Code:
Connection with Box in Main Mode...
Handling device: [Cyclone Team], [Cyclone Box], [Platform: Classic]
Initializing box...
Box Firmware: Cyclone Main Application v02.05, (Aug 22 2012 23:26:51, gcc v4.3.3, RTOS V6.0.1), Type: Signed Production Application, (C) KarwosSoft 2012
Hardware Platform: Cyclone Classic Flasher Interface (c) 2008,2009 KarwosLabs
Box Serial Number: C000554C
HW Revision: B, Suitable for: Production, Case: First Plastic Case, MCU Manufacture Time: 2010, wk35
Initializing security card...
Card Serial Number: D006029C
Card Firmware Revision: 010A
Card is activated
Box is activated
Started box selftests procedure
USB Voltage 5.00v PASSED
MCU Voltage 3.29v PASSED
Core Voltage 1.81v PASSED
VBAT Voltage 0.01v PASSED
VBAT Voltage 4.96v PASSED
Box VPP disabled
VPP Voltage 0.04v PASSED
Internal Box VPP Enabled
VPP Voltage 4.97v PASSED
Box VPP disabled
VPP Voltage 0.04v PASSED
External Box VPP Enabled
VPP Voltage 0.02v FAILED - IGNORED - Probably power supply is not connected
Box VPP disabled
All box selftests passed!
Super DCT4 Activation: TRUE
XGold/Blackberry Service Running, Counter: 100
Avaiable Physical Memory: 1.1023GB
Avaiable Virtual Memory: 1.881GB
Avaiable Pagefile: 3.959GB
Initializing FBUS...
All initialized - Ready to work
MCU Version V 09.65
MCU Date 04-12-09
Product RM-635 (Nokia 2690)
Manufacturer (c) Nokia
IMEI 353753046224439
Mastercode 326253051
IMEI Spare 3A35570364224403
IMEI SV 3335570364224453F2000000
PPM V 09.65, 04-12-09, RM-635, (c) Nokia , UAL
CNT Content: digicel jm, V 09.65, 04-12-09, RM-635, (c) Nokia , ,
PSN DTE882130
Product Code 059B094
Module Code 0204458
Basic Product Code 0589255
PSD 0000000000000000
LPSN 0
RETU 16
TAHVO 22
AHNE 30
HW 1000
RFIC 06560601
DSP ICPR72_09w26
LCD SUEZ
BT 2.31-SP2.26
Simlock Server SIMLOCK SERVER
Simlock Key 3380500000000000
Simlock Profile 8000000000000000
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: CLOSED Type: MCC-MNC Data: 33805F
Simlock [2,1] State: CLOSED Type: MCC-MNC Data: 35805F
Simlock [3,1] State: CLOSED Type: 7FFF6F07FFFFFFFF @ FC00 Data: 360070
Simlock [4,1] State: CLOSED Type: 7FFF6F07FFFFFFFF @ FC00 Data: 352030
Simlock [5,1] State: CLOSED Type: 7FFF6F07FFFFFFFF @ FC00 Data: 342750
Simlock [6,1] State: CLOSED Type: 7FFF6F07FFFFFFFF @ FC00 Data: 374130
Simlock [7,1] State: CLOSED Type: 7FFF6F07FFFFFFFF @ FC00 Data: 363020
Simlock [8,1] State: CLOSED Type: MCC-MNC Data: 36269F
Simlock [9,1] State: CLOSED Type: 7FFF6F07FFFFFFFF @ FC00 Data: 310380
Simlock [10,1] State: CLOSED Type: MCC-MNC Data: 34020F
Simlock [11,1] State: CLOSED Type: 7FFF6F07FFFFFFFF @ FC00 Data: 372020
Simlock [12,1] State: CLOSED Type: MCC-MNC Data: 73801F
Simlock [13,1] State: CLOSED Type: MCC-MNC Data: 70602F
Simlock [14,1] State: CLOSED Type: MCC-MNC Data: 74603F
Simlock [15,1] State: CLOSED Type: MCC-MNC Data: 53703F
Simlock [16,1] State: CLOSED Type: 7FFF6F07FFFFFFFF @ FC00 Data: 708040
Simlock [17,1] State: CLOSED Type: MCC-MNC Data: 53988F
Simlock [18,1] State: CLOSED Type: MCC-MNC Data: 54105F
Simlock [19,1] State: CLOSED Type: 7FFF6F07FFFFFFFF @ FC00 Data: 348770
Simlock [20,1] State: CLOSED Type: 7FFF6F07FFFFFFFF @ FC00 Data: 714040
Simlock [21,1] State: CLOSED Type: 7FFF6F07FFFFFFFF @ FC00 Data: 714041
Simlock [22,1] State: CLOSED Type: MCC-MNC Data: 54202F
Auto Selecting Flash Files on User Request...
Product Code: 059B094
Scanning avaiable products...
Processing C:\Program Files\Common Files\Nokia\DataPackage\Products\...
Found 1 products, Filtering DCT4 Products - wait...
0 Products left after filtering. Ready.
Scanning avaiable products...
Processing C:\Program Files\Common Files\Nokia\DataPackage\Products\...
Found 1 products, Filtering BB5 Products - wait...
1 Products left after filtering. Ready.
This is Valid BB5 Product
Retrieving Variants for Product RM-635 - wait...
52 Variants Retrieved
No variant found with given Product Code, selecting first one
Processing pre flash tasks...
Backing up RPL...
RPL Creation started...
Processing CMT Part...
Storing Product Code...
Storing PSN...
Storing HWID...
Trying to store Simlock...
Reading Configuration Key...
Hashing...
Reading SHA1-RSA Signature...
Reading SHA1-HMAC Signature...
Storing Simlock...
Trying to store WMDRM RPL...
Reading Keys...
Storing WMDRM PD...
Reading Security Block...
Security block OK and saved to "RM-635_353753046224439_1112012_73957 AM.SecurityBlock.PM"
WARNING: "24D00004F9E24950290B22CC6BD2F8598DC97D8A.C000554C" Not Exists, Will read it...
Reading CYC file from phone...
Booting CMT...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006030C192101033000
CMT_EM_ASIC_ID: 00000296
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 24D00004F9E24950290B22CC6BD2F8598DC97D8A
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT_BOOT_ROM_CRC: 273F6D55
CMT_SECURE_ROM_CRC: DFAAF68F
CMT Ready!
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.30.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using OLD BB5 FLASHING PROTOCOL
Exploiting - running preloader...
Preloader running OK, Running Custom Loader...
Custom loader running OK! Working...
Old Loader Detected
Readed OK, Saving to "24D00004F9E24950290B22CC6BD2F8598DC97D8A.C000554C"
Storing Additional Data...
Checking Superdongle Key...
Encrypting Superdongle Key...
Storing Superdongle Key...
Checking CMLA Key...
Storing CMLA Key...
Booting CMT...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006030C192101033000
CMT_EM_ASIC_ID: 00000296
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 24D00004F9E24950290B22CC6BD2F8598DC97D8A
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT_BOOT_ROM_CRC: 273F6D55
CMT_SECURE_ROM_CRC: DFAAF68F
CMT Ready!
Searching for BootCode: DualLine 32Bit
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.10.42.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using OLD BB5 FLASHING PROTOCOL
If software STUCK HERE with box TX LED lit, that means:
1. You have not attached yellow TX2 Adapter (IT IS REQUIRED FOR BB5 PHONES WHEN USING JAF/UFS CABLES!)
2. Your cable is not TX2 Enabled!
3. Transmission error occured, try again
In either cases, you need to reconnect your box from USB.
FlashChip[0,CMT]: 0x0089898200008A31, Intel, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
Searching for BootCode: DualLine 32Bit
FlashChip 0x00898982 (Intel), Size: 64MBytes, VPP: 9V
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.10.40.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: C6B9354E81AC464DED33FC7B90295086150F4539
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
Storing NPC...
Storing CCC...
Storing HWC...
CMT VARIANT Not Found
CMT PARTNERC Not Found
Restarting MCU...
RPL Saved OK
RPL backup thread finished, continuing...
Pre flash tasks finished, continuing...
Processing rm635__10.65.mcusw (CMT)...
Booting CMT...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006030C192101033000
CMT_EM_ASIC_ID: 00000296
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 24D00004F9E24950290B22CC6BD2F8598DC97D8A
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT_BOOT_ROM_CRC: 273F6D55
CMT_SECURE_ROM_CRC: DFAAF68F
CMT Ready!
rm635__10.65.mcusw, Type: Flash Image, Algo: BB5, BB5 ALGORITHM
Searching for BootCode: DualLine 32Bit
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.10.42.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using OLD BB5 FLASHING PROTOCOL
If software STUCK HERE with box TX LED lit, that means:
1. You have not attached yellow TX2 Adapter (IT IS REQUIRED FOR BB5 PHONES WHEN USING JAF/UFS CABLES!)
2. Your cable is not TX2 Enabled!
3. Transmission error occured, try again
In either cases, you need to reconnect your box from USB.
FlashChip[0,CMT]: 0x0089898200008A31, Intel, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
Searching for BootCode: DualLine 32Bit
FlashChip 0x00898982 (Intel), Size: 64MBytes, VPP: 9V
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.10.40.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: C6B9354E81AC464DED33FC7B90295086150F4539
Flashbus Write baud set to 5.0Mbits
Sending Certificates...
Certificates OK
Started group flash erase
EraseArea[0,CMT]: 0x00000000-0x000006BF, NOR
EraseArea[0,CMT]: 0x000006C0-0x0001FFFF, NOR
EraseArea[0,CMT]: 0x00040000-0x000BFFFF, NOR
EraseArea[0,CMT]: 0x000C0000-0x0013FFFF, NOR
EraseArea[0,CMT]: 0x00140000-0x0137FFFF, NOR
EraseArea[0,CMT]: 0x01380000-0x0151FFFF, NOR
Waiting 320s for erasure finish...
Erase taken 89.250s
Writing all blocks...
Initializing TurboCache...
TurboCache Loaded!
Writing CMT NOLO Certificate...
Writing CMT KEYS Certificate...
Writing CMT PRIMAPP Certificate...
Writing CMT PASUBTOC Certificate...
Writing CMT PAPUBKEYS Certificate...
Writing CMT UPDAPP Certificate...
Writing CMT DSP0 Certificate...
Writing CMT MCUSW Certificate...
Programming Status OK!
All blocks written OK! Time taken 47.406s
Flashing Speed: 3182.64 kBit/S
Restarting MCU...
Processing rm635__10.65.mcusw (APE)...
Processing rm635__10.65.ppm_t (CMT)...
Booting CMT...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006030C192101033000
CMT_EM_ASIC_ID: 00000296
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 24D00004F9E24950290B22CC6BD2F8598DC97D8A
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT_BOOT_ROM_CRC: 273F6D55
CMT_SECURE_ROM_CRC: DFAAF68F
CMT Ready!
rm635__10.65.ppm_t, Type: Flash Image, Algo: BB5, BB5 ALGORITHM
Searching for BootCode: DualLine 32Bit
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.10.42.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using OLD BB5 FLASHING PROTOCOL
If software STUCK HERE with box TX LED lit, that means:
1. You have not attached yellow TX2 Adapter (IT IS REQUIRED FOR BB5 PHONES WHEN USING JAF/UFS CABLES!)
2. Your cable is not TX2 Enabled!
3. Transmission error occured, try again
In either cases, you need to reconnect your box from USB.
FlashChip[0,CMT]: 0x0089898200008A31, Intel, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
Searching for BootCode: DualLine 32Bit
FlashChip 0x00898982 (Intel), Size: 64MBytes, VPP: 9V
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.10.40.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: C6B9354E81AC464DED33FC7B90295086150F4539
Flashbus Write baud set to 5.0Mbits
Started group flash erase
EraseArea[0,CMT]: 0x01520000-0x01DBFFFF, NOR
Waiting 320s for erasure finish...
Erase taken 16.312s
Writing all blocks...
Initializing TurboCache...
TurboCache Loaded!
Programming Status OK!
All blocks written OK! Time taken 9.890s
Flashing Speed: 3199.65 kBit/S
Restarting MCU...
Processing rm635__10.65.ppm_t (APE)...
Processing rm635__10.65.image_t_blue_au (CMT)...
Booting CMT...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006030C192101033000
CMT_EM_ASIC_ID: 00000296
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 24D00004F9E24950290B22CC6BD2F8598DC97D8A
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 9DDBFCFE6E73CED7D8C6268C8EB85723
CMT_BOOT_ROM_CRC: 273F6D55
CMT_SECURE_ROM_CRC: DFAAF68F
CMT Ready!
rm635__10.65.image_t_blue_au, Type: Flash Image, Algo: BB5, BB5 ALGORITHM
Searching for BootCode: DualLine 32Bit
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.10.42.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using OLD BB5 FLASHING PROTOCOL
If software STUCK HERE with box TX LED lit, that means:
1. You have not attached yellow TX2 Adapter (IT IS REQUIRED FOR BB5 PHONES WHEN USING JAF/UFS CABLES!)
2. Your cable is not TX2 Enabled!
3. Transmission error occured, try again
In either cases, you need to reconnect your box from USB.
FlashChip[0,CMT]: 0x0089898200008A31, Intel, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
Searching for BootCode: DualLine 32Bit
FlashChip 0x00898982 (Intel), Size: 64MBytes, VPP: 9V
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.10.40.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: C6B9354E81AC464DED33FC7B90295086150F4539
Flashbus Write baud set to 5.0Mbits
Started group flash erase
EraseArea[0,CMT]: 0x01DC0000-0x0215FFFF, NOR
EraseArea[0,CMT]: 0x02160000-0x03FBFFFF, NOR
Waiting 320s for erasure finish...
Erase taken 285.890s
Writing all blocks...
Initializing TurboCache...
TurboCache Loaded!
Programming Status OK!
All blocks written OK! Time taken 20.125s
Flashing Speed: 3077.73 kBit/S
Restarting MCU...
Processing rm635__10.65.image_t_blue_au (APE)...
All images processed OK! Processing post flash tasks...
Setting Factory Defaults...
Factory defaults OK
Reading info...
MCU Version V 10.65
MCU Date 09-12-10
Product RM-635 (Nokia 2690)
Manufacturer (c) Nokia
IMEI 353753046224439
Mastercode 326253051
IMEI Spare 3A35570364224403
IMEI SV 3335570364224463F1000000
PPM V 10.65, 09-12-10, RM-635, (c) Nokia , T
CNT Content: t_blue_au, V 10.65, 09-12-10, RM-635, (c) Nokia
PSN DTE882130
Product Code 059B094
Module Code 0204458
Basic Product Code 0589255
PSD 0000000000000000
LPSN 0
RETU 16
TAHVO 22
AHNE 30
HW 1000
RFIC 06560601
DSP ICPR72_10w06
LCD SUEZ
BT 2.31-SP2.26
Failed to read info -> Failed to read SP info
Read info thread finished, continuing...
Post flash tasks finished!
Flashing successfully finished!