SonyEricssonJ120i » History » Version 7
fixeria, 12/01/2023 06:38 PM
| 1 | 1 | fixeria | {{>toc}} |
|---|---|---|---|
| 2 | |||
| 3 | h1. SonyEricssonJ120i |
||
| 4 | |||
| 5 | 4 | fixeria | This is another ODM phone model based on TI Calypso. *Not yet supported.* |
| 6 | 1 | fixeria | |
| 7 | 6 | fixeria | !https://fdn2.gsmarena.com/vv/pics/sonyericsson/sonyericsson-j120-00.jpg! |
| 8 | |||
| 9 | 1 | fixeria | h2. Specifications |
| 10 | |||
| 11 | https://www.gsmarena.com/sony_ericsson_j120-1843.php |
||
| 12 | |||
| 13 | * GSM 900/1800 |
||
| 14 | * 99 x 44 x 17 mm, 75g |
||
| 15 | * STN 65k, 96 x 64 |
||
| 16 | * 900mAh Li-Ion battery (BST-37) |
||
| 17 | |||
| 18 | h2. Hardware |
||
| 19 | |||
| 20 | 7 | fixeria | {{thumbnail(SE-J120i-PCB.jpg)}} |
| 21 | |||
| 22 | Large versions: attachment:SE-J120i-PCB.jpg. |
||
| 23 | 1 | fixeria | |
| 24 | h3. Flash |
||
| 25 | |||
| 26 | * INTEL 28F320W18T (1.8 Volt Wireless Flash Memory, 4 MByte) |
||
| 27 | |||
| 28 | h4. Flash dumps |
||
| 29 | |||
| 30 | 5 | fixeria | * https://people.osmocom.org/fixeria/dump/se_j120i/J120i_R1A007_CXC1250845_Main.bin -- firmware, dumped using pstool |
| 31 | 1 | fixeria | * https://people.osmocom.org/fixeria/dump/se_j120i/J120i_R1A007_CXC1250845_full.bin -- full flash, dumped using pstool |
| 32 | * https://people.osmocom.org/fixeria/dump/se_j120i/J120i-R1A007-CXC1250845-356325015955496-fc-full.bin -- full flash, dumped using fc-loadtool |
||
| 33 | ** https://people.osmocom.org/fixeria/dump/se_j120i/fc_loadtools.patch |
||
| 34 | |||
| 35 | h3. Serial cable |
||
| 36 | |||
| 37 | J120i has the standard Sony Ericsson Fastport connector. Refer to [[SonyEricssonJ100i]] for more details. |
||
| 38 | |||
| 39 | h2. Bootloader |
||
| 40 | |||
| 41 | 2 | fixeria | Similarly to [[SonyEricssonK200i|Sony Ericsson K200i]] and unlike [[SonyEricssonJ100i|Sony Ericsson J100i]], J120i has the boot ROM (see [[CalypsoRomloader]]) enabled. |
| 42 | 3 | fixeria | |
| 43 | h2. Stock firmware notes |
||
| 44 | |||
| 45 | Below are some notes related to the stock SE's firmware. |
||
| 46 | |||
| 47 | h3. AT Modem mode |
||
| 48 | |||
| 49 | It's not yet known how to get access to the AT command interpreter. |
||
| 50 | Some AT commands can be found by running strings on the firmware dump. |
||
| 51 | |||
| 52 | <pre> |
||
| 53 | $ strings J120i_R1A007_CXC1250845_Main.bin | grep "AT[*+]" |
||
| 54 | </pre> |
||
| 55 | |||
| 56 | h3. MMI codes |
||
| 57 | |||
| 58 | NOTE: for some codes you need to press the "green" (call) button. |
||
| 59 | |||
| 60 | * Standard SE codes: |
||
| 61 | ** @-> * <- <- * <- *@ - service info and tests; |
||
| 62 | ** @<- * * <-@ - lock status; |
||
| 63 | |||
| 64 | Found in the firmware dump: |
||
| 65 | |||
| 66 | <pre> |
||
| 67 | $ strings J120i_R1A007_CXC1250845_Main.bin | less |
||
| 68 | ... |
||
| 69 | *#06# |
||
| 70 | F*#**837# |
||
| 71 | *#**785# |
||
| 72 | *#**664# |
||
| 73 | *###664# |
||
| 74 | *#**364# |
||
| 75 | *#**364*564# |
||
| 76 | *#**672# |
||
| 77 | *#**372# |
||
| 78 | *#**2263*0# -- BAND? |
||
| 79 | *#**2263*1# |
||
| 80 | *#**2263*2# |
||
| 81 | *#**2263*3# |
||
| 82 | *#**2263*4# |
||
| 83 | *#**735*0# |
||
| 84 | *#**735*12# |
||
| 85 | *#**735*13# |
||
| 86 | *#**833*2# |
||
| 87 | *#**833*4# |
||
| 88 | *#**833*7# |
||
| 89 | *#**833*3# |
||
| 90 | *#**778377# |
||
| 91 | *#**464851# |
||
| 92 | *#**324# |
||
| 93 | *#**6360# |
||
| 94 | F*#**6361# |
||
| 95 | F*#**6362# |
||
| 96 | F*#**6363# |
||
| 97 | F*#**6364# |
||
| 98 | F*#**266*0# |
||
| 99 | *#**266*1# |
||
| 100 | *#**277378# -- ASSERT? |
||
| 101 | *#**636# |
||
| 102 | *#**636*0# |
||
| 103 | *#**636*1# |
||
| 104 | *#**84637# |
||
| 105 | *#**767# |
||
| 106 | *#**3428*0# |
||
| 107 | *#**3428*1# |
||
| 108 | *#**3428*2# |
||
| 109 | *#**778337# |
||
| 110 | *#**25276# |
||
| 111 | *#**62683# |
||
| 112 | *#**3646633*0# |
||
| 113 | *#**3646633*1# |
||
| 114 | *#**678257# |
||
| 115 | *#**33284# -- DEBUG |
||
| 116 | </pre> |
||
| 117 | |||
| 118 | https://www.dcode.fr/t9-cipher is quite useful for guessing the purpose. |
