Very Interesting Hidden Menu in ETEN M600 WM5 Device - Windows Mobile Development and Hacking General

I've been looking at the ROM for the M600 and noticed a ton of stuff that looks related to some kind of test mode that the M600 can go into.
For example, just open temp.dat that is extracted as part of the ROM update and you will find many instances of what I call test code at the end of the ROM such as this snippet from near the end of the ROM:
Ver B01.0010 Touch LCD to continue Input any key to continue
Test O.K. Test Fail No Name M600 Test System System Info Item Test Packet Test Packet A Test Packet B Test Packet C Test Packet D Test Packet E Test PCBA A Test PCBA B Test Burning Test Test Statistics Tools Align Screen USB Loader ADC Test LCD Test LED Test Keypad Test NFlash Test RAM Test Touch Panel Test Back Light Test Vibrator Test Battery Test Door Lock Test GSM Test OS Image Test AUDIO Test WLAN Test Ear Phone Test SD/MMC Test Camera Test HeadSet Key Test HeadSet Key Bluetooth Test GPS Test USB Sync Connect Test out of Heap read error not the same Spec Block Test All Block Test Data Line Addr Line Data (Byte-Byte) Data (Word-Word) Data (Long-Long) Data (Byte-Word) Data (Byte-Long) Data (Word-Long) Memory Device : OK : FAIL UP DOWN LEFT RIGHT ENTER JOG-UP JOG-DOWN RECORD SEND END AP1 AP2 POWER RESET CAMERA ORA. On ORA. Off Green On Green Off Red On Red Off Battery Door Lock Battery Door Unlock Back Light On Back Light Off Vibrator On Vibrator Off Run USB Loader
There appears to be GSM, SD/MMC, Camera, GPS, WLAN, USB Loader, etc tests on the device. Does anyone know how to access them? Perhaps some special program that is run the PC and/or a special USB cable to get it into this test mode?
I find this one especially interesting:
Boot Loader USB Downloader Test Program BT Address IPL Pocket PC END OF INFO ETEN
###### Select Menu ######
[0] Download & Run
[1] Download Only
[2] Whole Flash Erase EXCEPT BDL
[3] Program NAND Flash (TC58256 - 32MB NAND)
[4] NAND Flash MTBF Read Test
[5] Dump Flash
[D] Load & Program [Demand Page BIN]
Load & Program [Boot Loader ]
Load & Program [USB Down Loader]
[E] Load & Program [EBoot ]
[T] Load & Program [Test Program ]
[M] Load & Program [Main OS Image ]
[7] Launch Test Program
[8] Launch PocketPC 2003
[9] Launch EBoot
Waiting a command:
Would anyone out there have any idea on how to access this "test" menu?
I know how to enter the bootloader mode (http://kb.eten-users.net/14_7_en.html) but beyond that doing the Dump Flash which is of particular interest to me, eludes me as to how to get into this menu...
I tried mtty on my device just for the heck of it while it is in bootloader mode and awaiting a flash file and it really doesn't do much. You type a few characters and it thinks it is being sent a file and errors out...

I've tried so many different types of button mashing routines too see if there are some other key combo's that would maybe bring me into the secret test menu, but that is going to be a one in a million chance of actually finding it, if that is even it at all.
There is a test screen where you can tap the screen and it fills in boxes with different colors, maybe ETEN was "cute" and perhaps if you click in certain quadrants of the screen it will bring you into the menu.
All the different types of characters i've tried sending via usbterm and mtty have failed as well, but lets just say theres thousands/millions of combinations.

This menu may be activated by inserting a specially formatted SD-card.
You have to decompile bootloader to find the activation method.

Ohh how I wish someone would do that.. i for one definately don't have that kind of expertise

FooBar69,
This menu is in USBloader, BUT - it sends it (and expects an answer, naturally) to/from SERIAL port, not from USB... Right now I'm trying to find a way to communicate to that serial port (don't know for sure whether these signals even wired to M500/600s 18 pin connector or not).[/b]

Sounds great!!! I really hope you can figure this out. It would be invaluable to all those out there that have this wonderful phone.

Power Button + Stylus,, then keep Power Button and release stylus,
can enter TEST mode.
Is this what you want to know?

