yashsingh1/xdaforums huggingface dataset:
[P3600 Software Upgrading] sterh:
I as experimenting yesterday and tried AGAIN everything of the above, exactly as is in the hermes section.

here's my conclusions

1) putty exe is the same as mtty but in dos,you enter commands and get responces or actions.(name your session as you like, i named mine TRINFCKD)

2) plink saves the the output of putty session (plink TRINFKD > TRIN.nb) to a file (name it as you like,mine was TRIN.nb)

3)finally you get your file with all the data that you entered or your mobile responded (instead of having the output on mtty screen you have everything in a file)

THE POINT IS : a) i cannot flash oli's 2.30 ,b) we dont know the memory adresses to read and make our file or to flash that file.

THE SOLUTIONS : a) if olipro make the same of oli 2.30 but for trinity , b)if somedoby is kind enough to give an eeprom dump to edit and flash, or if we do the Uri Geller's trick,putting the trin in our palm look at it and say Work -Work -Work. He did it with broken watches with success.

CODING GURUS GIVE US SOME HELP, WE STUCK.
[P3600 Software Upgrading] arpcpro:
Just don't forget that the password for hardSPL 1.x on trinity is different, like gruptnt already mentioned on his post:

http://xdaforums.com/showpost.php?p=4522537&postcount=5

Putty output:

Cmd>password 0000000000000000

Invalid password.

HTCSF kEØ(HTCEPassWord: 0000000000000000

Cmd>password BsaD5SeoA

Pass.

HTCST ÚÈÒHTCEPassWord: BsaD5SeoA

​

We should use BsaD5SeoA instead of 0000000000000000.

In case we flash Hermes SPL2.30 on trinity then probably we have to use 0000000000000000.
[P3600 Software Upgrading] arpcpro:
Please ignore my last post. I think that if we have hardSPL1.30 we don't need the password:

http://xdaforums.com/showpost.php?p=1188555&postcount=1

CURRENT FEATURES

-SuperCID

-no file signing required

-no password required to authenticate with bootloader

-rtask commands enabled

-lnb command enabled

-bad NAND can be recovered with "task 2a"

-bad NAND can be recovered by flashing an OS.nb

-SPL protected from all HTC retail SPLs being flashed by accident (to bypass, use SSPL)

-bad NAND can again be checked for with "info 8"

-version displays 1.30.Olipro​

Here are the bootloader commands:

http://wiki.xda-developers.com/index.php?pagename=Hermes_BootLoader

Anyway I get 2 errors on my P3600:

Cmd>info 8

...

Block 0x6(6) is BAD block !!!

Block 0x6(6) is Reversed block

...

Block 0xB(11) is Reversed block

Block 0xC(12) is Reversed block

Block 0x1B6(438) is BAD block !!!

Cmd>checkimage

IPL CRC checksum = 0xCC893E87

SPL CRC checksum = 0xB0A4B5DB

CE CRC checksum = 0xBA1BBB2E

ExtROM is None.

Radio Image CRC checksum = 0x7AEA9EBE

Cmd>info 7

HTC Integrated Re-Flash Utility, Common Base Version : 1.51a

Device Name: T, Bootloader Version : 1.30.Olipro

Built at: Jul 25 2007 02:28:43

Copyright (c) 1998-2007 Olipro & HTC - Hard-SPL (MFG)

CPU ID=0x41129200

Main CPLD version=0xA

Main Board version=0x5​
[P3600 Software Upgrading] sterh:
It also states tha bad blocks can be recovered , i tried task 2a and flashing different os.nb many many times
[P3600 Software Upgrading] arpcpro:
1 - I also noticed that, but did that task2a fix the bad blocks and not the WLAN?

2 - Anyone knows or confirms that these bad blocks (specificaly Block 0x6(6)) is indeed the source of the WLAN ERROR?

3 - Maybe (and hopefully) I was wrong on my previous assumptions when I said we need a special SPL dev. edition. I deducted that based on the experiences of previous posts that someone told the *.nb dump came empty and I also saw that the russians of 4pda.ru were also trying to install 2.30 on trinity.

