yashsingh1/xdaforums huggingface dataset:
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Des:
Looks like you just have successfully bricked your device. Your radio is either dead or SPL couldn't read single byte from it for some other reasons. Most probable reason that you have flashed corrupded ROM image. Absence of signature check have some not so good side effects. Imo your only hope (except warranty, jtag and giving up) is to wait for a long time keeping your fingers crossed in hope that os image is uncorrupted and after some time wince would gave up trying to init radio. And after that run SSPL (SSPL CID doesn't rely on radio at all) and flash once again with 256 times checked image.

Read previous post. Think a bit. Read it again. And after that repeat your question please. :) And yes, the answer is definetly yes, you can flash any image to your device. In case of flashing Trinity rom you even could recover after that if you was smart enough during flashing routine. But chances to get it working are minimal. Yes, devices are very, very similar, but have tons of little differences wich makes hermes SPL unoperatable on trinity. And SPL is rather simple prog (less than 256k in size) what to say 'bout OS after that ? Moreover I doubt that hermes spl would be able to load triniti os image (due to different memory mappings) and flashing triniti IPL&SPL to hermes would kill it 99% (you can test it without any harm, just try to run trinity SSPL on hermes).
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] qvik123:
Ok I will try that.Whether it goes well or not ,thank you.

And ,the thing you said(windows giving up or something) happens a lot?'Cause I ran checkimage in Bootloader it says my CE programs are all right.So hope it goes well.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Des:
have you read this http://wiki.xda-developers.com/index.php?pagename=Hermes_UpgradeProblems#problem2 ?

and more probable that your problim is in fact #5.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] qvik123:
I want to confirm that my device is really dead and there is no hope.Here is the condition:

I have the SPL 1.09 now in my device.

I checked checkimage command,it says my radio returns error crc and other roms seems OK.

I can not use lnb lnbs command but I can use password 000000000000000

and erase,and it returns "T",but seems no effect.

Is it,I mean,really dead,please.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] superdave:
Great tool Des!

I would still be worried about loading 108 though, if your radio crashes on 108 and your using a rom that does not have kitl you wont be able to recover. Im working on a custom bootloader now based on 1.09, that will ignore the cert/cid check. With that and this tool, you should then be able to flash 108 and not have any concerns.

qvik123,

If the rom you have loaded has kitl support you recover using that, check the other thread for info.

,Dave
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Des:
Main part of SSPL is such "custom" 1.09 based bootoader, rip it if you want to. But you would need to backpatch it from automaticaly going in to the service mode.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] maybesure:
help, I get supercid in X01HT with Dec.02, so can use another sim card.but in my try flash DOPOD CHT ROM,in 15% is broken .and display no gsm ,dead in display "windows mobile". use "task 32" in mtty.exe,is say "0XFF". I can't use it now ... is broken...cry... but it can run bootloader , third color.

how to fix it ?

