GSM Shop GSM Shop
GSM-Forum  

Welcome to the GSM-Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features.
Only registered members may post questions, contact other members or search our database of over 8 million posts.

Registration is fast, simple and absolutely free so please - Click to REGISTER!

If you have any problems with the registration process or your account login, please contact contact us .

Go Back   GSM-Forum > Product Support Sections > No More Supported Solutions (Dead Products) > No More Supported H/W Products > Cyclonebox

 
 
LinkBack Thread Tools Display Modes
Old 10-13-2009, 20:35   #436 (permalink)
Freak Poster
 
Join Date: Sep 2009
Location: No location
Posts: 493
Member: 1120374
Status: Offline
Thanks Meter: 67

Success Phone unlocked 7100s By Cyclonebox

Code:
All initialized - Ready to work
MCU Version V 05.22
MCU Date 30-10-08
Product RM-438
Manufacturer (c) Nokia
IMEI 353217030539533
Mastercode 7676523625
IMEI Spare 3A35120703355903
IMEI SV 3335120703355923F1000000
PPM V 05.22, 30-10-08, RM-438, (c) Nokia , AE
CNT Content: ae_uk_tesco_uk_red, V 05.22, 30-10-08, RM-438, (c) Nokia , ,
PSN DOT382522
Product Code 0576734
Module Code 0203955
Basic Product Code 0565328
PSD 0000000D00000000
LPSN 0
HW 1001
UEM 4386
UPP 12648
RFIC 0500
DSP ICPR72_08w32_UPP
LCD SEIKO
BT 2222-143C
Asic 11
HW Signature F9BE9C1C146B3BA4
Simlock Server SIMLOCK SERVER
Simlock Key 2340000300000000
Simlock Profile 800000000003000B
Simlock Aux 000B5555
Simlock IMEI 00553532170305395300
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: CLOSED Type: MCC-MNC Data: 23410F
Simlock [1,2] State: CLOSED Type: GID Data: 0A
MCU Version V 05.22
MCU Date 30-10-08
Product RM-438
Manufacturer (c) Nokia
IMEI 353217030539533
Mastercode 7676523625
Selecting unlock method...
Using Super DCT4 Activation
Search in: C:\Program Files\Cyclone Box\UnlockData\
Searching for: RM-438_V 05.22.sunlock_img
Writing patch file...
Booting UPP...
UPP ID: 3168 [HW_UNKNOWN]
shadow, Type: Flash Image, Algo: DCT4, DCT4 ALGORITHM
Flashbus Write baud set to 100Kbits
u3_2nd.fia, Type: 2nd Boot Loader, Rev: 7.4.79.0, Algo: DCT4
Box VPP disabled
Internal Phone VPP Selected
PLL Factor: 3
FlashChip[0]: 0x0020883C @ 0x01000000, ST, SectorSize: 128kB, Ext: 00009321
FlashChip[1]: 0x0020883C @ 0x02000000, ST, SectorSize: 128kB, Ext: 00009321
Signature: AD7EB61B23100340C605E40120A20000
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 51Kbits
u3_intel.fia, Type: Algorithm, Target: FlashChip[0] 0x0020883C (256Mbits), Rev: 7.4.80.0, Algo: DCT4 ALGORITHM
Nominal VPP Voltage: 9V, Detected: 0.04V
MSID-Crypted: 84C209051A0C52C4D262FC039D
MSID-Plain: 2C40BAE9004C751AA8000000
FAID-Crypted: 96E138FE0E6138AAE632CB48
Flashbus Write baud set to 6.50Mbits
4 Region(s) to erase
Erasing NOR Region [0x01220000-0x0123FFFF]
Erasing NOR Region [0x01440000-0x0145FFFF]
Erasing NOR Region [0x014A0000-0x014BFFFF]
Erasing NOR Region [0x01C00000-0x01C1FFFF]
Erase taken 4.688s
Writing 32 blocks...
Sending Super DCT4 Emulator...
Emulator sent OK!
All blocks written OK! Time taken 3.922s
Terminating flash session
Box VPP disabled
Asic 11
HW Signature F9BE9C1C146B3BA4
Simlock Server SIMLOCK SERVER
Simlock Key 2340000300000000
Simlock Profile 800000000003000B
Simlock Aux 000B5555
Simlock IMEI 00553532170305395300
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: CLOSED Type: MCC-MNC Data: 23410F
Simlock [1,2] State: CLOSED Type: GID Data: 0A
Asking card to sign HW Signature...
Signed OK (28B5B9B54B3E783EEA4EACD3E47F79FD4BE1FDFE)
Simlock Security - UNKNOWN
Writing SP...
New SP Accepted OK!
Phone unlocked OK!

Last edited by ptt; 01-17-2010 at 17:42. Reason: add code tag
 
Old 10-14-2009, 06:05   #437 (permalink)
No Life Poster
 
systemworm's Avatar
 
Join Date: Jun 2004
Location: Azerbaijan
Age: 38
Posts: 3,958
Member: 68498
Status: Offline
Thanks Meter: 152
Quote:
Originally Posted by ATUGA View Post
MCU Version V 07.21
Code:
MCU Date	05-11-08
Product		RM-237
Manufacturer	(c) Nokia.           
IMEI		xxxxxxxxxxxxxxxx
Mastercode	6673422176
Simlock Server	SIMLOCK SERVER VERSION 63
Simlock Key	FFFFFFFFFFFFFFFF
Simlock Profile	FFFFFFFFFFFFFFFF
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: CLOSED	Type: MCC-MNC	Data: 00101F
Simlock NCK	#pw+@Uÿÿÿÿÿÿÿÿÿÿ+17#
Simlock NCK	#pw+ÿÿÿÿÿ8ÿÿÿÿÿÿÿÿ+255#
Simlock NCK	#pw+ÿÿÿÿÿÿÿÿÿÿ+255#
Simlock NCK	#pw+ÿÿø4ÿ+111#
Reading Security Block...
Security block OK!
Determining PA Simlock...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006010C192101001101
CMT_EM_ASIC_ID:		 00000232
CMT_EM_ASIC_ID:		 00000353
CMT_PUBLIC_ID:		 2400010161EA7D560D843B6EE0DC403E8B4D2CF7
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID:		 191EC665DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x0089898100006A21, Intel, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: C0E691EA16A7593A9BB28832D7312A39F7ED668D
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Restarting MCU...
Determined PA Simlock: PA_SL
Checking for Rootkey Hash support...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006010C192101001101
CMT_EM_ASIC_ID:		 00000232
CMT_EM_ASIC_ID:		 00000353
CMT_PUBLIC_ID:		 2400010161EA7D560D843B6EE0DC403E8B4D2CF7
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID:		 191EC665DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.30.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Exploiting - running preloader...
Preloader running OK, Running Custom Loader...
Custom loader running OK! Working...
Received Security Block OK !
Writing Security Block...
SP Accepted, doing reset to update block...
MCU Version	V 07.21
MCU Date	05-11-08
Product		RM-237
Manufacturer	(c) Nokia.           
IMEI		xxxxxxxxxxxxxxx
Mastercode	6673422176
Simlock Server	SIMLOCK SERVER VERSION 63
Simlock Key	2440700000000000
Simlock Profile	8000000000000006
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [1,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [1,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [2,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [3,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [4,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [5,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [6,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [7,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Unlock finished!
Do you have a watchdog problem with your phone now?

