GSM Shop GSM Shop
GSM-Forum  

Welcome to the GSM-Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features.
Only registered members may post questions, contact other members or search our database of over 8 million posts.

Registration is fast, simple and absolutely free so please - Click to REGISTER!

If you have any problems with the registration process or your account login, please contact contact us .

Go Back   GSM-Forum > Product Support Sections > No More Supported Solutions (Dead Products) > No More Supported H/W Products > Cyclonebox


 
 
LinkBack Thread Tools Display Modes
Old 09-16-2009, 11:38   #1 (permalink)
No Life Poster
 
moulnisky's Avatar
 
Join Date: Jan 2009
Location: England
Age: 59
Posts: 17,681
Member: 947561
Status: Offline
Thanks Meter: 14,053
Problems in Unlock 5800, N85, N96 Ver 30.0.11 and 31.0.8


NOTE : This solution is now obsolete as the new Cyclone update can unlock these mobile directly (Won't use any logs) I keep it here as can be used to unlock them, when possible, if the rpl system doesn't work and as it is still the only solution to restore the PM308 back-ups in these mobiles


Is happening always more often people opening threads for problems in unlock of rapido SL2 like the 5800 with firmware 30.0.11 or 31.0.8
This version of firmware, if we try to unlock using the NCK codes gives you error BB5 Unlock Failed -> Failed to get Lock Key (6, 5)
The only mode we have at the moment to unlock it is via downgrade.

Not all the models can be unlocked using this system!! before you start is better to check if it can be done or not: how to?
Just read the PM and make the simlock RPL using the function "create RPL frm PM": if the simlock_key_data are 3 lines, it can be done. If are 8 lines no chances.


The steps for a safe Downgrade, unlock ad re-update are simple but must be done in the exact sequence.
A) made all the back-ups (Tab Common/info "READ PM", tab BB5/Security "CREATE RPL FROM PHONE" and tab BB5/Security "READ ALL CERTS") plus a Simlock rpl using the function "create RPL from PM" and selecting the PM back-up.
B) Dowload the firmware versions you need for the job 21.0.25 for the downgrade and 30.0.11 or 31.0.8 (Depending the actual version of the mobile) for the re-upgrade and this recovery kit which must be unzipped in the common firmware folder as E71 (normally c:\Program files\Nokia\Phoenix\Products\RM-346).
C) Downgrade the mobile to the version 21.0.25 using the files related to the original product code of the mobile
D) In the tab bb5/security Thick "plain RPL" and write the Security RPL you made doing "create RPL from PM"
E) Unlock the mobile using the NCK codes (Keep a copy of the calculate codes in a side)
F) flash the mobile with the erase file 5800_Erase_256MB_kashi4gul with "Skip APE" Thicked.
G) flash the mobile as E71 v300 product code 0559569 with "skip APE" thicked ONLY COR and PPM.
the mobile now should be readable and you can see the infos with damaged imei as you are working on a RM-346; if you can't read the infos or the mobile just vibrate if you try to power it on manually flash it using the RM-356 ENO file included in the recovery package (Skip APE Thicked) and flash again the MCU E71 in the mobile (Skip APE Thicked)
H) write the full PM you have from the original back-up
I) flash it again with the 5800 firmware V30 or 31 was in origin in the mobile
J) write back the FULL RPL Back-up
if you now read the infos in the mobile the logs will be perfect with the mobile locked again as before
K) go in the tab BB5 security and click on sx4 auth.. the mobile should get the sx4 auth without any problem
L) go in the tab common/info, SX4 bypass NOT THICKED and click on write PM selecting full PM back-up you made in origin
M) go in the tab bb5/security and in the area NCK input via Fbus the unlock code calculated #pw+..+7#
Job done.. you can connect the battery back and test the mobile



Note : procedure revised to be sure the mobile is 100% without watch dog problems
Note 2 : for the N85 the procedure is the same, just after the point "E", once you got the unlocking code, go directly to the step 1 of this post : http://forum.gsmhosting.com/vbb/show...&postcount=127
Note 3 : for the N96 the procedure is the same, just after the point "E", once you got the unlocking code, go directly to the step 1 of this post : http://forum.gsmhosting.com/vbb/show...1&postcount=81

BR

Alex

Last edited by moulnisky; 01-20-2010 at 20:52.
 
