Database Info

Orange C600 backup

Hi everyone
I am a fresh owner of a C600 and I want to back-up the original ROM (reasons are rather obvious). So:
1 - De-certificated (with RegeditSTG) and unlocked (SPV-Services) the phone
2 - Inserted a blank 32Mo SD-Card in slot
3 - Powered the phone to bootloader (IPL 1.00, SPL 1.00.0009)
4 - Turned off ActiveSync
5 - inserted the USB Cable (on phone appears USB on bottom)
6 - Started Tera Term
7 - sent r2sd all to phone
but in Tera Term window appears:
***** user area size = 0x1D30000 Bytes
R2SDBackup() - Download type = 6
usTotalBlock = 1 sizeof(SDCARD_SIGNATRUE_TABLE)=512
You didn't get the proper security level to download a specific image
I tried to set CID to 11111111 with SPV Services but it says:
'Illegal writezone patch attempt - invalid data'
Can you help me? Is there any other way to make a backup of the original ROM? Thanks in advance.

Any luck in re-flashing your device?
I think your stuck with editing the registry like many of us who flashed to the latest Orange AKU2.0 ROM
If there is a solution please let me know

error when flash rom

I try to flash my vodafone PDA 1615 (tytn II vodafone ITA), but the HardSPL dont install correctly.
When I on my PDA boot the boot loader standard 3 colors (whitout unlock CID).
I try to flash the original WWE HTC rom, but the flash program dont work whit my Tytn vodafone.
I try the mtty program but the PDA freeze on splash screen vodafon whit the radio and os version number on low-right of the screen.(the mtty freeze whit this text:
Cmd>boot
InitDisplay: Display_Chip=1
Fill RSVD information for block 288 to 309
Storage start sector=0x78C0, total sector=0x13A00
Storage start block=504, total block=1256
Total Bad Block in CE: 0
Erase physical block from 792 to 2032
si backup: Erase physical block from 2032 to 2048
No card inserted
OSSIPreLoad ++
I search the vodafone ship rom but I dont find
help me please
and sorry for my english
lucadeejay

I also tried to flash other vodafone rom recostructed (UK, German, Spanish and Italian) whitout luck.
I use the mtty for see my right and I the "FF".
the boot loader write on 3-colors screen:
KAIS130
SPL-1.56.0000
CPLD-8
the command in mtty:
set 14 0
task 8
reset the device but load the bootloader
thx
luca

Tri-colour screen

i`ve got a TORNADO and i wanted to flash it with wm6, just that i haven`t super cid it...
now i`m looking at a tri-coloured screen :
Tornado
IPL 1.00
SPL 1.0.0009
Tornado UI
when i connect it to the pc, it displays usb in the left down corner
terraterm works, it reads info 2
GetDeviceInfo=0x00000002
+ SD Controller init
- SD Controller init
+StorageInit
***** user area size = 0x3B880000 Bytes
HTCSORG_0409 ‘©öIHTCE
but it doesn`t want to format BINFS
Cmd>format binfs
Not allow operation!
i`ve tried to flash from my sd-card .. but it doen`t work... even if i rename the flash..
found this great walkthrough... http://karhoe.net/content/view/21/1/#step8
but i really can`t find a solution for my problem
any ideas?

You have to make your Tornado SiperCID as Karhoe's walkthrough and preferably update your IPL & SPL. Maybe update Radio too....

i can`t make the super cid for the boot mode..
help..
also i`ve got another tornado, same spv c500 with the same cid code ..
but i cant save the flash with r2sd all command in ttermpro ..
r2sd all
***** user area size = 0x3B880000 Bytes
R2SDBackup() - Download type = 6
usTotalBlock = 1 sizeof(SDCARD_SIGNATRUE_TABLE)=512
You didn't get the proper security level to download a specific image
...

i`ve done it using the help from http://forum.xda-developers.com/showthread.php?t=319588&page=2
use the image from ftp://ftp.xda-developers.com/Uploads...Updates/I-mate

i had exactaly same problem i reinstall windows mobile 5 then super cid

solution for treo 750 hanging

hi....
my treo 750 hang in start up, when powring on, just the keypad blink for 1
second and turn off, nothing appears on the screen, it appear that it is a
software problem.
to more explain, the phone connect with pc (active sync), but no light in led
when it connected or when i put charger
i try hard reset even zero reset but nothing happened, the problem persist
please some some help me to solve this problem by flash or any solution

plz i need your help
beleive me that i have 5 or 6 days from forum to an other, and the best is xda-developpers, but still now i can't solve my problem.
i have a black screen, with keypad blinking for one second, i try all reset types, i try with mtty ( here the log)
USB>set 14 0
Write Nand Success
HTCST ÚÈÒHTCEUSB>task 28 55aa
Storage format start
Write Nand Success
dwBlockToWrite = 13
Storage start block: 396
Storage Total block: 548
Total Bad Block in CE: 0
NeedToEraseBlockStart: 409
Storage format success
USB>
USB>checksum
USB>checkimage
IPL CRC checksum = 0xB6279C39
SPL CRC checksum = 0xA8949466
CE CRC checksum = 0xBB96F079
ExtROM CRC checksum = 0x733B2EDA
Radio Image CRC checksum = 0xA43F6FA4
USB>task 0
USB>
------------------------------------------------------
after mtty my phone is always dead, i don't make any flash because i don't know how, and i can't try sd install because the screen is black.
i don't understand task 2a and how to do, if possible give me the procedure
and a tuto for all operations
regards

Code injection from bootloader

Working on rootkits for WM 6.x, I am looking for a way to inject them within a 'locked' phone.
By "locked" I mean with no access to USB port, SD card autorun disabled, or the OS itself once the phone has booted (WM is 'on', screen is PIN locked...). I do not mean to 'unlock' my SIM or to unlock my phone or whatsoever.
Basically it consist in being able top modify the firmware from the bootloader....and I wish to POC that firmware modification/injection on a SNAP S521 (no SIM card).
So here are different ways I foresee:
- Modify the SPL (1.24) from bootloader mode using wdata (cmd available without being superCID) through MTTY in order to load an OS from the SD card (lbn or lbns depending on signed/unsigned OS).
- Modify the SPL (1.24) from bootloader mode using wdata to write bit by bit within the flash: for example, changing the value of a windows registry key...
- finding other HW interfaces to access ROMS (jtag/asynch modem...)
Now, since there are a bunch of SPL cookers here (and I'm far from being an hardware guy), I am wondering if the modification brought to the original SPL could be written from (the original) bootloader, within the original SPL in order to become superCID and therefore to gain read/write access to ROMs...
(my questions are based on what I read in http://forum.xda-developers.com/showthread.php?t=363567&page=3 which mention about doing some wdata in bootloader mode in order to flash a HSPL to the device)