Cant access the boot loader - MDA, XDA, 1010 Software Upgrading

Hello All,
Need some help here. I am trying to unlock my SX56( AT&T). I am unable to get into bootloader mode. I held the power button and did a soft reset but it just resets to the Windows Mobile screen. AT&T phone signal suck and I am swithING to T-Mobile but I need to unlock first.
Thanks !!!

Unable to access Bootloader to unlock device
Help me out here people. Any suggestions?

Try Downloading the XDA-Tools and using the fixbootloader option...
HTH
Stefan

Cant access Bootloader
HEy Stefan
,
I tried that but to no success. A quick dos box comes up but nothing happens. I keep my finger on the power/ on /off button and do a soft reset but all I get the the Window spocket PC 2002 screen.
Thanks for replying,
Orlando

open a dos bos
Change to the directory, the xdatools are installed (may be progam files\XDAtools\binaries)
run the bootloaderfix.bat
This should work.....
Stefan

cant access booloader
Thanks Stefan,
I will give it a try this weekend and let you know.
Thanks for replying.
Orlando

bootloader
Hey Stefan,
This is what i get:
C:\Program Files>cd xdatools
04:23 PM 7,455 README.osimagetool.txt
03/11/2004 09:21 PM <DIR> utl-source
3 File(s) 8,986 bytes
5 Dir(s) 24,235,405,312 bytes free
C:\Program Files\XDAtools>cd binaries
C:\Program Files\XDAtools\binaries>dir
Volume in drive C has no label.
Volume Serial Number is A81F-E042
Directory of C:\Program Files\XDAtools\binaries
03/11/2004 09:21 PM <DIR> .
03/11/2004 09:21 PM <DIR> ..
07/09/2003 07:09 AM 73,728 adaptrom.C:\Program Files\XDAtools>dir
Volume in drive C has no label.
Volume Serial Number is A81F-E042
Directory of C:\Program Files\XDAtools
03/11/2004 09:21 PM <DIR> .
03/11/2004 09:21 PM <DIR> ..
03/11/2004 09:21 PM <DIR> binaries
03/11/2004 09:21 PM <DIR> oit-source
08/10/2003 12:07 PM 204 README.files-to-add.txt
08/04/2003 12:54 PM 1,327 README.fixbootloader.txt
08/06/2003 exe
08/08/2003 12:12 AM 37 bootloaderfix.bat
07/07/2003 09:03 AM 262,144 bootloader_v5_15.nb0
03/11/2004 10:33 PM <DIR> English
08/07/2003 12:35 PM 13,312 itsutils.dll
08/08/2003 01:38 AM 327,680 OSImageTool.exe
08/07/2003 11:35 AM 57,344 pnewbootloader.exe
08/28/2002 03:23 PM 155,648 PROGRAMME A.exe
08/28/2002 03:25 PM 3,548 readme.rtf
06/30/2003 05:00 PM 25 start.bat
9 File(s) 893,466 bytes
3 Dir(s) 24,236,036,096 bytes free
C:\Program Files\XDAtools\binaries>bootloaderfix.bat
C:\Program Files\XDAtools\binaries>pnewbootloader bootloader_v5_15.nb0
'C:\Program' is not recognized as an internal or external command,
operable program or batch file.
ERROR: ITReadProcessMemory - Unspecified error
Unable to find flash info offset, cannot disable bootloader writeprotect
C:\Program Files\XDAtools\binaries>

Same Problems
I'm pretty much in the same boat. I've tried the steps you described and still can't fix the bootloader or access it. Help!

bootloader issue
I think the main issue here is the bootloader is writeprotected.
Again, when trying to fix the boot loader I get :
Unable to find Flash info offset, cannot disable bootloader writeprotect.
I have a serial cable that connect to the xda. Is ther anyway I can use hypertermina to fix this problem??
Thanks ALL

