Porter
31.03.2015, 18:49
Приветствую.
Зашла новая 2730с на раскодировку и язык, вычитал данные, закинул на расчёт:
card found: S/N 36F****
registered to: Porter
Connect phone on selected interface...
Opening Connection...
Device Location: 00000042
Connect Ok!
Initializing Connection...
JAF Firmware: 01.B4
Authentificate JAF BOX...
TEA Authentication Completed...
JAF S/N ODJAF000 boot - Ok
Switch jaf to FBUS...
FbusMode set Ok
Connect phone on selected interface...
Phone found!
Series 40 Device detected!
read info... - Ok
Reading Phone Info....
Connected phone - Nokia 2730 classic
Software ver : V 07.75 05-07-10 RM-578 (c) Nokia
IMEI : 354343048****7
XappVer : 000007D0
DSP Ver : ICPR72_TOMMY_09w21
PPM : V 07.75
05-07-10
RM-578
(c) Nokia
AE
CNT : Content: 3 UK
V 07.75
05-07-10
RM-578
(c) Nokia
Product SN : 47BDF26AI
Product code : 0591475
Base Prd.code: 0580665
Module code : 0204322
Long Prod.SN : 0
Hardware info=======
HWID : 3024
Retu : 16
Tahvo : 22
Batery: 4869 mV
CMT BT: .31
LCDVer: SEIKO
RF ic : 17141716
Lock info ===========
IMEI : 354343048681627
IMEI spNet :
IMEI svNet :
Conf key : 8000000000000000
Provider key : 2342000000000000
Country : United Kingdom
Operator : 3 UK
Counters : Key 0 [3] , Fbus 0 [10]
Blocks : 2
LOCK STATUS :
=============================
BLK : 1
Lock1:Close
BLK : 2
Lock1:Close
=============================
LOCKS : Closed
=============================
User Code : 12345
MMC pwd : no any record found
UserDataExLevel : Full [PhoneBook, Calendar, PWD, SMS, Gallery]
Done!
Phone Imei: 3543430486****7
Checking locks...
Conf key : 8000000000000000
Provider key : 2342000000000000
Country : United Kingdom
Operator : 3 UK
Counters : Key 0 [3] , Fbus 0 [10]
Blocks : 2
LOCK STATUS :
=============================
BLK : 1
Lock1:Close
BLK : 2
Lock1:Close
=============================
LOCKS : Closed
=============================
PA_SL3 (15 digit) phone detected...
Checking BUS...
Switch jaf to FlashMode...
FlashMode set Ok
Booting phone...
BOOT 1ST : C0
CMT part info :
CMT ASICID : 000000010000022600010006030C192101023000
CMT EM0 ID : 00000296
CMT EM1 ID : 00000B22
CMT PUB ID : 0CA00006285902561B44E3F9CE7F966FE73B3FDE
CMT MODE ID : 00
CMT R_HASH : 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT ROM ID : 273F6D55DFAAF68F
CMT : Sending 2nd loader...
CMT Loader sent, Boot Ok
rap= 0CA00006285902561B44E3F9CE7F966FE73B3FDE
hash= 9DDBFCFE6E73CED7D8C6268C8EB85723
key= AD89B37774D6E534A3ED3F011B2BD641EC94B790
Switch jaf to FBUS...
FbusMode set Ok
IMEI : 3543430486****7
Key file updated...
Check RSA started...
Check RSA ok
Create Log file for local calculation...
File C:\Program Files\InfinityBox\BEST\Local_calc\354343048681627. bcl created - Ok
File C:\Program Files\InfinityBox\BEST\Local_calc\oclHashcat_35434 3048681627_32.bat created - Ok
File C:\Program Files\InfinityBox\BEST\Local_calc\oclHashcat_35434 3048681627_64.bat created - Ok
Done!
Connect phone on selected interface...
Решил прошить язык. В теле 07.75, шил 10.40 по Ф-Басу:
Phone found!
Series 40 Device detected!
read info... - Ok
Core : v2.00a , BB5XG FlashEngine : v9.9
Selected FlashSettings : Manual
Files Set for Flashing :
MCU : rm578__10.40.mcusw
PPM : rm578__10.40.ppm_ej
CNT : rm578__10.40.image_ej_uk_black
SLx Simlock Data read ... Ok
SL3 Simlock Sign read ... Ok
WMDRM read ... Ok
CRT308 Backup Created
Checking BUS...
Switch jaf to FlashMode...
FlashMode set Ok
Booting phone...
BOOT 1ST : C0
CMT part info :
CMT ASICID : 000000010000022600010006030C192101023000
CMT EM0 ID : 00000296
CMT EM1 ID : 00000B22
CMT PUB ID : 0CA00006285902561B44E3F9CE7F966FE73B3FDE
CMT MODE ID : 00
CMT R_HASH : 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT ROM ID : 273F6D55DFAAF68F
CMT : Sending 2nd loader...
Use : RAP3Gv3_2nd.fg , Rev : 0.0 Ver : 10.42.0
CMT Loader sent, Boot Ok
MCU configuration
CMT Flash ID : 89820089 < INTEL => 0046L0Y1GG/NU48F512
FLASHID : 89820089 , CMT , NOR
FLCNT : 00000000000000000000000000000000000000
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
FLASHID : 0000FFFF , CMT , MMC , EXT
TransmissionReq : 16 bit, Single
TransmissionReq : Accepted, 16 bit, Single
Sending ALGO....
Use : RAP3Gv3_algo_v1331.fg , Rev : 0.0 Ver : 1.33.1
CMT Algo sent!
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
Boot done!
CMT : Read NPC certificate...
IMEI : 354343048681627
CMT : Read CCC certificate...
CMT : Read HWC certificate...
CMT : Read VARIANT certificate...
NPC Certificate saved...
CCC Certificate saved...
HWC Certificate saved...
SimLock Data saved...
SimLock Key saved...
WMDRM_PD Data saved...
RPL saved : C:\Program Files\InfinityBox\BEST\Backup\Cert\354343048681627 .rpl
Checking BUS...
Switch jaf to FlashMode...
FlashMode set Ok
Booting phone...
BOOT 1ST : C0
CMT part info :
CMT ASICID : 000000010000022600010006030C192101023000
CMT EM0 ID : 00000296
CMT EM1 ID : 00000B22
CMT PUB ID : 0CA00006285902561B44E3F9CE7F966FE73B3FDE
CMT MODE ID : 00
CMT R_HASH : 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT ROM ID : 273F6D55DFAAF68F
CMT : Sending 2nd loader...
Use : RAP3Gv3_2nd.fg , Rev : 0.0 Ver : 10.42.0
CMT Loader sent, Boot Ok
MCU configuration
CMT Flash ID : 89820089 < INTEL => 0046L0Y1GG/NU48F512
FLASHID : 89820089 , CMT , NOR
FLCNT : 00000000000000000000000000000000000000
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
FLASHID : 0000FFFF , CMT , MMC , EXT
TransmissionReq : 16 bit, Single
TransmissionReq : Accepted, 16 bit, Single
Sending ALGO....
Use : RAP3Gv3_algo_v1331.fg , Rev : 0.0 Ver : 1.33.1
CMT Algo sent!
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
Boot done!
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
Erase : Processing rm578__10.40.mcusw
Init Erase Mode Ok
Found 6 areas to erase, erase group
Asic : CMT , Sub : NOR
CMT , NOR , Area : 0x00000000 - 0x000006BF
CMT , NOR , Area : 0x000006C0 - 0x0001FFFF
CMT , NOR , Area : 0x00040000 - 0x000BFFFF
CMT , NOR , Area : 0x000C0000 - 0x0013FFFF
CMT , NOR , Area : 0x00140000 - 0x0155FFFF
CMT , NOR , Area : 0x01560000 - 0x0175FFFF
Using TimeOut : 7 min ( 430 sec )
Erasing, wait.....
CMT : Group erase Ok
TIME : Erase time : 00:01:51
PrReq : NOR, 00
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
Write : Processing rm578__10.40.mcusw
Init Write Mode Ok
CMT: Writing Hash CERT [NOLO]
CMT: Writing Hash CERT [KEYS]
CMT: Writing Hash CERT [PRIMAPP]
CMT: Writing Hash CERT [PASUBTOC]
CMT: Writing Hash CERT [PAPUBKEYS]
CMT: Writing Hash CERT [UPDAPP]
CMT: Writing Hash CERT [DSP0]
CMT: Writing Hash CERT [MCUSW]
Total writen 1394 blocks
TIME : Write time : 00:02:47
PrReq : NOR, 00
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
Erase : Processing rm578__10.40.ppm_ej
Init Erase Mode Ok
Found 1 areas to erase, erase group
Asic : CMT , Sub : NOR
CMT , NOR , Area : 0x01760000 - 0x01FFFFFF
Using TimeOut : 7 min ( 430 sec )
Erasing, wait.....
CMT : Group erase Ok
TIME : Erase time : 00:00:30
PrReq : NOR, 00
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
Write : Processing rm578__10.40.ppm_ej
Init Write Mode Ok
Total writen 341 blocks
TIME : Write time : 00:00:40
PrReq : NOR, 00
ConvertImage: Processing rm578__10.40.image_ej_uk_black
ConvertImage: Page Size is 128K, no need convert
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
Erase : Processing rm578__10.40.image_ej_uk_black
Init Erase Mode Ok
Found 2 areas to erase, erase group
Asic : CMT , Sub : NOR
CMT , NOR , Area : 0x02000000 - 0x0245FFFF
CMT , NOR , Area : 0x02460000 - 0x03FBFFFF
Using TimeOut : 7 min ( 430 sec )
Erasing, wait.....
CMT : Group erase Ok
TIME : Erase time : 00:02:57
PrReq : NOR, 00
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
Write : Processing rm578__10.40.image_ej_uk_black
Init Write Mode Ok
Total writen 880 blocks
TIME : Write time : 00:01:43
PrReq : NOR, 00
Switch jaf to FBUS...
FbusMode set Ok
Phone not found :(
После прошивки не прошел "after flash" Телефон включается, после заставки - логотипа белый экран и выключается. Прошил туже версию по УСБ:
Core : v2.00a , BB5XG FlashEngine : v9.9
Selected FlashSettings : Manual
Check FlashFiles, Please, wait...
Files Set for Flashing :
MCU : rm578__10.40.mcusw
PPM : rm578__10.40.ppm_ej
CNT : rm578__10.40.image_ej_uk_black
Flashing phone now...
[Gen] Rules accepted for : RAP3x Generation
Check files done...
-> SWversion check skipped : Dead mode selected
Getting product info...
Dead Mode is Selected
Waiting for USB device...
--- Press phone's power button or insert cable & charger! ---
Connection opened successfully
Waiting for communication response.
ASIC ID: 000000010000022600010006030C192101023000
CPU ID : RAP3Gv3 , Features : No any extended features
RAP_PUB: 0CA00006285902561B44E3F9CE7F966FE73B3FDE
CMT_ROOT: 9DDBFCFE6E73CED7D8C6268C8EB85723
PatchRAWLoader: Patched OK
Processing RAWLOADER...
Processing UPDAPP...
Processing PASUBTOC...
TIME : Boot time : 00:00:06
Reopening the connection...
Waiting for response: 30
Waiting for response: 29
Waiting for response: 28
Waiting for response: 27
ADL -> [2nd] changing...
ADL Server confirm flashmode!
ADL : Check data
ADL : Data accepted
===Flashing [MCU]===
Erase : Processing rm578__10.40.mcusw
Found 6 areas to erase
Erasing area 0x00000000 - 0x000006BF, NOR, CMT
Result: 0000
Erasing area 0x000006C0 - 0x0001FFFF, NOR, CMT
Result: 0000
Erasing area 0x00040000 - 0x000BFFFF, NOR, CMT
Result: 0000
Erasing area 0x000C0000 - 0x0013FFFF, NOR, CMT
Result: 0000
Erasing area 0x00140000 - 0x0155FFFF, NOR, CMT
Result: 0000
Erasing area 0x01560000 - 0x0175FFFF, NOR, CMT
Result: 0000
TIME : Erase time : 00:03:01
Write : Processing rm578__10.40.mcusw
Total 1395 [1395/0/0] blocks to write, writing...
CMT : Writing Hash CERT [NOLO]
CMT : Writing Hash CERT [KEYS]
CMT : Writing Hash CERT [PRIMAPP]
CMT : Writing Hash CERT [PASUBTOC]
CMT : Writing Hash CERT [PAPUBKEYS]
CMT : Writing Hash CERT [UPDAPP]
CMT : Writing Hash CERT [DSP0]
CMT : Writing Hash CERT [MCUSW]
TIME : Write time : 00:01:07
MCU Write done
===Flashing [PPM]===
Erase : Processing rm578__10.40.ppm_ej
Found 1 areas to erase
Erasing area 0x01760000 - 0x01FFFFFF, NOR, CMT
Result: 0000
TIME : Erase time : 00:01:05
Write : Processing rm578__10.40.ppm_ej
Total 341 [341/0/0] blocks to write, writing...
TIME : Write time : 00:00:16
PPM Write done
===Flashing [CNT]===
Erase : Processing rm578__10.40.image_ej_uk_black
Found 2 areas to erase
Erasing area 0x02000000 - 0x0245FFFF, NOR, CMT
Result: 0000
Erasing area 0x02460000 - 0x03FBFFFF, NOR, CMT
Result: 0000
TIME : Erase time : 00:04:23
Checking content info...
