[CLOSED] - [ROM] [HP iPAQ hw6900] [WWE] WM6.1 build 21057 - Sable

English project closed.

hi
he will be work on HP hw6910?

hola a todos.
es real esta rom ?????

zbebus
Yea. BUT! not now. Now only rom work with this bootloader version.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
because i have 6915 with this boot =P
Then i'll tell if someone have different version what to do
PS Also we will work on "NO GSM" problem

cant wait, ill beta test for sure
i have the g.39 bootloader, and also suffer from the "no gsm" issue.
at current the device is sitting in a drawer getting rather lonely!
i dont care if it bricks the hw6915, its been sitting in the drawer for over a year!!

Is this rom for G3 or G4 flash models?

I can confirm the flash works on 6955 series phones

some instructions....

well there are links to the files in the 4pda forum at the top.
one BIG CAVEAT as Vervol stated is:
Vervol said:
Yea. BUT! not now. Now only rom work with this [vG. 39] bootloader version.
Click to expand...
Click to collapse
First the warnings and then the steps
Warning:
Steps confirmed to work using Windows XP on a G4 based flash device if you're not sure look it up in your device:
Start/System/HP Asset Viewer/
under the heading "Flash Chip Type"
if you have any other Flash chip type it is not confirmed to work and may cause your PDA to be inoperable.
Steps:
1. put pda into bootloader mode: hold two buttons next to Send and End + power + push reset button with stylus
(with activesync running) extract the SPL vG.39.7z file and double click on "Command Prompt"
2. then type in :
Code:
pdocwrite spl -n0 -b 0x20000 0 0x80000
wait till it's done
3. double click on the activesync logo in the taskbar, make sure to disable usb connection to the device.
4. extract the 6915_ENG.7z file and run the Sable_RUU.exe file and by now it should start flashing....
5. when it's finished flashing double click activesync again and re-enable usb connections and that's it.

Experience so far...
NOTE: These files only flashes the O.S so it wont' affect those with the NO-GSM problem.
So in order to get more people to try this, I'd like to share what I've tried so far :
What works:
Phone: Sending and receiving calls
SMS : sending and receiving messages
Wifi: Connects to both Open networks, WEP, and WPA WPA-PSK (though there is a known bug with WEP and WPA in WM6.1, right now a workaround is switching wifi on and off really quickly and it connects fine without using odyssey access client) but other than that it works normally. A possible patch could fix this, but I haven't tested it out yet
Camera: Takes both photos and video
Notes: Audio note recording feature works.
What doesn't work:
GPS: I haven't managed to get this working so far but it might just be an issue with settings (the program I tried was Garmin Mobile XT)
MMS: I can't seem to find feature in messaging app.
Bluetooth: Profiles are missing so I can't properly pair with devices EDIT: I tried this again and managed to pair with a headset
Haven't tried:
Tethering: Since I don't have a data plan with my provider, it doesn't allow me to use GPRS/Edge except to check account information on mobile browser or unless I buy a 24/hr package in bulk so I haven't tested this.
....But I did manage to make a GPRS connection to check my account info.
O.k good luck everyone

Is this rom multilanguage? does it have spanish?

great news, i hope this proyect get more stable and we can upgrade our olds Hp 6915

tOz666 said:
Is this rom multilanguage? does it have spanish?
Click to expand...
Click to collapse
It's in english, it does support changing the basic regional settings like before... but I am sure the possibility for other languages is more likely once more people start getting involved with dissecting the ROM in kitchens.

Please can you upload to some service available outside Russia ?
Thanks

dreamH6 said:
Please can you upload to some service available outside Russia ?
Thanks
Click to expand...
Click to collapse
Uploaded it [here]
ROM + SPL

Spiaatie said:
Uploaded it [here]
ROM + SPL
Click to expand...
Click to collapse
thanks a lot, but... I have a G3 flash and 0.38 bootloader ....
does anyone has tested on this version?

I am not sure it would be compatible

Ok... did more testing of Bluetooth devices, and it does pair with headsets

I figured I would post some stuff from the asset viewer of before and after, and to see if people have the same version:
before is linked here
AFTER:
Memory
System ROM Size : 128MB
System RAM Size : 64MB
ROM Is Flash : Yes
Flash Chip Type : G4
Flash Block Size : 256KB
PSM Driver Version : N/A
Version
Product Revision Level :
ROM Date : 06/02/12
ROM Revision : 1.21UK.00 ENG
Extended ROM Version : N/A
OS Version : Windows CE 5.2
Bootloader Version : G.39
XIP Version : 1.0.0.0
Display
Color : No
Horizontal Pixels : 240
Vertical Pixels : 240
Color Depth : 65536
Display Type : TFT
Panel ID : 0
System
Manufacturer : Hewlett-Packard Company
Product ID : 414750-001
Model ID : hp iPAQ hw6955
Processor Type : PXA270-416MHz
Processor Revision : C5
Language : ENGLISH
UUID: -x-------------------
Camera
Module Present : Yes
Hardware Revision : 9650
Hardware Driver Version : 0.8.0
Software Driver Version : 4.1.0
Software Version : 1.0.21
Camera API Interface Version : 1.0.7
Camera Information : 1.3 MP 8X Zoom
Bluetooth
Radio Present : Yes
Firmware Version :
Hardware Revision :
Driver Version : 1.7.1.6700
Software Version : 1.7.1.6700
MAC Address : ---------------
Wi-Fi
Radio Present : Yes
Firmware Version : (missing)
Hardware Revision : (missing)
Driver Version : 1.00.00
Software Version : 2.0.53
IP Address : -----------------
MAC Address : -----------------
GSM
Radio Present : Yes
N/A
N/A
N/A
N/A
N/A
IMEI Number : --------------------
GPS
GPS Present : Yes
Status : N/A
Manufacturer : Global Locate
Revision Level : N/A
Driver Version : 2.00
Firmware Version : 4.1099.123.0
Software Version : 0.14.2214.0

jambongo said:
well there are links to the files in the 4pda forum at the top.
one BIG CAVEAT as Vervol stated is:
First the warnings and then the steps
Warning:
Steps confirmed to work using Windows XP on a G4 based flash device if you're not sure look it up in your device:
Start/System/HP Asset Viewer/
under the heading "Flash Chip Type"
if you have any other Flash chip type it is not confirmed to work and may cause your PDA to be inoperable.
Steps:
1. put pda into bootloader mode: hold two buttons next to Send and End + power + push reset button with stylus
(with activesync running) extract the SPL vG.39.7z file and double click on "Command Prompt"
2. then type in :
Code:
pdocwrite spl -n0 -b 0x20000 0 0x80000
wait till it's done
3. double click on the activesync logo in the taskbar, make sure to disable usb connection to the device.
4. extract the 6915_ENG.7z file and run the Sable_RUU.exe file and by now it should start flashing....
5. when it's finished flashing double click activesync again and re-enable usb connections and that's it.
Click to expand...
Click to collapse
Hi Jambongo! Can you please tell me if second half of step 1 and the whole step 2 - is only for bootloader upgrading? or is it some sort of patch for bootloader? Also please advice what's code instruction all about? Is it the same code for all ipaq 6900 series? And finally, did you manage to get the GPS running again? If so, I might just give it a go also.. Thanks a lot
Best regards,

