This is a patched radio ROM that can be used to remove the Operator SIM lock and CID lock from HTC Hermes based telephones. This new version also includes HardSPL patched bootloader to show always as SuperCID and allow to flash unsigned code.
It can be used in all HTC Hermes devices, no matter which bootloader version the device is running.
NOTE: For x01ht post April devices, see this thread.
Disclaimer:
This is free to use but at your own risk, I take no responsibility for any conflict, fault, or damage caused to your phone by this unlocking procedure. No warranties of any kind are given. Any commercial usage prohibited.
Website:
http://pof.eslack.org/hermes-unlocker/
Install Instructions:
Easy auto-install Instructions:
Unzip unlocker and run AUTO_Unlock_v3a.bat
If you don't want to install automatically, or for some reason the process doesn't work for you, read the file Instructions.txt.
Thanks to:
buzz_lightyear, itsme, vijay555, arc, Asukal, machinagod, esteve - for the wise advice and support
Des and Olipro - for SSPL and HardSPL, everybody praise them!
everyone else in xda-developers.com
History:
v3a [03-04-2007] - New RUU will make sure HardSPL-1.40 is installed before flashing the radio
Now the unlocking process is faster & safer
Fixed bug where IPL was downgraded to 1.00
v3 [11-02-2007] - Herm_Unlock_v3.exe now allows you to select SIM / CID unlock separately
Thanks to SSPL it can be used in all bootloader versions
Patched radio is now provided in NBH format
It keeps the current bootloader on phone (does not downgrade SPL).
v2a [14-11-2006] - bugfix release, thanks to all who reported the problems!
(hopefully) fixed bug where unlock code has to be entered manually
(hopefully) fixed bug where SuperCID was not kept after rom upgrades in some cases
v2 [12-11-2006] - updated to patched radio 1.16
unlocking software provided (HERM_Unlock_v2.exe): thanks buzz for the source of UNI_Unlock_v1 ;-)
SuperCID is now kept after rom upgrades
v1 [05-11-2006] - patched radio 1.13
unlock manually
Donations:
I spent some time and money developing this free unlocker, there's no need to pay me for that, but donations are always appreciated.
Download:
HTC_Hermes_SIM_CID_Unlock_v3a.zip
Enjoy!
I closed the old version thread, it is still available here.
FREQUENTLY ASKED QUESTIONS
Q: Will this void my warranty?
A: If you select the option to "CID unlock" most probably yes. Don't select it if you just want to remove the SIM-Lock, it will be CID unlocked anyway by HardSPL but will keep your original CID if you flash any other SPL on it.
Q: After unlocking my phone my Radio and SPL versions are downgraded. Can I upgrade them?
A: Yes, you can upgrade to a newer radio and newer SPL/HardSPL version. The phone will not be locked again.
Q: Will this work on Post Dec-2nd SoftBank X01HT phones?
A: Hopefully yes, but your OS ROM includes software SIMLock protection (the annoying USIM screen), you can flash a non-softbank OS rom after unlocking it or read the thread for other options if you want to keep the SoftBank ROM.
Q: Will this work on Post April (white) SoftBank X01HT phones?
Yes if you have not let the SoftBank ExtROM install, otherwise your radio bootloader has been upgraded to 0182 and it is not possible to flash a radio or remove the SIMLock.
Q: Will this work if my bootloader version is SPL-1.09?
A: Yes.
Q: Will this downgrade my bootloader to 1.04?
A: No, it will upgrade it to Hard-SPL 1.40 which is better. You can use Custom RUU to flash any ROM on it.
Q: Will this work if my radio bootloader is HTC_BOOT 0108?
A: Yes.
Q: Will it downgrade HTC_BOOT 0108 to 0107?
A: No, if you have 0108 it will keep 0108.
Q: Do I need to run the new version if I already used the older version previously?
A: No, your phone is already unlocked, no need to run unlocker again.
Q: After finishing the process it still asks for unlock code, what should I do?
A: Make sure you have radio version 1.16 and run Herm_Unlock_v3.exe on your phone and select unlock option. If entering any unlock code fails, please repeat the unlocking process again (you did something wrong the first time).
I would like to thank you for all the owner of Hermes which is not unlocked.Good work,pof!
Hi Pof,
download link for the local ftp pointed to older 2a version. Typo, I guess.
pof You gave necessary unlock v3?
see "HTC_Hermes_SIM_CID_Unlock_v3.zip" ftp://xda:[email protected]/Hermes/Tools_and_Programs/HTC_Hermes_SIM_Unlock_v2a.zip
It just had been corrected.I guess pof had not finished uploading just now.
