Related
How do you change the Telstra System of my xda mini to an O2 system?
When I do a soft or hard reset a Telstra logo appears on the screen.
Would there ba a problem with this? I this even possible?
Sorry NEWBIE asking sirs!
The splash screen is changed easily to anything you like, just follow the sticky on the board. Changing your mini to O2 requires the O2 ext-rom files to 'brand' it. Visit the ftp ftp:\\xda:[email protected] for the ext-rom files. Best is to skip your current ext-rom (hard-reset, finish the initialization & just after the last tap on the screen you soft-reset quickly) & then install the O2 cab-files. Other possibility is to flash your rom. Visit the wiki (link on top of the page & goto magician & then exe upgrade) for this & get an O2 shipped-rom from the ftp (or anywhere else on the web).
Cheers, M
Ps I'd go for only the cab-files first. Flashing can be done later when you're more accustomed to your device.
oltp said:
Best is to skip your current ext-rom (hard-reset, finish the initialization & just after the last tap on the screen you soft-reset quickly) & then install the O2 cab-files.
Cheers, M
Ps I'd go for only the cab-files first. Flashing can be done later when you're more accustomed to your device.
Click to expand...
Click to collapse
Thank you!
How do I install the CAB file?
Which CAB File(O2 version) in the Magician folder is best?
Best? I don't know but watch out, there's a lot of Asian stuff in it. Usually the highest number is the most recent version & preferred.
Just put the cab-files on your device, preferable the SD card via Act.sync or card reaser, then start the file explorer on your device. Navigate to the location you stored them & click on them to install. Might be that you want to install CabInstl first, then you can choose where the apps from the cab's are installed.
M
I've tried another rom image for my mda compact 2 and now my mdac2 does'nt start any more.
I have tried several rom-images (for compact, atom, ewtc..), but I can install no one .
On the T-Mobile Homepage there is no Image for the MDAc 2.
Can anyone help me ?
I only come to the bootloder screen (red - green - blue).
I need a rom-image, that i can start from the bootloader.
thx
Try this link from TMO UK http://t-mobile.iris-global.com/download_manager_mda_com2.html
Success, M
I've already tried this, and it starts updating but then comes the message :
ERROR [294] : INVALID VENDER ID
THis Update Utility cannot be used for your PDA Phone.....
Maybe I have to unlock the CID first ?
But can I unlock the CID with the aWizard, when the Comp.2 is in the Bootloader mode (red-gree-blue) ?
Ouch,
Yes the cid-unlock will be needed :-( Can't you fix the RUU.conf or something simular with a first line like checkid=1 ? I've read about it on the board & seems to work for magician. & there's some tool like MaUpgradeUT_noid for the wizard too, but I don't remember whether that is awizard :-(
You're almost of to the shop isn't it.
BTW when you unzip the shipped-rom, do you get all kinds of nbf files. & Do they all start with the same word when you open them in hexeditor? I use nbfdec to decode them to a 'normal' file which can be edited, then you could be able to fix the header of the nb1 encode it again & try to update your device.
& have you tried some of these tools ftp://xda:[email protected]/Wizard/DumpROM/
Ouch,
Yes the cid-unlock will be needed :-( Can't you fix the RUU.conf or something simular with a first line like checkid=1 ? I've read about it on the board & seems to work for magician. & there's some tool like MaUpgradeUT_noid for the wizard too, but I don't remember whether that is awizard :-(
You're almost of to the shop isn't it.
BTW when you unzip the shipped-rom, do you get all kinds of nbf files. & Do they all start with the same word when you open them in hexeditor? I use nbfdec to decode them to a 'normal' file which can be edited, then you could be able to fix the header of the nb1 encode it again & try to update your device.
& have you tried some of these tools ftp://xda:[email protected]/Wizard/DumpROM/
In the unzipped folder is no file like RUU.conf.
Only RUU.dll and RUUREsource.dll
There are following files in the folder
EnterBootloader.exe
nk.nbf
README.doc
ROMUpdateUtility.xex
RUUGetInfoi.exe
RUUResource.dll
RUU.dll
And I've downloaded " nbfdec " , but I can not start this program.
