[TUT] Flashing Himalaya from SD card

[utak3r]

In nowadays HTC devices flashing from a SD card is a trivial task, just copy your ROM image to the card and boot it... Unfortunately, with elder devices, like with Himalaya for example, it's different - every image to be flashed have to have a special signature, which is individual not only for your device, but... for the given SD card aswell! :eek:


1. Getting a header.

How to get it? You have to make a backup of your actually flashed ROM. You'll need an USB cable and your device in a bootloader mode. Make a backup with below command:


password BOOTLOADER
Pass.
USB>d2s
SD:Waiting for card insert.........

CMD3 for SD, it's OK, ready to get RCA from response.

SD:Detected one card

SD:ready for transfer OK

pc->drive.total_lba=F5800
pc->drive.num_heads=0
pc->drive.sec_p_track=0
pc->drive.num_cylinders=0
pc->drive.block_size=200
pc->drive.features=0
pc->drive.RCA=2
pc->drive.drv_type=40000000
pc->drive.securedAreaSize=0
pc->drive.securityDrv=0
pc->drive.busWidth=1
pc->drive.erasedSize=0
Total card size=1EB00000

SDCARDD2S+,cStoragePlatformType=FF

************************************************** ************************************************** ***************************
Store image to SD/MMC card successful.

USB>



Done... but when you try to read this card, it shows it's not written in the meaning of a file - it's written sector by sector! Normally you would use ntrw for reading that into a normal file, but it has one major flaw: it dumps a whole card, so if you had 1GB card, you gonna get 1GB file... and that's why our beloved itsme wrote a small utility called psdread (and psdwrite, too), which I'm including in this tutorial.

Using this utility you have to read a header first. Assuming your card reader got a letter m: from your system (that's letter I have assigned to my card reader), just type:


c:>psdread.exe m: 0 0x19c


so you get something like this:


00000000: 48 49 4d 41 4c 41 59 41 53 20 20 20 20 20 20 20 HIMALAYAS
00000010: 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 0000000000000000
00000020: 31 2e 30 36 20 20 20 20 20 20 20 20 20 20 20 20 1.06
00000030: 78 7e a8 50 96 f5 45 3b 13 0d 89 0a 1c db ae 32 x~.P..E;.......2
00000040: 20 9a 50 ee 40 78 36 fd 12 49 32 f6 9e 7d 49 dc 1.P..x6..I2..}I.
00000050: ad 4f 14 f2 44 40 66 d0 6b c4 30 b7 32 3b a1 22 .O..D.f.k.0.2;..
00000060: f6 22 91 9d e1 8b 1f da b0 ca 99 02 b9 72 9d 49 .............r.I
00000070: 2c 80 7e c5 99 d5 e9 80 b2 ea c9 cc dd 00 4c f2 ,.~...........L.
00000080: 53 41 30 30 e1 dc d6 ae 83 90 49 f1 f1 ff e9 eb SA00......I.....
00000090: b3 a6 db 1e 87 0c 3e 77 24 42 0d 1c 06 b7 47 de .......w$B....G.
000000a0: 6d 12 4d c8 43 2e cb a6 1f 03 5a 7d 09 38 25 1f m.M.C.....Z}.8%.
000000b0: 5d 9f d4 fc 96 f5 45 3b 13 0d 89 0a 1c d3 90 2d ].....E;.......-
000000c0: 48 9a 50 ee 40 78 36 fd 12 49 32 f6 9e 81 49 dc H.P..x6..I2...I.
000000d0: ad 4f 14 f2 44 40 66 d0 6b c4 30 b7 3c 84 f2 87 .O..D.f.k.0.....
000000e0: 61 49 d1 4f 0a d8 16 e7 72 e6 bb 12 84 34 a6 77 aI.O....r....4.w
000000f0: 02 37 e4 97 2c 74 cb c9 12 68 33 74 9e ad 87 d5 .7..,t...h3t....
00000100: fa 16 bb 11 ad ae 24 88 79 fe 52 db 25 43 e5 3c ......$.y.R.%C..
00000110: b3 12 4d c8 43 bb 8b a6 1f 03 5a 7d 09 38 25 1f ..M.C.....Z}.8%.
00000120: 5d d4 cb fc 96 f5 45 3b 13 0d 89 0a 1c db ae 32 ].....E;.......2
00000130: 20 9a 50 ee 40 78 36 fd 12 49 32 f6 9e 7d 49 dc ..P..x6..I2..}I.
00000140: ad 4f 14 f2 44 40 66 d0 6b c4 30 b7 32 3b a1 22 .O...D.f.k.0.2;.
00000150: f6 22 91 9d e1 8b 1f da b0 ca 99 02 b9 72 9d 49 .............r.I
00000160: 2c 80 7e c5 99 d5 e9 80 b2 ea c9 cc 53 bf 67 d6 ,.~.........S.g.
00000170: bf 14 d6 7e 2d dc 8e 66 83 ef 57 49 61 ff 69 8f ...~-..f..WIa.i.
00000180: 48 54 43 53 41 30 30 34 30 30 30 30 30 31 46 43 HTCSA004000001FC
00000190: 30 30 30 30 46 45 46 39 46 32 43 44 0000FEF9F2CD


