Does anyone know how to upgrade Radio 1.27 to 1.35 without getting BL 1.07 changed to BL 1.08??
There is no way. But then, why do you care what radio BL you have?
I just like having all possibilities of upgrading Hermes components back and forth. I am aware of Des's SSPL tool, but you need to be in Windows Mobile to use it.
However, I saw an interesting post where Izzard-UK managed to burn the OS.nbh from the Micro SD, it is probably possible to do the Radio and ExtrRom using some sort of file that will tell it which location to start Writing.
It looks like soon we will have have cleverer and more powerful tools.
Well, the technique for microSD loading of an nbh image is not new. I would say that if you can get bl 1.01MFG loaded then you're pretty much good to go with the sspl solution.
My Radio 1.35.00.11 upgrade failed with 114 Error and now Hermes starts in Bootloader mode.
What could go wrong and what to do?
I'm now running update again to see if it fails again or not.
I had XDA Live 0.10 + Radio 1.18, Bootloader 1.01 MFG as far as I remember.
@schriss: you need to go into bl with mtty & issue the following commands:
set 14 0
task 8
the first command sets the boot flag from "boot to BL" back to "Boot to OS"
the second command resets your hermes
This is the problem you would see if you were using a .nbf upgrader instead of an sppl upgrader. Bl 1.01MFG is missing commands and causes an abort.
However, sspl executes its own bl which is v1.09.
When you were doing the upgrade, when the RUU put your device in tri-color mode, what bl version was displayed?
Sleuth255 said:
@schriss: you need to go into bl with mtty & issue the following commands:
set 14 0
task 8
the first command sets the boot flag from "boot to BL" back to "Boot to OS"
the second command resets your hermes
This is the problem you would see if you were using a .nbf upgrader instead of an sppl upgrader. Bl 1.01MFG is missing commands and causes an abort.
However, sspl executes its own bl which is v1.09.
When you were doing the upgrade, when the RUU put your device in tri-color mode, what bl version was displayed?
Click to expand...
Click to collapse
I don't remember what was displayed, but you are right, I didn't use sppl upgrader because the link was broken and there was only one upgrade on FTP.
I've taken time and read WiKi and almost started flashing BL 1.04 hoping that it could let me run the upgrade again successfully - would that work?
I'm on mtty now trying your commands...
EDIT: That's the link that didn't work: ftp://xda:[email protected](GPS-Enabled)Trinity2Hermes-SSPL-comp.zip it's on GPS Driver first page.
EDIT2: Set 14 0 command helped, THANKS!
All radio-only links are still in the Wiki. The 1.35.00.11 link is still good there in the shipped radio only upgrades section. I'll check the GPS page & fix... The valid wiki link points to this file.
BL1.04 won't work if your radio is already using bl0108. Best to just use sspl and not worry about it.
Sleuth255 said:
There is no way. But then, why do you care what radio BL you have?
Click to expand...
Click to collapse
You mean even if we flash radio 1.27..00 with the newest 1.35.11 using sspl method, radiobootloader bl0107 will change to bl0108.
if this true why we should upgrade 1.27.00 to 1.35.11 and loose the ability to flash extracted radios in nbf format?
IIRC, you will loose the ability to enter some radio bootloader commands if you go to bl0108 with sspl. OTOH, you will gain the ability to use the latest radio ROMs for your device if you go the sspl route (since they are all bl0108 from 1.27 on). Those are the tradeoffs IMO.
I was in the Wiki looking around for various "task" commands when you are the in bootloader using TTY but I don't see anything outline the list of commands (e.g. task 32, task 8, etc...).
I thought may be there will be specific command to get the version of the Radio Bootloader from TTY.
Nevermind, I needed to dig deeper
I was in the same dilemma whether to use radio v1.27 or v1.35.
After much thinking, I decide to stick to radio v1.27 with HTC boot 0107.
I've done a bit of digging and it seems there really isn't much difference between the radio bootloader commands available in 0108 and 0107. I was mistaken. I was thinking about the Trinity Bootloader that was missing the commands that got you into the Radio bootloader AT interface...
So, bottom line IMO is there is no good reason to stick with an 0107 Radio bootloader. All the most current radios have the 0108 bl and with sspl, it's trivial to switch to any radio you want.
Sleuth,
Since this radio rom is GPS enabled, have you found that it uses more battery power compared to the 1.34 version? Or are the GPS chips always on anyway?
It doesn't use any more power unless an "[email protected]" command is issued to turn on the GPS radio. The only program that can do this on a hermes is superdave's VRSerial driver which you must install seperately.
How is the radio 1.35.00.11 compare with Radio 1.34.00.10??
Will it be better?
Sleuth255 said:
I've done a bit of digging and it seems there really isn't much difference between the radio bootloader commands available in 0108 and 0107. I was mistaken. I was thinking about the Trinity Bootloader that was missing the commands that got you into the Radio bootloader AT interface...
