Develop Bugs

DIY -Unlock and Flash Tmobile Dash to HTC Excalibur

Okay guys, this process took me 1 hour on the first Tmobile Dash i flashed cause i was reading and searching instructions from different sources at one time on the FLY so it took me longer. The 2nd Dash i flashed for my girlfriend took me 22 minutes flat cause i saved all these links and files.
You will have your phone done in about 20 minutes from start to finish if you follow these simple instructions.
DISCLAIMER TIME -
I'm writing this because i went through so many threads out there just to find out how i had to reflash the phone. Now, i've done 2 phones back to back and i wanted to put my experience in one SIMPLE thread. This worked for me, twice. I had success in reflashing my new Tmobile dash into an HTC Excalibur so i went and bought one for my girlfriend and did the same thing to hers with success.
I'm not responsible for any damages that you may incur in bricking your phone simple cause i wasn't the one that was reflashing your phone. This is my "story".
I went to http://www.imei-check.com/dashunlock.php to unlock my phone.
Seriously, its $38 bucks, don't be cheap. I did both of my Dash phones through them, its easy as all hell to do AND within 3 minutes, i was SIM unlocked and CID unlocked.
Sim Unlock - Use any carrier's SIM card.
CID Unlock - Unlocking the phone's Software lock
Application Unlock - Unlocking registry and installing 3rd party applicates that don't have certificates.
IMEI Check only SIM and CID unlocks (which is what most ppl do)
Step 1 -
With your new Tmobile dash - I want you to wipe the handheld clear first, based on my experience, it makes loading new ROM's FASTER.
Follow these Key strokes in the start menu
START - EXPERT - Clear Storage - enter 1234 to wipe the handheld.
(make sure your stuff is backed up if any!!)
Step 2 -
Install Activesync on your computer and make sure its Connected!!
Step 3 -
After that's done, you need to run this Rom bootloader update. I found this from the wonderful developers here. This is the link. To run this, all you have to do is download it and just run it on your desktop with your ActiveSync Connected.
ftp://xda:[email protected]/smartphones/Excalibur/RUU_Excalibur_SPL-1.11_UpgradeOnly.exe
I've read about ppl getting errors while trying to directly install the NEW ROM so i'm including this step ( once again, these are the exact steps that I took and it worked fine, i'm not going to tell you guys something that I didn't try or didnt work )
Step 4 - Let it fully set up and then install the new ROM. This is the ROM i used. Download it and run it with the ActiveSync Connected (Duh) Here's the link.
ftp://xda:[email protected]/smartphones/Excalibur/RUU_Excalibur_HTC_WWE_1.11.405.4_4.1.13.28_02.63.90_Ship.exe
I've read that this was the ROM that was most stable and I'm running it on 2 Dash phones without a single problem.
Now you're almost done!!!!
Step 5
After you get all that stuff set up, you need to edit the registry because the keyboard function still needs to be tweaked. This is a SDA Unlocker that I used on both phones to do the "Application Unlock".
ftp://xda:[email protected]/Uploads/Excalibur/unlock/SDA_ApplicationUnlock.exe
I know its for the TMobile SDA but it apparently works on the Dash too. This will do the APPLICATION UNLOCK and now you should be able to change the registry keys.
Step 6
Go into the phone and click START - Settings - More - Regional Settings-
Now change everything to English US, Not English UK. After that, reset the phone again for the changes to take place.
Step 7
Now click this link - Its a Registry Editor (best one i've used so far).
http://www.breaksoft.com/Download/MRE/MobileRegistryEditor.zip
Unzip it into a Folder on your desktop (no , its not a virus, scan if it you must)
and open it up.
it should look like this. (taken from their website)
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
What you're doing right now is you're changing the KEYBOARD layout BACK to the Standard US one. The ABC's work but the secondary symbols don't correspond to each other (IE - "alt" + "K" should be the $ sign but its the Euro Sign instead)
Step 8
Now, go to this location in your registry -
HKEY_Local_Machine -
HARDWARE -
DEVICEMAP -
KEYBD -
Now look for "CurLang" - double click that value and a little window opens up that looks like this
Change the "Value Data" to "1033" as the US Keyboard Layout value.
Exit the program, and restart the Phone.
DONE!!!!!!! - Your phone is unlocked without the TMobile Branding and its back to the good ol HTC Excalibur setup.
Now, Depending on your phone carrier, you must set up the GPRS Settings and stuff. I'm on Cingular's network, you can find their settings on their website by going here-
https://www.cingular.com/support/content.do?page=phone-device-support
I know its for a different phone but the settings are the same.
As for text message setting and voicemail numbers - here's a shortcut -
START - SETTINGS - PHONE - PHONE OPTIONS -
This will automatically download the voicemail numbers and SMS numbers to your phone from the network.
[email protected] if you have questions.
*****************UPDATE-FEB 13th 2009 *****************
I've just checked my old emails and i've been receiving LOTS of emails about the links on this post being down. There was an issue with the FTP servers before where these roms were stored. They are no longer there.
They can be found by going here -->http://lmgtfy.com/?q=HTC+Excalibur+ROMS
I apologize that i haven't gotten back to those of you who have emailed me.
I no longer have this phone now so i never bothered to look into any of the emails.
There are plenty of sites where you can find the ROM images.

good post... thanks for the insight and instructions. been waiting for someone to confirm success before I actually went throught it myself. Thanks!

