Siemens? WebTXS20 WinCE HMI - Copy Software

[kolbep]

Good Day
Once again I need to call on the pool of EEVBloggers.

I had another Industrial Machine that had a Windows 3.1 Based HMI that touchscreen failed. That machine had PS2 Keyboard Port and Serial Port. The CF Card was not able to be read in any reader I tried, however I was able to use Dos' Interlnk and Intersvr to pull the complete contents of the drive off, and moved it onto a Windows XP Based HMI. And that worked perfectly.

I have another machine now, that has a WebTXS20 based HMI, that also has problems with its touchscreen. Suppliers have quoted over 5500USD for a new HMI.
I was hoping that I could do the same thing. This HMI is Windows CE Based, so I was hoping I could also get the software to run on an XP based HMI (or a VM or something).

The HMI communicates to the PLC with Ethernet.

However there is no CF Card, the software is stored straight on the Flash / Nand Memory on the board. There is also no Keyboard Interface. There is just a 9 Pin Male, 9 Pin Male, Ethernet, Power, and some pin headers. As the machine is still in use with the dodgy hmi, I cannot risk having it out of service, or damaging it (so pulling the memory and extracting it's contents is too risky).

I have tried to look up the WebTXS20, but I am only coming up with a few ones for sale. I cannot find any way that the software can be up/downloaded to the units.

I was wondering if anybody had experience with these units, and how to extract or download the software from them.

My other recourse will be to try get into it over the Network interface, however I doubt it will be that easy

Will appreciate any assistance.

Pictures of the inside of the unit are here :
https://photos.app.goo.gl/KdjJXuVmCqGps26g7