[PRJ] Elf/Elfin Unbricker (Gold Card) [ONLINE]

Search This thread

noname_sp

Member
Oct 18, 2008
7
0
MOD EDIT: Go to post #2 for Elf/Elfin Gold Card method.

---------------------------------------------------------------------------------------------


Anyone here try this on ELFin?
http://forum.xda-developers.com/showthread.php?t=417930
May be some modification on .pl file but idea must work...
ANY feedback pls.

Confirmed IT IS WORKING 100%.
 
Last edited by a moderator:

dsixda

Inactive Recognized Developer
Nov 1, 2007
9,586
5,320
Ottawa
I've created....... (drum roll please...)


CDRWJGOLD_mirror.jpg


ELF GOLD CARD WIKI PAGE:

http://wiki.xda-developers.com/index.php?pagename=Elf_GoldCard


P.S. Please don't PM me about how to unbrick for other devices... I didn't create the Gold Card concept and I only have an Elf!

 
Last edited:

noname_sp

Member
Oct 18, 2008
7
0
I have 010050 and there are signed ROMs, but my prob i do not have another wince, and mine is dead. Can not get SD card SN....
Have only Nokia S40, and have to write some code to get SN there may be.
If you can give soem ideas how to get SD Card SN without another Wince will be appreciated very much...

Thanks.
 

dsixda

Inactive Recognized Developer
Nov 1, 2007
9,586
5,320
Ottawa
I have 010050 and there are signed ROMs, but my prob i do not have another wince, and mine is dead. Can not get SD card SN....
Have only Nokia S40, and have to write some code to get SN there may be.
If you can give soem ideas how to get SD Card SN without another Wince will be appreciated very much...

Thanks.

Hmm.. does your Nokia have a microSD slot? Maybe there are utilities to get the card ID? I read that you can't get it with a regular card reader.

Why not use a friend's Windows Mobile device to make the card?
 

noname_sp

Member
Oct 18, 2008
7
0
yes, i have Nokia with just same SD card in it.. Heh i have to start calling friends and asking who has Wince ;-) not my style..

If you have any chance to make simple app for Symbian S40 with this function:
RFs.GetMediaSerialNumber()

You will save me hours of learning how to prog symbian, i can c# but not simbian c++.... :rolleyes:
 

dsixda

Inactive Recognized Developer
Nov 1, 2007
9,586
5,320
Ottawa
yes, i have Nokia with just same SD card in it.. Heh i have to start calling friends and asking who has Wince ;-) not my style..

If you have any chance to make simple app for Symbian S40 with this function:
RFs.GetMediaSerialNumber()

You will save me hours of learning how to prog symbian, i can c# but not simbian c++.... :rolleyes:


Bro, I haven't done C/C++ coding in a few years. Maybe someone here can help us. Or do a Google search for the Symbian app. I am sure there are people who made something like this.

If the goldcard is tested by someone else and works, then you can send your SD card to someone who lives close by and they can make one for you.
 

dsixda

Inactive Recognized Developer
Nov 1, 2007
9,586
5,320
Ottawa
Wow.. no interest from anyone?

Come on, this is the unbricker we are waiting for!
 
Last edited:

bigleroy

Member
Sep 27, 2008
15
0
Wow.. no interest from anyone?

Come on, this is the unbricker we are waiting for!

---yo estoy interesado pero no se ingles, yo tengo una elfin 101050 muerta cid bstar301 voy a ver si intento repararla con esta informacion.. despues les comento........

---I'm interested but not English, I have an Elfin 101,050 dead cid bstar301 I will see if they attempt to repair it with this information .. then they said....
 

gbverhoeven

Senior Member
Aug 9, 2008
64
6
Ridderkerk
Only with the device?

Can i make a gold card only with a working device? (Elfin?)

Can you not post the files, that wi can copy to the sd card?

