Wifi Progress (NO GPS - antenna missing)

[jockyw2001]

Guys, I think I just found the solution how to enable GPS.

On the S730 Wings it's the same problem and since a couple of weeks I was struggling to find a solution. Finally today the mind was clear enough and I firmly believe I found it.

Here is what I wrote in the Wings forum 15 minutes ago:

I compared NV item dumps of Kaiser, pre-prod Wings and prod Wings.
NV item stands for Non Volatile configuration item and is kind of a registry database for the radio ROM.

I made a very interesting discovery and I think this is the solution !! :)
It's NV item 148 called "NV_RF_CONFIG_I"

For Kaiser and pre-prod Wings the value is:
NV item: 148 [NV_RF_CONFIG_I], index 0

NV_RF_CONFIG_I 0: 11

and for production Wings it is:
NV item: 148 [NV_RF_CONFIG_I], index 0

NV_RF_CONFIG_I 0: 0b

With QPST program "RF NV Item Manager" (http://forum.xda-developers.com/showthread.php?t=359015) I wrote the production Wings value of NV item 148 to my Kaiser and tried GPS and guess what? No fix :D
Then I reset it to the original value and yes, got a fix again !
To be sure I tried this again and the behaviour is systematic :)

So guys, who is the first to enable GPS on his production model??

And then let the donations pour in. I want a Wings for myself :D

Since you guys don't have a MFG SPL it is not so easy to get the Niki in QC diag mode, which is necessary to be able to read/write NV items. But I'm sure I'll get that done soon. Hopefully in the week end we can have this all sorted out.

[tom_codon]

ok jocky bro.We will try it right :p

[jvieira]

Finally some HOPE! Not that I'm too sure anymore that it's possible to enable GPS, but would be interesting! =] If you could get the Wi-Fi ... now, THAT! would be awesome!

Congrats! If this really works, I'll make sure to make a donation for you!

[Dagnelinos]

u are my hero! :D

[garsim]

i love you! :D

[jakedp]

crossing fingers... touching wood.... touching somothing else :rolleyes:

we will see

Jake

[eroG]

this is a great news. hope it works and in that case I ll do my part:)

cheers for your effort!

[ariandax]

Great day!! hope i'll work. Anyway compliment, nice job mate!
d.

[Drachen]

Nice find! I'm a bit skeptical that this will solve the problem though. There might be hardware differences between the Nike and Kaiser. That could be the lack of a physical antenna (which was suggested on another thread) or a Qualcomm chip with the onboad GPS disabled. If Qualcomm sells the chips with failed GPS or WiFi units for less than fully-functional chips, it could explain why HTC doesn't enable the GPS on this model. They're saving production costs. This is what Intel does with their Core Duo and Core Solo chips. Core Solos are basically just Core Duos where one of the cores doesn't pass inspection and is disabled.

[jockyw2001]

Nice find! I'm a bit skeptical that this will solve the problem though.
Of course, but at least after we have tried it, it will either work or if not, we know that there *must* be a hw difference.

The current status btw is that the NV items on Wings and Niki seem to be write protected. I'm trying to find a solution.

[Dagnelinos]

your work is simple awesome, please feedback to our any update! The idea of gps and Wifi abilitated on dual is a dream!

i have all finger crossed :D

[t0p0gigi0]

There's any news on this? :rolleyes::rolleyes::rolleyes:

[ironmansp]

How Can I test it in my touch dual recently flashed?

[Midget_1990]

How Can I test it in my touch dual recently flashed?

you cant the commands are locked, it's being worked on.

[Scann69]

Any updates? Really hoping that this works.

[jockyw2001]

Any updates? Really hoping that this works.
In the weekend I will continue working on it.
The particular NV item has a read-only attribute set which needs to be h*cked. Just be patient.

[Aqrab]

waiting.....

[eroG]

yea we all hope that at least wifi can be enable..as for the gps the dual might miss the antenna...

let us know if you manage to turn it on!

cheers:)

[therealholg]

yea we all hope that at least wifi can be enable..as for the gps the dual might miss the antenna...

let us know if you manage to turn it on!

cheers:)
it hasn't a wifi antenna either

[snudel]

and it hasnt the battery to stand that consumption

[Thyraz]

Kaiser 1350 mAh
Niki 1120 mAh

i don't think this is the big problem ;)

Yes, it is not possible surfing for many hours over wifi with most PPC PE.
But this would not be a niki-specific problem.

[Adri_tifosi]

Kaiser 1350 mAh
Niki 1120 mAh

i don't think this is the big problem ;)

Yes, it is not possible surfing for many hours over wifi with most PPC PE.
But this would not be a niki-specific problem.

There are batterys at ebay with 1400 mAh and 2500 mAh for the Niki

[snudel]

Yes, it is not possible surfing for many hours over wifi with most PPC PE.
But this would not be a niki-specific problem.

btw, what for do you have 3G? I don't need wifi. I would just love to quickly use google maps while walking around. GPS is the prio for me.

[eroG]

btw, what for do you have 3G? I don't need wifi. I would just love to quickly use google maps while walking around. GPS is the prio for me.

well at least you can buy a gps recever and use google maps without problems..and also saving some battery..but for the wifi there is not such a solution or it is enabled or you just cant use it...that's why for me the priority is the wifi..even though now that I now that it needs an internal antenna I am starting to be a little less convinced that it can be enabled in future..
hope I am wrong.

cheers

[Thyraz]

btw, what for do you have 3G? I don't need wifi. I would just love to quickly use google maps while walking around. GPS is the prio for me.

I don't have prio for one of them.

Don't need GPS in the Dual because i have a receiver in car for navigation.
For Google Maps I have no Problem looking for Streetnames when I'm walking around.

Also no need for Wifi, I'm on unlimited 3G, if I need something faster at home for downloading to PC there is Activesync via BT or Cable.

Ohterwise i would have bought something else then the dual ;)

But I wouldn't hate my Dual if he has a few new features. :p

[cefoul]

it hasn't a wifi antenna either

first of all, thanks for this excellent web sites where thousand answers can be found. This is my first post but I'm quite old (> 15 years) in technical tips on electronic devices and computer related equipment.
I bought a Touch Dual 2 weeks ago, and desperate with Wifi capability (and why not GPS, but not important for me).

From thread to thread I read this equipment might not have Wifi nor GPS antenna.
Who has really open this device to technically say that? Or is it just an assumption.
I cannot believe a manufacturer will produce 2 equipment based on the same hardware (Qualcomm MS7200) on 2 different way. The cruise is Wifi and GPS enabled device but Nike's capabilities are just disabled. And antennas are surely present .... Any photos from an open Nike to resolve this doubt?;)

Cheers,

[Dagnelinos]

is more important to see an internal photo of a Touch Cruise, the photos for dual are still present.
And sincerely anyone haven't seen an gps or wifi antena.

[cefoul]

is more important to see an internal photo of a Touch Cruise, the photos for dual are still present.
And sincerely anyone haven't seen an gps or wifi antena.

Any link for internal photos of Touch dual and cruise?

[Aqrab]

here a picture i found for the deal

[Billokko]

what does the arrows say? That there aren't any antennas??
Sorry for my bad english but I'm Italian...

[slvrbllt]

here a picture i found for the deal

Sometime they get back...

The upper connector is a "Test Point", the lower is a GSM antenna connector.
Neither WiFi, Nor GPS antennas has been found inside...

No Antenna ? No service!

[Billokko]

uffffff
so... we can definitely say bye bye to the wifi and gps?
:confused::confused::confused::confused:

[daniel.w.leigh]

The reason Wifi and GPS are disabled on the Touch Dual is simple - It's got HSDPA.

The original Touch only has EDGE (2.5G) data, therefore it has Wifi and GPS to use GoogleMaps and Internet Explorer at faster speeds where available.

The Touch Dual has HSDPA (3.5G) data, therefore these features are disabled so that Orange/T-Mobile can say to HTC "disable the Wifi/GPS or we won't stock your product". You see, by disabling these features, the networks can charge huge sums of money for 3G data on features you could use for free with Wifi (internet, downloading) or GPS (Google Maps, which you can use over 3G when no GPS is available).

Orange/T-Mobile make tonnes more cash from 3G data charges this way, and therefore can force HTC to disable the Wifi/GPS chip. I'm happy to use 3G data instead - why aren't you?

[jockyw2001]

I'm happy to use 3G data instead - why aren't you?
Because I don't have a flat rate data plan. Besides, 3G is not available everywhere.
But actually I don't mind because I have a Kaiser which has both 3G and Wifi :D

[jvieira]

Well,
I would be happy to use 3G (HSDPA) if I didn't had to pay around 10€/month for it, with a 100MB usage limit. I can't even check my e-mail with that......

Understand?

[bkeaver]

The reason Wifi and GPS are disabled on the Touch Dual is simple - It's got HSDPA.

The original Touch only has EDGE (2.5G) data, therefore it has Wifi and GPS to use GoogleMaps and Internet Explorer at faster speeds where available.




Ummm the original Touch does have WIFI but it does not have GPS. The only GPS it had was to pair it to a bluetooth puck.

[RsRichard]

Well,
I would be happy to use 3G (HSDPA) if I didn't had to pay around 10€/month for it, with a 100MB usage limit. I can't even check my e-mail with that......

