Related
Hello to all.
First:
I will NOT be held responsible for any problems caused by this tool.
I'm releasing the 0.1 version of the Wizard Unlocker. It's similar to the imei-check.co.uk unlocker (it patches the same bit), however it doesn't cost you £20 per bit :wink: .
Version 0.2: New CID unlocking abitity
Credits for the 0.2 version go to SPV-Developers, namely: itsme, Arc and Arisme...
Version 0.2a: CID unlocking abitity FIXED
Credits for the 0.2a version go to Chan, who took care of the errors I managed to punch in the script when I packed it the first time... Thanks!
Version 0.2b: SIMlock abitity FIXED
Credits for the 0.2b version go to kpcomp, who found the missing GOTO End instruction after a SIMlock... Thanks!
Version 0.3: SIMLock ability redone for all SPLs
Credits go to Buzz_lightyear (Go buzz) for pointing out the obvious.
Now version 0.3a: Minor update, corrected Rapi unlocking
Credits go to everyone that reported problems in the forum
I can't stress enough that this work is heavily base upon the itsme tools, so my thanks to him. Also, spv-developers and xda-developers boards were an invaluable resource.
I would also like to thank all the people that supplied their phone info in this thread: http://forum.xda-developers.com/viewtopic.php?t=33479
Ok, now the instructions...
1 - Unzip lokiwiz.zip to somewhere in your computer
2 - Guarantee that your phone is connected via ActiveSync with the computer
3 - Execute lokiwizMSL.bat (on your computer! My inbox is filled with this kind of error)
4 - It will give you the SIM unlock code after it runs, just get a different SIM from the one your phone is locked to and insert the code...
5 - Have fun...
Frequently Asked Questions:
Q - Will it hard-reset my device?
A - No. It will do a soft reset at the end of the process for applying the changes
Q - I locked my device and now it shows only the SIMlock window
A - Get your phone showing the SIMlock window. Connect it via ActiveSync. Use the tool to get your unlock code
Q - How about the CID unlock tool? (for using any type of roms)
A - Doesn't work yet... Stay tuned
Q - I'm having problems with Unlocker not connecting to the phone
A - Disable all kinds of Antivirus, Firewalls and similar applications before running Lokiwiz.
Bye to all,
Ricardo Afonso
afonso (dot) ricardo (at) gmail (dot) com
PS: If you like it... send me a mail... :wink:
It doesn't look like this has worked on my Prophet. (Orange UK M600 with latest Dopod ROM).
It looks like the auto install of "EnableRapi.cab" did not work.
I ran "LokiwizMsl.bat" 3 times, with no SIM, with the Orange SIM (it is SIM locked to Orange) and with a VirginMobile SIM. Also closing ActiveSync each time on the PC. Re-started the PC after the second try as well!
I think on the second try of running "LokiwizMsl.bat" the phone asked if I wanted to install "EnableRapi.cab" I selected "Yes" but it still went the same as the other times.
This is what was displayed on the PC -
********************************************************
C:\Lokiwiz03>lokiwizmsl
machinagod's HTC Wizard/Prophet/Charmer MSL Revealer v0.3
NOW WITHOUT CID Unlocking POWER!
ECHO is off.
Supports SPL 2.x!!
--------------------
WARNING: This tool is highly experimental!
I will NOT be held responsible for any problems caused by this tool.
--------------------
Thanks to xda-developers, spv-developers, and especially itsme by the work
released. This solution would not be possible without them.
--------------------
Unlocking RAPI Please wait...
MachinaGod RapiUnlocker v1.0
Initializing.......................Done!
RAPI Unlocked.
Starting MSL work... DO NOT DISCONNECT UNTIL THIS SCRIPT ENDS
ECHO is off.
Copying C:\Lokiwiz03\Utils\itsutils.dll to WCE:\windows\itsutils.dll
Could not update itsutils.dll to the current version, maybe it is inuse?
try restarting your device, or restart activesync
ECHO is off.
ECHO is off.
SIMLock Code is your code... Type it with another SIM in...
--------------------
opening: lock_backup.bin: No such file or directory
This exe file was created with the evaluation version of Perl2Exe.