Please see ftp://ftp.xda-developers.com/Hermes/Tools_and_Programs/HTC_Hermes_SIM_CID_Unlock_v3.zip
Yes guys sorry for the wrong download link, it has now been fixed
Pof that was amazing.. i'm really impressed Thank You!
thanks pof for your great worked..superb..i have waiting for a long time ago for this new solution..
Hi
Thanks to POF. what a conincident. i have test the first unlocker on the same day as pof posted and today again just had one piece and tested it. every thing went ok.
Br
Incredible! Pof, would you mind sharing on how you succeeded? I was very interested in the approach directly jumping into bootloader and so on. So explaining the other developers what and how you did is appreciated
Ok, explaining should happen here. But I'm still very thirsty for information. :-D
.wysiwyg { background-attachment: scroll; background-repeat: repeat; background-position: 0% 0%; background-color: #ffffcc; background-image: none; color: #000000; font-family: Verdana, "Lucida Grande", Arial, Arial; font-style: normal; font-variant: normal; font-weight: 400; font-size: 10pt; line-height: normal } p { margin: 0px; }
@Chatty: I used SSPL by Des to flash self signed nbh containing patched radio and 1.04 spl. see here for details:
http://forum.xda-developers.com/showthread.php?t=293651
Fantastic work again pof, big thanks to everyone involved!
Help!!Please
I use v3 to unlock my phone,and super CIDed it too.Everything goes well until I used SSPL tools to get into bootloader and use MTTY to give command below.
USB>task 32
Level = 0
USB>lnbs spl-1.01.nbs 50020000
:F=spl-1.01.nbs
:A=50020000
:O=00000000
:L=FFFFFFFF
start NB image download
Of course in the same directery I have ...1.01.nbh . But it just stoped there.And never completed.I disconnectd the USB cable and plug it again,I can type some commands,too.And there is reply.
What should I do?
qvik123 said:
Help!!Please
I use v3 to unlock my phone,and super CIDed it too.Everything goes well until I used SSPL tools to get into bootloader and use MTTY to give command below.
USB>task 32
Level = 0
USB>lnbs spl-1.01.nbs 50020000
:F=spl-1.01.nbs
:A=50020000
:O=00000000
:L=FFFFFFFF
start NB image download
Of course in the same directery I have ...1.01.nbh . But it just stoped there.And never completed.I disconnectd the USB cable and plug it again,I can type some commands,too.And there is reply.
What should I do?
Click to expand...
Click to collapse
You must be in normal bootloader 1.04 to do this. Not in 1.09 from the SSPL-tool.
qvik123 said:
But it just stoped there.And never completed.I disconnectd the USB cable and plug it again,I can type some commands,too.And there is reply.
What should I do?
Click to expand...
Click to collapse
Have you tried recovery way clearly stated in documentation
In case if something goes wrong during flashing you should flash your device with ROM accepted by standard bootloader (and have another try if you wish).
Click to expand...
Click to collapse
?
Thank you.I did not recognize that.That means,since I have super CID,I can flash any shipped complete ROM with a 1.04 SPL and then flash to 1.01MFG in order to flash seperate OS roms,am I right?
Hi Pof it works also on my orange m3100 that is brick on boot mode 1.06 ? Or i have still wait the orang001 rom ? Thanks
Des said:
Have you tried recovery way clearly stated in documentation ?
Click to expand...
Click to collapse
I think that is the problem is as scorpio16v said I did not have the proper SPL version.But luckily I managed to reboot my device and WM5 started to load.Now I am going to downgrade to SPL 1.04.Thank you.
qvik123 said:
Thank you.I did not recognize that.That means,since I have super CID,I can flash any shipped complete ROM with a 1.04 SPL and then flash to 1.01MFG in order to flash seperate OS roms,am I right?
Click to expand...
Click to collapse
yes you can go this way if you want to, or you can load 1.01MFG with SSPL without flashing it, or you can create nbh rom signed with anything and flash it with SSPL. Read doc it rulez.
Related
Are there any downsides to downgrading to bootloader v1.04?
Does v1.06 have anything extra that v1.04 doesn't?
I have an X01HT (v1.06)
Is it possible that future ROM upgrades could be tied to the bootloader version?
Thanks
tle said:
Are there any downsides to downgrading to bootloader v1.04?
Click to expand...
Click to collapse
Bootloader 1.06 enforces CID checking, bootloader 1.04 doesn't.
