CycloneBox güncellemeler

[halis]

CYCLONE 106 exe
http://rapidshare.com/files/379159728/CycloneBoxInstaller.exe

[turkcellgsm]

Hello, New update for Cyclone Box is Ready.

What is new?
- Blackberry Module added, support all latest 210 MEPs. Unlock is free, and uses server to calculate Unlock Codes.
- If Logger fails somehow, you might still use manual mode (if you know IMEI and MEP)
- All DCT4 RPLs are free now (Included ASICs: 2,5,6,7,11)
- Skin changed back to white one (too many users complained)
- Improved mode transition between Main/Boot (timeout increased)
- Fixed problem when upon adding "New Path" in "Paths" module Root directory was empty
- CBUS stack improved, if box is disconeected during work, it tries to connect it again instead of "CBUS ERROR"
- Minor changes and bugfixes

How it works?
1. Run Blackberry Module
2. Install drivers (skip this if done already)
3. Click "Read Phone"
4. Connect phone to computer
5. Unlock using calculated codes

Here is example BB8310 Unlocked by Cyclone:

Quote:
Waiting for new Blackberry USB Device (timeout 30 seconds)...
New device attached, checking if it's Blackberry...
Blackberry Found!
PIN: 208B60F9
Opened Channel "RIM CalTask", Proceeding...
IMEI: 358516020462712
HWV-16835-001-1
ASY-15714-005
MEP-06424-002
VSM-17713-001
CFG-10695-065
SFI-15771-033
APP-21301-001
Calculating Codes using Fetched Data...
Handling device: [Cyclone Team], [Cyclone Box]
Service Tag: 6F1079DB8ADD083018BB1FB147B8DEE6
Cyclone Server (1.0.0.598), Cyclone Box Team 2008, 2009, 2010 - Ready.

Please wait...
Codes received: 1
MEP-2 Code: 4910403860764705
All Done!
Where to download?
RapidShare: 1-CLICK Web hosting - Easy Filehosting (http://rapidshare.com/files/384772766/Cyclone.exe)

Please do not forget also to install Blackberry drivers! You can download latest drivers from here:
RapidShare: 1-CLICK Web hosting - Easy Filehosting (http://rapidshare.com/files/384631084/BlackBerry_USB_and_Modem_Drivers_ENG__DM5.0.1b73_. msi)

[halis]

08-06-2010 Cyclone Box Firmware v01.38 Released Hi,

v01.38 Nokia Firmware is uploaded to server.
Changes:
- Fixed problem when Nokia correct BB5 NCKs was calculated only for levels +1,+2,+3, codes +4,+5,+6,+7 was wrongly calculated due to memory leak of calculation routines.
- Minor (or non enveloped yet http://forum.gsmhosting.com/ubb/smile.gif ) changes and bugfixes

This is server-side update only, don't ask for "exe" file because new "exe" is not released at moment, just use Maintenance Tool and upgrade your box.

Every box have 3 tries of upgrading firmware, please be patient during upgrade process because it may take some time and if you will cancel it (When software will act as a "hangup") you will lose upgrade logs and will need ask us for adding another credits...

Best Regards,
Cyclone Team

RapidShare: 1-CLICK Web hosting - Easy Filehosting (http://rapidshare.com/files/379159728/CycloneBoxInstaller.exe)

[norepent]

Hi to all
New Cyclone Box Installer, Firmware, Bootloader, is ready!
Most important changes:

=====================
Installer v1.07
30.06.2010
=====================
- New FBUS Loaders v10.18.00 introduced (new protocol, for RAPIDO,RAPU,ST,etc)
- New FBUS Lodaers v10.16.00 introduced (old protocol, for RAPv3)
- Added support for Infineon X-Gold phones flashing. Phones supported: 1661 RH-111, RH-125, etc.
- XGold: Support for dead phones flashing
- XGold: Support for cross flash (we have tested 1616 flashing with 1800 firmware and seems works. Anyway YOU are responsible for any damages. Make sure PM is being backed-up before cross-flash. You also can't flash phones with difrent platform (i.e. RH111 <> RH125). Too diffrent CPU, LCD...,etc...)
- XGold: Supports bauds 115200,230400,460800,921600
- XGold: You don't need to know which phone is UPP or Infineon based. Just select model and Cyclone will detect it automaticly - wil select corect falshing method.
- XGold: Supports for changing phone PPM/CNT or/and MCU
- XGold: Support for latest 2010 PBL/EBL Loaders
- Added "Flash Language Only" checkbox for DCT4/XGold mobiles. Use only if MCU version installed in phone matches PPM/CNT version which going to be flashed.
- Cyclone Clip Diagnostic module added. This is used for testing additional Cyclone Hardware (Clip).
- Clip Module Added into Main Firmware. This is used only with "Cyclone Clip" hardware. Clip Features:
- Clip: Can unlock any DCT4+ phone within 2 secs (without PC)
- Clip: Can repair Contact Service (if caused by damaged simlock)
- Clip: Can Rebuild Simlock Area
- Clip: Can reset security code of most DCT4/BB5 phones
- Clip: Can reset security code bad attempts counter of most DCT4/BB5 phones
- Clip: 100% Safe, fast and easy to use
- You need have Clip Hardware to use Clip Funcionality. Clip is very simple hardware attached together with batery to Diagnostic Port (and box could be used as clip without PC). We will update clip later for other funcionality.
- New Secure Bootloader Agent v3.00 Released
- Added Dead Boot Recovery mode (in case to do "Boot Recovery" (just in case) smartcard MUST be removed to launch Recovery Mode!)
- New Secure Bootloader v2.12 have been released
- Bootloader: Added Clip Detection
- Bootloader: Fixed floating (blinking) "VBAT" port
- Bootloader: Added support for some new types of smartcard
- Bootloader: Improved startup time
- Bootloader: Improved security
- Bootloader: Minor changes and bugfixes
- Added new messages to NCK Phone Respond parsing (added "Too fast between tries" and "Not locked on given locklevel")
- The +4/5/6/7 BB5 NCK passwords are now calculated correctly (memory leak during code calculation)
- Message "This will consume XX credits" removed while taking DCT4 RPL as long as they are free .
- Blackberry IMEI Check fixed
- Added "Skip CMT ID Check" for some BB5 phones (if you are trying to flash alien files or NMP made some mistake during building FIASCO images)
- Added Warning confirmation before Writing Alien SD Keys
- Error while RSA unlocking DCT4 phones fixed (Error 0x02). Error have occured when used bad cable.
- Main Firmware v01.41 Released
- Box HW Rev A11E Added
- Minor changes and bugfixes

How to run "Clip Mode"?
1. Attach Clip Adapter to box "Diagnostic Port"
2. Connect Clip Adapter "USB" cable to box USB Input
3. Connect 9V battery to Clip Adapter
4. Connect phone to "Service Port"

How to use "Clip Mode"?
Once Clip Mode is run, you need use S1 Button to change it's mode.
Default clip mode is:
RED (slowly blinking) - read phone info via FBUS
other modes you can select pressing S1 button:
GREEN - Unlock/Repair simlock
BLUE - reset securitycode/sec.code attempts

Once correct mode is assigned, you need push S2 button. Needed action will be taken, and GREEEN (success) or RED(failed) led will blink fast afterall. Clip will be ready to service next phone/select other mode/etc.


bence yeni güncellemede dikkat çekiciler xgold'un eklenmesi ve clip teknolojisi. clip2in ne olduğunu merak ediyorsanız birde video hazırlamışlar. http://www.youtube.com/watch?v=zDkUstxsujY

güncellemeyi ise http://rapidshare.com/files/404317026/CycloneBoxInstaller.exe.html.

clip donanımını da resellerden 15 dolara alabileceğimizi belirtmişler. sanırım Bestcool ustayı kastetmişler :D

[turkcellgsm]

New Cyclone Installer,Firmware,Loaders are avaiable.

What's new?
=====================
Installer v1.08
06.07.2010
=====================
- Added new Nokia FBUS Loaders for Old and New protocols (v10.20.0)
- Fixed problems with flashing RAPIDO based phones with hash 479.... (N86,X6). Was Nokia fault (10.18.0 loader pack was broken, probably problem with RSA signature so loader wasn't spawned at all...)
- Fixed problem with FUR initialization when dealing with v10 (2010) Nokia Loaders (Affected was new protocol phones)
- Forced users to install v1.08 changing few firmware routines - some users upgraded their boxes updating it for "v10" loaders, but they didn't installed new installer - their BB5 flashing was broken then. Forcing users to install v1.08 and upgrade box is just to ensure every user will have 100% working environment (latest loaders, latest firmware, latest exe).
- New Box Firmware v1.45 Released
- Handling some smartcards in main firmware fixed
- Minor changes and bugfixes

Where to download?
RapidShare: 1-CLICK Web hosting - Easy Filehosting (http://rapidshare.com/files/405378157/CycloneBoxInstaller.exe.html)

Don't forget to upgrade your box firmware to v01.45 !

[turkcellgsm]

Cyclone Box Installer v1.09 Released, SL3 Unlocking Added, New FBUS Loaders, and more

Hi!
New update for Cyclone Box is Ready.

What's new?

Code:
=====================
Installer v1.09
02.08.2010
=====================
- New BB5 Loaders v10.22.00 Introduced
- SL3 Unlocking added, uses server and credits, supported models:

- 2700 Classic (RM-561)
- 2730 Classic (RM-57
- 2730c-1b (RM-579)
- 2690c (RM-635)
- 3600 Slide (RM-352) v56.26 – v57.23
- 3720 Classic (RM-51
- 5130 XpressMusic (RM-495)
- 5310 XpressMusic (RM-303) v58.58 – v59.42
- 5730s (RM-465)
- 6300 (RM-217) v57.20
- 6303 Classic (RM-443)
- 6500 Slide (RM-240) v59.60
- 6500 Classic (RM-265) v59.45
- N97 (RM-505/506/507)
- N97 mini (RM-555)

- When using New Protocol flashing, software reminds about correct TX2 cable and yellow adapter
- Added Manual Mode to retrieve SL3 NCK if you dont have phone in hand (just enter IMEI when asked)
- Added "Erase NCK Codes" - this should be used when phones needs to be factory-relocked (best to use with SL3 if you want to clear entered NCK codes). Work with SL2 too. Simlock area is untouched when Relocking to factory state, and warranty will still be ok. Seems first software on market with such funcionality.
- Fixed BlackBerry calculation problems, old version never closed TCP connection after success or non-success calculation
- Firmware v1.46 Released, Added SL3 Routines
- Minor changes and bugfixes
Example SL3 unlocked by new update

Code:
BB5 Unlock Started...
MCU Version V 07.95
MCU Date 03-02-10
Product RM-495
Manufacturer (c) Nokia
IMEI 351538045311523
Mastercode 4612735731
Simlock Server SIMLOCK SERVER
Simlock Key 2600300000000000
Simlock Profile 8000000000000000
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: CLOSED Type: MCC-MNC Data: 26003F
Connecting to Cyclone Server...
Cyclone Server (1.0.0.632), Cyclone Box Team 2008, 2009, 2010 - Ready.
Checking job status...
Code Ready, Code: #pw+966057384237461+7#
Sending code via FBUS...
NCK[7] - ACCEPTED
Code Accepted! Unlocking Finished!
Where from download?
RapidShare: 1-CLICK Web hosting - Easy Filehosting (http://rapidshare.com/files/410684868/CycloneBoxInstaller.exe.html)

A firmware upgrade to v1.46 is needed to use this update!

[turkcellgsm]

Cyclone DREAM Released! FBUS2USB, TurboCache, Infineon XGold ****, Loaders & more


CYCLONE TEAM

http://www.karwos.hk/rls.jpg

proudly presents
Cyclone Box Installer v1.10


What's new?

Quote:
- First in the world - Infineon XGold **** Backup/Restore added
- New BB5 FBUS/USB Loaders v10.34.1 introduced
- BB5 USB Flashing module rewritten, supports new Flashing Type: FUR USB - using FBUS loaders on USB. Is possible now to do also RPL write, Cert's read/write/erase, using just USB cable. Full FBUS protocol emulation over USB supported!
- FBUS2USB RAPU Support
- FBUS2USB RAP4 Support
- FBUS2USB Broadcomm Support
- Broadcomm platform flashing added (Nokia X2,....)
- 6700,E52 and other RAPunistore Booting fixed (Wrong First Char Received)
- SL3 Simlock RPL Write Introduced
- DCT4/BB5 Flash TurboCache added, increasing flashing speed a bit
- The Profile Bits is now analyzed before SL3 Unlock (it will not submit job if phone have blocked NCK unlocking - i.e. Telcel Mexico units)
- New NCK unlocking method for SL2 phones introduced (with latest MCU SW versions)
- Added Autologging (operation logs are stored in StoredFiles)
- Added USB Full RPL Backup (NPC,CCC,HWC,Simlock,WMDRM,etc)
- Added StatusBar in Nokia Tool, displaying current Task/Mobile attached
- DCC Camera Repair added for module NI00BC0000030102F201
- DCC Camera Repair added for module ISL3TI0200000C000002
- DCC Camera Repair added for module IS00TI0200000C208A03
- DCC Camera Repair added for module IS00TI02000001022B04
- DCC Camera Repair added for module 86000300010401022B04
- DCC Camera Repair added for module 8600030001040C208A03
- DCC Camera Repair added for module 86L10300010406260004
- DCC Camera Repair added for module 86L10300010406260000
- DCC Camera Repair added for module 86L103000104094C1003
- Refactorized GUI thread problems
- Improved stability of Blackberry calculator
- Improved flashing speed with Skins Enabled
- Added detailed Action Statusbar
- Added CBUS StatusBar, indicates "---->" on USB Transmit, "<----" on USB Receive, Idle and Errors
- Support area is rebuilt - file list parsing is optimized
- "Connection Closed Gracefully" in Support Area fixed
- Connection recovery in SupportArea added
- Fixed "Floating Point Divison by zero" in Support Area
- Entered NCK codes are now backed-up too upon Simlock Backup
- New progressbar introduced in Nokia Tool gui
- Improved USB SwitchToRaw
- Improved ADL Server Pooling
- Improved USB Phone Pooling
- USB BootRom detect routine rebuilt
- Fixed "Access Violation" while application exit
- Fixed Registration Tool bug when "Submit" button is not shown after Box Prepare
- Fixed bug when software after minimizing to tray don't appears at taskbar
- Added "KB Left", "Time Left", "Current Speed" real-time information while downloading files from support
- The Germany Server is now default Support Server
- Added support for Box HW Revisions B, thus is A11F, B110, B111 and B112, and other B11x
- Old "INI" File Parser Module added (for Old DCT4 phones)
- Old "INI" File parser Module added (for Old BB5 phones)
- Added support for 6630,6680,N70 ini parser (DPConverted v1-v2 VPL files)
- The product name is now resolved at Product List (i.e. RM-1 (6630))
- Auto-select flashfiles added (selects product and variants on Read Phone)
- The new method of BB5 NCK Calculation is now the default Unlock Method for BB5 mobiles. For SL3 use SL3 Online Code Calculation.
- "Abort" button added, this terminating all threads (during flash, erase, unlock, whatever)
- Skin Manager updated to v7.02, much stable and faster
- Fixed box hangup problem when PC goes to sleep mode
- During SL3 Check/Submit job, phone is readen first, then server transaction starts (to not overload server resources)
- Failed to Process Initial Challenge (2) during Bootloader Upgrade fixed
- During SL3 Submit Job software now try first to read PM 120 and detect if phone is SL3
- Small changes regarding SL3 Submit Job - should work bit smoother right now with bad cables
- Updated message about SL3 Credit consumption
- Added bigger delay between entering NCK codes (bruteforce protection)
- Fixed "Canvas does not allow drawing" while SL3 Manual Mode
- Cyclone Secure Bootloader v2.13 Released
- Cyclone Main Firmware v01.49 Released
- Cyclone Calculator v1.00 added into installer
- Cyclone USB Drivers Updated to 1.0.0.5
- Connectivity Cable drivers updated to 7.1.34.0
- Minor changes and bugfixes
How to update?
1. Uninstall old installer
2. Download new installer
3. Install it
4. Upgrade box firmware
5. Enjoy

Where from download?
http://www.karwos.hk/CycloneBoxInstaller.exe

Thanks for all who support us! Thx Moulnisky, PTT, Honey, arash, & others...

