GSM-Forum

GSM-Forum (https://forum.gsmhosting.com/vbb/)
-   Nokia Base Band 5 ( BB-5 ) (https://forum.gsmhosting.com/vbb/f299/)
-   -   Dead BB5 Usb Flashing + Downgrading Via Usb Without Box 101% Tested. !!! (https://forum.gsmhosting.com/vbb/f299/dead-bb5-usb-flashing-downgrading-via-usb-without-box-101-tested-668504/)

kashi4gul 01-19-2009 19:05

Dead BB5 Usb Flashing + Downgrading Via Usb Without Box 101% Tested. !!!
 
Hi to all gsm host's,

We can flash to Dead Phone without any Box by using this latest
J.A.F Cracked 1.98.62 Via Dead Usb

Download Link: http://www.4shared.com/file/81442708...ulator_v4.html

Dead Usb Screen Shot:

http://www.freeimagehosting.net/uploads/ad895f779f.jpg

Log (6300 RM-217) Via Dead Usb:

Code:

JAF version 1.98.62
Detected PKEY: 9000A86B
Card life counter: 99.99%
P-key nokia module version 01.02
FBUS INTERFACE NOT CONNECTED!!!
USB Cable Driver version: 6.86.15.0
Changing mode...Done!
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
Searching for default location of ini...
Checking path: C:\Program Files\Common Files\Nokia\DataPackage\Products\RM-217\
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
Scanning ini files...
Searching for default location of ini...
Checking path: C:\Program Files\Common Files\Nokia\DataPackage\Products\RM-217\
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
FILES SET FOR FLASHING:
MCU Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.mcusw
PPM Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.ppm_a
CNT Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.image_a
APE Variant file: NONE
Languages in ppm: English,German,Finish,Swedish,Danish,Norwegian,Icelandic
Detected P-KEY: 9000A86B
P-key nokia module version 01.02
Init usb communication...
PRESS POWER ON NOW!
Searching for phone...Found
Sending RAW loader...
Using 06.02.002
    Elf2flash 02.33.000 RAW loader...
Patching RAW boot step1...
Patching RAW boot step3...
Sending RAW Loader...
...................Loader Sent!
Stage 2 starting...............................................................Loader Sent!
Stage 3 starting..................Phone prepared OK!
Waiting for the phone to boot...
Searching for phone...
Status byte: 8000
Selecting CMT flash...
Result: 0000
Phone is in flash mode...
CMT blocks: 1424, APE blocks: 0
Erasing cmt...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.mcusw...
Erasing cmt zone 00000000 - 000006BF ... Erase result: 0000
Erasing cmt zone 000006C0 - 0001FFFF ... Erase result: 0000
Erasing cmt zone 00020000 - 0007FFFF ... Erase result: 0000
Erasing cmt zone 00080000 - 000DFFFF ... Erase result: 0000
Erasing cmt zone 00100000 - 001FFFFF ... Erase result: 0000
Erasing cmt zone 00200000 - 0031FFFF ... Erase result: 0000
Erasing cmt zone 00320000 - 0105FFFF ... Erase result: 0000
Erasing cmt zone 01060000 - 01067FFF ... Erase result: 0000
Erasing cmt zone 01068000 - 0107FFFF ... Erase result: 0000
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.ppm_a...
Erasing cmt zone 01080000 - 015FFFFF ... Erase result: 0000
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.image_a...
Erasing cmt zone 01600000 - 01FDFFFF ... Erase result: 0000
Send CMT CFG...
Writing cmt...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.mcusw...
Sending CMT HASH for NOLO
Sending CMT HASH for KEYS
Sending CMT HASH for PRIMAPP
Sending CMT HASH for PASUBTOC
cmt->PAPUB_CERTIFICATE_DATA_BB5 block detected
cmt->PAPUB_CERTIFICATE_DATA_BB5 block detected, sending...
Sending CMT HASH for UPDAPP
Sending CMT HASH for DSP0
Sending CMT HASH for MCUSW
Sending CMT HASH for PMM_CONF
Sending CMT HASH for SBIF_CONF
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.ppm_a...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.image_a...
Rebooting...
Finishing CMT session...
Restarting CMT...
Pooling phone...
MCUSW: V 06.60
21-05-08
RM-217
(c) Nokia.         
APESW: (null)
VariantSW: (null)
Prodcode: 0537631
Done!