Understand?


im checking my mails every 20 minutes, get about 20-35 mails a day... and it takes... amazing 13 MB in a month for mail traffic.

surfing with opera is another 26 MB

youtube is 70 MB

etc...

100 MB is much enough for normal use (mails and a bit of surfing)

[jvieira]

Unfortunately for me, I use it for work reasons. I get quite a lot of attachements (pdfs, .doc, .xls, .jpg) etc ... guess I'll have to connect it to other computers to download whatever I need until I get a flat plan

[ZiYi]

I came across this thread, and learned that you guys looked for wifi antenna in other devices with same chip to prove your thoughts.

here is the Kaiser internal photo from fcc.

https://fjallfoss.fcc.gov/prod/oet/forms/blobs/retrieve.cgi?attachment_id=812152&native_or_pdf=pdf

sorry to tell you guys that, there is a wifi antenna.

[rumble291]

I came across this thread, and learned that you guys looked for wifi antenna in other devices with same chip to prove your thoughts.

here is the Kaiser internal photo from fcc.

https://fjallfoss.fcc.gov/prod/oet/forms/blobs/retrieve.cgi?attachment_id=812152&native_or_pdf=pdf

sorry to tell you guys that, there is a wifi antenna.

How can you tell? Also is the bluetooth and Wifi antenna just one antenna on the kaiser? if it is then your right there will be a way to get Wifi im pretty sure that it will just be the radio rom we change that then we can have Wifi not sure bout GPS would probably need another antenna.

Only a thought though we need a guy who knows alot about this to come and tell us if there is a possibility of wifi and gps or not.

Kurt

[cefoul]

How can you tell? Also is the bluetooth and Wifi antenna just one antenna on the kaiser? if it is then your right there will be a way to get Wifi im pretty sure that it will just be the radio rom we change that then we can have Wifi not sure bout GPS would probably need another antenna.

Only a thought though we need a guy who knows alot about this to come and tell us if there is a possibility of wifi and gps or not.

Kurt

I was able to open a Touch Dual and definitively I can confirm there are 3 antenna in : GSM, Bluetooth and WIFI. About GPS, I don't know if the metallic case with copper sticked on it can be a GPS antenna ... not confident on this assumption. But I have no doubt for the WIFI. The internal antenna is present and connected. Now, no one can tell me the opposite.
So only two hopes : HTC will release an upgrade and enable Wifi or Developpement community can find a work around.
I use this phone with professional line and don't have any access to GPRS nor 3G. Wifi will definitively make me really happy with this phone.

Cheers.

[eroG]

I was able to open a Touch Dual and definitively I can confirm there are 3 antenna in : GSM, Bluetooth and WIFI. About GPS, I don't know if the metallic case with copper sticked on it can be a GPS antenna ... not confident on this assumption. But I have no doubt for the WIFI. The internal antenna is present and connected. Now, no one can tell me the opposite.
So only two hopes : HTC will release an upgrade and enable Wifi or Developpement community can find a work around.
I use this phone with professional line and don't have any access to GPRS nor 3G. Wifi will definitively make me really happy with this phone.

Cheers.

hey thanks for the great news! now at least there is hope to have wifi and who knows perhaps also gps!

[ariandax]

Great news guys!!!:):):)

[Aqrab]

wow great news :)

[Billokko]

yes!!!! very very great news!!!!!

[sackbauer]

this is really great news. let's hope that someone gets the radio rom fixed ;-)

[p3600mio]

And that this is' good news.

[doksie008]

This is indeed very good news. Maybe I don't have to switch to another phone...let's wait and see if there will be an update soon

[GpsPasSion]

Good news indeed, how do we know the black plastic thing is a wifi antenna though?

"metallic case with copper sticked on it can be a GPS antenna" - no that wouldn't normally be one, they either come as ceramic patch antennas or as PIFA (wire) antennas like on the Kaiser.

[Morfeus1981]

Great news.
Now we discover only affects only the existence of GPS.
We hope that HTC releases shortly patch


Bye bye

[cefoul]

Good news indeed, how do we know the black plastic thing is a wifi antenna though?
.

I enclosed 2 new pictures to explain .... it's not the black plastic but you can see a golden metallic part connected to the left under the MB and running along the case (blue circle). It's the wifi antenna.
On the other picture, the GSM antenna is on the cover and connected to the pin in the red circle.

On pictures in my previous post, the Yellow circle shows the bluetooth antenna.

For the GPS, I forget to open metallic case under the copper to see if there is something . On the other side of the MB there is only Qualcomm ships and memory .. no further GPS antenna. But as said GPS is not important for me. Wifi first !! Sorry.

Cheers,

[Aqrab]

great :)

[p3600mio]

We almost great

[clonmult]

So it'll be a case of getting the right radio rom installed, and getting the radio enabled.

[jockyw2001]

I will probably soon receive a MFG (= manufacturing) SPL for niki and will turn it into a HardSPL. With that HardSPL I can do: a sim unlocker, a security unlocker and support NV item change. The last feature is necessary to change the NV configuration item value from 11 to 17. This at least is a prerequisite for working GPS. I don't know if it will be sufficient for enabling Wifi. We will see. For now just be patient as I am waiting for the MFG SPL.

[Johnston411]

I will probably soon receive a MFG (= manufacturing) SPL for niki and will turn it into a HardSPL. With that HardSPL I can do: a sim unlocker, a security unlocker and support NV item change. The last feature is necessary to change the NV configuration item value from 11 to 17. This at least is a prerequisite for working GPS. I don't know if it will be sufficient for enabling Wifi. We will see. For now just be patient as I am waiting for the MFG SPL.

That sir would be the icing on the cake. :)

[sackbauer]

I will probably soon receive a MFG (= manufacturing) SPL for niki and will turn it into a HardSPL. With that HardSPL I can do: a sim unlocker, a security unlocker and support NV item change. The last feature is necessary to change the NV configuration item value from 11 to 17. This at least is a prerequisite for working GPS. I don't know if it will be sufficient for enabling Wifi. We will see. For now just be patient as I am waiting for the MFG SPL.

i will keep my fingers crossed. patience is my second name .....

[GpsPasSion]

I enclosed 2 new pictures to explain .... it's not the black plastic but you can see a golden metallic part connected to the left under the MB and running along the case (blue circle).

For the GPS, I forget to open metallic case under the copper to see if there is something . On the other side of the MB there is only Qualcomm ships and memory .. no further GPS antenna. But as said GPS is not important for me. Wifi first !! Sorry.

Cheers,

Got it for the Wifi Antenna, great ! Have they used that design on other PDAs ?

Same thing, having WiFi would be more useful than GPS, it's easy enough to use a SiRFtarIII Bluetooth GPS with better performance than Qualcomm's chipset and more battery life for the Nike !

[NetrunnerAT]

I will probably soon receive a MFG (= manufacturing) SPL for niki and will turn it into a HardSPL. With that HardSPL I can do: a sim unlocker, a security unlocker and support NV item change. The last feature is necessary to change the NV configuration item value from 11 to 17. This at least is a prerequisite for working GPS. I don't know if it will be sufficient for enabling Wifi. We will see. For now just be patient as I am waiting for the MFG SPL.

MFG SPL??? Sorry for a dump question ... do you need a SPL Dump from a Original Niki SPL? My English isnt the best!

[jockyw2001]

MFG SPL??? Sorry for a dump question ... do you need a SPL Dump from a Original Niki SPL? My English isnt the best!

A manufacturing SPL differs from a normal stock SPL in that it has special test commands for the manufacturer.

[Clem-le-long]

Thank you guys to allow us dreaming about WiFi and GPS !!! :) I hope you will find solutions soon.

[mouh_stach007]

I will probably soon receive a MFG (= manufacturing) SPL for niki and will turn it into a HardSPL. With that HardSPL I can do: a sim unlocker, a security unlocker and support NV item change. The last feature is necessary to change the NV configuration item value from 11 to 17. This at least is a prerequisite for working GPS. I don't know if it will be sufficient for enabling Wifi. We will see. For now just be patient as I am waiting for the MFG SPL.

sorry to be impatient but what do you meen by "soon" ? I'm going to receive my SIMlocked Niki tomorow and with your post I'm wondering if I'll pay 26€ or wait for your SIMunlocker program :confused: Can you just say If you have an idea of the time it will take to release the sim unlocker :about a day, a week, a month?
thks for your hard work
I'm definitly ready to make a donation if the arrival of your MFG niki is imminent and there is not too much waiting

[jockyw2001]

sorry to be impatient but what do you meen by "soon" ? I'm going to receive my SIMlocked Niki tomorow and with your post I'm wondering if I'll pay 26€ or wait for your SIMunlocker program :confused: Can you just say If you have an idea of the time it will take to release the sim unlocker :about a day, a week, a month?
thks for your hard work
I'm definitly ready to make a donation if the arrival of your MFG niki is imminent and there is not too much waiting
Will very likely be done by next weekend :)

[sonus]

Great news.
Now we discover only affects only the existence of GPS.
We hope that HTC releases shortly patch


Bye bye

:confused:What's with the expectation that HTC will release a patch????? If they planned on enabling WiFi and GPS they would have done so initially, as they did for the Kaiser, the Touch Cruise, ect. Do people seriously think they just forgot to include it and planed on including it in a patch/ROM upgrade? Lol, be serious people.

