[i=s] 本帖最后由 紫雨风暴 于 2009-6-9 10:27 编辑 [/i]
BB5系列降版的技巧与利弊
JAF1.98.5首推降版功能以后!其他刷N机的仪器都紧贴跟进推出降版功能,
共计四种仪器有降版功能,分别是:
UFS-3 HWK正式版 能降级的最低版本平台为:3.04.1
UB 能降级的最低版本平台为:2.20
MT-BOX 能降级的最低版本平台为:1.29.5
JAF 正式版 能降级的最低版本平台为:1.98.5
这些都可以轻松的降级BB5系列的手机了
一;
JAF使用降版功能的技巧:不刷机备份CRT 308和CRT BKP。
以我的经验,刷机时不是每次都能备份成功的,(下面有实例可以看)
所以才需要手动备份,备份不了刷机风险很大,而且刷坏的的机子是
解不了网锁的,SP区域将是:FFFFFFFFFFFFFFF
这样做可以防止刷出网络锁和将串号降成了12345600654321?
方法如下:
只勾上 Use INI和 CRT 308还有CRT BKP这3项,不使用其他任何功能,
(有其他功能在使用的可以将其手动关闭)然后
按FLASH,JAF就会自动备份CRT 308和CRT BKP这两项。
看看N73手动备份的LOG:
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
Backing up CRT data...
Setting FLASH MODE
Loader version: 01.14.02 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
Loader version: 01.14.02 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Reading NPC certificate...
Reading VARIANT certificate...
Reading CCC certificate...
CCC not available...
Reading HWC certificate...
HWC not available...
Saved to C:\Program
Files\ODEON\JAF\ProgData\35185101866104_CRT_backup_1920134.rpl
Backup CRT OK!
Backing up SIMLOCK data...
Setting local mode...
Reading IMEI...
C:\Program Files\ODEON\JAF\ProgData\351851018661042_CRT_backup_1921134.pm
Done!
Backup LCK OK!
Done!
Total time: 0 Minutes, 1 Seconds
DCT4/BB5 counter: 88
After flash processing...
Waiting for phone to boot...
Reading...
Phone type: RM-133, Software version: 05wk47v34.1
IMEI: 351851018661042
APE Ver: V 3.0638.0.0.1
30-10-2006
RM-133
Variant Ver: V 3.0638.0.0.1-C9
30-10-06
RM-133
Product Code: 0542531
Done!
一般没什么BUG的机器不要随便就降级,可能会导致更多的BUG出现。
例如N72的5.706版本,虽然有简体中文,但没有CHINA区,很多机子
升完级以后插SIM卡就死机,又或者*#92702689#无法按出,
上网的时候,网站名出现?号,不能正常显示等等问题。
出现的问题简直太多了。
这才需要降版,只要把它们都降级到2.0635.3.0.2的版本,功能一切正常!
(可惜把降级的LOG搞不见了,哎~~~~)
二;
降级的弊端:
S40系统的机器不太适合降级,注意:不是不能,而是不太适合!!
5200和5300的3.93版本都有发信息就死机和发彩信定屏的问题,
但是5200和5300并不适合用来降级,这就关系到了操作系统的问题了,
在很多次的降级功能使用中发觉:
S40操作系统的机子,例如:5200,5200,6131等,在降完了版之后
出现在开机一闪就关机,又或者开机后见到了NOKIA的标志后关机!!
用5针线来降级在HWK和MT上可用,同样也需要在BSI脚(电池检测脚)
加上7.5K电阻,5针线在JAF上是每刷必死的,很多的时候过程完全正常,
刷完到最后一步复位的时候定住了,提示失败!
N80 降级失败,也看到了不能自动备份LCK和BKP,请看LOG:
JAF version 1.98.22
Detected PKEY: 90004BEE
Card life counter: 79.76%
P-key nokia module version 01.00
Detected JAF INTERFACE version: 01.AC, Driver version: 40000, Library version:
JAF DCT4/BB5 LOADERS DIR: C:\Program Files\ODEON\JAF\Flash\
JAF DCT4/BB5 PRODUCT DIR: F:\products\ mPhu#oK'f
JAF USB LOADERS DIR: C:\Program Files\ODEON\JAF\FlashUSB\
JAF DCT3/DCTL LOADERS DIR: C:\Program Files\ODEON\JAF\Flash3\
Changing mode...Done!
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
INI file .ini is missing. Continue searching for second ini type...
Changing flashing settings...