USB>info 7

HTC Integrated Re-Flash Utility, Common Base Version : 1.50a S024

Device Name: H, Bootloader Version : 1.09

Built at: Nov 7 2006 22:59:17

Copyright (c) 1998-2006 High Tech Computer Corporation

CPU ID=0x41129200

Main CPLD version=0x5

Upper CPLD version=0x4

Main Board version=0x6

USB>info 8

Block 0x0(0) is Reversed block

Block 0x1(1) is Reversed block

Block 0x2(2) is Reversed block

Block 0x3(3) is Reversed block

Block 0x4(4) is Reversed block

Block 0x5(5) is Reversed block

Block 0x6(6) is Reversed block

Block 0x7(7) is Reversed block

Block 0x8(8) is Reversed block

Block 0x9(9) is Reversed block

Block 0xA(10) is Reversed block

Block 0xB(11) is Reversed block

Block 0xC(12) is Reversed block

Partition[0], type=0x20, start=0x2, total=0x18FE

Partition[1], type=0x23, start=0x1900, total=0x1700

Partition[2], type=0x25, start=0x3000, total=0x1BB00

Partition[3], type=0x4, start=0x1EB00, total=0x1BD00

CE Total Length(with sector info) = 0x3E55800

CE CheckSum Length(without sector info) = 0x3D60000

USB>info 4

HTCS L?艸TCEUSB>info 2

CID: Wait interpreter timeout

HTCSF kE?HTCEUSB>

USB>checkimage

IPL CRC checksum = 0x2C7F4697

SPL CRC checksum = 0x91BDD7D5

CE CRC checksum = 0xB7F6AA1C

ExtROM CRC checksum = 0xE74C9EB8

Radio Image CRC checksum = Checksum: Wait interpreter timeout

USB>info 7

HTC Integrated Re-Flash Utility, Common Base Version : 1.50a S024

Device Name: H, Bootloader Version : 1.09

Built at: Nov 7 2006 22:59:17

Copyright (c) 1998-2006 High Tech Computer Corporation

CPU ID=0x41129200

Main CPLD version=0x5

Upper CPLD version=0x4

Main Board version=0x6

USB>info 8

Block 0x0(0) is Reversed block

Block 0x1(1) is Reversed block

Block 0x2(2) is Reversed block

Block 0x3(3) is Reversed block

Block 0x4(4) is Reversed block

Block 0x5(5) is Reversed block

Block 0x6(6) is Reversed block

Block 0x7(7) is Reversed block

Block 0x8(8) is Reversed block

Block 0x9(9) is Reversed block

Block 0xA(10) is Reversed block

Block 0xB(11) is Reversed block

Block 0xC(12) is Reversed block

Partition[0], type=0x20, start=0x2, total=0x18FE

Partition[1], type=0x23, start=0x1900, total=0x1700

Partition[2], type=0x25, start=0x3000, total=0x1BB00

Partition[3], type=0x4, start=0x1EB00, total=0x1BD00

CE Total Length(with sector info) = 0x3E55800

CE CheckSum Length(without sector info) = 0x3D60000

USB>info 4

HTCS L?艸TCEUSB>info 2

CID: Wait interpreter timeout

HTCSF kE?HTCEUSB>

USB>checkimage

IPL CRC checksum = 0x2C7F4697

SPL CRC checksum = 0x91BDD7D5

CE CRC checksum = 0xB7F6AA1C

ExtROM CRC checksum = 0xE74C9EB8

Radio Image CRC checksum = Checksum: Wait interpreter timeout
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] ratcom:
WELL DONE Des & Pof and anyone else who was involved in the development of this tool!

In Winston Churchill's own words.......

I for one am looking forward to sweet cooked roms!!! MMMMmm I can almost smell them cooking ;)
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] axiom:
As I understand it the tool is sending a specific command and that puts the bootloader in a cid bypass mode.

Can we not create a miniSD version of this tool, that will execute trying to do an update and set the bootloader to the cid bypass mode? I mean if it's a simple command to execute, why not? This could really help out the people who have corrupt cids.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] qooqoo:
i second that!:p or something run via sync.

might the hermes which have corrupt cids will back to life.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Des:
Ok, your radio is dead. No answer from radio means no valid CID (either super or not). So you can not flash image with original bootloader. But you are lucky to have live WinCE and so you can run SSPL and flash ROM via it (SSPL doesn't need radio to determine that any CID is super one :)). Or you can try unbricking way described in wiki.

@axiom, @qooqoo : No guys, your understanding of what SSPL do is totally wrong, so things you are asking about can not be implemented. rtfm for details.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] mixmaven:
So you can't flash an extracted radio only rom (like the 1.27.00.00) with this tool from 1.06? You still have to be at 1.04?

-mix
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] walshieau:
you can only flash extracted radio's when you have radio bootloader 107 and less... this tool is not used to flash extracted radio's, as this tool emulates bootloader 1.09 and since bootloader 109 does not have 'rtask' it cannot update the radio rom...
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] mixmaven:
Thanks walshieau for the quick response.

-mix
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] maybesure:
oh...

but I can't boot windows ,it only display "Windows mobile "screen.

phone is stop in there ,os didn't boot .

you SSPL.exe is good,but if os is broken,than it can not work .

I can't use RUU,because is say: Invalid ID

task 32 is says:"FF".so can't write os.nb with mtty.exe

dear Des, can you to make another vesion crack of "SSPL" , it can run with XP,don't check CID. upgrade rom version like RUU.exe.

so if upgrade wrong ,than I can try other rom fix it .
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Wiper:
As I have updated the full AKU 3.3 rom from the EXE and not just os.nb/gsm.nb and wanted to revert back to radio rom 1.18 how do I actually do it?

