ROM Cooking and Bootloader 1.01 MFG - 8525, TyTN, MDA Vario II, JasJam Software Upgradin

A new bootloader version for HTC Hermes devices is available on XDA-Developers (thanks 300logic!). This is a very special bootloader version 1.01 MFG which allows to flash unsigned code, meaning that ROM cooking should now be possible on the Hermes
Warning to those who don't know what you're doing. Don't to be tempted to attempt this for now.​
To flash BootLoader 1.01 MFG your DEVICE MUST BE SuperCID first: If you don't have a SuperCID device, this is not useful to you.
* It makes possible flashing custom splash screens
* It makes possible flashing separate ROM parts (only OS, only ExtROM, etc...)
* It makes possible radio upgrade only
* It makes possible flashing roms in NBF format (not tested yet.. research needed)
* It makes possible flashing cooked OS.nb: RESEARCH TO BE DONE IN THIS, AND FULL CAUTION ADVISED
Instructions on how to use this bootloader version have been posted in the wiki:
ROM cooking and Bootloader 1.01 MFG​Please read everything before asking questions!
Noob FAQs:
Q: Will this VOID my warranty or brick my device?
A: YES if you don't know what you are doing.
--
Q: How to downgrade to bootloader 1.04?
A: Reading this.
--
Q: How to make a device superCID?
A: Reading: this.
--
Q: How to check my bootloader version?
A: Put your device in bootloade mode, when you are on the tri-color screen check the number after SPL-X.XX. This is your bootloader version.
--
Q: Will this help softbank X01HT with 1.14 radio users in any way?
A: No, you can't SuperCID your devices because it is not known how to replace the radio on your device.
--
Q: Will this fix my bricked device?
A: No, unless it is SuperCID after bricking.
--
Q: What is the CID? How do I check my CID? blah, blah...
A: READ THE WIKI before asking questions please!
Please don't ask questions on this post if you don't have a SuperCID device yet, your question will probably be answered in any other post, and this is not the place to ask it.
Real FAQs:
Q: What is a NBH file?
A: Read here.
--
Q: How can I extract the ROM parts from a NBH file?
A: Read here.
--
Q: What is the difference between 'lnb' and 'lnbs' bootloader commands?
A: lnbs is to flash signed code and is available in all bootloader versions, lnb is to flash unsigned code and is only available in 1.01MFG
--
Q: What is the diference between 'wdata' and 'wdatah' bootloader commands?
A: wdatah is to flash signed NBH files and is available in all bootloader versions, wdata is to flash NBF files and is only available in 1.01MFG
--
Q: Why can't I use 'lnbs' in bootloader >= 1.04?
A: You need to issue 'task 32' first to check your SecLevel, it must be Level=0
--
Q: What are the addresses for each ROM part?
A: See NAND Flash distribution here.
--
Q: Has someone successfully cooked OS.nb?
A: Not yet, the format seems to be different from previous NK.NBA, but we're working on it and you are welcome to join us for development/research purposes in this thread.
Do I miss anything?
Enjoy!

I think that covers it!

Could we 'upgrade' this preproduction bootloader to version 1.10 for example?!?

Thanks Pof for the Wiki and thanks 300logic for provide the bootloader
Please, I some questions;
- is now possible to flash a dumped ROM? If yes, How?
- Is possible to get a backup copy of the actual splash screens before changing it?
Thank you.

Can I really downgrade from BL 1.09 to 1.04 with the Bootloader 1.01 MFG-Tool!

PAPPL said:
Can I really downgrade from BL 1.09 to 1.04 with the Bootloader 1.01 MFG-Tool!
Click to expand...
Click to collapse
POF answers this one later.....

Great news!!!!
Excellent POF and all of the others; let the cooking begin!

Zgembo said:
Could we 'upgrade' this preproduction bootloader to version 1.10 for example?!?
Click to expand...
Click to collapse
You can go from 1.01MFG to 1.09 with 'lnb', and you would to any version too...
VivaErBetis said:
is now possible to flash a dumped ROM? If yes, How?
Click to expand...
Click to collapse
First you have to convert the dumped ROM to OS.nb format of the Hermes... something which will require quite some time until someone can figure out. See here if you are interested.
VivaErBetis said:
Is possible to get a backup copy of the actual splash screens before changing it?
Click to expand...
Click to collapse
Take a shipped ROM from your vendor, and extract the splash screen with NBHextract.
PAPPL said:
Can I really downgrade from BL 1.09 to 1.04 with the Bootloader 1.01 MFG-Tool!
Click to expand...
Click to collapse
Yes if your device is SuperCID (Security Level=0).

