v0.914037版本点TP点修复GDFS!单换CPU不换字库同样适用!已测试成功!附过程和细节

setool2

普通会员
2007-09-21
84
0
0
1:可修复给人写入不对应的GDFS导致闪红灯和IMEI配错的机子和单换CPU而不换字库同样适用!
或旧字库换在别的机子照样可以用这方法修复。不会出现五锁或没信号和耳机模式!已亲测试过。方法照上图。
修复方法一样,开刷的字库是一个放了很久,以前一台换CPU出现五锁和无信号和耳机,用修复K790信号的方法和升CID53和用UP256编程过的。无论怎么搞都是死的!看来旧的字库现在有用了
最后1个图上SE盒子的白线处为3.3V!直接拉一线出来加一细点的针!做TP即可!不需要太复杂!
可能有部分盒子不一样。找出一3.3v即可,但不可用TX处的3.3v.TX处的3.3V联上手机电压已经给拉低了!
试过拉了个3.2V的。呵呵。点TP时提示正确但就不动了!注意!软件提示点TP时先用万用表测一下你的TP线是不是3.3V!
强调一点,先调GDFS再调EROM文件!二个同时调入写!如果先写EROM再写GDFS时会提示需要重新做TP!二楼附上刷机日志!和TP图下载[s:110]]
 

附件

setool2

普通会员
2007-09-21
84
0
0
附上DreamBox 的TP图。下载DreamBox 平台,不用仪器可进入演示模式 ,另外se主程序里面的 dreambox_tp_info文件夹内也带有tp图。不过没这个看的方便 http://www.dreambox.hk/SetupDreamBox3.6.exe v0.914037/UNI
CARD SERIAL: 00005076
Loaded 51 flash descriptors
SIGNED MODE (USING SERVER).
bad username/password.
CARD COUNTERS: FLASH 4140, UNLOCK 4544
Elapsed: 3 secs.
SIGNED MODE (USING SERVER).
ChipID:9900,EMP protocol:0301

PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Flash ID check:2019
Flash props sent ok
OTP LOCKED:1 CID:49 PAF:1 IMEI:35282601365457 CERT:RED
FLASH CID:52 COLOR:RED
IMEI MISMATCH ! GDFS IMEI:35170701616552

Model:K810i
Brand:Generic
MAPP CXC article: R1KC001 prgCXC1250811_GENERIC_SM
MAPP CXC version: R1KC001
Language Package:EUROPE_4
CDA article: CDA111111/DEV
CDA version: R2A
Default article: cxc1250813
Default version: R1KC001
PROVIDER: 000-00
Network LOCKED

RESTORATION FILE NOT PRESENT
"R1KC001_CXC1250811_GENERIC_SM"
YOU MUST PERFORM FULL FLASHING
WHEN "ALTERNATIVE SECURITY BYPASS" ENABLED

BYPASS PACKAGE PRESENT FOR DETECTED FIRMWARE

SECURITY UNITS BACKUP CREATED.
Elapsed: 11 secs.
TESTPOINT REPAIR STAGE #1 STARTED
PROCEDURE WAS STOPPED BY USER
Elapsed: 10 secs.
TESTPOINT REPAIR STAGE #1 STARTED
Open COM port OK
ChipID:9900,EMP protocol:0301
Speed:921600
OTP LOCKED:1 CID:49 PAF:1 IMEI:35282601365457 CERT:N/A
FLASH CID:52 COLOR:RED
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
PREPARING...
ATTACH TP #1 AND PRESS "READY"
RELEASE TP #1 AND PRESS "READY"
TP #1 LOOKS OKAY
DONE
Elapsed: 22 secs.
TESTPOINT REPAIR STAGE #2 STARTED
Open COM port OK
ChipID:9900,EMP protocol:0301
Speed:921600
ATTACH TP #2 AND PRESS "READY"
Trying to launch embedded bootloader...
TP #2 LOOKS OKAY
RELEASE TP #2 AND PRESS "READY"
INT LDR:DB2020_PRELOADER_FOR_SETOOL2
WRITING EROM...
DONE
Elapsed: 13 secs.
SIGNED MODE (USING SERVER).
Open COM port OK
ChipID:9900,EMP protocol:0301
Speed:921600
Flash ID check:2019
Flash props sent ok
OTP LOCKED:1 CID:49 PAF:1 IMEI:35282601365457 CERT:N/A
FLASH CID:49 COLOR:BROWN
IMEI MISMATCH ! GDFS IMEI:35170701616552