I mean I can extract the gsm.nb from the 1.35 rom which includes radio rom 1.18 but then what? Can I just do it by using the lnb gsm.nb or do I need to know the starting memory address like when updating the first two splash screens or the boot loader itself? If so, how can I find out what would be the starting mem address for gsm.nb?

Oh and are there any hope in the future to be able to flash radio only extracted roms (like 1.27) now that I'm stuck with radio bl 108? I remember the days you couldn't downgrade from bl 1.09... I guess it's all about finding out the right mem address?

So get crackin' pof/Des =)
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Olipro:
Des, with this modified bootloader; surely it's possible to use lnbs from mtty to flash files in much the same way that lnb is used with the 1.01 MFG?
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Des:
yes it is. but you should add "signatures" to .nb file before flashing it (or you have good chances to brick your device). Creating nbh containing [only] needed files using nbhgen and flashing it with romupdateutility (and SSPL of course) is much safer way saving you from many human factor accidents.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Olipro:
perhaps you could answer this for me then;

I was issued a new Hermes today; I've Sim-unlocked it, but decided to hold off on SuperCID'ing it, today I used nbhgen to create a full update comprised of the AKU 3.3 OS (and ExtROM), a 1.01 IPL, 1.04SPL and 1.21 GSM radio (as well as the splash screens) yet when I tried to flash this update (from SSPL) it would fail immediately and no longer boot the OS, requiring me to load my Operator's update ROM to recover.

Originally I had compiled an NBH with just the OS,GSM,ExtROM,Splash but still got the same failure.

IGNORE THE ABOVE

I made the schoolboy error of having the ExtROM address at 900 (the Trinity address) when it should be 700, my mistake!

when I configured the sample.txt, I first set the CID to ORANG008 then to SuperCID but both failed, any ideas?
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Des:
what error code romupdateutility returns ?
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Olipro:
it's OK, it was all my mistake.

my other question however regards extracting the Bootloader; the EXE is smaller than a bootloader NB file, so care to give any pointers? PM me if possible, thanks :)
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Des:
there are not too many possibilities to achieve this :)

Standalone bootloader for flashing into device (and making it virtualy unbrickable) would be released with sspl v2. Though current version works good enough there are couple of things that I consider necessary to fix + more strict working with "unsigned" code to prevent bricking phone with misunderstood usage of lbns (there is no reason for concern - you would still be able to flash your device with anything you want but in less risky way). So no clues until official release for most users sake.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Olipro:
oh, well if that's on the cards, I shan't work against you, good work!

but while I'm on it; what's the entry point of the Bootloader when it's an NB?
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] walshieau:
im putting my hand up as a beta tester if u want...
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] bradyholt:
So how would this work for a device that is already bricked? How do we get it on the device to run? I have a device that is up for testing!
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Olipro:
it wouldn't... if you've already bricked the device, your *ONLY* hope is either the KITL trick, or using a full-ROM update and crossing your fingers.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] henrylee:
Its great tools and thanks a lot
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] mezhopking:
Unbranded HTC TyTn needs upgrading

I've just bought a new HTC TyTn and I would like to upgrade the Radio rom and, well, everything else.

I've been pointed to this thread, but upon scanning every post, I'm non the wiser.

Basically I want my device to be completely up-to-date. The reason being that my radio rom seems to be pretty crap, it has awful reception and constantly loses utms/gprs/gsm connections. I've come from a HTC wizard, where I had no problems with gprs/gsm connections.

I remember coming here to unlock my wizard almost a year ago, that was such a simple process. Maybe it's because it's late, but nothing is clicking here.

I don't need to unlock my phone, as It's unbranded, am I right in thinking this?

What ROM / ROMs do I need?

Please someone walk me through this, I feel like such a retard! :-)

Any help very much appreciated!
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] maybesure:
cool! I need it for save my x01ht .isn't boot now and can't use kitl(press comm and ok is not prompt ).

which time we can get it ?you real a goodman.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Des:
@bradyholt, @maybesure: no guys, standalone bootloader won't help you if your device is already bricked (because you need to put it on device first) :(
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Petal_7:
That's great , thx :)
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] RIPin@:
Des i want just clearify some facts.

I have bricked HTC Tytn.

Divece stoped at Windows Mobile Screen.

