Dead(?) Nokia 700 - GSM-Forum

sicko78 · 12-07-2012, 08:25

Hi all.
I had a working Nokia 700, with some software error when the customer was accesing the camera. I flashed it with the latest version(113.) and now it hangs with Nokia logo. The phone was working before the flashing. Before the flash, it had sw version 111.
Any ideas? I'm all out of them. :-(

What can I do to downgrade it safely? I have RPL and PM backup.

sicko78 · 12-07-2012, 12:47

Anyone? :-)

gbluez · 12-07-2012, 15:42

You have backup, no need to worry.
You just missed a good old thread

.
Please read here http://forum.gsmhosting.com/vbb/f550...an-do-1443542/

BR

gbluez · 12-07-2012, 15:42

--- double post ----

.

.::ZUBER::. · 12-07-2012, 18:43

Quote:

Originally Posted by sicko78

Anyone? :-)

Bro.

Follow the above Link of @gbluez said for Downgrade,

After applying Downgrade,

Flash it with Latest Firmware of same Product Code will solve your First Problem too.

BR,
ZUBER

sicko78 · 12-09-2012, 18:41

I'll do it again, I followed that guide, the phone started up ok, but with "SECURITY_TEST failed!".

Code:

MXKEY [MxKey Team HTI PLUS Flasher Interface 5], SN: C081456E
Using device: HTI, FW ver: 00.50, SN: 01002FF5
Connection status: UHCI:HUB:USB 2.00 (Full-speed)
Driver: WinUSB, ver: 3.5.1.0 
Module ver: 1.0.0.21200(18-07-2012), Library ver: 1.0.0.14214(25-10-2012)
CMT Data :
SYSTEM ASIC ID: 000000030000022600010007400C192103032108 [RAPUYAMA ver: 3.x]
EM0 ID: 00000C35
EM1 ID: 00000C30
PUBLIC ID: 94140000FFFF7C40C2D03DA6E4A36657D42C0F03
ASIC MODE ID: 00
ROOT KEY HASH: 3AB5DB70B45D23F1ADEEBB5734160706
ROM ID: 2CAC45E23BC33C8B
 SecondaryBoot: RAPUv21_2nd.fg [BB5]  version: 12.14.0 revision: 3.0 size: 0x3B40
 Supported Ids: 0003192103002107, 000C192103002107, 0003192103012107, 000C192103012107, 000C192103022107, 0003192103022107, 400C192103022107, 4003192103022107, 000C192103032108, 0003192103032108, 400C192103032108, 4003192103032108, 0003192103042108, 400C192103042108, 0003192103042108, 4003192103042108
eBB5ProtocolType: NEW
TransmissionMode: DDR&TX2
Storage0: 0000 0000  - 0000 0000  type: RAM, asic:CMT 
Storage1: FFFF 0000  - 0000 0000  type: MMC, asic:CMT 
Storage2: 0000 0000  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage3: 0000 0001  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage4: 00EC 0060  - 0000 0032 [Samsung  LH28F800BG] type: FLASH,MuxOneNAND, asic:CMT 
Suggested algorithm: XSR 1.6
 Algorithm: RAPUv21_XSR17_alg.fg [XSR 1.6]  version: 12.14.0 revision: 3.0 size: 0xD4529
 Supported Ids: 0003192103002107, 000C192103002107, 0003192103012107, 000C192103012107, 000C192103022107, 0003192103022107, 400C192103022107, 4003192103022107, 000C192103032108, 0003192103032108, 400C192103032108, 4003192103032108, 0003192103042108, 400C192103042108, 0003192103042108, 4003192103042108
TransmissionMode: DDR&TX2
FUR: Adding Asic CMT as client OK
CMT PAPUBKEYS HASH: BD43E84B21F8AC7B9C66EA939355891E2A08044A
Selected firmware certificate matched.
Original Imei: 35702304xxxxxx
Original Product code: 059L7H3
Bluetooth ID: 940070458D04
SIMLOCK PA identifier:
 [0] PA_SIMLOC30
 
Phone type: RM-670 (Nokia 700)
SW version: V 79u_sr1_11w31.4 16-08-11 RM-670 (c) Nokia 
Imei plain: 357023048xxxxxx
Product code: 059L7H3
Battery voltage: 4808 mV, current: 84 mA
Language Pack:
- not available.

SLPA ver[4]: PA_SL3/PA_SIMLOC30 (15 digit NCK)
warning: avoid SW Downgrade & manual erase to this phone !
 
SIMLOCK seems to be valid
SUPERDONGLE_KEY[MX] seems to be valid
SIMLOCK_TEST passed
SECURITY_TEST failed!
 
 
Imei net: 357023048xxxxxx
Version: SIMLOCK SERVER
Provider: Westel Mobile , Country: Hungary
Counter: 0/3, 0/10
 
CONFIG_DATA: 2163000000000000
PROFILE_BITS: 8000000000000000
 
BLOCK1: 1=OPEN

sicko78 · 12-09-2012, 19:13

I did it all over again, security test is ok before I'm restoring RF/BB from server. What could be the problem?

sicko78 · 12-09-2012, 19:37

I'll post my logs, step by step.

Erasing:

Code:

Waiting for USB ROM device ...
CMT SYSTEM ASIC ID: 000000030000022600010007400C192103032108 [RAPUYAMA ver: 3.x]
CMT EM0 ID: 00000C35
CMT EM1 ID: 00000C30
CMT PUBLIC ID: 94140000FFFF7C40C2D03DA6E4A36657D42C0F03
CMT ASIC MODE ID: 00
CMT ROOT KEY HASH: 3AB5DB70B45D23F1ADEEBB5734160706
CMT ROM ID: 2CAC45E23BC33C8B
Loading CMT secondary boot code
 SecondaryBoot: RAPUv21_2nd.fg [BB5]  version: 11.14.0 revision: 3.0 size: 0x3B40
 Supported Ids: 0003192103002107, 000C192103002107, 0003192103012107, 000C192103012107, 000C192103022107, 0003192103022107, 400C192103022107, 4003192103022107, 000C192103032108, 0003192103032108, 400C192103032108, 4003192103032108, 0003192103042108, 000C192103042108
eBB5ProtocolType: NEW
Secondary boot loaded.
Storage0: 0000 0000  - 0000 0000  type: RAM, asic:CMT 
Storage1: FFFF 0000  - 0000 0000  type: MMC, asic:CMT 
Storage2: 0000 0000  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage3: 0000 0001  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage4: 00EC 0060  - 0000 0032 [Samsung  LH28F800BG] type: FLASH,MuxOneNAND, asic:CMT 
Suggested algorithm: XSR 1.6
Loading CMT update server data
 Algorithm: RAPUv21_XSR17_alg.fg [XSR 1.6]  version: 11.14.0 revision: 3.0 size: 0xC66F5
 Supported Ids: 0003192103002107, 000C192103002107, 0003192103012107, 000C192103012107, 000C192103022107, 0003192103022107, 400C192103022107, 4003192103022107, 000C192103032108, 0003192103032108, 400C192103032108, 4003192103032108, 0003192103042108, 000C192103042108
Update server code loaded.
Waiting for USB device removal ...OK
Waiting for USB device arrival ... 
Device connected: nmwcdnsuc\Nokia USB Flashing Generic, PORT_ID: 5FFD48F
FUR: Adding Asic CMT as client OK.
Reading CMT NPC (0x190 bytes).
Reading CMT VARIANT (0x0 bytes).
Reading CMT CCC (0x1CC bytes).
Reading CMT HWC (0xD4 bytes).
Reading CMT R&D (0x0 bytes).
Reading CMT MDM_KEYS (0x0 bytes).
Reading CMT PARTNERC (0x0 bytes).
Rpl(CERT) backup already exist (C:\mobileEx\3.5\data\backup\BB5_35702304867250_CERT.rpl).
CMT PAPUBKEYS HASH: BD43E84B21F8AC7B9C66EA939355891E2A08044A
Partitioning....
Partitioning complete
Erase size: -16777225 Bytes
CMT FLASH,MuxOneNAND area [00000000-00FFFFFF]
CMT FLASH,MuxOneNAND area [00000000-01FFFFFF]
CMT FLASH,MuxOneNAND area [00000000-03FFFFFF]
CMT FLASH,MuxOneNAND area [00000000-07FFFFFF]
CMT FLASH,MuxOneNAND area [00000000-0FFFFFFF]
CMT FLASH,MuxOneNAND area [00000000-1FFFFFFF]
CMT FLASH,MuxOneNAND area [00000000-3FFFFFFF]
CMT FLASH,MuxOneNAND area [00000000-7FFFFFFF]
CMT FLASH,MuxOneNAND area [00000000-FFFFFFFF]
Flash programming ...
Programming completed in 0.016 s
Total time for flashing process(boot+erase+write) was 45.391 s
Waiting for USB device removal ... 
Waiting for device boot up ...
Device connected: nmwcdnsuc\Nokia USB Flashing Generic, PORT_ID: 5FFD48F
Aborting operation ...
Waiting for USB device removal ...Warning: Phone did not reboot to normal mode.

Flashing:

Code:

MXKEY [MxKey Team HTI PLUS Flasher Interface 5], SN: C081456E
Using device: USB Phonet  and HTI, FW ver: 00.50, SN: 01002FF5
Connection status: EHCI:HUB::USB 2.00 (High-speed)
Driver: nmwcdnsuc, ver: 7.1.32.81 
Module ver: 1.0.0.21200(18-07-2012), Library ver: 1.0.0.14214(25-10-2012)
Processing MCU file: RM-670_111.010.1009_79u_prd.core.fpsx 
 [BB5,XSR 1.6]  size: 117.83 MB
 Supported Ids: 0003192103002007, 000C192103002007, 4003192103002007, 400C192103002007, 0003192103012007, 000C192103012007, 0003192103002107, 000C192103002107, 000C192103012107, 000C192103012107, 0003192103022107, 000C192103022107, 0003192103032108, 000C192103032108, 4003192103032108, 400C192103032108, 000C192103042108, 0003192103042108, 400C192103042108, 4003192103042108
Make sure USB cable, Battery and charger are removed from device.
Insert USB cable, Battery back to device(make sure to have fully charged battery).
Insert Charger or Press phone's power button(if flashing doesnt start automatically)
Waiting for USB ROM device ...
CMT SYSTEM ASIC ID: 000000030000022600010007400C192103032108 [RAPUYAMA ver: 3.x]
CMT EM0 ID: 00000C35
CMT EM1 ID: 00000C30
CMT PUBLIC ID: 94140000FFFF7C40C2D03DA6E4A36657D42C0F03
CMT ASIC MODE ID: 00
CMT ROOT KEY HASH: 3AB5DB70B45D23F1ADEEBB5734160706
CMT ROM ID: 2CAC45E23BC33C8B
Loading CMT secondary boot code
 SecondaryBoot: RAPUv21_2nd.fg [BB5]  version: 11.14.0 revision: 3.0 size: 0x3B40
 Supported Ids: 0003192103002107, 000C192103002107, 0003192103012107, 000C192103012107, 000C192103022107, 0003192103022107, 400C192103022107, 4003192103022107, 000C192103032108, 0003192103032108, 400C192103032108, 4003192103032108, 0003192103042108, 000C192103042108
eBB5ProtocolType: NEW
Secondary boot loaded.
Storage0: 0000 0000  - 0000 0000  type: RAM, asic:CMT 
Storage1: FFFF 0000  - 0000 0000  type: MMC, asic:CMT 
Storage2: FFFF FFFF  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage3: 0000 0001  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage4: 00EC 0060  - 0000 0032 [Samsung  LH28F800BG] type: FLASH,MuxOneNAND, asic:CMT 
Suggested algorithm: XSR 1.6
Loading CMT update server data
 Algorithm: RAPUv21_XSR17_alg.fg [XSR 1.6]  version: 11.14.0 revision: 3.0 size: 0xC66F5
 Supported Ids: 0003192103002107, 000C192103002107, 0003192103012107, 000C192103012107, 000C192103022107, 0003192103022107, 400C192103022107, 4003192103022107, 000C192103032108, 0003192103032108, 400C192103032108, 4003192103032108, 0003192103042108, 000C192103042108
Update server code loaded.
Waiting for USB device removal ...OK
Waiting for USB device arrival ... 
Device connected: nmwcdnsuc\Nokia USB Flashing Generic, PORT_ID: 5FFD48F
FUR: Adding Asic CMT as client OK.
Reading CMT NPC (0x0 bytes).
Reading CMT VARIANT (0x0 bytes).
Reading CMT CCC (0x0 bytes).
Reading CMT HWC (0x0 bytes).
Reading CMT R&D (0x0 bytes).
Reading CMT MDM_KEYS (0x0 bytes).
Reading CMT PARTNERC (0x0 bytes).
Invalid Certificate Data, backup will not be created.
Error saving backup !
CMT PAPUBKEYS is blank/erased.
Storing certificate [NPC, CCC, HWC, R&D, PARTNERC] ...OK
Partitioning....
Partitioning complete
Erase size: 621.56 MB
CMT FLASH,MuxOneNAND area [00040000-0007FFFF]
CMT FLASH,MuxOneNAND area [000C0000-008BFFFF]
CMT FLASH,MuxOneNAND area [010C0000-170FFFFF]
CMT FLASH,MuxOneNAND area [2E100000-3E5FFFFF]
Formating partition ...
Flash programming ...
CMT ADA block sent
CMT KEYS block sent
CMT PRIMAPP block sent
CMT RAP3NAND block sent
CMT SOS+PMML block sent
CMT SOS+DECOMP block sent
CMT PASUBTOC block sent
Selecting first CMT PAPUB block with matching RootKey.
CMT PAPUBKEYS: BD43E84B [] sent
CMT GENIO_INIT block sent
CMT SOS+IVE3A block sent
CMT SOS+IVE3B block sent
CMT SOS*UPDAPP block sent
CMT SOS*DSP0 block sent
CMT LDSP block sent
CMT SOS*ISASW block sent
CMT SOS+CORE block sent
CMT SOS+ROFS1 block sent
Programming completed in 31.953 s
Processing PPM file: RM-670_111.010.1009_03.01_Euro_3_79u_prd.rofs2.fpsx 
 [BB5,XSR 1.6]  size: 53.18 MB
 Supported Ids: 0003192103002007, 000C192103002007, 4003192103002007, 400C192103002007, 0003192103012007, 000C192103012007, 0003192103002107, 000C192103002107, 000C192103012107, 000C192103012107, 0003192103022107, 000C192103022107, 0003192103032108, 000C192103032108, 4003192103032108, 400C192103032108, 000C192103042108, 0003192103042108, 400C192103042108, 4003192103042108
Erase size: 100 MB
CMT FLASH,MuxOneNAND area [0D1C0000-135BFFFF]
Flash programming ...
CMT SOS+ROFS2 block sent
Programming completed in 12.719 s
Processing PPM file: RM-670_111.010.1009_491.06_default_79u.2011.32_prd.rofs3.fpsx 
 [BB5,XSR 1.6]  size: 3.70 MB
 Supported Ids: 0003192103002007, 000C192103002007, 4003192103002007, 400C192103002007, 0003192103012007, 000C192103012007, 0003192103002107, 000C192103002107, 000C192103012107, 000C192103012107, 0003192103022107, 000C192103022107, 0003192103032108, 000C192103032108, 4003192103032108, 400C192103032108, 000C192103042108, 0003192103042108, 400C192103042108, 4003192103042108
Erase size: 59.25 MB
CMT FLASH,MuxOneNAND area [135C0000-170FFFFF]
Flash programming ...
CMT SOS+ROFS3 block sent
Programming completed in 0.906 s
Processing CNT file: RM-670_111.010.1009_491.02_default_79u.2011.32.uda.fpsx 
 [BB5,XSR 1.6]  size: 244.08 MB
 Supported Ids: 0003192103002007, 000C192103002007, 4003192103002007, 400C192103002007, 0003192103012007, 000C192103012007, 0003192103002107, 000C192103002107, 000C192103012107, 000C192103012107, 0003192103022107, 000C192103022107, 0003192103032108, 000C192103032108, 4003192103032108, 400C192103032108, 000C192103042108, 0003192103042108, 400C192103042108, 4003192103042108
Erase size: 368 MB
CMT FLASH,MuxOneNAND area [17100000-2E0FFFFF]
Flash programming ...
Programming completed in 1 min 1.938 s
Total time for flashing process(boot+erase+write) was 2 min 8.859 s
Waiting for USB device removal ...OK
Waiting for USB device arrival ... 
Waiting for device boot up ...
Phone not found, retrying ...
Device connected: nmwcdc\Nokia 700 USB Phonet, PORT_ID: 1987A933
Verifying communication to device OK.
 
 
 
Phone type: RM-670 (Nokia 700)
SW version: V 79u_sr1_11w31.4 16-08-11 RM-670 (c) Nokia 
ApeCoreSw: 111.010.1009
Imei plain: 12345610654321-?
Battery voltage: 4216 mV, current: 13 mA
Language Pack:
- not available.

