Wings SSPL and HardSPL - HTC Wings

The attached SSPL and HardSPL are based on the Wings MFG SPL v0.91
- download the attached files
- REMOVE SIM and SD CARDS !!
- connect usb cable
- create a SPL backup by running spl-backup.bat from SPL-backup-kit (make sure you Wings is "application unlocked", run the attached SDA_ApplicationUnlock on PC)
- copy sspl-0.91-wings.exe to your device and run it
- after a few seconds "USB" appears on the display
- unplug and replug the usb cable
- if you only want to test the sspl try flashing the attached splash screen by running CustomRUU.exe from flash-splash-wings
- you can now flash the hardspl-0.91-wings.nbh by running CustomRUU.exe from flash-hardspl-wings
- after installing the uspl or hardspl you can flash any rom, cooked rom, radio or splash screen
Note:
The HardSPL is never overwritten which in case of flashing trouble is a great insurance. Should you want to flash another SPL or USPL you must run the SSPL.
Features:
SuperCID / Security Level=0
Does not check NBH signatures
Based on 0.91 MFG bootloader, rtask, fat2sd, sd2fat enabled
Accept any password
Model ID check only 4 chars
SPL overwrite DISABLED (to bypass, use sspl-0.91-wings.exe)
Bypasses "Task 2A" (this formats entire flash which renders your Wings into a brick, we don't want that)
Important:
Use at your own risk! I'm not responsible for any damage to your device caused by using the attached files.
Credits:
Pof, Des, Olipro and arc.
Donations:
Any donation amount is greatly appreciated
Note:
I have also attached the htcrt_devices.ini file for Darksimpson's htc romtool

forgive my stupid question, but what is sspl hardspl etc?

maestro123 said:
forgive my stupid question, but what is sspl hardspl etc?
Click to expand...
Click to collapse
An SSPL allows you to flash a HardSPL. After flashing HardSPL you'll be able to flash any Wings ROM to your device! This tool will then allow you to change the ROM language, flash cooked ROMs, custom splash screens, etc...
The SSPL is only the vehicle to flash a HardSPL. The HardSPL will replace your current SPL. Your current SPL will not allow you to flash any ROM, except official ones which match your ModelID and VendorID (aka CID)

Aye, I did it on my wings, and it worked perfectly (backup + splash screen)
I was scared when I had to accept the flashing
The splash screen is :
"SmartMobility
Test Only
Not For Sale"
It's my proof
EDIT:: How can I have my original splash screen back ?

Great... and working
What parameters should we use in htc rom tool? Same as with Kaiser? (Only WING*****?)

Thank you very much for testing the SSPL on Wings
I'm sure we will find your original splash screen back.
But please let us finish our main mission first
I will now upload the HardSPL in the my post. Please flash it on your device in the same way as the splash screen. It will be the last time that you will have to run the SSPL, because after flashing HardSPL your device is SuperCID
I will upload also Simpsons device.ini file which includes Wings device

Fantastic work!!!
I flashed the HardSPL succesfully
Hopefully, pre-production roms will have more free RAM as well as a working GPS !

el_lo said:
I flashed the HardSPL succesfully
Hopefully, pre-production roms will have more free RAM as well as a working GPS !
Click to expand...
Click to collapse
Okay just to prove it is the HardSpl, can you go in bootloader mode and check if on display on top left corner it says "0.91-Hard".
It would also be good if you can flash another splash screen. Should now work fine w/o running SSPL

Bootloader mode says "SPL-0.91 Hard"
Where can I find a another good splash screen please?

I have flashed the test splash succesfully but now (after restart) I have troubles launching programs (such as sspl - so I cant flash rardspl now, resco viewer...). Weird...

moneytoo said:
I have flashed the test splash succesfully but now (after restart) I have troubles launching programs (such as sspl - so I cant flash rardspl now, resco viewer...). Weird...
Click to expand...
Click to collapse
Well, sometimes a symptom after SPL change is that you have to do a hard reset. But sometimes it already helps to unplug and reinsert battery. Try that first.

el_lo said:
Bootloader mode says "SPL-0.91 Hard"
Where can I find a another good splash screen please?
Click to expand...
Click to collapse
Try to flash the attachment.
Replace Splash.nbh in flash-splash-wings by the attached ATT-test-Splash.nbh

Hard reseted, and flashed hardspl ok.
Flashing my own splashscreen without sspl was also succesful. Thanks

moneytoo said:
Hard reseted, and flashed hardspl ok.
Flashing my own splashscreen without sspl was also succesful. Thanks
Click to expand...
Click to collapse
After hard reset no longer probs running softwares?
Okay guys thanks for testing, now we will focus on dumping OS using fat2sd

jockyw2001 said:
After hard reset no longer probs running softwares?
Click to expand...
Click to collapse
I didnt have too much time so I hard reseted Wings again and restored backup. No problem then, everything runs

