Re: Тестирование Новых возможностей BEST'a -II
#466
Несколько более сложный процесс чем просто прошивка.
6300 RM-217 виснет безбожно. Прошивка слетает каждый день.
Слил сертификаты.
Код:
Phone found!
Series 40 Device detected!
read info... - Ok
Backup Certificates now...
WMDRM read ... ok
CRT308 Backup Created
Setting FlashMode
FlashMode set Ok
1st boot Ok, C0
CMT part info :
CMT ASICID : 000000010000022600010006010C192101001101
CMT EM0 ID : 00000232
CMT EM1 ID : 00000353
CMT PUB ID : 1890011591556E56388B5732065ECCF80DEEA1A7
CMT MODE ID : 00
CMT R_HASH : BAF3A9C3DBFA8454937DB77F2B8852B1
CMT ROM ID : 191EC665DFAAF68F
CMT : Sending 2nd loader...
Use : RAP3Gv3_2nd.fg , Rev : 0.0 Ver : 10.42.0
CMT Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 220800EC , CMT , NOR
CMT Flash ID : 220800EC < SAMSUNG [SEC] => K8F5615ETM\K5G5629ATD
FLCNT : 00000000000000000000000000000000000000
FLASHID : 0000FFFF , CMT , MMC , EXT
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
Sending ALGO....
Use : RAP3Gv3_algo.fg , Rev : 0.0 Ver : 10.40.0
CMT Algo sent
CMT PAPUB : 7F7E6491E8D30494B45630BB3A8599F4E1C674C955
Transmission mode : Dual (Ddr, TX2)
Boot Done!
CMT : Read NPC certificate...
Cert size : 12288 byte(s)
IMEI : 359809016837065
CMT : Read CCC certificate...
Cert size : 8192 byte(s)
CMT : Read HWC certificate...
Cert size : 12288 byte(s)
CMT : Read VARIANT certificate...
Cert size : 20480 byte(s)
Cert Read done!
NPC Certificate saved...
CCC Certificate saved...
HWC Certificate saved...
WMDRM_PD Data saved...
RPL saved : c:\InfinityBox\BEST\Backup\Cert\359809016837065.rpl
Затем поставил другую флеш с 3110с. Прошил.
Код:
Core version : 1.22 , Rev : 4.5
Selected FlashSettings :
Files Set for Flashing :
MCU : rm217__07.30.mcusw
PPM : rm217__07.30.ppm_c
CNT : rm217__07.30.image_c_tr_white
Check FlashFiles, Please, wait...
-> SWversion check skipped : Dead mode selected
Backup enabled, Will read Certificates now...
Setting FlashMode
FlashMode set Ok
1st boot Ok, C0
CMT part info :
CMT ASICID : 000000010000022600010006010C192101001101
CMT EM0 ID : 00000232
CMT EM1 ID : 00000353
CMT PUB ID : 1890011591556E56388B5732065ECCF80DEEA1A7
CMT MODE ID : 00
CMT R_HASH : BAF3A9C3DBFA8454937DB77F2B8852B1
CMT ROM ID : 191EC665DFAAF68F
CMT : Sending 2nd loader...
Use : RAP3Gv3_2nd.fg , Rev : 0.0 Ver : 10.42.0
CMT Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 881C0020 , CMT , NOR
CMT Flash ID : 881C0020 < ST => M39L0R807
FLCNT : 00000000000000000000000000000000000000
FLASHID : 0000FFFF , CMT , MMC , EXT
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
Sending ALGO....
Use : RAP3Gv3_algo.fg , Rev : 0.0 Ver : 10.40.0
CMT Algo sent
CMT PAPUB : C0E691EA16A7593A9BB28832D7312A39F7ED668D05
Transmission mode : Dual (Ddr, TX2)
Boot Done!
CMT : Read NPC certificate...
Cert size : 12288 byte(s)
IMEI : 353203034359987
CMT : Read CCC certificate...
Cert size : 8192 byte(s)
CMT : Read HWC certificate...
Cert size : 12288 byte(s)
CMT : Read VARIANT certificate...
Cert size : 20480 byte(s)
Cert Read done!
Init Service mode... Wait...
CRT308 Backup Created
WMDRM read ... ok
NPC Certificate saved...
CCC Certificate saved...
HWC Certificate saved...
WMDRM_PD Data saved...
RPL saved : c:\InfinityBox\BEST\Backup\Cert\12345610654321x.rpl
Setting FlashMode
FlashMode set Ok
1st boot Ok, C0
CMT part info :
CMT ASICID : 000000010000022600010006010C192101001101
CMT EM0 ID : 00000232
CMT EM1 ID : 00000353
CMT PUB ID : 1890011591556E56388B5732065ECCF80DEEA1A7
CMT MODE ID : 00
CMT R_HASH : BAF3A9C3DBFA8454937DB77F2B8852B1
CMT ROM ID : 191EC665DFAAF68F
CMT : Sending 2nd loader...
Use : RAP3Gv3_2nd.fg , Rev : 0.0 Ver : 10.42.0
CMT Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 881C0020 , CMT , NOR
CMT Flash ID : 881C0020 < ST => M39L0R807
FLCNT : 00000000000000000000000000000000000000
FLASHID : 0000FFFF , CMT , MMC , EXT
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
Sending ALGO....
Use : RAP3Gv3_algo.fg , Rev : 0.0 Ver : 10.40.0
CMT Algo sent
CMT PAPUB : C0E691EA16A7593A9BB28832D7312A39F7ED668D05
Transmission mode : Dual (Ddr, TX2)
Boot Done!
Transmission mode : Dual (Ddr, TX2)
Erase : Processing rm217__07.30.mcusw
Found 9 areas to erase, erase group
Asic : CMT , Sub : NOR
CMT , NOR , Area : 0x00000000 - 0x000006BF
CMT , NOR , Area : 0x000006C0 - 0x0001FFFF
CMT , NOR , Area : 0x00020000 - 0x0007FFFF
CMT , NOR , Area : 0x00080000 - 0x000DFFFF
CMT , NOR , Area : 0x00100000 - 0x001FFFFF
CMT , NOR , Area : 0x00200000 - 0x0031FFFF
CMT , NOR , Area : 0x00320000 - 0x0105FFFF
CMT , NOR , Area : 0x01060000 - 0x01067FFF
CMT , NOR , Area : 0x01068000 - 0x0107FFFF
Using TimeOut : 7 min ( 430 sec )
Erasing, wait.....
CMT : Group erase Ok
TIME : Erase time : 00:01:00
PrReq : NOR , 00
Transmission mode : Dual (Ddr, TX2)
Write : Processing rm217__07.30.mcusw
CMT: Writing Hash CERT [NOLO]
CMT: Writing Hash CERT [KEYS]
CMT: Writing Hash CERT [PRIMAPP]
CMT: Writing Hash CERT [PASUBTOC]
CMT: Writing Hash CERT [PAPUBKEYS]
CMT: Writing Hash CERT [UPDAPP]
CMT: Writing Hash CERT [DSP0]
CMT: Writing Hash CERT [MCUSW]
CMT: Writing Hash CERT [PMM_CONF]
CMT: Writing Hash CERT [SBIF_CONF]
Total writen 943 blocks
TIME : Write time : 00:02:03
PrReq : NOR , 00
Transmission mode : Dual (Ddr, TX2)
Erase : Processing rm217__07.30.ppm_c
Found 1 areas to erase, erase group
Asic : CMT , Sub : NOR
CMT , NOR , Area : 0x01080000 - 0x015FFFFF
Using TimeOut : 7 min ( 430 sec )
Erasing, wait.....
CMT : Group erase Ok
TIME : Erase time : 00:00:19
PrReq : NOR , 00
Transmission mode : Dual (Ddr, TX2)
Write : Processing rm217__07.30.ppm_c
Total writen 289 blocks
TIME : Write time : 00:00:38
PrReq : NOR , 00
ConvertImage: Processing rm217__07.30.image_c_tr_white
ConvertImage: Page Size is 64K, converting...
ConvertImage: File converted
Transmission mode : Dual (Ddr, TX2)
Erase : Processing rm217__07.30.image_c_tr_white_128
Found 1 areas to erase, erase group
Asic : CMT , Sub : NOR
CMT , NOR , Area : 0x01600000 - 0x01FDFFFF
Using TimeOut : 7 min ( 430 sec )
Erasing, wait.....
CMT : Group erase Ok
TIME : Erase time : 00:00:45
PrReq : NOR , 00
Transmission mode : Dual (Ddr, TX2)
Write : Processing rm217__07.30.image_c_tr_white_128
Total writen 208 blocks
TIME : Write time : 00:00:27
PrReq : NOR , 00
Init Service mode... Wait...
Reading Phone Info....
Connected phone - Nokia 6300
Software Info: V 07.30
07-05-09
RM-217
(c) Nokia.
IMEI: 12345610654321?
Product code: 0544321
Checking...
SimLock status : SimLock is Ok
Security status : Security Damaged!!!!! :(
Read Info Done!
Checking User Certificates...
Total - 0 certs
Uploading certificates...
Repair user cert failed :(
AfterFlash operations done... Reconnect, wait...
Connect phone on selected interface...
Как видно из лога, бест считал с телефона уже сбитые сертификаты, и только потом прошил.
Залил бекапы.
Код:
Will Write RPL keys now...
Check RPL file...