Model:K810i
Brand:Generic
MAPP CXC article: R1KC001 prgCXC1250811_GENERIC_SM
MAPP CXC version: R1KC001
Language Package:EUROPE_4
CDA article: CDA111111/DEV
CDA version: R2A
Default article: cxc1250813
Default version: R1KC001
PROVIDER: 000-00
Network LOCKED

SEARCH:D:\setool资料\w850\cid49\w850-R1EJ001_1250204_CHINA_CY.ssw.cry
SEARCH:D:\setool资料\w850\cid49\w850-R1EJ001_APAC_fs.ssw.cry
RESTORATION FILE NOT PRESENT
"R1KC001_CXC1250811_GENERIC_SM"
YOU MUST PERFORM FULL FLASHING
WHEN "ALTERNATIVE SECURITY BYPASS" ENABLED

Elapsed: 25 secs.
Open COM port OK
ChipID:9900,EMP protocol:0301
Speed:921600
OTP LOCKED:1 CID:49 PAF:1 IMEI:35282601365457 CERT:N/A
FLASH CID:49 COLOR:BROWN
LDR:060721 1021 DB2020_SERVICE_LOADER
Flash ID check:2019
Flash props sent ok
writing D:\setool主程序\v0.914020\gdfs_in_ssw_format\w850_gdfs_in_ssw_format_CID49_BROWN.ssw
CURRENT FLASH FILE CID:49
SSW uses complete hash, hash len is:640
Will flash 32 blocks...
SSW loading returns:0
writing D:\setool主程序\v0.914020\eroms\DB2020EROM_RED52_SIGNED_CID49_BROWN.ssw
CURRENT FLASH FILE CID:49
SSW uses complete hash, hash len is:40
Will flash 2 blocks...
SSW loading returns:0
Setting up GDFS...
OTP WRITE NOT EXECUTED.
Writing simlocks...
ALL UNLOCK/LOCK CODES SET TO "42324463"
Signing...
control keys complete.
full sig complete.
Elapsed: 48 secs.
SIGNED MODE (USING SERVER).
ChipID:9900,EMP protocol:0301

PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Flash ID check:2019
Flash props sent ok
OTP LOCKED:1 CID:49 PAF:1 IMEI:35282601365457 CERT:RED
FLASH CID:52 COLOR:RED

Model:W850i
Brand:Generic
MAPP CXC article: R1JG001 prgCXC1250204_CHINA_CY
MAPP CXC version: R1JG001
Language Package:EUROPE_4
CDA article: CDA102568/13
CDA version: R2A
Default article: cxc1250489
Default version: R1ED001
PROVIDER: 000-00
SIMLOCKS NOT DETECTED

SEARCH:D:\setool资料\w850\cid52\w850-R1JG001_1250204_CHINA_CY.ssw
"R1JG001_CXC1250204_CHINA_CY" CREATED
BYPASS PACKAGE PRESENT FOR DETECTED FIRMWARE

SECURITY UNITS BACKUP CREATED.
Elapsed: 76 secs.
SIGNED MODE (USING SERVER).
ChipID:9900,EMP protocol:0301

PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
OTP LOCKED:1 CID:49 PAF:1 IMEI:35282601365457 CERT:RED
FLASH CID:52 COLOR:RED
PATCH:061205 1523 HANCXC9876543210_DB2020_MEM_PATCHER_R2A006 0
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:2019
Flash props sent ok
writing D:\setool资料\w850\cid52\w850-R1JG001_1250204_CHINA_CY.ssw
CURRENT FLASH FILE CID:52
SSW uses complete hash, hash len is:9200
Will flash 460 blocks...
SSW loading returns:0
writing D:\setool资料\w850\cid52\w850-R1JG001_FS_APAC_CY_RED_CID52.ssw
CURRENT FLASH FILE CID:52
SSW uses complete hash, hash len is:5140
Will flash 257 blocks...
SSW loading returns:0
LDR:070904 1245 AN2CXC1250562_DB2020_CSLOADER_R3A013
loader startup: executed
loader GDFS startup: executed
loader filesystem startup: executed
loader unlock: executed
writing tpa/preset/custom/C3_PCA_G3v2.cer
writing tpa/preset/custom/CONTENT_DOWNLOAD_HOOK_2.itm
writing tpa/preset/custom/customize.xml
writing tpa/preset/custom/DESKTOP_HOOK_2.itm
writing tpa/preset/custom/Entrust.net Root Certificate.cer
writing tpa/preset/custom/Entrust.net_WTLS_Root_Certificate.wcrt
writing tpa/preset/custom/FM_PICTURES_HOOK_3.itm
writing tpa/preset/custom/FM_SOUNDS_HOOK_3.itm
writing tpa/preset/custom/FM_THEMES_HOOK_3.itm
writing tpa/preset/custom/FM_VIDEOS_HOOK_3.itm
writing tpa/preset/custom/GAMES_HOOK_3.itm
writing tpa/preset/custom/GTE_CyberTrust_Root.cer
writing tpa/preset/custom/GTE_Cybe_Trust_Root_WTLS.wcrt
writing tpa/preset/custom/Root.cer
writing tpa/preset/custom/SEMC_E2E_Root_CA.crt
writing tpa/preset/custom/SETT_RINGTONE_HOOK_3.itm
writing tpa/preset/custom/ThawtePremium.der
writing tpa/preset/custom/ThawteServerCA.cer
writing tpa/preset/custom/Utiroot.cer
writing tpa/preset/custom/VeriSignClass3Root.cer
writing tpa/preset/custom/Verisign_Class_3_CA_WTLS.wcrt
Phone detached
Elapsed: 430 secs.
 

