yashsingh1/xdaforums huggingface dataset:
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
Most probably you did not sim/cid unlock it correctly before flashing.... repeat the process again, make sure you flash cingular's 1.30 rom first to get back bootloader 1.04, then do all the unlocking process and make sure your radio version shows 1.16 before you run HERM_Unlock_v2a.exe.

No, it all is kept forever after ROM upgrades, no matter which rom or bootloader version.

No, you need to be in bootloader 1.04 to upgrade the radio ROM.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] aadadams:
I tried again, and you were right the SIM unlock works after moving back up to Cingular 1.34. Apparently something went wrong initially. I used mtty.exe with the following commands: "at task 32" and "at info 2" and got "HTC..." and "No Carrier", respectively.

In the interest of clarity and my further understanding, am I correct in the assertion that any vendors ROM with 1.06 bootloader or higher will flash without vendor ID errors to a superCID unlocked Hermes, but ROMs with 1.04 bootloader will not flash due to bootloader version limitations.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
err... u did the commands in radio bootloader... after 'rtask b'. You have to issue them in normal bootloader, in the "USB>" prompt, and without "at"... just 'info 2' and 'task 32'.

Yes, that's correct.

nope... ROMs with 1.04 will also flash without any vendor id error to a SuperCID device.

Read the "notes about cid and bootloader versions" in the wiki to fully understand it if there's something still unclear to you:

http://wiki.xda-developers.com/index.php?pagename=Hermes_Upgrades
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] aadadams:
I launched the mtty.exe and waited forever for the USB>. It never surfaced so I entered the commands anyway: rtask b, ate1, atv1, at info 2, and at task 32, and seemingly got the correct information from the phone. Maybe this is why I had trouble performing the call duration reset on the TyTN. Now that I have the 8525 I wanted to unlock it and again no USB>. Wierd if it is not supposed to work that way. I will be doing a bit of reading to understand the processes a little better.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
when you launch mtty, select usb, click "Ok" then you have to HIT ENTER TWICE, and you'll see the USB prompt. If you directly type 'rtask b' you're going to gsm bootloader without seeing the USB prompt. Try it again and you'll see :)

Anyway, you can go back to the normal bootloader (usb prompt) by typing "retuoR" command in gsm bootloader.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] lanwarrior:
I thought 8525 run on 1.06?

How did you exactly do the SIM and CID unlock on the 8525 WITHOUT downgrading to 1.04? The 8525 just came out on 11/16 and I've heard that it has 1.06.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
lanwarrior: By flashing cingular's 1.30 rom with bootloader 1.04 first, see the hermes upgrades wiki page.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] rsolomon:
I never said I didn't downgrade the bootloader - the unlock instructions (and tons of postings in this thread) say you must, so I did.

Yes, you'll note I posted on 11/16 when I got mine :) Yes, the 8525 shipped with bootloader 1.06. I borrowed a T-mobile SIM to verify that the device was in fact unlocked - and v2a had done that without my needing to ever enter the code.

HTH,

Richard
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] bam0:
I'm sure this is really obvious but I just want to be 100% sure.

I've SIM unlocked and made my phone SuperCID (checked with mtty, all 0s)

Do I have to worry about installing any ROMs that are bootloader 1.06, or does the CID setting stay despite ROM flashes so I can effectively put any image I like on my ex M3100?
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
bam0: SuperCID will stay _forever_, you can safely flash any ROMs with bootloader 1.06 and be able to flash any other ROM later... no matter which bootloader version, language or carrier :)
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Wam7:
I used the 1st unlocker, (well manually after it didn't work) if I want permanent SuperCID can I just run the latest version on my already unlocked M3100?
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
Wam7: Yes :)
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] BRad Barnett:
doh

Ok, after running this beast (I just wanted to unlock my CID so I could safely upgrade roms)... I now have a useless phone. :/

I use Fido in Canada, but Fido is now integrated with Rogers. It was not when I bought my old phone, initially. I suspect that the SIM unlock has munged things up.