Related

[TUT] OFFICIAL hw6900 NO GSM FIX for some phones

NO GSM FIX FOR SOME PHONES:
CLICK ON LINK
http://forum.xda-developers.com/showthread.php?p=2276981#post2276981
POST #56
I am making this thread so someone can please help us users of a HP hw6900 Series with the "NO GSM" startup message.
I have a HP hw6925, NO GSM, my product was under warranty and I recently sent it in to HP, , it would cost almost $300.00 for a new board, and I had the warranty at that time.
My next attempt to try and fix this issue will be what is posted at the link below.
If anyone out there has any "Sable" Backups, post in this thread, email me at [email protected]
I will post them on rapidshare, and alternate sites for everyone to download.
This is a huge problem. These HP hw6900 are nice phones, most of us still want to be able to use them as a phone, and a "PDA", some of us right now inlcuding myself can only use them as a PDA, or not at all, I will posting links later today, that should get any SABLE from the "Stuck on Bootloader Screen".
I am willing to donate to anyone who is serious about helping us fix this issue if it is possible, without replacing the mainboard of the hw6900, I will also be calling HP, and post the part number here and actual price for the hw6925 board.
"stuck On Bootloader"
If you are stuck on a HP Invent Screen, with G.39, etc.
And you have tried to hard reset and softreset with no luck, this is what you do.
XP Instructions:
1. Download this link http://www.mediafire.com/?3ygfbx0sjdy
2. In the taskbar area in the right hand corner, right click on activesync, bare with me, I'm using Vista and have to remember this, click connections..., you need to uncheck everything click ok or apply...
3. press ctrl-alt-delete, end process wscescomm.exe, (named something like that, end the process.
4. Extract the file you downloaded if needed.
5. Connect your device to the usb port on your computer.
6. Run Uni Exit Bootloader Application. Done
Vista Instructions:
1. Download these 2 links, and extract them if necessary.
http://www.mediafire.com/?3ygfbx0sjdy
http://www.mediafire.com/?9pmjkponfsg
2. Start Device Manager, (Start-Control Panel, Class View[Far Left Corner])
3. Connect HW6900 to USB port, you should now see a Mobile Devices (Next to + sign), Double Click
4. Right-Click on the Device, Click Update Driver Software, Choose let me pick from a list, Uncheck compatible hardware box.
5. Click have disk, Browse to location where USBAS is extracted, choose the wceusbsh.inf file, Double Click.
6. You should see Microsoft USB Sync, if not and it reverts back to the already installed file, and the box rechecks itself, uncheck it, choose microsoft, and choose the latest Microsoft USB Sync to install
GOOD LUCK
My Current hw6925 Status
"NO GSM" When Booting Up
I beleive it has No RadioOS.Nbf & No RadioFS.Nbf & No Imei.
Here is a screenshot of the Asset Viewer on the GSM Tab
Windows Mobile 6, Windows Mobile 6.1 Port
Official Windows Mobile 6/6.1 Port for hw6900 Series
Let's Get started people, Contribute to this thread.
If you have any Full Backup's of any hw6900 series thread post on rapidshare.com or mediafire.com
If you can not let me know by email, I will figure out a way to post them for you.
Again, any programmers willing to help any of us hw6900 Users, Please Help
Let me know the paypal account to deposit to via pm, I will post that information via this thread.
I need official 1.30 Cingular Roms from "Working" Devices.
If you can backup everything, including, RadioOS, RadioFS, CEOS, CEBL,
for those of you with fully working devices, please contribute to this thread.
Everyone please, I am trying not to wake up and see myself as the only one posting in this thread, I'm not the only one that wants this or the only one with problems with their hw6900 Series phone.
Please Contribute
HP HW6925 Repair Costs
Repair Cost $286.48 + Sales Tax.
Payment by Credit Card
Will take 3-5 Days,
I beleive they ship the box to you. (I think)
To much for my blood, May as well get a I-Phone
Hi,
I don't have any problem with my 6915 i have a french rom if you want and if you say me what i do to extract my rom i can upload everything to you
++
Radio Backup
dexxa05 said:
Hi,
I don't have any problem with my 6915 i have a french rom if you want and if you say me what i do to extract my rom i can upload everything to you
++
Click to expand...
Click to collapse
Do you have at least a 1 - 2 gb minisd card?
If so download mtty here
http://buzzdev.net/downloads.php?file=75
If you have Windows Xp, (CTRL-ALT-DEL) end process for wcescomm.exe (something like that).
put 6915 in bootloader mode, connect to usb port, press ctrl-alt-del, make sure activesync process is not running (WCESCOMM.EXE .......)
Start the mtty1.42.exe program
you should see:
USB>
now type
d2s 60000000 800000
If you have any problems please email me or im, [email protected]
Alot of people need this file, if possible, I am willing to even remote desktop connection, if you are unable to extract the radio rom.
Let me know what happens
i'd like to contribute what I can to this project I have an hw6955, when I went into bootloader to try to make a backup of my rom I get an error and it does not complete the process
jambongo said:
i'd like to contribute what I can to this project I have an hw6955, when I went into bootloader to try to make a backup of my rom I get an error and it does not complete the process
Click to expand...
Click to collapse
Do you get a "Cal Cheksum" on your Screen
try backing up your device using awizard tools, posted on here in the somewhere,
full backup including radio, ext rom, etc ........
then post it here
I will begin the Real WM6 Port
here's the message I get:
Code:
SD:Waiting for card insert.........
