Related
I have installed the new iMate rom to my T-Mobile SDA(US) and have the following observations.
Push Email is working well.
Screen fonts not as crisp as original T-Mobile.
I believe the OS is overall slower.
Don't see A2DP.
Camera and Video work well.
I'll keep testing and keep this thread updated.
Do you know where I can find instruction on how to backup my original T-Mo rom? I'd like to load the sp5m rom but I want to make sure I have a backup. Also, which filename did you use, there seem to be sever roms for sp5, sp5m and two versions for the sp5m at that!
-Kap
kaplanfx said:
Do you know where I can find instruction on how to backup my original T-Mo rom? I'd like to load the sp5m rom but I want to make sure I have a backup. Also, which filename did you use, there seem to be sever roms for sp5, sp5m and two versions for the sp5m at that!
-Kap
Click to expand...
Click to collapse
Here is what I recall, I'm by no means an expert.
To start, you will need a 64MB mini SD card minimum.
I had to application and SIM unlock the phone. You can find good info at http://wiki.spv-developers.com/index.php/Main_Page
Disable ActiveSync under File/Connection Settings by unselecting "Allow USB connections".
With the phone off, press and hold down the camera button while attaching the USB cable from your computer. This should bring up the 3 color bootloader screen on your phone.
Use mtty.exe on your computer and select USB to connect. After connecting type:
r2sd all
This should back up your original rom to the mini SD card. This action will COMPLETELY REFORMAT AND ERASE YOUR SD CARD. I'd suggest copying everything off of it to your HDD in ActiveSync.
This is where it gets gray for me. There is supposedly a way copy the image from the SD card to your PC and back using itsutils utilities called psdpread.exe and psdwrite.exe. You have to know or figure out the size of the image on the SD card and the instructions were not intuitive to me. At this point I am leaving the card out of my phone until I decide whether or not to stay with the iMate rom. I did confirm that I can use the card to reload the T-Mo rom. With the card in the phone, load up the bootloader as described above. When it first comes up, it will ask you press the volume slider to load from the card. I worked for me.
I get Vendor ID error
What was required to load the ROM on your T-Mobile US branded SDA? I keep getting a Vendor ID error ( I assume the same as the old country code error on the XDAs). My phone is application and sim unlocked.
Thanks.
Panabax
Re: I get Vendor ID error
Panabax said:
What was required to load the ROM on your T-Mobile US branded SDA? I keep getting a Vendor ID error ( I assume the same as the old country code error on the XDAs). My phone is application and sim unlocked.
Thanks.
Panabax
Click to expand...
Click to collapse
I had to use what I believe is referred to as the Super CID unlock. It is one of the options in the SPV-Services app I got from the URL referenced in the first post. I was very leary to use it because I couldn't find any documentation about how to revert back if desired. I haven't had any issues since I set it to "11111111". I only hope that it won't prevent me from using the official T-Mo AKU2 release when it comes out.
Thanks
Thanks. In the time between our posts, I came to the same conclusion. The upgrade is proceeding as I type.
Panabax
Hmm sounds like something I would like to try. Thanks for all the good info, I have a 256 MB sd card on the way from New Egg to use exclusively to back up my rom (didn't want to waste my 2gigger .
-Kap
artiemon said:
Use mtty.exe on your computer and select USB to connect. After connecting type:
r2sd all
Click to expand...
Click to collapse
Can you explain where to get mtty.exe and how its used?
Thanks
-Kap
kaplanfx said:
artiemon said:
Use mtty.exe on your computer and select USB to connect. After connecting type:
r2sd all
Click to expand...
Click to collapse
Can you explain where to get mtty.exe and how its used?
Thanks
-Kap
Click to expand...
Click to collapse
Here is where I got mtty.exe.
http://wiki.xda-developers.com/index.php?pagename=HimalayaHowtoCopyRom
The following thread has some info on backing up the rom. Scroll down to a post by Genesis3. He is referring to a different terminal emulator (terraterm), but it works the same as mtty. Both of these just open up a terminal session to your phone. Genesis3 is discussing a different platform, but you will get the idea.
http://forum.xda-developers.com/viewtopic.php?t=43399
thanks for the quick reply, im hoping to get the imate rom on my phone today.