I'll make a test myself to see if I'm lucky and can read the trinity eeprom after all and will also try to see what comes out of a full backup with this procedure:

4 - This hardSPL1.3 we have also seems to support "lnb" command that is the final command they use on the Hermes thread to write the fixed eeprom.
[P3600 Software Upgrading] SuperSport:
Wow, using your video, I did log in yesterday and played around a bit, but you've gotten MUCH further than I attempted. This does sound like possible good news. Keep us up to date, and again, let me know if you want me to test things on my phone.

My Output:

Cmd>info 8
Block 0x0(0) is Reversed block
Block 0x1(1) is Reversed block
Block 0x2(2) is Reversed block
Block 0x3(3) is Reversed block
Block 0x4(4) is Reversed block
Block 0x5(5) is Reversed block
Block 0x6(6) is BAD block !!!
Block 0x6(6) is Reversed block
Block 0x7(7) is Reversed block
Block 0x8(8) is Reversed block
Block 0x9(9) is Reversed block
Block 0xA(10) is Reversed block
Block 0xB(11) is Reversed block
Block 0xC(12) is Reversed block

Partition[0], type=0x20, start=0x2, total=0xFE
Partition[1], type=0x23, start=0x100, total=0x1400
Partition[2], type=0x25, start=0x1500, total=0x18D00
Partition[3], type=0x4, start=0x1A200, total=0x63200

CE Total Length(with sector info) = 0x3511000
CE CheckSum Length(without sector info) = 0x3440000

Cmd>

info 7

HTC Integrated Re-Flash Utility, Common Base Version : 1.51a
Device Name: T, Bootloader Version : 1.30.Olipro
Built at: Jul 25 2007 02:28:43
Copyright (c) 1998-2007 Olipro & HTC - Hard-SPL (MFG)

CPU ID=0x41129200
Main CPLD version=0xA
Main Board version=0x5

Cmd>

I'm running the Full Backup now. I can't tell for sure, but it appears something is happening. My PC's HD light is flashing constantly. I'm not seeing the File Size grow yet. But I'm guessing this will take quite some time.

EDIT: Nope, nothing saved... Waited for hours...
[P3600 Software Upgrading] binht611:
you can use opilo 1.30 MFG hard SPL to write *.nb to nand flash. I flashed hermes.nb to my trinity and now it report Herm200 at bootloader:mad:. searching " hard SPL 1.30 MFG" in google.
[P3600 Software Upgrading] sterh:
Yo people, here's my daily log:

1)

it shows herm200 but it works??? you have wlan back????

2) i still have oilpro 1.20 ,i was playing with putty and i give you some pieces of logs

Cmd>password BsaD5SeoA

Pass.

HTCST ΪΘHTCEPassWord: BsaD5SeoA (only this pass works for me and not the 16 zeros)

after rbmc command dont put me.txt but only the address

Cmd>rbmc 50000000

GetExtRomData+(): *pszPathName=50000000, dwStartAddress=57600000, dwLength=8C08DAA0

:F=50000000

:A=57600000

:L=8C08DAA0

:rbmc=

HTCS

i tried dozens of combinations for start address and size,and always i got empty logs of 10 MB starting with

HTCS

and ending with

NANDFlashReadSectorWithSectorInfo: dwBlockIndex=0x400

NANDFlashReadSectorWithSectorInfo: Address over boundary!!!

rbmc: read data error at 0x8000000

Cmd>

3) You don't need plink, only with putty you can get the log you want i am attaching pictures

Guys we need memory address and size to get a decent backup of the eeprom and from there we will see
[P3600 Software Upgrading] arpcpro:
Hey, nice testing I see here on these last posts. Thanks.

I concluded that although the bootloader says "no password required", we still need to authenticate with "password BsaD5SeoA" because otherwise some commands don't work. So it's better to type the password just in case.

On my test I also couldn't download the EEPROM. I get 1 kb file instead of 256kb. Possible causes: Different memory adresses? Empty EEPROM? Inadequate HardSPL1.3???

Maybe someone that was a Trinity with working WLAN and HardSPL1.3 could test the procedure in the video to see if they get a bigger file:

http://www.fileden.com/files/2009/11/13/2649211/Trinity_eeprom.mp4

I didn't know that the putty logging feature did the same as plink when I recorded the video. But if putty logging works, that is much better because we don't need to type blind comands without knowing the output. At least we are making some progress in improving the procedure.