Well, it could be the end of the first part of this tutorial, but let's make a full backup file. Let's take a look at the end of this block:


HTCS A0040000 01FC0000 FEF9F2CD


where:
A0040000 - location of your OS image in a device
01FC0000 - size of the actual OS (decimal 33292288 bytes)
FEF9F2CD - checksum

On the very end of the ROM image there're 4 bytes more (HTCE), so the size of the whole image would be: 19C + 1FC0000 + 4 = 0x1FC01A0 bytes total.
Now you can make your backup image with following commands:


c:\> psdread.exe m: 0 0x1FC01A0 os.img


While the header itself (needed for the next steps of this tutorial) will be created with:


c:\> psdread.exe m: 0 0x19c header.img



2. Getting a bare OS.nb file

While in nowadays kitchens a bare OS.nb file os normal, you probably haven't even seen this file... so how to get it?
Normal ROM image is in nk.nbf file, which is XOR-encoded actual image. Decode it with:


c:\> xda2nbftool.exe -x nk.nbf nk.nba 0x20040304


so you have nk.nba file now. You can dismantle it now with:


c:\> dump.exe -o 0x40040 -l 0x1FC0000 nk.nba os.nb


and you have your OS.nb :)


3. Making a flashing ready image file.

Putting this all to a final file is trivial... it's just our header + OS.nb:


c:\> type header.img > SD_img.img
c:\> type OS.nb >> SD_img.img


And in the end you get SD_img.img file, which you can transfer to your SD card with:


c:\> psdwrite m: SD_img.img



I'd like to recommend using some good hexeditor.. I recommend you really great freeware one, called HxD (you can get it here (http://mh-nexus.de/en/)). It can even operate on disk images and disks themselves.


4. Flashing your device.

Well, this will be the most tough part...



Well, not really :D

Turn off your Himalaya (really! the best would be to put out your battery), put your SD card in and turn it on. It will display a message: "press power to flash". Just press the power button and wait until it finishes. YOU CAN'T ABORT THE PROCESS, DON'T TOUCH IT! GO AND MAKE YOURSELF A COFFEE OR TEA OR GO FOR A SMOKE!!!

and... that's it :cool:
happy flashing!

[Nokser]

good work ;) very thank's

[gopi159]

Atlast !!!!!!!!!
u r my saviour ........
Many Many Thanks for the steps......
I been asking and waiting a proper procedure to flash from sd card especially for xda2.
I will give a try and see if am succeeding.

well actually my usb is broken that is the reason am looking to flash from sd card.
In that case, can anyone post a lasted stable rom which is already ready to flash from SD Card ?
should the same SD card should be used ?
will it not work if I copy the SD image to a different SD card and flash it?

Many thanks utak3r

[Ather]

WOW!!! amazing tut :D

Stickied it!

[utak3r]

should the same SD card should be used ?
will it not work if I copy the SD image to a different SD card and flash it?


As I said it in this tut - the header is unique for every device and every SD card, so... no, you can't download some image and flash it, sorry. Your bootloader will say: "not allowed" and that's it.

I'm working now on getting this header from a device without a cable - will I succeed? I don't know, last time I tried (about 2 years ago) I failed... :(

[abdelamine]

i cant understand all this
can you explain how to flash a new rom with a sd card only without cable

[utak3r]

i cant understand all this
can you explain how to flash a new rom with a sd card only without cable

:rolleyes:
You can do it only if you have this header I'm talking above. If you don't have it - no flashing, unfortunately.

