Hi all, new here, I'll get straight to the point because it'ds quite urgent. I flashed my htc elfin with the onyx 6.5 rom and after flashing if kept crashing on the Orange splash screen but I done an even more of a stupid move because I tried flashing the phone with a shipped rom and at the time I did it I didn't know it was incorrect so now all my phne can do is display pretty red green and blue gradiants with the following written on the red gradiant.
IPL 2.27.0002
SPL 2.28.0000
I can't remember anything like CID or anything like that but I do have the following...
SN :HT837Gxxxxxx
IMEI :35678601xxxxxxx
Part Number :99HEH137-00
Part Description :SKU,ORANGE,English-WWE,GBR,white,GSM 900/1800/1900,HTC_P3452,ELFIN-A2,w/ SIM Lock
Customer Name :Orange P.C.S Limited
Customer Model :
HTC Model :ELFIN-A2
Error Message :
Please help me as I can't do anything with it.
By the way I got two other devices, one being my gizmondo and the other being my old IPAQ h1910.
I've also got this info...
Cmd>password BsaD5SeoA
Pass.
+ SD Controller init
- SD Controller init
+StorageInit
SDInit+++
SDInit - SD ver2.00
SDCmd1 Command response time-out. MMC_STAT = 80
SDCmd1 Command response time-out. MMC_STAT = 80
SDCmd1 Command response time-out. MMC_STAT = 80
SDCmd55 Card status error in response. MMC_STAT = 4000
SD Ver2.00: Low Capacity
SD clock to 24MHz
***** user area size = 0x3AF000 Secters
SDInit---
SDInit OK
g_cKeyCardSecurityLevel = FF
HTCEType (0x1)(Operation mode flag): cOpModeFlag=(0x0).
Type (0x2)(Back color flag): cBackColorShowFlag=(0x1).
Type (0x5)(Background color value): g_wBColor=(0xC618) (0xC0C0C0).
HTCST
Thanks Leighton
Leightonw87 said:
g_cKeyCardSecurityLevel = FF
Click to expand...
Click to collapse
that little line is telling u that the phone is CID-Locked, and as it doesnt go beyond the bootloader, is bricked too.
so, the most easy thing to do is trying to flash the unbricker rom from sd, if that doesnt work go with the goldcard method that will work for sure if done properly.
I tried the unbricker rom through the ruu utility but it says invalid vendor and when I do it through SD it says Checking SD and then nothing. I'm currently trying the goldcard method but it doesn't seem to want to work on my 2gb MicroSD. The SD SN starts with 00 so I not sure whats wrong.
I now regret doing the flash in the first place. Also some of the utilities are reconising it as around 900>mb, not 2gb so thats making me think that I should get a 512mb or 1gb memory card...
try making a smaller partition in sd card and the unbricker rom again.
read this:
http://wiki.xda-developers.com/index.php?pagename=Elf_SD_Card_Flashing
the problem is not flashing roms, the problem is with all the ppl that tries to flash original roms/backups and end with a dead phone.
That is probably what did lol.
Edit, How do I resize the SD card, I've done it in past for my IPAQ but that was a good while ago and it was for putting opie on it.
Start > control panel > administrative tools > computer management, then on the left select disk management under storage. delete all partitions from ur sd card and make a new one with 800mb for example and make sure to format it.
I've got windows 2000 and under disk management, Delete Partition is greyied out on the sd card.
EDIT:
I just tried disk management on my windows xp laptop and I cannot Delete Partition, same as the above which makes me think it maybe my card reader because this is with a 1gb microsd, not my 2gb one.
I know I shouldn't do this but I'll say sorry in advance.
I can't get the gold card method to work nor will it flash from sd, should I be using a wm device with a MicroSD slot or should I be able to use the adaptors in a standard sd slot device as I only got the latter. I'm in desperation and I really can afford to send it off, please help me.
AFAIK, the sd adaptor is just a mechanical device, so it should work ok.
however is strange that u cant flash from SD, make sure that the filename is correct and that u wait long enough.
i will suggest simple way switch off ur device . (take the battery out) reinsert the battery and flash ur carrier provided rom from our forum..see sticky rom thread. and try flashing original one .it will work flawlessly ..and then use 3.10cmon uspl and ur cid unlocked and free to flash any
rom..
Hapy flashing
I've tried looking for the Orange uk shipped rom and they are all dumped roms on the wiki and there isn't any orange uk shipped roms on the stickie.
I wish they made this sort of thing alot easier, My sony ericsson didn't even give me this much hassle.
Leightonw87 said:
I've tried looking for the Orange uk shipped rom and they are all dumped roms on the wiki and there isn't any orange uk shipped roms on the stickie.
I wish they made this sort of thing alot easier, My sony ericsson didn't even give me this much hassle.
Click to expand...
Click to collapse
Your Sony Ericsson probably didn't allow you to flash cooked ROMs either.
You don't need an Orange shipped ROM, you just need a shipped ROM with same device ID (eg. ELF010150 or whatever your device is). Gold card should work if done right.
I think I'll have to see if I can get a Virgin Lobster phone because out local pawn shop gets them quite often and very cheap, to try the goldcard then, until I find one I'll wait abit because my gizmondo refuses to do anything with QMAT even though it says written to sd card.