I think i have to reboot my computer.
un zip all the files from the t-mobile package
ftp://xda:[email protected]/Wizard/Roms/Wizard_RomUpgradeUtility_noID.rar
download this and unrar and overwrite in the same folder.
connect up the phone in bootloader to pc and run the ..._NoID.exe
as theres no activesync connection it will pause for a bit on the checking existing rom but still let you carry on
ignore the picture of the wizard, just make sure your installing the right nk.nbf for the compact 2
I've exactly done what you said, the update ended with 100 % and now the device starts until the bootloader-screen (red-green-blue).
Have I done something wrong ?
What has happened ?
dave106 said:
ftp://xda:[email protected]/Wizard/Roms/Wizard_RomUpgradeUtility_noID.rar
Click to expand...
Click to collapse
That's the one I was referring to, thanks.
Bundy did you reset afterwards?
M
Yes, I did a Hardreset, a Softreset , but I only get to the picture with the 3 colors.
IPL 1.12
SPL 2.15
I'm terribly sorry, but we've ran out of my knowlegde of the MDA Compact II. So besides the usual question: have you ran the update a second time, for me this would be warranty issue.
Hope Dave is worth more.
Good luck, M
Yes , I have done the update a second time, but with the same effect - the device only starts in the three-color-screen.
So I think I can do nothing more ....
:-(
EDIT: This thread is superseded by this one here.
The idea is to sim unlock your Vox by entering a sim unlock code when a 'wrong' sim card is in the phone.
I can prolly find that unlock code. If one of you is interested to test this method please drop me a PM. You will need to make a bkondisk sd dump and also read out a few bytes from memory with pmemdump. If you don't know these proggies then don't bother PM me!
Only the first will be served
PS: if it works I will release a program to do it yourself some time sooner or later
EDIT:
Ok, my method works fine and allows to *SIM* unlock the Vox and branded versions of the Vox (E650, etc.)
I won't develop a program to find the codes. There are a couple of reasons: there are people who will use my sw to rip-off users on e.g. ebay; I have too little time to do the development; HTC wouldn't like the idea of me publishing a program using their intellectual property.
To find unlockcodes, I'm running firmware code in an ARM simulator. It takes about an hour to find the code and it's quite a laborous and delicate task to set it all up.
So I'm currently unlocking excalibur, vox and oxygen phones on a case-by-case basis. Contact me by PM and I will make you a reasonable offer.
You will have to send me 2 files which allow me to find your unique unlockcode. See description below.
Make sure your phone is application unlocked before carrying out these steps. In this post you find a simple description and program to do that.
1. run:
Code:
pmemdump 0xB002709C 16 > docid.txt
This creates a text file docid.txt. The first two bytes are usually 0xEC 0x00. The tool pmemdump is part of the itsutil toolset by itsme, download here
2. do a bkondisk dump (for further details see here):
first copy bkondisk.exe to \windows on your device, then:
Code:
prun bkondisk -v0 -p2
This creates a 4MB file bk_02_0005.img in \ on your device. The tool prun is also part of the itsutil toolset by itsme.
Zip both files (docid.txt and bk_02_0005.img) and email them to me. Contact me by PM first to get my email address
Are there any progress with that?? I can be a volunteer but I don't know how to get those information from my phone that you need :]
Regards
macmaz said:
Are there any progress with that?? I can be a volunteer but I don't know how to get those information from my phone that you need :]
Regards
Click to expand...
Click to collapse
I can also try~!
id like to volunteer
i hope you can find a method to unlock my phone
thanks alot
I won't develop a program to find the codes. There are a couple of reasons: there are people who will use my sw to rip-off users on e.g. ebay; I have too little time to do the development; HTC wouldn't like the idea of me publishing a program using their intellectual property.
To find unlockcodes, I'm running firmware code in an ARM simulator. It takes about an hour to find the code and it's quite a laborous and delicate task to set it all up.
So I'm currently unlocking excalibur, vox and oxygen phones on a case-by-case basis. Contact me by PM and I will make you a reasonable offer.
You will have to send me 2 files which allow me to find your unique unlockcode. See description below.