Nope that menu and others are already known. See here:
http://kb.eten-users.net/14_7_en.html
I am looking for the menu stated in the first post that gives you the option to do the following:
###### Select Menu ######
[0] Download & Run
[1] Download Only
[2] Whole Flash Erase EXCEPT BDL
[3] Program NAND Flash (TC58256 - 32MB NAND)
[4] NAND Flash MTBF Read Test
[5] Dump Flash
[D] Load & Program [Demand Page BIN]
Load & Program [Boot Loader ]
Load & Program [USB Down Loader]
[E] Load & Program [EBoot ]
[T] Load & Program [Test Program ]
[M] Load & Program [Main OS Image ]
[7] Launch Test Program
[8] Launch PocketPC 2003
[9] Launch EBoot
Waiting a command:

sorry, disturb you,. pls forget my post!

did anyone succeded in doing this?????

Related

T-Mobile USA PPC PW10B1

Hi, let me start off byapologising if this issue has been dealt with before but I am fairly new to the board and I am also a complete novice when it comes to these types of phones.
My problem is this. I have a T_Mobile USA PPC Wallaby, I live in England and I would like to unlock it so that I can use an O2 chip in it. I need an SID code to use the O2 chip which T-Mobile USA will not give to me because I do not have an account with them. I tried XDAunlock but it kept saying "Error getting unlock code". I tried to install "XDA-developers-SER-v12" but I kept getting the error message "ERROR: GetDeviceData - An existing connection was forcibly closed by the remote host.
error getting devicedata" and then "Cannot execute the remote communication program.
Please make sure the USB/Serial cable is properly connected". I also tried using "xdadev_all_unlock-v1.3" with no luck. In fact, all I have been able to do is downgrade the Radio Stack (whatever that does?)
My device is.....
ROM Version : 4.01.16
Radio Version : 4.21.00
Protocol Version : 32S54
Hardware Version : PW10B
I am using Activesync 3.8 with Xp Home installed on my desktop. If anyone has any insight into this please could you help me with it?
Many thanks.
As already told via PM:
You have to install the special Edition ROM via SD-Card since you´re actuell ROM-Version prohibits flashing via EXE-File....
Extract the Specialedition ROM EXE file with winzip. You get an directory English where the ROM (NK.nbf) is located.
Download XDATools ftp://xda:[email protected]/Wallaby/Tools/XDATools.zip
Extract them at any place and run osimagetool
Select the NK.nbf File in the Source drop down menu.
Select your SD card (disk drive) from Destination the drop down menu.
Select Copy to start writing process and the tool should start writing to the card.
When XDATools has finished writing the image (no Infomessage) put the SD-card into your device
If there comes a message to format the SD-card select No
Hold the power button and soft reset. You'll be taken to the below screen:
SD DOWNLOAD
Card Type:
CE OS & BOOT
Press action to Download
Or
Press REC to Exit
Press action to download and it will start the download/restore from the SD card.
Follow the on screen instructions once its "Completed" which will consist of a " Hard Reset"
Stefan
Success!!!
Wow! Thanks Stefan, that actually worked and I now have the Special Edition Rom installed on my device! The only problem I have now is that I have no signal Do I need to upgrade my Radio Stack?