By any chance is it possible to change Cardid by hex editing?
Leightonw87 said:
I think I'll have to see if I can get a Virgin Lobster phone because out local pawn shop gets them quite often and very cheap, to try the goldcard then, until I find one I'll wait abit because my gizmondo refuses to do anything with QMAT even though it says written to sd card.
By any chance is it possible to change Cardid by hex editing?
Click to expand...
Click to collapse
I don't know because all the knowledge I have about the Gold Card is shared in the Wiki. As I already stated there, I don't know of any other way to get the Card ID. I'm no hacker.
ok no probs, thanks for all the help you've given to me, once I find another WM device I'll try again because I spend too much time on trying to do goldcard and my partner is getting annoyed. lol
Leightonw87 said:
I tried the unbricker rom through the ruu utility but it says invalid vendor and when I do it through SD it says Checking SD and then nothing. I'm currently trying the goldcard method but it doesn't seem to want to work on my 2gb MicroSD. The SD SN starts with 00 so I not sure whats wrong.
.
Click to expand...
Click to collapse
What do you mean by it "doesn't seem to want to work"? What error are you getting. And why do you want to hex edit the card id?
No matter how many times I try I just doesn't want make the goldcard. on xp and 2000 but like I mentioned before it must be something to do with my gizmondo. My pda is pre ppc 2003 so no luck there. doesn't find the serial number at all.
Leightonw87 said:
No matter how many times I try I just doesn't want make the goldcard. on xp and 2000 but like I mentioned before it must be something to do with my gizmondo. My pda is pre ppc 2003 so no luck there. doesn't find the serial number at all.
Click to expand...
Click to collapse
Just buy a WM device from the electronics shop and then use the Gold Card method on it.. then return the device when you are successful
hahaha, Thats a great idea but these days they are pretty fussy when it comes to returns.
Hi, I just thought I'd add this as I don't know what the CID number is.
Cmd>getdevinfo
HTCSELF010051¡o³fHTCE
As far as I can work out its ELF010051 but looks like something went wrong with the CID number
I know it's orange uk as shown in the first post. I was also wondering could I create a goldcard by just using my pc/laptop or could someone create a goldcard for me???
SD SN:E06E030000000000F0FFFFFF30000306
Related
All right... GOOD NEWS story for today!!!
There is no doubt, that our gods are helping us...
Here's what happened to me yesterday.
Yesterday I was dreaming about editing the ROM of Universal/Exec but as you may know, 'd2s' command doesn't work. It just quits with "Not allow operation".
But suddenly, my china god of wisdom whispered to me:
GOD: "hey buzz, you wanna dump the thing? why do you use that old fashioned 'd2s' command to dump it?"
me: "well, that always worked... so what else should i use?"
GOD: "OK, here's a little present for you ) just try 'task 32' )) "
Code:
USB>task 32
SD:Waiting for card insert.........
CMD3 for SD, it's OK, ready to get RCA from response.
SD:Detected one card
SD:ready for transfer OK
d.total_lba=1DC00
d.block_size=200
d.RCA=EC7E
d.drv_type=40000000
d.busWidth=1
Total card size=3B80000
So here it is !!!!
... and LET THE FUN BEGIN!!!
The above story is 100% true, i've made up maybe two words myself...
BTW, this might also work on other "password protected" devices.
THANX
buzz
Buzz, that's great, where the heck did you find that command?
But now that bal666 has that decrypt/encrypt utility of the original NBK files, what would be the benefit of dumping the ROM to the SD card?
Can you restore back to the device from the SD card?
Going by the way of the SD card to dump, extract, modify, write back, then flash may be safer than the Upgrade Utility that keeps my device stuck in Bootloader mode until I go through the whole NK/MS, then Radio upgrade.
So, what's the opposite of 'task 32?'
Thanks!
i'm dumping at the moment, but i would say, that it would be enough to insert the SD card back into the slot and reboot into bootloader mode.
Then you have to wait few seconds till "press power to flash" message appears.
But so far i didn't test it, yet...
Testing right now...
))
buzz
buzz_lightyear said:
i'm dumping at the moment, but i would say, that it would be enough to insert the SD card back into the slot and reboot into bootloader mode.
Then you have to wait few seconds till "press power to flash" message appears.
But so far i didn't test it, yet...
Testing right now...
))
buzz
Click to expand...
Click to collapse
Buzz, it is really good news. At this moment some of Universal (e.g. T-mobile) providers have not released an update yet. So if people can dump their roms on a SD, we at least have a fall back. In case of repairs the Universal will need to be updated again with a rom from the provider.
That is really a fantastic news!
If the restore test is successful, please just let all of us know.
Oh, and look forward to a complete dump backup/restore guide. :wink:
BeyondtheTech said:
But now that bal666 has that decrypt/encrypt utility of the original NBK files, what would be the benefit of dumping the ROM to the SD card?
Click to expand...
Click to collapse
From what I've seen his tool incorrectly decrypts NBF, some blocks are mixed.
hmmm.....
i think that the "task 32' commande needs a little bit more tweaking...
Till now it was just saying OK... ready.. etc., but actually did not the dump... (
Code:
USB>task 32
SD:Waiting for card insert.........
CMD3 for SD, it's OK, ready to get RCA from response.
