[Resolved] How to format rom? (detailed steps in post #9) - Touch Diamond2, Pure ROM Development

after a number of rom-flashing, i start to encounter some strange and random machine halt. according to some articles, it was suggested that formatting using mtty may help.
could anybody advise what command i should use in mtty or putty in order to do a format? is it still "task 29" as other devices? is it safe to apply the same steps as the Diamond mtty thread on my Topaz?
or, would this tool under the Leo forum work on Topaz as well?
http://forum.xda-developers.com/showthread.php?t=644781
i tried to google on above, but can not yet find a specific answer for Topaz (but only for some other devices).
thanks in advance.

pp18 said:
after a number of rom-flashing, i start to encounter some strange and random machine halt. according to some articles, it was suggested that formatting using mtty may help.
could anybody advise what command i should use in mtty or putty in order to do a format? is it still "task 29" as other devices? is it safe to apply the same steps as the Diamond mtty thread on my Topaz?
or, would this tool under the Leo forum work on Topaz as well?
http://forum.xda-developers.com/showthread.php?t=644781
i tried to google on above, but can not yet find a specific answer for Topaz (but only for some other devices).
thanks in advance.
Click to expand...
Click to collapse
Don't know about the tool you mention, but i've been using mtty (with the same steps described in the diamond thread) and got no issues. (task 29 is working ok). Just remember to put a ROM (named TOPAIMG.nbh) in the root of the SD card, so you can flash right after.
p.s. for me is working fine, but i don't take any responsibility in case of trouble (just a disclaimer...)

pp18 said:
after a number of rom-flashing, i start to encounter some strange and random machine halt. according to some articles, it was suggested that formatting using mtty may help.
could anybody advise what command i should use in mtty or putty in order to do a format? is it still "task 29" as other devices? is it safe to apply the same steps as the Diamond mtty thread on my Topaz?
or, would this tool under the Leo forum work on Topaz as well?
http://forum.xda-developers.com/showthread.php?t=644781
i tried to google on above, but can not yet find a specific answer for Topaz (but only for some other devices).
thanks in advance.
Click to expand...
Click to collapse
Yes, the same applies to Topaz. I was using mtty and "task 29" this morning to clear my device's internal storage .

pp18 said:
after a number of rom-flashing, i start to encounter some strange and random machine halt. according to some articles, it was suggested that formatting using mtty may help.
could anybody advise what command i should use in mtty or putty in order to do a format? is it still "task 29" as other devices? is it safe to apply the same steps as the Diamond mtty thread on my Topaz?
or, would this tool under the Leo forum work on Topaz as well?
http://forum.xda-developers.com/showthread.php?t=644781
i tried to google on above, but can not yet find a specific answer for Topaz (but only for some other devices).
thanks in advance.
Click to expand...
Click to collapse
it is working on topaz too. you just neet to put in topaz raio instead of that one in dir

thanks all for your help!
just now i was able to use PSAS (http://revskills.de) to enter the terminal mode (so as to skip the driver installation steps for vista64), follow the bootloader commands in the Diamond mtty thread to format the storage (bad block detected as expected), and flashed the Energy Mar-20 rom.
can enjoy flashing again.

pp18 said:
thanks all for your help!
just now i was able to use PSAS (http://revskills.de) to enter the terminal mode (so as to skip the driver installation steps for vista64), follow the bootloader commands in the Diamond mtty thread to format the storage (bad block detected as expected), and flashed the Energy Mar-20 rom.
can enjoy flashing again.
Click to expand...
Click to collapse
hi ,
i want to try it too.
can you write more detailed procedure.
10X

yes. elaborate it a little so we can have that option too

pp18 said:
thanks all for your help!
just now i was able to use PSAS (http://revskills.de) to enter the terminal mode (so as to skip the driver installation steps for vista64), follow the bootloader commands in the Diamond mtty thread to format the storage (bad block detected as expected), and flashed the Energy Mar-20 rom.
can enjoy flashing again.
Click to expand...
Click to collapse
Thanks for informing us about PSAS, it really makes life with HTC much easier
Will try it out next time I flash.

IMPORTANT NOTE to those who didn't do a format before:
please carefully read AT LEAST the first 4 posts of the mtty thread to learn what you're going to do.
Procedures of formatting the rom:
1: Install PSAS (http://revskills.de/) to your Windows PC
2: For Windows Vista/7, open up Windows Mobile Device Center, go to Preferences and uncheck "Use usb connections"
3: Bring device into bootloader (Reset + Hold Vol Down), this will show the Red, Blue, Green screen showing "Serial" - Connect device in bootloader mode to USB, the word "Serial" will change to "USB"
4: Follow instructions in the following post to enter the device's bootloader command prompt:
http://forum.xda-developers.com/showpost.php?p=5427496&postcount=23
Code:
---------------------
MTTY OUTPUT:
---------------------
CMD>
---------------------
[i]type "set 14 0" without the quotes to tell bootloader to boot the OS after reset:[/i]
---------------------
MTTY OUTPUT:
---------------------
CMD>set 14 0
HTCST ÚÈHTCEUSB>
---------------------
[i]type "task 29" to get your device formatted:[/i]
---------------------
MTTY OUTPUT:
---------------------
Cmd>task 29
Format BINFS start
Fill RSVD information for block 288 to 321
CE start sector=0x14, total sector of CE and TFAT=0x14
CE start start block=321, total block=1727
ERASE block 1337 FAIL !!!
Write 0xFF start page=0x5040, total page=0x1AFC0
Format BINFS end
Cmd>
---------------------
[i]type "task 8" to ask your device reboot:[/i]
---------------------
MTTY OUTPUT:
---------------------
Cmd>task 8
Cmd>
---------------------
5: DISCONNECT your device from PC
6: enter bootloader again to flash your favorite rom from SD card, i.e.
6a. Download a ROM of your Choice, RENAME the *.nbh for your ROM to TOPAIMG.nbh
6b. Prepare an SD Card (must be formatted in FAT32) and copy TOPAIMG.nbh to the root directory of the card
6c. enter bootloader by: hold Vol-Down + poke soft reset red button​
Thanks to the original authors
most of the above are copy-and-paste from the following posts:
1. the Diamond mtty thread
2. the instructions given by the author of PSAS

thank u, man.
it's work like a charm!