Excellent
I'm now dumping my FAT partition using the HardSPL command "fat2sd" (watch spelling!).
Of course you have to start up in bootloader mode (tri-color) for that and then connect with MTTY 1.42
You can call it with a parameter which can have the value 1,2,3 or 4
I think "fat2sd 3" is filemode, but since it is currently running and takes a long time I am not yet sure.
Ah it just finished
Here is a snapshot of the MTTY output
Code:
Cmd>fat2sd 3
Nand2SDReorder start...
Buildup mapping table now
dwTotalLength=0x484800, remain:0x8A09800
dwTotalLength=0x1111000, remain:0x7D7D000
dwTotalLength=0x1D9D800, remain:0x70F0800
dwTotalLength=0x2A2A000, remain:0x6464000
dwTotalLength=0x36B6800, remain:0x57D7800
dwTotalLength=0x4343000, remain:0x4B4B000
dwTotalLength=0x4FCF800, remain:0x3EBE800
dwTotalLength=0x5C5C000, remain:0x3232000
dwTotalLength=0x68E8800, remain:0x25A5800
dwTotalLength=0x7575000, remain:0x1919000
dwTotalLength=0x8201800, remain:0xC8C800
searching for boot sector, please wait a min
boot sector hit, start writing
remain 15147 sectors
remain 13867 sectors
remain 13355 sectors
remain 13099 sectors
remain 4139 sectors
remain 3883 sectors
remain 3627 sectors
remain 3371 sectors
remain 2859 sectors
remain 2347 sectors
remain 2091 sectors
remain 1579 sectors
remain 1323 sectors
Last Sector = 53803, encounter Last Logical Sector
Cmd>
Ok I have checked the SD after "fat2sd 3" and it wrote about 7.41MB in filemode (FAT32)
This is the contents of the rootdir. I think what it has dumped now are user files. Don't know how ROM cooks call this (user FAT partition??):
Code:
I:\>dir /a
Volume in drive I is TFAT
Volume Serial Number is 07E4-000A
Directory of I:\
01/09/2007 00:00 <DIR> Documents and Settings
01/09/2007 00:00 <DIR> Windows
01/09/2007 00:00 <DIR> Temp
03/01/2008 23:57 77,824 ReplStorVol
01/09/2007 00:00 <DIR> My Documents
01/09/2007 00:00 <DIR> Program Files
01/09/2007 00:00 <DIR> Application Data
01/09/2007 00:00 28,672 mxip_initdb.vol
03/01/2008 23:57 151,552 mxip_system.vol
03/01/2008 23:57 32,768 mxip_notify.vol
03/01/2008 23:57 53,248 mxip_lang.vol
01/09/2007 00:01 <DIR> ConnMgr
03/01/2008 23:57 172,032 cemail.vol
03/01/2008 23:57 385,024 pim.vol
8 File(s) 901,701 bytes
7 Dir(s) 133,283,840 bytes free
Will now try the other options.
Now running "fat2sd 4" This one takes a long time ~ 30 min
MTTY snapshot:
Code:
Cmd>fat2sd 4
Nand2SDReorder start...
Buildup mapping table now
dwTotalLength=0x484800, remain:0x8A09800
dwTotalLength=0x1111000, remain:0x7D7D000
dwTotalLength=0x1D9D800, remain:0x70F0800
dwTotalLength=0x2A2A000, remain:0x6464000
dwTotalLength=0x36B6800, remain:0x57D7800
dwTotalLength=0x4343000, remain:0x4B4B000
dwTotalLength=0x4FCF800, remain:0x3EBE800
dwTotalLength=0x5C5C000, remain:0x3232000
dwTotalLength=0x68E8800, remain:0x25A5800
dwTotalLength=0x7575000, remain:0x1919000
dwTotalLength=0x8201800, remain:0xC8C800
last sector = 53803
remain 15147 sectors
remain 14123 sectors
remain 13867 sectors
remain 13355 sectors
remain 13099 sectors
remain 4139 sectors
remain 3883 sectors
remain 3627 sectors
remain 3371 sectors
remain 2859 sectors
remain 2347 sectors
remain 1579 sectors
remain 1323 sectors
Last Sector = 53803, encounter Last Logical Sector
Cmd>
I analyzed the contents of the SD and it turns out a raw binary image is written on SD.
You must open the SD with for example the Winhex tool.
I think the data is the same as with "fat2sd 3", but now in raw mode.
Meanwhile I have studied the HardSPL again and I think I can trick it in dumping other partitions.

Thanks for all this work, jockyw2001. It is appreciated. I think that after we all have working GPS and 3G, we should make some serious donations to jockyw2001!
One question...how do you enter bootloader mode in the wings?

Not sure how to enter bootloader on Wings (I don't own it), but I think press and hold camera and then power on.