What about putting things back the way they were should you need warranty service, etc... With the SDA, I could, and did, put T-Mobile back with the shipping ROM available at the HTC web site -- but -- I don't see the shipping Dash ROM there or at T-Mobile.

To be honest with you, Warranty repairs and those sort of things should be a concern. You can reflash the factory ROM back onto the phone but i don't think anyone's released it yet. If you find it, please post it back up for more people that have the same concerns. To be frank, if you're going to flash a phone or "mod" it in anyway, it voids the warranty period but from what i understand, i believe HTC has a 1 year warranty on the phone. If its going to be carrier warranty, i wouldn't know where to begin to answer that question simply because I'm not with Tmobile as a carrier (and they are the only carrier that has released this phone in the US). This was the same ROM that i was posted up as the shipping ROM, not a test ROM. I'm merely using the resources that I've found as a simple guide for those who deem to do what I've done successfully.
I wish i had a better answer for you though.
Thanks

Nvious said:
To be honest with you, Warranty repairs and those sort of things should be a concern. You can reflash the factory ROM back onto the phone but i don't think anyone's released it yet. If you find it, please post it back up for more people that have the same concerns. To be frank, if you're going to flash a phone or "mod" it in anyway, it voids the warranty period but from what i understand, i believe HTC has a 1 year warranty on the phone. If its going to be carrier warranty, i wouldn't know where to begin to answer that question simply because I'm not with Tmobile as a carrier (and they are the only carrier that has released this phone in the US). This was the same ROM that i was posted up as the shipping ROM, not a test ROM. I'm merely using the resources that I've found as a simple guide for those who deem to do what I've done successfully.
I wish i had a better answer for you though.
Thanks
Click to expand...
Click to collapse
This is what I am waiting for, otherwise I would have flashed this thing about 20 times. I don't know what is taking so long for us to get the original ROM from T-Mobile.

Nvious said:
I went to http://www.imei-check.com/dashunlock.php to unlock my phone.
Seriously, its $38 bucks, don't be cheap. I did both of my Dash phones through them, its easy as all hell to do AND within 3 minutes, i was SIM unlocked and CID unlocked.
Click to expand...
Click to collapse
I don't want to stir the boat, you really did an excellent job on writing all, but I believe all can be done WITHOUT the prior unlocking, it's not necessary.. correct me if I'm wrong
good post though, kudos

jsp_m said:
I don't want to stir the boat, you really did an excellent job on writing all, but I believe all can be done WITHOUT the prior unlocking, it's not necessary.. correct me if I'm wrong
good post though, kudos
Click to expand...
Click to collapse
Hey, thanks man. I looked at so many different sites and did so much searching, but i still couldn't find a site that just gave me steps to do it. That's what motivated me to do it!
I read on another thread that there was a way to reflash the ROM without a CID unlock through the bootloader. I tried it and I got the error code, it didn't work.
It was the bootloader that needed to be changed so i changed it but it still didn't work. I think the code was "invalid vendor" or something like that.
After all this, i'm pretty sure that AS OF NOW, there is no way to doing it.
I'm sure someone will find a way though. The first time i tried to flash my
personal Dash, i went through IMEI check cause i knew it was a sure fire way to do it. Then, the next day i went and bought a dash for my girlfriend and decided on trying to bypass the CID lock before we flashed the phone, i had a little more experience than i started with so i gave it a shot. I tried changing the bootloader, didn't work, there was still a SIM lock on the phone.
I had to get it done regardless so i did it. From what I understand ( i might be wrong), you can get the phone SIM unlocked through Tmobile if you've been in good standings for 90 days, but it won't remove the CID lock which is needed to have access to flashing the Carrier's ROM that's been installed. The application unlock is just to protect the registry and prevents you from installing programs that don't have secured and verified certificates. I tried all of the above and the only way i was able to it. Anyone else have any shortcuts? I can modify my original post so if there's a shortcut.
Thanks for all the input guys!

This was the thread that i read to try and bypass the CID lock= this might be worth following up for those of you who would rather save the $38.
http://forum.xda-developers.com/showthread.php?t=287791

Sort of... if you return the device to T-Mobile with anything other than their ROM, they'll either charge you a restocking fee (full retail) or send it back -- and getting them to send it back is no minor undertaking. If you reflash it with their ROM, they won't know, at least they didn't with my 2nd SDA -- the first one I mistakingly left the iMate ROM on and it turned into a lengthy ordeal. Eventually, they sent it back, and I reflashed it, and sent it in again without issue.
It appears the shipping ROM isn't going to be posted at the HTC or T-Mobile sites. If and when they issue an update, then that'll be the new 'shipping' ROM we need to start playing around with the others
Personally, I'm fine with the T-Mobile ROM, except for the HotSpot stuff that loads on boot. I'd rather free up the memory, but haven't yet run into a hack that lets the device boot up without all that HotSpot junk.
Nvious said:
To be honest with you, Warranty repairs and those sort of things should be a concern. You can reflash the factory ROM back onto the phone but i don't think anyone's released it yet. If you find it, please post it back up for more people that have the same concerns. To be frank, if you're going to flash a phone or "mod" it in anyway, it voids the warranty period but from what i understand, i believe HTC has a 1 year warranty on the phone. If its going to be carrier warranty, i wouldn't know where to begin to answer that question simply because I'm not with Tmobile as a carrier (and they are the only carrier that has released this phone in the US). This was the same ROM that i was posted up as the shipping ROM, not a test ROM. I'm merely using the resources that I've found as a simple guide for those who deem to do what I've done successfully.
I wish i had a better answer for you though.
Thanks
Click to expand...
Click to collapse

loging to xda ftp site
Hi I keep getting rejection to log in to the FTP site, any idea why is that ? it keep saying permission denied
thank you

