找回密码
 加入我们

QQ登录

只需一步,快速开始

搜索
查看: 1756|回复: 6

[写号相关] centro的破解,据说,和800w貌似

[复制链接]
发表于 2009-4-2 10:01 | 显示全部楼层 |阅读模式
Here it is, solution for the Palm Centro & K% e( V, X) h" w3 S# W! h4 r

3 g; A. w' r: m  K3 x. C6 y--------------------------------------------------------------------------------0 Q: b( m) i# ?- R
1. How to enable passthru DIAG mode
1 y# k. A+ `; ^1 v7 x! O  Q
( x2 J/ \( y4 `6 H! I. e  a# L>Attach a USB hotsync cable (with a hotsync button) to the Centro
. x. D! |3 `  i1 y>Remove the battery from the Centro/ Q2 [% J+ z, M" o
>Hold down the hotsync button on your usb hotsync cable
2 ~1 l5 t/ X; U, B/ m>Insert the battery into the Centro1 {2 {0 T. c) E+ ~6 y
>DONE!
9 ~: i8 |- T, h, E. ~8 @" U9 t# D; R
The Centro's Modem and DIAG Port should be detected on your computer, and require the same Qualcomm drivers as the Mogul/ppc6700.
* U. c; K+ c9 Z! \- ?. z. ]
8 b5 D2 j/ T2 L" gThe screen will remain off the entire time you are in passthru mode, so don't trip on that. When you are finished, remove the battery, and reinsert the battery for a normal startup.
2 ]0 X2 n7 H( r7 i" B9 x9 J% E' K1 D5 a. f8 a( d+ G
<background info>/ Z: n; @& J4 u* G! W$ _
I thought I just used the standard Mogul drivers, but if they don't work, then I must have had to edit my .inf files to match the centro.9 F$ B! r4 W6 q) a2 d5 O" V
I tried all combinations of ##DIAG#, and ##UPST#, and they each exposed 2 new devices, which I hoped were the Modem and DIAG Port, but I could never get them to work. I wanted to check out the bootloader using mtty. Holding the hotsync button while soft resetting did not work as expected, and I never made it into bootloader mode. Instead, this exposed the Modem and DIAG Port devices, and it was obvious it was asking for our familiar Qualcomm drivers, same as the Mogul of 6700.. ]$ p2 j7 K; ]* C  X
</background info>/ s  ^/ `9 ?1 h4 s/ N, ~+ l1 B- i3 R

8 l+ }& h1 U* E3 J( t: `/ Q( T4 N2. Read SPC - I used UniCDMA 1.095+ to scan the memory for readable ranges, starting at 00000000 thru FFFFFFFF, and then I read each of those ranges into a binary file, which I searched using WinHex. I spent a lot of time and effort doing this, so that you don't have to.
2 ^" N  B4 D) L5 |$ S
- Y$ W! y; W: j5 d9 P, `Use UniCDMA to read memory, starting at address:1 O5 @3 W0 v3 }1 j
0x00947F12, size 6 bytes, if it doesn't contain your SPC, try
( M1 m4 J! @& K, B' O0 K8 z+ M" J) p0x00940000, size 100000 bytes. 3 ^6 I' i' `4 a0 G( I5 ]8 ^0 Y
; F+ {( U  {+ [# H/ O
3. Change SPC to 000000, Load Cricket PRL onto Centro5 Y" s# i* J* S, q7 {3 S
" S/ `6 {( _" \! F
I used QPST for Service Programming, but any comparible program should be able to work with the Centro, just like any other phone.+ Y$ B& k( `$ f; S

