yashsingh1/xdaforums huggingface dataset:
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] haam1978:
another room works fine with this radio from hell

pdaviete 3.51.61.07 WWE room

sound and camera work perfect with this room

it's strange but it sounds funny when we all stuck with this radio first i hated it but later it started to be funny anyway iam sure we will find a way to break this stubborn radio

cheers
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] kyphur:
XDA Live 3.0 will work with this Radio.

Had a few members report success but it only makes sense as it is based on the AT&T 3.51 Rom.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] shutter13:
If in the ROM description it says it is compatible with 1.65.14.06 it will be compatible with 1.65.17.10, if it says it's compatible with any other radios (aside from the two previously mentioned), it won't be compatible.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] lordsoft:
mtty

How to erase radio block with mtty?

Is this help to flash older radio?
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] austinsnyc:
stupid question why can we just erase the radio mentioned in the poast abovve and reflash that paert of the nand? seems simple right but I thought the spl does a byte check! JOCKY where atte ylj!
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] jockyw2001:
... I'm here and still working on a solution
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] Macgyvec3:
At least you caught it quick. Now many unsuspecting people like me(who was about to flash it seconds before I read your post) will be saved.

Your sacrifice will not be in vain!
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] dwsco:
Might be crazy, and I haven't tried it yet but maybe we could replace the radio bh file in the executable with another radio and try a full flash. I'll give it a try and see if it works...
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] Macgyvec3:
I'd try going completely back to OEM. SPL and all. Then a maybe flashing the OEM rom one more time after you've reverted SPL.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] AllTheWay:
Yes I flashed the ROM/Radio combo. The exact one that incognitho published.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] AllTheWay:
Good deal. Let me know if it works. I doubt it will, but the effort with be helpful.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] dwsco:
But mine didn't do that... maybe because I extracted the executable and then ran the ROMUpdateUtility.exe from the exctracted directory?
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] dwsco:
Well, I didn't try the normal ways.. just freaked when you guys said there was a problem. I'm trying to flash with another radio in the directory right now. Will update when I have results..
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] dwsco:
Crap... didn't work. Still have 1.65.17.10 so that answers both questions. Can't change the radio and it probably doesn't have anything to do with the return to bootloader.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] thomassster:
trying to revert back to its own breed, 1.65.14.06 and didn't work either. Must be a radio lock or something.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] thomassster:
haha...although this rom is tainted, this radio isn't that bad. I found very little difference between all the radios, except for one in particular, one of the NIKI radios which had total great GPS reception (forgot which radio that was) but this radio is alrite.

It's not the rom that locks the radio, but its the radio itself. I had my old AT&T rom and flashed this radio, and now stuck. Praying for someone out there to figure out a solution.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] twisted:
*.pfw files

when i extracted the exe file, i noticed there are 2 files with *.pfw extension.

what does this 2 files do? attached is the screenshot.

ps: try to open with notepad.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] Macgyvec3:
EBL? Some kind of BOOTLOADER? Enhanched? Encrypted?
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] _Alex_:
It's the config files for packaging the .exe that you all installed. It's just a sign that the developer was lazy / sloppy.

If you're all 100% sure that this won't let you downgrade (I haven't tried downgrading yet, I'm busy trying to make a decent ROM :)), I can remove the links from the first post.

*edit* - nevermind, I actually took the time to read through the thread :). I'm just going to put a warning in this thread and the other thread...
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] JohnJonsten:
I got lucky and read this before I tried the radio upgrade. This smells alot like the problem on the hermes where if you let customization happen it locked your radio.

Has anyone tried JumpSPL then flash a new radio????
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] AllTheWay:
I would say try out another WM6.1 ROM that needs the newest radio. Might go try TNT's out. Or revert to some BETA that I have laying around.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] dwsco:
Yeah... I'm flashing back to HyperDragon II right now. I'll play with trying to change the radio only until someone comes up with a solution. Bummer.. hope this is a really good radio :)
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] scotchua:
I'm giving TNT a whirl, see what i get. Thanks for the suggestion.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] SH4YD33:
Links removed..

I took the radio out from the larger of the two. The ship signed version.

It looks like they both contain a radio? I'm guessing that is why people are saying the bootloader resets during install of the NBH using the cingular .EXE.

My fault for jumping the gun guys.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] AllTheWay:
You did nothing ROM. If anybody would have posted the radio it would have done the same thing.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] scotchua:
No worries man, flashing as much as we all do around here we were bound to catch a tricky one eventually.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cotu1961:
Maybe it's time...

