I recently upgraded my 3125 to WM6.1 and it has bootloader SPL 2.04. I've been reading about using MTTY to communicate with the bootloader and have been playing with that a bit. I get the Cmd> prompt and can verify that it is communicating. For example, entering "set" returns various flag settings.
How can I find out what commands this bootloader supports? I've tried several commands shown in threads for other phones and some seem to work and others simply display "Invalid command". Also, I'm leery to enter any code I don't know since I don't want to brick the phone.
I've looked at the bootloader with a hex editor and it looks like I see some commands others have mentioned, but have no way of know what the exact syntax is.
Is there anywhere I can find a list of supported commands?
TIA,
Craig
Related
Hello,
I've been researching the Hermes BootLoader, the ROM Upgrade Utility issues a "info 3" command and gets some data and a checksum. This data is then used by the RUU to generate a dynamic password, then the RUU issues the command "password XXXX" and starts the upgrade process.
As this password is dynamic, you can't access the BootLoader in "privileged?" mode, but I don't know which bootloader commands are privileged.
I researched this because without password you cannot use command "d2s" or "s2d" to make ROM backups to SD, but after discovering how to access the bootloader with the correct password it is also not possible to issue these commands
BTW, in the attached file is described the method I used to access the bootloader with correct password. If someone could provide more information on the Hermes Bootloader, please reply to this topic or write a wiki article!
Enjoy!
I've written a page on the wiki with information on the Hermes Bootloader, if you find anything incorrect or missing feel free to edit
http://wiki.xda-developers.com/index.php?pagename=Hermes_BootLoader
Algoritm hax0r3d
http://forum.xda-developers.com/viewtopic.php?p=351363#351363
LOL! Thanks, will try that with the Hermes when I'm back home
pof said:
LOL! Thanks, will try that with the Hermes when I'm back home
Click to expand...
Click to collapse
I tried it with the data on the wiki, and it produced the same password, so it's likely to work
If you want me to send the program I used for debugging, send me a PM with your email/IM address and I'll contact you
After booting my TYTN in Bootloader
okay I think i am going to have to send my tytn back. After loading my TYTN in bootloader I did and info 8 and got the current print out. I think that it is tell me that my extended ROM is shot. Does any one know what this means? and can you tell me how to re-format my extended ROM?
I was going to post the results but made the post to long. the results are in the attached text file and help greatly appreciated
[/code]
Tried the algorithms on the Hermes and the bootloader password and radio-password were deciphered correctly Thanks TheBlasphemer!!
Full usb log here (zipped text file).
@LuckyBos: this thread is for discussing bootloader password, if you want to ask other questions about the bootloader not related to passwords please post a new topic. Btw, try to flash a new rom and see if info 8 still shows the errors, if it does post a new topic about it
where is the posix password generator?
This method will not work on bricked hermes caused by telstra wm6 because non of the WM5 shipped roms would work on these bricked hermese. considering this issue that ROMUpgradeUT.exe only appears to be inside of the WM5 Roms and not in the wm6 shipped roms and ROMUpgrade.exe cannot connect to these bricked hermese that was caused by wm6 ROMs.
does it mean that we can flash a rom to our bricked phone under wm5?
Hello everyone, first post. been reading a bit and I am gathering up the knowledge and courage to Unlock and flash my Alltel touch pro.
Was reading on PPCGEEKS thread on unlocking the phone and the version that I understand that I would want to use is 0.37 but it mentions no MFG commands, what are they? I did a search within the "Raphael CDMA" on MFG commands and the results really didn't answer my question.
Also what are the advantages to flashing my touch pro.
Thanks for any help,
Steve
MFG Commands are those that are ran at the boot loader. These commands are VERY DANGERUS!!! one is set 16 0 which boots your device from the bootloader, others are rtask a which i think activates the phone and rtask c which i think activates usb communications. When you flash your phone it really executes commands like these in the flashing app. if you dont know what they are dont even think about playing with them. if your doing something for the experts they'll tell you exactly what commands to run. it IS possible to erase EVERYTHING on your phone with these commands. Hope this helps
the set 16 0 is not a MFG command btw it is a standard spl command. The biggest addon MFG adds is access to mess around with radio data
Please report your observations. I'm thinking about doing the same, but avoiding any mistakes or issues you may have run into may help!
How did it go?
How did your phone perform?
What did you get?
What did you lose?
Give up the dirt!
-Much Mahalo to you and yours,
TikiKai
B*gger. Searched and searched, but can't find anything, so b*gger, I better post.