pp18 said:
thanks all for your help!
just now i was able to use PSAS to enter the terminal mode (so as to skip the driver installation steps for vista64), follow the bootloader commands in the Diamond mtty thread to format the storage (bad block detected as expected), and flashed the Energy Mar-20 rom.
can enjoy flashing again.
Click to expand...
Click to collapse
I use MTTY to do this.The driver for win7&vista both 32&64 are attached.
Anyone who want to format your ROM can follow this:
For Win7 system,please install drivers
Code:
1.Go to the 3color screen ,Plug in your cable and wait until "USB" appears.
2.Go to the "Device manager" of your computer and check the property of "Microsoft USB Sync" or*"HTC*USB Sync"
3.Choose "Update drivers",Check whether the driver is made in "2007"
4.Install the driver manually and the driver file is "wceusbsh.inf".
5.Check the driver's date again after installing it.The date for x86 should be "2004" and x64 is "2003"
*
The rest is just open MTTY*and configure the port to USB:
enter these commands:
Code:
set 14 0
task 29---------->This is to format BINFS
task 8 ----------->This command can restart your phone

Here's a better, easier one!
Here's a better, easier one
[REF] Task 29 (format) without drivers, without mtty.. It worked on my Topaz. Just make sure you change the radio file to the Topaz radio.

illi said:
Here's a better, easier one
[REF] Task 29 (format) without drivers, without mtty.. It worked on my Topaz. Just make sure you change the radio file to the Topaz radio.
Click to expand...
Click to collapse
Tried your way. Everything was fine with flashing. Let's see whether there are any improvments...

ayl said:
Tried your way. Everything was fine with flashing. Let's see whether there are any improvments...
Click to expand...
Click to collapse
I have not seen any improvement. Just flashed Mondilv v4.3 Beta1. Let's see after a few days.

Related

XDAtools for XDA II?

Can we use XDATools to backup and restore XDA II ROM? Or XDA II provide a way to do the ROM backup and restore?
vbexpert said:
Can we use XDATools to backup and restore XDA II ROM? Or XDA II provide a way to do the ROM backup and restore?
Click to expand...
Click to collapse
is there a way to enter Bootloader method for XDA II?
You can enter bootloader on xda ii via power+any direction button+reset. Word of warning, it will hard reset as well.
palmop said:
You can enter bootloader on xda ii via power+any direction button+reset. Word of warning, it will hard reset as well.
Click to expand...
Click to collapse
Does it have the option to backup and restore ROM? Thanks!
it has d2s command to dump rom to sd, but don't know the reverse...
s2d like on an ipaq ?
is that a raw command on terminal software?
maybe its the same on ipaq?
lets find out
didnt get the terminal software to work though
dunno witch
found this
Here's how:
1. First insert the formatted SD card to the healthy iPAQ. Connect the cradle/cable to your computer's serial port. Install the A/C adaptor to your cradle.
2. Prepare the healthy 39xx to enter DEBUG mode:
- press and hold button: power, contacts, and inbox, and do pin reset.
- if your iPAQ shown all-red COMPAQ display, with 'SERIAL' text above, then you're in the debug mode.
- sit the debugged iPAQ to the cradle.
2. Open hyper-terminal, make a new connection, using these setting:
- the COM port where the iPAQ is connected.
- 115,200 bps
- 8 databits
- no parity
- 1 stop bit
- NONE handshaking.
- Connect!
3. Once connected, hit once to show the prompt SER>
4. On prompt SER> type "?" for displaying all the commands avail.
5. On this process of ressurection, we'll gonna use only two command: "d2s" (device to storage) and "s2d" (storage to device).
6. type "d2s" and hit .
7. The ROM copying process will begun, and you'll see a 'progress bar'. This may take apprx. 10 minutes.
8. When it's finished, you'll see the confirmation on both of your hyper-terminal screen and your iPAQ.
9. Disconnect the hyper terminal session.
Now the resurrection steps:
1. Prepare your dead 39xx to debug mode.
2. insert the SD card (which is now already filled with the 39xx ROM)
3. start a session on your hyperterminal again (using the same setting as above).
4. once connected, hit once to shown the SER> prompt.
5. type "s2d"
6. Your iPAQ will display a warning that current ROM will be erased, press 'power' button to confirm.
7. Starting the process of erasing the ROM of your dead iPAQ. This will take apprx. 7-9minutes.
8. Once the erasing process is done, it will automatically re-write the ROM of your dead iPAQ with the NEW ROM from the healthy iPAQ. This process took much longer, apprx 15 minutes.
9. When the copying process' done, both of your iPAQ and hyperterminal will shown an OK confirmation.
10. Disconnect the hyperterminal session.
11. Unplug your iPAQ from its cradle, do a soft reset.
12. Your dead iPAQ's risen!
gonne TRY !!!!
ITS WORKING
downloading rom now from my phone for backup
ftp://ftp.hilgraeve.com/htpe/htpe63.exe
for direct terminal software download
** rom is now on my card.
but how to replace the rom with an english one.
you cant read the card anymore
There has to be a way to dump that SD to a file. For me I can go to my friend's house and dump his English ROM and put it on my MDA II, but for many others, they'll need a file. Let's focus on how to do this.
I got MDA II from germany couple of days ago, and have been stuck with the German language. I've been searching and seaching for English ROM for couple of days and still no luck.
Can someone PLEASE please please make an image of the English ROM of their XDA 2 and post it here.
Thanks in advance
I will post it, as soon as I can get my hands on it
we just need to find another xda2 with english rom
and then dump that one
and use the rom for you own
I need the German XDA II ROM (because I have a MDA II, but I have an O2 card).
Can anyone dump a German XDA II ROM please!?!
how do i make a backup/image of the ROM? please give me step by step instructions. Thanks.
Backup & Restore of ROM MDAII
Hi all,
to backup your ROM:
1) put your device in bootloader mode
2) connect via cradle
3) use any terminal (minicom) to connect to the used port (/dev/ttyUSB0)
- you should see something like 'USB>' or 'SER>'
4) put an SD Card into device
5) type d2s on command prompt
to restore your ROM:
1) put your SD-Card into device
2) put your device in bootloader mode
3) the device will ask you to press power to flash the rom
and how do we change the rom on that SD?
We cant read the files
its formated in a non standard way
How to backup the Radio Stack of MDAII??
are there any possibilities to backup and restore the radio stack using the bootloader method?
thanks a lot,
bio
akira Posted: Sun Nov 16, 2003 18:48 Post subject:
--------------------------------------------------------------------------------
and how do we change the rom on that SD?
We cant read the files
its formated in a non standard way
Click to expand...
Click to collapse
Did you tried with WinHex software?
It is not formatted in FAT/FAT32/NTFS, etc. Thus WinHex can't read it...