For more information visit http://www.indigostar.com
(The full version does not display this message with a 2 second delay.)
...
--------------------
"Standing on the shoulder of giants"
Ricardo Afonso, 2005
Press Any key to Exit.
********************************************************
I installed the "EnableRapi.cab" manually and deleted all the first part of the "LokiwizMsl.bat" file so the file contained just -
*******************************************************
ECHO RAPI Unlocked.
ECHO Starting MSL work... DO NOT DISCONNECT UNTIL THIS SCRIPT
ENDS
ECHO
Utils\pdocread.exe -n 1 0x000000 0x10000 -b 0x4000 lock_backup.bin
ECHO
ECHO
ECHO SIMLock Code is your code... Type it with another SIM in...
ECHO --------------------
Utils\lokiwizMsl.exe lock_backup.bin
ECHO --------------------
ECHO "Standing on the shoulder of giants"
ECHO Ricardo Afonso, 2005
SET Choice=
SET /P Choice=Press Any key to Exit.
********************************************************
Running the above cut down version of "LokiwizMsl.bat" the PC displayed -
********************************************************
C:\Lokiwiz03>lokiwizmsl
C:\Lokiwiz03>ECHO RAPI Unlocked.
RAPI Unlocked.
C:\Lokiwiz03>ECHO Starting MSL work... DO NOT DISCONNECT UNTIL
THIS SCRIPT ENDS
Starting MSL work... DO NOT DISCONNECT UNTIL THIS SCRIPT ENDS
C:\Lokiwiz03>ECHO
ECHO is on.
C:\Lokiwiz03>Utils\pdocread.exe -n 1 0x000000 0x10000 -b 0x4000
lock_backup.bin
CopyTFFSToFile(0x0, 0x10000, lock_backup.bin)
C:\Lokiwiz03>ECHO
ECHO is on.
C:\Lokiwiz03>ECHO
ECHO is on.
C:\Lokiwiz03>ECHO SIMLock Code is your code... Type it with another
SIM in...
SIMLock Code is your code... Type it with another SIM in...
C:\Lokiwiz03>ECHO ----------------------------------------
C:\Lokiwiz03>Utils\lokiwizMsl.exe lock_backup.bin
Lock Status: 0500000000000000
SIMLock Code: 4810**** (was 8 numbers)
This exe file was created with the evaluation version of Perl2Exe.
For more information visit http://www.indigostar.com
(The full version does not display this message with a 2 second delay.)
...
C:\Lokiwiz03>ECHO ----------------------------------------
C:\Lokiwiz03>ECHO "Standing on the shoulder of giants"
"Standing on the shoulder of giants"
C:\Lokiwiz03>ECHO Ricardo Afonso, 2005
Ricardo Afonso, 2005
C:\Lokiwiz03>SET Choice=
C:\Lokiwiz03>SET /P Choice=Press Any key to Exit.
Press Any key to Exit.
C:\Lokiwiz03>
********************************************************
With the VirginMobile SIM, it was saying something like You have had 1 incorrect try wait to enter SIM unlock code.
When the screen changed to allow me to enter the code, I entered the 8 number code from the PC screen. Checked the number on the phone against the number on the PC about 10 times then pressed "Unlock" on the phone.
It now says
"Service Provider is locked
Please input unlock code."
I'm not sure if I should enter the same number again or if that would be my last of 3 chances to enter the unlock code...
I'm not sure if this is asking for the number that Lokiwiz03 has provided as it now doesn't say anything about having had 2 previous tries! (Which I have - I once entered a code that was on the screen when Lokiwiz02 failed with the ITWrite Disk Error).
What should I do?
Alan
Just want to clarify that I did wait for ActiveSync to connect each time before running the batch file on the PC!
After seeing robincop's post on another thread about Lokiwiz03 I tried runing the full origonal Lokiwiz03 version of the "LokiwizMsl.bat" on the PC after having previously manually installed "EnableRapi.cab" on the Prophet. (Orange UK M600).
It ran without any errors and gave THE SAME 8 digit SIM unlock code as before.
I had run this without re-starting the phone so it was still asking for the Service Provider Unlock Code for the second time. I had previously entered THE SAME CODE when it asked for it at power-up with the VirginMobile SIM in it.
