MTTY - Difficulty executing commands - Upgrading, Modifying and Unlocking

Hi to you all...
I'm having some serious difficulty on something that's probably very easy.
And... it's using the MTTY application. :shock: (yeah... that's true... the simple MTTY)
I'm trying to backup my stuff (WinCE ROM, Radio ROM, and Extended ROM)...
And I saw the tutorial at pdamobiz (http://en.pdamobiz.com/en/forum/PDAforum_posts.asp?TID=62&PN=1).
Well... I think I must be real stupid because when I had everything going... when I typed:
d2s 80000000 02000000
d2s 60000000 00300000 sd a
d2s 70000000 01080000 sd a
Nothing happened...
I tried to do severall things, but since this is the first time I'm doing this operation I thought it was better not to push my luck ...
However, I was able to do something... :roll:
d2s
that works just fine... It dumps the WinCE ROM like it's supposed to do... but I'm not able to do all the other instructions... it's like I typed them and they don't get to be executed.
Is there any special key to execute/terminate the commands?
What can I be doing wrong?
Sorry for such silly question but... I'm not being able to get this out...
Thanks for all the help you can give me...

Related

Anybody figure out how to make a rom dump yet?

I still have the original English (Dutch region) rom on my MDA Pro. Before I upgrade it to Jasjar iMate rom I want to have an original rom dump, in case I have to use the warranty.
Either is there already am original MDA Pro English/Dutch rom somewhere out there (I can't find it) or is there a way to make an sd dump?
This should help!?
http://wiki.xda-developers.com/index.php?pagename=Universal_Technical
Yes but......
What is D2S????
Please could you explai step by step what we've got to do to backup entire ROM please?
I'm not a developer and there are a lot of answer from a lot of people about original ROM backup (expecially for MDA Pro)
Thank you very much
Lucam
Allright! Anybody try this yet? So if I understand correctly the
"d2s 70100000 04000000" (64.00 M OS TrueFFS) command will make the COMPLETE rom backup? Otherwise, if they are separate (ext rom, radio etc) I get more than 160 M.
Re: Yes but......
ciapal said:
What is D2S????
Please could you explai step by step what we've got to do to backup entire ROM please?
I'm not a developer and there are a lot of answer from a lot of people about original ROM backup (expecially for MDA Pro)
Thank you very much
Lucam
Click to expand...
Click to collapse
Its there on the same page: Get into bootloader command mode and use d2s command with the appropriate key.
i understand... but
So, i've got to do:
1)- press light + power + reset
2)- enter password 'UNIVERSAL'
3)- type 'd2s 70100000 04000000'
4)- the MDA Pro start to copy ROM to ....? (SD card? or what?)
and what about Extended ROM backup?
Excuse me for my problem understanding the page you referred but could you write a step-by-step way to completely backup ROM (ROM + Extended ROM). Please? i'm sure it could help a lot of people.
Thank you very much!
Luca
Re: i understand... but
ciapal said:
Excuse me for my problem understanding the page you referred but could you write a step-by-step way to completely backup ROM (ROM + Extended ROM). Please? i'm sure it could help a lot of people.
Thank you very much!
Luca
Click to expand...
Click to collapse
No problem, but I want to try it out myself first before I can give you any answers. I am using my MDA Pro everyday so at the moment I have no time to experiment with it and I don't want to risk f**king it up.......
Maybe someone else here can give you your answers. I will try to make a rom dump this weekend. I'll let you know here..........
STEP-BY-STEP
I found some pages who describes how backup an original ROM (in case of MDA PRO) to have it in case you need warranty.
I use this indications to make a usefull "step-by-step" to do it (...and excuse for my poor english)
What you need:
MDA Pro ;-)
USB cable
PC
1 sd card or mmc card (at least 128MB)
MTTY.EXE (you can find it in internet but the version can use usb connection and not only COM connection)
NTRW.EXE (you can find it in internet.this file must to be copied on your pc on C:\ not in other folders)
If you have ActiveSync installed on your PC on ActiveSync connection settings uncheck USB connection
Before connecting your MDA you should bring it into the boot loader mode. This can be done by simultaneously pressing power + camera buttons and at the same time the soft reset button with the stylus.
The password to enter bootloader is UNIVERSAL
insert a BLANK sd-card