Reverse engineering the HERMES imei-check unlocker

I am trying to capture the unlock of my M3100 to help the forum.
I followed the directions below...
fun_key said:
What you need befor you start:
USBMON (I used the trial): http://www.hhdsoftware.com/usbmon.html
A win 2k/XP computer with admin rights
How to fool the IMEI-CRACK tool:
-Login with the administrator and setup USBMON
-Create with the administrator a user (named wathever you like) with only "user" or "powered user" rights
-Log in with the user you just created (you may have to resetup Active sync with this user; I don't know why but it seems that active sync doesnt setup for all user)
-Right click on the USBMON icon and select "run as"; input the administrator credential and configure the software ready for the capture
-Launch the crack and follow the instruction
And voila ! The dump should be achieved by now
Click to expand...
Click to collapse
I had to create another admin account as the unlock UTIL requires that you use the Admin account. I have been able to RUN USBMON while starting the unlock and it put the M3100 in the white unlock screen but then get an error and the util has shut down.
Any Ideas? I don't mind waiting to unlock so I help th community out...
OK...I think I captured it....The unlocked changes to a different driver type in the middle of the unlock. So I started a new session with the "NEW" device I think I captured it all but what do I do with this file now?
slimsaturn said:
OK...I think I captured it....The unlocked changes to a different driver type in the middle of the unlock. So I started a new session with the "NEW" device I think I captured it all but what do I do with this file now?
Click to expand...
Click to collapse
attach it here
Alright...POF They are too big to attach....Anywhere else I can throw them? If someone tells me how to upload them to the FTP I will do ASAP...Hopefully this is able to help someone. If I did miss the crucial info i am sorry for failing
no problem, i'm sure it will be juicy
Put them here:
ftp://xdaupload:[email protected]/Hermes/
USERNAME: xdaupload
PASSWORD: xda
let me know when the files are uploaded.
OK so I am getting a 530 Permission Denied error. Can i just email them or someone let me know what I am doing wrong
Email them to me.
sexy [email protected] vijay555.com
V
Finally the files are here:
ftp://xda:[email protected]/Hermes/Technical/unlocker-capture.zip
Going to have a look at them right now! will post something later
pof said:
Finally the files are here:
ftp://xda:[email protected]/Hermes/Technical/unlocker-capture.zip
Going to have a look at them right now! will post something later
Click to expand...
Click to collapse
Good Deal...hopefully this helps us
Slimsaturn!! You got it right
This is more or less what the unlocker does, will explain it in another post:
Code:
retuoR
USB> shmsg 8 2 "unlocking..."
USB> rtask a
[COLOR="Red"]Enter Radio Bootloader[/COLOR]
USB> rpass
HTCS-[url=http://wiki.xda-developers.com/index.php?pagename=Hermes_BootLoaderPassword]dyamic password[/url]-HTCE
...
USB> rversion
[COLOR="Red"]0106[/COLOR]
rrbmc x 6D0000 8000
rwdata 4D0000 800
[HTCS]- code, to big to paste here -[HTCE]
retuoR
USB> rtask b
[COLOR="Red"]Enter radio Image
AT-Command interpeter ready[/COLOR]
[email protected]=0,1,22051978
[email protected]=0,2,22051978
[email protected]=0,4,22051978
[email protected]=0,8,22051978
[email protected]=0,16,22051978
[email protected]=0,32,22051978
AT
retuoR
USB> shmsg 8 2 " done"
USB> task 8
Is that from what I sent you
slimsaturn, yes this has been taken from the files you posted (Thanks!).
Here is the process explained, if you don't understand anything check the wiki bootloader page for a better explanation.
Code:
retuoR
Returns from radio bootloader to normal bootloader, probably here because the capture was not started at the very begining of the unlocker process
Code:
USB> shmsg 8 2 "unlocking..."
USB> rtask a
[COLOR="Red"]Enter Radio Bootloader[/COLOR]
Shows "unlocking..." on hermes screen, enters radio bootloader
Code:
USB> rpass
HTCS-[url=http://wiki.xda-developers.com/index.php?pagename=Hermes_BootLoaderPassword]dyamic password[/url]-HTCE
Sends "rpass \r" (mind the space between rpass and \r), then sends "HTCS" + the password + the CRC of the password as bytes + "HTCE".
This authenticates to the radio bootloader (to be able to use the rrbmc command later), the password is dynamic (but the method to generate it is known) and sent encapsulated on a HTCS+password+CRC+HTCE block.
It should either return "T " for succes, or "F " for failure (encapsulated in the HTCSHTCE block), in the capture it returns "T".
Code:
USB> rversion
[COLOR="Red"]0106[/COLOR]
returns radio version encapsulated in HTCS HTCE block.
Code:
rrbmc x 6D0000 8000
Read back 32768 bytes (0x8000) of memory content from address 6D0000 and save the data to a file named "x".
@slimsaturn: do you have a file named "x" on your computer? can you send it too? if not, can you try to "undelete" it with some tool...?
Code:
rwdata 4D0000 800
[HTCS]+(2048 bytes of code, to big to paste here)+(4 bytes crc)+[HTCE]
This writes 2048 bytes (0x800) of data to address 4D0000, the data is sent encapsulated on HTCSHTCE block as well. I guess this does the CID unlocking.
These 2048 bytes are on the attachment, if anyone wants to look at (hint: compare it with extracted radios using an hex editor).
Code:
retuoR
USB> rtask b
[COLOR="Red"]Enter radio Image
AT-Command interpeter ready[/COLOR]
Returns from radio bootloader to normal bootloader, then enters the AT command interpreter to talk to GSM AT cmd interface.
Code:
[email protected]=0,1,22051978
[email protected]=0,2,22051978
[email protected]=0,4,22051978
[email protected]=0,8,22051978
[email protected]=0,16,22051978
[email protected]=0,32,22051978
This enters the same sim unlock code to all locking facilities (2,4,8,16,32). The code here is 22051978, I guess this code is calculated from what has been previously read by rrbmc command. Will be a different code on every device. Weird that it doesn't get the locked facility first, it just tries all them.
Code:
retuoR
USB> shmsg 8 2 " done"
USB> task 8