This time it WORKED
Many thanks and MUCH RESPECT to MACHINAGOD.
I'm now using a dual SIM with Virgin(T-Mobile) and Tesco(O2) SIMs in it.
Anyone know how to get a Prophet to display on the Today screen which network it is on?
WiVit SIM Status Switcher is what you need.
But unfortunately it doesn't work "out-of-the-box" with WM5.
You should search this forum, there are some threads with solutions to get this program work on WM5 (until the developer releases a WM5 version).
I runned Lokiwiz03 the way it is described in robincop's post and it worked (thanx machinagod and robincop!). I just wat to clarify those who are confused about entering the codes. So this is the way to do it:
1 - After running Lokiwiz03 (see robincop's post) turn off the phone and turn it on again.
2 - when it asks your pin code enter your normal pin.
3 - it then asks you for the Service Provider Unlock Code: It is here that you insert the sim unlock code obtained with lokiwiz.
Hope this can be helpful!
I ran this on my MDA..seemed fine on the computer screen, everything came back & it gave me a code..however I've soft-rebooted my MDA about 5x now and don't see a screen to enter the code. It goes from the password/PIN screen right to the today screen. I searched around on the phone for a utility to enter the code into but so far no luck. Do I have to put in another provider's SIM card before I can get the 'unlock prompt'?
benenglish said:
I ran this on my MDA..seemed fine on the computer screen, everything came back & it gave me a code..however I've soft-rebooted my MDA about 5x now and don't see a screen to enter the code. It goes from the password/PIN screen right to the today screen. I searched around on the phone for a utility to enter the code into but so far no luck. Do I have to put in another provider's SIM card before I can get the 'unlock prompt'?
Click to expand...
Click to collapse
Ya the phone does not know that anything needs to be done till you put a 2nd sim card in. Then it sees that it is locked and will give you the screen to enter the code.
machinagod's HTC Wizard/Prophet/Charmer MSL Revealer v0.3
NOW WITHOUT CID Unlocking POWER!
ECHO is off.
Supports SPL 2.x!!
--------------------
WARNING: This tool is highly experimental!
I will NOT be held responsible for any problems caused by this tool.
--------------------
Thanks to xda-developers, spv-developers, and especially itsme by the work they
released. This solution would not be possible without them.
--------------------
Unlocking RAPI Please wait...
MachinaGod RapiUnlocker v1.0
Initializing.......................Done!
RAPI Unlocked.
Starting MSL work... DO NOT DISCONNECT UNTIL THIS SCRIPT ENDS
ECHO is off.
CopyTFFSToFile(0x0, 0x10000, lock_backup.bin)
ECHO is off.
ECHO is off.
SIMLock Code is your code... Type it with another SIM in...
--------------------
Lock Status: 0000000000000000
SIMLock Code: ∩X à`e\!±Φ"‼-ÄC
This exe file was created with the evaluation version of Perl2Exe.
For more information visit http://www.indigostar.com
(The full version does not display this message with a 2 second delay.)
...
--------------------
"Standing on the shoulder of giants"
Ricardo Afonso, 2005
Press Any key to Exit.
HELP!!?! What did I do wrong? I tried installing the CAB Files manually, but it did not help
That means your mobile phone is sim unlocked and doesn't need to be unlocked...
Bye
LOL. You are right. But I never unlocked it. It's brand new....
I thought o2 locked their XDA Mini S?
Anyway, should we expect to see CID Unlocking for SPL 2.xxx?
Thanks
I have a solution for the CID unlocking... But I've toasted 2 devices with it already... So I'm not releasing it.
Another thing is that CID unlocking isn't really necessary. The only case it really is important is the SPL changing, and most of the cooked ROM's don't need a new SPL.
Bye,
Ricardo
but ROMUpdateUtility_noid(Ver:2.5.2) don't support the Prophet ROM that cooked by typho5.exe(Ver:1.0.0.0) and nb2nbf_tornado(Ver:2.2.0.0)
machinagod said:
I have a solution for the CID unlocking... But I've toasted 2 devices with it already... So I'm not releasing it.