Check Image : Content size is 128k, use direct write mode
Write : Processing rm578__10.40.image_ej_uk_black
Total 880 [880/0/0] blocks to write, writing...
TIME : Write time : 00:00:42
CNT Write done
ADL : End flashing
Flashing done!
Total flash time : 00:10:36
Reboot phone now...
- > AfterFlash Failed! :( Reason : Downgrade try or HW Error
Anyway - try reinsert battery and PowerUp phone manualy
Connect phone on selected interface...
Done!
Elapsed: 00:13:14
Connect phone on selected interface...
Думал, может, битая прошивка. Скачал 10,45, прошиваю:
Core : v2.00a , BB5XG FlashEngine : v9.9
Selected FlashSettings : Manual
Check FlashFiles, Please, wait...
Files Set for Flashing :
MCU : rm578__10.45.mcusw
PPM : rm578__10.45.ppm_ej
CNT : rm578__10.45.image_ej_uk_black
Flashing phone now...
[Gen] Rules accepted for : RAP3x Generation
Check files done...
-> SWversion check skipped : Dead mode selected
Getting product info...
Dead Mode is Selected
Waiting for USB device...
--- Press phone's power button or insert cable & charger! ---
Connection opened successfully
Waiting for communication response.
ASIC ID: 000000010000022600010006030C192101023000
CPU ID : RAP3Gv3 , Features : No any extended features
RAP_PUB: 0CA00006285902561B44E3F9CE7F966FE73B3FDE
CMT_ROOT: 9DDBFCFE6E73CED7D8C6268C8EB85723
PatchRAWLoader: Patched OK
Processing RAWLOADER...
Processing UPDAPP...
Processing PASUBTOC...
TIME : Boot time : 00:00:06
Reopening the connection...
Waiting for response: 30
ADL -> [2nd] changing...
ADL Server confirm flashmode!
ADL : Check data
ADL : Data accepted
===Flashing [MCU]===
Erase : Processing rm578__10.45.mcusw
Found 6 areas to erase
Erasing area 0x00000000 - 0x000006BF, NOR, CMT
Result: 0000
Erasing area 0x000006C0 - 0x0001FFFF, NOR, CMT
Result: 0000
Erasing area 0x00040000 - 0x000BFFFF, NOR, CMT
Result: 0000
Erasing area 0x000C0000 - 0x0013FFFF, NOR, CMT
Result: 0000
Erasing area 0x00140000 - 0x0155FFFF, NOR, CMT
Result: 0000
Erasing area 0x01560000 - 0x0175FFFF, NOR, CMT
Result: 0000
TIME : Erase time : 00:03:09
Write : Processing rm578__10.45.mcusw
Total 1395 [1395/0/0] blocks to write, writing...
CMT : Writing Hash CERT [NOLO]
CMT : Writing Hash CERT [KEYS]
CMT : Writing Hash CERT [PRIMAPP]
CMT : Writing Hash CERT [PASUBTOC]
CMT : Writing Hash CERT [PAPUBKEYS]
CMT : Writing Hash CERT [UPDAPP]
CMT : Writing Hash CERT [DSP0]
CMT : Writing Hash CERT [MCUSW]
TIME : Write time : 00:01:07
MCU Write done
===Flashing [PPM]===
Erase : Processing rm578__10.45.ppm_ej
Found 1 areas to erase
Erasing area 0x01760000 - 0x01FFFFFF, NOR, CMT
Result: 0000
TIME : Erase time : 00:01:12
Write : Processing rm578__10.45.ppm_ej
Total 341 [341/0/0] blocks to write, writing...
TIME : Write time : 00:00:16
PPM Write done
===Flashing [CNT]===
Erase : Processing rm578__10.45.image_ej_uk_black
Found 2 areas to erase
Erasing area 0x02000000 - 0x0245FFFF, NOR, CMT
Result: 0000
Erasing area 0x02460000 - 0x03FBFFFF, NOR, CMT
Result: 0000
TIME : Erase time : 00:04:30
Checking content info...
Check Image : Content size is 128k, use direct write mode
Write : Processing rm578__10.45.image_ej_uk_black
Total 880 [880/0/0] blocks to write, writing...
TIME : Write time : 00:00:42
CNT Write done
ADL : End flashing
Flashing done!
Total flash time : 00:10:59
Reboot phone now...
Поведение не меняется :(
В чём моя ошибка и как поднять телефон?