We can also Downgrade to BB5 Without Using Box (Interface)
by only Usb.

Downgrading Screen Shot:

http://www.freeimagehosting.net/uploads/fa396bde2b.jpg

Downgrading (6300 RM-217) Via Usb:

Code:

JAF version 1.98.62
Detected PKEY: 90009A4F
Card life counter: 99.99%
P-key nokia module version 01.02
FBUS INTERFACE NOT CONNECTED!!!
USB Cable Driver version: 6.86.15.0
Changing mode...Done!
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
Searching for default location of ini...
Checking path: C:\Program Files\Common Files\Nokia\DataPackage\Products\RM-217\
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
Scanning ini files...
Searching for default location of ini...
Checking path: C:\Program Files\Common Files\Nokia\DataPackage\Products\RM-217\
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
FILES SET FOR FLASHING:
MCU Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.mcusw
PPM Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.ppm_a
CNT Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.image_a
APE Variant file: NONE
Languages in ppm: English,German,Finish,Swedish,Danish,Norwegian,Icelandic
Backing up CRT...
Detected P-KEY: 90009A4F
P-key nokia module version 01.02
Init usb communication...
Reading IMEI...
C:\Program Files\ODEON\JAF\ProgData\359538017854627_CRT_backup_2144191.pm
Done!
Backup CRT OK!
Preparing for downgrade...
Detected P-KEY: 90009A4F
P-key nokia module version 01.02
Init usb communication...
Phone ready for downgrade!

Detected P-KEY: 90009A4F
P-key nokia module version 01.02
Init usb communication...
Searching for phone...Found
Reading SW version...06.60
Reading battery value...3999 mV
Init usb flashing...
Reading flashid... 128k flash detected.
CMT: 220800EC <=> SAMSUNG (SEC) -> K8F5615ETM/K5G5629ATD
APE: 00000000 <=> Flash -> not detected
Verifing ADL communication... Status byte 2
Scanning selected flash files...
Found CMT ULO server in flash file...
ADL->Loader: Update Application Loader -> Single Chip
Loader len: 240192, CHK: 0x26DB
ADL -> Sending loader...
..............................................................................................................................
Waiting for the phone to boot...
Searching for phone...
Status byte: 0400
Selecting CMT flash...
Result: 0000
Phone is in flash mode...
CMT blocks: 1408, APE blocks: 0
Erasing cmt...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.mcusw...
Erasing cmt zone 00000000 - 000006BF ... Erase result: 0000
Erasing cmt zone 000006C0 - 0001FFFF ... Erase result: 0000
Erasing cmt zone 00020000 - 0007FFFF ... Erase result: 0000
Erasing cmt zone 00080000 - 000DFFFF ... Erase result: 0000
Erasing cmt zone 00100000 - 001FFFFF ... Erase result: 0000
Erasing cmt zone 00200000 - 0031FFFF ... Erase result: 0000
Erasing cmt zone 00320000 - 0105FFFF ... Erase result: 0000
Erasing cmt zone 01060000 - 01067FFF ... Erase result: 0000
Erasing cmt zone 01068000 - 0107FFFF ... Erase result: 0000
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.ppm_a...
Erasing cmt zone 01080000 - 015FFFFF ... Erase result: 0000
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.image_a...
Erasing cmt zone 01600000 - 01FDFFFF ... Erase result: 0000
Send CMT CFG...
Writing cmt...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.mcusw...
Sending CMT HASH for NOLO
Sending CMT HASH for KEYS
Sending CMT HASH for PRIMAPP
Sending CMT HASH for PASUBTOC
cmt->PAPUB_CERTIFICATE_DATA_BB5 block detected
cmt->PAPUB_CERTIFICATE_DATA_BB5 block detected, sending...
Sending CMT HASH for UPDAPP
Sending CMT HASH for DSP0
Sending CMT HASH for MCUSW
Sending CMT HASH for PMM_CONF
Sending CMT HASH for SBIF_CONF
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.ppm_a...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.image_a...
Writing 128k page converted flash...
Rebooting...
Restarting CMT...
Pooling phone...
MCUSW: V 05.50
14-08-07
RM-217
(c) Nokia.         
APESW: (null)
VariantSW: (null)
Prodcode: 0537631
Done!