Another thing is that CID unlocking isn't really necessary. The only case it really is important is the SPL changing, and most of the cooked ROM's don't need a new SPL.
Bye,
Ricardo
Click to expand...
Click to collapse
Thanks for your work, but CID unlocking is important for the prophet users because we are only able to upgrade, not downgrade. So if someone installs the latest version of Dopod ROM and wants to go back to an iMate ROM, it is not possible.
Thanks for your efforts
Two things:
I've said it 2 times already, this is the last.
The only part of the ROM upgrade that is protected against downgrade is the SPL and the IPL. The rest is unprotected. A specially cooked rom should do it...
2nd:
The ROM updater I attach to this message should work with the cooked roms.
Bye,
Ricardo
andrew_sh said:
machinagod said:
I have a solution for the CID unlocking... But I've toasted 2 devices with it already... So I'm not releasing it.
Another thing is that CID unlocking isn't really necessary. The only case it really is important is the SPL changing, and most of the cooked ROM's don't need a new SPL.
Bye,
Ricardo
Click to expand...
Click to collapse
Thanks for your work, but CID unlocking is important for the prophet users because we are only able to upgrade, not downgrade. So if someone installs the latest version of Dopod ROM and wants to go back to an iMate ROM, it is not possible.
Thanks for your efforts
Click to expand...
Click to collapse
Hmm, with the modified ROMUpdateUtility.exe to ignor the vendor, can't you downgrade too??
machinagod said:
I have a solution for the CID unlocking... But I've toasted 2 devices with it already... So I'm not releasing it.
Another thing is that CID unlocking isn't really necessary. The only case it really is important is the SPL changing, and most of the cooked ROM's don't need a new SPL.
Bye,
Ricardo
Click to expand...
Click to collapse
Hmm, but are you going to try to finish the CID unlocking ?? Your tool is great cause one can return to a previous CID state.
You are the man!
It's work perfectly sim unlocked on a Cingular 8125, I can now use T-mobile or oversea sim card with it. Thank you so much!!!!!!!!!!
machinagod said:
I have a solution for the CID unlocking... But I've toasted 2 devices with it already... So I'm not releasing it.
Another thing is that CID unlocking isn't really necessary. The only case it really is important is the SPL changing, and most of the cooked ROM's don't need a new SPL.
Bye,
Ricardo
Click to expand...
Click to collapse
Howdy machinagod - I've got access to a AKU2.2 device and need to dump the IPL and SPL. (already grabbed the OS, radio, and ext ROM with awizard). Any advice you can give me on getting the IPL/SPL dumped? It's CID locked and r2sd gives a perm error.
Gracias amigo!
machinagod said:
A specially cooked rom should do it...
Click to expand...
Click to collapse
Look here http://forum.xda-developers.com/viewtopic.php?t=48965
Noone knows how to cook a rom for this puprose.
I have had experience cooking roms with your tools but I need some pointers.
Do I have to change only the headers? Do I have to delete the bootloader from the nk.nbf?
Thanks
Andrew
I have big problem with MDA vario Tmobile Slovak. I can not unlock it. I used lokiwiz 2a, lokiviz 3b but still no succes. I downgraded the room to CUSTOM__RUU_Wizard_1050412_WWE_101_11210_WWE, and other rooms too, but after starting lokwiz, program is waiting (i do not know for what)
www.foony.mscnet.sk/vario.jpg
www.foony.mscnet.sk/vario1.jpg
how long does it take the unlock process?
any advice please to unlock it?
I have active sync 42.
thanks
Dears,
wdata command can write data to P3300. It is possible to use this command to upgrade ROM and get around the CID lock?
If so we can make a RUU program to flash anything into ROM.
Is this pssible?
ylatsj said:
Dears,
wdata command can write data to P3300. It is possible to use this command to upgrade ROM and get around the CID lock?
If so we can make a RUU program to flash anything into ROM.
Is this pssible?
Click to expand...
Click to collapse
Of course its a good idea but I think the process is much more complicated. The update proccess depends not only on ROMUpdateUtility but also depends on the Bootloaders security. If the bootloader does not open the port for entering data, no data can be entered so no ROM update can be done. Bootloader opens the port only when the CID in the ROM file maches with the device's CID and the Signature is intact. Thats why we need USPL that does not check CID and Signature.
