Cyclone Update Beta :unlock 5800, n96, e75

adnanali · 06-23-2009, 10:08 AM

Cyclone Update Beta test
here is beta version, you can use it to unlock 5800, n96, e75, ini/vpl parser,etc:

http://www.cyclonebox.com/downloads/Cyclone7828NCK.rar

Official rls will come shorlty after this.

Don't forget to upgrade your box fw before use to v1.0.5

Quote:

BB5 Unlock Failed -> Unsupported Rootkey Hash, this is critical
it's because you've unpacked just cyclone.exe

YOU NEED UNPACK FOLDER "UNLOCKDATA" TOO IT CONTAINS NEW LOADERS, KEYS, PAPUBKEYS, AND PA_SL APPS !!

!!! 5800 unlock with cyclone box !!!

Code:

        Nokia DCT4/WD2/BB5 Service Tool Initialization Started, Engine Revision: 1.0.0.7828
Handling device: [Cyclone Team], [Cyclone Bootloader]
Handling device: [Cyclone Team], [Cyclone Box]
Initializing box...
Box Firmware: Cyclone Nokia Application v1.05, (Jun 22 2009 12:23:29, gcc-4.2.2, RTOS v5.2.0), Type: Signed Production Application, Flags: 

CONST-TX2-PIN ; VISTA-SUPPORT ; BB5-NCK-CALC
Box Serial Number: 
HW Revision: A, Suitable for: Production, Case: First Plastic Case, MCU Manufacture Time: 2008, wk27
Initializing security card...
Card Serial Number: 
Card Firmware Revision: 0109
Card is activated
Box is activated
Started box selftests procedure
USB Voltage    5.03v    PASSED
MCU Voltage    3.29v    PASSED
Core Voltage    1.79v    PASSED
VBAT Voltage    0.01v    PASSED
VBAT Voltage    4.83v    PASSED
Box VPP disabled
VPP Voltage    0.04v    PASSED
Internal Box VPP Enabled
VPP Voltage    4.88v    PASSED
Box VPP disabled
VPP Voltage    0.04v    PASSED
External Box VPP Enabled
VPP Voltage    7.88v    PASSED
Box VPP disabled
All box selftests passed!
Initializing FBUS...
All initialized - Ready to work


BB5 Unlock Started...
MCU Version    V ICPR72_08w41.1
MCU Date    22-10-08
Product        RM-356
Manufacturer    (c) Nokia
IMEI        354183025767837
Mastercode    4663723365
Simlock Server    SIMLOCK SERVER
Simlock Key    2140700000000000
Simlock Profile    0000000000000000
Simlock Key Cnt    0
Simlock FBUS Cnt    0
Simlock [1,1]    State: CLOSED    Type: MCC-MNC    Data: 21407F
Simlock [2,1]    State: CLOSED    Type: MCC-MNC    Data: 21407F
Simlock [3,1]    State: CLOSED    Type: MCC-MNC    Data: 21402F
Simlock [4,1]    State: CLOSED    Type: MCC-MNC    Data: 21402F
Reading Security Block...
Security block OK!
Determining PA Simlock...
Booting RAP...
CMT_SYSTEM_ASIC_ID:     000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:         00000296
CMT_EM_ASIC_ID:         00000B22
CMT_PUBLIC_ID:         21600108EA71005245E6C4CFAC8BD466E1E87FB5
CMT_ASIC_MODE_ID:     00
CMT_ROOT_KEY_HASH:     CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:         4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000800121, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.35.0, Algo: XSR 1.5
Flashbus Write baud set to 4.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 76A20187051C30162EE91C77AE5E6011F5F1BA61
APE Boot skipped on user request
Restarting MCU...
Determined PA Simlock: PA_SL2
Checking for Rootkey Hash support...
Booting RAP...
CMT_SYSTEM_ASIC_ID:     000000010000022600010006400C192101031103
CMT_EM_ASIC_ID:         00000296
CMT_EM_ASIC_ID:         00000B22
CMT_PUBLIC_ID:         21600108EA71005245E6C4CFAC8BD466E1E87FB5
CMT_ASIC_MODE_ID:     00
CMT_ROOT_KEY_HASH:     CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID:         4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.30.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Exploiting - running preloader...
Preloader running OK, Running Custom Loader...
Custom loader running OK! Working...
#pw+099333550976814+1#
#pw+999481670334321+2#
#pw+993134471737839+3#
#pw+689949256759389+4#
#pw+656747274127464+5#
#pw+266403324803170+6#
#pw+873340257908542+7#
Sending NCK Code (Level 7)..
NCK Accepted! Phone unlocked OK!
MCU Version    V ICPR72_08w41.1
MCU Date    22-10-08
Product        RM-356
Manufacturer    (c) Nokia
IMEI        354183025767837
Mastercode    4663723365
Simlock Server    SIMLOCK SERVER
Simlock Key    2140700000000000
Simlock Profile    0000000000000000
Simlock Key Cnt    0
Simlock FBUS Cnt    0
Simlock [1,1]    State: OPENED    Type: MCC-MNC    Data: 21407F
Simlock [2,1]    State: OPENED    Type: MCC-MNC    Data: 21407F
Simlock [3,1]    State: OPENED    Type: MCC-MNC    Data: 21402F
Simlock [4,1]    State: OPENED    Type: MCC-MNC    Data: 21402F
Simlock NCK    #pw+873340257908542+7#
Unlock finished!

there is a little trick to make it work
Remember because bb5 new security must wait a few seconds to boot
Solution:
after the soft ask you for the bb5 calculation code YES NO, you press POWER button on phone then continue to YES to boot RAP