So, bottom line IMO is there is no good reason to stick with an 0107 Radio bootloader. All the most current radios have the 0108 bl and with sspl, it's trivial to switch to any radio you want.
Click to expand...
Click to collapse
my only concern is if the 1.35 rom is not as reliable/stable as the 1.20 rom i am using now, i am unable to go back since there is no SSPL radio for 1.20. The only versions i see in the wiki is 1.27, 1.34, 1.35
I updated my TyTN with the AKU 3.3 full update (OS, ExtROM, Radio 1.34 and the works).
Now I want to upgrade the radio to 1.35, since I have some connection problems, but wasn't it so that you couldn't do radio extracted rom only upgrades due to some reason?
Or can it be done with Des's SSPL bootloader?
[edit]
Never mind, found the answer and now running 1.35 Radio
[/edit]
@joej: its easy enough to make one for yourself from any Full NBH that has that radio. Table in Wiki will tell you which.
Welp, after one day with 1.35 radio I've decided to revert it back to 1.27. I've found that this 1.35 version is even worse than 1.34. The line has dropped (voice) 4-6 times / 1 hour talk.
I drive by car 2h/day the same route so there shouldn't be much difference between the signal quality along the way.
Related
For those wondering what's de difference between each radio version, I've compiled a table with all radio ROMs available for the Hermes from the info I could extract from the decoded radios.
Here comes an explanation of each field, some things are just my guess and others are unknown to me:
Radio: Shipped Radio version as shown on splash screen or device information under WM5.
Protocol: If it ends in W means it's WEDGE (WCDMA and GSM/GPRS/EDGE), if it ends in H means HEDGE (HSDPA/WCDMA and GSM/GPRS/EDGE).
KMRX: M6275B-KMRX version (don't ask me what is this!)... seems to be part of the protocol string.
HTC_BOOT: HTC Radio Bootloader version.
QC_BOOT: Qualcomm bootloader version.
DATE1: First date string found (1 time) - this is most probably the radio build date.
DATE2: Second date string found (6 times) - this seems to be the common base between radio's build date.
JNAND: QUALCOMM JNAND Version and build date of JNAND.ELF for MSM6275 SURF and FFA
I have the feeling that HTC_BOOT V1.0108 will be a pain in the ass
If someone can bring more information, it is welcome
Some more information
RADIO VERSION
The Qualcomm MSM6275 chipset is found on Hermes, Trinity and Breeze devices.
If radio version ends in "1" it means GPS is enabled in this radio, if it ends in "0" it means is disabled. Example:
Radio 1.21.31.10 ==> GPS is disabled
Radio 1.22.01.01 ==> GPS is enabled
To see NMEA data you can use the command "[email protected]" in GSM AT Command interpreter. To stop receiving NMEA data use "[email protected]". It is possible to flash a GPS enabled radio from Trinity on Hermes, but Hermes hardware seems to lack either the antenna or the RF amplifier (or both) and it is not possible to use the MSM6275 as internal GPS on Hermes. See related thread for more info on this.
--------------
HTC_BOOT
This is the radio bootloader, do not confuse with normal bootloader (SPL).
Until now there are three radio bootloader versions found inside hermes radio (GSM.nb): 1.0106, 1.0107 and 1.0108
The last 4 digits of the radio bootloader version is returned by radio bootloader command "rversion".
These are the known differences between them:
1.0106 -- still has command 'rrbmc' to read back the memory content
1.0107 -- command 'rrbmc' does not work anymore, but it has been replaced by command 'rdpram' with the same syntax.
1.0108 -- this was first seen in Softbank X01HT post december 2nd devices (radio 1.14) and is also included in some trinity radios. The peculiarities of this radio bootloader version are explained here:
If you have a radio with HTC_BOOT 1.0108 on your device, you can't use extracted radio ROMs: This means you will not be able to flash radios in NBF format with MaUpgrade_NoID.exe anymore, you'll allways need to flash them in signed NBH format (ie: full ROM upgrade).
If you have a radio with HTC_BOOT 1.0108 on your device and flash a full ROM upgrade in NBH format, the radio will not be flashed unless your SPL version is 1.09.
If you have a radio with HTC_BOOT 1.0108 on your device and flash a full ROM upgrade in NBH format with SPL-1.09 on your device, your radio will be changed to the radio contained in the NBH file, HOWEVER the radio bootloader will stay the same HTC_BOOT 1.0108.
The same, explained in other words:
If you have a radio with HTC_BOOT 1.0108 (for example softbank x01ht 1.14 radio) and want to flash radio 1.21.31.10 on your device:
Upgrade your SPL to version 1.09, either by flashing a full rom containing SPL 1.09 or by flashing only this SPL with MFG bootloader.