...the "chefs" learned it is virtually impossible to reprogram a flash with the security fuse blown. Unless of course you get to an internal JTAG port, and provided it was left open and not permanently disabled. I suspect AT&T got fed up with all the returned bricks and took measures to put a stop to it. Time to get the screwdrivers out, boys.

I am pretty convinced they follow this site (and the other forums) regularly, and that they're having a good belly laugh at all this, especially at the professed expertise of some of the "senior members" LOL. And probably so is HTC.

Peace all :)
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] GhotiGhongers:
Try using TNT's ROMs (http://xdaforums.com/showthread.php?t=385900) for the Kaiser - they use the latest drivers and, I believe, work with this radio....
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] shutter13:
There are several ROMS that work with this radio, that's not the point, the point is to find a solution so we can flash to a different radio. As it stands now, if a new radio comes out, we can't flash to it either, we are stuck with this one.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] GhotiGhongers:
I know what the point is! I have been actively following this thread since the hour it was posted!

If you read the last couple of pages....there's a user who has been flashing and can not get his camera to work - I'm only offering advice which will benefit them and any one else in the same boat!

I thought that's what a forum was for?
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] jockyw2001:
bull**** mate
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] shutter13:
Perhaps quoting said poster would have made it clear that you were speaking to a specific poster.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] Andriyy:
Today I try this rom from PDAVIET. The radio is working fine. For people who get stucj with 1.65.17.10 it is the best way to wait untill solution. May be someone can also repack it and understand what is the problem with radio.

ROM WM6.1 (Build 19701.1.1.0)

http://xdaforums.com/showthread.php?t=389737
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] GSLEON3:
Yeah, It doesn't make much sense that AT&T would do that. There are much better ways for them to accomplish that if it were their intention. To make it impossible to flash the "Radio" only does nothing but make it more likely they'd see returns soar. So that really makes no sense.

Besides, what you are talking about, I was a part of, & it wasn't a hardcore attempt. Just altering some of the header & version numbers.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cotu1961:
I'm all ears...

...if you have something intelligent to say, but please spare me the expletives. You cannot reflash an FPGA with the security fuse blown unless you bypass the fuse. It can be done (see the iPhone forums) but you have to connect directly to the FPGA JTAG port. You also have to supply an external voltage to put the chip in programming mode. The USB port simply doesn't get you there. I suspect there's a way to do it without disassemblying the phone, since they do recondition, hence reflash the units.

As for the motivation, that's simple: AT&T is subsidizing the phones, so they want to protect their investment. That's why they're branded in the first place. In addition, each provider has specific network protocols (the numbers following the G in the boot screen) so they don't really like unbranded or other people's equipment on their system.

I'm curious: the guys who got an AT&T warranty replacement recently: what is the Radio version?
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] RoozbehDream:
hi. did you got any result from working on this radi? once you said something about a tool that may help
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] Nate731:
Ah, but you are missing your own point... AT&T, like all providers, are in business for one and only one thing. Money. What makes them more money, a 24month contract @ $40/month minus their subsidizing of the phone? Or an individual that signs for for the same 24 month contract @ $40/month but purchased their phone third-party? Granted that AT&T will probably make some of the difference back through their "Media Mall", but unless you goe nuts on that, I can't imagine that most people are going to download hundreds of ringtones, pix, etc. AT&T doesn't make their money off of the phones. They make it off of the service and the accessories.

Also, we are a positive, constructive forum. If you don't have any ideas or constructive critism, hit the bricks...
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] JimmyMcGee:
I believe that the way cell phone companies make money is selling you minutes you never use. They hedge their bets that if the give you 400 Day time minutes and 5000 nights a weekends that you will either only use 100 Day minutes. So you bought 300 extra minutes. Also, If you go over that they can charge you overage.

The people that say that cell phone companies offereing an Unlimited Talk and Text and Data plan for $100 is a sign of a failing company. No, If you pay $99 and use only 400 minutes, which you could have bought for $39, they just made $60.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cotu1961:
I can see...

... from jockyw2001's and your replies this is indeed a constructive forum LOL. In 40 pages of posts nobody stated the actual problem; when I did I got flamed. I don't think that's particularly constructive, do you?

As for the other issue: the subsidized phone

is

the enticement for getting locked into a 2-year contract, and you are paying for the subsidy in the cost of the service anyway. This seems to have escaped you.

Perhaps you sould practice what you preach...
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] P1Tater:
Brace yourself. Caps lock to follow and yes I'm mad.:mad:

FOR PETE'S SAKE. BACK ON TRACK. THE ISSUE AT HAND IS RESOLVING THE PROBLEM. NOT WHO MAKES HOW MUCH MONEY AND WHY AND HOW.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] JimmyMcGee:
Geez Tater, pull that stick out your bum! :p:eek: Everyone lets talk about Taters Attitude now :p

But seriously. Anyone have an update on the Wacky Radio progress?
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] svcglobal:
My offer above is still valid, no matter what and no questions asked. :)
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cotu1961:
Thanks Tater...