Tamagochi said:
Of course its a good idea but I think the process is much more complicated. The update proccess depends not only on ROMUpdateUtility but also depends on the Bootloaders security. If the bootloader does not open the port for entering data, no data can be entered so no ROM update can be done. Bootloader opens the port only when the CID in the ROM file maches with the device's CID and the Signature is intact. Thats why we need USPL that does not check CID and Signature.
Click to expand...
Click to collapse
I thought IPL won't check CID lock for wdata command. So I guess we can use wdata to flush anything into ROM (a clean,pure WM without any headers)
And we don't use ROMUpdateUtility but write an application to directly deal with the USB port on bootloder.
The purpose is to save hundreds of bricked phones. The current SuperCID program doesn't work with bootloader mode!!!
Anyone can tell me what address the Artemis OS begins with so that I can make the USB applicaiton to try to flush OS to the ROM address?
great!!
I think POF can help you
He is active in Hermes treads
ylatsj said:
I thought IPL won't check CID lock for wdata command. So I guess we can use wdata to flush anything into ROM (a clean,pure WM without any headers)
And we don't use ROMUpdateUtility but write an application to directly deal with the USB port on bootloder.
The purpose is to save hundreds of bricked phones. The current SuperCID program doesn't work with bootloader mode!!!
Anyone can tell me what address the Artemis OS begins with so that I can make the USB applicaiton to try to flush OS to the ROM address?
Click to expand...
Click to collapse
I dont think so, the SPL is like a bodyguard. To be able to write to the flashROM, some ports should be opened (enable write mode). Only the SPL can enable write mode, and it is very stubborn. Every time an application tries to write to the DOC, it asks for the CID and Signature. If these info do not match with the ones inside the DOC, it will refuse to enable write mode. You can fool it with CID but you cannot fool it with Signature unless you can imitate the signature and use it to sign the ROM file.
So the problem is how to imitate the signature or to extract it from a signed one.
Tamagochi said:
I dont think so, the SPL is like a bodyguard. To be able to write to the flashROM, some ports should be opened (enable write mode). Only the SPL can enable write mode, and it is very stubborn. Every time an application tries to write to the DOC, it asks for the CID and Signature. If these info do not match with the ones inside the DOC, it will refuse to enable write mode. You can fool it with CID but you cannot fool it with Signature unless you can imitate the signature and use it to sign the ROM file.
So the problem is how to imitate the signature or to extract it from a signed one.
Click to expand...
Click to collapse
First, sorry for q on first post and no introduction.
Basically, im male, so didn't rtfm until I got stuck...CID Locked device...botched WM6 upgrade...blah blah...bootscreen...blah...you know the score.
This thread has piqued my interest though. I am a programmer with quite a bit of experience of embedded devices. I figured that there is some way to do something like this...but not really sure how as documentation is a bit thin on the ground!
What does the wdata command actually do? My understanding is that it copies arbitary data into the devices address space...but where from? We have a dst and len, but what is the src?
wdata [Len [StartAddr]]
I assume that the flash-rom is simply mapped into linear address space.
gamefreaks said:
First, sorry for q on first post and no introduction.
Basically, im male, so didn't rtfm until I got stuck...CID Locked device...botched WM6 upgrade...blah blah...bootscreen...blah...you know the score.
This thread has piqued my interest though. I am a programmer with quite a bit of experience of embedded devices. I figured that there is some way to do something like this...but not really sure how as documentation is a bit thin on the ground!
What does the wdata command actually do? My understanding is that it copies arbitary data into the devices address space...but where from? We have a dst and len, but what is the src?
wdata [Len [StartAddr]]
I assume that the flash-rom is simply mapped into linear address space.
Click to expand...
Click to collapse
This is what I thought as well that the flash-rom is simply mapped into linear address space. But I don't know where it sits and which segment is for IPL,SPL,OS,EXTROM. etc...
And I am not sure if the IPL will secure the ROM write when it execute the "WDATA" command.
Here is the introduction for WDATA command
wdata [StartAddr Len]
Write data to memory(if write to ROM, need erase first).
StartAddr : Start address of memory.
