as for instructions. i will copypaste to quote my post on hpcfactor.com for this:



hmmm i found some old email i sent to someone fully describing the steps to hack into the Casio MC20-B (vodafone messagecam / toricomail).

it is in hungarian... having a go at translating it now

0) as you dont have a cable you need to copy the stuff to a MMC card (cab files etc).

1) create the CE/R4100 folder patch on the MMC (CE then within that R4100). CE has to be in the card's root.

2) copy the stuff here from my package that is in CE/R4100 in the zip too. (note: the one that i've just uploaded to my site )

3) create the folder apps in the card root again, as well. again copy the corresponding stuff from the package (from apps folder in the zip).

4) copy the contents of the registry and windows folders too, the path doesn't matter now.

5) i recommend copying the file from keyboard folder too. my recommendation for a final destination path is \windows\startup when you get to access that folder later.
you can keep it on the card too, to spare ram, as only 8mb is available and 3 of that is storage..
this program will be the software keyboard.

6) insert the mmc in the casio, do a soft reset. gsfinder will startup automatically (from CE/R4100 - you can delete this later after you fully hacked the device and if you don't like the autostart on every reboot).

...from now on everything is done on the device!

7) navigate to the registry folder on your mmc card with gsfinder. run trice.exe. this will import some reg entries for you using the included bat file. you can edit that of course. the default settings i included will reprogram the last two hardicons on the touchscreen, 4th one will launch gsfinder and 5th one will be itaskmanager.
this is useful when you are in the casio (original) shell, you can run gsfinder anytime *when* in the casio shell, so you can enter the normal explorer shell easily.

8) copy the files from the windows folder on the card, into \windows in ram. you could also try keeping them on the card and run explorer from card, i don't know if that works well.

9) very important: leave gsfinder running. now run itaskmanager (apps/itaskmanager.exe). this will bring up a nice taskmanager with the running processes shown. kill the one called taskman. press OK to the warning. kill it. then close itaskmanager.

10) now immediately go to \windows (in ram) with gsfinder! run explorer.exe (which you've already copied here in step 8). you will see the windows CE shell starting up!
now you can run programs quite well, except the original casio ones... you must soft reset to get back to the casio shell, sadly.
you can run many CE apps within the casio shell without explorer too, so the 8-9-10th step can be optional.

11) to be able to type not just in the casio shell, but in explorer too, run mc21key.exe on every reboot, then you can use the casio button for "full display" to bring it up any time. (it will map itself to that button)
you could put it in \windows\startup or make it autorun on the mmc card
(you can easily create shortcuts with totalcommander)

12) to install CAB files / programs.
go into the registry folder in my package and read the instructions within the "installing" folder. use TRE or some other registry editor.
a problem with this method: this will want to install everything into ram. so after installation copy the files to the memory card manually, usually they will still work. (or use cabmanager to extract the files on the PC.)

...so this is the basic hacking process. after this the thing is quite usable like a pda, but for example file open dialogs don't work in many apps. you can do it in gsfinder because of a dll i included with it (gsgetfile.dll).
if you want to open a file from a program, you can just associate the extension to the program using gsfinder.

there is no control panel - haven't tried to make one yet.

etc.etc.... but still, many apps work, i included some in the package. (totalcommander, tre regeditor, warmreboot, pnotepad. but do not move itaskmanager from that folder. note: i also put in a txt assocation registry entry in the auto.bat file, pointing to pnotepad in mmc\apps folder)


...that was all i wrote in that email (and in the post).


NOTE:
then about pocket post pet, since it has a keyboard, you don't need the keyboard folder and also the auto.bat for trice.exe is not needed (that's for reprogramming buttons only on mc20-b) BUT you can change the file to enter other registry entries instead. though as the ppp has a keyboard that's not reall vital for its initial hacking procedure.