No doubt it will work with Fbus Flashing:

Log (6300 RM-217) Via Fbus:

Code:

JAF version 1.98.62
Detected PKEY: 9000A6B1
Card life counter: 99.99%
P-key nokia module version 01.02
Detected JAF INTERFACE version: 01.B1, Driver version: 40000, Library version: 30107
JAF DCT4/BB5 LOADERS DIR: C:\Program Files\ODEON\JAF\Flash\
JAF DCT4/BB5 PRODUCT DIR: C:\Program Files\Nokia\Phoenix\Products\
JAF USB LOADERS DIR: C:\Program Files\ODEON\JAF\FlashUSB\
JAF DCT3/DCTL LOADERS DIR: C:\Program Files\ODEON\JAF\Flash3\
USB Cable Driver version: 6.85.10.0
Changing mode...Done!
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
Searching for default location of ini...
Checking path: C:\Program Files\Common Files\Nokia\DataPackage\Products\RM-217\
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
Scanning ini files...
Searching for default location of ini...
Checking path: C:\Program Files\Common Files\Nokia\DataPackage\Products\RM-217\
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
FILES SET FOR FLASHING:
MCU Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__07.21.mcusw
PPM Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__07.21.ppm_a
CNT Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__07.21.image_a
APE Variant file: NONE
Languages in ppm: English,German,Finish,Swedish,Danish,Norwegian,Icelandic
Manual mode selected, version can't be checked!
Booting phone...
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101001101
Asic Mode ID: 00
Asic EM ID: 00000353
Asic Public ID: 10C0000F3F9C6D565FD10FD46554885FEFDA4D51
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 191EC665DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220800EC <=> SAMSUNG (SEC) -> K8F5615ETM/K5G5629ATD
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
Sending CRT data...
No convertion block detected or file already converted.
Erasing...
Operation took 0 minutes 39 seconds...
Writing...
Stage 1
Sending CMT HASH for NOLO
Sending CMT HASH for KEYS
Sending CMT HASH for PRIMAPP
Sending CMT HASH for PASUBTOC
Sending CMT PUB KEYS...
Sending CMT HASH for UPDAPP
Sending CMT HASH for DSP0
Sending CMT HASH for MCUSW
Sending CMT HASH for PMM_CONF
Sending CMT HASH for SBIF_CONF
Operation took 6 minutes 1 seconds...
Reseting phone...
PPM: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__07.21.ppm_a
Booting phone...
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101001101
Asic Mode ID: 00
Asic EM ID: 00000353
Asic Public ID: 10C0000F3F9C6D565FD10FD46554885FEFDA4D51
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 191EC665DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220800EC <=> SAMSUNG (SEC) -> K8F5615ETM/K5G5629ATD
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 4 seconds...
No convertion block detected or file already converted.
Erasing...
Operation took 0 minutes 12 seconds...
Writing...
Stage 1
Operation took 1 minutes 51 seconds...
Reseting phone...
CNT: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__07.21.image_a
Booting phone...
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101001101
Asic Mode ID: 00
Asic EM ID: 00000353
Asic Public ID: 10C0000F3F9C6D565FD10FD46554885FEFDA4D51
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 191EC665DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220800EC <=> SAMSUNG (SEC) -> K8F5615ETM/K5G5629ATD
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 4 seconds...
Erasing...
Operation took 0 minutes 17 seconds...
Writing...
Writing converted flash to 128k page
Operation took 1 minutes 59 seconds...
Reseting phone...
Done!
Total time: 11 Minutes, 15 Seconds
DCT4/BB5 counter: 1598
After flash processing...
Waiting for phone to boot...
Reading...
Phone type: RM-217, Software version: 07.21
IMEI: 359538017854627
APE Ver: (null)
Variant Ver: (null)
Product Code: 0537631
Done!