Hi
I'm interrested on informations about rom cooking form hermes trinity
Can you tell me if it's possible, with the current imgfs tools , to extract valid dll files and to use this files on other devices...
I currently have problems for loading a dll driver and i'm looking for help for analyzing why...
Anybody know how to use kitl.... ?
Thanx

So... is it possible now to flash a dumped ROM somehow?

Great news.
This mean in future cooked wm6 roms

bravo, i'am waiting for this days for a long time.

mtty has been sitting at
USB>task 32
Level = 0
USB>lnbs SPL-1.01.nbs 50020000
:F=SPL-1.01.nbs
:A=50020000
:O=00000000
:L=FFFFFFFF
start NB image download
for about 10 minutes now. anything wrong?
[edit] never mind, I was using the wrong mtty. when I used the one included, it worked great. thanks![/edit]

qooqoo said:
bravo, i'am waiting for this days for a long time.
Click to expand...
Click to collapse
+1 thks for all

canope said:
Can you tell me if it's possible, with the current imgfs tools , to extract valid dll files and to use this files on other devices...
Click to expand...
Click to collapse
Yes, it should be possible... see this thread for info on how to split the file to extract correct imgfs_raw_data.bin.
canope said:
Anybody know how to use kitl.... ?
Click to expand...
Click to collapse
Put hermes in KITL mode (comm manager + power + softreset) and connect to it with Platform Builder. I can't help you more, because I don't have PB.

Thank you very much, bootloader downgrade from 1.09 to 1.01 MFG now.

cool
you are very cool

pof (maybe we should call u prof.)
as u have mentioned, after flash to bootloader 1.01 can revert to SPL 1.04.
is it possible to re-flash SPL 1.06 which i've extracted from Dopod newer ROM?
[just need advise from an expert before my hermes die ]

Why would you want 1.06 over 1.04?

@hang.tuah: yes, it is possible... but I have the same question as ionide... why 1.06?? it does not offer any good over 1.04, just has downsides and annoyances

Related

How can I downgrade the bootloader from 1.09 to 1.04

Just upgrade my X01HT to 1.33.761.4 but the bootloader also upgrade to 1.09. How can I downgrade to 1.04? Thanks
http://forum.xda-developers.com/showthread.php?t=284401
steiale said:
http://forum.xda-developers.com/showthread.php?t=284401
Click to expand...
Click to collapse
Just downgrade to 1.04 now, thanks
Confirmation for the downgrade_spl
Hello
i got the file downgrade_spl.rar from net. After unzipping with winrar i see a file "downgrade_spl.nbf" inside it of size 769kb. Please confirm me if this is the correct file.
Also please let me know where do i find "ROMUpgradeUt.exe" file.
Thanks
This is the wrong filesize!
give me an e-mail and i`ll send u a tools.
please help me!!!!
I need tool for O2 trion, please help me.thanks
I need files, too.
Hello.
I'm searching for the files, "Downgrade_spl.nbf" and "ROMUpgradeUt.exe".
Anyone tell me where I get there, please?
and,
http://forum.xda-developers.com/showthread.php?t=284401
This solution is useful for SPL1.09?
version 1.09
x01ht bootloader version 1.09 can unlock rightnow ma...?please
unfortunately no.. pof mentioned something about the new ROM not having the write feature..
mizuchi said:
unfortunately no.. pof mentioned something about the new ROM not having the write feature..
Click to expand...
Click to collapse
correct. it requires to be able to flash the radio stack in order to unlock it, but the radio stack of that new rom seems to be read only and flashing another radio stack is not possible at this time.
I could not find in google as well but get somewhere else with slighly different filename. Not sure the same one or not. Can somebody please confirm,
Get it here.
http://www.filemirrors.com/search.src?type=begins&file=DownGrade
It's possible.
Hello I'm french, first sorry for my bad english.
I just bought a V1605 from england that I have immediatly unlocked.
I have tested French qtek ROM 1.18.256... but it's very slow and there are many bugs, after that I have tested a WWE qtek ROM 1.18.416... with bootloader 1.06 just for see if TCPMP was better and it is!
But I wanted the last Qtek ROM, so I have put the original ROM of my vodafone in order to downgrade bootloader to 1.04, it's very simple!
Then I've installed the latest QTEK ROM 1.35 with bootloader 1.09, and now after few very fast manipulations , I have bootloader 1.04 and radio 1.20.
So I can test every ROMs I think...
For the moment, I can see that this ROM (1.35) is very fast, and TCPMP works better but for the video it is the same than vodafone 1.20 or tytn 1.18.416 .
ghz said:
I could not find in google as well but get somewhere else with slighly different filename. Not sure the same one or not. Can somebody please confirm,
Get it here.
http://www.filemirrors.com/search.src?type=begins&file=DownGrade
Click to expand...
Click to collapse
Doesn't look like those are relevant.
1.04 to current boot rom?
After downgrading to 1.04 and doing all the upgrades, is there any reason to reupgrade 1.04 to a more current boot rom?
hi there,
seems i`m not able to downgrade after after flashing the 1.35 rom. my bootloader remains 1.09 and the downgrade_spl (1.8mb rar) tool doesn`t work properly. i always have to recover my device when i try to run the upgrade. is there something i do wrong or is my downgrade_spl the wrong one?
thanks jammerlappen
additional questions: am i able to flash a) other radio roms b) complete roms with bl 1.09 and supercid?
jammerlappen said:
is there something i do wrong?
Click to expand...
Click to collapse
http://wiki.xda-developers.com/index.php?pagename=Hermes_Howto_Bootloader104&version=2
jammerlappen said:
additional questions: am i able to flash a) other radio roms b) complete roms with bl 1.09 and supercid?
Click to expand...
Click to collapse
a) no
b) yes
may something be wrong with the link in your llink?
thank you anyway! it is good news, i didn`t break my tytn (-:
it is an old revision of a page where there where the instructions initially... so the link is not there anymore... but you said you have it.
hmmm, the files i have obviously do not work