Last edited by ptt; 01-17-2010 at 17:43. Reason: add code tag
 
Old 10-14-2009, 10:39   #438 (permalink)
No Life Poster
 
systemworm's Avatar
 
Join Date: Jun 2004
Location: Azerbaijan
Age: 38
Posts: 3,958
Member: 68498
Status: Offline
Thanks Meter: 152
Thumbs up

Successful N78 flashing log via fbus


Code:
Nokia DCT4/WD2/BB5 Service Tool Initialization Started, Engine Revision: 1.0.0.7918
Handling device: [Cyclone Team], [Cyclone Box]
Initializing box...
Box Firmware: Cyclone Nokia Application v1.07, (Sep 11 2009 03:35:10, gcc-4.2.2, RTOS v5.2.0), Type: Signed Production Application, Flags: NoFlags
Box Serial Number: ********
HW Revision: A, Suitable for: Production, Case: First Plastic Case, MCU Manufacture Time: 2009, wk14
Initializing security card...
Card Serial Number: ********
Card Firmware Revision: 0109
Card is activated
Box is activated
Started box selftests procedure
USB Voltage	4.77v	PASSED
MCU Voltage	3.29v	PASSED
Core Voltage	1.76v	PASSED
VBAT Voltage	1.15v	PASSED
VBAT Voltage	4.90v	PASSED
Box VPP disabled
VPP Voltage	0.04v	PASSED
Internal Box VPP Enabled
VPP Voltage	4.83v	PASSED
Box VPP disabled
VPP Voltage	0.04v	PASSED
External Box VPP Enabled
VPP Voltage	0.04v	FAILED - IGNORED - Probably power supply is not connected
Box VPP disabled
All box selftests passed!
Super DCT4 Activation: TRUE
Initializing FBUS...
All initialized - Ready to work
MCU Version	V ICPR71_08w44
MCU Date	29-10-08
Product		RM-235
Manufacturer	(c) Nokia
IMEI		3541720237*****
Mastercode	6243633770
IMEI Spare	3A45710232872506
IMEI SV		3345710232872506F9000000
PSN		MFK578118
Product Code	0545620
Basic Product Code	0531167
PSD		0000000000000000
LPSN		0
WLAN MAC	00210905C69C
APE SW		20.149
APE Variant	20.14920.149.005.120.149.051.1
APE Test		rm235_ENO_x_2008wk09v0.010
APE HW		256
APE ADSP	256
RETU		15
TAHVO		22
AHNE		11
HW		6500
RFIC		17141715
DSP		ICPR71_08w41
Simlock Server	SIMLOCK SERVER
Simlock Key	2440700000000000
Simlock Profile	0000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [1,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [1,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [2,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [3,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [4,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [5,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [6,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [7,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Scanning avaiable products...
Processing C:\Program Files\Nokia\Phoenix\Products\...
Processing C:\Program Files\Common Files\Nokia\DataPackage\Products\...
Found 113 products, Filtering BB5 Products - wait...
60 Products left after filtering. Ready.
Retrieving Variants for Product RM-235 - wait...
60 Variants Retrieved
Processing pre flash tasks...
Backing up RPL...
RPL Creation started...
Processing CMT Part...
Storing Product Code...
Storing PSN...
Storing HWID...
Trying to store Simlock...
Reading Configuration Key...
Hashing...
Reading SHA1-RSA Signature...
Reading SHA1-HMAC Signature...
Storing Simlock...
Trying to store WMDRM RPL...
Reading Keys...
Storing WMDRM PD...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101021103
CMT_EM_ASIC_ID:		 00000295
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 12F0010D39B500587BC59872CC2B3D79060A1776
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 A8C1D6713E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000600022, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: AA7BE8DEFFAE81DD0C61CB7E127E3A2962651FD6
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
Storing NPC...
Storing CCC...
Storing HWC...
CMT VARIANT Not Found
Restarting MCU...
RPL Saved OK
RPL backup thread finished, continuing...
Backing up simlock...
MCU Version	V ICPR71_08w44
MCU Date	29-10-08
Product		RM-235
Manufacturer	(c) Nokia
IMEI		3541720237*****
Mastercode	6243633770
Simlock backup OK, saved to RM-235_3541720237*****_10142009_22430 PM.SLBackup.PM
Backup simlock thread finished, continuing...
Pre flash tasks finished, continuing...
Processing RM-235_30.011_prd.core.fpsx (CMT)...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101021103
CMT_EM_ASIC_ID:		 00000295
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 12F0010D39B500587BC59872CC2B3D79060A1776
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 A8C1D6713E691FF8
RM-235_30.011_prd.core.fpsx, Type: Flash Image, Algo: XSR 1.5, BB5
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 650Kbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000600022, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: AA7BE8DEFFAE81DD0C61CB7E127E3A2962651FD6
Flashbus Write baud set to 5.0Mbits
Sending Certificates...
Certificates OK
Partitioning...
Partitioning OK
Started group flash erase
EraseArea[0,CMT]: 0x00040000-0x00082FFF, ONENAND
EraseArea[0,CMT]: 0x00083400-0x003FFFFF, ONENAND
EraseArea[0,CMT]: 0x00400000-0x0095FFFF, ONENAND
EraseArea[0,CMT]: 0x00C60000-0x0A87FFFF, ONENAND
Erase Partition (CMT)
Waiting 320s for erasure finish...
Erase taken 1.844s
Writing all blocks...
Writing CMT ADA Certificate...
Writing CMT KEYS Certificate...
Writing CMT PRIMAPP Certificate...
Writing CMT RAP3NAND Certificate...
Writing CMT PASUBTOC Certificate...
Writing CMT PAPUBKEYS Certificate...
Writing CMT SOS*UPDAPP Certificate...
Writing CMT SOS*DSP0 Certificate...
Writing CMT SOS*ISASW Certificate...
Writing CMT SOS+CORE Certificate...
Writing CMT SOS+ROFS1 Certificate...
Programming Status OK!
All blocks written OK! Time taken 139.79s
Restarting MCU...
Processing RM-235_30.011_prd.core.fpsx (APE)...
Processing RM-235_30.011_005_prd.language.fpsx (CMT)...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101021103
CMT_EM_ASIC_ID:		 00000295
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 12F0010D39B500587BC59872CC2B3D79060A1776
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 A8C1D6713E691FF8
RM-235_30.011_005_prd.language.fpsx, Type: Flash Image, Algo: XSR 1.5, BB5
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 650Kbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000600022, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: AA7BE8DEFFAE81DD0C61CB7E127E3A2962651FD6
Flashbus Write baud set to 5.0Mbits
Started group flash erase
EraseArea[0,CMT]: 0x07E60000-0x09C7FFFF, ONENAND
Waiting 320s for erasure finish...
Erase taken 0.344s
Writing all blocks...
Writing CMT SOS+ROFS2 Certificate...
Programming Status OK!
All blocks written OK! Time taken 39.390s
Restarting MCU...
Processing RM-235_30.011_005_prd.language.fpsx (APE)...
Processing RM-235_30.011_051.1_prd.customer.fpsx (CMT)...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101021103
CMT_EM_ASIC_ID:		 00000295
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 12F0010D39B500587BC59872CC2B3D79060A1776
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 A8C1D6713E691FF8
RM-235_30.011_051.1_prd.customer.fpsx, Type: Flash Image, Algo: XSR 1.5, BB5
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 650Kbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000600022, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: AA7BE8DEFFAE81DD0C61CB7E127E3A2962651FD6
Flashbus Write baud set to 5.0Mbits
Started group flash erase
EraseArea[0,CMT]: 0x09C80000-0x0A87FFFF, ONENAND
Waiting 320s for erasure finish...
Erase taken 0.156s
Writing all blocks...
Writing CMT SOS+ROFS3 Certificate...
Programming Status OK!
All blocks written OK! Time taken 0.109s
Restarting MCU...
Processing RM-235_30.011_051.1_prd.customer.fpsx (APE)...
Processing RM-235_30.011_002_000_U001.uda.fpsx (CMT)...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101021103
CMT_EM_ASIC_ID:		 00000295
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 12F0010D39B500587BC59872CC2B3D79060A1776
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 A8C1D6713E691FF8
RM-235_30.011_002_000_U001.uda.fpsx, Type: Flash Image, Algo: XSR 1.5, BB5
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 650Kbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000600022, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: AA7BE8DEFFAE81DD0C61CB7E127E3A2962651FD6
Flashbus Write baud set to 5.0Mbits
Started group flash erase
EraseArea[0,CMT]: 0x0A880000-0x0F71FFFF, ONENAND
Waiting 320s for erasure finish...
Erase taken 0.875s
Writing all blocks...
Programming Status OK!
All blocks written OK! Time taken 21.140s
Restarting MCU...
Processing RM-235_30.011_002_000_U001.uda.fpsx (APE)...
All images processed OK! Processing post flash tasks...
Post flash tasks finished!
Flashing successfully finished!
MCU Version	V ICPR71_09w12.2
MCU Date	14-04-09
Product		RM-235
Manufacturer	(c) Nokia
IMEI		3541720237*****
Mastercode	6243633770
IMEI Spare	3A45710232872506
IMEI SV		3345710232872516F1000000
PSN		MFK578118
Product Code	0545620
Basic Product Code	0531167
PSD		0000000000000000
LPSN		0
WLAN MAC	00210905C69C
APE SW		30.011
APE Variant	30.01130.011.005.130.011.051.1
APE Test		rm235_ENO_x_2008wk09v0.010
APE HW		256
APE ADSP	256
RETU		15
TAHVO		22
AHNE		11
HW		6500
RFIC		17141715
DSP		ICPR71_09w10
Simlock Server	SIMLOCK SERVER
Simlock Key	2440700000000000
Simlock Profile	0000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [1,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [1,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [2,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [3,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [4,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [5,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [6,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [7,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF

Last edited by ptt; 01-17-2010 at 17:43. Reason: add code tag
 
Old 10-15-2009, 07:33   #439 (permalink)
No Life Poster
 
Join Date: Jan 2006
Location: Pakistan
Posts: 15,094
Member: 226457
Status: Offline
Sonork: No more used
Thanks Meter: 14,934
6500S Successfully Unlocked


Code:
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006010C192101003000
CMT_EM_ASIC_ID:		 00000295
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 17200010BEC84F50BB7AB365029CF1181C6C3CA9
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID:		 273F6D55DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x0001003F00008A21, AMD, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: A69838E8C5F20150E64E2E6E06DE6E50B26B593F
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
Restarting MCU...
BB5 Unlock Started...
MCU Version	V 04.81
MCU Date	22-11-07
Product		RM-240
Manufacturer	(c) Nokia            
IMEI		353
Mastercode	7155344462
Simlock Server	SIMLOCK SERVER
Simlock Key	2342000000000000
Simlock Profile	8000000000000002
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: CLOSED	Type: MCC-MNC	Data: 23420F
Simlock [2,1]	State: CLOSED	Type: MCC-MNC	Data: 23594F
Reading Security Block...
Security block OK!
Determining PA Simlock...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006010C192101003000
CMT_EM_ASIC_ID:		 00000295
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 17200010BEC84F50BB7AB365029CF1181C6C3CA9
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID:		 273F6D55DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x0001003F00008A21, AMD, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: A69838E8C5F20150E64E2E6E06DE6E50B26B593F
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Restarting MCU...
Determined PA Simlock: PA_SL2
Checking for Rootkey Hash support...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006010C192101003000
CMT_EM_ASIC_ID:		 00000295
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 17200010BEC84F50BB7AB365029CF1181C6C3CA9
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID:		 273F6D55DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.30.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Exploiting - running preloader...
Preloader running OK, Running Custom Loader...
Custom loader running OK! Working...
Received Security Block OK !
Bypassing SX4...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006010C192101003000
CMT_EM_ASIC_ID:		 00000295
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 17200010BEC84F50BB7AB365029CF1181C6C3CA9
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID:		 273F6D55DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x0001003F00008A21, AMD, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: A69838E8C5F20150E64E2E6E06DE6E50B26B593F
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
CMT NPC Ok
CMT NPC Erased
Restarting MCU...
Writing Security Block...
Writing Simlock Key...
SP Accepted, doing reset to update block...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006010C192101003000
CMT_EM_ASIC_ID:		 00000295
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 17200010BEC84F50BB7AB365029CF1181C6C3CA9
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID:		 273F6D55DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x0001003F00008A21, AMD, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: A69838E8C5F20150E64E2E6E06DE6E50B26B593F
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Restoring NPC...
Restarting MCU...
SX4 Bypass Finished
MCU Version	V 04.81
MCU Date	22-11-07
Product		RM-240
Manufacturer	(c) Nokia            
IMEI		353
Mastercode	7155344462
Simlock Server	SIMLOCK SERVER
Simlock Key	0010100000000000
Simlock Profile	8000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: OPENED	Type: MCC-MNC	Data: 00101F
Unlock finished!

Last edited by ptt; 01-17-2010 at 17:43. Reason: add code tag
 
Old 10-15-2009, 07:35   #440 (permalink)
No Life Poster
 
Join Date: Jan 2006
Location: Pakistan
Posts: 15,094
Member: 226457
Status: Offline
Sonork: No more used
Thanks Meter: 14,934
6500c Successfully Unlocked


Code:
MCU Version	V 03.21
MCU Date	31-08-07
Product		RM-265
Manufacturer	(c) Nokia            
IMEI		358
Mastercode	3670305267
Simlock backup OK, saved to RM-265_3586_10152009_112620 AM.SLBackup.PM
BB5 Unlock Started...
MCU Version	V 03.21
MCU Date	31-08-07
Product		RM-265
Manufacturer	(c) Nokia            
IMEI		358
Mastercode	3670305267
Simlock Server	SIMLOCK SERVER
Simlock Key	2341500000000000
Simlock Profile	8000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: CLOSED	Type: MCC-MNC	Data: 23415F
Reading Security Block...
Security block OK!
Determining PA Simlock...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006010C192101003000
CMT_EM_ASIC_ID:		 00000295
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 2630011826EE6A50A7E6CC0A922F5507119D3BC0
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID:		 273F6D55DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC220C00008921, Samsung, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: D0D8948DEF333BF18141EF4C3D0FB1B002EB5D88
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Restarting MCU...
Determined PA Simlock: PA_SL2
Checking for Rootkey Hash support...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006010C192101003000
CMT_EM_ASIC_ID:		 00000295
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 2630011826EE6A50A7E6CC0A922F5507119D3BC0
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID:		 273F6D55DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.30.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Exploiting - running preloader...
Preloader running OK, Running Custom Loader...
Custom loader running OK! Working...
Received Security Block OK !
Bypassing SX4...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006010C192101003000
CMT_EM_ASIC_ID:		 00000295
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 2630011826EE6A50A7E6CC0A922F5507119D3BC0
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID:		 273F6D55DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC220C00008921, Samsung, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: D0D8948DEF333BF18141EF4C3D0FB1B002EB5D88
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
CMT NPC Ok
CMT NPC Erased
Restarting MCU...
Writing Security Block...
Writing Simlock Key...
SP Accepted, doing reset to update block...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006010C192101003000
CMT_EM_ASIC_ID:		 00000295
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 2630011826EE6A50A7E6CC0A922F5507119D3BC0
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID:		 273F6D55DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC220C00008921, Samsung, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: D0D8948DEF333BF18141EF4C3D0FB1B002EB5D88
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Restoring NPC...
Restarting MCU...
SX4 Bypass Finished
MCU Version	V 03.21
MCU Date	31-08-07
Product		RM-265
Manufacturer	(c) Nokia            
IMEI		358
Mastercode	3670305267
Simlock Server	SIMLOCK SERVER
Simlock Key	0010100000000000
Simlock Profile	8000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: OPENED	Type: MCC-MNC	Data: 00101F
Unlock finished!