When this is working, thats a great aplication!!!:)
 

miky6682

Senior Member
Jun 2, 2008
465
17
Naples
I have a briked elfin it boot only a green screen it was cid locked
Device ID = ELF010050
CID = HTC__405
but now mtty give me GetDeviceCID: Error - InitDecoder when getdevinfo command was typed at MTTY console.
i could try the only problem is the memory stick creation.
Sorry for my bad english!!!
 

dsixda

Inactive Recognized Developer
Nov 1, 2007
9,586
5,320
Ottawa
I would be happy to test this out if you send me your bricked Elf/Elfin (as a last resort!), but you must have a Model ID (Device ID) that exists in the shipped ROMs thread.

I'm waiting for someone to test this out successfully though. I can't test it on mine because my Elfin doesn't have any shipped ROMs with my Device ID.
 

dsixda

Inactive Recognized Developer
Nov 1, 2007
9,586
5,320
Ottawa
Is this a backup option when you bricked your device? when this works is this great! i am testing... (with Vista)

People should make a gold card before they try anything risky with their device. But it will not work with everyone of course, because not all Model IDs have the appropriate shipped ROMs.
 

bydaimon

Senior Member
May 17, 2007
50
1
dsixda seems that you need ELF0DIAG.nbh only if SD update failed and you will have to use ELF0DIAG.nbh file to enter special menu during the start of the bootloader mode !!
mmm .. ok i will try tomorow i have my second phone ( HTC S710 ) at work , i pray only that my device it`s ELFIN and not ELF :D


If someone have that file ELF0DIAG.nbh , pls upload it here , it may help some ppl.
 
Last edited:
May 22, 2008
10
5
All is working!!!
Elfin alive!

Step by step:

1. Make the goldcard, as described here
2. Insert card and boot into tricolor mode.
3. Connect to USB than execute original ROM installer.
For my device (ELF010050 HTC__102) is siutable RUU_Elfin_CHT_OPEN_2.20.753.1B_4.1.13.51_03.07.90_ BLUE_Ship_Reduced.exe
I was try to install more other ROMS.

:cool:

After that You can install any wishable ROM with USPL.
 

dsixda

Inactive Recognized Developer
Nov 1, 2007
9,586
5,320
Ottawa
GREAT WORK!!!!!!!! :D:D

You have a MODEL ID of ELF010050 and used a shipped ROM with ELF0100*0 (which is equivalent). This proves our theory that the Model ID has to be the same!

This is great news for people with bricked Elfs. :D

However, the requirements are these:

1) You need another Windows Mobile device that can create the gold card with your microSD (if you did not make one already with your Elf before it got bricked)
2) You need to find a shipped ROM with your Model ID (not all devices are supported)

We could try to re-write those instructions into a Wiki page so that it would fit the requirements for our Elfs.


Now we need to get this working for ALL Elfs ;-)


All is working!!!
Elfin alive!

Step by step:

1. Make the goldcard, as described here
2. Insert card and boot into tricolor mode.
3. Connect to USB than execute original ROM installer.
For my device (ELF010050 HTC__102) is siutable RUU_Elfin_CHT_OPEN_2.20.753.1B_4.1.13.51_03.07.90_ BLUE_Ship_Reduced.exe
I was try to install more other ROMS.

:cool:

After that You can install any wishable ROM with USPL.
 
Last edited:

bydaimon

Senior Member
May 17, 2007
50
1
hehehe ... i am glad to here that it`s realy works !!!!
hghghghghghghgh congratulations!

dsixda hehehe .... look where is the unbricker :D

tonight i will try myself !
think i need all the luck in the world :rolleyes:
 

miky6682

Senior Member
Jun 2, 2008
465
17
Naples
when run command:
perl typhoonnbfdecode.pl -p cardid=<cardid> -p keys=tornado -p seclevel=0 -d goldcard.img

to make elf SuperCid is not better set seclevel to 00 or is the same?
 

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    In the folowing we will talk about SD card, in reel we use SD card adapter for a mini SD card 1Go (not tested for SDHC card).