Bootloader 1.06 doesn't have 'rtask' command, bootloader 1.04 does.
rtask command allows you to do some "interesting" things, for example enter radio bootloader, and GSM AT command interface, where you can type AT commands to the phone from bootloader. Read the wiki Hermes bootloader page for more info.
tle said:
Does v1.06 have anything extra that v1.04 doesn't? I have an X01HT (v1.06)
Click to expand...
Click to collapse
No, it has less things... rtask command removed
The "extra" thing is that your CID is checked when flashing a ROM, so you can't flash ROMs that are made for other Hermes devices such as HTC TyTN or Cingular 8525 on your X01HT.
tle said:
Is it possible that future ROM upgrades could be tied to the bootloader version?
Click to expand...
Click to collapse
it is possible, but unlikely to happen, shouldn't worry you too much now.
Thanks for the quick reply, pof.
I guess that if a ROM were to be tied to bootloader v1.06 then someone would have to make a bootloader only upgrade... Do you foresee and potential issues there. (excluding copyright issues?
Thanks
tle said:
I guess that if a ROM were to be tied to bootloader v1.06 then someone would have to make a bootloader only upgrade... Do you foresee and potential issues there. (excluding copyright issues?
Click to expand...
Click to collapse
No issues at all, and no "bootloader only upgrade" needed... if you are on 1.04 you just have to flash any ROM containing bootloader 1.06 to have bootloader 1.06 on your device. Then you could do the 'tied-to-1.06' upgrade.
But at the moment 1.06 and 1.04 are very similar, the only difference I've noticed is 'rtask' command and CID checking. rtask command also allows you to go radio bootloader and flash the 'extracted radio rom upgrades' (using rwdata), so you can't do a radio-only upgrade in 1.06 at the moment.
Anyway... I am investigating the way to provide an alternative method to go from 1.06 to 1.04 without copyright issues (as with the previous method from imei-check). Now I can jump from WinCE to IPL at physical address 0x0000000 and then the IPL reads the SPL from flash and executes it correctly.
The next step is to load the nb file for SPL 1.04 and place it in RAM at 0x3000000, and instead of jumping to IPL jump to SPL when this is done it will be possible to downgrade the bootlodaer for those of you on 1.06
Sounds like you are close to a solution. I read in a another thread that you said you are not a WINCE programmer, but you seems like you have a good grasp of low level programming. Best of luck!
I'm getting a lot of help from some friends, i wouldn't have reached this without their help, and I like to learn new things
What we're doing is modifying gnuharet to remove the linux-loading part and add very few changes in the ARM9 assembly part, if you're interested see the file src/wince/asmstuff.S.
pof said:
rtask command allows you to do some "interesting" things, for example enter radio bootloader, and GSM AT command interface, where you can type AT commands to the phone from bootloader.
Click to expand...
Click to collapse
I guess it should be possible to do in wince by directly calling a rilgsm ioctl
(should work on universal, the equivalent code runs the phone in Linux).
devspecific code=54
http://wiki.xda-developers.com/index.php?pagename=rilgsm.dll
cr2, yes it is possible... this is what my unlocker does to do the [email protected] commands and uses almost the same code as buzz used on the universal.
EDIT: I read you too fast, I'm using RIL_DevSpecific commands to send the [email protected], but didn't read the code=54. Have to try this, thanks for pointing it out!
Help Needed!
Hi pof,
I (stupid guy!) upgraded from ME_DT_WWE_1182553_106_10303_Ship to Cingular 1.34.502.1 (1.06) and now I cannot downgrade (using for example Cingular_1.30.502.1 (1.04)...why?
I tried every unlocking process, every step you write here, but no way! Always ID ERROR (294)...whyyy????
I cannot understand...I think a downgrade to 1.04 could save me...
Please, help me...
Yes, downgrade will help you. Just downgrade to a full rom matching the CID on your device, or wait until a free solution to downgrade bootloader.
pof said:
Yes, downgrade will help you. Just downgrade to a full rom matching the CID on your device, or wait until a free solution to downgrade bootloader.
Click to expand...
Click to collapse
Just to be sure: I flashed my Dutch TyTn (QTEK_E11) to Cing 1.34 WWE (CWS_001).
Now my CID still is QTEK_E11 or is it changed to CWS_001?
If is still is QTEK_E11 then I can go back to the Dutch HTC 1.18.254.2, can I?
And from there I can SuperCID my device?
I will soon have a Cingular 8525. I was thinking of upgrading it to the South African ROM. The one with the 1.09 bootloader.