SD:Detected one card
SD:ready for transfer OK
d.total_lba=F1F00
d.block_size=200
d.RCA=80CA
d.drv_type=40000000
d.busWidth=1
Total card size=1E3E0000
Level = FF
USB>
Well, "Level = FF" sounds like an error to me....
hmmm....
buzz
Another very interesting command and it's output:
Code:
USB>info 2
SD:Waiting for card insert.........
CMD3 for SD, it's OK, ready to get RCA from response.
SD:Detected one card
SD:ready for transfer OK
d.total_lba=F1F00
d.block_size=200
d.RCA=80CA
d.drv_type=40000000
d.busWidth=1
Total card size=1E3E0000
HTCSDOPOD601 «Jú½HTCE
USB>
Code:
USB>info 7
HTC Integrated Re-Flash Utility for bootloader Version : 1.40h, UNIVERSAL HW Version : 1.00
Built at: Sep 2 2005 15:14:29
Copyright (c) 1998-2005 High Tech Computer Corporation
Turbo=312, Run=208
Memory Frequency = 208 MHz
SDRAM Frequency = 104 MHz
Board ID is: 5
USB>
buzz
buzz_lightyear said:
Code:
Board ID is: 5
Click to expand...
Click to collapse
Hi Buzz,
is it possible to make memory dumps
in the bootloader without entering a password ?
cr2 said:
buzz_lightyear said:
Code:
Board ID is: 5
Click to expand...
Click to collapse
Hi Buzz,
is it possible to make memory dumps
in the bootloader without entering a password ?
Click to expand...
Click to collapse
not in bootloader...
but i'm able to dump DOC and memory using RapiEnabler and itsutils.
buzz
buzz_lightyear said:
but i'm able to dump DOC and memory using RapiEnabler and itsutils.
Click to expand...
Click to collapse
Hmm. What part of the DoC ? All 128 MB ?
There is also OTP and other stuff.
As you can guess, i'd like to dump the whole 64MB RAM (or as much as possible) while the bootloader is running, not
in wince.
Maybe you should try 'r2sd' ?
mamaich said:
BeyondtheTech said:
But now that bal666 has that decrypt/encrypt utility of the original NBK files, what would be the benefit of dumping the ROM to the SD card?
Click to expand...
Click to collapse
From what I've seen his tool incorrectly decrypts NBF, some blocks are mixed.
Click to expand...
Click to collapse
He stated that as long as you don't change the header information, it will encrypt and decrypt properly.
As a precaution, I took the NK.NBF, decrypted it to NK.FAT, then reencrypted it and did a successful byte-comparison.
I did the same with my modified NK.FAT file with my injected custom splash image and it encrypted and decrypted properly.
The biggest test was flashing it, and man, I was sweating buckets during the process. But, the flash came through successful for me and now I have the first custom splash screen on the Universal.
It's fun to break news or be the first guinea pig to try it out, just as long as it comes out successful! :lol:
The password doesn't seem do do anything.
The level of access is determined by your CID.
If your CID is 11111111 you have a SuperCID, which enables all the operations. I'm trying to track down where the CID is stored.
Bye,
Ricardo
go beyoundthetech !!!!
now only if you could post a step by step for all us goofs out here...
also im wondering with your genius if you could use the recently posted tools here to make custom universal rom (minus the ie explorer, file explorer etc) and teach us how to do that aswell!!!!
buzz_lightyear said:
i'm dumping at the moment, but i would say, that it would be enough to insert the SD card back into the slot and reboot into bootloader mode.
Then you have to wait few seconds till "press power to flash" message appears.
But so far i didn't test it, yet...
Testing right now...
))
buzz
Click to expand...
Click to collapse
My 9000 has a SuperCID. I managed to dump and flash the rom using these techniques.
Bye,
Ricardo
BeyondtheTech said:
He stated that as long as you don't change the header information, it will encrypt and decrypt properly.
As a precaution, I took the NK.NBF, decrypted it to NK.FAT, then reencrypted it and did a successful byte-comparison.
I did the same with my modified NK.FAT file with my injected custom splash image and it encrypted and decrypted properly.
Click to expand...
Click to collapse
I decrypted nk.nbf to nba with his tool, and decrypted the same file with alpinenbfdecode.pl script. Files are different after some offset. So there should be a bug in his util, because alpinenbfdecode.pl is known to produce working files. I had no time for more tests.
buzz_lightyear said:
Another very interesting command and it's output:
Click to expand...
Click to collapse
Hi buzz,
i can run "rbmc", but don't get where is this c:\test\mem.nb located.
Is it used by the mtty download protocol ?
I can't test it because mtty is not working
for me in windowz
cr2 said:
buzz_lightyear said:
Another very interesting command and it's output:
Click to expand...
Click to collapse
Hi buzz,
i can run "rbmc", but don't get where is this c:\test\mem.nb located.
Is it used by the mtty download protocol ?
I can't test it because mtty is not working
for me in windowz
Click to expand...
