Database Develop

AT Commands

Hi folks,
can anybody check the output from mtty with:
USB> rtask b
[email protected]
for me and copy the content after 2 minutes (the nmea gps traffic) into a *.txt and send it to me or attach it to a reply? please, please....
Thank you
PS: You must have bootloader <= 1.04, otherwise the commands do not work.

Hi,
okay now, i think i understand why nobody answers me, because nobody have the bootloader 1.04, right?
But maybe anybody could check if it works with a sspl fake bootloader?
Thanks and please write also, if it does not work

Hello.
i try to help you but nothing happend when i write the command,of caurse with sspl. cause my bootloader is 1.7.
command error. both of trye's
so you nead a device with 1.4 b.l.

thanks ausdim!

how to dump the splashscreen without an official rom image ?

Hi all ,
at this day , it don't exist any official rom of the S300+ (trinity branded by SFR in France) and so , i can't dump the splashscreen .....
is exist a way to do that in my trinity ? (i have of course this rom inside)
cause soon ,this evening i hope , we will able to create his own extrom so with the splashscreen of the S300+ , i can create a FULL rom for anybody
Thanks for your answers positive or negative
I look at the Wiki and don't see anything about that ...
perhaps a cool french guy could create these not me i am too lazy for that but NO lazy to make the else things to do

you have to patch an SPL to allow you to rbmc at any address, i did this on hermes, not on trinity, but I guess should be very similar:
search for this hex string on the SPL: 0532A0E30E3883E3
Replace it for 0532A0E30000A0E1
Make sure the string is found only once, and load the resulting SPL.nb with SSPL.
Then you can do:
Code:
Cmd> task 32
Level = 0
Cmd> set 1e 1
Cmd> rbmc splash1.nb 500e0000 40000
Cmd> rbmc splash2.nb 50140000 40000

ok Pof ,
search for this hex string on the SPL: 0532A0E30E3883E3
can you give me some help about that ? i don't know where i have to begin

Use an hex editor

lol , that was not exactly what i mean

OK, I don't put links to anything so you make a bit of reading / research yourself... and is faster for me to write
Download HardSPL for trinity, use nbhextract to get SPL.nb from the NBH file.
By default the SPL will only allow you to "dump" a small region of the NAND flash chip, you want to dump the splash screen, so we have to patch it. To patch it, take any hex editor of your choice (radare, winhex...) and find this hexadecimal string: "0532A0E30E3883E3", then replace it for "0532A0E30000A0E1".
Now you have to load this SPL on your device using SSPL (read the SSPL readme.txt file, advanced instructions), you have to pass it as a parameter so you have two options: either create a .lnk file or use itsutils:
Code:
pput.exe patchedSPL.nb
pput.exe SSPL-TRIN.exe
prun.exe SSPL-TRIN.exe patchedSPL.nb
After prun, you have to quickly press the bootloader buttons, and you'll see the tri-color screen with your patched SPL
Disable activesync from now on
Connect to bootloader and issue the following commands:
Code:
Cmd> task 32
Level = 0
Cmd> set 1e 1
Cmd> rbmc splash1.nb 500e0000 40000
Cmd> rbmc splash2.nb 50140000 40000
mtty is very fishy with rbmc, so probably you will see no output, if this is the case you have 3 options:
Use unix command 'cu' (inside uucp tools), it works fine with rbmc.
Use mtty and capture the output with usb monitor, then use unix command 'xxd' to create the binary files.
Try with putty (I never tested, but probably works).
The output of the two rbmc commands are your first and second splash screens.

Thanks a lot Pof , you are very kind to did this !!!
but i have no success yet but i continue ...

@pof
what do you mean with "Use mtty and capture the output with usb monitor"
i think i did the right things before rbmc but like you said : i see no results i look at the options in mtty and i don't see "usb monitor"
can you help me (again) please ?
Regards
edit : is is the good result of the prun command ? ERROR: CreateProcess failed with Errorcode = 0
- Une connexion existante a d¹ Ûtre fermÚe par l'h¶te distant. (an exist connexion was closed by the host)

extenue said:
what do you mean with "Use mtty and capture the output with usb monitor"
Click to expand...
Click to collapse
ftp://xda:[email protected]/Hermes/Tools_and_Programs/usb-monitor237.exe
Capture in "complete" tab, export as ANSI text file.
extenue said:
edit : is is the good result of the prun command ? ERROR: CreateProcess failed with Errorcode = 0
Click to expand...
Click to collapse
yes, it's normal cos the SSPL kills the OS.

ok ! i finally success in export as ANSI text file the two files
i have not unix at home (i have only windows) , so before i ask my friends to create the binary files , how can i be sure that my dump is correct ?
Thanx again

extenue said:
how can i be sure that my dump is correct ?
Click to expand...
Click to collapse
The dump should have 262144 bytes (size of a splash screen).