CMD3 for SD, it's OK, ready to get RCA from response.
SD:Detected one card
SD:ready for transfer OK
d.total_lba=1E4A00
d.block_size=200
d.RCA=E624
d.drv_type=40000000
d.busWidth=1
Total card size=3C940000
Read singal error D3
Read singal error!
SDCARDD2S+,cStoragePlatformType=FF
Some more info that may be useful:
Memory
System ROM Size : 128MB
System RAM Size : 64MB
ROM Is Flash : Yes
Flash Chip Type : G4
Flash Block Size : 256KB
PSM Driver Version : N/A
Version
Product Revision Level :
ROM Date : 08/28/06
ROM Revision : 1.52.00 ENC
Extended ROM Version : N/A
OS Version : Windows CE 5.1
Bootloader Version : G.39
XIP Version : 1.0.0.0
Camera
Module Present : Yes
Hardware Revision : 9650
Hardware Driver Version : 0.8.0
Software Driver Version : 4.1.0
Software Version : 1.0.21
Camera API Interface Version : 1.0.7
Camera Information : 1.3 MP 8X Zoom
Bluetooth
Radio Present : Yes
Firmware Version :
Hardware Revision :
Driver Version : 1.7.1.7800
Software Version : 1.7.1.7800
Wi-Fi
Radio Present : Yes
Firmware Version :
Hardware Revision :
Driver Version : 1.00.00
Software Version : 2.0.53
IP Address : Radio is Off
GSM
Radio Present : Yes
Radio Firmware Version : 1.02.00
Radio Protocol Stack Version : R5G.27.00.05
Radio Bootloader Version : 0.06
Radio File System Version : 0.07
Default Radio GDFS Version : 0.05
GPS
GPS Present : Yes
Status : GPS is Disabled
Manufacturer : Global Locate
Revision Level : N/A
Driver Version : 2.00
Firmware Version : 4.169.154.0
Software Version : 2.9.0.0
Awizard Tools
http://forum.xda-developers.com/attachment.php?attachmentid=26038&d=1138056282
Download the link above, then, run the program in windows 2000 compatibility mode, choose that by right clicking the file, click on properties, then, compatibility tab, check mark run in
compatibility mode, choose windows 2000, click apply ok, then run the program, choose the option for backup your device, backup everything choose [Y] or [YES] to everything, including radio, os, ext rom, .....
Follow the directions, beleive the device has to be connected to activesync, let me know what happens, any questions email, me,
Anyone else can do the same, lets fix these Sable devices, and start on a WM6 Port,
jambongo said:
here's the message I get:
Code:
SD:Waiting for card insert.........
CMD3 for SD, it's OK, ready to get RCA from response.
SD:Detected one card
SD:ready for transfer OK
d.total_lba=1E4A00
d.block_size=200
d.RCA=E624
d.drv_type=40000000
d.busWidth=1
Total card size=3C940000
Read singal error D3
Read singal error!
SDCARDD2S+,cStoragePlatformType=FF
Some more info that may be useful:
Memory
System ROM Size : 128MB
System RAM Size : 64MB
ROM Is Flash : Yes
Flash Chip Type : G4
Flash Block Size : 256KB
PSM Driver Version : N/A
Version
Product Revision Level :
ROM Date : 08/28/06
ROM Revision : 1.52.00 ENC
Extended ROM Version : N/A
OS Version : Windows CE 5.1
Bootloader Version : G.39
XIP Version : 1.0.0.0
Camera
Module Present : Yes
Hardware Revision : 9650
Hardware Driver Version : 0.8.0
Software Driver Version : 4.1.0
Software Version : 1.0.21
Camera API Interface Version : 1.0.7
Camera Information : 1.3 MP 8X Zoom
Bluetooth
Radio Present : Yes
Firmware Version :
Hardware Revision :
Driver Version : 1.7.1.7800
Software Version : 1.7.1.7800
MAC Address : 00-17-E5-A4-B3-97
Wi-Fi
Radio Present : Yes
Firmware Version :
Hardware Revision :
Driver Version : 1.00.00
Software Version : 2.0.53
IP Address : Radio is Off
MAC Address :
GSM
Radio Present : Yes
Radio Firmware Version : 1.02.00
Radio Protocol Stack Version : R5G.27.00.05
Radio Bootloader Version : 0.06
Radio File System Version : 0.07
Default Radio GDFS Version : 0.05
IMEI Number :
GPS
GPS Present : Yes
Status : GPS is Disabled
Manufacturer : Global Locate
Revision Level : N/A
Driver Version : 2.00
Firmware Version : 4.169.154.0
Software Version : 2.9.0.0
Click to expand...
Click to collapse
gave the tool a shot, but it gives me this error when it tries to backup the radio:
Code:
ERROR: ITTFFSGetInfo: outbuf==NULL
WARNING: using default 512 bytes for sectorsize
CopyTFFSToFile(0x50000, 0x280000, ROM\sable\sable-Radio.nba)
ERROR: ITReadDisk: outbuf==NULL
besides that no problems generating an OS and a boot.rgu image file
Okay, I'm also using a hw6915 with original german ROM, and I'm interested to get an to help getting WM6 on it.
Where is the problem? So many HTC devices have been got to run WM6. I thought the 69xx has also been built from HTC. Is there such a big difference, or is the "Sable" just a rarely used device so that no one knowing how to do is just doing it?
I am using the hw6915 with english uk original rom.I would like also to see the wm6 on my device..But the problem is that the developers will not fix a version for this device,because they are not interesting for this.We would be lucky if somebody of them had a device like ours and he had the grazy to make a version for this,for his own use,but they have Htc all of them and our mobile is old for their fancy now...Too bad..
any progress on this?
jambongo said:
any progress on this?
Click to expand...
Click to collapse
no progress at all, no one to help, or even a email reply back
my knowledge is limited in this area, but I am more than willing to help, I did provide a partial backup to you about a month or so ago
I'd still love to see a Windows Mobile 6 or 6.1 upgrade. I'm not sure how I could help. Does anyone else know why no one has cooked one up? I'm guessing no one who can owns one of these things.
I have a 6955 and will be doing a backup soon. I will post it as soon as I have it. Lets get things rolling.
This link should help with raw ROM dumps through the bootloader.
http://forum.xda-developers.com/showthread.php?t=325683

