6085, Simlock test failed

[asg-gealt]

Принесли с жалобой на периодическое отключение телефона.

Логи циклона:

Info:

Скрытый текст: Показать

MCU Version V 06.00
MCU Date 28-11-07
Product RM-198
Manufacturer (c) Nokia.
IMEI 358630017386774
Mastercode 1471125562
IMEI Spare 3A85360071837607
IMEI SV 3385360071837627F4000000
PPM V 06.00, 28-11-07, RM-198, (c) Nokia. , K
CNT Content: k, V 06.00, 28-11-07, RM-198, (c) Nokia. ,
PSN DCI213350
Product Code 0541318
Basic Product Code 0531926
PSD 0000000000000000
RETU 32
TAHVO 53
AHNE 11
HW 1201
RFIC 17211721
DSP pb06w14v50.1
BT 06cc-P9.1
Simlock Server SIMLOCK SERVER VERSION 63
Simlock Key 2440700000000000
Simlock Profile 8000000000000006
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [1,2] State: OPENED Type: GID Data: FFFF
Simlock [1,3] State: OPENED Type: GID Data: FFFF
Simlock [1,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [1,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [2,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [2,2] State: OPENED Type: GID Data: FFFF
Simlock [2,3] State: OPENED Type: GID Data: FFFF
Simlock [2,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [2,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [3,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [3,2] State: OPENED Type: GID Data: FFFF
Simlock [3,3] State: OPENED Type: GID Data: FFFF
Simlock [3,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [3,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [4,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [4,2] State: OPENED Type: GID Data: FFFF
Simlock [4,3] State: OPENED Type: GID Data: FFFF
Simlock [4,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [4,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [5,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [5,2] State: OPENED Type: GID Data: FFFF
Simlock [5,3] State: OPENED Type: GID Data: FFFF
Simlock [5,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [5,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [6,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [6,2] State: OPENED Type: GID Data: FFFF
Simlock [6,3] State: OPENED Type: GID Data: FFFF
Simlock [6,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [6,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [7,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [7,2] State: OPENED Type: GID Data: FFFF
Simlock [7,3] State: OPENED Type: GID Data: FFFF
Simlock [7,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [7,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF

Analyze security:

Скрытый текст: Показать

Started Phone Security Analysis...
MCU Version V 06.00
MCU Date 28-11-07
Product RM-198
Manufacturer (c) Nokia.
IMEI 358630017386774
Mastercode 1471125562
Reading Security Block...
Security block OK and saved to "RM-198_358630017386774_18.08.2010_154141.SecurityBlock.PM"
Step 1 : Testing SIMLOCK
-- SIMLOCK PROBLEM --

Phone have failed SIMLOCK Test, that means Simlock Area is DAMAGED!
To repair simlock area, Select Unlock method : "RPL CALCULATION",
And then click DIRECT UNLOCK. SL Area will be re-formatted.

-- SIMLOCK PROBLEM --
Step 2 : Testing SECURITY
SECURITY SEFLTEST PASSED OK!
Step 3 : Analyzing Security Block
"13A0011289F16D56BE56E7F5D767302089B7A1B0.C0002B27" Exists, That is good...
Checking SUPERDONGLE...
SUPERDONGLE FOUND AND CHECKSUM OK! PASSED!
Checking SIMLOCK...
SIMLOCK FOUND AND CHECKSUM OK! PASSED!
Checking MCU&DSP TIMESTAMPS...
MCU&DSP TIMESTAMPS FOUND AND CHECKSUM OK! PASSED!
Checking CMLA KEYS...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking ECC KEYS...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking DIV KEYS...
DIV KEYS FOUND AND CHECKSUM OK! PASSED!
Analyze finished!

