hướng dẫn fix Downgrade BB5 bằng ATF

[GIALAI_GSM]

ở bản 7.90 đã hỗ trợ fix downgrade
nhiều khi phone flash vetson thấp hơn mà mình quên không downgrade hoặc trong quá trình flash downgrade bị lỗi ở box khác gây lên hiện tượng lên nokia rồi tắt. cho vào ATF chỉ làm theo hình sau là ok








đây là log mới fix 1 cây 5200

VBATT OFF...
VBATT ON
Setting VBATT Done!...
VBATT OFF...
VBATT ON
Setting VBATT Done!...

AdvanceFBox SendBootCodeEx
InitialiseBootstrap_DCT5 DIR
BootFlashMode_DCT5

************************************************** ****
TIME STARTS HERE
************************************************** ****

BootFlashModeDCT5Ex Succeeded after 7 Attempts
SYSTEM_ID_RESPONSE_BB5 (0xC0) - 73399944 (0x88) bytes returned
Number of Sub Blocks 7 (0x07)
1 SYSTEM_ASIC_ID 01
Block Length : 21 (15)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000001
ID DWORD 1 : 00000226
ID DWORD 2 : 00010006
ID DWORD 3 : 010C1921
ID DWORD 4 : 01001101
2 ROM_ID 15
Block Length : 5 (05)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000232
3 ROM_ID 15
Block Length : 5 (05)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000353
4 PUBLIC_ID 12
Block Length : 21 (15)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 0F10010D
ID DWORD 1 : 4B8A6E56
ID DWORD 2 : 29A64C0C
ID DWORD 3 : F6E39A5B
ID DWORD 4 : 0C71DB36
5 ASIC_MODE_ID 13
Block Length : 2 (02)
BB ASIC Index : 0 (00) CMT
Mode Id : 00
6 ROOT_KEY_HASH 14
Block Length : 17 (11)
BB ASIC Index : 0 (00) CMT
Hash : BA F3 A9 C3 DB FA 84 54 93 7D B7 7F 2B 88 52 B1
7 ROM_ID 15
Block Length : 9 (09)
BB ASIC Index : 0 (00) CMT
CRC 0 : 191EC665
CRC 1 : DFAAF68F
Checksum C6

SearchForBootstrap_DCT5..
CMT Loader : C:\AdvanceBox Turbo Flasher\Nokia\BB5_Loader\New\RAP3Gv3_2nd.fg
SearchForBootstrap_DCT5 : No Error - 0 (0x00)
Secondary Loader Sent...
ConfigurationRequest_DCT5 (RAM_SIZE_BB5 0x0000)..
MCU_CONFIGURATION_RESPONSE_BB5:
MessageID : C1
SubBlocks : 03
1 Sub Block ID : 10 STORAGE_DEVICE_ID_BB5
Block Length : 0B
BB ASIC Index : CMT 00
Device Type : NOR 00
Device Index : 00
Manufacturer Code : 00EC ->
Device ID : 2208 -> K8F5615ETM/K5G5629ATD
Extended/Fixed ID : 0000
Revision ID : 6921
2 Sub Block ID : 11 STORAGE_DEVICE_CONTENTS_BB5
Block Length : 13
BB ASIC Index : CMT 00
Device Type : NOR 00
Device Index : 00
Device Contents : 00000000000000000000
3 Sub Block ID : 10 STORAGE_DEVICE_ID_BB5
Block Length : 0B
BB ASIC Index : CMT 00
Device Type : MMC 04
Device Index : 00
Manufacturer Code : FFFF -> Flash
Device ID : 0000 -> BAD FLASH TYPE
Extended/Fixed ID : 0000
Revision ID : 0000
Checksum : 00
SearchForBootstrap_DCT5 : No Error - 0 (0x00)
FLS1SendAlgoCodeEx..
SendAlgoCode_DCT5..
SearchForAlgorithm_DCT5..
Looking for ALL Devices...
Searching Algorithm Files NOR (00) ManID :00EC DevID :2208 ExtID :0000 RevID :6921
RAP3Gv3_algo.fg
First Algo byte : C0
Flash Descriptor
Manufacturer Code : 00EC
Device ID : 2208
Extended/Fixed ID : 0000
Revision ID : 0000
Size : 02000000 (32 MB)
VPP Info : 0009
Erase10s : 28
Block1s : 32
BErase1s : 02
Reserved0 : 00
Reserved1 : 00
Reserved2 : 00
VPP INFO : VPP_INFO_3V_MASK VPP_INFO_9V_MASK
C: \AdvanceBox Turbo Flasher\Nokia\BB5_Loader\New\RAP3Gv3_algo.fg
SearchForAlgorithm_DCT5 : No Error - 0 (0x00)
TransmissionTypeRequest_DCT5...
SuggestedType : 01 16BIT
TRANSMISSION_TYPE_REQUEST_BB5 : 59 01 20 01 01 DC
ReturnedType : 01 16BIT
TransmissionTypeRequest_DCT5 : No Error - 0 (0x00)

