Windows Mobile 2005 himalaya rom

the wm2005 rom has a different structure than wince3.x and wince4.x roms i have previously seen.

80000000 - 80040000 : 90030000   bootloader
80040000 - 80080000 : 900c0000   ipl
80080000 - end      :  'MSFLSH50'

the first 2 have normal 'ROMHDR' layout. tools to analyze/modify: