Получил заказаный RPL. Записал, лог:
Скрытый текст
Booting Phone via USB...
======================================================
======================================================
USB Phone BUSCheck Boot
======================================================
======================================================
Then Perform Steps 1, 2, 3 and 4...
1. Remove USB and Battery...
2. Insert USB.
3. Insert Battery. (Some phones boot automatically)
4. Please Power on phone shortly...
AdvanceFBox SendBootCodeEx
InitialiseBootstrap_DCT5 DIR
BootFlashMode_DCT5
READING BOOTROM
BootFlashModeDCT5Ex Succeded After 0 Tries
SYSTEM_ID_RESPONSE_BB5 (0xC0) - 96 (0x60) bytes returned
Number of Sub Blocks 7 (0x07)
1 SYSTEM_ASIC_ID 01
Block Length : 21 (15)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000003
ID DWORD 1 : 00000226
ID DWORD 2 : 00010007
ID DWORD 3 : 600C1921
ID DWORD 4 : 02031104
2 EM_ASIC_ID 02
Block Length : 5 (05)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000C35
3 EM_ASIC_ID 02
Block Length : 5 (05)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000C30
4 PUBLIC_ID 12
Block Length : 21 (15)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 24900213
ID DWORD 1 : D5A80344
ID DWORD 2 : FADBFC32
ID DWORD 3 : 8A96A34C
ID DWORD 4 : 349B9D68
5 ASIC_MODE_ID 13
Block Length : 2 (02)
BB ASIC Index : 0 (00) CMT
Mode Id : 00
6 ROOT_KEY_HASH 14
Block Length : 17 (11)
BB ASIC Index : 0 (00) CMT
Hash : 91 6F 75 21 7F 32 08 12 48 B1 5C 38 DF C8 E8 1B
7 ROM_ID 15
Block Length : 9 (09)
BB ASIC Index : 0 (00) CMT
CRC 0 : E693EF0D
CRC 1 : AC22615B
CMT Secondary Loader: C:\ATF\AdvanceBox Turbo Flasher\Nokia\BB5_Loader\New\RAPUv11_2nd.fg
Secondary Loader Sent....
MCU_CONFIGURATION_RESPONSE_BB5:
MessageID : C1
SubBlocks : 06
1 Sub Block ID : 10 STORAGE_DEVICE_ID_BB5
Block Length : 0B
BB ASIC Index : CMT 00
Device Type : RAM 05
Device Index : 00
Manufacturer Code : 0000 -> Flash
Device ID : 0000 -> Type not in database
Extended/Fixed ID : 0000
Revision ID : 0000
2 Sub Block ID : 10 STORAGE_DEVICE_ID_BB5
Block Length : 0B
BB ASIC Index : CMT 00
Device Type : MMC 04
Device Index : 00
Manufacturer Code : FFFF -> Flash
Device ID : 0000 -> Type not in database
Extended/Fixed ID : 0000
Revision ID : 0000
3 Sub Block ID : 10 STORAGE_DEVICE_ID_BB5
Block Length : 0B
BB ASIC Index : CMT 00
Device Type : NOR 00
Device Index : 00
Manufacturer Code : 0000 -> Flash
Device ID : 0000 -> Type not in database
Extended/Fixed ID : 0000
Revision ID : 0000
4 Sub Block ID : 10 STORAGE_DEVICE_ID_BB5
Block Length : 0B
BB ASIC Index : CMT 00
Device Type : NOR 00
Device Index : 01
Manufacturer Code : 0000 -> SPANSION
Device ID : 0001 -> Type not in database
Extended/Fixed ID : 0000
Revision ID : 0000
5 Sub Block ID : 10 STORAGE_DEVICE_ID_BB5
Block Length : 0B
BB ASIC Index : CMT 00
Device Type : MuxOneNAND 03
Device Index : 00
Manufacturer Code : 00EC ->
Device ID : 0050 -> Type not in database
Extended/Fixed ID : 0000
Revision ID : 0031
6 Sub Block ID : 35 NAND_DRIVER_VERSION_BB5
Block Length : 09
BB ASIC Index : CMT 00
Data : XSR 1.6
SearchForBootstrap_DCT5 : No Error - 0 (0x00)
Flash Descriptor
Manufacturer Code : 00EC
Device ID : 0050
Extended/Fixed ID : 0000
Revision ID : 0000
Size : 20000000 (512 MB)
VPP Info : 0000
Erase10s : 1E
Block1s : 32
BErase1s : 02
Reserved0 : 00
Reserved1 : 00
Reserved2 : 00
CMT Algorithm Loader: C:\ATF\AdvanceBox Turbo Flasher\Nokia\BB5_Loader\New\RAPUv11_XSR17_alg.fg
Algorithm Loader Sent...
