Nokia 225 RM-1012 Reset Counter

[online-nokia]

Hi, it's possible to reset simlock counter ? I buy a 20-digit NCK, but phone doesn't accept code. I guess is blocked counter. Is Best can do solve my problem ?

BR,

[Dzirt]

Hello. Yes.
Use v1.96 ( v1.97 not allow make that due some problems)
Make RPL read , go to Repait Tab , select "Reset counter" and write RPL back.

[online-nokia]

Mate! I will not use yet - but I buy dongle first. Thanks for the info That's answer what I looking for

Thanks a lot Dzirt!

[online-nokia]

Sorry, dongle incoming. The 1.96 has been installed, but phone now is damaged..
The steps I do:

1 - Read Flash with marked "RPL Only"
2 - Restore RPL (Security) with marked Reset Counter

Phone now turning on and after Nokia logo screen goes black and keyboard lights are blinking..

[Dzirt]

Hello. Seems as you made something incorrect.
Now show me logs, please.

[online-nokia]

Here are logs :

Connect phone on selected interface...

Phone found!
MTKx Nokia Phone detected
Read info... Ok


Software Info: 10.01.11 00-00-00 RM-1012
IMEI: 3523950615xxxxx
PPM version : EA
Product code: 059W3J5
Rebooting phone to FlashMode...
Wait for phone...
Phone found! [ 65 ]
Sync...
Sync Ok, read regs...
Inital regs read done
Boot Info :
BB_CPU_ID : 6260
BB_CPU_HW : CB00
BB_CPU_SW : 0000
BB_CPU_SB : 8000
BB_CPU_NM : [MediaTek] MT6260_S0001
BB_CPU_SN : 63BC48382898FA0B0F1428BD398DB08F
BROM Protocol Version : 05
BROM Status : 0000
Comm Status : 0000
EXBL Status : Alive [ USB Load Active ]
Switch to BL done
BL Version : 01
Setting...
Setting done , result code 0x000E
Project ID : PEARL.10.01.11.p2
BROM/BL stage done
Seek and prepare DownloadAgent
DownloadAgent matching HW Found!
DA verify and select done
Sending DA to target ...
DA_eMP_Pearl.fg
DA_VERIFY : 00
DA_JUMP : 00040000
DA_INFO : 0xC0 , Ver : 3.2 , BBID : 0x8B
DA_CSTAT : 0x5A
SOC_VERIFY : 0xC1
BOOT_STYLE : SF_FLASH_BOOT
NOR Flash IC initialized
[0] : FLASH_VEN : 0x00F8 , [WINBOND] W25Q128FW
[0] : FLASH_DIE : 00EF 0060 0018 0000
[0] : FLASH_LEN : 0x01000000
FAT_RANGE : 0x00C80000-0x00FF3FFF , LEN : 0x00374000
IMEI : 3523950615xxxxx
RPL [Security] Saved to : 3523950615xxxxx.mtsec
Read Done!

Connect phone on selected interface...


