yashsingh1/xdaforums huggingface dataset:
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] AllTheWay:
Being that HTC makes both Tri-Band and Quadband phones would it be possible to turn a tri-band phone into a Quad Band phone following these same guidelines. Or is there a missing part of hardware.

It seems that manipulating the radios is going to require changing in and out .dll's. Am I wrong on this assumption or maybe you could point me in the right direction. I am willing to dedicate a lot of time to this project if it's possible.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] Mikulec:
I think that is not possible, its hardware related. Or am I wrong?
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] nicholasendean:
excellent thread!!!

no wish to but in but had to just say that fireblade this is one of the best posts I have read in a long time. Nice one and thanks to everyone else. A lot of the input / info is much too advanced for myself but its brilliant to read but the prospect of being able to have the best of both world from various radios all rolled into one is cool

NIce going

:).

Thanks

Nick
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] austinsnyc:
i think a new thread or Wiki section should be added with links to the proper tools and maybe a little guide on how to dump radios(not extracting them from RUU_signed.nbh files) and such for the less experienced people that would like to get there feet wet. one of the main problems with the Xda lay out it so much info is spread into different areas its hard to find everything your looking for even using the "search" button and google.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] korakesion:
That is not possible, its hardware related.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] AllTheWay:
That's what I figured
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cbass:
Guess that means us yanks have to wait a little bit longer to follow dutty.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] fireblade63:
It would've been great to find a solution to make tri bands work as quad.

Since HTC Touch Pro is coming out as a tri, would've came in handy:(

Anyway, as many other USERS here;

I am not understanding many of the heavy technicality posts.

Hopefully, our experts here will figure out a solution for the radios to be used on whichever ROM we want.

Thx for the participation
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] xboomer55:
FWIW, rumor has it that at&t will pick up the Touch Pro...

http://www.boygeniusreport.com/2008/07/01/att-roadmap-leaks-out/
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] AllTheWay:
There has been more discussion about that over here.

Tilt 2 Discussion

Personally I think they are talking about the SE Xperia X1 but it's just speculation at this point.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] pizzachips:
We need a translator here for all the technical terms being thrown around xD

Regarding tri-band and quad-band, I remember reading somewhere that the frequencies are determined in the factory via hardware change but that the hardware itself is capable of doing either frequencies...

Anybody willing to venture into a hardware mod on how to change from 900 to 850?

Also, I believe telus is offering the touch diamond soon in Canada. So that's something to look forward too....
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] scotchua:
I think that if we don't know understand what we're messing with, then it's better if we don't know what the terms mean. Keeps people who shouldn't be messing with things from doing so and complaining when things are broken :P

Either way it's something better and faster than this. If it comes out in the fall that'll be right after the time when, to quote the simpson's movie "the government gives us Alaskans $1000 bucks for letting the oil companies rape and pillage our land" haha. Though the PFD's will be well over $1000 (and it's a gross misrepresentation of the facts, haha), so i'll be ready for whatever new toy they provide us.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] cmonex:
well, you can't cook radios in the usual sense. that's because the radio is just three images... two bootloaders, and then the AMSS, which is just a big ELF file. no dll's to tweak with.

what jocky says is of course totally correct. especially pay attention to the NV items :) all I'd add is that patching the oemsbl (the htc radio bootloader, second bootloader of the two) is extremely dangerous if you don't know what you are doing. this is because this is an essential bootloader (SPL is not that essential to boot the device anymore as you've all seen from frankenkaiser) if you screw it up your device is a total brick. possibly (if screwed up badly enough) not even frankenkaiser would unbrick it.

the AMSS patching is ok (you can use oemsbl from our OliNex unlocker), no risks there (as long as you don't try flashing some too large AMSS image). nice idea on the WM6.1 compatibility. this will of course require loads of disassembly. decent enough challenge ;)

as for bands missing being in hardware or not. we now know that the diamond has an EDGE only indian version. we (Olipro & I) are going to play with one soon and see if the limitations are artificial. and of course, also see if the limitation on the 850Mhz is real or not.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] fireblade63:
Ok

I just hope someone out there is really interested and willing to allocate time to try and make this possible

Whatever the achievements you reach, sharing will definitely evolve other ideas to continue from where you stand.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] jockyw2001:
Another fine contribution.