FILES SET FOR FLASHING:
MCU Flash file: F:\products\RM-92\N80_4.0632.0.38-prd_western_C00_cc.fpsx
PPM Flash file: F:\products\RM-92\N80_rofx_4.0632.0.38-prd.V14
CNT Flash file: NONE
APE Variant file: F:\products\RM-92\N80_userarea_4.0632.0.38-prd.U01
Languages in ppm: English,Simpl Chinese,Trad Chinese O52
Backing up SIMLOCK data... ( 两个备份都失败了)
Setting local mode...
Failed! Aborting!
Failed to backup LCK...
Preparing for downgrade...
为 降级 做 准备 ...
Failed to prepare for downgrade...
电话 为 降级 准备 失败了!
Booting phone...
APE Boot Data:
Asic ID: 17100708
Asic Mode ID: 00
Asic Public ID: 1C80AED26A7C77EAFF4D17CE90DDA64827380C7B
HASH: 49A97E826B93BA20B7ED0B082475C00500000000
ROM ID: 1DFD66132C872FD4
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B21
Asic Public ID: 01800104DD890054E83D10EE0219921794C03C09
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg 7
Loader version: 01.14.02 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 22E800EC
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.14.02 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
APE Boot: C:\Program Files\ODEON\JAF\Flash\helen3_2nd.fg
Loader version: 01.21.00 -> Revision: 0000
Patching APE boot step1...
Patching APE boot step2...
Patching APE boot step3...
APE Boot Ready
APE Flash ID: 00A100EC
APE Flash Data: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
APE Loader: C:\Program Files\ODEON\JAF\Flash\h3_sam_nand_xsr.fg
Loader version: 01.29.00 -> Revision: 0000
Patching APE loader step1...
Patching APE loader step2...
Patching APE loader step3...
APE Loader Ready...
Operation took 0 minutes 9 seconds...
Reading Public keys...
Getting Public Keys...
Erasing...
Operation took 0 minutes 41 seconds...
Writing...
Stage 1
Sending APE HASH for KEYS
Sending CMT HASH for NOLO
Sending APE HASH for X-LOADER
Sending CMT HASH for KEYS
Sending APE HASH for PRIMAPP
Sending CMT HASH for PRIMAPP
Sending CMT HASH for PASUBTOC
Sending APE HASH for SOS+LOADER
Sending CMT PUB KEYS...
Sending CMT HASH for UPDAPP
Sending APE HASH for SOS*UPDAPP
Sending CMT HASH for ADL
Sending CMT HASH for DSP0
Sending APE HASH for SOS+UZIP
Sending APE PUB KEYS...
Sending APE HASH for PASUBTOC
Sending APE HASH for ADL
Sending APE HASH for SOS+XZIP
Sending APE HASH for SOS*CORE
Sending CMT HASH for MCUSW
Stage 2
Operation took 3 minutes 41 seconds...
Reseting phone...
PPM: F:\products\RM-92\N80_rofx_4.0632.0.38-prd.V14
Booting phone...
APE Boot Data:
Asic ID: 17100708
Asic Mode ID: 00
Asic Public ID: 1C80AED26A7C77EAFF4D17CE90DDA64827380C7B
HASH: 49A97E826B93BA20B7ED0B082475C00500000000
ROM ID: 1DFD66132C872FD4
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID:
Asic EM ID: 00000B21
Asic Public ID: 01800104DD890054E83D10EE0219921794C03C09
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.14.02 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 22E800EC
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.14.02 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
APE Boot: C:\Program Files\ODEON\JAF\Flash\helen3_2nd.fg
Loader version: 01.21.00 -> Revision: 0000
Patching APE boot step1...
Patching APE boot step2...
Patching APE boot step3...
APE Boot Ready
APE Flash ID: 00A100EC
APE Flash Data: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
APE Loader: C:\Program Files\ODEON\JAF\Flash\h3_sam_nand_xsr.fg
Loader version: 01.29.00 -> Revision: 0000
Patching APE loader step1...
Patching APE loader step2...
Patching APE loader step3...
APE Loader Ready...
Operation took 0 minutes 8 seconds...
Reading Public keys...
Getting Public Keys...
Erasing...
Operation took 0 minutes 1 seconds...
Writing...
Operation took 1 minutes 54 seconds...
Reseting phone...
APE VARIANT: F:\products\RM-92\N80_userarea_4.0632.0.38-prd.U01
Booting phone... .