Click to collapse
looks like rbmc is running up to the point, where it should start saving the dump (
same as task 32
(
buzz
OK, so here is, how it should be:
Dump Bootloader:
Code:
USB>task 32
USB>d2s 70000000 80000
OS ROM + splash:
Code:
USB>d2s 70100000 3FA0000
XtendedROM:
Code:
USB>d2s 74100000 A00000
Radio ROM:
Code:
USB>d2s 60000000 a24200
If you want to have them all on single SD card, you must add "sd a" at the end of each command except the first one.
Example to dump/backup OS + XtendedROM + Radio:
Code:
USB>d2s 70100000 3FA0000
USB>d2s 74100000 A00000 sd a
USB>d2s 60000000 a24200 sd a
buzz
Hi,
Apologies in advance if I'm covering old ground.
I'm trying to re-flash a WM6 rom after my previous attempt just left me with the 4 colour screen permanently and as the links to mtty1.42.rar seem to be broken at the moment I decided to re-flash with a different rom.
the problem is that even though I can get the unit into boot-loader mode and the update software appears to see the BA when it checks versions etc. as soon as I hit the upgrade button the BA screen blanks and I get Error 112: CE ROM UPDATE ERROR.
I've tried different roms, different usb ports and different versions of activesync all with the same result.
Any help on this would be great and hopefully I haven't 'bricked' the unit.
Cheers
Duncan
Do you have PH20A2 or PH20B device?
mtty utility can be found using search button
It's a PH20B.
I've now found mtty after a fair bit of searching on other forums..now to see if I can make some sense of it's commands.
A further update: it seems that I've managed to corrupt just the OS part of the ROM. I managed a radio update successfully which means all the USB connection is fine for updating. It just can't access the OS part of the ROM.
Is there anyway to manually format that area of ROM so I can in effect install over clean unit? Infortunately I can't make sense of the mtty commands and don't know what memory address and for how log I should perform the format.
Cheers Duncan
try reflashing
You should know how to use search - however here is the link
http://forum.xda-developers.com/showthread.php?t=348030&highlight=mtty
(Is that hard to put "mtty" in the search field and set BA section only? )
Further update:
Now I don't even get the 4 colour screen. After soft and hard reset I get a dead device. I can put the device into bootloader mode (serial/usb) but as soon as the update software attempts to copy the rom across the screen blanks and I get the ROM Update Error.
Now my thought is to try and flash with the original rom for the device as I have another unit available but using the link from the BA wiki for dumping the ROM doesn't work. I have also tried searching for 'ROM Dump' within the BA section of the forum but there don't seem to be any definitive instructions for this, everyone just keeps asking why not use the wiki or search funtion....
I have used the wiki and the search funstion and I seem to be the first with this situation.
Soft Reset - Nothing
Hard Reset - Nothing
Bootloader - Able to flash the radio rom but as sson as i try to flash the OS rom the screen blanks and I get Error 112: CE ROM Update Error. When I take the device out of the cradle the screen comes back on with the Serial 2.xx screen and I'm back to square one.
I've tried to use the wiki to dump an exisiting working rom but the link on the wiki is broken. I have also searched the BA forum for these intructions but they're not covered as they're already in the wiki..... or not as the case is.
I appreciate you regular users get fed up with noobs coming on and expexting you to do all the work for them but so far I've spent 3 days searching both this site and others to try and resurect my device. I'm not dumb or lazy and would love to be able to do all this myself but without instructions I'm flying somewhat blind.
Any help would be great..... please??
[off topic]
no need for apologies...
we started once like you... some are far worse...
knowing one part and boasting with air on their heads...
since you managed to explain yourself on your first post.
knowing what to search (E.G. MTTY 1.42.rar)
you definitely searched the forum before you posted AND
you stated that the links are not working... that proves it.
we are the one who is sorry because some others think
that they are high and mighty, it sometimes blurs the opinion making.
i dont like opinionated people because i admit that am one too... sometimes...
but that doesnt mean i hate them...
[on-topic]
you never told us what happened when you tried the mtty procedure.
is your last post the result of your mtty experience?
please elaborate how did you end up with that... what did you do before you soft-reset and hard-reset?
SilverSamurai,
Thanks for the quick response.
After my last 'apparently' successful re-flash with Helmi's latest WM6 rom when I hard reset the device I had nothing but a blank black screen, no power LED or anything. Soft-reset was the same. I can reset into bootloader and the PC detects the device when I place it in the cradle. The first part of the update seems to work although it never detects the current OS installed, it always says upgrade from ' ' to 'ver 6.0.0' which is wierd because it always used to say the previous OS version. When I then hit next the progress bar shows on the PC but the BA screen immediately blanks and eventually the PC gives the ROM update error.
I have managed to re-flash the radio rom in this state which proved that I still have access tho the device from the PC.
Using mtty I can run through all the commands to recover from the 4 colour lines screen (even though I'm beyond that point).
USB>set 14 0
HTCST ÚÈÒHTCEUSB>task 28
DOC_format_HW+
DOCInfoTableinitHW+
Binary0:dwSize=80000
BINFS0:dwSize=0
FAT0:dwSize=1000000
FAT1:dwSize=2BA0000
All:dwSize=3C20000
USB>task 0
USB>
It's almost as if the last flash didn't complete and has left the area for the OS 'dirty' with what ever it did manage to flash. What I was hoping to try was to re-format the entire OS section of memory and then try to re-flash again. Using mtty it says you can format sections of memory by stating a start address and the length you want to format but I don't have clue what these should be.