Make sure your phone is application unlocked before carrying out these steps. In this post you find a simple description and program to do that.
1. run:
Code:
pmemdump 0xB002709C 16 > docid.txt
This creates a text file docid.txt. The first two bytes are usually 0xEC 0x00. The tool pmemdump is part of the itsutil toolset by itsme, download here
2. do a bkondisk dump (for further details see here):
first copy bkondisk.exe to \windows on your device, then:
Code:
prun bkondisk -v0 -p2
This creates a 4MB file bk_02_0005.img in \ on your device. The tool prun is also part of the itsutil toolset by itsme.
Zip both files (docid.txt and bk_02_0005.img) and email them to me. Contact me by PM first to get my email address
Where do I need to write this comands ??
pmemdump 0xB002709C 16
prun bkondisk -v0 -p2
Regards
Only what I could get it that but I dont know is it correct or not...
macmaz said:
Whre do I need to write that comands ??
pmemdump 0xB002709C 16
prun bkondisk -v0 -p2
Regards
Click to expand...
Click to collapse
pmemdump and prun are both part of itsutils from itsme and are executed from a CMD window
ok but when I double click on prun the CMD window open for 1 s and close :/
Ok I think I got it
Here's my files
If something is wrong please tell my what should I do:]
Regards
looks good, I will send a code in a few hours
try with 66612476
and if it works make another bkondisk dump and post it here please
Man I LOVE YOU IT WORKS!!!!!!! :
Here you are my bkondisk dump
You are the best!!!!
Thanks a lot finally I can use my lovely spv e650
Bless that man he's the god
Congrats on your unlock device
Jocky you are a star and macmaz just cidunlock it and put a rom of your choice I am using 1.15 HTC and so far so good not glitches or errors.
dragon546 said:
Jocky you are a star and macmaz just cidunlock it and put a rom of your choice I am using 1.15 HTC and so far so good not glitches or errors.
Click to expand...
Click to collapse
Do you know a rom with polish language maybe ??
Mac
Have a look at this link
http://forum.xda-developers.com/showthread.php?t=331458&highlight=polish+Rom
hi guys I have a little problem with my spv e650 after unlocking :] I cant instal any softwar. when I wanted to instal cab from orange with security disable it wants me to chose the destination, i click ok and that four colour circle shows up and doesn't stop rotating :/ I need to remove my batery and put in again, after that I see that security software has been installed becouse it's in Remove Programs , in Settings :] That happen with all software: htc reboot, opera and so on : instaling, desitnation, circle dont stop rotating... I don't know it is becouse of unlocing procedure but I noticed it after that... Any ideas?? I did hard reset but it didn't help...
Regards
Try switching your TXT input to T9 and then try installing your apps.
installs hang when keyboard is out or input is not in XT9 mode:
You might want to look at this link:
http://www.modaco.com/content/Smartphone-Standard-News/255845/SPV-E650-de-Brand-Fix-Pack-0-5/
thanks a lot that file fixed my problem
Now I can start to explore full capabilities of my phone
hi
this come from one s710 SFR FRANCE hope this help you
This thread can be closed. My sim unlock method works, as proven by macmaz. As written in my first post I'd only support the first user.
first to post here
as i saw that HP rx1950 has got a Windows Mobile 6.1 Custom ROM..
but my device doesn't have the same language as the custom ROM pack, so i can't update it...
i've searched through the forum and the internet... there had been some ROMs posted,, but the links were dead already
anyone who still have this device, hope u can kindly extract the Stock WM5 English ROM for me
thanks a lot for your help, and sorry for my poor english..
martin
Just upgrade you phone, language of your current ROM doesn't make a difference .
Here is a kitchen ROM of WM 6.1 Classic for rx1950 from xda members Victory144 and Guifort.
http://www.mediafire.com/file/nna2yo92q2beiik/Flasher_Hp_Ipaq_rx1950_ENG_WM6.1.rar
I agree with tomcug. It should flash your ROM to WM 6.1 regardless of the language. You need to use it on a Windows XP computer with ActiveSync installed though...
