Related
It is possible - I've just done it. I'm away from home and I've been using my Hermes (with WM5 AKU 3.3) to get my iBook online all week. Finally WM6 has appeared but I'm stuck with no Windows PC to perform the upgrade...but XDA-Developers gave me all I needed to do it. Here's the outline of how to do it (you'll need to figure out some finer details yourself, but I will help where possible if you get stuck).
1) You need just the .nbh file from the WM6 package of your choice. Unfortunately they are built into Windows installers. I downloaded XDA-Live and extracted the .nbh file using Virtual PC.
2)
i) Backup your storage card.
ii) Format your storage card. (I used a program called "Storage Tools" for this).
ii) Rename the WM6 .nbh file to HERMIMG.nbh and copy it to the root of the empty storage card.
3) Get Des' SSPL program from this link:
http://forum.xda-developers.com/attachment.php?attachmentid=34184&d=1171162518
4) Put the SSPL executable on your phone and run it. Cross your fingers. The phone should enter the bootloader and offer to upgrade the OS using the image it finds on the storage card.
And that's it. Once I'd figured this out, the method is straighforward. The part that has taken me all day is getting the image file extracted from a Windows world and onto a blank storage card using only a Mac and the phone itself (and no other internet connection)!
Hope this is useful to someone else.
Edit: typo.
Great! This method is much safe than other methods that depends on USB because you don't have to worry about someone unplug the USB cable, or if the PC will hang during the flashing process.
Maybe the only thing to check is to ensure that the device to have enough battery for flashing
BTW, how long will it takes for this SD upgrade method?
Brilliant!
Very ingenious solution! I'm not ready to flash yet, I want to see some bugs worked out of the WM6, but when I'm ready will probably try it your way just to see how it works!
Ben
Awesome, I'm using Vista, and I don't want to install XP just to flash Thank you.
Will this work with the Universal? I'm getting Vista soon and I want to be able to reflash if I need to.
Thanks in advance.
ahlok_hk said:
BTW, how long will it takes for this SD upgrade method?
Click to expand...
Click to collapse
I didn't time it but I'd guess it only took about 5 minutes.
You CAN flash on Vista using regular ROM updaters (the .EXEs). That's how I upgraded to AKU 3.3 recently (I don't have an XP machine either).
You do it by connecting in bootloader mode so that "HTC USB Sync" appears in Vista's Device Manager. Then you replace that driver with the one from 2004 (I got mine off the CD that came with the phone). Then the ROM updater works
Now is there a way to exec the sspl.exe on boot? So that some of the bricked users can jump start into bootloader and flash any rom.
unfortunately not... sspl is a wince EXE.
Radio ROMS's
Does anyone know if the Radio only ROM's can be flashed by this method also. If you can do you name the .nbh file the same or use a different name.
You can flash any NBH file, radio os or whatever. But not extracted radio roms in NBF, only in NBH. The file must be named HERMIMG.nbh.
pof said:
You can flash any NBH file, radio os or whatever. But not extracted radio roms in NBF, only in NBH. The file must be named HERMIMG.nbh.
Click to expand...
Click to collapse
interesting... does that include unsigned updates??
walshieau said:
interesting... does that include unsigned updates??
Click to expand...
Click to collapse
Yes, but only with SSPL.... not with the real SPL on device.
pof said:
Yes, but only with SSPL.... not with the real SPL on device.
Click to expand...
Click to collapse
ok now back to the drawing board then... do you know whether the SPL can be forced into Service mode via the RomUpgradeUT.exe file... have been doing some digging around in the DLL's and EXE and found some info about a 'Service' mode....
walshieau said:
do you know whether the SPL can be forced into Service mode via the RomUpgradeUT.exe file... have been doing some digging around in the DLL's and EXE and found some info about a 'Service' mode....
Click to expand...
Click to collapse
Not sure if I understand your question.... the so called "service mode" is what we call "booltoader mode" or "tri-color screen".... just the same.
On normal RUU, the bootloader mode is invoked by EnterBootloader.exe, on custom RUU EnterBootloader.exe file has been replaced with SSPL-HERM.exe.
pof said:
Not sure if I understand your question.... the so called "service mode" is what we call "booltoader mode" or "tri-color screen".... just the same.
On normal RUU, the bootloader mode is invoked by EnterBootloader.exe, on custom RUU EnterBootloader.exe file has been replaced with SSPL-HERM.exe.
Click to expand...
Click to collapse
yes i know that BootLoader is a type of Service mode... i was talking about a different procedure... it looks like a command from the RomUpgradeUT file to signal the bootloader to just to flash the ROM and not check the RUU sig's, model type etc....
walshieau said:
i was talking about a different procedure... it looks like a command from the RomUpgradeUT file to signal the bootloader to just to flash the ROM and not check the RUU sig's, model type etc....