That worked. I was trying holding camera then plugging in USB. Thanks!

butzchan said:
Thanks for all this work, jockyw2001. It is appreciated. I think that after we all have working GPS and 3G, we should make some serious donations to jockyw2001!
Click to expand...
Click to collapse
Go on boys! Good work! I am prepared for next amount of donation

Related

Update Rom Radio

Hi, I have an hw6515 with a corrupted original Rom (0.92) and that it is imposible to upgrade via USB using the Huu rom upgrade application from HP. Then I´ve tried many things and discover that I can upgrade an entire image. I tried a hw6515c image, bigrom, Ipaqdisk from file farmer and everything works. Except my radio rom that is not recognized when I use the HP asset application.
So, how can I upgrade the original NBF files from HP not using activesync connection and not using HUU rom update utility from HP? How can I use the Romupdate utility (mtty) to update only Rom radio OS and Radio File system? Is there any command in DOS, Windows or Linux. How can I map the entire rom?
this cant be done with a corrupted rom i think the only thing can you do is reboot the device in bootloader mode and try it
enjoy it!!!!
***nEuEzIeL***
I have the same problem.
After flash my 6515d to change from ENG to ITA, the update is go bad.
so I have reset it in engineering mode ( pressed powerON - camera - Joystic -Soft-Reset ) and reflashed with sp33246 downloaded from HP.
When reflash the device, it stop at 0,1% at upgrade Radio Stack.
I have removed radioOS.nbf and radioFS.nbf writing ";" at the beginning of them line in the file hpRUU.ini and reflashed the device.
This time the flashing is go on and my device is good started but the part of radio is off.
I have seen in many forum and the problem seems being that in the servicepack downloaded from HP the files radio are only upgrade and not working if in the device there isn't already a software radio.
So the only way for reset completely the device is to restore an backup,
but I don't have any backup of my device.
Can anyone share the backup of its device?
Tank...
ok!!
tk3w said:
I have the same problem.
After flash my 6515d to change from ENG to ITA, the update is go bad.
so I have reset it in engineering mode ( pressed powerON - camera - Joystic -Soft-Reset ) and reflashed with sp33246 downloaded from HP.
When reflash the device, it stop at 0,1% at upgrade Radio Stack.
I have removed radioOS.nbf and radioFS.nbf writing ";" at the beginning of them line in the file hpRUU.ini and reflashed the device.
This time the flashing is go on and my device is good started but the part of radio is off.
I have seen in many forum and the problem seems being that in the servicepack downloaded from HP the files radio are only upgrade and not working if in the device there isn't already a software radio.
So the only way for reset completely the device is to restore an backup,
but I don't have any backup of my device.
Can anyone share the backup of its device?
Tank...
Click to expand...
Click to collapse
Tell me how can you change your language ??(becouse i know this cant be done )
try it with th same language of your device
enjoy it
***nEuEzIeL***
Yes, the change of language dont can be done.
but I did not know it and I have forced the flashing with an crakked program.
The flashing is go bad and now I have no image of old device.
The reflashing of the rom with upgrade of HP fail at %1 and the only way for to return at the old operative system is the restore the OS from the SD.
Please, can you share a backup of 6515d (english ) ?
Tank.
ups
no i dont have the 6515d i have the 6515b and your device are bricked you need to send to hp for a warranty or mailme to [email protected] and the topic need 6515 im from mexico and you can send me your device if you want but your device are briked
I have the same problem, i need help because i investigate a lot but don't know what to do now exactly...If you go Hp, they ask you for 300$ motherboard.
I Everytime stucked at 0,1% : I Try a lot of HPRompackage,
Modified rom, modified installer Hpruu, etc..
The Rom dump via d2s : doesn't include the gsm parts
We need arguments and specify a adress range :
if you want i have a radiorom dump of the
Adress : d2s 60000000 800000,
and the radiobeetlespatch.
But i don't know exactly how to investigate more the good adress.
I think we have to delete and rewrite manually good adress range.
I can find you a lot of rominstall to change language,
( not the problem just modifications in nbf files with winhex)
I investigate a lot the bootloader, have password pass 1, etc...
Try to listen with Usbmonitor, look dump of ram memory with winhex,
etc... So a lot of way to investigate and a lot of solutions for other device very close to our 6515.
So I send to everybody ask me a complete packages of the tools & rom who can help, and my extended info.
dim920 said:
I have the same problem, i need help because i investigate a lot but don't know what to do now exactly...If you go Hp, they ask you for 300$ motherboard.
I Everytime stucked at 0,1% : I Try a lot of HPRompackage,
Modified rom, modified installer Hpruu, etc..
The Rom dump via d2s : doesn't include the gsm parts
We need arguments and specify a adress range :
if you want i have a radiorom dump of the
Adress : d2s 60000000 800000,
and the radiobeetlespatch.
But i don't know exactly how to investigate more the good adress.
I think we have to delete and rewrite manually good adress range.
I can find you a lot of rominstall to change language,
( not the problem just modifications in nbf files with winhex)