Link the usb cable
Run MTTY.EXE and select USB connection
After that a terminal window will popup in that window.
Type d2s and press enter. Your MDA will start copying the ROM to the sd card. The screen of your MDA will be dark (no light), but you will see it counting up to 100%. When it reaches 100% it will say it is calculating the checksum. Give it some time till its done and it will say checksum ok.
Please note that somebody refers that typing d2s nothing works. There are others command to type due to what you want to obtain.They are:
d2s 60000000 00800000 8M radio rom
d2s 70000000 00100000 1M SPL
d2s 70100000 04000000 64.00 M OS TrueFFS
d2s 74100000 00a00000 10.00 M extrom DSK2ART00 fatfsd
d2s 74b00000 02c40000 44.25 M root filesystem TRUEFFS
Somebody refers that the command 'd2s 70100000 04000000' is can be used to backup entire ROM so if d2s doesn't work please use 'd2s 70100000 04000000'.
After finishing the transfer of the German ROM from your MDA to the SD card, put your SD card into an SD card reader connected to your pc. Your pc might pop up a warning message that says your SD Card is not formatted would you like to format? Click No and open a Command prompt (DOS) window.
Change directory to your root directory (cd c:\) and run the command ntrw read German.nb1 x: where x is the drive letter of your sd card. That command will create the ROM Backup file of your German ROM into your C drive root directory by the name of German.nb1. Make sure you keep German.nb1 in a safe place and use a copy of that file for the rest of the procedure. Note that after finishing the copy from your SD card to German.nb1 file ntrw might give you an error, just don’t pay attention to it.
Please confirm it or give me indication if I wrong giving this indication.
Bye
LucaM
To dump rom from your MDA pro need to enter:
1) d2s 70000000 00100000 <-- bootloader
2) d2s 70100000 04000000 <-- Operation System
3) d2s 74100000 00a00000 <-- Extended ROM
what is necessary?
Ok but isn't it necessary only to backup Operating System and Extended Rom to re-stabilish in future the MDA Pro as just bought?
Bye
Ok, I have been trying everything I could with the directions of ciapal, but no succes.....
btw: The correct button press sequence for bootloader is: Light-power-reset and NOT camera/p/rs
I get the following command sequence:
password UNIVERSAL
HTCSPass.<YHTCEUSB>d2s
Not allow operation!
password UNIVERSAL
HTCSPass.<YHTCEUSB>d2s 70100000 04000000
Not allow operation!
USB>
(the square is a vertical)
Anyone any constructive ideas about this issue? I'm surprised that obviously nobody has created a rom image from their Universal yet! :shock:
I get the same thing with MDA Pro... I am really keen to try the ROM upgrade but really want a backup of the original ROM first!!
Any ideas what is going wrong?
Bump
Anyone?
Thnx again!
Re: Bump
gpsenzo68 said:
Anyone?
Thnx again!
Click to expand...
Click to collapse
Buzz did it again- I think. See http://forum.xda-developers.com/viewtopic.php?p=190925#190925
He managed to dump the rom of the Universal device. It would be great if someone could dump his original T-mobile Rom, this in case of repair.
Re: Bump
simba said:
gpsenzo68 said:
Anyone?
Thnx again!
Click to expand...
Click to collapse
Buzz did it again- I think. See http://forum.xda-developers.com/viewtopic.php?p=190925#190925
He managed to dump the rom of the Universal device. It would be great if someone could dump his original T-mobile Rom, this in case of repair.
Click to expand...
Click to collapse
Buzz needs some time to test restore on the dumped ROM. Just waiting for the result.
hi
something must be wrong as when i enter the rom dump commands (tried all of them) nothing happens... the task 32 and info 7 etc work as described though
d2s on QTEK 9000 French Version bought without any provider
I have the same problem,
On mtty, password seems OK, info or task 32 give the same output but d2s return each time Not allow operation....
What does it mean ? Is there any kind of unlocking procedure to do on a device bought directly without any provider subscription ?
Should I stop extended rom installation programs with a soft reset just after a hard reset to access to this command ?
Any help are welcome...
Ecze
When I type d2s mtty says "not allow operation".
I connected my Universal via USB cable typed "d2s" in the window of mtty. When I pressed enter, mtty said "not allow operation". I read at http://forum.xda-developers.com/viewtopic.php?t=30109&highlight= that there is password for entering bootloader. Where should I enter this password?