Click to expand...
Click to collapse
That's not possible with the normal IPL+SPL on device, load them on IDA Pro and you'll see what it exactly does, its small enough to follow all the disassembled code with the samsung manual in hand.
so......if i want to flash both radio and wm6,
all i have to do .. is to extract the nbh file from .exe using winrar or something and rename it, put it into a formated sd card.. and run the sspl thing and do the same for wm6 ?
yes hellokittyr, that's right.
Hi pof,
have you tried to digg into the radio ROM as well? Probably with the right manual in hand one could seperate the RBL from the rest and create a 1.35.00.11 radio ROM with RBL 0107.
My micro drive has issues, I am unable to copy anything to it reliably anymore, even MP3's are impossible, it seems to go off line and become unavailable.
I want to get it repaired under warranty but I am stuck at SPL 3.5, is there any way to flash back to the factory SPL and OS?
Or does anyone have any ideas on making the microdrive work properly again?
G
Have you tried WM6 SPL 3.5 from this link?
5-21-08 UPDATE!! AP4 VANILLA 4 SPL1.2 Windows Mobile 6.1 for spl 1.2 and 3.5
http://forum.xda-developers.com/showthread.php?t=390328
downgrade to original rom
GuardianZX9 said:
My micro drive has issues, I am unable to copy anything to it reliably anymore, even MP3's are impossible, it seems to go off line and become unavailable.
I want to get it repaired under warranty but I am stuck at SPL 3.5, is there any way to flash back to the factory SPL and OS?
Or does anyone have any ideas on making the microdrive work properly again?
G
Click to expand...
Click to collapse
U can try this
http://htc-hackers.com/uploads/ap3newspl.zip...
niceboyyy said:
Have you tried WM6 SPL 3.5 from this link?
5-21-08 UPDATE!! AP4 VANILLA 4 SPL1.2 Windows Mobile 6.1 for spl 1.2 and 3.5
http://forum.xda-developers.com/showthread.php?t=390328
Click to expand...
Click to collapse
Beware! this do not change back once you had the 3.5 version.
SPL3.5 is a one way ticket.
I will try a hard reset again, The last lite version I loaded was based on the TMobile rom and seemed buggy to me.
Has anyone else had this microdrive issue? The drive works if there is very little on it, once I get to 3Gig or more of data the drive access times slow to a crawl, from 1500kbps writes to 10kbps. I am assuming the drive is dying or dead, I tried a format from the control panel applet, I also tried the recover microdrive, same issues. I also tried WM5Storage and formatting from within windows, still no luck.
I was going to try to go back to AP4, but once I loaded AP3Touch SPL3.5 I am unable to go back to AP4.
any ideas?
You might try downloading pocket mechanic and running scandisk and then format. I believe it has a trial.
www.wizcode.com
It has worked for me on the microdrive.
@GuardianZX9
Try flashing te ndh file of AP4 with the flashloader of one of the irus roms. It worked for me.
QAN
How do I get the nbh out of the AthenaUpdater.exe?
GuardianZX9 said:
How do I get the nbh out of the AthenaUpdater.exe?
Click to expand...
Click to collapse
when you run the .exe it unpacks all the usual NBH/RUU files to a temp folder on your computer, after it has brought up the first config screen do a search on your computer for NBH files ! (dont forget to tick the boxes that lets it search in hidden, system, and sub-folders under the advanced tab)
ice_coffee said:
when you run the .exe it unpacks all the usual NBH/RUU files to a temp folder on your computer, after it has brought up the first config screen do a search on your computer for NBH files ! (dont forget to tick the boxes that lets it search in hidden, system, and sub-folders under the advanced tab)
Click to expand...
Click to collapse
I am not sure that the team wanted this widely known.
?modify post
lakeman said:
I am not sure that the team wanted this widely known.
?modify post
Click to expand...
Click to collapse
Actually it's common knowledge.
moritz.narnhammer said:
Actually it's common knowledge.
Click to expand...
Click to collapse
Yes...yes it is :\
It's new to me, something to do coming week end. Thanks.
I purchased a Taiwanese Iolite (T4242), comes with Chinese version.
I used the QMAT to Change the CID to SperCID and than Just flashed it with :
_file_RUU_Iolite_HTC_Europe_1.09.401.3_Radio_Sign_12.41.30.16_0.41.30.12_Ship.exe
IT WORKS FLOWSLY... and my device is now WWE.