To all Post-Dec X01HT BL 1.09 owner

Just want to summerize the situation for existing 1.09 owner of X01HT, the current state of the unlocking process is follows:
1) Unlock 1.09 can ONLY be done by imei-check (GBP $20)
2) After unlocked, your device will be SUPER-CID
3) Then it can be flashed BL MFG 1.01 in order to upgrade BL to 1.09 for
upgrading the radio rom (currently only radio ver. 1.27 can be flashed)
OR if you dun need the phone function, just want to use PDA instead BUT want to use your desire language rom (Chinese, French etc.....)
1) You need this software "DownGrade_SPL.rar" to downgrade your BL to
1.04 in order for you to be able to flash other language OS.
2) "DownGrade_SPL.rar" can be found on the search engine like google or
china search engine like baidu.com.......
Hope this help
Thank you mj13,this helps.I wonder if there is a future plan for free unlocker.
It's a bit better than this.
With SuperCID & 1.01MFG BL you can easily go to 1.04 BL. Instructions on this are in the Wiki and the 1.04BL itself is included in the 1.01MFG bl download.
The bootleg 1.04bl downgrade solution is no longer required!
or... If you're more technically inclined you can flash using 1.01MFG bootloader...
you can extract os.nb from the rom of your choice using pof's nbhextract tool then just flash it directly using the "lnb" command in the 1.01MFG bootloader. Instead of 30 minutes, this will take < 5 minutes.
While you're at it, change your splash screens too
May I ask one thing? If I already in 1.04. Could I use the unlock from IMEI directly?? Furthermore, I can' input chinese. Are your PPC OK?
Is after # 2 enough to unlock the X01HT Post December release?
mj13 said:
Just want to summerize the situation for existing 1.09 owner of X01HT, the current state of the unlocking process is follows:
1) Unlock 1.09 can ONLY be done by imei-check (GBP $20)
2) After unlocked, your device will be SUPER-CID
3) Then it can be flashed BL MFG 1.01 in order to upgrade BL to 1.09 for
upgrading the radio rom (currently only radio ver. 1.27 can be flashed)
OR if you dun need the phone function, just want to use PDA instead BUT want to use your desire language rom (Chinese, French etc.....)
1) You need this software "DownGrade_SPL.rar" to downgrade your BL to
1.04 in order for you to be able to flash other language OS.
2) "DownGrade_SPL.rar" can be found on the search engine like google or
china search engine like baidu.com.......
Hope this help
Click to expand...
Click to collapse
Please clarify if after # 2, the X01HT is unlocked already. I just confuse why to do the flashing. Many thanks in advance.
junulrik
wiccawaiwai said:
May I ask one thing? If I already in 1.04. Could I use the unlock from IMEI directly?? Furthermore, I can' input chinese. Are your PPC OK?
Click to expand...
Click to collapse
Of course can be unlocked, is it flashed to chinese OS already?
junulrik said:
Please clarify if after # 2, the X01HT is unlocked already. I just confuse why to do the flashing. Many thanks in advance.
junulrik
Click to expand...
Click to collapse
#2 is unlocking the phone, but if you need to upgrade the radio version, it is better to do the #3 process as MFG 1.01 let you just upgrade the BL itself instead of FULL ROM upgrade. Of course, if you are satisfy with your current radio version, #2 will be just fine.
mj13 said:
Of course can be unlocked, is it flashed to chinese OS already?
Click to expand...
Click to collapse
I already flash to chinese ROM (DOPOD)
wiccawaiwai said:
I already flash to chinese ROM (DOPOD)
Click to expand...
Click to collapse
You mean there is no option for chinese input like handwriting?
thanks mj13
thanks mj13..
mj13 said:
You mean there is no option for chinese input like handwriting?
Click to expand...
Click to collapse
I have the chinese input. But no chinese word out.
But it is OK now (After I reset the PPC) Thanks all of your help.
Wish me good luck. I will do the unlock this Friday.