3 l$ @7 l! J0 ~- d$ d4. Make your cricket network connection - I posted instructions for the 700p here: http://www.howardforums.com/showthr...27680&p=9772640 and if you search, there are probably newer instructions that may be better or more complete.
2 [/ M( b0 j$ d2 x! M5 H
7 Q' \& |/ H5 ?+ m9 x$ h! M5. Disable Sprint Provisioning. If Step 4 does not disable it (it didn't on my Centro), then do what I did to disable it. This took me *forever* to find, and until I found it, I knew I would never get on the web if the Sprint stuff keeps popping up when I try. $ Y! t6 u. E7 a8 n3 a6 H
4 `  r" z) v2 m, Y  v& l& z
Search for Mini's Patch for Iota, and Mini's Patch for hsExtensions. The site is in japanese, so run it through an online translator. Once you get the IOTA patch, you'll need to copy the Iota.prc file from the ROM of your Centro, then on your computer, drag that file onto Mini's IOTA Patch program. Finally, QuickInstall via hotsync the patched Iota.prc back onto your Centro. If you do this correctly, the IOTA Sprint Provisioning will not appear when you try and connect./ M) q- M9 l1 u$ J" f; V; c

* l. r7 T$ [( W* ?# T* A8 A! [6 ?* DJay
4 c. d% g* x# Z
! Z9 A% x9 }, Z, nUPDATE (24-Jul-2008): Centro also supports diag mode using a serial Treo programming cable, similar to all previous Treo models. $ _& _% a; b0 t: [& E+ O9 G/ R4 P% t
* f( n% j$ y; G! S/ w% O2 X
Please see my post#172 http://www.howardforums.com/showpos...1&postcount=172 for details on using serial cable to connect to Centro.
, l. q) m/ Q% J4 h0 O* c/ d
  W6 u8 w+ s: R0 I) S5 ]& k* h* S  D2 Q' c2 a) U( f) L+ A! Z% Y6 g
看第五条,好像是关于解除sprint服务的?需要个iota patch?希望版主能借此提示,解决800w,centro上网问题
回复

使用道具 举报

发表于 2009-4-3 07:37 | 显示全部楼层
关注" ?/ P. b2 q6 ^6 @* m
不过目前这类机器很少见,没有足够的测试机会
- X1 L+ C0 }7 F& A- j; O0 A4 p5 Z4 e- V% J% U+ J
[3G坛,手机登陆吹友吧发帖]
回复 支持 反对

使用道具 举报

发表于 2009-4-3 08:48 | 显示全部楼层
这个只是解锁的教程啊,又不能改esn
回复 支持 反对

使用道具 举报

发表于 2009-4-9 10:01 | 显示全部楼层
类似黑莓的过程
回复 支持 反对

使用道具 举报

 楼主| 发表于 2009-4-9 11:02 | 显示全部楼层
又仔细看了下,最后那段的意思,好像是说:用日本的Mini's IOTA Patch program,把rom中提取出来的iota.prc处理一下,再用hostsync同步到rom中,就可以停止sprint的网络服务,可是我还没找到这个程序,另外iota.prc怎么搞出来,怎么搞进去呢?
回复 支持 反对

使用道具 举报

发表于 2009-5-2 21:27 | 显示全部楼层
原帖由 rmojly 于 2009-4-9 11:02 发表
# n( ]4 F- @' X1 F又仔细看了下,最后那段的意思,好像是说:用日本的Mini's IOTA Patch program,把rom中提取出来的iota.prc处理一下,再用hostsync同步到rom中,就可以停止sprint的网络服务,可是我还没找到这个程序,另外iota.prc怎 ...
1 ?5 y( ?+ s8 v, w* m
程序如下,iota.prc用exploer copy出来,很简单搞定,但还是连接超时.不知道那里设定

miniIota.exe

40 KB, 下载次数: 391

回复 支持 反对

使用道具 举报

发表于 2009-5-4 14:12 | 显示全部楼层
哪位出来造福一下800W玩友,等待改ESN再入吧,慢慢等待……………………
回复 支持 反对

使用道具 举报

您需要登录后才可以回帖 登录 | 加入我们

本版积分规则

QQ|Archiver|手机版|小黑屋|吹友吧 ( 京ICP备05078561号 )

GMT+8, 2024-5-24 07:27 , Processed in 0.322630 second(s), 18 queries .

Powered by Discuz! X3.5 Licensed

© 2001-2024 Discuz! Team.

快速回复 返回顶部 返回列表