Last edited by ptt; 01-17-2010 at 17:44. Reason: add code tag
 
Old 10-15-2009, 13:48   #441 (permalink)
Freak Poster
 
Join Date: Jan 2007
Location: <Al hind al Garbiyya> Barbados
Posts: 157
Member: 430155
Status: Offline
Thanks Meter: 40
Unlock Nokia 2680s-2b successfully

Code:
MCU Version	V 04.56
MCU Date	02-07-08
Product		RM-393
Manufacturer	(c) Nokia            
IMEI		011739004160495
Mastercode	512064442
Selecting unlock method...
Search in: C:\Program Files\Cyclone Box\UnlockData\
Searching for: RM-393_V 04.56.unlock_img
Writing patch file...
Booting UPP...
UPP ID: 3162 [HW_UNKNOWN]
shadow, Type: Flash Image, Algo: DCT4, DCT4 ALGORITHM
Flashbus Write baud set to 100Kbits
u3_2nd.fia, Type: 2nd Boot Loader, Rev: 7.4.79.0, Algo: DCT4
Box VPP disabled
Internal Phone VPP Selected
PLL Factor: 3
FlashChip[0]: 0x0020883C @ 0x01000000, ST, SectorSize: 128kB, Ext: 00009321
FlashChip[1]: 0x0020883C @ 0x02000000, ST, SectorSize: 128kB, Ext: 00009321
Signature: AD7EB61B00FF10400000000000000000
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 51Kbits
u3_intel.fia, Type: Algorithm, Target: FlashChip[0] 0x0020883C (256Mbits), Rev: 7.4.80.0, Algo: DCT4 ALGORITHM
Nominal VPP Voltage: 9V, Detected: 0.04V 
MSID-Crypted: 8443865DEC27D0E8A347AE86FC
MSID-Plain: 2C40BAE9000B1896AA000000
FAID-Crypted: BC2F765308CB34951E9F3785
Flashbus Write baud set to 6.50Mbits
2 Region(s) to erase
Erasing NOR Region [0x01000000-0x0101FFFF]
Erasing NOR Region [0x01080000-0x0109FFFF]
Erase taken 2.282s
Writing 10 blocks...
All blocks written OK! Time taken 1.515s
Terminating flash session
Box VPP disabled
Asic		11
HW Signature	20707FDCDD03B0A6
Simlock Server	SIMLOCK SERVER
Simlock Key	3027200000000000
Simlock Profile	800000000003000B
Simlock Aux	000B5555
Simlock IMEI	00550117390041604900
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: CLOSED	Type: 7FFF6F07FFFFFFFF @ FC00	Data: 302720
Asking card to sign HW Signature...
Signed OK (438F43469828E7076A06E06A3252BD90EA622E48)
Simlock Security - NOT TAMPERED
Saving Simlock to "RM-393_011739004160495_10152009_84540 AM.Unlock.PM"
Writing SP...
New SP Accepted OK!
Phone unlocked OK!

Last edited by ptt; 01-17-2010 at 17:44. Reason: add code tag
 
Old 10-15-2009, 13:48   #442 (permalink)
No Life Poster
 
mani_satcell's Avatar
 
Join Date: May 2004
Location: Coimbatore, India
Age: 41
Posts: 637
Member: 65535
Status: Offline
Thanks Meter: 451
N85 unlock successfully ......
 
Old 10-17-2009, 10:00   #443 (permalink)
Insane Poster
 
Join Date: Feb 2009
Posts: 64
Member: 970686
Status: Offline
Sonork: none
Thanks Meter: 38
6210s successfully unlock using ufc cable #3
here pin out:

here procedure:
1] info
2] save pm
3 click unlock
here screen shut:

Code:
MCU Version	V 08w35.13
MCU Date	10-02-09
Product		RM-408
Manufacturer	(c) Nokia
IMEI		356831021191786
Mastercode	3257221720
IMEI Spare	3A65380112917108
IMEI SV		3365380112917148F3000000
PSN		C8B075087
Product Code	0570079
Basic Product Code	0557616
PSD		0000000000000000
LPSN		0
Camera		1
APE SW		04.13.08
APE Variant	24.0104.13.08.c67.01
APE Test		RM408ENOx0851v0.010
APE HW		256
APE ADSP	256
RETU		16
TAHVO		22
AHNE		11
HW		0851
RFIC		17141715
DSP		ICPR71_08w41
Simlock Server	SIMLOCK SERVER
Simlock Key	2440700000000000
Simlock Profile	1000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: CLOSED	Type: 7FFF6F07FFFFFFFF @ E000	Data: 450F
Backing up simlock...
MCU Version	V 08w35.13
MCU Date	10-02-09
Product		RM-408
Manufacturer	(c) Nokia
IMEI		356831021191786
Mastercode	3257221720
Simlock backup OK, saved to RM-408_356831021191786_10162009_113113 PM.SLBackup.PM
BB5 Unlock Started...
MCU Version	V 08w35.13
MCU Date	10-02-09
Product		RM-408
Manufacturer	(c) Nokia
IMEI		356831021191786
Mastercode	3257221720
Simlock Server	SIMLOCK SERVER
Simlock Key	2440700000000000
Simlock Profile	1000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: CLOSED	Type: 7FFF6F07FFFFFFFF @ E000	Data: 450F
Reading Security Block...
Security block OK!
Determining PA Simlock...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 144000038A7A00528B1FBAABCA5BE30437986318
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000800121, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 4AA07663215C623237BF8A43EC71D55819B7DC6E
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Restarting MCU...
Determined PA Simlock: PA_SL2
Checking for Rootkey Hash support...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 144000038A7A00528B1FBAABCA5BE30437986318
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.30.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Exploiting - running preloader...
Preloader running OK, Running Custom Loader...
Custom loader running OK! Working...
#pw+646174784576497+1#
#pw+731569017549851+2#
#pw+834393605527232+3#
#pw+575748096829987+4#
#pw+120211730379534+5#
#pw+414033737579731+6#
#pw+760456292247685+7#
Sending NCK Code (Level 7)..
NCK Accepted! Phone unlocked OK!
MCU Version	V 08w35.13
MCU Date	10-02-09
Product		RM-408
Manufacturer	(c) Nokia
IMEI		356831021191786
Mastercode	3257221720
Simlock Server	SIMLOCK SERVER
Simlock Key	2440700000000000
Simlock Profile	1000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: OPENED	Type: 7FFF6F07FFFFFFFF @ E000	Data: 450F
Simlock NCK	#pw+760456292247685+7#
Unlock finished!
TNX CYCLONE..
 
Old 10-18-2009, 11:25   #444 (permalink)
No Life Poster
 
systemworm's Avatar
 
Join Date: Jun 2004
Location: Azerbaijan
Age: 38
Posts: 3,958
Member: 68498
Status: Offline
Thanks Meter: 152
Thumbs up