Dumping SPL/IPL...

Guys, how do I dump the SPL, IPL, Bootloader, radio ROM and Radio bootloader version?
I will use the unlocker to unlock the TYTN but then I want to roll back to the default version numbers that I have. I dont want it to stay with the HardSPL or with the newer Radio.
Thanks
Have you ever try to use the search function first? ...or just read the Wiki?...here are the how to...but next time read the wiki first!
Regards,
Primoz
Guys, it starting to get boring.
On every question asked, you send to RTFM.
Maybe, just MAYBE, I already READ everything and I STILL (!!!) have a question? Maybe I'm not as stupid as you think? Maybe the guides are NOT (?!?!!) 100% perfect?
To the subject; I did dumo the ROM. However, as I understand (FROM the guide), it DID NOT dump the SPL and the radio (or the bootloader and the Radio bootloader).
Please confirm that it DID extract everything and that if I'll burn it back to the device it will be 100% the same as it now.
Also, if I first use the unlocker, and then burn back the original radio, will it get locked again?
knfevg said:
Guys, how do I dump the SPL, IPL, Bootloader, radio ROM and Radio bootloader version?
Click to expand...
Click to collapse
You don't need to dump that, every version is available as a shipped upgrade so you can extract it from there and flash it later if you need it for warranty reasons.
knfevg said:
I will use the unlocker to unlock the TYTN but then I want to roll back to the default version numbers that I have. I dont want it to stay with the HardSPL or with the newer Radio.
Click to expand...
Click to collapse
Most probably your rom is available as a shipped NBH, just flashing it will lead your device to the original rom. The only thing you can't do is go from htc_boot 0108 to htc_boot 0106, so make sure you don't upgrade to a very new radio if you want to be able to go back to your original radio if it has a 0106 radio bootloader.
knfevg said:
To the subject; I did dumo the ROM. However, as I understand (FROM the guide), it DID NOT dump the SPL and the radio (or the bootloader and the Radio bootloader).
Click to expand...
Click to collapse
Following the guide, you've only dumped the OS part of the rom.
knfevg said:
Please confirm that it DID extract everything and that if I'll burn it back to the device it will be 100% the same as it now.
Click to expand...
Click to collapse
Tell us how it is now.
knfevg said:
Also, if I first use the unlocker, and then burn back the original radio, will it get locked again?
Click to expand...
Click to collapse
no.
POF, you are THE GOD!!! Thanks, finally someone HELPS!!
Ok, here are the clarifications:
1. How do I check the htc_boot version? I have the 106 SPL so I can’t launch the Radio loader from there....
2. If I dumped only the OS part I guess I should dump the rest too. How do I do that and how do I make the "burnable" afterwards?
3. Here is the current "setup":
The device is Orange branded. It’s exactly as described under "Hermes versions" in Wiki for Orange-Israel:
Israel Versions
HERM200 Orange IL HTC TyTN Israel QWERTY Locked OS 5.1.195 (Build 14955.2.3.0) 1.18.255.3 07/22/06 WWE 1.18.255.112 1.03.03.10 32.34.7010.01H
The SPL is 1.06 and IPL is 1.01. I have no idea how to check the HTC_BOOT version.
There is an Orange boot logo.
Guess that is. Thanks once again
knfevg said:
1. How do I check the htc_boot version? I have the 106 SPL so I can’t launch the Radio loader from there....
Click to expand...
Click to collapse