I also tested to download eeprom with different memory addresses starting with 00000000 and ending with FFFFFFFF but nothing usefull came to the log file. Except one time when putty started to output a lot of lines with same character (if there's data, probably will show up different sequence and not just zeros). I tested to change "set 1e 1" to "set x x" randomly without knowing what it was (I thought it selected some memory area). I now know that Type 1E is (RUU command read/write flag : 1(unlock) and 0(lock).) so it's probably ok that way. I'll try some more combinations while reading the "set" manual but I don't expect to find nothing here, just learning.

Can anyone test the "Cmd>checkimage" on a working Trinity to see if appears "ExtROM is None." like appears in mine.

* From binht611 test above we confirm that indeed hardSPL1.3 allows to write the NAND flash of Trinity, sweet :)

Still at open the question if it restored WLAN.

* Too bad that the full backup didn't work yet :(. Nor we have any usefull dump yet. So I support your point "Guys we need memory address and size to get a decent backup of the eeprom and from there we will see" and I will start checking how they were able to discover the addresses during the Hermes investigation.

PS: I already sent here a PM to OliPro on 8th November asking him for guidance and to take a look on this thread. I guess he is on vacation or is very busy guy that receives a lot of PM everyday and didn't noticed mine because no response until now.
[P3600 Software Upgrading] SuperSport:
Is our EEPROM the same as any other HTC Phone? Can we try downloading a working WLAN from any other phone?
[P3600 Software Upgrading] binht611:
no, it still report WLAN ERROR in bootloader and my wifi can't turn on. Maybe the NAND adress is not the same.

Now my trinity report invali ID vender when i flash new normal rom. However i still flash new rom with "skip checking id tip :D" but i don't like it.

who can extract new trinity.nb for me to restore origin id vender?. It is nand rom from address 500a0000.

that file look like herme1b.nb at post #33 in this topic (page 4)

that file is about 256k.
[P3600 Software Upgrading] arpcpro:
It is not the same as any other. So only with very luck we would be able to use the eeprom from a somewhat HTC model.

I think the model that has more similarities with ours is Hermes/Tytn. Trinity shares with Hermes the same chipset, Samsung 400 CPU, ATI chip, similar radio and same Qualcom 6275 chip with GPS One on board (although antenna connections are shorted on hermes), same Qualcomm JNAND Identification block.

We can even use the same commands for the bootloader and radio patch for SIM/CID unlock tool. Artemis also has a similar bootloader but Trinity's SPL is more similar to Hermes SPL. Artemis SPL is different and doesn't have Wi-Fi.

But we already have the working eeprom for Hermes. It is that file herm1b.zip (mentioned on the above post) that contains a usable MAC address. The other file named herm1.zip needs some hex editing to replace the mac address.

I've found a thread regarding Trinity bootloader that seems interesting for us and may be helpfull to find the adresses: http://xdaforums.com/archive/index.php/t-287077.html

************************************************** ************************************************** *

Cmd>ReadExtROM

Dump Ext ROM to MTTY terminal

************************************************** ************************************************** *

Cmd>WLANReset

Usage:

WLANReset 1(or0)

set SDIO: 0-WLAN ;1-SDMC.

Cmd>WLANReset 0

WLANReset(FALSE)

Cmd>WLANReset 1

WLANReset(TRUE)

************************

************************************************** ************************************************** *

Cmd>emapiWlanMac

Notice: This MAC address takes effect only when your platform is EEPRON-less configuration. Please use (emapiTest) to verify it !

Copying GSM DATA image to SDRAM:00004000

Wlan data header ++++++++++++++++++++

Signature : 0xEE1250

UpdateStatus : 0x2

UpdateCount : 0xA

BodyLength : 0x1A1

BodyCRC : 0x4349311B

Wlan data header --------------------------

0x00000000

0x00000009

0x0000002D

0x000000D2

0x000000D5

0x000000FB

**************************************

If you explain how to do that I can for sure upload it here. You need me to do this on mine? :

task 32

password BsaD5SeoA

set 1e 1

rbmc me.txt 500a0000 40000
[P3600 Software Upgrading] eisbaer82:
You only need to open the herm1b.nb in an hex editor and replace HERM200 with TRIN100 and then reflash this file. This worked for me.
[P3600 Software Upgrading] sterh:
I did it tried to flash the file according to previous posts (cmd>lnb herm1.nb 500a0000 40000) with mtty and nothing happened (stuck for about 30 minutes).

