to access these settings via the palm.
Soo... Rob, i got a truck! You bring the crowbar and about 600
friends and we're of to the zoo!

[newqlear]

Hey I'm not saying it is impossible please don't misconstrue what I am saying I am saying from the extent of my personal abilities this is what I see.... and I posted ...
I am not saying it is impossible because sure in theory it could be possible however!


I really do hope I am wrong but you know everytime this thread appears accross any forum on any paintball site we all end up yearning for a new tidbit of info and all projects wind up being dropped. Hell if you get the elephant in transit I friggin build a new zoo to house it LOL . I

[|ZooT]

That's a deal newqlear..
I'll haul the sucker and you house it!
Man are we going to have a houseparty or what?

Having a few friends looking in to the software at the moment,
but they are teachers/researchers at university (computersience)
and have limited time for this project. Dont get your hopes up but
if it is possible, then these are the guys who can do it.
I'll keep ya all up to date as soon as i hear something.
Peeeace

[newqlear]

great! LOL I get my hopes up everytime this thread comes up and only more disappointment comes out .... I kow the day I get a knew gun they will find a way to do it ! :) PS What do pink elephants eat?

[fusion1o]

sounds good, with any luck things will turn out good. Its all about time know.

[|ZooT]

Well newqlear, i do think thisone eats BILLS..
If you give him $ bills, buffalo bills or the odd Bill Clinton
does not matter, but all else will kill him. ;)

[KEN CRANE]

anyone want to by my palm ???