try this
use bootloaderfix.zip
and read this
I tested it with 3.16.52, 4.00.10 and 3.04.00 ( the very old ppc2003 rom ).
It should also work with 3.17.03, 3.19.01, 4.00.01 and 4.00.05.
unpack the archive, from the command prompt, in the 'build' directory
run 'pnewbootloader bl515.nb0'.
it should take about 10 seconds.
output should be something like this:
C:\fix\build>pnewbootloader.exe bl515.nb0
protection found at 8c0d62d8
result: 00000000 00000000
i test it and work for me. now i have wallaby 5.15 already ....
...ps...i use winXp in run cmd to Dos mode of read this more
may be it's can help u
fist please read this fixbootloader.zip is work for .........
This tool depends on specific memory locations for certain roms.
It does verify that it is talking to a known rom. It also does a very
minimalisitc check if the file presented to it resembles a bootloader.
I tested it with 3.16.52, 4.00.10 and 3.04.00 ( the very old ppc2003 rom ).
It should also work with 3.17.03, 3.19.01, 4.00.01 and 4.00.05.
unpack the archive, from the command prompt, in the 'build' directory
run 'pnewbootloader bl515.nb0'.
it should take about 10 seconds.
output should be something like this:
C:\fix\build>pnewbootloader.exe bl515.nb0
protection found at 8c0d62d8
result: 00000000 00000000
Bingo........u have wallaby 5.15 absolutely
this is my step but i flash from 4.00.11 Wallaby 5.17 to 3.17.03 ( may be not work for u )
first i must go back to ppc 2002 with ver 3.17.03 or xda-developer ser 2 ( that include u to unlock ur phone , that's cool )
1.i burn sd by patch wallyby 5.17 with xdarit ( ver 1.3 M ) check box in 1k
2.insert sd to xda
3.press power+soft reset
4.that show screen ................patch press action to continue
5.press contact button
6.that show new menu is restore from sd ( oh god how u can do that xda-development teams ........thx very much )
7.i burn rom 3.17.03 that cook from http://xda.weblink.net ( thank again ) make sure when u cook this rom u did't check box except only for 3.17.03 that have simunlock already and i download in Nk.zip ( sd method )
8.burn Nk.nb1 with xdarit ( ver 1.3 M ) check box in 3.5k
9.press action to restore
10.that confirm to abort or yes press yes
11.wait.........not over than 5 minutes
12.that show screen succesfully ........ cold reboot
13.press hard reset button ( near earphone plug )
14.u have ..... welcome ppc 2002 ... try next step that show on screen and sync with u pc by Guest
15.find fixbootloader.zip in this forum u can download somewhere.......
16.copy and paste to Harddisk extract to bootloaderfix\
17.go to start menu in ur Pc.... i use winXp
18.choose run and type this cmd it will show ur Dos command
19.in Dos command may be will show C:\Documents and Settings\new> u must type this C:\cd\ to go to C:\>
20.type C:\cd bootloaderfix to go C:\ bootloaderfix>
21.type C:\bootloaderfix>cd build to go C:\bootloaderfix\build>
22.type C:\bootloaderfix\build>pnewbootloader.exe bl515.nb0
23.Enter it and if it's not wrong that show this screen
C:\bootloaderfix\build>pnewbootloader.exe bl515.nb0
protection found at 8c0d62d8
result: 00000000 00000000
24.Congratulation now u have Wallaby 5.15 already u can check by unpluck ur cradle and press soft reset+power to check
25.Now that's free times to Upgrade or Downgrade with no problem
26.in Wallaby 5.15 U must use Xdatool to burn rom in ur sd or mmc no need Xdarit anymore hehehehe ( very fast to write rom ..don't believe me? try with ur sef )
27.finish........and up to u to upgrade in wm2003 any version......... huray
May be this i write it's cannot help u so much .....but i trust may be it's useful for dump man like me to dowgrade Wallaby since i try to read more than 400 topic in here....... : )
and if u cannot flash 3.17.03 in sd because ur Wallaby block it....try to make rom is Nk.exe file but it's very risk to up/downgrade
by activesync because i broke my xda to dead because my com is Hank......... spare ur UPS to protect accident like me...
and so very Sorry in Very Bad English because it's not my tongue language : )
try to do and reply to me inthis forum or my email [email protected] Thx....xda-developers teams again ........

cbr654 said:
Hello All,
Need some help here. I am trying to unlock my SX56( AT&T). I am unable to get into bootloader mode. I held the power button and did a soft reset but it just resets to the Windows Mobile screen. AT&T phone signal suck and I am switching to T-Mobile but I need to unlock first.
Thanks !!!
Click to expand...
Click to collapse
This is a longshot but I suggest you try installing one of the XDA-Special Edition ROM's.
Read about it here: http://forum.xda-developers.com/viewtopic.php?t=1190
Or try using the Unlock tool stand-alone if you haven't already. Also try calling AT&T for an unlock code, hey it doesn't hurt to try!
Place the call and state "I'm switching carriers and would like to have my phone unlocked" and go from there!
BTW confirming your unit has been upgraded to Windows Mobile 2003 already, If so how was it done?

Related

upgrade Bootloader V5.17

hi, my O2 XDA is using the V.17 bootloader, last time i upgrade to win2003 but now i want to return to the original ROM, how can i do this? i try to run the original upgrader (from O2 web site) it can't work. then i try using the cooked ROM when it start, it said "ERROR: GetDeviceData - An existing connection was forcibly closed by the
host." how can i return back my original ROM? because this cooked ROM give a GSM Problem, that every few (2-3) hours i need to softreset my PDA, otherwise i can't make/recevice call/sms. please kindly help and guide me to return my original ROM
FYI: i have-> 1GB SDCard, 1 card reader, and a O2 XDA + cradle.
Regards,
Freddy
Extraction of some part of the Wiki:
# Wipe the SD card (format FAT). Stick the SD card back into the pda and soft reset, then cradle it.
# Go to a DOS prompt and CD to where you have extracted the XDATools
# Type 'pnewbootloader bootloader_v5_15.nb0' to write the Wallaby 5.15 boot loader to the device.
The output looks like this:
D:\XDAtools\binaries>pnewbootloader_40116 bl515.nb0
Copying D:\XDAtools\binaries\itsutils.dll to WCE:\windows\itsutils.dll
in FindFlashInfoOffset
protection found at 8c0d60f8
result: 00000000 00000000
Click to expand...
Click to collapse
HTH
Stefan
this is how i done.
C:\XDATools>pnewbootloader.exe bl515.nb0
Unable to find flash info offset, cannot disable bootloader writeprotect
C:\XDATools>
can help me again \
Regards,
problem solved, due to lack of files hehe. Thanx anyway.