SLPA ver[1]: PA_SL (15 digit NCK)
 
SIMLOCK invalid!
SUPERDONGLE_KEY invalid!
- WD timer enabled, phone will reboot itself after 3 min.
SIMLOCK_TEST passed
SECURITY_TEST passed
 
 
Imei plain is invalid !!!
SIMLOCK_DATA corrupted!
SIMLOCK_DATA corrupted!

The phone starts up ok at this stage.
I'm repairing SD.

Code:

MXKEY [MxKey Team HTI PLUS Flasher Interface 5], SN: C081456E
Using device: HTI, FW ver: 00.50, SN: 01002FF5
Connection status: UHCI:HUB:USB 2.00 (Full-speed)
Driver: WinUSB, ver: 3.5.1.0 
Module ver: 1.0.0.21200(18-07-2012), Library ver: 1.0.0.14214(25-10-2012)
 
Phone type: RM-670 (Nokia 700)
SW version: V 79u_sr1_11w31.4 16-08-11 RM-670 (c) Nokia 
ApeCoreSw: 111.010.1009
 
CMT Data :
SYSTEM ASIC ID: 000000030000022600010007400C192103032108 [RAPUYAMA ver: 3.x]
EM0 ID: 00000C35
EM1 ID: 00000C30
PUBLIC ID: 94140000FFFF7C40C2D03DA6E4A36657D42C0F03
ASIC MODE ID: 00
ROOT KEY HASH: 3AB5DB70B45D23F1ADEEBB5734160706
ROM ID: 2CAC45E23BC33C8B
 SecondaryBoot: RAPUv21_2nd.fg [BB5]  version: 11.34.0 revision: 3.0 size: 0x3B40
 Supported Ids: 0003192103002107, 000C192103002107, 0003192103012107, 000C192103012107, 000C192103022107, 0003192103022107, 400C192103022107, 4003192103022107, 000C192103032108, 0003192103032108, 400C192103032108, 4003192103032108, 0003192103042108, 400C192103042108, 0003192103042108, 4003192103042108
eBB5ProtocolType: NEW
TransmissionMode: DDR&TX2
Storage0: 0000 0000  - 0000 0000  type: RAM, asic:CMT 
Storage1: FFFF 0000  - 0000 0000  type: MMC, asic:CMT 
Storage2: 0000 0000  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage3: 0000 0001  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage4: 00EC 0060  - 0000 0032 [Samsung  LH28F800BG] type: FLASH,MuxOneNAND, asic:CMT 
Suggested algorithm: XSR 1.6
 Algorithm: RAPUv21_XSR17_alg.fg [XSR 1.6]  version: 11.34.0 revision: 3.0 size: 0xD3FE9
 Supported Ids: 0003192103002107, 000C192103002107, 0003192103012107, 000C192103012107, 000C192103022107, 0003192103022107, 400C192103022107, 4003192103022107, 000C192103032108, 0003192103032108, 400C192103032108, 4003192103032108, 0003192103042108, 400C192103042108, 0003192103042108, 4003192103042108
TransmissionMode: DDR&TX2
FUR: Adding Asic CMT as client OK
CMT PAPUBKEYS HASH: BD43E84B21F8AC7B9C66EA939355891E2A08044A
PUBLIC ID: 94140000FFFF7C40C2D03DA6E4A36657D42C0F03
PRIVATE ID: 4CCC0BDC9DC0BFA499244A163EAC22132301B96D
 E-FUSE: 3E3767CA
 SEC ROM CRC: 3BC33C8B
Restarting phone ...
 
Updating SUPERDONGLE_KEY ...OK
Now you can write RFBB/PM data to the phone.
Done.

Writing backed-up PM:

Code:

Writing PM from Node ...
Section: 1
 - Key: 0, size 10 bytes written.
 - Key: 1, size 94 bytes written.
 - Key: 2, size 110 bytes written.
 - Key: 4, size 10 bytes written.
 - Key: 6, size 110 bytes written.
 - Key: 7, size 450 bytes written.
 - Key: 8, size 10 bytes written.
 - Key: 13, size 110 bytes written.
 - Key: 15, size 30 bytes written.
 - Key: 16, size 30 bytes written.
 - Key: 17, size 30 bytes written.
 - Key: 18, size 30 bytes written.
 - Key: 19, size 30 bytes written.
 - Key: 22, size 24 bytes written.
 - Key: 26, size 10 bytes written.
 - Key: 27, size 36 bytes written.
 - Key: 28, size 110 bytes written.
 - Key: 29, size 10 bytes written.
 - Key: 30, size 36 bytes written.
 - Key: 31, size 24 bytes written.
 - Key: 32, size 216 bytes written.
 - Key: 33, size 36 bytes written.
 - Key: 35, size 24 bytes written.
 - Key: 36, size 24 bytes written.
 - Key: 38, size 216 bytes written.
 - Key: 39, size 36 bytes written.
 - Key: 40, size 24 bytes written.
 - Key: 41, size 216 bytes written.
 - Key: 43, size 36 bytes written.
 - Key: 44, size 216 bytes written.
 - Key: 45, size 216 bytes written.
Section: 2
 - Key: 0, size 2808 bytes written.
Section: 4
 - Key: 1, size 200 bytes written.
 - Key: 3, size 10 bytes written.
 - Key: 4, size 8 bytes written.
 - Key: 5, size 8 bytes written.
 - Key: 6, size 8 bytes written.
 - Key: 9, size 5 bytes written.
 - Key: 28, size 2 bytes written.
Section: 8
 - Key: 0, size 2 bytes written.
 - Key: 1, size 16 bytes written.
 - Key: 2, size 16 bytes written.
 - Key: 3, size 128 bytes written.
 - Key: 4, size 128 bytes written.
 - Key: 8, size 8 bytes written.
 - Key: 9, size 8 bytes written.
 - Key: 10, size 32 bytes written.
 - Key: 11, size 4 bytes written.
 - Key: 12, size 4 bytes written.
Section: 11
 - Key: 0, size 4 bytes written.
 - Key: 1, size 4 bytes written.
 - Key: 2, size 4 bytes written.
 - Key: 3, size 4 bytes written.
 - Key: 4, size 1062 bytes written.
Section: 12
 - Key: 0, size 8 bytes written.
Section: 26
 - Key: 0, size 16 bytes written.
 - Key: 1, size 68 bytes written.
Section: 31
 - Key: 4, size 18 bytes written.
Section: 44
 - Key: 0, size 1 byte written.
Section: 50
 - Key: 0, size 2 bytes written.
 - Key: 1, size 2 bytes written.
Section: 54
 - Key: 0, size 2 bytes written.
 - Key: 2, size 24 bytes written.
Section: 96
 - Key: 0, size 2 bytes written.
 - Key: 1, size 20 bytes written.
Section: 120
Warning: failed to write 120 - 0 (56 bytes)
 - Key: 1, size 160 bytes written.
Warning: failed to write 120 - 2 (130 bytes)
Warning: failed to write 120 - 3 (112 bytes)
Section: 122
Warning: failed to write 122 - 0 (2 bytes)
Section: 153
Warning: failed to write 153 - 0 (68 bytes)
 - Key: 1, size 68 bytes written.
 - Key: 2, size 68 bytes written.
 - Key: 3, size 68 bytes written.
 - Key: 4, size 68 bytes written.
 - Key: 5, size 68 bytes written.
Section: 193
 - Key: 2, size 8 bytes written.
 - Key: 3, size 32 bytes written.
 - Key: 4, size 32 bytes written.
 - Key: 9, size 64 bytes written.
Section: 217
 - Key: 0, size 32 bytes written.
- 239 skipped
Section: 296
 - Key: 0, size 2 bytes written.
 - Key: 1, size 4 bytes written.
 - Key: 2, size 24 bytes written.
 - Key: 3, size 5 bytes written.
- 308 skipped
Section: 309
 - Key: 0, size 4 bytes written.
 - Key: 1, size 2 bytes written.
 - Key: 2, size 12 bytes written.
 - Key: 3, size 36 bytes written.
 - Key: 4, size 12 bytes written.
 - Key: 7, size 12 bytes written.
 - Key: 17, size 12 bytes written.
Section: 313
 - Key: 0, size 800 bytes written.
Section: 322
 - Key: 0, size 1 byte written.
Section: 334
 - Key: 0, size 1 byte written.
Section: 341
 - Key: 0, size 1 byte written.
 - Key: 3, size 4 bytes written.
 - Key: 4, size 4512 bytes written.
Section: 354
 - Key: 0, size 13 bytes written.
Section: 356
 - Key: 0, size 2 bytes written.
Section: 360
 - Key: 0, size 1 byte written.
 - Key: 1, size 2 bytes written.
Section: 369
 - Key: 0, size 40 bytes written.
Section: 382
 - Key: 0, size 64 bytes written.
 - Key: 1, size 4 bytes written.
Section: 388
 - Key: 0, size 4 bytes written.
Section: 395
 - Key: 0, size 16 bytes written.
Completed in 1 min 4.656 s

Bus check log at this stage:

Code:

MXKEY [MxKey Team HTI PLUS Flasher Interface 5], SN: C081456E
Using device: HTI, FW ver: 00.50, SN: 01002FF5
Connection status: UHCI:HUB:USB 2.00 (Full-speed)
Driver: WinUSB, ver: 3.5.1.0 
Module ver: 1.0.0.21200(18-07-2012), Library ver: 1.0.0.14214(25-10-2012)
CMT Data :
SYSTEM ASIC ID: 000000030000022600010007400C192103032108 [RAPUYAMA ver: 3.x]
EM0 ID: 00000C35
EM1 ID: 00000C30
PUBLIC ID: 94140000FFFF7C40C2D03DA6E4A36657D42C0F03
ASIC MODE ID: 00
ROOT KEY HASH: 3AB5DB70B45D23F1ADEEBB5734160706
ROM ID: 2CAC45E23BC33C8B
 SecondaryBoot: RAPUv21_2nd.fg [BB5]  version: 12.14.0 revision: 3.0 size: 0x3B40
 Supported Ids: 0003192103002107, 000C192103002107, 0003192103012107, 000C192103012107, 000C192103022107, 0003192103022107, 400C192103022107, 4003192103022107, 000C192103032108, 0003192103032108, 400C192103032108, 4003192103032108, 0003192103042108, 400C192103042108, 0003192103042108, 4003192103042108
eBB5ProtocolType: NEW
TransmissionMode: DDR&TX2
Storage0: 0000 0000  - 0000 0000  type: RAM, asic:CMT 
Storage1: FFFF 0000  - 0000 0000  type: MMC, asic:CMT 
Storage2: 0000 0000  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage3: 0000 0001  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage4: 00EC 0060  - 0000 0032 [Samsung  LH28F800BG] type: FLASH,MuxOneNAND, asic:CMT 
Suggested algorithm: XSR 1.6
 Algorithm: RAPUv21_XSR17_alg.fg [XSR 1.6]  version: 12.14.0 revision: 3.0 size: 0xD4529
 Supported Ids: 0003192103002107, 000C192103002107, 0003192103012107, 000C192103012107, 000C192103022107, 0003192103022107, 400C192103022107, 4003192103022107, 000C192103032108, 0003192103032108, 400C192103032108, 4003192103032108, 0003192103042108, 400C192103042108, 0003192103042108, 4003192103042108
TransmissionMode: DDR&TX2
FUR: Adding Asic CMT as client OK
CMT PAPUBKEYS HASH: BD43E84B21F8AC7B9C66EA939355891E2A08044A
Selected firmware certificate matched.
Original Imei: Empty
Original Product code: Empty
NPC_DATA invalid !
SIMLOCK PA identifier:
 [0] PA_SIMLOC30
 
Phone type: RM-670 (Nokia 700)
SW version: V 79u_sr1_11w31.4 16-08-11 RM-670 (c) Nokia 
Imei plain: 12345610654321-?
Product code: 059L7H3
Battery voltage: 4803 mV, current: 15 mA
Language Pack:
- not available.

