1. Check firmware version , if it.s 4.70. If so, just flash unit with rh-86 fw 4.90 mcu,ppm,cnt. Write good pm file.
2. after flashing unlock unit. Then do hardware modifications. Change 2 filters. Flash file + pm file here:
http://www.mediafire.com/?yttlcth2wzqJaf operation logs:Read infoPowering the phone...
Reading...
MCU SW version: V 04.70
29-01-07
RH-87
(c) Nokia.
HW version: 6001
PCI version:
UEM version: 1328
UPP version: 12352
RFIC version: 0500
DSP version: P05w45.v48
LCD version: ELBE
PPM version: V 04.70
29-01-07
RH-86_87
(c) Nokia.
MCR
Content Pack version: Content: att
V 04.70
29-03-07
RH-87
(c) Nokia.
Production serial number: RYL105981
Product code: 0544144
Module code: 0202932
Basic production code: 0531164
Flash code:
Order number:
Product specific data:
Long production SN:
ATO:
Default SN type:
IMEI plain: 011191003736869
IMEI spare to net: 0A 11 91 01 30 37 86 06
IMEI SV to net: 03 11 91 01 30 37 86 36 F4
Master Code: 6213514410
Phone type: RH-87, Software version: 04.70, Language Pack: MCR
User code: 12345
Block 1:
Lock 1: CLOSED -> Lock Data: 310150
Block 2:
Lock 1: CLOSED -> Lock Data: 310170
Block 3:
Lock 1: CLOSED -> Lock Data: 311180
Block 4:
Lock 1: CLOSED -> Lock Data: 310410
Block 5:
Lock 1: CLOSED -> Lock Data: 310980
Searching for saved ini...
Checking for file C:\Program Files\ODEON\JAF\JAF_RH-87.ini
Saved INI not found, loading INI list...
Setting local mode...
Reading product code...
Product Code: 0544144
FlashingFILES SET FOR FLASHING:
MCU Flash file: C:\Program Files\Nokia\Phoenix\Products\RH-86\rh86_87__04.90.mcusw
PPM Flash file: C:\Program Files\Nokia\Phoenix\Products\RH-86\rh86_87__04.90.ppm_eh
CNT Flash file: C:\Program Files\Nokia\Phoenix\Products\RH-86\rh86_87__04.90.image_bite_lt
ADSP Flash file: NONE
APE Variant file: NONE
APE User Flash file: NONE
Languages in ppm: English,Lithuanian,Russian
Backing up PM Field 208 as RPL...
Setting local mode...
Reading IMEI...
Reading IMEI data...
Building RPL backup file...
C:\Program Files\ODEON\JAF\ProgData\011191003736869_imei_backup_175304.rpl
Done!
Backup imei OK!
MCU: C:\Program Files\Nokia\Phoenix\Products\RH-86\rh86_87__04.90.mcusw
Booting phone...
MCU ID: 0x3040
BOOT file: C:\Program Files\ODEON\JAF\Flash\u3_2nd.fia
Loader version: 04.46.01 -> Revision: 0007
Boot size is 0x09A8
Boot is ready...
FLASH ID0: 2C7E0001 <=> SPANSION -> 72NS128N Addr0: 0x01000000 - 0x01FFFFFF, SectorSize0: 11
FLASH ID1: 00010000 <=> Flash -> not used Addr1: 0x02000000 - 0x02FFFFFF, SectorSize1: 0
First 16 bytes: AD 7E B6 1A 1B BE 0B E2 7D 58 6B E4 DB EE 65 14
Flash ID is 0x7E2C0100
Flash loader is C:\Program Files\ODEON\JAF\Flash\u3_amd.fia
Loader version: 04.46.01 -> Revision: 0007
Loader size is 0x7528; Loader chk: 84
Loader is ready...
P-key nokia module version 01.01
MSID: 8415363C7D1FFEDB8D4665B414
MSID decoded: 4FE0BAE9001354A9A9000000
FAID: 67758FE3A7FA896547406D98
Operation took 0 minutes 16 seconds...
Erasing...
Found 3 interval(s) to erase
Erasing area: 01000000 - 0101FFFF...