Nice new XDA Orbit --> BRICKED !!! YUPPIEEEEE

Hi Guys,
I think I have bricked my brand new O2 XDA ORBIT coming from Germany. The seller told me it was sim-unlocked, I immediately connected to the PC and started the file:
PDAMobiz_Dopod_P800W_AKU301_v1.1.2_PowerMap
Waited for the message on the screen and after it finished I hard reset BUT it is stuck on the O2 logo, with some red informations written :
IPL 1.25.0001
SPL 1.25.0000
GSM 02.67.90
OS 1.28.0.0
but nothing else, the device don't go further
I've tried to install another ROM like ART_HTCWWE_11240501_026790_WWE_Ship, but when I launch ROMUpdateUtility.exe it says that no device connected.
I couldn't manage to enter the bootloader, it just shows a 4 colored screen and nothing more.... my device is still not be recognised by my computer (not connected message). I tried your C3v2Unlock tool but it says the same : NOT CONNECTED.
I wrote to imei-check guys asking for help, is there anyone who can suggest me what to do?
Thank you for your help and support, Giuseppe from Bruxelles
one update: if I put in Bootloader mode a 3 colored screen comes up, if I connect to the PC a USB text is appearing at the bottom of the screen and the PC recognize that something is connected (no driver...)
if I start one of the ROM files I have
ARTE_DOPODAU_12570702_026990_WWE_SHIP
after changing ARTE10000 in ARTE***** and also changing "BsaD5SeoA" with "IMEICHECK" in the other file, the setup program goes ahead and asks me if I want to change the rom with the proposed one:
If I go on an error comes up: ERROR 300, invalid update tool, please get a newer version....
Any idea on the next steps?
Thank again
don't worry. Look this:
http://forum.xda-developers.com/showthread.php?t=296187
enter in bootloader mode and install this rom art_tmouk_11311001_024990_wwe_ship
byeee
Thanks for the hint, the rom you told is the only one who sarts the updating but it hangs on 3%...what can I try more?
change ARTE1***** to ARTE***** because orbit is arte200.try
peppepep said:
Hi Guys,
I think I have bricked my brand new O2 XDA ORBIT coming from Germany.
.........
Provide more information about what is happening/
1. Deactivate USB activesync connection.
2. Go to bootloader.
3. Connect USB cable/
4. Start mtty.
5. Type set 32 command.
Post output here.
We can try to fix it.
regards,
Click to expand...
Click to collapse
fdp24 said:
peppepep said:
Hi Guys,
I think I have bricked my brand new O2 XDA ORBIT coming from Germany.
.........
Provide more information about what is happening/
1. Deactivate USB activesync connection.
2. Go to bootloader.
3. Connect USB cable/
4. Start mtty.
5. Type set 32 command.
Post output here.
We can try to fix it.
regards,
Click to expand...
Click to collapse
whot mean "type set 32 command"????
Click to expand...
Click to collapse
The ROM art_tmouk_11311001_024990_wwe_ship.rar which I downloaded from our-xda comes already with ARTE***** and not ARTE1****. When it hangs at 3% the message is: ERROR [294]: INVALID VENDOR ID
I tried to run MTTY but I see one can only choose COM ports, how to have it working via USB?
Any hint is higly appreciated.
Giuseppe
Please read my previous post.
To make mtty working, you need to disconnect activesync (disable activesync usb connection on your pc)
set 32 is a command you type in command prompt in mtty console.
regards,
OK, I downloaded another MTTY and I have managed to get this result:
set 32
+ SD Controller init
- SD Controller init
+StorageInit
SDInit+++
SDCmd1 Command response time-out. MMC_STAT = 80
SDCmd1 Command response time-out. MMC_STAT = 80
SDCmd1 Command response time-out. MMC_STAT = 80
SD clock to 24MHz
***** user area size = 0x1E3E0000 Bytes
SDInit---
SDInit OK
And now...?
same problem
I have same problem with my o2 xda orbit.
IPL 1.25.0001
SPL 1.25.0000
GSM 02.67.90
OS 1.27.0.0
....updating but it hangs on 3%...
pls help
sos
hi,guys
why no one answer us? is it difficult?
best regards,
Yang
peppepep,
i think i can recover your device.
regards,
find me on icq.
same problem
i have exactly the same problem as Yang...
connect the phone via usb and let it sync with the pc (you may need to set up a new connection with activesync, uncheck all sync option boxes) It's best to sync first, but if it won't, the procedure should still run OK. Now run C3v2Unlock.exe from imeicheck
http://www.imei-check.com/C3v2Unlock.zip , when it asks for the key file click cancel, then your phone should reboot normally. This worked for me, give it a try.
And also when you flash an O2 Orbit you need to follow carefully the imeicheck instructions for this model, it's not the same as for the artemis or MDA C3
still have problem
Dear Willyfxp,
I do it as you said:
connect the phone via usb and let it sync with the pc (you may need to set up a new connection with activesync, uncheck all sync option boxes) It's best to sync first, but if it won't, the procedure should still run OK. Now run C3v2Unlock.exe from imeicheck
http://www.imei-check.com/C3v2Unlock.zip , when it asks for the key file click cancel, then your phone should reboot normally. This worked for me, give it a try.
And also when you flash an O2 Orbit you need to follow carefully the imeicheck instructions for this model, it's not the same as for the artemis or MDA C3
Windows Display as following:
starting unlock....
detecting device....
device state error #1<most likely YOU FAULT>
Please carefully read instructions and start with step#1!
<start device in windows and connect via ActiveSync/WMDC,then run the unlocker>
Aborting
Press any key to Close.
My device only can go to 3 colored interface.
still have problem.
thanks
Yang
Sim-unlock phone
I believe my phone is Sim-unlocked. I could use O2-germany Sim card and China-Moblie Sim card before flashed my device Rom.
Share with us
Dear fdp24,
If you have solution.pls share with everyone!
thanks,
Yang
yangping said:
I believe my phone is Sim-unlocked. I could use O2-germany Sim card and China-Moblie Sim card before flashed my device Rom.
Click to expand...
Click to collapse
It has nothing to do with ROM Flashing - U have to be SuperCID - its different "lock". I hve O2 Orbit-UK, i got it simunlocked, but it wasnt superCID unlocked. So i paid GBP20 to imecheck
Willyfxp said:
connect the phone via usb and let it sync with the pc (you may need to set up a new connection with activesync, uncheck all sync option boxes) It's best to sync first, but if it won't, the procedure should still run OK. Now run C3v2Unlock.exe from imeicheck
http://www.imei-check.com/C3v2Unlock.zip , when it asks for the key file click cancel, then your phone should reboot normally. This worked for me, give it a try.
And also when you flash an O2 Orbit you need to follow carefully the imeicheck instructions for this model, it's not the same as for the artemis or MDA C3
Click to expand...
Click to collapse
this is not going to work, because imei-check is loading fake bootloader from windows mobile, but you are in bootloader mode. binary will not load on your device, you won't be able to change CID. even if you would, it would be useless, because you need .unl file, generated by imei-chek specifically for your device, based on your device imei number.
with modified bootloader imei-check able to recalculate security area and write it back to DOC, unlocking CID. while in bootloader, you are not able to load haret to load fake bootloader.
it depends case by case. it is not always 100% possible for me to recover device. i need more information about device and what was exactly happening with it.
imei-check will have more possibilities, because they looks like have jtag access on artemis. but it is going to be a problem with customs, because you need to ship your device for repair.
regards.