You sure its askin for permission? It never asked me??
ftp://xda:[email protected]
That's weird??
Check with the Moderator "Pof"

nice guide
nice will show this guide to my brother
the thing that has stopped us from upgrading his phone is that the Offical USA t-mobile rom is no where to be found incase he wants to flash back...
does anyone have this or can we back it up? please let us know so we can break the tmobile spell
also is it possible to get the tmobile APP called faves which stores his favorite contacts for free calls? i assume i can extract it
need some help - 1way

No one seems to have a program or anything that can back up existing Tmobile ROM's and no one can really find a release?
I've had no luck with it yet. Sorry

FYI...I've been running the ROM this thread specifies for 2 weeks now without any problems. My biggest grip is that I wish someone would post a ROM with xt9 and put back the functionality of being able to press and hold a key to get the alternate characters.

I'd say the fact that you've lost some significant functionality and can't get it back the way it was isn't "without any problems". When a ROM update comes out, we'll have our 'shipping ROM'.
bkeaver said:
FYI...I've been running the ROM this thread specifies for 2 weeks now without any problems. My biggest grip is that I wish someone would post a ROM with xt9 and put back the functionality of being able to press and hold a key to get the alternate characters.
Click to expand...
Click to collapse

well the fact the those 2 functions are gone done warrant to me that it has problems. Problems to me is the wifi no longer works or the phone freezes up or calls drop those are problems. the 2 things I listed are a can live without thing.

1wayjonny said:
also is it possible to get the tmobile APP called faves which stores his favorite contacts for free calls? i assume i can extract it
need some help - 1way
Click to expand...
Click to collapse
They will still bill the calls for free for the myfaves. You just have to use my.t-mobile.com to change the myfaves instead of the phone. You might know that but just incase someone else here did not know.

chaznet said:
I'd say the fact that you've lost some significant functionality and can't get it back the way it was isn't "without any problems". When a ROM update comes out, we'll have our 'shipping ROM'.
Click to expand...
Click to collapse
XT9 is the feature in which the phone tries to guess what you're typing??? It was a blessing to actually get rid of that feature! I could not stand it.

I'm with you on that.
It seems to me that the debate is just over having the existing ROM to reflash.
If you guys have concerns on having a backup ROM, reflashing a phone is out of the question.
I wrote this thread cause Tmobile's the only company that provides the S620.
I don't have Tmobile as well as many others but that doens't mean we should be SOL on this phone.
To be honest, i expected only NON tmobile customers to be reading this thread because it relates to them more. Its on how to unlock and reflash the phone for use with other carriers. if you are currently with Tmobile, i suggest you keep the existing ROM on there as that particular ROM was designed for Tmobile users.
For all you others, Lets keep the steam boat running.
Who has done this operation so far???
can i get a show of hands?
Problems?? anything?

djdanska said:
They will still bill the calls for free for the myfaves. You just have to use my.t-mobile.com to change the myfaves instead of the phone. You might know that but just incase someone else here did not know.
Click to expand...
Click to collapse
no i didnt but thanks that the only thing that was stopping the rom switch

[Texas Instruments] Flash Tool 1.6.0.0 -Soft Brick- TF101 TF201 TF300 Unbricking Tool

