[gulka]

Сохранение полного RPL 5530 RM-504

Handling device: [Cyclone Team], [Cyclone Bootloader]
Handling device: [Cyclone Team], [Cyclone Box]
Initializing box...
Box Firmware: Cyclone Nokia Application v01.61, (May 10 2011 21:52:47, gcc v4.3.3, RTOS V6.0.1), Type: Signed Production Application, (C) KarwosSoft 2011 wk9
Hardware Platform: Cyclone Classic Flasher Interface (c) 2008,2009 KarwosLabs
Box Serial Number: C0000A2D
HW Revision: A, Suitable for: Production, Case: First Plastic Case, MCU Manufacture Time: 2008, wk27
Initializing security card...
Card Serial Number: XXXXXXXX
Card Firmware Revision: 0109
Card is activated
Box is activated
Started box selftests procedure
USB Voltage	5,07v	PASSED
MCU Voltage	3,30v	PASSED
Core Voltage	1,79v	PASSED
VBAT Voltage	1,41v	PASSED
VBAT Voltage	4,87v	PASSED
Box VPP disabled
VPP Voltage	0,02v	PASSED
Internal Box VPP Enabled
VPP Voltage	4,77v	PASSED
Box VPP disabled
VPP Voltage	0,02v	PASSED
External Box VPP Enabled
VPP Voltage	4,52v	PASSED
Box VPP disabled
All box selftests passed!
Super DCT4 Activation: TRUE
Initializing FBUS...
All initialized - Ready to work
RPL Creation started...
Processing CMT Part...
Storing Product Code...
Storing PSN...
Storing HWID...
Trying to store Simlock...
Reading Configuration Key...
Hashing...
Reading SHA1-RSA Signature...
Reading SHA1-HMAC Signature...
Storing Simlock...
Trying to store WMDRM RPL...
Reading Keys...
Storing WMDRM PD...
Reading Security Block...
Security block OK and saved to "RM-504_358022037026954_12.05.2011_95502.SecurityBlock.PM"
WARNING: "1B80000FC58200523DAF2BEC90400ADA4DAE3457.C0000A2D" Not Exists, Will read it...
Reading CYC file from phone...
Booting CMT...
CMT_SYSTEM_ASIC_ID:	000000010000022600010006400C192101051105
CMT_EM_ASIC_ID:		00000296
CMT_EM_ASIC_ID:		00000B22
CMT_PUBLIC_ID:		1B80000FC58200523DAF2BEC90400ADA4DAE3457
CMT_ASIC_MODE_ID:	00
CMT_ROOT_KEY_HASH:	B8C3ADECFC997FCD8081D3DEAF870B8C
CMT_BOOT_ROM_CRC:	4B9B7510
CMT_SECURE_ROM_CRC:	3E691FF8
CMT Ready!
New_RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 512.10.48.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using NEW BB5 FLASHING PROTOCOL
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0020004000000031, ST, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x0020004000000031, ST, ONENAND
Requested Algorithm: XSR 1.5 (CMT)
Sending Auxiliary Loader...
Auxiliary Loader Sent!
Loader: RAPxx CommonBoot v1.04 (C) 2011 KarwosLabs 
Custom loader running OK! Working...
Readed OK, Saving to "1B80000FC58200523DAF2BEC90400ADA4DAE3457.C0000A2D"
Storing Additional Data...
Checking Superdongle Key...
Encrypting Superdongle Key...
Storing Superdongle Key...
Checking CMLA Key...
Storing CMLA Key...
Booting CMT...
CMT_SYSTEM_ASIC_ID:	000000010000022600010006400C192101051105
CMT_EM_ASIC_ID:		00000296
CMT_EM_ASIC_ID:		00000B22
CMT_PUBLIC_ID:		1B80000FC58200523DAF2BEC90400ADA4DAE3457
CMT_ASIC_MODE_ID:	00
CMT_ROOT_KEY_HASH:	B8C3ADECFC997FCD8081D3DEAF870B8C
CMT_BOOT_ROM_CRC:	4B9B7510
CMT_SECURE_ROM_CRC:	3E691FF8
CMT Ready!
Searching for BootCode: DualLine 32Bit
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 512.10.48.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using NEW BB5 FLASHING PROTOCOL
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0020004000000031, ST, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x0020004000000031, ST, ONENAND
Requested Algorithm: XSR 1.5 (CMT)
Searching for BootCode: DualLine 32Bit
FlashChip 0x00200040 (ST), Size: 256MBytes, VPP: Not Supported
FlashChip 0x00200040 (ST), Size: 256MBytes, VPP: Not Supported
RAPIDOv11_XSR15_alg.fg, Type: Algorithm, Rev: 512.10.48.1, Algo: XSR 1.5
Initializing TurboCache...
TurboCache Loaded!
Writing CMT PASUBTOC Certificate...
Writing CMT ALG Certificate...
CMT Algorithm Ready!
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Adding FUR Client (CMT, State: Ready)...
CMT FUR Ready!
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: F2B05364E563A348608C1C3C9E54FE42AAAA1ACF
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
Storing NPC...
Storing CCC...
Storing HWC...
CMT VARIANT Not Found
Restarting MCU...
RPL Saved OK