[ROM+HSPL]HTC Quartz - Max 4G, RUS/WWE ROM and long waited HardSPL

[ROM+HSPL]HTC Quartz - Max 4G, RUS/WWE ROM and long waited HardSPL
This is the first custom stuff for this rare device. The biggest thanks goes to Mr cmonex and Olipro
Here we go......
Preparations:
0) this package is for Quartz devices only. for QUAR100 so far (SSPL loader checks this, you will get a warning),
if your ModelID is different ask in thread for help.
1) make sure you have .NET framework installed on your PC! if not, get it from: http://www.microsoft.com/downloads/...fd-ae52-4e35-b531-508d977d32a6&DisplayLang=en
2) if you have vista, WMDC update is recommended: http://www.microsoft.com/windowsmobile/en-us/help/synchronize/device-center.mspx
Instructions:
read this if unsure how to install Hard-SPL...
1) download Hard-SPL package from attachment (Quartz_HSPLWrapper_v1.zip), extract to an empty folder.
2) you must Have Phone Synced with PC in Windows Mobile!!!
3) run Quartz_HSPLWrapper.exe on PC, make sure it's launched from a local drive (not through network drive, etc.). if you are on vista, launching as Administrator is strongly recommended,
4) follow steps in the RUU, check device for prompts after PC shows loading bar, press Yes on phone if asked. please answer with Yes as fast as you can!
5) some notes: when RUU says it will hard reset, do not worry, it is not going to do that. also when it says the flash will take 10 minutes, ignore that, it will only take a minute or so.
6) device should go to a tricolour screen now that says 0.45-C.SSPL, this is the SSPL version, which is temporary.
7) HardSPL flashes, device automatically reboots, job done.
8) to confirm you got it installed, go into bootloader mode (tricolour screen!) and verify the screen shows 0.45.cmonex, which is the Hard-SPL version.
NOTE: you will not see the SPL version during normal boot, that is the OS version, not SPL!
to enter SPL to check version: from powered off state, hold volume up and down keys, while holding power button until you see tricolour screen.
NOTE 2: anyone having problems with the device entering SSPL automatically, please copy Quar-SSPL-Manual.exe from Quar-SSPL-Manual.zip attachment to the device and run it. then once the screen is showing 0.45-C.SSPL, run RUU manually. i.e. you launch the Hard-SPL RUU (Quartz_HSPLWrapper.exe) on the PC and flash.
NOTE 3: this is unsigned Hard-SPL. no limitations on flashing ROMs. also, this has overwrite protection against HTC RUU's overwriting HSPL with a stock one, so if someone needs to revert to stock SPL for warranty reasons, a stock SPL downgrade package is posted in this post as well. use this relocker *only* if you need to return the phone for warranty, and only use it as last step - after reflashing stock OS and radio. see steps at the end of this post about how to reflash stock SPL.
NOTE 4: do not use this RUU for anything other than SPL flashing (only for hardspl flash or stock spl restore)!!! nothing other than SPL's released here (using OliNex custom cert, which is not public) will flash to make SSPL more secure. if you want to flash some other rom, then use shipped RUU or customRUU if you need to flash cooked ROM.
Troubleshooting:
- read the instructions above.
- read the instructions above.
- read the instructions above.
-- ModelID checking:
if SSPL loader says it's for a different device but you definitely have a Quartz, please ask in thread for contacting cmonex for testing SPL on that too. check modelid by entering SPL tricolour screen manually and note what it says (QUAR100, or something else).
-- nothing happens on the device, does not enter tricolour screen mode:
anyone having problems with the device entering SSPL automatically, please make sure you watch the device screen if it asks about running files. also try unchecking advanced usb functionality in settings.
if still problems, please copy Quar-SSPL-Manual.exe from Quar-SSPL-Manual.zip attachment to the device and run it. then once the screen is showing 0.45-C.SSPL, run RUU manually. i.e. you launch the Hard-SPL RUU (Quartz_HSPLWrapper.exe) on the PC and flash.
-- general usb connection error problems if you get connection error in RUU after the device goes to 0.45-C.SSPL screen:
- try a different USB port
- try different USB cable
- do not touch USB cable during the process especially if it is already a bit dodgy
- also do not use USB hub
- you can also try rebooting your PC
- and you can try using another PC.
- also you can try unticking advanced network functionality in start menu / settings / connections / usbtopc applet.
- another reason for USB connection error: if your PC takes too long to load the drivers (if your device is in bootloader for the first time and perhaps if you are on vista), then if RUU times out, but device still says "USB" on the tricolour screen, just leave it there and re-run the RUU when driver installation finishes.
- finally, you can try disabling antivirus or firewall programs on the PC.
-- other issues:
- if Enterbootloader.exe fails to run (says missing component or similar), try a hard reset of the device.
How to reflash Stock/Shipped SPL - STEP BY STEP - FOR WARRANTY REASONS ONLY!
0. be sure to first restore stock OS, and stock radio. stock SPL is always to be done last!!
1. download your choice of a stock spl package from this post.
2. also download the original hardspl from the attachments in this post.
3. run the hardspl exe but do not click anything in RUU yet. just let the hardspl EXE extract the files for flashing.
4. the SPL you want to revert to is a .NBH file, put the stock SPL NBH in the extracted hardspl package, overwriting the original NBH file in it!
5. continue with the RUU (or if needed, run SSPL-Manual.exe manually, then run RUU when it goes to tricolour 0.45-C.SSPL screen), it goes to 100%, reboots, done.
+6. to verify, enter bootloader mode, see version number on tricolour screen, should now just say 0.45.0000.
that's it.
+7. no worries: if your device is stuck in bootloader mode with Hard-SPL and you need warranty service, you can still flash stock SPL.
finally, credits: to Olipro for Hard-SPL concept, and SSPL loader is partially based on haret and old pof&Olipro jumpspl code.
please donate to cmonex at:
1. paypal: [email protected]
2. webmoney EUR: E375783725675
3. webmoney USD: Z404837024050
Click to expand...
Click to collapse
HSPL - Quartz HSPL or how to flash cooked ROMs (by Cmonex)
http://4pda.ru/forum/dl/post/191087/Quartz_HSPLWrapper_v1.zip
http://4pda.ru/forum/dl/post/191088/Quar_SSPL_Manual.zip
http://4pda.ru/forum/dl/post/191089/Restore_Stock_045_SPL.zip
or all-in-one
http://rapidshare.com/files/225209068/Quartz_HSPL.rar
ROM list in post n.2
HTC MAX4G Project Cmonex v1.2 Full RUS
- CE OS 5.2.21017 Build 21018.1.6.0
- OEM 1.09.411.8
- Radio is not included
Added:
Cyberon Voice Speed Dial
Opera9 build 15954 with support for flash, read more here
NetCF 3.5
Adobe Flash
Tviki
Zasunul BackLight.dll of f_pasha distinguished from the post HTC MAX 4G - Marriage (post # 2409118)
Patchenye dll does not require additional installation. certificates.
10 steps of the lights
Deleted:
Opera Settings
GoogleMaps
Yota Loader (to install applications from the yota HTC MAX 4G - FAQ (post # 2331133)
Ringtones (download: Attachment file Ring.rar (3.92 MB) Number of downloads: 271
and put in \ Embedded Memory \ My Documents \ My ringtones)
AUTOUPDATE
Catalog
SampleMusic
WelcomeCenter
WindowsLive
Rubbish
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Download link
http://rapidshare.com/files/208839855/HTC_MAX4G_Project_Cmonex_v1.2_Full_RUS.rar.html
============================================================
HTC MAX 4G - Project Cmonex User Edition v1.1 RUS
- CE OS 5.2.21017 Build 21018.1.6.0
- OEM 1.09.411.8
- Radio is not included
Deleted relatively full:
AdobeFlash
AdobePDF
AudioBooster
AudioManager
Manila (TouchFlo3D)
RemoteDesktopMobile
RSSHub
TaskManager
Teeter
YouTube
CyberonVoiceSpeedDial
Opera
Who is downloaded and installed a version of HTC MAX 4G - Project Cmonex User Edition v1.0, I advise to upgrade!
Download link
http://rapidshare.com/files/209074978/HTC_MAX_4G_Project_Cmonex_User_Edition_v1.1.rar.html
HTC MAX4G Project Cmonex - XL M2 WWE v1.0
-CE OS 5.2.21042 Build 21042.1.6.1
- OEM 1.39.405.2 HTC Topaz basically, HTC Rhodium partially, HTC MAX 4G driver (Quartz_HTC_RUS_1.09.411.8_Radio_QUARTZ_1.11.25.01).
- Radio is not included
What's new: almost everything smile_good.gif
Deleted / not working:
Deleted voip.
Does not work wimax status icon in the top bar.
Download link http://narod.ru/disk/7511222000/Project_Cmonex_XL-m2.rar.html
PASSWORD: 4pda
Tweaks
HKEY_CURRENT_USER \ Software \ HTC \ HTCSENSOR \ GSensor \ WhiteList - branch to manage applications, working with G-sensor
HKEY_LOCAL_MACHINE \ Software \ HTC \ EnlargeMenu
"EnableManilaStartMenu" = dword: 1> 0 - disable the new Start menu
HKEY_LOCAL_MACHINE \ Software \ Opera \ Defaults
"VibrationEnabled" = dword: 1> 0 - turn off the vibration in the opera
HKEY_CURRENT_USER \ Software \ HTC \ BootLauncher \ Apps
TMail - remove
JBlend - remove
ConnectionSetup - remove
HKEY_CURRENT_USER \ Software \ HTC \ BootLauncher \ Services
ConnSetupDload - remove
HKEY_CURRENT_USER \ MUI
"CurLang" = dword: 419 - Russian Language in Manila
Russian base city for manilnoy weather, unpack and put in the folder windows pack.zip
Click to expand...
Click to collapse
Download firmware from HTC:
http://www.htc.com/ru/SupportDownload.aspx?p_id=206&cat=2&dl_id=468
http://depositfiles.com/files/cipbfqdcv
http://rapidshare.com/files/2252019...411.8_Radio_QUARTZ_1.11.25.01_Signed_Ship.exe
http://narod.ru/disk/6970403000/For..._Radio_QUARTZ_1.09.25.13_Signed_Ship.exe.html
http://rapidshare.com/files/1636525..._Radio_QUARTZ_1.09.25.13_Signed_Ship.exe.html
PS: Use this S/N for downloading from HTC site HT845KN02086