...for bringing reason and sensibility back into this discussion. Now, does anybody have the MSM72XX datasheet? I can't seem to find it anywhere.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] GSLEON3:
First, the radio version is for 6.0 roms since that is what's still shipping, 1.65 is not compatible w/ 6.0 period. Secondly, there are much better areas & ways for a carrier to apply security measures than in a radio that can't be updated. This is a bug, pure & simple.

You have a jtag box? get to it, go with your theory, & let's see what you can do. Report back when you have something. As for me, I'm putting my money where my mouth & have flashed this on a security unlocked device & also have set aside a locked unit for work on this issue (being used on another project currently).

Let me tell you something, I've seen a bricked device completely wiped of its SPL unlocked, security unlocked, by Jocky. All ee really need to do is find a way into dload, which can possibly be acheived screwing things up so that you end up in default diag mode, or possibly writting raw data, kinda like you used to do to change the page pool in the touch. Anyway, once the task 2a job is finished by Jocky, I'll have another device to dedicate to this issue that I can take unreasonable risks on, not just baby steps ;)

BTW the Apple Firmware is quite different than WM & I believe only the BL is the only portion of it stored in ROM & it is a hell of a lot harder to brick an Iphone than a WM device.

The people working on this issue include developers & firmware engineers with long histories of supporting this community & of the reverse engineering of these devices & their firmware. You see Jocky, cmonex, Oli, Pof & a few other names on just about every tool or device on this forum.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cotu1961:
OK jack...

... you've said your peace. This is America and everyone is entitled to an opinion. I'll stick with mine until someone

proves

me wrong.

Back to the issue at hand: do you or anyone else have the MSM72XX datasheet? Qualcomm had it on their website but it appears to have been removed. I'm trying to help out but know nothing about this chip and I need to read up on it.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] Valvarin:
Here u have the Techsheet of the MSM72xx Chipset... here

and i think u will never ever find a datasheet with marked jtagpoint :rolleyes:

u have to mesure out urself...

i think u really can patch the radio rom with jtag, but i think u have to

unsolder the arm-processor.

and jockyw2001 is on the right way, like everytime^^
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] tdusen:
That is not the data sheet. it's just a marketing blurb. the real datasheet will have chip pinouts and register descriptions. In short, what you would need to actually build something with the chip.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] tdusen:
did it work? Were you able to flash a different radio on that security unlocked device?
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cotu1961:
Thanks for the effort...

...but I need the actual device datasheet. BTW, you don't need to unsolder the chip to reprogram it; it would be very impractical to have to do so. That's the purpose of the JTAG port and it's very well described in the documentation :rolleyes:. You may have to unsolder a pin and apply an external voltage to reset the security fuse, though.

Actually, I expect the processor is used in pass-through mode when the radio is flashed. They probably have some dedicated NVRAM for the radio firmware, and I suspect it got security fused in version 1.65.XX. That's why the processor "thinks" the radio was reflashed when it actually wasn't. It may be something as innocent as a programmer forgetting to reset the security bit when he generated the binary image, but the outcome is the same. Anyway, that's too much science. Does anyone have the datasheet?
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] pepela:
problem

I also flashed my HTC a few days ago with this rom, and now i'am stuch to this version.

but i encounter 1 mayor problem: i can't make anymore a bluetooth conection with my carkit - Parrot MK6100

with older versions of radios no problem

greetings, pepela
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] GSLEON3:
Of course it worked. If you are security unlocked first you'll have no issue flashing back & forth from & to this radio.

Jocky, I know we've discussed this before, but I still think that we can find a way to security unlock the device even while this radio is already there. I know they've patched the backdoor into AMSS, but I still think there is a way to do it if we can somehow force into diag mode, which does seem to be possible if you nuke the SPL, then you can maybe enter dload, much like I know can. You've pretty much proven that a nuked SPL device can still be unlocked (security), so I think the we can use the Top-Secret FrankenKaiser, to unlock the device before the system completely initializes, maybe just by unlocking and then loading a different version into ram, tricking the device temporarily into thinking it's security unlocked.

Anyway, If we can get the "you know what" working, I'd sure like to solidify this theory & then test it out.