IF the hardware can actually support both WiFi, the only way it will get enabled will be by hacking the software/enabling drivers and/or hacking the hardware to implement the neccessary antennae.

[fritsypeij]

:confused:What's with the expectation that HTC will release a patch????? If they planned on enabling WiFi and GPS they would have done so initially, as they did for the Kaiser, the Touch Cruise, ect. Do people seriously think they just forgot to include it and planed on including it in a patch/ROM upgrade? Lol, be serious people.

IF the hardware can actually support both WiFi, the only way it will get enabled will be by hacking the software/enabling drivers and/or hacking the hardware to implement the neccessary antennae.

They did it before: http://msmobiles.com/news.php/6231.html
So.. why shouldn't they do the same for the niki :)

[gatto79]

sorry wrong thread

[bydandie]

There is a strong liklihood that the positioning of the antennae on the base of device could cause an issue. Your hand will cover them and this could cause the same issues that face the N95 relating to GPS reception. It is prefectly feasible that HTC have disabled GPS and WiFi for this reason.

[live2themaxuk]

I really hope we can get this badboy working, crap antenna position or not. I love the dual, but its no good to me without wifi. . . . . good luck to all concerned. .

Jamie

[sackbauer]

understand what you mean ... but what about polaris then .. polaris compared to nike is same chipset and nearly same housing size. a collegue of mine has the polaris and did not encounter any difficulties on gps connection.

[live2themaxuk]

it's ugly . . . and doesnt have a keypad :p (oh i see, you are talking about the location of the antenna)

[fritsypeij]

When I hold my phone, my hand doesn't cover the bottom of the device. so for the wifi antenna, I think your speculation doesn't apply. GPS on the other hand I don't have any clue.

[sackbauer]

it's ugly . . . and doesnt have a keypad :p (oh i see, you are talking about the location of the antenna)

i fully agree with you *arghhh* my old trinity is much more sexy than the new polaris *lol*

needless to say that touch dual is the best on design and even if they did not get wifi and gps working .... i will go back to my old gps mouse and micro wifi card rather than change my device ;-)

have a good day

[Dagnelinos]

is possible to your friend to open the Cruise and post post a photo of the internal hardware? :D
Dual & cruise have the same chipset msm7200, and for me, similar internal hardware component & design.

A Rom of the Cruise in the Dual is possible? or check the NV items on the Cruise?

[live2themaxuk]

I see. Are you using the Spectec MicroSD wifi card then?

whats the reception like?

cheers

Jamie


i fully agree with you *arghhh* my old trinity is much more sexy than the new polaris *lol*

needless to say that touch dual is the best on design and even if they did not get wifi and gps working .... i will go back to my old gps mouse and micro wifi card rather than change my device ;-)

have a good day

[sackbauer]

.. this has been discussed in severall threads here .. also there are some pictures out there somewhere ..

two things why it is not working right now:
. antenna is missing
. disabled in radio rom.

both things can be fixed on my point of view.
. antenna can be baught and somehow brought into the device ;-)
. radio rom can be fixed once profi debugger do have more spare time for the nike device .

let's keep our fingers crossed .....
flashing a polaris rom without modification will not work.

[live2themaxuk]

sackbauer, not sure if you missed my last message, keen to know if youa re successfully using the spectec microsd wifi card and if the range is good with it. let me know

cheers

Jamie

[sackbauer]

sackbauer, not sure if you missed my last message, keen to know if youa re successfully using the spectec microsd wifi card and if the range is good with it. let me know

cheers

Jamie


yep, missed it ... ;-)
i do have an old gps mouse but not the spectec micro sd card ;-) am keen to know when it is available as none of the vendors does have it. sorry for confusion.

[Dagnelinos]

i have read all discussion, my request is if possible to compare the photo hw internal of Dual and the Cruise, because for now i have only read of comparative shot from Dual and TytnII. :D

In the wings forum, 2 or 3 people have succesfully flashed the radio rom of kaiser on wings and have now the possibility of change with success the nv 48 item (11 to 17), is a first step also...

[sackbauer]

i have read all discussion, my request is if possible to compare the photo hw internal of Dual and the Cruise, because for now i have only read of comparative shot from Dual and TytnII. :D

In the wings forum, 2 or 3 people have succesfully flashed the radio rom of kaiser on wings and have now the possibility of change with success the nv 48 item (11 to 17), is a first step also...

.. i will ask him tomorrow if he can disassemble his polaris for some shots .

[NetrunnerAT]

Guys ... possible WIFI can enable via Radio Rom?

Polaris -> ftp://xda:xda@ftp.xda-developers.com/Polaris/RUU_Polaris_HTC_ITA_1.25.408.1_radio_sign_25.65.30 .04_1.58.21.23_Ship.exe

Niki -> http://www.4shared.com/file/37724431/a956841e/RUU_Nike_HTCASIA_AUS_13171012_Radio_Nike_1582123_s igned_Ship.html?dirPwdVerified=1c1d0936

Both are 1.58.21.23 Radio Roms but the Protokoll Version is a little bit different?! Polaris have 25.65.30.04H and Niki have 25.65.30.04W

[clonmult]

.. this has been discussed in severall threads here .. also there are some pictures out there somewhere ..

two things why it is not working right now:
. antenna is missing
. disabled in radio rom.

both things can be fixed on my point of view.
. antenna can be baught and somehow brought into the device ;-)
. radio rom can be fixed once profi debugger do have more spare time for the nike device .

let's keep our fingers crossed .....
flashing a polaris rom without modification will not work.

Are you sure about the antenna missing? cefoul posted pictures of the insides pointing to what were claimed to be the WiFi antenna.

I was under the impression (maybe incorrectly?) that Nokia had one antenna shared amongst different components (ie. phone, wifi, gps), it could be possible that HTC have done the same/similar?

[NetrunnerAT]

Shared Antennas ... possible! I havent open my Niki. HTC use a Aloy Antenna with shared Ground Pin. Some times WIFI and GSM are Shared ... HTC Prophet use this solution.

[ironmansp]

please check it.

[NetrunnerAT]

Link corrected ... THX

[live2themaxuk]

Hi

so what exactly have you done here? Have you tried these radio roms yourself? Is this a Radio Rom from a Kaiser/Touch Cruise to try on the Touch Dual? not sure its very clear what you would like people to do/try


thanks for your efforts

Jamie











Guys ... possible WIFI can enable via Radio Rom?

Polaris -> ftp://xda:xda@ftp.xda-developers.com/Polaris/RUU_Polaris_HTC_ITA_1.25.408.1_radio_sign_25.65.30 .04_1.58.21.23_Ship.exe

Niki -> http://www.4shared.com/file/37724431/a956841e/RUU_Nike_HTCASIA_AUS_13171012_Radio_Nike_1582123_s igned_Ship.html?dirPwdVerified=1c1d0936

Both are 1.58.21.23 Radio Roms but the Protokoll Version is a little bit different?! Polaris have 25.65.30.04H and Niki have 25.65.30.04W

[NetrunnerAT]

Its a note for some gurus!

I must wait for a working SPL with RTAST Command, then i will try the Polaris Radio on my Niki, to develope a GPS or WIFI Rom. Without this SPL Version ... i can do nothing :->

I read a lot of threads in this board ... possible i am the first guy they have see this. Some body with more expirience can use it. I think Kaiser Radios doesnt work ... Protokoll Version is to different!

[live2themaxuk]

Yeah i look forward to this, its definetly the best thing to try first. Is this what jockyw2001 is working on ?


Lets hope you can do it soon.

Jamie



Its a note for some gurus!

I must wait for a working SPL with RTAST Command, then i will try the Polaris Radio on my Niki, to develope a GPS or WIFI Rom. Without this SPL Version ... i can do nothing :->

I read a lot of threads in this board ... possible i am the first guy they have see this. Some body with more expirience can use it. I think Kaiser Radios doesnt work ... Protokoll Version is to different!

[Dagnelinos]

just for information... a probably date for test a working SPL with RTAST Command? :D

[NetrunnerAT]

Yeah i look forward to this, its definetly the best thing to try first. Is this what jockyw2001 is working on ?

I think yes ^_^, i have send him all my shared OEM Rom Folder to test this.

[live2themaxuk]

Looking forward to it. . . . . donations waiting for great success!! :D

J

[rbiez]

Guys ... possible WIFI can enable via Radio Rom?

Polaris -> ftp://xda:xda@ftp.xda-developers.com/Polaris/RUU_Polaris_HTC_ITA_1.25.408.1_radio_sign_25.65.30 .04_1.58.21.23_Ship.exe

Niki -> http://www.4shared.com/file/37724431/a956841e/RUU_Nike_HTCASIA_AUS_13171012_Radio_Nike_1582123_s igned_Ship.html?dirPwdVerified=1c1d0936

Both are 1.58.21.23 Radio Roms but the Protokoll Version is a little bit different?! Polaris have 25.65.30.04H and Niki have 25.65.30.04W

I have a Niki with the following Protocol version, but no wifi or gps:

25.61.30.03H

[NetrunnerAT]

I have a Niki with the following Protocol version, but no wifi or gps:

25.61.30.03H

I see ... i am to 100% sure ... Polaris and Niki use the same Radio Roms! :cool:

[florent85]

For me the radio rom is 1.58.16.27 and the protocol version is 25.61.30.03H

[sterbaya]

Do you think wee can extract Polaris Radio to flash a Niki ?
If there is a problem, I think we can boot Niki in canary to flash the original Radio.
Do you think we can brick a niki with polaris radio (only) ROM ?