How To Reinstall Windows Mobile on Hp Hw6915

Hi Guys
Can someone tell me how to reinstall windows mobile on hp hw6915?
I realy need your help. In this 'xda-developers' i not find any info about this, so i decided create this post for hp hw6915. Can anyone help me?
ExodiaXlr7 said:
Hi Guys
Can someone tell me how to reinstall windows mobile on hp hw6915?
I realy need your help. In this 'xda-developers' i not find any info about this, so i decided create this post for hp hw6915. Can anyone help me?
Click to expand...
Click to collapse
just follow the tutorial on this thread ~ http://forum.xda-developers.com/showpost.php?p=6391896&postcount=1
If you just want reset to default factory settings, you must press all together: power + green button + red button + reset with stylus (bothom of the phone).
If you want to change language of hw6915 you must reflash with ROM update utility, but make sure there are no rom update files for radio (RadioOS.nbf RadioFS.nbf) as they could brick GSM part of the phone.
Thank you for this link about how to reinstall os, but still i dont understand anythink in this tutorial about os. Can someone make a video turotial?
If you are following that tutorial be aware! Do not "task 28 55aa" with mtty - that will cause change of the device Product ID and you will not be able to use official HP upgrade tools anymore.
Why it is that you want to reinstall rom? Does hard reset not working?
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
I try to do hard reset, but stil i have same problems with this hp hw6915. Problems is: i cant remove some programs, windows is flickering lines. memory to low, i try increase memory by removing some programs but it does not work and t.t.
It is true that default software on hw6915 is slow - you should use memorycard for software to get better results.
If you are really willing to try to reinstall, I can only give you this one link
multiupload com /UTYDNBZ145
Click to expand...
Click to collapse
but use it at your own risk - it is possible that results will be the same.
What you think about this?
How to write custom rom WM on hp iPAQ hw6915.
------------------------------------------------
1.Connect your device to PC by ActiveSync (download it from microsoft page)
2.Run "Command prompt" from folder "SPL vG.39" (if using vista/7 RUN AS ADMINISTRATOR)
3.Enter this command: pdocwrite spl -n0 -b 0x20000 0 0x80000 (WAIT UNTIL IT FINISHES).
This command replaces a file in the ROM which allows you to flash ''non-original roms'',
basically software CID unlocking which allows flashing of ''cooked roms''
4.You will get a warning on your hp regarding a dll file (itsutils.dll), PRESS YES
5.Put your device in bootloader mode. (hold the two selection buttons next to the joystick
and shortly tap the reset button with your stylus)
6.Open activesync, go to connections and untick "Allow USB connections"
7.Extract "Sable_G4_1.21_UK_ROM.rar" and run "Sable_RUU.exe"
8.Press on the big "Upgrade" button
9.There will be a progress bar, when it's done it should say something like "Update finished !!"
10.Go back to activesync and re-tick "Allow USB connections".
The manual you quoted is correct for case if you want to upgrade to non-stock rom like some custom made Windows Mobile 6 rom (if you already found one), but you must ensure that there are no RadioOS.nbf and RadioFS.nbf in the folder where Sable_RUU.exe resides or else you might ruin your gsm.
If you just want to reinstall Windows Mobile 5 then there is no need for "pdocwrite spl -n0 -b 0x20000 0 0x80000" (as it is only needed to allow non-stock rom flashing).
So in order to do wm5 reinstall i just must follow my writen instruction but in this case i need skip 2, 3 and 4 steps, and start from 5 step? (of course first i need plug my device to PC by ActiveSync). ?
What is Radio?
In Sable_RUU.exe i found such files: CEOS.nbf, EnterBL, GetDeviceData and Sable_RUU.
In SPL vG.39 folder i found such files: Command Prompt, itsutils.dll, libeay32.dll, msvcr71.dll, pdocwrite und spl.
Can someone help me!
I was doing this update tranquility, I have a hp ipaq 6915 and use the windows7.
I did the first part of this
process, which installs the. dll. All right so far. I was
for the second stage and the program Sable RUU erased my
WM5, ok, so that after this process began to windows
search for the driver usb ipaq, of course, was
disconnected, then this error appeared Client_GetOSVer fail !! Error : 501.
Now I'm without my operating system.
And what I do now?
From what I undestood from your one before last post (the files included gave me idea) you have downloaded wm6 update utilities and rom. So in this case you must take all the steps.
If you want wm5 then you must download link http://multiupload.com/UTYDNBZ145 and just plug device to usb (before that put it in the bootloader mode: by pressing power button + button next to green + button next to red + reset with stylus), wait to connect and then run Sable_RUU.exe
About your question... Radio rom files are sometimes included in distributed upgrade files, so you must ensure they are deleted from the folder before start flashing. These files are usually responsible - there already been two cases to my devices - for killing the GSM chip data, so you can not use your device for phone calls anymore lets sey it is very bad scenario, so I am warning you to not to break your device!
Seems like you are left without any os at this very moment, so you should now install wm5 again and if you then want to upgrade wm6 repeat all the steps (including pdocwrite command).
If you are just stuck in bootloader google for UNI_ExitBootloader.exe
So bootloader mode is when my hp hw6915 screen show this: Serial Hp G.39 or when hp hw6915 screen is totaly off? When i try use UNI_ExitBootloader.exe it does not work because it say: Error - Cannot open USB port. So i try again and again but this time i disable ActiveSync... but still in not work. So i try an alternative method. I download Virtual box, then i install win xp, download Sable_G3_DEVICE_ONLY_hw6915-1.21uk ant try run. IT WORKS
THNAKS YOU JOGIJS ;-) Now i need your help to update my device from wm5 to wm6 o greater.
First of all - there are no official hp releases upgrade to wm6 or greater, but as I think you found one of unofficial upgrades to wm6 made by hackers.
Then - Sable_G3_DEVICE_ONLY_hw6915-1.21uk is the same as in my link http://multiupload.com/UTYDNBZ145 only difference that my file is without the radio roms.
About upgrading to wm6:
As I said before - now you need to follow instructions you posted before and do all the steps to upgrade to wm6 (remember about my radio warning! ) as you have found correct manual for wm6 upgrading.
If you understand russian you could try this wm6 upgrade - http://www.multiupload.com/QTP68IW7AM
About your question:
You are in bootloader mode when there are serial/USB + hp logo + G.39 on the screen.
If you have USB connectivity problems on w7 32bit, use this driver - http://www.multiupload.com/IE15IM9DHT Always check your device manager to ensure your Sable device is recognized!
One more question ;-) In my Hp Hw6915 i install wm for G3 chip, but i noticed that mine is G4 chip. So in future this can cause problems on mine device?
I think it is just a mislabel as mine current device is also G4 (as seen on hp's asset viewer) and it does not run into any problems by flashing OS
Maybe confusion is set by bootloader's title "G.39"... I think so, but I am not sure, what caused this for true.
Despite all - these roms and utilities worked for me (except for radio roms of course).
same problem
hello i have hp ipaq hw6915 in norvegian language i try to use your tutorial and now appear bootscreen (USB+Logo+vG.39) how can i do for resolve my problem because i try to HARD RESET and appear same USB+Logo+vG.39, you can reupload your application to other website?
under the boot screen it's .39. it's fine.
what do you want to do with your ipaq? still using wm 5 or wm 6?
I can give you a link on xda which has all the explanation on how to upgrade to wm 6 but if you want to stay on wm5, I suggest you do a hard reset. if you say after hard reset you still cannot remove program, I am quite confused. Because hard reset really put you in a basic start where everything is cleared.
try hard reset one more time...
if you still have problem, post again here... I will try to help you as much as I can...
i try HARD RESET 1000 times appear same USB(or SERIAL if is not connect on pc)+Logo+vG.39, i want to try WM6, if you can help me pls offer a solution.
download this file, unpack and run Sable_RUU
http://www.4shared.com/rar/NokqR8Q2/121_UK.html
worked fine for my hp 6915 with Danish rom - I have English now
IT MIGHT HELP YOU

