有的机子明明是软件故障却怎么刷也刷不好
这样就要使用BB5擦除把资料清空再重写资料来修复了
这里以N73做示范.自己的新手机
注意:首先手机必须能进入到测试模式或本地模式 清空前先备份网锁308PM.串号PRL和全PM 网锁308可有可无因为有本机的全PM了
也可以从同样的手机上读取全PM不过308PM就一定要备份 因为每个机子的网锁308区都不同 否则手机将写不回来
1.备份308PM RPL 全PM打开平台不选任何资料程序点FLASH
浏览附件1064992
备份好了可以在C:\Program Files\ODEON\JAF\ProgData\目录找到
浏览附件1064993
浏览附件1064994
Backing up CRT data...
Setting FLASH MODE
FAST PHONE detected!
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Reading CMT NPC certificate...
Reading CMT VARIANT certificate...
Reading CMT CCC certificate...
CCC not available...
Reading CMT HWC certificate...
HWC not available...
Saved to C:\Program Files\ODEON\JAF\ProgData\35480501274663_CRT_backup_14382211.rpl
Backup CRT OK!
Backing up SIMLOCK data...
Setting local mode...
Reading IMEI...
C:\Program Files\ODEON\JAF\ProgData\354805012746636_CRT_backup_14382211.pm
Done!
Backup LCK OK!
Reading SW version...05wk47v60.3
Done!
Total time: 0 Minutes, 0 Seconds
DCT4/BB5 counter: 130
After flash processing...
Waiting for phone to boot...
Reading...
Phone type: RM-132, Software version: 05wk47v60.3
IMEI: 354805012746636
APE Ver: (null)
Variant Ver: (null)
Product Code: 0545072
Done!
308PM和RPL备份好后接下来备份全PM 注意BB5全PM地址是0-512
浏览附件1064995
浏览附件1064996
浏览附件1064997
浏览附件1064998
Powering the phone...
Reading Full PM...
Reading Field 1 ...
Reading Field 2 ...
Reading Field 4 ...
Reading Field 8 ...
Reading Field 11 ...
Reading Field 17 ...
Reading Field 50 ...
Reading Field 54 ...
Reading Field 88 ...
Reading Field 92 ...
Reading Field 107 ...
Reading Field 193 ...
Reading Field 308 ...
Reading Field 309 ...
Reading Field 322 ...
Done!
全都备份好了接下来使用擦除文件对手机进行清空
JAF专门为我们提供了BB5擦除文件BB5Erase_8MBrap BB5Erase_16MBrap BB5Erase_32MBrap
在MCU PPM CNT分别调入擦除文件8M 16M 32M来对手机进行清空如果擦除不过就全部使用8M进行清空
浏览附件1064999
Booting phone...
FAST PHONE detected!
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101013000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 29E0010C77BF015490F916EE0C95FA44C2F4BB42
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 22E800EC <=> SAMSUNG (SEC) -> K5G2829ATC
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 6 seconds...
No write data, skiping write...
Erasing...
Operation took 0 minutes 35 seconds...
Reseting phone...
PPM: E:\NOKIA资料安装包\bb5擦除\BB5Erase_16MBrap.bin
Booting phone...
FAST PHONE detected!
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101013000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 29E0010C77BF015490F916EE0C95FA44C2F4BB42
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 22E800EC <=> SAMSUNG (SEC) -> K5G2829ATC
CMT Flash Data: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 6 seconds...
No write data, skiping write...
Erasing...
Operation took 0 minutes 11 seconds...
Reseting phone...
CNT: E:\NOKIA资料安装包\bb5擦除\BB5Erase_32MBrap.bin
Booting phone...
FAST PHONE detected!
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101013000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 29E0010C77BF015490F916EE0C95FA44C2F4BB42
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 22E800EC <=> SAMSUNG (SEC) -> K5G2829ATC
CMT Flash Data: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 6 seconds...
No write data, skiping write...
Erasing...
Operation took 0 minutes 0 seconds...
Reseting phone...
Done!
Total time: 1 Minutes, 5 Seconds
DCT4/BB5 counter: 131
After flash processing...
Waiting for phone to boot...
Failed! Aborting!
擦除完成现在手机应该开不了了
再重写资料使手机开机
这步跳过!
资料写过后手机应该可以开机了不过串号是12345610........?
浏览附件1065000
这时我们该使用我们之前备份的RPL文件来对其进行修复了!
点CET Tool弹出以下界面来进行写入RPL文件
浏览附件1065001
Scanning RPL file...
NPC DATA OK...
VARIANT DATA OK...
CCC DATA NOT FOUND...
HWC DATA NOT FOUND...
NPC APE DATA NOT FOUND...
VARIANT APE DATA NOT FOUND...
CCC APE DATA NOT FOUND...
HWC APE DATA NOT FOUND...
