![]() |
#31 |
Zealot
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 109
Karma: 1924
Join Date: Dec 2019
Location: Puddingtown
Device: some ..
|
Code:
C:\adb>edl /lswm-patched.bin Found EDL 9008, handshaking... version 2.1 HWID: 001b80e100000000, JTAG: 001b80e1, OEM: 0000, Model: 0000 Hash: d40eee56f3194665-574109a39267724a-e7944134cd53cb76-7e293d3c40497955-bc8a4519ff992b03-1fadc6355015ac87 (x3) Sending swm-patched.bin 100% ok, starting... ok, waiting for Firehose... ok C:\adb>edl /i /v Found EDL 9008, configuring... <log value="ERROR: Secure Boot *not* enabled BUT VIP *is* enabled. Therefore will *not* check digital signature on Digest Table. This allows easier testing on non-secure targets." /> <log value="ERROR: VIP table contains more than 54 hashes, 1681656382/32=52551761" /> <response value="NAK" rawmode="false" /> Nope, configuring... Could not write device C:\adb>edl /g Found EDL 9008 <log value="ERROR: Failed to read XML command -1" /> Configuring... <log value="ERROR: Secure Boot *not* enabled BUT VIP *is* enabled. Therefore will *not* check digital signature on Digest Table. This allows easier testing on non-secure targets." /> <log value="ERROR: VIP table contains more than 54 hashes, 1681656382/32=52551761" /> Nope, configuring... Could not write device |
![]() |
![]() |
![]() |
#32 |
Wizard
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 2,823
Karma: 12000001
Join Date: Feb 2012
Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5
|
ARRG! I thought I had managed to kill that.
Well, at least we know that I can patch and rehash without a problem. This is annoying. If I had one of these devices in my hands I could try out 800 loaders in the time it takes me to make French toast. Normally with most devices you're limited by the PK hash, so the set of loaders you have to try is usually very limited. In our case it could be a lot. Last edited by Renate; 06-23-2024 at 10:26 AM. |
![]() |
![]() |
Advert | |
|
![]() |
#33 |
Wizard
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 2,823
Karma: 12000001
Join Date: Feb 2012
Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5
|
Could you:
Code:
edl /lpatched.bin edl /x /v "<nop arg='poke'/>" It's only cosmetic changes, but still... Last edited by Renate; 06-23-2024 at 10:56 AM. |
![]() |
![]() |
![]() |
#34 |
Wizard
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 2,823
Karma: 12000001
Join Date: Feb 2012
Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5
|
Try this loader:
https://github.com/bkerler/Loaders/q...4665_FHPRG.bin |
![]() |
![]() |
![]() |
#35 |
Zealot
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 109
Karma: 1924
Join Date: Dec 2019
Location: Puddingtown
Device: some ..
|
downloaded latest edl from your site
Code:
PS C:\adb> edl /lswm-patched.bin Found EDL 9008, handshaking... version 2.1 HWID: 001b80e100000000, JTAG: 001b80e1, OEM: 0000, Model: 0000 Hash: d40eee56f3194665-574109a39267724a-e7944134cd53cb76-7e293d3c40497955-bc8a4519ff992b03-1fadc6355015ac87 (x3) Sending swm-patched.bin 100% ok, starting... ok, waiting for Firehose... ok PS C:\adb> edl /x /v "<nop arg='poke'/>" Found EDL 9008, sending adhoc request... <log value="ERROR: Secure Boot *not* enabled BUT VIP *is* enabled. Therefore will *not* check digital signature on Digest Table. This allows easier testing on non-secure targets." /> <log value="ERROR: VIP table contains more than 54 hashes, 1681656382/32=52551761" /> <response value="NAK" rawmode="false" /> Nope |
![]() |
![]() |
Advert | |
|
![]() |
#36 | |
Zealot
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 109
Karma: 1924
Join Date: Dec 2019
Location: Puddingtown
Device: some ..
|
Quote:
edit: found it on github and renamed result Code:
PS C:\adb> edl.exe /ltest1.bin Found EDL 9008, handshaking... version 2.1 HWID: 001b80e100000000, JTAG: 001b80e1, OEM: 0000, Model: 0000 Hash: d40eee56f3194665-574109a39267724a-e7944134cd53cb76-7e293d3c40497955-bc8a4519ff992b03-1fadc6355015ac87 (x3) Sending test1.bin 100% ok, starting... ok, waiting for Firehose... no response, poking... Could not write device Last edited by SleepWithMachine; 06-23-2024 at 02:10 PM. |
|
![]() |
![]() |
![]() |
#37 |
Wizard
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 2,823
Karma: 12000001
Join Date: Feb 2012
Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5
|
How about that "nop" test, please?
|
![]() |
![]() |
![]() |
#38 | |
Zealot
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 109
Karma: 1924
Join Date: Dec 2019
Location: Puddingtown
Device: some ..
|
Quote:
Code:
PS C:\adb> edl /x /v "<nop arg='poke'/>" Found EDL 9008, sending adhoc request... bad XML |
|
![]() |
![]() |
![]() |
#39 |
Wizard
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 2,823
Karma: 12000001
Join Date: Feb 2012
Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5
|
Not really. I'd open that puppy up, find the EDL test points, find the UART test points, disconnect the battery, connect it up to my automated power supply.