No, normally not.
You could try changing Bands in bootloader, but normaly it shoud work....
Code:
Changing radio bands on Wallaby using the Bootloader
This page describes how to change radio bands on a Wallaby phone using the bootloader. If you change to a band that is not supported by your phone, your radio will receive less signal than with the bands it was tuned for. I.e. if you have a 900/1800 phone (Model number on sticker printed on back says "PW10A" instead of "PW10B") then if you change to 1900 MHz your phone will not be tuned right. If your sticker on the back says PW10B, then using the 1800 band is likely to degrade signal quality.
Changing bands
1. Press and hold the power button on top of the device
2. Go to the bootloader by gently pressing and releasing the stylus in the largest of the two holes on the bottom of the device
3. Release the power button
4. Wait for the screen to say "GSM OK"
5. Press the 'calendar' button on the right above the screen
6. Select the GSM band of your choice from the menu using the rocker switch under the display
7. Press the center of the rocker switch to confirm
8. Perform a soft-reset by pressing and releasing the stylus in the large hole again, this time without holding the power switch
Is your device really unlocked?
Can you search manually for networks? Do you find any one?
Have you the possibility to try another SIM-card?
Stefan
Boo Hoo Hoo!
The good news is that I now know how to install new Roms using the method you provided, yay! But now I cant get any signal at all and it does not seem to be able to find any networks, boo.
Boo Hoo Hoo!
The good news is that I now know how to install new Roms using the method you provided, yay! But now I cant get any signal at all and it does not seem to be able to find any networks, boo.
?????????
Since messing with the Radio Stack I have been unavle to get asignal or even pick up any networks? And I dont seem to be able to upgrade it to what it was? The only Stacks I can get to work are the exe type from the ftp server here, the zip files ones dont seem to work for some reason, and I need 6.25 which is only available as a zip. Does anyone have 6.25 as an exe type?
Thank God!
Well, I must be a complete dunce. I managed to upgrade the Radio Stack back to 6.25.02 and thanks to the help from LumpiStefan (and the fact that he was very patient with my complete noviceness) I am able to use my O2 chip and my PPC is now a phone as well!
Same problem but cant get into bootloader!
any Ideas ?
Re: Same problem but cant get into bootloader!
HarryG said:
any Ideas ?
Click to expand...
Click to collapse
Whilst holding the power button in, press the stylus into the reset bugton then let go.
Ive dont that 100 times - noting!!! - Bootloader seems to be gone!
HarryG said:
Ive dont that 100 times - noting!!! - Bootloader seems to be gone!
Click to expand...
Click to collapse
Hmmm, I don't know how to fix that? I tell you what though, there is a user here called 'LumpiStefan' and he basically walked me through it. He knows his stuff, maybe if you asked him he would help?
install everthing
installed erthing looks great but it is still locked need help getting a error getting unlock code