[norepent]

son update gayet iyi olmuş

[turkcellgsm]

Hi,

Small manual how-it-works:

1. Read SL3 Log file (BB5, Simlock Tabs, Group "Local SL3 Bruteforce", Button Read LOG File)
2. Save the readen Log File somewhere. It contains necessary informations needed to calculate code.
3. Use "log2cod Calculator" to calculate COD file. Processing speed depends on GPU installed at your PC. log2cod calculator supports calculation resume (on power-off fail, etc).
4. Once COD file is ready, use "Send COD File to Server" button to Submit Calculation Result to our server for further processing
5. You can unlock your phone now as it would be unlocked by our servers (Select SL3 Online RPL Calculation method, and press Direct Unlock), you may also use Manual Mode if phone is away.

Download Link: http://www.karwos.hk/CycloneSL3_Standalone.rar

PS. yes, no need to pay for USELESS MX Credits!!

[turkcellgsm]

Cyclone SL3 FREE and UNLIMITED RELEASED

Let's come again:

Small manual how-it-works:

1. Read SL3 Log file (BB5, Simlock Tabs, Group "Local SL3 Bruteforce", Button Read LOG File)
2. Save the readen Log File somewhere. It contains necessary information needed to calculate code.
3. Use "log2cod Calculator" to calculate COD file. Processing speed depends on GPU installed at your PC. log2cod calculator supports calculation resume (on power-off fail, etc).
4. Once COD file is ready, use "Send COD File to Server" button to Submit Calculation Result to our server for further processing
5. You can unlock your phone now as it would be unlocked by our servers (Select SL3 Online RPL Calculation method, and press Direct Unlock), you may also use Manual Mode if phone is away.

Note1. No, this will not work with Mobile GPU (ati mobility, nvidia m... , )
Note2. You need special GPU (or 2xgpu in crossfire), check here (more sha1 perf points - better speed) GPU estimations
Note3. Reading log, calculating process is standalone. After calculating COD file, it needs be submitted to server (for calculating level1-level7 codes), its immediatly and free ofcourse...
Note4. We tested on both gpu:
- 2xHD5970 and searching 1 possiblity is ~22 seconds (total 220000 seconds - worst case - ~61 hours).
- Old Nvidia GT8800 GPU ( i think it have about 4 years now ), searching 1 possibilty is ~660 seconds (total 6600000 seconds, thus worst case is ~1833 hours (76 days))
Note5. I got "Too many child process failure" message. That means your GPU is unsupported, or is too weak.. OR some problem really occured.
Note6. We aren't disabling our servers, since this solution will suit only for some (5%) of ppls, and needs investment in HW (with invested 2500€, can make 10-12 SL3 phones per month).

Download Link: http://www.karwos.hk/CycloneSL3_Standalone.rar

[turkcellgsm]

Small manual how-it-works:

1. Read SL3 Log file (BB5, Simlock Tabs, Group "Local SL3 Bruteforce", Button Read LOG File)
2. Save the readen Log File somewhere. It contains necessary information needed to calculate code.
3. Use "log2cod Calculator" to calculate COD file. Processing speed depends on GPU installed at your PC. log2cod calculator supports calculation resume (on power-off fail, etc).
4. Once COD file is ready, use "Send COD File to Server" button to Submit Calculation Result to our server for further processing
5. You can unlock your phone now as it would be unlocked by our servers (Select SL3 Online RPL Calculation method, and press Direct Unlock), you may also use Manual Mode if phone is away.

Note1. No, this will not work with Mobile GPU (ati mobility, nvidia m... , )
Note2. You need special GPU (or 2xgpu in crossfire), check here (more sha1 perf points - better speed) GPU estimations
Note3. Reading log, calculating process is standalone. After calculating COD file, it needs be submitted to server (for calculating level1-level7 codes), its immediatly and free ofcourse...
Note4. We tested on both gpu:
- 2xHD5970 and searching 1 possiblity is ~22 seconds (total 220000 seconds - worst case - ~61 hours).
- Old Nvidia GT8800 GPU ( i think it have about 4 years now ), searching 1 possibilty is ~660 seconds (total 6600000 seconds, thus worst case is ~1833 hours (76 days))
Note5. I got "Too many child process failure" message. That means your GPU is unsupported, or is too weak.. OR some problem really occured.
Note6. We aren't disabling our servers, since this solution will suit only for some (5%) of ppls, and needs investment in HW.

Discussion Thread: CycloneBox FREE and STANDALONE SL3 Unlock RELEASED!!! (http://forum.gsmhosting.com/vbb/f528/cyclonebox-free-standalone-sl3-unlock-released-1172048/)
Download Link: http://www.karwos.hk/CycloneSL3_Standalone.rar

[turkcellgsm]

Cyclone DEMOLITION! XGold1 Unlock/RPL, XGold2 Flash/RPL, W7 64bit, New log2cod, more.

Hi, Installer v1.11 is Ready.

What's new ?
Quote:
=====================
Installer v1.11
07.03.2011
=====================
- New BB5 FBUS/USB Loaders v10.48.1 introduced
- DCT4/BB5 Product/Variant caching added. Saves lot of time when selecting correct Datapackage. This is done automaticcly. During Deletion or Installing some of DP, cache is rebuilt automatically on user demand.
- XGold2 USB Flashing Introduced (C1-01,C1-02,C2-00,...)
- Added XGold2 RPL Backup (including CCC,HWC,NPC,Simlock) - FIRST in the world. The backup is created automatically during flash.
- Added XGold2 RPL Write (CCC,HWC,NPC and Simlock) seems FIRST in the world. In order to write RPL file, you need flash your phone and add RPL file as secondary flashing Image (Add XGold2 RPL button).
- XGold2 RPL Contains FULL phone security, possible to Full restore after Flash Chip change
- Added XGold1 Unlocking by Reading LOG2COD Log file
- Added XGold1 Low-Level PM Dumping (both Secured and Nonsecured areas), seems 1st in world
- Added XGold1 Low-Level RPL Backup, seems 1st in world
- XGold1 Backed-up RPL file might be used to completly Re-Initialize phone security, i.e. after flash-chip change (RPL Contains IMEI and Simlock Block), seems 1st in world...
- Both XGold1 Low Level dumps support dead phones (phone might be dead, Cyclone will binary dump PM from flash chip directly)
- Added XGold1 Low-Level Deleted PM Keys dumping (extra option-don't write back readen PM file with deleted keys, they are ASCII marked as deleted ones). Support deleted messages, contacts, ..., seems 1st in world
- Added XGold1 FBUS/Keyboard SL Bad Entries Counter reset, seems 1st in world
- Reading XGOLD1 LOG2COD is fully standalone, seems 1st in world
- XGold1 Unlock/RPL supported mobiles: 1616, 1280, 1208, 1209, 1800, C1-00, and others...
- Added "Mapped At" FlashChip information during XGold Flashing, when possible
- Added "Sector Size" FlashChip information during XGold Flashing, when possible
- No reboot flashing for XGold added
- APE block flashing fixed for various RAPIDO mobiles
- Fixed Old Protocol (Dead) USB Flashing (RAPIDO phones: N86,etc)
- Fixed Blackberry Module - upon reading MEP via USB it was placing it on wrong window
- Assigned COD files are now verified before sending to server, the auxiliary verification also takes place at Server Side
- Fixed OpenDialog filter when adding DCT4/BB5 flash file
- log2cod: v1.1 Released
- log2cod: GPU Selftests added (some GPU find bad code, or didn't find anything at all)
- log2cod: Added Ivan Golubev EULA
- log2cod: Added Queue managment
- log2cod: Code Verification added after successfull calculation
- log2cod: Console is cleared after some salts processed in order to avoid overflow
- log2cod: PeekNamedPipe() problem fixed
- log2cod: Added queue processing in loop mode (you can add new jobs during calculation)
- The transaction bar have been a bit resized
- Cyclone Box HW Rev B11x, C11x added
- Models.ini updated
- Box USB Drivers updated to v1.0.0.6 - they are digitally signed now, no more problems on Win7 / Win Vista x64
- COM Emulation Service Driver updated to v1.0.0.1 - it is digitally signed now, no more problems on Win7 / Win Vista x64
- Main Software is now Digitally Signed (Authenthicode)
- log2cod is now Digitally Signed (Auhtenthicode)
- Cyclone Calculator is now Digitally Signed (Authenthicode)
- Installer is now Digitally Signed (Auhtnethicode)
- New phones added to Virgin SX4 Database
- New phones added to Security Database (Virgin RPL)
- Box Firmware v1.53 Released
- Some minor and major changes and bugfixes
- Versions snap
Installer v1.11
Main x86 Application v1.0.0.11003
x86 Memory Manager v4.76.0.179
Native USB Drivers v1.0.0.6
USB-COM Stack Drivers v1.0.0.1
Onboard Secure Bootloader v2.13
Onboard Main Nokia Application v1.53
Onboard COM Emulation Code v1.00
Onboard Security Card Revision v1.10
Nokia Connectivity Cable Drivers 7.1.34.0
BB5 USB/FPIF Single Line/FPIF DualLine v20110301
DCT4 FPIF Single Line/USB v20100410
DCT4 Unlock Patches DEPRECATED
Communication Stack SSLv3-keys-06092008
Skin Stack v7.21
Box Firmware v1.53 is needed.
Download Link: http://www.karwos.hk/CycloneBoxInstaller.exe

ps1. yes, germany support server HDD is physsicly crashed.. it will be back in few days.. hope with noncorrupted content.
ps2. be prepared for more standalone&HOT things these days http://forum.gsmhosting.com/ubb/wink.gif (http://forum.gsmhosting.com/ubb/wink.gif)
ps3. new drivers included in this package are ONLY compatible with this new version. Don't try using them on older builds and vice versa !

[turkcellgsm]

Cyclone Standalone Unlock/SX4 Auth/SD Keys repair for 6700,E52,E55,E72,X3,.. added

Hi, new update for Cyclone box is avaiable.

- Added SP unlock via server / log2cod reading
- Added standalone SX4 auth
- Added standalone Superdongle Keys Repair
- Supported phones:
- RAPU Based: 5630, 6260s, 6700c, 6700s, 6710n, 6720c, 6730, 6750, E52, E55, E72
- RAP4 Based: 3710, 5330, 7230, 6303i, X3

All is free and standalone http://forum.gsmhosting.com/ubb/wink.gif Box firmware upgrade to v1.54 is needed.

Download Link: http://www.karwos.hk/Cyclone_RAPU_RAP4_Unlock.rar - please extract to your current Cyclone box directory...
Installer link: http://www.karwos.hk/CycloneBoxInstaller.exe

More will come next week .. or tihs week. who knows http://forum.gsmhosting.com/ubb/wink.gif

Ps1. Please install installer v1.11 first (this one releaesed yesterday!)
Ps2. dont forget to upgrade drivers! Else you will get "Security problem #5"

[turkcellgsm]

Cyclone Box Installer v1.12 Released

Hi, new installer is ready.

=====================
Installer v1.12
09.03.2011
=====================
- Firmware v1.55 introduced - RAP4 CMT Booting (Wrong first char) fixed
- Added SP unlock via server / log2cod reading
- Added standalone SX4 auth
- Added standalone Superdongle Keys Repair
- Supported phones:
- RAPU Based: 5630, 6260s, 6700c, 6700s, 6710n, 6720c, 6730, 6750, E52, E55, E72
- RAP4 Based: 3710, 5330, 7230, 6303i, X3
- Minor changes and bugfixes

Download Link: http://www.karwos.hk/CycloneBoxInstaller.exe

In case of RAP4 mobiles make sure you are using cables with:
1) *******ted MBUS line 2) Digital ground connectet to analog 3) most possible short, without adapter

Else - you will get booting problems.

[turkcellgsm]

Cyclone Box v1.57 1st in world ORIGINAL RPL BACKUP and SD BACKUP for RAPU/RAP4/RAPID

Hi, new firmware for Cyclonebox is Avaiable.

- Added PM308 decryption for NEW phones (RAPU , RAP3Gv4, RAPIDO New ), that means you can:
- Superdongle Key backup
- CMLA Key backup
- Correct Phone Security Analysis for this phones
- Correct MCU/DSP timestamps analysis
- Phone auhtorization without corrupting SD key, when SD key is correct
- After local SX4 auth , phone STILL MIGHT BE authorized with ORIGINAL NOKIA SX4 CARD
- Created RPL from RAPU/RAP4 phones are now 100% like delivered from Nokia! That means after full erase and writing back backed-up RPL, your phone STILL MIGHT BE AUTHORIZED WITH ORIGINAL SX4 CARD - no security issues !
- Created RPL from RAPU phones might also SAVE PHONE from DESTROYING by some other tools (Contact Service after upgrade to latest versions...)
- Minor changes and bugfixes

This is firmware-side update only, upgrade your box firmware to v1.57 and use latest installer v1.12


Created RPL with FULL NOKIA CONTENT (SD, CMLA, ...)