Зашла новая 2730с на раскодировку и язык, вычитал данные, закинул на расчёт:
card found: S/N 36F****
registered to: Porter
Connect phone on selected interface...
Opening Connection...
Device Location: 00000042
Connect Ok!
Initializing Connection...
JAF Firmware: 01.B4
Authentificate JAF BOX...
TEA Authentication Completed...
JAF S/N ODJAF000 boot - Ok
Switch jaf to FBUS...
FbusMode set Ok
Connect phone on selected interface...
Phone found!
Series 40 Device detected!
read info... - Ok
Reading Phone Info....
Connected phone - Nokia 2730 classic
Software ver : V 07.75 05-07-10 RM-578 (c) Nokia
IMEI : 354343048****7
XappVer : 000007D0
DSP Ver : ICPR72_TOMMY_09w21
PPM : V 07.75
05-07-10
RM-578
(c) Nokia
AE
CNT : Content: 3 UK
V 07.75
05-07-10
RM-578
(c) Nokia
Product SN : 47BDF26AI
Product code : 0591475
Base Prd.code: 0580665
Module code : 0204322
Long Prod.SN : 0
Hardware info=======
HWID : 3024
Retu : 16
Tahvo : 22
Batery: 4869 mV
CMT BT: .31
LCDVer: SEIKO
RF ic : 17141716
Lock info ===========
IMEI : 354343048681627
IMEI spNet :
IMEI svNet :
Conf key : 8000000000000000
Provider key : 2342000000000000
Country : United Kingdom
Operator : 3 UK
Counters : Key 0 [3] , Fbus 0 [10]
Blocks : 2
LOCK STATUS :
=============================
BLK : 1
Lock1:Close
BLK : 2
Lock1:Close
=============================
LOCKS : Closed
=============================
User Code : 12345
MMC pwd : no any record found
UserDataExLevel : Full [PhoneBook, Calendar, PWD, SMS, Gallery]
Done!
Phone Imei: 3543430486****7
Checking locks...
Conf key : 8000000000000000
Provider key : 2342000000000000
Country : United Kingdom
Operator : 3 UK
Counters : Key 0 [3] , Fbus 0 [10]
Blocks : 2
LOCK STATUS :
=============================
BLK : 1
Lock1:Close
BLK : 2
Lock1:Close
=============================
LOCKS : Closed
=============================
PA_SL3 (15 digit) phone detected...
Checking BUS...
Switch jaf to FlashMode...
FlashMode set Ok
Booting phone...
BOOT 1ST : C0
CMT part info :
CMT ASICID : 000000010000022600010006030C192101023000
CMT EM0 ID : 00000296
CMT EM1 ID : 00000B22
CMT PUB ID : 0CA00006285902561B44E3F9CE7F966FE73B3FDE
CMT MODE ID : 00
CMT R_HASH : 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT ROM ID : 273F6D55DFAAF68F
CMT : Sending 2nd loader...
CMT Loader sent, Boot Ok
rap= 0CA00006285902561B44E3F9CE7F966FE73B3FDE
hash= 9DDBFCFE6E73CED7D8C6268C8EB85723
key= AD89B37774D6E534A3ED3F011B2BD641EC94B790
Switch jaf to FBUS...
FbusMode set Ok
IMEI : 3543430486****7
Key file updated...
Check RSA started...
Check RSA ok
Create Log file for local calculation...
File C:\Program Files\InfinityBox\BEST\Local_calc\354343048681627. bcl created - Ok
File C:\Program Files\InfinityBox\BEST\Local_calc\oclHashcat_35434 3048681627_32.bat created - Ok
File C:\Program Files\InfinityBox\BEST\Local_calc\oclHashcat_35434 3048681627_64.bat created - Ok
Done!
Connect phone on selected interface...
Решил прошить язык. В теле 07.75, шил 10.40 по Ф-Басу:
Phone found!
Series 40 Device detected!
read info... - Ok
Core : v2.00a , BB5XG FlashEngine : v9.9
Selected FlashSettings : Manual
Files Set for Flashing :
MCU : rm578__10.40.mcusw
PPM : rm578__10.40.ppm_ej
CNT : rm578__10.40.image_ej_uk_black
SLx Simlock Data read ... Ok
SL3 Simlock Sign read ... Ok
WMDRM read ... Ok
CRT308 Backup Created
Checking BUS...
Switch jaf to FlashMode...
FlashMode set Ok
Booting phone...