Hiope you guys can turn "little indian" into "big indian" :)
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] AllTheWay:
Thank you for the plethora of information you have bestowed upon us once again cmonex. Looks like the direction I want to take is AMSS patching. Thanks for the information.

Would very interesting to see if 850Mhz frequency is allowed on Europeans / Asian HTC Diamonds.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] fireblade63:
Is someone still working on this or what's happening guys?
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] austinsnyc:
Improve GPS performance by tweaking Radio a little? Long Shot??

I would like to get some people together to try and edit the radio.nb file to see if we can improve the performance of the GPS of our Kaisers. Correct me if I am wrong, most of the GPS control comes from the radio, Just like the Wifi? If this is true then I think we should look into this and see if there is a way to give us better performance :) Also I am pretty sure there are some .dll's in the OS that also have some on GPS does any one know what those might me?

:confused:
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] viperbjk:
Not knowing HTC in specific, but being an AMSS expert, I can tell that neither GPS nor Wlan has anything to do with the radio part.

But QC includes AGPS als part of GPSone in most AMSS.

I'll have a look at the HTC Diamond to see what can be changed.

For the technical noobies, Radio Part can be seen as the API (Library) for the Qualcomm Chipset (QC) included in your mobile. You can modify AMSS (the advanced mobile subscriber software) for example to unlock hidden files and features, but also to unlock the mobile itself.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] dyetheskin:
can't wait to see what can be found by the pros when they work on this amss,hopefully it's for the best and not the worst
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] jockyw2001:
Welcome to XDA viper, I'm really happy to see you here :)

Guys, if anyone can do AMSS patching on code level then it is viperbjk

Cheers
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] P1Tater:
Holy friggin smokes!!!!!!!! Look who it is. Man, I sure am glad to see you here working on this. Welcome friend, welcome indeed.:D
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] viperbjk:
Hehe ... you know reversing does matter :)

I just analyzed the Diamond QCSBL .... and it seems to be almost identical to my BQS researches ..... just see what I found :

ROM:FFFFECC4 00 21 98 E7 LDR R2, [R8,R0,LSL#2]
ROM:FFFFECC8 01 00 72 E3 CMN R2, #1
ROM:FFFFECCC 0E 00 00 1A BNE exit2
ROM:FFFFECD0 01 00 80 E2 ADD R0, R0, #1
ROM:FFFFECD4
ROM:FFFFECD4 jumptocompare ; CODE XREF: checkamss+218j
ROM:FFFFECD4 01 00 50 E1 CMP R0, R1
ROM:FFFFECD8 F9 FF FF 3A BCC exitfunc
ROM:FFFFECDC 00 00 56 E3 CMP R6, #0
ROM:FFFFECE0 01 01 98 07 LDREQ R0, [R8,R1,LSL#2]
ROM:FFFFECE4 84 10 9F 05 LDREQ R1, val_0x1FFFF
ROM:FFFFECE8 01 00 50 01 CMPEQ R0, R1
ROM:FFFFECEC 06 00 00 1A BNE exit2
ROM:FFFFECF0 14 20 A0 E3 MOV R2, #0x14
ROM:FFFFECF4 08 10 A0 E1 MOV R1, R8
ROM:FFFFECF8 0A 00 A0 E1 MOV R0, R10
ROM:FFFFECFC EB C7 FF FA BLX memorycompare ; compare generated sha1 with decrypted sha1 from signature
ROM:FFFFED00 00 00 50 E3 CMP R0, #0
ROM:FFFFED04 01 40 A0 03 MOVEQ R4, #1 ; good guy
ROM:FFFFED08 00 00 00 0A BEQ exit

This is the sha1 compare that is used to verify the amss/oemsbl/whatever signature in qcsbl. Slightly different than the one I was used to in my Benq/Siemens research .... but yes, it is the same.

Still, I need a lot of infos on the HTC mobiles. Expect changes for HTC soon in my QC Tool :)

The ones who were involved in signature checking in .nbt files and qc radio part, please PM me, so that we can take this to a new level :)

Cya n thx, *being really impressed by the people and efforts on this board*,

Viper BJK
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] jockyw2001:
Yes that's the one brother, the one i hot patch by oemsbl if need to.

I'll give you a crash course bro. I'll answer your PMs t'morrow.

So you will get a diamond soon?
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] viperbjk:
Diamond : Yes, but it may take some time to get one :)

First of all, I'd like to get into the HTCs ... they seem to be quite interesting.

As far as I get it,

- Phone first boots normal QC stuff, like OBL, PBL, QCSBL, OEMSBL, AMSS

- Then "SPL" is loaded, which is responsible for app firmware upload (rom image) SPL has also a lot of interfaces for radio update (qc apis)

Ok .. so far so good. Now the problematic stuff.

A) the SPL stuff

SPL checks signature of NBH whilst uploading. Signature is SHA1-Hash with RSA-1024 encrypted. Exponent seems to be 0x10001. However, it seems I am too blind to find the right public key (has 0x80 bytes). Either it is in some special area (supposed) or in SPL itself.

SPL itself does not seem to have any signature ....

B) the radio stuff

Although there are signature checks in QCSBL.... I was neither able to find the signature part itself [(seems to be RSA-2048, 0x100 bytes, Exponent 0x3) in OEMSBL, QCSBL or AMSS] nor the public key (has 0x100 bytes).

Also in the packages there was no OBL and PBL included.

At 0x13c0020 (last part of radio.nb) there seems to be encrypted data or compressed data. Maybe here signature included ... or just EFS .... ?

So there are a lot of questions to be answered :)

Thanks Jockyw2001 for helping out :)

Cya,

Viper BJK

P.S.: The SPL is really fun to disasm :)
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] viperbjk:
Next version of my tool will add support to read out NAND Flash from MSM7500 (Diamond/Kaiser) using com port (hot patch method).

Also Analysis Function will work with HTC Kaiser/Diamond,

and a tool to extract files from radio.nb will be included,

and partition files from HTC can be analysed.

Stay tuned ....

Cya,

Viper BJK
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] jockyw2001:
Hehe, you should have joined XDA earlier viper.

It would have saved me a lot of time :D
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] Flying Kiwi:
Will this tool allow comparison between older Radios and newer versions or does that require allot of decryption and password hacking beyond what the tool offers? All this talk of security in your posts makes me think these things must be locked down like Fort Knox. The reason why I ask is just as the original creator of this thread mentioned, some of the original HTC WM 6.0 Radios for the Kaiser were perfect in terms of GPS performance (although the one on my Kaiser caused music to skip intermittently) but now it seems as if they must have been using their apprentice to deal with the GPS part because the performance is shocking. :eek:

I read what you wrote earlier about the Radio and GPS but I can assure you that the Radio or some part of it, does play a part in how the GPS on my Kaiser works (or doesn't as the case may be). The only difference between the current WM 6.1 upgrade and the one that HTC first offered a few weeks ago was the Radio version and there's a noticable difference in GPS performance with the newer radio. Clearly though, it's still nowhere near as good as it was with WM 6.0 so it needs correcting.

As HTC have dropped the ball with this one (I was told by one of thier staffmembers he'd not received any other complaints about GPS performance other than mine so he wouldn't escalate the issue), I think it'll be up to more knowledgable people than myself here at this forum to help us out with a solution. May I be so nosey as to ask how you've come to know so much about this very specialised field viperbjk? (vague answers are acceptable if you cant say specifically eg for employment related reasons).... Only reason is I'd like to learn more about these things but as mentioned already there doesn't seem to be a manual.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] viperbjk:
Depends on how much you need to know. On a end-user basis, it will offer you to show infos about used versions of oemsbl and qcsbl. Also, recognized formats like bmp/jpg etc.. can be extracted, if there are any.

But if you are a developer / reverser, it is like a swiss-knife. You can make use of cryptanalysis and crypto tools like signature generation and decryption, automatic search for used algorithms. You can even get aided help for using the almost unknown diagnosis port and special qc functions for the modem port. Thus you can read out sms just as the gsm standard. Reading out NVM, EFS, backup of complete phone (NAND) etc.... There are many more functions that can be used, too much to explain here.

I'm having yet to see what hardware is used by htc for gps. Normally, they include a sirf or infineon gps chipset. So, imho radio software has nothing to do with that. But QC offers AGPS functions that can be used to preload satellite data before normal reception and can make use of mobile broadcasts to find the own position using cell network.

*Grandpa mode on*

Mainly just for the same reason as you do ... wisdom and knowledge is the key :) I started a long time ago with Nokia DCT-3 ... that was my first cryptoanalysis "experiment", I was really keen on realizing how a phone works, why there are some protected firmware parts and how to decrypt those. Once I knew a lot about it, unlockers came and they used part of my knowledge for commercial purposes.