How to do it:
I just followed the instructions on the http://wiki.xda-developers.com/index.php?pagename=Elf_GoldCard&action=BackLinks:
• Download QMAT and MTTY from http://rapidshare.de/files/46772105/qmat_and_mtty.zip.html
o The latest copy of QMAT is also found http://revskills.de/pages/download.html
• A spare microSD card
• Optional: a card reader
Format your memory card for FAT32
• If you have a card reader, go to DOS and type:
format <volume> /FS:FAT32 /A:4096
where <volume> specifies the drive letter of the SD card. For example: format d: /FS:FAT32 /A:4096
Run QMAT to create the Gold Card
1. Put the newly-formatted SD card in the working WM device and connect to ActiveSync
2. Run QMAT, go to the Hardware Forensics menu, and then select "Generate HTC Goldcard"
3. Select your device's key (Iolite)
4. Get the SD Card Serial from WINCE Device
5. Save the Gold Card image to the SD Card
6. Put the SD card in your device and put it into bootloader mode (hold down the VolumeDown button and press the reset button).
7. Now you have a card which gives you SuperCID.
8. With the card inserted into the Iolite, which is in bootloader mode, connect the Iolite via USB to ActiveSync.
9. From your PC, run the RomUpdateUtility.exe from the RUU folder containing the WWE shipped ROM
It should start flashing if everything is configured properly!
Good Luck
Thank you for your info but the steps are hard to follow, admire your patience!
I flashed mine without making a GoldCard to unlock my Iolite. Mine was in CHS and after flashing become Europe WWE. I am looking for an Asia WWE. There is one in the forum but it can't be flash and I don't know whether it is because it is RUU .... _Test.exe and not ... _Ship.exe
Maybe the GoldCard unlock method will work and not sure it is worthwhile to try.
In fact it is very easy.... if you read it carefully you see that it is just connect your device with a formated sd and than reboot it to boot loader...
The next is flash with any ship rom.
Seems that your country id matched the rom you flashed.. however you will not be able to flash any-rom.
As it seems to me many users are stucked with rom flashing .. Hard SPL has not been around yet.. so this is a nice solution and once again - very easy!!!
Maybe it works. But.... not in unregistered version with Trojan.
Be careful!
You have to purchase a license.
domestik said:
Maybe it works. But.... not in unregistered version with Trojan.
Be careful!
Click to expand...
Click to collapse
Yes you are right. I did purchase a license. Trojan??? please explain.
It works, i did so.
At this link http://rapidshare.de/files/46772105/qmat_and_mtty.zip.html
there is Trojan
p.s. For all: don't forget to patch ROM to remove regionlock checking.
MTTY check-up
domestik said:
It works, i did so.
At this link http://rapidshare.de/files/46772105/qmat_and_mtty.zip.html
there is Trojan
p.s. For all: don't forget to patch ROM to remove regionlock checking.
Click to expand...
Click to collapse
Mmm.... in fact, I did copy the entire directions of "Howto", however I did not even use the MTTY.. pay attention that in my notes, I ignored checking of SuperId setup. The Mtty is required just to check that you have a superid before flashing. It is not required (I think so...) with this machine... it wull not flash if the SuperId did not load.... so just to make it simple : connect the machine, setup the SD card and flash ..... easy no?
I will not load the MTTY from Rapidshare I trust that you checked it and since it is not required... I suggest that you eliminate this step.
Tested from a Taiwanese rom to a European one and it works great. Thanks a lot for the tip !
Need to use the written SD each time...
koalaii said:
Tested from a Taiwanese rom to a European one and it works great. Thanks a lot for the tip !
Click to expand...
Click to collapse
I am glad that it is a kind of a solution..... however remeber that each time you want to flash the device, you have to have the Super-CID sd in the machine.... and you are set.
OK, this seems to work. Just post here successful stories. And test this on other devices, topaz, rhodium and even htc rose
borce_razor said:
OK, this seems to work. Just post here successful stories. And test this on other devices, topaz, rhodium and even htc rose
Click to expand...
Click to collapse
Yes. Success with Jade, HD and Iolite WWE to RUS
HTC Iolite ptg, cid HTC__506. I can not do anything with it. for "ruurun 0" reply "command error". Gold card not worked. htctr.exe not generate correct *.nbh.
Where supercid down!!!!! Buildor, making a link! Thank you!
Galaida, can you try to explain what have you done and what did not work for you? perhaps we can help to resolve the issue?
Should work.... please include in your answer the name of the rom you tried to flash and error messages that you received while in process of the Gold Card.
Link to QMAT
LITANG said:
Where supercid down!!!!! Buildor, making a link! Thank you!
