Nie jesteś zalogowany. Proszę się zalogować lub zarejestrować.
eko.one.pl → Posty przez stich86
Ok I start team viver show one more time
here is the list of driver used (with relative HW path) that should be forced:
ADB (using Google Android Drivers):
ZTE Proprietary Modem (used for AT commands):
ZTE Diagnostic Ports (for QPST/qtools stuff):
wait because I'm going with the procedure from the beginning and now, as I passed the modem with files from sb 3.0, it is visible in qpst backupo, i.e. it must be damaged to be detected there
let me explain:
the first installation of driver using SDI (the little program inside Win Drivers folder on my MEGA share) is recognized because modem in broken state (or with autorun\download mode at 0) are presented to the system with VID\PID 19d2:0016. These IDs are the standard one into normal ZTE packages. At this point without force installation, QPST will find the modem.
When you restore everthing, the VID\PID become 19d2:1485, these IDs are not part of the INF file, so you have to manually force installation of driver. You have just one driver to install in this way for the DIAG port that's the one used by QPST
Stich if I now connect to pc and open qpst and tab Backup I don't see modem. After running the correct IMEI, does qpst not recognize the modem and must it be broken to detect it?
no, you have to force installation of driver using SDI application
Because in this mode PID and VID are different, it will not found the ZTE diagnostic port using older driver
If you still have Teamviewer we can do it together. Let me know
smereka napisał/a:Panowie i Panie działa. Podłączyłem go królikowego pacjenta dwr961 nawet na jego sofcie nic nie zmieniane dodałem co Cezary napisał i działa mi net ale frajda. Trochę męczyłem te 2 konektory antenowe bo nie wiem który gdzie a modem ma 5 a ja mam tylko 2 i na chybił trafił w końcu się za zarejestrował. Duża zasługa sticha86
good job sitch86
))
Na tych dwóch lichych antenach podpięty do oznaczeń na zte 3 i 4 mam na orange 55/11 więc jest extra
Lepiej go nie męcz bez anten ,bo jeszze się fizycznie spali....
Czyli rozumiem ,że ten plik qcn potrzebny jest z działającego modemu , i nie będzie (narazie) do udostępnienia , bo w nim jest IMEI ?
It can be shared, but just put a dummy IMEI on it (like the one shared by me)
I think I can ask a friend to extract one from his working unit, which I have dump of partitions as well, which came from the same network.
That should fine, all other stuff can be extracted from ZTE framework. You have just to modify partition_nand.xml and contents.xml
I'm going to try today in the evening, and if it works out, try to replicate that with MF286A, which I have 3 pieces.
Do you have a good QCN file? It’s important because there are a lot of stuff into EFS
To teraz trza by instrukcje napisać. Trochę to zajmie bo zaraz wychodzę a jak wrócę to wrócę do tematu. Napiszę instrukcję a Ty stich86 sprawdzisz ją i wyedytujemy pierwszy post.
yes no problem 
Panowie i Panie działa. Podłączyłem go królikowego pacjenta dwr961 nawet na jego sofcie nic nie zmieniane dodałem co Cezary napisał i działa mi net ale frajda. Trochę męczyłem te 2 konektory antenowe bo nie wiem który gdzie a modem ma 5 a ja mam tylko 2 i na chybił trafił w końcu się za zarejestrował. Duża zasługa sticha86
good job sitch86
so it's working?
so now we have to get also Leo-PL's modem back to life
I've uploaded dummy QCN and a little steps to change back your IMEI, write it and the put modem back to it's original configuration
currenlty his modem has latest firmware from Nordic B11
but I suggest to put it back on a original board to see if connection works or not
Ok I send
Ok I check password wait a moment
i've tried latest send (at 11.04) still wrong, now I was blocked for multiple invalid tenatives :\
Okay, throw in and let's go. If you don't want to by TM, I can do it too. But you would be faster yourself
Write when you do it
try to send me an email from the forum, so I can join the Teamviewer and show you what i've done
EDIT: found the message, was on spam.. but password is not valid 
got it guys!