[INFO][R&D] I9300 UART and NVDATA guide

During the last weeks I was researching how to build a cable to establish an UART connection to my I9300. This guide should work but is still work in progress. Feel free to contribute.
Info: this is a guide for the international version I9300 with XMM6260 modem. The SGH-I747-variant uses a different baseband/modem from Qualcomm.
Warning: This guide allows you to interface your device at a very low level. You might brick your device or damage vital parts of it. A lot of this stuff is undocumented and there might be side effects. Be warned!
Short technical explanation:
By using a custom build USB cable you can establish a serial connection to your phone. It offers a UART interface to the XMM6260/X-Gold 626 modem used in the I9300.
The longer technical explanation:
The I9300 uses a FSA9485 USB Port Multimedia Switch (https://www.fairchildsemi.com/products/analog-mixed-signal/switches/accessory-switches/FSA9485.html) behind the MicroUSB port. This IC can detect what kind of accessories are plugged to your USB port. The detection is done by a resistor wired between GND and ID pin of the USB cable. Using a resistance level of 523K will trigger the UART Mode. While in UART mode the I9300 will use the D- and D+ pins of the MicroB-plug as serial TX/RX data lines.
What to to with it?
While booting you can see debugging output of the secondary bootloader (not that much though, mainly eMMC initialize). Once booted you can see modem output and send commands to it. Another option is to show "PDA" messages, but i never managed to get any output with this setting.
You can communicate to your modem using AT-commands. For more information I recommend reading E:V:A's great post "[XMM6260][X-GOLD 626] Modem Specification / Documentation / Hack-Pack". While his guide is focussing on the SGS2, i want to keep this guide I9300 specific.
How to build a cable?
Stuff you need:
A USB to serial converter supporting 3,3V(!) TTL levels (lots of this stuff around, check eBay or your local electronics supplier. Common chipsets are FTDIs FT232RL or Silicon Labs CP21xx, just make sure it supports 3,3V!)
A USB MicroB plug (like this https://www.sparkfun.com/products/10031 or I just sacrificed a cable for soldering directly to the connector which works too)
a resistor with 523K resistance (close value will work)
some wires
a soldering iron
Wire it like this:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
How to use it (tested with I9300XXELL4 (Android 4.1.2):
Install the drivers for your USB to serial converter (running linux your device will most likely be autodetected and assigned to /dev/ttyUSB0 or similar)
On your I9300 Dial *#7284# and set UART mode to "modem"
use your favorite serial console and set the following parameters for the serial port: rate: 115200 baud, data: 8 bits, parity: none, stop bit: 1, software flow-control: enable
I prefer using the "screen"-command on linux: "screen -t 'ttyUSB0 115200 8n1' /dev/ttyUSB0 115200,-ixoff,-ixon"
Now connect your UART-cable to the phone (it will power up on its own due to the FSA9485 chip, no need to worry)
If you see console output like this you got it right:
Code:
PMIC rev = PASS2(2)
BUCK1OUT(vdd_mif) = 0x05
BUCK3DVS1(vdd_int) = 0x20
[MMC] there are pending interrupts 0x00010000
cardtype: 0x00000007
SB_MMC_HS_52MHZ_1_8V_3V_IO
mmc->card_caps: 0x00000311
mmc->host_caps: 0x00000311
mmc_initialize: mmc->capacity = 30777344
�
AST_POWERON
AST_POWERON
AST_POWERON
Now you should be ready to send AT-commands to your phone.
Try send a simple "AT" and your phone should respond with "OK"
Code:
AT
OK
If everything above works you successfully managed to establish a serial console to your baseband processor. congratulations! proceed to the next post for tested AT commands.
Another warning at this time: Do not send random characters/commands to your modem. This is an easy way to brick your network connection or even your entire phone.
Troubleshooting:
check the wiring, maybe you switched TX/RX data lines
on linux check user rights on your /dev/ttyUSBX device, check with superuser if unsure
to be extended
THX to:
E:V:A for his great guides about modems/AT commands in general and the XMM6260
the Replicant project: http://www.replicant.us/
many other guys gave me a hint in the right direction which I forgot to mention here
Supported AT commands on the I9300
Please take this warning serious! As this is a debugging console to your baseband/modem the wrong command can easily overwrite vital data on you phone. Think before typing!
I won't go into detail about AT command syntax here. I recommend to read the following infos before trying any own approaches:
http://en.wikipedia.org/wiki/Hayes_command_set
http://www.codeproject.com/Articles/85636/Introduction-to-AT-commands-and-its-uses
http://forum.xda-developers.com/showthread.php?p=53175152#post53175152
AT commands are modem specific. Not all commands work on all modems, but there are still some general commands working on most phones!
Working AT commands:
AT+CLAC --> gives a list of all supported AT commands, though there are more commands which are undocumented, following output on I9300:
Code:
ATS
ATD
ATA
ATO
ATE
ATH
ATV
ATZ
ATl
ATm
ATQ
ATX
AT&F
AT&D
AT&C
AT\Q
AT+CGSMS
AT+CMGD
AT+CMGF
AT+CMGL
AT+CMGR
AT+CMGS
AT+CMGW
AT+CMMS
AT+CMSS
AT+CNMA
AT+CNMI
AT+CPMS
AT+CSCA
AT+CSCB
AT+CSMS
AT+XCSSMS
AT+XSMS
AT+XTESM
AT+CSDH
AT+CSAS
AT+CRES
AT+CMGC
AT+CSMP
AT+CGREG
AT+COPN
AT+COPS
AT+CREG
AT+CSQ
AT+XBANDSEL
AT+XCOPS
AT+XCSPAGING
AT+XEONS
AT+XREG
AT+XAACOPS
AT+XUBANDSEL
AT+XRAT
AT+CPLS
AT+CPOL
AT+XHOMEZR
AT+XCSQ
AT+CHUP
AT+CMOD
AT+CMUT
AT+CTFR
AT+VTS
AT+XCALLSTAT
AT+XDTMF
AT+XVTS
AT+CSTA
AT+CVHU
AT+VTD
AT+CCWE
AT+CR