Flash a full ROM containing 1.21.31.10 (or your desired) radio version, for example jasjam 1.31 rom. This will put radio 1.21.31.10 on your device, but HTC_BOOT will be 1.0108 even if the radio 1.21.31.10 has HTC_BOOT 1.0107.
Flash MFG bootloader again and flash extrom and OS "manually" from MFG.
Results after this:
Radio 1.21 will be back on your device, but HTC_BOOT 0108 will stay instead of being the original HTC_BOOT found on radio 1.21 (HTC_BOOT 0107). This means you will not be able to flash radios in NBF format with MaUpgrade_NoID.exe anymore, you'll allways need to flash them in signed NBH format.
--------------
Recommendation:
Don't flash any HTC_BOOT 0108 radio on your deivce if you plan to test Trinity's GPS enabled radios on Hermes, because you'll loose the ability to flash radios in NBF.
There are 2 trinity GPS enabled radios:
- 1.29 with HTC_BOOT 0108
- 1.22 with HTC_BOOT 0107
If you want to test, flash the 1.22, otherwise when you flash a new full hermes ROM in NBH you will keep the HTC_BOOT 0108 and will never be able to flash a Trinity radio on Hermes again.
Uau! pof, this is a very interesting info. Did you translate it to the wiki?
Not yet, I'm still doing research on the radio and will be using this post to add my findings. When I think it's complete then will probably write the wiki page.
To pof:
Must a radio version 1.14 of X01HT be 1.0108? How can we check it?
So we can only upgrade the radio rom by a full rom only (ex: jasjam 1.31 rom). If we do it, whether it has other effect on our devices? I think we still can flash other full rom after do it, isn't it?
Thank you for your kindly reply first!
kamiru said:
Must a radio version 1.14 of X01HT be 1.0108? How can we check it?
Click to expand...
Click to collapse
All softbank X01HT post 2006-12-02 with ROM version 1.33.761.4 have:
- radio 1.14 with HTC_BOOT 1.0108 (radio bootloader)
- SPL-1.09 (normal bootloader)
You can't check it because you need to access the radio bootloader for that, but the command to do this (rtask a) has been removed in SPL-1.09.
If you downgrade the SPL to 1.04, you can see it using radio bootloader command "rversion":
Code:
USB>[B]rtask a[/B]
[COLOR="SeaGreen"]Enter Radio Bootloader[/COLOR]
[B][COLOR="DimGray"]rversion[/COLOR][/B]
[COLOR="SeaGreen"]0108[/COLOR]
kamiru said:
So we can only upgrade the radio rom by a full rom only (ex: jasjam 1.31 rom).
Click to expand...
Click to collapse
Yes, and after having unlocked your phone with imei-check unlocker latest version (v4b). Otherwise you will not be able to flash other full rom because SPL-1.09 will check your CID and give you the "invalid vender id" error all the time.
kamiru said:
If we do it, whether it has other effect on our devices? I think we still can flash other full rom after do it, isn't it?
Click to expand...
Click to collapse
You loose softbank warranty after doing it, that's the only downside.
flash without radio
I gues when the new HTC firmware comes out, it will most likely have a radio with HTC_BOOT 1.0108.
so is it then possible the extract everything from it and flash it without the radio part.
this way we can allways chose witch radio we want to have, including the gps enabled radio. Or else it will be impossible to flash the gps enabled radio in the future, or am I wrong?
trion said:
I gues when the new HTC firmware comes out, it will most likely have a radio with HTC_BOOT 1.0108.
Click to expand...
Click to collapse
I guess that too, as new trinity ROMs are coming out with that version.
trion said:
so is it then possible the extract everything from it and flash it without the radio part.
Click to expand...
Click to collapse
Yes, using the 1.01 MFG bootloader.
trion said:
this way we can allways chose witch radio we want to have, including the gps enabled radio. Or else it will be impossible to flash the gps enabled radio in the future, or am I wrong?
Click to expand...
Click to collapse
You're right.
There is a new Radio-Rom in FTP-Uploads (1.27.0.0).Can anyone confirm, that is has 1.0107 ?
It has 0107, it's safe
Code:
USB>[B]rtask a[/B]
[COLOR="SeaGreen"]Enter Radio Bootloader[/COLOR]
[B][COLOR="DimGray"]rversion[/COLOR][/B]
[COLOR="SeaGreen"]0108[/COLOR]
Dear pof,
After I checked my device, I found it is 0108 version. But I think my device does not be hacked by imei-check unlocker latest version (v4b), since I used it before v4b release.
So whether I can upgrade to a full rom? After I upgrade it, whether I need to purchase the imei-check unlocker?? thank you for your kindly reply again.
@kamiru: If your device is SuperCID you can upgrade the radio in NBH format with bootloader 1.09, either by flashing a full rom or the 1.27 shipped radio we have now. If it's not SuperCID you'll need to purchase the imei-check unlocker.
Need SPL-1.09...