I need help with my O2 Himalaya

I use the xda2unlock.
I have done it.
• You firstly need to put your xda II in the boot up mode Note: THIS WILL WIPE YOUR USER DATA SO ENSURE YOU HAVE BACKUP UP ALL YUR DATA ON YOUR PC.
• To enter the boot loader mode Hold the Power button and the Action button while pressing the stylus in the reset hole on the bottom.
• If you are in boot loader mode the screen will go gray and display serial at the top of the screen.
• Put the device in the USB cradle. The display will now say USB on the PDA and your pc will detect the PDA.
• Display USB in Active sync in 'File -> Connection Settings'
• Run the xda2unlock program.
• Type YES when requested by the unlock program and then press Enter on the PC keyboard.
When I type YES en my computer, this program return:
ERROR: OpenComport \\.\WCEUSBSH001 - Acceso denegado. :shock:
xa2 unlock
Try running the latest version of the unlock program no need to reset the xda or go into bootloader mode. It worked great on my xda 2
dont say thanks
Dont bother saying thank you for your help, will you?

T-mobile Mda stuck on boot screen

I have a cid and sim unlocked T-mobile mda running Wm5. Problem is now when I boot up the device it hangs @ the T-mobile boot screen. I have
ipl 2.26
spl 2.26
Gsm 02.25.11
os 2.26.10.2
Any help plz guys
EDIT... FIXED THE PROBLEM Found this in and it worked...
Ok here´s how I done it.
First, I must explain what was the problem.
After update the firmware (not actually upgrade, I had the phone full of trash, so I decided to reflash same firmware v2.18 PTG), the Qtek 9100 / HTC Wizard freezed at 2nd splash screen (the one that shows OS versions IPL version, ect). Tried many different versions, upgraded to 2.24, 2.25, downgraded even to 1.6.7.3, but always same problem, freezed on second splash screen. I read many topics on xda-dev, and seen some people with same problem. Apparently there was 2 solutions. 1- send phone back to warranty. 2- write backup ROM from SD in bootloader.
Passed more then 15 hours asking for this SD backup everywhere, and COULDN´T find any help. Apparently no one had this "SD dump ROM Backup".
So here´s how I solved my problem
1- I tought that a SD backup was needed, and yes it is. But u can use your own phone and your own SD to do it.
2- Get a clean SD card (in qtek 9100 / Htc Wizard case is MiniSD) with 128MB (some people say 64MB, but I personally used a 128MB, maybe a 64MB is enough)
3- Kill (task manager) wescomm.exe (this is related with activesync installed on your PC). Insert the blank SD card on the phone.
4- Get your phone in bootloader mode. Like this : Phone powered off, press Camera button + Power On, will enter in bootloader mode (RGB screen).
5- Now connect your USB cable to your phone. And start MTTY_updateROM.exe (http://wiki.xda-developers.com/uploads/romupdate.rar). After open, on Port selection, choose \\.\WCEUSBSH001 and press OK. A window will open with a blank sheet.
6- Type "r2sd all" and hit enter... wait to the end (at end shows "cmd>"). On your phone screen u can follow backup progress... small bar will appear down the RGB screen.
7- Power off the phone (or remove battery), enter bootloader mode (camera button + power on) and this time RGB won´t appear right away. Will ask if u want to "download SD image", press voice dial button to agree, and writting will begin. Wait to the end. Power off and power on normally. Now your phone should be working ok. Not even needed to reflash the phone after this.
Thanks to all and hope this helps more people with this problem
5- Now connect your USB cable to your phone. And start MTTY_updateROM.exe (http://wiki.xda-developers.com/uploads/romupdate.rar). After open, on Port selection, choose \\.\WCEUSBSH001 and press OK. A window will open with a blank sheet.
The only Port Selections available are:
COM1
COM2
COM3
COM4
COM5
What am I doing wrong?
i got the same problem too
only com1 and com2 r there
pleace help me
Yes please someone help!
I want to try this, too, but my mtty tool only shows some com-ports and not WCEUSBSH001 ! what's wrong?
Does this work with mini sd cards bigger than 128 mb, too? is there a limit?
ok, I have the right port in mtty tool now, but...
when I enter "r2sd all" and press enter it says this:
r2sd all
***** user area size = 0x77F00000 Bytes
R2SDBackup() - Download type = 5
usTotalBlock = 1 sizeof(SDCARD_SIGNATRUE_TABLE)=512
You didn't get the proper security level to download a specific image
Cmd>
what can I do?
any help is greatly appreciated!