NPC Data found! (CMT)
CCC Data found! (CMT)
HWC Data found! (CMT)
WMDRM key found!
Setting FlashMode
FlashMode set Ok
1st boot Ok, C0
CMT part info :
CMT ASICID : 000000010000022600010006010C192101001101
CMT EM0 ID : 00000232
CMT EM1 ID : 00000353
CMT PUB ID : 1890011591556E56388B5732065ECCF80DEEA1A7
CMT MODE ID : 00
CMT R_HASH : BAF3A9C3DBFA8454937DB77F2B8852B1
CMT ROM ID : 191EC665DFAAF68F
CMT : Sending 2nd loader...
Use : RAP3Gv3_2nd.fg , Rev : 0.0 Ver : 10.42.0
CMT Loader sent, Boot Ok
MCU Configuration
MCU Cfg Ok , 03
FLASHID : 881C0020 , CMT , NOR
CMT Flash ID : 881C0020 < ST => M39L0R807
FLCNT : 00000000000000000000000000000000000000
FLASHID : 0000FFFF , CMT , MMC , EXT
CMT Flash ID : 0000FFFF < Bad Flash Type , if MMC - It Ok
Sending ALGO....
Use : RAP3Gv3_algo.fg , Rev : 0.0 Ver : 10.40.0
CMT Algo sent
PAPUBkeys blank (erased or HW failure)
Transmission mode : Dual (Ddr, TX2)
Boot Done!
Preparing for write certificates...
Switching to CMT...
CMT : NPC erase Ok
Writing NPC... Ok
CMT : CCC erase Ok
Writing CCC... Ok
CMT : HWC erase Ok
Writing HWC... Ok
Init Service mode... Wait...
Check phone mode...
Phone already in Test mode, skip change...
Затем проверил телефон.
SDD Key status : SDData Damaged!!!!! 
SimLock status : SimLock is Ok
Security status : Security is Ok
Восстановил SD
Код:
Repair SD procedure started...
Phone Imei: 359809016837065
Setting FlashMode
FlashMode set Ok
1st boot Ok, C0
CMT part info :
CMT ASICID : 000000010000022600010006010C192101001101
CMT EM0 ID : 00000232
CMT EM1 ID : 00000353
CMT PUB ID : 1890011591556E56388B5732065ECCF80DEEA1A7
CMT MODE ID : 00
CMT R_HASH : BAF3A9C3DBFA8454937DB77F2B8852B1
CMT ROM ID : 191EC665DFAAF68F
CMT : Sending 2nd loader...
CMT Loader sent, Boot Ok
rap= 1890011591556E56388B5732065ECCF80DEEA1A7
hash= BAF3A9C3DBFA8454937DB77F2B8852B1
key= CBE5885E2E7812BE8DCD689E75FF44C97FBD6145
Init Service mode... Wait...
Key file updated...
Check phone mode...
Phone already in Test mode, skip change...
Writing Super Dongle Key... Ok
Done!
Checking StartUp data ...
-----------------------
SDD Key status : SD Data is Ok
SimLock status : SimLock is Ok
Security status : Security Damaged!!!!!
Код:
Local SX4 procedure started...
Phone Imei: 359809016837065
Key file exists, no need to read...
Step 1...
Step 2...
Step 3...
SX4 Auth - Ok
Done!
Uploading RF/Battery tune to phone...
Using : RM-217.pm
Operating mode is OK, no need change...
Field 1
Record 0 write - Ok
Record 2 write - Ok
Record 4 write - Ok
Record 6 write - Ok
Record 8 write - Ok
Record 13 write - Ok
Record 16 write - Ok
Record 18 write - Ok
Record 20 write - Ok
Record 25 write - Ok
Record 29 write - Ok
Record 34 write - Ok
Field 309
Record 0 write - Ok
Record 1 write - Ok
Record 2 write - Ok
Record 4 write - Ok
Record 5 write - Ok
Record 7 write - Ok
Record 8 write - Ok
Record 17 write - Ok
Record 22 write - Ok
Check ST_SECURITY now...
Security status : ST_SECURITY => OK
В итоге получмл полностью функционирующий телефон.
Код:
Checking StartUp data ...
-----------------------
SDD Key status : SD Data is Ok
SimLock status : SimLock is Ok
Security status : Security is Ok
Как видно, бест справился с поставленной задачей, что собственно еще один большой плюс.
ЗЫ: забыл написать. При включении с сим получил "функции телефона ограничены". Был сбит сим лок.
Код:
Repair SL procedure started...
Phone Imei: 359809016837065
Key file exists, no need to read...
Operating mode is OK, no need change...
Writing SimLock Data... Ok
Writing SimLock Key... Ok
Done!
Восстановилась буквально за секунду. Без использования сервера. Что дает огромное преимущество продукту перед МХкеу.