    This method is tested with a SD/MMC card reader usins PCI controller. (exp Laptop HP Pavillon)
    to chek de PCI device connected tape : $> lspci
    Mass storage controller: Texas Instruments PCIxx21 Integrated FlashMedia Controller

    for chek all usb device connected tape $> lsusb

    Having the live CD ubuntu version 9.10 "Karmic Koala" available here
    Step 1
    + Run ubuntu from CD
    +When loading linux is finished, open a terminal => go to [Start / Accessories / Terminal]
    + Insert your SD card,
    + Change to administrator mode by the command (it's optional)
    $> sudo -s

    Step 2
    The key command and alternative of wich presented in the WIKI Efl goldcard is : hal-device
    [email protected]$ hal-device
    [email protected]$ hal-device | grep mmc
    A little part of what we can see on the screen :
    ---------------------------------------------------------------
    linux.sysfs_path = '/sys/devices/pci0000:00/0000:00:14.4/0000:03:04.3/tifm_sd0:3/mmc_host/mmc3/mmc3:e624/block/mmcblk0/mmcblk0p1' (string)
    block.device = '/dev/mmcblk0p1' (string)
    storage.drive_type = 'sd_mmc' (string)
    storage.originating_device = '/org/freedesktop/Hal/devices/pci_104c_8033_mmc_host_mmc_card_rca58916' (string)
    linux.sysfs_path = '/sys/devices/pci0000:00/0000:00:14.4/0000:03:04.3/tifm_sd0:3/mmc_host/mmc3/mmc3:e624/block/mmcblk0' (string)
    info.parent = '/org/freedesktop/Hal/devices/pci_104c_8033_mmc_host_mmc_card_rca58916' (string)
    block.device = '/dev/mmcblk0' (string)
    storage.bus = 'mmc' (string)
    2: udi = '/org/freedesktop/Hal/devices/pci_104c_8033_mmc_host_mmc_card_rca58916'
    linux.subsystem = 'mmc' (string)
    mmc.rca = 58916 (0xe624) (int)
    mmc.cid = '0334455655303156211111111f0075e1' (string)
    mmc.csd = '002600325f5983c83156211111111f0e' (string)
    info.linux.driver = 'mmcblk' (string)
    mmc.type = 'SD' (string)
    mmc.scr = '0225000000000000' (string)
    mmc.vendor = 'Unknown (3)' (string)
    mmc.oem = 'Unknown (21316)' (string)
    mmc.date = '10/2007' (string)
    mmc.hwrev = 8 (0x8) (int)
    mmc.fwrev = 0 (0x0) (int)
    mmc.serial = 272118175 (0x1038319f) (int)
    info.subsystem = 'mmc' (string)
    linux.sysfs_path = '/sys/devices/pci0000:00/0000:00:14.4/0000:03:04.3/tifm_sd0:3/mmc_host/mmc3/mmc3:e624' (string)
    info.parent = '/org/freedesktop/Hal/devices/pci_104c_8033_mmc_host' (string)
    info.udi = '/org/freedesktop/Hal/devices/pci_104c_8033_mmc_host_mmc_card_rca58916' (string)
    3: udi = '/org/freedesktop/Hal/devices/pci_104c_8033_mmc_host'
    linux.subsystem = 'mmc_host' (string)
    info.capabilities = { 'mmc_host' } (string list)
    info.subsystem = 'mmc_host' (string)
    linux.sysfs_path = '/sys/devices/pci0000:00/0000:00:14.4/0000:03:04.3/tifm_sd0:3/mmc_host/mmc3' (string)
    info.udi = '/org/freedesktop/Hal/devices/pci_104c_8033_mmc_host' (string)
    info.category = 'mmc_host' (string)
    mmc_host.host = 3 (0x3) (int)
    42: udi = '/org/freedesktop/Hal/devices/pci_104c_8034_mmc_host_1'
    linux.subsystem = 'mmc_host' (string)
    info.capabilities = { 'mmc_host' } (string list)
    info.subsystem = 'mmc_host' (string)
    linux.sysfs_path = '/sys/devices/pci0000:00/0000:00:14.4/0000:03:04.4/mmc_host/mmc2' (string)
    info.udi = '/org/freedesktop/Hal/devices/pci_104c_8034_mmc_host_1' (string)
    info.category = 'mmc_host' (string)
    mmc_host.host = 2 (0x2) (int)
    43: udi = '/org/freedesktop/Hal/devices/pci_104c_8034_mmc_host_0'
    linux.subsystem = 'mmc_host' (string)
    info.capabilities = { 'mmc_host' } (string list)
    info.subsystem = 'mmc_host' (string)
    linux.sysfs_path = '/sys/devices/pci0000:00/0000:00:14.4/0000:03:04.4/mmc_host/mmc1' (string)
    info.udi = '/org/freedesktop/Hal/devices/pci_104c_8034_mmc_host_0' (string)
    info.category = 'mmc_host' (string)
    mmc_host.host = 1 (0x1) (int)
    44: udi = '/org/freedesktop/Hal/devices/pci_104c_8034_mmc_host'
    linux.subsystem = 'mmc_host' (string)
    info.capabilities = { 'mmc_host' } (string list)
    info.subsystem = 'mmc_host' (string)
    linux.sysfs_path = '/sys/devices/pci0000:00/0000:00:14.4/0000:03:04.4/mmc_host/mmc0' (string)
    info.udi = '/org/freedesktop/Hal/devices/pci_104c_8034_mmc_host' (string)
    info.category = 'mmc_host' (string)
    mmc_host.host = 0 (0x0) (int)
    45: udi = '/org/freedesktop/Hal/devices/leds_mmc2'
    linux.sysfs_path = '/sys/devices/pci0000:00/0000:00:14.4/0000:03:04.4/leds/mmc2::' (string)
    info.udi = '/org/freedesktop/Hal/devices/leds_mmc2' (string)
    leds.device_name = 'mmc2' (string)
    46: udi = '/org/freedesktop/Hal/devices/leds_mmc1'
    linux.sysfs_path = '/sys/devices/pci0000:00/0000:00:14.4/0000:03:04.4/leds/mmc1::' (string)
    info.udi = '/org/freedesktop/Hal/devices/leds_mmc1' (string)
    leds.device_name = 'mmc1' (string)
    47: udi = '/org/freedesktop/Hal/devices/leds_mmc0'
    linux.sysfs_path = '/sys/devices/pci0000:00/0000:00:14.4/0000:03:04.4/leds/mmc0::' (string)
    info.udi = '/org/freedesktop/Hal/devices/leds_mmc0' (string)
    leds.device_name = 'mmc0' (string)