Quote:
RPL Creation started...
Processing CMT Part...
Storing Product Code...
Storing PSN...
Storing HWID...
Trying to store Simlock...
Reading Configuration Key...
Hashing...
Reading SHA1-RSA Signature...
Reading SHA1-HMAC Signature...
Storing Simlock...
Trying to store WMDRM RPL...
Reading Keys...
Storing WMDRM PD...
Reading Security Block...
Security block OK and saved to "RM-469_355216039314532_2011-03-10_130535.SecurityBlock.PM"
"1BB0020A296303443292389F545846C201100A5C.C0003160 " Exists, That is good...
Storing Additional Data...
Checking Superdongle Key...
Encrypting Superdongle Key...
Storing Superdongle Key...
Checking CMLA Key...
Storing CMLA Key...
Booting CMT...
CMT_SYSTEM_ASIC_ID: 000000030000022600010007600C192102011104
CMT_EM_ASIC_ID: 00001040
CMT_EM_ASIC_ID: 00001030
CMT_PUBLIC_ID: 1BB0020A296303443292389F545846C201100A5C
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 25B977A055BE9B5DEC0C38A2A279C695
CMT_BOOT_ROM_CRC: 3E273BF6
CMT_SECURE_ROM_CRC: 37BE26FA
CMT Ready!
Searching for BootCode: DualLine 32Bit
RAPUv11_2nd.fg, Type: 2nd Boot Loader, Rev: 768.10.48.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using NEW BB5 FLASHING PROTOCOL
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0020004000000031, ST, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x0020004000000031, ST, ONENAND
Requested Algorithm: XSR 1.6 (CMT)
Searching for BootCode: DualLine 32Bit
FlashChip 0x00200040 (ST), Size: 256MBytes, VPP: Not Supported
FlashChip 0x00200040 (ST), Size: 256MBytes, VPP: Not Supported
RAPUv11_XSR17_alg.fg, Type: Algorithm, Rev: 768.10.48.1, Algo: XSR 1.6
Initializing TurboCache...
TurboCache Loaded!
Writing CMT PASUBTOC Certificate...
Writing CMT ALG Certificate...
CMT Algorithm Ready!
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Adding FUR Client (CMT, State: Ready)...
CMT FUR Ready!
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 85F252E351E225CAFC4DFBC8041EABD2823E3500
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
Storing NPC...
Storing CCC...
Storing HWC...
CMT VARIANT Not Found
Restarting MCU...
RPL Saved OK
Example seccurity analysis, timestamp analysis, etc for RAPU

Quote:
Started Reading MCU & DSP Timestamps...
MCU Version V ICPR82_09w46.8
MCU Date 30-03-10
Product RM-469 (Nokia E52)
Manufacturer (c) Nokia
IMEI 355216039314532
Mastercode 2637612627
Reading Security Block...
Security block OK and saved to "RM-469_355216039314532_2011-03-10_130314.SecurityBlock.PM"
"1BB0020A296303443292389F545846C201100A5C.C0003160 " Exists, That is good...
Booting CMT...
CMT_SYSTEM_ASIC_ID: 000000030000022600010007600C192102011104
CMT_EM_ASIC_ID: 00001040
CMT_EM_ASIC_ID: 00001030
CMT_PUBLIC_ID: 1BB0020A296303443292389F545846C201100A5C
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 25B977A055BE9B5DEC0C38A2A279C695
CMT_BOOT_ROM_CRC: 3E273BF6
CMT_SECURE_ROM_CRC: 37BE26FA
CMT Ready!
Searching for BootCode: DualLine 32Bit
RAPUv11_2nd.fg, Type: 2nd Boot Loader, Rev: 768.10.48.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using NEW BB5 FLASHING PROTOCOL
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0020004000000031, ST, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x0020004000000031, ST, ONENAND
Requested Algorithm: XSR 1.6 (CMT)
Searching for BootCode: DualLine 32Bit
FlashChip 0x00200040 (ST), Size: 256MBytes, VPP: Not Supported
FlashChip 0x00200040 (ST), Size: 256MBytes, VPP: Not Supported
RAPUv11_XSR17_alg.fg, Type: Algorithm, Rev: 768.10.48.1, Algo: XSR 1.6
Initializing TurboCache...
TurboCache Loaded!
Writing CMT PASUBTOC Certificate...
Writing CMT ALG Certificate...
CMT Algorithm Ready!
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Adding FUR Client (CMT, State: Ready)...
CMT FUR Ready!
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 85F252E351E225CAFC4DFBC8041EABD2823E3500
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Reading MCUSW...
Reading DSP0...
Restarting MCU...
------ SECURITY BLOCK TIMESTAMPS ------
Timestamp Slots Detected: 4
Timestamp[1] "AENO", 2010-02-19 11:11:38
Timestamp[1] Hash "0BCD489612D4A4968B4D42A5631FC85C5D7E0E81"
Timestamp[1] Factory MCUSW Timestamp 1970-01-01 02:00:00
Timestamp[1] Dejan Hack Detected
Timestamp[1] ValidAfter Factory MCUSW Test Passed OK!
Timestamp[2] "CMCU", 2010-04-02 11:57:08
Timestamp[2] Hash "4CC50641D7C45E9DFE2967D4802C8710547BF54A"
Timestamp[2] Factory MCUSW Timestamp 2009-09-02 15:18:02
Timestamp[2] ValidAfter Factory MCUSW Test Passed OK!
Timestamp[3] "CDSP", 2010-04-02 11:57:07
Timestamp[3] Hash "D8C94BFA607710D856D8C78A9CE3EB411CD7AC4C"
Timestamp[3] Factory MCUSW Timestamp 2009-09-02 15:18:02
Timestamp[3] ValidAfter Factory MCUSW Test Passed OK!
Timestamp[4] "AMCU", 2010-04-02 11:57:09
Timestamp[4] Hash "BFC854388C2C26014F05B5084A8033CB30E472EB"
Timestamp[4] Factory MCUSW Timestamp 2009-09-02 15:18:02
Timestamp[4] ValidAfter Factory MCUSW Test Passed OK!
-------------------------------------
------ ACTUAL FLASH TIMESTAMPS ------
MCUSW Timestamp 2010-04-02 11:57:08
Flash MCUSW Timestamp synchronized with Security Block MCUSW Timestamp OK!
DSP Timestamp 2010-04-02 11:57:07
Flash DSP Timestamp synchronized with Security Block DSP Timestamp OK!
-------------------------------------
Finished, MCU and DSP Timestamps looks good!
Started Phone Security Analysis...
MCU Version V ICPR82_09w46.8
MCU Date 30-03-10
Product RM-469 (Nokia E52)
Manufacturer (c) Nokia
IMEI 355216039314532
Mastercode 2637612627
Reading Security Block...
Security block OK and saved to "RM-469_355216039314532_2011-03-10_130516.SecurityBlock.PM"
Step 1 : Testing SIMLOCK
SIMLOCK SEFLTEST PASSED OK!
Step 2 : Testing SECURITY
SECURITY SEFLTEST PASSED OK!
Step 3 : Analyzing Security Block
"1BB0020A296303443292389F545846C201100A5C.C0003160 " Exists, That is good...
Checking SUPERDONGLE...
SUPERDONGLE FOUND AND CHECKSUM OK! PASSED!
Checking SIMLOCK...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking MCU&DSP TIMESTAMPS...
MCU&DSP TIMESTAMPS FOUND AND CHECKSUM OK! PASSED!
Checking CMLA KEYS...
CMLA KEYS FOUND AND CHECKSUM OK! PASSED!
Checking ECC KEYS...
ECC KEYS FOUND AND CHECKSUM OK! PASSED!
Checking DIV KEYS...
DIV KEYS FOUND AND CHECKSUM OK! PASSED!
Analyze finished!

[halis]

noluyor bu cylone ye yav durdu durdu günde iki sefer güncelleme çıkarmaya başladı

[turkcellgsm]

Cyclone!! FREE, STANDALONE UNLOCK/SD REPAIR/SX4 AUTH/SD BACKUP/..FOR ALL NEW BB5 HASH

Hi, new update for Cyclone Box is ready.

Reading of LOG file added for all latest hashes and roms using new flashing protocol for RAPU CPU.

This means you can now:
- SP Unlock using LOG2COD
- Repair supedongle keys
- Backup superdongle key - FIRST AND ONLY IN THE WORLD (no other box support new encryption!)
- Create RPL from phone - 100% Nokia LIke (with ALL security)
- Standalone SX4 authorization without SX4 Card (only box)
- Detailed security analysis
- Read MCU&DSP Timestamps
- Others (soon....)

The new logreading method is simply not related to Rootkey hash.
If loader is signed for given hash and runs ok - it will work.
RAPU Loader is signed for following hashes (however most of them even not exists in production, or keys isn't use anymore, but as long as other teams provide this hashes, we will provide it too):

68597B9162BAB81AF74C56E78EA2588F
EA81B32860B86EF4231A11831045F3E6
8E309B54DA1ADDE27C2A035D63AACACD
916F75217F32081248B15C38DFC8E81B - Nokia X3-02, Nokia C5, Nokia E5, Nokia N8, Nokia C7, Nokia C3-01
DA550B5BAAB517409088A3E4F3EB53AC
46802B476C93A05CBAF76A64752086A9*
25B977A055BE9B5DEC0C38A2A279C695 - 5630, 6260s, 6700c, 6700s, 6710n, 6720c, 6730, 6750, E52, E55, E72
700370BCF8AFBAB25DD62DBD124FD9CE - Nokia 5630
87FAC992288DA497A663E5DDC0410B11
928E5FFB88D81E5F74729A212AB9D12E
F2D76DFAFD66C7F195F278417DF05888
F682624FFB08F6D955DBE7D9C0485084
55DF9CBCC80B17225043DDA1CC783C97

Of course update is free, we don't ask for any activations, we don't even require internet connection.

For reading Log file you need valid TX2 enabled cable (otherwise software will hangup upon Getting Configuration!).

Here is tested with Nokia C5 (thx Moulnisky!)

Quote:
Reading SL3 LOG File...
MCU Version V ICPR82_10w08
MCU Date 26-02-10
Product RM-645 (Nokia C5)
Manufacturer (c) Nokia
IMEI 354847049967066
Mastercode 5222614247
WARNING: "0AC00114AD9C03443A69EAF6BE05ED1B1E10F214.C000249F " Not Exists, Will read it...
Reading CYC file from phone...
Booting CMT...
CMT_SYSTEM_ASIC_ID: 000000030000022600010007600C192102031104
CMT_EM_ASIC_ID: 00000C35
CMT_EM_ASIC_ID: 00000C30
CMT_PUBLIC_ID: 0AC00114AD9C03443A69EAF6BE05ED1B1E10F214
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 916F75217F32081248B15C38DFC8E81B
CMT_BOOT_ROM_CRC: E693EF0D
CMT_SECURE_ROM_CRC: AC22615B
CMT Ready!
New_RAPUv11_2nd.fg, Type: 2nd Boot Loader, Rev: 768.10.48.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using NEW BB5 FLASHING PROTOCOL
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0020004000000031, ST, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x0020004000000031, ST, ONENAND
Requested Algorithm: XSR 1.6 (CMT)
Loader: RAPxx CommonBoot v1.02 (C) 2011 Karwos Labs
Custom loader running OK! Working...
Readed OK, Saving to "0AC00114AD9C03443A69EAF6BE05ED1B1E10F214.C000249F "
Success!
More will come next week probably together with new installer,bugfixes,and features....

Where from download?

http://www.karwos.hk/CycloneNewUnlock.exe

Box Firmware v1.60 is ORDINARY for this update !

[turkcellgsm]

karwos nerdeyse çocuk yaşta başlamış herhalde bu işe 5 sene önce programını satın almaya çalışıyorduk şimdi 21 yaşında azim bu olsa gerek bu gidişle dejanı da sollayabilir :)

Hi, new update for Cyclone Box is ready.

Reading of LOG file added for all latest hashes and roms using new flashing protocol for RAPIDO CPU.

This means you can now:
- SP Unlock using LOG2COD (SL3 phones)
- Direct SP unlock of SL2 479cc.. based mobiles using NCK calculation
- Direct SP unlock of SL2 479cc.. based mobiles using RPL calculation
- Repair supedongle keys
- Create RPL from phone - 100% Nokia LIke (with ALL security)
- Standalone SX4 authorization without SX4 Card (only box)
- Detailed security analysis
- Read MCU&DSP Timestamps
- Others (soon....)

The new logreading method is simply not related to Rootkey hash.
If loader is signed for given hash and runs ok - it will work.
RAPIDO Loader is signed for following hashes (however most of them even not exists in production, or keys isn't use anymore, but as long as other teams provide this hashes, we will provide it too):

68597B9162BAB81AF74C56E78EA2588F
EA81B32860B86EF4231A11831045F3E6
8E309B54DA1ADDE27C2A035D63AACACD
916F75217F32081248B15C38DFC8E81B
DA550B5BAAB517409088A3E4F3EB53AC
B8C3ADECFC997FCD8081D3DEAF870B8C
479C6DDE3942E12C429C1D6ADED80371
C70CB07324056BC66A824347F40DB2D5
B1A9CEADB5CE9CF9FB4F442150AA8E09
46802B476C93A05CBAF76A64752086A9
1B0D74C532CA1C6133940C740E8C786E
25B977A055BE9B5DEC0C38A2A279C695
700370BCF8AFBAB25DD62DBD124FD9CE
9DDBFCFE6E73CED7D8C6268C8EB85723
7B045400E1752022F9EB80B0DEA9C65D
928E5FFB88D81E5F74729A212AB9D12E
F2D76DFAFD66C7F195F278417DF05888
CAEEBB65D3C48E6DC73B49DC5063A2EE
FCB5C510AF7F09F313D9BDE85A707CC0
9A28E119033B91D14D22838C86D0D53C
F682624FFB08F6D955DBE7D9C0485084
55DF9CBCC80B17225043DDA1CC783C97
38F312750F686F9FC9B1B3778774A195
BAF3A9C3DBFA8454937DB77F2B8852B1
A5404AE83A594ECADEE532F0C236BFA6
E9EFF4BFAA5393217CA6B17755FC3E14

Of course update is free, we don't ask for any activations, we don't even require internet connection.
For reading Log file you need valid TX2 enabled cable (otherwise software will hangup upon Getting Configuration!).

Here is tested with Nokia 5800-SL3-479cc (thx Moulnisky!)

Quote:
Reading SL3 LOG File...
MCU Version V ICPR72_09w20.15
MCU Date 30-12-09
Product RM-356 (Nokia 5800 XpressMusic)
Manufacturer (c) Nokia
IMEI 352012047692891
Mastercode 413074336
WARNING: "05C00008DF1F00527E9AEF53D8B8ACEC8C185116.C0000607 " Not Exists, Will read it...
Reading CYC file from phone...
Booting CMT...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006400C192101051103
CMT_EM_ASIC_ID: 00000296
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 05C00008DF1F00527E9AEF53D8B8ACEC8C185116
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 479C6DDE3942E12C429C1D6ADED80371
CMT_BOOT_ROM_CRC: 4B9B7510
CMT_SECURE_ROM_CRC: 3E691FF8
CMT Ready!
New_RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 512.10.48.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using NEW BB5 FLASHING PROTOCOL
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0400000000000000, Unknown, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x00EC004000000121, Samsung, ONENAND
Requested Algorithm: XSR 1.5 (CMT)
Sending Auxiliary Loader...
Auxiliary Loader Sent!
Loader: RAPxx CommonBoot v1.03 (C) 2011 Karwos Labs
Custom loader running OK! Working...
Readed OK, Saving to "05C00008DF1F00527E9AEF53D8B8ACEC8C185116.C0000607 "
Success!
Where from download?

http://www.karwos.hk/CycloneNewUnlockV2.exe

Box Firmware v1.60 is ORDINARY for this update !

[turkcellgsm]

Hi to all, new Update for Cyclone Box is Ready.
We are sorry for problems caused by previous release.
In this version we implemented new encryption routines for New MCU RAPIDO Phones. That means you can now:

- Read correct LOG file for SL3 SP Unlock (sorry, discard previous ones!)
- Direct SP Unlock of SL2 New hash (479cc based) phones (6760, 6120c) using NCK Calculation
- Direct SP Unlock of SL2 New hash (479cc based) phones (6760, 6120c) using RPL Calculation
- Absolutly FIRST IN THE WORLD - Superdongle Key Backup for new hash - no other tool support it
- Absolutly FIRST IN THE WORLD - Standalone SX4 authorization without Superdongle key corruption
- Absolutly FIRST IN THE WORLD - CMLA/WMDRM Key backup
- Absolutly FIRST IN THE WORLD - 1:1 Original Nokia RPL Backup (w/o risk of DAMAGING phones!)
- Security analysis
- The new encryption works also for old rapido phones (CAEEBB based) which noone tool could properly decrypt Superdongle/etc data
- More ..