Hello and greetings to all, this is my first XDA post so please be gentle with me...
I recently started pondering one of the problem's I see a lot of people surfing these Forums suffering from, the dreaded "Bricked Device"
For whatever reason generally through no fault of your own, you may end up with a bad flash that results in your device becoming a worthless but very expensive paperweight. :crying:
Some examples of people suffering a bricked device:
http://forum.xda-developers.com/showthread.php?t=2229416
http://forum.xda-developers.com/showthread.php?t=2275035
http://forum.xda-developers.com/showthread.php?t=1926098
After doing a lot of research myself from suffering something similar I started to notice the general theme is always the same, people saying "wait for the device manufacturer to release the NVFlash!"
However in these instances shown above the RETAILER in question is ASUS and they are never going to release any kind of source, to any kind of NVFlash.. Because if they did, you have to reflect that would put them out of buisness, it's far more lucrative for the RETAILER (not the manufacturer) to just sit back and wait till you've got a problem with a shody update and then push selling you a new motherboard for your device. A new motherboard that in all likelyhood you dont even need and if you send in the device for repair that you would probably never even see being placed into the device in the first place when all they have to do is fix your broken bootloader.
Because the reality is, the Manufacturer being "TEXA'S INSTRUMENTS" have already made the full source of the NAND Flash to these devices readily available to the RETAILER and there partners in buisness.
It may surprise you and a lot of other people to learn that in fact you can already download The Official TEXAS INSTRUMENTS FLASH TOOL Ver: 1.6.0.0 from the following link: http://www.ti.com/tool/flashtool
Complete with the entire walkthrough guide available here: http://processors.wiki.ti.com/index.php/Flash_v1.6_User_Guide
I know there are a lot of people out there on this forum that have been looking for this tool so I decided I would make my first post a link to the Bootloader Reflashing Tool for the majority of all ARM or OMAP based devices.
Please dont ask me how it work's, I'm happy to sit back and let those out there with more experiance in these matters take the plunge for themselves if it means in the long run we can all finally put Linux onto the Android Touch device with relative ease and recover from stupidness such as a Bricked device because of a crappy bootloader update where the RETAILER decides in there infinate wisdom to remove USB device support from the Jelly Bean Bootloader...
On the plus side, this means that in the near future when the right people get there hands on this tool (from the Manufacturer) we can all expect to see some far more funky flashing startup screens and some rad custom bootloaders :victory:
Thank you for taking the time to read my first post...
P.S: I also nearly forgot to mention this is the tool that LOCKS and UNLOCKS the Bootloader, so once people start making Bootflashes for there device to use with this tool then you wont see "Your Device is Unlocked" in your face everytime you turn on the device! (I wonder if that means we can recover our warranty, I can almost hear ASUS sqweak in protest!)

REALY Nobody knows to work with this tool ???
REALY????
I dont belive this....
I have TF300TG briked... I I want to TRY any solution...!!!!
BR
Mihnea

[Q] Noob on HTC M8 need some help :)

Hello XDA members!
I am a very proud owner of this amazing phone, i come from a Samsung Galaxy S4 to this piece of art.
So, the first thing i did was to come here and start searching for some things i would like to know, i browsed this for like 1hour and i still didn't find answers for this:
- I am a European Version of this Phone, when i turned it on, there was a software update, so i did it, and now i am on version 1.57.118.2 , this leads me to two questions:
-- Is this the most recent FW version for this phone?
-- I don't have Extreme power saving mode, why??
- Wich is the FW that gets the updates more quickly?
- After some search about rooting this device, i need to S-OFF it and then Root it right? And so, my questions are, rooting and S-OFF'ing my phone, voids my Warranty?
- Is it possible to root the phone and keep OTA updates?
Sorry for too many questions, i will promise i will never create again another thread like this, i just need help at start then i will be ready to go on my own
Best regards.

I can't answer all the questions but I'll answer the ones I know for sure.
You don't have to have s-off to root, you do need to unlock the boot loader (a quick search will show you how) and flash a custom recovery ( cm, twrp, Philz etc.). This will void your warranty but there are many threads about how to return to stock. Be sure to BACKUP.
There are many great Roms on here that include the the extreme power saving mode, browse around the development board and try some our till you find one that you like.
Hope this help
Sent from my HTC One_M8 using Tapatalk

didi_ghost said:
Hello XDA members!
I am a very proud owner of this amazing phone, i come from a Samsung Galaxy S4 to this piece of art.
So, the first thing i did was to come here and start searching for some things i would like to know, i browsed this for like 1hour and i still didn't find answers for this:
- I am a European Version of this Phone, when i turned it on, there was a software update, so i did it, and now i am on version 1.57.118.2 , this leads me to two questions:
-- Is this the most recent FW version for this phone?
-- I don't have Extreme power saving mode, why??
- Wich is the FW that gets the updates more quickly?
- After some search about rooting this device, i need to S-OFF it and then Root it right? And so, my questions are, rooting and S-OFF'ing my phone, voids my Warranty?
- Is it possible to root the phone and keep OTA updates?
Sorry for too many questions, i will promise i will never create again another thread like this, i just need help at start then i will be ready to go on my own
Best regards.
Click to expand...
Click to collapse
1) I believe that's the most recent FW update for T-Mobile Poland.
2) I don't have a real answer as to why you still don't have extreme power saving mode, perhaps it's the carriers choice for whatever reason.
3) Devices that gets updates more quickly: 1) Google Play Edition device. 2) HTC WWE (International) & HTC WWE (Asia) . 3) Developer Edition. 4) The rest of the world with carrier branded phones at of course the leisure of the carriers. They first have to mess it up with bloatware then spend weeks trying to fix the mess before sending the OTA to mess up your device.
4) Yes, tampering with the device in any way voids warranty. Though it is my understanding that some countries in the EU overlook these sorts of things to some degree. However, given then the fact that you are S-OFF you can return your device to 100% stock which should be good for warranty issues. The only thing that "might" give it away is, if you prefer to stay S-OFF though the carrier has to prove that you did something wrong as apparently some HTC devices do leave the factories in an S-OFF condition already.
You could attempt to go back to S-ON though some here don't recommend it as it could throw out a security flag that'll completely give your tampering away or even worst, it could get bricked. I think the thread that discussed it was in the Verizon forums, you could perhaps check it out there, the thread starter was Scotty, the same guy that gives the guide to removing the tampered banner on the phone. [how to] remove your "tampered" banner
5) Yes you can root the phone and still receive OTA updates, however if you do the OTA update you'll lose root. It's easy enough to re-root again though. Of course if you flash a custom recovery you need to flash back the stock recovery again. Your device needs to be in original state to receive OTA in other words... Any deleted apps(Like Facebook) needs to be put back, stock recovery, stock ROM, stock Kernel.
You can however boot the custom recovery and still root, that way you keep your stock recovery intact. If you do want to flash a custom recovery, MAKE A BACKUP of your stock recovery first. There are currently none available for your device that I can find so it's imperative, else later on when you decide to go back to stock you'll sit without a recovery.
You can boot Philz and make a complete nandroid backup selecting everything including recovery OR you can make a backup of recovery as follows:
You must be rooted, can get root with Towel Root. You must have adb installed, open command prompt in adb folder, connect phone to device and type:
Code:
adb shell cat /proc/emmc
This will display the partition lay out of your device and search for recovery, for me it's in block 43(I think it should be for you as well) then type:
Code:
su - [I][B]grant the phone root privilege when the pop up comes up on phone[/B][/I]
dd if=/dev/block/mmcblk0p43 of=/sdcard/recovery.img
What that does is convert and make a copy of the recovery partition mmcblk043 (The "if" or input filepath) onto the "of" (output filepath) /sdcard as "recovery.img". That's it, that's your backup of stock recovery.
When you need to go back to stock you can just flash it via fastboot with:
Code:
fastboot flash recovery recovery.img
I would suggest the dd method for a stock recovery as only Philz makes a backup of recovery, TWRP does NOT make a backup, which is a bit of a problem. Of course when you made the backup, the file isn't that big so maybe you could upload it and share it in the Collection thread along with your nandroid backup, it could come in handy to help many other people that don't do it. :good:

Thank you very much for you helping i really appreciate it! So i have one question, i really want the Extreme Power Saving mode, so my question is... Can i change the original firmware to another one safelly without warranty voids or something? Damn, i am in Portugal, and i got a cellphone from Poland lol.

didi_ghost said:
Thank you very much for you helping i really appreciate it! So i have one question, i really want the Extreme Power Saving mode, so my question is... Can i change the original firmware to another one safelly without warranty voids or something? Damn, i am in Portugal, and i got a cellphone from Poland lol.
Click to expand...
Click to collapse
Yeah if you get S-OFF you can convert your device to pretty much any variant(CDMA excluded so no Sprint/Verizon as far as I know).
I'd convert it to the international version HTC__001 that way you get your extreme power saving mode and you also get the latest updates way before any carrier sends it out.
Interesting, did you buy the device over Amazon or some sort of related online service? Did they advertise it as international unlocked? I've seen a couple of guys on here that bought devices like that from Amazon or related services that advertised as such. At the very least if they did advertise as international unlocked then actually converting to international can't "void" it then, can it?
Seen guys from France get English, guys from Poland buying from Spain and actually getting French device, a guy from Argentina that got one or other US variant... very mixed up. Even I got some other variant, imported mine from the UK to South Africa but it's also a French HTC__203 device. EU... what can we say?

BerndM14 said:
Yeah if you get S-OFF you can convert your device to pretty much any variant(CDMA excluded so no Sprint/Verizon as far as I know).
I'd convert it to the international version HTC__001 that way you get your extreme power saving mode and you also get the latest updates way before any carrier sends it out.
Interesting, did you buy the device over Amazon or some sort of related online service? Did they advertise it as international unlocked? I've seen a couple of guys on here that bought devices like that from Amazon or related services that advertised as such. At the very least if they did advertise as international unlocked then actually converting to international can't "void" it then, can it?
Seen guys from France get English, guys from Poland buying from Spain and actually getting French device, a guy from Argentina that got one or other US variant... very mixed up. Even I got some other variant, imported mine from the UK to South Africa but it's also a French HTC__203 device. EU... what can we say?
Click to expand...
Click to collapse
But if i do that, i lose my warranty right? It's sad, i dont want my phone to be on that firmware and i want Extreme Power saving mode and my APN's are empty -.-
No, i've bought on a local store, i see that these phones are sold from many countries to diferent ones, someone from my Country got one from a Italian Store and he bought it from Amazon ES

All i want for now, is to change my original firmware to the international version or HTC-PTG HTC__506 (wich is my country) without losing my Warranty, is that possible?

Please someone help me with this, or i will have to go to the store to swap to another one

didi_ghost said:
Please someone help me with this, or i will have to go to the store to swap to another one
Click to expand...
Click to collapse
didi_ghost said:
All i want for now, is to change my original firmware to the international version or HTC-PTG HTC__506 (wich is my country) without losing my Warranty, is that possible?
Click to expand...
Click to collapse
You post a query and expect it to be solved in minutes!We at xda have a life outside also.You should respect others time.Anyways if you unlock the bootloader you void your warranty at that very instant.There is only 1 possible way to regain your warranty is to s-off your device.Other than that there is no way.You can use firewater or sunshine($25) to s-off.I hope you have understood.
EDIT:S-off dosent void warranty!