You should use a SPL based on 1.01 or 1.04 to use 'rtask' and access the radio, you can either flash it or use SSPL to load the NB without flashing. Anyway you don't need to do that, radio 1.03.03.10 has htc_boot 0106.
knfevg said:
2. If I dumped only the OS part I guess I should dump the rest too. How do I do that and how do I make the "burnable" afterwards?
Click to expand...
Click to collapse
You don't need to dump the rest. See later.
knfevg said:
3. Here is the current "setup":
HERM200 Orange IL HTC TyTN Israel QWERTY Locked OS 5.1.195 (Build 14955.2.3.0) 1.18.255.3 07/22/06 WWE 1.18.255.112 1.03.03.10 32.34.7010.01H
The SPL is 1.06 and IPL is 1.01.
There is an Orange boot logo.
Click to expand...
Click to collapse
A full shipped NBH consists on 7 parts: IPL, SPL, MainSplash, SubSplash, Radio, ExtROM and OS.
See the hermes shipped upgrades wiki page. Use nbhextract to separate the NBH into rom parts.
Download any orange ROM to get your MainSplash.nb & SubSplash.nb (boot logo as you say).
Download any rom with IPL-1.01 & SPL-1.06 to get IPL.nb & SPL.nb
Download any rom with radio 1.03.03.10 to get GSM.nb
Unhide your ExtROM to get the files in Extended ROM, then create ExtROM.nb using ExtROM image editor.
Reconstruct the OS.nb using the instructions on wiki (see trinity wiki also)
Finally, create a NBH using nbhgen, and package it with CustomRUU to be able to flash it pushing SSPL.
Make sure you don't upgrade to any radio with htc_boot 0108, otherwise you'll never be able to flash your original radio again.
Hope it's clear
Thanks POF. PERFECT!!!!
Maybe a Wiki should be made for this as I notice alot of people asking on how to go back to the original state of their device?
tnx in advance
sir POF i did want to get the original state of my device for warranty purpose..
I tried everything i can.. i read a lot.. still confusing me.. I did encountered No GSM, the phone dont boot..
I run WM6 Cooked rom before..
heres my device now...
Dopod 838 pro Asia
ORIGINAL
ROM 1.23.707.4
07/21/06 WM5
RADIO 1.06.00.10
PROTOCOL 32.37.7010.01H
OS BUILD 14955.2.3.0
AKU 2.3
SPL 1.04
HTC BOOT 106
IPL ?
NOW RUNNING
WM5
ROM 1.23.707.4
07/21/06
RADIO 1.40.30.00
32.73.7020.16H
OS BUILD 14955.2.3.0
SPL OLIPRO 2.10
IPL 1.04
AKU ?
HTC BOOT ? dnt know if it changed
Ive read ur message.. I just want a simple question...
BASED on the data above is it possible to bring back the device on its
original state specially the radio and SPL ?
TNX in advance..
Im willing to research again if yes..
I have SPL - 2.10 Olipro. I am trying the various Boot Roms starting from 1.41 backwards as someone recommended in some other thread.
But I need to run SSPL before or I get an Error why does that happen why can't the SSPL of the ROM upgrade check and do the needful.
Secondly I want to revert back to SPL-1.04 or 1.09 is it possible. If yes please tell me how. If it is detailed in some other thread please tell me the thread details and oblige.
THANKS IN ADVANCE.
tonetagabaler said:
BASED on the data above is it possible to bring back the device on its original state specially the radio and SPL ?
Click to expand...
Click to collapse
Radio no (you cant go back from htc_boot 0108 to 0106), SPL and rest of rom parts yes, it's possible to return to original state.
hsanghavi said:
I want to revert back to SPL-1.04 or 1.09 is it possible. If yes please tell me how. If it is detailed in some other thread please tell me the thread details and oblige.
Click to expand...
Click to collapse
Read the HardSPL sticky thread.
I tired but could not locate the Hard SPL thread can you please tell me where to find it.
THANKS.

