Wings SSPL and HardSPL

Search This thread

jockyw2001

Inactive Recognized Developer
May 17, 2007
1,709
77
The attached SSPL and HardSPL are based on the Wings MFG SPL v0.91

- download the attached files
- REMOVE SIM and SD CARDS !!
- connect usb cable
- create a SPL backup by running spl-backup.bat from SPL-backup-kit (make sure you Wings is "application unlocked", run the attached SDA_ApplicationUnlock on PC)
- copy sspl-0.91-wings.exe to your device and run it
- after a few seconds "USB" appears on the display
- unplug and replug the usb cable
- if you only want to test the sspl try flashing the attached splash screen by running CustomRUU.exe from flash-splash-wings
- you can now flash the hardspl-0.91-wings.nbh by running CustomRUU.exe from flash-hardspl-wings
- after installing the uspl or hardspl you can flash any rom, cooked rom, radio or splash screen

Note:
The HardSPL is never overwritten which in case of flashing trouble is a great insurance. Should you want to flash another SPL or USPL you must run the SSPL.

Features:
  1. SuperCID / Security Level=0
  2. Does not check NBH signatures
  3. Based on 0.91 MFG bootloader, rtask, fat2sd, sd2fat enabled
  4. Accept any password
  5. Model ID check only 4 chars
  6. SPL overwrite DISABLED (to bypass, use sspl-0.91-wings.exe)
  7. Bypasses "Task 2A" (this formats entire flash which renders your Wings into a brick, we don't want that)
Important:
Use at your own risk! I'm not responsible for any damage to your device caused by using the attached files.

Credits:
Pof, Des, Olipro and arc.

Donations:
Any donation amount is greatly appreciated :)

Note:
I have also attached the htcrt_devices.ini file for Darksimpson's htc romtool
 

Attachments

  • sspl-0.91-wings.zip
    111.8 KB · Views: 7,061
  • flash-splash-wings.zip
    562.8 KB · Views: 5,536
  • SPL-backup-kit.zip
    219.9 KB · Views: 5,249
  • flash-hardspl-wings.zip
    664.7 KB · Views: 6,340
  • hardspl-0.91-wings.zip
    106.8 KB · Views: 6,005
  • htcrt_devices.zip
    889 bytes · Views: 4,023
  • SDA_ApplicationUnlock.zip
    96 KB · Views: 5,068
Last edited:
  • Like
Reactions: B-44

jockyw2001

Inactive Recognized Developer
May 17, 2007
1,709
77
forgive my stupid question, but what is sspl hardspl etc?
An SSPL allows you to flash a HardSPL. After flashing HardSPL you'll be able to flash any Wings ROM to your device! This tool will then allow you to change the ROM language, flash cooked ROMs, custom splash screens, etc...

The SSPL is only the vehicle to flash a HardSPL. The HardSPL will replace your current SPL. Your current SPL will not allow you to flash any ROM, except official ones which match your ModelID and VendorID (aka CID) :D
 

el_lo

Senior Member
Jun 25, 2007
116
3
Aye, I did it on my wings, and it worked perfectly (backup + splash screen) ;)
I was scared when I had to accept the flashing :eek:

The splash screen is :

"SmartMobility
Test Only
Not For Sale"


It's my proof :D :D

EDIT:: How can I have my original splash screen back ?
 
Last edited:

moneytoo

Recognized Developer
Feb 20, 2007
1,425
1,303
brouken.com
Great... and working :)

What parameters should we use in htc rom tool? Same as with Kaiser? (Only WING*****?)
 

jockyw2001

Inactive Recognized Developer
May 17, 2007
1,709
77
Thank you very much for testing the SSPL on Wings :)
I'm sure we will find your original splash screen back.
But please let us finish our main mission first :D

I will now upload the HardSPL in the my post. Please flash it on your device in the same way as the splash screen. It will be the last time that you will have to run the SSPL, because after flashing HardSPL your device is SuperCID :)

I will upload also Simpsons device.ini file which includes Wings device
 

el_lo

Senior Member
Jun 25, 2007
116
3
Fantastic work!!!