Here is the original thread for more help:
http://forum.xda-developers.com/showthread.php?t=510764
RumoredNow said:
Here is a kitchen ROM of WM 6.1 Classic for rx1950 from xda members Victory144 and Guifort.
http://www.mediafire.com/file/nna2yo92q2beiik/Flasher_Hp_Ipaq_rx1950_ENG_WM6.1.rar
I agree with tomcug. It should flash your ROM to WM 6.1 regardless of the language. You need to use it on a Windows XP computer with ActiveSync installed though...
Here is the original thread for more help:
http://forum.xda-developers.com/showthread.php?t=510764
Click to expand...
Click to collapse
I've read the post.. there're two methods to flash the WM6.1 ROM, by SD or through USB.. but i failed with a message "Wrong Image" after cloning the image to SD card, and the lauguage problem while flashing through USB with stock update utility (that maybe some lock by HP on language. mine is Chinese Traditional, but the update image is English..)
therefore, that'll be fine if the English Stock ROM is available.. btw, is there any program to flash that bypass the lock??
or how to change the language option of the ROM generated by kitchen?
i am not very familiar to configure the kitchen
thank you for your help
Here is a very technical discussion of 2 methods for installing different language ROMs.
http://www.tweaks2k2.com/How_to/39xxROMlang.htm
You will need a HexEditor:
http://www.mediafire.com/file/6r8ffn1fq3bh9mu/uedit32.exe
And a mtty program:
http://www.mediafire.com/file/7srppxvnr728ime/mtty11a.exe
BUT - at the end of method two when the author says - At the terminal screen type "lnb nk.nb0" at the USB prompt. (That means: Load the ROM nk.nb0)
INSTEAD - use the command "l nk.nb0"
That may be a typo - or the difference in mtty versions used by myself and the author...
thank you for your suggestion, i see that the ROM file structure of 3950 is a bit similar to rx1950, so i will try to change that
i've got the kitchen and the whole system downloaded from the site u suggested, but i just can't figure out how to change the language code of the output file while building the ROM , so that i can fool the ROM Update Utility and flash the ROM to my PDA..
wt's Build_XIP?
do u hv any suggestions? thx again
martin
Build_XIP... I think that is something for a different device. confused
_____
The following is based on research and guesswork. I make NO CLAIM that it will work and not damage your device... TRY AT YOUR OWN RISK.
_____
If my experiments with mtty and my reading of the How to install a different language tutorial are correct, all you need is:
mtty11a.exe to send commands to your iPAQ.
The English WM 6.1 ROM Image (CEOS.nbf) you want to upgrade to.
And Uedit32 to edit the ROM.
Put all 3 files in the same folder. It will be easiest to create a new folder on desktop with whatever name you like.
_____
This is for a Windows XP computer. That is what you have, yes?
First be sure to BACKUP your iPAQ and put all files in a safe place on your PC.
Next - remove the battery and any SD cards from the rx1950. Wait at least 10 minutes for the internal battery to discharge so that the iPAQ is cleared of all memory except the ROM you want to overwrite.
_____
Now we want to save the Chinese ROM you have so we can restore it if anything goes wrong. Best to be safe, yes?
Do you have a spare SD card at least 256mb? If not, use the one you normally have in rx1950... See why we saved all your files first?
Kill ActiveSync by opening Task Manager>Processes. Look on the list for wcesmgr.exe and wcescomm.exe. Highlight each one and click on End Process. With ActiveSync killed you can now "talk" to iPAQ with mtty.
DO NOT PUT IN THE BATTERY. Attach the iPAQ to the PC with the USB cable AND the AC Power Cord. Turn the iPAQ on and manually enter Bootloader Mode. (Google tells me for rx1950 you - press following buttons simultanously
Contacts + Mail + Reset for as long as your PDA boots)
Insert the SD card where you want to save the Chinese WM 5 ROM.
Go to the folder where you saved the 3 files you need and double click mtty11a.exe. That opens a box called "Open port setting." Scroll down the list in "Port" and look for \\\WCEUSBSH001. That is the port you want. I noticed that the end number (001) changes with each use of mtty. Never mind the number so much, \\\WCEUSBSH00x is what you want - that is your iPAQ. Select that port and click on the "OK" button.