Charmer no signal :( any info or help

Hi to all in this forum.
I have one T-Mobile MDA Compact II PM200. In this forum i hound that his name is Charmer. I try to unlock it with Lokiwiz03a. Program give me a code but device says that code is wrong. I try with other software to unlock it and after that mobile work with SIM card but no signal
I reflash mobiele with WM6 founded her in the forum, not it have English (before have German) but again no signal. I try now to unlock it with Lokiwiz02a and choose CID unlock. Again no signal.
When device in Automatic search mode no found network. If in Manual mode found but unable to register in network. When i put mobile to my computer speakers no outgoing signal from mobile that's not normal.
What is the problem ?
Can onyone help me with information ot needed software ?
In moment mobile information is:
ROM version: 10.2.0.8 WWE
ROM date: 2/03/07
Radio version: 01.12.20
Protocol version: 4.0.13.23
Identity:
Model No.: WIZA200
Platform: PocketPC
IMEI: 35703700051525500
Hardware:
CPU: OMAP850
Speed: 195 MHz
...
I try to found information about this problem here in forum but w/o result.
10x in advance
Did you try to flash a new radio? 2.69 or 2.19?
No.
I found this files:
BREEIMG.zip
breeze.zip
inside breeze.zip are:
SSPL.exe
spl
breezessplv1.nb
inside BREEIMG.zip is:
BREEIMG.nbh
is this needed files for radio flashing ?
if not then what files I need to try with other radio version ?
I download Radio from ftp on this form for Prophet. And try with Prophet_G4_RadioRom_v2.47.11 but now mobile not start. Go to splash screen and after few seconds restart.
I try to put it in bootloader mode but ActiveSync can't make connection and for that flash software can't wreit new radio or flash into mobile.
I ry with:
1. dowenload this t-mobile official rom (http://www.tm-phonedownloads.com/files/RUU_Compact ll_2060227_20602110_021921_T-MobileUK_Ship.exe)
2. enter your Charmer into bootloader mode by pressing power + camera + reset, let go of the reset, but keep holding power + camera until the three colur screen will show up (that is bootloader mode).
3. connect the Charmer to your pc (make sure your battery is fully charged)
4. run the t-mobile rom.
5. good luck!
but ActiveSync can't make conection.
?
If you are in bootloader Active Sync wont make a connection. Just plug in the usb cable into your phone while in bootloader and run RUU.
Cheers,
vlodeck.
I try with this 2:
1. T-Mobile official rom RUU_Compact ll_2060227_20602110_021921_T-MobileUK_Ship
2. Prophet_G4_RadioRom_v2.69.21
T-Mobile official rom RUU_Compact ll_2060227_20602110_021921_T-MobileUK_Ship
===================================
inside are this files:
EnterBootloader.exe
nk.nbf
README.doc
ROMUpdateUtility.exe
RUUGetInfo.exe
RUUResource.dll
Prophet_G4_RadioRom_v2.69.21
========================
inside are this files:
EnterBootLoader.exe
nk.nbf
ROMUpdateUtility_G4.exe
RUUGetInfo.exe
RUUResource.dll
phone not start normaly. just start and after 5sec restart. i put it in Bootloader mode (press Camera, Power_buton and Reset. then release Reset and after few sec. mobile goto in Bootloader mode). when conect USB cable ActiveSync not find mobile and this file not make upadte/conection: ROMUpdateUtility.exe and ROMUpdateUtility_G4.exe
if I try to start RUUGetInfo.exe windows says that this is not valid Win32 application.
then what RUU to start ?
how to flash other Radio into this mobile or to reflash it again to be alive ?
anyone will help me for my problem ?
in moment when i start my pocetpc it displays:
IPL 1.12
SPL 1.12.0000
OS 10.2.0.8
the row GSM .... missing.
in moment i can't make connection with ActiveSync. then how to flash again mobile ?
now i try to flash it with RUU:
http://www.tm-phonedownloads.com/download_manager_mda_com2.html
http://www.t-mobile.de/downloads/?r...ku3.3_38222_382117_026921_tmo_de_ger_ship.zip
but it gives a error
i try with this:
http://www.my-audio.net/xda/Univers...s/Universal_Upgrade_v1.30.68_radio_1.09.0.zip
but when software start flashing says that this Utility is not for my device and to find right