После полного стирания и последующей прошивки:

MCU Version	V ICPR72_10w25.3
MCU Date	11-10-10
Product		RM-504 (Nokia 5530 XpressMusic)
Manufacturer	(c) Nokia
IMEI		12345610654321?
IMEI Spare	1A32541660452301
IMEI SV		1332541660452311F8000000
PSN		0
PSD		0000000000000000
LPSN		0
APE SW		V 32.0.007
APE Variant	V 32.0.007V 32.0.007 V 32.0.007 
APE Test		09wk19v0.130
APE HW		256
APE ADSP	256
RETU		16
TAHVO		22
AHNE		11
RFIC		17141716
DSP		ICPR72_10w16
Failed to read info -> Failed to read SP info

Запись бекапа:

Skipping RPL decryption...
Parsing decrypted RPL...
Processing FBUS Part...
Writing Product Code... 
Writing PSN... 
Writing HWID... 
Writing Simlock...
Handling as SL3 Simlock Data
Reading Security Block...
Security block OK and saved to "RM-504_12345610654321_12.05.2011_103547.SecurityBlock.PM"
Simlock ACCEPTED OK !
Writing Superdongle key...
Superdongle Key ACCEPTED OK !
Writing CMLA key...
CMLA Key ACCEPTED OK !
Writing WMDRM PD Data...
WMDRM PD Data ACCEPTED OK !
Processing FLASHBUS Part...
Booting CMT...
CMT_SYSTEM_ASIC_ID:	000000010000022600010006400C192101051105
CMT_EM_ASIC_ID:		00000296
CMT_EM_ASIC_ID:		00000B22
CMT_PUBLIC_ID:		1B80000FC58200523DAF2BEC90400ADA4DAE3457
CMT_ASIC_MODE_ID:	00
CMT_ROOT_KEY_HASH:	B8C3ADECFC997FCD8081D3DEAF870B8C
CMT_BOOT_ROM_CRC:	4B9B7510
CMT_SECURE_ROM_CRC:	3E691FF8
CMT Ready!
Searching for BootCode: DualLine 32Bit
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 512.10.48.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using NEW BB5 FLASHING PROTOCOL
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0020004000000031, ST, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x0020004000000031, ST, ONENAND
Requested Algorithm: XSR 1.5 (CMT)
Searching for BootCode: DualLine 32Bit
FlashChip 0x00200040 (ST), Size: 256MBytes, VPP: Not Supported
FlashChip 0x00200040 (ST), Size: 256MBytes, VPP: Not Supported
RAPIDOv11_XSR15_alg.fg, Type: Algorithm, Rev: 512.10.48.1, Algo: XSR 1.5
Initializing TurboCache...
TurboCache Loaded!
Writing CMT PASUBTOC Certificate...
Writing CMT ALG Certificate...
CMT Algorithm Ready!
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Adding FUR Client (CMT, State: Ready)...
CMT FUR Ready!
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: F2B05364E563A348608C1C3C9E54FE42AAAA1ACF
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
CMT NPC Erased
CMT NPC Written
CMT HWC Erased
CMT HWC Written
CMT CCC Erased
CMT CCC Written
Restarting MCU...
Write RPL Finished!