How did you flash it??

Wich address you used ???

Wich bootloader you have???
[P3600 Software Upgrading] gruptnt:
idem 4 me

but after i have modify herm1.nb

herm200 to trin100

serial number

and mac address is equal to pof :D

reflah

and now your trinity return to trin100
[P3600 Software Upgrading] gruptnt:
into all spl 4 trinity is present password

here an hex of olipro 1.20

BsaD5SeoA
[P3600 Software Upgrading] SuperSport:
So, did it FIX your WLAN?
[P3600 Software Upgrading] eisbaer82:
I used mtty.. Not sure if version 1.42 or 1.16, did it a few weeks ago.. One worked, the other not. Also it seems that it only works under windows xp.
[P3600 Software Upgrading] sterh:
wich address you used??

have your wlan back?? it works???

how long it takes???

this is what i get:

Cmd>password BsaD5SeoA

Pass.

HTCST ÚÈÒHTCEPassWord: BsaD5SeoA

Cmd>lnbs Trin1.nb 500a0000 40000

:F=Trin1.nb

:A=500A0000

:O=00000000

:L=00040000

start NB image downloadSH

Load ADDR: 500A0000 Length: 40000

**ERROR: NO header matched

ERROR: NO header matched

Cert Key Error

Cmd>
[P3600 Software Upgrading] gruptnt:
No!

after i flash with modify herm1.nb

into info 8

block 0x6 no bad !!

but wlan is ko

i have flash other rom

and after more time info 8 return

block 0x6 bad

if i reflash herm1 modify .. not change block bad :(

i have ask to olipro into private msg if can create an spl to read into address eeprom 4 trinity but not respond :(
[P3600 Software Upgrading] eisbaer82:
I've done the things described in the hermes thread.

I doesn't have my WLAN back, it only changed my device id.
[P3600 Software Upgrading] gruptnt:
ok i reflash with herm1.nb ... 4 me i have edit herm200 to trin100 with hex editor and call file herm5.nb

here what happens

after with info 8

NO ERROR !!!

but wlan error

i think address is different to hermes

(lnb command is enable olny olipro 1.30 )

so we have necessity to read address 500a000 40000 but into trinity

how?

"patch the bootloader to allow rbmc at any address"
[P3600 Software Upgrading] SuperSport:
I've been able to reproduce gruptnt's results. Bad block is fixed for now, but still no WLAN.
[P3600 Software Upgrading] gruptnt:
I want to ask who has the trinity FULL working

to execute with putty

an task 37 ff

and share log

putty config connection

putty config log

my log

http://xdaforums.com/attachment.php?attachmentid=246530&stc=1&d=1258200303

command :

task 32

task 37 ff

Tnks
[P3600 Software Upgrading] sterh:
ok it means something overwrite the bad block. Now lets take it from ther one step at a time.

Do you get any mac address in the network settings??

does the wlan turns on through comm manager???
[P3600 Software Upgrading] SuperSport:
Nope, neither.

Yes, I'm wondering if we are off by a few blocks, or???
[P3600 Software Upgrading] konst_kk:
Do not use hermes eeprom data (herm1.nb file) as hermes uses ACX100 wlan chip and Trinity TNETW1251. Eerprom length of hermes is 417 bytes long and Trinity is 661.

The most close to trinity eeprom data are from kaiser.
[P3600 Software Upgrading] konst_kk:
I have an eeprom version that I’ve managed to create from various sources as no one could provide an original one.

Everything works fine, device boot with no problem, checksum is ok, wifi registry parameters are set during boot, windows enable the wifi, light is on, MAC Address is shown,

but.... I can not discover any access point when I turn on the wifi, so I do not know if the eeprom is not totally correct or my device has a H/W problem with the wifi.

