SPV M3100 back to life at last!!!

---

Without the help of pof this would not have been possible.

I had tried to simunlock SPV M3100 with the Universal Unlocker. If you are thinking about doing this DON'T.

There has been quite a bit of advice on this subject recently but none of which helped, my phone stayed a brick.

I was in bootloader version 1.04 I WOULD NOT ADVISE ANYONE IN BOOTLOADER VERSION 1.06 AS THIS MAY NOT WORK.

This is what I did:

1. Put Hermes into bootloader mode
2. Disable USB connections in ActiveSync, also in task manager kill rapimgr.exe and wcescomm.exe.
3. Open mtty.exe and select USB port, then connect.
4. Hit enter twice, you will see the USB> prompt.
5. Type the following commands (do not copy and paste).
password 0000000000000000 (enter)
set 1e 1 (enter)
erase a0040000 c80000 (enter)
erase a0cc0000 c80000 (enter)
erase a1940000 640000
set 1e 0 (enter)
6. Reset phone and go back to bootloader mode.
7. DO NOT DISCONNECT USB AT ANY STAGE.
8. Remove battery for a few minutes.
9. Restarted computer.
Replace battery.
10. Tried Qtek ROM 2020, got as far as screen going white, stuck on 0%.
11. Went back to bootloader.
12. Ran 3 more times, came up with error.
13. Ran MaUpgradeUt_noID
PC shows Upgrading Radio. Please wait
Phone shows uprading radio stack
got to 99%
14. ROM upgrade error
15. Did soft reset (no GSM gone)
16. BLING!!! PHONE CAME BACK TO LIFE.
Now we have ActiveSync and phone seems to be in perfect working order.

Device information shows:
Operator Version 14.123.1.614
ROM Version 1.23.61.4
ROM Date 07/13/06
Radio Version 1.20.31.10
Protocol 2.52.7020.0014

Model HERM100

Bootloade mode shows
HERM100
IPL-1.01

HERM100
SPL-1.04

Thank you everybody who has given me advice over the past few weeks, especially pof you are all truly amazing.

Will be purchasing unlock soon and would like to know the best way to monitor activity to help others unlock for free.

I TAKE NO CREDIT FOR THIS...However it was sent to me as I wanted to help the community also but alas my SPV M3100 is caught somewhere between nashville and canada for 3 weeks.

So, here comes the how to :

What you need befor you start:

USBMON (I used the trial): http://www.hhdsoftware.com/Products/...b-monitor.html
A win 2k/XP computer with admin rights

How to fool the IMEI-CRACK tool:

-Login with the administrator and setup USBMON
-Create with the administrator a user (named wathever you like) with only "user" or "powered user" rights
-Log in with the user you just created (you may have to resetup Active sync with this user; I don't know why but it seems that active sync doesnt setup for all user)
-Right click on the USBMON icon and select "run as"; input the administrator credential and configure the software ready for the capture
-Launch the crack and follow the instruction

And voila ! The dump should be achieved by now

As I did this quite a long time ago, I may have forget something; feel free to ask for more explanaition if you don't understand something

Yeah! Glad you did it!

Just for the record, here are the posts that helped us to develop this "solution":

1) DEAD BRICK M3100 BACK ALIVE - kimbay tried to run Himalaya rom on the Hermes after 30 days looking at a £450 brick, he was the first bringing the Hermes back to life.

2) Bring your bricked TyTN back to live - Houz74 did the same, but provided more information on which ROM exactly he tried and until where the Himalaya flashing process has to run (the erasing part).

3) Can't boot after trying to unlock SPV M3100 with HTC Universal unlocker - Finally you (rachelm700) provided the USB dump I was waiting for and I understood what was the himalaya's RUU doing, then I just tried to replicate the same in the hermes bootloader

Thanks to everyone involved

Originally Posted by rachelm700

I was in bootloader version 1.04 I WOULD NOT ADVISE ANYONE IN BOOTLOADER VERSION 1.06 AS THIS MAY NOT WORK.

Should work in bootloader 1.06 too, as long as the last thing is flashing an extracted radio rom and not a full rom.

As I am on 1.06 and have a non working device, I have nothing to lose at this stage.

Will update to see if this worked on 1.06.

Shark1, follow my instructions in the wiki:

http://wiki.xda-developers.com/index...pgradeProblems

I just updated (problem 5) with generic instructions which should work for you too.

Good luck!

Pof,

I don't get past 0% and then it just errors out.

Originally Posted by shark1

Pof,

I don't get past 0% and then it just errors out.

0% of radio upgrade? did you do all the erase commands without errors?

really interesting...
you say to flash Himalaya ROM to Hermes?

really interesting...

buzz

Originally Posted by buzz_lightyear

really interesting...
you say to flash Himalaya ROM to Hermes?

It's not really flashing the Hima rom on the Hermes, but the Hima flashing process does the 'erase' bootloader commands which where the "trick" to allow flashing a radio rom again, after breaking the hermes radio with the universal unlocker.

See the full process in this thread (comment #10):

http://forum.xda-developers.com/showthread.php?t=280372