Uploading ALGO File...
SendAlgoCodeFile_DCT5 : No Error - 0 (0x00)
Pabub KEY Request
PhoneInfoRequest_BB5 (Asic Index 00 )
PHONE_INFO_RESPONSE_BB5
PAPUB_KEYS_HASH_RESP_BB5 2A
BB Asic Index : 01
PAPUB Keys Hash : D6D07E588DC4E06DEE7012A3C0ECC4E35D3CE263

Scanning Simlock Type...
OK

================================================
SL1/SL2 Phone detected
================================================

FlashInfo.RestartMode : 2

AdvanceFBox SendBootCodeEx
InitialiseBootstrap_DCT5 DIR
BootFlashMode_DCT5

************************************************** ****
TIME STARTS HERE
************************************************** ****

BootFlashModeDCT5Ex Succeeded First Time
SYSTEM_ID_RESPONSE_BB5 (0xC0) - 1243720 (0x48) bytes returned
Number of Sub Blocks 7 (0x07)
1 SYSTEM_ASIC_ID 01
Block Length : 21 (15)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000001
ID DWORD 1 : 00000226
ID DWORD 2 : 00010006
ID DWORD 3 : 010C1921
ID DWORD 4 : 01001101
2 ROM_ID 15
Block Length : 5 (05)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000232
3 ROM_ID 15
Block Length : 5 (05)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000353
4 PUBLIC_ID 12
Block Length : 21 (15)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 0F10010D
ID DWORD 1 : 4B8A6E56
ID DWORD 2 : 29A64C0C
ID DWORD 3 : F6E39A5B
ID DWORD 4 : 0C71DB36
5 ASIC_MODE_ID 13
Block Length : 2 (02)
BB ASIC Index : 0 (00) CMT
Mode Id : 00
6 ROOT_KEY_HASH 14
Block Length : 17 (11)
BB ASIC Index : 0 (00) CMT
Hash : BA F3 A9 C3 DB FA 84 54 93 7D B7 7F 2B 88 52 B1
7 ROM_ID 15
Block Length : 9 (09)
BB ASIC Index : 0 (00) CMT
CRC 0 : 191EC665
CRC 1 : DFAAF68F
Checksum C6

SearchForBootstrap_DCT5..
CMT Loader : C:\AdvanceBox Turbo Flasher\Nokia\BB5_Loader\New\RAP3Gv3_2nd.fg
SearchForBootstrap_DCT5 : No Error - 0 (0x00)
Secondary Loader Sent...
ConfigurationRequest_DCT5 (RAM_SIZE_BB5 0x0000)..
MCU_CONFIGURATION_RESPONSE_BB5:
MessageID : C1
SubBlocks : 03
1 Sub Block ID : 10 STORAGE_DEVICE_ID_BB5
Block Length : 0B
BB ASIC Index : CMT 00
Device Type : NOR 00
Device Index : 00
Manufacturer Code : 00EC ->
Device ID : 2208 -> K8F5615ETM/K5G5629ATD
Extended/Fixed ID : 0000
Revision ID : 6921
2 Sub Block ID : 11 STORAGE_DEVICE_CONTENTS_BB5
Block Length : 13
BB ASIC Index : CMT 00
Device Type : NOR 00
Device Index : 00
Device Contents : 00000000000000000000
3 Sub Block ID : 10 STORAGE_DEVICE_ID_BB5
Block Length : 0B
BB ASIC Index : CMT 00
Device Type : MMC 04
Device Index : 00
Manufacturer Code : FFFF -> Flash
Device ID : 0000 -> BAD FLASH TYPE
Extended/Fixed ID : 0000
Revision ID : 0000
Checksum : 00
SearchForBootstrap_DCT5 : No Error - 0 (0x00)
FLS1SendAlgoCodeEx..
SendAlgoCode_DCT5..
SearchForAlgorithm_DCT5..
Looking for ALL Devices...
Searching Algorithm Files NOR (00) ManID :00EC DevID :2208 ExtID :0000 RevID :6921
RAP3Gv3_algo.fg
First Algo byte : C0
Flash Descriptor
Manufacturer Code : 00EC
Device ID : 2208
Extended/Fixed ID : 0000
Revision ID : 0000
Size : 02000000 (32 MB)
VPP Info : 0009
Erase10s : 28
Block1s : 32
BErase1s : 02
Reserved0 : 00
Reserved1 : 00
Reserved2 : 00
VPP INFO : VPP_INFO_3V_MASK VPP_INFO_9V_MASK
C: \AdvanceBox Turbo Flasher\Nokia\BB5_Loader\New\RAP3Gv3_algo.fg
SearchForAlgorithm_DCT5 : No Error - 0 (0x00)
TransmissionTypeRequest_DCT5...
SuggestedType : 01 16BIT
TRANSMISSION_TYPE_REQUEST_BB5 : 59 01 20 01 01 DC
ReturnedType : 01 16BIT
TransmissionTypeRequest_DCT5 : No Error - 0 (0x00)

Uploading ALGO File...
SendAlgoCodeFile_DCT5 : No Error - 0 (0x00)
Pabub KEY Request
PhoneInfoRequest_BB5 (Asic Index 00 )
PHONE_INFO_RESPONSE_BB5
PAPUB_KEYS_HASH_RESP_BB5 2A
BB Asic Index : 01
PAPUB Keys Hash : D6D07E588DC4E06DEE7012A3C0ECC4E35D3CE263

Scanning Simlock Type...
OK

================================================
SL1/SL2 Phone detected
================================================

START READING RPL DATA
Reading : NPC
OK
FINISHED READING RPL DATA
RPL saved to: C:\AdvanceBox Turbo Flasher\Nokia\backup\358659013658381\3586590136583 81_91239.rpl
StartErase_DCT5...
BlockLength : 0x10 (16)
ERASE Blocks : 0x01 (1)
0 ERASE_AREA_BB5 0x13
Block Length : 0x0D (13)
BB ASIC Index : 0x00 CMT

ERASE_REQUEST_BB5 : 5001130D004E5043000000000000000000FD
ERASING in Progress... Please Wait...
Status_BB5 STATUS_REQUEST_BB5..
1 Sub Block ID : 14 STATUS_NOR_OK_BB5
Block Length : 01
BB ASIC Index : 00

Successfully erased..
FlashInfo.RestartMode : 2

Wait InTask Delay 10 Seconds...
MCU: V 05.00 27-04-07 RM-174 (c) Nokia.
IMEI: 12345610654321?
Model : Nokia 5200
Product Serial Number: DTA723686
Product Code : 0535512
Module Code : 0203053
Basic Production Code: 0530542
MCU SW Version : V 05.00 27-04-07 RM-174 (c) Nokia. V
BT MCM Version : 06cc-P9.1
PPM Version : V 05.00 27-04-07 RM-174 (c) Nokia.
HW Version : 2003
RFIC Version : 17211721
DSP Version : pb06w14v51
AHNE Version : 11
Retu Version : 32
Tahvo Version : 53

******** Reading SimLock ********
CONFIG KEY: 0000000000000000
PROVIDER KEY: 2440700000000000
Provider : AT&T;U.S.A. (3650)
Counters : 0/3 , 0/10
Block [1] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [2] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [3] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [4] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [5] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [6] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [7] 1:Open 2:Open 3:Open 4:Open 5:Open
SP Lock Status : Not Locked

SIMLOCK_TEST : PASSED
SECURITY_TEST : PASSED
SECURITY_CODE : 12345
PHONE_MODE : TEST MODE



AdvanceFBox SendBootCodeEx
InitialiseBootstrap_DCT5 DIR
BootFlashMode_DCT5

************************************************** ****
TIME STARTS HERE
************************************************** ****

BootFlashModeDCT5Ex Succeeded First Time
SYSTEM_ID_RESPONSE_BB5 (0xC0) - 1243776 (0x80) bytes returned
Number of Sub Blocks 7 (0x07)
1 SYSTEM_ASIC_ID 01
Block Length : 21 (15)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000001
ID DWORD 1 : 00000226
ID DWORD 2 : 00010006
ID DWORD 3 : 010C1921
ID DWORD 4 : 01001101
2 ROM_ID 15
Block Length : 5 (05)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000232
3 ROM_ID 15
Block Length : 5 (05)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000353
4 PUBLIC_ID 12
Block Length : 21 (15)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 0F10010D
ID DWORD 1 : 4B8A6E56
ID DWORD 2 : 29A64C0C
ID DWORD 3 : F6E39A5B
ID DWORD 4 : 0C71DB36
5 ASIC_MODE_ID 13
Block Length : 2 (02)
BB ASIC Index : 0 (00) CMT
Mode Id : 00
6 ROOT_KEY_HASH 14
Block Length : 17 (11)
BB ASIC Index : 0 (00) CMT
Hash : BA F3 A9 C3 DB FA 84 54 93 7D B7 7F 2B 88 52 B1
7 ROM_ID 15
Block Length : 9 (09)
BB ASIC Index : 0 (00) CMT
CRC 0 : 191EC665
CRC 1 : DFAAF68F
Checksum C6