And if you need to Write PM Without Using SX4, so i already posted
how to Pm will right without SX4 Auth Service:
Read Here: http://forum.gsmhosting.com/vbb/show...ite+bb5+pm+sx4



Cheers!

http://www.freeimagehosting.net/uploads/24a7048e4e.jpg

If you want to pay "Thanks" so plz Click To "Thanks" button.

B.R.,
kashi4gul :)

hundred8 01-19-2009 21:12

Great
Great
Great

reallllllllly great Work.
Kashi You are Genius.
Hope to Find More Good and Improve Updates from You.

LoNg LiVe MY Friend

Thanks for This Very Nice Info.

gsmwwirez 01-19-2009 21:24

Excellent testing of crack software, yes we need more people to keep on testing. So far working like original PKEY good news..:D

gadgets23 01-19-2009 23:11

so is there any way to use a standard FBUS cable (on COM port)?
and therefore no need for a box ?

or is it the actual box that does the lock calculations ? or just a pass through ?

cheers Mick ...

kashi4gul 01-19-2009 23:23

Quote:

Originally Posted by gadgets23 (Post 4075174)
so is there any way to use a standard FBUS cable (on COM port)?
and therefore no need for a box ?

or is it the actual box that does the lock calculations ? or just a pass through ?

cheers Mick ...

if you ask me trully so i never look the Fbus cable which pluged in ComPort. :)

ComPort and Fbus are two different types of cable.

Fbus cable has RJ45 connector which can not plugin any port
and u know very well abt ComPort cable.
therfor if you want flash Via Fbus so u must use box.




B.R.,
kashi4gul

americantel 01-19-2009 23:51

good information of those post it is good to go arranging but post to see if you encuenta fails

chimeto 01-20-2009 00:17

yee drink :))))))))))))))))

gsmwwirez 01-20-2009 01:12

Quote:

Originally Posted by gadgets23 (Post 4075174)
so is there any way to use a standard FBUS cable (on COM port)?
and therefore no need for a box ?

or is it the actual box that does the lock calculations ? or just a pass through ?

cheers Mick ...

Well I always looked as JAF box and UFS box was a special (USB/com port) FDTI CABLE anyway. And mini-ufs proves the point.

BR

quickgsm 01-20-2009 01:21

Quote:

Originally Posted by kashi4gul (Post 4074557)
Hi to all gsm host's,

We can flash to Dead Phone without any Box by using this latest
J.A.F Cracked 1.98.62 Via Dead Usb

Download Link: http://www.4shared.com/file/81442708...ulator_v4.html

Dead Usb Screen Shot:

http://www.freeimagehosting.net/uploads/ad895f779f.jpg

Log (6300 RM-217) Via Dead Usb:

Code:

JAF version 1.98.62
Detected PKEY: 9000A86B
Card life counter: 99.99%
P-key nokia module version 01.02
FBUS INTERFACE NOT CONNECTED!!!
USB Cable Driver version: 6.86.15.0
Changing mode...Done!
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
Searching for default location of ini...
Checking path: C:\Program Files\Common Files\Nokia\DataPackage\Products\RM-217\
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
Scanning ini files...
Searching for default location of ini...
Checking path: C:\Program Files\Common Files\Nokia\DataPackage\Products\RM-217\
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
FILES SET FOR FLASHING:
MCU Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.mcusw
PPM Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.ppm_a
CNT Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.image_a
APE Variant file: NONE
Languages in ppm: English,German,Finish,Swedish,Danish,Norwegian,Icelandic
Detected P-KEY: 9000A86B
P-key nokia module version 01.02
Init usb communication...
PRESS POWER ON NOW!
Searching for phone...Found
Sending RAW loader...
Using 06.02.002
    Elf2flash 02.33.000 RAW loader...
Patching RAW boot step1...
Patching RAW boot step3...
Sending RAW Loader...
...................Loader Sent!
Stage 2 starting...............................................................Loader Sent!
Stage 3 starting..................Phone prepared OK!
Waiting for the phone to boot...
Searching for phone...
Status byte: 8000
Selecting CMT flash...
Result: 0000
Phone is in flash mode...
CMT blocks: 1424, APE blocks: 0
Erasing cmt...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.mcusw...
Erasing cmt zone 00000000 - 000006BF ... Erase result: 0000
Erasing cmt zone 000006C0 - 0001FFFF ... Erase result: 0000
Erasing cmt zone 00020000 - 0007FFFF ... Erase result: 0000
Erasing cmt zone 00080000 - 000DFFFF ... Erase result: 0000
Erasing cmt zone 00100000 - 001FFFFF ... Erase result: 0000
Erasing cmt zone 00200000 - 0031FFFF ... Erase result: 0000
Erasing cmt zone 00320000 - 0105FFFF ... Erase result: 0000
Erasing cmt zone 01060000 - 01067FFF ... Erase result: 0000
Erasing cmt zone 01068000 - 0107FFFF ... Erase result: 0000
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.ppm_a...
Erasing cmt zone 01080000 - 015FFFFF ... Erase result: 0000
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.image_a...
Erasing cmt zone 01600000 - 01FDFFFF ... Erase result: 0000
Send CMT CFG...
Writing cmt...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.mcusw...
Sending CMT HASH for NOLO
Sending CMT HASH for KEYS
Sending CMT HASH for PRIMAPP
Sending CMT HASH for PASUBTOC
cmt->PAPUB_CERTIFICATE_DATA_BB5 block detected
cmt->PAPUB_CERTIFICATE_DATA_BB5 block detected, sending...
Sending CMT HASH for UPDAPP
Sending CMT HASH for DSP0
Sending CMT HASH for MCUSW
Sending CMT HASH for PMM_CONF
Sending CMT HASH for SBIF_CONF
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.ppm_a...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__06.60.image_a...
Rebooting...
Finishing CMT session...
Restarting CMT...
Pooling phone...
MCUSW: V 06.60
21-05-08
RM-217
(c) Nokia.         
APESW: (null)
VariantSW: (null)
Prodcode: 0537631
Done!


We can also Downgrade to BB5 Without Using Box (Interface)
by only Usb.

Downgrading Screen Shot:

http://www.freeimagehosting.net/uploads/fa396bde2b.jpg

Downgrading (6300 RM-217) Via Usb:

Code:

JAF version 1.98.62
Detected PKEY: 90009A4F
Card life counter: 99.99%
P-key nokia module version 01.02
FBUS INTERFACE NOT CONNECTED!!!
USB Cable Driver version: 6.86.15.0
Changing mode...Done!
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
Searching for default location of ini...
Checking path: C:\Program Files\Common Files\Nokia\DataPackage\Products\RM-217\
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
Scanning ini files...
Searching for default location of ini...
Checking path: C:\Program Files\Common Files\Nokia\DataPackage\Products\RM-217\
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
FILES SET FOR FLASHING:
MCU Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.mcusw
PPM Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.ppm_a
CNT Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.image_a
APE Variant file: NONE
Languages in ppm: English,German,Finish,Swedish,Danish,Norwegian,Icelandic
Backing up CRT...
Detected P-KEY: 90009A4F
P-key nokia module version 01.02
Init usb communication...
Reading IMEI...
C:\Program Files\ODEON\JAF\ProgData\359538017854627_CRT_backup_2144191.pm
Done!
Backup CRT OK!
Preparing for downgrade...
Detected P-KEY: 90009A4F
P-key nokia module version 01.02
Init usb communication...
Phone ready for downgrade!