This exits from the AT command interpreter, shows "done" on the Hermes screen and reboots the device.
Now I'm going to try the 'rrbmc' command on my hermes and see what is read from there... I've also found that the content written to device by rwdata has some strings in common on GSM.nb (radio) extracted from NBH update, so it's part of the radio.
pof said:
@slimsaturn: do you have a file named "x" on your computer? can you send it too? if not, can you try to "undelete" it with some tool...?
Click to expand...
Click to collapse
Sure...I will check my recycling BIN tonight. If I can't find it there do you have utility that I can use to search my PC to try to locate it?
It will not be in the recycle bin, it will be either on the folder you run the unlocker from, or on the c:\temp c:\windows\temp
The exact size of the file is 32768 bytes, it is named "x" (without extension).
If the unlocker has removed the file (most probably) then it will be removed (but not in the recycle bin!) so you will need to use some software to undelete removed files, I don't know any but google may help.
Pof, I just tried running the unlocker with file i/o monitoring, and didn't see it produce a file called X (or anything else that looked like a likely candidate)
Maybe we can do a before and after dump of the radio patch - it'll probably be using a similar idea to the Universal unlocker if it's overwriting the radio.
V
pof said:
It will not be in the recycle bin, it will be either on the folder you run the unlocker from, or on the c:\temp c:\windows\temp
The exact size of the file is 32768 bytes, it is named "x" (without extension).
If the unlocker has removed the file (most probably) then it will be removed (but not in the recycle bin!) so you will need to use some software to undelete removed files, I don't know any but google may help.
Click to expand...
Click to collapse
Alright I will check tonight. I am guessing this is the missing link to fully understand what happens.
help needed
I need the help from someone who hasn't unlocked their phone yet and is willing to pay imei-check the 20GBP: I need to compare two regions of the radio before and after running the unlocker.
These are the steps to follow:
1) Disable activesync on your computer by right click on activesync icon -> connection settings -> uncheck "allow USB connections".
2) Put your device in BootLoader mode
3) Connect device to computer using USB cable.
4) Download TryBootloader.exe and run it.
5) TryBootloader fails most times you run it with one of these errors:
"Could not enter bootloader mode" or "SetCommState failed Could not open device " you need to reset your device and put it in bootloader mode again, and keep trying until you get this (usually no more than 5 or 6 tries):
Code:
USB>info 3
password ~:0T4~~000~X~000
Entered advanced bootloader
rtask a
rtask a
Enter Radio Bootloader
rinfo
rpass
Retval:
T
Entered radio bootloader
6) Once TryBootloader successfully authenticates you, open mtty.exe and select "USB" port and click "OK", this time you will not get the usual "USB>" prompt because you will already be in radio bootloader, but this should give you an authenticated command line in radio bootloader where you have all commands enabled.
7) Start HHD USBMonitor.
8) File -> New session -> USB Monitor -> Select USB device where your phone is connected -> Check "request view" -> Finish
9) In the upper part there are two tabs: basic and complete. Click on "Complete".
10) Type these commands in mtty window (do not copy paste, type them!) please note that you will not get any output (echo) on the screen when typing because you are on radio bootloader:
Code:
[b]rrbmc a 6D0000 8000[/b]
You will see a lot of garbage in the mtty screen, don't worry... when it finishes, type the next command:
[b]rrbmc b 4D0000 800[/b]
You will see a lot of garbage in the mtty screen again, don't worry... when it finisheds, close mtty.
11) you should see all the USB traffic output on USB monitor window.
12) click on Edit -> Export and Save as type "ANSI Text files".
13) Save the file and zip it. Name it "dump-before-unlock.zip"
14) Enable USB connections on ActiveSync again, softreset your Hermes and make sure activesync icon is "green" again.
15) Run the imei check unlocker as normal, following their instructions.
16) Once your phone is unlocked, repeat steps 1 to 13 but this time name the file "dump-after-unlock.zip"
17) Post a comment here and attach the two files, if they are too big upload them to xda-developers ftp.
After that we'll have everything to start working on a free unlocker
PS: I am traveling from Spain to Germany tomorrow and will be 1 week "away" without internet connection, I hope someone will have uploaded the files when I come back!!!
Awesome on the Stick
slimsaturn said:
I am trying to capture the unlock of my M3100 to help the forum.
I followed the directions below...
I had to create another admin account as the unlock UTIL requires that you use the Admin account. I have been able to RUN USBMON while starting the unlock and it put the M3100 in the white unlock screen but then get an error and the util has shut down.
Any Ideas? I don't mind waiting to unlock so I help th community out...
Click to expand...
Click to collapse
Humm, interesting, when I tried it didn't required the admin rights so far. I tried this a quite long time ago, I may have forgot something or they may have updated there util.
@pof: You were talking about CID unlocking. I don't think that the IMEI tool is still able to make the tytn Super CID. I have used it about 2 months ago and my device is far from being super CID . Slimsaturn, could you please give us the CID of your device in order to check what really happen down there?
EDIT: I found the exe program when I tested the dump. There is now an updated version of the .exe on there website. I guess that it could be interesting to test differents version of the tool, in order to better understand what it realy does and how it does it.
I upload here the older version, it can maybe interest someone. I ll give more tries with the newest version, if it is able to handle my radio version.
nice work
my £20 donation is sitting here waiting for you guys!!!!!!!!!!
anything i can do to help?