SearchForBootstrap_DCT5..
CMT Loader : C:\AdvanceBox Turbo Flasher\Nokia\BB5_Loader\New\RAP3Gv3_2nd.fg
SearchForBootstrap_DCT5 : No Error - 0 (0x00)
Secondary Loader Sent...
ConfigurationRequest_DCT5 (RAM_SIZE_BB5 0x0000)..
MCU_CONFIGURATION_RESPONSE_BB5:
MessageID : C1
SubBlocks : 03
1 Sub Block ID : 10 STORAGE_DEVICE_ID_BB5
Block Length : 0B
BB ASIC Index : CMT 00
Device Type : NOR 00
Device Index : 00
Manufacturer Code : 00EC ->
Device ID : 2208 -> K8F5615ETM/K5G5629ATD
Extended/Fixed ID : 0000
Revision ID : 6921
2 Sub Block ID : 11 STORAGE_DEVICE_CONTENTS_BB5
Block Length : 13
BB ASIC Index : CMT 00
Device Type : NOR 00
Device Index : 00
Device Contents : 00000000000000000000
3 Sub Block ID : 10 STORAGE_DEVICE_ID_BB5
Block Length : 0B
BB ASIC Index : CMT 00
Device Type : MMC 04
Device Index : 00
Manufacturer Code : FFFF -> Flash
Device ID : 0000 -> BAD FLASH TYPE
Extended/Fixed ID : 0000
Revision ID : 0000
Checksum : 00
SearchForBootstrap_DCT5 : No Error - 0 (0x00)
FLS1SendAlgoCodeEx..
SendAlgoCode_DCT5..
SearchForAlgorithm_DCT5..
Looking for ALL Devices...
Searching Algorithm Files NOR (00) ManID :00EC DevID :2208 ExtID :0000 RevID :6921
RAP3Gv3_algo.fg
First Algo byte : C0
Flash Descriptor
Manufacturer Code : 00EC
Device ID : 2208
Extended/Fixed ID : 0000
Revision ID : 0000
Size : 02000000 (32 MB)
VPP Info : 0009
Erase10s : 28
Block1s : 32
BErase1s : 02
Reserved0 : 00
Reserved1 : 00
Reserved2 : 00
VPP INFO : VPP_INFO_3V_MASK VPP_INFO_9V_MASK
C: \AdvanceBox Turbo Flasher\Nokia\BB5_Loader\New\RAP3Gv3_algo.fg
SearchForAlgorithm_DCT5 : No Error - 0 (0x00)
TransmissionTypeRequest_DCT5...
SuggestedType : 01 16BIT
TRANSMISSION_TYPE_REQUEST_BB5 : 59 01 20 01 01 DC
ReturnedType : 01 16BIT
TransmissionTypeRequest_DCT5 : No Error - 0 (0x00)

Uploading ALGO File...
SendAlgoCodeFile_DCT5 : No Error - 0 (0x00)
Pabub KEY Request
PhoneInfoRequest_BB5 (Asic Index 00 )
PHONE_INFO_RESPONSE_BB5
PAPUB_KEYS_HASH_RESP_BB5 2A
BB Asic Index : 01
PAPUB Keys Hash : D6D07E588DC4E06DEE7012A3C0ECC4E35D3CE263
VPP Enabled by Software
Using Internal VPP
TRANSMISSION_TYPE_REQUEST_BB5 : 59 01 20 01 04 D9
ReturnedType : 04 DDRand2TX
TransmissionTypeRequest_DCT5 : No Error - 0 (0x00)

StartErase_DCT5...
BlockLength : 0x10 (16)
ERASE Blocks : 0x01 (1)
0 ERASE_AREA_BB5 0x13
Block Length : 0x0D (13)
BB ASIC Index : 0x00 CMT

ERASE_REQUEST_BB5 : 5001130D004E5043000000000000000000FD
ERASING in Progress... Please Wait...
Status_BB5 STATUS_REQUEST_BB5..
1 Sub Block ID : 14 STATUS_NOR_OK_BB5
Block Length : 01
BB ASIC Index : 00

Successfully erased..
Found : NPC 0x2FF8
Write Ok
RPL Write Done!
FlashInfo.RestartMode : 2
Waiting for Phone to Go Online...
Elapsed Time: 1s
Elapsed Time: 2s
Elapsed Time: 3s
Elapsed Time: 4s
Elapsed Time: 5s
Elapsed Time: 6s

ERROR : PHONE READ INFO FAILED

Use "BUSCHECK" Button to Force the Phone
into Local Mode... Then "SCANPHONE" after.

For N95, N95-8GB and E90 Phones, you need a
Test Mode Adapter to provide some Extra Power
so that the Phone will go into Local Mode...