Reset all (Rom ipl,spl,radio..)to the original

Hello
I.m new in the forum,i'm writing from italy and here i'can't find a valid and perfect forum like this,
yesterday i had my new Uk Vpa Compact 1605(Herm200) , with
Ipl 1.01
Spl 1.09
Os 5.1.461(Build 15671.3.3.0)
Rom vers. 2.07.161.1 released the 2nd of giune 2007
Radio 1.32.00.00
Protocol 32.65.7020.09W
At the end of the day i flashed Hardspl with new ipl 1.04 and spl 2.10
and new official Wm6.
now my questions is.. Can i reflash in my Vodafone 1605 all the original rom ,spl,ipl,radio, Os etc. etc. ???
If it is possible,where can i find all the file?
Thank you to alla for the help and congratulations for this fantastic forum
zetax said:
Hello
I.m new in the forum,i'm writing from italy and here i'can't find a valid and perfect forum like this,
yesterday i had my new Uk Vpa Compact 1605(Herm200) , with
Ipl 1.01
Spl 1.09
Os 5.1.461(Build 15671.3.3.0)
Rom vers. 2.07.161.1 released the 2nd of giune 2007
Radio 1.32.00.00
Protocol 32.65.7020.09W
At the end of the day i flashed Hardspl with new ipl 1.04 and spl 2.10
and new official Wm6.
now my questions is.. Can i reflash in my Vodafone 1605 all the original rom ,spl,ipl,radio, Os etc. etc. ???
If it is possible,where can i find all the file?
Thank you to alla for the help and congratulations for this fantastic forum
Click to expand...
Click to collapse
Hi & welcome!
Ok..understand your problem and this is your first post and maybe you thought, "aah nice forum, He WM6 that looks nice, lets flash it on my device" ..Right simple ah? But..what you forgot..is to backup or read more about flashing..You cant reset it back to the original (what you wanna call it) "firmware"...
Bram87 said:
Hi & welcome!
Ok..understand your problem and this is your first post and maybe you thought, "aah nice forum, He WM6 that looks nice, lets flash it on my device" ..Right simple ah? But..what you forgot..is to backup or read more about flashing..You cant reset it back to the original (what you wanna call it) "firmware"...
Click to expand...
Click to collapse
Well, this is not EXACTLY correct. Check out THIS LINK for downgrade directions. You will need to get the original ROM from somewhere. It is possible that it is HERE IN THE WIKI. Chances are that one of the files there has the same Radio, IPL & SPL. You will just need to find the OS, if it is not in there. (In fact, based on the specs, it looks like the third from the bottom of the English ones - Vodafone?) To flash, you will need dutty's good nbh tool to unpack the ROM, becuase you will need to do the IPL and SPL separately from the OS and radio. See THIS LINK for that info. If you don't want to get into all the unpacking, you *could* do the SPL downgrade first, then the upgrade, but it is generally good practice to downgrade SPL as a LAST step since you lose the hardspl protection as soon as you do it. Finally, use the google search link in my signature if you need to find anything else. Good luck.
zetax said:
Hello
I.m new in the forum,i'm writing from italy and here i'can't find a valid and perfect forum like this,
yesterday i had my new Uk Vpa Compact 1605(Herm200) , with
Ipl 1.01
Spl 1.09
Os 5.1.461(Build 15671.3.3.0)
Rom vers. 2.07.161.1 released the 2nd of giune 2007
Radio 1.32.00.00
Protocol 32.65.7020.09W
At the end of the day i flashed Hardspl with new ipl 1.04 and spl 2.10
and new official Wm6.
now my questions is.. Can i reflash in my Vodafone 1605 all the original rom ,spl,ipl,radio, Os etc. etc. ???
If it is possible,where can i find all the file?
Thank you to alla for the help and congratulations for this fantastic forum
Click to expand...
Click to collapse
Like Todd said it is possible.
Check out the links in my signature and read alot before actually doing so.....