SIMLOCK DATA NOT FOUND...
SIMLOCK KEY DATA NOT FOUND...
SUPERDONGLE KEY DATA NOT FOUND...
CMLA KEY DATA NOT FOUND...
WMDRM PD DATA NOT FOUND...
Connecting to phone...
FAST PHONE detected!
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Writing NPC DATA...
Writing VARIANT DATA...
Restarting phone...
Done!
写好后点CLOSE关闭
再写入刚才备份的308PM文件
浏览附件1065002
浏览附件1065003
Powering the phone...
Writing PM...
Field: 308, Record: 1, Len: 8192 -> OK
Done!
最后要写刚才备份好的全PM文件
写全PM文件要SX4网络服务器的支持来为我们计算并发送证书到手机后才能正常写入PM 电脑须连网
浏览附件1065004
浏览附件1065005
浏览附件1065006
浏览附件1065007
Powering the phone...
Writing PM...
Field: 1, Record: 0, Len: 114 -> OK
Field: 1, Record: 2, Len: 98 -> OK
Field: 1, Record: 4, Len: 110 -> OK
Field: 1, Record: 6, Len: 98 -> OK
Field: 1, Record: 8, Len: 110 -> OK
Field: 1, Record: 13, Len: 98 -> OK
Field: 1, Record: 16, Len: 98 -> OK
Field: 1, Record: 18, Len: 98 -> OK
Field: 1, Record: 20, Len: 98 -> OK
Field: 1, Record: 26, Len: 110 -> OK
Field: 1, Record: 28, Len: 98 -> OK
Field: 1, Record: 29, Len: 6 -> OK
Field: 1, Record: 31, Len: 98 -> OK
Field: 1, Record: 34, Len: 80 -> OK
Field: 1, Record: 44, Len: 182 -> OK
Field: 2, Record: 0, Len: 436 -> OK
Field: 4, Record: 0, Len: 1 -> OK
Field: 4, Record: 1, Len: 44 -> OK
Field: 4, Record: 2, Len: 44 -> OK
Field: 4, Record: 3, Len: 10 -> OK
Field: 4, Record: 4, Len: 8 -> OK
Field: 4, Record: 5, Len: 8 -> OK
Field: 4, Record: 6, Len: 8 -> OK
Field: 4, Record: 9, Len: 5 -> OK
Field: 8, Record: 0, Len: 12 -> OK
Field: 8, Record: 1, Len: 12 -> OK
Field: 8, Record: 2, Len: 128 -> OK
Field: 8, Record: 3, Len: 128 -> OK
Field: 8, Record: 7, Len: 8 -> OK
Field: 11, Record: 0, Len: 4 -> OK
Field: 11, Record: 1, Len: 4 -> OK
Field: 11, Record: 2, Len: 4 -> OK
Field: 11, Record: 3, Len: 4 -> OK
Field: 11, Record: 4, Len: 1 -> OK
Field: 11, Record: 5, Len: 6 -> OK
Field: 11, Record: 6, Len: 1 -> OK
Field: 11, Record: 7, Len: 2 -> OK
Field: 11, Record: 8, Len: 2 -> OK
Field: 11, Record: 9, Len: 2 -> OK
Field: 11, Record: 10, Len: 2 -> OK
Field: 11, Record: 11, Len: 2 -> OK
Field: 11, Record: 12, Len: 1 -> OK
Field: 11, Record: 13, Len: 1 -> OK
Field: 11, Record: 14, Len: 1 -> OK
Field: 11, Record: 15, Len: 1 -> OK
Field: 11, Record: 16, Len: 1 -> OK
Field: 11, Record: 17, Len: 1 -> OK
Field: 11, Record: 18, Len: 1 -> OK
Field: 11, Record: 19, Len: 2 -> OK
Field: 11, Record: 20, Len: 2 -> OK
Field: 11, Record: 21, Len: 1 -> OK
Field: 11, Record: 22, Len: 1 -> OK
Field: 11, Record: 23, Len: 4 -> OK
Field: 11, Record: 24, Len: 4 -> OK
Field: 11, Record: 25, Len: 2 -> OK
Field: 11, Record: 26, Len: 2 -> OK
Field: 11, Record: 27, Len: 2 -> OK
Field: 11, Record: 28, Len: 2 -> OK
Field: 11, Record: 29, Len: 1 -> OK
Field: 11, Record: 30, Len: 1 -> OK
Field: 11, Record: 31, Len: 1 -> OK
Field: 11, Record: 32, Len: 1 -> OK
Field: 11, Record: 33, Len: 1 -> OK
Field: 11, Record: 34, Len: 1 -> OK
Field: 11, Record: 35, Len: 1 -> OK
Field: 11, Record: 36, Len: 1 -> OK
Field: 11, Record: 37, Len: 1 -> OK
Field: 11, Record: 38, Len: 2 -> OK
Field: 11, Record: 39, Len: 2 -> OK
Field: 11, Record: 40, Len: 2 -> OK
Field: 11, Record: 41, Len: 2 -> OK
Field: 11, Record: 42, Len: 2 -> OK
Field: 11, Record: 43, Len: 4 -> OK