BOOT 1ST : C0
CMT part info :
CMT ASICID : 000000010000022600010006030C192101023000
CMT EM0 ID : 00000296
CMT EM1 ID : 00000B22
CMT PUB ID : 0CA00006285902561B44E3F9CE7F966FE73B3FDE
CMT MODE ID : 00
CMT R_HASH : 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT ROM ID : 273F6D55DFAAF68F
CMT : Sending 2nd loader...
Use : RAP3Gv3_2nd.fg , Rev : 0.0 Ver : 10.42.0
CMT Loader sent, Boot Ok
MCU configuration
CMT Flash ID : 89820089 < INTEL => 0046L0Y1GG/NU48F512
FLASHID : 89820089 , CMT , NOR
FLCNT : 00000000000000000000000000000000000000
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
FLASHID : 0000FFFF , CMT , MMC , EXT
TransmissionReq : 16 bit, Single
TransmissionReq : Accepted, 16 bit, Single
Sending ALGO....
Use : RAP3Gv3_algo_v1331.fg , Rev : 0.0 Ver : 1.33.1
CMT Algo sent!
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
Boot done!
CMT : Read NPC certificate...
IMEI : 354343048681627
CMT : Read CCC certificate...
CMT : Read HWC certificate...
CMT : Read VARIANT certificate...
NPC Certificate saved...
CCC Certificate saved...
HWC Certificate saved...
SimLock Data saved...
SimLock Key saved...
WMDRM_PD Data saved...
RPL saved : C:\Program Files\InfinityBox\BEST\Backup\Cert\354343048681627 .rpl
Checking BUS...
Switch jaf to FlashMode...
FlashMode set Ok
Booting phone...
BOOT 1ST : C0
CMT part info :
CMT ASICID : 000000010000022600010006030C192101023000
CMT EM0 ID : 00000296
CMT EM1 ID : 00000B22
CMT PUB ID : 0CA00006285902561B44E3F9CE7F966FE73B3FDE
CMT MODE ID : 00
CMT R_HASH : 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT ROM ID : 273F6D55DFAAF68F
CMT : Sending 2nd loader...
Use : RAP3Gv3_2nd.fg , Rev : 0.0 Ver : 10.42.0
CMT Loader sent, Boot Ok
MCU configuration
CMT Flash ID : 89820089 < INTEL => 0046L0Y1GG/NU48F512
FLASHID : 89820089 , CMT , NOR
FLCNT : 00000000000000000000000000000000000000
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
FLASHID : 0000FFFF , CMT , MMC , EXT
TransmissionReq : 16 bit, Single
TransmissionReq : Accepted, 16 bit, Single
Sending ALGO....
Use : RAP3Gv3_algo_v1331.fg , Rev : 0.0 Ver : 1.33.1
CMT Algo sent!
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
Boot done!
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
Erase : Processing rm578__10.40.mcusw
Init Erase Mode Ok
Found 6 areas to erase, erase group
Asic : CMT , Sub : NOR
CMT , NOR , Area : 0x00000000 - 0x000006BF
CMT , NOR , Area : 0x000006C0 - 0x0001FFFF
CMT , NOR , Area : 0x00040000 - 0x000BFFFF
CMT , NOR , Area : 0x000C0000 - 0x0013FFFF
CMT , NOR , Area : 0x00140000 - 0x0155FFFF
CMT , NOR , Area : 0x01560000 - 0x0175FFFF
Using TimeOut : 7 min ( 430 sec )
Erasing, wait.....
CMT : Group erase Ok
TIME : Erase time : 00:01:51
PrReq : NOR, 00
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
Write : Processing rm578__10.40.mcusw
Init Write Mode Ok
CMT: Writing Hash CERT [NOLO]
CMT: Writing Hash CERT [KEYS]
CMT: Writing Hash CERT [PRIMAPP]
CMT: Writing Hash CERT [PASUBTOC]
CMT: Writing Hash CERT [PAPUBKEYS]
CMT: Writing Hash CERT [UPDAPP]
CMT: Writing Hash CERT [DSP0]
CMT: Writing Hash CERT [MCUSW]
Total writen 1394 blocks
TIME : Write time : 00:02:47
PrReq : NOR, 00
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
Erase : Processing rm578__10.40.ppm_ej
Init Erase Mode Ok
Found 1 areas to erase, erase group
Asic : CMT , Sub : NOR
CMT , NOR , Area : 0x01760000 - 0x01FFFFFF
Using TimeOut : 7 min ( 430 sec )
Erasing, wait.....