Yeah i know sorry, but it's kinda frustrating this situation, it's such a crap FW...
So, it's possible for me to change the original FW without losing warranty right? If yes, can you please tell me what steps should i proceed to get the European FW(internacional?) or the one for my country.
Best regards.

didi_ghost said:
Yeah i know sorry, but it's kinda frustrating this situation, it's such a crap FW...
So, it's possible for me to change the original FW without losing warranty right? If yes, can you please tell me what steps should i proceed to get the European FW(internacional?) or the one for my country.
Best regards.
Click to expand...
Click to collapse
Like he said as soon as you unlock you CAN and most likely did void the warranty, HTC gives a clear warning of that during the actual unlocking procedure. Anything else you do after that, flashing a custom recovery, rooting, flashing roms, deleting system apps(bloatware) etc can all really be considered "voiding" the warranty, as it's tampering with the device.
That is where having S-OFF comes in handy as you can not just easily undo all of that but even undo the tampered flags that came as a result of you messing around with the device. You can make it seem like you never even unlocked the bootloader in the first place. Though HTC itself WILL of course know that you did... That being said, It really shouldn't be a problem if you need warranty fix/exchange for hardware related issues that did NOT come about as a result of any software "modifications" / "hacking".
So get S-OFF!!! :victory:
Flashing the International version:
Head over to the Collection of Stock Backup's thread grab one of the 1.54.401.5 versions as we'll use the OTA update that you'll get afterwards as a test to make sure all is running good and that you can get OTA updates and install them to 1.54.401.10 . While you're in the thread also grab the stock recovery for 1.54.401.5 it's also in the first post in that thread. Put these files on your phone in the correct folder path. If you're using internal SD card it should be in /sdcard/TWRP/Backups/SERIAL_NUMBER/ <<<replace serial_number with the serial number for your device, you can find that on the box that the phone came in of course. For external sd card. /sdcard2/TWRP/Backups/SERIAL_NUMBER <<<Again same as already mentioned.
Make sure about your MID, it should be 0P6B10000 though it is my understanding that all European models have the same MID. You can check this by hooking up phone to pc and using fastboot(Method I'll show below if you don't know how). Once in fastboot type fastboot getvar mid . Next you need to change that CID to HTC__001 for international variant. You can do this by connecting your phone to your pc and opening a command prompt in the adb folder(Assuming of course you have adb/fastboot on your computer? ) you can then proceed to type these commands.
First make sure USB-Debugging is enabled on your device. Settings > About > Software Information > More > Tap 7 times on Build number. This will enable Developer options, go back to Settings and scroll down, just above "About" you'll see Developer Options, tap on that scroll down and make sure the box next to USB debugging is checked. Then go back to Settings scroll down to "Power" select it, scroll down to bottom and "un-check" the "Fast boot" box.
Code:
adb devices - [B][I]this is to see if your phone gets picked up through adb, should show you your serial number.[/I][/B]
adb reboot bootloader
fastboot devices - [I][B]again just to make sure it's connected.[/B][/I]
fastboot oem writecid HTC__001
fastboot reboot-bootloader - [B][I]make sure the CID changed correctly to HTC__001[/I][/B]
fastboot flash recovery recovery_name.img - [B][I]recovery_name being the name of the stock recovery you downloaded. Make sure it's placed in the adb folder![/I][/B]
fastboot erase cache
fastboot boot name_of_custom_recovery.img - [I][B]make sure you BOOT the recovery for the same backup nandroid you chose. If you downloaded a TWRP backup then BOOT TWRP, if you downloaded Philz Touch nandroid then BOOT Philz Touch. Again, make sure this file is in adb folder UNZIPPED if it's zipped, same with the stock recovery, if you downloaded it zipped, unzip it and place the .img file in the adb folder. So let's assume you went with TWRP then it'll be:[/B][/I]
fastboot boot openrecovery-twrp-2.7.1.0-m8.img
Once it booted the custom recovery wipe the dalvik-cache, cache and data partitions. Then do a restore from the path to the nandroid backup. Reboot the phone and you're set, it'll take a while on first boot as it loads up all the things. Once it's booted you should also get a pop up for the new OTA 1.54.401.10 go ahead and accept it and see if installs properly for you, if it installed properly and updated your system then...
Congratulations you're now an International WWE user. :good:
You'll also have the extreme power saving mode you so desperately seek and desire.

Thank you very very much!! I'm gonna try to swap on the store for another one first , if i can't i'm gonna do this and give freedom to my phone! God bless you for that huge text helping me out
Enviado do meu HTC One_M8 através de Tapatalk

didi_ghost said:
Thank you very very much!! I'm gonna try to swap on the store for another one first , if i can't i'm gonna do this and give freedom to my phone! God bless you for that huge text helping me out
Enviado do meu HTC One_M8 através de Tapatalk
Click to expand...
Click to collapse
http://forum.xda-developers.com/showthread.php?t=2735235 check this.Note yyou hace to be s-off to change mid.Also I would suggest you to change cid to supercid ie 11111111

Guys, i'm trying to S-Off my phone with firewater using temp-root method and i'm always getting this:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
So , there's nothing i can do?

Please someone?

didi_ghost said:
Please someone?
Click to expand...
Click to collapse
If you can't get firewater to work go and look for sunshine soff or you could try asking the team in irc chat
Sent from space

Recover from hard brick with locked bootloader - Fairy tale?

