Trinity bootloader

---

i'm using the hermes/artemis reference to see what works and not

first: almost every other commands give the "Command Error"

the wdata exists and gives: Command is Locked!

The first thing will be to get into the radio bootloader - seems that the password is fixed. As far as the bootloader I hope that it can be downgraded.

---

info 2:
HTCSHTC__102Ã;¿HTCE

info 3:
HTCST

info 4:
IsAllBytesTheSame-: dwLength=8, bResult=0
HTCSHTC__102Ã;¿HTCE

info 6:
HTCST ÚÈÒHTCE

info 7:
HTC Integrated Re-Flash Utility, Common Base Version : 1.51b
Device Name: TRIN100, Bootloader Version : 1.06.0000
Built at: Oct 19 2006 20:31:29
Copyright (c) 1998-2006 High Tech Computer Corporation

CPU ID=0x41129200
Main CPLD version=0xA
Main Board version=0x5

info 8:
Block 0x0(0) is Reversed block
Block 0x1(1) is Reversed block
Block 0x2(2) is Reversed block
Block 0x3(3) is Reversed block
Block 0x4(4) is Reversed block
Block 0x5(5) is Reversed block
Block 0x6(6) is Reversed block
Block 0x7(7) is Reversed block
Block 0x8(8) is Reversed block
Block 0x9(9) is Reversed block
Block 0xA(10) is Reversed block
Block 0xB(11) is Reversed block
Block 0xC(12) is Reversed block

Partition[0], type=0x20, start=0x2, total=0x18FE
Partition[1], type=0x23, start=0x1900, total=0x1700
Partition[2], type=0x25, start=0x3000, total=0x18700
Partition[3], type=0x4, start=0x1B700, total=0x1F100

CE Total Length(with sector info) = 0x37BB800
CE CheckSum Length(without sector info) = 0x36E0000

-----
task 32 : Level FF
-----
checkimage

IPL CRC checksum = 0x96BE3C47

SPL CRC checksum = 0xBA45D40C

CE CRC checksum = 0xE86D6EC6

ExtROM CRC checksum = 0x3FBE8D13

Radio Image CRC checksum = 0xAB599ED8

-----
progress - shows bar

SD Upgrade

---

I tried the SD upgrade method.

I placed an nbh file on it called TRINIMG.nbh but after cheking gaves me "NOT ALLOW" 00028002

Any ideea ?

As your seclevel is FF, the CID on the NBH should be the same on your device. info 2 shows your CID = HTC__102 (HTC Germany), so you need to put an HTC german rom in the TRINIMG.nbh file or CID unlock your device.

Nice work on the bootloader

I've just decoded Trinity radio, it is very very similar to Hermes radio (Same Qualcomm JNAND Identification block), so radio bootloader commands should be the same in Trinity as on Hermes (and radio patch for SIM/CID unlock too!).

Normal bootloader commands should be quite similar too, but not necessarily the same, this is what I found on Trinity's SPL:

getdevinfo
ResetDevice
progress
ruustart
rbmc
password
info
task
emapi
btrouter
wdata
lnbs
erase
checkimage
checksum
wdata
wdatah

There's also the static password: BsaD5SeoA

Can you add all this info to the wiki?

Originally Posted by pof

I've just decoded Trinity radio, it is very very similar to Hermes radio (Same Qualcomm JNAND Identification block), so radio bootloader commands should be the same in Trinity as on Hermes (and radio patch for SIM/CID unlock too!).

Normal bootloader commands should be quite similar too, but not necessarily the same, this is what I found on Trinity's SPL:



There's also the static password: BsaD5SeoA

Can you add all this info to the wiki?

excellent. i'm in office only with my trusted Universal (i'll fill up all the info tonight).

from artemis Wiki:

Artemis Bootloader Password
Seems that artemis bootloader password is static: BsaD5SeoA

If you enter this password in mtty terminal, you may not be able to boot device into Windows, only in bootloader. Be carefull.

It's meaning that Artemis has the same bootloader (or similar) with trinity.

The question: why it cannot get out from the bootloader ??

Originally Posted by decebal

It's meaning that Artemis has the same bootloader (or similar) with trinity.

No, if you compare SPL they are very different one from the other.
Trinity's SPL is more similar to Hermes SPL, but Artemis SPL is different.

Originally Posted by decebal

The question: why it cannot get out from the bootloader ??

probably you just need to 'set 14 0' or hard reset to go back to OS, I don't know... the wiki edit was done by fdp24, he can probably explain

Originally Posted by pof

I've just decoded Trinity radio, it is very very similar to Hermes radio (Same Qualcomm JNAND Identification block), so radio bootloader commands should be the same in Trinity as on Hermes (and radio patch for SIM/CID unlock too!).

Normal bootloader commands should be quite similar too, but not necessarily the same, this is what I found on Trinity's SPL:



There's also the static password: BsaD5SeoA

Can you add all this info to the wiki?

Cmd>getdevinfo
GetDevInfo: Get CID OK

HTCSTRIN100HTCE

--
Reset Device - works

--
Progress - works

--
ruustart - blocked - hard reset needed

--
rbmc - not working

--
password works with the password BsaD5SeoA

--
info - works as in wiki

--
task - works as in wiki

--
emapi and btrouter - blocks the device

--
wdata - works with the password provided

--
lnbs - not working

--
erase - working
HTCST ÚÈÒHTCE

--
checkimage - working as in wiki

--
checksum - seems working

--
wdatah - not working

seems that the 1.06 is somehow limited as bootloader. how can we get the 1.04 or other upgrade solution ??

thanks

Nice work on the wiki decebal

Answers to your comments:

rbmc and lnbs - probably only work on SuperCID devices.
emapi and btrouter - I think it switches to wlan or bluetooth and disables USB connection.

wdata and wdatah - In hermes wdatah is for flash NBH and wdata for flash NBF in preproduction devices. Have you captured a full ROM upgrade using USB monitor?? which one it uses the RUU? Probably it has a dynamic password which enables wdatah for NBH files. Does 'info 3' works as in Hermes (you need to watch usb monitor output, can't see in mtty generally).

Originally Posted by decebal

seems that the 1.06 is somehow limited as bootloader. how can we get the 1.04 or other upgrade solution ??

Generally by flashing a ROM matching your CID with bootloader 1.04.