I investigate a lot the bootloader, have password pass 1, etc...
Try to listen with Usbmonitor, look dump of ram memory with winhex,
etc... So a lot of way to investigate and a lot of solutions for other device very close to our 6515.
So I send to everybody ask me a complete packages of the tools & rom who can help, and my extended info.
Click to expand...
Click to collapse
Is better Honestly buy a new Morher Card or a New Device SEll That in a Spare pices
Hi, dim920.
I would be pleasing you of to receive material and informations about.
My email is [email protected] but you can share your package of tools also
elsewhere on the web.
Tank
Radio package 6515
For download my package with :
- Radiodump (adress 60000000 800000)
- Special hpruu for incorrect device sku or other error messages
- Beetles Radio Patch
- Bigrom
- Ntrw to write to sd
- Romupdate & mtty
- usb monitor trial
- winhex trial
- Hx 4700 bootloader to modify the header
- At command guide
go here : http://dl.free.fr/TOErXwWr/package6515rom.rar
THE Bootloader PASSWORD level 0 is : "BOOTLOADER"
the level 1 (pass1) is 0000000000000000 (zero x 16)
I exclude all official Hp rom package,
my device is french and a 6515a.
For change Your phone language,
Download special rom & read here :
http://mobilitytoday.com/forum/showthread.php?t=12231
I post in few moments all an short description of what i do
,what i think and what are the solutions for the same problem
on other device.
I try to regroup all i have for tomorrow night if you want to
speak before and have msn :
[email protected]
Tank you for your share.
I am trying to flash the rom from sd card.
I have downloaded a rom image of 6515 and I must put it in the SD card.
After to backup the PDA over SD with romupdate.exe dowloaded from :
http://www.filefarmer.com/2/dmc8742
with d2s, I have put the card ( SD 512 MB ) into card reader and ran
ntrw ( hw6515_bigrom112.zip in the link above ) for write bigrom112.nb1
into SD, but something does not work!!! My SD is blank.
I have an image of rom : IPAQROM.img and I could also try to mount it on the SD but I know that I have to use IPAQDISK.
I have tried to find it for many days on the web but I have not found it!!!!
I think that the single way for to resolve the problem is to make the flash from the SD card.
Makes to know your news me.
The single way that we have to resolve the problem is to work together.
Excuse for my English
Hi.
- For the problem of Dead Radio, nos gsm, and asset info blank,
A Classic Rom dump doesn't take the radio Gsm part.
- Flashing Bigrom or RomDump of a working device can only help you
to have extended memory on External rom, or to change language.
- When you do d2s, Romupdate format the sd in a special format when writing your rom. After copy backuped rom to your pc and finish by copy the new Rom on Sd via Ntrw. Move the sd from pc to pda, Finish via hard reset (1/Power 2/joystick down 3/Reset stay 5 sec, you see bootloader lightly, unpress in good order
1/ Reset 2/ Others. You see bootloader HP v0.21.
After few seconds "press action buttons to flash"
It's normal that the sd is blank, because it's a special formatted via d2s
for the pda can boot so pda os & os pc ask you if you wat to format.
So you can't see the file writed by ntrw, but she is ready for flash, if you follow steps & the bootloader stuck in bootloader and don't propose to flash, it's a problem of rom compatibility.
- So the D2s command don't take the gsm part.
I think we have to specify the good adress range, it's why
the file radiorom in my package is a rom dump d2s 60000000 800000 of a working device. If i copy back on the working device, he says upgrade radio stack and ok so solution is not too far.
Try it but my device don't wan't to take back this rom, stucked on "calculate checksum" on the pda and nothing never happen. If i do checksum command it's ok, but if i do a checksum 60000000 800000 he stuck too on "cal checksum".
So i think we have to erase manually with erase command & wdata, but really not sure to not brick more the devices but it's how they can solve the problem on other device...
Can't access bootloader menu on my hp 6515
How can I access bootloader menu on my hp ipaq hw 6515?
I tried all combinations POWER + Joystick + Camera + Reset
I only get a screen with message: Serial - hp - v0.21
This was because a ROM update went wrong...
Thx,
shaker308
That screen you see with Serial -HP - v0.21 IS the bootloader screen. You need to then connect the ipaq to a computer and use a terminal software to access the bootloader menu
ok... I didn't know that was the bootloader screen. I'll try what you told me.
Thanks cluurk.
shaker308
iPAQDISK.exe
Can anyone tell me where can I find iPAQDISK.exe.
If you can please send it to my e-mail.
[email protected]
Thnx,
Shaker308
shaker308 said:
Can anyone tell me where can I find iPAQDISK.exe.
If you can please send it to my e-mail.
[email protected]
Thnx,
Shaker308
Click to expand...
Click to collapse
http://blogs.unbolt.net/media/blogs/brinley/iPAQDISK.zip
found it just now.. Trying to play around with a H6365.
ipaq hw6515 dead
hi,
please help restore my device(spanish movistar hp),
it doesn't recognize Radio GSM after upgrading to 1.29sp
Radio presente: Si
Version del firmware:
Version protocolo de la radio:
Version de Cargador de inicializacion:
Version del sistema de archivo de la Radio:
Version GDFS predefinida de la radio:
Numero IMEI:
anything i can do please?
i need radio rom file to restore from sd card

how to dump the splashscreen without an official rom image ?