[clonmult]

I see ... i am to 100% sure ... Polaris and Niki use the same Radio Roms! :cool:

The only proof will be to check the contents of the two side by side; it is possible (albeit not probable) that they could have the same version numbering for what is ultimately two completely different code bases.

[Billokko]

For me the radio rom is 1.58.16.27 and the protocol version is 25.61.30.03H

Me the same

[NetrunnerAT]

I mess today with a lot of radio roms!

This is my tested resulte!

Kaiser, Nike, Polaris and Wing can use the same Radio Roms.

I have compare a Nike and a Polaris Rom. Both are the same!! If you check your Protokoll Version, you can see W or H on the end. This is a Hardware ID.

This create new questions!!!

Do we need more then Edit the NV item to get GPS to work? Possible Radio Chips with Hardware ID H are only Device, they have buildin this Hardware function? What Hardware ID are possible? I have see some Kaiser with other Hardware IDs.

NEXT about Wifi!

I have open the Nike SPL 1.12 and 1.16 and have compare with a Kaiser SPL. I think, the SPL init the WIFI Hardware!

[live2themaxuk]

Good going mate. keep up the good work.

I have had a look at an LG KS20 service manual today, its very interesting, with lots of infomation about the circuits and software/hardware etc. Does anyone have or know of a similar service manual for the Touch Dual? I think it would be VERY helpful here


Jamie







I mess today with a lot of radio roms!

This is my tested resulte!

Kaiser, Nike, Polaris and Wing can use the same Radio Roms.

I have compare a Nike and a Polaris Rom. Both are the same!! If you check your Protokoll Version, you can see W or H on the end. This is a Hardware ID.

This create new questions!!!

Do we need more then Edit the NV item to get GPS to work? Possible Radio Chips with Hardware ID H are only Device, they have buildin this Hardware function? What Hardware ID are possible? I have see some Kaiser with other Hardware IDs.

NEXT about Wifi!

I have open the Nike SPL 1.12 and 1.16 and have compare with a Kaiser SPL. I think, the SPL init the WIFI Hardware!

[NetrunnerAT]

For Dual i havent see a Manuel! ... but can you share the LG KS20 with me?

[live2themaxuk]

Hi there looking at the



http://rapidshare.de/files/38526183/EN_KS20_SVC_ENG_1123_1.0_.pdf.html


Look at pages 35- 35 and 77. It clearly shows what chips to look for for Wifi . it seems the MSM7200 is almost like a 'motherboard' but you still need the Wlan and GPS 'modules' for it to actually work with those things


I think, we someone is willing to scan some HIGH RESOLUTION pictures of the touch dual's internals, both sides of the circuit board, using the above manual, i think it would be pretty easy to ascertain if the nessacary chips exist.


cheers

Jamie

[NetrunnerAT]

i think it too!

i am check some settings for some hacks in the moment! i need time todo some other thinks first!

[jockyw2001]

Hi there looking at the



http://rapidshare.de/files/38526183/EN_KS20_SVC_ENG_1123_1.0_.pdf.html


Look at pages 35- 35 and 77. It clearly shows what chips to look for for Wifi . it seems the MSM7200 is almost like a 'motherboard' but you still need the Wlan and GPS 'modules' for it to actually work with those things


I think, we someone is willing to scan some HIGH RESOLUTION pictures of the touch dual's internals, both sides of the circuit board, using the above manual, i think it would be pretty easy to ascertain if the nessacary chips exist.


cheers

Jamie
Excellent manual thanks!
And yes, you are absolutely right about the pics.

@NetRunnerAT: you could be right about the lack of support for Wifi in Niki SPLs. I will check that.

[live2themaxuk]

http://forum2.mobile-review.com/showpost.php?p=528653&postcount=107


If you look at this thread, it helps us understand what would actually be needed if such chips exsisted on the board to get GPS and/or wifi working


http://forum.xda-developers.com/showthread.php?t=293920

correct radio-rom, MAIN rom with correct Driver for GPS and Wifi also( we also need the driver in OS.nb) maybe we can extract driver from Touch Cruise?

It also is interesting to see how they were tryign to extract certain files/cabs from roms to add to an exsisting rom. A bit like if we were to do this with Touch Dual and Touch Cruise.


Jamie

[jockyw2001]

http://forum2.mobile-review.com/showpost.php?p=528653&postcount=107


If you look at this thread, it helps us understand what would actually be needed if such chips exsisted on the board to get GPS and/or wifi working


http://forum.xda-developers.com/showthread.php?t=293920

correct radio-rom, MAIN rom with correct Driver for GPS and Wifi also( we also need the driver in OS.nb) maybe we can extract driver from Touch Cruise?

It also is interesting to see how they were tryign to extract certain files/cabs from roms to add to an exsisting rom. A bit like if we were to do this with Touch Dual and Touch Cruise.


Jamie

This was all tried out on the Wings (also with MSM7200 and very similar to Kaiser, Niki and Polaris). Unfortunately a no go.

[swema]

I took mine apart and here are high res pics...

I hope someone can figure out if it has all hardware necessary for WIFI/GPS...


http://rapidshare.de/files/38600988/nikipics.zip.html

[marazi]

im a noob in this area, but if the hardware is identical, why not try to flash a niki with the cruise rom...?? will it brick...?? is it impossible due to other restrictions...??
is it possible to get past these restrictions modifying the cruise rom...??

[live2themaxuk]

you legend. thanks alot, ill have a little look later

Jamie


I took mine apart and here are high res pics...

I hope someone can figure out if it has all hardware necessary for WIFI/GPS...


http://rapidshare.de/files/38600988/nikipics.zip.html

[Johnston411]

I took mine apart and here are high res pics...

I hope someone can figure out if it has all hardware necessary for WIFI/GPS...


http://rapidshare.de/files/38600988/nikipics.zip.html

You are a braver man than me

[jockyw2001]

I took mine apart and here are high res pics...

I hope someone can figure out if it has all hardware necessary for WIFI/GPS...


http://rapidshare.de/files/38600988/nikipics.zip.html
The third pic clearly shows the TI BRF6300 bluetooth chip and the antenna. The BRF6300 spec says that this chip can coexist with TI Wlan chipsets and that the antenna can be shared. Do you see any other TI chips on the mainboard? It could very well be the one next to the BRF6300 and there is a connector too :) Perhaps you can lift the metal case ...

The fact that it is a BRF6300 rules out any chances on a FM radio tuner, for that it should have been a BRF6350 (as used in Polaris).

EDIT
Although we are not sure the wlan hardware is included, I am sure that the wlan support is missing in the SPL.
Perhaps with a Kaiser SSPL it is possible to prove the existense of wlan hw by using the emapi test commands.

[live2themaxuk]

wow jocky that was a mega fast reply, you don t waste anytime . . .:)

yeah there interesting pictures. From my limited knowledge it does seem that Bluetooth/wlan antennas are commonly shared. In the LG KS20 they have seperate antennas for bluetooth and wlan, but the WLAN antenna in the KS20, is on a seperate board and it is connected from a connector on one board, to a connector on another board with has the antenna on it, using a normal RF WLAN cable.

I notice inthe niki there are two SMA type connectors. The one on the top board with the bluetooth chip is definetly Bluetooth/wlan related, no doubt, and you can clearly see the bluetooth antenna coming off the board. Whether this antenna at the top also potentially serves WLAN as well has alot to do with if the WLAN chip exists. . .what is that chip next to the bluetooth chip? (see picure)

Also, its possible that there is chip we cannot see on the mainboard obscured under the shielding frame. Maybe, the SMA connecctor on the mainboard connects to the top board via a *missing* RF cable to share the bluetooth antenna at the top . . . . .oooohh the mystery . . . .




Jamie

[swema]

My guess to what is under the shield is an amplifier and SAW filter. The shield is soldered to the board so a bit difficult to look under... There is nothing but the connector on the other side of the board and there are no other boards underneath it. The SMA connector looks like it connects directly to the antenna.

[Marqnet]

hi guys I am hooked to this thread with interest. just a thought has any one taken internal pics of the Touch cruise and compared the differences between the Touch Dual too?
just a thought

[live2themaxuk]

yep and a good one too. . . .



whos got the guts?


Jamie

[rumble291]

Couldn't you flash the radio rom from the cruise onto a touch? or are there some differences i read the both use a Qualcomm MSM7200 CPU.

Kurt

[jockyw2001]

Meanwhile the main focus of this thread is on Wifi and not so much on GPS. I should consider renaming it :)

We now know that for Wifi there needs to be hw support (wlan chipset + antenna) and sw support by the SPL.
To see which chip check out the Kaiser Wiki.

For GPS there needs to be hw support (antenna and perhaps some peripheral electronics, the "gpsone" is part of the MSM7200) and sw support by OS. A further condition is that NV configuration item 148 must be set to 17.

[NetrunnerAT]

I think i have a working GPS Radio Rom ... try soon some tests!

[clonmult]

I think i have a working GPS Radio Rom ... try soon some tests!

!!!!!

This is definitely a "we are not worthy" moment. A billion kudos to you!

