NEED URGENT, G900 GDFS in *ssw format !!

[chevka]

Hello sir, i've done reset mode for SEMC PDA G900,cause the phone got IMEI MISMACTH.

I know i should ADD GDFS in *ssw format and EROM after the phone in BROWN Condition.
Now the question,
1. can i use G700 GDFS in *ssw format for this phone (since setool software doesn't provide for this type)?
2. what is the size and lenght for READ GDFS make *ssw format from a normal G900 Phones?


TIA for your attention, :)

[green bird]

Request GDFS Post here
http://support.setool.net/showthread.php?20-GDFS-TRIM-AREA-REQUEST-THREAD

[the_laser]

and - you do not need write gdfs if your gdfs structure okay - and that is your case.

just write erom on emptyboard tab,thats all.

[chevka]

and - you do not need write gdfs if your gdfs structure okay - and that is your case.

just write erom on emptyboard tab,thats all.

Had Done ALL the procedure sir, but now the Phone only vibrate a second and hang with dark screen only.
any other way to repair this phone sir?


CFG:000000000000
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
detected MASTER on COM35, SLAVE on COM36
PDA EROM VERSION: 1202-0238 R1A01
ChipID:7100,EMP protocol:0301

PHONE STATE: "RETAIL"
FLASH CID: 0053
Speed:921600
FLASH ID:2010
OTP: LOCKED:1 CID:52 PAF:1 IMEI:35388602523522 CERT:RED
FLASH CID:53 COLOR:RED
phone model (from GDFS): G900
part number: FAD-3022019-BV
Phone part version: 1203-6566 R9N002
Organizer part version: 1203-8784 R6K842
CDA part version: 1204-3148 R6K836
CCPU part version: 1203-6568 R5C01
USERCODE:0000

Elapsed: 19 secs.
SIGNED MODE (USING SERVER)
CFG:100000000000
RESET MODE STARTED
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
detected MASTER on COM35, SLAVE on COM36
ChipID:7100,EMP protocol:0301

PHONE STATE: "RETAIL"
FLASH CID: 0053
Speed:921600
BAUDRATE DECREASED
RESET:070703 1102 NPACXC125880_DB2000_CERTRESETLOADER_P4D
FLASH ID:2010
GOT SEED:5B2E13C924805E662520D07F
P96 AUTH PASSED
OTP: LOCKED:1 CID:52 PAF:1 IMEI:35388602523522 CERT:RED
PHONE SUCCESSFULLY RESET TO DEVELOPER STATE
Elapsed: 23 secs.
CFG:000000000000
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
detected MASTER on COM35, SLAVE on COM36
ChipID:7100,EMP protocol:0301

PHONE STATE: "DEVELOPER"
FLASH CID: 0049
Speed:921600
OTP: LOCKED:1 CID:52 PAF:1 IMEI:35388602523522 CERT:BROWN
LDR:060529 0823 LIECXC1325712_DB2000_PRODUCTION_R1A002
writing "C:\setool2g\eroms\db2000\pda_ccpu_convert_red53_BR OWN_CID49_DB2001.software"
CURRENT FLASH FILE CID:49
SSW uses full hash, hash len is: 20
Will flash 1 blocks...
Setting up GDFS...
OTP WRITE NOT EXECUTED
WRITING CLEAR SIMLOCK UNITS...
ALL UNLOCK/LOCK CODES SET TO "10217812"
SIGNING...
Elapsed: 26 secs.
CFG:000000000000
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
detected MASTER on COM35, SLAVE on COM36
PDA EROM VERSION: 1202-0238 R1A01
ChipID:7100,EMP protocol:0301

PHONE STATE: "RETAIL"
FLASH CID: 0053
Speed:921600
FLASH ID:2010
OTP: LOCKED:1 CID:52 PAF:1 IMEI:35388602523522 CERT:RED
FLASH CID:53 COLOR:RED
phone model (from GDFS): G900
part number: FAD-3022019-BV
Phone part version: 1203-6566 R9N002
Organizer part version: 1203-8784 R6K842
CDA part version: 1204-3148 R6K836
CCPU part version: 1203-6568 R5C01
USERCODE:0000