Does anyone wants to try out this eeprom ?????

or review it and let me know if something is wrong?.
[P3600 Software Upgrading] eisbaer82:
Post it. I try it when I'm home.
[P3600 Software Upgrading] konst_kk:
In order to write the eeprom you must have oli 1.30 HardSPL, also you will need mtty version 1.16(attached).

Edit the attached .nb file with a hex editor and go to line 1 F850 and modify the last 4 bytes (the ones with FF) and the first byte from line 1 F860 to reflect your previous mac address in reverse(e.g. your mac address was 09 24 34 42 20 you must enter 20 42 34 24 and next line 09), save the file and copy it to the same directory with mtty.

Through the mtty, connect to phone and issue the following commands,

> task 32

>set 1e 1

>lnb <filename>.nb 500a0000 40000

>task 8

NOTICE: YOU MUST EXECUTE THE ABOVE PROCEDURE AT YOU ONE RISK.
[P3600 Software Upgrading] eisbaer82:
Thanks. I try it as soon as I can.
[P3600 Software Upgrading] gruptnt:
yes work (mac is on ) but no connect

it is a good step ahead !!!!!!
[P3600 Software Upgrading] SuperSport:
I'd like to try it. Thank you.

Also, I have a working Kaiser, do you think that would help us any?
[P3600 Software Upgrading] zoko:
the same issue on me!!! yeh good step, wireless on, but not catch any wireless network!!!

konst_kk how do you extract that epprom?? it´s possible to extract from a trinity! because i have a trinity that the wireless work!!!
[P3600 Software Upgrading] sterh:
Same here ,wifi on ,mac ok correct , but no networks discovered.

I edit and insert all thesettings ip,dns,net key but still nothing.

Comparing your file to herm1.nb i found differences,the chip type that you mentioned, and also your file end at 3fe80 - herm1 stops at 40000 but as you mentioned trin file is bigger "Eerprom length of hermes is 417 bytes long and Trinity is 618" so i believe something is wrong there.

And yes, zoko has a working trinity may with the correct instruction he can make a dump of the eeprom.
[P3600 Software Upgrading] zoko:
i will try whatever ppl won´t to... sorry my english
[P3600 Software Upgrading] konst_kk:
I've done it a long time ago by using the hermes procedure and if I remember well,one of hermes spl. But I can not help you out as I do not remember any details in order to describe a safe procedure. Sorry..
[P3600 Software Upgrading] konst_kk:
I don't think that kaiser eeprom will help us more as I have already study kaiser eeprom for 3 months, but thanks anyway.
[P3600 Software Upgrading] SuperSport:
No Problem. So, can somebody walk zoko through the process of dumping his EEPROM? Sounds like he's willing if he is told how to. I'm understand that he has TWO Trinitiy's, one working, and one not?
[P3600 Software Upgrading] eisbaer82:
Same result here
[P3600 Software Upgrading] gruptnt:
ok

if we can grab eeprom on working trinity can be rewrite on trinity with wlan error because olipro 1.30 is enable command (lnb)

now i think we ask to olipro to create an olipro 1.xx 4 enable read 500a0000

...
[P3600 Software Upgrading] zoko:
yes i have two trinity one with working wireless and another not! I don´t understand anything about this, so any help i apreciate!
[P3600 Software Upgrading] sterh:
Hey Brothers in despair,

have a look at this post http://xdaforums.com/search_rop.php?searchid=30397068 ,is for the prophet but i think that the utils and the methodology can help us out.

I haven't finish reading and testing,but if i have something new i'll post it.
[P3600 Software Upgrading] SuperSport:
Can you check the link again? It's not working the way posted. Thanks! ;)
[P3600 Software Upgrading] eisbaer82:
Here is some info: What we need is the correct so called "nvs" or callibration file for our trinitys. In the .nb file, the file is found at offset 1F840 and starts with the header 0x02 0x11 0x56 0x06 0x1C 0x06.