It should open a command terminal (white window). Press enter until USB> appears in the window. I only needed to press enter once, but some tutorials say keep pressing until it appears. (?)
At the USB> prompt type r2SD and press enter. This will have mtty command your iPAQ to dump your ROM image onto the SD Card as RAW DATA. Wait for the progress bars on iPAQ screen to finish and you get a completed message.
Save this SD card in a safe place. This is your Recovery Image to restore the iPAQ back to the ROM you started with. The card is not formatted in a way that you can open and read with Windows XP so do not try putting it in a card reader right now - XP will want to format it and we don't want that to happen.
_____
If you need to recover your iPAQ at any point...
Unplug the iPAQ from PC and AC power cords. Remove battery and SD card. Wait 10 minutes to reset memory.
Insert SD card with Recovery Image. Plug in the AC power cord. Turn on iPAQ. Enter Bootloader Mode. iPAQ will see the Image on the SD card and offer you the option to Flash your ROM or exit. Pick the option to flash your ROM.
The iPAQ will Hard Reset after it flashes and then you can remove the SD card with the Recovery Image and do a Restore from the files you saved on PC and/or your regular SD card and the Backup we did at the beginning of this experiment.
_____
Now that we are safe, we can start to try and change the English WM 6.1 ROM so you can flash it to your iPAQ.
I read the "How to install a different language" tutorial quite a few times. Here are my calculations for what we need:
Original checksum
minus HexSum of ENG (45+4E+47 = DA)
equals change value
or
ECEC
-DA
= EC12
HexSum of CHT (43+48+54 = DF)
plus change value
equals new checksum
or
DF
+ EC12
= ECF1
Then that means we change ENG (code for English) to CHT (code for Chinese Traditional) and also change the Checksum from ECEC to ECF1 and we can get the ENG ROM to load on your CHT rx1950.
_____
Now you need to edit the ROM. Go to the folder where you saved the 3 files you need and double click uedit32.exe to open the Hex Editor. Click on "File>Open" and navigate to the folder where you put your files. Select CEOS.nbf and Uedit will open it.
10 lines down (line 00000090h) the file says "..........ENG.hp"
Next line 000000a0h says "iPAQ rx1950...."
This may or may not be the place to change - But I believe it is the right spot to tell any updater program what iPAQ version to update...
Scroll down to line 00000ea0h where it says "..........ECEC^a"
Next line 00000eb0h says ".e^a..........."
I believe that is the ROM Checksum and then an order to verify the checksum from iPAQ...
Scrolling down farther to line 00001ec0h it says " iPAQ rx1950..6."
Next line 00001ed0h says "00.00 ENG......."
I believe this tells any updater program what version is being flashed. But it may need to be changed...
So my best guess is:
At the first spot ENG is listed (line 00000090h) you need to edit ENG to CHT
At line 00000ea0h you need to edit ECEC to ECF1
Make these changes with Uedit32 and then click "File>Save as" and label the file "Test.nbf" saving it to the folder we have been using. (Note that mtty and any files you want to flash MUST be in the same directory.)
In Uedit32 click on "File>Close All Files" and exit Uedit32. Now you have 2 versions of the ROM in your folder...
_____
mtty still open and iPAQ connected?
If not - connect iPAQ as above (no battery or SD card, wait ten minutes, connect with USB and AC power, put rx1950 into Bootloader Mode). Open mtty. Navigate to your port and get a USB> prompt.
At USB> type in "l Test.nbf" (no quotes) and it should try to flash the edited ROM to rx1950.
If it was edited wrong you will get an error message something like "Header request time out."
_____
If it doesn't work that way it shouldn't affect your iPAQ and a Hard Reset should be all you need to restore your system. If that fails we have the SD card Restore Image we made earlier.
Delete the Test.nbf file from the folder and try editing CEOS.nbf again.