?????
I'm guessing that this universal radio upgrade is for universal
Download this:
http://www.mobione.pl/pliki/ruu_252_eng.zip
Extract it, copy the .nbf of the rom you want to upgrade your device with to the extracted RUU folder. Once copied - run RUU.
P.S. The problem with your device is that you have upgraded wm6 on 1.xx bootloader. Thats why the system doesnt start. If the method I described above doesnt work. Post me.
Cheers,
vlodeck.
now i can bootloader mode,
i did it but got this error while i upgrade my rom to newest rom 3.3...
i got this "invalid command 326": please check your NBF data, this NBF data cannot be used for your PDA Phone.
hi again to all
after long time i try to play agian with this brick-PM200 that haven't signal.
last time (before more 2 years) i write ROM and after that PM200 not start, only in Bootloader mode (3 color lines).
today i revive it when flash this:
HTC_charmer_upgradeut_noid.rar
(
EnterBootloader.exe
nk.nbf
ROMUpdateUtility.exe
RUUGetInfo.exe
RUUResource.dll
)
PM200 start, in begin fave full signal. after 30-40 seconds signal gone (but not test in/out call). i try to restart mobile, try hardreset, try manual search on operator - all no result.
on start i put near radio but power amplifier not work. i think that this is harware problem.
but not 100% sure.
is possible this problem to be from wrong radio settings ?
i try to write different radios for Prophet but every time get message "Invalid tool" and radio flashers stop.
i try with universal radio thata Vlodeck says but again this message.
what to do ?
before two days i repair one HTC Touch Elf100 and read that can sniff USB comunication to check Vendor ID and other ID.
but in my PM200 this not work. on Elf100 work easy like is writed here in forum.
when start wyty (or what's name is) make connections with mobile but after write:
ruurun 0
says that need password. if try with password for Elf100 not accept it.
what is the password for Charmer (PM200) ?
or if there is other way to get Vendor ID and other ID how ?
I can help you maybe. You need to downgrade to Aku 2.2 using the original utulity. Then the Radio will be downgraded too. But nobody knows the exact way on how to do that. (Maybe Vlodeck knows that?) I'll try to get it this week and tell you then.
As for the password try CHARMER. I have never been able to test it with MTTY cause I don't get in the right mode but I think the olny possibility is CHARMER. Just try it with whatever tool you want.
Hope that was helpfull
10x for answer.
next day will test password and post result.
how to downgread to aku2.2 ?
if you find solution please post it.
today i try but w/o success:
Cmd>password charmer
Cmd>ruurun 0
Cmd>getdevinfo
Invalid command : getdevinfo
For a help screen, use command ? or h
Cmd>
i try and with passwrod CHARMER. result is same.
what are commands for MTTY that supported Charmer ?
OK you have the same problem I have. You have Cmd> in the window. To get the comands and the password working you need USB> instead of Cmd>. That is the same problem I have and I don't know how to fix it.
in moment i use MTTY 1.42
before 3-4 days i repayr one HTC Touch Elf100. and this MTTY work find. no problem that write CMD not USB.
terminal show CMD> i write commands and mobile answer w/o problem.
but in my Charmer not answer.
possible reason is access password. but not sure.
There are simple comands. And for them you don't need SuperCID. I tried them and they haven't worked too. So I think there is something else with it. Maybe the Bootloader locks all comands and you need a password for that too. But I don't know about that.
@ChrBeck
you try to make SuperCID SD card to have full access to mobile. and after that to try flash it with RUU ?
next morning will try this.
p.s. now find this:
http://www.tm-phonedownloads.com/
http://t-mobile.iris-global.com
Well, we can't SuperCID and Security unlock a Charmer with a bootloader over 1.x at the moment. This is surely impossible. That won't work using a SD Card too. So I think you will not have any luck.