Qtek G100 - need a rom dump

I appreciate if somebody with Qtek g100 (GPS navigator PDA) can dump the rom and upload it to the ftp..
I need it for changing CHT rom to English.
The way to do it is:
1. push Power+Record +Reset,
2. release reset, wait until screen start with White and than release both other - Power and Record. That will put the PDA in Boot load.
Once in Bootload, run the RomUpdate / Mtty , choosing USB , push Enter to receive the prompt USB>
3. type r2sd while SD is in the slot., the PDA will sump the rom.
4. when completed (back to Prompt). use NTRW by NTRW read p100ENG x:, while x is the drive letter of the SD card.
5. Upload the rom to the FTP.
Dopod p100 More details...
I have the "machine" for few days...
Playing with it , it seems that boot loader is the same as the ipaq 19xx.
I managed to dump the Chinese rom (attached ) using the monitor r2sd command.
When trying to flash it with the English version I get “Invalid ID”, it refuses to accept a flash of English version.
One way to help me is to patch the RUU to ignore country and the other one is to have a dumped of an English version.
I did not apply the procedure of NfbTools.. I do not believe that rom structure is the same as for the XDA.. shall I?
I will upload both files mentioned above to mthe ftp and appreciate help.
I have an I-mate PDA-N, it's my first PDA, but (after 2 months of reading about) now I'm able to do this.
Only one problem... I'm from Italy, and you want a ROM in english, I think
PS: excuse for my english

Mtty list of commands?

Just a thought, I've been reading posts and thread about resucing the Universal from the 'boot screen' or the hanged 'splash screen'. On top of that, there were many commands for mtty which seemed to help.
I was thinking why don't we compile a list of mtty commands, and what they do when keyed into the client?
egs. set (numbers), task (numbers), etc.
List of Commands
task 28 - format DiskOnChip (DOC)
Yes would like that..
Dubli has told me some tips to rescue uni from hang at splash screen:
1. Get mtty
2. Connect to USB, press enter
3. Type task 32, enter <--Donno what is it for
4. Type 28, enter <--format DOC
5. Flash CE Rom only
6. Hard Reset
But no one has tried it. I cant try it since i've already sent my uni for replacement.
thanks! i updated the first post. if there's any mistake, do let me know.
These commands have little to do with mtty. All mtty does is to redirect these commands to bootloader. Some of the commands could work on a specific bootloader and some won't. If you want the whole list of a specific boatloader than decrypt it and open it in a hex editor. Looking at the string table will give you the whole list.
ady said:
These commands have little to do with mtty. All mtty does is to redirect these commands to bootloader. Some of the commands could work on a specific bootloader and some won't. If you want the whole list of a specific boatloader than decrypt it and open it in a hex editor. Looking at the string table will give you the whole list.
Click to expand...
Click to collapse
thanks for the input. how do i go about doing that? any advice?
http://wiki.xda-developers.com/index.php?pagename=Hermes_BootLoader < something useful as a guide.

Help... Need to install a .nb0 file using lnbms command...