Supported hashes:

68597B9162BAB81AF74C56E78EA2588F
EA81B32860B86EF4231A11831045F3E6
8E309B54DA1ADDE27C2A035D63AACACD
916F75217F32081248B15C38DFC8E81B
DA550B5BAAB517409088A3E4F3EB53AC
B8C3ADECFC997FCD8081D3DEAF870B8C
479C6DDE3942E12C429C1D6ADED80371
C70CB07324056BC66A824347F40DB2D5
B1A9CEADB5CE9CF9FB4F442150AA8E09
46802B476C93A05CBAF76A64752086A9
1B0D74C532CA1C6133940C740E8C786E
25B977A055BE9B5DEC0C38A2A279C695
700370BCF8AFBAB25DD62DBD124FD9CE
9DDBFCFE6E73CED7D8C6268C8EB85723
7B045400E1752022F9EB80B0DEA9C65D
928E5FFB88D81E5F74729A212AB9D12E
F2D76DFAFD66C7F195F278417DF05888
CAEEBB65D3C48E6DC73B49DC5063A2EE
FCB5C510AF7F09F313D9BDE85A707CC0
9A28E119033B91D14D22838C86D0D53C
F682624FFB08F6D955DBE7D9C0485084
55DF9CBCC80B17225043DDA1CC783C97
38F312750F686F9FC9B1B3778774A195
BAF3A9C3DBFA8454937DB77F2B8852B1
A5404AE83A594ECADEE532F0C236BFA6
E9EFF4BFAA5393217CA6B17755FC3E14

And small tests

Nokia 6760 479CC Direct unlock

Quote:
BB5 Unlock Started...
MCU Version V 09w17.03.45
MCU Date 20-10-09
Product RM-573 (Nokia 6760 Slide)
Manufacturer (c) Nokia
IMEI 355203035769745
Mastercode 461474133
Simlock Server SIMLOCK SERVER
Simlock Key 5050200000000000
Simlock Profile 8000000000000000
Simlock Key Cnt 1
Simlock FBUS Cnt 8
Simlock [1,1] State: CLOSED Type: MCC-MNC Data: 50502F
Reading Security Block...
Security block OK and saved to "RM-573_355203035769745_5112011_60929 AM.SecurityBlock.PM"
"16200007748E005298591CBC3DA4B4F4FEF358A2.C0005311 " Exists, That is good...
WARNING: Stored CYC file is probably corrupted
Reading CYC file from phone...
Booting CMT...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006400C192101051103
CMT_EM_ASIC_ID: 00000296
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 16200007748E005298591CBC3DA4B4F4FEF358A2
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 479C6DDE3942E12C429C1D6ADED80371
CMT_BOOT_ROM_CRC: 4B9B7510
CMT_SECURE_ROM_CRC: 3E691FF8
CMT Ready!
New_RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 512.10.48.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using NEW BB5 FLASHING PROTOCOL
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0400000000000000, Unknown, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x00EC004000000121, Samsung, ONENAND
Requested Algorithm: XSR 1.5 (CMT)
Sending Auxiliary Loader...
Auxiliary Loader Sent!
Loader: RAPxx CommonBoot v1.04 (C) 2011 KarwosLabs
Custom loader running OK! Working...
Readed OK, Saving to "16200007748E005298591CBC3DA4B4F4FEF358A2.C0005311 "
Checking for Rootkey Hash support with selected Unlock Method...
Selected Unlock Method: NCK Calculation (new method)
Performing new SL2 Algo...
#pw+238228650439154+1#
#pw+976749305397276+2#
#pw+510431019060809+3#
#pw+978446698302394+4#
#pw+744747389804508+5#
#pw+645730839742156+6#
#pw+867417704847922+7#
Sending NCK Codes..
NCK[1] - ACCEPTED
NCK[2] - Too fast between tries (bruteforce protection)
NCK[3] - Too fast between tries (bruteforce protection)
NCK[4] - Too fast between tries (bruteforce protection)
NCK[5] - Too fast between tries (bruteforce protection)
NCK[6] - Too fast between tries (bruteforce protection)
NCK[7] - Too fast between tries (bruteforce protection)
MCU Version V 09w17.03.45MCU Date 20-10-09
Product RM-573 (Nokia 6760 Slide)
Manufacturer (c) Nokia
IMEI 355203035769745
Mastercode 461474133
Simlock Server SIMLOCK SERVER
Simlock Key 5050200000000000
Simlock Profile 8000000000000000
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: OPENED Type: MCC-MNC Data: 50502F
Simlock NCK #pw+238228650439154+1#
Unlock finished! Time taken 12.219s
5230 Standalone SX4 Auth + security analyze

Quote:
MCU Version V ICPR72_10w04.5
MCU Date 22-03-10
Product RM-588 (Nokia 5230)
Manufacturer (c) Nokia
IMEI 353763044825673
Mastercode 4253371033
IMEI Spare 3A35670344286507
IMEI SV 3335670344286517F1000000
CNT 20.0.005_001_U389
PSN 01458E4AA
Product Code 059B139
Module Code 0204359
Basic Product Code 0584528
PSD 0000000000000000
LPSN 0
APE SW V 20.0.005
APE Variant V 20.0.005V 20.0.005 20.0.005.389.01
APE Test rm588_ENO_x_09wk43v0.050
APE HW 256
APE ADSP 256
RETU 16
TAHVO 22
AHNE 11
HW 0512
RFIC 17141716
DSP simon_ICPR72_10w05
Simlock Server SIMLOCK SERVER
Simlock Key 2140700000000000
Simlock Profile 8000000000000000
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: OPENED Type: MCC-MNC Data: 21407F
Simlock [2,1] State: OPENED Type: MCC-MNC Data: 21402F
Simlock NCK #pw+6SHl74219804726+1#
Started Phone Security Analysis...
MCU Version V ICPR72_10w04.5
MCU Date 22-03-10
Product RM-588 (Nokia 5230)
Manufacturer (c) Nokia
IMEI 353763044825673
Mastercode 4253371033
Reading Security Block...
Security block OK and saved to "RM-588_353763044825673_10052011_221449.SecurityBlock. PM"
Step 1 : Testing SIMLOCK
SIMLOCK SEFLTEST PASSED OK!
Step 2 : Testing SECURITY
SECURITY SEFLTEST PASSED OK!
Step 3 : Analyzing Security Block
WARNING: "1CC001140C9B005273D956C28676BF92A6877017.C0000805 " Not Exists, Will read it...
Reading CYC file from phone...
Booting CMT...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006400C192101051103
CMT_EM_ASIC_ID: 00000296
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 1CC001140C9B005273D956C28676BF92A6877017
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 479C6DDE3942E12C429C1D6ADED80371
CMT_BOOT_ROM_CRC: 4B9B7510
CMT_SECURE_ROM_CRC: 3E691FF8
CMT Ready!
New_RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 512.10.48.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using NEW BB5 FLASHING PROTOCOL
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0400000000000000, Unknown, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x00EC004000000231, Samsung, ONENAND
Requested Algorithm: XSR 1.6 (CMT)
Sending Auxiliary Loader...
Auxiliary Loader Sent!
Loader: RAPxx CommonBoot v1.04 (C) 2011 KarwosLabs
Custom loader running OK! Working...
Readed OK, Saving to "1CC001140C9B005273D956C28676BF92A6877017.C0000805 "
Checking SUPERDONGLE...
SUPERDONGLE FOUND AND CHECKSUM OK! PASSED!
Checking SIMLOCK...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking MCU&DSP TIMESTAMPS...
MCU&DSP TIMESTAMPS FOUND AND CHECKSUM OK! PASSED!
Checking CMLA KEYS...
CMLA KEYS FOUND AND CHECKSUM OK! PASSED!
Checking ECC KEYS...
ECC KEYS FOUND AND CHECKSUM OK! PASSED!
Checking DIV KEYS...
DIV KEYS FOUND AND CHECKSUM OK! PASSED!
Analyze finished!
SX4 Authorization / SD Repair Procedure Started....
"1CC001140C9B005273D956C28676BF92A6877017.C0000805 " Exists, That is good...
MCU Version V ICPR72_10w04.5
MCU Date 22-03-10
Product RM-588 (Nokia 5230)
Manufacturer (c) Nokia
IMEI 353763044825673
Mastercode 4253371033
Reading Security Block...
Security block OK and saved to "RM-588_353763044825673_10052011_221503.SecurityBlock. PM"
SX4 Status: Not authorized (74)
Started mutual authenthication with card...
Receiving Phone Seed 1...
Phone Seed 1 Received
Sending calculated Data 1, and expecting Seed 2...
Calculated Data 1 accepted, Phone Seed 2 Received
Sending calculated Data 2
Calculated Data 2 sent, Checking Authorization Status again
Authorization successfully finished!
Looking for Virgin PM In Database...
Found, writing...
[1,0] Written, Length: 114 bytes, Status: OK
[1,2] Written, Length: 98 bytes, Status: OK
[1,4] Written, Length: 110 bytes, Status: OK
[1,6] Written, Length: 98 bytes, Status: OK
[1,8] Written, Length: 110 bytes, Status: OK
[1,13] Written, Length: 98 bytes, Status: OK
[1,16] Written, Length: 98 bytes, Status: OK
[1,18] Written, Length: 98 bytes, Status: OK
[1,20] Written, Length: 98 bytes, Status: OK
[1,22] Written, Length: 16 bytes, Status: OK
[1,23] Written, Length: 4 bytes, Status: OK
[1,24] Written, Length: 84 bytes, Status: OK
[1,25] Written, Length: 4 bytes, Status: OK
[1,26] Written, Length: 110 bytes, Status: OK
[1,28] Written, Length: 98 bytes, Status: OK
[1,29] Written, Length: 10 bytes, Status: OK
[1,31] Written, Length: 98 bytes, Status: OK
[1,33] Written, Length: 36 bytes, Status: OK
[1,34] Written, Length: 80 bytes, Status: OK
[1,35] Written, Length: 16 bytes, Status: OK
[1,37] Written, Length: 4 bytes, Status: OK
[1,39] Written, Length: 36 bytes, Status: OK
[1,44] Written, Length: 182 bytes, Status: OK
[1,45] Written, Length: 182 bytes, Status: OK
[2,0] Written, Length: 448 bytes, Status: OK
[309,0] Written, Length: 4 bytes, Status: OK
[309,1] Written, Length: 2 bytes, Status: OK
[309,2] Written, Length: 12 bytes, Status: OK
[309,4] Written, Length: 12 bytes, Status: OK
[309,5] Written, Length: 12 bytes, Status: OK
[309,7] Written, Length: 12 bytes, Status: OK
[309,8] Written, Length: 12 bytes, Status: OK
[309,17] Written, Length: 12 bytes, Status: OK
Write PM Finished, Record written OK: 33, Record written NOT OK: 0
Nokia X6

Quote:
MCU Version V ICPR72_10w04.5
MCU Date 22-03-10
Product RM-559 (Nokia X6)
Manufacturer (c) Nokia
IMEI 352006046910791
Mastercode 134767774
IMEI Spare 3A25000664197009
IMEI SV 3325000664197019F4000000
CNT v 001_000, 17-03-10, vanilla, RM559rRM559_002_001_M004,
PSN CSF672051
Product Code 059B8W2
Basic Product Code 0589312
PSD 0000000000000000
LPSN 0
WLAN MAC A04E047F2AB8
APE SW V 20.0.005
APE Variant V 20.0.005V 20.0.005 20.0.005.360.02
APE Test rm559_ENO_A_09wk28v0.440
APE HW 256
APE ADSP 256
RETU 16
TAHVO 22
AHNE 11
HW 1123
RFIC |Vapaus_5.1 | Aura_?.?
DSP ICPR72_10w05
Simlock Server SIMLOCK SERVER
Simlock Key 2140400086388183
Simlock Profile 8000000000000000
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: OPENED Type: MCC-MNC Data: 21404F
Simlock NCK #pw+>FKT72534805121+7#
Started Phone Security Analysis...
MCU Version V ICPR72_10w04.5
MCU Date 22-03-10
Product RM-559 (Nokia X6)
Manufacturer (c) Nokia
IMEI 352006046910791
Mastercode 134767774
Reading Security Block...
Security block OK and saved to "RM-559_352006046910791_10052011_220737.SecurityBlock. PM"
Step 1 : Testing SIMLOCK
SIMLOCK SEFLTEST PASSED OK!
Step 2 : Testing SECURITY
SECURITY SEFLTEST PASSED OK!
Step 3 : Analyzing Security Block
WARNING: "1A60010D468C0052CBA704F8193E26C1B8325289.C0000805 " Not Exists, Will read it...
Reading CYC file from phone...
Booting CMT...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006400C192101051103
CMT_EM_ASIC_ID: 00000296
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 1A60010D468C0052CBA704F8193E26C1B8325289
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 479C6DDE3942E12C429C1D6ADED80371
CMT_BOOT_ROM_CRC: 4B9B7510
CMT_SECURE_ROM_CRC: 3E691FF8
CMT Ready!
New_RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 512.10.48.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using NEW BB5 FLASHING PROTOCOL
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0400000000000000, Unknown, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x00EC005800000121, Samsung, ONENAND
Requested Algorithm: XSR 1.6 (CMT)
Sending Auxiliary Loader...
Auxiliary Loader Sent!
Loader: RAPxx CommonBoot v1.04 (C) 2011 KarwosLabs
Custom loader running OK! Working...
Readed OK, Saving to "1A60010D468C0052CBA704F8193E26C1B8325289.C0000805 "
Checking SUPERDONGLE...
SUPERDONGLE FOUND AND CHECKSUM OK! PASSED!
Checking SIMLOCK...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking MCU&DSP TIMESTAMPS...
MCU&DSP TIMESTAMPS FOUND AND CHECKSUM OK! PASSED!
Checking CMLA KEYS...
CMLA KEYS FOUND AND CHECKSUM OK! PASSED!
Checking ECC KEYS...
ECC KEYS FOUND AND CHECKSUM OK! PASSED!
Checking DIV KEYS...
DIV KEYS FOUND AND CHECKSUM OK! PASSED!
Analyze finished!
Where from download?
http://www.karwos.hk/CycloneNewUnlockV3.exe

(Firmware v1.61 required)

[turkcellgsm]

Hi, New Installer for Cyclone Box is Ready.

What's new ?