Hi all ,
at this day , it don't exist any official rom of the S300+ (trinity branded by SFR in France) and so , i can't dump the splashscreen .....
is exist a way to do that in my trinity ? (i have of course this rom inside)
cause soon ,this evening i hope , we will able to create his own extrom so with the splashscreen of the S300+ , i can create a FULL rom for anybody
Thanks for your answers positive or negative
I look at the Wiki and don't see anything about that ...
perhaps a cool french guy could create these not me i am too lazy for that but NO lazy to make the else things to do
you have to patch an SPL to allow you to rbmc at any address, i did this on hermes, not on trinity, but I guess should be very similar:
search for this hex string on the SPL: 0532A0E30E3883E3
Replace it for 0532A0E30000A0E1
Make sure the string is found only once, and load the resulting SPL.nb with SSPL.
Then you can do:
Code:
Cmd> task 32
Level = 0
Cmd> set 1e 1
Cmd> rbmc splash1.nb 500e0000 40000
Cmd> rbmc splash2.nb 50140000 40000
ok Pof ,
search for this hex string on the SPL: 0532A0E30E3883E3
can you give me some help about that ? i don't know where i have to begin
Use an hex editor
lol , that was not exactly what i mean
OK, I don't put links to anything so you make a bit of reading / research yourself... and is faster for me to write
Download HardSPL for trinity, use nbhextract to get SPL.nb from the NBH file.
By default the SPL will only allow you to "dump" a small region of the NAND flash chip, you want to dump the splash screen, so we have to patch it. To patch it, take any hex editor of your choice (radare, winhex...) and find this hexadecimal string: "0532A0E30E3883E3", then replace it for "0532A0E30000A0E1".
Now you have to load this SPL on your device using SSPL (read the SSPL readme.txt file, advanced instructions), you have to pass it as a parameter so you have two options: either create a .lnk file or use itsutils:
Code:
pput.exe patchedSPL.nb
pput.exe SSPL-TRIN.exe
prun.exe SSPL-TRIN.exe patchedSPL.nb
After prun, you have to quickly press the bootloader buttons, and you'll see the tri-color screen with your patched SPL
Disable activesync from now on
Connect to bootloader and issue the following commands:
Code:
Cmd> task 32
Level = 0
Cmd> set 1e 1
Cmd> rbmc splash1.nb 500e0000 40000
Cmd> rbmc splash2.nb 50140000 40000
mtty is very fishy with rbmc, so probably you will see no output, if this is the case you have 3 options:
Use unix command 'cu' (inside uucp tools), it works fine with rbmc.
Use mtty and capture the output with usb monitor, then use unix command 'xxd' to create the binary files.
Try with putty (I never tested, but probably works).
The output of the two rbmc commands are your first and second splash screens.
Thanks a lot Pof , you are very kind to did this !!!
but i have no success yet but i continue ...
@pof
what do you mean with "Use mtty and capture the output with usb monitor"
i think i did the right things before rbmc but like you said : i see no results i look at the options in mtty and i don't see "usb monitor"
can you help me (again) please ?
Regards
edit : is is the good result of the prun command ? ERROR: CreateProcess failed with Errorcode = 0
- Une connexion existante a d¹ Ûtre fermÚe par l'h¶te distant. (an exist connexion was closed by the host)
extenue said:
what do you mean with "Use mtty and capture the output with usb monitor"
Click to expand...
Click to collapse
ftp://xda:[email protected]/Hermes/Tools_and_Programs/usb-monitor237.exe
Capture in "complete" tab, export as ANSI text file.
extenue said:
edit : is is the good result of the prun command ? ERROR: CreateProcess failed with Errorcode = 0
Click to expand...
Click to collapse
yes, it's normal cos the SSPL kills the OS.
ok ! i finally success in export as ANSI text file the two files
i have not unix at home (i have only windows) , so before i ask my friends to create the binary files , how can i be sure that my dump is correct ?
Thanx again
extenue said:
how can i be sure that my dump is correct ?
Click to expand...
Click to collapse
The dump should have 262144 bytes (size of a splash screen).

Software or hardware problem?