Some resources:

http://www.htc-linux.org/wiki/index.php?title=WL1251

http://wiki.openmoko.org/wiki/Openmoko_on_HTC-Dream#WLAN
[P3600 Software Upgrading] sterh:
reposting http://xdaforums.com/showthread.php?t=354848&highlight=reflashing
[P3600 Software Upgrading] gruptnt:
you have an pm
[P3600 Software Upgrading] mi7:
Ita

ciao gruptnt, anche a me non va il wifi (neanche con la rom ufficiale) ho un errore :

Cmd>info 8

Block 0x0(0) is Reversed block

Block 0x1(1) is Reversed block

Block 0x2(2) is Reversed block

Block 0x3(3) is Reversed block

Block 0x4(4) is Reversed block

Block 0x5(5) is Reversed block

Block 0x6(6) is BAD block !!!

Block 0x6(6) is Reversed block

Block 0x7(7) is Reversed block

Block 0x8(8) is Reversed block

Block 0x9(9) is Reversed block

Block 0xA(10) is Reversed block

Block 0xB(11) is Reversed block

Block 0xC(12) is Reversed block

ti chiedo come si può ripristinare ?scusa ma non conosco bene l' inglese

eng

gruptnt hello, even I do not go on wifi (even with roms

Journal) I get an error:

Cmd> info 8

Block 0x0 (0) is Reversed block

Block 0x1 (1) is Reversed block

Block 0x2 (2) is Reversed block

Block 0x3 (3) is Reversed block

Block 0x4 (4) is Reversed block

Block 0x5 (5) is Reversed block

Block 0x6 (6) is BAD block!

Block 0x6 (6) is Reversed block

Block 0x7 (7) is Reversed block

Block 0x8 (8) is Reversed block

Block 0x9 (9) is Reversed block

Block 0xA (10) is Reversed block

Block 0xB (11) is Reversed block

Block 0xC (12) is Reversed block

I wonder how you can restore? sorry but I do not know well 's

english
[P3600 Software Upgrading] zoko:
here is my log hope ppl found a solution!!! keep in touch
[P3600 Software Upgrading] SuperSport:
Is this what we needed? I figured we needed a dump of a working eeprom. But I'm along for the ride, so I really don't know... :o
[P3600 Software Upgrading] sterh:
Starting from this link http://xdaforums.com/showthread.php?t=354848&highlight=reflashing i start reading (brought me back to my high school years) and follow links ,finally i managed to dump my rom with pdocread -easy to do- and now i have four files Part00.raw, Part01.raw.......Part02.raw.

I also found in the ftp-uploads section dumps of original roms and downloaded 3 of them , comparing the files my Part00 and uploaded Part00 are exactly the same in size all of them,Part01 mine is bigger in size ( all 3 others have exactly the same size) ,parts 02 and 03 are different from rom to rom.

If i am not wrong in part01 is were the mac and the wifi settings sits. Now i am trying to find a way to flash a downloaded Part01 to my phone but i'm stuck,i don't know how to flash a raw file or if i have to convert it and how to do that, i also pm'd the guy who gave the instructions in the above link but had no answer yet.
[P3600 Software Upgrading] arpcpro:
Nice findings on that post. But if the guy you're talking about is "paradis_pal" I'm afraid you wont get an answer from him. His last post was on 4th February 2008, and I see banned in the status. Probably he is still around here but using other nickname.

Regarding the raw files, I don't know if they are binary. Because binary seems pretty raw to me, just 1s and 0s. But if they were dumped with pdocread its worth trying to use pdocwrite to flash them.

-That dump you made "part01", is from a working Trinity?

-Can you upload it here and tell me the command and parameters you used to dump that?

Thanks
[P3600 Software Upgrading] sterh:
"Paradis_pal" was banned but "paradis_pal(again)" logged in last july 2009, hope he'll answer.However for the dumped roms try this one from : ftp://xda:xda@ftp.xda-developers.com/Uploads/Trinity/Dumped_Trinity_Vodafone_WWE_1.23.405.zip .hope it works as i had no way to flash it and check it, 'cause with pdocwrite had no luck at all.
[P3600 Software Upgrading] zoko:
i found this reconstruck process for polaris, that´s work on trinity!!!

http://www.planete-htc.com/index.php?mod=forum&ac=voir&cat=151&id=11915
[P3600 Software Upgrading] SuperSport:
Do you mean your WLAN now works again?
[P3600 Software Upgrading] zoko:
i dint try because i don´t no how obtain begin.bin and relleno.bin, and probably is device depend!