=====================
Installer v1.13
24.05.2011
=====================
- New BB5 FBUS/USB Loaders v11.14.0 introduced
- Added 20 digits NCK recognization. Software will now give alert upon reading LBF data, when 20 digits NCK data will be found. This saves server time!
- The Profile Bits are also analyzed now during Reading LBF Data. If phone is i.e. from Telcel Mexico - LBF data will not be readen (because it will not accepted calculated NCK code). This saves server time!
- BB5/XGold LBF is creating now additional "BCL" format file
- BB5/XGold LBF is creating now additional "SHA" format file
- BB5/XGold LBF is creating now additional oclHashCat ATI based 64-bit BAT File
- BB5/XGold LBF is creating now additional oclHashCat ATI based 32-bit BAT File
- BB5/XGold LBF is creating now additional oclHashCat NVIDIA based 64-bit BAT File
- BB5/XGold LBF is creating now additional oclHashCat NVIDIA based 32-bit BAT File
- SIMLOC30 RPL Write Fixed (C7-00,C2-01,...)
- The generated "BAT" file could be used by oclHashCat-lite. It's 3rd party software, avaiable here: Download oclHashcat-lite-0.05.7z - hashcat, advanced password recovery (http://hashcat.net/files/oclHashcat-lite-0.05.7z) . Unpack it somewhere, and place in same dir readen "BAT" files. oclHashCat is 15% faster (can reach 6Billions hashes/sec on 2xhd5970) than log2cod, plus it supports latest ATI GPUS (HD6970,HD6990,HD6xxx). It supports calculation resume, etc.
- You don't need now log2cod to generate LBF Data. Just use generated BAT file for fast oclHashCat calculation. Generated COD file you can send directly to our server via "Send COD File to server" button to receive valid Level 7 code.
- Added oclHashCat COD file format support (now you can use oclHashCat generated COD/TXT files to submit to server and calculate Level 7 code)
- Added MxCrap COD file format support (now you can use oclHashCat generated COD/TXT files to submit to server and calculate Level 7 code)
- Added warning message when TX2 transmission error occurs during 2ND Loader Initialization
- Upgraded RAPIDO Custom loader to v1.05. Fixed Reading Unique Data issues on old Public Rom (A8C1D671) based phones (N95,N78,...).
- BlackBerry MEP-4 calculation added
- Merged previous updates (RAPIDO/RAPU/RAP4 all latest hashes support for reading LBF data, etc...)
- Fixed Security Code Reset Issues on DCT4/BB5 Platform
- Firmware v1.61 Released
- Minor changes and bugfixes

Where from download?
http://www.karwos.hk/CycloneBoxInstaller.exe

The installer already contains all latest updates, you don't need to download nothing more!

[turkcellgsm]

New Cyclone Box Installer v1.14 is Ready.

What's new?

Quote:
=====================
Installer v1.14
07.06.2011
=====================
- New BB5 FBUS/USB Loaders v11.16.0 Introduced
- Unique Data Reading for RAPIDO based phones by USB added
- Unique Data Reading for RAPU based phones by USB added
- SL2 Unlock for Old Hash (E51..,..) and New Hash (6120c,6760) just by USB cable
- SL3 Unlock by reading LBF data for all SL3 RAPIDO/RAPU Phones
- Standalone Superdongle Auth - without SD key corruption
- SD Keys Repair
- Security Analyze
- RPL Backup
- All this using just usb cable...
- Our loaders automatically set phone to LocalMode after reading LogData - tested with N97, seems 1st in world http://forum.gsmhosting.com/ubb/wink.gif
- RAPIDO phones before reading USB LogFile, needs to be manually set into FlashMode. Apporiate messagebox will be displayed with instructions (replug battery, cable, etc..). If your phone is RAPU or RAP4 based, you don't need to reject battery or do nothing - just click OK and it will switch to RAW mode directly.
- We also added support for FUR-like flashing for RAPIDO phones. That means it's possible to flash these phones FBUS-like (completly erased, etc - FBUS protocol emulation). However, because of many problems we've disabled it in current release. You can test it manually by placing "v11.16.0" RAPIDO loaders into \Loaders\BB5\FPIF32BIT.
* Known problems with RAPIDO 11.16.0 loaders:
* FBUS support is broken
* Readed Certificates via USB is broken (Control transactions support up to ~0x90 bytes of upcoming data)
* Probably not working with Axxxx ROMS (E51)
* Lot of other issues observed
- The FUR-like flashing (not ADL though) will be probably enabled in next version after closer investigation
- Fixed oclHashCat COD File bugs (occurs when last digit of imei is 0)
- Box Firmware v01.62 Released
- Minor changes and bugfixes
All, of course, standalone and free http://forum.gsmhosting.com/ubb/wink.gif Tested with:

Nokia C5

Code:
Reading SL3 LOG File...
[Nokia C5-00 USB Phonet]: Port opened OK!
MCU Version V ICPR82_10w18.5.2
MCU Date 16-07-10
Product RM-645 (Nokia C5)
Manufacturer (c) Nokia
IMEI 354847045236599
Mastercode 5246147017
Analyzing Profile Bits...
Phone can be NCK unlocked using KEYPAD
Phone can be NCK unlocked using FBUS
15 Digits NCK Found
WARNING: "24200117BD9C03444F3626EDEECC564255FB04E4.C0003160" Not Exists, Will read it...
Reading CYC file from phone...
Booting CMT...
[Nokia C5-00 USB Phonet]: Port opened OK!
Switching to RAW Mode...
[Nokia USB Flashing Generic]: Port opened OK!
Old ROM Detected
CMT_SYSTEM_ASIC_ID: 000000030000022600010007600C192102031104
CMT_EM_ASIC_ID: 00000C35
CMT_EM_ASIC_ID: 00000C30
CMT_PUBLIC_ID: 24200117BD9C03444F3626EDEECC564255FB04E4
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 916F75217F32081248B15C38DFC8E81B
CMT_BOOT_ROM_CRC: E693EF0D
CMT_SECURE_ROM_CRC: AC22615B
CMT Ready!
New_RAPUv11_2nd.fg, Type: 2nd Boot Loader, Rev: 768.10.48.1, Algo: BB5
Using NEW BB5 FLASHING PROTOCOL
Waiting for USB Boot ROM Answer...
ROM Ret: 0xFFFD125D
ROM CMT dwAddr: 0x10004FF0
ROM CMT dwLength: 0x00627837
Seems ROM Initialized OK!
Transmission Mode Requested: Control USB, Accepted: Control USB
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0020004000000031, ST, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x0020004000000031, ST, ONENAND
Requested Algorithm: XSR 1.6 (CMT)
Sending Auxiliary Loader...
Auxiliary Loader Sent!
Loader: RAPxx CommonBoot v1.06 (C) 2011 KarwosLabs
Custom loader running OK! Working...
Readed OK, Saving to "24200117BD9C03444F3626EDEECC564255FB04E4.C0003160"
Success!
Nokia 5630 XM


Code:
Reading SL3 LOG File...
[Nokia 5630 XpressMusic USB Phonet]: Port opened OK!
MCU Version V ICPR82_09w24.1
MCU Date 15-06-09
Product RM-431 (Nokia 5630 XpressMusic)
Manufacturer (c) Nokia
IMEI 359350021136722
Mastercode 3226214523
Analyzing Profile Bits...
Phone can be NCK unlocked using KEYPAD
Phone can be NCK unlocked using FBUS
15 Digits NCK Found
WARNING: "1CE001126A2F0344C02621363B888F748DD36748.C0003160" Not Exists, Will read it...
Reading CYC file from phone...
Booting CMT...
[Nokia 5630 XpressMusic USB Phonet]: Port opened OK!
Switching to RAW Mode...
[Nokia USB Flashing Generic]: Port opened OK!
Old ROM Detected
CMT_SYSTEM_ASIC_ID: 000000030000022600010007600C192102011104
CMT_EM_ASIC_ID: 00000C34
CMT_EM_ASIC_ID: 00000C30
CMT_PUBLIC_ID: 1CE001126A2F0344C02621363B888F748DD36748
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 25B977A055BE9B5DEC0C38A2A279C695
CMT_BOOT_ROM_CRC: 3E273BF6
CMT_SECURE_ROM_CRC: 37BE26FA
CMT Ready!
New_RAPUv11_2nd.fg, Type: 2nd Boot Loader, Rev: 768.10.48.1, Algo: BB5
Using NEW BB5 FLASHING PROTOCOL
Waiting for USB Boot ROM Answer...
ROM Ret: 0xFFFD125D
ROM CMT dwAddr: 0x10004FF0
ROM CMT dwLength: 0x00627837
Seems ROM Initialized OK!
Transmission Mode Requested: Control USB, Accepted: Control USB
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0000000000000000, Unknown, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x00EC004000000121, Samsung, ONENAND
Requested Algorithm: XSR 1.6 (CMT)
Sending Auxiliary Loader...
Auxiliary Loader Sent!
Loader: RAPxx CommonBoot v1.06 (C) 2011 KarwosLabs
Custom loader running OK! Working...
Readed OK, Saving to "1CE001126A2F0344C02621363B888F748DD36748.C0003160"
Success!
Nokia N97

Code:
WARNING: Failed to read RAP Public ID
Reading CYC file from phone...
Booting CMT...
[Nokia USB Flashing Generic]: Port opened OK!
Old ROM Detected
CMT_SYSTEM_ASIC_ID: 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID: 00000296
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 0CB000038A720052E7F618F98DD2D5F6E5C93100
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_BOOT_ROM_CRC: 4B9B7510
CMT_SECURE_ROM_CRC: 3E691FF8
CMT Ready!
New_RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 512.11.16.0, Algo: BB5
Using NEW BB5 FLASHING PROTOCOL
Transmission Mode Requested: Control USB, Accepted: Control USB
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0400000000000000, Unknown, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x00EC004000000121, Samsung, ONENAND
Requested Algorithm: XSR 1.5 (CMT)
Sending Auxiliary Loader...
Auxiliary Loader Sent!
Loader: RAPxx CommonBoot v1.06 (C) 2011 KarwosLabs
Custom loader running OK! Working...
Readed OK, Saving to "0CB000038A720052E7F618F98DD2D5F6E5C93100.C0003160"
Nokia 5530

Code:
Reading CYC file from phone...
Booting CMT...
[Nokia USB Flashing Generic]: Port opened OK!
Old ROM Detected
CMT_SYSTEM_ASIC_ID: 000000010000022600010006400C192101051105
CMT_EM_ASIC_ID: 00000296
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 09E001021288005207821607AFCF935B1795E0E9
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: B8C3ADECFC997FCD8081D3DEAF870B8C
CMT_BOOT_ROM_CRC: 4B9B7510
CMT_SECURE_ROM_CRC: 3E691FF8
CMT Ready!
New_RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 512.11.16.0, Algo: BB5
Using NEW BB5 FLASHING PROTOCOL
Transmission Mode Requested: Control USB, Accepted: Control USB
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0020004000000031, ST, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x0020004000000031, ST, ONENAND
Requested Algorithm: XSR 1.5 (CMT)
Sending Auxiliary Loader...
Auxiliary Loader Sent!
Loader: RAPxx CommonBoot v1.06 (C) 2011 KarwosLabs
Custom loader running OK! Working...
Readed OK, Saving to "09E001021288005207821607AFCF935B1795E0E9.C0003160"
Nokia 5800
Code:
WARNING: Failed to read RAP Public ID
Reading CYC file from phone...
Booting CMT...
[Nokia USB Flashing Generic]: Port opened OK!
Old ROM Detected
CMT_SYSTEM_ASIC_ID: 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID: 00000295
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 16900018F3740052C3ECA61A74BBE7E9A3A34FCE
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_BOOT_ROM_CRC: 4B9B7510
CMT_SECURE_ROM_CRC: 3E691FF8
CMT Ready!
New_RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 512.11.16.0, Algo: BB5
Using NEW BB5 FLASHING PROTOCOL
Transmission Mode Requested: Control USB, Accepted: Control USB
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0400000000000000, Unknown, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x00EC004000000121, Samsung, ONENAND
Requested Algorithm: XSR 1.5 (CMT)
Sending Auxiliary Loader...
Auxiliary Loader Sent!
Loader: RAPxx CommonBoot v1.06 (C) 2011 KarwosLabs
Custom loader running OK! Working...
Readed OK, Saving to "16900018F3740052C3ECA61A74BBE7E9A3A34FCE.C0003160"
Nokia 5230

Code:
[Nokia 5230 USB Phonet]: Port opened OK!
MCU Version V ICPR72_10w04.5
MCU Date 22-03-10
Product RM-588 (Nokia 5230)
Manufacturer (c) Nokia
IMEI 354336049859812
Mastercode 2260374254
IMEI Spare 3A45330694588901
IMEI SV 3345330694588911F1000000
PPM 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12708.n256iV 20.0.005j(!V 20.0.005V 20.0.005 V 20.0.005 r(!v 001_000, 05-03-10, vanilla, RM588uk rm588_ENO_x_09wk43v0.050
CNT v 001_000, 05-03-10, vanilla, RM588
PSN 0640828AA
Product Code 059D3Q3
Module Code 0204359
Basic Product Code 059C249
PSD 0000000000000000
LPSN 0
APE SW V 20.0.005
APE Variant V 20.0.005V 20.0.005 V 20.0.005
APE Test rm588_ENO_x_09wk43v0.050
APE HW 256
APE ADSP 256
APE BT HCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12708.
RETU 16
TAHVO 22
AHNE 11
HW 0512o256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12708.n256iV 20.0.005j(!V 20.0.005V 20.0.005 V 20.0.005 r(!v 001_000, 05-03-10, vanilla, RM588uk rm588_ENO_x_09wk43v0.050
PCI o256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12708.n256iV 20.0.005j(!V 20.0.005V 20.0.005 V 20.0.005 r(!v 001_000, 05-03-10, vanilla, RM588uk rm588_ENO_x_09wk43v0.050
UEM 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12708.n256iV 20.0.005j(!V 20.0.005V 20.0.005 V 20.0.005 r(!v 001_000, 05-03-10, vanilla, RM588uk rm588_ENO_x_09wk43v0.050
UPP 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12708.n256iV 20.0.005j(!V 20.0.005V 20.0.005 V 20.0.005 r(!v 001_000, 05-03-10, vanilla, RM588uk rm588_ENO_x_09wk43v0.050
RFIC 17141716
DSP simon_ICPR72_10w05
LCD 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12708.n256iV 20.0.005j(!V 20.0.005V 20.0.005 V 20.0.005 r(!v 001_000, 05-03-10, vanilla, RM588uk rm588_ENO_x_09wk43v0.050
BT 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12708.n256iV 20.0.005j(!V 20.0.005V 20.0.005 V 20.0.005 r(!v 001_000, 05-03-10, vanilla, RM588uk rm588_ENO_x_09wk43v0.050
ADSP Sw 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12708.n256iV 20.0.005j(!V 20.0.005V 20.0.005 V 20.0.005 r(!v 001_000, 05-03-10, vanilla, RM588uk rm588_ENO_x_09wk43v0.050
ADSP DevID 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12708.n256iV 20.0.005j(!V 20.0.005V 20.0.005 V 20.0.005 r(!v 001_000, 05-03-10, vanilla, RM588uk rm588_ENO_x_09wk43v0.050
ADSP RevID 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12708.n256iV 20.0.005j(!V 20.0.005V 20.0.005 V 20.0.005 r(!v 001_000, 05-03-10, vanilla, RM588uk rm588_ENO_x_09wk43v0.050
AEM 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12708.n256iV 20.0.005j(!V 20.0.005V 20.0.005 V 20.0.005 r(!v 001_000, 05-03-10, vanilla, RM588uk rm588_ENO_x_09wk43v0.050
Flip MCUSW 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12708.n256iV 20.0.005j(!V 20.0.005V 20.0.005 V 20.0.005 r(!v 001_000, 05-03-10, vanilla, RM588uk rm588_ENO_x_09wk43v0.050
Simlock Server SIMLOCK SERVER
Simlock Key 2343000000000000
Simlock Profile 8000000000000000
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: CLOSED Type: MCC-MNC Data: 23430F
Auto Selecting Flash Files on User Request...
[Nokia 5230 USB Phonet]: Port opened OK!
Product Code: 059D3Q3
No Flash Datapackage installed for this Phone!
Reading SL3 LOG File...
[Nokia 5230 USB Phonet]: Port opened OK!
MCU Version V ICPR72_10w04.5
MCU Date 22-03-10
Product RM-588 (Nokia 5230)
Manufacturer (c) Nokia
IMEI 354336049859812
Mastercode 2260374254
Analyzing Profile Bits...
Phone can be NCK unlocked using KEYPAD
Phone can be NCK unlocked using FBUS
15 Digits NCK Found
WARNING: "1DC0000EB6A000524EFB32C0210D25187179FFC2.C0000067" Not Exists, Will read it...
Reading CYC file from phone...
Booting CMT...
[Nokia 5230 USB Phonet]: Port opened OK!
Switching to RAW Mode...
[Nokia USB Flashing Generic]: Port opened OK!
Old ROM Detected
CMT_SYSTEM_ASIC_ID: 000000010000022600010006400C192101051103
CMT_EM_ASIC_ID: 00000296
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 1DC0000EB6A000524EFB32C0210D25187179FFC2
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 479C6DDE3942E12C429C1D6ADED80371
CMT_BOOT_ROM_CRC: 4B9B7510
CMT_SECURE_ROM_CRC: 3E691FF8
CMT Ready!
New_RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 512.11.16.0, Algo: BB5
Using NEW BB5 FLASHING PROTOCOL
Transmission Mode Requested: Control USB, Accepted: Control USB
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0400000000000000, Unknown, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x00EC004000000231, Samsung, ONENAND
Requested Algorithm: XSR 1.6 (CMT)
Sending Auxiliary Loader...
Auxiliary Loader Sent!
Loader: RAPxx CommonBoot v1.06 (C) 2011 KarwosLabs
Custom loader running OK! Working...
Readed OK, Saving to "1DC0000EB6A000524EFB32C0210D25187179FFC2.C0000067"
Success!
Nokia E52