[12omy]

How long time to be need it for flashing from SD card?

did we can charging battery while flashing from SD Card?
because we have old device with a short period of prodigal battery condition

[utak3r]

Well, I can't remember it now, but it's faster than flashing through a cable. It shouldn't be longer than 20 minutes AFAIR.

And no, there's no charging while in this mode...

[Avis]

I'm working now on getting this header from a device without a cable - will I succeed? I don't know, last time I tried (about 2 years ago) I failed... :(
I wish You luck in this task!
I think, that there must be the way to generate SD header information.
And thanx for such good tutorial - now I can make SDImage without using of sdtool.pl

[utak3r]

I wish You luck in this task!
I think, that there must be the way to generate SD header information.


well, thanks :)
As for now I can dump ROM, but with my way, so it doesn't contain this header... it has to be generated by bootloader. So probably I'll end with decompiling a bootloader code :rolleyes:

[abdelamine]

HOW CAN I write password BOOTLOADER and where

[yhenfloresca15]

hi utak3r,

on the first part of the tutorial, how can we get this header?
where can we actually put this code? is it on command prompt or on device?

thanks...


got it.. use hyperterminal...

[utak3r]

HOW CAN I write password BOOTLOADER and where

while you're in bootloader mode connect with your hima with mtty... and that's where you can issue various commands.

[koco_keren]

any have easy tool..????

[boak]

my usb connector is really broken, is there any solution to do it without using a pc and usb connection?

thanks

[Nokser]

You have Vista, XP???:confused:

[abdelamine]

same question
& i have xp & vista

[nesty24]

As I said it in this tut - the header is unique for every device and every SD card, so... no, you can't download some image and flash it, sorry. Your bootloader will say: "not allowed" and that's it.

I'm working now on getting this header from a device without a cable - will I succeed? I don't know, last time I tried (about 2 years ago) I failed... :(

Is every header really unique? let us say, there are 1000 hima, so there are 1000 different headers?

If the answer is not, maybe we can flash the device using only our SD card without the help of usb connection. someone may post their ready-made file then try to flash it, if fails, try another.

I just want to make a possibilty coz my usb connection was broken too.

[utak3r]

you can go and try to collect few headers... but I really doubt :(

[gugi_sat]

Hi gurus

any further progress on this project

[fxjade]

Is there any possibility that we could establish the necessary serial connection with this ( http://bluetooth.i-networx.de/guide_e.html ) to dump whatever info is needed to the SD card without entering bootloader mode?

Just wondering if we can fetch it with some other program while the PDA is running...

[utak3r]

the only way would be hacking bootloader and loading it as a normal program and force it to dump this info...

the problem is spare time.... :rolleyes: as always.

[fxjade]

So I guess there's no way of using bluetooth from the bootloader anyway...?

[utak3r]

absolutely no - unfortunately.

[nathrinder]

Thank you so much for this tutorial. I already had the sd card header. I just flashed my himalaya and it works great ! Just to let others know : the message "download failed - checksum error" is absolutely normal (we don't know yet how to calculate that checksum).

[m_tello77]

Thank you for the full detailed illustration, I have done it on a MMC card. every thing went OK, but when I put the MMC card and turned ON my himalaya, nothing happened.
First, I tried using a 2G SD card, but got an error when applying d2s command.. so I tried the MMC,
please advise, and should I format the SD before using?
thnks.

[utak3r]

Try 512MB or smaller card... don't know about MMC, but it should be ok, too. The problem with bigger ones is they have bigger sector size than those below 512MB.

[nathrinder]

Just to let you guys know, I used a 1 GB SD card and it worked perfect. Don't forget to start your himalaya in bootloader mode (Press "Power" + "Enter" + "Reset" at the same time).

[kalya]

Hi,

I understand that there is no way at present to flash Himalaya through SD card unless we have this 'unique' header.Something to do with the old HTC devices.

But new pocket pc like ASUS p320 are usually updated via SD card and it is so easy as the manufacturer provides the file,just copy on card and DONE.

Please ...developers find a way to bypass this header thing or... is there any way to get this header info without the USB port connection.(Is it a really silly question}:D

[wboldus]

utak3r, you're Awesomely awesome buddy, I owe you one !

:D

[utak3r]

Please ...developers find a way to bypass this header thing or... is there any way to get this header info without the USB port connection.(Is it a really silly question}:D


It would be possible after cracking a bootloader and putting it into your device.
Still.... it would require flashing this bootloader via a cable :D

[kalya]

Why it is possible with the new devices (I have done with Asus p320 ) and not with the old devices?