Field: 11, Record: 44, Len: 4 -> OK
Field: 11, Record: 45, Len: 4 -> OK
Field: 11, Record: 46, Len: 1 -> OK
Field: 11, Record: 47, Len: 16 -> OK
Field: 11, Record: 48, Len: 2 -> OK
Field: 11, Record: 49, Len: 2 -> OK
Field: 11, Record: 50, Len: 20 -> OK
Field: 11, Record: 51, Len: 10 -> OK
Field: 11, Record: 52, Len: 2 -> OK
Field: 11, Record: 53, Len: 20 -> OK
Field: 11, Record: 54, Len: 10 -> OK
Field: 11, Record: 55, Len: 1 -> OK
Field: 11, Record: 56, Len: 1 -> OK
Field: 11, Record: 57, Len: 1 -> OK
Field: 11, Record: 58, Len: 1 -> OK
Field: 11, Record: 59, Len: 1 -> OK
Field: 11, Record: 60, Len: 1 -> OK
Field: 11, Record: 61, Len: 1 -> OK
Field: 11, Record: 62, Len: 1 -> OK
Field: 11, Record: 63, Len: 1 -> OK
Field: 11, Record: 64, Len: 1 -> OK
Field: 11, Record: 65, Len: 1 -> OK
Field: 11, Record: 66, Len: 32 -> OK
Field: 11, Record: 67, Len: 32 -> OK
Field: 11, Record: 68, Len: 2 -> OK
Field: 11, Record: 69, Len: 2 -> OK
Field: 11, Record: 70, Len: 2 -> OK
Field: 11, Record: 71, Len: 2 -> OK
Field: 11, Record: 72, Len: 2 -> OK
Field: 11, Record: 73, Len: 2 -> OK
Field: 11, Record: 74, Len: 2 -> OK
Field: 11, Record: 75, Len: 2 -> OK
Field: 11, Record: 76, Len: 2 -> OK
Field: 11, Record: 77, Len: 2 -> OK
Field: 11, Record: 78, Len: 2 -> OK
Field: 11, Record: 79, Len: 2 -> OK
Field: 11, Record: 80, Len: 2 -> OK
Field: 11, Record: 81, Len: 2 -> OK
Field: 11, Record: 82, Len: 2 -> OK
Field: 11, Record: 83, Len: 2 -> OK
Field: 11, Record: 84, Len: 2 -> OK
Field: 11, Record: 85, Len: 2 -> OK
Field: 11, Record: 86, Len: 2 -> OK
Field: 11, Record: 87, Len: 2 -> OK
Field: 11, Record: 88, Len: 2 -> OK
Field: 11, Record: 89, Len: 2 -> OK
Field: 11, Record: 90, Len: 2 -> OK
Field: 11, Record: 91, Len: 2 -> OK
Field: 11, Record: 92, Len: 2 -> OK
Field: 11, Record: 93, Len: 2 -> OK
Field: 11, Record: 94, Len: 2 -> OK
Field: 11, Record: 95, Len: 2 -> OK
Field: 11, Record: 96, Len: 2 -> OK
Field: 11, Record: 97, Len: 2 -> OK
Field: 11, Record: 98, Len: 2 -> OK
Field: 11, Record: 99, Len: 2 -> OK
Field: 11, Record: 100, Len: 2 -> OK
Field: 11, Record: 101, Len: 2 -> OK
Field: 11, Record: 102, Len: 2 -> OK
Field: 11, Record: 103, Len: 2 -> OK
Field: 11, Record: 104, Len: 2 -> OK
Field: 11, Record: 105, Len: 2 -> OK
Field: 11, Record: 106, Len: 2 -> OK
Field: 11, Record: 107, Len: 2 -> OK
Field: 11, Record: 108, Len: 2 -> OK
Field: 11, Record: 109, Len: 2 -> OK
Field: 11, Record: 110, Len: 2 -> OK
Field: 11, Record: 111, Len: 2 -> OK
Field: 11, Record: 112, Len: 2 -> OK
Field: 11, Record: 113, Len: 4 -> OK
Field: 11, Record: 114, Len: 4 -> OK
Field: 11, Record: 115, Len: 1 -> OK
Field: 11, Record: 116, Len: 4 -> OK
Field: 11, Record: 117, Len: 4 -> OK
Field: 11, Record: 118, Len: 4 -> OK
Field: 11, Record: 119, Len: 4 -> OK
Field: 11, Record: 120, Len: 16 -> OK
Field: 11, Record: 121, Len: 4 -> OK
Field: 11, Record: 122, Len: 2 -> OK
Field: 11, Record: 123, Len: 2 -> OK
Field: 11, Record: 124, Len: 1504 -> OK
Field: 17, Record: 0, Len: 4 -> OK
Field: 50, Record: 0, Len: 2 -> OK
Field: 54, Record: 0, Len: 2 -> OK
Field: 54, Record: 2, Len: 24 -> OK
Field: 88, Record: 0, Len: 36 -> OK
Field: 92, Record: 0, Len: 16 -> OK