Click to expand...
Click to collapse
I am not sure if this was requested... however here is the link to the "home" of the utility:http://revskills.de/pages/download.html
I suggest thta you get it from this site, as other users already reported RapidShare and other may have a Trojan as well.
QMAT
Hi guys, tried this and got the message saying i gotta register QMAT before it will let me make a Gold card thingie
so before i go and spend 20 bucks just wanna make sure this will let me unlock my Iolite so that i can install WWE
Galaida said:
HTC Iolite ptg, cid HTC__506. I can not do anything with it. for "ruurun 0" reply "command error". Gold card not worked. htctr.exe not generate correct *.nbh.
Click to expand...
Click to collapse
try typing "boot"
avocaz said:
Hi guys, tried this and got the message saying i gotta register QMAT before it will let me make a Gold card thingie
so before i go and spend 20 bucks just wanna make sure this will let me unlock my Iolite so that i can install WWE
Click to expand...
Click to collapse
Can anyone offer me some insight please?
avocaz said:
Can anyone offer me some insight please?
Click to expand...
Click to collapse
I can help, PM me
Unregistered QMAT cannot create GoldCard for Iolite.
Dubi said:
I am glad that it is a kind of a solution..... however remeber that each time you want to flash the device, you have to have the Super-CID sd in the machine.... and you are set.
Click to expand...
Click to collapse
Dubi, wait a minute, do you have a registered QMAT or an unregistered version?
As one of the forum member commented, it will take 20 Euros, (more than $30) to register QMAT in order to make a GoldCard with the method you mentioned.
Can you confirm that?
Regards,
Dear Cmonex,
can you help please the Mega users with the procedure used for Leo (Goldcard) to change from an official Rom to another ?
Thanks
I try, but:
1) Not find key in registry with "2"
2) If i try to flash - have error "0028002 not allow"
Thankyou
Slimper said:
I try, but:
1) Not find key in registry with "2"
2) If i try to flash - have error "0028002 not allow"
Thankyou
Click to expand...
Click to collapse
you must buy QMAT and then make HTC GOLD CARD
Oszi said:
you must buy QMAT and then make HTC GOLD CARD
Click to expand...
Click to collapse
hi, Oszi, even I created gold card success, I still got the 294 problem. Could you help me?
007123456 said:
hi, Oszi, even I created gold card success, I still got the 294 problem. Could you help me?
Click to expand...
Click to collapse
have you a registered version QMAT???
If yes :
format the MicroSD card if FAT32
if you run vista or win7 ,then you must run the QMAT in admin
run in ppc itsutil ,ask for the ppc
now can you make it the gold card
Oszi said:
you must buy QMAT and then make HTC GOLD CARD
Click to expand...
Click to collapse
You can also download one from the "demo" version.
Version 4.24 (Legal, not cracked or something) were is option to creating goldcards you can download from atachments in this post: http://pdaclub.pl/forum/index.php?topic=142183.msg1063217#msg1063217
have a good day
Remember, this is 10 minutes demo - so hurry up with creating goldcard
Oszi said:
have you a registered version QMAT???
If yes :
format the MicroSD card if FAT32
if you run vista or win7 ,then you must run the QMAT in admin
run in ppc itsutil ,ask for the ppc
now can you make it the gold card
Click to expand...
Click to collapse
I have made the gold card successfully, but when I update the rom, I still can not pass the CID problem. Is there any people tell me how to flash the rom? Thanks a lot
in qmat 4.24 no Mega option in drop-down, what device need to select? Elfin or somethink other?
Hi All
Do you have any ideas?
How to unlock this device?
As in the topic...
Nokser said:
Hi All
Do you have any ideas?
How to unlock this device?
As in the topic...
Click to expand...
Click to collapse
it is better you find out - http://psas.revskills.de
and learn PSAs 1.08 was released, I am confident that you can develop it to your device
and as a friend, I can only help with this
I search people.... You have a HTC Monet, please write in this topic
How "bricked" is your device - i.e. which state can you get it when switching on?
tobbbie said:
How "bricked" is your device - i.e. which state can you get it when switching on?
Click to expand...
Click to collapse
This Device run only in Bootloader mode(tri color screen etc)
Problem is.... this phone not have a Official/Ship firmware
Well then the sequence is:
Hard-Reset (L+R Softkey method)
R2SD backup (where can you get THAT? - Even how can you make that, on a GoldCard possibly?)
Official firmware (see above)
Gold Card will not help for loading a cooked ROM as it still needs a signed ROM (despite ignoring the Carrier).
tobbbie said:
Well then the sequence is:
Hard-Reset (L+R Softkey method)
R2SD backup (where can you get THAT? - Even how can you make that, on a GoldCard possibly?)