[utak3r]

It's because new devices don't perform any check against the image to be flashed... but they do have CIDlock, which Himalaya doesn't have.

[Nokser]

utak3r, you're Awesomely awesome buddy, I owe you one !

:D
This is Sugar....:p

[_Danny_]

Hi,

Since i don't have any windows pc's i would like to use this method to flash my himalaya. I'm running linux on my PC and have managed to create the SD image. I've extracted the header information from the image using dd and it looks allright. The thing is, the info in my header indicates my os is only approx. 3Mb:

HTCS6000000000300000E0D995D9

00300000 = 3.145.728 bytes

This is rather a big difference from the ~30Mb in the example? My device has probably never been flashed before and is still running WM2003, could that explain the difference?

If these values are correct, does anyone know how to reproduce step 2 in linux? I have tried to compile the xda2nbftool sources but got too many errors (256!) :(

Any help would be appreciated!

[nathrinder]

You are right, WM2003 does not have the same structure that WM5 or WM6. It stores all program data in RAM. Part of the himalaya's flash memory is used for "ExtROM" which was a place to store program cabs, in case you reset your device.
If I were you, I would replace that line with the one in the tutorial since it includes the right length for new images (and it should work with the one you are trying to flash, as it worked for me) :
HTCSA004000001FC0000FEF9F2CD
The last 4 bytes (the checksum) aren't very important if I remember well : they are only used to check the image at the end of the flashing process, but we don't know how to calculate it. You'll get an error message at the end of the process, but it shouldn't be a problem.
xda2nbftool is used to decrypt the os image. You could try running it with wine, or you could install Windows or maybe ReactOS in a virtual machine like VirtualBox and run it inside. If this doesn't work, you can send me the image, and I'll decrypt it for you (pm me the link, and I'll send you one back).

[_Danny_]

Ahum ... to my (huge) surprise i can actually run the (.exe) commands from the command prompt (!!!) :o. I'm not sure if wine has anything to do with that, probably has? Anyhow, i extracted the os.nb file from a 6.5 nbf ... i'll try the flashing tomorrow ...

[nathrinder]

Yeah, on some linux distributions, you can directly run exe files. It still uses wine. It works quite well, especially if it doesn't use recent win32 libraries. Good luck with flashing your device. Remember to do a backup of your SD image, just in case something goes wrong... ;)

[langitluna]

Very kind of you ... Its seem nice ... I want to flash my xda ii himalaya wm2003 to wm6 but cant because USB cant recognize by PC.


Regarding on how to get header ...can I get its header of my himalaya device by Bloetooth port .. as now I still can syncronize via bluetooth but can not via USB.

I tried use mtty.exe .. and runing on port 4. .. Then how i get the header ?

Thanks from Jakarta

[utak3r]

Regarding on how to get header ...can I get its header of my himalaya device by Bloetooth port .. as now I still can syncronize via bluetooth but can not via USB.

I tried use mtty.exe .. and runing on port 4. .. Then how i get the header ?


.....
The header can be obtained only from bootloader mode. How can you connect to bluetooth in bootloader?....
in other words: no, you can't do this that way. Just make your usb drivers working.

[langitluna]

.....
The header can be obtained only from bootloader mode. How can you connect to bluetooth in bootloader?.... in other words: no, you can't do this that way. Just make your usb drivers working.

Thanks friend for your explanation. I appreciate very much.

Its mean that any himalaya or PDA which has the usb part has been broken will impossible on room flashing even via storage card ? (in case that no room backup before) ? Then pity me on wm2003 se only ... hiksssss :((

And one more thing friend .. when I run mtty.exe on my PC, via bluetooth (Com Port) ... and Its succesed ... How do I type the syntax command ? See the image
http://gi172.photobucket.com/groups/w5/K2VS9LAYOX/th_mtty_exe_comport.jpg (http://gs172.photobucket.com/groups/w5/K2VS9LAYOX/?action=view&current=mtty_exe_comport.jpg)

Regard from Jakarta

[utak3r]

Its mean that any himalaya or PDA which has the usb part has been broken will impossible on room flashing even via storage card ?


you see - it was some kind of "protection"... :rolleyes:


And one more thing friend .. when I run mtty.exe on my PC, via bluetooth (Com Port) ... and Its succesed ... How do I type the syntax command ?