Right now, it says "Rogers Wireless" as the network ID, whereas before it said "Fido". There is no longer a Fido network, it is now Rogers.. and one constantly roams on it. However, I think that by removing my SIM info, or the new update/hack masking it, I'm borked.

Basically, I try to make a call, and I get hung up on instantly. I upgraded to 1.16 as well.. same problem. :/

Any ideas on how to reverse this upgrade?

----------

Uh, ignore the above. Bahahah, I was dialing my own cell phone number, and at least here, you get a hangup. :PPPPP

Damn, I'm tired. I left the above, just incase someone pulls the same dumbassed move... :P
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
LOL :D :D for a while you really scared me! :eek: :rolleyes:
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] lacroixdp:
Worked perfectly on my 8525 after I downgraded the SPL to 1.04 - thank you VERY much! :D
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] seiler:
You are a STAR....finally the unlock worked for my UK T-Mobile Vario II!!!

Thanks so much! Very much appreciated your efforts and time

Seiler
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] krnnidtt:
not so easy but you can do it

Dear jarodcn

please follow below thread as it mentioned method of down grade

bootloader 1.06 to 1.04.

http://xdaforums.com/showpost.php?p=1046712&postcount=12

After provided free unlock patch your radio rom will change to 1.13.

in my case

after unlock, I flash again 1.20 radio rom, of course still network unlocked.

Now my X01HT work very stable with Dopod rom and 1.20 radio rom.

for your info BR,
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] mazta:
genious

pof you are the man, but for us idiots, can we get a dummy guide on how to do it, forgive my stupidity but it looks complicated, will there be a wizard, to just unlock it all in one go,

thanks guys, i will donate £20 for the unlocker, and i suggest all you guys who have used this to unlock your handsets, send some sort of donation to keep this site alive, we all need unlockers, show your appreciation,

thanks again
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Churchill:
POF!

Worship, Worship, Worship!

YOU Are a genious. Thanx for all your hard work.

Dutch MDA Vario II unlocked...Grrrrrrr
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] J.S.:
I think it is not a good idea to donate any money to POF or xda-dev. This is only a crack of a solution imei-check developed. Without their development there would be no free unlocker now. This is not the spirit of the good old xda-dev like genius itsme was doing in past. Now a cracker is the hero.

At least cracker pof should give original credits in "HIS" so called solution to imei-check.

I agree that it is a good thing that there is a free solution now but you should not make a script kiddie your hero.

Just my 2 cents.

John
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] rachelm700:
@ J.S.

I certainly WILL be donating. Without the help of pof and everyone else involved I would have been stuck with one bricked SPV M3100 and another locked to Orange. It would have cost quite a lot to make my handsets fully working as they are now and am most grateful for all their hard work and efforts.

@ pof

Hurrah Have successfully unlocked two SPV M3100s today. Nice simple procedure and now happily using my 02 sim card. This is truly the best and most informative website I have seen regarding mobile handsets with lots of good advice. Especially helpful for those of us with very limited knowledge of what goes on inside.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Asukal:
X01HT <Japanese Soft bank Unlock Summary

hi,

Great work POF, and Nice summary about JP Soft Bank device,

I will follow up for japanes guys in japanese Instructions on my Blog.

http://asukal.net/blog/2006/11/hemresunlockersoft_bank.html

Good Luck
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] vijay_kumar:
Thanks a Lot Pof the real hero Of pocketpc thing ;) Still didn't tried myself anyways We all here Appreciate your Hard work !
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] D'evil69:
many thanks

Many, many thanks to pof. Now, all that remains is to get myself an SPV M3100 :).

Thank you.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] shadow2209:
I tried to unlock my spv m3100 from Orange Switzerland but it dont work, maybe i make something wrong....
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] benkywong:
>>Warning:

If you run this upgrade on any other device than HTC Hermes, you will most probably render it DEAD!

****

so X01HT can use this unlcoker or not?
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
Each device has a different unlocking code, the radio rom i provided is just a patched 1.13 radio that makes sure the unlocking code is always the same, there is no "unlocker" by itself.

You just need to follow the process on the first post.