I used the HERMES Bootloader 1.01 MFG to check the HTC_boot on my x01ht, and it's 1.08.
So now I need to go back to SPL 1.09 but where's the file? I only have the spl-1.04.nb and spl-1.01.nbs from the .zip.
Mike
you have to flash your devicewith a complete rom to get the version 1.09 on it.
sorry
ok so if i purchase the imei-check unlocker, does that give me SuperCID even though my device is not sim locked?
what does the imei-check actually do?
Considering that a full rom update will flash the HTC radio bootloader, can an older full rom update downgrade and replace the HTC radio bootloader to an older version?
or is there some sort of dependency that the radio bootloader can only be flushed up a version.
Where to download 1.29 with HTC_BOOT 0108?
Thanks
Superenchi said:
now I need to go back to SPL 1.09 but where's the file?
Click to expand...
Click to collapse
here.
apokryphus said:
you have to flash your devicewith a complete rom to get the version 1.09 on it?
Click to expand...
Click to collapse
No, use SPL-1.01 MFG to flash SPL-1.09 only.
walshieau said:
ok so if i purchase the imei-check unlocker, does that give me SuperCID even though my device is not sim locked?
what does the imei-check actually do?
Click to expand...
Click to collapse
Not sure, ask their support team
funks said:
Considering that a full rom update will flash the HTC radio bootloader, can an older full rom update downgrade and replace the HTC radio bootloader to an older version?
Click to expand...
Click to collapse
No, once HTC_BOOT 0108 is flashed on your device there is no known way to downgrade it, at the moment it will stick forever.
funks said:
is there some sort of dependency that the radio bootloader can only be flushed up a version.
Click to expand...
Click to collapse
0107 can be downgraded to 0106, but 0108 can't.
hokkeung said:
Where to download 1.29 with HTC_BOOT 0108?
Click to expand...
Click to collapse
here.
Dear POF,
Sorry to my poor English first. So,as you say,if HTC-bootloader upgrade to 1.08,I can still flashed other rom and radio with running full rom method?What I can not do is I can't downgrade the Radio Bootloader?Is that what you mean?Thanks for your help!!!
pof said:
here.
No, use SPL-1.01 MFG to flash SPL-1.09 only.
Click to expand...
Click to collapse
Sorry my fault, didn´t noticed that you´ve extracted it already till now i thought there were only 1.01.nbs and 1.04.nb as extractet bootloader-files.
Hi,
I have searched so please dont flame me. I just want to know if it is possible to flash an extracted radio nb using mtty if so what is the address to use when i lnb.
thanks
I don't believe that is possible. Somebody tried this IIRC and it had no effect. I believe this is b/c the actual code is flashed into the Qualcomm chipset itself under the control of the radio bootloader.
ahhhh gotcha...... for some reason i cannot upgrade my radio form the 1.07. I have Super CID and I also have the 1.04 /1.01 bootloader.... any suggestions?
you should be able to flash using bl1.04. Are you sure you are SuperCID? Go into mtty and do a task 32. SuperCID devices will return "level = 0"
I am SupCID it does return level=0.... but i think it is because some of us flashed the b1.08 and then back down to the 1.04 :s
ok, if you're superCID, on bl 1.04 and have one of the 1.07 radio variants, you should be able to flash any of the "radio only" upgrades without issues. What radio upgrade are you trying to flash?
pof, whats the address i need to flash a radiorom from bootloader mode?
I collected those from the wiki, but its missing the info for the radiorom.
First Splash:
lnb finalsplash.nb 500e0000
Second splash screen (SubSplash):
lnb finalsplash.nb 50140000
Extrom:
lnb ExtROM.nb 57500000
OS:
lnb OS.nb
ok after enormous searching i've found this:
lnb radio_.nbf 0x80000000
the address is correct, but the file has to be GSM.nb extracted from NBH file, not a .nbf which includes also the NBF header.
And AFAIK no one tried to flash radio using this method yet, you'll be the first if you do it and if it doesn't work you can brick your phone.
If you do it, please report the results
Click to expand...
Click to collapse
okay i have tried it.. it does not brick the phone, but it also doesnt change anything.. radio version remains the same even though it flashes it properly.
USB>lnb gsm.nb 80000000
:F=gsm.nb
:A=80000000
:O=00000000
:L=FFFFFFFF
start NB image downloadS
Load ADDR: 80000000 Length: D80000
H***************************************
****************************************
*****************************Code entry point at 0x80D60000
Click to expand...
Click to collapse
i have updated the wiki with this
USB> task 32
USB> lnb gsm.nb 80000000
USB> task 8,
this seems to flash the radio but the radio version reported by the os remains the same. so this is not working properly
Click to expand...
Click to collapse
http://wiki.xda-developers.com/index.php?pagename=Hermes_BootloaderMFG
dutty said:
pof, whats the address i need to flash a radiorom from bootloader mode?