APE Boot Data:
Asic ID: 17100708
Asic Mode ID: 00
Asic Public ID: 1C80AED26A7C77EAFF4D17CE90DDA64827380C7B
HASH: 49A97E826B93BA20B7ED0B082475C00500000000
ROM ID: 1DFD66132C872FD4
BB5系列降版的技巧与利弊
JAF1.98.5首推降版功能以后!其他刷N机的仪器都紧贴跟进推出降版功能,
共计四种仪器有降版功能,分别是:
UFS-3 HWK正式版 能降级的最低版本平台为:3.04.1
UB 能降级的最低版本平台为:2.20
MT-BOX 能降级的最低版本平台为:1.29.5
JAF 正式版 能降级的最低版本平台为:1.98.5
这些都可以轻松的降级BB5系列的手机了
一;
JAF使用降版功能的技巧:不刷机备份CRT 308和CRT BKP。
以我的经验,刷机时不是每次都能备份成功的,(下面有实例可以看)
所以才需要手动备份,备份不了刷机风险很大,而且刷坏的的机子是
解不了网锁的,SP区域将是:FFFFFFFFFFFFFFF
这样做可以防止刷出网络锁和将串号降成了12345600654321?
方法如下:
只勾上 Use INI和 CRT 308还有CRT BKP这3项,不使用其他任何功能,
(有其他功能在使用的可以将其手动关闭)然后
按FLASH,JAF就会自动备份CRT 308和CRT BKP这两项。
看看N73手动备份的LOG:
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
Backing up CRT data...
Setting FLASH MODE
Loader version: 01.14.02 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
Loader version: 01.14.02 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Reading NPC certificate...
Reading VARIANT certificate...
Reading CCC certificate...
CCC not available...
Reading HWC certificate...
HWC not available...
Saved to C:\Program
Files\ODEON\JAF\ProgData\35185101866104_CRT_backup_1920134.rpl
Backup CRT OK!
Backing up SIMLOCK data...
Setting local mode...
Reading IMEI...
C:\Program Files\ODEON\JAF\ProgData\351851018661042_CRT_backup_1921134.pm
Done!
Backup LCK OK!
Done!
Total time: 0 Minutes, 1 Seconds
DCT4/BB5 counter: 88
After flash processing...
Waiting for phone to boot...
Reading...
Phone type: RM-133, Software version: 05wk47v34.1
IMEI: 351851018661042
APE Ver: V 3.0638.0.0.1
30-10-2006
RM-133
Variant Ver: V 3.0638.0.0.1-C9
30-10-06
RM-133
Product Code: 0542531
Done!
一般没什么BUG的机器不要随便就降级,可能会导致更多的BUG出现。
例如N72的5.706版本,虽然有简体中文,但没有CHINA区,很多机子
升完级以后插SIM卡就死机,又或者*#92702689#无法按出,
上网的时候,网站名出现?号,不能正常显示等等问题。
出现的问题简直太多了。
这才需要降版,只要把它们都降级到2.0635.3.0.2的版本,功能一切正常!
(可惜把降级的LOG搞不见了,哎~~~~)
二;
降级的弊端:
S40系统的机器不太适合降级,注意:不是不能,而是不太适合!!
5200和5300的3.93版本都有发信息就死机和发彩信定屏的问题,
但是5200和5300并不适合用来降级,这就关系到了操作系统的问题了,
在很多次的降级功能使用中发觉:
S40操作系统的机子,例如:5200,5200,6131等,在降完了版之后
出现在开机一闪就关机,又或者开机后见到了NOKIA的标志后关机!!
用5针线来降级在HWK和MT上可用,同样也需要在BSI脚(电池检测脚)
加上7.5K电阻,5针线在JAF上是每刷必死的,很多的时候过程完全正常,
刷完到最后一步复位的时候定住了,提示失败!
N80 降级失败,也看到了不能自动备份LCK和BKP,请看LOG:
JAF version 1.98.22
Detected PKEY: 90004BEE
Card life counter: 79.76%
P-key nokia module version 01.00
Detected JAF INTERFACE version: 01.AC, Driver version: 40000, Library version:
JAF DCT4/BB5 LOADERS DIR: C:\Program Files\ODEON\JAF\Flash\
JAF DCT4/BB5 PRODUCT DIR: F:\products\ mPhu#oK'f
JAF USB LOADERS DIR: C:\Program Files\ODEON\JAF\FlashUSB\
JAF DCT3/DCTL LOADERS DIR: C:\Program Files\ODEON\JAF\Flash3\
Changing mode...Done!
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
INI file .ini is missing. Continue searching for second ini type...
Changing flashing settings...