Erasing area: 01020000 - 018DFFFF...
Erasing area: 01EE0000 - 01FDFFFF...
Operation took 0 minutes 47 seconds...
Writing...
Perm. Data Restore OK
Operation took 1 minutes 38 seconds...
Restarting MCU...
CNT: C:\Program Files\Nokia\Phoenix\Products\RH-86\rh86_87__04.90.image_bite_lt
Booting phone...
MCU ID: 0x3040
BOOT file: C:\Program Files\ODEON\JAF\Flash\u3_2nd.fia
Loader version: 04.46.01 -> Revision: 0007
Boot size is 0x09A8
Boot is ready...
FLASH ID0: 2C7E0001 <=> SPANSION -> 72NS128N Addr0: 0x01000000 - 0x01FFFFFF, SectorSize0: 11
FLASH ID1: 00010000 <=> Flash -> not used Addr1: 0x02000000 - 0x02FFFFFF, SectorSize1: 0
First 16 bytes: AD 7E B6 1A 1B BE 0B E2 7D 58 6B E4 DB EE 65 14
Flash ID is 0x7E2C0100
Flash loader is C:\Program Files\ODEON\JAF\Flash\u3_amd.fia
Loader version: 04.46.01 -> Revision: 0007
Loader size is 0x7528; Loader chk: 84
Loader is ready...
P-key nokia module version 01.01
MSID: 84F19C235358A223A5BECF735C
MSID decoded: D26EBAF1001354A9AA000610
FAID: 79FA22DCF2C49571C19F5006
Operation took 0 minutes 17 seconds...
Erasing Content Pack...
Found 1 interval(s) to erase
Erasing area: 01B80000 - 01EDFFFF...
Operation took 0 minutes 15 seconds...
Writing...
Writing converted flash to 128k page
Perm. Data Restore OK
Operation took 0 minutes 14 seconds...
Restarting MCU...
Operation took 0 minutes 1 seconds...
Extracting Content Pack...
Running: (c) Nokia File Server
CNT Extract Skiped.
Operation took 0 minutes 4 seconds...
PPM: C:\Program Files\Nokia\Phoenix\Products\RH-86\rh86_87__04.90.ppm_eh
Booting phone...
MCU ID: 0x3040
BOOT file: C:\Program Files\ODEON\JAF\Flash\u3_2nd.fia
Loader version: 04.46.01 -> Revision: 0007
Boot size is 0x09A8
Boot is ready...
FLASH ID0: 2C7E0001 <=> SPANSION -> 72NS128N Addr0: 0x01000000 - 0x01FFFFFF, SectorSize0: 11
FLASH ID1: 00010000 <=> Flash -> not used Addr1: 0x02000000 - 0x02FFFFFF, SectorSize1: 0
First 16 bytes: AD 7E B6 1A 1B BE 0B E2 7D 58 6B E4 DB EE 65 14
Flash ID is 0x7E2C0100
Flash loader is C:\Program Files\ODEON\JAF\Flash\u3_amd.fia
Loader version: 04.46.01 -> Revision: 0007
Loader size is 0x7528; Loader chk: 64
Loader is ready...
P-key nokia module version 01.01
MSID: 8459D0CCCC8D7AC933D421175D
MSID decoded: 3E4EBAE9001354A9A9000000
FAID: 9DD41165DAA4299F88DA3531
Operation took 0 minutes 16 seconds...
Erasing PPM...
Found 1 interval(s) to erase
Erasing area: 018E0000 - 01B7FFFF...
Operation took 0 minutes 13 seconds...
Writing...
Perm. Data Restore OK
Operation took 0 minutes 18 seconds...
Restarting MCU...
Flashing Done!
Operation took 4 minutes 27 seconds...
After flash processing...
Waiting for phone to boot...
Reading...
Phone type: RH-87, Software version: 04.90
IMEI: 011191003736869
Product Code: 0544144
Resetting PPC...
Done!
Pm write30:04:2008 17:10 -> Powering the phone...
30:04:2008 17:10 -> Writing PM...