The solution to the GPS problem

I'm confident I found the solution to enable GPS on production model Wings !
Check this out!
Now someone should test it!
See this post for info about dumping NV items.
or read on for a short manual:
0. search and download QPST (this is a qualcomm product suite, i believe someone put a link in this thread)
1. install HardSPL (see sticky)
2. download drivers on your PC (installation will be triggered after step 5.)
3. uncheck "Allow USB connections" in Activesync
4. restart phone in tri-color bootloader mode and start MTTY 1.42 (attached)
5. press return until you see Cmd> prompt and type: rtask c (if you never installed the diagnostics drivers before the installation of three drivers will be triggered (modem, diag com port diag and nmea com port)
6. now exit MTTY and start "QPST RF NV Item Manager" and select Read from Phone from the File menu
7. search item 0148 [NV_RF_CONFIG_I] on a production model is 11 (hexadecimal 0xb) and on a pre-production model it is 17 (hexadecimal 0x11)
8. if you have a production model change the value to 17 and click the button "NV Write". To veryfy if the value is sticky Read from Phone again
These are the steps. Unfortunately on a production model the value 17 is not written and stays 11. This is due to some kind of security mechanism and I'm quite sure this can and will be h*cked soon.
On a pre-production Wings and also on production Kaisers the value can be modified.

jockyw2001 said:
I'm confident I found the solution to enable GPS on production model Wings !
Check this out!
Now someone should test it!
See this post for info about dumping NV items.
Click to expand...
Click to collapse
You are God!!!!!!!!!!!!!!!!!!!!!!!
Regards

Is it working?

Jocky, sorry, didn't see your new thread. I replied here : http://forum.xda-developers.com/showpost.php?p=1847311&postcount=106
What do you think

i'm kinda new with smartphones ^^;
would you mind to write a little summary in a post or in a pm with the procedure?
sorry to ask that , i just dont want to do anything wrong ^^;
thx

el_lo said:
Jocky, sorry, didn't see your new thread. I replied here : http://forum.xda-developers.com/showpost.php?p=1847311&postcount=106
What do you think
Click to expand...
Click to collapse
Bad bad news
Regards

sat_ana said:
Bad bad news
Regards
Click to expand...
Click to collapse
Not at all, this problem has been solved already. See the solution here: http://forum.xda-developers.com/showpost.php?p=1847405&postcount=107
But there is a new problem here http://forum.xda-developers.com/showthread.php?t=361322&page=12 @ post #112

Just to summarize the current status:
el_lo attempted to change the NV item #148 value from 11 to 17. However, the new value isn't stored. The same happens on Niki (they also cannot activate GPS) and a friend xperiences same as el_lo. Perhaps a wrong driver version or NV item manager version causes this problem.
On Kaiser I can both read and update NV items.
So it's time to get back to the drawing board

thanks a lot jocky!!!!!

jockyw2001 said:
Just to summarize the current status:
el_lo attempted to change the NV item #148 value from 11 to 17. However, the new value isn't stored. The same happens on Niki (they also cannot activate GPS) and a friend xperiences same as el_lo. Perhaps a wrong driver version or NV item manager version causes this problem.
On Kaiser I can both read and update NV items.
So it's time to get back to the drawing board
Click to expand...
Click to collapse
How can I read the NV Item?

jockyw2001 said:
Dump NV Items
The configuration of radio are stored as NV items. It is possible to dump these as foolows:
1. Restart in tri-color bootloader mode and start MTTY
2. Type: rtask c
3. Exit MTTY and start "QPST RF NV Item Manager" and select Read from Phone from the File menu followed by Write Only listed Items to .QCN file
Click to expand...
Click to collapse
Taken from hxxp://forum.xda-developers.com/showthread.php?p=1813156

Yes, but how now to read the Item 148 from that file?

Dumdidum said:
Yes, but how now to read the Item 148 from that file?
Click to expand...
Click to collapse
Open the file in "QCNView" (part of QPST suite)

I'll try and see what I can do with mine this week-end, work's crap as no admin on PC.
Really wanna help to get this going

17 on my PreProd Radio Rom...

Btw: I could successfully change it to 11... (checked it)
Dont have a fix since 10 minutes... but up to 13 (!) satelittes in view still....

Dumdidum said:
Btw: I could successfully change it to 11... (checked it)
Click to expand...
Click to collapse
Thx for testing this Dumdidum, that is very helpful information.

Dumdidum's last test makes me very pessimistic.
It almost seems that before the item value is written to NVRAM the device checks if the hw is available
Anyhow, we will know soon, because I think I have a method to write NV which bypasses all checks

jockyw2001 said:
Dumdidum's last test makes me very pessimistic.
It almost seems that before the item value is written to NVRAM the device checks if the hw is available
Anyhow, we will know soon, because I think I have a method to write NV which bypasses all checks
Click to expand...
Click to collapse
I can't wait! Hope this will help.
By the way. Did you play around with the QXDM software? I found a testing utility for the GPS. I only could test it at work and we have no gps signals inside the building. Maybe you can try?

I don't know if this link is of any use in this, but every little bit helps (I hope)
Qualcomm MSM7200 Specs
On the last page is a picture of the architecture

HELP!! [Invalid Device ID]

Please Help Can't update OS.
and in ROM not have OS.
Thank for help.