hmm... maybe check the echo setting in mtty... although I dunno - I've never tried to connect via BT ;)

[mphoneclinic]

[QUOTE=utak3r;3317252]In nowadays HTC devices flashing from a SD card is a trivial task, just copy your ROM image to the card and boot it... Unfortunately, with elder devices, like with Himalaya for example, it's different - every image to be flashed have to have a special signature, which is individual not only for your device, but... for the given SD card aswell! :eek:


1. Getting a header.

How to get it? You have to make a backup of your actually flashed ROM. You'll need an USB cable and your device in a bootloader mode. Make a backup with below command:


password BOOTLOADER
Pass.
USB>d2s
SD:Waiting for card insert.........

CMD3 for SD, it's OK, ready to get RCA from response.

SD:Detected one card

SD:ready for transfer OK

pc->drive.total_lba=F5800
pc->drive.num_heads=0
pc->drive.sec_p_track=0
pc->drive.num_cylinders=0
pc->drive.block_size=200
pc->drive.features=0
pc->drive.RCA=2
pc->drive.drv_type=40000000
pc->drive.securedAreaSize=0
pc->drive.securityDrv=0
pc->drive.busWidth=1
pc->drive.erasedSize=0
Total card size=1EB00000

SDCARDD2S+,cStoragePlatformType=FF

************************************************** ************************************************** ***************************
Store image to SD/MMC card successful.

USB>



Done... but when you try to read this card, it shows it's not written in the meaning of a file - it's written sector by sector! Normally you would use ntrw for reading that into a normal file, but it has one major flaw: it dumps a whole card, so if you had 1GB card, you gonna get 1GB file... and that's why our beloved itsme wrote a small utility called psdread (and psdwrite, too), which I'm including in this tutorial.

Using this utility you have to read a header first. Assuming your card reader got a letter m: from your system (that's letter I have assigned to my card reader), just type:


c:>psdread.exe m: 0 0x19c


so you get something like this:


00000000: 48 49 4d 41 4c 41 59 41 53 20 20 20 20 20 20 20 HIMALAYAS
00000010: 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 0000000000000000
00000020: 31 2e 30 36 20 20 20 20 20 20 20 20 20 20 20 20 1.06
00000030: 78 7e a8 50 96 f5 45 3b 13 0d 89 0a 1c db ae 32 x~.P..E;.......2
00000040: 20 9a 50 ee 40 78 36 fd 12 49 32 f6 9e 7d 49 dc 1.P..x6..I2..}I.
00000050: ad 4f 14 f2 44 40 66 d0 6b c4 30 b7 32 3b a1 22 .O..D.f.k.0.2;..
00000060: f6 22 91 9d e1 8b 1f da b0 ca 99 02 b9 72 9d 49 .............r.I
00000070: 2c 80 7e c5 99 d5 e9 80 b2 ea c9 cc dd 00 4c f2 ,.~...........L.
00000080: 53 41 30 30 e1 dc d6 ae 83 90 49 f1 f1 ff e9 eb SA00......I.....
00000090: b3 a6 db 1e 87 0c 3e 77 24 42 0d 1c 06 b7 47 de .......w$B....G.
000000a0: 6d 12 4d c8 43 2e cb a6 1f 03 5a 7d 09 38 25 1f m.M.C.....Z}.8%.
000000b0: 5d 9f d4 fc 96 f5 45 3b 13 0d 89 0a 1c d3 90 2d ].....E;.......-
000000c0: 48 9a 50 ee 40 78 36 fd 12 49 32 f6 9e 81 49 dc H.P..x6..I2...I.
000000d0: ad 4f 14 f2 44 40 66 d0 6b c4 30 b7 3c 84 f2 87 .O..D.f.k.0.....
000000e0: 61 49 d1 4f 0a d8 16 e7 72 e6 bb 12 84 34 a6 77 aI.O....r....4.w
000000f0: 02 37 e4 97 2c 74 cb c9 12 68 33 74 9e ad 87 d5 .7..,t...h3t....
00000100: fa 16 bb 11 ad ae 24 88 79 fe 52 db 25 43 e5 3c ......$.y.R.%C..
00000110: b3 12 4d c8 43 bb 8b a6 1f 03 5a 7d 09 38 25 1f ..M.C.....Z}.8%.
00000120: 5d d4 cb fc 96 f5 45 3b 13 0d 89 0a 1c db ae 32 ].....E;.......2
00000130: 20 9a 50 ee 40 78 36 fd 12 49 32 f6 9e 7d 49 dc ..P..x6..I2..}I.
00000140: ad 4f 14 f2 44 40 66 d0 6b c4 30 b7 32 3b a1 22 .O...D.f.k.0.2;.
00000150: f6 22 91 9d e1 8b 1f da b0 ca 99 02 b9 72 9d 49 .............r.I
00000160: 2c 80 7e c5 99 d5 e9 80 b2 ea c9 cc 53 bf 67 d6 ,.~.........S.g.
00000170: bf 14 d6 7e 2d dc 8e 66 83 ef 57 49 61 ff 69 8f ...~-..f..WIa.i.
00000180: 48 54 43 53 41 30 30 34 30 30 30 30 30 31 46 43 HTCSA004000001FC
00000190: 30 30 30 30 46 45 46 39 46 32 43 44 0000FEF9F2CD