30:04:2008 17:10 -> Field: 1, Record: 0, Len: 120
30:04:2008 17:10 -> Field: 1, Record: 2, Len: 90
30:04:2008 17:10 -> Field: 1, Record: 4, Len: 110
30:04:2008 17:10 -> Field: 1, Record: 5, Len: 2
30:04:2008 17:10 -> Field: 1, Record: 6, Len: 90
30:04:2008 17:10 -> Field: 1, Record: 11, Len: 2
30:04:2008 17:10 -> Field: 1, Record: 12, Len: 2
30:04:2008 17:10 -> Field: 2, Record: 0, Len: 384
30:04:2008 17:10 -> Field: 4, Record: 0, Len: 1
30:04:2008 17:10 -> Field: 4, Record: 1, Len: 48
30:04:2008 17:10 -> Field: 4, Record: 2, Len: 44
30:04:2008 17:10 -> Field: 4, Record: 3, Len: 10
30:04:2008 17:10 -> Field: 4, Record: 4, Len: 8
30:04:2008 17:10 -> Field: 4, Record: 5, Len: 8
30:04:2008 17:10 -> Field: 4, Record: 6, Len: 8
30:04:2008 17:10 -> Field: 4, Record: 9, Len: 5
30:04:2008 17:10 -> Field: 4, Record: 16, Len: 4
30:04:2008 17:10 -> Field: 4, Record: 18, Len: 80
30:04:2008 17:10 -> Field: 4, Record: 19, Len: 4
30:04:2008 17:10 -> Field: 7, Record: 0, Len: 4
30:04:2008 17:10 -> Field: 7, Record: 1, Len: 32
30:04:2008 17:10 -> Field: 7, Record: 2, Len: 4
30:04:2008 17:10 -> Field: 8, Record: 0, Len: 12
30:04:2008 17:10 -> Field: 8, Record: 1, Len: 12
30:04:2008 17:10 -> Field: 8, Record: 2, Len: 128
30:04:2008 17:10 -> Field: 8, Record: 3, Len: 128
30:04:2008 17:10 -> Field: 8, Record: 7, Len: 8
30:04:2008 17:10 -> Field: 8, Record: 8, Len: 8
30:04:2008 17:10 -> Field: 8, Record: 9, Len: 8
30:04:2008 17:10 -> Field: 11, Record: 0, Len: 4
30:04:2008 17:10 -> Field: 11, Record: 1, Len: 4
30:04:2008 17:10 -> Field: 11, Record: 2, Len: 4
30:04:2008 17:10 -> Field: 11, Record: 3, Len: 4
30:04:2008 17:10 -> Field: 11, Record: 4, Len: 1
30:04:2008 17:10 -> Field: 11, Record: 5, Len: 6
30:04:2008 17:10 -> Field: 11, Record: 6, Len: 2
30:04:2008 17:10 -> Field: 11, Record: 7, Len: 1
30:04:2008 17:11 -> Field: 11, Record: 8, Len: 1
30:04:2008 17:11 -> Field: 11, Record: 9, Len: 1
30:04:2008 17:11 -> Field: 11, Record: 10, Len: 1
30:04:2008 17:11 -> Field: 11, Record: 11, Len: 1
30:04:2008 17:11 -> Field: 11, Record: 12, Len: 1
30:04:2008 17:11 -> Field: 11, Record: 13, Len: 1
30:04:2008 17:11 -> Field: 11, Record: 14, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 15, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 16, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 17, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 18, Len: 16
30:04:2008 17:11 -> Field: 11, Record: 19, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 20, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 21, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 22, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 23, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 24, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 25, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 26, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 27, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 28, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 29, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 30, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 31, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 32, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 33, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 34, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 35, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 36, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 37, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 38, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 39, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 40, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 41, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 42, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 43, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 44, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 45, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 46, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 47, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 48, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 49, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 50, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 51, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 52, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 53, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 54, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 55, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 56, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 57, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 58, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 59, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 60, Len: 4
30:04:2008 17:11 -> Field: 11, Record: 61, Len: 1
30:04:2008 17:11 -> Field: 11, Record: 62, Len: 4
30:04:2008 17:11 -> Field: 11, Record: 63, Len: 4
30:04:2008 17:11 -> Field: 11, Record: 64, Len: 4
30:04:2008 17:11 -> Field: 11, Record: 65, Len: 4
30:04:2008 17:11 -> Field: 11, Record: 66, Len: 16
30:04:2008 17:11 -> Field: 11, Record: 67, Len: 4
30:04:2008 17:11 -> Field: 11, Record: 68, Len: 2
30:04:2008 17:11 -> Field: 11, Record: 69, Len: 21
30:04:2008 17:11 -> Field: 12, Record: 0, Len: 102
30:04:2008 17:11 -> Done!