I know the phone will have either a 1.04 or 1.06 bootloader so I can definitely unlock it, but I am looking for a full procedure thing. There is a lot with this, such as not being able to downgrade from 1.09 to 1.04 (which I found out you can actually do), and getting the SuperCID working, etc.
So could somebody be so kind and write up a procedure so I dont screw up a brand new phone. Thanks a bunch.
I second this request.
Actually I have read quite a lot about this on these wonderful forums by wonderful people but I am still not confident and therefore want to ask some specific questions:
1) My Jasjam original ROM is with bootloader 1.06. On the I-Mate site there is a ROM available with bootloader 1.04 and having the same CID as the one currently on my machine. If I install this ROM will my bootloader change to 1.04 from 1.06??
2) If after installing the ROM with bootloader 1.04 I attempt to install any other Hermes ROM say the Dopod ROM will it be possible simply by connecting my device with the computer through active sync and running the installation file on the PC?? Personally I think this will be possible as the bug in the bootloader 1.04 will allow me to do so.
3) My last question is that if after installing the i-mate ROM with bootloader 1.04 I install another ROM with bootloader 1.09 will I be permanently stuck with the bootloader 1.09 and afterwards not being able to install any other ROM.
I know some of my questions may sound foolish but I need the answers to gain some confidence that I have understood what I have read in these forums.
Kind Regards
@staulkor:
- Downgrade to cingular 1.30 rom to have bootloader 1.04 on your 8525
- Follow unlocking process as explained in the Readme file
- Double check that your radio version has changed from 1.13 to 1.16 after flashing the patched radio, once you're running the patched radio run Herm_Unlock_v2a.exe to SIM/CID unlock your phone.
- Upgrade to cingular 1.34 ROM again if you want the original ROM back on your device
@srmz:
1. yes
2. yes
3. yes, but read this
Thank Pof. I have heard much about you and all of your greatness throughout these forums. Thanks again
OK, well... I'd like to introduce Hard-SPL; available in 3 flavours:
SPL 2.10 based on 2.02 will be released shortly at £5 per person... only kidding... it's free, and out now, but do consider a donation
1) 2.10 - Hard-SPL-V7 - see Changelog for further details
(at the bottom)
2) 1.10 - Olipro SPL - based on 1.04 and unlocked - use for rtask commands.
View attachment Hard-SPL.zip
3) 1.01 - Olipro MFG - based on 1.01, and really for testing only.
View attachment Spl-Olipro-MFG.zip
TO FLASH THE NEW Hard-SPL, Select Force-SPL, you should only choose otherwise when recovering your device from an old Hard-SPL version!
RUU now forces SSPL every time... do not use this RUU for anything else.
For older CustomRUU users; pick the 1.40 option, autodetect will not work... or download and use the new CustomRUU
1.01 is provided as SSPL and SPL; SPL is intended for flashing, SSPL is intended to be loaded by SSPL, neither of these are packaged as an NBH since if you intend to play with it, you should know how to make your own package for it.
Bad Blocks SPL Available! - Hard-SPL-V6.zip - fixed RUU bug for those using 1.11/1.13/1.30
Code:
[b]CURRENT FEATURES[/b]
-SuperCID
-no file signing required
-no password required to authenticate with bootloader
-bad NAND can be recovered with "task 2a"
-bad NAND can be recovered by flashing an OS
-SPL protected from all HTC retail SPLs being flashed by accident (to bypass, use SSPL)
-IPL protected from all flashes; protection against bogus NBH's
-bad NAND can again be checked for with "info 8"
-version displays 2.10.Olipro
-no longer tries to read bad NAND - should fix whitescreen issue
[b]ChangeLog[/b]
[b]Hard-SPL-2.10[/b]
-based on a newer SPL base; bugfixes.
-IPL flashing disabled to prevent bogus NBHs bricking your device.
[b]Hard-SPL-1.40[/b]
-repairs a bug that affected SPL being replaced by retail ones.
[b]Hard-SPL-1.35[/b]
-addresses an issue for those with Real Bad Blocks to prevent whitescreens.
[b]Hard-SPL-1.30[/b]
- removed password for wdata commands and rbmc etc.
- activated "task 2a" to allow recovering bad blocks as well as flashing valid OS.
- Disabled SPL flashing; this SPL protects you from writing over it by accident.
- Bad Blocks "info 8" command works now allowing you to check for bad blocks.
[b]Hard-SPL-1.13[/b]
- Patched NAND check; bad NAND ignored, valid OS can be flashed to recover bad blocks.