AT+CRC
AT+XPROGRESS
AT+XREDIAL
AT+CAOC
AT+XLIN
AT+CCFC
AT+CCWA
AT+CHLD
AT+CLCC
AT+CLCK
AT+CLIP
AT+CLIR
AT+CNAP
AT+COLP
AT+COLR
AT+CPWD
AT+CSSN
AT+CUSD
AT+CCUG
AT+CBST
AT+CEER
AT+CGACT
AT+CGANS
AT+CGATT
AT+CGAUTO
AT+CGCLASS
AT+CGCMOD
AT+CGDATA
AT+CGDCONT
AT+CGDSCONT
AT+CGEQMIN
AT+CGEQNEG
AT+CGEQREQ
AT+CGEREP
AT+CGPADDR
AT+CGQMIN
AT+CGQREQ
AT+CGTFT
AT+XCGCLASS
AT+XDNS
AT+XGAUTH
AT+FCLASS
AT+CRLP
AT+XNVMPLMN
AT+XNVMMCC
AT+CBC
AT+CCID
AT+CCLK
AT+CFUN
AT+CGMI
AT+CGMM
AT+CGMR
AT+CGSN
AT+GSN
AT+CIMI
AT+CMEE
AT+CMUX
AT+CNUM
AT+CPIN
AT+CPWROFF
AT+CRSM
AT+CSCS
AT+CSIM
AT+CSVM
AT+CTZR
AT+CTZU
AT+IPR
AT+XCTMS
AT+XGENDATA
AT+XPINCNT
AT+XLOG
AT+XMER
AT+XSIMSTATE
AT+TRACE
AT+XL1SET
AT+XSIO
AT+XDLCTEST
AT+XPOW
AT+XCEER
AT+XEER
AT+XTRACECONFIG
AT+XMUX
AT+XFDOR
AT+XFDORT
AT+XCONFIG
AT+XAPP
AT+XHSDUPA
AT+XCAP
AT+CPIN2
AT+XDATACHANNEL
AT+CONNECTPORT
AT+CAMM
AT+CACM
AT+CCHO
AT+CCHC
AT+XCSP
AT+NEER
AT+CUAD
AT+XUICC
AT+XLEMA
AT+XSYSTRACE
AT+CLAC
AT+CPUC
AT+CLAN
AT+CGLA
AT+CRLA
AT+CPAS
AT+XSVM
AT+XNOTIFYDUNSTATUS
AT+XRXDIV
AT+XRXDIV3GRAB
AT+XMAGETKEY
AT+XMAGETBLOCK
AT+CPOS
AT+CPOSR
AT+CMOLR
AT+CMTLR
AT+CMTLRA
AT+XCPOSR
AT+XSETCAUSE
AT+XSPEECHINFO
ATV1 --> Enables verbose command results mode
ATE0 --> Turns off local echo
AT+SERIALNO=1,0 --> shows serial number
AT+CGSN --> shows IMEI
AT+XGENDATA --> shows modem version:
Code:
+XGENDATA: " SP6260_M0_MODEM_03.1241_DB121008 2012-Dec-10 11:25:46
PDB_NOT_AVAILABLE
*SP6260_M0_MODEM_03.1241*"
ATi --> shows device info:
Code:
Manufacturer: SAMSUNG
Model: I9300
Revision: I9300XXELL4
IMEI: XXXXXXXXXXXX
AT+HEADINFO=1,1 - Shows device information, "Unique Number" is not that unique. If you copy EFS you copy number.
Code:
+HEADINFO:1,1,1
Model Name = GT-I9300
Country/customer = -
Customer Code = DBT
Date = -
Charger = -
S/W version = I9300XXELL4
Unique Number = CVTXXXXXXXXXXXX
Memory Name = -
Sec Code = -
AT+IMEITEST=1,0 - shows "corrupted!!" with damaged EFS, not yet tested with good EFS
Code:
+IMEITEST:1,corrupted!!
AT+MSLSECUR=1,0 --> Some information I found indicates this is the first security mechanism. You need to send a device specific code to unlock write mode (AT+MSLSECUR=2,<UNLOCK CODE>). I saw examples in this form: AT+MSLSECUR=2,<SERIAL NUMBER>_<HEXADECIMAL KEY> but was not able to generate it.
AT+AKSEEDNO=1,0 --> It seems to be a challenge/response security mechanism: You have to respond to this challenge with another AT-command (AT+AKSEED=2,<RESPONSE CODE>). See next post for details.
Code:
AT+AKSEEDNO=1,0
+AKSEEDNO:1,16799-25-329
Some related technical infos
EFS:
The modem stores its settings in your /efs partition (mmcblk0p3), more precisely in your nv_data.bin file. It might be wise to do a backup. (More information on EFS)
Modem Firmware:
Your modem is running a Real Time Operation System (RTOS) named ThreadX. It is stored in modem.bin and different versions can be flashed by Odin.
The ServiceMode.apk-application talks directly to the modem RTOS.
AKSEED
This seems to be a challenge-response security algorithm. Maybe somebody has a clue as i would love to find out how it works.
I have collected some AKSEED examples from the web:
Challenge: 29987-125-1427 - Correct response: 16096-95-115
Challenge: 8299-182-209 - Correct response: 7928-94-124
Challenge: 767-207-25 - Correct response: 309-93-128
nv_data.bin
If you attempt to change the nv_data.bin within Android it will get restored from .nv_data.bak and .nv_core.bak. It is protected by a special MD5-hash which is stored in nv_data.bin.md5/.nv_data.bak.md5/.nv_core.bak.m5. The MD5-hash is generated from nv_data.bin, but can not be generated using a normal MD5-algorithm. If no backup is present a default nv_data.bin is created.
I assume the ril-daemon is responsible for checking the correct checksum and restoring the backup.
There are some offsets of interest in nv_data.bin (just assumptions, may be different on some modem firmwares):
I believe the modem settings related part starts at Offset 0x180000 with the String "SSNV".
0x181469 - Network Lock (i think its 5 bytes starting from 0x181469: Network Lock, Subset Network Lock, SP Lock, CP Lock, Data Lock)
0x18800F-0x188011 - Product Code (DBT,XEO,etc.)
0x188021-0x188023 - Product Code (DBT,XEO,etc.)
0x18815F-0x188165 - Serial Number
0x194004-0x194023 - Modem Version
0x194049-0x194053 - Firmware Version (I9300XXELL4,I9300XXDLIB,etc.)
0x18146e, 0x18148e, 0x1814ae, 0x1814ce, 0x1814ee - 5 times the same value, most likely a hash of the Unlock Code. The hashes are separated by "4A" hex. The hash is generated different than on SGS2 - see here
If anybody has further information regarding offsets, stored data and used encryption please post here or contact me!
MD5 generation: (cat nv_data.bin; echo -n Samsung_Android_RIL) | md5sum
EDIT: echo -n, not echo - n
Sent from my GT-I9305 using XDA Free mobile app
.NetRolller 3D said:
MD5 generation: (cat nv_data.bin; echo - n Samsung_Android_RIL) | md5sum
Sent from my GT-I9305 using XDA Free mobile app
Click to expand...
Click to collapse
nice one...but you have to stop ril-daemon on device before replacing or it will revert to nv_data.bin from backup:
Code:
stop ril-daemon
The data at 0x180004 to 0x180033 in nv_data.bin seems to be related to the AT+MSLSECUR command:
AT+MSLSECUR=1,0 on a phone with undamaged /efs responds the serial number:
Code:
AT+MSLSECUR=1,0
+MSLSECUR:1,RFXXXXXX
if you copy these offsets from undamaged /efs to another phone the data gets scrambled:
Code:
AT+MSLSECUR=1,0
+MSLSECUR:1,��Lb�šV��Ƨo~
if you edit these offsets to all "FF"s:
Code:
AT+MSLSECUR=1,0
+MSLSECUR:1,0000000000
so i assume it is somehow crypted by the serial number or another physical(?) unique identifier
AT+EGMR command
Does the AT+EGMR command work?

