Android 台灣中文網

標題: 关于G13的S-OFF相关 [打印本頁]

作者: gui.cpp 時間: 2011-11-23 16:44
標題: 关于G13的S-OFF相关
本帖最後由 gui.cpp 於 2011-11-23 16:48 編輯

G13的软解目前还没有完整的教程，而且看了一下国外的教程（参考的是黑莓的解锁）
国外有人提供了如下方法，但是还没有人能通过这个方法达到G13 S-OFF的目的
在这里公布一下方法，希望有人能通过这个方法实现G13的软解

Change boot logo

1.Prepare 480*800 bmp file to change
2.nbimg.exe -F [BMP FILE PATH] -n
3.rename *.nb file to splash1.img
4.fastboot flash splash1 [SPLASH1 IMG PATH]

Change security(hboot)

As far as i analyse, ship hboot check radio secuflag first.
if radio secuflag is 0(off), ship hboot check hboot secuflag.
While engineering hboot only check hboot secuflag.

So we can change hboot security by changing hboot secuflag

S-OFF : fastboot oem writeconfig 7 0
S-ON : fastboot oem writeconfig 7 ff

How to repartition

7.35.5017 is stock blackrose, 7.35.5117 is custom partition blackrose

Auto(Recommand)
First, Download SPLHexEditor_111006.exe(Thanks to intersectRaven)
http://intersectraven.euroskank.com/...tor_111006.exe

1.Open hboot_brcust_111118.nb0(don't use stock blackrose) using SPLHexEditor
2.Resize Partition
3.Save as .nb0

Manual(if you use auto method, no need to read)

1.Open hboot_brcust_111118.nb0(don't use stock blackrose) using HexEditor(HxD, HexWorkshop, etc)
2.Modify partition table

ex1) 145MB = 145*1024*1024 -> convert to hex -> /0x20000 = 0x488
ex2) 0x488 = 88 X4 (don't modify 'X')

30030 88 24 00 E3 MOV R2, #0x488 //system size

30040 D6 16 00 E3 MOV R1, #0x6D6 //cache start addr(0x24e+system size)
30044 F8 22 00 E3 MOV R2, #0x2F8 //cache size

30054 CE 19 00 E3 MOV R1, #0x9CE //data start addr(cache start addr+cache size)
30058 22 26 00 E3 MOV R2, #0x622 //data size(0xff0-data start addr)

3.Save as .nb0

Apply repartition hboot

1.Execute BlackRose Installer
2.Go to advenced mode
3.Select Apply custom partition blackrose

--------------------------------------------------------------------------------