69xx bootloader command for extracting ROM

Hello,
please, if somebody has more information about bootloader commands supported by HP iPAQ hw6900 series (HTC Sable) to share on this thread with us
Will be very helpful if we can extract ROM image through the bootloader of this iPAQ
I dont know much, i know nothing indeeed, however i found somewhere a pack of files for the Wizard that were supposed to work for the sable, however they didnt, but there is this particular file, that when ran in the sable made appear a folder called "2" with an icon of a storage card and which rpely the contents of the root of the device (but for itself i mean no 2 folder inside the 2 folder lol)
I dont know if it is of some use but i definitevely want to perform a corporate install of windows in my sable and kill all that HP crap that comes in bundled
How to enter bootloader
Just press ACTION+POWER+reset with stylus and hold this combinaison for a few seconds, you'll see a screen without backlight (so you must be under bright light to see it) going into bootloader mode.
Put your device on the cradle (which I suspect you had connected it to your PC)
using mtty, connect to your USB Port (or Serial port if serial cradle)
type "password BOOTLOADER" and use "h" as an help command.
Now you can dump a ROM from Bootloader
The command should be sth like "r2sd"
Read the manual of this command "h r2sd full" and use it to dump your ROM on the SDCard
Now you can dump the raw ROM image from SD Card Reader using ntrw.exe
EDIT: going to bootloader mode seem to hard reset your device, backup FIRST!
HI Boris,
where to find the manual ETC.
A RAW ROM maens a bin file? how to convert then to something readable modifiable.... i understand that this is the main issue now.
I want to see a computer file which isn't binary based....
or a full text ROM
In fact, for me a raw ROM is a ROM-file which has been extracted from the device... The difference with a ROM-to-install is the encryption which is not present with raw dumps (to be checked).
Raw dumps can be modified and then re-updated but it needs some operations that are command-line based...
Once you got your raw ROM on SD, copy it to PC using ntrw, you have to find the correct tool to dump the content (dumprom should do the work)
Remember to keep the raw ROM as a backup, and work with a copy of the raw ROM.
You can also cut/paste the file into parts (OS, EXTROM...).
Logically, if you got the original ROM file (the german one) and the same taken from the device (raw ROM), we should be able to modify some existing tools to work with 69xx ROM files and cook some ROMs.
in bootloader mode: type
"h COMMANDNAME full" should show full manual of COMMANDNAME.
To have more informations, once you know if your bootloader has d2s or r2sd ... command name, search for it on wiki and you should have more informations and examples on the specific command.
I need to extract the ROM from one of these as well. I am getting into bootloader and trying to dump the rom to 256MB SD as follows...
USB>
USB>
USB>password BOOTLOADER
HTCSPass.<YHTCEUSB>d2s
SD:Waiting for card insert.........
CMD3 for SD, it's OK, ready to get RCA from response.
SDetected one card
SD:ready for transfer OK
d.total_lba=7A000
d.block_size=200
d.RCA=B368
d.drv_type=40000000
d.busWidth=1
Total card size=F400000
SDCARDD2S+,cStoragePlatformType=FF
Then the device just sits there with Cal Checksum on the screen. I get no response from NTTY or device until I restart.
I read on another thread that it might be locked. I also read that there may be a password to get into another level of access. See http://mobilitytoday.com/forum/showthread.php?t=15217 for details.
I have to get this cracked as I want to restore my good any network ROM onto a network specific device.
Anyone got any other ideas?
Matt4444 said:
Then the device just sits there with Cal Checksum on the screen. I get no response from NTTY or device until I restart.
Click to expand...
Click to collapse
The checksum calculation is a long process, try to wait longer...
Anyway your SD should have been written... have you tried to read it?
EDIT: Does it show ******** or direct checksum calculation? (how long is the process)
I let it run for over an hour the first time but that was with a 1GB SD card and I understand that it would take longer with 1GB.
I haven't actually looked to see if there is anything on the card(s) as I just assumed it hadn't worked. Other threads say that the device gives you progress or at least some response from the MTTY to say it was done.
I have to shoot to a meeting but will try again when I get back...
b0ris747 said:
Just press ACTION+POWER+reset with stylus and hold this combinaison for a few seconds, you'll see a screen without backlight (so you must be under bright light to see it) going into bootloader mode.
Put your device on the cradle (which I suspect you had connected it to your PC)
using mtty, connect to your USB Port (or Serial port if serial cradle)
type "password BOOTLOADER" and use "h" as an help command.
Now you can dump a ROM from Bootloader
The command should be sth like "r2sd"
Read the manual of this command "h r2sd full" and use it to dump your ROM on the SDCard
Now you can dump the raw ROM image from SD Card Reader using ntrw.exe
EDIT: going to bootloader mode seem to hard reset your device, backup FIRST!
Click to expand...
Click to collapse
yes, nice but does not work in 69xx's bootloader. while executing d2s command the device loops on "Calculating checksum" point and nothing happens even after an hour of waiting .. :-(
That is the same problem I am having. I read on another thread that dmc874 (who seems to know what he is talking about) thought it was related to the device being locked. See http://mobilitytoday.com/forum/showthread.php?p=68783
I am now trying to research the locking to see if there is anything I can do to unlock it... anyone else got any ideas?
Does anybody tried to upload a .NBA image through bootloader?