Official firmware (see above)
Gold Card will not help for loading a cooked ROM as it still needs a signed ROM (despite ignoring the Carrier).
Click to expand...
Click to collapse
Hard-Reset (L+R Softkey method) -> Not Working
R2SD backup (where can you get THAT? - Even how can you make that, on a GoldCard possibly?) -> Not Working
Official firmware (see above) -> Not Find, and not get from Virgin Mobile/HTC
Sad situation - you will have to google around, possibly find owners where you could get at R2SD backup from (if that works for this device). I found this query not so long ago: http://forums.phone-tools.cn/showthread.php/31636-Htc-lobster-700tv-how-can-i-unlock-with-xtc-clip-%28virgin-mobile%29
Do you know if this device has the M-Systems DiscOnChip (like older Wizard and Typhoon(Hurricane/Tornado) or already newer/other encrypted storage?
You could as well try the guys at IMEI-check.UK - they are very knowledgeable and may have a system backup of the supported devices in their drawer (just in case..). Maybe they can fully CID Unlock the SPL on that device and allow the flashing of a cooked ROM (is there any)?
tobbbie said:
Sad situation - you will have to google around, possibly find owners where you could get at R2SD backup from (if that works for this device). I found this query not so long ago: http://forums.phone-tools.cn/showthread.php/31636-Htc-lobster-700tv-how-can-i-unlock-with-xtc-clip-%28virgin-mobile%29
Do you know if this device has the M-Systems DiscOnChip (like older Wizard and Typhoon(Hurricane/Tornado) or already newer/other encrypted storage?
You could as well try the guys at IMEI-check.UK - they are very knowledgeable and may have a system backup of the supported devices in their drawer (just in case..). Maybe they can fully CID Unlock the SPL on that device and allow the flashing of a cooked ROM (is there any)?
Click to expand...
Click to collapse
I understand, but not have a good solutions. i see all this pages... and nothing
My dad still has his Monet on the stock ROM.
IF you can give me simple instructions to follow to dump the ROM, I can do it when I next see him (within the next few months).
Safest method should be to have a GoldCard created and then do a R2SD backup on that card. The R2SD command should be available from the "GoldCard - SuperCID" SPL.
If that works, nothing on the device itself has to be changed and the complete ROM is dumped on the card. In turn that memory card can then be dumped to a file, zipped and shared.
I said simple I've not ever researched gold card and to be honest don't have the inclination to do so. if you could give me clear step by step instructions with links to needed files, I can help.
Well - I don't need it, its Nokser
So he surely will tell you a step-by-step action what to do, maybe even prepare a package for you. It will require downloading a program that can create the Gold Card (psas.revskills.de), have a suiting SD card, as small as 64MB, but any less than 2 GB will do it, a normal USB cable, a PC, a Terminal Program (mtty) and finally one out of a set of tools that can handle the created image.
If all is prepared well, the total time to execute all actions would be ~half an hour (the dump on the device is just a minute!), but you should calculate a little more for this one time action.
Thanks for offering your help to save one of a species from the dumpster!
grayme said:
I said simple I've not ever researched gold card and to be honest don't have the inclination to do so. if you could give me clear step by step instructions with links to needed files, I can help.
Click to expand...
Click to collapse
Hi
Please, you first dump and write in attach. bootloader section
...just to complement the GoldCard idea:
When writing back the dump to a card for loading the broken device, the bootsector of that card may require to be a "gold card" too. Since the Gold Card key is related to the device and the Serial number of the card, the key contained in the bootsector of the dump will not fit to the serial of the new card Nokser has to use.
So after the dump was written back to the card, the PSAS has to write the goldcard-key to the new card again (which is different as the serial of the card is different).
I wish you luck getting that operation done!
I want Bootloader, because in this file is writing all info from load all parts and method backup. All abouts from boot file is importand.
If we IDA execute this file, then we see -> how to get any section and name sectiors
Bootloader (IPL and SPL) are part of the "R2SD All" backup. You can patch them later. Makes no sense to only do partial R2SD backups.
tobbbie said:
Bootloader (IPL and SPL) are part of the "R2SD All" backup. You can patch them later. Makes no sense to only do partial R2SD backups.
Click to expand...
Click to collapse
I understand, but this function is not working in my phone
Also not with "goldcard" inserted? Can PSAS make a GoldCard for Lobster/Monet?
tobbbie said:
Also not with "goldcard" inserted? Can PSAS make a GoldCard for Lobster/Monet?
Click to expand...
Click to collapse
In "goldcard", i don't have any results