2700c rm-561 successfully flashed via fbus
Code:
MCU Version	V 07.15
MCU Date	04-06-09
Product		RM-561
Manufacturer	(c) Nokia            
IMEI		3541920303*****
Mastercode	277413364
IMEI Spare	3A45910203330203
IMEI SV		3345910203330233F6000000
PPM		V 07.15, 04-06-09, RM-561, (c) Nokia            , EF
CNT		Content: CTV FR, V 07.15, 04-06-09, RM-561, (c) Nokia            , , 
PSN		DAQ668002
Product Code	0587071
Module Code	0204245
Basic Product Code	0577212
PSD		0000000000000000
LPSN		0
RETU		16
TAHVO		22
AHNE		30
HW		1000
RFIC		06540601
DSP		ICPR72_09w15
LCD		SEIKO
BT		2222-143C
Simlock Server	SIMLOCK SERVER
Simlock Key	2440700000000000
Simlock Profile	0000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [1,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [1,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [2,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [3,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [4,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [5,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [6,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [7,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Scanning avaiable products...
Processing C:\Program Files\Nokia\Phoenix\Products\...
Processing C:\Program Files\Common Files\Nokia\DataPackage\Products\...
Found 114 products, Filtering BB5 Products - wait...
61 Products left after filtering. Ready.
Retrieving Variants for Product RM-561 - wait...
284 Variants Retrieved
Processing pre flash tasks...
Backing up RPL...
RPL Creation started...
Processing CMT Part...
Storing Product Code...
Storing PSN...
Storing HWID...
Trying to store Simlock...
Reading Configuration Key...
Hashing...
Reading SHA1-RSA Signature...
Reading SHA1-HMAC Signature...
Storing Simlock...
Trying to store WMDRM RPL...
Reading Keys...
Storing WMDRM PD...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006030C192101033000
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 0F8002071D097E56306C83CB74FCF00048CEF82A
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT_ROM_ID:		 273F6D55DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x0089898200008A31, Intel, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 3EA22A1DDA660002E56108DB5072A10F8709443F
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
Storing NPC...
Storing CCC...
Storing HWC...
CMT VARIANT Not Found
Restarting MCU...
RPL Saved OK
RPL backup thread finished, continuing...
Backing up simlock...
MCU Version	V 07.15
MCU Date	04-06-09
Product		RM-561
Manufacturer	(c) Nokia            
IMEI		3541920303*****
Mastercode	277413364
Simlock backup OK, saved to RM-561_3541920303*****_10182009_31130 PM.SLBackup.PM
Backup simlock thread finished, continuing...
Pre flash tasks finished, continuing...
Processing rm561__07.80.mcusw (CMT)...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006030C192101033000
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 0F8002071D097E56306C83CB74FCF00048CEF82A
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT_ROM_ID:		 273F6D55DFAAF68F
rm561__07.80.mcusw, Type: Flash Image, Algo: BB5, BB5 ALGORITHM
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x0089898200008A31, Intel, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 3EA22A1DDA660002E56108DB5072A10F8709443F
Flashbus Write baud set to 5.0Mbits
Sending Certificates...
Certificates OK
Started group flash erase
EraseArea[0,CMT]: 0x00000000-0x000006BF, NOR
EraseArea[0,CMT]: 0x000006C0-0x0001FFFF, NOR
EraseArea[0,CMT]: 0x00040000-0x000BFFFF, NOR
EraseArea[0,CMT]: 0x000C0000-0x0013FFFF, NOR
EraseArea[0,CMT]: 0x00140000-0x0137FFFF, NOR
EraseArea[0,CMT]: 0x01380000-0x0151FFFF, NOR
Waiting 320s for erasure finish...
Erase taken 92.235s
Writing all blocks...
Writing CMT NOLO Certificate...
Writing CMT KEYS Certificate...
Writing CMT PRIMAPP Certificate...
Writing CMT PASUBTOC Certificate...
Writing CMT PAPUBKEYS Certificate...
Writing CMT UPDAPP Certificate...
Writing CMT DSP0 Certificate...
Writing CMT MCUSW Certificate...
Programming Status OK!
All blocks written OK! Time taken 53.125s
Restarting MCU...
Processing rm561__07.80.mcusw (APE)...
Processing rm561__07.80.ppm_ei (CMT)...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006030C192101033000
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 0F8002071D097E56306C83CB74FCF00048CEF82A
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT_ROM_ID:		 273F6D55DFAAF68F
rm561__07.80.ppm_ei, Type: Flash Image, Algo: BB5, BB5 ALGORITHM
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x0089898200008A31, Intel, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 3EA22A1DDA660002E56108DB5072A10F8709443F
Flashbus Write baud set to 5.0Mbits
Started group flash erase
EraseArea[0,CMT]: 0x01520000-0x01DBFFFF, NOR
Waiting 320s for erasure finish...
Erase taken 26.79s
Writing all blocks...
Programming Status OK!
All blocks written OK! Time taken 13.579s
Restarting MCU...
Processing rm561__07.80.ppm_ei (APE)...
Processing rm561__07.80.image_ei_blac (CMT)...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006030C192101033000
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 0F8002071D097E56306C83CB74FCF00048CEF82A
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT_ROM_ID:		 273F6D55DFAAF68F
rm561__07.80.image_ei_blac, Type: Flash Image, Algo: BB5, BB5 ALGORITHM
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x0089898200008A31, Intel, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 3EA22A1DDA660002E56108DB5072A10F8709443F
Flashbus Write baud set to 5.0Mbits
Started group flash erase
EraseArea[0,CMT]: 0x01DC0000-0x0215FFFF, NOR
EraseArea[0,CMT]: 0x02160000-0x03FBFFFF, NOR
Waiting 320s for erasure finish...
Erase taken 198.485s
Writing all blocks...
Programming Status OK!
All blocks written OK! Time taken 30.156s
Restarting MCU...
Processing rm561__07.80.image_ei_blac (APE)...
All images processed OK! Processing post flash tasks...
Setting Factory Defaults...
Factory defaults OK
Reading info...
MCU Version	V 07.80
MCU Date	18-08-09
Product		RM-561
Manufacturer	(c) Nokia            
IMEI		3541920303*****
Mastercode	277413364
IMEI Spare	3A45910203330203
IMEI SV		3345910203330243F4000000
PPM		V 07.80, 18-08-09, RM-561, (c) Nokia            , EI
CNT		Content: ei_black, V 07.80, 18-08-09, RM-561, (c) Nokia            , 
PSN		DAQ668002
Product Code	0587071
Module Code	0204245
Basic Product Code	0577212
PSD		0000000000000000
LPSN		0
RETU		16
TAHVO		22
AHNE		30
HW		1000
RFIC		06540601
DSP		ICPR72_09w24
LCD		SEIKO
BT		2222-143C
Simlock Server	SIMLOCK SERVER
Simlock Key	2440700000000000
Simlock Profile	0000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [1,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [1,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [2,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [3,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [4,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [5,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [6,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [7,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Read info thread finished, continuing...
Post flash tasks finished!
Flashing successfully finished!
 
Old 10-19-2009, 14:37   #445 (permalink)
No Life Poster
 
moulnisky's Avatar
 
Join Date: Jan 2009
Location: England
Age: 59
Posts: 17,681
Member: 947561
Status: Offline
Thanks Meter: 14,053
E71 done wit Cyclone V2 Adapter By GPG - Smooth and easy

Code:
PM Read OK, Time taken 21.657s
RPL Creation started...
Processing CMT Part...
Storing Product Code...
Storing PSN...
Storing HWID...
Trying to store Simlock...
Reading Configuration Key...
Hashing...
Reading SHA1-RSA Signature...
Reading SHA1-HMAC Signature...
Storing Simlock...
Trying to store WMDRM RPL...
Reading Keys...
Storing WMDRM PD...
Booting RAP...
CMT_SYSTEM_ASIC_ID:  000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:   00000295
CMT_EM_ASIC_ID:   00000B22
CMT_PUBLIC_ID:   1BF00113586B005243F3815A2A27DD00FD19E51C
CMT_ASIC_MODE_ID:  00
CMT_ROOT_KEY_HASH:  CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:   4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000800121, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 52570A2086C79E6965175815B5388535CDD5C6F7
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
Storing NPC...
Storing CCC...
Storing HWC...
CMT VARIANT Not Found
Restarting MCU...
RPL Saved OK
Booting RAP...
CMT_SYSTEM_ASIC_ID:  000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:   00000295
CMT_EM_ASIC_ID:   00000B22
CMT_PUBLIC_ID:   1BF00113586B005243F3815A2A27DD00FD19E51C
CMT_ASIC_MODE_ID:  00
CMT_ROOT_KEY_HASH:  CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:   4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000800121, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 52570A2086C79E6965175815B5388535CDD5C6F7
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
CMT NPC Ok
CMT HWC Ok
CMT CCC Ok
CMT R&D Ok
CMT VARIANT Not Found
CMT PAPUBKEYS Ok
CMT KEYS Ok
Restarting MCU...
Read all certificates finished
BB5 Unlock Started...
MCU Version V 100.71.821.4
MCU Date 06-06-08
Product  RM-346
Manufacturer (c) Nokia
IMEI  351940038557627
Mastercode 125442712
Simlock Server SIMLOCK SERVER
Simlock Key 2342000000000000
Simlock Profile 8000000000000000
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: CLOSED Type: MCC-MNC Data: 23420F
Simlock [2,1] State: CLOSED Type: MCC-MNC Data: 23595F
Reading Security Block...
Security block OK!
Determining PA Simlock...
Booting RAP...
CMT_SYSTEM_ASIC_ID:  000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:   00000295
CMT_EM_ASIC_ID:   00000B22
CMT_PUBLIC_ID:   1BF00113586B005243F3815A2A27DD00FD19E51C
CMT_ASIC_MODE_ID:  00
CMT_ROOT_KEY_HASH:  CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:   4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000800121, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 52570A2086C79E6965175815B5388535CDD5C6F7
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Restarting MCU...
Determined PA Simlock: PA_SL2
Checking for Rootkey Hash support...
Booting RAP...
CMT_SYSTEM_ASIC_ID:  000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:   00000295
CMT_EM_ASIC_ID:   00000B22
CMT_PUBLIC_ID:   1BF00113586B005243F3815A2A27DD00FD19E51C
CMT_ASIC_MODE_ID:  00
CMT_ROOT_KEY_HASH:  CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:   4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.30.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Exploiting - running preloader...
Preloader running OK, Running Custom Loader...
Custom loader running OK! Working...
#pw+741909206745457+1#
#pw+588564228310023+2#
#pw+129329411973305+3#
#pw+882183265597973+4#
#pw+090348616110300+5#
#pw+716766652200796+6#
#pw+053977932083126+7#
Sending NCK Code (Level 7)..
NCK Accepted! Phone unlocked OK!
MCU Version V 100.71.821.4
MCU Date 06-06-08
Product  RM-346
Manufacturer (c) Nokia
IMEI  351940038557627
Mastercode 125442712
Simlock Server SIMLOCK SERVER
Simlock Key 2342000000000000
Simlock Profile 8000000000000000
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: OPENED Type: MCC-MNC Data: 23420F
Simlock [2,1] State: OPENED Type: MCC-MNC Data: 23595F
Simlock NCK #pw+053977932083126+7#
Unlock finished!
BR