HTC TyTN II
1. Wirlles DOES NOT WORK
2. Sometimes the signal does not work
3. The camera DOES NOT WORK
4. disc does not work
5. World to the keyboard does not work
Is this a software problem?
Sorry on my bad english.
konzul said:
HTC TyTN II
1. Wirlles DOES NOT WORK
2. Sometimes the signal does not work
3. The camera DOES NOT WORK
4. disc does not work
5. World to the keyboard does not work
Is this a software problem?
Sorry on my bad english.
Click to expand...
Click to collapse
Back up you data and do a hard reset. If the problems persist, you can pretty mouch assume it is a hardware problem.
Hello
I have some problems with the storge.. i have it find with MTTY
when I start my phone it won't show the radio version ect. only the boot display will work for few seconds
and it's crashs! What can i do!? I have flash some roms.
it flashes and it go but it didn't start it.
HardSPL 1.0 from oli
Rom before crash: NoThrills_WM61_GER_V3
meylan said:
Hello
I have some problems with the storge.. i have it find with MTTY
when I start my phone it won't show the radio version ect. only the boot display will work for few seconds
and it's crashs! What can i do!? I have flash some roms.
it flashes and it go but it didn't start it.
HardSPL 1.0 from oli
Rom before crash: NoThrills_WM61_GER_V3
Click to expand...
Click to collapse
Try upgrading your hardspl to 33.4 or 3.29 ,1.0 is a WM 6.0 hardspl.
I have try to upgrade Hardspl many times. And it doesn't do it
so I have try to fix my storege yesterday and then it's broke
then i want start only the lcd goes green.
no screen anymore
task 28 55aa
Format start
Fill RSVD information for block 288 to 309
Storage start sector=0x8DC0, total sector=0x12500
Storage start block=588, total block=1172
Total Bad Block in CE: 0
Erase physical block from 876 to 2048
formatstorage Bad block found: 1603
Format end
Cmd>task 2a
Format ALL start
backup SPL OK
backup MISC configuration OK
SPL start start block=288, total block of CE=1760
ERASE block 1315 FAIL !!!
Write 0xFF start page=0x4800, total page=0x1B800
SPL version and MFG TAG are same, skip it.
restore SPL OK
restore MISC configuratoin OK
restore MFG configuratoin OK
Format ALL end
Cmd>task 32
Cmd>task 37
Invalid debug log data. Please check debug log raw data in addr 0xAE100000
Cmd>task 28
Format start
Fill RSVD information for block 288 to 309
TAG NOT FOUND !!! NOT CLEAR STORAGE !!!
Format end
Cmd>erase
HTCST ÚÈÒHTCE
Cmd>erase a0040000
HTCST ÚÈÒHTCE
Cmd>checksum
Cmd>checkimage
SPL CRC checksum = 0x5507A35A
CE is None.
ExtROM is None.
Cmd>info 8
--- 2K bytes sector version ---
DEVICE NAME=samsung_k9k2g08
DEVICE ID=0xAA
DEVICE MAKER ID=0xEC
PAGE SIZE=0x800
TOTAL PAGE SIZE=0x840
BLOCK COUNT=0x800
BLOCK PAGE=0x40
Checking block information
BLOCK 8 (0x8) is reversed block
BLOCK 1315 (0x523) is bad block
OS NOT FOUND !!!
Cmd>info 7
CPLD ID=0x8
Cmd>wdatah
Command error !!!
Cmd>rtask 0
Cmd>rtask 4
Cmd>checkimage
SPL CRC checksum = 0x5507A35A
CE is None.
ExtROM is None.
Cmd>password BsaD5SeoA
Pass.
HTCST ÚÈÒHTCE
Cmd>ruurun 0
Command error !!!
Cmd>ResetDevice
what i can do ? since last command it didn't start it
try a new radio and maybe it'l work
meylan said:
what i can do ? since last command it didn't start it
Click to expand...
Click to collapse
The reason it won't start anymore is because you ran Task 2a, which, unlike previous devices, formats EVERYTHING away, including the SPL and Windows Mobile. It essentially bricks the device, as it will not boot past OEMSBL (The radio bootloader, it comes first in boot order and loads the SPL, AFAIK). As soon as the device is reset after running the Task 2a command, the device will not boot as there is no OS bootloader, nor is there anything to boot. However, Jockyw2001 has created tools which may help to recover from a task 2a. A thread concerning Task 2a bricks can be found here. Best of luck with recovering your device.
DaveTheTytnIIGuy said:
The reason it won't start anymore is because you ran Task 2a, which, unlike previous devices, formats EVERYTHING away, including the SPL and Windows Mobile. It essentially bricks the device, as it will not boot past OEMSBL (The radio bootloader, it comes first in boot order and loads the SPL, AFAIK). As soon as the device is reset after running the Task 2a command, the device will not boot as there is no OS bootloader, nor is there anything to boot. However, Jockyw2001 has created tools which may help to recover from a task 2a. A thread concerning Task 2a bricks can be found here. Best of luck with recovering your device.
Click to expand...
Click to collapse
agh f*** thanks i didn't know that...
It's normal that the device isn't detected as qualm anymore?
it display me by connecting with Pc: "DATA LINK" or so
meylan said:
agh f*** thanks i didn't know that...
It's normal that the device isn't detected as qualm anymore?
it display me by connecting with Pc: "DATA LINK" or so
Click to expand...
Click to collapse
When I manually put my phone in OEMSBL, which is what yours should be in when you turn it on right now (the light is green but the screen stays black), windows detects it in Device Manager as: ZTE NMEA Device CDMA 1X, ZTE Diagnostics Interface 6000 CDMA 1X, ZTE USB Modem 6000 CDMA 1X. It should also detect the GPS and some other stuff, but I can't find those in Device manager.
mhh i used MTTY but i can't get in download mode
what commands should I write?
meylan said:
mhh i used MTTY but i can't get in download mode
what commands should I write?
Click to expand...
Click to collapse
This kind of stuff is too complicated for me, so I can't answer that myself. However, there are many threads that talk about task 2a resets and how to recover from them. Here, here, and here are all good places to start. But keep in mind that you should NOT try anything in these threads unless you have read everything, and are absolutely sure that the tool is for your specific situation. For example, DO NOT use the FrankenKaiser version in the third link if you don't have the Radio from Hell installed.
Alternatively, you could try the XDA IRC channel, or PM jockeyw2001.
Once again, best of luck repairing your brick.