Elapsed: 20 secs.
SIGNED MODE (USING SERVER)
CFG:100000000000
writing "D:\Flasher Box\SE-Tool\Firmware & Flash Files\SonyEricsson\G900\G900_MR2_WORLD1__R9N002_R1 F_R6K842_R6K836_.zip"
Processing package
D:\Flasher Box\SE-Tool\Firmware & Flash Files\SonyEricsson\G900\G900_MR2_WORLD1__R9N002_R1 F_R6K842_R6K836_.zip

detected MASTER on COM35, SLAVE on COM36
PDA EROM VERSION: 1202-0238 R1A01
package not contains ISP files
Processing ACPU files
PROCESSING: Core OS
FILE FLASHED OK
PROCESSING: ROFS1
FILE FLASHED OK
PROCESSING: ROFS1 Extension
FILE FLASHED OK
PROCESSING: ROFS2
FILE FLASHED OK
PROCESSING: USERDATA
FILE FLASHED OK
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
fetched MASTER on COM35, SLAVE on COM36
ChipID:7100,EMP protocol:0301

PHONE STATE: "RETAIL"
FLASH CID: 0053
Speed:921600
OTP: LOCKED:1 CID:52 PAF:1 IMEI:35388602523522 CERT:RED
LDR:060524 0930 LIECXC1325414_DB2000_FLASHLOADER_R1A003
FLASH ID:2010
Processing CCPU files
PROCESSING: R5C01_CXC162175_CCPU_fs_EN_Red_CID53_DB2001.softwa re
CURRENT FLASH FILE CID:53
SSW uses full hash, hash len is: 160
Will flash 8 blocks...
PROCESSING: R9N002_CXC162037_CCPU_EN_MO_Red_CID53_DB2001.softw are
CURRENT FLASH FILE CID:53
SSW uses full hash, hash len is: 2120
Will flash 106 blocks...
Processing update files
LDR:070405 1245 NPA1_CXC1327363_1_SEMC_CS_LOADER_1_P1E
loader startup: executed
loader GDFS startup: executed
loader unlock: executed
PROCESSING: R6G804_CAH1621133_Settings_TY_LockRemoved.gdfs
Writing GDFS var 0002/06D6/0001
Writing GDFS var 0002/06D4/0005
Writing GDFS var 0002/06D3/000F
Writing GDFS var 0000/0094/0001
PROCESSING: R6K842_CAH1621133_PUQData_TY_World1.gdfs
Writing GDFS var 0002/079E/0053
Elapsed: 475 secs.

[the_laser]

now check hardware, from software view phone okay.

[chevka]

now check hardware, from software view phone okay.

OK, now i flash GDFS in *.bin format that i read from a normal working phone.
The phone can startup normaly until when i insert simcard, its asking me security code.
what's been so funny is after press 0000 then the phone ask new security code but i can not press anykey (it hangs)
when identify software shows IMEI MISMACTH !!

I'll post the log tomorrow cayse right now i'm at home :p

[the_laser]

that good that phone startup okay with gdfs from working phone, somehow i think that you used it from start ;)

make recovery again, but that time not write gdfs, just write erom on emptyboard tab.
it will recalculate security zone automatically and phone should start to work.

[chevka]

that good that phone startup okay with gdfs from working phone, somehow i think that you used it from start ;)

make recovery again, but that time not write gdfs, just write erom on emptyboard tab.
it will recalculate security zone automatically and phone should start to work.


Now i start again from the begining,
Reset phone and write erom but phone still hang with dark screen only.


v0.915057/UNI
CARD SERIAL: 00043xxx
Loaded 51 flash descriptors
CFG:000000000000
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
detected MASTER on COM35, SLAVE on COM36
PDA EROM VERSION: 1202-0238 R1A01
ChipID:7100,EMP protocol:0301

PHONE STATE: "RETAIL"
FLASH CID: 0053
Speed:921600
FLASH ID:2010
OTP: LOCKED:1 CID:52 PAF:1 IMEI:35388602523522 CERT:RED
FLASH CID:53 COLOR:RED
phone model (from GDFS): G900
part number: FAD-3022019-BV
Phone part version: 1203-6566 R9N002
Organizer part version: 1203-8784 R6K842
CDA part version: 1204-3148 R6K836
CCPU part version: 1203-6568 R5C01
USERCODE:0000