That is a practice tip
The Mr VanX guide alias HTC Hermes guide has complete steps to do this!
Good Luck
Ok, tell me if i correctly understand..
I found the correct rom, after i have to unpack this rom with dutty's good nbh tool..(i have to remove Ipl & Spl?).
After the unpack i have to pack again the rom without ipl and spl and flash it in my Herm??!!is it correct? And in the end i have to change ipl and spl(is it a down grade?).
Last questions yet,
What i have to verify first that i start all this work on my herm to not brick my Herm?
Thank you to all again for the help that you are giving to me
All the best
I may have made it more complicated. That is the process I use.
Best thing to do is simply follow Mrvanx guides.
First downgrade the OS/Radio using THIS GUIDE
Then downgrade SPL/IPL using THIS GUIDE
That is all - as long as you have HardSPL, it is VERY hard to brick your device. So, do that last.
Is possible to flash only the rom i need following the guide, and leave my device with the current hardspl ipl and spl?
Thank you
zetax said:
Is possible to flash only the rom i need following the guide, and leave my device with the current hardspl ipl and spl?
Thank you
Click to expand...
Click to collapse
Yes. The only reason to remove HardSPL is for warranty. Just for clarification, there is no Hard IPL, only Hard SPL, but I know what you mean.
Basically, 99% of the time most of us flash we are only flashing OS or Radio. SPL and IPL don't change often. Most cooked ROMs are released as OS only.
Ah ok perfect, i'm not interested to the device warranty, because i bought it on ebay from Uk, and there is no warranty on my device, so i can only flash os without ipl and spl..
Thank you very much fo all the help
<< ZX >>
Hey boy,
sorry for the up, but i have another question(s)
I have downloaded the rom that i need, but it is in .exe extension how can i extract from this .exe the .nbh file that i will decompile with dutty's???
2nd question, it's possible to downgrade radio rom? i put radio 1.51.00.10 in my device,but i didn't like it, because the 1.47 version
that i had was better of 1.51
Thank you for help
zetax said:
Hey boy,
sorry for the up, but i have another question(s)
I have downloaded the rom that i need, but it is in .exe extension how can i extract from this .exe the .nbh file that i will decompile with dutty's???
2nd question, it's possible to downgrade radio rom? i put radio 1.51.00.10 in my device,but i didn't like it, because the 1.47 version
that i had was better of 1.51
Thank you for help
Click to expand...
Click to collapse
No worries.
To unpack the exe, just use winrar and open it up. You will get a RUU_signed.nbh and an RUU. Just use the nbh file with the custom_ruu.
Yes, you can downgrade radio to 1.47 safely. No worries. I tried 1.51 too - didn't work out for me either. back to 1.50 for me.
todd_jg said:
No worries.
To unpack the exe, just use winrar and open it up. You will get a RUU_signed.nbh and an RUU. Just use the nbh file with the custom_ruu.
Yes, you can downgrade radio to 1.47 safely. No worries. I tried 1.51 too - didn't work out for me either. back to 1.50 for me.
Click to expand...
Click to collapse
Todd, thanks very much, i didn't know that with winrar was possible to unpack an .exe file,now i have all i need to flash my device with the hold or the new vodafone uk rom.
Tnx my friend
I have done the flashing, it works perfect.. now i learn the way, i can flash every kind of Os in my tytn following this way?for example o2(Uk) os can be put in my device?
Where here in xda forum can i find the software(for eample the software that shaps have included in his Os) for my device customization?like today home,weather widget, or the automatic operator configurator etc etc?
Tnx todd

