🚀 go-pugleaf

I to chyba właśnie będą te komendy.

#v+
    Set ComPort to 9600 bps, 8 data bits, 1 stop
    bit and no parity (see your program docs)

    Power on the phone by pressing NO -> the phone
    will send two ">>" (ASCII 62 dec.) characters

    Wait 1 second,and then reply to it by sending
    the 4 character sequence "TP1<CR>"

    If everything went ok, you should get the 
    "OK" prompt and you're in test mode :)

    What to do now that you have the phone in test mode?

    Test the TEST PROGRAM by sending the commands terminated by a <CR>

    PROG 0 (shows Test Program product number info)
    PROG 1 (shows Test Program product date info)
    PROG 3 (Shows Main Application product number info)
    PROG D (Shows Main Application product date info)

    Enabling/disabling Calculator and RBS info

    EEWR 047A 01 (enables calculator and RBS info - wait for the "OK" prompt,
    power off the phone, power on again and browse through the menus)

    EEWR 047A 00 (disables calculator and RBS info- do the same as above)

    Clearing Electronic Lock
    To clear the electronic lock you have to clear the EEPROM 
    address range 045B to 0466 by sending the commands:

    EEWR 045B 00
    EEWR 045C 00
    EEWR 045D 00
    EEWR 045E 00
    EEWR 045F 00
    EEWR 0460 00
    EEWR 0461 00
    EEWR 0462 00
    EEWR 0463 00
    EEWR 0464 00
    EEWR 0465 00
    EEWR 0466 00

    Disabling the Service Provider Lock

    EEWR 1587 00 (disables)

    EEWR 1587 01 (enables)

    Dump the application software

    PREA <bank> <address> <bytestoread>

    Bank range : 00..7F
    Address : 0000..BFFF
    Bytestoread : 0000..BFFF
    The "additional" value returned at the end are the checksum value for the
    returned program memory bytes. Note, the byte-values are always returned 
    in format 0000 and NOT 00.

    PREA FF (returns the application checksum - takes a while)

    Putting gh388 in Service/Program mode

    Connect your phone to the interface and this one
    to the PC making sure it is set into debug mode

    Start your comm program ;)

    Set ComPort to 9600 bps, 8 data bits, 1 stop
    bit and no parity (see your program docs)

    Power on the phone by pressing NO -> the 
    phone will send "2" character

    Wait 0.2 seconds, and then reply to it by 
    sending the 2 character sequence "0B"

    The phone will respond "R"

    Then you send it the file jumpserv.bin through your comm program

    The phone will respond "SP, OK"

    What to do in SP mode?

    Programming Channel Indicator or RBS

    EEWR 3EE 1 (enables)
    -Wait for the OK prompt, power off the phone and disconnect it 
    from the interface cables; powerup and browse through the menus.

    EEWR 3EE 0 (disables)

    Clearing Electronic Lock
    To clear the electronic lock you have to clear the EEPROM 
    address range 03CF to 03DA by sending the commands:

    EEWR 3CF 00
    EEWR 3D0 00
    EEWR 3D1 00
    EEWR 3D2 00
    EEWR 3D3 00
    EEWR 3D4 00
    EEWR 3D5 00
    EEWR 3D6 00
    EEWR 3D7 00
    EEWR 3D8 00
    EEWR 3D9 00
    EEWR 3DA 00
#v-

:)

-- 
Gophi * Bofh# 265791 * wysocki.lodz.pdi.net/~adam/
EKG/Gadu #413992 * Member of the PFT Hacking Group
MSISDN Idea 505439030 Plus 691337795 IRCNet: gophi
Want more info? Finger me via gophi@cyberspace.org