Field: 107, Record: 0, Len: 21 -> OK
Field: 107, Record: 1, Len: 79 -> OK
Field: 107, Record: 2, Len: 79 -> OK
Field: 107, Record: 3, Len: 70 -> OK
Field: 107, Record: 25, Len: 132 -> OK
Field: 193, Record: 2, Len: 8 -> OK
Field: 193, Record: 3, Len: 32 -> OK
Field: 193, Record: 4, Len: 32 -> OK
Field: 193, Record: 9, Len: 64 -> OK
Field: 308, Record: 0, Len: 1 -> OK
Field: 308, Record: 1, Len: 8192 -> OK
Field: 308, Record: 3, Len: 1 -> OK
Field: 308, Record: 4, Len: 1 -> OK
Field: 308, Record: 5, Len: 10 -> OK
Field: 308, Record: 6, Len: 1 -> OK
Field: 308, Record: 7, Len: 1 -> OK
Field: 308, Record: 8, Len: 1 -> OK
Field: 308, Record: 9, Len: 40 -> OK
Field: 309, Record: 0, Len: 4 -> OK
Field: 309, Record: 1, Len: 2 -> OK
Field: 309, Record: 2, Len: 12 -> OK
Field: 309, Record: 4, Len: 12 -> OK
Field: 309, Record: 5, Len: 12 -> OK
Field: 309, Record: 7, Len: 12 -> OK
Field: 309, Record: 8, Len: 12 -> OK
Field: 309, Record: 17, Len: 12 -> OK
Field: 309, Record: 22, Len: 12 -> OK
Field: 322, Record: 0, Len: 1 -> OK
Done!
如果没有本机的全PM可以找个跟本机相同型号的机子备份全PM写进也可
不过308区网锁信息要把他删掉因为每个机子的308网锁信息都不一样
删除308区:用电脑的记事本打开你就看的明白了
这样就修复完成了再来读一下手机信息
Powering the phone...
Reading...
MCU SW version: V 05wk47v60.3
05-06-08
RM-132
(c) Nokia.
HW version: 6008
PCI version:
RFIC version: 17211721
DSP version: scarfe_05wk46v50P1
Retu version: 15
Tahvo version: 22
Production serial number: CNG701324
Product code: 0545072
Module code: 0202856
Basic production code: 0539360
Flash code:
Order number:
Product specific data:
Long production SN:
ATO:
Default SN type:
IMEI plain: 354805012746636
IMEI spare to net: 3A 45 08 05 21 47 66 03
IMEI SV to net: 33 45 08 05 21 47 66 73 F6
LOCK STATUS:
CONFIG KEY: 0000000000000000
PROVIDER KEY: 2440700000000000
Provider: AT&T;U.S.A. (3650)
Key Code count: 0, FBUS Code count: 0
Block 1:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 2:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 3:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 4:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 5:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 6:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 7:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Searching for saved ini...
Checking for file C:\Program Files\ODEON\JAF\JAF_RM-132.ini
Saved INI not found, loading INI list...
Setting local mode...
Reading product code...
Product Code: 0545072
Searching for JAF saved location of ini...
Checking path: D:\Superone\诺基亚\UFS-3\Products\RM-132\
Searching for default location of ini...
Checking path: \Products\RM-132\
Searching for JAF saved location of ini...
Checking path: D:\Superone\诺基亚\UFS-3\Products\RM-132\
Scanning ini files...
Searching for default location of ini...
Checking path: \Products\RM-132\
Checking path: D:\Superone\诺基亚\UFS-3\Products\RM-132\
FILES SET FOR FLASHING:
MCU Flash file: D:\Superone\诺基亚\UFS-3\Products\RM-132\N73_4.0747.31.4.2_western_C00_PRD_cc.fpsx
PPM Flash file: D:\Superone\诺基亚\UFS-3\Products\RM-132\N73_rofx_4.0747.31.4.2_PRD.VS4
CNT Flash file: D:\Superone\诺基亚\UFS-3\Products\RM-132\N73_userarea_4.0747.31.4.2.U03
APE Variant file: NONE
Done!
看一切都正常了
注：此操作十分危险擦除前请三思在三思而行！
(如有操作不当导致手机无法正常使用 于本人无关!)