CMT : Group erase Ok
TIME : Erase time : 00:00:30
PrReq : NOR, 00
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
Write : Processing rm578__10.40.ppm_ej
Init Write Mode Ok
Total writen 341 blocks
TIME : Write time : 00:00:40
PrReq : NOR, 00
ConvertImage: Processing rm578__10.40.image_ej_uk_black
ConvertImage: Page Size is 128K, no need convert
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
Erase : Processing rm578__10.40.image_ej_uk_black
Init Erase Mode Ok
Found 2 areas to erase, erase group
Asic : CMT , Sub : NOR
CMT , NOR , Area : 0x02000000 - 0x0245FFFF
CMT , NOR , Area : 0x02460000 - 0x03FBFFFF
Using TimeOut : 7 min ( 430 sec )
Erasing, wait.....
CMT : Group erase Ok
TIME : Erase time : 00:02:57
PrReq : NOR, 00
TransmissionReq : 32 bit, Dual
TransmissionReq : Accepted, 32 bit, Dual
Write : Processing rm578__10.40.image_ej_uk_black
Init Write Mode Ok
Total writen 880 blocks
TIME : Write time : 00:01:43
PrReq : NOR, 00
Switch jaf to FBUS...
FbusMode set Ok
Phone not found :(
После прошивки не прошел "after flash" Телефон включается, после заставки - логотипа белый экран и выключается. Прошил туже версию по УСБ:
Core : v2.00a , BB5XG FlashEngine : v9.9
Selected FlashSettings : Manual
Check FlashFiles, Please, wait...
Files Set for Flashing :
MCU : rm578__10.40.mcusw
PPM : rm578__10.40.ppm_ej
CNT : rm578__10.40.image_ej_uk_black
Flashing phone now...
[Gen] Rules accepted for : RAP3x Generation
Check files done...
-> SWversion check skipped : Dead mode selected
Getting product info...
Dead Mode is Selected
Waiting for USB device...
--- Press phone's power button or insert cable & charger! ---
Connection opened successfully
Waiting for communication response.
ASIC ID: 000000010000022600010006030C192101023000
CPU ID : RAP3Gv3 , Features : No any extended features
RAP_PUB: 0CA00006285902561B44E3F9CE7F966FE73B3FDE
CMT_ROOT: 9DDBFCFE6E73CED7D8C6268C8EB85723
PatchRAWLoader: Patched OK
Processing RAWLOADER...
Processing UPDAPP...
Processing PASUBTOC...
TIME : Boot time : 00:00:06
Reopening the connection...
Waiting for response: 30
Waiting for response: 29
Waiting for response: 28
Waiting for response: 27
ADL -> [2nd] changing...
ADL Server confirm flashmode!
ADL : Check data
ADL : Data accepted
===Flashing [MCU]===
Erase : Processing rm578__10.40.mcusw
Found 6 areas to erase
Erasing area 0x00000000 - 0x000006BF, NOR, CMT
Result: 0000
Erasing area 0x000006C0 - 0x0001FFFF, NOR, CMT
Result: 0000
Erasing area 0x00040000 - 0x000BFFFF, NOR, CMT
Result: 0000
Erasing area 0x000C0000 - 0x0013FFFF, NOR, CMT
Result: 0000
Erasing area 0x00140000 - 0x0155FFFF, NOR, CMT
Result: 0000
Erasing area 0x01560000 - 0x0175FFFF, NOR, CMT
Result: 0000
TIME : Erase time : 00:03:01
Write : Processing rm578__10.40.mcusw
Total 1395 [1395/0/0] blocks to write, writing...
CMT : Writing Hash CERT [NOLO]
CMT : Writing Hash CERT [KEYS]
CMT : Writing Hash CERT [PRIMAPP]
CMT : Writing Hash CERT [PASUBTOC]
CMT : Writing Hash CERT [PAPUBKEYS]
CMT : Writing Hash CERT [UPDAPP]
CMT : Writing Hash CERT [DSP0]
CMT : Writing Hash CERT [MCUSW]
TIME : Write time : 00:01:07
MCU Write done
===Flashing [PPM]===
Erase : Processing rm578__10.40.ppm_ej
Found 1 areas to erase
Erasing area 0x01760000 - 0x01FFFFFF, NOR, CMT
Result: 0000
TIME : Erase time : 00:01:05
Write : Processing rm578__10.40.ppm_ej
Total 341 [341/0/0] blocks to write, writing...
TIME : Write time : 00:00:16
PPM Write done
===Flashing [CNT]===
Erase : Processing rm578__10.40.image_ej_uk_black
Found 2 areas to erase
Erasing area 0x02000000 - 0x0245FFFF, NOR, CMT
Result: 0000
Erasing area 0x02460000 - 0x03FBFFFF, NOR, CMT
Result: 0000
TIME : Erase time : 00:04:23
Checking content info...