ALSO, is someone stuck with this radio willing to try something for me? If so please PM me. There is some slight risk, but it is relatively minor.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] AllTheWay:
I can do this but it would have to be around 2pm PST. I still have my old tilt stuck with the 1.65.17.10 radio. Could care less if I brick it. In fact I encourage it. I sacrifice my tilt for the greater good of XDA!!!
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] GSLEON3:
Great, I'll get it together & log in to MSN around 2.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] Olipro:
Sorry, I've not been following this massively, but...

me and cmonex just poked at the patched radio... and frankly it's a total ****up, I'm not entirely sure how this was expected to work at all in the first place... it is EXTREMELY trivial to patch this radio to allow flashing again.

now, for those of you already ****ed, it'd be nice to find someone who can play with QPST since I already got some **** together for that but nobody was forthcoming.

as for a *working* patched radio... we've already got that done, cmonex will release shortly... naturally it's only useful if you haven't already ****ed yourself but want to try this new radio.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cmonex:
as for the jocky patched radio of this ATT crap, it is no good because it only patches the commands not the real secu flag query function.

god, why was this patched radio posted at all i dont know.

SO DO NOT FLASH THAT ONE.

maybe you can still issue mw to patch the secu flag query then issue radata but i havent tested that :P

if anyone wants to test the properly patched version i can upload it. (AllTheWay has it anyway, I told him the patch a few weeks ago before we discovered the blocking code)
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] Olipro:
and while I'm on the subject...

yes, HTC do follow these forums, rather closely, as one would expect.

no, there is no "blown security fuse" - the oemsbl is unsigned and therefore the full trusted platform is not possible... you can set a GPIO to enable it too, but it'd still cause ****iness
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cmonex:
nooo that won't help, all the SPL does is send the data to radio, the radio bl has the flash blocking code, not the SPL.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cmonex:
NO, not necessarily. use atcommander to check your secu flag state (should be 0, not 1. i.e. flag must be unset)
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cmonex:
what are you ranting about? i guess you read 1 pdf somewhere mentioning the fuses but this has nothing to do with all the stuff - I see olipro already explained why.

so anyway reading 1 pdf doesn't suddenly make you an expert on this matter, and your last lines are a bit too harsh too, are you some ATT employee?
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] GSLEON3:
You go girl! On a roll are we... :p

OLIPRO, I can use QPST & a smatering of other tools. While I'm no WM Wonder Boy (or Superman if you prefer) like you, I'm willign to give it a go. Let me know what you had in mind via PM.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cmonex:
hehehe, yeah :P

anyway, just give your msn contact address to us (Olipro or me) - I do remember talking to you on IRC, that's also fine..

but I guess if nothing else, plain PM will do :)
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cmonex:
sorry, I didn't see this post before.. well, no, I can guarantee there is no such complicated protection going on here. do you know assembly? I can show you the exact offset in radata function in oemsbl where they blocked flashing if you are not security unlocked. it is just a few lines of added retarded code.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cotu1961:
Very funny...

...boratom LOL. Next time read the whole thread before you jump down someone's throat, eh? Anyone come up with a solution yet? I'm still trying to get the datasheet on this darned chip...
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] jockyw2001:
If you manage to switch the phone to qualcomm download mode, then let me know, as I can then jailbreak it.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cotu1961:
My turn...

...to apologize. Didn't see your post in time. Yes, I do know assembly; there would be no reason for me to post here if I didn't. I did not know the oemsbl is unsigned, thanks Olipro, it makes sense. And I think a pass-thru mode would be more for convenience rather than security. Either way, let's try to work together,eh? I'm only trying to help (yes, I got hosed too :( ), I'm not trying to show off or anything. I don't understand why people are being so sensitive...:confused:
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] sd73ta:
just to liven things up

does anyone know why my camera doesnt work and i cant here anything when i get a call? ... just flashed duttys new rom

this is just a joke. cant we all just get along and get this fixed : )
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] GSLEON3:
Just too get back to the overly sensitive & hostile natur I've come to adore, WHY THE H$LL would you ask that here?

No for your spoon feeding, You flashed the wron rom. You probably flashed the 1.64 radio version & it won't work with this rom. Well actually it will until you make any system volume level changes, then bye bye.

Flash a rom compatible w/ this radio.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] sd73ta:
sorry should have made this is just a joke part bigger was trying to liten everyone up so i could gat backto watching you all fix the radio from hell and not fight amongst each other sorry again thought it was funny:o
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] dwsco:
I thought it was funny too :) I was going to jump in and ask which was the fastest ROM and mention that I'd tried to flash a cooked ROM without 'that HardSPL thingy' but it wouldn't work, but I thought one moment of levity was enpugh...
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cmonex:
no problem, my intention wasn't really what it sounded like :)

ah you got the ATT crap too on your kaiser? do you have MSN or maybe an IRC client so we (Olipro and me) can talk to you? I'll show the code too :)