Hello guys!
After much research on the internet about unbrick for Moto Z2 Force, after many forums, tutorials, tools, blankflash, etc., I've came to the conclusion: I've not found anyone who has managed to recover a Moto Z2 Force from a hardbrick with a locked bootloader.
Many are hopeful that it is possible to do so, but I believe it is no more than a fairy tale.
If you succeeded, please help others to get it too.

andrecesarvieira said:
Hello guys!
After much research on the internet about unbrick for Moto Z2 Force, after many forums, tutorials, tools, blankflash, etc., I've came to the conclusion: I've not found anyone who has managed to recover a Moto Z2 Force from a hardbrick with a locked bootloader.
Many are hopeful that it is possible to do so, but I believe it is no more than a fairy tale.
If you succeeded, please help others to get it too.
Click to expand...
Click to collapse
My second Z2 kept bricking and locking itself. My only saving Grace was I was able to unlock it since I had the unlock code still and since it wouldn't boot, it would accept the unlock code. It is a slot ab issue where if your phone never took an OTA (I flash all to Oreo and tried flashing DU and AOSP before taking an OTA to open slot B). This caused the phone to lock itself and go a little nuts. But it was unlocked then locked due to slot issues, so it shouldn't count. Maybe my story is a fairy tale ... No... I remember spending the hour trying to figure out why this thing wouldn't install an AOSP rom but my other would just fine, then facepalm when I figured I just needed to take an OTA.

This person had a locked bootloader and we were able to sort through and get it back to good. Maybe yours is a little worse off, idk, but the gist should be the same. I'm not sure what you've tried. whether you can load os, etc. Here is a link to the thread where we finally got it sorted, it's a little hit and miss, but maybe it'll get you going in the right direction.
https://forum.xda-developers.com/z2-force/help/help-help-help-deep-cable-flash-cable-t3925742

41rw4lk said:
This person had a locked bootloader and we were able to sort through and get it back to good. Maybe yours is a little worse off, idk, but the gist should be the same. I'm not sure what you've tried. whether you can load os, etc. Here is a link to the thread where we finally got it sorted, it's a little hit and miss, but maybe it'll get you going in the right direction.
https://forum.xda-developers.com/z2-force/help/help-help-help-deep-cable-flash-cable-t3925742
Click to expand...
Click to collapse
Alas this person had a different problem from me. It sounds like they had something of a pseudo-lock that just needed a nudge to get the kernel to recognize the OEM unlock had been authorized.
The above thread may prove useful to people who have had issues with locked bootloader but who have access to the system.
I do not have access to the system. fastboot oem blankflash command is "restricted" for me. Yet it still classifies both slots as bootable, it just refuses to boot them, which is not enough to trigger any emergency download apparently. It seems this person never succeeded in doing that, because they found an easier way.
I'm really trying to figure out if buying a cable would be worth it, but I have doubts. I was able to access my usb hub and manually short the pin using a voltmeter and some wire to find which traces were connected -- exactly mimicking the action of most "deepflash" cables.
No dice.
That, and I read that the MSM8998 doesn't use the same programmer as other qualcomm androids, possibly uses an older one, and I haven't found any reference to which one. I think blankflash should be possible on these phones, but triggering edl seems impossible from my position, since I have no adb but I do have a basically useless bootloader, which aggressively overrides edl. :angel:
Basically the way I see this, my bootloader thinks its serving a purpose: fending off modified system files, which I unwittingly made its only function when I locked it. It is forbidden from handing over the power of my z force to a patched OS. Since the bootloader exists, and is technically able to boot, it's just not allowed, edl will never be activated because it utterly defeats android security. edl is the backdoor that opens when everything else is completely gone or unintelligible. Is that accurate? :cyclops:
I am beginning to accept that my phone was not meant to be rooted really in the sense that, yes, its Linux and you can, but it's basically been booby trapped by Lenovo and if you fall for the logic I did at first, and try relocking it at the first sign of strange behavior, you have to buy a new phone. Exactly what they want.

Sony bootloader exploits and/or bypass

Hi
I'm new to the forum but have been doing a fair amount of research. I am stuck now though and would like a bit of help.
My situation is that I have a Xperia XA1 ultra (I know I should post in that device specific forum but not much seems to be happening there) I have a very specific problem that I have treated like a forensics problem.
The phone is locked by a pattern which has been guessed by another person so many times that the gatekeeper only allows one entry per day provided the phone is charged otherwise the timer resets.
It has not been rooted and ADB is disabled.
I have connected to it through fastboot and what I can gather is that it is running Android Oreo.
The system details are as follows:
Product: XA1 Ultra G3221
Build Number: 48.1.A.0.129
Chipset: Mediatek MT6757 Helio P20
Bootloader: Locked
My research has led me to the possibility of loading a recovery image into the RAM of the phone and accessing ADB that way. I tried this with a TWRP image but obviously it didn't work. There is a company called Cellebrite that claims to be able to load it's own boot/recovery image into the bootloader and gain entry that way, however the license is something like £10,000. I'm definitely not a commercial customer.
The final option for me would be to dump the memory via JTAG or chipoff, the contents would be encrypted but I found a blog where somebody had managed to find the location of the gesture.key file while the system was encrypted. I can't remember what the site was called though, it took me ages to find last time.
My main questions are does Sony sign the boot image with it's own keys or does it use the standard Android Verified Boot?
Does Sony reuse the same keys for signing across devices? Likely not but maybe
Is there a way to send specific instructions to the RAM via fastboot?
Does anybody know of an exploit that could be used?
Is there a way to extract the boot.img and recover the Sony keys?
If there any other docs, resources or ways to get the data that could help, I will gladly read and/or try them. I think this forum is probably the biggest resource one though but after a while the specific information needed gets harder to find.
The main thing is that I don't unlock the bootloader and flash anything. It's all got to be live and non data damaging.
I tried MTPwn on the off chance that it would work but nope, it was a no go.
If there was a way to utilise the mediatek exploit to gain entry from fastboot that would be excellent, or to use fastboot to dump the memory.
Thanks for reading, I hope someone can help.