Len : How many bytes will be written.
Length must not more than 0x10000 bytes(buffer limitation).
Write to RAM: 4 bytes(CRC checksum limitation).
1 byte(in user mode).
Write to ROM: 4 bytes(CRC checksum limitation).
2(16-bit)/4(32-bit) bytes(in user mode).
Write to ROM(16-bit data bus): 32 bytes(writebuffer mode).
Write to ROM(32-bit data bus): 64 bytes(writebuffer mode).
Length must be 4 bytes boundary(CRC checksum) if not in user mode.
After command execute, then send out the data to terminal.
Data format: HTCS(4 bytes)+DATA+checksum(4 bytes, if not in user mode)+HTCE(4 bytes).
Also please check this URL
http://forum.xda-developers.com/archive/index.php/t-285112.html
Pay atttention on this
Write data to memory(if write to ROM, need erase first).
"If write to ROM" This means the ROM is for sure being mapped into the memory space. And what important is that WDATA doesn't talk to the IPL on any CID information. This possibly means that IPL won't stop a write to ROM.
So it is worth to give a try here. The information we need before make the USB application is:
1) Where does the ROM start inside the memory address space
2) Where does the OS start and end
3) How to erase the ROM before WDATA (Another USB command but what is it)
Actually, if we know where the IPL starts we could even directly flush the IPL to Pof's superCID. But this is a little dangerous becasue it is possible to crash the IPL ROM so that the Artemis even can't start bootloader. So better not do it but to flush the OS only and make the birck start first. Then use Pof's baby to flush the SuperCID.
OK, long post. Hope we can have more experts in this thread. Thank you folks for your attention on my topic.
Hi to all in this forum.
I have one T-Mobile MDA Compact II PM200. In this forum i hound that his name is Charmer. I try to unlock it with Lokiwiz03a. Program give me a code but device says that code is wrong. I try with other software to unlock it and after that mobile work with SIM card but no signal
I reflash mobiele with WM6 founded her in the forum, not it have English (before have German) but again no signal. I try now to unlock it with Lokiwiz02a and choose CID unlock. Again no signal.
When device in Automatic search mode no found network. If in Manual mode found but unable to register in network. When i put mobile to my computer speakers no outgoing signal from mobile that's not normal.
What is the problem ?
Can onyone help me with information ot needed software ?
In moment mobile information is:
ROM version: 10.2.0.8 WWE
ROM date: 2/03/07
Radio version: 01.12.20
Protocol version: 4.0.13.23
Identity:
Model No.: WIZA200
Platform: PocketPC
IMEI: 35703700051525500
Hardware:
CPU: OMAP850
Speed: 195 MHz
...
I try to found information about this problem here in forum but w/o result.
10x in advance
Did you try to flash a new radio? 2.69 or 2.19?
No.
I found this files:
BREEIMG.zip
breeze.zip
inside breeze.zip are:
SSPL.exe
spl
breezessplv1.nb
inside BREEIMG.zip is:
BREEIMG.nbh
is this needed files for radio flashing ?
if not then what files I need to try with other radio version ?
I download Radio from ftp on this form for Prophet. And try with Prophet_G4_RadioRom_v2.47.11 but now mobile not start. Go to splash screen and after few seconds restart.
I try to put it in bootloader mode but ActiveSync can't make connection and for that flash software can't wreit new radio or flash into mobile.
I ry with:
1. dowenload this t-mobile official rom (http://www.tm-phonedownloads.com/files/RUU_Compact ll_2060227_20602110_021921_T-MobileUK_Ship.exe)
2. enter your Charmer into bootloader mode by pressing power + camera + reset, let go of the reset, but keep holding power + camera until the three colur screen will show up (that is bootloader mode).
3. connect the Charmer to your pc (make sure your battery is fully charged)
4. run the t-mobile rom.
5. good luck!
but ActiveSync can't make conection.
?
If you are in bootloader Active Sync wont make a connection. Just plug in the usb cable into your phone while in bootloader and run RUU.
Cheers,
vlodeck.