Phone found!
MTKx Nokia Phone detected
Read info... Ok


Software Info: 10.01.11 00-00-00 RM-1012
IMEI: 3523950615xxxxx
PPM version : EA
Product code: 059W3J5
Rebooting phone to FlashMode...
Wait for phone...
Phone found! [ 65 ]
Sync...
Sync Ok, read regs...
Inital regs read done
Boot Info :
BB_CPU_ID : 6260
BB_CPU_HW : CB00
BB_CPU_SW : 0000
BB_CPU_SB : 8000
BB_CPU_NM : [MediaTek] MT6260_S0001
BB_CPU_SN : 63BC48382898FA0B0F1428BD398DB08F
BROM Protocol Version : 05
BROM Status : 0000
Comm Status : 0000
EXBL Status : Alive [ USB Load Active ]
Switch to BL done
BL Version : 01
Setting...
Setting done , result code 0x000E
Project ID : PEARL.10.01.11.p2
BROM/BL stage done
Seek and prepare DownloadAgent
DownloadAgent matching HW Found!
DA verify and select done
Sending DA to target ...
DA_eMP_Pearl.fg
DA_VERIFY : 00
DA_JUMP : 00040000
DA_INFO : 0xC0 , Ver : 3.2 , BBID : 0x8B
DA_CSTAT : 0x5A
SOC_VERIFY : 0xC1
BOOT_STYLE : SF_FLASH_BOOT
NOR Flash IC initialized
[0] : FLASH_VEN : 0x00F8 , [WINBOND] W25Q128FW
[0] : FLASH_DIE : 00EF 0060 0018 0000
[0] : FLASH_LEN : 0x01000000
FAT_RANGE : 0x00C80000-0x00FF3FFF , LEN : 0x00374000
Boot Ok
Get settings...
SDS OFF : 0x00FF4000
SDS LEN : 0x0000C000
[INFO] : Plain RPL
[RPL VERIFY] : Code 0x10 : MOBILE_ID match with MOBILE_ID info in RPL!
Reset counters enabled
Counter Fix Ok
Write : 3523950615xxxxx.mtsec
Encrypt Done, Now Re-connect power/cable!
Wait for phone...
Phone found! [ 65 ]
Sync...
Sync Ok, read regs...
Inital regs read done
Boot Info :
BB_CPU_ID : 6260
BB_CPU_HW : CB00
BB_CPU_SW : 0000
BB_CPU_SB : 8000
BB_CPU_NM : [MediaTek] MT6260_S0001
BB_CPU_SN : 63BC48382898FA0B0F1428BD398DB08F
BROM Protocol Version : 05
BROM Status : 0000
Comm Status : 0000
EXBL Status : Alive [ USB Load Active ]
Switch to BL done
BL Version : 01
Setting...
Setting done , result code 0x000E
Project ID : PEARL.10.01.11.p2
BROM/BL stage done
Seek and prepare DownloadAgent
DownloadAgent matching HW Found!
DA verify and select done
Sending DA to target ...
DA_eMP_Pearl.fg
DA_VERIFY : 00
DA_JUMP : 00040000
DA_INFO : 0xC0 , Ver : 3.2 , BBID : 0x8B
DA_CSTAT : 0x5A
SOC_VERIFY : 0xC1
BOOT_STYLE : SF_FLASH_BOOT
NOR Flash IC initialized
[0] : FLASH_VEN : 0x00F8 , [WINBOND] W25Q128FW
[0] : FLASH_DIE : 00EF 0060 0018 0000
[0] : FLASH_LEN : 0x01000000
FAT_RANGE : 0x00C80000-0x00FF3FFF , LEN : 0x00374000
Boot Ok
Get settings...
Write : 3523950615xxxxx_enc.mtsec
Security restored
All done!

Connect phone on selected interface...



Dead Mode is Selected
Waiting for USB device...
1. Phone should be Off!
2. Battery must be charged and inserted! ( if not used external power )
- > If phone can't switch to BL - use battery or flash from Local mode!

--- Insert USB cable now! ---
Wait for phone...
Phone found! [ 65 ]
Sync...
Sync Ok, read regs...
Inital regs read done
Boot Info :
BB_CPU_ID : 6260
BB_CPU_HW : CB00
BB_CPU_SW : 0000
BB_CPU_SB : 8000
BB_CPU_NM : [MediaTek] MT6260_S0001
BB_CPU_SN : 63BC48382898FA0B0F1428BD398DB08F
BROM Protocol Version : 05
BROM Status : 0000
Comm Status : 0000
EXBL Status : Alive [ USB Load Active ]
Switch to BL done
BL Version : 01
Setting...
Setting done , result code 0x000E
Project ID : PEARL.10.01.11.p2
BROM/BL stage done
Seek and prepare DownloadAgent
DownloadAgent matching HW Found!
DA verify and select done
Sending DA to target ...
DA_eMP_Pearl.fg
DA_VERIFY : 00
DA_JUMP : 00040000
DA_INFO : 0xC0 , Ver : 3.2 , BBID : 0x8B
DA_CSTAT : 0x5A
SOC_VERIFY : 0xC1
BOOT_STYLE : SF_FLASH_BOOT
NOR Flash IC initialized
[0] : FLASH_VEN : 0x00F8 , [WINBOND] W25Q128FW
[0] : FLASH_DIE : 00EF 0060 0018 0000
[0] : FLASH_LEN : 0x01000000
FAT_RANGE : 0x00C80000-0x00FF3FFF , LEN : 0x00374000
Boot Ok
Get settings...
SDS OFF : 0x00FF4000
SDS LEN : 0x0000C000
[INFO] : Plain RPL
[RPL VERIFY] : Code 0xFF : MOBILE_ID check failed, not found MOBILE_ID info in RPL!
Select correct file!
Error encrypt data! Bad Security backup!

