[P3600 Software Upgrading] arpcpro:
These are some random tests I made with putty, to start dumping something from phone. I get some references to WLAN in some sections, but don't know if everything is here (I mean IPL, SPL, Radio, or only an OS image).

Can anyone do this on a working trinity and upload the file so I can compare it?

Cmd>emapi

emapi+E+ÿÿÿÿÿÿÿÿÿÿ . . . ÿÿÿÿÿÿÿÿÿÿÿÿÿCan't get eeprom received ack!!!

Cmd>password BsaD5SeoA

Cmd>set 1e 1

Cmd>rbmc i:\htc\dumps\test1.txt OS

GetExtRomData+(): *pszPathName=i:\htc\dumps\test1.txt, dwStartAddress=501A0000, dwLength=39E4000

:F=i:\htc\dumps\test1.txt

:A=501A0000

:L=039E4000

:rbmc=

HTCSéýÿ

...

+ B o o t R a d i o

+ I n i t D r v G l o b a l ( )

+ I n i t M e m S e t t i n g ( )

K e r n e l : E E P R O M 2 C h e c k s u m = 0 x % x

K e r n e l : E E P R O M s i g n a t u r e O l d = % X % X % X % X % X

K e r n e l : E E P R O M 1 C h e c k s u m = 0 x % x

K e r n e l : E E P R O M s i g n a t u r e = % X % X % X % X % X

W L A N E E P R O M : N a n d R e a d E r r o r

- S h o w G S M V e r s i o ýÿûÿn ( )

No GSM G NONE [ K e r n e l ] F a i l t o g e t G 2 3 v e r . !

G 2 3 v e r . : % s

G R NONE [ K e r n e l ] F a i l t o g e t R a d i o v e r . !

R a d i o v e r . : % s

R + S h o w G S M V e r s i o n ( )

...

I s A l l B y t e s T h e S a m e - : d w L e n g t h = % x , b R e s u l t = % x

W r i t e W L A N E R R O R : W r i t e e r r o r

W r i t e W L A N D a t a

W r i t e W L A N B a c k u p D a t a

W r i t e M F G E R R O R : W r i t e e r r o r

L e n g t h > M F G _ D A T A _ L E N G T H !

W r i t e M F G D a t a

R e a d W L A N E R R O R : W r i t e e r r o r

R e a d M F G

3C N A N D F l a s h W r i t e P a g e W i t h S p a r e D a t a c h e c k e r r o r ! !

W S E r r o r = 0 x % x , A = 0 x % x , B = 0 x % x

N A N D F l a s h W r i t e P a g e W i t h S p a r e P r o g r a m f a i l u r e ! !

N a n d _ C h e c k B a c k u p - E r a s e B l o c k

N a n d _ C h e y ýÿûÿc k B a c k u p - W r i t e S e c t o r

N a n d _ C h e c k B a c k u p - W r i t e I n f o

N a n d _ C h e c k B a c k u p

N a n d r e a d A d d r E r r o r = 0 x % x

N a n d R e a d - T o o m a n y b a d b l o c k

H T C N a n d R e a d !

N a n d r e a d a d d r e r r o r , a d d r = 0 x % x

N a n d W r i t e - T o o m a n y b a d b l o c k

W r i t e N a n d S u c c e s s

H T C z ýÿûÿN a n d W r i t e !

N a n d w r i t e a d d r e r r o r , a d d r = 0 x % x

3@ AD P@	@ LS P@	x LS ì)€ðÀ KS ì

. . .

test1.txt comes out empty so activate putty logging to file of All session output. It needs a "set 1e 1" before every rbmc command.

Another thought I had while on the bathroom, can't we find out the mem addresses that we need by eliminating the parts already covered by ROM dumps used to kitchen?

I mean, to extract the *.nb from the stock_ROM.exe to use on cooked ROMS we know we have parts for example from mem addresses x05 to x10 SPL, x11 to x15 CID, x40 to x42 MainSplash.

The WLAN block should be one of the parts not written during the stock ROM flashing, in the example above from x16 to x39. We can use a USB sniffer to see that memory blocks address being flashed during a stock rom flashing, and create a trinity memory map.