device id problem - nothing helps!

After reading hundreds of posts about this error 244 - invalid device id and trying every remedy proposed, I'm still stuck with this bootloader info:
E
IPL-v1.00
E
SPL-v1.25.Olipro
Instead of the "E"s there should be an "ATH100" or so, shouldn't it? No wonder my Ameo won't flash from the SD card.
I stepped into this mess after upgrading from the official T-Mobile WM6.0 to first Athena 4.0 and then to Michi's WM6.1 R6.0 without checking the SPL version. I thought that I have read that Athena 4.0 would upgrade the SPL, but had to learn that Vanilla doesn't the hard way.
Now, how do I get rid of the nasty "E"s?
i also have the same problem
No way to make the MTTY trick work
Additional information:
There seems to be no way to make cmonex' MTTY trick work. I always get tis "Fail to synchronize with the host(1)" error. I tried to run MTTY from C:/ to no avail. And I never got MTTY 0513 to show the USB option while 01.42 does.
ThomasPauli said:
Additional information:
There seems to be no way to make cmonex' MTTY trick work. I always get tis "Fail to synchronize with the host(1)" error. I tried to run MTTY from C:/ to no avail. And I never got MTTY 0513 to show the USB option while 01.42 does.
Click to expand...
Click to collapse
Did you read this link http://www.xxacsxx.wg.am/ameorepair.html
also here about mtty http://forum.xda-developers.com/showpost.php?p=2156258&postcount=36
and I know you probably read this but
http://forum.xda-developers.com/showpost.php?p=2154726&postcount=33
It took me a little while to get it right but it can be done
Still no success
lakeman said:
Did you read this link http://www.xxacsxx.wg.am/ameorepair.html
also here about mtty http://forum.xda-developers.com/showpost.php?p=2156258&postcount=36
and I know you probably read this but
http://forum.xda-developers.com/showpost.php?p=2154726&postcount=33
It took me a little while to get it right but it can be done
Click to expand...
Click to collapse
Dear lakeman,
thanks for your advice. Except for the mtty post I kew all the others and followed them step by step. I redid them after the hint with the USB cable and I even changed the USB port - still "Fail to synchronize".
What seems interesting is that MTTY 0513 does not show the USB option when the older version does.
More info: Results form lnbs & info 7
Cmd>task 32
Level = 0
Cmd>lnbs mac.bin 75108000
:F=mac.bin
:A=75108000
:O=00000000
:L=FFFFFFFF
start NB image download
Fail to synchronize with the host (1)
Cmd>info 7
HTC Integrated Re-Flash Utility for bootloader base Version : 1.51d S025
PLATFORM:ATHE100
IPL Version : 1.00
SPL Version : 1.25.Olipro
Built at: Sep 23 2007 22:47:28
Copyright (c) 1998-2007 Olipro & HTC - Hard-SPL
Turbo=312, Run=208
Memory Frequency = 208 MHz
SDRAM Frequency = 104 MHz
Board ID is: 6
These results are completely independent from wether the binary file ist there or not, if I use a full path name or have everything in C:\
Isn't it frustrating!
Isn't it frustrating!
I remember i fiddled around for a while to get it right
and I think the last thing I did was to try under Winxp.
You might try talking to cmonex on irc://freenode/xda-devs
or PM to her on XDA devs
lakeman said:
Isn't it frustrating!
I remember i fiddled around for a while to get it right
and I think the last thing I did was to try under Winxp.
You might try talking to cmonex on irc://freenode/xda-devs
or PM to her on XDA devs
Click to expand...
Click to collapse
Dear lakeman,
thanks again, but what do you mean with "PM" ? (Since I have no IRC client and do not intend to have one)
Regards, Thomas
lakeman said:
Isn't it frustrating!
I remember i fiddled around for a while to get it right
and I think the last thing I did was to try under Winxp.
You might try talking to cmonex on irc://freenode/xda-devs
or PM to her on XDA devs
Click to expand...
Click to collapse
Dear Friends,
thanks for your help! I managed to revive my little Athena! Today, I took it to work, connected it to my desktop, disabled USB in ActiveSync, put little Athena in bootloader and conneted it to my desktop, started MTTY 0513 which immediately 'saw' the USB device. From then on it was only a matter of minutes, sinc I had everything prepared (mac.bin and a FAT32 SD card with the boot image).
And now it lives again!
Very kind regards (& a donation)
Thomas
ThomasPauli said:
Dear lakeman,