Upgrade without usable Mail button

Hello
I want to upgrade my MDA3 from WM2003se to WM06.
After i have read the upgrade artikel, i have seen, that im must change this
"Enable KITL” must be NO, “Clean Registry Hive” must be YES, “Format Storage” must be YES"
And here is my problem, my 4 buttons (Mail, Explorer, Windows, ok) in front of the MDA are Defect. So i can´t confirm the Options.
Are ther other ways to do this.
MFG Kleinepelle
PS: I know my english is very bad
Logically if you map the mail button to any of the top buttons, that should work as BA still keeps the entire software prior to pressing mail button. However an expert should confirm. Dont take risk.
Upgrade without usable mail button
kleinepelle said:
Hello
I want to upgrade my MDA3 from WM2003se to WM06.
After i have read the upgrade artikel, i have seen, that im must change this
"Enable KITL” must be NO, “Clean Registry Hive” must be YES, “Format Storage” must be YES"
And here is my problem, my 4 buttons (Mail, Explorer, Windows, ok) in front of the MDA are Defect. So i can´t confirm the Options.
Are ther other ways to do this.
MFG Kleinepelle
PS: I know my english is very bad
Click to expand...
Click to collapse
Hi there ... I have the same kind of problem with my O2 XDA IIs Blueangel. The mail button along with the other 3 (home,ie,ok) are not working or not responding anytime.I was not able to upgrade my rom and format the registry hive
But then i found a much simpler way to do it..
Try the following to format your rom,clear registry hive and upgrade to a new rom-all this even with the mail button not working.
You will need the program MTTY(Attached with this post).
1) Kill activesync processes: Ctrl+Shift+Esc in Windows to bring up Task Manager. Kill wcescomm.exe and WCESMgr.exe (by selecting the task on the processes tab, and clicking the End Process button below)
2) Phone needs to be POWER + Record + Pen Reset and on Serial/USB screen. COnnect it to the PC, and it should show USB, with the backlight remaining off.
3a) Run mtty1.42.exe
b) Select USB from first list (where COM1 is displayed. Don't press USB button). If USB (or a list item containing USB) isn't in the list, then you have't connected to the PC properly.
(Leave default parameters: 8 bits / Flow Control NONE / Stop bits 1 / Parity None / Local Echo No)
c) Click OK
3) Run following commands:
[press enter first to get USB> prompt]
USB>
5. type "set 14 0" without the quotes to tell bootloader to boot the OS after reset.
USB>set 14 0
HTCST ÚÈHTCEUSB>
6. type "task 28" to get your device formatted
USB>task 28
DOC_format_HW+
DOCInfoTableinitHW+
Binary0:dwSize=80000
BINFS0:dwSize=0
FAT0:dwSize=1000000
FAT1:dwSize=2BA0000
All:dwSize=3C20000
USB>
7. type "task 0" to ask your device reboot
USB>task 0
USB>
8) Exit the program, then re-hard-reset (POWER + Record + Pen Reset), leaving on USB screen in order to run ROM Flasher
9)Now be back to the Usb/Serial screen and run your favourite ROM upgrade-A clean installation
Please let me know if this worked for you too. I believe this was my great geeky work i did with my BA. Was so frustrated when the buttons were not
working.
P.S: This is not my own work. I got the Mtty app from this same forum and the steps too. I am terrible sorry if i have repeated a post or done something i should not
Thank you very much.
It runs very good.
MFG Kleinepelle
Great advice! this should be placed in the wiki as well
Thanks to you and to all others <ou mwntioned for this help. Dtipex
thanks, it works!
thanks, it works!!
crabiorc said:
Hi there ... I have the same kind of problem with my O2 XDA IIs Blueangel. The mail button along with the other 3 (home,ie,ok) are not working or not responding anytime.I was not able to upgrade my rom and format the registry hive
But then i found a much simpler way to do it..
Try the following to format your rom,clear registry hive and upgrade to a new rom-all this even with the mail button not working.
You will need the program MTTY(Attached with this post).
1) Kill activesync processes: Ctrl+Shift+Esc in Windows to bring up Task Manager. Kill wcescomm.exe and WCESMgr.exe (by selecting the task on the processes tab, and clicking the End Process button below)
2) Phone needs to be POWER + Record + Pen Reset and on Serial/USB screen. COnnect it to the PC, and it should show USB, with the backlight remaining off.
3a) Run mtty1.42.exe
b) Select USB from first list (where COM1 is displayed. Don't press USB button). If USB (or a list item containing USB) isn't in the list, then you have't connected to the PC properly.
(Leave default parameters: 8 bits / Flow Control NONE / Stop bits 1 / Parity None / Local Echo No)
c) Click OK
3) Run following commands:
[press enter first to get USB> prompt]
USB>
5. type "set 14 0" without the quotes to tell bootloader to boot the OS after reset.
USB>set 14 0
HTCST ÚÈHTCEUSB>
6. type "task 28" to get your device formatted
USB>task 28
DOC_format_HW+
DOCInfoTableinitHW+
Binary0:dwSize=80000
BINFS0:dwSize=0
FAT0:dwSize=1000000
FAT1:dwSize=2BA0000
All:dwSize=3C20000
USB>
7. type "task 0" to ask your device reboot
USB>task 0
USB>
8) Exit the program, then re-hard-reset (POWER + Record + Pen Reset), leaving on USB screen in order to run ROM Flasher
9)Now be back to the Usb/Serial screen and run your favourite ROM upgrade-A clean installation
Please let me know if this worked for you too. I believe this was my great geeky work i did with my BA. Was so frustrated when the buttons were not
working.
P.S: This is not my own work. I got the Mtty app from this same forum and the steps too. I am terrible sorry if i have repeated a post or done something i should not
Click to expand...
Click to collapse
very well explained . good job

Problem accessing HTC Uni bootloader...