So I stopped reversing mobiles .... until the day the EF81 hit the market. Being impressed, what the EF81 was able to do when using QXDM, I had to buy one.

The only problem was :

I lost my phonecode :) So I started to reverse the whole EF81 ... and the more I researched, the more people I got to know that also had really good ideas, but most of the people did not know how to realised these.

As a result, my tool grew. Of course, unlockers are still interested in my results ....

*Grandpa mode off*

To conclude ... I never have worked as an engineer in any company *although already offered by one company*, I never joined any unlocker group. My wisdom is only based on own experiments, hard research (3 years of research) and of course the community itself. And the community is for whom I work for :) Sorry, I didn't introduce myself earlier :)

Cya,

Viper BJK

P.S.:

Yes, it is. BQS did a really great effort on locking down the radio.

All parts of the radio are signed. The public key is on otp, also the first bootloader. So a really complete security chain = Fort Knox. (very low chance to break)

But HTC did some mistakes ... or should I say ... maybe considered to use less security, luckily for us = Local bank (secure, but breakable)
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] Flying Kiwi:
Thanks for the intro

Thanks for all that info and the introduction. I'm not surprised a company has offered you work in this field! Good luck getting a balaclava to fit for this work ;)
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] viperbjk:
As it seems, Flash_Nand_cmd register is 0xA0A00000, Flash_Nand_addr register is 0xA0A00004 and Flash_Nand_Buffer is 0xA0A00010.

Also, Nand addresses seem to be the same on MSM7200/A and MSM7500.

Can anyone confirm my findings, especially concerning the MSM7500 ?

Although I already found the NAND functions in the bootloader, help in disassembly is needed.

MSM6250A was quite easy to go ... but as MSM7500 bootloader uses ECC methods, it is quite difficult without

having a device to debug via jtag :)

People that are good in asm disassembly, please PM me.

Cya, Viper BJK
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] DaveShaw:
Radio and GPS

Viper, would you mind reading and commenting on the following thread with regards to Radios and GPS: http://xdaforums.com/showthread.php?t=411067

You posted strong feelings about Radios and GPS before.

Thanks

Dave
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] fireblade63:
I would like to thank all who are trying to find a way through this.

I just hope you guys get somewhere
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] mystikal87:
Yes. Please know that we really appreciate the effort that you guys are willingly contributing to the cause. IF there is any way that we can assist please let us know.

You are the few...the proud... the XDA radio modders :D:D
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] fireblade63:
So, Is it possible guys?
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] GSLEON3:
Well, yes & no.

You can moddify radios in my experience, but the tricky thing is that you can not oversize them otherwise you can overwrite some important areas & end up with a non-booting device.
[Tilt, TyTN II, MDA Vario III Windows Mobile ROM De] fireblade63:
Seems like it's not gonna happen although we had the best ppl tryin here
[Xiaomi Redmi 7 Questions & Answers] Deleted member 8095198:
Help! I need persist.img twrp backup please I dont want to see find my device storage corrupted after every time i sign in.... Anyone can backup persist partion only and upload a link I would be very grateful...
[Xiaomi Redmi 7 Questions & Answers] h.boushi1987:
I have persist.img from original rom and it can be flashed through twrp do you mean that or do you mean something else?
[Xiaomi Redmi 7 Questions & Answers] Deleted member 8095198:
thanks for helping i got persist img from official fastboot room and flashed through twrp
[Xiaomi Redmi 7 Questions & Answers] amooade:
I need the Persist.img too, Please!

good day bro. Can you please share with me the link to the PERSIST.IMG, my redmi 7 is having persist issue.

thanks in anticipation.

---------- Post added at 10:58 AM ---------- Previous post was at 10:56 AM ----------

Please bro. I need the Persist.img file link to rescue my redmi 7 device too.

thanks.
[Xiaomi Redmi 7 Questions & Answers] GuestD2768:
You can find persist.img from the official redmi 7 fastboot rom or recovery rom. Search

miui_ONCLITEGlobal_V11.0.3.0.PFLMIXM and download the recovery or fastboot rom and extract persist.img from the zip.
[Xiaomi Redmi 7 Questions & Answers] h.boushi1987:
download it from this link

https://mega.nz/file/dZ8jURTR#e9Tnn8Wun1Itmz9Hnz19wmRyLD-NkjiNrRj07JNaO4Q
[Xiaomi Redmi 7 Questions & Answers] sathya80:
Link down

