Ultimate Unlocker - Восстановление GDFS/EROM/SEMCBOOT/SECZONE в телефонах A2, DB2020, DB2012 без использования TP

[Андрей Мар]

Пришел W580 невключающийся.
попробовал шить Setoolом, прошился без проблем.
Ошибок вроде не было.
Однако ситуация не изменилась.
Решил попробовать восстановить D-Ultimate Unlocker.

  03:42:42  D-Ultimate Unlocker v3.07 by Cruiser Team
  03:42:42  - Fast & Full - Unlock, Relock, Show codes, Sec.zone rebuild, EROM repair, CID change
  03:42:42  Initializing...
! 03:42:42  1. Please see the documentation first (the tab 'Info' or attached .pdf file)
! 03:42:42  2. Choose the phone model
! 03:42:42  3. Select the desired options
! 03:42:42  4. Please connect the phone either via USB while holding 2-5…
! 03:42:42  - or via a serial cable and double-click on it in the device list
  03:49:11  Selected phone: W580
  03:49:11  Connecting via Generic FTDI Cable (COM4)…
  03:49:11  Device driver version: 2.2.4.0
  03:49:11  Device driver date: 6-27-2007
  03:49:12  Connecting to the baseband CPU...
  03:49:17  Entering baseband CPU service mode...
  03:49:17  Detected chipset: DB2020
  03:49:17  Boot mode: ROM
  03:49:17  Sending loader...
  03:49:18  IMEI: 35344802750928
  03:49:18  OTP CID: 51
  03:49:18  Effective CID: 53
  03:49:18  Restarting phone …
  03:49:21  Sending loader...
  03:49:22  Communicating with server…
! 03:49:29  News: Your credit consumption policy: Level 1 (Novice)
  03:49:30  Remainig credit (supreme): 0.03
  03:49:37  Remainig credit (supreme): 0.03
  03:49:38  Restarting phone …
  03:49:40  Sending loader...
  03:49:45  Turning off the phone...
  03:49:47  Done.

Все проходит без проблем.

Далее работаю setool по USB.

v0.915037/UNI
CARD SERIAL: 00035xxx
Loaded 51 flash descriptors
CFG:000000000000000
ChipID:9900,EMP protocol:0301

PHONE STATE: "DEVELOPER"
FLASH CID: 0049
Speed:921600
OTP: LOCKED:1 CID:51 PAF:1 IMEI:35344802750928 CERT:BROWN
FLASH CID:49 COLOR:BROWN
LDR:060721 1021 DB2020_SERVICE_LOADER
Flash ID check:897E
Flash props sent ok
writing "C:\Program Files\Setool\gdfs_in_ssw_format\db2020\W580_GDFS_S SW.ssw"
CURRENT FLASH FILE CID:49
SSW uses full hash, hash len is: 640
Will flash 32 blocks...
SSW loading returns:0
Setting up GDFS...
OTP WRITE NOT EXECUTED
WRITING CLEAR SIMLOCK UNITS...
SIGNING...
Elapsed: 34 secs.
CFG:000000000000000
ChipID:9900,EMP protocol:0301

PHONE STATE: "DEVELOPER"
FLASH CID: 0049
Speed:921600
OTP: LOCKED:1 CID:51 PAF:1 IMEI:35344802750928 CERT:BROWN
FLASH CID:49 COLOR:BROWN
LDR:060721 1021 DB2020_SERVICE_LOADER
Flash ID check:897E
Flash props sent ok
writing "C:\Program Files\Setool\eroms\db2020\DB2020EROM_CNV_RED53_BRO WN_CID49_DB2020.ssw"
CURRENT FLASH FILE CID:49
SSW uses full hash, hash len is: 40
Will flash 2 blocks...
llbug: blk write fail. fatal
subblock 00D NAK, [44000000/00010000]
Elapsed: 13 secs.

Я так понимаю, что невозможно записать EROM.
После этого телефон включился, однако как и следовало ожидать не принимает симкарты.

далее лог идентификации:

CFG:000000000000000
ChipID:9900,EMP protocol:0301

PHONE STATE: "DEVELOPER"
FLASH CID: 0049
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP: LOCKED:1 CID:51 PAF:1 IMEI:35344802750928 CERT:BROWN
FLASH CID:49 COLOR:BROWN

Model (from GDFS):W580i
Brand:Generic
MAPP CXC article: R8BE001 prgCXC1123362_GENERIC_LA
MAPP CXC version: R8BE001
Language Package: RUSSIA
CDA article: CDA102568/1
CDA version: R2A
Default article: cxc1123364
Default version: R8BE001
PROVIDER: 000-00
SIMLOCKS NOT DETECTED

RESTORATION FILE PRESENT FOR DETECTED FIRMWARE

SECURITY UNITS BACKUP CREATED.
Elapsed: 6 secs.


телефон стал "красным". Однако CID49.