Unlock30:04:2008 17:12 -> Powering the phone...
30:04:2008 17:12 -> Unlocking...
30:04:2008 17:12 -> IMEI: 011191003736869
30:04:2008 17:12 -> ASIC: b
30:04:2008 17:12 -> SW version: 04.90
30:04:2008 17:12 -> Selected flash file: C:\Program Files\Nokia\Phoenix\Products\RH-86\rh86_87__04.90.mcusw
Decrypting flash...
30:04:2008 17:12 -> Encrypting....
30:04:2008 17:12 -> CHK Patch found - Unlock Patch found and are not in same block
30:04:2008 17:12 -> Patch status: 01
30:04:2008 17:12 ->
MCU ID: 0x3040
30:04:2008 17:12 -> Algo is ready...
30:04:2008 17:12 -> P-key nokia module version 01.01
30:04:2008 17:12 -> Erasing area: 010A0000 - 010BFFFF...
30:04:2008 17:12 -> Unlocking...
30:04:2008 17:12 -> Checking locks...
30:04:2008 17:12 ->
Block 1:
30:04:2008 17:12 -> Lock 1: OPEN 30:04:2008 17:12 -> Lock 2: OPEN 30:04:2008 17:12 -> Lock 3: OPEN 30:04:2008 17:12 -> Lock 4: OPEN 30:04:2008 17:12 -> Lock 5: OPEN 30:04:2008 17:12 ->
Block 2:
30:04:2008 17:12 -> Lock 1: OPEN 30:04:2008 17:12 -> Lock 2: OPEN 30:04:2008 17:12 -> Lock 3: OPEN 30:04:2008 17:12 -> Lock 4: OPEN 30:04:2008 17:12 -> Lock 5: OPEN 30:04:2008 17:12 ->
Block 3:
30:04:2008 17:12 -> Lock 1: OPEN 30:04:2008 17:12 -> Lock 2: OPEN 30:04:2008 17:12 -> Lock 3: OPEN 30:04:2008 17:12 -> Lock 4: OPEN 30:04:2008 17:12 -> Lock 5: OPEN 30:04:2008 17:12 ->
Block 4:
30:04:2008 17:12 -> Lock 1: OPEN 30:04:2008 17:12 -> Lock 2: OPEN 30:04:2008 17:12 -> Lock 3: OPEN 30:04:2008 17:12 -> Lock 4: OPEN 30:04:2008 17:12 -> Lock 5: OPEN 30:04:2008 17:12 ->
Block 5:
30:04:2008 17:12 -> Lock 1: OPEN 30:04:2008 17:12 -> Lock 2: OPEN 30:04:2008 17:12 -> Lock 3: OPEN 30:04:2008 17:12 -> Lock 4: OPEN 30:04:2008 17:12 -> Lock 5: OPEN 30:04:2008 17:12 ->
Block 6:
30:04:2008 17:12 -> Lock 1: OPEN 30:04:2008 17:12 -> Lock 2: OPEN 30:04:2008 17:12 -> Lock 3: OPEN 30:04:2008 17:12 -> Lock 4: OPEN 30:04:2008 17:12 -> Lock 5: OPEN 30:04:2008 17:12 ->
Block 7:
30:04:2008 17:12 -> Lock 1: OPEN 30:04:2008 17:12 -> Lock 2: OPEN 30:04:2008 17:12 -> Lock 3: OPEN 30:04:2008 17:12 -> Lock 4: OPEN 30:04:2008 17:12 -> Lock 5: OPEN 30:04:2008 17:12 ->
b.r.