Connect phone on selected interface...



Dead Mode is Selected
Waiting for USB device...
1. Phone should be Off!
2. Battery must be charged and inserted! ( if not used external power )
- > If phone can't switch to BL - use battery or flash from Local mode!

--- Insert USB cable now! ---
Wait for phone...
Phone found! [ 65 ]
Sync...
Sync Ok, read regs...
Initial Register Read Failed (HW/Connection Error)
Connect phone on selected interface...

Connect phone on selected interface...



Dead Mode is Selected
Waiting for USB device...
1. Phone should be Off!
2. Battery must be charged and inserted! ( if not used external power )
- > If phone can't switch to BL - use battery or flash from Local mode!

--- Insert USB cable now! ---
Wait for phone...
Phone found! [ 65 ]
Sync...
Sync Ok, read regs...
Inital regs read done
Boot Info :
BB_CPU_ID : 6260
BB_CPU_HW : CB00
BB_CPU_SW : 0000
BB_CPU_SB : 8000
BB_CPU_NM : [MediaTek] MT6260_S0001
BB_CPU_SN : 63BC48382898FA0B0F1428BD398DB08F
BROM Protocol Version : 05
BROM Status : 0000
Comm Status : 0000
EXBL Status : Alive [ USB Load Active ]
Switch to BL done
BL Version : 01
Setting...
Setting done , result code 0x000E
Project ID : PEARL.10.01.11.p2
BROM/BL stage done
Seek and prepare DownloadAgent
DownloadAgent matching HW Found!
DA verify and select done
Sending DA to target ...
DA_eMP_Pearl.fg
DA_VERIFY : 00
DA_JUMP : 00040000
DA_INFO : 0xC0 , Ver : 3.2 , BBID : 0x8B
DA_CSTAT : 0x5A
SOC_VERIFY : 0xC1
BOOT_STYLE : SF_FLASH_BOOT
NOR Flash IC initialized
[0] : FLASH_VEN : 0x00F8 , [WINBOND] W25Q128FW
[0] : FLASH_DIE : 00EF 0060 0018 0000
[0] : FLASH_LEN : 0x01000000
FAT_RANGE : 0x00C80000-0x00FF3FFF , LEN : 0x00374000
Boot Ok
Get settings...
SDS OFF : 0x00FF4000
SDS LEN : 0x0000C000
[INFO] : Plain RPL
[RPL VERIFY] : Code 0x10 : MOBILE_ID match with MOBILE_ID info in RPL!
Reset counters enabled
Counter Fix Ok
Write : 3523950615xxxxx.mtsec
Encrypt Done, Now Re-connect power/cable!
Wait for phone...
Phone found! [ 65 ]
Sync...
Sync Ok, read regs...
Inital regs read done
Boot Info :
BB_CPU_ID : 6260
BB_CPU_HW : CB00
BB_CPU_SW : 0000
BB_CPU_SB : 8000
BB_CPU_NM : [MediaTek] MT6260_S0001
BB_CPU_SN : 63BC48382898FA0B0F1428BD398DB08F
BROM Protocol Version : 05
BROM Status : 0000
Comm Status : 0000
EXBL Status : Alive [ USB Load Active ]
Switch to BL done
BL Version : 01
Setting...
Setting done , result code 0x000E
Project ID : PEARL.10.01.11.p2
BROM/BL stage done
Seek and prepare DownloadAgent
DownloadAgent matching HW Found!
DA verify and select done
Sending DA to target ...
DA_eMP_Pearl.fg
DA_VERIFY : 00
DA_JUMP : 00040000
DA_INFO : 0xC0 , Ver : 3.2 , BBID : 0x8B
DA_CSTAT : 0x5A
SOC_VERIFY : 0xC1
BOOT_STYLE : SF_FLASH_BOOT
NOR Flash IC initialized
[0] : FLASH_VEN : 0x00F8 , [WINBOND] W25Q128FW
[0] : FLASH_DIE : 00EF 0060 0018 0000
[0] : FLASH_LEN : 0x01000000
FAT_RANGE : 0x00C80000-0x00FF3FFF , LEN : 0x00374000
Boot Ok
Get settings...
Write : 3523950615xxxxx_enc.mtsec
Security restored
All done!