[b]Hard-SPL-1.11[/b]
- Flashing Radio BL 0108 now supported
- Downgrading SPL no longer allowed.
- rtask command removed.
- new RUU interface required to flash ROM files.
[b]Hard-SPL-1.10[/b]
-Initial release; SuperCID and no signing required
-Compatible only with Radio BL 0107
-has rtask commands for accessing radio facilities.
Looking for other SPL Files? scroll back up! they're at the top underneath each version heading!
please remember that 1.35 and 1.40 are the same as 1.30, so when using CustomRUU, either select that, or download the NEW customRUU and overwrite.
Olipro said:
ROM's not available yet; I'm sending them to pof for testing before anybody is allowed to flash this... there's still a chance you could brick your phone
Click to expand...
Click to collapse
great stuff... i'll report in a while
Damn... a lot of people are sure gonna like this! How about doing 1.01MFG too so we can still flash os.nb in < 5 mins with lnb?
Sleuth255 said:
Damn... a lot of people are sure gonna like this! How about doing 1.01MFG too so we can still flash os.nb in < 5 mins with lnb?
Click to expand...
Click to collapse
if someone sent me it as a .nb then certainly... a proper nb... unsigned.
Current Status: Pof has successfully flashed his device, unsigned ROM seems to be flashing fine, if all is well, then I'll get a package ready within the next 10 minutes.
man it works!! That's the safest thing to put on an hermes
Thanks Olipro
Fantastic work! This will definitely be a big help to everyone.
not to sound stupid or anything, but what does this enable your phone to do exactly??
Its the holy grail of hermes flashing! As long as there's no bad blocks in NAND, bricking due to corrupted CID can now be now be avoided.
Olipro said:
if someone sent me it as a .nb then certainly... a proper nb... unsigned.
Click to expand...
Click to collapse
only 1.01MFG I've ever seen is .nbs
koolhand79 said:
not to sound stupid or anything, but what does this enable your phone to do exactly??
Click to expand...
Click to collapse
Same features as SSPL, but flashed on the phone and with bootloader version 1.04 (hex edited to be shown as 1.10.Oli), that is:
Ability to bypass signature in NBH files (friendly for cooked roms)
Ability to access radio bootloader (no more corrupted CID bricks)
Shows itself as SuperCID when doing a rom upgrade (but it internally isn't)
Can be uninstalled by just reflashing a shipped SPL, so no warranty is lost
Sleuth255 said:
only 1.01MFG I've ever seen is .nbs
Click to expand...
Click to collapse
yeah, but it's just the .nb with the NBH headers on... I'm a lazy sod and was hoping someone had already made it an nb to save me the time
also... in a few seconds, a flash package for my SPL will be available!
When? When? When? Waiting... Yahooo. Good news to us all as cooking and flashing going to be as safe as possible.
Okay it is my time to sound like a moron.
Alright I get the general idea of what this does, not could someone point, no need to show the link, just mention where in the documentation I can find more real info on this.
Probably Des or Olipro can answer that:
Can we also patch the SPL to always write 0xFF on the "disastrous 517th byte" of each physical NAND page? (or not overwrite the existing value, whichever is better), this way even when the flashed OS.nb contains a value != than 0xFF on that byte, will not produce a bad block and this would make flashing cooked images _really_ fool proof.
For those willing to go deeply, read Des comment here.
pof said:
Same features as SSPL, but flashed on the phone and with bootloader version 1.04 (hex edited to be shown as 1.10.Oli), that is:
Ability to bypass signature in NBH files (friendly for cooked roms)
Ability to access radio bootloader (no more corrupted CID bricks)
Shows itself as SuperCID when doing a rom upgrade (but it internally isn't)
Can be uninstalled by just reflashing a shipped SPL, so no warranty is lost
Click to expand...
Click to collapse
Not that there's a heck of a lot of reason for doing it any more but does that mean we can now downgrade radio bl versions? Also will it help recover from bad bootloader flashes? I am constantly in awe of the brilliant people in this forum!
chymmylt said:
does that mean we can now downgrade radio bl versions?
Click to expand...
Click to collapse
No, if you have 0108, will keep 0108.
chymmylt said:
Also will it help recover from bad bootloader flashes?
Click to expand...
Click to collapse
No... a bad flash in bootloader means a bricked device, but this is not common on hermes, the most common is bad flash in radio which can only be fixed if the bootloader is 1.04 or the rom has KITL enabled.
pof said:
No, if you have 0108, will keep 0108.