I flashed the HardSPL succesfully ;)
Hopefully, pre-production roms will have more free RAM as well as a working GPS :rolleyes: !
 

jockyw2001

Inactive Recognized Developer
May 17, 2007
1,709
77
I flashed the HardSPL succesfully ;)
Hopefully, pre-production roms will have more free RAM as well as a working GPS :rolleyes: !

Okay just to prove it is the HardSpl, can you go in bootloader mode and check if on display on top left corner it says "0.91-Hard".

It would also be good if you can flash another splash screen. Should now work fine w/o running SSPL :D
 

el_lo

Senior Member
Jun 25, 2007
116
3
Bootloader mode says "SPL-0.91 Hard" ;)
Where can I find a another good splash screen please?
 

moneytoo

Recognized Developer
Feb 20, 2007
1,425
1,303
brouken.com
I have flashed the test splash succesfully but now (after restart) I have troubles launching programs (such as sspl - so I cant flash rardspl now, resco viewer...). Weird...
 

jockyw2001

Inactive Recognized Developer
May 17, 2007
1,709
77
I have flashed the test splash succesfully but now (after restart) I have troubles launching programs (such as sspl - so I cant flash rardspl now, resco viewer...). Weird...
Well, sometimes a symptom after SPL change is that you have to do a hard reset. But sometimes it already helps to unplug and reinsert battery. Try that first.
 

jockyw2001

Inactive Recognized Developer
May 17, 2007
1,709
77
Excellent :)

I'm now dumping my FAT partition using the HardSPL command "fat2sd" (watch spelling!).
Of course you have to start up in bootloader mode (tri-color) for that and then connect with MTTY 1.42

You can call it with a parameter which can have the value 1,2,3 or 4

I think "fat2sd 3" is filemode, but since it is currently running and takes a long time I am not yet sure.
Ah it just finished :D

Here is a snapshot of the MTTY output
Code:
Cmd>fat2sd 3
Nand2SDReorder start...

Buildup mapping table now
dwTotalLength=0x484800, remain:0x8A09800

dwTotalLength=0x1111000, remain:0x7D7D000

dwTotalLength=0x1D9D800, remain:0x70F0800

dwTotalLength=0x2A2A000, remain:0x6464000

dwTotalLength=0x36B6800, remain:0x57D7800

dwTotalLength=0x4343000, remain:0x4B4B000

dwTotalLength=0x4FCF800, remain:0x3EBE800

dwTotalLength=0x5C5C000, remain:0x3232000

dwTotalLength=0x68E8800, remain:0x25A5800

dwTotalLength=0x7575000, remain:0x1919000

dwTotalLength=0x8201800, remain:0xC8C800


searching for boot sector, please wait a min
boot sector hit, start writing
remain 15147 sectors
remain 13867 sectors
remain 13355 sectors
remain 13099 sectors
remain 4139 sectors
remain 3883 sectors
remain 3627 sectors
remain 3371 sectors
remain 2859 sectors
remain 2347 sectors
remain 2091 sectors
remain 1579 sectors
remain 1323 sectors
Last Sector = 53803, encounter Last Logical Sector
Cmd>

Ok I have checked the SD after "fat2sd 3" and it wrote about 7.41MB in filemode (FAT32)
This is the contents of the rootdir. I think what it has dumped now are user files. Don't know how ROM cooks call this (user FAT partition??):
Code:
I:\>dir /a
 Volume in drive I is TFAT
 Volume Serial Number is 07E4-000A

 Directory of I:\

01/09/2007  00:00    <DIR>          Documents and Settings
01/09/2007  00:00    <DIR>          Windows
01/09/2007  00:00    <DIR>          Temp
03/01/2008  23:57            77,824 ReplStorVol
01/09/2007  00:00    <DIR>          My Documents
01/09/2007  00:00    <DIR>          Program Files
01/09/2007  00:00    <DIR>          Application Data
01/09/2007  00:00            28,672 mxip_initdb.vol
03/01/2008  23:57           151,552 mxip_system.vol
03/01/2008  23:57            32,768 mxip_notify.vol
03/01/2008  23:57            53,248 mxip_lang.vol
01/09/2007  00:01    <DIR>          ConnMgr
03/01/2008  23:57           172,032 cemail.vol
03/01/2008  23:57           385,024 pim.vol
               8 File(s)        901,701 bytes
               7 Dir(s)     133,283,840 bytes free

Will now try the other options.

