ATF repair SIMLOCK + SUPERDONGLE_KEY 6085 RM198 OK

[GIALAI_GSM]

log bus check bằng mxkey

[Using device: UFS_USB V2.8 (c) SarasSoft 2007.
Library version: 1.0.0.8929(24-06-2010), 1.0.0.14574(24-06-2010)
RAP Data :
SYSTEM ASIC ID: 000000010000022600010006010C192101001101 [RAPGSM ver: 1.1]
EM0 ID: 00000232
EM1 ID: 00000353
PUBLIC ID: 1E900106F56900584D36B2FA7CD5F5A72DC2AD31
ASIC MODE ID: 00
ROOT KEY HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
ROM ID: 191EC665DFAAF68F
SecondaryBoot: rap3gv3_2nd.fg [BB5] version: 1.30.0 revision: 0.0 size: 0x3C00
Supported RAP Ids: 0103192101003000, 010C192101003000, 0103192101013000, 010C192101013000, 0103192101003100, 010C192101003100, 0303192101023000, 030C192101023000, 0303192101033000, 030C192101033000, 0103192101001101, 010C192101001101, 0003192101001002, 000C192101001002, 0013192101001002, 001C192101001002
FlashID0: 0001 002F - 0000 6921 [AMD S29NS256N,256 Mbits] type: NOR,RAP
ExtBUSC: 0000 0000 0000 0000 0000 0000 0000 0000
TransmissionMode: 16Bit
Algorithm: RAP3Gv3_algo.fg [BB5 ALGORITHM] version: 1.40.0 revision: 0.0 size: 0x22C10
Supported RAP Ids: 0103192101003000, 010C192101003000, 0103192101013000, 010C192101013000, 0103192101003100, 010C192101003100, 0303192101023000, 030C192101023000, 0303192101033000, 030C192101033000, 0003192101002000, 000C192101002000, 0003192101002100, 000C192101002100, 0003192101002200, 000C192101002200, 0003192101012200, 000C192101012200, 0103192101001101, 010C192101001101, 0003192101001002, 000C192101001002, 0013192101001002, 001C192101001002
RAP PAPUBKEYS HASH: C44614CCC0A09C4A52B890FA55B4B31AF4787668
TransmissionMode: DDR&TX2
Original Imei: 35806101021600
Original Product code: 0538776
Bluetooth ID: 001D3B95185C

Phone Type: RM-198 (Nokia 6085)
SW Version: V 05.02 08-05-07 RM-198 (c) Nokia.
Imei plain: 35806101021600-0
Product Code: 0541318
Language Pack:
- not available.

SIMLOCK invalid!
SUPERDONGLE_KEY invalid!
- WD timer enabled, phone will reboot itself after 3 min.
SECURITY_TEST passed


SIMLOCK_DATA corrupted!
SIMLOCK_DATA corrupted!

log bus check bằng ATF

AdvanceFBox SendBootCodeEx
InitialiseBootstrap_DCT5 DIR
BootFlashMode_DCT5

************************************************** ****
TIME STARTS HERE
************************************************** ****