I collected those from the wiki, but its missing the info for the radiorom.
First Splash:
lnb finalsplash.nb 500e0000
Second splash screen (SubSplash):
lnb finalsplash.nb 50140000
Extrom:
lnb ExtROM.nb 57500000
OS:
lnb OS.nb
ok after enormous searching i've found this:
okay i have tried it.. it does not brick the phone, but it also doesnt change anything.. radio version remains the same even though it flashes it properly.
i have updated the wiki with this
http://wiki.xda-developers.com/index.php?pagename=Hermes_BootloaderMFG
Click to expand...
Click to collapse
are you sure it's actually writing a new radio? try flashing a Non-GPS one when you have a GPS (or vice versa) and testing [email protected]
Olipro said:
are you sure it's actually writing a new radio? try flashing a Non-GPS one when you have a GPS (or vice versa) and testing [email protected]
Click to expand...
Click to collapse
yep.. it is downloading and writing the blocks..at least thats what the mtty output tells me... i've tried flashing a non-gps radio and it still reports the gps radio and startgps works.. weird..
the thing for me is i've flashed the 108radio boot loader which prevents me from flashing only radioroms.. so i've tried doing this from the bl..
i think the only possibility that is left for the 108rbl is to create a full os image using typhoonnbf decode (including splashscreens, os and everything else) and then flash this image.
dutty said:
yep.. it is downloading and writing the blocks..at least thats what the mtty output tells me... i've tried flashing a non-gps radio and it still reports the gps radio and startgps works.. weird..
the thing for me is i've flashed the 108radio boot loader which prevents me from flashing only radioroms.. so i've tried doing this from the bl..
i think the only possibility that is left for the 108rbl is to create a full os image using typhoonnbf decode (including splashscreens, os and everything else) and then flash this image.
Click to expand...
Click to collapse
no, not weird... it's just not flashing; now here's a thought; is it possible to rtask, authenticate with the radio then exit out of rtask mode again... perhaps it protects the memory address till you do this
Olipro said:
no, not weird... it's just not flashing; now here's a thought; is it possible to rtask, authenticate with the radio then exit out of rtask mode again... perhaps it protects the memory address till you do this
Click to expand...
Click to collapse
yeah, not weird
btw.. i've also tried to do a radio rom upgrade from an official provider.. tmobile germany released a radiorom only upgrade.. but i couldnt use that to downgrade too..
how do you mean? authenticate? simply entering the radioloader and exiting?
i.e.
rtask a
retuoR
another thought.. what would happen if we just "rerase" the region of the radiorom and then try to reflash.. have to admit i lack the balls to try it
edit: tried the rtask a , rversion, retuoR and then flashing.. but it didn't work
okay.. the last and maybe the best idea is this:
since we can dump parts of the rom using the bootloader how about dumping a radiobootloader < 108 and then "lnb" it into a 109 device..
http://forum.xda-developers.com/showpost.php?p=1092471&postcount=1
i have tried this:
USB> task 32
USB> set 1e 1
USB> rbmc spl 50020000 40000
Click to expand...
Click to collapse
but it doesnt seem to work..
Code:
USB>rbmc spl 50020000 40000
GetExtRomData+(): *pszPathName=spl, dwStartAddress=50020000, dwLength=40000
:F=spl
:A=50020000
:L=00040000
:rbmc=
how can i recieve the file? i have enabled automatic downloads in mtty.. pof?
The radio code is actually flashed into the Qualcomm chipset under the control of the radio bootloader. that's why nbf radio flashing can only be done with bl1.04. In subsequent bootloaders, the required radio bl commands aren't available.
I believe the chipset itself may be mapped into the addresses you mention, but the flashing method is different thus the reason why nothing happens.
Sleuth255 said:
The radio code is actually flashed into the Qualcomm chipset under the control of the radio bootloader. that's why nbf radio flashing can only be done with bl1.04. In subsequent bootloaders, the required radio bl commands aren't available.
I believe the chipset itself may be mapped into the addresses you mention, but the flashing method is different thus the reason why nothing happens.
Click to expand...
Click to collapse
interesting..
but if we're using 1.01mfg and flashing into the mapped/virtual memory area we might be able to overwrite the 1.08 radio bootloader..
according to http://wiki.xda-developers.com/index.php?pagename=HermesMemoryMap
the radiobootloader sits right behind the radio at 0x80100000
i would give it a try but i dont know how i can dump files from the bootloader onto my pc.. rbmc seems to send the file, but mtty doesnt know how to recieve it. i guess i'll have to use usbmonitor?
Or is the bootloader itself in the Qualcomm chipset as well? All the normal bootloader does is transfer control (in bl1.04 with rtask 4 in subsequent bl's using a mechanism that is only revealed during the nbh flashing process) to the radio bootloader. Then data flows....