ИнФО:

MCU Version	V ICPR72_10w25.3
MCU Date	11-10-10
Product		RM-504 (Nokia 5530 XpressMusic)
Manufacturer	(c) Nokia
IMEI		358022037026954
Mastercode	5056315323
IMEI Spare	3A85200273209605
IMEI SV		3385200273209615F8000000
PSN		CGL021294
Product Code	0583714
PSD		0000000000000000
LPSN		0
WLAN MAC	1886AC5F6A5F
APE SW		V 32.0.007
APE Variant	V 32.0.007V 32.0.007 V 32.0.007 
APE Test		09wk19v0.130
APE HW		256
APE ADSP	256
RETU		16
TAHVO		22
AHNE		11
HW		0802
RFIC		17141716
DSP		ICPR72_10w16
Simlock Server	SIMLOCK SERVER
Simlock Key	2440700000000000
Simlock Profile	0000000000000000
Simlock Key Cnt	0
Simlock FBUS Cnt	0
Simlock [1,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [1,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [1,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [1,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [2,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [2,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [2,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [3,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [3,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [3,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [4,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [4,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [4,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [5,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [5,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [5,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [6,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [6,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [6,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,1]	State: OPENED	Type: MCC-MNC	Data: FFFFFF
Simlock [7,2]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,3]	State: OPENED	Type: GID	Data: FFFF
Simlock [7,4]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF
Simlock [7,5]	State: OPENED	Type: IMSI	Data: FFFFFFFFFFFFFFFF

Started Phone Security Analysis...

MCU Version	V ICPR72_10w25.3
MCU Date	11-10-10
Product		RM-504 (Nokia 5530 XpressMusic)
Manufacturer	(c) Nokia
IMEI		358022037026954
Mastercode	5056315323
Reading Security Block...
Security block OK and saved to "RM-504_358022037026954_12.05.2011_103944.SecurityBlock.PM"
Step 1 : Testing SIMLOCK
SIMLOCK SEFLTEST PASSED OK!
Step 2 : Testing SECURITY
-- SECURITY PROBLEM --

Phone have failed SECURITY Test, that means Superdongle Area is DAMAGED!
To repair it, simply slick "SX4 Authorization / SD Repair" button.
After SX4/SD Repair, don't forget to write PM file with fields 1,309 (if SW don't do this automatically)

Additionaly, Checking HWC/CCC Certs...
Booting CMT...
CMT_SYSTEM_ASIC_ID:	000000010000022600010006400C192101051105
CMT_EM_ASIC_ID:		00000296
CMT_EM_ASIC_ID:		00000B22
CMT_PUBLIC_ID:		1B80000FC58200523DAF2BEC90400ADA4DAE3457
CMT_ASIC_MODE_ID:	00
CMT_ROOT_KEY_HASH:	B8C3ADECFC997FCD8081D3DEAF870B8C
CMT_BOOT_ROM_CRC:	4B9B7510
CMT_SECURE_ROM_CRC:	3E691FF8
CMT Ready!
Searching for BootCode: DualLine 32Bit
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 512.10.48.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using NEW BB5 FLASHING PROTOCOL
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0020004000000031, ST, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x0020004000000031, ST, ONENAND
Requested Algorithm: XSR 1.5 (CMT)
Searching for BootCode: DualLine 32Bit
FlashChip 0x00200040 (ST), Size: 256MBytes, VPP: Not Supported
FlashChip 0x00200040 (ST), Size: 256MBytes, VPP: Not Supported
RAPIDOv11_XSR15_alg.fg, Type: Algorithm, Rev: 512.10.48.1, Algo: XSR 1.5
Initializing TurboCache...
TurboCache Loaded!
Writing CMT PASUBTOC Certificate...
Writing CMT ALG Certificate...
CMT Algorithm Ready!
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Adding FUR Client (CMT, State: Ready)...
CMT FUR Ready!
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: F2B05364E563A348608C1C3C9E54FE42AAAA1ACF
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
HWC Looks OK!
CCC Looks OK!
Restarting MCU...
-- SECURITY PROBLEM --
Step 3 : Analyzing Security Block
"1B80000FC58200523DAF2BEC90400ADA4DAE3457.C0000A2D" Exists, That is good...
Checking SUPERDONGLE...
SUPERDONGLE FOUND AND CHECKSUM OK! PASSED!
Checking SIMLOCK...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking MCU&DSP TIMESTAMPS...
MCU&DSP TIMESTAMPS FOUND AND CHECKSUM OK! PASSED!
Checking CMLA KEYS...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking ECC KEYS...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking DIV KEYS...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Analyze finished!