Bootloader 1.09

I have tried all methods, but it does not help.

task 32 - Level=FF

So, it is useless to try to combine correct version of Vendor(Qtek_001, ....) and language (WWE, USA ....). RUU will always return Vendor ID error. (If there is a possibility to get this information staying in bootloader)

So i have 3 option.

1. Get it to service center(i think, they have some tools to repair it)

2. Wait untill my OS will load. (It load first time after flashing broken ROM, which i have dowloaded form this site. And i reset device on runing EXT ROM cabs. And after that device never loaded again.

3. Wait another bootloader miricle.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Des:
most probably that the only tool they have for such repairs is a torx screwdriver needed for mb replacement.

If it booted one time then i see no reason why it should not boot another after hard reset. And after having working os you can run sspl and flash your device again. Hint: it is not necessary to calibrate your screen etc. to do this - you can connect device to activesync and copy&run sspl remotely.

If this doesn't work for you - read hermes wiki: other possibilities of unbricking are described there.

I swear to make such miracle as soon as you figure out how to patch couple of bits (or execute dozen bytes of custom code) in bootloader without booting to os/using kitl/jtag (or soldering station and external programmer) :) But without ability to do this no miracles are possible imo :(
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] weinson:
I have the new cingular ROM on SIM unlocked (but not SuperCID) 8525. When the XDA Rom is released, will I be able to use this app to flash the ROM, or do I need to SuperCID first?
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] politby:
Should this have worked on a BL 1.09 device?

@Des:

I have bricked my TyTN after trying to use your utility on my device which had bootloader 1.09 and was running the 2.05.263.1 Swedish test ROM.

Before upgrading to this ROM, I had Super CID'ed my Tytn using pof's tools.

I ran your utility, which put my device in "d" bootloader mode and then I tried flashing back to the shipped Swedish ROM version - this was probably the major mistake since it was a bootloader downgrade from 1.09. Somehow I had made myself believe this would be possible using your tool. But it isn't, is it?

The flash stuck at 27%, failed with a communications error and now I have a brick stuck in bootloader 1.09 with no apparent way to fix.

You might want to post a warning/clarification not to try to use this for downgrading from a 1.09 BL ROM to a < 1.09 one.

Note I'm in no way suggesting your tool is at fault, it was just me that didn't check the 1.09 question out properly before flashing my device.

/politby
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Sleuth255:
Actually, Des' sspl solution had nothing to do with your flashing misfortune. BL downgrades using that solution work just fine. SSPL doesn't overwrite your BL, the ROM you're flashing does. You had a flashing error during the process which left you without a valid os image. Did you check to see if you are still SuperCID? If so, you have many options the most obvious of which is to simply flash a production ROM.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] pof:
This is false, you can hexedit the version number in 1.04 and use SSPL to downgrade, i've done it several times without problems. You just had a bad flash, nothing to do with SSPL.
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] politby:
I actually didn't check the CID status using mtty, since any attempts to flash a production ROM (like the one my TyTN came with) result in the dreaded (misspelled) "Invalid Vender ID" message.

I did post about this in the "dead Hermes" thread so in case anyone has any suggestions as to what I could do now, please respond to my post there.

thanks

/politby
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] yuhandsome:
X01ht 1.09 version

Dear Moderator,

I m owner of a Softbank X01ht 1.09 rom version from Japan. The device still are in japanese. I ve tried your new software to unlock it, but unfortunatelly I had no success. I tried the SSPL-Herm.zip, but there is a message when I try to execute the file. The message is... it is an unknow file or its damage.

Please, could you help me to solve this problem ?

Thanks a lot,

Luciano
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] amazoncd:
Sorry, posted in wrong thread.

dial
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Dendrosfx:
It sounds like you don't know what yourself is doing...the SSPL does not do the unlock but let you flash any ROM with it...that's 2 separate things...I guess you can just wait until the new unlocker comes(for safety) http://xdaforums.com/showthread.php?t=293665
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] yuhandsome:
Softbank X01ht 1.09 Rom version

Dear Dendrosfx,

Sorry, but I didn t explain what is happening before, on my first message. Let me explain better. As I told you, my device still are in japanese and I want to keep it in this language. I tried to use your new unlock software v.3 to unlock my mobile, but I had no success. Everthing was fine in all the process, including The SIM unlock, to use any carrier, and Set to SUPERCID, but when I replace my original Sim card to a valid SIM, the mobile don t works. I know that the problem is difficult to solve now, because of the 1.09 Rom version, right ? But I also know that if I could downgrade to the 1.04 Rom version, everthing was solved and the new unlock v.3 software will work property on my device. Could you help me to downgade the Rom version ?