i've found the two AT commands to send, so now the modem is working as expected
now i'll upload on the MEGA folder the QCN file with dummy IMEI and we will try on smereka's modem
Okay, I sent you this data. Just remember that do not write anything to me by e-mail, unless it is some confidential information. I rarely check my e-mail and I visit the forum quite often.
don't worry!
where did you send the information? I don't have any notification on the forum
Give me 30-40 minutes and I'll put you on teamviver. I will send the login and password to PM via this forum
yes I can use TM
may be I got it..
working module has this parameters configured:
[ 12.430400] config_file_enable = 1
[ 12.430400] download_value= 1
[ 12.430400] autorun_value = 1
[ 12.430400] composite_id = 69
while the broken one:
[ 12.430400] config_file_enable = 1
[ 12.430400] download_value= 0
[ 12.430400] autorun_value = 0
[ 12.430400] composite_id = 0
In this case the system is present itself with VID/PID 19d2:0016 instead of 19d2:1485
So now let me check if some AT command unlock this..
Blue Kynar wire on the modem is routed to the reset pin, by banging it randomly against the ground I can force modem to enter EDL mode either by PBL or by SBL1, usually at random.
I haven't tried, but EDL mode can be also forced join D+\GND togheter when attach the modem to USB port
Z dużej litery dmesg na pewno nie zadziała
Miało być ...kmsg , a nie ...ksmg
no i daj:
ls /var/log
później ew cat z tych plików ,jak kolega @stich86 chciał
yep.. sorry i wrote from my iPhone 
i need the content of files into /var/log, not just the list of files
I'll check these logs tomorrow - now I'm out of access to all that crap. If uart does not work for you, there is no problem with linux machine with inserted modem and uart connected to it. I just need to read how to put the console and gui in linux and I will put you on the public IP. On the copy, apart from Linux, nothing else is needed, so even if a guest hacks him, he will see at most our dead man (modem);)
it would be nice
i've broken module again, I can stick same as your module (and write xQCN file with different IMEI), but it stays in default mode.
I think only way to see what's is missing is to have a modem like yours where TTL is working.
As I've suggested before.. what do you think to create a Discord channel to discuss about it? It will be more productive. Let me know
Holy crap. I'm amazed with what was accomplished here!
Tonight I'll dig out my 1.8V level shifter for SPI flash programming, and use it to connect both directions of console, and then try to perform the factory programming once agian.
ahahah.. we are very close to fix it
Which exactly logs?
Dmesg, cat /proc/kmsg and all logs into /var/log
I discovered something interesting:
login: root
password: oelinux123mdm9650 login: root
Password:
root@mdm9650:~#Work for me
Link for this password for mr1100 https://blog.skitisu.com/hack-netgear-m … uter-root/
Amazing
So now we can debug why the module doesn’t start in correct way
Please send me the logs asked if you can
ATQ0E0V1
OKOK
OK
OK
ATI
Manufacturer: ZTE CORPORATION
Model: MF286DMODULE
Revision: PV_ZTE_MF286DMODULEV1.0.0B08
SVN: 01
IMEI:
+GCAP: +CGSMOK
Incredible. The dead man begins to pant slowly
Ok so you have broken EFS..
tonight I’ll try to upload XQCN and how to modify IMEI on that so you can try to write it back with QPST
yes on "ZTE USB propietary" you can try to connect with TeraTerm/Putty and issue ATI command to see if the modem is up
Now from that part I need to rebuild what i've done to make it switch in the correct way.. and hopefully if your UART is working we can debug it and check WHY doesn't start all adb\ZTE stuff
if you can share:
dmesg or "cat /proc/kmsg" and all logs into /var/log
As my understanding, if the modem is online too early, the script "misc-daemon" break..
good, you should have also modem recognized on windows\linux machine.
How many TTY/COM do you see?
if you have TX\RX UART working, please try with these credentials:
root\zte9x15
eko.one.pl → Posty przez stich86
Forum oparte o PunBB, wspierane przez Informer Technologies, Inc