SX4 Authorization / SD Repair Procedure Started....

"1B80000FC58200523DAF2BEC90400ADA4DAE3457.C0000A2D" Exists, That is good...
MCU Version	V ICPR72_10w25.3
MCU Date	11-10-10
Product		RM-504 (Nokia 5530 XpressMusic)
Manufacturer	(c) Nokia
IMEI		358022037026954
Mastercode	5056315323
Reading Security Block...
Security block OK and saved to "RM-504_358022037026954_12.05.2011_104344.SecurityBlock.PM"
SX4 Status: Not authorized (74)
Started mutual authenthication with card...
Receiving Phone Seed 1...
Phone Seed 1 Received
Sending calculated Data 1, and expecting Seed 2...
Calculated Data 1 accepted, Phone Seed 2 Received
Sending calculated Data 2
Calculated Data 2 sent, Checking Authorization Status again
Authorization successfully finished!
Looking for Virgin PM In Database...
Found, writing...
[1,0] Written, Length: 114 bytes, Status: OK
[1,2] Written, Length: 98 bytes, Status: OK
[1,4] Written, Length: 110 bytes, Status: OK
[1,6] Written, Length: 98 bytes, Status: OK
[1,8] Written, Length: 110 bytes, Status: OK
[1,13] Written, Length: 98 bytes, Status: OK
[1,16] Written, Length: 98 bytes, Status: OK
[1,18] Written, Length: 98 bytes, Status: OK
[1,20] Written, Length: 98 bytes, Status: OK
[1,24] Written, Length: 84 bytes, Status: OK
[1,25] Written, Length: 4 bytes, Status: OK
[1,26] Written, Length: 110 bytes, Status: OK
[1,28] Written, Length: 98 bytes, Status: OK
[1,29] Written, Length: 10 bytes, Status: OK
[1,31] Written, Length: 98 bytes, Status: OK
[1,34] Written, Length: 80 bytes, Status: OK
[309,0] Written, Length: 4 bytes, Status: OK
[309,1] Written, Length: 2 bytes, Status: OK
[309,2] Written, Length: 12 bytes, Status: OK
[309,4] Written, Length: 12 bytes, Status: OK
[309,5] Written, Length: 12 bytes, Status: OK
[309,7] Written, Length: 12 bytes, Status: OK
[309,8] Written, Length: 12 bytes, Status: OK
[309,17] Written, Length: 12 bytes, Status: OK
Write PM Finished, Record written OK: 24, Record written NOT OK: 0

Started Phone Security Analysis...

MCU Version	V ICPR72_10w25.3
MCU Date	11-10-10
Product		RM-504 (Nokia 5530 XpressMusic)
Manufacturer	(c) Nokia
IMEI		358022037026954
Mastercode	5056315323
Reading Security Block...
Security block OK and saved to "RM-504_358022037026954_12.05.2011_104729.SecurityBlock.PM"
Step 1 : Testing SIMLOCK
SIMLOCK SEFLTEST PASSED OK!
Step 2 : Testing SECURITY
SECURITY SEFLTEST PASSED OK!
Step 3 : Analyzing Security Block
"1B80000FC58200523DAF2BEC90400ADA4DAE3457.C0000A2D" Exists, That is good...
Checking SUPERDONGLE...
SUPERDONGLE FOUND AND CHECKSUM OK! PASSED!
Checking SIMLOCK...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking MCU&DSP TIMESTAMPS...
MCU&DSP TIMESTAMPS FOUND AND CHECKSUM OK! PASSED!
Checking CMLA KEYS...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking ECC KEYS...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking DIV KEYS...
DIV KEYS FOUND AND CHECKSUM OK! PASSED!
Analyze finished!