浏览附件1064991
这样就要使用BB5擦除把资料清空再重写资料来修复了
这里以N73做示范.自己的新手机
注意:首先手机必须能进入到测试模式或本地模式 清空前先备份网锁308PM.串号PRL和全PM 网锁308可有可无因为有本机的全PM了
也可以从同样的手机上读取全PM不过308PM就一定要备份 因为每个机子的网锁308区都不同 否则手机将写不回来
1.备份308PM RPL 全PM打开平台不选任何资料程序点FLASH
浏览附件1064992
备份好了可以在C:\Program Files\ODEON\JAF\ProgData\目录找到
浏览附件1064993
浏览附件1064994
Backing up CRT data...
Setting FLASH MODE
FAST PHONE detected!
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Reading CMT NPC certificate...
Reading CMT VARIANT certificate...
Reading CMT CCC certificate...
CCC not available...
Reading CMT HWC certificate...
HWC not available...
Saved to C:\Program Files\ODEON\JAF\ProgData\35480501274663_CRT_backup_14382211.rpl
Backup CRT OK!
Backing up SIMLOCK data...
Setting local mode...
Reading IMEI...
C:\Program Files\ODEON\JAF\ProgData\354805012746636_CRT_backup_14382211.pm
Done!
Backup LCK OK!
Reading SW version...05wk47v60.3
Done!
Total time: 0 Minutes, 0 Seconds
DCT4/BB5 counter: 130
After flash processing...
Waiting for phone to boot...
Reading...
Phone type: RM-132, Software version: 05wk47v60.3
IMEI: 354805012746636
APE Ver: (null)
Variant Ver: (null)
Product Code: 0545072
Done!
308PM和RPL备份好后接下来备份全PM 注意BB5全PM地址是0-512
浏览附件1064995
浏览附件1064996
浏览附件1064997
浏览附件1064998
Powering the phone...
Reading Full PM...
Reading Field 1 ...
Reading Field 2 ...
Reading Field 4 ...
Reading Field 8 ...
Reading Field 11 ...
Reading Field 17 ...
Reading Field 50 ...
Reading Field 54 ...
Reading Field 88 ...
Reading Field 92 ...
Reading Field 107 ...
Reading Field 193 ...
Reading Field 308 ...
Reading Field 309 ...
Reading Field 322 ...
Done!
全都备份好了接下来使用擦除文件对手机进行清空
JAF专门为我们提供了BB5擦除文件BB5Erase_8MBrap BB5Erase_16MBrap BB5Erase_32MBrap
在MCU PPM CNT分别调入擦除文件8M 16M 32M来对手机进行清空如果擦除不过就全部使用8M进行清空
浏览附件1064999
Booting phone...
FAST PHONE detected!
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101013000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 29E0010C77BF015490F916EE0C95FA44C2F4BB42
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 22E800EC <=> SAMSUNG (SEC) -> K5G2829ATC
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 6 seconds...
No write data, skiping write...
Erasing...
Operation took 0 minutes 35 seconds...
Reseting phone...
PPM: E:\NOKIA资料安装包\bb5擦除\BB5Erase_16MBrap.bin
Booting phone...
FAST PHONE detected!
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101013000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 29E0010C77BF015490F916EE0C95FA44C2F4BB42
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 22E800EC <=> SAMSUNG (SEC) -> K5G2829ATC
CMT Flash Data: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 6 seconds...
No write data, skiping write...
Erasing...
Operation took 0 minutes 11 seconds...
Reseting phone...
CNT: E:\NOKIA资料安装包\bb5擦除\BB5Erase_32MBrap.bin
Booting phone...
FAST PHONE detected!
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101013000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 29E0010C77BF015490F916EE0C95FA44C2F4BB42
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 22E800EC <=> SAMSUNG (SEC) -> K5G2829ATC
CMT Flash Data: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 6 seconds...
No write data, skiping write...
Erasing...
Operation took 0 minutes 0 seconds...
Reseting phone...
Done!
Total time: 1 Minutes, 5 Seconds
DCT4/BB5 counter: 131
After flash processing...
Waiting for phone to boot...
Failed! Aborting!
擦除完成现在手机应该开不了了
再重写资料使手机开机
这步跳过!
资料写过后手机应该可以开机了不过串号是12345610........?
浏览附件1065000
这时我们该使用我们之前备份的RPL文件来对其进行修复了!
点CET Tool弹出以下界面来进行写入RPL文件
浏览附件1065001
Scanning RPL file...
NPC DATA OK...
VARIANT DATA OK...
CCC DATA NOT FOUND...
HWC DATA NOT FOUND...
NPC APE DATA NOT FOUND...
VARIANT APE DATA NOT FOUND...
CCC APE DATA NOT FOUND...
HWC APE DATA NOT FOUND...
SIMLOCK DATA NOT FOUND...
SIMLOCK KEY DATA NOT FOUND...