Connect phone on selected interface...



Dead Mode is Selected
Waiting for USB device...
1. Phone should be Off!
2. Battery must be charged and inserted! ( if not used external power )
- > If phone can't switch to BL - use battery or flash from Local mode!

--- Insert USB cable now! ---
Wait for phone...
Phone found! [ 65 ]
Sync...
Sync Ok, read regs...
Inital regs read done
Boot Info :
BB_CPU_ID : 6260
BB_CPU_HW : CB00
BB_CPU_SW : 0000
BB_CPU_SB : 8000
BB_CPU_NM : [MediaTek] MT6260_S0001
BB_CPU_SN : 63BC48382898FA0B0F1428BD398DB08F
BROM Protocol Version : 05
BROM Status : 0000
Comm Status : 0000
EXBL Status : Alive [ USB Load Active ]
Switch to BL done
BL Version : 01
Setting...
Setting done , result code 0x000E
Project ID : PEARL.10.01.11.p2
BROM/BL stage done
Seek and prepare DownloadAgent
DownloadAgent matching HW Found!
DA verify and select done
Sending DA to target ...
DA_eMP_Pearl.fg
DA_VERIFY : 00
DA_JUMP : 00040000
DA_INFO : 0xC0 , Ver : 3.2 , BBID : 0x8B
DA_CSTAT : 0x5A
SOC_VERIFY : 0xC1
BOOT_STYLE : SF_FLASH_BOOT
NOR Flash IC initialized
[0] : FLASH_VEN : 0x00F8 , [WINBOND] W25Q128FW
[0] : FLASH_DIE : 00EF 0060 0018 0000
[0] : FLASH_LEN : 0x01000000
FAT_RANGE : 0x00C80000-0x00FF3FFF , LEN : 0x00374000
Boot Ok
Get settings...
SDS OFF : 0x00FF4000
SDS LEN : 0x0000C000
[INFO] : Plain RPL
[RPL VERIFY] : Code 0x10 : MOBILE_ID match with MOBILE_ID info in RPL!
Write : 3523950615xxxxx.mtsec
Encrypt Done, Now Re-connect power/cable!
Wait for phone...
Phone found! [ 65 ]
Sync...
Sync Ok, read regs...
Inital regs read done
Boot Info :
BB_CPU_ID : 6260
BB_CPU_HW : CB00
BB_CPU_SW : 0000
BB_CPU_SB : 8000
BB_CPU_NM : [MediaTek] MT6260_S0001
BB_CPU_SN : 63BC48382898FA0B0F1428BD398DB08F
BROM Protocol Version : 05
BROM Status : 0000
Comm Status : 0000
EXBL Status : Alive [ USB Load Active ]
Switch to BL done
BL Version : 01
Setting...
Setting done , result code 0x000E
Project ID : PEARL.10.01.11.p2
BROM/BL stage done
Seek and prepare DownloadAgent
DownloadAgent matching HW Found!
DA verify and select done
Sending DA to target ...
DA_eMP_Pearl.fg
DA_VERIFY : 00
DA_JUMP : 00040000
DA_INFO : 0xC0 , Ver : 3.2 , BBID : 0x8B
DA_CSTAT : 0x5A
SOC_VERIFY : 0xC1
BOOT_STYLE : SF_FLASH_BOOT
NOR Flash IC initialized
[0] : FLASH_VEN : 0x00F8 , [WINBOND] W25Q128FW
[0] : FLASH_DIE : 00EF 0060 0018 0000
[0] : FLASH_LEN : 0x01000000
FAT_RANGE : 0x00C80000-0x00FF3FFF , LEN : 0x00374000
Boot Ok
Get settings...
Write : 3523950615xxxxx_enc.mtsec
Security restored
All done!

Connect phone on selected interface...

