Последние файлы
Наши партнеры
Важная информация
Вопрос 2730c убил прошивкой (повышением)?
Nokia BB5 - 6630, 6680, 6681 ...
Ответ
 
Опции темы
  • Новое
    Аватар для Porter

    Porter
    MCRF Инженер

    Сообщений:
    1,499
    Регистрация:
    12.10.2006
    Возраст:
    43
    Рейтинг мнений: 480
    Вес репутации: 492
    Porter Porter Porter Porter Porter Porter Porter Porter Porter Porter Porter
    Очки: 69,138, Уровень: 100 Очки: 69,138, Уровень: 100 Очки: 69,138, Уровень: 100
    Активность: 10% Активность: 10% Активность: 10%
    По умолчанию 2730c убил прошивкой (повышением)? #1
    Приветствую.
    Зашла новая 2730с на раскодировку и язык, вычитал данные, закинул на расчёт:

    Развернуть для просмотра

    card found: S/N 36F****
    registered to: Porter

    Connect phone on selected interface...

    Opening Connection...
    Device Location: 00000042
    Connect Ok!
    Initializing Connection...
    JAF Firmware: 01.B4
    Authentificate JAF BOX...
    TEA Authentication Completed...


    JAF S/N ODJAF000 boot - Ok
    Switch jaf to FBUS...
    FbusMode set Ok

    Connect phone on selected interface...

    Phone found!
    Series 40 Device detected!
    read info... - Ok

    Reading Phone Info....
    Connected phone - Nokia 2730 classic
    Software ver : V 07.75 05-07-10 RM-578 (c) Nokia
    IMEI : 354343048****7
    XappVer : 000007D0
    DSP Ver : ICPR72_TOMMY_09w21
    PPM : V 07.75
    05-07-10
    RM-578
    (c) Nokia
    AE
    CNT : Content: 3 UK
    V 07.75
    05-07-10
    RM-578
    (c) Nokia


    Product SN : 47BDF26AI
    Product code : 0591475
    Base Prd.code: 0580665
    Module code : 0204322
    Long Prod.SN : 0
    Hardware info=======
    HWID : 3024
    Retu : 16
    Tahvo : 22
    Batery: 4869 mV
    CMT BT: .31
    LCDVer: SEIKO
    RF ic : 17141716
    Lock info ===========
    IMEI : 354343048681627
    IMEI spNet :
    IMEI svNet :

    Conf key : 8000000000000000
    Provider key : 2342000000000000
    Country : United Kingdom
    Operator : 3 UK
    Counters : Key 0 [3] , Fbus 0 [10]
    Blocks : 2

    LOCK STATUS :
    =============================
    BLK : 1
    Lock1:Close
    BLK : 2
    Lock1:Close
    =============================
    LOCKS : Closed
    =============================
    User Code : 12345
    MMC pwd : no any record found
    UserDataExLevel : Full [PhoneBook, Calendar, PWD, SMS, Gallery]

    Done!

    Phone Imei: 3543430486****7
    Checking locks...
    Conf key : 8000000000000000
    Provider key : 2342000000000000
    Country : United Kingdom
    Operator : 3 UK
    Counters : Key 0 [3] , Fbus 0 [10]
    Blocks : 2

    LOCK STATUS :
    =============================
    BLK : 1
    Lock1:Close
    BLK : 2
    Lock1:Close
    =============================
    LOCKS : Closed
    =============================
    PA_SL3 (15 digit) phone detected...
    Checking BUS...
    Switch jaf to FlashMode...
    FlashMode set Ok
    Booting phone...

    BOOT 1ST : C0

    CMT part info :
    CMT ASICID : 000000010000022600010006030C192101023000
    CMT EM0 ID : 00000296
    CMT EM1 ID : 00000B22
    CMT PUB ID : 0CA00006285902561B44E3F9CE7F966FE73B3FDE
    CMT MODE ID : 00
    CMT R_HASH : 9DDBFCFE6E73CED7D8C6268C8EB85723
    CMT ROM ID : 273F6D55DFAAF68F

    CMT : Sending 2nd loader...
    CMT Loader sent, Boot Ok

    rap= 0CA00006285902561B44E3F9CE7F966FE73B3FDE
    hash= 9DDBFCFE6E73CED7D8C6268C8EB85723
    key= AD89B37774D6E534A3ED3F011B2BD641EC94B790

    Switch jaf to FBUS...
    FbusMode set Ok

    IMEI : 3543430486****7

    Key file updated...
    Check RSA started...
    Check RSA ok
    Create Log file for local calculation...
    File C:\Program Files\InfinityBox\BEST\Local_calc\354343048681627.bcl created - Ok
    File C:\Program Files\InfinityBox\BEST\Local_calc\oclHashcat_354343048681627_32.bat created - Ok
    File C:\Program Files\InfinityBox\BEST\Local_calc\oclHashcat_354343048681627_64.bat created - Ok
    Done!

    Connect phone on selected interface...
    [свернуть]

    Решил прошить язык. В теле 07.75, шил 10.40 по Ф-Басу:

    Развернуть для просмотра

    Phone found!
    Series 40 Device detected!
    read info... - Ok

    Core : v2.00a , BB5XG FlashEngine : v9.9

    Selected FlashSettings : Manual
    Files Set for Flashing :
    MCU : rm578__10.40.mcusw
    PPM : rm578__10.40.ppm_ej
    CNT : rm578__10.40.image_ej_uk_black
    SLx Simlock Data read ... Ok
    SL3 Simlock Sign read ... Ok
    WMDRM read ... Ok
    CRT308 Backup Created
    Checking BUS...
    Switch jaf to FlashMode...
    FlashMode set Ok
    Booting phone...

    BOOT 1ST : C0

    CMT part info :
    CMT ASICID : 000000010000022600010006030C192101023000
    CMT EM0 ID : 00000296
    CMT EM1 ID : 00000B22
    CMT PUB ID : 0CA00006285902561B44E3F9CE7F966FE73B3FDE
    CMT MODE ID : 00
    CMT R_HASH : 9DDBFCFE6E73CED7D8C6268C8EB85723
    CMT ROM ID : 273F6D55DFAAF68F

    CMT : Sending 2nd loader...
    Use : RAP3Gv3_2nd.fg , Rev : 0.0 Ver : 10.42.0
    CMT Loader sent, Boot Ok
    MCU configuration
    CMT Flash ID : 89820089 < INTEL => 0046L0Y1GG/NU48F512
    FLASHID : 89820089 , CMT , NOR
    FLCNT : 00000000000000000000000000000000000000
    CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
    FLASHID : 0000FFFF , CMT , MMC , EXT
    TransmissionReq : 16 bit, Single
    TransmissionReq : Accepted, 16 bit, Single
    Sending ALGO....
    Use : RAP3Gv3_algo_v1331.fg , Rev : 0.0 Ver : 1.33.1
    CMT Algo sent!
    TransmissionReq : 32 bit, Dual
    TransmissionReq : Accepted, 32 bit, Dual
    Boot done!

    CMT : Read NPC certificate...
    IMEI : 354343048681627
    CMT : Read CCC certificate...
    CMT : Read HWC certificate...
    CMT : Read VARIANT certificate...
    NPC Certificate saved...
    CCC Certificate saved...
    HWC Certificate saved...
    SimLock Data saved...
    SimLock Key saved...
    WMDRM_PD Data saved...

    RPL saved : C:\Program Files\InfinityBox\BEST\Backup\Cert\354343048681627.rpl


    Checking BUS...
    Switch jaf to FlashMode...
    FlashMode set Ok
    Booting phone...

    BOOT 1ST : C0

    CMT part info :
    CMT ASICID : 000000010000022600010006030C192101023000
    CMT EM0 ID : 00000296
    CMT EM1 ID : 00000B22
    CMT PUB ID : 0CA00006285902561B44E3F9CE7F966FE73B3FDE
    CMT MODE ID : 00
    CMT R_HASH : 9DDBFCFE6E73CED7D8C6268C8EB85723
    CMT ROM ID : 273F6D55DFAAF68F

    CMT : Sending 2nd loader...
    Use : RAP3Gv3_2nd.fg , Rev : 0.0 Ver : 10.42.0
    CMT Loader sent, Boot Ok
    MCU configuration
    CMT Flash ID : 89820089 < INTEL => 0046L0Y1GG/NU48F512
    FLASHID : 89820089 , CMT , NOR
    FLCNT : 00000000000000000000000000000000000000
    CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
    FLASHID : 0000FFFF , CMT , MMC , EXT
    TransmissionReq : 16 bit, Single
    TransmissionReq : Accepted, 16 bit, Single
    Sending ALGO....
    Use : RAP3Gv3_algo_v1331.fg , Rev : 0.0 Ver : 1.33.1
    CMT Algo sent!
    TransmissionReq : 32 bit, Dual
    TransmissionReq : Accepted, 32 bit, Dual
    Boot done!

    TransmissionReq : 32 bit, Dual
    TransmissionReq : Accepted, 32 bit, Dual
    Erase : Processing rm578__10.40.mcusw
    Init Erase Mode Ok
    Found 6 areas to erase, erase group
    Asic : CMT , Sub : NOR
    CMT , NOR , Area : 0x00000000 - 0x000006BF
    CMT , NOR , Area : 0x000006C0 - 0x0001FFFF
    CMT , NOR , Area : 0x00040000 - 0x000BFFFF
    CMT , NOR , Area : 0x000C0000 - 0x0013FFFF
    CMT , NOR , Area : 0x00140000 - 0x0155FFFF
    CMT , NOR , Area : 0x01560000 - 0x0175FFFF
    Using TimeOut : 7 min ( 430 sec )
    Erasing, wait.....
    CMT : Group erase Ok
    TIME : Erase time : 00:01:51
    PrReq : NOR, 00
    TransmissionReq : 32 bit, Dual
    TransmissionReq : Accepted, 32 bit, Dual
    Write : Processing rm578__10.40.mcusw
    Init Write Mode Ok
    CMT: Writing Hash CERT [NOLO]
    CMT: Writing Hash CERT [KEYS]
    CMT: Writing Hash CERT [PRIMAPP]
    CMT: Writing Hash CERT [PASUBTOC]
    CMT: Writing Hash CERT [PAPUBKEYS]
    CMT: Writing Hash CERT [UPDAPP]
    CMT: Writing Hash CERT [DSP0]
    CMT: Writing Hash CERT [MCUSW]
    Total writen 1394 blocks
    TIME : Write time : 00:02:47
    PrReq : NOR, 00

    TransmissionReq : 32 bit, Dual
    TransmissionReq : Accepted, 32 bit, Dual
    Erase : Processing rm578__10.40.ppm_ej
    Init Erase Mode Ok
    Found 1 areas to erase, erase group
    Asic : CMT , Sub : NOR
    CMT , NOR , Area : 0x01760000 - 0x01FFFFFF
    Using TimeOut : 7 min ( 430 sec )
    Erasing, wait.....
    CMT : Group erase Ok
    TIME : Erase time : 00:00:30
    PrReq : NOR, 00
    TransmissionReq : 32 bit, Dual
    TransmissionReq : Accepted, 32 bit, Dual
    Write : Processing rm578__10.40.ppm_ej
    Init Write Mode Ok
    Total writen 341 blocks
    TIME : Write time : 00:00:40
    PrReq : NOR, 00

    ConvertImage: Processing rm578__10.40.image_ej_uk_black
    ConvertImage: Page Size is 128K, no need convert
    TransmissionReq : 32 bit, Dual
    TransmissionReq : Accepted, 32 bit, Dual
    Erase : Processing rm578__10.40.image_ej_uk_black
    Init Erase Mode Ok
    Found 2 areas to erase, erase group
    Asic : CMT , Sub : NOR
    CMT , NOR , Area : 0x02000000 - 0x0245FFFF
    CMT , NOR , Area : 0x02460000 - 0x03FBFFFF
    Using TimeOut : 7 min ( 430 sec )
    Erasing, wait.....
    CMT : Group erase Ok
    TIME : Erase time : 00:02:57
    PrReq : NOR, 00
    TransmissionReq : 32 bit, Dual
    TransmissionReq : Accepted, 32 bit, Dual
    Write : Processing rm578__10.40.image_ej_uk_black
    Init Write Mode Ok
    Total writen 880 blocks
    TIME : Write time : 00:01:43
    PrReq : NOR, 00

    Switch jaf to FBUS...
    FbusMode set Ok

    Phone not found
    [свернуть]

    После прошивки не прошел "after flash" Телефон включается, после заставки - логотипа белый экран и выключается. Прошил туже версию по УСБ:

    Развернуть для просмотра

    Core : v2.00a , BB5XG FlashEngine : v9.9

    Selected FlashSettings : Manual
    Check FlashFiles, Please, wait...

    Files Set for Flashing :
    MCU : rm578__10.40.mcusw
    PPM : rm578__10.40.ppm_ej
    CNT : rm578__10.40.image_ej_uk_black
    Flashing phone now...
    [Gen] Rules accepted for : RAP3x Generation
    Check files done...
    -> SWversion check skipped : Dead mode selected
    Getting product info...
    Dead Mode is Selected
    Waiting for USB device...
    --- Press phone's power button or insert cable & charger! ---
    Connection opened successfully
    Waiting for communication response.
    ASIC ID: 000000010000022600010006030C192101023000
    CPU ID : RAP3Gv3 , Features : No any extended features
    RAP_PUB: 0CA00006285902561B44E3F9CE7F966FE73B3FDE
    CMT_ROOT: 9DDBFCFE6E73CED7D8C6268C8EB85723
    PatchRAWLoader: Patched OK
    Processing RAWLOADER...
    Processing UPDAPP...
    Processing PASUBTOC...
    TIME : Boot time : 00:00:06
    Reopening the connection...
    Waiting for response: 30
    Waiting for response: 29
    Waiting for response: 28
    Waiting for response: 27
    ADL -> [2nd] changing...
    ADL Server confirm flashmode!
    ADL : Check data
    ADL : Data accepted
    ===Flashing [MCU]===
    Erase : Processing rm578__10.40.mcusw
    Found 6 areas to erase
    Erasing area 0x00000000 - 0x000006BF, NOR, CMT
    Result: 0000
    Erasing area 0x000006C0 - 0x0001FFFF, NOR, CMT
    Result: 0000
    Erasing area 0x00040000 - 0x000BFFFF, NOR, CMT
    Result: 0000
    Erasing area 0x000C0000 - 0x0013FFFF, NOR, CMT
    Result: 0000
    Erasing area 0x00140000 - 0x0155FFFF, NOR, CMT
    Result: 0000
    Erasing area 0x01560000 - 0x0175FFFF, NOR, CMT
    Result: 0000
    TIME : Erase time : 00:03:01
    Write : Processing rm578__10.40.mcusw
    Total 1395 [1395/0/0] blocks to write, writing...
    CMT : Writing Hash CERT [NOLO]
    CMT : Writing Hash CERT [KEYS]
    CMT : Writing Hash CERT [PRIMAPP]
    CMT : Writing Hash CERT [PASUBTOC]
    CMT : Writing Hash CERT [PAPUBKEYS]
    CMT : Writing Hash CERT [UPDAPP]
    CMT : Writing Hash CERT [DSP0]
    CMT : Writing Hash CERT [MCUSW]
    TIME : Write time : 00:01:07
    MCU Write done
    ===Flashing [PPM]===
    Erase : Processing rm578__10.40.ppm_ej
    Found 1 areas to erase
    Erasing area 0x01760000 - 0x01FFFFFF, NOR, CMT
    Result: 0000
    TIME : Erase time : 00:01:05
    Write : Processing rm578__10.40.ppm_ej
    Total 341 [341/0/0] blocks to write, writing...
    TIME : Write time : 00:00:16
    PPM Write done
    ===Flashing [CNT]===
    Erase : Processing rm578__10.40.image_ej_uk_black
    Found 2 areas to erase
    Erasing area 0x02000000 - 0x0245FFFF, NOR, CMT
    Result: 0000
    Erasing area 0x02460000 - 0x03FBFFFF, NOR, CMT
    Result: 0000
    TIME : Erase time : 00:04:23
    Checking content info...
    Check Image : Content size is 128k, use direct write mode
    Write : Processing rm578__10.40.image_ej_uk_black
    Total 880 [880/0/0] blocks to write, writing...
    TIME : Write time : 00:00:42
    CNT Write done
    ADL : End flashing

    Flashing done!
    Total flash time : 00:10:36
    Reboot phone now...

    - > AfterFlash Failed! Reason : Downgrade try or HW Error
    Anyway - try reinsert battery and PowerUp phone manualy

    Connect phone on selected interface...

    Done!

    Elapsed: 00:13:14

    Connect phone on selected interface...
    [свернуть]

    Думал, может, битая прошивка. Скачал 10,45, прошиваю:

    Развернуть для просмотра

    Core : v2.00a , BB5XG FlashEngine : v9.9

    Selected FlashSettings : Manual
    Check FlashFiles, Please, wait...

    Files Set for Flashing :
    MCU : rm578__10.45.mcusw
    PPM : rm578__10.45.ppm_ej
    CNT : rm578__10.45.image_ej_uk_black
    Flashing phone now...
    [Gen] Rules accepted for : RAP3x Generation
    Check files done...
    -> SWversion check skipped : Dead mode selected
    Getting product info...
    Dead Mode is Selected
    Waiting for USB device...
    --- Press phone's power button or insert cable & charger! ---
    Connection opened successfully
    Waiting for communication response.
    ASIC ID: 000000010000022600010006030C192101023000
    CPU ID : RAP3Gv3 , Features : No any extended features
    RAP_PUB: 0CA00006285902561B44E3F9CE7F966FE73B3FDE
    CMT_ROOT: 9DDBFCFE6E73CED7D8C6268C8EB85723
    PatchRAWLoader: Patched OK
    Processing RAWLOADER...
    Processing UPDAPP...
    Processing PASUBTOC...
    TIME : Boot time : 00:00:06
    Reopening the connection...
    Waiting for response: 30
    ADL -> [2nd] changing...
    ADL Server confirm flashmode!
    ADL : Check data
    ADL : Data accepted
    ===Flashing [MCU]===
    Erase : Processing rm578__10.45.mcusw
    Found 6 areas to erase
    Erasing area 0x00000000 - 0x000006BF, NOR, CMT
    Result: 0000
    Erasing area 0x000006C0 - 0x0001FFFF, NOR, CMT
    Result: 0000
    Erasing area 0x00040000 - 0x000BFFFF, NOR, CMT
    Result: 0000
    Erasing area 0x000C0000 - 0x0013FFFF, NOR, CMT
    Result: 0000
    Erasing area 0x00140000 - 0x0155FFFF, NOR, CMT
    Result: 0000
    Erasing area 0x01560000 - 0x0175FFFF, NOR, CMT
    Result: 0000
    TIME : Erase time : 00:03:09
    Write : Processing rm578__10.45.mcusw
    Total 1395 [1395/0/0] blocks to write, writing...
    CMT : Writing Hash CERT [NOLO]
    CMT : Writing Hash CERT [KEYS]
    CMT : Writing Hash CERT [PRIMAPP]
    CMT : Writing Hash CERT [PASUBTOC]
    CMT : Writing Hash CERT [PAPUBKEYS]
    CMT : Writing Hash CERT [UPDAPP]
    CMT : Writing Hash CERT [DSP0]
    CMT : Writing Hash CERT [MCUSW]
    TIME : Write time : 00:01:07
    MCU Write done
    ===Flashing [PPM]===
    Erase : Processing rm578__10.45.ppm_ej
    Found 1 areas to erase
    Erasing area 0x01760000 - 0x01FFFFFF, NOR, CMT
    Result: 0000
    TIME : Erase time : 00:01:12
    Write : Processing rm578__10.45.ppm_ej
    Total 341 [341/0/0] blocks to write, writing...
    TIME : Write time : 00:00:16
    PPM Write done
    ===Flashing [CNT]===
    Erase : Processing rm578__10.45.image_ej_uk_black
    Found 2 areas to erase
    Erasing area 0x02000000 - 0x0245FFFF, NOR, CMT
    Result: 0000
    Erasing area 0x02460000 - 0x03FBFFFF, NOR, CMT
    Result: 0000
    TIME : Erase time : 00:04:30
    Checking content info...
    Check Image : Content size is 128k, use direct write mode
    Write : Processing rm578__10.45.image_ej_uk_black
    Total 880 [880/0/0] blocks to write, writing...
    TIME : Write time : 00:00:42
    CNT Write done
    ADL : End flashing

    Flashing done!
    Total flash time : 00:10:59
    Reboot phone now...
    [свернуть]

    Поведение не меняется
    В чём моя ошибка и как поднять телефон?

    Последний раз редактировалось Porter; 31.03.2015 в 19:01.
    31.03.2015, 18:49
    Ответить с цитированием
  • Новое
    Аватар для Porter

    Porter
    MCRF Инженер

    Сообщений:
    1,499
    Регистрация:
    12.10.2006
    Возраст:
    43
    Рейтинг мнений: 480
    Вес репутации: 492
    Porter Porter Porter Porter Porter Porter Porter Porter Porter Porter Porter
    Очки: 69,138, Уровень: 100 Очки: 69,138, Уровень: 100 Очки: 69,138, Уровень: 100
    Активность: 10% Активность: 10% Активность: 10%
    По умолчанию Re: 2730c убил прошивкой (повышением)? #2
    Кажется, решение тут: http://www.mcrf.ru/forum/showthread.php?t=27890

    * * *

    Так и есть. Поднял прошивкой 7,75, обрусил РРМ и контентом от 7,70.

    Последний раз редактировалось Porter; 31.03.2015 в 19:42.
    31.03.2015, 19:04
    Ответить с цитированием
Ответ


Здесь присутствуют: 1 (пользователей: 0 , гостей: 1)
 

Ваши права в разделе
Вы не можете создавать новые темы
Вы не можете отвечать в темах
Вы не можете прикреплять вложения
Вы не можете редактировать свои сообщения

BB коды Вкл.
Смайлы Вкл.
[IMG] код Вкл.
HTML код Выкл.

Быстрый переход

Похожие темы
Тема Автор Раздел Ответов Последнее сообщение
Вопрос U8180 terra убил програмно Anders77 Huawei 2 30.11.2013 05:15
U1i satio. Походу я убил? Svitch Sony Xperia™ серия и серии 2012+ года. 7 23.08.2013 20:44
Пьяный сербский турист случайно убил акулу у берегов Шарм-эль-Шейха LASDORF ** ЮМОР ** 3 22.12.2010 11:40
Убил два SPD ( Spread ) Xin Tai 9 Xishnik787 Китайские телефоны 9 02.10.2009 19:41
Убил W270 TIM, нужна помощь! osya Smart-Clip 2 11.12.2008 18:20


Текущее время: 20:29. Часовой пояс GMT +3.