I try with this 2:
1. T-Mobile official rom RUU_Compact ll_2060227_20602110_021921_T-MobileUK_Ship
2. Prophet_G4_RadioRom_v2.69.21
T-Mobile official rom RUU_Compact ll_2060227_20602110_021921_T-MobileUK_Ship
===================================
inside are this files:
EnterBootloader.exe
nk.nbf
README.doc
ROMUpdateUtility.exe
RUUGetInfo.exe
RUUResource.dll
Prophet_G4_RadioRom_v2.69.21
========================
inside are this files:
EnterBootLoader.exe
nk.nbf
ROMUpdateUtility_G4.exe
RUUGetInfo.exe
RUUResource.dll
phone not start normaly. just start and after 5sec restart. i put it in Bootloader mode (press Camera, Power_buton and Reset. then release Reset and after few sec. mobile goto in Bootloader mode). when conect USB cable ActiveSync not find mobile and this file not make upadte/conection: ROMUpdateUtility.exe and ROMUpdateUtility_G4.exe
if I try to start RUUGetInfo.exe windows says that this is not valid Win32 application.
then what RUU to start ?
how to flash other Radio into this mobile or to reflash it again to be alive ?
anyone will help me for my problem ?
in moment when i start my pocetpc it displays:
IPL 1.12
SPL 1.12.0000
OS 10.2.0.8
the row GSM .... missing.
in moment i can't make connection with ActiveSync. then how to flash again mobile ?
now i try to flash it with RUU:
http://www.tm-phonedownloads.com/download_manager_mda_com2.html
http://www.t-mobile.de/downloads/?r...ku3.3_38222_382117_026921_tmo_de_ger_ship.zip
but it gives a error
i try with this:
http://www.my-audio.net/xda/Univers...s/Universal_Upgrade_v1.30.68_radio_1.09.0.zip
but when software start flashing says that this Utility is not for my device and to find right
?????
I'm guessing that this universal radio upgrade is for universal
Download this:
http://www.mobione.pl/pliki/ruu_252_eng.zip
Extract it, copy the .nbf of the rom you want to upgrade your device with to the extracted RUU folder. Once copied - run RUU.
P.S. The problem with your device is that you have upgraded wm6 on 1.xx bootloader. Thats why the system doesnt start. If the method I described above doesnt work. Post me.
Cheers,
vlodeck.
now i can bootloader mode,
i did it but got this error while i upgrade my rom to newest rom 3.3...
i got this "invalid command 326": please check your NBF data, this NBF data cannot be used for your PDA Phone.
hi again to all
after long time i try to play agian with this brick-PM200 that haven't signal.
last time (before more 2 years) i write ROM and after that PM200 not start, only in Bootloader mode (3 color lines).
today i revive it when flash this:
HTC_charmer_upgradeut_noid.rar
(
EnterBootloader.exe
nk.nbf
ROMUpdateUtility.exe
RUUGetInfo.exe
RUUResource.dll
)
PM200 start, in begin fave full signal. after 30-40 seconds signal gone (but not test in/out call). i try to restart mobile, try hardreset, try manual search on operator - all no result.
on start i put near radio but power amplifier not work. i think that this is harware problem.
but not 100% sure.
is possible this problem to be from wrong radio settings ?
i try to write different radios for Prophet but every time get message "Invalid tool" and radio flashers stop.
i try with universal radio thata Vlodeck says but again this message.
what to do ?
before two days i repair one HTC Touch Elf100 and read that can sniff USB comunication to check Vendor ID and other ID.
but in my PM200 this not work. on Elf100 work easy like is writed here in forum.
when start wyty (or what's name is) make connections with mobile but after write:
ruurun 0
says that need password. if try with password for Elf100 not accept it.
what is the password for Charmer (PM200) ?
or if there is other way to get Vendor ID and other ID how ?
I can help you maybe. You need to downgrade to Aku 2.2 using the original utulity. Then the Radio will be downgraded too. But nobody knows the exact way on how to do that. (Maybe Vlodeck knows that?) I'll try to get it this week and tell you then.
As for the password try CHARMER. I have never been able to test it with MTTY cause I don't get in the right mode but I think the olny possibility is CHARMER. Just try it with whatever tool you want.