Extracting Stock SPL

Hello
I would like to try some custom ROMs, but since my Touch Pro already had some problems with the stylus sensor, I don't want to lose the warranty. I dumped the ROM and splash screen, but I have some older SPL version -1.69.0000. Is there a way to extract SPL? I can't find it anywhere
Thanks in advance.
m2c said:
Hello
I would like to try some custom ROMs, but since my Touch Pro already had some problems with the stylus sensor, I don't want to lose the warranty. I dumped the ROM and splash screen, but I have some older SPL version -1.69.0000. Is there a way to extract SPL? I can't find it anywhere
Thanks in advance.
Click to expand...
Click to collapse
You will have to get the shipped ROM by your carrier and dump the SPL from there. You can't dump your SPL from the Image on your device.
Thanks
Dave
If you will find some solution, please post it here
I have the same problem. Thanks
It would be helpfull if you mentioned your carrier and whether its a TP or fuze. Its easy to get the spl if you know which rom came on the device.
its mda vario iv (branded htc by t-mobile).
i've found something:
Code:
SPL dump for raphael:
pmemdump 0x88000000 0x80000 spl.bin
Will be this useful? Or is there any other way?
dewil9 said:
its mda vario iv (branded htc by t-mobile).
i've found something:
Code:
SPL dump for raphael:
pmemdump 0x88000000 0x80000 spl.bin
Will be this useful? Or is there any other way?
Click to expand...
Click to collapse
jcespi2005 said:
The reconstruction process can be done only for the OS part...
You can't extract the radio or SPL from the device, you need a shipped ROM to get this two parts.
Cheers.
Click to expand...
Click to collapse
You can only get spl if there is a shipped version of that rom.
Open about in settings and tell me what it says. Then hold down volume and reset. It will bring up the tricolor screen. Post what both of them say.
aruppenthal said:
There should be a way if there is a shipped version of that rom.
Open about in settings and tell me what it says. Then hold down volume and reset. It will bring up the tricolor screen. Post what both of them say. I need to be sure to get the right one.
Click to expand...
Click to collapse
EDIT:
@dewil9
Actually, what SPL are you after?
Ta
Dave
Open about in settings and tell me what it says. Then hold down volume and reset. It will bring up the tricolor screen. Post what both of them say.
Click to expand...
Click to collapse
about:
CE OS 5.2.19965 (Build 19965.1.2.3)
tricolor screen:
RAPH300
SPL-1.69.0000
MicroP-Herm (LED) v 13
MicroP-Herm (KEY) v5
PSOC-Herm STAGE_CVT v0x35
dewil9 said:
about:
CE OS 5.2.19965 (Build 19965.1.2.3)
tricolor screen:
RAPH300
SPL-1.69.0000
MicroP-Herm (LED) v 13
MicroP-Herm (KEY) v5
PSOC-Herm STAGE_CVT v0x35
Click to expand...
Click to collapse
There is a German T-Mobile ROM on the Wiki with 1.69 as the version. Download it and use NBHExtract to Dump the SPL from it.
Ta
Dave
I am from Slovakia, and language of whole OS is english.
Is it ok?
dewil9 said:
I am from Slovakia, and language of whole OS is english.
Is it ok?
Click to expand...
Click to collapse
No, it doesn't matter Raphael SPL 1.69 is the same from any country.
Ta
Dave
Thank you very much
DaveShaw said:
There is a German T-Mobile ROM on the Wiki with 1.69 as the version. Download it and use NBHExtract to Dump the SPL from it.
Ta
Dave
Click to expand...
Click to collapse
It appears the one in the wiki is a reconstruction and does not contain spl
You should be able to use HaRET to dump SPL from RAM at runtime. SPL is at physical address 0.
With RAM protection implemented in Diamond/Raphael/Kovsky/Blackstone it is quite unlikely that SPL in RAM will be different from SPL in NAND, however still possible. Since there's no SPL 1.69 in circulation, you can't verify how accurate the RAM dump is. Someone could dump a known SPL version this way and then confirm the files are identical when extracted from .nbh and dumped from RAM.
One more question... probably stupid one...
I downloaded this german rom, but I don't know howto extract spl from it.
I know with nbhextract, but how exactly?
Can somebody help me? Thank you
dewil9 said:
One more question... probably stupid one...
I downloaded this german rom, but I don't know howto extract spl from it.
I know with nbhextract, but how exactly?
Can somebody help me? Thank you
Click to expand...
Click to collapse
Is the one you extracted an official rom or the rebuild from the wiki?
The one in the wiki does not have the spl in it.
Ah I thought tha roms on wiki are shipped one...
So still no 1.69 spl??
Stock SPL 1.69.0000
For all guys looking for stock SPL 1.69.0000, here is one i have already extracted from czech T-Mobile ROM. So we have done one thing Another things to do is to make one single NBH file with stock SPL and one NBH file with OS, Splashes and stock Radio without SPL. That is what i have not understand yet very well, but i got kitchen and i want to flash new ROM early
Thanks for the SPL - same as on my UK T-Mobile Vario IV.
Now i can restore to factory settings - time to play!
Stock SPL not changing version numbers
I've tried searching the whole net already but I couldn't find it.
Something screwed in my screen and I want to turn it in for warrenty.
Now I restored my ROM/Radio already but when I try to restore Stock SPL (doing it when in USB mode) and it goes to 100% in a few secs it still says 1.90 Olinex.
Anyone got a solution for that?
Kind regards,
Kenny

Categories

Resources