-Kap
HI,
I downloaded the SPV-Services.zip. However, when I run it on my PC. It says
RAPI Init failed:RAPI init timeout
ROM editing tools will be unavailable
Anyone know what is the problem here?
Thanks
thx for your new ROM,
if i want to install chinese input software to input chinese word with
new rom, how can I?
thx again!
ronior said:
thx for your new ROM,
if i want to install chinese input software to input chinese word with
new rom, how can I?
thx again!
Click to expand...
Click to collapse
I dont think there is Chinese input program for Windows Mobile 5 SP.
thx for your rapid answer
but really has one!
your can find it almost in any chinese forum
ronior said:
thx for your rapid answer
but really has one!
your can find it almost in any chinese forum
Click to expand...
Click to collapse
Really?
well...then
did u application unlock the phone before installation? Just copy the cab file to your phone and run it....or use the setup if it has one
sixthday said:
HI,
I downloaded the SPV-Services.zip. However, when I run it on my PC. It says
RAPI Init failed:RAPI init timeout
ROM editing tools will be unavailable
Anyone know what is the problem here?
Thanks
Click to expand...
Click to collapse
You have to kill wcescomm.exe in the Windows Task Manager (ctl-alt-del keys brings it up), look for wcescomm.exe, stop the task. This will eliminate the error you are getting. Then Run the 'SPVServices.exe' file on your PC - it will communicate with your phone via activesync. Please note that this file connects to a remote server to do the unlocking calculations, so requires an internet connection. It's been reported that if you have IE7 (beta 2 in my case) installed, it might not work; I have IE7 B2 installed and all worked fine. On the SPVServices tool menu, click the CDI box, it will update your ID to 11111111 (now all is unlocked) then you can do the mtty.exe to backup up your ROM to a miniSD card. I have a word document I've written for myself that outlines some of these pieces and bits and parts I've read on various forums. Email me if you want the Word Doc file.
i have this problem:
r2sd all
***** user area size = 0x3CA0000 Bytes
R2SDBackup() - Download type = 6
usTotalBlock = 1 sizeof(SDCARD_SIGNATRUE_TABLE)=512
You didn't get the proper security level to download a specific image
Cmd>
can you help me?
ciselko said:
i have this problem:
r2sd all
***** user area size = 0x3CA0000 Bytes
R2SDBackup() - Download type = 6
usTotalBlock = 1 sizeof(SDCARD_SIGNATRUE_TABLE)=512
You didn't get the proper security level to download a specific image
Cmd>
can you help me?
Click to expand...
Click to collapse
I believe that message is displayed if you have not yet CID unlocked your phone. Did you use SPV Services to unlock it?
i have done these two procedures:
http://wiki.spv-developers.com/index.php/HTC_Application_Unlock_Guide
and
http://wiki.spv-developers.com/index.php/HTC_Smartphone_SIM_Unlock_Guide
than I tried mtty.exe but... :-(
have I forgot something?
There's an application called SPV-Services in one of the links above. It has an option for Super CID unlock.
Hi all,
I have to move back from a crystal v2. rom to the "original" rom, cause I had enough about the earphone jack problem, I want to use my warranty aqnd send it back to assistance
I have to reinstall the original italian jamin rom, I tried moving first to the NDIV rom and then to the italian rom : i got this
"ERROR (296): UPGRADE ONLY
This NBF file cannot be used for your PDA phone. Please get newer NBF filE"
Now I came back to the crystal v2
I think that first I have to cid unlock my jamin...
But the file I need, following the wiki link is broken, no more the file inside the archive....
Somone could " help " me ?? Maybe sending me a pvt ...
###################### THIS WAS A PREVIOUS MESSAGE ##############
I found the file by myself,
I started to cidunlocking but after the first process ( the seventh following the guide ) I am not able to connect anymore via usb my device to the laptop!!!!!
And NOW????? If I am not able to connect I cannot change the rom to a working one!!
Please HELP ME !!
###############################
It's becoming a Diary....
I solved by myself, the instructions for cid unlocking are not complete, if happens problem of connection between pc and ppc ( and I am sure they happen ) it is necessary to HARD reset the ppc, and remove and reinstall Activesync ... This is what I did , and it works ....
Thank you all
Do we know what commands does the bootloader accept through mtty?