Hope that was helpfull
10x for answer.
next day will test password and post result.
how to downgread to aku2.2 ?
if you find solution please post it.
today i try but w/o success:
Cmd>password charmer
Cmd>ruurun 0
Cmd>getdevinfo
Invalid command : getdevinfo
For a help screen, use command ? or h
Cmd>
i try and with passwrod CHARMER. result is same.
what are commands for MTTY that supported Charmer ?
OK you have the same problem I have. You have Cmd> in the window. To get the comands and the password working you need USB> instead of Cmd>. That is the same problem I have and I don't know how to fix it.
in moment i use MTTY 1.42
before 3-4 days i repayr one HTC Touch Elf100. and this MTTY work find. no problem that write CMD not USB.
terminal show CMD> i write commands and mobile answer w/o problem.
but in my Charmer not answer.
possible reason is access password. but not sure.
There are simple comands. And for them you don't need SuperCID. I tried them and they haven't worked too. So I think there is something else with it. Maybe the Bootloader locks all comands and you need a password for that too. But I don't know about that.
@ChrBeck
you try to make SuperCID SD card to have full access to mobile. and after that to try flash it with RUU ?
next morning will try this.
p.s. now find this:
http://www.tm-phonedownloads.com/
http://t-mobile.iris-global.com
Well, we can't SuperCID and Security unlock a Charmer with a bootloader over 1.x at the moment. This is surely impossible. That won't work using a SD Card too. So I think you will not have any luck.
Hi!
Im willing to flash my rom using a dumped OSRom.nb with pdocwrite util. The thing is that I read all the warnings about locked CID in the aWizard thread http://forum.xda-developers.com/showthread.php?t=252957&highlight=awizard
And it turned out that aWizard uses the same pdocread and pdocwrite as I do. So naturally I want to CID un-lock my hw6915.
But theres the thing I cant!
Bootscreen shows only 2 numbers
1.00.00
1.50
No SPL or IPL. I guessed that my hw6915 is G3 because of the 2 repeating zeros, but who knows. So I wanted to get into the boot loader command promt but nothing worked
action button + power + reset (all at the same time for a few seconds) is Useless.
So can someone please tell me how to determine the IPL/SPL or get into the boot loader mode or how to get my whatever G CID un-locked. The lokiwiz errors from aWizard are as follows:
Initializing............CID unlocking mobile... DO NOT DISCONNECT UNTIL THE PHON
E REBOOTS!
[ 5:50:22.76] MachinaGod lokiwiz start
CopyTFFSToFile(0x0, 0x10000, lock_backup.bin)
ERROR: ITReadDisk: outbuf==NULL
reading lock_backup.bin:
This exe file was created with the evaluation version of Perl2Exe.
For more information visit http://www.indigostar.com
(The full version does not display this message with a 2 second delay.)
...
CopyFileToTFFS(cidunlocked.bin:0, 0, 00010000)
ERROR: Unable to open host/destination file - The system cannot find the file sp
ecified.
result=80072746
[ 5:50:29.06] Your phone is now CID unlocked....
Store the generated 'lock_backup.bin' file in a safe place. It can help to resto
re your device if anything goes wrong.
* Press [Enter] to continue
rx-8 You read for what device Lokiwiz03 ??????
Where is written that this works at 6915?
Read description of the program and do not try to use on your device!
No readme file
Well actually the zip file with Lokiwiz does not contain a readme file, but I suspect that it originally was meant for Wizard but other user with different phones have reported that it had worked on their phones. So after a week of reading the forums I came up only with this cid unlocker. I guess desperation took over me... Anyways can you suggest other utility?
Hi all!
I have 2 question:
i install the Artemis Touch 4.02 Full with 4 sided cube 4mb pagepool rom, with uspl cid unlocking works good, but i want to know my pda have cid lock or not, i put it in to bootloader and try mtty to find out the answer. it says:
Cmd>info
Invalid command : info
For a help screen, use command ? or h
Cmd>info2
Invalid command : info2
For a help screen, use command ? or h
what is wrong?
The second question is wm6 have a Extended rom? when i have wm5 the RescoExplor seen it (i copy it...)
i do the registry modification to unhide it from a toturial but nothing....
ps.: sorry for my BAD English.
Thanks Geripgeri.