thanks for the tut look good.

BUT i cannot get the mtty to talk to USB port, when i select the connection type ---> choose USB port---> "usb port cannot open" of cause the Hami is in BOOTLOADER Mode "USB" displayed.

Can anyone instruct me how to use mtty or how to DUMP ROM from one Hami to another Hami.

thanks
:)

[utak3r]

In ActiveSync you have to disable the USB connection.

[mphoneclinic]

2. Getting a bare OS.nb file

While in nowadays kitchens a bare OS.nb file os normal, you probably haven't even seen this file... so how to get it?
Normal ROM image is in nk.nbf file, which is XOR-encoded actual image. Decode it with:


c:\> xda2nbftool.exe -x nk.nbf nk.nba 0x20040304


so you have nk.nba file now. You can dismantle it now with:


c:\> dump.exe -o 0x40040 -l 0x1FC0000 nk.nba os.nb


and you have your OS.nb :)


3. Making a flashing ready image file.

Putting this all to a final file is trivial... it's just our header + OS.nb:


c:\> type header.img > SD_img.img
c:\> type OS.nb >> SD_img.img


And in the end you get SD_img.img file, which you can transfer to your SD card with:


c:\> psdwrite m: SD_img.img



I'd like to recommend using some good hexeditor.. I recommend you really great freeware one, called HxD (you can get it here (http://mh-nexus.de/en/)). It can even operate on disk images and disks themselves.


4. Flashing your device.

Well, this will be the most tough part...



Well, not really :D

Turn off your Himalaya (really! the best would be to put out your battery), put your SD card in and turn it on. It will display a message: "press power to flash". Just press the power button and wait until it finishes. YOU CAN'T ABORT THE PROCESS, DON'T TOUCH IT! GO AND MAKE YOURSELF A COFFEE OR TEA OR GO FOR A SMOKE!!!

and... that's it :cool:
happy flashing!

thank you,

now i am got stuck here STEP 2
C:\>xda2nbftool.exe -x nk.nbf nk.nba 0x20040304
nk.nbf: No such file or directory

thanks for more help please

[utak3r]

nk.nbf: No such file or directory


:rolleyes:
people, learn reading messages!!

[mphoneclinic]

:rolleyes:
people, learn reading messages!!

still dont get it, i had been reading entire post here.

please explain the step 2 with xda2nbftools..........

much appreciated

thanks

[utak3r]

Just check if you have this nk.nba file.... if not then you didn't succeeded the first step.

[mphoneclinic]

Just check if you have this nk.nba file.... if not then you didn't succeeded the first step.

thanks i dont have nk.nba file, from the very first step to step 2, i dont understand how to get nk.nba any where.

the attachment are what i have done.
if you could rectify for me will be much appreciated.

thanks

[utak3r]

The first part you've accomplished probably well (you've extracted your header).
Now you want to prepare a new ROM to flash, isn't it? So you have to have some nk.nbf file (which is a ROM you want to flash). Do you have it?... Give me what you're getting from xda2nbftool.exe -x nk.nbf nk.nba 0x20040304

[mphoneclinic]

The first part you've accomplished probably well (you've extracted your header).
Now you want to prepare a new ROM to flash, isn't it? So you have to have some nk.nbf file (which is a ROM you want to flash). Do you have it?... Give me what you're getting from xda2nbftool.exe -x nk.nbf nk.nba 0x20040304

Oh, ok need the other rom that contain nk.nbf file.

from what i first thought is that i can clone a rom from one phone to the others.

because i been trying to find this version: 4.20.0 (build 13252) or older eg. rom: 1.53 or 1.60......everywhere (NO LUCK)

IF YOU HAVE Please help me out, reward will donated for your help.

please i really need help.:(

thanks

[utak3r]

Is this ROM PPC2003 or >= WM5?