Alex

Last edited by ptt; 01-17-2010 at 17:45. Reason: add code tag
 
Old 10-19-2009, 19:43   #446 (permalink)
Freak Poster
 
Join Date: Sep 2009
Location: No location
Posts: 493
Member: 1120374
Status: Offline
Thanks Meter: 67
Code:
MCU Version	V 07.15
MCU Date	04-06-09
Product		RM-561
Manufacturer	(c) Nokia            
IMEI		3541920303*****
Mastercode	277413364
IMEI Spare	3A45910203330203
IMEI SV		3345910203330233F6000000
PPM		V 07.15, 04-06-09, RM-561, (c) Nokia            , EF
CNT		Content: CTV FR, V 07.15, 04-06-09, RM-561, (c) Nokia            , , 
PSN		DAQ668002
Product Code	0587071
Module Code	0204245
Basic Product Code	0577212
PSD		0000000000000000
LPSN		0
RETU		16
TAHVO		22
AHNE		30
HW		1000
RFIC		06540601
DSP		ICPR72_09w15
LCD		SEIKO
BT		2222-143C
Simlock Server	SIMLOCK SERVER
Simlock Key	2440700000000000
Simlock Profile	0000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [1,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [1,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [2,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [3,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [4,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [5,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [6,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [7,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Scanning avaiable products...
Processing C:\Program Files\Nokia\Phoenix\Products\...
Processing C:\Program Files\Common Files\Nokia\DataPackage\Products\...
Found 114 products, Filtering BB5 Products - wait...
61 Products left after filtering. Ready.
Retrieving Variants for Product RM-561 - wait...
284 Variants Retrieved
Processing pre flash tasks...
Backing up RPL...
RPL Creation started...
Processing CMT Part...
Storing Product Code...
Storing PSN...
Storing HWID...
Trying to store Simlock...
Reading Configuration Key...
Hashing...
Reading SHA1-RSA Signature...
Reading SHA1-HMAC Signature...
Storing Simlock...
Trying to store WMDRM RPL...
Reading Keys...
Storing WMDRM PD...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006030C192101033000
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 0F8002071D097E56306C83CB74FCF00048CEF82A
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT_ROM_ID:		 273F6D55DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x0089898200008A31, Intel, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 3EA22A1DDA660002E56108DB5072A10F8709443F
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
Storing NPC...
Storing CCC...
Storing HWC...
CMT VARIANT Not Found
Restarting MCU...
RPL Saved OK
RPL backup thread finished, continuing...
Backing up simlock...
MCU Version	V 07.15
MCU Date	04-06-09
Product		RM-561
Manufacturer	(c) Nokia            
IMEI		3541920303*****
Mastercode	277413364
Simlock backup OK, saved to RM-561_3541920303*****_10182009_31130 PM.SLBackup.PM
Backup simlock thread finished, continuing...
Pre flash tasks finished, continuing...
Processing rm561__07.80.mcusw (CMT)...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006030C192101033000
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 0F8002071D097E56306C83CB74FCF00048CEF82A
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT_ROM_ID:		 273F6D55DFAAF68F
rm561__07.80.mcusw, Type: Flash Image, Algo: BB5, BB5 ALGORITHM
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x0089898200008A31, Intel, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 3EA22A1DDA660002E56108DB5072A10F8709443F
Flashbus Write baud set to 5.0Mbits
Sending Certificates...
Certificates OK
Started group flash erase
EraseArea[0,CMT]: 0x00000000-0x000006BF, NOR
EraseArea[0,CMT]: 0x000006C0-0x0001FFFF, NOR
EraseArea[0,CMT]: 0x00040000-0x000BFFFF, NOR
EraseArea[0,CMT]: 0x000C0000-0x0013FFFF, NOR
EraseArea[0,CMT]: 0x00140000-0x0137FFFF, NOR
EraseArea[0,CMT]: 0x01380000-0x0151FFFF, NOR
Waiting 320s for erasure finish...
Erase taken 92.235s
Writing all blocks...
Writing CMT NOLO Certificate...
Writing CMT KEYS Certificate...
Writing CMT PRIMAPP Certificate...
Writing CMT PASUBTOC Certificate...
Writing CMT PAPUBKEYS Certificate...
Writing CMT UPDAPP Certificate...
Writing CMT DSP0 Certificate...
Writing CMT MCUSW Certificate...
Programming Status OK!
All blocks written OK! Time taken 53.125s
Restarting MCU...
Processing rm561__07.80.mcusw (APE)...
Processing rm561__07.80.ppm_ei (CMT)...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006030C192101033000
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 0F8002071D097E56306C83CB74FCF00048CEF82A
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT_ROM_ID:		 273F6D55DFAAF68F
rm561__07.80.ppm_ei, Type: Flash Image, Algo: BB5, BB5 ALGORITHM
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x0089898200008A31, Intel, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 3EA22A1DDA660002E56108DB5072A10F8709443F
Flashbus Write baud set to 5.0Mbits
Started group flash erase
EraseArea[0,CMT]: 0x01520000-0x01DBFFFF, NOR
Waiting 320s for erasure finish...
Erase taken 26.79s
Writing all blocks...
Programming Status OK!
All blocks written OK! Time taken 13.579s
Restarting MCU...
Processing rm561__07.80.ppm_ei (APE)...
Processing rm561__07.80.image_ei_blac (CMT)...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006030C192101033000
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 0F8002071D097E56306C83CB74FCF00048CEF82A
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT_ROM_ID:		 273F6D55DFAAF68F
rm561__07.80.image_ei_blac, Type: Flash Image, Algo: BB5, BB5 ALGORITHM
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x0089898200008A31, Intel, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 3EA22A1DDA660002E56108DB5072A10F8709443F
Flashbus Write baud set to 5.0Mbits
Started group flash erase
EraseArea[0,CMT]: 0x01DC0000-0x0215FFFF, NOR
EraseArea[0,CMT]: 0x02160000-0x03FBFFFF, NOR
Waiting 320s for erasure finish...
Erase taken 198.485s
Writing all blocks...
Programming Status OK!
All blocks written OK! Time taken 30.156s
Restarting MCU...
Processing rm561__07.80.image_ei_blac (APE)...
All images processed OK! Processing post flash tasks...
Setting Factory Defaults...
Factory defaults OK
Reading info...
MCU Version	V 07.80
MCU Date	18-08-09
Product		RM-561
Manufacturer	(c) Nokia            
IMEI		3541920303*****
Mastercode	277413364
IMEI Spare	3A45910203330203
IMEI SV		3345910203330243F4000000
PPM		V 07.80, 18-08-09, RM-561, (c) Nokia            , EI
CNT		Content: ei_black, V 07.80, 18-08-09, RM-561, (c) Nokia            , 
PSN		DAQ668002
Product Code	0587071
Module Code	0204245
Basic Product Code	0577212
PSD		0000000000000000
LPSN		0
RETU		16
TAHVO		22
AHNE		30
HW		1000
RFIC		06540601
DSP		ICPR72_09w24
LCD		SEIKO
BT		2222-143C
Simlock Server	SIMLOCK SERVER
Simlock Key	2440700000000000
Simlock Profile	0000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [1,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [1,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [2,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [3,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [4,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [5,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [6,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [7,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Read info thread finished, continuing..
Post flash tasks finished!
Flashing successfully finished!