If we find all of them and what each one does, couldn't we be able to revive a bricked device using mtty? <=The main idea belongs to htctouchp
Here is a list of possible commands(we will have to see which are real commands):
Code:
[SIZE="3"][B][U]Command[/U][/B] [B][U]"Usage"[/U][/B] [B][U]Parameters[/U][/B][/SIZE]
1.ESetDsbDBGMSGT
2.ClearDBGMSG
3.ReadExtROM
4.WLANReset
5.SDSelect
6.emapiCountryID
7.emapiINIT
8.emapiWlanMac
9.emapiPwrDwn
10.emapiRead
11.emapiTest
12.emapi
13.getdevinfo
14.ruustart
15.ruurun
16.progress
17.wdata
18.password
19.set
20.SetDebugMethod
21.checksum
22.ResetDevice
23.BTRouting
24.task "Unknown command"
25.lnbs
26.ls
wow!!! another great thread brother .i really hope that some expert can guide us here.
u have not mentioned the 'task' command here. i was also sure that this command didnt exist for elf/elfins. but today i used snoopypro while flashing a ROM and what i saw was 'task 28' when the ruu was just about to finish. after seeing that, i'm confused a bit
PS: this might be useful a bit:
http://wiki.xda-developers.com/index.php?pagename=Hermes_BootLoader
Very nice....
task command does not work for me...
you may want to add "lnbs"
htctouchp said:
wow!!! another great thread brother .i really hope that some expert can guide us here.
u have not mentioned the 'task' command here. i was also sure that this command didnt exist for elf/elfins. but today i used snoopypro while flashing a ROM and what i saw was 'task 28' when the ruu was just about to finish. after seeing that, i'm confused a bit
PS: this might be useful a bit:
http://wiki.xda-developers.com/index.php?pagename=Hermes_BootLoader
Click to expand...
Click to collapse
what is that snoopypro? u can actually see what is being flashed on the device?
hey great going guys. these threads are gonna be rocking helpful for everyone. spl thnx to htctouchp for initiating this idea
is this (http://forum.xda-developers.com/showthread.php?t=379318) something similar?
ababrekar said:
what is that snoopypro? u can actually see what is being flashed on the device?
hey great going guys. these threads are gonna be rocking helpful for everyone. spl thnx to htctouchp for initiating this idea
is this (http://forum.xda-developers.com/showthread.php?t=379318) something similar?
Click to expand...
Click to collapse
snoopy pro is just a usb port sniffer, it will record everything that passes a port. u cant actually see the flashing data, but u can make a log file out of it and after the flashing is over, u can analyze that log file. that post which u've given as reference, does the same thing. it records the session (usblog data) using snoopypro which later on u can open in hex editor. just try it out while flashing a ROM, and analyze the log later on. may be u can also find something useful
Hey guys!
Has anyone used the ls command?
Is it used like:
Code:
>ls
or
Code:
>ls c:\dump.nb
or
>ls \"Storage Card"\dump.nb
I tried the first one and waited,waited,waited...but (1)I got bored and (2)nothing was really downloaded to my pc so aborted You can see what mtty shows right below:
Code:
Cmd>ls
clean up the image temp buffer at 0x8C100000 Length 0x03A00000
BOOTLOAD_PAGE_TABLE_BASE_C_VIRTUAL= 0x8C080000
Clear image temp buffer done .
MTTYDownloadImage
start download
*Edit1:I'm asking for this command because I think it's a way to dump your rom(IPL,SPL,OS,etc.)
*Edit2:I found this nice tool, but it seems it doesn't work for my phone!Could anyone give it a try too and confirm?
Reading through an SPL.nbh file with a hex editor yielded the following known commands (as listed in the first post here):
SetDsbDBGMSGT
ClearDBGMSG
ReadExtROM
WLANReset
SDSelect
emapiCountryID
emapiInit
emapiWlanMac
emapiPwrDwn
emapiRead
emapiTest
emapi
getdevinfo
ruustart
ruurun
progress
wdata
password
set
SetDebugMethod
checksum
ResetDevice
BTRouting
lnbs
ls
Attached is a text file with a copy/paste of the results from issueing these commands in MTTY.