SLPA ver[1]: PA_SL (15 digit NCK)
 
SIMLOCK invalid!
SUPERDONGLE_KEY seems to be valid
SIMLOCK_TEST passed
 
 
Imei plain is invalid !!!
SIMLOCK_DATA corrupted!
SIMLOCK_DATA corrupted!

Restoring IMEI:

Code:

RPL: "C:\mobileEx\3.5\data\backup\BB5_35702304867250_BACK.rpl"
Imei: 35702304867250
Restoring RF/BB DATA from backup ...
Updating RF ...OK
Updating BB ...OK
Updating WARRANTY ...OK
Updating PROD ...OK
Updating BT ...OK
MXKEY [MxKey Team HTI PLUS Flasher Interface 5], SN: C081456E
Using device: HTI, FW ver: 00.50, SN: 01002FF5
Connection status: UHCI:HUB:USB 2.00 (Full-speed)
Driver: WinUSB, ver: 3.5.1.0 
Module ver: 1.0.0.21200(18-07-2012), Library ver: 1.0.0.14214(25-10-2012)
CMT Data :
SYSTEM ASIC ID: 000000030000022600010007400C192103032108 [RAPUYAMA ver: 3.x]
EM0 ID: 00000C35
EM1 ID: 00000C30
PUBLIC ID: 94140000FFFF7C40C2D03DA6E4A36657D42C0F03
ASIC MODE ID: 00
ROOT KEY HASH: 3AB5DB70B45D23F1ADEEBB5734160706
ROM ID: 2CAC45E23BC33C8B
 SecondaryBoot: RAPUv21_2nd.fg [BB5]  version: 12.14.0 revision: 3.0 size: 0x3B40
 Supported Ids: 0003192103002107, 000C192103002107, 0003192103012107, 000C192103012107, 000C192103022107, 0003192103022107, 400C192103022107, 4003192103022107, 000C192103032108, 0003192103032108, 400C192103032108, 4003192103032108, 0003192103042108, 400C192103042108, 0003192103042108, 4003192103042108
eBB5ProtocolType: NEW
TransmissionMode: DDR&TX2
Storage0: 0000 0000  - 0000 0000  type: RAM, asic:CMT 
Storage1: FFFF 0000  - 0000 0000  type: MMC, asic:CMT 
Storage2: 0000 0000  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage3: 0000 0001  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage4: 00EC 0060  - 0000 0032 [Samsung  LH28F800BG] type: FLASH,MuxOneNAND, asic:CMT 
Suggested algorithm: XSR 1.6
 Algorithm: RAPUv21_XSR17_alg.fg [XSR 1.6]  version: 12.14.0 revision: 3.0 size: 0xD4529
 Supported Ids: 0003192103002107, 000C192103002107, 0003192103012107, 000C192103012107, 000C192103022107, 0003192103022107, 400C192103022107, 4003192103022107, 000C192103032108, 0003192103032108, 400C192103032108, 4003192103032108, 0003192103042108, 400C192103042108, 0003192103042108, 4003192103042108
TransmissionMode: DDR&TX2
FUR: Adding Asic CMT as client OK
CMT PAPUBKEYS HASH: BD43E84B21F8AC7B9C66EA939355891E2A08044A
Updating CMT  NPC(PA_SL3)...OK
Updating CMT  CCC ...OK
Updating CMT  HWC ...OK
Prog.status for Asic CMT ...
 NAND: OK
Updating PRODUCTCODE (059L7H3)... OK
Updating PSN (C7G621140)... OK
Updating HWID (1003)... OK
Updating SIMLOCK ...OK
Updating WMDRM_PD ...OK
 
Phone type: RM-670 (Nokia 700)
SW version: V 79u_sr1_11w31.4 16-08-11 RM-670 (c) Nokia 
Imei plain: 35702304867250-6
Product code: 059L7H3
Battery voltage: 4803 mV, current: 15 mA
Language Pack:
- not available.

SLPA ver[4]: PA_SL3/PA_SIMLOC30 (15 digit NCK)
warning: avoid SW Downgrade & manual erase to this phone !
 
SIMLOCK seems to be valid
SUPERDONGLE_KEY seems to be valid
SIMLOCK_TEST passed
SECURITY_TEST failed!
 
 
Imei net: 357023048672506
Version: SIMLOCK SERVER
Provider: Westel Mobile , Country: Hungary
Counter: 0/3, 0/10
 
CONFIG_DATA: 2163000000000000
PROFILE_BITS: 8000000000000000
 
BLOCK1: 1=CLOSED(MCCMNC), DATA=21630F  [Hungary-Westel Mobile ]

Security failed, as you can see. :-(
BB5 certificate validation looks ok:

Code:

CMT Data :
SYSTEM ASIC ID: 000000030000022600010007400C192103032108 [RAPUYAMA ver: 3.x]
EM0 ID: 00000C35
EM1 ID: 00000C30
PUBLIC ID: 94140000FFFF7C40C2D03DA6E4A36657D42C0F03
ASIC MODE ID: 00
ROOT KEY HASH: 3AB5DB70B45D23F1ADEEBB5734160706
ROM ID: 2CAC45E23BC33C8B
 SecondaryBoot: RAPUv21_2nd.fg [BB5]  version: 12.14.0 revision: 3.0 size: 0x3B40
 Supported Ids: 0003192103002107, 000C192103002107, 0003192103012107, 000C192103012107, 000C192103022107, 0003192103022107, 400C192103022107, 4003192103022107, 000C192103032108, 0003192103032108, 400C192103032108, 4003192103032108, 0003192103042108, 400C192103042108, 0003192103042108, 4003192103042108
eBB5ProtocolType: NEW
TransmissionMode: DDR&TX2
Storage0: 0000 0000  - 0000 0000  type: RAM, asic:CMT 
Storage1: FFFF 0000  - 0000 0000  type: MMC, asic:CMT 
Storage2: 0000 0000  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage3: 0000 0001  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage4: 00EC 0060  - 0000 0032 [Samsung  LH28F800BG] type: FLASH,MuxOneNAND, asic:CMT 
Suggested algorithm: XSR 1.6
 Algorithm: RAPUv21_XSR17_alg.fg [XSR 1.6]  version: 12.14.0 revision: 3.0 size: 0xD4529
 Supported Ids: 0003192103002107, 000C192103002107, 0003192103012107, 000C192103012107, 000C192103022107, 0003192103022107, 400C192103022107, 4003192103022107, 000C192103032108, 0003192103032108, 400C192103032108, 4003192103032108, 0003192103042108, 400C192103042108, 0003192103042108, 4003192103042108
TransmissionMode: DDR&TX2
FUR: Adding Asic CMT as client OK
CMT PAPUBKEYS HASH: BD43E84B21F8AC7B9C66EA939355891E2A08044A
Reading CMT NPC (0x190 bytes).
Original Product Code: 059L7H3
Reading CMT VARIANT (0x0 bytes).
Reading CMT CCC (0x1CC bytes).
 Product Code: 059L7H3
CCC seems to be valid
Reading CMT HWC (0xD4 bytes).
 Product Code: 059L7H3
HWC seems to be valid

The phone displays "phone startup failed at this stage.

I'm all out of ideas, really.
I hope you have some tips on what I'm doing wrong.

.::ZUBER::. · 12-09-2012, 19:42

You have backup PM,

So Go to Service Tab > Click Load from File > Select Address you save PM file,

Now click Repair SD & click no to Pop Up Window, Click Write & Buscheck you will see your problem solved.

BR,
ZUBER

sicko78 · 12-09-2012, 19:46

Phone Type: RM-670
SW version: V 79u_sr1_11w31.4 16-08-11 RM-670 (c) Nokia

ID Test name Startup Result
15 SLEEP_X_LOOP Y passed
46 UEM_CBUS_IF N passed
3 EAR_DATA_LOOP N passed
12 SIM_CLK_LOOP Y passed
33 SIM_LOCK N passed
93 SECURITY N !failed !
90 PWR_KEY N passed
2 CURRENT_CONS N passed
96 HOOKINT N passed
101 BTEMP N passed
23 KELVIN_BATVOLTAGE N passed
19 KELVIN_VIBRA N passed
26 KELVIN_CAPACITOR N passed
29 KELVIN_MISC N passed
31 KELVIN_CHARGING N !no signal
27 KELVIN_AUDIO N passed
116 KELVIN_XEAR N passed
34 USB_CHARGING N passed
117 DIGIMIC N passed
209 HEADSET_AMPLIFIER N passed
222 LED_CONTROLLER N passed
233 AUDIO_PLL N passed
239 RAM_IF N passed
128 CDSP_SLEEPCLOCK_FREQ N passed
86 CDSP_RF_BB_IF N passed
124 CDSP_STROBE N passed
125 CDSP_DIGI_RXTX_IF N passed
83 CDSP_RF_SUPPLY N !failed !
127 CDSP_PA_ID_PIN N passed
75 CDSP_WCDMA_TX_POWER N passed

sicko78 · 12-09-2012, 19:52

Thanks a lot!!! It's finally working. I gave up hope, to be honest.

This is my final log. :-)

Code:

MXKEY [MxKey Team HTI PLUS Flasher Interface 5], SN: C081456E
Using device: HTI, FW ver: 00.50, SN: 01002FF5
Connection status: UHCI:HUB:USB 2.00 (Full-speed)
Driver: WinUSB, ver: 3.5.1.0 
Module ver: 1.0.0.21200(18-07-2012), Library ver: 1.0.0.14214(25-10-2012)
CMT Data :
SYSTEM ASIC ID: 000000030000022600010007400C192103032108 [RAPUYAMA ver: 3.x]
EM0 ID: 00000C35
EM1 ID: 00000C30
PUBLIC ID: 94140000FFFF7C40C2D03DA6E4A36657D42C0F03
ASIC MODE ID: 00
ROOT KEY HASH: 3AB5DB70B45D23F1ADEEBB5734160706
ROM ID: 2CAC45E23BC33C8B
 SecondaryBoot: RAPUv21_2nd.fg [BB5]  version: 12.14.0 revision: 3.0 size: 0x3B40
 Supported Ids: 0003192103002107, 000C192103002107, 0003192103012107, 000C192103012107, 000C192103022107, 0003192103022107, 400C192103022107, 4003192103022107, 000C192103032108, 0003192103032108, 400C192103032108, 4003192103032108, 0003192103042108, 400C192103042108, 0003192103042108, 4003192103042108
eBB5ProtocolType: NEW
TransmissionMode: DDR&TX2
Storage0: 0000 0000  - 0000 0000  type: RAM, asic:CMT 
Storage1: FFFF 0000  - 0000 0000  type: MMC, asic:CMT 
Storage2: 0000 0000  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage3: 0000 0001  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage4: 00EC 0060  - 0000 0032 [Samsung  LH28F800BG] type: FLASH,MuxOneNAND, asic:CMT 
Suggested algorithm: XSR 1.6
 Algorithm: RAPUv21_XSR17_alg.fg [XSR 1.6]  version: 12.14.0 revision: 3.0 size: 0xD4529
 Supported Ids: 0003192103002107, 000C192103002107, 0003192103012107, 000C192103012107, 000C192103022107, 0003192103022107, 400C192103022107, 4003192103022107, 000C192103032108, 0003192103032108, 400C192103032108, 4003192103032108, 0003192103042108, 400C192103042108, 0003192103042108, 4003192103042108
TransmissionMode: DDR&TX2
FUR: Adding Asic CMT as client OK
CMT PAPUBKEYS HASH: BD43E84B21F8AC7B9C66EA939355891E2A08044A
Selected firmware certificate matched.
Original Imei: 35702304867250
Original Product code: 059L7H3
Bluetooth ID: 940070458D04
SIMLOCK PA identifier:
 [0] PA_SIMLOC30
 