[Q] X1i HardSPL Error 262

Hi,
I cannot flash 0.78.OliNex Hard-SPL on my new X1i: The progress bar stays at 0% until the timeout, then Error 262. I tried everything (no sd-card, no sim, hard reset, compability mode etc.), no avail.
My new X1i has the image version 1.05.932.7 (03/24/09), the bootloader reads:
KOVS110
SPL-0.78.0000
MicroP1-787
MicroP2-707
The type is AAD-380001-BV.
Radio is 1.14.25.55, protocol 52.65.25.34J, extended protocol 1.0.11809.7229.
Software ID is 1213-6439, version R3AA007, user id 1215-3303, user version R15A, content version PA10.
I noticed that the installed WME 6.1 is modified compared to the old X1. In particular, during my first attempt, a WM6.1 warning message with a red boundary popped up, indicating that proceeding could harm the phone (yes/no). I checked yes, and since then, the message does not come up anymore. Probably the ROM is not in Olis compatibility list, so I looked for unsigned HardSPL, but found only the Image Version 1.00.Diamond, so I did not flash it (probably it would brick my X1i). Any idea would be very much welcomed, I want to get rid of WM6.1 and flash WM6.5.3.
Thanks a lot for any hints.
BTW, I've posted this thread alredy in the X1 General forum and realised only now that this forum might be a better choice, sorry for that.
Next try
Hi,
I found the recommendation below and tried, but no avail as well.
Does anyone know an unsigned HardSPL by Oli for the SE X1?
Any help appreciated.
_________________________________________
xidesu
3rd August 2010, 09:33 PM
Default HTC Touch Pro, Fuze HardSPL Error 262 FIX
Alright, this is how i fixed my 262 error after ripping out all my hair for a week.
- Plug your phone into any working usb port (make sure Active sync is up and running)
- Run RaphaelHardSPL-Unsigned_190_1_3.exe and on the first screen pop up, 9 files will be created in the directory you run the .exe from.
- Copy these 9 files to another folder because you will be clicking cancel on the pop up which will in turn erase the 9 files it created.
- Click cancel on the pop up.
- Go to the folder in which you copied these 9 files to.
- Run ROMUpdateUtility.exe and the same screen pop will appear as before.
- Follow the prompts and it should work.
don't flash bootloader-stuff from other devices, never! Oo
try flashing hardspl 0.72 via usb first (the old one), then flash 0.78 as an "update".
Next step, but still not working
Well, I was able to flash APP_SW_X1i_GENERIC_UK_1213-6450_CDF1215-1832_KOV_R1AA017
from the SD card, and I have now SPL0.72.0000 on my X1.
ROM Version:1.02.931.3
Date: 08/29/08
Radio: 1.06.25.29
Protocol: 52.43.25.24U
Software ID: 1213-6450
Version: R1AA017
However, X1_HardSPL still terminates with Error 262 as before. Flashing OliNex's HardSPL via SD card (RUU_Signed.nbh renamed to kovsimg.nbh) does not work either. I still cannot flash my Dynamics GTX 2.3.5 GER ROM.
Any ideas?
BTW, I tried with a desktop and a laptop, both XP SP3 and Active Sync 4.5 on various USB ports. I disabled Security Options via X1_Tweaks. Everything seems to work, only flashing HardSPL still fails.
At least, I am a step back now ;-)
Bingo!
I succeeded. The solution has been:
- Establish an Active Sync connection via USB.
- Copy the file Xperia-SSPL-Manual.exe to the root directory of a FAT32-formatted SD card (no SDHC, an elder one). SSPL-Manual is the basic part of OliNex bootloader.
- Unpack HardSPL by starting it or use RUU_Kovsky files in a directory of the PC hard disk. Make sure that the proper RUU_Signed.nbh file is in this directory (the HardSPL image by Olimex in the version you whish to complete the basic SPL started onthe X1)..
- On the X1, open the file manager and start Xperia-SSPL-Manual.exe by clicking on it. The X1 switches to the boot loader mode indicating HardSPL 0.52 by OliNex.
- On the PC connected to the X1, start ROMUpdateUtility.exe.
In my case, the flashing went very quickly to 100%, and I have now HardSPL0.78OliNex on my X1. Now I can proceed (Task29, image flashing). At least I hope so.
My assumption about the the problems I faced: My X1 had a quite recent firmware which probably blocked any change of the SPL and allowed only generic signed images to be flashed, no cooked ones. Xperia-SSPL-Manual.exe bypasses this lock by applying an OliNex cracked routine, thus allowing to overwrite the SPL. At least I think so.
Done.
My Dynamics GTX 2.3.5 GER ROM is now up and running. THX a lot for the great support of this forum!
Thanks for instructions I have same problem with my X1.
You're welcome.
It has been worth the troubles - the Dynamics ROM is great, and until now, I found no hickups.