From what I can figure out you can load an NB or NBH file using lnbs or ls, BUT only ony a Super-CID or CID-unlocked device otherwise you get an error
Code:
Not allow operation!
Error : DownloadImage return error (code = 0xFFFFFFFF)
So, bootloader commands issued through MTTY can be ery usefull for retrieving your Device ID and Model ID, and once CID unlocked you could load an image through MTTY instead of using RUUloader etc, but it looks tricky to figure out how to get things working for a CID-locked/bricked device.
Logic would indicate that somewhere in the NBH file would be a checksum relating to the Vendor-ID and/or Device-ID, having an NBH file where the ID and checksum don'y match would result in the 270 error - corrupt image (one could assume).
So, the big question in my mind at the moment is "How can one figure out where the checksum is in the NBH file". If we can figure out the address of where it resides, we could maybe use the checksum command to pull that info back? Then theoretically, to fix a bricked device all we would need to do would be hex-edit the NBH file to replace the vendor-ID and checksum with the correct one for the particular bricked device?
Thoughts/comments from any of our resident experts in USPL etc would be greatly appreciated!
Craig
good effort Craig
but how to revive an Elf(in) stuck in bootloader is still a mystery for most of us. lets hope for the best that someone out of us can unfold this mystery someday
Interesting!!!
Does anybody knows more comands Im searching for a hardreset via MTTY or a Cleaning DOC leaving behind the task 28 cuase in cmd> dont works... only in usb> i used it just once in a G3 HTCwizard then i cant do it anymore.
Maybe "format" command before the CMD>
kokotas said:
Do we know what commands does the bootloader accept through mtty?
If we find all of them and what each one does, couldn't we be able to revive a bricked device using mtty? <=The main idea belongs to htctouchp
Here is a list of possible commands(we will have to see which are real commands):
Code:
[SIZE="3"][B][U]Command[/U][/B] [B][U]"Usage"[/U][/B] [B][U]Parameters[/U][/B][/SIZE]
1.ESetDsbDBGMSGT
2.ClearDBGMSG
3.ReadExtROM
4.WLANReset
5.SDSelect
6.emapiCountryID
7.emapiINIT
8.emapiWlanMac
9.emapiPwrDwn
10.emapiRead
11.emapiTest
12.emapi
13.getdevinfo
14.ruustart
15.ruurun
16.progress
17.wdata
18.password
19.set
20.SetDebugMethod
21.checksum
22.ResetDevice
23.BTRouting
24.task "Unknown command"
25.lnbs
26.ls
Click to expand...
Click to collapse
Hi do you know a command for unlock the CID, because i tried to flash my phone P3300 an his broken, I can enter only in bootloader, every time when I try to intall a rom shows me error 300, so I think I didn't unlock the CID first time! Thank you and sorry for my english
Hi
You mention your device is P3300, this forum is about the Elf/in P3450 and P3452. No surprise it doesn't work ...
Use this link http://forum.xda-developers.com/forumdisplay.php?f=316
This is an alternative method for SuperCID the Tornado smartphone
Firs of all you need to download the uitils:
http://rapidshare.com/files/132988194/Unlock_SuperCID_Your_SPV_C500_550_600.rar.html
STEPS:
1.Extract files.
2.Now establish a connection between the phone and ActiveSync.
3.From the Decertificare folder copy the file Allow_decert.cab to the root directory of the phone.
4.Install Allow_decert.cab into the phone and reboot it.
5.Establish the connection between phone and ActiveSync then, from the same folder run Semi_decert.exe press Remove Lock button, if the phone was unlocked successfully a message box will appear and ask you to reboot again.
6.Establish the connection between phone and ActiveSync again, then from the Decertificare folder copy the file Full_Decert.cab to the root directory of the phone(Do not install it,just copy it).
7.Finally from the main folder run Lokiwis.bat you will see a msdos window with 4 options:
U-Unlock
L-Lock
C-CID Unlock(SuperCID)
Q-Quit
Select option C and press enter, after this the phone will reboot an your phone will be SuperCID.
To be more sure that your phone is SuperCID and using TeraTermPro util follow next steps:
1.Disable usb connection of the ActiveSync(Uncheck allow usb connections).
2.Unplug usb cable.
3.Turn your phone off.
4.Press the camera button and plug the usb cable(You'll see thw white screen and seconds later the three color screen.