No... a bad flash in bootloader means a bricked device, but this is not common on hermes, the most common is bad flash in radio which can only be fixed if the bootloader is 1.04 or the rom has KITL enabled.
Click to expand...
Click to collapse
that means you've overwritten the bootloader I have made... so obviously not.
however, the bootloader does have built-in recovery functions (HTC's work) and generally you need to be doing something funky to bugger the SPL up.
pof said:
No, if you have 0108, will keep 0108.
No... a bad flash in bootloader means a bricked device, but this is not common on hermes, the most common is bad flash in radio which can only be fixed if the bootloader is 1.04 or the rom has KITL enabled.
Click to expand...
Click to collapse
Still very exciting! Y'all da man! (Men?)
Thanks again!
For those with 1.01MFG or 1.04 SuperCID, will this new BL give any new benefits? I understand those with 1.09 will benefit, but, is it worth flashing if I already have 1.01MFG on the device?
with this will i be able to upgrade and downgrade to any radio i want regardless of nbh or nbf, since no one is answering me in the thread i created about this. lol
:Hermes unlocker (upgrade radio) universal [work with White X01HT]
Hermes unlocker (upgrade radio) universal [work with White X01HT, Radio 1.40.30]
This is a patched radio ROM that can be used to remove the Operator SIM lock and CID lock from HTC Hermes based telephones. It also includes HardSPL patched bootloader to show always as SuperCID and allow to flash unsigned code.
It can be used in all HTC Hermes devices, Include X01HT which bootloader is 0182(white), no matter which bootloader version the device is running.
The radio rom (GSM) will upgrade to 1.40.30 so the battery can last more time, also NO GSM will NOT be a problem
Install Instructions:
1. Save the Hermes_unlocker.zip to your computer and unzip it.
2. Turn phone on and connect to pc (green ActiveSync icon in system tray).**
3. run ROMUpgradeUt.exe, click "yes" in your hermes when the hermes ask yes or no.
4. Hermes would switch to bootloader mode,
the unlocker will upgrade the radio rom to 1.40.30 and ALL locked hermes will be unlocked
fw from : http://www.howardforums.com/showthread.php?t=1148290
WARNING
DO NOT TRY THIS ON YOUR HERMES, THIS WILL BRICK YOUR PHONE
NBH file includes:
IPL: it is an SPL-1.09
SPL: it is just CRAP
RADIO: Unmodified 1.40.30.00 radio
Flashing an SPL in place of the IPL will just make the phone not boot anymore.
pof said:
DO NOT TRY THIS ON YOUR HERMES, THIS WILL BRICK YOUR PHONE
NBH file includes:
IPL: it is an SPL-1.09
SPL: it is just CRAP
RADIO: Unmodified 1.40.30.10 radio
Flashing an SPL in place of the IPL will just make the phone not boot anymore.
Click to expand...
Click to collapse
well ban this user pof or delete the topic....
Same **** was posted in the Artemis-Forum.
http://forum.xda-developers.com/showthread.php?t=303352
walshieau said:
well ban this user pof or delete the topic....
Click to expand...
Click to collapse
I don't ban him, he probably doesn't know... he just copy-pasted from hofo.
Also I don't delete the topic, as this is the second time posted today... already deleted one of the same before, so if i delete people will keep posting again.
It might be worth informing howardforums?? As the original post was on there?
I registered & posted warning there too....
thank you so much pof~~~~
I was going to send my friend the link who got a locked x01ht.
Dear All,
Could someone please tell me how to get the SPL back to original. Im planning to sell the phone and it basically needs to be completely as it were.
Thanks a million!
Kind Regards,
Henry
rakdoll said:
Dear All,
Could someone please tell me how to get the SPL back to original. Im planning to sell the phone and it basically needs to be completely as it were.
Thanks a million!
Kind Regards,
Henry
Click to expand...
Click to collapse
http://www.mrvanx.org/cms/index.php?option=com_content&task=view&id=59&Itemid=27
Thanks to Walshieau, Todd_jg and Olipro for helping me out with this.
This guide will take you through downgrading the Bootloader (SPL) on your Hermes device
This guide assumes you already have flashed ROMs and Other components and you are familiar with the process.
NOTE: By downgrading your SPL version your device is more vulnerable to being permenantly bricked if a flash goes wrong, by following this guide through YOU accept responsibility for any problems faced due to this operation. As with other downgrade guides this is NOT intended as a guide for claiming the warranty of the device having flashed components which are not authorised by the manufacturer or carrier.
The downgrade will take the following steps, since HardSPL does not allow itself to be downgraded directly, nor does SSPL allow versions lower than 1.09 to be flashed.
The first step is to dowgrade to SPLversion 1.10.oli. Firstly download this archive and extract the files to a temporary folder, connect your device up via the USB port and allow it to connect to activesync. Run "RUUWrapper.exe" which will fire up the RUU program:
Select 'Force SSPL' and continue the flashing process as usual.
Allow the flashing process to take place and your device will reboot.
Now check the SPL has been changed by entering bootloader mode, press and hold the side ok and power buttons then insert the stylus into the hole in the bottom of the device. Your SPL version should now read "1.10.oli".
The next step is to download the SPL you wish to finally downgrade to:
SPL 1.04 (includes IPL 1.00)
SPL 1.06 (includes IPL 1.01)
Again extract the contents to a temporary folder and connect your device to activesync via USB. Run "RUUWrapper" in this new folder.
Select the RED OPTION, and TICK THE BOX.
Then flash as normal.
This will flash the final SPL version onto your device.
Verify your SPL version once this has completed by allowing the device to boot into windows Mobile and entering the bootloader as before.
Last Updated ( Sunday, 17 June 2007 )
Oszi said:
http://www.mrvanx.org/cms/index.php?option=com_content&task=view&id=59&Itemid=27
Thanks to Walshieau, Todd_jg and Olipro for helping me out with this.
Click to expand...
Click to collapse
And *that* is the reason we helped you, so that now you help others. One day, rakdoll will help someone else. That is why we are all here. Nicely done!
how do I do this without being able to get access to the OS? now that is a challenge, but its what i need to do :O
revert back
this is what i used to flash mine back to enable original rom to be installed ,so i could take phone back for warrany reasons
Korpse said:
how do I do this without being able to get access to the OS? now that is a challenge, but its what i need to do :O
Click to expand...
Click to collapse
Shouldn't need to access OS. You should be able to do it by putting it in BL mode... THEN plug it into the usb. Then start the updater.
Its 2.30.Olipro I need to downgrade from, and you cant overwrite olipro SPL's without using SSPL by des from inside the OS, I'm trying to find another way
Korpse said:
Its 2.30.Olipro I need to downgrade from, and you cant overwrite olipro SPL's without using SSPL by des from inside the OS, I'm trying to find another way
Click to expand...
Click to collapse
2.3 is similar to 2.1.
As MrVanx's guide points out, the key is to get from 2.1 down to Oli 1.1. That will work. His guide works - guarantee it.
todd_jg said:
2.3 is similar to 2.1.
As MrVanx's guide points out, the key is to get from 2.1 down to Oli 1.1. That will work. His guide works - guarantee it.
Click to expand...
Click to collapse
Thanks for the help, but MrVanx's guide uses SSPL by des (launched from inside the OS where I can't get to) to overwrite the 2.10.Olipro to get back to 1.10.Olipro, so that method wont work for me either
Korpse said:
Thanks for the help, but MrVanx's guide uses SSPL by des (launched from inside the OS where I can't get to) to overwrite the 2.10.Olipro to get back to 1.10.Olipro, so that method wont work for me either
Click to expand...
Click to collapse
Oh interesting. A nuance I hadn't picked up on. So, when using the Force using SSPL" option in the flashing utility, you must be able to access the Phone OS? That surprises me, I thought that the RUU utility would put it on the phone even in BL mode and execute it? Hmm... strange. I guess if it is an exe, it needs the OS to run, though. Sort of makes sense. Sorry about the misdirection.
todd_jg said:
2.3 is similar to 2.1.
As MrVanx's guide points out, the key is to get from 2.1 down to Oli 1.1. That will work. His guide works - guarantee it.
Click to expand...
Click to collapse
Hi,
I'm trying to downgrade to the original SPL (I'm trying to get hold of 2.03 but can't seem to find it), so am using 1.06. I've been able to downgrade to Oli1.10 from Oli2.10, but it won't go back to 1.06 from there, after the RUU says successfully completed the SPL is still the same.
Any ideas?
Cheers
downgrade phone for rogers warranty
Hi Guys,
I need to downgrade my phone as well for warranty purposes. Unfortunately Mrvanx's guide is offline at present. Can any one of you give little further detail about what I need to get back to orginal rom/radio/spl and bootloader. Or in shor to be able to send it back for warranty. I do have a new Rogers phone if that can be of any help.