附件

setool2

普通会员
2007-09-21
84
0
0
引用第10楼6388509于2008-07-04 12:03发表的 :
我的怎么点TP1后和你不一样
你的tp不正确,或没点好,多尝试几次,tp线的电压不是3.3v也会出现不正确
 

setool2

普通会员
2007-09-21
84
0
0
TP点有二个。分别为TP1.TP2.所用的TP点不一样。SE主程序上有TP图
 
P

pinger3333

游客
不错的,很好的! 特别的好!但是斑竹翻译成中文特别的难看的,你还是原来的LOG 我觉得更好点的,不错的!很不错的谢谢!!! [s:104]
 

6388509

普通会员
2003-06-19
474
0
0
老大,你再写明白点啊,一跟白线上面加3。3V的电吗???图不清楚
 

setool2

普通会员
2007-09-21
84
0
0
引用第15楼6388509于2008-07-04 15:08发表的 :
老大,你再写明白点啊,一跟白线上面加3。3V的电吗???图不清楚
接线处的电容已经有3.3v的电压!直接拉一线出来即可做tp!
 

附件

longsoft

普通会员
2006-05-03
214
0
0
我的怎么搞也是这样,过不了,我用电源供3.3也是这样,不知是哪里的问题????


OTP LOCKED:1 CID:49 PAF:1 IMEI:35170901143421 CERT:N/A
FLASH CID:53 COLOR:RED
LDR:080108 1810 ESGCXC1329129_DB2020_FLASHLOADER_R2A015
PREPARING...
ATTACH TP #1 AND PRESS "READY"
RELEASE TP #1 AND PRESS "READY"
TP #1 LOOKS OKAY
NOT EXPECTED ANSWER
 

setool2

普通会员
2007-09-21
84
0
0
引用第17楼longsoft于2008-07-04 15:54发表的 :
我的怎么搞也是这样,过不了,我用电源供3.3也是这样,不知是哪里的问题????


OTP LOCKED:1 CID:49 PAF:1 IMEI:35170901143421 CERT:N/A
FLASH CID:53 COLOR:RED
.......
你的tp线电压不够3.3v,你测之前最好是平台提示你点tp时测。用万用表测一下,另外点tp的速度要快。不能停太久
 

longsoft

普通会员
2006-05-03
214
0
0
引用第18楼setool2于2008-07-04 16:16发表的 :

你的tp线电压不够3.3v,你测之前最好是平台提示你点tp时测。用万用表测一下,另外点tp的速度要快。不能停太久

thanks ,我刚试过了,是电压大了一点,行了.对3.3v要求很大,大了小了都不行

TESTPOINT REPAIR STAGE #1 STARTED
Open COM port OK
ChipID:9900,EMP protocol:0301
Speed:921600
OTP LOCKED:1 CID:49 PAF:1 IMEI:35240101855930 CERT:N/A
FLASH CID:52 COLOR:RED
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
PREPARING...
ATTACH TP #1 AND PRESS "READY"
RELEASE TP #1 AND PRESS "READY"
TP #1 LOOKS OKAY
DONE
TESTPOINT REPAIR STAGE #2 STARTED
Open COM port OK
ATTACH TP #2 AND PRESS "READY"
Trying to launch embedded bootloader...
TP #2 LOOKS OKAY
RELEASE TP #2 AND PRESS "READY"
INT LDR:DB2020_PRELOADER_FOR_SETOOL2
WRITING EROM...
DONE
Elapsed: 53 secs.