Hi guys,
I'm probably being really daft and missing something really obvious but I've been going round in circles for about a week on this now without any success and starting to tear my hair out. Proficient enough at flashing ROMs [the joys of HD2 ] and been working in IT support and consultancy for 20 years so the PC side is OK too - have tried searching through the various threads on here along with Googling but can't seem to find anything conclusive regarding my situation and hope someone could point me in the right direction.
Orange M5000 - rebranded HTC Universal, obviously
Pressing Power + Lamp + Reset does not appear to take me into the bootloader - I don't get a screen saying 'SERIAL'
I get a screen offering the following options:
Boot Options:
Enable KITL
Clean Registry Hive
Format Storage
with the following at the bottom of the screen:
R 1.03.00
G 42.36.P8
D 1.30.90 WWE
Using the small curser keys and button below the screen I can select any of the above options and select YES or NO
Pressing the button changes to another screen with a white background and the following options:
Select KITL Transport:
USB KITL
SERIAL KITL
Ethernet KITL
Select KITL Mode:
Active
Passive
And I can get no further...
I realise that we're probably missing something really obvious and/or basic out but for the life of me I can't find the answer! Thanks in advance for any help anyone can provide.
Cheers,
David
DavidElders said:
Hi guys,
I'm probably being really daft and missing something really obvious but I've been going round in circles for about a week on this now without any success and starting to tear my hair out. Proficient enough at flashing ROMs [the joys of HD2 ] and been working in IT support and consultancy for 20 years so the PC side is OK too - have tried searching through the various threads on here along with Googling but can't seem to find anything conclusive regarding my situation and hope someone could point me in the right direction.
Orange M5000 - rebranded HTC Universal, obviously
Pressing Power + Lamp + Reset does not appear to take me into the bootloader - I don't get a screen saying 'SERIAL'
I get a screen offering the following options:
Boot Options:
Enable KITL
Clean Registry Hive
Format Storage
with the following at the bottom of the screen:
R 1.03.00
G 42.36.P8
D 1.30.90 WWE
Using the small curser keys and button below the screen I can select any of the above options and select YES or NO
Pressing the button changes to another screen with a white background and the following options:
Select KITL Transport:
USB KITL
SERIAL KITL
Ethernet KITL
Select KITL Mode:
Active
Passive
And I can get no further...
I realise that we're probably missing something really obvious and/or basic out but for the life of me I can't find the answer! Thanks in advance for any help anyone can provide.
Cheers,
David
Click to expand...
Click to collapse
You must hold Power + Lamp and then press reset...
if you first press reset and then Power + Lamp you have the option that you have describe ...
d-two said:
You must hold Power + Lamp and then press reset...
if you first press reset and then Power + Lamp you have the option that you have describe ...
Click to expand...
Click to collapse
Thanks for the prompt response! Had guessed that problem would be something basic we were missing
Now we've come across another!
We can get into the bootloader fine with it showing SERIAL and when we connect the cable it changes automatically to USB. But...
Trying to run MaUpgradeUt_noID always gives an Error 150 ROM Upgrade Error - tried running as Administrator - no change
Its interesting that the picture in the utility is not of a Universal - dunno if this is relevant?
If we try to use the ROMUpgradeUT that is in the ROM directly, we get an Error 101 Connection Error
Picture in this instance is of a Universal however - again, dunno how relevant this is?
We'll get there
DavidElders said:
Thanks for the prompt response! Had guessed that problem would be something basic we were missing
Now we've come across another!
We can get into the bootloader fine with it showing SERIAL and when we connect the cable it changes automatically to USB. But...
Trying to run MaUpgradeUt_noID always gives an Error 150 ROM Upgrade Error - tried running as Administrator - no change
Its interesting that the picture in the utility is not of a Universal - dunno if this is relevant?
If we try to use the ROMUpgradeUT that is in the ROM directly, we get an Error 101 Connection Error
Picture in this instance is of a Universal however - again, dunno how relevant this is?
We'll get there
Click to expand...
Click to collapse
Which OS do you use ? (XP/VISTA/WIN7 32/64Bit)
d-two said:
Which OS do you use ? (XP/VISTA/WIN7 32/64Bit)
Click to expand...
Click to collapse
64-bit Windows 8 Pro
Works fine for flashing my HD2 via the usual methods.
Guessing there's either something we're missing in terms of running some compatibility settings [although we've tried] or that it may be a driver issue. Drivers noted in the thread about flashing Uni from Vista won't install however...
D
DavidElders said:
64-bit Windows 8 Pro
Works fine for flashing my HD2 via the usual methods.
Guessing there's either something we're missing in terms of running some compatibility settings [although we've tried] or that it may be a driver issue. Drivers noted in the thread about flashing Uni from Vista won't install however...
D
Click to expand...
Click to collapse
here look in this pdf for 64 bit you need a special driver

Categories

Resources