You always have to do "edl /l first" !!! Use the "VIP" (bad) loader. |
![]() |
![]() |
![]() |
#40 |
Zealot
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 109
Karma: 1924
Join Date: Dec 2019
Location: Puddingtown
Device: some ..
|
with the "bad loader" from post #3
Code:
PS C:\adb> edl /x /v "<nop arg='poke'/>" Found EDL 9008 <response value="ACK" rawmode="false" /> Sending adhoc request... <log value="ERROR: Hash of data doesn't match the expected hash 203943320" /> <log value="INFO: Expected hash (32)" /> <log value="INFO: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 " /> <log value="INFO: Calculated hash (32)" /> <log value="INFO: 48 3C 29 62 39 C5 A7 70 89 8B 27 5F B2 F5 09 1A B1 5E 34 E7 F2 AF AD CA 16 B5 CE 0F 58 6C 57 FB " /> <log value="INFO: Packets received 0" /> <log value="INFO: Tables received 0" /> <log value="INFO: Make sure that the same command line arguments were used when --createdigest was run." /> <log value="ERROR: Failed to read XML command -1" /> <log value="INFO: VIP is enabled, receiving the signed table of size 8192" /> No ack/nak |
![]() |
![]() |
![]() |
#41 |
Wizard
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 2,823
Karma: 12000001
Join Date: Feb 2012
Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5
|
Ok, there's a new patched.bin at the same old URL.
Try: Code:
edl /lpatched.bin edl /x /v "<nop arg='poke'/>" edl /i /v edl /g edl /r /pmisc misc edl /w /pmisc misc |
![]() |
![]() |
![]() |
#42 | |
Zealot
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 109
Karma: 1924
Join Date: Dec 2019
Location: Puddingtown
Device: some ..
|
Quote:
Code:
Found EDL 9008, handshaking... nope, resetting... version 2.1 HWID: 001b80e100000000, JTAG: 001b80e1, OEM: 0000, Model: 0000 Hash: d40eee56f3194665-574109a39267724a-e7944134cd53cb76-7e293d3c40497955-bc8a4519ff992b03-1fadc6355015ac87 (x3) Sending test1.bin 100% ok, starting... ok, waiting for Firehose... no response, poking... Could not write device |
|
![]() |
![]() |
![]() |
#43 |
Wizard
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 2,823
Karma: 12000001
Join Date: Feb 2012
Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5
|
I guess I chopped out too much.
There's a newer patched.bin, same procedure. |
![]() |
![]() |
![]() |
#44 |
Zealot
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 109
Karma: 1924
Join Date: Dec 2019
Location: Puddingtown
Device: some ..
|
Code:
C:\adb>edl.exe /lswm-patched1.bin Found EDL 9008, handshaking... version 2.1 HWID: 001b80e100000000, JTAG: 001b80e1, OEM: 0000, Model: 0000 Hash: d40eee56f3194665-574109a39267724a-e7944134cd53cb76-7e293d3c40497955-bc8a4519ff992b03-1fadc6355015ac87 (x3) Sending swm-patched1.bin 100% ok, starting... ok, waiting for Firehose... ok C:\adb>edl /x /v "<nop arg='poke'/>" Found EDL 9008, sending adhoc request... <log value="INFO: Calling handler for nop" /> <response value="ACK" rawmode="false" /> Ok C:\adb>edl /i /v Found EDL 9008, configuring... <log value="INFO: Calling handler for configure" /> <log value="INFO: Storage type set to value eMMC" /> <response value="ACK" MemoryName="eMMC" MinVersionSupported="1" Version="1" MaxPayloadSizeToTargetInBytes="65536" MaxPayloadSizeToTargetInBytesSupported="1048576" MaxXMLSizeInBytes="4096" DateTime="Dec 10 2021 - 11:35:24" /> Ok Requesting info on LUN 0... <log value="INFO: Calling handler for getstorageinfo" /> <log value="ERROR: Get Info Failed 4" /> <log value="ERROR: Failed to get storage info 4" /> <response value="NAK" rawmode="false" /> Nope C:\adb>edl /g Found EDL 9008, configuring... ok Requesting info on LUN 0... <log value="ERROR: Get Info Failed 4" /> <log value="ERROR: Failed to get storage info 4" /> Nope C:\adb>edl /r /pmisc misc Found EDL 9008, configuring... ok Requesting info on LUN 0... <log value="ERROR: Get Info Failed 4" /> <log value="ERROR: Failed to get storage info 4" /> Nope |
![]() |
![]() |
![]() |
#45 |
Wizard
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 2,823
Karma: 12000001
Join Date: Feb 2012
Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5
|
Hmm, I think that my means of defeating VIP this time was correct.
It seems that this loader does not have some parts for eMMC seen in other loaders (Poke3, Poke5). Onyx has confirmed that the listing of GoCo7 as UFS is wrong. Both the GoCo7 and the Go103 now just say "64 GB" on the product specs. That's a whole other theme what the heck Onyx is doing. eMMC is now a budget choice and does not have the performance of UFS. For 32 GB the prices of the two are almost the same. Yeah, this is 64 GB. Edit: So, we have the first loader with VIP (and patched) and the other one that can't write? I used a new way to filter out the loaders and it looks like those are the only two! Could you use the one that reads and pull xbl_a or xbl_b for me? This could be a difficult one, a new-ish processor and an old-ish memory type. Last edited by Renate; 06-24-2024 at 07:18 AM. |
![]() |
![]() |
![]() |
|
![]() |
||||
Thread | Thread Starter | Forum | Replies | Last Post |
Rooting the Nova 3 Color: is it locked? | haxonhax | Onyx Boox | 6 | 08-22-2021 11:16 PM |
Rooting Nook Color with 1.2 Firmware On It? | bhartman36 | Barnes & Noble NOOK | 1 | 07-01-2011 12:16 PM |
I think I bricked Nook Color while rooting | Hanscraft | Nook Developer's Corner | 56 | 06-06-2011 12:41 PM |
Rooting Nook Color - Many questions | Ankaa | Nook Developer's Corner | 1 | 12-30-2010 03:04 PM |
Made a mistake rooting my Nook Color | woodyear99 | Nook Developer's Corner | 10 | 12-24-2010 12:44 PM |