Видно, что SLD повреждена. Делаем Direct Unlock+RPL Recalculation:

Скрытый текст: Показать

BB5 Unlock Started...
MCU Version V 06.00
MCU Date 28-11-07
Product RM-198
Manufacturer (c) Nokia.
IMEI 358630017386774
Mastercode 1471125562
Simlock Server SIMLOCK SERVER VERSION 63
Simlock Key 2440700000000000
Simlock Profile 8000000000000006
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [1,2] State: OPENED Type: GID Data: FFFF
Simlock [1,3] State: OPENED Type: GID Data: FFFF
Simlock [1,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [1,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [2,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [2,2] State: OPENED Type: GID Data: FFFF
Simlock [2,3] State: OPENED Type: GID Data: FFFF
Simlock [2,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [2,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [3,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [3,2] State: OPENED Type: GID Data: FFFF
Simlock [3,3] State: OPENED Type: GID Data: FFFF
Simlock [3,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [3,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [4,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [4,2] State: OPENED Type: GID Data: FFFF
Simlock [4,3] State: OPENED Type: GID Data: FFFF
Simlock [4,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [4,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [5,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [5,2] State: OPENED Type: GID Data: FFFF
Simlock [5,3] State: OPENED Type: GID Data: FFFF
Simlock [5,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [5,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [6,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [6,2] State: OPENED Type: GID Data: FFFF
Simlock [6,3] State: OPENED Type: GID Data: FFFF
Simlock [6,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [6,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [7,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [7,2] State: OPENED Type: GID Data: FFFF
Simlock [7,3] State: OPENED Type: GID Data: FFFF
Simlock [7,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [7,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Reading Security Block...
Security block OK and saved to "RM-198_358630017386774_18.08.2010_154247.SecurityBlock.PM"
"13A0011289F16D56BE56E7F5D767302089B7A1B0.C0002B27" Exists, That is good...
Checking for Rootkey Hash support with selected Unlock Method...
Selected Unlock Method: RPL Calculation
Asking box to calculate RPL...
Received RPL from Box OK!
Writing Simlock...
Simlock ACCEPTED OK !
MCU Version V 06.00
MCU Date 28-11-07
Product RM-198
Manufacturer (c) Nokia.
IMEI 358630017386774
Mastercode 1471125562
Simlock Server SIMLOCK SERVER VERSION 63
Simlock Key 2440700000000000
Simlock Profile 8000000000000006
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [1,2] State: OPENED Type: GID Data: FFFF
Simlock [1,3] State: OPENED Type: GID Data: FFFF
Simlock [1,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [1,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [2,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [2,2] State: OPENED Type: GID Data: FFFF
Simlock [2,3] State: OPENED Type: GID Data: FFFF
Simlock [2,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [2,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [3,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [3,2] State: OPENED Type: GID Data: FFFF
Simlock [3,3] State: OPENED Type: GID Data: FFFF
Simlock [3,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [3,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [4,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [4,2] State: OPENED Type: GID Data: FFFF
Simlock [4,3] State: OPENED Type: GID Data: FFFF
Simlock [4,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [4,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [5,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [5,2] State: OPENED Type: GID Data: FFFF
Simlock [5,3] State: OPENED Type: GID Data: FFFF
Simlock [5,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [5,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [6,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [6,2] State: OPENED Type: GID Data: FFFF
Simlock [6,3] State: OPENED Type: GID Data: FFFF
Simlock [6,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [6,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [7,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [7,2] State: OPENED Type: GID Data: FFFF
Simlock [7,3] State: OPENED Type: GID Data: FFFF
Simlock [7,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [7,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Unlock finished! Time taken 3.922s

Анализ security после этого остается прежним, как в логе выше, без изменений.
Пишем RPL без NPC:

Скрытый текст: Показать

Skipping RPL decryption...
Parsing decrypted RPL...
Processing FBUS Part...
Processing FLASHBUS Part...
Booting CMT...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006010C192101001101
CMT_EM_ASIC_ID: 00000232
CMT_EM_ASIC_ID: 00000353
CMT_PUBLIC_ID: 13A0011289F16D56BE56E7F5D767302089B7A1B0
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_BOOT_ROM_CRC: 191EC665
CMT_SECURE_ROM_CRC: DFAAF68F
CMT Ready!
Searching for BootCode: DualLine 32Bit
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.10.6.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using OLD BB5 FLASHING PROTOCOL
FlashChip[0,CMT]: 0x0001004100006A21, AMD, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
Searching for BootCode: DualLine 32Bit
FlashChip 0x00010041 (AMD), Size: 32MBytes, VPP: 9V
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.10.6.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: C44614CCC0A09C4A52B890FA55B4B31AF4787668
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
CMT HWC Erased
CMT HWC Written
CMT CCC Erased
CMT CCC Written
Restarting MCU...
Write RPL Finished!

Делаем Authorize\Repair SD keys (бессмысленная операция в этом случае. От безысходности уже)

Скрытый текст: Показать

SX4 Authorization / SD Repair Procedure Started....
"13A0011289F16D56BE56E7F5D767302089B7A1B0.C0002B27" Exists, That is good...
MCU Version V 06.00
MCU Date 28-11-07
Product RM-198
Manufacturer (c) Nokia.
IMEI 358630017386774
Mastercode 1471125562
Reading Security Block...
Security block OK and saved to "RM-198_358630017386774_18.08.2010_154349.SecurityBlock.PM"
SX4 Status: Not authorized (76)
Started mutual authenthication with card...
Receiving Phone Seed 1...
Phone Seed 1 Received
Sending calculated Data 1, and expecting Seed 2...
Calculated Data 1 accepted, Phone Seed 2 Received
Sending calculated Data 2
Calculated Data 2 sent, Checking Authorization Status again
Authorization successfully finished!
Looking for Virgin PM In Database...
Found, writing...
[1,0] Written, Length: 114 bytes, Status: OK
[1,2] Written, Length: 98 bytes, Status: OK
[1,4] Written, Length: 110 bytes, Status: OK
[1,6] Written, Length: 86 bytes, Status: OK
[1,8] Written, Length: 110 bytes, Status: OK
[1,13] Written, Length: 86 bytes, Status: OK
[1,16] Written, Length: 86 bytes, Status: OK
[1,18] Written, Length: 86 bytes, Status: OK
[1,20] Written, Length: 86 bytes, Status: OK
[1,25] Written, Length: 4 bytes, Status: OK
[1,26] Written, Length: 110 bytes, Status: OK
[1,28] Written, Length: 98 bytes, Status: OK
[1,29] Written, Length: 6 bytes, Status: OK
[1,31] Written, Length: 86 bytes, Status: OK
[1,34] Written, Length: 80 bytes, Status: OK
[309,0] Written, Length: 4 bytes, Status: OK
[309,1] Written, Length: 2 bytes, Status: OK
[309,2] Written, Length: 12 bytes, Status: OK
[309,4] Written, Length: 12 bytes, Status: OK
[309,5] Written, Length: 12 bytes, Status: OK
[309,7] Written, Length: 12 bytes, Status: OK
[309,8] Written, Length: 12 bytes, Status: OK
[309,17] Written, Length: 12 bytes, Status: OK
[309,22] Written, Length: 12 bytes, Status: OK
Write PM Finished, Record written OK: 24, Record written NOT OK: 0

Инфо UFS:

Скрытый текст: Показать

MCU SW : V 06.00 28-11-07 RM-198 (c) Nokia.
PPM SW : V 06.00 28-11-07 RM-198 (c) Nokia. K
Product : Nokia 6085
Prd.Code: 0541318
Bpr.Code: 0531926
Prod.Sn : DCI213350
HW Vers : 1201
EM RETU : 32
EM TAHVO: 53
RFIC Ver: 17211721
DSP Vers: pb06w14v50.1
IMEI : 358630-01-738677-4
SL Serv : SIMLOCK SERVER VERSION 63
SL Conf : 244-07-00000000000
SL Prof : 8000000000000006
SL Count: 00 00
BLK1= L1: OPEN L2: OPEN L3: OPEN L4: OPEN L5: OPEN
BLK2= L1: OPEN L2: OPEN L3: OPEN L4: OPEN L5: OPEN
BLK3= L1: OPEN L2: OPEN L3: OPEN L4: OPEN L5: OPEN
BLK4= L1: OPEN L2: OPEN L3: OPEN L4: OPEN L5: OPEN
BLK5= L1: OPEN L2: OPEN L3: OPEN L4: OPEN L5: OPEN
BLK6= L1: OPEN L2: OPEN L3: OPEN L4: OPEN L5: OPEN
BLK7= L1: OPEN L2: OPEN L3: OPEN L4: OPEN L5: OPEN
Provider: Nokia Test;Finland

Simlock test по-прежнему - Failed.
Пробовал таже полное стирание, прошивка, PM, RPL. Ничего не помогает выправить SLD. Очень нужен толковый совет в этой странной ситуации.

[asg-gealt]

Неужели ни у кого нет стоящих мыслей по поводу проблемы?

[Mihail_tm]

Если я не ошибаюсь,то если битый SLD,то телефон уходит в contact service,а переодичесское отключние может быть связано с битым SDD,но всё это легко исправлятся на циклоне и MX-key,да ты и сам это занешь

[asg-gealt]

Если я не ошибаюсь,то если битый SLD,то телефон уходит в contact service,а переодичесское отключние может быть связано с битым SDD,но всё это легко исправлятся на циклоне и MX-key,да ты и сам это занешь

В CS уходит обычно из-за 1\309 блоков битых. Если SLD поврежден, то это обычно вызывает "Функции телефона ограничены". Если SDD - то самоотключение. Тут другой случай. Такие попадались тела, с Simlock test failed (и при этом блокировки OPEN и провайдер на месте), но легко лечились циклоном пересчетом 308го поля. Тут же что-то странное.

[weaver]

В CS уходит обычно из-за 1\309 блоков битых. Если SLD поврежден, то это обычно вызывает "Функции телефона ограничены". Если SDD - то самоотключение. Тут другой случай. Такие попадались тела, с Simlock test failed (и при этом блокировки OPEN и провайдер на месте), но легко лечились циклоном пересчетом 308го поля. Тут же что-то странное.

Перекатайте логику .

[ROMAN_-_666]

В CS уходит обычно из-за 1\309 блоков битых. Если SLD поврежден, то это обычно вызывает "Функции телефона ограничены". Если SDD - то самоотключение. Тут другой случай. Такие попадались тела, с Simlock test failed (и при этом блокировки OPEN и провайдер на месте), но легко лечились циклоном пересчетом 308го поля. Тут же что-то странное.

меняй рету!

Нда,действтельно,что то загадочное.
ROMAN_-_666 ,по моему,если мне память не изменяет,то у тебя была тема наподобие,только с другим телефоном ?

он ждет донора

[Mihail_tm]

Нда,действтельно,что то загадочное.
ROMAN_-_666 ,по моему,если мне память не изменяет,то у тебя была тема наподобие,только с другим телефоном ?

[toga]

Может там ремкамплект от 3110 или то другой какойто тогда МХ и РПЛ тебе не поможет Естли циклон не делал.

[ROMAN_-_666]

Может там ремкамплект от 3110 или то другой какойто тогда МХ и РПЛ тебе не поможет Естли циклон не делал.

еслибы там был не тот комплект ,то имей был бы 12345

[toga]

Естли у тело все родной тогда надо сделат полный бекап и менят флешку..

[weaver]

Может там ремкамплект от 3110 или то другой какойто тогда МХ и РПЛ тебе не поможет Естли циклон не делал.

Судя по IMEI и этому сайту http://www.numberingplans.com/?page=analysis&sub=imeinr

пара родная сидит .

[toga]

еслибы там был не тот комплект ,то имей был бы 12345

Забыл ты прав.