FUR_Control_AddClient_BB5() ASIC_INDEX_CMT (Ready)
FUR control Ok
PA PUBLIC KEY Request
PhoneInfoRequest_BB5 (Asic Index 00 )
PHONE_INFO_RESPONSE_BB5
PAPUB_KEYS_HASH_RESP_BB5 2A
BB Asic Index : 00
CMT PAPUBKEYS HASH:
D172C32473AE199B213465ABB3853246F9631231
======================================================
PHONE FIRMWARE VERSION:
025.007
======================================================
StartErase_DCT5...
BlockLength : 0x10 (16)
ERASE Blocks : 0x01 (1)
0 ERASE_AREA_BB5 0x13
Block Length : 0x0D (13)
BB ASIC Index : 0x00 CMT
ERASE_REQUEST_BB5 : 5001130D004E5043000000000000000000FD
Successfully Erased...
Now Writing : CMT NPC Certificate 0x0190 Bytes
NPC Write Successful...
StartErase_DCT5...
BlockLength : 0x10 (16)
ERASE Blocks : 0x01 (1)
0 ERASE_AREA_BB5 0x13
Block Length : 0x0D (13)
BB ASIC Index : 0x00 CMT
ERASE_REQUEST_BB5 : 5001130D0043434300000000000000000015
Successfully Erased...
Now Writing : CMT CCC Certificate 0x01D8 Bytes
CCC Write Successful...
StartErase_DCT5...
BlockLength : 0x10 (16)
ERASE Blocks : 0x01 (1)
0 ERASE_AREA_BB5 0x13
Block Length : 0x0D (13)
BB ASIC Index : 0x00 CMT
ERASE_REQUEST_BB5 : 5001130D00485743000000000000000000FC
Successfully Erased...
Now Writing : CMT HWC Certificate 0x00D4 Bytes
HWC Write Successful...
Write Certificates OK!
FlashInfo.RestartMode : Test Mode
Process Done...
Scanning USB Ports...
================================================
Basic Phone Information
================================================
MCU Version: V 92_11w37 14-09-11 RM-596 (c) Nokia
IMEI Plain : 355944045098902
IMEI Spare : A355944045098900
IMEI SV : 33559440450989021F
Phone Model: Nokia N8-00
Category : Classic Phone
Phone Type : RM-596
Writing: SIMLOCK_DATA + SIMLOCK_KEY_DATA
SUCCESSFUL !!!
Writing: SUPERDONGLE_KEY_DATA
SUCCESSFUL !!!
Writing: CMLA_KEY_DATA
SUCCESSFUL !!!
Writing: WMDRM_PD_DATA
SUCCESSFUL !!!
RPL Upload Finished!!!
Перезагрузил, всё равно пишет "Phone start-up failed. Contact the retailer"
По инструкции
http://www.uo5oq.com/forum/showthread.php?t=376 написано:
Цитата:
Порядок восстановления сертификатов телефонов Nokia BB5:
a.) Прочитайте ASK файл из телефона.
b.) Рассчитайте RPL файл на сервере www.UO5OQ.com
c.) Запишите рассчитанный RPL файл в телефон.
Если после шага c.) Вы получили надпись 'Startup Filed' или 'Contact Service', то:
d.) Запишите 1 и 309 блоки PM (или полный PM без 120 и 308 полей) от данной модели, предварительно пройдя SX4 Autorisation.
Если после шага d.) что-то не исправилось, то производим полное стирание телефона с последующей полной перезаписью.
|
Где же взять 1 и 309 блоки PM?
Кстати если сделать erase, а потом записать 25ую прошивку с галкой "Exit to Normal mode" то телефон включается после прошивки, как и положено, на несколько минут. Но если залить рассчитаный RPL, то уходит в Contact retailer