[Billokko]

I think i have a working GPS Radio Rom ... try soon some tests!

oh yes.. I'm praying:):):)

[clonmult]

oh yes.. I'm praying:):):)

I guess that for me its more of a "it'd be nice to have" - already got a decent SiRF III GPS unit that works much faster/better than the unit in the T-Mob Ameo that a friend had.

Yup, onwards with unlocking the potential of these phones - GPS, WiFi, and decent video drivers!

[GpsPasSion]

Would definitely be nice to have, but what do you mean by "working", if it's a ROM that allows access to the GPS via standard serial ports like the GPStools we already had that gave access to the hidden SMD7 port but no fix, it's not going to be very useful...

Wifi would be more useful I think ;-)

[SMYKUL]

In actuality we can already access the GPS chip, I myself have used the GPSTools to recieve information from it (using a standard 16-key out-of-the-box Orange UK rom).

The problem encountered was that the antenna either wasn't present or the device was not utilising it correctly, therefore a "lock" was not possible (requires 3 satellites or more in range, mine *just* about picked up one). If an updated radio rom can get the chip and the antenna communicating properly, all that would be left to achieve is getting a standard interface working on the device (to relay the information to say; tomtom).

Then all would be well :-)

<edit>

As a side note,
GpsPasSion, This wasn't aimed at you ;-). Simply bad timing, I expect you know far more than I do. Just wanted to sum up :-)

</edit>

[GpsPasSion]

No problem, actually you make a good point, maybe the Radio ROM can activate a "connection" between the chip and the antenna. Let's stay tuned ;-)

[Dagnelinos]

if the nv item is set to 17 instead of 11 the gps chipset can receive more satellites.
In the wings forum, 2 or 3 guys working for fix this nv item on an recent radio rom.
If the nv item is set to 11 no satellite Fix, with 17 the fix is guaranteed on a wing model (preprod.)

i have my fingers crossed :D

[NetrunnerAT]

uhm ... no nike fm radio ... i have check the pics :-/ ok i drop the fm radios and driver research -_-

[SMYKUL]

I wonder if the NV items are used as flags e.g. each binary 1 or 0 is taken as a boolean value(true or false). This would translate to:

11 = 00001011
17 = 00010001

in binary. So maybe that 4th bit is the key (setting its value to true). If so then we really should be leaving the 5th and 7th bit alone as we don't know what they do, producing a value of:

00011011 = 27

(combining the two values, aka a bitwise "OR" operation)

I propose this as if the value was some sort of address why set it to 11 in the first place? It makes no sense.

For example maybe the 8th bit turns on all of the enabled interfaces, while bit 4 enables the GPS antenna interface and the 5th and 7th enable maybe GSM and CDMA? Just a thought anyway :-)

<note>

Quick binary lowdown.

In a byte there are 8 bits. The placement of the bits gives them their value. Bits are only added to the total when they are turned on (set to "1"). The first bit is worth 128 the next is 64 then 32, 16, 8, 4, 2 and 1.

For example:

00000001 = 1
00000010 = 2
00000011 = 3
01000001 = 65

It's a bit like when you were taught mathematics at school with "hundreds", "tens" and "units". If you are given the number 152 you have 1 "hundredth", 5 "tens" and 2 "units".

With the binary example totalling 65 you have no "128"s, "32"s, "16"s, "8"s, "4"s or "2"s. But you do have a "64" and a "1" making a total of 65.

</note>

[NetrunnerAT]

i think the same!

i use the same way on µC

[ironmansp]

I would like to help.where can I find tools to test my niki?I would like to remember my hacking old times

[NetrunnerAT]

in the moment ... no!

[joaosousa]

Can we make a status report point, so that we all can know how far we are from getting wifi/gps working?

I think i can make a summary:

-Niki has hardware to make wifi work (see pictures) but its software is blocking it (solution?! A correct radio rom?!)
-Gps: Not yet proved that it can work!?

Thanks to everyone working on this....

[NetrunnerAT]

Please ... wait!!!!!

i need a working RTASK enabled SPL!! Befor i doesnt get this functions ... i doesnt release any Modded Radio Roms. I Dont want damage HTC Nike's around the world!!!

if it needs 2 weeks or month ... i havent a problem with it! do yu need this function now ... buy a other device!

a hard answer ...

[joaosousa]

I wasn't trying to rush you, i was just trying to know the status of this problem, i understand it takes time to get results and that we must always be aware of what we launch to the world.

BTW thanks NetrunnerAT for all the work.

[rumble291]

Good luck NetrunnerAT! :D

[afhstingray]

i dont think that picture of a wifi antenna is the wifi antenna, as it seems to be connected to the external GSM antenna connector

[obsydian]

Keep it up :D

[creamhackered]

Just seen this thread. Good work guys :) Hope you can get the GPS working that would be awesome

[jockyw2001]

Very interesting post in the GPS thread in the Wings forum:
http://forum.xda-developers.com/showpost.php?p=1962273&postcount=250
Check out the last line in his post.

Someone should try that on Niki.

[NetrunnerAT]

Jockyw ... whats about RTASK and SPL? Can you say something?

I read it ... its the same on Nike! I can get for a short time 1 or 2 Sats ... some times 4 but no fix!

[Valvarin]

Very interesting post in the GPS thread in the Wings forum:
http://forum.xda-developers.com/showpost.php?p=1962273&postcount=250
Check out the last line in his post.

Someone should try that on Niki.

I have test it.

don't stop at COM4
only stops at COM7 (Bluetooth COM-Port)

[hass]

I am really very doubtful that we will ever get wifi or gps support but if you succeed then I will be willing to pay for the roms!

[flashmp3]

I' m very disapointed cause i wanted to buy a HTC polaris but didn't like it because of its esthetic...i add heard there was wifi&gps but unactivated so i just thought that it would have been as when the trinity had been released (unactivated gps promised to be activated in the future) then a few month after htc released the gps-rom what brought the trinity to one of the most complete and powerful pda phone. Perhaps i should have bought the Polaris i would have had everything except the beauty ;)

[joaosousa]

I' m very disapointed cause i wanted to buy a HTC polaris but didn't like it because of its esthetic...i add heard there was wifi&gps but unactivated so i just thought that it would have been as when the trinity had been released (unactivated gps promised to be activated in the future) then a few month after htc released the gps-rom what brought the trinity to one of the most complete and powerful pda phone. Perhaps i should have bought the Polaris i would have had everything except the beauty ;)

Instead off getting disapointed you should try to help those that are making all to get it to work. If you can't help, maybe you should wait or sell you beatifull niki and buy an ugly polaris.

[flashmp3]

I don't want to discourage people that are working hard on make it work. However i remember of some who tried on the htc tytn I and who never succeeded...........

[joaosousa]

I don't want to discourage people that are working hard on make it work. However i remember of some who tried on the htc tytn I and who never succeeded...........

It may also happen here... Lets wait....

[Valvarin]

after two weeks work on the GPS-Problem my cognitions about this:


I use a modded Polaris Radio Rom from NetrunnerAT and a little bit modified GPSID_QCT.dll from a Kaiser Rom, the GPS-Tool is now even faster, to find some sattelites max. three at one Moment,
the GPS-Tool answering only on Port SMD7 (work on this Problem) but i have no fix for the Stelites.

I think the GPS-Tool dropp connections to Satelites when it's get no Fix.

In the Space of a Hour it's get min. 9 different Satelites (indoor) therefor i
think there is a Antenna Insinde.

I speculate to:

1. Even an Radio Roms NV-Item is set to 17 it gets dropped while loading in
the Niki

2. there is only a driver problem


I try to work on that.


Thanks to NetrunnerAt for his modded Radio Roms.

And Sorry about my english.

[joaosousa]

Thanks for your hard work. Lets all work together on this!
If any tests needed i can help. Currently i have a kaiser moded radio rom (thanks NetrunnerAT) installed...

[cyst]

From having previously watch the attempts with the tytn unfold: It seems to identify satellites, do you have a gps receiver you can compare these satellites to? In the case of the tytn a lot of hope rested on the apparent reception of several satellites, in the end the was found to be noise and nothing else. If you are picking up satellites that are visible to a functioning gps receiver then this would be very good news, otherwise it will be less so.

James

[NetrunnerAT]

I speculate to:

1. Even an Radio Roms NV-Item is set to 17 it gets dropped while loading in
the Niki

2. there is only a driver problem


Point 1 ... NV Items are not stored in the Radio Rom. I think its stored like the IMEI, in a Protected Area in the CPU. With 1.27.xx.xx Radios we can try too edit the NV Item 143. In some Kaiser Threads, some guys have write they are not write Protected if you use a old Radio?!?! The next point why i wait for a new SPL Version.

Point 2 ... my ability are to low for tweaks like this. Does a tool exist like the devicemanager in winxp?

[Valvarin]

i tested it with a external navi
at the same time, the signal strange
was poor, but it ha vea fix for the
satelites and the satelite numbers
are the same as the niki found.

Sorry about my english!

[Valvarin]

Point 1 ... NV Items are not stored in the Radio Rom. I think its stored like the IMEI, in a Protected Area in the CPU. With 1.27.xx.xx Radios we can try too edit the NV Item 143. In some Kaiser Threads, some guys have write they are not write Protected if you use a old Radio?!?! The next point why i wait for a new SPL Version.

Point 2 ... my ability are to low for tweaks like this. Does a tool exist like the devicemanager in winxp?

to point 1: ok, it's good to know that
to point 2: task manager 2.9 have a device manager

[NetrunnerAT]

point 2 ... does we can see unknown devices ... i mean devices without drivers like winxp?