thanks again, but what do you mean with "PM" ? (Since I have no IRC client and do not intend to have one)
Regards, Thomas
Click to expand...
Click to collapse
PM is private messaging and clicking on a posters name brings up a dialog to send one
also at the top of the page where it says welcome thomaspauli , it tells you if there are any msgs for you
HI, Thomas!
I have the same problem as you but still I haven`t USB connection in Mtty. and could you precise when you wrote this:
>From then on it was only a matter of minutes, sinc I had everything prepared (mac.bin and a >FAT32 SD card with the boot image).
lakeman said:
PM is private messaging and clicking on a posters name brings up a dialog to send one
also at the top of the page where it says welcome thomaspauli , it tells you if there are any msgs for you
Click to expand...
Click to collapse
Thanks for your explanation!
Kind Regards,
Thomas
NO USB connection
vovaxxxx said:
I have the same problem as you but still I haven`t USB connection in Mtty. and could you precise when you wrote this:
>From then on it was only a matter of minutes, sinc I had everything prepared (mac.bin and a >FAT32 SD card with the boot image).
Click to expand...
Click to collapse
Dear vovaxxxx,
I wasted hours and hours on my XP machine at home and could not get MTTY to see mx USB connection. I have no idea why it worked like a charm on my business XP system. On both engines I disabled the ActiveSync USB connection, but only on my business site MTTY V0513 could see the USB. MTTY V1.42 coud see USB at home too, but could not upload the mac.bin file.
When I finally succeeded to upload mac.bin (see posts before how to generate this) my Athena 'knew' again what beast it is.
I had initialized a Mini SD card as a FAT32 disk on my PC, and had copied the RUU_signed.nbh file from the AP4 vanilla installation to it, and renamed its to ATHIMG.nbh. Then I inserted this SD card into the SD slot of my Athena, went to bootloader again and it loaded this image automatically.
Kind regards,
Thomas
ThomasPauli said:
Dear vovaxxxx,
I wasted hours and hours on my XP machine at home and could not get MTTY to see mx USB connection. I have no idea why it worked like a charm on my business XP system. On both engines I disabled the ActiveSync USB connection, but only on my business site MTTY V0513 could see the USB. MTTY V1.42 coud see USB at home too, but could not upload the mac.bin file.
When I finally succeeded to upload mac.bin (see posts before how to generate this) my Athena 'knew' again what beast it is.
I had initialized a Mini SD card as a FAT32 disk on my PC, and had copied the RUU_signed.nbh file from the AP4 vanilla installation to it, and renamed its to ATHIMG.nbh. Then I inserted this SD card into the SD slot of my Athena, went to bootloader again and it loaded this image automatically.
Kind regards,
Thomas
Click to expand...
Click to collapse
I have seen this several times. DId you use a different USB cable at the office? Sometimes you get no USB connection if you use a charging cable (which is not capable of sync, just charging).
Yes, different cable
raskell said:
I have seen this several times. DId you use a different USB cable at the office? Sometimes you get no USB connection if you use a charging cable (which is not capable of sync, just charging).
Click to expand...
Click to collapse
Dear raskell,
yes, it was a different cable in the office. Normally I shuttle my Athena between home and office to sync my calendar and tasks, so both cables are proven to work with data transfers. In my desparate attempts to get MTTY doing what it should do, I tried different cables at home, so I was quite convinced that it wasn't a cable issue, but one never knows!
Both machines, at home and at work, are XP SP3 with all patches, but at home I have an AMD 3800+ and at work an Intel dual processor. Both use different chip sets, so this alone are reasons enough for me to quit looking for causes - one get used to it in the PC/Windows world! (I am a VMS geek for 20+ years now, so please excuse my prejudices!)
Kind regards,
Thomas
someone pm'd me to look at this thread. the solution has been stickied for ages http://forum.xda-developers.com/showthread.php?t=405814
just follow all steps carefully.
if you get stuck post exactly which step you have problems with and post the error messages if any.

Can only access to tri colour after upgrading failure.