Your thread was quite confusing at first as I wasn't sure what to look for exactly :/
That being said, you have your phone locked and you want to unlock it. However you don't want to flash or reset your device, you don't have root permission, you don't have debugger mode on and you don't want to unlock the bootloader, correct?
Basically you're asking for the impossible...
All I can think of is FROST attack. See article for details and source code.
You can also send your device to your nearest Sony service center and they can probably fix it with no memory loss.
Other than that, you MUST hard reset your phone if you want it back.
However should you come to your mind and realize the reality of the situation where you shouldn't be picky about it then you can start with flashing custom recovery. Or using third-party programs like dr.fone.

XDHx86 said:
Your thread was quite confusing at first as I wasn't sure what to look for exactly :/
That being said, you have your phone locked and you want to unlock it. However you don't want to flash or reset your device, you don't have root permission, you don't have debugger mode on and you don't want to unlock the bootloader, correct?
Basically you're asking for the impossible...
All I can think of is FROST attack. See article for details and source code.
You can also send your device to your nearest Sony service center and they can probably fix it with no memory loss.
Other than that, you MUST hard reset your phone if you want it back.
However should you come to your mind and realize the reality of the situation where you shouldn't be picky about it then you can start with flashing custom recovery. Or using third-party programs like dr.fone.
Click to expand...
Click to collapse
Thanks for getting back to me, yes I realise it is asking for the impossible. I'll have a research around that article and see if I can find some information on how to write the program to dump the contents over USB. I tried Dr Fone but that only gave me the option of a hard reset.
My current line of attack is an exploit over USB called OATmeal, whereby a Raspberry Pi is used over OTG with a filesystem label of "../../data", it allows the filesystem of the phone to be mounted and data written off. It is a little complex and so I am struggling a bit with getting it to work. The team over at Project Zero have a good write-up of it so I'm following that and the POC at exploit-db to guide me through it.
I think I will be able to get the USB part to work but I'm not sure if I have to write a Java file to automatically run when /data is mounted, or if that's even possible.

Forenzo said:
My current line of attack is an exploit over USB called OATmeal
Click to expand...
Click to collapse
Not to make you frustrated, but this is an old exploit and I highly doubt it'd work on your device, unless your device security patch is older than 9-2018.
And you can't rollback on your security patch.
You should really consider flashing TWRP or other custom recovery. You have no other option.

XDHx86 said:
Not to make you frustrated, but this is an old exploit and I highly doubt it'd work on your device, unless your device security patch is older than 9-2018.
And you can't rollback on your security patch.
You should really consider flashing TWRP or other custom recovery. You have no other option.
Click to expand...
Click to collapse
Fortunately the device hasn't been updated since around 2-2018 or 3-2018 so any exploit I can find from then onwards that I can use will be great. I really do get that the only realistic option is to unlock the bootloader and flash the recovery but the data needs to be recovered and I absolutely don't want to wipe it.
If I can't do it then it will gather dust until the end of time...

It seems that no matter what I say you won't realize the situation you are in.
I can only suggest to NEVER mess with the phone circuits or the motherboard. No matter which stupid yoututbe tutorial you saw. Those guys are douchebags who only know how to get views and don't care for whatever you/they do to your device.
Needless to say messing with the circuits or the motherboard require dexterity and experience which I'm positive you don't have.
As I said before if you send it to an authorized service center, then they can help you with it without memory loss.
Sending you device to a service center isn't an insult or an act of low self esteem. Service centers exist for a reason, and they're basically geeks who are too passionate about electronics and decided to make a living out of it.
Or maybe you can somehow use the EDL mode on the phone.
In Qualcomm devices the EDL mode is locked and can only be accessed by an authorized person who have the security code of your device. I don't know if it even exist in MTK devices.
Should you actually manage to boot into EDL mode - Assuming it exists and is unlocked - then BEWARE: EDL mode is very low level and any command can directly affect the kernel or compromise the system. Don't use commands you're not sure what do they do.
You can use EDL mode to recover the data from the phone then wipe it clean, then restore the data.
You cannot access memory with EDL mode, but you can access the current image on your device. And from which you can get the key file.
EDL mode is a very very powerful tool (Much more powerful than debugging, fastboot, or anything you may know of) as it doesn't need unlocked bootloader to use it and through which you can do anything to your device including flashing other ROMs.
Good luck on your impossible quest. Make sure to post updates should you find yourself stuck.