[Valvarin]

point 2 ... does we can see unknown devices ... i mean devices without drivers like winxp?

i don't think windows mobil or the hardware
is desinged for plug and play.
i think there is no tool todo that.

[SMYKUL]

On the contrary, I have a feeling I have come across a program which may do this on my travels. At the time I dismissed it because the other devices showed up as "unknown" which I found annoying lol.

Give me a few minutes and I will try to track it down. No promises though, It might be useless.


<update>

I found it, give it a try:
PHM Device Manager (http://www.phm.lu/products/PocketPC/DevMgmt/)

</update>

[NetrunnerAT]

i will check it soon ... but i think it only read out the registry???

[joaosousa]

i am using it, and it doesn't displays any "unknow devices"

[Klutsh]

"Other Device (GPD0: )"
Uses the driver GPSID.dll

But none of the other devices needed are listed, this maybe due to them just simply being turned off.

[Valvarin]

The GPSID.Dll i think stands for
the microsoft GPS Intermediant Driver

The Polaris, The Kaiser and the Niki
Rom have exact the same file.

With the modded Kaiser GPSID_qct.Dll
i can activate and deactivate the
GPD0 Port

[joaosousa]

The GPSID.Dll i think stands for
the microsoft GPS Intermediant Driver

The Polaris, The Kaiser and the Niki
Rom have exact the same file.

With the modded Kaiser GPSID_qct.Dll
i can activate and deactivate the
GPD0 Port

Did you found anything else?

[Klutsh]

Looking at The Titan Internal GPS FAQ ( http://forum.xda-developers.com/showthread.php?t=363431 )
There is mention of a VIRSER_GPS.dll and a whole load of registry setting's the Nike (Niki) is missing too.

I know the Titan has a different Chip, but still there is mention of the VirtCOM in the Nike registy, with looking at the Titan registry entries they are releated
VirtCOM_GPS1 is the driver for the GPS1: port

Just something to look over...

[Billokko]

no news?:confused:

[bkeaver]

What the hell guys, I just found a NIKE that is being released in March 2008 that has WIFI and FM Radio but it doesnt list GPS tho...

http://www.pdadb.net/index.php?m=specs&id=847

[dopeless]

What the hell guys, I just found a NIKE that is being released in March 2008 that has WIFI and FM Radio but it doesnt list GPS tho...

http://www.pdadb.net/index.php?m=specs&id=847

em... do u think we can really belive this description? There is still nothin to hear about wifi at HTC Home...

[bkeaver]

em... do u think we can really belive this description? There is still nothin to hear about wifi at HTC Home...

this is a very reputable site that is usually acurate in what they post. But then again... i guess only time will tell..

[Pixiewave]

What the hell guys, I just found a NIKE that is being released in March 2008 that has WIFI and FM Radio but it doesnt list GPS tho...

http://www.pdadb.net/index.php?m=specs&id=847

We will soon have a breaktrough regarding the old niki phones then.
i hope

[Billokko]

I think I found an italian site like tgis one when I didn't have the niki. So I sent an email and they said to me that it was an error. The graphic of the site is very similar.. I think that there was an error

[Klutsh]

Just managed to figure out how to look at the NVItems on my Dual.
My Item 148 NV_RF_CONFIG_I value is already 11, so I don't think that it the problem here.

There are also all these GPS NV Items with no values

NV_GPS1_CDMA_RF_DELAY_I
NV_GPS1_GPS_RF_DELAY_I
NV_GPS1_GPS_RF_LOSS_I
NV_GPS_DACC_EST_IOFFSET_I
NV_GPS_DACC_EST_QOFFSET_I
NV_GPS_DACC_GAIN_MULT_I
NV_GPS_DACC_IACCUM0_I
NV_GPS_DACC_IACCUM1_I
NV_GPS_DACC_IACCUM2_I
NV_GPS_DACC_IACCUM3_I
NV_GPS_DACC_IACCUM4_I
NV_GPS_DACC_QACCUM0_I
NV_GPS_DACC_QACCUM1_I
NV_GPS_DACC_QACCUM2_I
NV_GPS_DACC_QACCUM3_I
NV_GPS_DACC_QACCUM4_I
NV_GPS_DRX_MODE_SEL_I
NV_GPS_FG_TRK_OFFSET_SCALER_I
NV_GPS_MIS_COMP_A_OFFSET_I
NV_GPS_MIS_COMP_B_OFFSET_I
NV_GPS_RF_CONFIG_I
NV_GPS_RXF_CG_IOFFSET_I
NV_GPS_RXF_CG_QOFFSET_I
NV_GPS_RXF_FG_IOFFSET_I
NV_GPS_RXF_FG_QOFFSET_I

Any one know what the value of NV_GPS_RF_CONFIG_I is on a Kaiser?

[GpsPasSion]

I can look, but why don't you tell us how you figured out how to do that ;-)

[NetrunnerAT]

We need a NV item backup from Kaiser!!!

For GPS, AGPS and Wifi enable!!!

Can some on provide it?

[Klutsh]

I can look, but why don't you tell us how you figured out how to do that ;-)

How I did what?
All I did was read the NVitems from my Dual, I've not editied anything.
I did notice there is a LOT of stuff about FM in it too.

[bkeaver]

How I did what?
All I did was read the NVitems from my Dual, I've not editied anything.
I did notice there is a LOT of stuff about FM in it too.


that would explain the new release that is coming this month (Japanese version) that is claiming to have WIFI and FM radio.....

[NetrunnerAT]

Guys ... FM doesnt work! Blue Tooth Chip isnt the right Version!

Next point! We check in the moment a way to crack the NV-Item Security PW. We need it, too write NV Item 148 and a lot more to the phone! NV-Item 148 isnt enough ... we need GPS offset value too.

@Klutsh you are very close like we!

possible i will try to write a skript to make a bruteforce on this PW 16 digi in hex.

Have some one the QXDN version 3.9.102? i have only the 3.9.16.

[Klutsh]

I'm not sure what I did, but I got a small satalite dish in the notification bar a minute ago, Can't get it back now though :(

[ducamie]

you guys are doing great.

very exciting.

[Valvarin]

Just managed to figure out how to look at the NVItems on my Dual.
My Item 148 NV_RF_CONFIG_I value is already 11, so I don't think that it the problem here.


11 bin = 0b hex
we need:
17 bin = 11 hex

the nv-item 82 is the security
unlock code, but it´s read and
write protected.

it´s a 16bit hexadecimal code
like 0123456789abcdef

[Klutsh]

Thanks for that,
I can't see item 82 though...

[Valvarin]

Thanks for that,
I can't see item 82 though...

you have to save the nv items to disk,
then you can open it with the nv-file
viewer.

[Klutsh]

you have to save the nv items to disk,
then you can open it with the nv-file
viewer.
Dont that, Still not showing.
I'm not all that confident with all this phone stuff yet, I work more reverse engineering games consoles.

[GpsPasSion]

How I did what?
All I did was read the NVitems from my Dual, I've not editied anything.
I did notice there is a LOT of stuff about FM in it too.Sorry to be a bit dim today, but how do you "read the NVitems" ? Do you need an app ? Registry ?

[jockyw2001]

Next point! We check in the moment a way to crack the NV-Item Security PW. We need it, too write NV Item 148 and a lot more to the phone! NV-Item 148 isnt enough ... we need GPS offset value too.

The 16-byte password on Kaiser is FFFFFFFFFFFFFFFF
(as a matter of fact i only used it once and never had to submit it again, so i still have some doubts if that is really used for access control to e.g. item 148)

A nice freeware tool is QC_BQS Firmware Analyzer (http://forum.modopo.com/diskussionen-rund-ums-modding/t-19197-qc-bqs-firmware-analyzer.html) (by viperbjk)
Put your phone in diag mode (rtask c) and use the Communication menu in QC_BQS and submit following commands:
read SPC:
26550000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 0000000000000000

send SPC:
41303030303030
If correct, response is: 41 01 70 41 7e

send Password:
46ffffffffffffffff
If correct, response is: 46 01 78 0c 7e

read NV Item 148
26940000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 0000000000000000

write NV Item 148 with value 0x11 (17 = Kaiser/Polaris value)
27940011000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 0000000000000000

write NV Item 148 with value 0x0B (11 = Wings/Niki value)
2794000B000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 0000000000000000

read NV Item 85
26550000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 0000000000000000

[NetrunnerAT]

nice thread!

i read it in the moment and after work, i will try some things.

[edit]O_O wwooww i understand 10% or less of this thread! this is realy hard core! some questions! do we need some patched things or is this tool enough to change it?

[jockyw2001]

nice thread!

i read it in the moment and after work, i will try some things.

[edit]O_O wwooww i understand 10% or less of this thread! this is realy hard core! some questions! do we need some patched things or is this tool enough to change it?
Just dl the analyzer tool from the first post and try some of the cmds I have listed previously, no need to read or try to understand the thread :)

Mind you, all this fiddling with NV Items is only the beginning. Meanwhile I know that this only affects GPS. To possibly get Wifi to run the real fun will start when we gonna try a Kaiser SSPL on Niki.

[creamhackered]

I think getting GPS working is the most important personally :) Good work guys.