Try changing the Checksum and the second time ENG is listed:
At line 00000ea0h you need to edit ECEC to ECF1
At line 00001ed0h you need to edit ENG to CHT
Save as Test.nbf and have mtty "l Test.nbf" again
If it fails, delete Test.nbf
The last try would be by editing the Checksum and both times ENG is listed:
At line 00000090h you need to edit ENG to CHT
At line 00000ea0h you need to edit ECEC to ECF1
At line 00001ed0h you need to edit ENG to CHT
Save as Test.nbf and have mtty "l Test.nbf" again
_____
I hope one of these works for you. Please let us know what happens.
Thanks.
thanks for your suggestions very much!!
but i get the File CRC checksum error when using the stock update utility,
and through mtty.exe, it shows "Header Request Time out" also, in both i changed the first mentioned "ENG" to "CHT", second time and both times ...
all failed
would there any way to flash it through SD (by creating a suitable .nb0 file?) ?
hurray!!!!
i've cheated the HP ROM Update Utility (RUU) to accept to update an English ROM to a Chinese machine !!!
i use WinHex to replace the ENG with CHT, CHT with ENG,, and it's OK now!!!!
anyway, thank you very very very much for your sincere help!!!!!!!!!
Really marvellous!!!
HUZZAH and Congratulations martinhy!!!!!
I'm glad you got it to work.
I was at the keyboard for about 4 hours playing with the files last night and was afraid that my guess was wrong (as it turns out it was). So I'm really surprised and pleased that you solved it.
You just edited the RUU??? All other files in the kitchen folder stay the same???
Cause I need to cheat it and make it change from rx1950 to rx3115... I'll be trying your method soon.
it's troublesome to change ,, or i can say, cheat, the ROM file (.nbf) itself, coz it has checksum .. and the algorithm may be difficult to guess, and changing with different versions of iPAQ,
but the RUU itself doesn't have the integrity check, so it's cheatable
anyway, thx for your effort to help me
i can't be sure whether your guess is wrong, coz when i download the stock ROM, i.e. "l CEOS.nbf" to the iPAQ, through mtty, i also says "header request timed out"..
so i can't be sure whether there's problem for the way to edit the ROM, or the iPAQ doesn't support such mtty method...
or........
. becoz i'm a newbie, maybe i've got something wrong though...
*sigh*
When I try to change the RUU from rx1950 to rx3115 and run the rx1950 upgrade kitchen I get the CRC error...
When I try to change the .nbf and put it in with a rx3115 update package I get 244 Error (model ID)...
When I pull on my hair it comes out in big chunks...
I think I need a lot more study and a new toolkit...
that's maybe quite a challenge to flash ROMs from other models rather than language... both models are not compatible
martinhy said:
hurray!!!!
i've cheated the HP ROM Update Utility (RUU) to accept to update an English ROM to a Chinese machine !!!
i use WinHex to replace the ENG with CHT, CHT with ENG,, and it's OK now!!!!
anyway, thank you very very very much for your sincere help!!!!!!!!!
Really marvellous!!!
Click to expand...
Click to collapse
can you help me do that ? thanks
HI all !!
I came up with a new idea to create a file oemavatar.cab for Toshiba TG01. I made graphics in PNG format and then it tried to pack them into a CAB file. Now I am looking for a program where I could make a CAB file and add it to the ROM.
I found some programs, but the archives are not compatible with WP7 and Zune just does not detect the file.
My question is: Which program to use to execute the cab file?
You have to use a CAB sender program to send the CAB file to the phone's update OS (the one that Zune switches the phone to when installing updates; you can put it in that mode manually too). You don't use Zune with manual updating.
I don't know what structure to the CAB file the phone expects (although you could download an official CAB and have a look for yourself). You will probably need to sign the CAB with a key whose certificate is loaded into your ROM; I know there are programs for doing this but not all ROMs are updatable.
Thanks for quick reply
I know how to use the CAB SENDER
I just meant that if I add the oemavatar.cab is an application ZUNE should show a picture that is in that file ... if you connect phone to the PC .
If I add the original cab of Omnia 7 (OEM / ZUNE_PIC) ZUNE shows the picture of the Samsung ... if I add my cab file , zune does not show what's there ...
as if the program can not read information from a cab file
I enclose two cab files ...
I found a solution
You should post it! That way, future people with the same or similar goals don't have to post another request for help, they can just search and find it.