The Following 114 Users Say Thank You to moulnisky For This Useful Post:
Show/Hide list of the thanked
Old 09-16-2009, 22:53   #2 (permalink)
No Life Poster
 
Join Date: Sep 2001
Location: Hungary, Pécs
Age: 48
Posts: 1,240
Member: 6142
Status: Offline
Sonork: i dont use it
Thanks Meter: 47
Donate money to this user
After this unlock producere phone will not restart after 5-10 min? Because use mt box with rapido rpl, phone always restart!
 
Old 09-16-2009, 23:01   #3 (permalink)
No Life Poster
 
LIEREN's Avatar
 
Join Date: Dec 2008
Location: iCloud ID Removed Service
Posts: 1,268
Member: 917576
Status: Offline
Sonork: QQ:366688456
Thanks Meter: 533
Quote:
Originally Posted by roniri View Post
After this unlock producere phone will not restart after 5-10 min? Because use mt box with rapido rpl, phone always restart!


hi, use Cyclone box unlock phone, 100% no problem i hasbeen use Cyclone box unlock



BR
LIEREN
 
The Following 2 Users Say Thank You to LIEREN For This Useful Post:
Old 09-16-2009, 23:12   #4 (permalink)
No Life Poster
 
moulnisky's Avatar
 
Join Date: Jan 2009
Location: England
Age: 59
Posts: 17,681
Member: 947561
Status: Offline
Thanks Meter: 14,053
Quote:
Originally Posted by roniri View Post
After this unlock producere phone will not restart after 5-10 min? Because use mt box with rapido rpl, phone always restart!
You will get the problem if after the downgrade and the unlock you don't update again the phone as the structure of the PM308 is different between the firmware 30. and the old versions

BR

Alex
 
The Following 2 Users Say Thank You to moulnisky For This Useful Post:
Old 09-17-2009, 13:37   #5 (permalink)
Freak Poster
 
Join Date: Jul 2002
Location: Spain
Age: 51
Posts: 120
Member: 13716
Status: Offline
Thanks Meter: 8
Hi, I downgrade to v25, write bak rpl, and unlock.... see log:

Code:
MCU Version	V ICPR72_09w20.5
MCU Date	16-06-09
Product		RM-356
Manufacturer	(c) Nokia
IMEI		354183025283447
Mastercode	5445644022
IMEI Spare	3A45810352824304
IMEI SV		3345810352824344F3000000
PSN		CZB492346
Product Code	0559051
Basic Product Code	0578897
PSD		0000000000000000
LPSN		0
WLAN MAC	00247D390D8A
APE SW		V 30.0.011
APE Variant	V 30.0.011V 30.0.011 V 30.0.011 
APE Test		eno_version
APE HW		256
APE ADSP	256
RETU		16
TAHVO		22
AHNE		11
HW		1101
RFIC		17141715
DSP		ICPR72_09w19_1
Simlock Server	SIMLOCK SERVER
Simlock Key	2140300000000000
Simlock Profile	8000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: CLOSED	Type: MCC-MNC	Data: 21403F
Scanning avaiable products...
Processing C:\Archivos de programa\Nokia\Phoenix\Products\...
Found 61 products, Filtering BB5 Products - wait...
1 Products left after filtering. Ready.
Retrieving Variants for Product RM-356 - wait...
60 Variants Retrieved
Processing pre flash tasks...
Backing up RPL...
RPL Creation started...
Processing CMT Part...
Storing Product Code...
Storing PSN...
Storing HWID...
Simlock Store not supported, not a PA_SL2 Phone
WMDRM Store not supported
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 1080011815710052F573870A13F922C3A4DFA78C
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000800121, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 76A20187051C30162EE91C77AE5E6011F5F1BA61
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
Storing NPC...
Storing CCC...
Storing HWC...
CMT VARIANT Not Found
Restarting MCU...
RPL Saved OK
RPL backup thread finished, continuing...
Backing up simlock...
MCU Version	V ICPR72_09w20.5
MCU Date	16-06-09
Product		RM-356
Manufacturer	(c) Nokia
IMEI		354183025283447
Mastercode	5445644022
Simlock backup OK, saved to RM-356_354183025283447_17092009_141954.SLBackup.PM
Backup simlock thread finished, continuing...
Pre flash tasks finished, continuing...
Processing RM-356_21.0.025_prd.core.C00 (CMT)...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 1080011815710052F573870A13F922C3A4DFA78C
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 4B9B75103E691FF8
RM-356_21.0.025_prd.core.C00, Type: Flash Image, Algo: XSR 1.5, BB5
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 650Kbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000800121, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 76A20187051C30162EE91C77AE5E6011F5F1BA61
Flashbus Write baud set to 5.0Mbits
Sending Certificates...
Certificates OK
Partitioning...
Partitioning OK
Started group flash erase
EraseArea[0,CMT]: 0x00040000-0x00082FFF, ONENAND
EraseArea[0,CMT]: 0x00083400-0x003FFFFF, ONENAND
EraseArea[0,CMT]: 0x00400000-0x007FFFFF, ONENAND
EraseArea[0,CMT]: 0x00800000-0x00D5FFFF, ONENAND
EraseArea[0,CMT]: 0x00D60000-0x09E5FFFF, ONENAND
Erase Partition (CMT)
Waiting 320s for erasure finish...
Erase taken 0.875s
Writing all blocks...
Writing CMT ADA Certificate...
Writing CMT KEYS Certificate...
Writing CMT PRIMAPP Certificate...
Writing CMT RAP3NAND Certificate...
Writing CMT PASUBTOC Certificate...
Writing CMT PAPUBKEYS Certificate...
Writing CMT SOS*UPDAPP Certificate...
Writing CMT SOS*ENO Certificate...
Writing CMT SOS*DSP0 Certificate...
Writing CMT SOS*ISASW Certificate...
Writing CMT SOS+CORE Certificate...
Writing CMT SOS+ROFS1 Certificate...
Programming Status OK!
All blocks written OK! Time taken 124.828s
Restarting MCU...
Processing RM-356_21.0.025_prd.core.C00 (APE)...
Processing RM-356_21.0.025_prd.rofs2.V09 (CMT)...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 1080011815710052F573870A13F922C3A4DFA78C
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 4B9B75103E691FF8
RM-356_21.0.025_prd.rofs2.V09, Type: Flash Image, Algo: XSR 1.5, BB5
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 650Kbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000800121, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 76A20187051C30162EE91C77AE5E6011F5F1BA61
Flashbus Write baud set to 5.0Mbits
Started group flash erase
EraseArea[0,CMT]: 0x06560000-0x0915FFFF, ONENAND
Waiting 320s for erasure finish...
Erase taken 0.234s
Writing all blocks...
Writing CMT SOS+ROFS2 Certificate...
Programming Status OK!
All blocks written OK! Time taken 44.625s
Restarting MCU...
Processing RM-356_21.0.025_prd.rofs2.V09 (APE)...
Processing RM-356_21.0.025_C01_prd.rofs3.fpsx (CMT)...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 1080011815710052F573870A13F922C3A4DFA78C
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 4B9B75103E691FF8
RM-356_21.0.025_C01_prd.rofs3.fpsx, Type: Flash Image, Algo: XSR 1.5, BB5
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 650Kbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000800121, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 76A20187051C30162EE91C77AE5E6011F5F1BA61
Flashbus Write baud set to 5.0Mbits
Started group flash erase
EraseArea[0,CMT]: 0x09160000-0x09E5FFFF, ONENAND