It is from Rogers and currently my boot loader screen says following:
HERM200
IPL-1.04
HERM200
SPL-2.10.Olipro
Under Device Information:
ROM version: FARIA.R-32
ROM date: 11/06/07
Radio version 1.54.07.00
Protocol Version 32.86u.7020.23H
ExtROM version: BIGSTORAGE
My replacement Rogers Phone has following:
HERM200
IPL-1.01
HERM200
SPL-1.11
Under Device Information:
ROM version: 1.34.631.14
ROM date: 04/17/07
Radio version 1.42.00.00
Protocol Version 32.75.7020.18H
Can anyone please tell me if it is even possible to do this downgrade.
Thanks
B.
why dont you just brick the phone if you are worried about them complaining over the boot loader version. If you cant access the phone i doubt they will be able (or even be bothered) to
Could you please let me know what you did? Did you downgrade To the original Rogers Radio and SPL ? Do you by any chance have all the original Rogers files (WM5, SPL, Radio,...)?
I am with Rogers too and just unlocked SIM (not CID) and installed WM6 (official HTC)
I am wondering how I could lock SIM again if I need to return the phone for Rogers warranty? or unlocking SIM does NOT void the Rogers warranty?
Thanks
Downgrade to SPL 1.11
Hi is anyone able to figure out how to downgrade from SPL 2.10 Olipro to SPL 1.11? I have tried Mr Vanx guide but at the end of the process, I get Error 260. Not sure if I am doing anything wrong.
Do I have to downgrade to SPL1.10 Olipro, before I downgrade to SPL 1.11?
Thanks
I am having some issues downgrading back to an original SPL. I've searched throughout the site and have found a lot of conflicting advice, although this thread seems to be the most relevant.
I started out the process with SPL: 2.10.Olipro
I downgraded to 1.10.oli.
This process was successful in that the bootloader screen now says that the SPL version is 1.10.oli.
Now, when I try to flash the OEM version of SPL, the phone asks the following question:
You would like to run jumpspl.exe
If I say yes, the screen goes gray and says load... but I end up with a 260 error.
I have tried turning off the usb connection in the active sync and starting from the bootloader as mentioned here, but that just ends up giving me a 264 error.
Any suggestions would be appreciated.
Cheers,
~Hat
* edit *
Post #5 from here fixed the issue.
Oszi said:
http://www.mrvanx.org/cms/index.php?option=com_content&task=view&id=59&Itemid=27
Thanks to Walshieau, Todd_jg and Olipro for helping me out with this.
This guide will take you through downgrading the Bootloader (SPL) on your Hermes device
<snip>
The downgrade will take the following steps, since HardSPL does not allow itself to be downgraded directly, nor does SSPL allow versions lower than 1.09 to be flashed.
The first step is to dowgrade to SPLversion 1.10.oli. Firstly download this archive and extract the files to a temporary folder, connect your device up via the USB port and allow it to connect to activesync. Run "RUUWrapper.exe" which will fire up the RUU program:
Select 'Force SSPL' and continue the flashing process as usual.
Allow the flashing process to take place and your device will reboot.
Now check the SPL has been changed by entering bootloader mode, press and hold the side ok and power buttons then insert the stylus into the hole in the bottom of the device. Your SPL version should now read "1.10.oli".
The next step is to download the SPL you wish to finally downgrade to:
SPL 1.04 (includes IPL 1.00)
SPL 1.06 (includes IPL 1.01)
Again extract the contents to a temporary folder and connect your device to activesync via USB. Run "RUUWrapper" in this new folder.
Select the RED OPTION, and TICK THE BOX.
Then flash as normal.
This will flash the final SPL version onto your device.
Verify your SPL version once this has completed by allowing the device to boot into windows Mobile and entering the bootloader as before.
Last Updated ( Sunday, 17 June 2007 )
Click to expand...
Click to collapse
Okay, Im back to 1.10oli, but how do I know if I need to go back to SPL 1.04 (includes IPL 1.00) or SPL 1.06 (includes IPL 1.01)?
OK people, please tell me you have looked at the updated guide right??
http://www.mrvanx.org/thg/index.php?option=com_content&task=view&id=19&Itemid=27
Yes, but the choices are,
1.04
1.06
1.09
1.11
2.03
and I don't know how to tell which one is stock for my phone. I assume I need 1.04 since my bootloader says IPL-1.00 but I'm not sure because I know that used to say IPL-1.04, and since it appears that that can change for some reason, I want to make sure I get this right so I can get this waranteed. Im going to sell it on ebay and get the new HTC Fuze as soon as AT&T releases it.