FILES SET FOR FLASHING:
MCU Flash file: F:\products\RM-92\N80_4.0632.0.38-prd_western_C00_cc.fpsx
PPM Flash file: F:\products\RM-92\N80_rofx_4.0632.0.38-prd.V14
CNT Flash file: NONE
APE Variant file: F:\products\RM-92\N80_userarea_4.0632.0.38-prd.U01
Languages in ppm: English,Simpl Chinese,Trad Chinese O52
Backing up SIMLOCK data... ( 两个备份都失败了)
Setting local mode...
Failed! Aborting!
Failed to backup LCK...
Preparing for downgrade...
为 降级 做 准备 ...
Failed to prepare for downgrade...
电话 为 降级 准备 失败了!
Booting phone...
APE Boot Data:
Asic ID: 17100708
Asic Mode ID: 00
Asic Public ID: 1C80AED26A7C77EAFF4D17CE90DDA64827380C7B
HASH: 49A97E826B93BA20B7ED0B082475C00500000000
ROM ID: 1DFD66132C872FD4
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B21
Asic Public ID: 01800104DD890054E83D10EE0219921794C03C09
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg 7
Loader version: 01.14.02 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 22E800EC
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.14.02 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
APE Boot: C:\Program Files\ODEON\JAF\Flash\helen3_2nd.fg
Loader version: 01.21.00 -> Revision: 0000
Patching APE boot step1...
Patching APE boot step2...
Patching APE boot step3...
APE Boot Ready
APE Flash ID: 00A100EC
APE Flash Data: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
APE Loader: C:\Program Files\ODEON\JAF\Flash\h3_sam_nand_xsr.fg
Loader version: 01.29.00 -> Revision: 0000
Patching APE loader step1...
Patching APE loader step2...
Patching APE loader step3...
APE Loader Ready...
Operation took 0 minutes 9 seconds...
Reading Public keys...
Getting Public Keys...
Erasing...
Operation took 0 minutes 41 seconds...
Writing...
Stage 1
Sending APE HASH for KEYS
Sending CMT HASH for NOLO
Sending APE HASH for X-LOADER
Sending CMT HASH for KEYS
Sending APE HASH for PRIMAPP
Sending CMT HASH for PRIMAPP
Sending CMT HASH for PASUBTOC
Sending APE HASH for SOS+LOADER
Sending CMT PUB KEYS...
Sending CMT HASH for UPDAPP
Sending APE HASH for SOS*UPDAPP
Sending CMT HASH for ADL
Sending CMT HASH for DSP0
Sending APE HASH for SOS+UZIP
Sending APE PUB KEYS...
Sending APE HASH for PASUBTOC
Sending APE HASH for ADL
Sending APE HASH for SOS+XZIP
Sending APE HASH for SOS*CORE
Sending CMT HASH for MCUSW
Stage 2
Operation took 3 minutes 41 seconds...
Reseting phone...
PPM: F:\products\RM-92\N80_rofx_4.0632.0.38-prd.V14
Booting phone...
APE Boot Data:
Asic ID: 17100708
Asic Mode ID: 00
Asic Public ID: 1C80AED26A7C77EAFF4D17CE90DDA64827380C7B
HASH: 49A97E826B93BA20B7ED0B082475C00500000000
ROM ID: 1DFD66132C872FD4
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID:
Asic EM ID: 00000B21
Asic Public ID: 01800104DD890054E83D10EE0219921794C03C09
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.14.02 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 22E800EC
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.14.02 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
APE Boot: C:\Program Files\ODEON\JAF\Flash\helen3_2nd.fg
Loader version: 01.21.00 -> Revision: 0000
Patching APE boot step1...
Patching APE boot step2...
Patching APE boot step3...
APE Boot Ready
APE Flash ID: 00A100EC
APE Flash Data: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
APE Loader: C:\Program Files\ODEON\JAF\Flash\h3_sam_nand_xsr.fg
Loader version: 01.29.00 -> Revision: 0000
Patching APE loader step1...
Patching APE loader step2...
Patching APE loader step3...
APE Loader Ready...
Operation took 0 minutes 8 seconds...
Reading Public keys...
Getting Public Keys...
Erasing...
Operation took 0 minutes 1 seconds...
Writing...
Operation took 1 minutes 54 seconds...
Reseting phone...
APE VARIANT: F:\products\RM-92\N80_userarea_4.0632.0.38-prd.U01
Booting phone... .
APE Boot Data:
Asic ID: 17100708
Asic Mode ID: 00
Asic Public ID: 1C80AED26A7C77EAFF4D17CE90DDA64827380C7B
HASH: 49A97E826B93BA20B7ED0B082475C00500000000
ROM ID: 1DFD66132C872FD4