Last edited by ptt; 01-17-2010 at 17:46. Reason: add code tag
 
Old 10-19-2009, 19:45   #447 (permalink)
Freak Poster
 
Join Date: Sep 2009
Location: No location
Posts: 493
Member: 1120374
Status: Offline
Thanks Meter: 67
Code:
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006010C192101001101
CMT_EM_ASIC_ID:		 00000232
CMT_EM_ASIC_ID:		 00000353
CMT_PUBLIC_ID:		 0600020C35765F563B394D5FE50F8F04FA468389
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID:		 191EC665DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC22FE00006921, Samsung, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 4.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: D6D07E588DC4E06DEE7012A3C0ECC4E35D3CE263
APE Subsystem Not Found
Restarting MCU...
Backing up simlock...
MCU Version	V 03.92
MCU Date	13-10-06
Product		RM-174
Manufacturer	(c) Nokia.           
IMEI		3594
Mastercode	771351723
Simlock backup OK, saved to RM-174_3494_8252009_103010 AM.SLBackup.PM
RPL Creation started...
Processing CMT Part...
Storing Product Code...
Storing PSN...
Storing HWID...
Simlock Store not supported, not a PA_SL2 Phone
Trying to store WMDRM RPL...
Reading Keys...
Storing WMDRM PD...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006010C192101001101
CMT_EM_ASIC_ID:		 00000232
CMT_EM_ASIC_ID:		 00000353
CMT_PUBLIC_ID:		 0600020C35765F563B394D5FE50F8F04FA468389
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID:		 191EC665DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC22FE00006921, Samsung, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 4.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: D6D07E588DC4E06DEE7012A3C0ECC4E35D3CE263
APE Subsystem Not Found
Storing NPC...
Storing CCC...
Storing HWC...
Storing VARIANT...
Restarting MCU...
RPL Saved OK
BB5 Unlock Started...
MCU Version	V 03.92
MCU Date	13-10-06
Product		RM-174
Manufacturer	(c) Nokia.           
IMEI		
Mastercode	771351723
Simlock Server	SIMLOCK SERVER VERSION 63
Simlock Key	2340000100000000
Simlock Profile	8000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: CLOSED	Type: MCC-MNC	Data: 23430F
Simlock [1,2]	State: CLOSED	Type: GID	Data: 2800
Reading Security Block...
Security block OK!
Determining PA Simlock...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006010C192101001101
CMT_EM_ASIC_ID:		 00000232
CMT_EM_ASIC_ID:		 00000353
CMT_PUBLIC_ID:		 0600020C35765F563B394D5FE50F8F04FA468389
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID:		 191EC665DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC22FE00006921, Samsung, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 4.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: D6D07E588DC4E06DEE7012A3C0ECC4E35D3CE263
APE Boot skipped on user request
Restarting MCU...
Determined PA Simlock: PA_SL
Checking for Rootkey Hash support...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006010C192101001101
CMT_EM_ASIC_ID:		 00000232
CMT_EM_ASIC_ID:		 00000353
CMT_PUBLIC_ID:		 0600020C35765F563B394D5FE50F8F04FA468389
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID:		 191EC665DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.30.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Exploiting - running preloader...
Preloader running OK, Running Custom Loader...
Custom loader running OK! Working...
Received Security Block OK !
Writing Security Block...
SP Accepted, doing reset to update block...
MCU Version	V 03.92
MCU Date	13-10-06
Product		RM-174
Manufacturer	(c) Nokia.           
IMEI		35
Mastercode	771351723
Simlock Server	SIMLOCK SERVER VERSION 63
Simlock Key	2440700000000000
Simlock Profile	8000000000000006
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [1,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [1,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [2,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [3,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [4,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [5,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [6,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [7,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Unlock finished!

Last edited by ptt; 01-17-2010 at 17:46. Reason: add code tag
 
Old 10-19-2009, 19:49   #448 (permalink)
Freak Poster
 
Join Date: Sep 2009
Location: No location
Posts: 493
Member: 1120374
Status: Offline
Thanks Meter: 67
Code:
MCU Version	V ICPR72_08w41.2
MCU Date	25-11-08
Product		RM-247
Manufacturer	(c) Nokia
IMEI		356406027498137
Mastercode	7555432337
IMEI Spare	3A65040672941803
IMEI SV		3365040672941803F6000000
PSN		CHH478006
Product Code	0572883
Basic Product Code	0542934
PSD		0000000000000000
LPSN		0
WLAN MAC	0022FC990AB5
RETU		15
TAHVO		22
AHNE		11
HW		1001
RFIC		17141715
DSP		mc_4032_ICPR72_08w41_p2
Simlock Server	SIMLOCK SERVER
Simlock Key	2342000000000000
Simlock Profile	0000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: CLOSED	Type: MCC-MNC	Data: 23420F
Simlock [2,1]	State: CLOSED	Type: MCC-MNC	Data: 23420F
Simlock [3,1]	State: CLOSED	Type: MCC-MNC	Data: 23594F
Simlock [4,1]	State: CLOSED	Type: MCC-MNC	Data: 23594F
BB5 Unlock Started...
MCU Version	V ICPR72_08w41.2
MCU Date	25-11-08
Product		RM-247
Manufacturer	(c) Nokia
IMEI		356406027498137
Mastercode	7555432337
Simlock Server	SIMLOCK SERVER
Simlock Key	2342000000000000
Simlock Profile	0000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: CLOSED	Type: MCC-MNC	Data: 23420F
Simlock [2,1]	State: CLOSED	Type: MCC-MNC	Data: 23420F
Simlock [3,1]	State: CLOSED	Type: MCC-MNC	Data: 23594F
Simlock [4,1]	State: CLOSED	Type: MCC-MNC	Data: 23594F
Reading Security Block...
Security block OK!
Determining PA Simlock...
Booting RAP...
APE_SYSTEM_ASIC_ID:	 008815D3
APE_ASIC_MODE_ID:	 00
APE_PUBLIC_ID:		 512AA98EF5D7A8A69C431D8F6BCAE02550AEDB6E
APE_ROOT_KEY_HASH:	 0BBC4203E2D3B82504C75CB65E906A35
APE_ROM_ID:		 137A9A3B33259D2C
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:		 00000295
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 2240010E747000521442020F728D2BC3D935ED9B
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x0001003500006921, AMD, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.35.0, Algo: XSR 1.5
Flashbus Write baud set to 4.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: AD7799ABC45695918C0B8E955FAD5FF12650E6AE
APE Boot skipped on user request
Restarting MCU...
Determined PA Simlock: PA_SL2
Checking for Rootkey Hash support...
Booting RAP...
APE_SYSTEM_ASIC_ID:	 008815D3
APE_ASIC_MODE_ID:	 00
APE_PUBLIC_ID:		 512AA98EF5D7A8A69C431D8F6BCAE02550AEDB6E
APE_ROOT_KEY_HASH:	 0BBC4203E2D3B82504C75CB65E906A35
APE_ROM_ID:		 137A9A3B33259D2C
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:		 00000295
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 2240010E747000521442020F728D2BC3D935ED9B
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.30.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Exploiting - running preloader...
Preloader running OK, Running Custom Loader...
Custom loader running OK! Working...
#pw+970963950971407+1#
#pw+967349859889990+2#
#pw+115813233105582+3#
#pw+709809083358899+4#
#pw+452637505195351+5#
#pw+325521095908474+6#
#pw+820196157369704+7#
Sending NCK Code (Level 7)..
NCK Accepted! Phone unlocked OK!
MCU Version	V ICPR72_08w41.2
MCU Date	25-11-08
Product		RM-247
Manufacturer	(c) Nokia
IMEI		356406027498137
Mastercode	7555432337
Simlock Server	SIMLOCK SERVER
Simlock Key	2342000000000000
Simlock Profile	0000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: OPENED	Type: MCC-MNC	Data: 23420F
Simlock [2,1]	State: OPENED	Type: MCC-MNC	Data: 23420F
Simlock [3,1]	State: OPENED	Type: MCC-MNC	Data: 23594F
Simlock [4,1]	State: OPENED	Type: MCC-MNC	Data: 23594F
Simlock NCK	#pw+820196157369704+7#
Unlock finished!