[mphoneclinic]

Is this ROM PPC2003 or >= WM5?

hi,

not WM2003 or 5 or 6....... its the ealrier windows CE? any rom 1.50 to rom 1.66WWE.

therefore i thought this method put by you is can CLONE ROM from an OLD one.

waiting for your reply with the ROM thanks

[deyrnizeshed]

DUDES HOW DO YOU USE THE PSDREAD.EXE? I cant open it

[deyrnizeshed]

I can't open the psdread.exe HELP!

[deyrnizeshed]

I can't use psdread.exe

[muckelmaus]

I can't use psdread.exe

Read Post#1 for usage. (On the Desctop/Pc , not PPC)

[deyrnizeshed]

i already did the thing with the MTTY ... the next step is readin the header.. how?

where should i type this?
c:>psdread.exe m: 0 0x19c
tnx...

[muckelmaus]

I never did that, because I never needed flashing via SD-card, but I think, you have to open a DOS window on your PC and type it.

[oasisnhoa08]

hello...
I already flash the phone, using this procedure, and I got the 100% Checksum completed...

But the phone is still on BOOTLOADER mode... What Should I do?

TIA

[flyboyovyick]

hello...
I already flash the phone, using this procedure, and I got the 100% Checksum completed...

But the phone is still on BOOTLOADER mode... What Should I do?

TIA

Press Reset Button and hold down Camera Button + Record Button.
Hold them pressed until the "Boot Options" menu appears on the screen.

Select the options as follows:
(for selecting use Record Button, change values with Camera Button)

Enable KITL -> NO
Clean Registry Hive -> YES
Format Storage -> YES

When done, press DPad/Action Button and wait until OS starts.

[flyboyovyick]

double post!!!!!!!!!!!!!

[flyboyovyick]

hello...
I already flash the phone, using this procedure, and I got the 100% Checksum completed...

But the phone is still on BOOTLOADER mode... What Should I do?

TIA

Press Reset Button and hold down Camera Button + Record Button.
Hold them pressed until the "Boot Options" menu appears on the screen.

Select the options as follows:
(for selecting use Record Button, change values with Camera Button)

Enable KITL -> NO
Clean Registry Hive -> YES
Format Storage -> YES

When done, press DPad/Action Button and wait until OS starts.

searching helps !

[oasisnhoa08]

Press Reset Button and hold down Camera Button + Record Button.
Hold them pressed until the "Boot Options" menu appears on the screen.

Select the options as follows:
(for selecting use Record Button, change values with Camera Button)

Enable KITL -> NO
Clean Registry Hive -> YES
Format Storage -> YES

When done, press DPad/Action Button and wait until OS starts.

searching helps !
Hi...

Thanks for your Reply...

But after that process, when I do this Press Reset Button and hold down Camera Button + Record Button.
Hold them pressed until the "Boot Options" menu appears on the screen.

nothing happens... I can't see this message Enable KITL -> NO
Clean Registry Hive -> YES
Format Storage -> YES

Thanks In Advance

[oasisnhoa08]

Hello...

may I know which NBF file should I use?...

somebody wants to help here...

Thanks In Advance

[aeroflyluby]

I wonder that we can connect MTTY, then from menu open Auto, choose downloading first file to os.nb and then type lnb.
I tried but it says me Not allow operation

[KAASHP]

hay bro can you send me sd card headers ????/
coz i'm unable to get it.....
send it on kartikjbtech@gmail.com
thanx in advanced.

[aeroflyluby]

hay bro can you send me sd card headers ????/
coz i'm unable to get it.....
send it on kartikjbtech@gmail.com
thanx in advanced.

You have to get those from your himalaya and your sdcard.
Why do you can't do that?

[KAASHP]

yeah it's true bro but i can'n get anything when connected to the mtty..

[aeroflyluby]

yeah it's true bro but i can'n get anything when connected to the mtty..

Why? explain it

[omendacat]

same as with dead end then.. if the usb conector is broken.. doesn't solve anything.. :confused: