Really safe way to flash Post Dec2nd X01HT! - 8525, TyTN, MDA Vario II, JasJam Software Upgradin

EDIT (Apr 4th 2007):
The following is OLD info, use pof's unlocker v3a for automatic SIM unlock, reported to work good with Post Dec2nd X01HT...
Read further ONLY if you want ot unlock your phone manually.
NOTE: Radio flashing doesn't seems to work with newest X01HT ("white" or "March batch") because radio-bootloader version had changed! This also means that you can't SIM-unlock this phone version just yet...
* * * MANUAL SIM UNLOCK * * *
Basically it is very safe to flash Hermes phones using Olipro's Hard-SSPL 1.40 bootloader, especially with new devices with 0108 radio-bootloaders, like our precious X01HT! Also, it's time to elaborate this in more details...
WARNING: You are doing this on your own risk!
The procedure for unlocking and flashing:
Prevent bricking. Flash Olipro's Hard-SSPL 1.40!
This is most important step. By doing this you prevent many bricking scenarios!
1a. On new X01HT (or any other working phone), download and run Des's SSPL 1.09. Copy SSPL.exe on the phone or SD card and just run it from phone's file explorer. When you enter bootloader, you'll see 'rainbow' screen and something like "SPL-1.09Des" is displayed.
1b. Download Olipro's Hard-SSPL-V6. Make sure you disabled USB connection in ActiveSync before you continue. Plug your phone in USB port and run RomUpgrade.exe and follow the steps. Also you can choose 'Force SSPL' option in wich case you can skip step 1a, but then you have to keep ActiveSyncce USB connection on. After you finish, phone will reset itself. It you enter bootloader you should see something like "SPL-1.40.Olipro".
SIM unlock. Flashing pof's 1.18 radio only & manual unlock!
2a. Download pof's unlocker v3, NBHTool and CustomRUU_V4. Use NBHTool to extract pof's modified radio (NBH to NB option) from HERM_unlocker_v3.nbh (you will find that file in v3 unlocker archive). After extracting, delete IPL and SPL files, leave only radio. Now use NBHTool again to create signed radio file (NB to NBH), and save it to same folder as RUUWrapper.exe.
2b. Now run RUUWrapper and flash pof's radio. Enter bootloader on the phone, disable USB connection on ActiveSync. Radio should flash in 5-6 minutes and phone will reset.
2c. Insert SIM card other than SoftBank and enter unlock code: 22051978. Now your phone should be unlocked! If you want to stay with SoftBank's ROM, you'll need welcome.exe tweak to prevent idiotic SoftBank's OS SIM lock.
(Optional) Flashing other ROMs and RADIOs.
Use nbhtool and CustomRUU_V4 to upgrade. First extract ROM, ExtROM and radio files you want to flash form Shipped RUUs. If you really want SuperCID (it is not needed anymore because ExtROM can be unlocked other way) you can run pof's v3 unlocker from the phone. I do not advise doing that because it might void your warranty!
It is also wise to flash new radios separately form OS flashing.
Good luck!

---

I am intrested in your post.
Is it safe to flash 1.01mfg to my 1.09 bootloader?and can i do it with SSPL?

---

You can flash bootloader 1.01 on CID locked phone ONLY by using SSPL.

---

Zgembo said:
You can flash bootloader 1.01 on CID locked phone ONLY by using SSPL.
Click to expand...
Click to collapse
Thank you for the reply.you said CID locked,is that mean a phone which did not have superCID?Sorry about the question,because the word:CID lockedis not usually used.Or what you mean is CID unlocked?
And I think your method mainly differ from the other is that you think we should flash the bootloader 1.01 first.And if something goes wrong,we can use the lnb command in bootloader mode to fix it,which bootloader 1.09 have not that command support.
And if you do not superCID your device,how could the OS rom HTC 2.05.255.1 you said ran in x01ht?it is not the right cid...
Am I right?thank you very much.

---

seems to work...
Zgembo said:
I tried with other SIM card, it works, but I can't determine if I have No-GSM problem, because here in Japan there is no GSM at all...
Click to expand...
Click to collapse
i tried using my brother's sim card from the philippines and it can read it, the Sim Menu appears. i'm still in japan so i can't be sure if i can get a gsm signal when i go to the philippines.

---

confirm please
can anyone confirm if Zgembo's procedure will work on GSM Networks? it will be a great help!

---

SSPL
qvik123 said:
And if you do not superCID your device,how could the OS rom HTC 2.05.255.1 you said ran in x01ht?it is not the right cid...
Am I right?thank you very much.
Click to expand...
Click to collapse
that's what SSPL.exe does for us, it allows us to flash any rom we want without worrying about the bootloader version. it makes the upgrader think that the hermes is SuperCID.

---

@jello_e:
I did not flash HTC 2.05 OS using SSPL, but I was using bootloader 1.01, lnb commands to be precise. I flashed extracted ExtROM and OS ROM from HTC 2.05 ROM, ExtROM first! Here is the log:
Code:
USB>
USB>task 32
Level = 0
USB>lnb 04_ExtROM.nb 57500000
:F=04_ExtROM.nb
:A=57500000
:O=00000000
:L=FFFFFFFF
start NB image download
S
Load ADDR: 57500000 Length: AAA000
H***************************************
****************************************
*******LAST BLOCK, dwBytesCollected=0x16000
Code entry point at 0x57FA0000
USB>task 32
Level = 0
USB>task 28
Storage format start
Write Nand Success
dwBlockToWrite = 13
Storage start block: 491
Storage Total block: 445
Total Bad Block in CE: 0
NeedToEraseBlockStart: 504
Storage format success
USB>lnb 06_OS.nb
:F=06_OS.nb
:A=501A0000
:O=00000000
:L=FFFFFFFF
start NB image download
SH
Load ADDR: 501A0000 Length: 39E4000
***************************************
****************************************
****************************************
****************************************
****************************************
****************************************
****************************************
****************************************
****************************************
****************************************
****************************************
*************************LAST BLOCK, dwBytesCollected=0x1C000
Code entry point at 0x53B80000
Write Nand Success
USB>task 28
Storage format start
Write Nand Success
dwBlockToWrite = 13
Storage start block: 473
Storage Total block: 463
Total Bad Block in CE: 0
NeedToEraseBlockStart: 486
Storage format success
USB>task 8
qvik123 said:
Thank you for the reply.you said CID locked,is that mean a phone which did not have superCID?Sorry about the question,because the word:CID lockedis not usually used.Or what you mean is CID unlocked?
And I think your method mainly differ from the other is that you think we should flash the bootloader 1.01 first.And if something goes wrong,we can use the lnb command in bootloader mode to fix it,which bootloader 1.09 have not that command support.
And if you do not superCID your device,how could the OS rom HTC 2.05.255.1 you said ran in x01ht?it is not the right cid...
Am I right?thank you very much.
Click to expand...
Click to collapse
Bootloader 1.01 allows us to flash any ROM, no previous SuperCID unlocking is necessary... But to get 1.01 bootloader you need "virtual" SuperCID status, and we can accomplish that using SSPL...

---

Zgembo said:
:
Bootloader 1.01 allows us to flash any ROM, no previous SuperCID unlocking is necessary... But to get 1.01 bootloader you need "virtual" SuperCID status, and we can accomplish that using SSPL...
Click to expand...
Click to collapse
Thank you for the reply.I just successfully flashed 1.01mfg with sspl.Then I pressed OK & PWR to activate it,it shows
HERM200
IPL-1.01
HERM200 MFG
SPL-1.01
on device,and when I use mtty to test,here is the result
USB>
USB>task 32
Level = FF
USB>info 2
HTCSVODAK801彌?HTCEUSB>
USB>lnb
Command error !!!
USB>
so I guess I still can not flash a os rom by using 1.01mfg,
But to get 1.01 bootloader you need "virtual" SuperCID status, and we can accomplish that using SSPL..., do you mean I still need to run sspl to flash ext rom and os rom?How do sspl create a virtual SuperCID for 1.01mfg?
And,I still had not flashed the customed radio,will that a reason for the command response above instead of level = 0 like you?
Thank you!

---

please elaborate
Zgembo said:
Ok, I made some minor risk and tried to flash my Post Dec2nd X01HT in a non-standard way. Here is the procedure or what I've done:
0. PREPARED by Hard-reseting Hermes, and not allowing Extended ROM to run. (Soft reset right after hard reset, when "Customizing device..." started)
1. Run SSPL-HERM from the phone http://forum.xda-developers.com/showthread.php?t=293651
2. Flashed Hermes bootloader 1.01 http://wiki.xda-developers.com/index.php?pagename=Hermes_BootloaderMFG
3. Restart Hermes and used SSPL-HERM again to flash pof's custom radio 1.18 manually (run RUU/ROMUpgradeUt.exe) http://pof.eslack.org/hermes-unlocker/
4. Restart Hermes and flash HTC 2.05.255.1 Shipped Extended ROM and OS ROM using bootloader 1.01 ONLY! (I flashed Extended ROM first, and then, without restarting, OS ROM) http://wiki.xda-developers.com/index.php?pagename=Hermes_BootloaderMFG
5. Inserted non-SoftBank SIM and restarted. Input manually SIM unlock code: 22051978
That's it. I only tried with 2.05 HTC test ROM but there is no reason for this procedure not to work with other ROMs...
I tried with other SIM card, it works, but I can't determine if I have No-GSM problem, because here in Japan there is no GSM at all...
Good luck!
Click to expand...
Click to collapse
Zgembo, thanks for this new technique! More will appreciate it if you elaborate on the steps a little bit more. This is the stuff most of us in Japan are waiting for. I hope Pof comments on this thread as most people trust his opinions, and if the Masters here, including Zgembo, could back these steps up and confirm then we'll have a happier Hermes world!

---

superCID
@Zgembo:hmmm i think this is a little off topic but i was trying to follow your procedure step by step but before going to step no 1, i tried info 2 using mtty and it says my device is SuperCID. maybe the SuperCID option in pof's unlocker v3 did stick.
note:
- i was on HTC 1.35 rom from S.Africa... (locked 1.09 X01HT)
- used pof's unlocker v3, successfully unlocked and SuperCID'ed.
- re-Flashed Softbank ROM bl 1.09 using SD Card.

---

jello_e said:
Zgembo, thanks for this new technique! More will appreciate it if you elaborate on the steps a little bit more. This is the stuff most of us in Japan are waiting for. I hope Pof comments on this thread as most people trust his opinions, and if the Masters here, including Zgembo, could back these steps up and confirm then we'll have a happier Hermes world!
Click to expand...
Click to collapse
I have the same idea,thank a lot for this.And waiting further comments from senior profs.This is really a SAFE way to flash X01HT,and even other phones.

---

Finally I successfully flashed WM6 XDA live os rom with this method.Here is the mtty log and hope it will be helpful for the others.
Note the 02_OS.nb is the file which extracted from the xda-live 0.10 rom.
Code:
USB>task 32
Level = 0
USB>task 28
Storage format start
Write Nand Success
dwBlockToWrite = 13
Storage start block: 491
Storage Total block: 445
Total Bad Block in CE: 0
NeedToEraseBlockStart: 504
Storage format success
USB>lnb 02_OS.nb
:F=02_OS.nb
:A=501A0000
:O=00000000
:L=FFFFFFFF
start NB image downloadS
Load ADDR: 501A0000 Length: 43CB000
H***************************************
****************************************
****************************************
****************************************
****************************************
****************************************
****************************************
****************************************
****************************************
****************************************
****************************************
****************************************
****************************************
************************LAST BLOCK, dwBytesCollected=0x15000
Code entry point at 0x54560000
Write Nand Success
USB>task 28
Storage format start
Write Nand Success
dwBlockToWrite = 13
Storage start block: 534
Storage Total block: 402
Total Bad Block in CE: 0
NeedToEraseBlockStart: 547
Storage format success
USB>task 8

---

qvik123 said:
Thank you for the reply.I just successfully flashed 1.01mfg with sspl.Then I pressed OK & PWR to activate it,it shows
HERM200
IPL-1.01
HERM200 MFG
SPL-1.01
on device,and when I use mtty to test,here is the result
USB>
USB>task 32
Level = FF
USB>info 2
HTCSVODAK801彌?HTCEUSB>
USB>lnb
Command error !!!
USB>
so I guess I still can not flash a os rom by using 1.01mfg,
But to get 1.01 bootloader you need "virtual" SuperCID status, and we can accomplish that using SSPL..., do you mean I still need to run sspl to flash ext rom and os rom?How do sspl create a virtual SuperCID for 1.01mfg?
And,I still had not flashed the customed radio,will that a reason for the command response above instead of level = 0 like you?
Thank you!
Click to expand...
Click to collapse
It seems you should had flashed pof's unlocker radio prior to flashing from bootloader 1.01... Anybody to confirm this?

---

jello_e said:
Zgembo, thanks for this new technique! More will appreciate it if you elaborate on the steps a little bit more. This is the stuff most of us in Japan are waiting for. I hope Pof comments on this thread as most people trust his opinions, and if the Masters here, including Zgembo, could back these steps up and confirm then we'll have a happier Hermes world!
Click to expand...
Click to collapse
I will elaborate in details later... I understand it could be language problem for japanese users too, unfortunately my Japanese is not good enough to provide detailed info... Someone could help?

---

Zgembo said:
It seems you should had flashed pof's unlocker radio prior to flashing from bootloader 1.01... Anybody to confirm this?
Click to expand...
Click to collapse
Yes that is right.Finally,I flashed the pof's radio and then the radio level becomes 0 and I can use lnb as well.

---

i think as long as you have the hermimg.nbh and an sd card, you can always recover from the "No GSM" or "stuck on bootloader/white screen" error.
i did a do or die thing with my hermes and i think the risk paid off...
i flashed the HTC 2.05.255.1 test rom after using pof's unlocker v3 and i never had the "no GSM" error.
popped in a Docomo sim and it works...
popped in a GSM sim and the STK Menu appeared, sim manager can read the sim card... although i have no way of testing the GSM signal. the phone doesn't reject the simcard it just simply says "No Service" which is an obvious fact. now all i have to do now is go back home to the philippines and test if GSM works... or if a good soul can do what i did and is in a GSM country now, a confirmation would be nice.

---

wooohoooo
qvik123 said:
I have the same idea,thank a lot for this.And waiting further comments from senior profs.This is really a SAFE way to flash X01HT,and even other phones.
Click to expand...
Click to collapse
not just a SAFE way to flash but a SAFE way to Unlock our darn S-ftbank phones.
how does the X01HT react to the XDA Live rom? any bugs so far?

---

jello_e said:
not just a SAFE way to flash but a SAFE way to Unlock our darn S-ftbank phones.
how does the X01HT react to the XDA Live rom? any bugs so far?
Click to expand...
Click to collapse
The only "bug" I have is when the screen is locked sometimes the soft buttons dont change to "unlock"
Also, no way to access flat-rate after April 1st.

---

same old prob...
jokinawa said:
Also, no way to access flat-rate after April 1st.
Click to expand...
Click to collapse
same old problem huh... i can't believe softbank... really... off topic, but hell, it is so frustrating!!!