Last edited by ptt; 01-17-2010 at 17:46. Reason: add code tag
 
Old 10-19-2009, 19:50   #449 (permalink)
Freak Poster
 
Join Date: Sep 2009
Location: No location
Posts: 493
Member: 1120374
Status: Offline
Thanks Meter: 67
Code:
MCU Version V 05.61
MCU Date 18-04-08
Product RM-395
Manufacturer © Nokia
IMEI 011671004799073
Mastercode 261225523
Asic 11
HW Signature 957887C93DAE5A0E
Simlock Server SIMLOCK SERVER
Simlock Key 3340309996332460
Simlock Profile 800000000001000B
Simlock Aux 000B5555
Simlock IMEI 00550116710047990700
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: CLOSED Type: MCC-MNC Data: 33403F
Simlock [2,1] State: CLOSED Type: MCC-MNC Data: 70403F
Simlock [3,1] State: CLOSED Type: MCC-MNC Data: 70604F
Simlock [4,1] State: CLOSED Type: MCC-MNC Data: 71030F
Simlock [5,1] State: CLOSED Type: MCC-MNC Data: 71402F
Simlock [6,1] State: CLOSED Type: MCC-MNC Data: 73002F
Simlock [7,1] State: CLOSED Type: MCC-MNC Data: 72207F
Simlock [8,1] State: CLOSED Type: MCC-MNC Data: 73212F
Simlock [9,1] State: CLOSED Type: MCC-MNC Data: 74000F
Simlock [10,1] State: CLOSED Type: MCC-MNC Data: 74807F
Simlock [11,1] State: CLOSED Type: MCC-MNC Data: 21407F
Simlock [12,1] State: CLOSED Type: MCC-MNC Data: 21402F
Selecting unlock method...
Search in: C:\Archivos de programa\Cyclone Box\UnlockData\
Searching for: RM-395_V 05.61.unlock_img
Asking card to sign HW Signature...
Signed OK (711DE3804F996CF440CE19866A9A261DBA1652ED)
Writing patch file...
Booting UPP...
UPP ID: 3162 [HW_UNKNOWN]
shadow, Type: Flash Image, Algo: DCT4, DCT4 ALGORITHM
Flashbus Write baud set to 100Kbits
u3_2nd.fia, Type: 2nd Boot Loader, Rev: 7.4.79.0, Algo: DCT4
Box VPP disabled
Internal Phone VPP Selected
PLL Factor: 3
FlashChip[0]: 0x0001317E @ 0x01000000, AMD, SectorSize: 128kB, Ext: 00419221
FlashChip[1]: 0x0001317E @ 0x02000000, AMD, SectorSize: 128kB, Ext: 00419221
Signature: AD7EB61A1BBE0BE27D586BE4DBEE6514
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 51Kbits
u3_amd.fia, Type: Algorithm, Target: FlashChip[0] 0x0001317E (256Mbits), Rev: 7.4.79.0, Algo: DCT4 ALGORITHM
Nominal VPP Voltage: 9V, Detected: 0,04V
MSID-Crypted: 843222E0994A03838340D7D50A
MSID-Plain: 2C40BAE900043490AA000000
FAID-Crypted: 76F7282E27D88FE394AC2821
Flashbus Write baud set to 6.50Mbits
2 Region(s) to erase
Erasing NOR Region [0x01000000-0x0101FFFF]
Erasing NOR Region [0x01080000-0x0109FFFF]
Erase taken 1.437s
Writing 10 blocks...
All blocks written OK! Time taken 7.828s
Terminating flash session
Box VPP disabled
Simlock Security - NOT TAMPERED
Saving Simlock to "RM-395_011671004799073_14082009_111437.Unlock.PM"
Writing SP...
New SP Accepted OK!
Phone unlocked OK!

Last edited by ptt; 01-17-2010 at 17:47. Reason: add code tag
 
Old 10-19-2009, 19:52   #450 (permalink)
Freak Poster
 
Join Date: Sep 2009
Location: No location
Posts: 493
Member: 1120374
Status: Offline
Thanks Meter: 67
6500c Successfully Unlocked


Code:
MCU Version V 03.21
MCU Date 31-08-07
Product RM-265
Manufacturer (c) Nokia
IMEI 358
Mastercode 3670305267
Simlock backup OK, saved to RM-265_3586_10152009_112620 AM.SLBackup.PM
BB5 Unlock Started...
MCU Version V 03.21
MCU Date 31-08-07
Product RM-265
Manufacturer (c) Nokia
IMEI 358
Mastercode 3670305267
Simlock Server SIMLOCK SERVER
Simlock Key 2341500000000000
Simlock Profile 8000000000000000
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: CLOSED Type: MCC-MNC Data: 23415F
Reading Security Block...
Security block OK!
Determining PA Simlock...
Booting RAP...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006010C192101003000
CMT_EM_ASIC_ID: 00000295
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 2630011826EE6A50A7E6CC0A922F5507119D3BC0
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID: 273F6D55DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC220C00008921, Samsung, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: D0D8948DEF333BF18141EF4C3D0FB1B002EB5D88
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Restarting MCU...
Determined PA Simlock: PA_SL2
Checking for Rootkey Hash support...
Booting RAP...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006010C192101003000
CMT_EM_ASIC_ID: 00000295
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 2630011826EE6A50A7E6CC0A922F5507119D3BC0
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID: 273F6D55DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.30.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Exploiting - running preloader...
Preloader running OK, Running Custom Loader...
Custom loader running OK! Working...
Received Security Block OK !
Bypassing SX4...
Booting RAP...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006010C192101003000
CMT_EM_ASIC_ID: 00000295
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 2630011826EE6A50A7E6CC0A922F5507119D3BC0
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID: 273F6D55DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC220C00008921, Samsung, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: D0D8948DEF333BF18141EF4C3D0FB1B002EB5D88
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
CMT NPC Ok
CMT NPC Erased
Restarting MCU...
Writing Security Block...
Writing Simlock Key...
SP Accepted, doing reset to update block...
Booting RAP...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006010C192101003000
CMT_EM_ASIC_ID: 00000295
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 2630011826EE6A50A7E6CC0A922F5507119D3BC0
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_ROM_ID: 273F6D55DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC220C00008921, Samsung, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: D0D8948DEF333BF18141EF4C3D0FB1B002EB5D88
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Restoring NPC...
Restarting MCU...
SX4 Bypass Finished
MCU Version V 03.21
MCU Date 31-08-07
Product RM-265
Manufacturer (c) Nokia
IMEI 358
Mastercode 3670305267
Simlock Server SIMLOCK SERVER
Simlock Key 0010100000000000
Simlock Profile 8000000000000000
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: OPENED Type: MCC-MNC Data: 00101F
Unlock finished!

Last edited by ptt; 01-17-2010 at 17:47. Reason: add code tag
 
 

Bookmarks


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
thread Thread Starter Forum Replies Last Post
POST HERE all Successfull Report with Micro-Box, HTC cable, etc.. hitibiti Basic Micro-Box Software Support (SAMSUNG, HUAWEI, etc...) 2837 07-05-2020 10:10
Put in this thread all successfull story of Dct4 Imei???? with Mxkey mobilecitycbk MXKEY Nokia Flasher and Unlocker (by Alim Hape) 1 06-17-2009 21:28
Put in this thread all successfull UNLOCK AND NOT with Cyclone-box FullFLASHgSMPH Cyclonebox 2 04-13-2009 14:00

 



All times are GMT +1. The time now is 12:00.



Powered by Searchlight © 2024 Axivo Inc.
vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2024 DragonByte Technologies Ltd.
- GSM Hosting Ltd. - 1999-2023 -
Page generated in 0.54719 seconds with 11 queries

SEO by vBSEO