How to Flash with Nokia care suite 5

Warnings
All members of xda-developers, and the author can not be held responsible for any damage to any of your devices after applying the following
try at your own risk
1 ) Download and install Nokia care Sute 5 Latest Working
For Lumia 635 or otherirst Windows Phone 8.1 devices: RM-974, RM-975, RM-976, RM-977, RM-978, RM-979, RM-1010, RM-1027. link :- Nokia Care Suite PST 5.0 5.1.83.1414
2)you can use NaviFirm+ 3.2 (click here)
UPDATE :
first you need to know your mobile product code
if remove battery your product type and code will be printed there
or
open Extras + info you will see RM type like RM-xxx and choose your desired product code to flash
3 ) After installing Nokia care suite ,create a newfolder with a Name " Products" at C:\ProgramData\Nokia\Packages
it will become C:\ProgramData\Nokia\Packages\Products
Now create Your RM-xxx empty folder ,for lumia 1520 The folder name will be RM-937
in order to see hidden programdata folder click on show hidden folder in view
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
check your device product code list by searching like example "lumia 1520 product codes seidea.com" open first link all product code list will be there
,select Vietnam firmware for field test,in windows phone 10 10149 build we got field test by selecting 3G only in sim settings ,but we will have polling frequency and selective bands for battery save ,so i choose vietnam
in my case its look like "059V318 VAR APAC VN CV WHITE" Here VN= Vietnam.
for Lumia 1520 INDIA These are product codes which had "IN" at 4th place in sentance
059V3M9 VAR IMEA IN CV BLACK
059V3N0 VAR IMEA IN CV WHITE
059V3N1 VAR IMEA IN CV YELLOW
059V3N2 VAR IMEA IN CV RED
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
5) open Navifirm and it asks for login,so click on cancel
choose your 7 letter product type and paste at search bar and press enter as seen below
click on browse and navigate to C:\ProgramData\Nokia\Packages\Products\RM-937 clik ok
and untick "Use product code as final path"
see below screen shot
click on Download to Download All Files ,it takes Time According to Internet speed
if you done correctly you will see all downloaded firmware files at C:\ProgramData\Nokia\Packages\Products\RM-937
Now open Nokia care suite and click on Product support tool for store 5
6 ) click on file ---> Open Prouct and type your phone model and select correct rm of rour phone
7 ) click on programming and select recovery
8 ) click on updated list , your phone product number and all informaton willl display ,connect your phone click start
9 )it check data packages of Firmware ask for press volumue up+power button untill it vibrates ,do the same thing click retry
10 ) check at your phone screen flashin already started ,dont distruct flashing ,keep your pc awake untill it shows recovery completed
you will flashed to desired version of Firmware .you will get full sys freespace
It seems that Microsoft Care Suite has come out .
Really worry about the latest lumias` support by Nokia Care Suite , but can`t find a way to get Microsoft Care Suite as my Emergency Tool . I love flashing.
To delete.
anaheiim said:
There is no software called Microsoft Care Suite, at least not now (hope that Nokia Care Suite will not be abandoned, and will be updated).
Click to expand...
Click to collapse
Maybe. Hoping we can still get such powerful tool in the future.
anaheiim said:
There is no software called Microsoft Care Suite, at least not now (hope that Nokia Care Suite will not be abandoned, and will be updated).
Click to expand...
Click to collapse
Did't you find yet the way how to flash with NSU/LSRT every Lumia even 535 ? After changing PC sure we can
http://www.windowsmania.pl/poradnik...wariantu-oprogramowania-programem-lsrt-19445/
To delete.
cant see folder on step 8. already enabled hidden files. preferences set in here: C:\ProgramData\Nokia\Packages\RM-937\Products
OS: win7 64bit,
need this to try win10 on lumia 1520 using this tut that refers me here to increase sys space
http://forum.xda-developers.com/win...thod-how-to-install-windows-10-phone-t3044746
To delete.
trying/downloading it now. thanks. would you know any updated / clean win10 how-to for lumia 1520?
---------- Post added at 05:46 AM ---------- Previous post was at 04:58 AM ----------
i can see the downloaded ffu in the recovery/properties table but the START button stays disabled even after clicking the loaded firmware....
To delete.
i followed them step by step and, got a green sd card, but when i select the xap and apply the mod, the wpcustom will just exit and there is no cahnge in the icon of hacked pfd, when launched, pfd will just run as usual(connects to ms etc)
in the links you give, im on #6, it will not go to #7, the registry is not opened after executing #6. i have pfd on SDCard, i havegreen sd card permission....
4.Now you can see “SD Card Permissions” as green color.
5.After changing SD Card permissions click on browse xap button.
6.Browse and select Custom_pfd.xap from SD card and click Apply XAP Button.
7.After successfully applying custom_pfd tool to preview for developers goto Preview for Developers apps.
8.Now your phone is hacked and you can edit registry of your WP8.1.
>> i will be trying this one now since it seems there is not much i can do,
1. Download Firmware update with this product code 059V3T3 it should be version 02540.00019.14484.37003
and variant name "RM-937 VAR APAC TW CV BLACK", note the color doesn't really matter, the part that
matters is RM-937 VAR APAC TW CV, the FW is the same, so the color won't make any difference,
To delete.
if u want flash !?
try Austrailian Firmware , latest with Denim and had field test features(2g/3g/4gsignal lock),hope this will work after Windows phone 10 update
dont try to check ##3282 code in ffu with winhex ,just download and flash,it may change crc value,file will corrupted,check australian FWs version number for u r device and download
Get Ready for next WP 10 Preview 2(coming Soon)
hi,
i had download firmware for my lumia 735 but product support tool for store 5 not recognized my smartphone.
Help me, please.
Sicily98IT said:
hi,
i had download firmware for my lumia 735 but product support tool for store 5 not recognized my smartphone.
Help me, please.
Click to expand...
Click to collapse
does your firmware detected check the path ,use supplied data cable only,uninstall nokia usb driver in controlpanel restart connect your device ,it will install drivers automatically ,use win 7 or higher,sure it will detect
Next Build For Phones Coming on tomorrow 10th April Friday at 10AM pst,check your insider app and check for update ..this build got great features ,how already updated to WP 10, Enter correct Values in patched preview app,because all devices supported now,you will update to your phones relevent image,
be sure to have 300MB sys freespace ,check in insider app if not try my tutorial
Hello I am taking that error
DEV_REPORTED_ERROR_DURING_PROGRAMMING: 0x00030003
Exception:
Nokia.CareSuite.PlugIns.MurzimRecovery.RecoveryDialog.MurzimProgrammingException: DEV_REPORTED_ERROR_DURING_PROGRAMMING: 0x00030003
at Nokia.CareSuite.PlugIns.MurzimRecovery.RecoveryDialog.RecoveryDialogModel.Flash()
at Nokia.CareSuite.PlugIns.MurzimRecovery.RecoveryDialog.RecoveryDialogModel.<HandleDownloadVariantPackageCompleted>b__c(Object state)
Click to expand...
Click to collapse
My phone is stuck at recovery mode now. Can you help me please?
does your phone fully charged(>60%),you follow screen shots correctly,make your phone full charge (charge it for 2 hrs even though it's blank) then try again ,it will work-------------
billpao said:
Hello I am taking that error
Invalid response from device, incorrect message id
Exception:
Nokia.Murzim.InvalidResponseException: Invalid response from device, incorrect message id
bei Nokia.Murzim.Uefi.BootManager.MurzimBootManager.InfoQuery()
bei Nokia.CareSuite.PlugIns.MurzimRecovery.RecoveryDialog.RecoveryDialogModel.Flash()
bei Nokia.CareSuite.PlugIns.MurzimRecovery.RecoveryDialog.RecoveryDialogModel.<HandleDownloadVariantPackageCompleted>b__c(Object state)
Click to expand...
Click to collapse
My phone is stuck at recovery mode now. Can you help me please?
Click to expand...
Click to collapse
i get the same error with my lumia 920. i want to go back to wp8.1 instead of wp10
problem is:
-) lumia software recovery tool cant connect to the phone (i should press vol down and power, but that just restarts my phone and it still wont be recognized)
-) windows phone recovery tool just restarts my phone 3 times and also says, that it cant connect to my phone (i should press vol down and power, but that just restarts my phone and it still wont be recognized)
-) nokia care suite 5 ****s up with the above error message.
freakedenough said:
i get the same error with my lumia 920. i want to go back to wp8.1 instead of wp10
problem is:
-) Lumia software recovery tool cant connect to the phone (i should press vol down and power, but that just restarts my phone and it still wont be recognized)
-) windows phone recovery tool just restarts my phone 3 times and also says, that it cant connect to my phone (i should press vol down and power, but that just restarts my phone and it still wont be recognized)
-) Nokia care suite 5 ****s up with the above error message.
Click to expand...
Click to collapse
Main and important step is Phone Should vibrate if Tool trying to flash
simple steps
1) first place Firmware Appropriate folder
2) go to recovery--> start ,it will check firmware files first time and popup will come to retry
3> at this time hold volume down first it become 0 and vibrates
simultaneously hold power button without leaving volume down
shutdown slider will come don't touch it and wait until display off
then release power button for 1 sec and repress immediately
phone will vibrates, tool will start flashing process
high end devices like 1520 will vibrate volume down+power press at a time
its depend upon device ,if at a time doesn't work follow above method

Categories

Resources