Thanks a lot !

Luciano
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] framed:
Tanks very much for this post
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Penguina:
my X01HT run this exe

the device will turn to tri-color screen

and it shows

HERM200

IPL-1.01

HERM200

SPL-1.09.ds

then it hang at that screen

when I connect the device to my pc

it shows 'new device found' and cannot connect with my device

no response

how can I solve it?

my device is

Rom version: 1.23.708.4

Rom date: 07/24/06

radio: 1.13.00.00

protool: 32.49.7018.00W

Bootloader is 1.04
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] jonfitt:
could you Wiki it?

Hi Des and all other gurus,

SSPL sounds like a great tool, but this thread is half useful information, a quarter heresay, and a quarter help requests from the bricked.

Would you mind creating a Wiki entry for it? That way we could have a definitive statement on what it does, what it does not do, and how to do it.

Thanks.

Hard-SPL could also do with this treatment too if anyone feels they know a lot about it?
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] mori2004:
Hi folks,

Any working version for the model X01TH Softbank Japan version:

ROM version: 1.18.225.3

Rom date: 07/22/05

Radio version: 1.14.01.10

ExtROM version: 1.18.255.106

HERM200

IPL-1.01

HERM200

SPL-1.40.01ipro

Thanks in advance,

Regards,

Mori
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] jhemzz:
Hello pof,

I used the program mtty to dowgrade bootloade SPL 1.09 but I got un error:

USB>

USB> task 32

CID: Wait interpreter timeout

Level = FF

USB> task 32

Level = FF

Can you tell me what to do? or what is the solution for this phone, showing NO GSM and stuck on windows mobile.

HERM200

IPL-1.01

SPL-1.09

Thanks and best regards

Jhemzz
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] eclampsium:
Use to have this in my xo1ht:

Rom version: 1.18.255.3

Rom Date: 07/22/06

Radio Version: 1.16.00.00

Protocol Version: 32.53.7018.01H

ExtRom version: 1.18.255.106

Herm200

IPL-1.01

Herm200

bootloader SPL-1.40.Olipro

But i BOUGHT IT ALREADY CHANGED TO ENGLISH, BUT TRYED ANHOUR AGO bLACK MAJIK ROM, AND SEEMS OK.... WILL TEST A LITLE BIT MORE... BEFORE FLASHING I JUST MADE SHURE TO BE SIM FREE AND SUPERCID, USED THE SSPLHERM.EXE AND IT WAS DS (OK), AND THAN LAUNCHED THE BLACKMAJIK FILE. MY COMPUTER DIDN'T EXECUTED BECOUSE MY WINXP DID NOT HAD THE .NETfRAMEWORK. i DOWNLOADED FROM MICROSOFT AND THE COULD EXECUTE THE ROM FLASH.... STILL TESTING THE ROM TO SEE HOW STABLE IT IS....
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] vermsky:
I have tried this unlocker and for some reason, flashing the SPL stopped at 10%. I did the recovery thing but it keeps stopping at that point.

Now the phone is stuck in bootloader screen showing SPL-1.40.Olipro.

I tried flashing an original RUU upgrade but it stops at the same point too.

Any suggestions?
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] boss2007:
HI

You had better flash by SD card metod.

best regard
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Hirst.Dave:
I am still having the same problem

:( i have tryed the SSPL-HERM.exe and i am still geting the Vender ID not valid can any one help
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] f3nd3r:
How do i go about signing an NBH file or the NB files within it?
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] thomillian24:
I can`t get update the ROM,

first I follow your step, when i got the screen red,green,blue and white (Herm 300, SPL-1.09.ds)

i reconnect the USB then i run the upgrade setup (RUU_Prodigy_2210206_22102109_021911_TMO_UK_WWE_Ship).

It`s give a error[274] : Connection

What`s i doing wrong???

Please Help.....

Thanks

Sorry, I Newby ( just bought a T-mobile MDA Vario II second)