Code:
[Nokia E52 USB Phonet]: Port opened OK!
MCU Version V ICPR82_09w46.3
MCU Date 28-12-09
Product RM-469 (Nokia E52)
Manufacturer (c) Nokia
IMEI 355216035074023
Mastercode 2723652247
IMEI Spare 3A55120653700402
IMEI SV 3355120653700432F9000000
PPM 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12652.n256i031.012j(#031.012031.012.01.01031.012.2 41.02u$Tk0.072Ą,$021.013, 22-Jul-2009, UDA_VF_IE, rm469
PSN SEL726460
Product Code 0588653
Basic Product Code 0565921
PSD 0000000000000000
LPSN 0
WLAN MAC A87E33CB8DCE
APE SW 031.012
APE Variant 031.012031.012.01.01031.012.241.02
APE Test 0.072
APE HW 256
APE ADSP 256
APE BT HCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12652.
RETU 40
TAHVO 00
AHNE 11
HW 6000o256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12652.n256i031.012j(#031.012031.012.01.01031.012.2 41.02u$Tk0.072Ą,$021.013, 22-Jul-2009, UDA_VF_IE, rm469
PCI o256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12652.n256i031.012j(#031.012031.012.01.01031.012.2 41.02u$Tk0.072Ą,$021.013, 22-Jul-2009, UDA_VF_IE, rm469
UEM 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12652.n256i031.012j(#031.012031.012.01.01031.012.2 41.02u$Tk0.072Ą,$021.013, 22-Jul-2009, UDA_VF_IE, rm469
UPP 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12652.n256i031.012j(#031.012031.012.01.01031.012.2 41.02u$Tk0.072Ą,$021.013, 22-Jul-2009, UDA_VF_IE, rm469
RFIC |Vapaus_5.1 | Aura_?.?
DSP ICPR82_09w46.2_RIOo256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12652.n256i031.012j(#031.012031.012.01.01031.012.2 41.02u$Tk0.072Ą,$021.013, 22-Jul-2009, UDA_VF_IE, rm469
LCD 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12652.n256i031.012j(#031.012031.012.01.01031.012.2 41.02u$Tk0.072Ą,$021.013, 22-Jul-2009, UDA_VF_IE, rm469
BT 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12652.n256i031.012j(#031.012031.012.01.01031.012.2 41.02u$Tk0.072Ą,$021.013, 22-Jul-2009, UDA_VF_IE, rm469
ADSP Sw 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12652.n256i031.012j(#031.012031.012.01.01031.012.2 41.02u$Tk0.072Ą,$021.013, 22-Jul-2009, UDA_VF_IE, rm469
ADSP DevID 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12652.n256i031.012j(#031.012031.012.01.01031.012.2 41.02u$Tk0.072Ą,$021.013, 22-Jul-2009, UDA_VF_IE, rm469
ADSP RevID 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12652.n256i031.012j(#031.012031.012.01.01031.012.2 41.02u$Tk0.072Ą,$021.013, 22-Jul-2009, UDA_VF_IE, rm469
AEM 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12652.n256i031.012j(#031.012031.012.01.01031.012.2 41.02u$Tk0.072Ą,$021.013, 22-Jul-2009, UDA_VF_IE, rm469
Flip MCUSW 256qPIHCI Version 12 (rev. 8192). LMP Version 12 (rev. 0). Manufacturer 12652.n256i031.012j(#031.012031.012.01.01031.012.2 41.02u$Tk0.072Ą,$021.013, 22-Jul-2009, UDA_VF_IE, rm469
Simlock Server SIMLOCK SERVER
Simlock Key 2440700000000000
Simlock Profile 0000000000000000
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [1,2] State: OPENED Type: GID Data: FFFF
Simlock [1,3] State: OPENED Type: GID Data: FFFF
Simlock [1,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [1,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [2,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [2,2] State: OPENED Type: GID Data: FFFF
Simlock [2,3] State: OPENED Type: GID Data: FFFF
Simlock [2,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [2,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [3,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [3,2] State: OPENED Type: GID Data: FFFF
Simlock [3,3] State: OPENED Type: GID Data: FFFF
Simlock [3,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [3,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [4,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [4,2] State: OPENED Type: GID Data: FFFF
Simlock [4,3] State: OPENED Type: GID Data: FFFF
Simlock [4,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [4,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [5,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [5,2] State: OPENED Type: GID Data: FFFF
Simlock [5,3] State: OPENED Type: GID Data: FFFF
Simlock [5,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [5,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [6,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [6,2] State: OPENED Type: GID Data: FFFF
Simlock [6,3] State: OPENED Type: GID Data: FFFF
Simlock [6,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [6,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [7,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [7,2] State: OPENED Type: GID Data: FFFF
Simlock [7,3] State: OPENED Type: GID Data: FFFF
Simlock [7,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [7,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Auto Selecting Flash Files on User Request...
[Nokia E52 USB Phonet]: Port opened OK!
Product Code: 0588653
No Flash Datapackage installed for this Phone!
Reading SL3 LOG File...
[Nokia E52 USB Phonet]: Port opened OK!
MCU Version V ICPR82_09w46.3
MCU Date 28-12-09
Product RM-469 (Nokia E52)
Manufacturer (c) Nokia
IMEI 355216035074023
Mastercode 2723652247
Analyzing Profile Bits...
Phone can be NCK unlocked using KEYPAD
Phone can be NCK unlocked using FBUS
15 Digits NCK Found
WARNING: "086002021A660344B60B626D2CBDBC90D96BFEBE.C000249F" Not Exists, Will read it...
Reading CYC file from phone...
Booting CMT...
[Nokia E52 USB Phonet]: Port opened OK!
Switching to RAW Mode...
[Nokia USB Flashing Generic]: Port opened OK!
Old ROM Detected
CMT_SYSTEM_ASIC_ID: 000000030000022600010007600C192102011104
CMT_EM_ASIC_ID: 00001040
CMT_EM_ASIC_ID: 00001030
CMT_PUBLIC_ID: 086002021A660344B60B626D2CBDBC90D96BFEBE
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 25B977A055BE9B5DEC0C38A2A279C695
CMT_BOOT_ROM_CRC: 3E273BF6
CMT_SECURE_ROM_CRC: 37BE26FA
CMT Ready!
New_RAPUv11_2nd.fg, Type: 2nd Boot Loader, Rev: 768.10.48.1, Algo: BB5
Using NEW BB5 FLASHING PROTOCOL
Waiting for USB Boot ROM Answer...
ROM Ret: 0xFFFD125D
ROM CMT dwAddr: 0x10004FF0
ROM CMT dwLength: 0x00627837
Seems ROM Initialized OK!
Transmission Mode Requested: Control USB, Accepted: Control USB
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0020004000000031, ST, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x0020004000000031, ST, ONENAND
Requested Algorithm: XSR 1.6 (CMT)
Sending Auxiliary Loader...
Auxiliary Loader Sent!
Loader: RAPxx CommonBoot v1.06 (C) 2011 KarwosLabs
Custom loader running OK! Working...
Readed OK, Saving to "086002021A660344B60B626D2CBDBC90D96BFEBE.C000249F"
Success!
Nokia 6700

Code:
[Nokia 6700 classic USB Phonet]: Port opened OK!
MCU Version V 10.50
MCU Date 23-11-09
Product RM-470 (Nokia 6700 classic)
Manufacturer (c) Nokia
IMEI 353790048150162
Mastercode 165217462
IMEI Spare 3A35970084511006
IMEI SV 3335970084511036F9000000
PPM V 10.50, 23-11-09, RM-470, (c) Nokia , C
CNT Content: c_gb_chrome, 3 IE, 23-11-09, RM-470, (c) Nokia , ,
PSN KFW480968
Product Code 0585990
Module Code 0204199
Basic Product Code 0590482
PSD 0000000000000000
LPSN 0
RETU 34
TAHVO 00
AHNE 11
HW 1010
RFIC |Vapaus_5.1 | Aura_?.?
DSP ICPR81_09w37
LCD TPO
BT 410B-v170
Simlock Server SIMLOCK SERVER
Simlock Key 2720500015194980
Simlock Profile 8000000000000002
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: OPENED Type: MCC-MNC Data: 27205F
Simlock [2,1] State: OPENED Type: MCC-MNC Data: 23594F
Simlock NCK #pw+737N24288048822+1#
Auto Selecting Flash Files on User Request...
[Nokia 6700 classic USB Phonet]: Port opened OK!
Product Code: 0585990
This is Valid BB5 Product
No variant found with given Product Code, selecting first one
Reading SL3 LOG File...
[Nokia 6700 classic USB Phonet]: Port opened OK!
MCU Version V 10.50
MCU Date 23-11-09
Product RM-470 (Nokia 6700 classic)
Manufacturer (c) Nokia
IMEI 353790048150162
Mastercode 165217462
Analyzing Profile Bits...
Phone can be NCK unlocked using KEYPAD
Phone can be NCK unlocked using FBUS
15 Digits NCK Found
WARNING: "2B60010FD08C0344B84E013C20C370B731580C87.C000249F" Not Exists, Will read it...
Reading CYC file from phone...
Booting CMT...
[Nokia 6700 classic USB Phonet]: Port opened OK!
Switching to RAW Mode...
[Nokia USB Flashing Generic]: Port opened OK!
Old ROM Detected
CMT_SYSTEM_ASIC_ID: 000000030000022600010007600C192102011104
CMT_EM_ASIC_ID: 00000C34
CMT_EM_ASIC_ID: 00000C30
CMT_PUBLIC_ID: 2B60010FD08C0344B84E013C20C370B731580C87
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 25B977A055BE9B5DEC0C38A2A279C695
CMT_BOOT_ROM_CRC: 3E273BF6
CMT_SECURE_ROM_CRC: 37BE26FA
CMT Ready!
New_RAPUv11_2nd.fg, Type: 2nd Boot Loader, Rev: 768.10.48.1, Algo: BB5
Using NEW BB5 FLASHING PROTOCOL
Waiting for USB Boot ROM Answer...
ROM Ret: 0xFFFD125D
ROM CMT dwAddr: 0x10004FF0
ROM CMT dwLength: 0x00627837
Seems ROM Initialized OK!
Transmission Mode Requested: Control USB, Accepted: Control USB
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0000000000000000, Unknown, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x0098004000000031, Toshiba, ONENAND
Sending Auxiliary Loader...
Auxiliary Loader Sent!
Loader: RAPxx CommonBoot v1.06 (C) 2011 KarwosLabs
Custom loader running OK! Working...
Readed OK, Saving to "2B60010FD08C0344B84E013C20C370B731580C87.C000249F"
Success!
Nokia 5800

Code:
WARNING: Failed to read RAP Public ID
Reading CYC file from phone...
Booting CMT...
[Nokia USB Flashing Generic]: Port opened OK!
Old ROM Detected
CMT_SYSTEM_ASIC_ID: 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID: 00000295
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 16900018F3740052C3ECA61A74BBE7E9A3A34FCE
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_BOOT_ROM_CRC: 4B9B7510
CMT_SECURE_ROM_CRC: 3E691FF8
CMT Ready!
New_RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 512.11.16.0, Algo: BB5
Using NEW BB5 FLASHING PROTOCOL
Transmission Mode Requested: Control USB, Accepted: Control USB
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0400000000000000, Unknown, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x00EC004000000121, Samsung, ONENAND
Requested Algorithm: XSR 1.5 (CMT)
Sending Auxiliary Loader...
Auxiliary Loader Sent!
Loader: RAPxx CommonBoot v1.06 (C) 2011 KarwosLabs
Custom loader running OK! Working...
Readed OK, Saving to "16900018F3740052C3ECA61A74BBE7E9A3A34FCE.C0003160"
N8 tested too but missed log somewhere http://forum.gsmhosting.com/ubb/frown.gif

Firmware v01.62 is required for this installer.

Where from download?
http://www.karwos.hk/CycloneBoxInstaller.exe

[turkcellgsm]

Cyclone Box Installer v1.15 Released
http://www.karwos.hk/CycloneBoxInstaller.exe

Hi, new update for Cyclone Box is Ready.
What's new ?