BootFlashModeDCT5Ex Succeeded First Time
SYSTEM_ID_RESPONSE_BB5 (0xC0) - 0 (0x00) bytes returned
Number of Sub Blocks 7 (0x07)
1 SYSTEM_ASIC_ID 01
Block Length : 21 (15)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000001
ID DWORD 1 : 00000226
ID DWORD 2 : 00010006
ID DWORD 3 : 010C1921
ID DWORD 4 : 01001101
2 ROM_ID 15
Block Length : 5 (05)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000232
3 ROM_ID 15
Block Length : 5 (05)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000353
4 PUBLIC_ID 12
Block Length : 21 (15)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 1E900106
ID DWORD 1 : F5690058
ID DWORD 2 : 4D36B2FA
ID DWORD 3 : 7CD5F5A7
ID DWORD 4 : 2DC2AD31
5 ASIC_MODE_ID 13
Block Length : 2 (02)
BB ASIC Index : 0 (00) CMT
Mode Id : 00
6 ROOT_KEY_HASH 14
Block Length : 17 (11)
BB ASIC Index : 0 (00) CMT
Hash : BA F3 A9 C3 DB FA 84 54 93 7D B7 7F 2B 88 52 B1
7 ROM_ID 15
Block Length : 9 (09)
BB ASIC Index : 0 (00) CMT
CRC 0 : 191EC665
CRC 1 : DFAAF68F
Checksum BB
SearchForBootstrap_DCT5..
CMT Loader : C:\AdvanceBox Turbo Flasher\Nokia\BB5_Loader\New\RAP3Gv3_2nd.fg
SearchForBootstrap_DCT5 : No Error - 0 (0x00)
Secondary Loader Sent...
ConfigurationRequest_DCT5 (RAM_SIZE_BB5 0x0000)..
MCU_CONFIGURATION_RESPONSE_BB5:
MessageID : C1
SubBlocks : 03
1 Sub Block ID : 10 STORAGE_DEVICE_ID_BB5
Block Length : 0B
BB ASIC Index : CMT 00
Device Type : NOR 00
Device Index : 00
Manufacturer Code : 0001 ->
Device ID : 002F -> 72NS256N
Extended/Fixed ID : 0000
Revision ID : 6921
2 Sub Block ID : 11 STORAGE_DEVICE_CONTENTS_BB5
Block Length : 13
BB ASIC Index : CMT 00
Device Type : NOR 00
Device Index : 00
Device Contents : 00000000000000000000
3 Sub Block ID : 10 STORAGE_DEVICE_ID_BB5
Block Length : 0B
BB ASIC Index : CMT 00
Device Type : MMC 04
Device Index : 00
Manufacturer Code : FFFF -> Flash
Device ID : 0000 -> BAD FLASH TYPE
Extended/Fixed ID : 0000
Revision ID : 0000
Checksum : E6
SearchForBootstrap_DCT5 : No Error - 0 (0x00)
FLS1SendAlgoCodeEx..
SendAlgoCode_DCT5..
SearchForAlgorithm_DCT5..
Looking for ALL Devices...
Searching Algorithm Files NOR (00) ManID :0001 DevID :002F ExtID :0000 RevID :6921
RAP3Gv3_algo.fg
First Algo byte : C0
Flash Descriptor
Manufacturer Code : 0001
Device ID : 002F
Extended/Fixed ID : 0000
Revision ID : 0000
Size : 00200000 (2097152)
VPP Info : 0009
Erase10s : 28
Block1s : 32
BErase1s : 02
Reserved0 : 00
Reserved1 : 00
Reserved2 : 00
VPP INFO : VPP_INFO_3V_MASK VPP_INFO_9V_MASK
C: \AdvanceBox Turbo Flasher\Nokia\BB5_Loader\New\RAP3Gv3_algo.fg
SearchForAlgorithm_DCT5 : No Error - 0 (0x00)
TransmissionTypeRequest_DCT5...
SuggestedType : 01 16BIT
TRANSMISSION_TYPE_REQUEST_BB5 : 59 01 20 01 01 DC
ReturnedType : 01 16BIT
TransmissionTypeRequest_DCT5 : No Error - 0 (0x00)

Uploading ALGO File...
SendAlgoCodeFile_DCT5 : No Error - 0 (0x00)

============================================
OLD Protocol Detected... Using Turbo Mode...
============================================

Pabub KEY Request
PhoneInfoRequest_BB5 (Asic Index 00 )
PHONE_INFO_RESPONSE_BB5
PAPUB_KEYS_HASH_RESP_BB5 2A
BB Asic Index : 01
PAPUB Keys Hash : 00C44614CCC0A09C4A52B890FA55B4B31AF4787668

Scanning Simlock Type...
OK

================================================
SL1/SL2 Phone detected
================================================

FlashInfo.RestartMode : 2
MCU: V 05.02 08-05-07 RM-198 (c) Nokia.
IMEI: 358061010216000
Product code : 0541318
Model : Nokia 6085


******** Reading SimLock ********
Unable to read SP Data..

SIMLOCK_TEST : PASSED
SECURITY_TEST : PASSED
SUPER_DONGLE_TEST : FAILED
> Try "Repair Super Dongle"

================================================
SL3 Phone detected
================================================

* Firmware Version Downgrade will KILL PHONE !!!
* Manual Full Erase WILL KILL PHONE!!!
* Simlocks are in PM 120 Only...
* PM 308 is Write Protected...

đây là log repair ok bằng ATF ok

AdvanceFBox SendBootCodeEx
InitialiseBootstrap_DCT5 DIR
BootFlashMode_DCT5

************************************************** ****
TIME STARTS HERE
************************************************** ****

BootFlashModeDCT5Ex Succeeded First Time
SYSTEM_ID_RESPONSE_BB5 (0xC0) - 0 (0x00) bytes returned
Number of Sub Blocks 7 (0x07)
1 SYSTEM_ASIC_ID 01
Block Length : 21 (15)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000001
ID DWORD 1 : 00000226
ID DWORD 2 : 00010006
ID DWORD 3 : 010C1921
ID DWORD 4 : 01001101
2 ROM_ID 15
Block Length : 5 (05)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000232
3 ROM_ID 15
Block Length : 5 (05)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 00000353
4 PUBLIC_ID 12
Block Length : 21 (15)
BB ASIC Index : 0 (00) CMT
ID DWORD 0 : 1E900106
ID DWORD 1 : F5690058
ID DWORD 2 : 4D36B2FA
ID DWORD 3 : 7CD5F5A7
ID DWORD 4 : 2DC2AD31
5 ASIC_MODE_ID 13
Block Length : 2 (02)
BB ASIC Index : 0 (00) CMT
Mode Id : 00
6 ROOT_KEY_HASH 14
Block Length : 17 (11)
BB ASIC Index : 0 (00) CMT
Hash : BA F3 A9 C3 DB FA 84 54 93 7D B7 7F 2B 88 52 B1
7 ROM_ID 15
Block Length : 9 (09)
BB ASIC Index : 0 (00) CMT
CRC 0 : 191EC665
CRC 1 : DFAAF68F
Checksum BB
SearchForBootstrap_DCT5..
CMT Loader : C:\AdvanceBox Turbo Flasher\Nokia\BB5_Loader\New\RAP3Gv3_2nd.fg
SearchForBootstrap_DCT5 : No Error - 0 (0x00)
Secondary Loader Sent...
ConfigurationRequest_DCT5 (RAM_SIZE_BB5 0x0000)..
MCU_CONFIGURATION_RESPONSE_BB5:
MessageID : C1
SubBlocks : 03
1 Sub Block ID : 10 STORAGE_DEVICE_ID_BB5
Block Length : 0B
BB ASIC Index : CMT 00
Device Type : NOR 00
Device Index : 00
Manufacturer Code : 0001 ->
Device ID : 002F -> 72NS256N
Extended/Fixed ID : 0000
Revision ID : 6921
2 Sub Block ID : 11 STORAGE_DEVICE_CONTENTS_BB5
Block Length : 13
BB ASIC Index : CMT 00
Device Type : NOR 00
Device Index : 00
Device Contents : 00000000000000000000
3 Sub Block ID : 10 STORAGE_DEVICE_ID_BB5
Block Length : 0B
BB ASIC Index : CMT 00
Device Type : MMC 04
Device Index : 00
Manufacturer Code : FFFF -> Flash
Device ID : 0000 -> BAD FLASH TYPE
Extended/Fixed ID : 0000
Revision ID : 0000
Checksum : E6
SearchForBootstrap_DCT5 : No Error - 0 (0x00)
FLS1SendAlgoCodeEx..
SendAlgoCode_DCT5..
SearchForAlgorithm_DCT5..
Looking for ALL Devices...
Searching Algorithm Files NOR (00) ManID :0001 DevID :002F ExtID :0000 RevID :6921
RAP3Gv3_algo.fg
First Algo byte : C0
Flash Descriptor
Manufacturer Code : 0001
Device ID : 002F
Extended/Fixed ID : 0000
Revision ID : 0000
Size : 00200000 (2097152)
VPP Info : 0009
Erase10s : 28
Block1s : 32
BErase1s : 02
Reserved0 : 00
Reserved1 : 00
Reserved2 : 00
VPP INFO : VPP_INFO_3V_MASK VPP_INFO_9V_MASK
C: \AdvanceBox Turbo Flasher\Nokia\BB5_Loader\New\RAP3Gv3_algo.fg
SearchForAlgorithm_DCT5 : No Error - 0 (0x00)
TransmissionTypeRequest_DCT5...
SuggestedType : 01 16BIT
TRANSMISSION_TYPE_REQUEST_BB5 : 59 01 20 01 01 DC
ReturnedType : 01 16BIT
TransmissionTypeRequest_DCT5 : No Error - 0 (0x00)

Uploading ALGO File...
SendAlgoCodeFile_DCT5 : No Error - 0 (0x00)

============================================
OLD Protocol Detected... Using Turbo Mode...
============================================

Pabub KEY Request
PhoneInfoRequest_BB5 (Asic Index 00 )
PHONE_INFO_RESPONSE_BB5
PAPUB_KEYS_HASH_RESP_BB5 2A
BB Asic Index : 01
PAPUB Keys Hash : 00C44614CCC0A09C4A52B890FA55B4B31AF4787668

Scanning Simlock Type...
OK

================================================
SL1/SL2 Phone detected
================================================

FlashInfo.RestartMode : 2
MCU: V 05.02 08-05-07 RM-198 (c) Nokia.
IMEI: 358061010216000
Product code : 0541318
Model : Nokia 6085


******** Reading SimLock ********
Unable to read SP Data..

SIMLOCK_TEST : PASSED
SECURITY_TEST : PASSED
SUPER_DONGLE_TEST : PASSED

================================================
SL3 Phone detected
================================================

* Firmware Version Downgrade will KILL PHONE !!!
* Manual Full Erase WILL KILL PHONE!!!
* Simlocks are in PM 120 Only...
* PM 308 is Write Protected...