I've tried flashing with WM6, WM5 and a compatible version of 2003 with the same result every time. I would like to dump a rom from another BA I have and try with that but as mentioned earlier the link for that is down at the moment.
I think that's about it. If you need any more info let me know.
Many thanks
Duncan.
let's relist the things you did.
USB>set 14 0
Click to expand...
Click to collapse
1. start OS after a reset
result:
HTCST ÚÈÒHTCE
USB>task 28
Click to expand...
Click to collapse
2. format doc (Disc-On-Chip)
result:
DOC_format_HW+
DOCInfoTableinitHW+
Binary0:dwSize=80000
BINFS0:dwSize=0
FAT0:dwSize=1000000
FAT1:dwSize=2BA0000
All:dwSize=3C20000
USB>task 0
Click to expand...
Click to collapse
3. do hardware clear boot.
Click to expand...
Click to collapse
since i dont want to experiment with my sole BA...
i tried to search for solution...
and with some of my computer instincts i came up with this suggestion...
try this command before "task 28"
"task 7 0" <-- this is the "Do flash ROM lock/unlock" command
"task 2a" <-- fix bad blocks on MFG bootloader and Storage
then try to reflash your BA.
my sources one | two
although it's not BA but i think mtty commands are generic.
it's worth a try.
SS,
Still no joy, it's exactly as it was before.
Just reading through some more posts for bootloader ant it seems at least one other person has the same problem - http://forum.xda-developers.com/showthread.php?t=345181&highlight=bootloader and no resolution posted for that either.
I think I may have got it beyond the point of return.
I've just tried to flash from the blank screen I end up with from the initial attempt and it still detects the device but fails in exactly the same way.
awww... im sorry to hear that.
but dont lose hope.
i'll try to read some more and search for solutions.
and i hope someone with the same problem as
yours that had their BA fixed comes to the foreground.
[off topic]
hmm... come to think of it... we're both Marvel SuperVillains
SilverSamurai said:
awww... im sorry to hear that.
but dont lose hope.
i'll try to read some more and search for solutions.
and i hope someone with the same problem as
yours that had their BA fixed comes to the foreground.
[off topic]
hmm... come to think of it... we're both Marvel SuperVillains
Click to expand...
Click to collapse
These steps are from my notes. Follow these steps. It worked for me last time i tried (3 months back)
2. Stop ActiveSync, by Task Manager (press Ctrl + Alt + Delete)
kill two processes rapimgr.exe and wcescomm.exe
3. put your device into Bootloader Mode by pressing Power + Record Button and Soft Reset.
4. Run mtty (from downloaded) Choose WCEUSBSH001
5. type "set 14 0" without the quotes to tell bootloader to boot the OS after reset.
6. type "task 28" to get your device formatted
7. type "task 0" to ask your device reboot
8. take the device out of the cradle, and manually reset it if it does not do that already.
i think he did all of those already,
that's why i posted this in response to his mtty experience.
wouldnt hurt to try it again though.
A bit more info:
I tried the mtty solution again but still the same result.
I finally managed to find the instructions for dumping and exisiting rom to SD card and pulled one from a working unit. I put the card into the faulty BA and booted into bootloader. Pressed 'Power Button' to flash from card and it appeared it was going to work........ until it got to 12% then it failed with the message 'Download Fail'. So still no better off.
What I'm going to try now as it seems anything is worth a try is use the address ranges used to dump the rom to try and format all 3 sections. See if that will give me a clean base to try and re-flash from the sd card. My only worry is if it will format the section of ROM used to store the bootloader info.
I'll post my results shortly.
Now I need to know how to get the bootloader password to enable me to use the 'erase' command through mtty.
The hunt coninues....
Yet more developments.
As the update from SD failed I thought I'd see if it was possible to dump the current contents of the rom to SD using the following
“d2s 80000000 02000000“
“d2s 60000000 00300000 sd a“
“d2s 70000000 01080000 sd a“
The first 2 commands completed fine and checksum was OK. On the 3r command 'd2s 70000000 01080000 sd a' it errored with the following result
USB>d2s 70000000 01080000 sd a
SD:Waiting for card insert.........
CMD3 for SD, it's OK, ready to get RCA from response.
SDetected one card
SD:ready for transfer OK
pc->drive.total_lba=1E8000
pc->drive.num_heads=0
pc->drive.sec_p_track=0
pc->drive.num_cylinders=0
pc->drive.block_size=200
pc->drive.features=0
pc->drive.RCA=B368
pc->drive.drv_type=40000000
pc->drive.securedAreaSize=0
pc->drive.securityDrv=0
pc->drive.busWidth=1
pc->drive.erasedSize=0
Total card size=3D000000
DOCInfoTableinitHW+
Binary0:dwSize=80000
BINFS0:dwSize=0
FAT0:dwSize=1000000
FAT1:dwSize=2BA0000
All:dwSize=3C20000
DOC_ReadBinary is fail: dwStartAddress=0,dwReadSize=40000.
DOC_ReadBinary is fail: dwStartAddress=0,dwTempReadLength=40000.
*DOC_ReadBinary is fail: dwStartAddress=40000,dwTempReadLength=40000.