[vovaxxxx]

so, jokyw2001, this code pathing IPL? or what?
where You found a password? it`s very exiting :)))))
one more...
did you disassamble niki, are you sure that it have a gps and wifi antenna? or gsm antenna both, and for gps?

[NetrunnerAT]

Just dl the analyzer tool from the first post and try some of the cmds I have listed previously, no need to read or try to understand the thread :)

Mind you, all this fiddling with NV Items is only the beginning. Meanwhile I know that this only affects GPS. To possibly get Wifi to run the real fun will start when we gonna try a Kaiser SSPL on Niki.

you have a kaiser or polaris? can you provide a nv-item dump too? i am in 2 hours @ home and test this tool.

[joaosousa]

Even with the password, we can't write the nv item...
:(

[NetrunnerAT]

if you type it ... does he reset or accept the device it?

[joaosousa]

It says 'correct'. And the phone stays connected...

[NetrunnerAT]

uhm ... we talk later!

[Klutsh]

Here's the responce from the first 3 commands
42 26 55 00 00 00 00 00 00 00 00 00 00 00 00
00 00

B&U..............
---------------------------------------------------------
41 01

A.
---------------------------------------------------------
46 01


I also get an error about nv read/write due to SP lock.
Invalid nv_read/write because SP is locked
So from the sounds of that I can't edit the values because it's SIM locked.

[joaosousa]

The 16-byte password on Kaiser is FFFFFFFFFFFFFFFF
(as a matter of fact i only used it once and never had to submit it again, so i still have some doubts if that is really used for access control to e.g. item 148)

A nice freeware tool is QC_BQS Firmware Analyzer (http://forum.modopo.com/diskussionen-rund-ums-modding/t-19197-qc-bqs-firmware-analyzer.html) (by viperbjk)
Put your phone in diag mode (rtask c) and use the Communication menu in QC_BQS and submit following commands:
read SPC:
26550000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 0000000000000000

send SPC:
41303030303030
If correct, response is: 41 01 70 41 7e

send Password:
46ffffffffffffffff
If correct, response is: 46 01 78 0c 7e

read NV Item 148
26940000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 0000000000000000

write NV Item 148 with value 0x11 (17 = Kaiser/Polaris value)
27940011000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 0000000000000000

write NV Item 148 with value 0x0B (11 = Wings/Niki value)
2794000B000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 0000000000000000

read NV Item 85
26550000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 0000000000000000


Even after send the password, the problem persist's, after writing NV Item 148 to 17 it will roolback to 11 by itself. At the moment we need to find a way to be able to write this values.
Once again, i hope that the one's who know the 'way' give us some help and share with us all the knollages they have.

Let's go Team!

[SMYKUL]

Once the password has been entered it is possible to change NV values, just not a select few. It seems like a bit of a messy workaround from qualcomm to me.

As jocky has already stated the next logical step would be to flash an earlier IPL (Initial Program Loader) maybe from a Kaiser? In order to gain the ability to write to item 148.

<note>
My understanding of the way this works is that the SPL exposes the device to external input, and handles some specific commands(for flashing roms etc.). But when it comes to these 'power' commands it passes the data it recieves to the IPL for processing(At least for the NV items).

Therefore if patching the SPL(second program loader) Has not solved the issue, the problem must reside in the IPL itself.

Originally the SPL in the Niki did not pass the rtask command to the IPL, which is what the new SPL enables(Alongside access to other commands in the IPL).

However, the SPL in this case ONLY passes on the information, the IPL is responsible for reading/writing and otherwise processing the data.

Feel free to pick me up on anything I am missing here :-) Constructive criticism is always welcome.
</note>

[joaosousa]

Good point of view...

[ZhenMing]

Kaiser user had find a way/software to edit thier NV Item... will that helps on Niki?
http://forum.xda-developers.com/showthread.php?p=1984171

[Valvarin]

Kaiser user had find a way/software to edit thier NV Item... will that helps on Niki?
http://forum.xda-developers.com/showthread.php?p=1984171

we already have this software, but changes
getting dropped if you write and read out the
the nv-item.

[ZhenMing]

oic... thanks for testing this... just curious is that only work or kaiser but not other?

[jockyw2001]

As jocky has already stated the next logical step would be to flash an earlier IPL (Initial Program Loader) maybe from a Kaiser? In order to gain the ability to write to item 148.

No totally wrong!

First, we will never flash a Kaiser SPL (not IPL), we will just load it as a SSPL or perhaps boot it from SD. Secondly, the SPL has nothing to do with reading/writing NV items. The SPL is essential for possibly getting Wifi to work. It's only for GPS that we are working on modifying NV item values.

In the mean time I'm pretty sure that we will have to change another essential configuration item, the product ID which is stored in NAND flash together with CID, IMEI and security flags. I will do some experiments with NetrunnerAT as unfortunately I do not posess a Niki. It's a pity donations are mainly given to rom cookers :D

[joaosousa]

No totally wrong!

First, we will never flash a Kaiser SPL (not IPL), we will just load it as a SSPL or perhaps boot it from SD. Secondly, the SPL has nothing to do with reading/writing NV items. The SPL is essential for possibly getting Wifi to work. It's only for GPS that we are working on modifying NV item values.

In the mean time I'm pretty sure that we will have to change another essential configuration item, the product ID which is stored in NAND flash together with CID, IMEI and security flags. I will do some experiments with NetrunnerAT as unfortunately I do not posess a Niki. It's a pity donations are mainly given to rom cookers :D

Why change the product id ?
How will we be able to write the nv item 148?

Thanks!

[jockyw2001]

Why change the product id ?
How will we be able to write the nv item 148?

Don't ask too many questions, I'm not able to answer them now. It's time to experiment and I will do that together with NetrunnerAT.

[joaosousa]

You said that you are almost sure we need to change the product id, and if you say that, i think you have a pretty idea of why we need to do that... But there's no problem if you don't wan't to say why...

[rvintem]

Even risking being unnecessary, I think some of you may find these qualcomm MSM7200 schematics useful:

http://www.ent.eetchina.com/PDF/2007FEB/DTCOL_2007FEB15_AVDE_RFR_AN_01.pdf

It is a PDF file explaining the circuit diagram of the Qualcomm MSM7200.

Best of luck unleashing the beast ;)

[Valvarin]

ok, finaly i have security unlocked my niki...
but i can't write nv-items and I even don't certainly know why.

anyone with knowlege about this can help me?

[Marqnet]

Any Updates guys? i have just had a touch cruis delivered now so have nearly got the whole family.

[FuzzMunky]

Rumour has it, HTC has paid off the guys working on GPS/WiFi to halt development.

[Billokko]

Rumour has it, HTC has paid off the guys working on GPS/WiFi to halt development.
????????????:confused::(

[jockyw2001]

Rumour has it, HTC has paid off the guys working on GPS/WiFi to halt development.

Bloody nonsense

[FuzzMunky]

;)


-

[moritz.narnhammer]

It's a pity donations are mainly given to rom cookers :D

Just donated 5$ :D
Though I don´t care about GPS, WiFi would be interesting, but GPU drivers would just rock.
Though Netrunner told me not to set my hopes too high regarding GPU drivers. :(

[Valvarin]

Rumour has it, HTC has paid off the guys working on GPS/WiFi to halt development.


The Item is not changeable at the Moment... but Developing never
stops!!!^^

We disassembel the Radio Rom from Niki and Kaiser at the Moment.
And that need a long Time.

[rvintem]

Rumour has it, HTC has paid off the guys working on GPS/WiFi to halt development.

lol... :D .

[poo1009]

Rumour has it, HTC has paid off the guys working on GPS/WiFi to halt development.

It's really great news, it this rumor is true!!!
That's ensure NIKI has capability to activate GPS and Wi-FI inside without no doubt if HTC paid for stopping developers.

If it cannot, why did HTC pay?

[Klutsh]

It's really great news, it this rumor is true!!!
That's ensure NIKI has capability to activate GPS and Wi-FI inside without no doubt if HTC paid for stopping developers.

If it cannot, why did HTC pay?

It's a Damn Joke!!

If not where the hell is my Money, lol

[AlexTM]

Rumour has it, HTC has paid off the guys working on GPS/WiFi to halt development.



Get real people !!
before trowing dirt to others bring on some evidence to support that dirt !!

Keep up the good work guys - dont let the jokes upset you !!
Alex

[Olipro]

so... does the Nike actually report any NMEA data? because if so, I don't think HTC will have sabotaged the calibration data.

[NetrunnerAT]

Oli ... i need a full dump of a kaiser to tell what is the different! some nv items and some value are not set on a nike!

[joaosousa]

It's really great news, it this rumor is true!!!
That's ensure NIKI has capability to activate GPS and Wi-FI inside without no doubt if HTC paid for stopping developers.

If it cannot, why did HTC pay?

Do you really belived it? lol

Yes, i got very rich just because i am trying to make gps and wifi work on NIKI!
HTC payed me 1000000000000000000000000000€

And now, you still belive i got payed?

Duhhhhhhhh......

:D:D:D:D

[FuzzMunky]

Classic.

PS. HTC paid me to say that.

[Valvarin]

ok i solved to write NV-Item 148 to 17binary

jocky i have talk to u, pls contact me via msm

[Olipro]

ok i solved to write NV-Item 148 to 17binary

jocky i have talk to u, pls contact me via msm

does your GPS function or not?