Check Image : Content size is 128k, use direct write mode
Write : Processing rm578__10.40.image_ej_uk_black
Total 880 [880/0/0] blocks to write, writing...
TIME : Write time : 00:00:42
CNT Write done
ADL : End flashing
Flashing done!
Total flash time : 00:10:36
Reboot phone now...
- > AfterFlash Failed! :( Reason : Downgrade try or HW Error
Anyway - try reinsert battery and PowerUp phone manualy
Connect phone on selected interface...
Done!
Elapsed: 00:13:14
Connect phone on selected interface...
Думал, может, битая прошивка. Скачал 10,45, прошиваю:
Core : v2.00a , BB5XG FlashEngine : v9.9
Selected FlashSettings : Manual
Check FlashFiles, Please, wait...
Files Set for Flashing :
MCU : rm578__10.45.mcusw
PPM : rm578__10.45.ppm_ej
CNT : rm578__10.45.image_ej_uk_black
Flashing phone now...
[Gen] Rules accepted for : RAP3x Generation
Check files done...
-> SWversion check skipped : Dead mode selected
Getting product info...
Dead Mode is Selected
Waiting for USB device...
--- Press phone's power button or insert cable & charger! ---
Connection opened successfully
Waiting for communication response.
ASIC ID: 000000010000022600010006030C192101023000
CPU ID : RAP3Gv3 , Features : No any extended features
RAP_PUB: 0CA00006285902561B44E3F9CE7F966FE73B3FDE
CMT_ROOT: 9DDBFCFE6E73CED7D8C6268C8EB85723
PatchRAWLoader: Patched OK
Processing RAWLOADER...
Processing UPDAPP...
Processing PASUBTOC...
TIME : Boot time : 00:00:06
Reopening the connection...
Waiting for response: 30
ADL -> [2nd] changing...
ADL Server confirm flashmode!
ADL : Check data
ADL : Data accepted
===Flashing [MCU]===
Erase : Processing rm578__10.45.mcusw
Found 6 areas to erase
Erasing area 0x00000000 - 0x000006BF, NOR, CMT
Result: 0000
Erasing area 0x000006C0 - 0x0001FFFF, NOR, CMT
Result: 0000
Erasing area 0x00040000 - 0x000BFFFF, NOR, CMT
Result: 0000
Erasing area 0x000C0000 - 0x0013FFFF, NOR, CMT
Result: 0000
Erasing area 0x00140000 - 0x0155FFFF, NOR, CMT
Result: 0000
Erasing area 0x01560000 - 0x0175FFFF, NOR, CMT
Result: 0000
TIME : Erase time : 00:03:09
Write : Processing rm578__10.45.mcusw
Total 1395 [1395/0/0] blocks to write, writing...
CMT : Writing Hash CERT [NOLO]
CMT : Writing Hash CERT [KEYS]
CMT : Writing Hash CERT [PRIMAPP]
CMT : Writing Hash CERT [PASUBTOC]
CMT : Writing Hash CERT [PAPUBKEYS]
CMT : Writing Hash CERT [UPDAPP]
CMT : Writing Hash CERT [DSP0]
CMT : Writing Hash CERT [MCUSW]
TIME : Write time : 00:01:07
MCU Write done
===Flashing [PPM]===
Erase : Processing rm578__10.45.ppm_ej
Found 1 areas to erase
Erasing area 0x01760000 - 0x01FFFFFF, NOR, CMT
Result: 0000
TIME : Erase time : 00:01:12
Write : Processing rm578__10.45.ppm_ej
Total 341 [341/0/0] blocks to write, writing...
TIME : Write time : 00:00:16
PPM Write done
===Flashing [CNT]===
Erase : Processing rm578__10.45.image_ej_uk_black
Found 2 areas to erase
Erasing area 0x02000000 - 0x0245FFFF, NOR, CMT
Result: 0000
Erasing area 0x02460000 - 0x03FBFFFF, NOR, CMT
Result: 0000
TIME : Erase time : 00:04:30
Checking content info...
Check Image : Content size is 128k, use direct write mode
Write : Processing rm578__10.45.image_ej_uk_black
Total 880 [880/0/0] blocks to write, writing...
TIME : Write time : 00:00:42
CNT Write done
ADL : End flashing
Flashing done!
Total flash time : 00:10:59
Reboot phone now...
Поведение не меняется :(
В чём моя ошибка и как поднять телефон?