Elapsed: 22 secs.
SIGNED MODE (USING SERVER)
CFG:100000000000
RESET MODE STARTED
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
detected MASTER on COM35, SLAVE on COM36
ChipID:7100,EMP protocol:0301

PHONE STATE: "RETAIL"
FLASH CID: 0053
Speed:921600
BAUDRATE DECREASED
RESET:070703 1102 NPACXC125880_DB2000_CERTRESETLOADER_P4D
FLASH ID:2010
GOT SEED:AC01B21A24805E662520D07F
P96 AUTH PASSED
OTP: LOCKED:1 CID:52 PAF:1 IMEI:35388602523522 CERT:RED
PHONE SUCCESSFULLY RESET TO DEVELOPER STATE
Elapsed: 33 secs.
CFG:000000000000
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
detected MASTER on COM35, SLAVE on COM36
ChipID:7100,EMP protocol:0301

PHONE STATE: "DEVELOPER"
FLASH CID: 0049
Speed:921600
OTP: LOCKED:1 CID:52 PAF:1 IMEI:35388602523522 CERT:BROWN
LDR:060529 0823 LIECXC1325712_DB2000_PRODUCTION_R1A002
writing "C:\setool2g\eroms\db2000\pda_ccpu_convert_red53_BR OWN_CID49_DB2001.software"
CURRENT FLASH FILE CID:49
SSW uses full hash, hash len is: 20
Will flash 1 blocks...
Setting up GDFS...
OTP WRITE NOT EXECUTED
WRITING CLEAR SIMLOCK UNITS...
ALL UNLOCK/LOCK CODES SET TO "72254743"
SIGNING...
Elapsed: 28 secs.




Then I write GDFS in *.bin format from a working phone,
Now the Phone can shows insert simcard but if i insert the simcard the story is just like i told above.
(asking security code but after press 0000 then the phone ask new security code but i can not press anykey (it hangs/stuck))



SIGNED MODE (USING SERVER)
CFG:100000000000
Will write GDFS now.
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
detected MASTER on COM35, SLAVE on COM36
ChipID:7100,EMP protocol:0301

PHONE STATE: "RETAIL"
FLASH CID: 0053
Speed:921600
OTP: LOCKED:1 CID:52 PAF:1 IMEI:35388602523522 CERT:RED
LDR:060524 0930 LIECXC1325414_DB2000_FLASHLOADER_R1A003
FLASH ID:2010
LDR:070405 1245 NPA1_CXC1327363_1_SEMC_CS_LOADER_1_P1E
loader startup: executed
loader GDFS startup: executed
loader unlock: executed
will write 840 units
done
Phone detached
Elapsed: 76 secs.
SIGNED MODE (USING SERVER)
CFG:100000000000
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
detected MASTER on COM35, SLAVE on COM36
PDA EROM VERSION: 1202-0238 R1A01
ChipID:7100,EMP protocol:0301

PHONE STATE: "RETAIL"
FLASH CID: 0053
Speed:921600
FLASH ID:2010
OTP: LOCKED:1 CID:52 PAF:1 IMEI:35388602523522 CERT:RED
FLASH CID:53 COLOR:RED
IMEI MISMATCH ! GDFS IMEI:35388602213177
phone model (from GDFS): G900
part number: FAD-3022019-BV
Phone part version: 1203-6566 R9N002
Organizer part version: 1203-8784 R6K842
CDA part version: 1204-3148 R6K836
CCPU part version: 1203-6568 R5C01
USERCODE:0000

Elapsed: 17 secs.



Now it's the last condition of the phone, then i try to unlock it (use server full signature) but it stuck cause the IMEI is MISMACTH :-(.