Waiting 320s for erasure finish...
Erase taken 0.78s
Writing all blocks...
Writing CMT SOS+ROFS3 Certificate...
Programming Status OK!
All blocks written OK! Time taken 1.844s
Restarting MCU...
Processing RM-356_21.0.025_C01_prd.rofs3.fpsx (APE)...
Processing RM356_20.0.010_008_xxx_U01.uda.fpsx (CMT)...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 1080011815710052F573870A13F922C3A4DFA78C
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 4B9B75103E691FF8
RM356_20.0.010_008_xxx_U01.uda.fpsx, Type: Flash Image, Algo: XSR 1.5, BB5
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 650Kbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000800121, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 76A20187051C30162EE91C77AE5E6011F5F1BA61
Flashbus Write baud set to 5.0Mbits
Started group flash erase
EraseArea[0,CMT]: 0x09E60000-0x0F71FFFF, ONENAND
Waiting 320s for erasure finish...
Erase taken 0.468s
Writing all blocks...
Programming Status OK!
All blocks written OK! Time taken 7.188s
Restarting MCU...
Processing RM356_20.0.010_008_xxx_U01.uda.fpsx (APE)...
All images processed OK! Processing post flash tasks...
Reading info...
MCU Version	V ICPR72_09w06.2
MCU Date	03-03-09
Product		RM-356
Manufacturer	(c) Nokia
IMEI		354183025283447
Mastercode	5445644022
IMEI Spare	3A45810352824304
IMEI SV		3345810352824344F1000000
CNT		v 20.0.010_008_xxx_U01, 21-01-09, vanilla, RM356
PSN		CZB492346
Product Code	0559051
Basic Product Code	0578897
PSD		0000000000000000
LPSN		0
WLAN MAC	00247D390D8A
APE SW		V 21.0.025
APE Variant	V 21.0.025V 21.0.025 V 21.0.025 
APE Test		eno_version
APE HW		256
APE ADSP	256
RETU		16
TAHVO		22
AHNE		11
HW		1101
RFIC		17141715
DSP		tube_ICPR72_09w06_p1
Failed to read info -> Failed to read SP info
Read info thread finished, continuing...
Post flash tasks finished!
Flashing successfully finished!
Skipping RPL decryption...
Parsing decrypted RPL...
Processing FBUS Part...
Writing Product Code... 
Writing PSN... 
Writing HWID... 
Processing FLASHBUS Part...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 1080011815710052F573870A13F922C3A4DFA78C
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000800121, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 76A20187051C30162EE91C77AE5E6011F5F1BA61
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
CMT NPC Erased
CMT NPC Written
CMT HWC Erased
CMT HWC Written
CMT CCC Erased
CMT CCC Written
Restarting MCU...
Processing FBUS Part...
Writing Product Code... 
Writing PSN... 
Writing HWID... 
Processing FLASHBUS Part...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 1080011815710052F573870A13F922C3A4DFA78C
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000800121, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 76A20187051C30162EE91C77AE5E6011F5F1BA61
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
CMT NPC Erased
CMT NPC Written
CMT HWC Erased
CMT HWC Written
CMT CCC Erased
CMT CCC Written
Restarting MCU...
Write RPL Finished!
MCU Version	V ICPR72_09w06.2
MCU Date	03-03-09
Product		RM-356
Manufacturer	(c) Nokia
IMEI		354183025283447
Mastercode	5445644022
IMEI Spare	3A45810352824304
IMEI SV		3345810352824344F1000000
CNT		v 20.0.010_008_xxx_U01, 21-01-09, vanilla, RM356
Product Code	0559051
Basic Product Code	0578897
PSD		0000000000000000
LPSN		0
WLAN MAC	00247D390D8A
APE SW		V 21.0.025
APE Variant	V 21.0.025V 21.0.025 V 21.0.025 
APE Test		eno_version
APE HW		256
APE ADSP	256
RETU		16
TAHVO		22
AHNE		11
HW		0559
RFIC		17141715
DSP		tube_ICPR72_09w06_p1
Failed to read info -> Failed to read SP info
BB5 Unlock Started...
MCU Version	V ICPR72_09w06.2
MCU Date	03-03-09
Product		RM-356
Manufacturer	(c) Nokia
IMEI		354183025283447
Mastercode	5445644022
Warning: Failed to read SP Info, Assuming defaults
Simlock Server	SIMLOCK SERVER
Simlock Key	2140300000000000
Simlock Profile	8000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Reading Security Block...
Security block OK!
Determining PA Simlock...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 1080011815710052F573870A13F922C3A4DFA78C
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000800121, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 76A20187051C30162EE91C77AE5E6011F5F1BA61
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Restarting MCU...
Determined PA Simlock: PA_SL2
Checking for Rootkey Hash support...
Booting RAP...
CMT_SYSTEM_ASIC_ID:	 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:		 00000296
CMT_EM_ASIC_ID:		 00000B22
CMT_PUBLIC_ID:		 1080011815710052F573870A13F922C3A4DFA78C
CMT_ASIC_MODE_ID:	 00
CMT_ROOT_KEY_HASH:	 CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:		 4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.30.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Exploiting - running preloader...
Preloader running OK, Running Custom Loader...
Custom loader running OK! Working...
BB5 Unlock Failed -> Failed to get Lock Key (6, 5)
please help

Last edited by acyl2000; 11-09-2009 at 11:26. Reason: wrap [code]
 
The Following User Says Thank You to ja_palma For This Useful Post:
Old 09-17-2009, 16:52   #6 (permalink)
No Life Poster
 
moulnisky's Avatar
 
Join Date: Jan 2009
Location: England
Age: 59
Posts: 17,681
Member: 947561
Status: Offline
Thanks Meter: 14,053
Flash it again with the V21.0.25 and retry the unlock

BR

Alex
 
The Following User Says Thank You to moulnisky For This Useful Post:
Old 09-17-2009, 16:58   #7 (permalink)
Freak Poster
 
Join Date: Jul 2002
Location: Spain
Age: 51
Posts: 120
Member: 13716
Status: Offline
Thanks Meter: 8
I did and I get the same error before flashing: "Failed to read info -> Failed to read SP info" when read info phone, before unlocking same error: "BB5 Unlock Failed -> Failed to get Lock Key (6, 5)".... thanx in advance
 
Old 09-17-2009, 17:00   #8 (permalink)
Freak Poster
 
Join Date: Jul 2002
Location: Spain
Age: 51
Posts: 120
Member: 13716
Status: Offline
Thanks Meter: 8
Sorry, before= after.... bad english
 
Old 09-17-2009, 17:14   #9 (permalink)
No Life Poster
 
moulnisky's Avatar
 
Join Date: Jan 2009
Location: England
Age: 59
Posts: 17,681
Member: 947561
Status: Offline
Thanks Meter: 14,053
The mobile is on retevision movil spain and looks like it has been unbranded in the past.
Can you tell me please what is the product code on the lable under the battery?