Now running "fat2sd 4" This one takes a long time ~ 30 min
MTTY snapshot:
Code:
Cmd>fat2sd 4
Nand2SDReorder start...

Buildup mapping table now
dwTotalLength=0x484800, remain:0x8A09800

dwTotalLength=0x1111000, remain:0x7D7D000

dwTotalLength=0x1D9D800, remain:0x70F0800

dwTotalLength=0x2A2A000, remain:0x6464000

dwTotalLength=0x36B6800, remain:0x57D7800

dwTotalLength=0x4343000, remain:0x4B4B000

dwTotalLength=0x4FCF800, remain:0x3EBE800

dwTotalLength=0x5C5C000, remain:0x3232000

dwTotalLength=0x68E8800, remain:0x25A5800

dwTotalLength=0x7575000, remain:0x1919000

dwTotalLength=0x8201800, remain:0xC8C800


last sector = 53803
remain 15147 sectors
remain 14123 sectors
remain 13867 sectors
remain 13355 sectors
remain 13099 sectors
remain 4139 sectors
remain 3883 sectors
remain 3627 sectors
remain 3371 sectors
remain 2859 sectors
remain 2347 sectors
remain 1579 sectors
remain 1323 sectors
Last Sector = 53803, encounter Last Logical Sector

Cmd>
I analyzed the contents of the SD and it turns out a raw binary image is written on SD.
You must open the SD with for example the Winhex tool.
I think the data is the same as with "fat2sd 3", but now in raw mode.

Meanwhile I have studied the HardSPL again and I think I can trick it in dumping other partitions.
 
Last edited:

butzchan

Senior Member
Dec 20, 2006
96
0
Thanks for all this work, jockyw2001. It is appreciated. I think that after we all have working GPS and 3G, we should make some serious donations to jockyw2001! :D

One question...how do you enter bootloader mode in the wings?
 

jockyw2001

Inactive Recognized Developer
May 17, 2007
1,709
77
Not sure how to enter bootloader on Wings (I don't own it), but I think press and hold camera and then power on.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    The attached SSPL and HardSPL are based on the Wings MFG SPL v0.91

    - download the attached files
    - REMOVE SIM and SD CARDS !!
    - connect usb cable
    - create a SPL backup by running spl-backup.bat from SPL-backup-kit (make sure you Wings is "application unlocked", run the attached SDA_ApplicationUnlock on PC)
    - copy sspl-0.91-wings.exe to your device and run it
    - after a few seconds "USB" appears on the display
    - unplug and replug the usb cable
    - if you only want to test the sspl try flashing the attached splash screen by running CustomRUU.exe from flash-splash-wings
    - you can now flash the hardspl-0.91-wings.nbh by running CustomRUU.exe from flash-hardspl-wings
    - after installing the uspl or hardspl you can flash any rom, cooked rom, radio or splash screen

    Note:
    The HardSPL is never overwritten which in case of flashing trouble is a great insurance. Should you want to flash another SPL or USPL you must run the SSPL.

    Features:
    1. SuperCID / Security Level=0
    2. Does not check NBH signatures
    3. Based on 0.91 MFG bootloader, rtask, fat2sd, sd2fat enabled
    4. Accept any password
    5. Model ID check only 4 chars
    6. SPL overwrite DISABLED (to bypass, use sspl-0.91-wings.exe)
    7. Bypasses "Task 2A" (this formats entire flash which renders your Wings into a brick, we don't want that)
    Important:
    Use at your own risk! I'm not responsible for any damage to your device caused by using the attached files.

    Credits:
    Pof, Des, Olipro and arc.

    Donations:
    Any donation amount is greatly appreciated :)

    Note:
    I have also attached the htcrt_devices.ini file for Darksimpson's htc romtool