    ------------------------------------------------------------

    So to refine the research of the famous CID, we proceed by a search using a keyword = "mmc.cid", see the following command:

    [email protected]$ hal-device | grep mmc.cid

    The result is displayed in the terminal screen as following in one line:
    mmc.cid = '0334455655303156211111111f0075e1' (string)

    If you want write the CID in a txt file :
    [email protected]$ hal-device | grep mmc.cid > MyCID.txt
    Step 3
    As I said above this result does not give the CID in the right direction is slightly inverted with letters are interchanged in pairs.To follow it exactly what it says in the wiki i.e:
    + Open QMAT, go to Cryptoanalysis Tools, then Crypto Toolbox, and enter the string at the bottom where it says "Reverse String". Press the button and you will get your actual Card ID.

    Step 4
    And generate the goldcard image under "goldcard.img" name into c:\itsutilsbin directory

    Step 5
    Return to the windows OS and format the SD card :
    console-dos> format <sddrive:> /FS:FAT32 /A:4096

    Step 6
    Write this image on your SD card, a part of this image paste the boot sector of the SD card it's magic :eek:)
    console-dos> psdwrite <sddrive:> goldcard.img 0 0x120
    Step 7
    You have to follow the wiki now ..

    Before i close, I want mentioned that I encountered a problem during installation of the sheeped ROM (exp: ELF0100 * 0 for my device ID ELF010050).
    Error [328]: Invalid command
    I managed to solve the problem by updating of the SPL 1.17 to 2.20, using "ROMUpdateUtility.exe" wih HTC in bootloader mode, The SPL.nbh exists already in the directory of sheeped ROM, before that rename the "RUU_signed.nbh" or move temporarily from the directory (extarcted from My_Shepped_ROM.exe).

    Let me read you if you have any other questions or comments
    1
    Guys,
    I had posted some info about the gold card here.
    Hope it helps.

    Regards!