Sleuth255 said:
Or is the bootloader itself in the Qualcomm chipset as well? All the normal bootloader does is transfer control (in bl1.04 with rtask 4 in subsequent bl's using a mechanism that is only revealed during the nbh flashing process) to the radio bootloader. Then data flows....
Click to expand...
Click to collapse
i don't know. but i know that we need to find a way to deal with rb 108 as it will be packed into any radio rom thats released.
there must be a way to dump and flash it using the bootloader as it gets flashed when updating a radiorom using lnb or maupgrade.
unfortunately i really don't know how to deal with the remote dump command, even with usbmonitor the output is useless, as mtty only recieves a couple of bytes then stops. after terminating the connection and restarting mtty it recieves a couple more bytes and so on and so on..
I think the key here is to figure what goes on during nbh flashing since we know the radio bootloader can be changed then. This also holds the key to simple RUU flashing of cooked roms on the hermes btw. We have to get here too eventually if we ever want to package up a cool GPS enabled hermes rom that even Noobs can install Right now, hermes upgrading is a nightmare....
Sleuth255 said:
I think the key here is to figure what goes on during nbh flashing since we know the radio bootloader can be changed then. This also holds the key to simple RUU flashing of cooked roms on the hermes btw. We have to get here too eventually if we ever want to package up a cool GPS enabled hermes rom that even Noobs can install Right now, hermes upgrading is a nightmare....
Click to expand...
Click to collapse
i'll do a full ruu upgrade now and track the whole thing with usb monitor.. maybe something useful comes out of that
sorry i have been away for the last 2 days.
Radio can't be flashed with lnb, it must be flashed from radio bootloader using rwdata.
Now we can use Des SSPL to flash radios in NBH, so radio bootloader 0108 is not a problem anymore
I will provide a reimplemented flashing tool for hermes in a few days (need two more long nights to finish fixing minor bugs), it allows to dump the radio and do some "extra" stuff... at the moment it only works in linux, but I'm sure some of you will be able to port it to windoze
yep... the holy grail of nbh flashing is possible Des "got 'er done"!
I have done the upgrade and everything went fine. After the upgrade it ran to extended rom configs and they went fine. My phone is no longer showing that it is connecting to 3G. All I have is the E logo on top. I am in my office and it is a 3g area, I was connecting 3G before the upgrade.
I have reinstalled the PTT .cab, and Hard Reset after it etc... Still the same.
I was going to upgrade my radio from 1.33 to 1.34 this morning, but when I ran that installer it told me that it was the wrong country??? Should I keep my radio 1.33? anyone know whats going on with this?
Thanks.
Gromet said:
I have done the upgrade and everything went fine. After the upgrade it ran to extended rom configs and they went fine. My phone is no longer showing that it is connecting to 3G. All I have is the E logo on top. I am in my office and it is a 3g area, I was connecting 3G before the upgrade.
I have reinstalled the PTT .cab, and Hard Reset after it etc... Still the same.
I was going to upgrade my radio from 1.33 to 1.34 this morning, but when I ran that installer it told me that it was the wrong country??? Should I keep my radio 1.33? anyone know whats going on with this?
Thanks.
Click to expand...
Click to collapse
Maybe try putting SPL 1.09 on it then running the RUU Shipped Radio ROM 1.27 from Germany.
OK< I tried what you said. My phone is SPL 1.09. So I ran the 1.27 RUU. I got the same kind of error.
ERROR 120: COUNTRY ID ERROR
The ROM image that you are trying to use is not designed to work with your device. Please check the vendor website and download the correct ROM update.
??????????????????????????????????????????????????????????????????????
Before loading another radio on it. just make sure it's the icon that is just not showing the correct connection, as some radios do... Check mspeed from your phone's browser for your actual connection speed... http://www.dslreports.com/mspeed
Gromet said:
OK< I tried what you said. My phone is SPL 1.09. So I ran the 1.27 RUU. I got the same kind of error.
ERROR 120: COUNTRY ID ERROR
The ROM image that you are trying to use is not designed to work with your device. Please check the vendor website and download the correct ROM update.
??????????????????????????????????????????????????????????????????????
Click to expand...
Click to collapse
Sounds like you are not SUPERCID. Run Pof v3 Unlocker, verify supercid, then try again.
Bimboy said:
Before loading another radio on it. just make sure it's the icon that is just not showing the correct connection, as some radios do... Check mspeed from your phone's browser for your actual connection speed... http://www.dslreports.com/mspeed
Click to expand...
Click to collapse
Good point. MT_PC_Hermes_PTT_REG_070129.CAB fixes the icon settings in the new Cing ROM.
Just ran a speed test... 207kbit/sec...