Someone to know the command for sending through bootloader to certain address locations?
What about pdocread or such tools?
Method to dump ROM from wizard using pdocread: http://www.spv-developers.com/forum/showthread.php?t=2888
Does Anyone Know Where I Can Get A English Rom For My IPAQ hw6955 Whitch Is Currently In French Please Help..
b0ris747 said:
Just press ACTION+POWER+reset with stylus and hold this combinaison for a few seconds, you'll see a screen without backlight (so you must be under bright light to see it) going into bootloader mode.
Put your device on the cradle (which I suspect you had connected it to your PC)
using mtty, connect to your USB Port (or Serial port if serial cradle)
type "password BOOTLOADER" and use "h" as an help command.
Now you can dump a ROM from Bootloader
The command should be sth like "r2sd"
Read the manual of this command "h r2sd full" and use it to dump your ROM on the SDCard
Now you can dump the raw ROM image from SD Card Reader using ntrw.exe
EDIT: going to bootloader mode seem to hard reset your device, backup FIRST!
Click to expand...
Click to collapse
..hey great info on how to get to bootloader,, i have a tmobile wing and need to get to the boot loader screen please tell me specifically wat i have to do.. also wat do u mean by action button???????
mafioso617 said:
..hey great info on how to get to bootloader,, i have a tmobile wing and need to get to the boot loader screen please tell me specifically wat i have to do.. also wat do u mean by action button???????
Click to expand...
Click to collapse
Action button = push directional pad in no direction
Anyway it won't work...
Maybe a method based on this:
http://forum.xda-developers.com/showthread.php?p=1480853
I'm looking for a french dump!
I'm also looking for a crazy volunteer to test an english ROM (It probably won't update, but I'd like to see the resut and I've got no such device Magician, Beetles and Prophet only...)
b0ris747....
My pda Hp 6915..normal english 1.21UK rom. hp sites german rom download. Hp6915 update error. error code display vG.30.
Hard reset end soft reset not fonksionert.
Help me.
Not: not english speak sory.
http://forum.xda-developers.com/showthread.php?t=309357
good! Can it works for eten x500?
nixo79 said:
Does anybody tried to upload a .NBA image through bootloader?
Someone to know the command for sending through bootloader to certain address locations?
Click to expand...
Click to collapse
This is information for the BEETLES, Should not be too different than the 6900, If anyone could backup a 6900 series radio, and upload it, alot of us would be grateful.
Source: http://blogs.unbolt.net/index.php/brinley/2007/07/31/ipaq_6515_dead_gsm_after_failed_firmware
Extract of my RadioROM
I extracted from start address of 60000000 with a length of 800000 what I think is my radio rom and this can be downloaded at
http://www.bold.net.au/~behave/radioROM.zip
I came up with this address from experimentation and addresses from other XDAs and extracted with the following command
USB>d2s 60000000 800000
SD:Waiting for card insert.........
CMD3 for SD, it's OK, ready to get RCA from response.
SDetected one card
SD:ready for transfer OK
pc->drive.total_lba=1EB400
pc->drive.num_heads=0
pc->drive.sec_p_track=0
pc->drive.num_cylinders=0
pc->drive.block_size=200
pc->drive.features=0
pc->drive.RCA=CFAD
pc->drive.drv_type=40000000
pc->drive.securedAreaSize=0
pc->drive.securityDrv=0
pc->drive.busWidth=1
pc->drive.erasedSize=0
Total card size=3D680000
SDCARDD2S+,cStoragePlatformType=FF
********************************
Store image to SD/MMC card successful.
Anything higher and the dump fails.
USB>d2s 60000000 800001
SD:Waiting for card insert.........
CMD3 for SD, it's OK, ready to get RCA from response.
SDetected one card
SD:ready for transfer OK
pc->drive.total_lba=1EB400
pc->drive.num_heads=0
pc->drive.sec_p_track=0
pc->drive.num_cylinders=0
pc->drive.block_size=200
pc->drive.features=0
pc->drive.RCA=CFAD
pc->drive.drv_type=40000000
pc->drive.securedAreaSize=0
pc->drive.securityDrv=0
pc->drive.busWidth=1
pc->drive.erasedSize=0
Total card size=3D680000
********************************Read radio flash is fail!
The size of the uncompressed ROM is around 1gig because I only have 1gig sd cards to dump the ROM on.
You will probably need a 1gig or larger SD card, dim92 tried writing to a smaller card and the IPAQ doesn’t recognize it but you are welcome to give it a try on smaller cards as most of the image are 0s anyway.
Once you have written the image on to an sd card (use any of the bigrom guides using ntrw), pop it into the IPAQ and enter boot loader mode (power + joystick + reset). It should show up with “Download Sections: 1 press power to start".
Press power button and it should show “Updating radio". Let it finish and if it completed with no errors, power up to see if the mobile phone works. If it still does not work, try running the beetles radio patch now. If this too does not work, try running the LATEST rom from HP.
Useful utilities
iPAQDisk
http://www.xs4all.nl/~itsme
HOWTO: Change serial number and model number for HP IPAQ 6515
HP IPAQ 6515 Bootloader password
Exploring HP IPAQ 6515e bootloader
Nazeroth said:
I dont know much, i know nothing indeeed, however i found somewhere a pack of files for the Wizard that were supposed to work for the sable, however they didnt, but there is this particular file, that when ran in the sable made appear a folder called "2" with an icon of a storage card and which rpely the contents of the root of the device (but for itself i mean no 2 folder inside the 2 folder lol)
I dont know if it is of some use but i definitevely want to perform a corporate install of windows in my sable and kill all that HP crap that comes in bundled
Click to expand...
Click to collapse
Hi buddy,thanks for your attachment.
But I gotta tell ya this doesn't work in hp6915,coz all the ROM in the internet do not have ExtRom.nbf,so nobody's device had flashed the Extended Rom in device...then the Unlock tool will not work in this.
Anyway,thank you
Brose