*****************************************************************dwCheckSum of Storage=95609D16
cSectionNum=2
psImageSectionInfo[cSectionNum].dwCheckSum=0
psImageSectionInfo[cSectionNum].dwLength=1080000
Stored image of SD/MMC card checksum error!
Now my guess is the Doc_Read_Fail bits are the corrupt part of the rom. If I can find a way to repair these I could then try re-flashing the rom.
what was "task 2a"'s result?
i think that's the chkdsk option of mtty.
we're dissecting the innards of the bootloader.
little by little as we go along the way...
im learning something, i hope you can find the fix for your problem.
SilverSamurai,
Thanks for the help you gave but the unit has finally had enough and totally locked. No power or anything no matter how I try to reset it. I've tried charging for hours, discharging for hours, left the battery out for hours but to no avail. It seemed to take exception to me dumping the rom contents to the SD card. Maybe there was a hardware problem ?? Not sure.
I'll have to see if I can wangle another unit from the company I work for as we're currently selling a bunch that were purchased for a failed IT project on ebay.
it was sad to hear/read that.
anyways. at least we tried to revive it. but dont throw it away.
maybe someday there will be ways how to ressurect your BA.
Happy Computing! err... Mobile Computing!
Hi all,
So last week I had a perfectly rooted phone (thanks to Universal Androot), and I was managing my ROM's with ROMManager. I had Cyanogenmod running fine (update 5.08 i think). I swapped memory cards because the one i was using had a lot of other files on it, and i wanted to move my apps to SD. Turns out that I accidently booted into Hboot, and that SD card had the SAPPIMG.zip that prevented touch screen interaction (from [theunlockr.com/2010/03/11/how-to-root-the-mytouch-1-2-and-fender-mytouch/] I had tried to make a goldcard previously without success using this guide)). I accidently flashed a perfected SPL (meaning i get remote:not allow when using fastboot flash). Because the touchscreen doesnt work, i cant even make a goldcard. I have followed other guides on how to make it with a windows phone, but the phone that i used (Vogue) was not recognized by both HTC Sync and PSAS/QMAT. So i turned to my own computer and looked through the registry...and found some random 32 digit key for my memory card when it was plugged in to my memory card reader. Apparently, I did something right with PSAS and it generated a goldcard image. It was saved as a file, so i renamed it to goldcard.img and put it on the now formatted SD. I got an engineering SPL (from [forum.xda-developers.com/showpost.php?p=4332591&postcount=1]) and it seemed to load up fine in Hboot. However, at the end, i got the "Model ID incorrect" message. This is where my phone stands:
Sapphire Unknown 32B Ship S-On-G
Hboot-1.33.0006 (SAPP31000)
CPLD-13
Radio-2.2219.261
May 27, 2009 19:06:47
Any help on how to flash my phone onto a working (touch reponding) ROM would be greatly appreciated(either stock or custom, IDC)!
TY
Model incorrect error means that your goldcard isn't working. You got a friend with an Android phone that you could borrow to remake the goldcard? That would probably be your best bet.
Sent from my HTC Magic using XDA App
Thanks for the response!
Lol yeah. I realized that after I left (I dont have internet at home so I have to do all this stuff at the library). I don't think that any of my friends (the ones I've seen over the summer, anyway) have an android phone. I guess Ill just have to leave my phone as it is cuz I still have a working blackberry.
To add another twist into this fail, my dad works for T-Mobile. I made the mistake of telling him that I was hacking it, and now he refuses to let me repair it, saying they can track his employee number and find out that he bought it to begin with. T.T
Look around here or search for the Gold Card exe that works so much better at making a gold card.
I tried so many different MiniSD cards in my phone (3-4 2 gigs, 1 8 gig, 1 16 gig) NONE worked with the regular gold card creation method. I used the EXE one time on a card that didn't work before and it made the card no problem.
Thanks for the reply!
If you're talking about the GoldCardTool by Klutsh, I've tried that. The problem is that I cant enable USB Debugging because my touchscreen doesnt work and it wants me to touch the android to setup the phone. Therefore none of the adb commands will work.
Thanks for the suggestion though.
TheBladeofFate said:
Thanks for the reply!
If you're talking about the GoldCardTool by Klutsh, I've tried that. The problem is that I cant enable USB Debugging because my touchscreen doesnt work and it wants me to touch the android to setup the phone. Therefore none of the adb commands will work.
Thanks for the suggestion though.
Click to expand...
Click to collapse
That sucks, so I also assume the trackball doesn't work for moving around?
lol
Umm, when I hold down the power button, the shutdown menu comes up, except that it only has powerdown as an option. I CAN use the trackball to click on it. However, if I use the trackball to select emergency dialer, it force closes.
If that helps at all...
More Fails Abound
Lol. I figured out why I could not make a gold card, and now I have one (I think). The reason I am not sure is because I still get Model ID incorrect. I think that the goldcard is made properly, because i can open up the memory card and see the EncFiltLog.menc. I have tried multiple methods (PSAS with a windows phone to make an image file; PSAS to get the SD card CID and then using the reverser and the revskills and hexedit to make the goldcard). I have tried this on two different memory cards (both have the EncFiltLog.menc) and both are recognized by the computer (which according to TheUnlockr, means they are working). Any solution as to why the goldcard isnt working?