File is not there.. New link please
[Xiaomi Redmi 7 Questions & Answers] Mag NINJA:
I need persist.img for redmi 7 please help..ASAS
[Xiaomi Redmi 7 Questions & Answers] Nabin Neupane:
Will this fix fingerprint problem? In redmi 7 onclite
[Xiaomi Redmi 7 Questions & Answers] Darth Bidder:
In custom ROMs?
[Windows 10, 8, 7, XP etc.] Editor380:
I am using Asus G531GD which has just reinstalled Windows. Currently I have the error of not being able to use the shortcut Fn + Up Down to adjust the keyboard while Fn + Left Right can still be used normally. My grammar is a bit bad. Help me. Thank you very much !!

:crying:
[Windows 10, 8, 7, XP etc.] ጡኤᎇገነኪ:
Install drivers
[Asus ZenFone Max Pro M1  ROMs, Kernels, Recoveries] kundan jangir:
We’re really excited to announce the release of Paranoid Android Quartz Alpha, based on Android 10.

On the first launch, you’ll notice a clean setup with a beautiful wallpaper from Hampus Olsson, who teamed up with us again to create several beautiful pieces of artwork. For those who are unfamiliar, Hampus is a multi-disciplinary artist whose design stands for itself and we’re glad to have him onboard. We also added further UI touches that we believe enhances the overall user experience. This time around he have his wallpaper app Abstruct, were you will be able to find all of the Paranoid Android wallpapers alongside a huge amount of amazing wallpapers.

The alpha builds include adjustments and improvements on top of the stock Android CAF base. The Paranoid Android team and contributors are focusing on squashing existing bugs, and implementing and improving features.
​

What's working

Almost everything

Download

Get the latest Asus Max Pro M1 build [23/02/2020] : Here.

Changelogs

Keep an eye on our Twitter account, [MENTION=7394507]ParanoidAospa[/MENTION] , as we will be posting about new features getting included in the beta builds.

Instructions for installation

Download the latest build and GApps

Reboot to recovery

Flash the latest build and GApps

Reboot

Requirements

* Required * firmware version must be 060 or above.

Thanks to @pranavkpr for kernel and all others who helped me

We really appreciate all your knowledge & hard work!​

Paranoid Android twitter

Paranoid Android official channel (Telegram)

Asus Max Pro M1 Official Group (Telegram)

Cheers and #StayParanoid!

XDA:DevDB Information

Paranoid Android Quartz Beta 1, ROM for the Asus ZenFone Max Pro M1

Contributors

kundan jangir

Source Code: https://github.com/pranavkapoor001/kernel_asus_sdm660

ROM OS Version: Android 10

ROM Kernel: Linux 4.x

Version Information

Status: Beta

Created 2020-02-16

Last Updated 2020-02-23
[Asus ZenFone Max Pro M1  ROMs, Kernels, Recoveries] kundan jangir:
Reserved

===============================================================================

Update - 23/02/2020

===============================================================================

Source sided changes-

1. Updated to latest CAF tag LA.UM.8.11.r1-02600-NICOBAR.0

2. Fixed Dark theme issue

3. Added Google screenshot editor ( Markup )

4. Double tap on homescreen to turn off display

5. Many more changes which you can find on github and gerrit.

Device sided changelogs-

1. Added Signature spoofing

2. Network traffic indicator

3. Audio is improved

4. Network stablity will be fine i guess

Note :- If you have any issue tell me with logs.
[Asus ZenFone Max Pro M1  ROMs, Kernels, Recoveries] sskr_:
Noice
[Asus ZenFone Max Pro M1  ROMs, Kernels, Recoveries] Jaggerjacquez:
Screenshots please
[Asus ZenFone Max Pro M1  ROMs, Kernels, Recoveries] Freegeeek:
The messaging app is non existent
[Asus ZenFone Max Pro M1  ROMs, Kernels, Recoveries] Freegeeek:
But after the installation of messages from play store it worked fine . Though . Also the audio output is subpar it's has a bit of hiss and volume is low .
[Asus ZenFone Max Pro M1  ROMs, Kernels, Recoveries] kanarex1:
Pure and most liquid. It's CAF and feel it.
[Asus ZenFone Max Pro M1  ROMs, Kernels, Recoveries] kundan jangir:
I will look into it,

Thanks for reporting.