Пробую записать EROM по COM.
Запись проходит нормально:

CFG:000000000000000
ChipID:9900,EMP protocol:0301
Speed:921600
OTP: LOCKED:1 CID:51 PAF:1 IMEI:35344802750928 CERT:N/A
FLASH CID:49 COLOR:BROWN
LDR:060721 1021 DB2020_SERVICE_LOADER
Flash ID check:897E
Flash props sent ok
writing "C:\Program Files\Setool\eroms\db2020\DB2020EROM_CNV_RED53_BRO WN_CID49_DB2020.ssw"
CURRENT FLASH FILE CID:49
SSW uses full hash, hash len is: 40
Will flash 2 blocks...
SSW loading returns:0
Setting up GDFS...
OTP WRITE NOT EXECUTED
WRITING CLEAR SIMLOCK UNITS...
ALL UNLOCK/LOCK CODES SET TO "28271544"
SIGNING...
Elapsed: 13 secs.

Лог Идентификации:

CFG:000000000000000
ChipID:9900,EMP protocol:0301
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP: LOCKED:1 CID:51 PAF:1 IMEI:35344802750928 CERT:N/A
FLASH CID:53 COLOR:RED

Model (from GDFS):W580i
Brand:Generic
MAPP CXC article: R8BE001 prgCXC1123362_GENERIC_LA
MAPP CXC version: R8BE001
Language Package: RUSSIA
CDA article: CDA102568/1
CDA version: R2A
Default article: cxc1123364
Default version: R8BE001
PROVIDER: 000-00
SIMLOCKS NOT DETECTED

RESTORATION FILE PRESENT FOR DETECTED FIRMWARE

BYPASS PACKAGE PRESENT FOR DETECTED FIRMWARE

CID стал 53. однако телефон не включается совсем.

Пробую прошить полностью:

SIGNED MODE (USING SERVER)
CFG:100011000000000
ChipID:9900,EMP protocol:0301
Speed:921600
OTP: LOCKED:1 CID:51 PAF:1 IMEI:35344802750928 CERT:N/A
FLASH CID:53 COLOR:RED
PATCH:071120 1355 HANCXC9876543210_DB2020_MEM_PATCHER_R2A012 0
LDR:080108 1810 ESGCXC1329129_DB2020_FLASHLOADER_R2A015
Flash ID check:897E
Flash props sent ok
writing "C:\Документы\Сотовые телефоны\SONY ERICSSON\W580\Прошивки\Под Setool\CID-53\R8BE001_1123362_GENERIC_LA.ssw"
CURRENT FLASH FILE CID:53
SSW uses full hash, hash len is: 9200
Will flash 460 blocks...
SSW loading returns:0
writing "C:\Документы\Сотовые телефоны\SONY ERICSSON\W580\Прошивки\Под Setool\CID-53\R8BE001_FS_RUSSIA_LA_RED_CID53.ssw"
CURRENT FLASH FILE CID:53
SSW uses full hash, hash len is: 4180
Will flash 209 blocks...
SSW loading returns:0
LDR:070904 1245 AN2CXC1250562_DB2020_CSLOADER_R3A013
loader startup: executed
loader GDFS startup: executed
loader filesystem startup: executed
loader unlock: executed
resetting usercode..
USERCODE RESET TO "0000"
using GENERIC phone customization
tpa/preset/custom/C3_PCA_G3v2.cer
tpa/preset/custom/CONTENT_DOWNLOAD_HOOK_2.itm
tpa/preset/custom/customize.xml
tpa/preset/custom/DESKTOP_HOOK_2.itm
tpa/preset/custom/Entrust.net Root Certificate.cer
tpa/preset/custom/Entrust.net_WTLS_Root_Certificate.wcrt
tpa/preset/custom/FM_PICTURES_HOOK_3.itm
tpa/preset/custom/FM_SOUNDS_HOOK_3.itm
tpa/preset/custom/FM_THEMES_HOOK_3.itm
tpa/preset/custom/FM_VIDEOS_HOOK_3.itm
tpa/preset/custom/GAMES_HOOK_3.itm
tpa/preset/custom/GTE_CyberTrust_Root.cer
tpa/preset/custom/GTE_Cybe_Trust_Root_WTLS.wcrt
tpa/preset/custom/Root.cer
tpa/preset/custom/SEMC_E2E_Root_CA.crt
tpa/preset/custom/SETT_RINGTONE_HOOK_3.itm
tpa/preset/custom/ThawtePremium.der
tpa/preset/custom/ThawteServerCA.cer
tpa/preset/custom/Utiroot.cer
tpa/preset/custom/VeriSignClass3Root.cer
tpa/preset/custom/Verisign_Class_3_CA_WTLS.wcrt
Phone detached
Elapsed: 789 secs.

Все прошилось, однако телефон так и не включается....

Какие будут мысли?