[Q] hw6915 wm6.1 rom

Ok..so first of all thanks for clicking on my thread.I hope somebody can help me flash a rom.I can't post the link because I'm new....I added a text file with the link(yes, it's on xda)
Post #9 describes a process of flashing this rom.
My device: HW6915 vG.39 G4(flash chip)
I am having trouble with this step pdocwrite spl -n0 -b 0x20000 0 0x80000.
Yes I know what the bootloader is and I know how to get into it.So after I connect the device via usb(while in BL mode) i run the command mentioned above.The problem is that nothing happens(screenshot included),it just stays at the same command and does not progress at all.CPU usage is little to none.And if I do try to flash the rom anyway the progress bar on sable_RUU gets stuck at 1% and after a few minutes gives an error.I tried this on XP 32 and on 7 64.
Yes, this is my first post, so take it easy.
Thanks for any help.
hello. i have the same problem but my sable ruu progress bar freezes at 51% and then pop up error:201. help?
For you it's stuck at 51% because you also flashed the bootloader(CEBL.nbf).I chose not to as it's optional.Even so I'm still stuck on the original problem.
Anybody know the answer to this?
my problem is identical. i am also having trouble with pdocwrite spl -n0 -b 0x20000 0 0x80000.after i run the command nothing happens,it just stays at the same command and does not progress at all as in your case. then when i run sable_ruu it freezes at 51%
did you try...
did you try opening the command prompt as administrator?
Code:
1. Click on start
2. Type command
3. Then either right click and then pick run as administrator or just CTRL + SHIFT + Click
If that doesn't work you can try disabling UAC by clicking start, typing UAC pick the first option then dragging the slider to the bottom and restart computer
You need to write SPL when phone is on and connected with ActiveSync, not in bootloader.
Spiaatie said:
You need to write SPL when phone is on and connected with ActiveSync, not in bootloader.
Click to expand...
Click to collapse
Ok it works thanks guys for all the help.
Will report back to your thread and tell you about my findings
Thanks,appreciate it
Thanks from me too. On the first look wm 6.1 runs faster than 5.0 and gps does not work (igo 2006 plus-can not find gps com port).
my suspicions on gps is it might be driver related in asset viewer (Settings/System/MyCPL 7) under GPS it used to state whether it was on or off in WM5 but now it says N/A
jambongo said:
my suspicions on gps is it might be driver related in asset viewer (Settings/System/MyCPL 7) under GPS it used to state whether it was on or off in WM5 but now it says N/A
Click to expand...
Click to collapse
Yes the driver is indeed missing as this is ported from a hp without gps(i guess so anyway).First clue is that it doesn't include any base navigational software.
Second igo 8 reports ''gps driver not found''
n can you! help???
you seem to know how to proceed to tryin' roms on you hw6915;
......i don't!
can u help me, i'm really a newbie on this!!!
i wish there was an "upgrade your ipaq verson for dummies" or somthing!!
i got the hp ipaq hw6915, an usb connector, Internet access!! anything else?
oussahoo said:
you seem to know how to proceed to tryin' roms on you hw6915;
......i don't!
can u help me, i'm really a newbie on this!!!
i wish there was an "upgrade your ipaq verson for dummies" or somthing!!
i got the hp ipaq hw6915, an usb connector, Internet access!! anything else?
Click to expand...
Click to collapse
Beware dude this is higly experimental.There is no GPS for example.The rom is wm6.1.This is just for people who want to test and no it obviously not official.All files can be found at the link in the TEXT file I attached to my first post.
1.Connect your device to activesync(suggest a hard reset first,however it's optional)
2.Extract SPL vG.39.7z anywhere you want.
3.Run ''Command prompt'' (if using vista/7 RUN AS ADMINISTRATOR)
4.Enter this command pdocwrite spl -n0 -b 0x20000 0 0x80000 (WAIT UNTIL IT FINISHES).This command replaces a file in the ROM which allows you to flash ''non-original roms'' basically software CID unlocking which allows flashing of ''cooked roms''
5.You will get warnings on your hp regarding a dll file(itsutils.dll) PRESS YES
6.Put your device in bootloader mode.[hold the two buttons next to the joystick(the round thingy) and shortly tap the reset button with your stylus
7.Open activesync,go to connections and untick allow USB connections
8.Extract 6915_ENG.7z and run Sable_RUU
9.Press on the big ''Upgrade button''
10.There will be a progress bar, when it's done it should say something like '' Update finished !!''
11.Go back to activesync and re-tick allow USB connections
I wrote this for everybody who's got trouble flashing roms on their hw69xx.Yep I had this problem too.
This detailed enough?
jambongo said:
did you try opening the command prompt as administrator?
Code:
1. Click on start
2. Type command
3. Then either right click and then pick run as administrator or just CTRL + SHIFT + Click
If that doesn't work you can try disabling UAC by clicking start, typing UAC pick the first option then dragging the slider to the bottom and restart computer
Click to expand...
Click to collapse
A question ....
but it happens to me the same error in XP and not out of the 1% resulting in the error 201
Can you help me!
hi
I have the hw6915
to me the procedure doesn't go
he/she writes me "client_initialize Fail Error 601"
a question: what I write on the Command Pront
thanks
for further information
the cell doesn't connect him to activesync
it is jammed on screens her/it USB - LOGO HP INVENT and in low vG.39
THANKS
@spiaatie
mine is in bootloader
however it doesn't connect him with Activesync
what do I have to do?
which procedure do I have to do?
thanks
can't program ipaq 6945
When ever I push upgrade button, it just hangs and afer a while I get the message:
client_getosver Fail !! Error :501
I'm using it on windows XP,
could someone help me!!!
Thanks!
rra_pn said:
client_getosver Fail !! Error :501
Click to expand...
Click to collapse
Did you install SPL?
Yes, I did de pdcowrite on command prompt, then it gave me the warning on my ipaq and then it finished.
After that I unticked the allow usb connections on active sync
then I press the two buttons next to the joystick and press the reset
I run sable
and then it does what i Posted
Thanks!

Categories

Resources