5.Run TeraTermPro.
6.Select Serial and in port: USB then ok
7.Type: info 2
and if in the end of the list you see supercid htc or something like that it's done!!
Close TeraTermPro and just run any ROM you want and voilaa!!
I recomend you to perform a format BINFS before install any ROM
Hope this be useful for you all.
See ya from Mexico!
Hey thanks!
You're welcome! and I hope you'd got SuperCID your phone!!!
Great!!!!
Finally!! all these days without a solution to unlock these phones, then you came my friend and made my day.
Best regards from Colombia
Luis M
Data Crashes.
Followed the procedure precisely and at the end I got:
"Data crashes. Please contact your service provider."
I ran the TeraTerm to check what is the status of info 2:
GetDeviceInfo=0x00000002
GetDeviceCID: Error - InitDecoder
HTCS ´í•6HTCE
Right now I have device with bad CID block. I keep the original backup from lokiwiz, but I don't know how to write it back.
There is a thread for Wizard started and it looks like there is hope, just I need a tool to write the CID backup block back to the device.
Thanks.
SuperCID unsuccessful, Please help!
First SPVServices cannot connect to the remote site.
Then, I tried the alternative using Unlock_SuperCID_Your_SPV_C500_550_600.rar. Followed every step exactly. When I run Lokiwiz.bat, here is the output from the MSDOS window:
....
--------------------
U. Unlock
L. Lock
C. CID Unlock (SuperCID)
Q. Quit
--------------------
Type the letter and press Enter: C
CID unlocking mobile... DO NOT DISCONNECT UNTIL THE PHONE REBOOTS!
ERROR: Unable to open WinCE file '\windows' - Returned by WSARecv or WSARecvFrom
to indicate the remote party has initiated a graceful shutdown sequence.
opening: lock_backup.bin: No such file or directory
This exe file was created with the evaluation version of Perl2Exe.
For more information visit http://www.indigostar.com
(The full version does not display this message with a 2 second delay.)
...
PLease, please help! Thank you so much!!!
/dan
TeraTermPro
Hi Bro, you now where i can find TeraTermPro???
if you can upload shotware, it´s better, thank you bro
Thanks !!
Brother thank you very much
to day i can unlock my first SPV C600 with your help
if you need anything from me, it´s done.
msn/email: [email protected]
pdt. afther you have SuperCid, and your phone reboot
run again lokiwis.bat and write U and Press Enter
afther you phone reboot, insert a simcard from
your company and enjoy it
download here teratermpro
unlockboxthis said:
Hi Bro, you now where i can find TeraTermPro???
if you can upload shotware, it´s better, thank you bro
Click to expand...
Click to collapse
Hey sorry for the delay but I've been kind of busy, TeraTermPro can be downloaded from here:
http://rapidshare.com/files/134350178/TeraTermPro.zip.html
hey I saw your post, sorry for the delay mhhh does your phone compatible?? I mean I tested with SDA (US) Tornado and I got success, I think you should try once again but now place files in different root.
to anewbie
anewbie said:
First SPVServices cannot connect to the remote site.
Then, I tried the alternative using Unlock_SuperCID_Your_SPV_C500_550_600.rar. Followed every step exactly. When I run Lokiwiz.bat, here is the output from the MSDOS window:
....
--------------------
U. Unlock
L. Lock
C. CID Unlock (SuperCID)
Q. Quit
--------------------
Type the letter and press Enter: C
CID unlocking mobile... DO NOT DISCONNECT UNTIL THE PHONE REBOOTS!
ERROR: Unable to open WinCE file '\windows' - Returned by WSARecv or WSARecvFrom
to indicate the remote party has initiated a graceful shutdown sequence.
opening: lock_backup.bin: No such file or directory
This exe file was created with the evaluation version of Perl2Exe.
For more information visit http://www.indigostar.com
(The full version does not display this message with a 2 second delay.)
...
PLease, please help! Thank you so much!!!
/dan
Click to expand...
Click to collapse
hey I saw your post, sorry for the delay mhhh does your phone compatible?? I mean I tested with SDA (US) Tornado and I got success, I think you should try once again but now place files in different root.
Maybe
d1saster said:
Followed the procedure precisely and at the end I got:
"Data crashes. Please contact your service provider."