BR

Alex
 
The Following User Says Thank You to moulnisky For This Useful Post:
Old 09-17-2009, 17:23   #10 (permalink)
Freak Poster
 
Join Date: Jul 2002
Location: Spain
Age: 51
Posts: 120
Member: 13716
Status: Offline
Thanks Meter: 8
yes, retevision spain.... I spoke with the client and confirmed to me that has changed the product code to 0559051 for unbranded and upgrade the phone via usb with nokia updater. The original product code under the battery is 0576022. i can do? flash again with firmware v25 with product code original? thanxxx
 
Old 09-17-2009, 17:48   #11 (permalink)
No Life Poster
 
moulnisky's Avatar
 
Join Date: Jan 2009
Location: England
Age: 59
Posts: 17,681
Member: 947561
Status: Offline
Thanks Meter: 14,053
Yes.. flash it again with the original product code

BR

Alex
 
The Following User Says Thank You to moulnisky For This Useful Post:
Old 09-17-2009, 17:53   #12 (permalink)
Freak Poster
 
Join Date: Jul 2002
Location: Spain
Age: 51
Posts: 120
Member: 13716
Status: Offline
Thanks Meter: 8
Thanx.... I have to change the product code for the original before flash? My nokia datapackage v25.0.025 does not include the product code 0576022, I downgrade it once again to a lower version of firmware which include my product code? thanx in advance
 
Old 09-17-2009, 17:59   #13 (permalink)
No Life Poster
 
moulnisky's Avatar
 
Join Date: Jan 2009
Location: England
Age: 59
Posts: 17,681
Member: 947561
Status: Offline
Thanks Meter: 14,053
may be is a better solution too or you can look using navfirm for the files you need
http://rapidshare.com/files/23592893...rm-0.1-bin.zip

BR

Alex

File list :
RM-356_21.0.025_prd.core.C00
RM-356_21.0.025_prd.rofs2.V09
RM-356_21.0.025.228.02.rofs3.fpx
RM-356_21.0.025_018_xxx_U01.uda.fpsx

Last edited by moulnisky; 09-17-2009 at 18:07.
 
The Following 5 Users Say Thank You to moulnisky For This Useful Post:
Show/Hide list of the thanked
Old 09-17-2009, 18:50   #14 (permalink)
Freak Poster
 
Join Date: Jul 2002
Location: Spain
Age: 51
Posts: 120
Member: 13716
Status: Offline
Thanks Meter: 8
I use navifirm to update 0576022 variant in v25 firmware, change product code to original, flash with original product code and write back rpl, now simlock is ok, unlock using the NCK codes and sinlock continue ok, I have to upgrade obligatorily again to v30.0.11? phone should work with firmware v25? My datapackage v30.0.11 does no include product code 0576022 and I don´t found it in navifirm. thanx in advance
 
Old 09-17-2009, 18:55   #15 (permalink)
No Life Poster
 
moulnisky's Avatar
 
Join Date: Jan 2009
Location: England
Age: 59
Posts: 17,681
Member: 947561
Status: Offline
Thanks Meter: 14,053
Now you can change the product code and upgrade it back...
yes.. is better you upgrade it again to prevent the mobile going in watch dog as the structure of the PM308 wouldn't fit the firmware .25 and could give you problem about the superdongle.
Keep written on a piece of paper the unlock code used

BR

Alex
 
The Following User Says Thank You to moulnisky For This Useful Post:
 

Bookmarks


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Nokia 5800 XM RM-356 firmware 30 and 31.0.101 - service manual pitone02 Nokia Base Band 5 ( BB-5 ) 1 11-06-2009 23:03
Anybody unlocked N96 ver 30. without WD problem harim_1981 Genie Universal 3 10-06-2009 05:52
Anybody unlocked N96 ver 30. without WD problem harim_1981 Genie Universal 0 09-30-2009 17:08
Problems in Unlock 5800 - refuses password johnete Cyclonebox 14 09-30-2009 13:16
n96 problem in unlocking ..::Mobile Smoker::.. Genie Universal 3 03-20-2009 13:35

 



All times are GMT +1. The time now is 21:54.



Powered by Searchlight © 2024 Axivo Inc.
vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2024 DragonByte Technologies Ltd.
- GSM Hosting Ltd. - 1999-2023 -
Page generated in 0.32070 seconds with 10 queries

SEO by vBSEO