Thanks
Final request
Could someone please just ship me a goldcard that they know works?
Thanks
PM if you can
ok... i know i've posted alot about this.... bt this is like a mega thread which will give every detail..
specifications before the problem:-
wildfire 2.1 -
8gb kingston class 2 -
uninor (India)(network provider) -
[bought the phone and used my vodafone card till like 1 month then switched to uninor]
i was using the stock rom(but rooted) till dec 20th
The problem:-
When the froyo update came out i installed danne_jo's safe flashable version of the stock rom ... no problems with that... then tried the wildpuzzle 0.6..no problem with that either..bt i switched back to my vodafone card in the 1st week of jan(due to connectivity issues on uninor)...thats when all the problems started... the moment i switched on the data connection... my phone would just freeze..if not immediately then when im surfing or using an app that connects to the internet...or any high memory app...even the home and back buttons would stop giving me vibrations even though i had overclocked my phone to 691/254-710/254 MHz (performance mode)....i continued trying to fix it for 2 days...then got my sim replaced... no luck even der... the phone hangs even with the new card... tried other vodafone sim cards(mother's , brother's, friend's)... the same result everytime...bt when i put my uninor simcard in my phone.... everything works great... even the data connection.... so i started posting on the forum... got great help from 3xeno and daddyspud... they told me to do different tests so that they could pinpoint the problem...this is what all i did and their results
** phone works fine if i have the data connection switched off... no problem using wifi or bluetooth, also it works fine when i dont have any apps installed...
1. flashed the 2.1 RUU and rooted the phone again (2 times)- no change
2. tried different roms - again the same result
3. the sim works fine on stock(atleast better..)
4. everytime the uninor sim worked fine without any lags or freezes
5 . even tried different radios..bt no luck even after that
conclusions i drew from all this:-
1) first i thought that it was coz of apps2sd as its not recommended to use a class 2 card...bt then y does it work fine with the uninor sim in it...??? (weird right??)... and even if it was then how could apps2sd be affected by sim card or data connection??
2) then i thought that it might be because of the network.. bt i confirmed with 3xeno...coz he's also a vodafone customer in India and doesn't face this problem...
3) then i thought that it was coz of froyo...bt 3xeno again confirmed that it wasn't the problem..
4) talked at HTC customer center... they told me to do a hard reset i.e. HBOOT>clear storage
5) then yesterday i jus remembered that once when i was messing around with my phone i had clicked the SIM LOCK option in the HBOOT menu(i was using the uninor sim at that time)..bt according to me nothing happened because every line that came after that ended with the word 'failed'.. i also read a thread on the same.. and it said that it didnt coz any problem if u accidentally clicked on that ...
link to that thread:- http://forum.xda-developers.com/showthread.php?t=765420
... bt 3xeno thinks that, it's the source of the problem, and i pretty much do agree to it coz everythings pointing towards that only
* there's also something i'd like to bring to notice... today i installed wildpuzzle v0.8(cache on phone by default).. my phone performed better..bt still did hang......
* Also... when i change my sim cards... i get a notification saying" sim card changed... change the following settings?" which include bookmarks, etc.. nothing major.. it gives 3 options 1.yes 2. no,later 3.no....
now i seriously dont know what the problem is..3xeno thinks its coz of the sim lock stupidity i did..... coz i've tried everything in my knowledge to fix this, i've busted my brains out,sleepless nights sitting in front of my laptop,waititng 4 someone to reply to my posts,i'm really tired, bt im in no mood to give up..... plz its my request to all the devs and anyone who can help me to plz atleast look into this problem...
Thanks to anyone and everyone who have already helped me and are goint to help me!!!!!
common guys!!!! not even a single reply..... plz help me!!!
pyroblazer said:
common guys!!!! not even a single reply..... plz help me!!!
Click to expand...
Click to collapse
see the problem you are having is something that is not so common and the second thing is that you have the full knowledge of flashing custom roms aswell as shipped roms.. and since you have tried all the possible methods there might me some defect in your device, that is what i think....
anyways .. i hope you find the answer to your problem.... best of luck
Just a very basic idea - i'm far from beeing a dev.
But it looks to me that your phone thinks (at least partial) that it is simlocked. Can't you try to unlock it using a goldcard and see what it gives?
Don't know how to create such a card or if it would work - it is just an idea.
Erwin
i read the gold card procedure( http://theunlockr.com/2010/03/10/how-to-create-a-goldcard/ )... bt the thing that i dont understand is what to do after i create the gold card??? also i've got 2 SD cards... one of 512 mb...with this card i reach the end of the procedure bt fail as the card requires formatting... and the other card is sandisk 8gb class 2... with that i cannot get ahead of the 'cat' command.. as it gives me no such file found...
pyroblazer said:
i read the gold card procedure( http://theunlockr.com/2010/03/10/how-to-create-a-goldcard/ )... bt the thing that i dont understand is what to do after i create the gold card??? also i've got 2 SD cards... one of 512 mb...with this card i reach the end of the procedure bt fail as the card requires formatting... and the other card is sandisk 8gb class 2... with that i cannot get ahead of the 'cat' command.. as it gives me no such file found...
Click to expand...
Click to collapse
Strange, I just did the same thing, and it works well with me.. sure you didn't mistype it?