MTTY and Error 262 when trying to instal HSPL till the Doc shows up...

Well, what happened:
i flashed hspl
i flashed Dynamics_GTX_2.4.5_WWE_Kovsky.nbh
i was happy
i realized that i cant sim-unlock here, so:
i flashed orig. spl aka RUU_Signed.nbh
and then i flashed original APP_SW_X1i_MOBCOM_AT_CDF1215-0312_KOV_R1AA019.nbh
then i sim unlocked the phone by code
then i went directly for a 28
it hang itself when i tried to do flash hspl at 17%
since then, i get everytime stuck at 0% and get the msg 262
even messing around with mtty and all different roms and programs and settings didnt lead any further.
task 28 looks like:
Cmd>task 28
Format start
TAG NOT FOUND !!! NOT CLEAR STORAGE !!!
Format end
Cmd>
task 29 looks like:
Cmd>task 29
Format BINFS start
CE start start block=321, total block=3775
Write 0xFF start page=0x5040, total page=0x3AFC0
Format BINFS end
Cmd>
task 8 seem to take forever, the screen shines in bright white.
with power and vol down i see:
3 colors
kovs110
spl-0.72.0000
microP1-707
microP2-707
serial (which, ofc. turns into usb when i am connecting it)
from there on everything went fine, but the flashing.
ofc i try to flash hspl, but every method hangs at 0% with error 262
mtty up and running (as far as i can see ) i definitely need help.
crawled the forums für 18 hours now, i cant find a solution to this on my own.
btw. cant load something on the card, otherwise i would have tried to load from the map...
again, i call for HEEEEEEEEEEEEEEELPPPPPPPPPPPP!!!!!!!!
no one? :O
do i have produced a brick?
playing around to find out whats going on:
Cmd>info 7
HTC Integrated Re-Flash Utility, Common Base Version : 1.51d
Device Name: Kovsky, Bootloader Version : 0.72.0000
Cmd>info 8
--- 2K bytes sector version ---
DEVICE NAME=micron_mt29f4g16abc
DEVICE ID=0xBC
DEVICE MAKER ID=0x2C
PAGE SIZE=0x800
TOTAL PAGE SIZE=0x840
BLOCK COUNT=0x1000
BLOCK PAGE=0x40
Checking block information
BLOCK 0 (0x0) is reversed block
.
.
.
BLOCK 32 (0x20) is reversed block /////// that seems to be quite long, in the documentation it goes just till 12 and then it shows partitions, which are not showed at my device :/
OS NOT FOUND !!!
Cmd>checkimage
SPL CRC checksum = 0xEC2F928F
CE is None.
ExtROM is None.
Cmd>task 32
gives no output.
is it possible to flash per mtty? (LRS?)
btw it boots into white screen, not three color bootloader screen
with power vol down into bootloader without any problems
but from there on it always stucks at 0%
//edit
set up an old laptop with winXP and tried it there - you never know? - didn't work...
//edit #5
got a micro sd card
formated it with fat32, put the RUU_Signed.nbh on it,
renamed it to KOVSIMG.nbh, put it in the phone and started it with vol down and powerbutton to the bootloader.
hangs at loading...
come on guys, some one have to have something to say!
To be honest it does not sound promising
try this with mtty
Cmd>set 16 0
Cmd>task 14 0
Cmd>reboot
then try and flash a stock rom
when copied on the sd card, it hangs at loading
when flashed over usb, it hangs at 0% at the progressbar
if you try another hspl does it just sit at 0% ?
i just tried this one out: http://forum.xda-developers.com/showthread.php?t=431218
are there other versions of hardspl?
sorry i meant doing another hardspl with the version your using
yep... just sitting at loading or 0% depends on the way i try to flash
i think, somehow the partitions are ****ed up,
is there some one who knows the mtty and bootloader stuff very well?
have you thought of trying one of the Android NAND roms? If you can just get it to install, you could then go back to windows mobile
do i not need hard spl for android?
does android not get flashed like a windows rom?
i ll read into that, thx for the tipp
It's similar to windows roms yes, but there is a version (ICS 4.0.4alpha), that changes the internal partitions so as a long shot you could try this and then try flashing back to a windows rom.
The thread in question is
http://forum.xda-developers.com/showthread.php?t=1614236

Categories

Resources