FrankenKaiser SPL Loader

[jockyw2001]

May 24th, 2008

FrankenKaiser SPL Loader

This is a fast application image downloader which can download e.g. spl or android to the phone when the phone is in dload mode. This can for example be useful for developers to test a SPL from another device w/o the need to flash them :D

================================================== ====
DISCLAIMER: This method involves erasing SPL & OS and requires correct data entry by the user. I will not take any responsibility for any malfunctions and or damages caused by using this method and software.
================================================== ====

Prerequisites:
- a *security unlocked* HTC MSM7x00 device
- QC diag drivers installed (e.g. MotoQ)

This was tested with a Kaiser, Niki and Wings

Steps are:
1 power down
2 hold green send key and power on, the phone will enter radio bootloader (oemsbl)
3 connect with MTTY (COMn) and type "dload" to put phone in dload mode
4 close MTTY, reconnect USB, run my new downloader in a CMD box, e.g. "./FrankenKaiser-SPL-Loader.exe /dev/com4 SPL1.56-KAIS-unbricker.nb (substitute com4 by the com port of your qc diag driver)
5 hold send key and press soft reset with stylus (on phones like Nike this is not possible, in that case you must add "setboot 1" to step 3 before typing "dload" and in step 7 add "setboot 0" before typing "dload")
6 connect with MTTY (COMn) and type "mw 901708 1 e1a00000"
7 type "cego" (press and hold camera to enter tricolor bootloader mode)

Have fun!

[thesire]

may i be one of the first to say Thank you.

jumpspl, supercid and security unlocker, frankenkaiser .. man you are owesome.

A truly gifted individual and thank you for all your hardwork.

[arpy]

Thanks, Jockyw2000, your work really rocks, but...
OEMSPL did not work for me (HTC Wings)
Ive hold down the green button and tapped the PowerButton=>Boots normal.

Offtopic;
My Question is; Is it possible to "Switch" the GPIO 0x5c (Kaiser SimDoor) from 0 to 1 manually?
Because i want to "port" a KaiserRom over to my Wings, but ive getting trouble with this annoying "Sim Door Open, please close it.Phone shuts down in 10 seconds..." warning.:mad:

[jockyw2001]

Thanks, Jockyw2000, your work really rocks, but...
OEMSPL did not work for me (HTC Wings)
Ive hold down the green button and tapped the PowerButton=>Boots normal.

Your Wings is not security unlocked, so you can't enter oemsbl that way.


Offtopic;
My Question is; Is it possible to "Switch" the GPIO 0x5c (Kaiser SimDoor) from 0 to 1 manually?
Because i want to "port" a KaiserRom over to my Wings, but ive getting trouble with this annoying "Sim Door Open, please close it.Phone shuts down in 10 seconds..." warning.:mad:
Afaik that's possible.

[arpy]

Security Unlocked?!?

Ähh...ok...isnt enought to flash your HardSPL (http://forum.xda-developers.com/showthread.php?t=356295)?

...but youll give me some hope...now i digg deeper into this phantastic Forum...:eek:

[kyphur]

Just a quick question Jocky....

How does this differ from using MTTY to upload SPL to our Kaiser?

[jockyw2001]

How does this differ from using MTTY to upload SPL to our Kaiser?
How do you use MTTY to upload a SPL then ?

[kyphur]

How do you use MTTY to upload a SPL then ?

I'm asking with all due respect. I haven't done it. To be honest I haven't flashed anything with MTTY since I had my Hermes last year but I was under the impression that we could.

If we can't then you have answered my question as the difference is exactly that!

In the quest for knowledge we all sometimes ask apparently dumb questions...

[xmoo]

So with this thing I can make my deviece look as a MSM7500. To boot up HaReT all the time???

[cmonex]

I'm asking with all due respect. I haven't done it. To be honest I haven't flashed anything with MTTY since I had my Hermes last year but I was under the impression that we could.

If we can't then you have answered my question as the difference is exactly that!

In the quest for knowledge we all sometimes ask apparently dumb questions...


obviously you can, the RUU uses mtty commands to download the images.

[er1cc]

When I run FrankenKaiser-SPL-Loader.exe , WindowsXP closed DOS window with error.
What is wrong ?
WBR !

[er1cc]

Sorry, duble.

[fullarmor]

what's at address 901708 and why change it to E1 A0?

[gsmhackerns]

wait ....to resolve this .

[DaveShaw]

I use hard spl and install radio to unlock my htc tytn bat after this i flash with this rom :RUU_Kaiser_HTC_WWE_1.25.405.0_22.39.82.00.b_1.27. 04.15_Test

My phone complete all proces 100% bat after this can not boot or charge no ligh no bootloader as i can see now it have only radio bootloader (oemsbl) and i found and install driver and see in device menager com ports quacom diagnostic interface 6000 and qualcom nmea device...Can you help me to unbrick my kaiser with frankenkaiser spl loader i will donate with paypal you please...pm fuull instuction or can you create for me exe file with all .thanks.wait you.:confused:

Did you security unlock your device before this happened?

Ta
Dave

[gsmhackerns]

Did you security unlock your device before this happened?

Ta
Dave

i install hard spl unlock device bat after flash complete 100% my phone always go in oemspl can not go in normal bootloader or power on.

[pyraxiate]

Since it doesnt seem as though you unlocked the phone, just download an oem rom/radio combo for the phone from the operator it belongs on ( IE , if it is an ATT TILT, download from HTC the latest rom off their website JUST for the att tilt )

This should fix you up :)

[mobilend]

Did you security unlock your device before this happened?

Ta
Dave

Dave i have same prob...device allready unlocked before flash... no power on, no bootloader mode... on pc recognized like diagnostic.... what can i do?