Yes, but when you flash another radio rom (or shipped rom which also contains radio inside) you will loose the SuperCID. You can flash my patched radio again to have SuperCID. I will probably provide patched radios for every new radio version when I have some free time.

You are missing something, Hermes upgrades are not 3 .nbf files like in older HTC devices, they have changed the format to one single .nbh file containing all the rom parts. The radio is somehow tricky, cos it doesn't need to be signed to flash, and we're using the rom utility form magician to flash the radio-only, because the radio bootloader commands used to flash are the same.

For now this is the "easyest" way to do it, I know it is not the best... but you just have to follow my steps, and feel free to ask if you have any questions or get stuck in any step. When I have time I will try to provide a better upgrade utility that does also the sim-unlocking from bootloader, but that will require some programming and I don't have experience in windows environment, will have to look at it.

I don't considere myself a cracker, I just reverse engeneered the process of the imei-check unlocker and provided a different solution to do the same. My goal was not to develop an unlocker but to understand everything of the Hermes internals, I started learning how the Hermes works because I want to run linux on it, the unlocker has just been a part of the learning process. If you want details on how the unlocker has been developed I disclosed everything on this thread: Reverse engineering the HERMES imei-check unlocker.

If you want to donate or not that's up to you, I spent time and money, I bought two hermes, I bought the unlocker and I bought a license of HHD usb monitor, that's why I accept donations, but you can download the unlocker for free, and you don't need to donate if you don't want to.

Which error did you get? In which step you got stuck? I can't help if you don't provide some more information.

Yes, it can be used in all HTC Hermes devices, this includes the following:

HTC TyTN / O2 XDA trion / T-Mobile MDA Vario II / Vodafone 1605 VPA Compact III / Orange SPV M3100 / Dopod CHT 9000 / Dopod 838 Pro / hTc Z / Qtek 9600 / iMate JasJam / Cingular 8525 / Swissom XPA v1605 / SoftBank X01HT / UTStarcom 6800 / Vodafone PDA 1605
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] shadow2209:
I go in the bootloader, then i started taht software. I waited. Softreset. Then i put in a other Sim Card and tried the code but it dont work.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
@shadow2209:

- Did you previously try other invalid unlocking codes? Once you try I think 10 invalid codes it doesn't let you unlock using the SimLock.exe from WM5, then you need to enter the unlocking code using at@simlock bootloader commands.

- Which radio version is shown on your device?

- Which bootloader version do you have?
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] J.S.:
@POF

yes you are right cracker is not matching perfect. The word THIEF is better.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] shadow2209:
It works!!!! The problem was that i connected the m3100 before i go in the bootloader, yet it is unlocked ;-)
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] intgom:
Hi pof,

First of all, I'd just like to say thanks for all your work.

I tried to unlock my M3100 using the unlocker but it didn't work. Following your instructions...

Enter bootloader mode on your Phone. To do this, simultaneously hold side OK and POWER buttons together and reset with stylus.

All ok.

Connect your phone to your computer using the USB lead.

All ok.

Run the MaUpgradeUt_noID.exe program – this will reflash your phone with a patched radio ROM required to unlock.

Wait patiently.

At this point, the program ran through ok but finished after about 5 mins.

Once the MaUpgradeUt_noID.exe upgrade completes, it will be closed automaticaly or it will end up saying "Upgrade Error", but the patched radio ROM will be flashed anyway, dont worry about that error!

I got a screen with an upgrade error and just closed it.

Soft reset with stylus (Device will not be hard reset and no data will be lost)

Did the soft reset - all ok.

Allow your phone to reboot. Once it has, put a SIM from another company and the phone should ask you the Unlocking code

Pulled out the orange sim and replaced it with a vodafone sim.

Enter this CODE: 22051978

Process is (hopefully) complete!

When I switched the phone back on, I was prompted for the code but when I entered this code I got a message saying invalid code. I have tried this twice (and the phone reminds me that I have tried it twice) but don't want to try again in case something locks up (don't know how many tries I will get).