I ran the TeraTerm to check what is the status of info 2:
GetDeviceInfo=0x00000002
GetDeviceCID: Error - InitDecoder
HTCS ´í•6HTCE
Right now I have device with bad CID block. I keep the original backup from lokiwiz, but I don't know how to write it back.
There is a thread for Wizard started and it looks like there is hope, just I need a tool to write the CID backup block back to the device.
Thanks.
Click to expand...
Click to collapse
Hey bro why you dont try once again without the simcard??? or first with lokiwis try to unlock the phone and then try again, that may fix the problem
i also followed all the steps and when it reboots finally i get a message saying "data crashes contact oraanges services"
pls help
I vote for sticky!
Hi I have looked all over here and can't work out how to perform the format on the BINFS can someone help me here?
Please help
This tool broke my SP5m.
On startup im receiving a ''Data crash'' error that says ''go to service center''
I cant open my phone.
I reflashed offical i-mate_SP5m_WWE_2.6.331.2.exe rom and it comes again.
Please help.
tera term is showing this when i type ''info 2''
Code:
info 2
GetDeviceInfo=0x00000002
GetDeviceCID: Error - InitDecoder
HTCS ´í•6HTCE
Cmd>
How can i fix that ???
chaqueun said:
Hey bro why you dont try once again without the simcard??? or first with lokiwis try to unlock the phone and then try again, that may fix the problem
Click to expand...
Click to collapse
it dont works man.My phone is unusable with simcard now
Please help?
I tried unlock,cidunlock,lock but there is no difference ((
Hey bro why you dont try once again without the simcard??? or first with lokiwis try to unlock the phone and then try again, that may fix the problem
Click to expand...
Click to collapse
I tried few more times with and without a SIM card, no luck. If somebody doesn't know the lockwiz is designed for HTC Wizard, not for Tornado. Somebody said that ONLY CID unlock would work, but apparently not for all Tornados.
GetDeviceCID: Error - InitDecoder
HTCS ´í•6HTCE
Click to expand...
Click to collapse
Congrats, now you have basic PDA without Phone function. Remove the SIM card and you can use the device at least to back up all your contacts. The problem now is that you have bad COD block, which has the Certificate and the Radio information on it. I had backup of the CID block and tried to reflash it back to the device but the problem was still there. So I went to imei-check.co.uk, paid $40 and they fixed it with the provided software tool and unlock key file. It seems that Tornado has lack of developers, who can provide sophisticated tool which can backup and restore all memory blocks without the end user knowing the hex address of the particular memory block.
Successfully unlocked, thanks
(Qtek 8310)
This is a risky method for many tornados.Please use only spvservices.Dont use this wizard tool.And it can crash wizard too.
it can remove some keys from your sim block or write wrong keys and your phone gives data crashes error when your sim card is in.So you cant use your simcart.
Only the solution for tornado is buying a full unlock flash file that created specially for your imei.I bought it and my phone is working now
On wizard (not tornado) there is a project to rebuild keys without buying imi-check.com sim flash file:
http://forum.xda-developers.com/showthread.php?t=307558
The Op claim it as a the world's first HTC S-OFF card posted on gsmhosting.
LInk --> http://forum.gsmhosting.com/vbb/f35/worlds-first-htc-s-off-card-1599539/
it is very expensive
CARD AVAILABLE WITH 1000 CREDITS $1899
CARD AVAILABLE WITH 500 CREDITS $1299
Click to expand...
Click to collapse
the video on youtube is in here
http://www.youtube.com/watch?feature=player_embedded&v=7EueLGDqIpo
need a Y-Cable, HTC signed Javacard and a Clean S58 DIAG file
In Old system (not the OneX) with the help of xtc clip we can
Flash RUU regardless of the CID, and also can use S58 data but limitted.
Now we have this so called Java Card. What the hell is it?
Maybe this is the link for java card
I think this card uses a new system? Do you think it can have Full S58 functionality? I mean disabling sec flag?
Maybe this one can Flash RUU regardless of the CID. (As Super CID) and can have a Full S58 functionality?
I hope devs here will give us some knowledge how they do that, WORLD"S 1st HTC S-OFF CARD and hope they will give their selves a chance to reverse it )