So I have a .nb0 file I need to load on my hermes device and the instructions I have say to use the lnbms command to do it. Sadly I have HardSPL installed and lnbms does not seem to be recognized as a command. Does anyone know how to load a .nb0 file if I have HardSPL installed?
Thanks,
LouisK
Um ya that makes not that much sence. Do you have a ROM.nbh or Radio.nbh? since you need to have a file type that is compatable with the hermes and I dont think the one your talking about is.
rm -rf *
-fluxist
louisk said:
So I have a .nb0 file I need to load on my hermes device and the instructions I have say to use the lnbms command to do it. Sadly I have HardSPL installed and lnbms does not seem to be recognized as a command. Does anyone know how to load a .nb0 file if I have HardSPL installed?
Thanks,
LouisK
Click to expand...
Click to collapse
Last time I checked, .nb0 files don't go on Hermes devices.
I am in the same boat. I have an os.nb0 that was extracted from a hermes. I want to get it onto my device.... lnbms is the command but it's locked in the bootloader. Anyone know how to get around this?
so, just checking, you've extracted the nb0 file out of a hermes rom and are trying to put it into a loaded os????
Sounds to me like you need to be cooking your own os if you want to do that...
And then reflash time....
I figured it out. The reason that you can not flash a .nb0 with MTTY is the bootloader is locked. Even though the phone may be CID or Super-CID or SSPL or whatever... you MUST have a bootloader that is unlocked and will allow the lnbms command to pass. I have not seen any information yet on this and the hermes. I was able to do this on my htc Wizard though Know that doesn't help but it does atleast tell you why you can't do this action

How do you dump a ROM?

Hi,
I searched around and yet I couldn't find much on ROM dumping
Do you need a different utility for a different device? I'm guessing there is one for Diamond but I couldn't find one yet
Also, what do you need to do before dumping a rom? (is unlocking required etc.)
butterdori said:
Hi,
I searched around and yet I couldn't find much on ROM dumping
Do you need a different utility for a different device? I'm guessing there is one for Diamond but I couldn't find one yet
Also, what do you need to do before dumping a rom? (is unlocking required etc.)
Click to expand...
Click to collapse
No unlocking won't change your ROM so unlock away!!
There is a utility that does the dumping for you and here it is..
Er... I don't quite understand how that works....
The instruction says..
Install EnableRapi.cab on the phone.
Run Partition Addresses.bat.
Read Partition.Addresses.bat to find the four addresses.
Edit Dump My Phone to include the four addresses in place of the words.
Run Dump My Phone.
Rar and Send!
-------------------------
Should I do this while the phone is connected by activesync?
Also, once I run Dump My Phone, it gives me an error that says that the device isn't ready.
You can try my dumping kitchen, it's very simple to use!
(sorry, it's german ^^)
Steps on how to dump an unprotected ROM:
- place your RUU_Signed.nbh inside the kitchen
- start "1a. Entpacken.bat" to unpack and dump the NBH file
- start "3. Packages erstellen.bat" to make packages inside the dump-folder
- pick out what you need from the dumped ROM
Good cooking!
you get two ways of "dumping rom".
both ways get an other result.
about your asking for first way, i think you are a beginner.
your problem will not the dumping of roms,
the problem would be getting the dumping-file back to your phone.
i think, you read many or some threads where you think to get easy answers.
but the answers would be allwasy the same "google/search for answer"
its not a good time for hardcore beginners ...
please try to explain with simple words, what you have done and what you want do.
(not only for your brain, take your fingers and make "tik tik tiktik.." on keyboard ...
i asking this to you becaue for cooking and flashing you dont really need the specified answer of dumping roms. some kitchens looks BOAH-NOTHING UNDERSTAND, but at most, you need only copy ruu_signed.nbh to BaseRom and klicki-klicki BEGIN or START. than you get the rom-folders with easy understanding names (at most). for not needed programs delete files or folders. for the games you can delete all entertaionment-folders. for delete welcome.exe you have to delete one folder welcome.exe and the file welcome.exe.
this example is easy and at the same time one of the difficults thing by cooking. delete entertainment makes no problems. but delete welcome ... you have to know, what you do before you do it. without welcome.exe you cant fix your display with display-coordinates. and you have not the correct time. for getting a solution you need to study forums ... the coordinates of display can find in registry - > if you checked the registry before you starts to cook/flash. to get automatic time you need registry again, but its hard to get them.
sorry for big answer ....

Categories

Resources