You might also just go to the \extended_rom via totalcommander or other filemanager and execute autorun.exe or at least the cab that corrects the 3g/u/e icons MT_PC_Hermes_PTT_REG_070129.CAB
A lot of people have found that for some reason after upgrading via mfg package to the 2.06 cingular rom, that the entire entended_rom did not run; even if they did not stop it after the upgrade. It looked like it loaded to most people, but they did not have the useless icons like telenav, mobiTV, etc..
OK, so something strange happened... I went to run POF's unlocker again. I ran it, but all of a sudden a ROM image begins to load? It looked like it was reloading the cingular image I loaded yesterday. Just than I get called into a meeting, when I get back, my phone is sitting there, looking the same as I left it before doing anything EXCEPT I have a G Icon now. Great, so I just checked the settings...
ROM Version 2.06.502.3
RADIO Version 1.16.00.00 ?????????????????????
Should I keep this radio or uupgrade it to a newer one, and if you think a newoer one than which should I try?
Gromet
Gromet said:
OK, so something strange happened... I went to run POF's unlocker again. I ran it, but all of a sudden a ROM image begins to load? It looked like it was reloading the cingular image I loaded yesterday. Just than I get called into a meeting, when I get back, my phone is sitting there, looking the same as I left it before doing anything EXCEPT I have a G Icon now. Great, so I just checked the settings...
ROM Version 2.06.502.3
RADIO Version 1.16.00.00 ?????????????????????
Should I keep this radio or uupgrade it to a newer one, and if you think a newoer one than which should I try?
Gromet
Click to expand...
Click to collapse
I think the consensus is that 1.27 is best until/if GPS ever works.
WAIT!, Lat time I checked your sig, did you not have Radio 1.34? Now I see you are on 1.27. Did you downgrade for a reason? I started the 1.34 upgrade just before you posted. What are the differences between 1.27 and 1.34?
Gromet
More strangeness...
So I started the 1.34 radio upgrade, click update, phone reloads into blotloader, goes to upgrading radio stack please wait... PC shows Stage 1: Upgrading Radio, BUT it just sits there at 0% than errors out.
SO
I ran the 1.27 Upgrade, SAME THING>???????????????????
Whats goin on?
BTW, I'm on SPL 1.09 and I ran Pof's Unlocker again successfully....
Gromet said:
More strangeness...
So I started the 1.34 radio upgrade, click update, phone reloads into blotloader, goes to upgrading radio stack please wait... PC shows Stage 1: Upgrading Radio, BUT it just sits there at 0% than errors out.
SO
I ran the 1.27 Upgrade, SAME THING>???????????????????
Whats goin on?
BTW, I'm on SPL 1.09 and I ran Pof's Unlocker again successfully....
Click to expand...
Click to collapse
What is you Radio BL 107 or 108?
I had access to two separate 8525's. One had 1.34 and the other had 1.27 (BL0107). The 8525 I keep and use daily is on 1.27 with BL 0107. I am waiting for further NBH flashing directions before changing both devices to BL 0108.
When it goes into Botloader mode, it sais SPL 1.09, Where else do I find the bootloader version?
Gromet said:
When it goes into Botloader mode, it sais SPL 1.09, Where else do I find the bootloader version?
Click to expand...
Click to collapse
http://forum.xda-developers.com/showthread.php?t=289173&highlight=hermes+rversion
mtty
To access the radio bootloader for that, but the command to do this (rtask a) has been removed in SPL-1.09.
If you downgrade the SPL to 1.04, you can see it using radio bootloader command "rversion":
Code:
USB>rtask a
Enter Radio Bootloader
rversion
Gromet said:
OK, so something strange happened... I went to run POF's unlocker again. I ran it, but all of a sudden a ROM image begins to load? It looked like it was reloading the cingular image I loaded yesterday. Just than I get called into a meeting, when I get back, my phone is sitting there, looking the same as I left it before doing anything EXCEPT I have a G Icon now. Great, so I just checked the settings...
ROM Version 2.06.502.3
RADIO Version 1.16.00.00 ?????????????????????
Gromet
Click to expand...
Click to collapse
Gromet, this is normal behavour. Pofs unlocker flashes a hacked radio rom (1.16.00.00). Once device restarts, you need to copy the unlocker exe file (included in pof's unlocker zip) to your device, and then execute it on the device. I guess the exe that you run on the device interacts with the hacked radio to unlock the device somehow.
Once thats done, you'll get a 'success' message. Now you can download the shipped rom 1.27.00.00. Since your device is now superCID you can just exec the exe in the shipped rom directly to upgrade the radio from 1.16 to 1.27
Just make sure that you kill activesync before playing about with any rom flashing - it gets in the way.
Nigel
So yeah....
I did everything for PoF's Unlocker, and I GOT the SUCCESS message... but now I cant get any version of a radio upgrade to run. If activesync is on, It starts the upgrade and never gets past 0%, if activesync is off, i error out even before it ever starts the upgrade.
Gromet
Gromet said:
So yeah....