Hi All,
My CHT9000 can only access tri colour after upgrading failure right now.
Before upgrading to Hard-SPL-V7, already verified that the HTC_boot is 0180 and already grabbed supercid. However after clicking "upgrade" button, it displayed "connection error [260]" after a couple of minutes.Currently I can only access to tri colour interface with following information:
IPL is :IPL-1.01
SPL is :SPL-1.40.OLIPRO
Tried another laptop and alternative USB connection cable, still same.
Any thoughts and inputs will be appreciate.
Try flashing with a shipped/original ROM and see.
Regards,
Carty..
Thanks Carty for your reply.
I searched and got following instructions from the forum. A little bit confusion of step6 .Since I can only access to tri-color screen. How can I run sspl-hrm.exe on the phone?
Thanks in advance.
1. download hardspl v7 from the first post.
2. extract ruu_signed.nbh and rename it to HERMIMG.nbh
3. copy it to a microsd card, make sure the card is formatted as fat32
4. download sspl-herm from here
5. extract SSPL-HERM.exe and copy it to your phone.
6. insert sd card and run sspl-herm.exe on the phone.
7. you should see the tri-color screen and then it should change to this
8. press power button to start flashing
9. reset when you get the msg that its done.
Hi phoebe0616,
before you try all that stuff, please check this first:
1. Grab the tool mtty and put it on your host
2. disconnect active sync and disable all active sync connections
3. connect your device to host and open up mtty using usb connection
4. type enter once, now you are in the bootloader console
5. type: set 14 0
6. reboot
7. if you're still in bootloader after, repeat steps 3..6 but type another command: set 16 0
8. Read the wiki!!!
Regards,
scholbert
Appreciate your help, Scholbert
Will let you know the result later.
scholbert said:
Hi phoebe0616,
before you try all that stuff, please check this first:
1. Grab the tool mtty and put it on your host
2. disconnect active sync and disable all active sync connections
3. connect your device to host and open up mtty using usb connection
4. type enter once, now you are in the bootloader console
5. type: set 14 0
6. reboot
7. if you're still in bootloader after, repeat steps 3..6 but type another command: set 16 0
8. Read the wiki!!!
Regards,
scholbert
Click to expand...
Click to collapse
Although "set 14 0" didn't resolve it, "set 16 0" made it.
Thanks all.
Unfortunately, I have an additional issue right now. After reading following article carefully. I renamed "RUU_signed.nbh" in Hard-SPL-V7 to "HERMIMG.nbh" and did exactly as the description in the article.I was able to get the confirmation that the upgrade is complete. However after softreset, it looks nothing changed, "SPL-2.10.OLIPRO" is supposed to be displayed instead of "SPL-1.40.OLIPRO". Another quite weird thing is whole flashing process took no more than 5 seconds.
http://wiki.xda-developers.com/index.php?pagename=Hermes_SDCardFlashing
Any ideas?
Thanks in advance.
Hey phoebe0616,
that's really weird:
You just updated the bootloader successfully from "SPL-1.40.OLIPRO" to "SPL-2.10.OLIPRO" using the SD-card method...
Funny guy
Take a look at the filesize of this small part of software, that's why it took only 5 sec., that's totally normal
I think everything is fine with your device now, isn't it?
scholbert
scholbert said:
Hey phoebe0616,
that's really weird:
You just updated the bootloader successfully from "SPL-1.40.OLIPRO" to "SPL-2.10.OLIPRO" using the SD-card method...
Funny guy
Take a look at the filesize of this small part of software, that's why it took only 5 sec., that's totally normal
I think everything is fine with your device now, isn't it?
scholbert
Click to expand...
Click to collapse
Hi Scholbert,
Thanks again. Yes, my guy is working pretty good right now. The only question is why the SPL is still "SPL-1.40.OLIPRO" rather than "SPL-2.10.OLIPRO".
phoebe0616 said:
Hi Scholbert,
Thanks again. Yes, my guy is working pretty good right now. The only question is why the SPL is still "SPL-1.40.OLIPRO" rather than "SPL-2.10.OLIPRO".
Click to expand...
Click to collapse
This is because you cannot update hard spl via the sd card method on a hermes. You have to do it following the instructions. You can flash a rom or radio but not the spl.
parleyp said:
This is because you cannot update hard spl via the sd card method on a hermes. You have to do it following the instructions. You can flash a rom or radio but not the spl.
Click to expand...
Click to collapse
Thanks Parleyp for your reply.
However each time when I tried to update SPL through PC by running "RUUWrapper", it failed as "Connection Error [260]". And tried two laptops and two different SPL resource and two different USB cables. Both laptops are WIN XP with SP2.
parleyp said:
This is because you cannot update hard spl via the sd card method on a hermes. You have to do it following the instructions. You can flash a rom or radio but not the spl.
Click to expand...
Click to collapse
Not true... The instructions from post 6 is the sd card method to flash Hard SPL(If you don't believe me go to page116, post 1160 on the Hard SPL thread). You need to run sspl.exe using the file explorer on your hermes (it needs to be on the phone memory) not the sd card.
Also make sure the card is formatted FAT32 and 2Gb or less.
It will always be quick as the file size is small but I've done it successfully many times for both my own and friends Hermes.
Cheers...
ultramag69 said:
Not true... The instructions from post 6 is the sd card method to flash Hard SPL(If you don't believe me go to page116, post 1160 on the Hard SPL thread). You need to run sspl.exe using the file explorer on your hermes (it needs to be on the phone memory) not the sd card.
Also make sure the card is formatted FAT32 and 2Gb or less.
It will always be quick as the file size is small but I've done it successfully many times for both my own and friends Hermes.
Cheers...
Click to expand...
Click to collapse
Thank you very much, Ultramag69. You are really sharp.
It works perfectly.
Thank you all of you guys again.
Glad to hear it.
Now, if you want to flash a new rom, I'd suggest using the sd card method as I feel its safer. Just leave out the steps using SSPL.exe as you now have Hard SPL installed...
Welcome to the wonderful world or rom flashing...
ooops wrong thread sorry
delete me