[Valvarin]

i can't see it^^

thats my problem, i need someone who know more about
programming radio roms...

[Midget_1990]

i can't see it^^

thats my problem, i need someone who know more about
programming radio roms...

tell me how to change to 17 and i can see the gps :) atm i only get 1 satelite

[Valvarin]

Now thats my Status

I can change the NV Item 148, but there are many problems with
my solution.
This is all based on a modded Kaiser Radio.

Now the Problems:
Black Screen (solvend at the moment but the solution is not the best)
No GSM Connection
Charging Problems (can be very dangerous if u try to flash a other Radio again)
SPL BOOTLOADER (VERY VERY DANGEROUS)
OEM BOOTLOADER (VERY VERY DANGEROUS)

Test with GPS Tool
No connection to Satelites i think many offset values are not set.
(I need a full NV-Item Dump from a Kaiser(with QPST Software Download-Backup))

I have to go to bed now.
My Team and I will work on this for u Guys!!!

[Valvarin]

Modded Radio:

NV item: 148 [NV_RF_CONFIG_I], index 0
NV_RF_CONFIG_I 0: 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RF_CONFIG_I 1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RF_CONFIG_I 2: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RF_CONFIG_I 3: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RF_CONFIG_I 4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RF_CONFIG_I 5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RF_CONFIG_I 6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RF_CONFIG_I 7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Orginal Radio:

NV item: 148 [NV_RF_CONFIG_I], index 0
NV_RF_CONFIG_I 0: 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RF_CONFIG_I 1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RF_CONFIG_I 2: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RF_CONFIG_I 3: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RF_CONFIG_I 4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RF_CONFIG_I 5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RF_CONFIG_I 6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RF_CONFIG_I 7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


Modded Radio:

NV item: 723 [NV_ACQ_LIST_I], index 0
NV_ACQ_LIST_I 0: 02 06 02 02 00 02 00 44 29 00 00 00 00 00 00 00
NV_ACQ_LIST_I 1: 20 00 00 05 c0 0a 00 00 5e 00 00 00 00 00 00 02
NV_ACQ_LIST_I 2: 00 02 00 b8 29 00 00 00 00 00 00 00 00 00 d1 07
NV_ACQ_LIST_I 3: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1
NV_ACQ_LIST_I 4: 29 00 00 00 00 00 00 00 00 bc 81 00 00 02 00 00
NV_ACQ_LIST_I 5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_ACQ_LIST_I 6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_ACQ_LIST_I 7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


Orginal Radio:

NV item: 723 [NV_ACQ_LIST_I], index 0
NV_ACQ_LIST_I 0: 02 06 02 02 00 02 00 44 29 00 00 00 00 00 00 00
NV_ACQ_LIST_I 1: 20 55 f4 05 c0 0a 00 00 5e 00 00 00 02 06 00 02
NV_ACQ_LIST_I 2: 00 02 00 b8 29 00 00 00 00 00 00 00 26 37 d1 07
NV_ACQ_LIST_I 3: e0 0a 00 00 00 00 00 00 02 06 00 02 00 01 00 f1
NV_ACQ_LIST_I 4: 29 00 00 00 00 00 00 00 55 bc 81 0c a0 02 00 00
NV_ACQ_LIST_I 5: 82 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_ACQ_LIST_I 6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_ACQ_LIST_I 7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


Modded Radio:

NV item: 931 [NV_VCO_COARSE_TUNE_TABLE_I], index 0
NV_VCO_COARSE_TUNE_TABLE_I 0: 00 00 00 00 c8 00 00 00 00 00 00 00 50 00 00 00
NV_VCO_COARSE_TUNE_TABLE_I 1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_VCO_COARSE_TUNE_TABLE_I 2: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_VCO_COARSE_TUNE_TABLE_I 3: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_VCO_COARSE_TUNE_TABLE_I 4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_VCO_COARSE_TUNE_TABLE_I 5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_VCO_COARSE_TUNE_TABLE_I 6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_VCO_COARSE_TUNE_TABLE_I 7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


Orginal Radio:

NV item: 931 [NV_VCO_COARSE_TUNE_TABLE_I], index 0
NV_VCO_COARSE_TUNE_TABLE_I 0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_VCO_COARSE_TUNE_TABLE_I 1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_VCO_COARSE_TUNE_TABLE_I 2: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_VCO_COARSE_TUNE_TABLE_I 3: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_VCO_COARSE_TUNE_TABLE_I 4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_VCO_COARSE_TUNE_TABLE_I 5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_VCO_COARSE_TUNE_TABLE_I 6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_VCO_COARSE_TUNE_TABLE_I 7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


Modded Radio:

NV item: 1794 [NV_RFR_VCO_COARSE_TUNING_1900_I], index 0
NV_RFR_VCO_COARSE_TUNING_1900_I 0: 00 00 00 00 c8 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_1900_I 1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_1900_I 2: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_1900_I 3: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_1900_I 4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_1900_I 5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_1900_I 6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_1900_I 7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


Orginal Radio:

NV item: 1794 [NV_RFR_VCO_COARSE_TUNING_1900_I], index 0
NV_RFR_VCO_COARSE_TUNING_1900_I 0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_1900_I 1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_1900_I 2: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_1900_I 3: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_1900_I 4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_1900_I 5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_1900_I 6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_1900_I 7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


Modded Radio:

NV item: 2497 [NV_FACTORY_DATA_1_I], index 0
NV_FACTORY_DATA_1_I 0: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_1_I 1: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_1_I 2: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_1_I 3: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_1_I 4: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_1_I 5: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_1_I 6: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_1_I 7: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV item: 2498 [NV_FACTORY_DATA_2_I], index 0
NV_FACTORY_DATA_2_I 0: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_2_I 1: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_2_I 2: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_2_I 3: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_2_I 4: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_2_I 5: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_2_I 6: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_2_I 7: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV item: 2499 [NV_FACTORY_DATA_3_I], index 0
NV_FACTORY_DATA_3_I 0: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_3_I 1: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_3_I 2: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_3_I 3: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_3_I 4: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_3_I 5: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_3_I 6: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_3_I 7: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV item: 2500 [NV_FACTORY_DATA_4_I], index 0
NV_FACTORY_DATA_4_I 0: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_4_I 1: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_4_I 2: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_4_I 3: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_4_I 4: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_4_I 5: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_4_I 6: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d
NV_FACTORY_DATA_4_I 7: 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d 7d

[Valvarin]

Orginal Radio:

NV item: 2497 [NV_FACTORY_DATA_1_I], index 0
NV_FACTORY_DATA_1_I 0: 00 00 00 3f 00 00 00 ff 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_1_I 1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_1_I 2: 00 00 00 00 00 00 00 00 00 00 00 00 00 01 73 20
NV_FACTORY_DATA_1_I 3: 05 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_1_I 4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_1_I 5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_1_I 6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_1_I 7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV item: 2498 [NV_FACTORY_DATA_2_I], index 0
NV_FACTORY_DATA_2_I 0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_2_I 1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_2_I 2: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_2_I 3: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_2_I 4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_2_I 5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_2_I 6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_2_I 7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV item: 2499 [NV_FACTORY_DATA_3_I], index 0
NV_FACTORY_DATA_3_I 0: fe 00 00 fc f9 f2 fc ff fe 00 01 fb f9 f2 fc ff
NV_FACTORY_DATA_3_I 1: fe 00 00 fb f9 f2 fc fe fe 00 01 fb fb f2 fb ff
NV_FACTORY_DATA_3_I 2: fb 01 00 00 fa f8 f1 ee fb 01 00 00 f9 f7 f1 ed
NV_FACTORY_DATA_3_I 3: fb 01 00 00 fa f8 f1 ed fb 01 01 00 f9 f7 f1 ed
NV_FACTORY_DATA_3_I 4: 0c 0c 06 00 02 06 02 f2 0e 0e 06 00 03 08 04 f3
NV_FACTORY_DATA_3_I 5: 0c 0b 05 00 03 06 01 f1 0d 0b 04 00 05 08 02 ef
NV_FACTORY_DATA_3_I 6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_3_I 7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV item: 2500 [NV_FACTORY_DATA_4_I], index 0
NV_FACTORY_DATA_4_I 0: 73 00 51 07 96 00 10 0c f4 01 1f 14 9a 00 8a 08
NV_FACTORY_DATA_4_I 1: c3 00 ca 0b 51 02 15 13 9b 00 a0 08 d2 00 2f 0c
NV_FACTORY_DATA_4_I 2: 88 02 2a 13 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_4_I 3: 01 00 54 0b d6 01 0e 01 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_4_I 4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_4_I 5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_4_I 6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_FACTORY_DATA_4_I 7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


Modded Radio:

NV item: 3283 [NV_RFR_VCO_COARSE_TUNING_800_I], index 0
NV_RFR_VCO_COARSE_TUNING_800_I 0: 00 00 00 00 c8 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_800_I 1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_800_I 2: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_800_I 3: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_800_I 4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_800_I 5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_800_I 6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_800_I 7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


Orginal Radio:

NV item: 3283 [NV_RFR_VCO_COARSE_TUNING_800_I], index 0
NV_RFR_VCO_COARSE_TUNING_800_I 0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_800_I 1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_800_I 2: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_800_I 3: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
NV_RFR_VCO_COARSE_TUNING_800_I 4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00