暴力破解机无法修复的问题？

loquat

大家看看我的S75，不能修复的问题。。。

按这个帖子的做法。http://mobile.0110.cn/viewthread.php?tid=385045
Auto Ignition...
Transfer boot...
BOOT is loaded...
Pause 2 sec...
Getting Information...
FlashID: 0001,227E (64Mb)
Cleared New Flash?
OTP ESN: 47F923A7
OTP IMEI: It is not written down or incorrect (机身上的IMEI和*#06#中的不同。papua读出的和*#06#的一样。)
Established speed 1228800 Baud.
Test data bus D0..D15...OK.
Test address bus A2..A22...OK.
Bcore S/SL75 found
Rea由于非常钦佩楼主，不得不说声好！ of segment BCORE...
Search of a segment EELITE...
Search of a segments EEFULL...
Find blocks: 52,76,5008,5009,5077,5121,5122,5123
In total EEP blocks: 238
Replacement of blocks EEPROM in the buffer ...
EEPROM: Block 76 does not require replacement.
EEPROM: Block 52 replaced.
EEPROM: Block 5008 replaced.
EEPROM: Block 5077 replaced.
EEPROM: Block 5009 does not require replacement.
EEPROM: Block 5123 replaced.
EEPROM: Block 5121 replaced.
New Master codes:
*#0000*12345678#
*#0001*12345678#
*#0002*12345678#
*#0003*12345678#
*#0004*12345678#
*#0005*12345678#
EEPROM: Block 5122 replaced.
BCORE "Cleared", recalculation impossible
Record of the changed blocks in phone...
Write down EEPROM segments...
Error of a code of acknowledgement of a command of deleting of a segment A0040000!
No acknowledgement of a command of write of a segment A0040000!
Write: addr:A0040000,size:00020000, buf:45 45 4C 49 54
EEPROM write down error!
Repeat operation!

然后试这个帖子里4楼的方法：http://mobile.0110.cn/viewthread.php?tid=359204
Auto Ignition...
Transfer boot...
BOOT is loaded...
Pause 2 sec...
Getting Information...
FlashID: 0001,227E (64Mb)
Cleared New Flash?
OTP ESN: 47F923A7
OTP IMEI: It is not written down or incorrect
Established speed 1228800 Baud.
Test data bus D0..D15...OK.
Test address bus A2..A22...OK.
Was BCORE versions : "main_1.0_V11 "
Write down BCORE version: "main_1.0_V11 "
Error of a code of acknowledgement of a command of deleting of a segment A0000000!
No acknowledgement of a command of write of a segment A0000000!
Write: addr:A0000000,size:00008000, buf:04 F0 1F E5 9C
BCORE write down Error!
Repeat operation!

loquat

我已经尝试过Nospel的教程：http://mobile.0110.cn/viewthread.php?tid=332134
和camlee的教程：http://mobile.0110.cn/viewthread.php?tid=249140
好像都要求三码一致的，我的不一致。怎么弄啊。
是打补丁刷入IMEI吗？

chihlee

最简单的方法,在明西区的置顶帖里有的.我昨天看了论坛教程看了一天都搞不懂,今天早上就是看了明西区的置顶帖才修复好的.很简单.有图的

loquat

你说的就是nospel的教程吧？
http://mobile.0110.cn/viewthread.php?tid=332134

chihlee

不是,那个太复杂了.
http://mobile.0110.cn/viewthread ... &extra=page%3D1

chihlee

机身上的IMEI和*#06#中的不同。papua读出的和*#06#的一样。
机身上帖的和*#06#的不同没关系,只要手机里的和papua读出的一样就行了

loquat

哦？
我刚自己找到了你的那个烧烧写的教程。
先试试。帖出俺的手机信息，看有没有高手有灵感支持提醒。

Getting Information:
Model: SIEMENS S7C 47 lg8
Phone is in "Normal Mode". SecurityStatus: "CustomerMode"
IMEI: 356702009929267
HWID: 400
Accumulator Voltage: 4107 mV.
Code(04): OTP is Open for write
Code(08): BootKEY is unknown
Code(0C): Keys is not present in BCORE (cleared)
Code(10): BFC functions are inaccessible
Code(15): Full mode (not SC)
Code(1A): Block 76 is accessible
Code(1D): 512x blocks presents
EELITE Info: free buffer 37828 bytes, free at all 105164 bytes, free for deleted 105164 bytes.
EEFULL Info: free buffer 49560 bytes, free at all 204359 bytes, free for deleted 73319 bytes.
MAP info: Date: 21/09/05, Variant: A 100, Std-Map/SW: 1/47, D-Map/Prov.: 165/243
To Get Extended Info - Enter Skey into the phone!
Phone operated: 623450 sec.. Total Talk time: 5135 sec.
FlashID(2) - Manufact. code:0001, type: 227E2230. DisplayID(1,49): Alps Solomon SSD1286.

loquat

我一直不太清楚。
esn到死是哪个？
PhoneID：0x47F923A7 = A723F947我的esn是哪个呢？

chihlee

papua有3个版本,一个是中文的V075B,一个是半中文半乱码字的.V079C4,一个是英文的V11.1B.看信息用中文的,按教程使用用V11.1B

chihlee

esn在手机上看到是47F923A7 ,在电脑上输入的时候就是A723F947

chihlee

在手机上运行BsReader看你的ESN和HSAH

loquat

hash全部F

chihlee

全是F不怕的.照着教程做就可以了.SKY码自己写,然后生成新的HASH和BKEY.

loquat

嗯，我先试试吧。
不行再求助你。。。

loquat

我的手机买来就是暴力破解的。
哪里来的跟我手机对应型号没有暴力破解能正常备份的EEP和BOOTCORE.FBK文件？

loquat

难道用别人的bootcore和eep？

Nospel

FTP里面我刚上传了

Nospel

哦，更正一下，下载泡泡备份里面的。我见有泡泡的就没重复上传自己的了

askman1123

越听LS几个干的事情越玄乎

loquat

按方法修复后B一声不能开机了。。。