Can´t connect via USB?

jorge_jomi said:
Can´t connect via USB?
Click to expand...
Click to collapse
can connect via USB.
But, can't update any rom.

Try MTTY : http://wiki.xda-developers.com/index.php?pagename=Trinity_BootLoader

bbk said:
Try MTTY : http://wiki.xda-developers.com/index.php?pagename=Trinity_BootLoader
Click to expand...
Click to collapse
I'm noob. I don't know what command to use.
in mtty command . please tell me step by step.
Thank you.

you can try :
-task 2A
-task 32 (response must le =0=
-checkimage
-info 8
If all ok, you can re-try to load ROM
If Rom upgrade don't work or if no :
-task 28
-task 7 1
-set 14 0
-task 8

bbk said:
you can try :
-task 2A
-task 32 (response must le =0=
-checkimage
-info 8
If all ok, you can re-try to load ROM
If Rom upgrade don't work or if no :
-task 28
-task 7 1
-set 14 0
-task 8
Click to expand...
Click to collapse
Cmd>task 2A
Cmd>task 32
Level = 0
Cmd>checkimage
IPL CRC checksum = 0x32441C0C
SPL CRC checksum = 0xF5505B9E
CE is None.
ExtROM is None.
Radio Image CRC checksum = 0x27B3C9FF
Cmd>
UPDATE Error
Cmd>task 28
Storage format start
Write Nand Success
dwBlockToWrite = 13
Can't find OS in flash!!!
Storage format success
Cmd>task 7 1
Cmd>set 14 0
Write Nand Success
HTCST ÚÈÒHTCE
Cmd>task 8
UPDATE Error
NOT WORK.
Thank FOR HELP!!

Yes but do you use your original rom ?

bbk said:
Yes but do you use your original rom ?
Click to expand...
Click to collapse
I use Original ROM.
RUU_Trinity_DOPODASIA_WWE_1.23.707.6_6275_1.35.00.11_108_Ship.exe
RUU_Trinity_DOPODASIA_WWE_3.00.707.17_6275_1.46.00.11_108_Ship.exe
RUU_Trinity_DOPODASIA_WWE_3.00.707.18_6275_1.46.30.11_108_Ship.exe
Don't have WORK

I think i wan't your original ROM, when you buy, could you get your First ROM

bbk said:
I think i wan't your original ROM, when you buy, could you get your First ROM
Click to expand...
Click to collapse
RUU_Trinity_DOPODASIA_WWE_1.23.707.6_6275_1.35.00. 11_108_Ship.exe
This ROM from shop.

Could you load a IPL ROM (just an IPL) ?
Could you load a SPL ROM (just a SPL) ?
You can try SPLxploit

I had exactly the same problem
I uploaded a mtty TRIN_HardSPL.nb and then flashed to the native WM5.

namwarn said:
RUU_Trinity_DOPODASIA_WWE_1.23.707.6_6275_1.35.00. 11_108_Ship.exe
This ROM from shop.
Click to expand...
Click to collapse
but u have an p3600 or p3600 i
?

Yes it is important!

mahav said:
Yes it is important!
Click to expand...
Click to collapse
yes in the photo i see u have load spl 3.03.0000 ?????

Again, I had a problem (invalide device id), I decided to fill it with a mtty. Nb file lined earlier. Only then was able to flash to the native WM5 (for me it RUU_Trinity_HTC_RUS_1.23.411.2_103_6275_1.38.00.11_108_Ship).
Also, it makes sense to check with the creator of the theme, the problem is his problem or not.

invalid device id
look here
http://forum.xda-developers.com/showthread.php?t=490681&page=7
post #66
and
here
http://forum.xda-developers.com/showthread.php?t=490681&page=9
post #81
if u enable lnb command can load trinxxx.nb
but u can dead wlan
is an risk !

To me at the time the error was nothing left to lose and I was aware of all the risk.
But I had to somehow come out of the situation, so took the risk and flashed.
And the author of threads to choose ...

you can use this tools
is modify splxploit-windows
if work
upgrade directly an rom contains ipl spl wm 5 original (u can use "trinity tutto originale" )

How to change MAC address in Diamond ?

Hi, if this subject was here before ...... sorry , but i had a problem to find something like this here in this forum.
Is there any way to change MAC address of my wifi card ?
It can be temporary, maybe some registry changes ,or a program ?
Thanks in advance.

http://forum.xda-developers.com/showthread.php?t=292146&highlight=mac+change

Thanks, but this link was not clear enough (maybe i'm stupid ?) .
Is there any chance to do a program to change this MAC (temporary of course)?
Many people here could use it.
Could donate for fully working program.
Thanks.

used MTTY 1.4 maybe you can change your MAC address
make sure your useing a Cracked SPL
1. enter Tri-color screen connect your PPC with USB
2. in the port list of MTTY Choose USB and click OK
3. then you will to the Cmdline press Enter there will be CMD>
4. type : emapiwlanmac 01 02 03 04 05 06 (DO NOT COPY AND PASTE YOU MUST TYPE IT，PASTE IT WILL NOT WORK)
Hope this can help you ,my english not very well
This is word on C730