I did everything for PoF's Unlocker, and I GOT the SUCCESS message... but now I cant get any version of a radio upgrade to run. If activesync is on, It starts the upgrade and never gets past 0%, if activesync is off, i error out even before it ever starts the upgrade.
Gromet
Click to expand...
Click to collapse
I don't have much to add other than, 'me too'--but eventually the upgrade worked. I Ran POF's unlocker and chose supercid as well. But couldn't get past that 0% with the 1.27.00.00 radio upgrade.
I'm at:
IPL - 1.00
SPL - 1.04
While typing up this message I decided to try again and type up the error verbosely.
Sure enough the sixth try was the charm.
-g
Gromet said:
WAIT!, Lat time I checked your sig, did you not have Radio 1.34? Now I see you are on 1.27. Did you downgrade for a reason? I started the 1.34 upgrade just before you posted. What are the differences between 1.27 and 1.34?
Gromet
Click to expand...
Click to collapse
I am back to 1.34 and I created the NBH standalone Radio ROM since the new tools are available now.
You can easily go between Radio ROM again YEAH!
Here are Radio ROMs:
1.27 http://uploadingit.com/files/8194/NBH Radio Only 1.27.00.00.zip
1.33 http://uploadingit.com/files/8194/NBH Radio Only 1.33.31.00.zip
1.34 http://uploadingit.com/files/8194/NBH Radio Only 1.34.00.10.zip
wpbear said:
I am back to 1.34 and I created the NBH standalone Radio ROM since the new tools are available now.
You can easily go between Radio ROM again YEAH!
Here are Radio ROMs:
1.27 http://uploadingit.com/files/8194/NBH Radio Only 1.27.00.00.zip
1.33 http://uploadingit.com/files/8194/NBH Radio Only 1.33.31.00.zip
1.34 http://uploadingit.com/files/8194/NBH Radio Only 1.34.00.10.zip
Click to expand...
Click to collapse
So, excuse my ignorance, but are we now saying that we can upgrade the radio roms listed without ending up with the 1.08 bootloader, or alternatively that 1.08 no longer causes a problem?
Rob
Ok chaps... good news;
I've patched Radio BL 0108 to not require the rpass or rseed command, therefore, those of you still on 0107 can update to this and will still be able to update your radio ROM with all SPL versions as before.
Sadly updating 0108 to this patched version seems not to work... looks like there's some additional checking implemented in SPL-1.09.
however, if you're on 0107 and update to this... the update to the radio BL should stick permanently (although testing whether it allows downgrades will be the first thing on the menu)
just a bump, hopefully one of you guys has 0107
Ah sorry mate, just lost it by updating to 1.35 radio. There must be some guys still using the 1.27 radio which still has the 0107 radio boot!
Wam7 said:
Ah sorry mate, just lost it by updating to 1.35 radio. There must be some guys still using the 1.27 radio which still has the 0107 radio boot!
Click to expand...
Click to collapse
there's a joke in there somewhere about virgin phones... ah well, hopefully someone who still has their cherry will appear
Ok I've been reading the forums and wiki for a while now but I am still confused about everything so I don't really know what this is meant to do, so please forgive me inability to comprehend things.
Does this program allow me to flash any radio rom without needing the bootloader to be 1.04? Any other benefits?
Are there any negative side effects of using this? Like wil I still be able to downgrade radio later on?
What is this rpass or rseed command?
And what radio bootloader version will I get if I used this upgrade?
I'm still using 1.27 on 0107 but am having problems with GPRS/3G services now, am in contact with T-Mobile to find out whether these issues are network related or due to the updated radio rom.
If I could swear on here I would, T-Mobile and there crummy network in the UK are having issues again!
Ok can you explain step by step what you want me to do, coz I am planning the update to radio rom 1.38.00.10 later on this evening, I am planning on putting the Hard-SPL ROM on tonite as well to ensure it goes smoothly.
Mine is radio boot loader 1.08 already. But my wife's is still at the original Cingular Rom 1.34 which has radio boot loader 1.07(and unlocked).
ok, basically, here's the deal;
if you update to a new Radio with 0108, after doing so, you will ONLY be able to flash from bootloader 1.09 due to a new authentication scheme on the radio bootloader.
however... I have patched the 0108 bootloader so that it does not use the new authentication scheme at all and hence permits you to flash the device from any bootloader you like.
those of you still on 0107 can hence take advantage of this since I can provide you with my patched radio bootloader.
now... first I would like someone to volunteer themselves as a guinea pig; the patch is simple and the odds of it bricking your phone are small.
the procedure would be as follows:
1) Flash patched 0108
2) Flash OLD 0107 (to see if we can downgrade as a result of the patch; normally you can't)
3) Flash BACK to patched 0108
4) flash whatever Radio version you fancy yourself to your phone.
ok, now, whoever is game please message me via PM and I'll furnish you with an RUU
Ok lets give it a go lol!