Quote:
=====================
Installer v1.15
18.06.2011
=====================
- Added READING DCT4+/XGold1 Encrypted Security Code from DCT4+ Based phone (previously shown as Crypted DCT4+) - of course WITHOUT data loss - seems 1st in the world
- Added RESET (to 12345) DCT4+/XGold1 Encrypted Security Code from DCT4+ Based phone - of course WITHOUT data loss - seems 1st in the world
- Added Reading Full RPL (NPC,CCC,HWC,SIMLOCK,SD,...) from Dead/Downgraded/Security Wrong BB5 Units - seems 1st in world. If phone doesn't power on (Stuck on Nokia logo, or completly dead), you can now dump full RPL file in order to Full Erase your phone and revive it. Softwar before dumping RPL in Recovery mode, will ask user of doing so. So in any case of reviving downgraded phone is:
1. Create RPL from Dead Phone
2. Full Erase
3. Write any SW version
4. Write previously backed-up RPL file
5. Authorize with SuperDongle
6. Write virgin PM
- Added (fixed) NCK Counter Reset for XGold2 based phones
- SecurityBlock is now backed-up before NCK Counters Reset, just in case
- XGold1 Dead units booting fixed
- Separate button for Receiving L7 Code for LBF added
- Fixed DCT4 Security Counter Attempts Reset for some DCT4 variants
- PMM Managment Tab added to BB5 Security Tab
- Auto-Imei RESTORE added. Used if you have corrupted your imei, but having valid NPC file. Will scan StoredFiles for CRT file matching with CMT Public ID and automaticlly write it.
- Added DCC camera Hardware Fault alert on DCC repair - some units is hardware fault and repair is not possible (DCC file not found)
- XGold1 PMM parsing fixed (While reading LBF, Simlock table not found for some operators/phones)
- XGold2 Flashing problems fixed (Invalid pointer)
- USB transactions module rewritten
- Full Erase button added for BB5 mobiles. No need to know FlashChip mapping and size - it's scanned automaticlly. It will erase CMT flash completly. Make sure RPL and PM is readed before erase!!!
- Added "Just NPC" option used with "Erase Certificates". Used to delete only NPC certificate (corrupt IMEI and switch phone-on to make necessary job ... with IMEI corrupted phone will switch on even without valid security area). You can use this function to dump PM from non-working phone. Don't forget to CREATE RPL FROM PHONE first! Else you will get corrupted IMEI.
- "Force Use Server" added for SX4 Authorization.
- Fixed AutoSelecting bug
- Fixed problem with parsing DCT4 variants when no DCT4 products installed
- Fixed problem with parsing BB5 variants when no BB5 products installed
- Index out of bound (0) fixed
- Plain RPL is checked now by default
- Removed "Bootloader upgrade problem" message, as caused too much confusion
- Security Problem #1 and #2 Fixed (anti-idiot-fix)
- Added additional Security Problem #5 message for Reinstall Drivers
- Minor changes and bugfixes
Where from download?
http://www.karwos.hk/CycloneBoxInstaller.exe

[turkcellgsm]

Cyclone Nokia/Blackberry Application v01.71, (Sep 11 2011 17:49:29, gcc v4.3.3, RTOS V6.0.1), Type: Signed Production Application, (C) KarwosSoft 2011

What's new ?
- MEP-04104-008 added
- MEP-42490-002 added
- Optimizations in TX2 data shifting
- Fixed problems with resuming device from Static (sleep) mode on some configurations
- Fixed some variants of JCOP31 handling
- Minor changes and bugfixes

NOTE
This is server-side update only, just do Box Maintenance and your box will be updated. Keep note that new major installer is still not ready yet (many internal changes related to engine, etc), however it should be ready within next week, so be prepared

[turkcellgsm]

Installer v1.16
Black Edition
21.09.2011


MAJOR FUNCTIONS ADDED
- New BB5 FBUS/USB Loaders v11.24.00 Introduced
- Added Dead USB Flashing for RAPIDO and other FUR-over-USB operations (DO NOT USE FOR CERTIFICATE READ/WRITE!), still "old method" avaiable in connection tab.
- Certificates operations for Rapido FBUS-OVER-USB disabled, because is not supported by loaders ( it will fail without any attempt )
- Rapido Alive FUR-over-USB flashing not supported, flash those phones by Dead variant instead (Switch to RAW mode problem in this models..), or "Old USB Flashing Method"
- "Use OLD USB FLASHING METHOD" moved to BB5/Flashing tab
- "Settings" tab renamed to Connection
- TX2 settings removed from BB5 Flashing Tab
- RAPU Flashing/Booting Improved
- C2-02 XGold2 Flashing "Added" - Cyclone has flashing compatibilty for this model, but MassMemory file couldn't be handled becasue too big. Fixed.
- BB5 Mass Memory Flashing Tested - Cyclone SW has this posibility from long time ago...
- Added "Read Unique Data" button. Use to boot phone by Flashbus directly, and dump Unique Data (for Simlock,SD,...) when phone doesn't have correct BSI resistors value. Dumped unique data might be lately used for USB operations if still FBUS operations fails.
- Old DCT4 Asic 2,5,6,7 Direct Unlock/Relock/Autolock Introduced, finally
- Standalone DCT4 RPL Calculation Introduced, supported Asics: 2,5,6,7,11
- Added support for DCT4 (7250i, 6610i, 2125i, 2865i, 6275i) Product Data RPL Entity Writing for fixing CS
- Added support for generating extended DCT4 RPL with Product Data for above models (CS problems)
- Alcatel Calculator added to gui
- PMM Protection Checkbox added upon PM write. Use to protect PM security fields.
- Diagnostic Module Added
- Selftests moved to new "Diagnostic" module
- Vibra Tests Added
- Backlight Tests Added
- "Autodetect" added for DCT4 Unlocking. Unique method - non ASIC dependand (i.e. avoids RM-189 2310 problems avaiable on all boxes right now). If there is problems with autodetection - user still can select unlocking method manually.
- Removed DCT4 ASK-RPL From Credits Manager
- Removed SuperDCT4 Activation from Credits Manager
- StatusBar messages are more accurate now
- Added "Auto-Rebuild IMEI" checkbox for "Read UEM IMEI" function. Used to automatically generate FLASH IMEI DATA and programm it - one-click REPAIR ??????????????4.
- CacheV2 Introduced
- XGold1/2 Flashing Routines rewritten to be more memory effective
- Dead-erased XGold2 flashing improved, plus added some messages regarding to reviving dead XG2
- USB Connection Type is now selected automatically when XGold2 platform found
- The supported MEP List are now acquired from box once Blackberry Tool launch
- Moved UEM stuff to new "ASK/RPL Tool"
- XGold2 MassMemory flashing added
- Remaining XGold Credits are now shown upon launching of Nokia Tool (Those one used for XGold1 LBF, Blackberry Codes Service, etc)
- Default Security Area XGold Service count increased from 50 to 100 (100 phones limit between SA updates for Blackerry,XGold1,...)
- XGold/Blackberry service is now also checked upon Blackberry tool startup, also after each Code calculation remaining Calculation Limit is displayed
- Relock files updated for DCT4
- AutoUpdater Introduced
- USB Flashing Solved due to wrongly installed Flashing Cable Drivers on some configurations (i.e. Virgin PC)
- Database Unlock Introduced
- RPL Write revised
- PARTNERC certificate support added for Certificate Read
- PARTNERC certificate support added for Certificate Write
- PARTNERC certificate support addef for RPL Operations
- Erase files support added
- DCC configuration for NIMMIIIIRRFF06150000 added
- DCC configuration for NIMMIIIIRRFF095A1F05 added
- DCC configuration for NIMMIIIIRRFF095A1F04 added
- DCC configuration for NI00IIIIRR0306150018 added
- DCC configuration for NIMMIIIIRRFF095B1F05 added
- DCC configuration for NIMMIIIIRRFF0102F201 added
- DCC configuration for ISL2TI0200000103B840 added
- DCC configuration for 8600030001040A021001 added
- DCC configuration for 860003000104094B2F01 added
- DCC configuration for 86000300010401035424 added
- DCC configuration for NI00BC000003095B1F00 added
- DCC configuration for NI00BC0000030102F203 added
- DCC configuration for NI00BC0000030102F202 added
- DCC configuration for NI00BC000003095B1F05 added
- DCC configuration for NI00BC000003095B1F01 added
- DCC configuration for NI00IIIIRR030C213402 added
- DCC configuration for NI00IIIIRR030C213401 added
- DCC configuration for NI00IIIIRR030C20C605 added
- DCC configuration for NI00IIIIRR03094B2F01 added
- DCC configuration for NI00IIIIRR0301022E05 added
- DCC configuration for NI00IIIIRR0301022E01 added
- DCC configuration for NIMMIIIIRRFF0C206C02 added
- DCC configuration for NI00IIIIRR0301035602 added
- DCC configuration for NI00CS0000040C213402 added
- DCC configuration for NI00CS00000401022E05 added
- DCC configuration for NI00BC0000040F03F802 added
- DCC configuration for NI00BC0000040A4E2000 added
- DCC configuration for NI00BC000004095B1F01 added
- DCC configuration for NI00BC000004095B1F00 added
- DCC configuration for NI00BC0000040103B904 added
- DCC configuration for NI00BC0000040102F201 added
- DCC configuration for NI00BC00000401022C00 added
- DCC configuration for 0A4E2007 added
- DCC configuration for 0103B904 added
- SX4 Virgin PMs database updated, added RM-256, RM-497, RM-528V, RM-584, RM-586, RM-609, RM-612, RM-626, RM-638, RM-707, RM-712
- HWC/CCC Templates added for products RM-469, RM-540, RM-566, RM-528V, RM-596, RM-609, RM-614, RM-645
- Models.ini refreshed
- Skin Stack Updated
- Previous updates included
- Nokia Connectivity Cable Drivers updated to v7.1.42.0
- Box Firmware v01.73 Released



BUG FIXES & IMPROVEMENTS
- Afterwards DCT4 Erase All chips, the Permanent Data aren't restored anymore
- Fixed DCT4 RPL Write problem when only DATA2 exists in RPL file
- Fixed problems with handling RAPIDO > v11.16.00 loaders over FBUS (FUR control Add Problem)
- Check flashing Bus for WD2 fixed
- Read UEM Imei for WD2 Fixed
- Read ASK for WD2 Fixed
- Write RPL for WD2 Fixed
- Fixed lots of Access Violatios after closing up Nokia Tool
- Fixed bug with disappearing Tray icon after Minimize to Tray
- Bruteforce between NCK Fixed
- PM Write bugs fixed (Access Violation)
- Fixed bug with Broadcom Read Info
- Fixed spurious XGold2 product to be displayed in XGold1/DCT4 tab
- Fixed product mismatch on XG1/XG2 autodetection
- Fixed invalid Calculation of Mastercode
- 6230 Flashing Fixed (Given Image not maches with readen UPP Id or Image problem). If problem still exists - select all flashing files _MANUALLY_ don't use INI based (because there exists two HW versions E and M - autoselection is HWID based and may fails anytime).
- OMAP Loaders Fixed
- Fixed some wrong FBUS implementation when Packet size mod 0x78 == 0


Downloads
LINK1 (http://www.karwos.hk/CycloneBoxInstaller.exe)
LINK2 (http://www.siroya.org/downloads/CycloneBoxInstaller.exe)
LINK3 (http://www.cyclonebox.com/downloads/CycloneBoxInstaller.exe)

[turkcellgsm]

Cyclone BOMB!!! RAPUv21 Unlock/SD Repair/RPL Back/Downgrade/SecAnalys/Standalone SX4!

Update is 100% free and standalone for CycloneBox users;-)

- Added FIRST IN THE WORLD, FREE, STANDALONE SL3 UNLOCK by BF FOR LATEST TI BASED NOKIA PRODUCTS (RAPUV2 CPU) this includes Nokia 500, Nokia 600, Nokia 700, Nokia 701 and probably more coming !!!!!! These products are 15 NCK chars so not to worry.

- Added FIRST IN THE WORLD, FREE, STANDALONE SUPERDONGLE REPAIR for RAPUv2 Based Phones

- Added FIRST IN THE WORLD, FREE, STANDALONE SX4 AUTHORIZATION for RAPUv2 Based Phones

- Added FIRST IN THE WORLD, FREE, STANDALONE "FULL RPL" BACKUP (include SUPERDONGLE) for latest RAPUv2 phones

- Added FIRST IN THE WORLD, FREE, STANADLONE DOWNGRADE CAPABILITY for latest RAPUv2 phones

- Added FIRST IN THE WORLD, FREE, STANDALONE Full Security analysis for RAPUv2 phones

- Supported interfaces: USB and FBUS

- Small bug fixes, i.e. PM protection is now unticked by default



Nokia 701, reading sl3 log file

Quote:
[Nokia USB Phonet]: Port opened OK!
Reading SL3 LOG File...
[Nokia USB Phonet]: Port opened OK!
MCU Version V 79u_11w31.4
MCU Date 16-08-11
Product RM-774 (Nokia 701)
Manufacturer (c) Nokia
IMEI 358272040230347
Mastercode 752474040
Analyzing Profile Bits...
Phone can be NCK unlocked using KEYPAD
Phone can be NCK unlocked using FBUS
15 Digits NCK Found
WARNING: "EC130000FFFF7C40D88E7ED917D36D2FC8DAFF43.C0004AAC " Not Exists, Will read it...
Reading CYC file from phone...
Booting CMT...
[Nokia USB Phonet]: Port opened OK!
Switching to RAW Mode...
[Nokia USB Flashing Generic]: Port opened OK!
Old ROM Detected
CMT_SYSTEM_ASIC_ID: 000000030000022600010007400C192103032108
CMT_EM_ASIC_ID: 00001040
CMT_EM_ASIC_ID: 00001030
CMT_PUBLIC_ID: EC130000FFFF7C40D88E7ED917D36D2FC8DAFF43
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 3AB5DB70B45D23F1ADEEBB5734160706
CMT_BOOT_ROM_CRC: 2CAC45E2
CMT_SECURE_ROM_CRC: 3BC33C8B
CMT Ready!
RAPUv21_2nd.fg, Type: 2nd Boot Loader, Rev: 768.11.16.0, Algo: BB5
Using NEW BB5 FLASHING PROTOCOL
Waiting for USB Boot ROM Answer...
ROM Ret: 0xFFFD125D
ROM CMT dwAddr: 0x10004FF0
ROM CMT dwLength: 0x00627837
Seems ROM Initialized OK!
Transmission Mode Requested: Control USB, Accepted: Control USB
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0000000000000000, Unknown, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x00EC006000000032, Samsung, ONENAND
Requested Algorithm: XSR 1.6 (CMT)
Sending Auxiliary Loader...
Auxiliary Loader Sent!
Loader: RAPxx CommonBoot v1.07 (C) 2011 KarwosLabs
Custom loader running OK! Working...
If phone doesn't powering into Local Mode now for some reason do following:
1. Re-insert battery
2. Power it on, when asked use Ovi/Pc Suite Mode
Readed OK, Saving to "EC130000FFFF7C40D88E7ED917D36D2FC8DAFF43.C0004AAC "
Success!
Nk701 detailed security analysis

Quote:
Started Phone Security Analysis...
[Nokia USB Phonet]: Port opened OK!
MCU Version V 79u_11w31.4
MCU Date 16-08-11
Product RM-774 (Nokia 701)
Manufacturer (c) Nokia
IMEI 358272040230347
Mastercode 752474040
Reading Security Block...
Security block OK and saved to "RM-774_358272040230347_2011-10-04_022815.SecurityBlock.PM"
Step 1 : Testing SIMLOCK
SIMLOCK SEFLTEST PASSED OK!
Step 2 : Testing SECURITY
SECURITY SEFLTEST PASSED OK!
Step 3 : Analyzing Security Block
"EC130000FFFF7C40D88E7ED917D36D2FC8DAFF43.C0004AAC " Exists, That is good...
Checking SUPERDONGLE...
SUPERDONGLE FOUND AND CHECKSUM OK! PASSED!
Checking SIMLOCK...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking MCU&DSP TIMESTAMPS...
MCU&DSP TIMESTAMPS FOUND AND CHECKSUM OK! PASSED!
Checking CMLA KEYS...
CMLA KEYS FOUND AND CHECKSUM OK! PASSED!
Checking ECC KEYS...
ECC KEYS FOUND AND CHECKSUM OK! PASSED!
Checking DIV KEYS...
DIV KEYS FOUND AND CHECKSUM OK! PASSED!
Analyze finished!
Nk 701, full RPL