Phone type: RM-670 (Nokia 700)
SW version: V 79u_sr1_11w31.4 16-08-11 RM-670 (c) Nokia 
Imei plain: 35702304867250-6
Product code: 059L7H3
Battery voltage: 4799 mV, current: 15 mA
Language Pack:
- not available.

SLPA ver[4]: PA_SL3/PA_SIMLOC30 (15 digit NCK)
warning: avoid SW Downgrade & manual erase to this phone !
 
SIMLOCK seems to be valid
SUPERDONGLE_KEY[MX] seems to be valid
SIMLOCK_TEST passed
SECURITY_TEST passed
 
 
Imei net: 357023048672506
Version: SIMLOCK SERVER
Provider: Westel Mobile , Country: Hungary
Counter: 0/3, 0/10
 
CONFIG_DATA: 2163000000000000
PROFILE_BITS: 8000000000000000
 
BLOCK1: 1=OPEN

I'm trying to understand on my own what was wrong in my steps. It'll take some time, but hey, it's worth it. :-)

Thanks again for your support.

12-07-2012, 08:25	#1 (permalink)
sicko78 Major Poster Join Date: Jun 2012 Location: Romania Posts: 40 Member: 1776518 Status: Offline Thanks Meter: 5	Dead(?) Nokia 700 Hi all. I had a working Nokia 700, with some software error when the customer was accesing the camera. I flashed it with the latest version(113.) and now it hangs with Nokia logo. The phone was working before the flashing. Before the flash, it had sw version 111. Any ideas? I'm all out of them. :-( What can I do to downgrade it safely? I have RPL and PM backup. Last edited by sicko78; 12-07-2012 at 08:35.

12-07-2012, 12:47	#2 (permalink)
sicko78 Major Poster Join Date: Jun 2012 Location: Romania Posts: 40 Member: 1776518 Status: Offline Thanks Meter: 5	Anyone? :-)

12-07-2012, 15:42	#3 (permalink)
gbluez No Life Poster Join Date: Jul 2004 Posts: 11,049 Member: 73565 Status: Offline Thanks Meter: 5,062	You have backup, no need to worry. You just missed a good old thread . Please read here http://forum.gsmhosting.com/vbb/f550...an-do-1443542/ BR

12-07-2012, 15:42	#4 (permalink)
gbluez No Life Poster Join Date: Jul 2004 Posts: 11,049 Member: 73565 Status: Offline Thanks Meter: 5,062	--- double post ---- .

12-09-2012, 19:13	#7 (permalink)
sicko78 Major Poster Join Date: Jun 2012 Location: Romania Posts: 40 Member: 1776518 Status: Offline Thanks Meter: 5	I did it all over again, security test is ok before I'm restoring RF/BB from server. What could be the problem?

12-09-2012, 19:42	#9 (permalink)
.::ZUBER::. No Life Poster Join Date: Apr 2006 Location: MXBOX THUNDER Helpdesk Age: 50 Posts: 4,273 Member: 262425 Status: Offline Sonork: 100.1617691 Thanks Meter: 1,264	You have backup PM, So Go to Service Tab > Click Load from File > Select Address you save PM file, Now click Repair SD & click no to Pop Up Window, Click Write & Buscheck you will see your problem solved. BR, ZUBER

12-09-2012, 19:46	#10 (permalink)
sicko78 Major Poster Join Date: Jun 2012 Location: Romania Posts: 40 Member: 1776518 Status: Offline Thanks Meter: 5	Phone Type: RM-670 SW version: V 79u_sr1_11w31.4 16-08-11 RM-670 (c) Nokia ID Test name Startup Result 15 SLEEP_X_LOOP Y passed 46 UEM_CBUS_IF N passed 3 EAR_DATA_LOOP N passed 12 SIM_CLK_LOOP Y passed 33 SIM_LOCK N passed 93 SECURITY N !failed ! 90 PWR_KEY N passed 2 CURRENT_CONS N passed 96 HOOKINT N passed 101 BTEMP N passed 23 KELVIN_BATVOLTAGE N passed 19 KELVIN_VIBRA N passed 26 KELVIN_CAPACITOR N passed 29 KELVIN_MISC N passed 31 KELVIN_CHARGING N !no signal 27 KELVIN_AUDIO N passed 116 KELVIN_XEAR N passed 34 USB_CHARGING N passed 117 DIGIMIC N passed 209 HEADSET_AMPLIFIER N passed 222 LED_CONTROLLER N passed 233 AUDIO_PLL N passed 239 RAM_IF N passed 128 CDSP_SLEEPCLOCK_FREQ N passed 86 CDSP_RF_BB_IF N passed 124 CDSP_STROBE N passed 125 CDSP_DIGI_RXTX_IF N passed 83 CDSP_RF_SUPPLY N !failed ! 127 CDSP_PA_ID_PIN N passed 75 CDSP_WCDMA_TX_POWER N passed