Not sure how to find out the bootloader version but other info below (taken from 'Device Information' under 'Settings'):

Operator version: 14.123.1.614

ROM version: 1.23.61.4

ROM date: 07/13/06

Radio version: 1.06.00.00

Protocol version: 32.37.7010.01H

Any ideas what might be wrong in my case?

Many thanks.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
In case it locks up, it can still be unlocked from bootloader.

When you are in bootloader mode (tri-color screen) you should see "IPL-1.01 SPL-1.04" this is Bootloader 1.04, if it says SPL-1.06 you have bootloader 1.06 and probably have to downgrade the bootloader first to applying the patched radio.

The radio upgrade was not completed successfully, do no try more codes until you see Radio version: 1.13.00.00 here. Try to follow the steps again, if it doesn't work capture the radio-flashing process with USB monitor as explained here and I will be able to tell you why it doesn't flash correctly.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] intgom:
Thanks for your reply.

I tried again but no joy. I have attached a few pics of the process, including the error.

I will now try and capture the same process using USB monitor...
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] intgom:
Here is the log file... attached.

Hope I got it right!?
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] aftermath99:
Orange SPV M3100 UK unlocked

pof,

thanks very much! worked 100% on Orange UK SPV M3100. now, need to find a good rom to load on.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] woaieffie:
Unlocking problems!

I was using v2a to unlock my M3100. Radio rom is 1.06. Bootloader is 1.04 . After using MaUpgradeUt_noID.exe. It always says '' Error 100: Model ID error. the rom image is not designed to work with my device''.

Why would it happen? Any solutions?
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
- doublecheck your bootloader version

- make sure activesync usb connections is disabled

- start the RUU while the device is in bootloader mode (tri-color)
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] hookhook:
Dear Pof! Could you please help with my V1605?

I have a V1605 with CID Voda001. I flashed it with your radio unlocker V1 to make it supercid, and then I flashed a Dopod Rom without any problem. As per your instruction, I assumed the CID became DOPOD001. Today, I flashed it with your radio unlocker V1 to make it supercid again, an then flashed the latest cingular 1.34 rom. After that, I tried to flash it with HTC Rom, but the upgrade program complains invalid CID. I just ran mtty.exe and info 2. It showed me that the CID is still VODA001. I was shocked. At this point, how can I downgrade the bootloader again? :(
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] woaieffie:
cheers, pof. It works, I am enjoying my voda sim now.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
Your assumption was incorrect. With the first version of the unlocker (v1), the CID on your device goes back to the ORIGINAL CID on your device after flashing a ROM, this is VODAP001, even if you flash the dopod ROM or whatever.

Why did you use v1 again? You should have used v2a and make it SuperCID forever.

You unlocked and made it SuperCID with v1, which looses the SuperCID state after 1st rom upgrade (the dopod one), so your CID was back to normal after this (VODAP001), then you used V1 again which made it SuperCID but you lost SuperCID state again when flashing the Cingular 1.34 rom which has bootloader 1.06, so your CID is "VODAP001" again. Your device is unlocked, but it's not SuperCID. You should have run the exe file of unlocker v2a before flashing the cingular rom, while you where still running the patched radio. Now is too late, you're already on bootloader 1.06. Wait until a solution to downgrade bootloader to 1.04 is available.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] LinoX:
So guys..

..let's make a quick summary..

1) Almost any hermes sold has an ID identifying the manufacturer and the country for the phone.

2) This code is checked for flashing newer roms in your hermes (except in bootloader 1.04) and if it doesn't match the update fails (so you must update the same rom from the same vendor for the same country if you don't have bootloader 1.06)

3) there's an hacked rom by POF (that must be flashed with bootloader 1.04 for the above reason) that removes this code so when 1.06 (or superior) bootloader tries to compare the device code with the rom-update code it bypasses this check because it sees that the device is "super-CID" so you can update whatever rom you want.

4) the device remains "superCID" even if you flash another rom to your device...

this means that actually..

You make your hermes supercid and flash everything you want..