Quote:
RPL Creation started...
Processing CMT Part...
[Nokia USB Phonet]: Port opened OK!
Storing Product Code...
Storing PSN...
Storing HWID...
Trying to store Simlock...
Reading Configuration Key...
Hashing...
Reading SHA1-RSA Signature...
Reading SHA1-HMAC Signature...
Storing Simlock...
Trying to store WMDRM RPL...
Reading Keys...
Storing WMDRM PD...
Reading Security Block...
Security block OK and saved to "RM-774_358272040230347_2011-10-04_022831.SecurityBlock.PM"
"EC130000FFFF7C40D88E7ED917D36D2FC8DAFF43.C0004AAC " Exists, That is good...
Storing Additional Data...
Checking Superdongle Key...
Encrypting Superdongle Key...
Storing Superdongle Key...
Checking CMLA Key...
Storing CMLA Key...
Booting CMT...
[Nokia USB Phonet]: Port opened OK!
Switching to RAW Mode...
[Nokia USB Flashing Generic]: Port opened OK!
Old ROM Detected
CMT_SYSTEM_ASIC_ID: 000000030000022600010007400C192103032108
CMT_EM_ASIC_ID: 00001040
CMT_EM_ASIC_ID: 00001030
CMT_PUBLIC_ID: EC130000FFFF7C40D88E7ED917D36D2FC8DAFF43
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 3AB5DB70B45D23F1ADEEBB5734160706
CMT_BOOT_ROM_CRC: 2CAC45E2
CMT_SECURE_ROM_CRC: 3BC33C8B
CMT Ready!
Searching for BootCode: DualLine 32Bit
RAPUv21_2nd.fg, Type: 2nd Boot Loader, Rev: 768.11.24.0, Algo: BB5
Using NEW BB5 FLASHING PROTOCOL
Waiting for USB Boot ROM Answer...
ROM Ret: 0xFFFD125D
ROM CMT dwAddr: 0x10004FF0
ROM CMT dwLength: 0x00627837
Seems ROM Initialized OK!
Transmission Mode Requested: Control USB, Accepted: Control USB
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0000000000000000, Unknown, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x00EC006000000032, Samsung, ONENAND
Requested Algorithm: XSR 1.6 (CMT)
Searching for BootCode: DualLine 32Bit
FlashChip 0x00EC0060 (Samsung), Size: 1024MBytes, VPP: Not Supported
RAPUv21_XSR17_alg.fg, Type: Algorithm, Rev: 768.11.24.0, Algo: XSR 1.6
Initializing TurboCache...
TurboCache Loaded!
Writing CMT PASUBTOC Certificate...
Writing CMT ALG Certificate...
CMT Algorithm Ready!
Transmission Mode Requested: Bulk USB, Accepted: Bulk USB
Box TX2 Data Pin set to: Service Pin 3
Waiting for FUR Client become avaiable...
[Nokia USB Flashing Generic]: Port opened OK!
FUR Avaiable!
Adding FUR Client (CMT, State: Ready)...
CMT FUR Ready!
Overriding VPP Setting, USB can't use VPP
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: FEB3BB7481D3E5D0EAC907335A4402A071493D53
APE Subsystem Not Found
Storing NPC...
Storing CCC...
Storing HWC...
CMT VARIANT Not Found
Storing PARTNERC...
Restarting MCU...
RPL Saved OK
Standalone SX4 operation

Quote:
SX4 Authorization / SD Repair Procedure Started....
[Nokia USB Phonet]: Port opened OK!
"EC130000FFFF7C40D88E7ED917D36D2FC8DAFF43.C0004AAC " Exists, That is good...
[Nokia USB Phonet]: Port opened OK!
MCU Version V 79u_11w31.4
MCU Date 16-08-11
Product RM-774 (Nokia 701)
Manufacturer (c) Nokia
IMEI 358272040230347
Mastercode 752474040
Reading Security Block...
Security block OK and saved to "RM-774_358272040230347_2011-10-04_022851.SecurityBlock.PM"
SX4 Status: Not authorized (74)
Started mutual authenthication with card...
Receiving Phone Seed 1...
Phone Seed 1 Received
Sending calculated Data 1, and expecting Seed 2...
Calculated Data 1 accepted, Phone Seed 2 Received
Sending calculated Data 2
Calculated Data 2 sent, Checking Authorization Status again
Authorization successfully finished!
Looking for Virgin PM In Database...
Virgin PM Not found in local database, obtain one (with fields 1 and 309) and write it using "Write PM" Button
Copying our loaders will affect in cracks/clones in market shortly and maybe Broadcom Unlocking business destroy.

At least firmware 1.74 needed (update isn't needed at all).
Don't forget to have installed latest v1.16 installer (http://www.karwos.hk/CycloneBoxInstaller.exe), so Autoupdate module will do the job.

[turkcellgsm]

Hi, firmware v01.77 was just loaded to server.


Added new Blackberry MEP-175683-003 (MTS Moscow, North-West GSM, KB Impuls BeeLine) and
Added free SuperBB5 (sl3direct) routines.

[turkcellgsm]

Hi, new update is released.

- Added PA_SIMLOC30 Original Nokia RPL Write support in SIMLOCK2 format
- The NCK length is now automatically recognized upon RPL write, so correct NCK array lenght might be assumed
- Minor changes and bugfixes

Autoupdate should do the job, in case of any problems (or interrupted update) you can manually download exe from http://www.karwos.hk/updater/Cyclone.exe and place in C:\Program Files\Cyclone Box\

[turkcellgsm]

Cyclone Box Broadcom Unlocker Released

you can download http://www.karwos.hk/updater/Cyclone.exe and place

Hi, new update for Cyclone Box is ready.

Added support for reading Unique Data files for Broadcom 21351 based Nokia Phones (X2, C3, .. and more of them).

After read Unique Data you can:
- Unlock SP locks by reading LBF data
- Backup FULL RPL (including superdonlge) 100% Nokia-Like
- Repair corrupted Superdongle keys
- Authorize your phone with SX4 emulation inside box
- Detailed Security Analysis
- Downgrade this phones
- More ...

X2 Example Uni Data read and Security operation

Quote:


Started Phone Security Analysis...
[Nokia X2-00 USB Phonet]: Port opened OK!
MCU Version V 04.90
MCU Date 28-09-10
Product RM-618 (Nokia X2-00)
Manufacturer (c) Nokia
IMEI 352699049966024
Mastercode 554352325
Reading Security Block...
Security block OK and saved to "RM-618_352699049966024_2011-11-12_132245.SecurityBlock.PM"
Step 1 : Testing SIMLOCK
SIMLOCK SEFLTEST PASSED OK!
Step 2 : Testing SECURITY
SECURITY SEFLTEST PASSED OK!
Step 3 : Analyzing Security Block
WARNING: "48400406073ECC4443B83B4151F972ABA08B3D66.C0003160 " Not Exists, Will read it...
Reading CYC file from phone...
Booting CMT...
[Nokia X2-00 USB Phonet]: Port opened OK!
Switching to RAW Mode...
[Nokia USB Flashing Generic]: Port opened OK!
New ROM Detected
CMT_SYSTEM_ASIC_ID: 000000000000000022000509200C0000
CMT_EM_ASIC_ID: 00005361
CMT_PUBLIC_ID: 48400406073ECC4443B83B4151F972ABA08B3D66
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 1B0D74C532CA1C6133940C740E8C786E
CMT_BOOT_ROM_CRC: DE56D582
CMT_SECURE_ROM_CRC: BDDE7A3A
CMT Ready!
BCM21351_usb2nd.fg, Type: 2nd Boot Loader, Rev: 513.11.24.0, Algo: BB5
Using NEW BB5 FLASHING PROTOCOL
Transmission Mode Requested: Control USB, Accepted: Control USB
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0020003000000131, ST, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x0020003000000131, ST, ONENAND
Requested Algorithm: XSR 1.6 (CMT)
Sending Auxiliary Loader...
Auxiliary Loader Sent!
Loader: RAPxx CommonBoot v1.07 (C) 2011 KarwosLabs
Custom loader running OK! Working...
Cyclone Server (1.0.0.676), Cyclone Box Team 2008-2011 - Ready.
If phone doesn't powering into Local Mode now for some reason do following:
1. Re-insert battery
2. Power it on, when asked use Ovi/Pc Suite Mode
Readed OK, Saving to "48400406073ECC4443B83B4151F972ABA08B3D66.C0003160 "
Checking SUPERDONGLE...
SUPERDONGLE FOUND AND CHECKSUM OK! PASSED!
Checking SIMLOCK...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking MCU&DSP TIMESTAMPS...
MCU&DSP TIMESTAMPS FOUND AND CHECKSUM OK! PASSED!
Checking CMLA KEYS...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking ECC KEYS...
ECC KEYS FOUND AND CHECKSUM OK! PASSED!
Checking DIV KEYS...
DIV KEYS FOUND AND CHECKSUM OK! PASSED!
Analyze finished!





PS1: Server connection and 10 credits (with 100 credits threshold) required to perform Broadcom Uni Data dump.

PS2: After reading uni data, all operations is standalone (just likely previous basing upon cached data)

PS3: Server charged credits, but my phone got disconnected during hash read operation, and hash not readen. What to do, what to do? If your account has been charged, the data generated at server are cached too... That means you can repeat process again (previously charging battery, i.e.), server transaction will be succeeded and no credits charged.

Box firmware v01.82 is required to use this update.
Software and loaders should be automatically updated.
In case if you have aborted your update process, and now having problem with running app - you can download http://www.karwos.hk/updater/Cyclone.exe (http://www.karwos.hk/updater/Cyclone.exe) and place it in your Cyclone directory...

[turkcellgsm]

!!!!!!!!!!Goood News !!!!!!!!!!
We have made changes on server side

Server will consume now 5 credits for reading LBF from Broadcom phones instead of 10

http://siroya.org/images/201111-11clcyone.jpg

[turkcellgsm]

Cyclone Box FREE and STANDALONE Broadcom Hash Read

Broadcom Unlocking (via LBF Hash Read)/SX4 Authorization/SD Repair/etc is now fully FREE and STANDALONE, just simply as previous models.
No internet connection and credits needed.
Just to remind Cyclone is one box which support all of hashes free and standalone now, this includes reading data from RAP3Gv3, RAP3Gv4, RAPUv1, RAPUv21 (world's first), Broadcom, XGold1, and shortly from XGold2 (maybe free, maybe with credits, we'll decide).

No firmware upgrade is needed. Just run Cyclone and it will auto-update main exe + loaders.

Make sure you have latest installer installed, if not, grab one from http://www.karwos.hk/CycloneBoxInstaller.exe

Firmware required, v01.82 (from Nov 12), no upgrade needed if u have one already.

[turkcellgsm]

Installer v1.17
20.12.2011
=====================

- SE Xperia Unlocker introduced (this is 3rd party addon)
Supported Phones :
Xperia X10 Mini - E10i
Xperia X10 Mini Pro - U20
Xperia X8 - E15i
Xperia W8 - E16 - E16i
Xperia X10
Xperia X10i
Xperia X10a
Docomo SO-01B
All These Phones supported without TEST POINT

- Added Real time SE Xperia Unlocker account Creator in 'Credits' tool.
(This is the best option for Online web shop resellers as Addon works without Box)Reseller can generate accounts real time with box)
10 Cyclone credits = 1 Xperia phone log
- BB5 FBUS/USB Loaders v11.40.00 Introduced
- Introduced previous updates (standalone and free Broadcom unlocking, RAPUv21, etc)
- PM Protection is now unticked by default
- PM Protection is automatically unticked during SX4 operations
- Full Erase for New Protocol APE phones fixed (wrong CMT Flash Device Index selected)
-Added New bright skin
- Minor changes and Bugfixes

Download Links
http://www.karwos.hk/CycloneBoxInstaller.exe (http://www.karwos.hk/CycloneBoxInstaller.exe)
Multiupload.com - upload your files to multiple file hosting sites! (http://www.multiupload.com/V6N0F2QLNP)

Discussion thread
21-12-2011 CycloneBox Installer v1.17 with Xperia Addon and more (http://forum.gsmhosting.com/vbb/f528/21-12-2011-cyclonebox-installer-v1-17-xperia-addon-more-1401895/#post8002913)

[turkcellgsm]

Hi, new update for Cyclone Box is released.

What's new?
- Added support for LBF data read for new XGold110 based phones, this is X1-00, X1-01, absolutly WORLD FIRST
- Nokia X1-00, X1-01, 100, 101, 102 flashing added
- 20 Digits is now checked upon XGold1xx Hash Read, as users reported 20 digit phones (i.e. new 1616 from Yoigo Spain). The 20 digits phones will not be readed now, to not loss the computation power of SL3 Clusters.
- When 20 Digits NCK is found upon BB5 LBF read, operation will be canceled (previously - asked whether to continue, or not), same reason as up
- Minor changes and bugfixes

How to update?
Just run Cyclone, autoupdate will replace Cyclone.exe.

Join us on facebook: http://www.facebook.com/cyclonebox (http://www.facebook.com/cyclonebox)

[turkcellgsm]

Hi to all! New BOMB Update for Cyclone Box is ready Again!!

What's new ??
- Added support for unlock by LBF read for latest XGold113 Nokia Phones, this is Nokia 100, 101, 102, again WORLD FIRST
- Latest XGold110/113 phones is also supported to full RPL Read (IMEI + Simlock), so afterwards Simlock or IMEI could be fully restored - world's first too... Using RPL method also Keypad/FBUS counter might be resetted.
- Added support for Profile Bits analyze upon LBF dump for XGold1xx, so phones which will not accept code via neither keypad or FBUS handler - Log file will not be readen
- Minor changes and bugfixes

How to update?
1. Run Cyclone Box Software, and autoupdate module will download necessary files. On failure, you can download new exe manually from http://www.karwos.hk/updater/Cyclone.exe (http://www.karwos.hk/updater/Cyclone.exe) and place it at C:\Program Files\Cyclone Box
2. Also Firmware v01.85 is Required. Update your box via Box Maintenance, or just agree upon first Nokia Tool launch.

[turkcellgsm]

Hi to all! New Update for Cyclone Box is ready Again!!

What's new ??
- Added Fast Standalone Level1-Level7 Codes Calculator from COD Files, supported format is Common Cyclone COD File, oclHashCat Unix/Windows, MXCrap. Not supported format? Send us file. No more server waiting!
- SX5 Serial Number injection during Level1-Level7 from COD Calculation is supported. "0" is recommended serials, other may give you - "Wrong code". Use only CHECKED SX5 Serials!
- Removed Send COD File To Server, Receive Level7 Code, etc routines.
- Minor changes and bugfixes

How to update?
1. Run Cyclone Box Software, and autoupdate module will download necessary files. On failure, you can download new exe manually from http://www.karwos.hk/updater/Cyclone.exe (http://www.karwos.hk/updater/Cyclone.exe) and place it at C:\Program Files\Cyclone Box
2. Also Firmware v01.86 is Required. Update your box via Box Maintenance, or just agree upon first Nokia Tool launch.

[turkcellgsm]

Hi, new firmware v 01.87 for Cyclone Box was just uploaded at server.

Added new security MEP-12209-010 WORLD FIRST

Just upgrade your box via Box Maintenance and enjoy.