SIGNED MODE (USING SERVER)
CFG:100000000000
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
detected MASTER on COM35, SLAVE on COM36
ChipID:7100,EMP protocol:0301

PHONE STATE: "RETAIL"
FLASH CID: 0053
Speed:921600
OTP: LOCKED:1 CID:52 PAF:1 IMEI:35388602523522 CERT:RED
LDR:060524 0930 LIECXC1325414_DB2000_FLASHLOADER_R1A003
FLASH ID:2010
LDR:070405 1245 NPA1_CXC1327363_1_SEMC_CS_LOADER_1_P1E
Executing CSCA-based unlock.
loader startup: executed
loader GDFS startup: executed
loader unlock: executed
Checking for signature...
signature found, skipping calculation
Backup security data...
Erasing locks...

DISCONNECT PHONE NOW
REMOVE SIM CARD, FULLY TURN PHONE ON AND ATTACH AGAIN
INSTALL PHONE MODEM DRIVERS IF NEEDED

TRYING TO RESET PDA PHONE...
SEARCHING FOR PHONE, "STOP" TO ABORT
PROCEDURE WAS STOPPED BY USER
Can't read IMEI (COM62)
Can't find attached phone with IMEI 35388602523522
CSCA UNLOCK FAILED
Elapsed: 611 secs.


Can i backup the security unit/IMEI in PDA 200x based using script like DB2020/DB2012? how to make that for PDA phone:p?
What size and lenght for read gdfs in *ssw format for PDA phone?

[chevka]

with last condition,
Phone can shows insert simcard but if i insert the simcard the story is just like i told above.
(asking security code but after press 0000 then the phone ask new security code but i can not press anykey (it hangs/stuck))
I try to reset the phone again and write erom.


SIGNED MODE (USING SERVER)
CFG:100000000000
RESET MODE STARTED
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
detected MASTER on COM35, SLAVE on COM36
ChipID:7100,EMP protocol:0301

PHONE STATE: "RETAIL"
FLASH CID: 0053
Speed:921600
BAUDRATE DECREASED
RESET:070703 1102 NPACXC125880_DB2000_CERTRESETLOADER_P4D
FLASH ID:2010
GOT SEED:0C750A8D24805E662520D07F
P96 AUTH PASSED
OTP: LOCKED:1 CID:52 PAF:1 IMEI:35388602523522 CERT:RED
PHONE SUCCESSFULLY RESET TO DEVELOPER STATE
Elapsed: 21 secs.
CFG:000000000000
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
detected MASTER on COM35, SLAVE on COM36
ChipID:7100,EMP protocol:0301

PHONE STATE: "DEVELOPER"
FLASH CID: 0049
Speed:921600
OTP: LOCKED:1 CID:52 PAF:1 IMEI:35388602523522 CERT:BROWN
LDR:060529 0823 LIECXC1325712_DB2000_PRODUCTION_R1A002
writing "C:\setool2g\eroms\db2000\pda_ccpu_convert_red53_BR OWN_CID49_DB2001.software"
CURRENT FLASH FILE CID:49
SSW uses full hash, hash len is: 20
Will flash 1 blocks...
Setting up GDFS...
OTP WRITE NOT EXECUTED
WRITING CLEAR SIMLOCK UNITS...
ALL UNLOCK/LOCK CODES SET TO "01636176"
SIGNING...
Elapsed: 24 secs.


Phone back to this condition: Phone still hang with dark screen only :(


Here's I attach the GDFS backup from the last condition of the phone, maybe you can find something that could help.

SIGNED MODE (USING SERVER)
CFG:100000000000
Will backup GDFS now.
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
detected MASTER on COM35, SLAVE on COM36
ChipID:7100,EMP protocol:0301

PHONE STATE: "RETAIL"
FLASH CID: 0053
Speed:921600
OTP: LOCKED:1 CID:52 PAF:1 IMEI:35388602523522 CERT:RED
LDR:060524 0930 LIECXC1325414_DB2000_FLASHLOADER_R1A003
FLASH ID:2010
LDR:070405 1245 NPA1_CXC1327363_1_SEMC_CS_LOADER_1_P1E
loader startup: executed
loader GDFS startup: executed
loader unlock: executed
stated number of vars:844
Found:838 units
Found:6 units
GDFS_35388602523522.BIN written
Phone detached
Elapsed: 58 secs.

[the_laser]

your phone has hardware problems. that is final.

[aashir]

sir .. g900 5 lock closed how to unlock

[the_laser]

execute reset operation.