SUPERDONGLE KEY DATA NOT FOUND...
CMLA KEY DATA NOT FOUND...
WMDRM PD DATA NOT FOUND...
Connecting to phone...
FAST PHONE detected!
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Writing NPC DATA...
Writing VARIANT DATA...
Restarting phone...
Done!
写好后点CLOSE关闭
再写入刚才备份的308PM文件
浏览附件1065002
浏览附件1065003
Powering the phone...
Writing PM...
Field: 308, Record: 1, Len: 8192 -> OK
Done!
最后要写刚才备份好的全PM文件
写全PM文件要SX4网络服务器的支持来为我们计算并发送证书到手机后才能正常写入PM 电脑须连网
浏览附件1065004
浏览附件1065005
浏览附件1065006
浏览附件1065007
Powering the phone...
Writing PM...
Field: 1, Record: 0, Len: 114 -> OK
Field: 1, Record: 2, Len: 98 -> OK
Field: 1, Record: 4, Len: 110 -> OK
Field: 1, Record: 6, Len: 98 -> OK
Field: 1, Record: 8, Len: 110 -> OK
Field: 1, Record: 13, Len: 98 -> OK
Field: 1, Record: 16, Len: 98 -> OK
Field: 1, Record: 18, Len: 98 -> OK
Field: 1, Record: 20, Len: 98 -> OK
Field: 1, Record: 26, Len: 110 -> OK
Field: 1, Record: 28, Len: 98 -> OK
Field: 1, Record: 29, Len: 6 -> OK
Field: 1, Record: 31, Len: 98 -> OK
Field: 1, Record: 34, Len: 80 -> OK
Field: 1, Record: 44, Len: 182 -> OK
Field: 2, Record: 0, Len: 436 -> OK
Field: 4, Record: 0, Len: 1 -> OK
Field: 4, Record: 1, Len: 44 -> OK
Field: 4, Record: 2, Len: 44 -> OK
Field: 4, Record: 3, Len: 10 -> OK
Field: 4, Record: 4, Len: 8 -> OK
Field: 4, Record: 5, Len: 8 -> OK
Field: 4, Record: 6, Len: 8 -> OK
Field: 4, Record: 9, Len: 5 -> OK
Field: 8, Record: 0, Len: 12 -> OK
Field: 8, Record: 1, Len: 12 -> OK
Field: 8, Record: 2, Len: 128 -> OK
Field: 8, Record: 3, Len: 128 -> OK
Field: 8, Record: 7, Len: 8 -> OK
Field: 11, Record: 0, Len: 4 -> OK
Field: 11, Record: 1, Len: 4 -> OK
Field: 11, Record: 2, Len: 4 -> OK
Field: 11, Record: 3, Len: 4 -> OK
Field: 11, Record: 4, Len: 1 -> OK
Field: 11, Record: 5, Len: 6 -> OK
Field: 11, Record: 6, Len: 1 -> OK
Field: 11, Record: 7, Len: 2 -> OK
Field: 11, Record: 8, Len: 2 -> OK
Field: 11, Record: 9, Len: 2 -> OK
Field: 11, Record: 10, Len: 2 -> OK
Field: 11, Record: 11, Len: 2 -> OK
Field: 11, Record: 12, Len: 1 -> OK
Field: 11, Record: 13, Len: 1 -> OK
Field: 11, Record: 14, Len: 1 -> OK
Field: 11, Record: 15, Len: 1 -> OK
Field: 11, Record: 16, Len: 1 -> OK
Field: 11, Record: 17, Len: 1 -> OK
Field: 11, Record: 18, Len: 1 -> OK
Field: 11, Record: 19, Len: 2 -> OK
Field: 11, Record: 20, Len: 2 -> OK
Field: 11, Record: 21, Len: 1 -> OK
Field: 11, Record: 22, Len: 1 -> OK
Field: 11, Record: 23, Len: 4 -> OK
Field: 11, Record: 24, Len: 4 -> OK
Field: 11, Record: 25, Len: 2 -> OK
Field: 11, Record: 26, Len: 2 -> OK
Field: 11, Record: 27, Len: 2 -> OK
Field: 11, Record: 28, Len: 2 -> OK
Field: 11, Record: 29, Len: 1 -> OK
Field: 11, Record: 30, Len: 1 -> OK
Field: 11, Record: 31, Len: 1 -> OK
Field: 11, Record: 32, Len: 1 -> OK
Field: 11, Record: 33, Len: 1 -> OK
Field: 11, Record: 34, Len: 1 -> OK
Field: 11, Record: 35, Len: 1 -> OK
Field: 11, Record: 36, Len: 1 -> OK
Field: 11, Record: 37, Len: 1 -> OK
Field: 11, Record: 38, Len: 2 -> OK
Field: 11, Record: 39, Len: 2 -> OK
Field: 11, Record: 40, Len: 2 -> OK
Field: 11, Record: 41, Len: 2 -> OK
Field: 11, Record: 42, Len: 2 -> OK
Field: 11, Record: 43, Len: 4 -> OK
Field: 11, Record: 44, Len: 4 -> OK