Iolite SUPER-CID

I purchased a Taiwanese Iolite (T4242), comes with Chinese version.
I used the QMAT to Change the CID to SperCID and than Just flashed it with :
_file_RUU_Iolite_HTC_Europe_1.09.401.3_Radio_Sign_12.41.30.16_0.41.30.12_Ship.exe
IT WORKS FLOWSLY... and my device is now WWE.
How to do it:
I just followed the instructions on the http://wiki.xda-developers.com/index.php?pagename=Elf_GoldCard&action=BackLinks:
• Download QMAT and MTTY from http://rapidshare.de/files/46772105/qmat_and_mtty.zip.html
o The latest copy of QMAT is also found http://revskills.de/pages/download.html
• A spare microSD card
• Optional: a card reader
Format your memory card for FAT32
• If you have a card reader, go to DOS and type:
format <volume> /FS:FAT32 /A:4096
where <volume> specifies the drive letter of the SD card. For example: format d: /FS:FAT32 /A:4096
Run QMAT to create the Gold Card
1. Put the newly-formatted SD card in the working WM device and connect to ActiveSync
2. Run QMAT, go to the Hardware Forensics menu, and then select "Generate HTC Goldcard"
3. Select your device's key (Iolite)
4. Get the SD Card Serial from WINCE Device
5. Save the Gold Card image to the SD Card
6. Put the SD card in your device and put it into bootloader mode (hold down the VolumeDown button and press the reset button).
7. Now you have a card which gives you SuperCID.
8. With the card inserted into the Iolite, which is in bootloader mode, connect the Iolite via USB to ActiveSync.
9. From your PC, run the RomUpdateUtility.exe from the RUU folder containing the WWE shipped ROM
It should start flashing if everything is configured properly!
Good Luck
Thank you for your info but the steps are hard to follow, admire your patience!
I flashed mine without making a GoldCard to unlock my Iolite. Mine was in CHS and after flashing become Europe WWE. I am looking for an Asia WWE. There is one in the forum but it can't be flash and I don't know whether it is because it is RUU .... _Test.exe and not ... _Ship.exe
Maybe the GoldCard unlock method will work and not sure it is worthwhile to try.
In fact it is very easy.... if you read it carefully you see that it is just connect your device with a formated sd and than reboot it to boot loader...
The next is flash with any ship rom.
Seems that your country id matched the rom you flashed.. however you will not be able to flash any-rom.
As it seems to me many users are stucked with rom flashing .. Hard SPL has not been around yet.. so this is a nice solution and once again - very easy!!!
Maybe it works. But.... not in unregistered version with Trojan.
Be careful!
You have to purchase a license.
domestik said:
Maybe it works. But.... not in unregistered version with Trojan.
Be careful!
Click to expand...
Click to collapse
Yes you are right. I did purchase a license. Trojan??? please explain.
It works, i did so.
At this link http://rapidshare.de/files/46772105/qmat_and_mtty.zip.html
there is Trojan
p.s. For all: don't forget to patch ROM to remove regionlock checking.
MTTY check-up
domestik said:
It works, i did so.
At this link http://rapidshare.de/files/46772105/qmat_and_mtty.zip.html
there is Trojan
p.s. For all: don't forget to patch ROM to remove regionlock checking.
Click to expand...
Click to collapse
Mmm.... in fact, I did copy the entire directions of "Howto", however I did not even use the MTTY.. pay attention that in my notes, I ignored checking of SuperId setup. The Mtty is required just to check that you have a superid before flashing. It is not required (I think so...) with this machine... it wull not flash if the SuperId did not load.... so just to make it simple : connect the machine, setup the SD card and flash ..... easy no?
I will not load the MTTY from Rapidshare I trust that you checked it and since it is not required... I suggest that you eliminate this step.
Tested from a Taiwanese rom to a European one and it works great. Thanks a lot for the tip !
Need to use the written SD each time...
koalaii said:
Tested from a Taiwanese rom to a European one and it works great. Thanks a lot for the tip !
Click to expand...
Click to collapse
I am glad that it is a kind of a solution..... however remeber that each time you want to flash the device, you have to have the Super-CID sd in the machine.... and you are set.
OK, this seems to work. Just post here successful stories. And test this on other devices, topaz, rhodium and even htc rose
borce_razor said:
OK, this seems to work. Just post here successful stories. And test this on other devices, topaz, rhodium and even htc rose
Click to expand...
Click to collapse
Yes. Success with Jade, HD and Iolite WWE to RUS
HTC Iolite ptg, cid HTC__506. I can not do anything with it. for "ruurun 0" reply "command error". Gold card not worked. htctr.exe not generate correct *.nbh.
Where supercid down!!!!! Buildor, making a link! Thank you!
Galaida, can you try to explain what have you done and what did not work for you? perhaps we can help to resolve the issue?
Should work.... please include in your answer the name of the rom you tried to flash and error messages that you received while in process of the Gold Card.
Link to QMAT
LITANG said:
Where supercid down!!!!! Buildor, making a link! Thank you!
Click to expand...
Click to collapse
I am not sure if this was requested... however here is the link to the "home" of the utility:http://revskills.de/pages/download.html
I suggest thta you get it from this site, as other users already reported RapidShare and other may have a Trojan as well.
QMAT
Hi guys, tried this and got the message saying i gotta register QMAT before it will let me make a Gold card thingie
so before i go and spend 20 bucks just wanna make sure this will let me unlock my Iolite so that i can install WWE
Galaida said:
HTC Iolite ptg, cid HTC__506. I can not do anything with it. for "ruurun 0" reply "command error". Gold card not worked. htctr.exe not generate correct *.nbh.
Click to expand...
Click to collapse
try typing "boot"
avocaz said:
Hi guys, tried this and got the message saying i gotta register QMAT before it will let me make a Gold card thingie
so before i go and spend 20 bucks just wanna make sure this will let me unlock my Iolite so that i can install WWE
Click to expand...
Click to collapse
Can anyone offer me some insight please?
avocaz said:
Can anyone offer me some insight please?
Click to expand...
Click to collapse
I can help, PM me
Unregistered QMAT cannot create GoldCard for Iolite.
Dubi said:
I am glad that it is a kind of a solution..... however remeber that each time you want to flash the device, you have to have the Super-CID sd in the machine.... and you are set.
Click to expand...
Click to collapse
Dubi, wait a minute, do you have a registered QMAT or an unregistered version?
As one of the forum member commented, it will take 20 Euros, (more than $30) to register QMAT in order to make a GoldCard with the method you mentioned.
Can you confirm that?
Regards,

Categories

Resources