I believe that, if you've successfully created a gold card, you can put it in your phone (perhaps reboot?), connect your phone to the computer with usb debugging enabled and than you are allowed to flash any RUU.
But I beleve that is the weak point of my solution: you have already tried (and succeeded) in flashing a RUU (which would not work if your simlocked, I beleve).
But you have nothing to lose, so you can try I think. I have no other ideas than that.
Succes!
Erwin
ErwinP said:
Strange, I just did the same thing, and it works well with me.. sure you didn't mistype it?
I believe that, if you've successfully created a gold card, you can put it in your phone (perhaps reboot?), connect your phone to the computer with usb debugging enabled and than you are allowed to flash any RUU.
But I beleve that is the weak point of my solution: you have already tried (and succeeded) in flashing a RUU (which would not work if your simlocked, I beleve).
But you have nothing to lose, so you can try I think. I have no other ideas than that.
Succes!
Erwin
Click to expand...
Click to collapse
thnx mate.. i'll retry the gold card procedure...
OK
i did the gold card procedure.. got it correct this time.. and successfully created the gold card...now my question is what should i do next?? should i jus put it in my phone and boot up?? also, will i loose my gold card if i format my card to make a partition???
hi...i have a big problem...i cannot install an OS on my htc...especially a radio version...i receive an error at 100% saying that its not compatible or something like that....if i install a 6.5 Windows rom the phone won't start...so i'm guessing it is because of the radio....please someone help...tnx
Check if you phone gets hot... if yes then your phone has heating issues.
te be sure try this:
put you phone in fridge for 5-10 min ( take out battery, sim card, memory card and put phone in a bag to protect from water ), than try to install ( usb method or sd card method - i prefer last one)... probly everything will go ok but phone still wont boot up - if it does then its not heating issues.
I hope it works
PS: for heating issues visit link provided in my signature ( Solving the thermal problems of HD2 ) .
hi thx for the advice...but i do not think thats the problem now....maybe it was when it had an operating system and it kept restarting...but now i cant put on him a radio version...to install a os rom i can...but freezes in the logo screen...so i guees i need to install radio on it so the os will start..but i cant(....and i also tried to delete the memory with mtty and it failed also..at task 29 command or task 28 55aa says this:Cmd>set 14 0
crc=0xD2C8DA7F.
HTCST ÚÈÒHTCE
Cmd>task 28 55aa
Format start
Fill RSVD information for block 497 to 530
TAG NOT FOUND !!! NOT CLEAR STORAGE !!!
Format end
Cmd>task 29
Format BINFS start
Fill RSVD information for block 497 to 530
CE start start block=530, total block=3566
TAG NOT FOUND !!! NOT CLEAR STORAGE !!!
Format BINFS end
Cmd>
so i do not know what to do...
in the mtty thread, post 1, it says to ignore those error messages, , they are normal. MTTY (and task29) doesnt touch teh area of NAND where the radio is located anyway.
You seem to have what is sometimes referred to as a stuck radio, which doesnt work and wont flash.
Sorry, there is no actual fix for this, and the consensus seems to be that it is corrupt / bad NAND blocks.
The only solution which occasionally seems to work (but only in some cases) is cooling the phone as mentioned above.
Prepare your CORRECT stock rom on an sd card, phone into a bag in the fridge/freezer for long enough for it to be cold, then quickly sd card in, into bootloader, start it flashing, hope it takes. Ive seen people say it took on the 5th/10th/20th attempt, but for many it never takes.
ok thx...ill try the cooling method....regarding the mtty post...i've read it too...but there wrote to ignore errors...in my case says tag not found!not clear storage....like some kind of memory error...
QUOTE from mtty thread post 1
TAG NOT FOUND !!! NOT CLEAR STORAGE !!!
Click to expand...
Click to collapse
samsamuel said:
... and the consensus seems to be that it is corrupt / bad NAND blocks.
Click to expand...
Click to collapse
totally agree with " samsamuel ".
About fixing a i told visit that thread because we are trying to find a solution about it... in my case i think it worked... my hd2 had same problem always filed at 8% - 9%, i tried fridge method everything went ok BUT phone didnt boot up it - stock at htc ... i installed android it booted but if i watch a movie or played games it will freeze and restart... then i installed wp7 same as android... many times it had fatal hit and wont boot until it cooled down, but now im able to watch a video @480p 3 times - length 80 min. im unable to flash stock rom because my volume buttons and keypad buttons dont work.
rzvcool003 said:
hi...i have a big problem...i cannot install an OS on my htc...especially a radio version...i receive an error at 100% saying that its not compatible or something like that....if i install a 6.5 Windows rom the phone won't start...so i'm guessing it is because of the radio....please someone help...tnx
Click to expand...
Click to collapse
why....do...you...type...like...this??
Fridge trick does work!
Hey guys, I got one TMOUS HD2 which boots randomly and won't flash any radio.
I tried everything ...HD2 toolkit, mtty , stock rom etc...nothing.
Last put the darn thing in the freezer for 30 minutes (cannot tell the temp )
And yeeeeeeeeeeeeeesssssssssssssssssss
IT WORKS!
EVERYONE WITH A STUCK RADIO SHOULD TRY IT.