BUT I HAVE A FEAR:

Actually the bootloader 1.06 contains this pseudo-code:

if devicecid is present then

if romcid (not equal to) devicecid then

raise upgrade error

end if

end if

What if in bootloader 1.07 HTC puts something like

if (devicecid is not present) or (romcid is not equal to devicecid) then

raise upgrade error

endif ??????

In theory this could be possible just because NO sold hermes should be super-CID..

Now.. what could we do?

Is there a way to restore a deleted CID?

Should we forget about updating newer roms?

Any response is appreciated.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
SuperCID is a "developer" CID, which is present in all preproduction devices given by HTC to OEM distributors, ROM manufacturers, operators, etc... and it is not an Hermes specific thing. The CID protection exists in all HTC devices (himalaya, wallaby, blueangel, wizard, universal...) and has been like this since old times, so we can say it is an "HTC standard" way of doing things.

In other devices it is not needed to make the device SuperCID to upgrade to another ROM vendor or country code, because:

a) The check is not performed in bootloader but in the RUU, this can be circumvented by using a hacked RUU, the so called "NoID".

We can't hack the Hermes RUU because it doesn't perform any CID-checking, it is actually the bootloader itself that checks the CID and tells the RUU there's a "CID not allow" problem, and then the RUU complains about "vender id".
​

b) NBF format is so well known that you can change the CID on the file, and calculate the valid checksums so that you can make other vendor's rom to appear to your device as if it was your vendor, because you change the CID on the NBF file to the one on your device.

In new devices this has changed, HTC introduced a new file format for rom upgrades, the NBH format (used in Hermes, Trinity, Artemis, Excalibur, StarTrk....). This files are signed with a private key which only HTC has, and if you alter a single bit of the NBH file the signature will not be valid and the device won't allow you to flash it.
​

If HTC ever changes the bootloader to not allow flashing new roms in SuperCID devices (very unlikely) you'll always be able to flash an old ROM with bootloader 1.04 and flash a patched radio ROM like the one on this unlocker, then you'll be able to change your CID back to the value you want by simply running a small wince program (like the one provided with v2a of this unlocker). I mean, the same RIL_DevSpecific() command used by the exe file to change your CID to "SuperCID" can be used to change it to "Whatever" :)

Hope your question is answered and everything is clear :)
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] J.S.:
I FOUND OUT HOW TO SET CID BACK!

(and POF censors posts since he not found out this trick and is angry now)

With this method you can set the CID back to original in case HTC evere prevents SuperCID devices to work.

To change CID to whatever you want you only have to do following (on unlocked device - with radio):

MODERATOR NOTE: Sorry J.S., commands removed, see mamaich comment here and please don't put them again.

11111111 = SuperCID

CWS__001 = Cingular

QTEK_001 = QTEK/HTC

DOPOD001 = Dopod

etc.

John

P.S. No need to censor my posts, I can understand that POF is angry that he not found out this easy way!
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
J.S.: This is what actually the HERM_Unlock_v2a.exe does using RIL_devSpecific() functions, so you don't have to enter radio bootloader manually and do it yourself :)
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] rsolomon:
Presumably this only works with a patched Radio ROM?

Richard
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
@rsolomon: Yes, or a SuperCID device.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] hookhook:
Prof,

May I use J.S. method to make my voda001 to supercid again?

Thanks!
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
It will not work on your device because you flashed a 1.34 rom with bootloader 1.06 and you can't enter GSM bootloader, and even if you do it through RIL_DevSpecific commands it will not work because your radio is not patched and you don't have a SuperCID device.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] rsolomon:
Ahhh, Ok, so this is only the "reported" CID, not the "true" CID? I.e. w/a SuperCID device can one change this CID to and from "normal" (non-super) CIDs without losing "SuperCID"?

Richard
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
@rsolomon: You can only change the CID to your liking when you have a seclevel=0 device.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] rsolomon:
Gotcha! Thanks for the tutorial!!! (I'm learning slowly.)

Richard
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pietrucci:
Why are you mentioning those CID-codes (CWS__001, QTEK_001, ...), you don't need them in this procedure!?