Field: 11, Record: 45, Len: 4 -> OK
Field: 11, Record: 46, Len: 1 -> OK
Field: 11, Record: 47, Len: 16 -> OK
Field: 11, Record: 48, Len: 2 -> OK
Field: 11, Record: 49, Len: 2 -> OK
Field: 11, Record: 50, Len: 20 -> OK
Field: 11, Record: 51, Len: 10 -> OK
Field: 11, Record: 52, Len: 2 -> OK
Field: 11, Record: 53, Len: 20 -> OK
Field: 11, Record: 54, Len: 10 -> OK
Field: 11, Record: 55, Len: 1 -> OK
Field: 11, Record: 56, Len: 1 -> OK
Field: 11, Record: 57, Len: 1 -> OK
Field: 11, Record: 58, Len: 1 -> OK
Field: 11, Record: 59, Len: 1 -> OK
Field: 11, Record: 60, Len: 1 -> OK
Field: 11, Record: 61, Len: 1 -> OK
Field: 11, Record: 62, Len: 1 -> OK
Field: 11, Record: 63, Len: 1 -> OK
Field: 11, Record: 64, Len: 1 -> OK
Field: 11, Record: 65, Len: 1 -> OK
Field: 11, Record: 66, Len: 32 -> OK
Field: 11, Record: 67, Len: 32 -> OK
Field: 11, Record: 68, Len: 2 -> OK
Field: 11, Record: 69, Len: 2 -> OK
Field: 11, Record: 70, Len: 2 -> OK
Field: 11, Record: 71, Len: 2 -> OK
Field: 11, Record: 72, Len: 2 -> OK
Field: 11, Record: 73, Len: 2 -> OK
Field: 11, Record: 74, Len: 2 -> OK
Field: 11, Record: 75, Len: 2 -> OK
Field: 11, Record: 76, Len: 2 -> OK
Field: 11, Record: 77, Len: 2 -> OK
Field: 11, Record: 78, Len: 2 -> OK
Field: 11, Record: 79, Len: 2 -> OK
Field: 11, Record: 80, Len: 2 -> OK
Field: 11, Record: 81, Len: 2 -> OK
Field: 11, Record: 82, Len: 2 -> OK
Field: 11, Record: 83, Len: 2 -> OK
Field: 11, Record: 84, Len: 2 -> OK
Field: 11, Record: 85, Len: 2 -> OK
Field: 11, Record: 86, Len: 2 -> OK
Field: 11, Record: 87, Len: 2 -> OK
Field: 11, Record: 88, Len: 2 -> OK
Field: 11, Record: 89, Len: 2 -> OK
Field: 11, Record: 90, Len: 2 -> OK
Field: 11, Record: 91, Len: 2 -> OK
Field: 11, Record: 92, Len: 2 -> OK
Field: 11, Record: 93, Len: 2 -> OK
Field: 11, Record: 94, Len: 2 -> OK
Field: 11, Record: 95, Len: 2 -> OK
Field: 11, Record: 96, Len: 2 -> OK
Field: 11, Record: 97, Len: 2 -> OK
Field: 11, Record: 98, Len: 2 -> OK
Field: 11, Record: 99, Len: 2 -> OK
Field: 11, Record: 100, Len: 2 -> OK
Field: 11, Record: 101, Len: 2 -> OK
Field: 11, Record: 102, Len: 2 -> OK
Field: 11, Record: 103, Len: 2 -> OK
Field: 11, Record: 104, Len: 2 -> OK
Field: 11, Record: 105, Len: 2 -> OK
Field: 11, Record: 106, Len: 2 -> OK
Field: 11, Record: 107, Len: 2 -> OK
Field: 11, Record: 108, Len: 2 -> OK
Field: 11, Record: 109, Len: 2 -> OK
Field: 11, Record: 110, Len: 2 -> OK
Field: 11, Record: 111, Len: 2 -> OK
Field: 11, Record: 112, Len: 2 -> OK
Field: 11, Record: 113, Len: 4 -> OK
Field: 11, Record: 114, Len: 4 -> OK
Field: 11, Record: 115, Len: 1 -> OK
Field: 11, Record: 116, Len: 4 -> OK
Field: 11, Record: 117, Len: 4 -> OK
Field: 11, Record: 118, Len: 4 -> OK
Field: 11, Record: 119, Len: 4 -> OK
Field: 11, Record: 120, Len: 16 -> OK
Field: 11, Record: 121, Len: 4 -> OK
Field: 11, Record: 122, Len: 2 -> OK
Field: 11, Record: 123, Len: 2 -> OK
Field: 11, Record: 124, Len: 1504 -> OK
Field: 17, Record: 0, Len: 4 -> OK
Field: 50, Record: 0, Len: 2 -> OK
Field: 54, Record: 0, Len: 2 -> OK
Field: 54, Record: 2, Len: 24 -> OK
Field: 88, Record: 0, Len: 36 -> OK
Field: 92, Record: 0, Len: 16 -> OK
Field: 107, Record: 0, Len: 21 -> OK