It's completely log from begining working with this phone and first phone that I do with Best

[Dzirt]

Ok, please, send me rpl backup in pm and also restore RPL with BEST v1.98.
I just check on my RM-1011 and RM-1012 phones.

[online-nokia]

Ok, but these operation I was made by 1.96 as you said. Let me few seconds to do it (download 1.98 and read data out)

[Dzirt]

Not need readout anything, just write your RPL backup with "Reset Counter" ticked. and let me know result after.

[online-nokia]

Log from 1.98: .............

card found: S/N
registered to:

Connect phone on selected interface...


Dead Mode is Selected
Waiting for USB device...
1. Phone should be Off!
2. Battery must be charged and inserted! ( if not used external power )
- > If phone can't switch to BL - use battery or flash from Local mode!

--- Insert USB cable now! ---
Wait for phone...
Phone found! [ 65 ]
Sync...
Sync Ok, read regs...
Inital regs read done
Boot Info :
BB_CPU_ID : 6260
BB_CPU_HW : CB00
BB_CPU_SW : 0000
BB_CPU_SB : 8000
BB_CPU_NM : [MediaTek] MT6260_S0001
BB_CPU_SN : 63BC48382898FA0B0F1428BD398DB08F
BROM Protocol Version : 05
BROM Status : 0000
Comm Status : 0000
EXBL Status : Alive [ USB Load Active ]
Switch to BL done
BL Version : 01
Setting...
Setting done , result code 0x8000
Project ID : PEARL.10.01.11.p2
BROM/BL stage done
Seek and prepare DownloadAgent
DownloadAgent matching HW Found!
DA verify and select done
Sending DA to target ...
DA_eMP_Pearl.fg
DA_VERIFY : 00
DA_JUMP : 00040000
DA_INFO : 0xC0 , Ver : 3.2 , BBID : 0x8B
DA_CSTAT : 0x5A
SOC_VERIFY : 0xC1
BOOT_STYLE : SF_FLASH_BOOT
NOR Flash IC initialized
[0] : FLASH_VEN : 0x00F8 , [WINBOND] W25Q128FW
[0] : FLASH_DIE : 00EF 0060 0018 0000
[0] : FLASH_LEN : 0x01000000
FAT_RANGE : 0x00C80000-0x00FF3FFF , LEN : 0x00374000

Control Block Validation (Security Test) :
Code 0xFF : MOBILE_ID check failed, not found MOBILE_ID info in CBR!
Seems as area is Encrypted or Erased, need repair

RPL Saved to : 000000000000000_MTK.mtsec

Read Done!

Connect phone on selected interface...

[Dzirt]

No, just write RPL, which you already backup with 1.96 to phone.
Tick reset also.

[online-nokia]

Thanks Dzirt! I see decision of Infinity Best was totally corrected for me. Phone simlock counter is reseted and code typed manually - successfully unlocked now

ps. I have anytime delete ****_enc.mtsec files from Cert folder ?

[Dzirt]

Ok
No, just this one time.
*.enc files uses for fast write on next time for that phone ( just save some time to Connect/Disconnect phone during RPL prepare procedure ) and for some models in v1.96-97 it was wrong prepared.
In 1.98 I fixed all stuff and tested on all existing models.

[KrzychuG]

@Drizt - that may be a little bit off topic but is there any chance to add option to send 20 digits code via "FBUS" like in the older phones? The code field in 1.98 is still limited to 15 digits. I've had issues with Nokia 503 with locked counter that eventually had to be sent back to Nokia for repair and came back with reseted counter. I had no idea back then we could reset counter via RPL, but it still sounds a bit more dangerous than just using "FBUS" counter (if those phones has it).

[Dzirt]

Originally Posted by KrzychuG

@Drizt - that may be a little bit off topic but is there any chance to add option to send 20 digits code via "FBUS" like in the older phones? The code field in 1.98 is still limited to 15 digits. I've had issues with Nokia 503 with locked counter that eventually had to be sent back to Nokia for repair and came back with reseted counter. I had no idea back then we could reset counter via RPL, but it still sounds a bit more dangerous than just using "FBUS" counter (if those phones has it).

Sorry , my fault Completely forget about SP code send.
Will be fixed, add to notes already.
About counter - it should work for XG618|XG221|XG213 without problems.