I entered the bootloader (for the very first ever time) to find out what version I was running. Reported:
ATHE100
IPL-v1.00
ATHE100
SPL-v1.10.RP00
(X7500 bought new, unlocked with no contract a couple of years ago.)
I pressed the reset button expecting to reboot into the existing ROM, but the device just switched off. Now the only functions appear to be Hard Reset or Bootloader.
I can MTTY to the Bootloader, and get the Cmd> prompt.
Is there some command I can enter here to start the existing ROM?
Is there a list of Bootloader commands someplace?
Thanks
Ended up trying a hard reset - still didn't fix it, but the BootLoader was still available.
Found a ROM that it would accept from:
http://wiki.xda-developers.com/index.php?pagename=Athena_Upgrades
Device is now recovered. Now unlocking and upgrading ROM to...
Hi, does anyone know how to enter the radio bootloader with mtty? I found some instructions on the net but they dont work, is there any special issue on the nike?
My nike has HardSPL 1.22, radio 1.65.xx and super cid unloked.
You need a MFG SPL which includes the command "rtask"
Do a "rtask a" and you can talk to radio (no echo), to return to SPL type "retuoR".
You can also security unlock your device and enter bootloader directly by pressing send and power on at the same time, or do "rtask a" followed by "setboot 1". Next time device boots up in radio bootloader.
You can then use my FrankenKaiser SPL bootloader for fast loading and booting a ram image. In my opinion a nice way to test Android
jockyw2001 said:
You need a MFG SPL which includes the command "rtask"
Do a "rtask a" and you can talk to radio (no echo), to return to SPL type "retuoR".
You can also security unlock your device and enter bootloader directly by pressing send and power on at the same time, or do "rtask a" followed by "setboot 1". Next time device boots up in radio bootloader.
You can then use my FrankenKaiser SPL bootloader for fast loading and booting a ram image. In my opinion a nice way to test Android
Click to expand...
Click to collapse
Thanks, now i have installed Hard-SPL1.15 MFG, the rtask a is now accepted, and like you said i have no echo... setboot works, but when i type in other commands like help, h, ?, gpio, version i get no outputs... What am i doing wrong? is it still the wrong SPL???
m0rph3us said:
Thanks, now i have installed Hard-SPL1.15 MFG, the rtask a is now accepted, and like you said i have no echo... setboot works, but when i type in other commands like help, h, ?, gpio, version i get no outputs... What am i doing wrong? is it still the wrong SPL???
Click to expand...
Click to collapse
You have a very limted command set if your device is not security unlocked. You find my security unlocker in one of the stickies ..
(then you have echo_on etc, enter a ? for more cmds)
Thank you, finally i get it to work... I have one last question, is there any command to get debugging log or something like that, to see whats going on when wm boots, just like the commands for the diamond?i tried set 1a 0, but it does not work, on the diamond it enables debugging information
Hola guys,
I've messed up with MTTY and I think I've totally fried my old NIKI 20Keys.
I don't remember what kind of commands I've issued (it passed a long time since) but I can tell you that once upon a time the device was cid unlocked (I think so by the way I was able to install every kinda rom).
Now even if i press PWR+CAMERA+RESET the device doesn't go on bootloader mode: it stays black without any hope.
On WinXP it's not recognised as a USB device; only as a Qualcomm device for which I've downloaded the drivers (Diag Device + NMEA) on COM4 and COM5.
I think I've formatted the bootloader and I'm not able to restore it.
Commands like "cego", "task" and whatsoever are not recognised, but, e.g. "setboot" works. I don't know why.
I've tried with Frankenkaiser but with no luck.
Any man of good will able to help me out? I can even consider to send the phone to some forum members for repair if anyone wants, but I'll prefer to do it on my own.
Thanks to all of you for your kindness.
Really?
No one able to lend me a kind hand?
I add a little thing: there are no great commands that work with PTTY or mtty.
I see that setboot and radata work.
Is there a way to have a list?
Is there a way to have a list?
Click to expand...
Click to collapse
http://forum.xda-developers.com/wiki/index.php?title=Hermes_BootLoader#Bootloader_commands:
Thanks a lot but how can I load a bootloader using radata or something similar?
Not all the commands in the page you linked now work with my phone...
sanric said:
Thanks a lot but how can I load a bootloader using radata or something similar?
Not all the commands in the page you linked now work with my phone...
Click to expand...
Click to collapse
To get an honest answer, I do not know, I've fortunately never need to use it.
The only thing I can do is help you search.
error in post