Field: 107, Record: 1, Len: 79 -> OK
Field: 107, Record: 2, Len: 79 -> OK
Field: 107, Record: 3, Len: 70 -> OK
Field: 107, Record: 25, Len: 132 -> OK
Field: 193, Record: 2, Len: 8 -> OK
Field: 193, Record: 3, Len: 32 -> OK
Field: 193, Record: 4, Len: 32 -> OK
Field: 193, Record: 9, Len: 64 -> OK
Field: 308, Record: 0, Len: 1 -> OK
Field: 308, Record: 1, Len: 8192 -> OK
Field: 308, Record: 3, Len: 1 -> OK
Field: 308, Record: 4, Len: 1 -> OK
Field: 308, Record: 5, Len: 10 -> OK
Field: 308, Record: 6, Len: 1 -> OK
Field: 308, Record: 7, Len: 1 -> OK
Field: 308, Record: 8, Len: 1 -> OK
Field: 308, Record: 9, Len: 40 -> OK
Field: 309, Record: 0, Len: 4 -> OK
Field: 309, Record: 1, Len: 2 -> OK
Field: 309, Record: 2, Len: 12 -> OK
Field: 309, Record: 4, Len: 12 -> OK
Field: 309, Record: 5, Len: 12 -> OK
Field: 309, Record: 7, Len: 12 -> OK
Field: 309, Record: 8, Len: 12 -> OK
Field: 309, Record: 17, Len: 12 -> OK
Field: 309, Record: 22, Len: 12 -> OK
Field: 322, Record: 0, Len: 1 -> OK
Done!
如果没有本机的全PM可以找个跟本机相同型号的机子备份全PM写进也可
不过308区网锁信息要把他删掉因为每个机子的308网锁信息都不一样
删除308区:用电脑的记事本打开你就看的明白了
这样就修复完成了再来读一下手机信息
Powering the phone...
Reading...
MCU SW version: V 05wk47v60.3
05-06-08
RM-132
(c) Nokia.
HW version: 6008
PCI version:
RFIC version: 17211721
DSP version: scarfe_05wk46v50P1
Retu version: 15
Tahvo version: 22
Production serial number: CNG701324
Product code: 0545072
Module code: 0202856
Basic production code: 0539360
Flash code:
Order number:
Product specific data:
Long production SN:
ATO:
Default SN type:
IMEI plain: 354805012746636
IMEI spare to net: 3A 45 08 05 21 47 66 03
IMEI SV to net: 33 45 08 05 21 47 66 73 F6
LOCK STATUS:
CONFIG KEY: 0000000000000000
PROVIDER KEY: 2440700000000000
Provider: AT&T;U.S.A. (3650)
Key Code count: 0, FBUS Code count: 0
Block 1:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 2:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 3:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 4:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 5:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 6:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Block 7:
Lock 1: OPEN Lock 2: OPEN Lock 3: OPEN Lock 4: OPEN Lock 5: OPEN
Searching for saved ini...
Checking for file C:\Program Files\ODEON\JAF\JAF_RM-132.ini
Saved INI not found, loading INI list...
Setting local mode...
Reading product code...
Product Code: 0545072
Searching for JAF saved location of ini...
Checking path: D:\Superone\诺基亚\UFS-3\Products\RM-132\
Searching for default location of ini...
Checking path: \Products\RM-132\
Searching for JAF saved location of ini...
Checking path: D:\Superone\诺基亚\UFS-3\Products\RM-132\
Scanning ini files...
Searching for default location of ini...
Checking path: \Products\RM-132\
Checking path: D:\Superone\诺基亚\UFS-3\Products\RM-132\
FILES SET FOR FLASHING:
MCU Flash file: D:\Superone\诺基亚\UFS-3\Products\RM-132\N73_4.0747.31.4.2_western_C00_PRD_cc.fpsx
PPM Flash file: D:\Superone\诺基亚\UFS-3\Products\RM-132\N73_rofx_4.0747.31.4.2_PRD.VS4
CNT Flash file: D:\Superone\诺基亚\UFS-3\Products\RM-132\N73_userarea_4.0747.31.4.2.U03
APE Variant file: NONE
Done!
看一切都正常了
注：此操作十分危险擦除前请三思在三思而行！
(如有操作不当导致手机无法正常使用 于本人无关!)
浏览附件1064991