Detected P-KEY: 90009A4F
P-key nokia module version 01.02
Init usb communication...
Searching for phone...Found
Reading SW version...06.60
Reading battery value...3999 mV
Init usb flashing...
Reading flashid... 128k flash detected.
CMT: 220800EC <=> SAMSUNG (SEC) -> K8F5615ETM/K5G5629ATD
APE: 00000000 <=> Flash -> not detected
Verifing ADL communication... Status byte 2
Scanning selected flash files...
Found CMT ULO server in flash file...
ADL->Loader: Update Application Loader -> Single Chip
Loader len: 240192, CHK: 0x26DB
ADL -> Sending loader...
..............................................................................................................................
Waiting for the phone to boot...
Searching for phone...
Status byte: 0400
Selecting CMT flash...
Result: 0000
Phone is in flash mode...
CMT blocks: 1408, APE blocks: 0
Erasing cmt...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.mcusw...
Erasing cmt zone 00000000 - 000006BF ... Erase result: 0000
Erasing cmt zone 000006C0 - 0001FFFF ... Erase result: 0000
Erasing cmt zone 00020000 - 0007FFFF ... Erase result: 0000
Erasing cmt zone 00080000 - 000DFFFF ... Erase result: 0000
Erasing cmt zone 00100000 - 001FFFFF ... Erase result: 0000
Erasing cmt zone 00200000 - 0031FFFF ... Erase result: 0000
Erasing cmt zone 00320000 - 0105FFFF ... Erase result: 0000
Erasing cmt zone 01060000 - 01067FFF ... Erase result: 0000
Erasing cmt zone 01068000 - 0107FFFF ... Erase result: 0000
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.ppm_a...
Erasing cmt zone 01080000 - 015FFFFF ... Erase result: 0000
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.image_a...
Erasing cmt zone 01600000 - 01FDFFFF ... Erase result: 0000
Send CMT CFG...
Writing cmt...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.mcusw...
Sending CMT HASH for NOLO
Sending CMT HASH for KEYS
Sending CMT HASH for PRIMAPP
Sending CMT HASH for PASUBTOC
cmt->PAPUB_CERTIFICATE_DATA_BB5 block detected
cmt->PAPUB_CERTIFICATE_DATA_BB5 block detected, sending...
Sending CMT HASH for UPDAPP
Sending CMT HASH for DSP0
Sending CMT HASH for MCUSW
Sending CMT HASH for PMM_CONF
Sending CMT HASH for SBIF_CONF
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.ppm_a...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__05.50.image_a...
Writing 128k page converted flash...
Rebooting...
Restarting CMT...
Pooling phone...
MCUSW: V 05.50
14-08-07
RM-217
(c) Nokia.         
APESW: (null)
VariantSW: (null)
Prodcode: 0537631
Done!

No doubt it will work with Fbus Flashing:

Log (6300 RM-217) Via Fbus:

Code:

JAF version 1.98.62
Detected PKEY: 9000A6B1
Card life counter: 99.99%
P-key nokia module version 01.02
Detected JAF INTERFACE version: 01.B1, Driver version: 40000, Library version: 30107
JAF DCT4/BB5 LOADERS DIR: C:\Program Files\ODEON\JAF\Flash\
JAF DCT4/BB5 PRODUCT DIR: C:\Program Files\Nokia\Phoenix\Products\
JAF USB LOADERS DIR: C:\Program Files\ODEON\JAF\FlashUSB\
JAF DCT3/DCTL LOADERS DIR: C:\Program Files\ODEON\JAF\Flash3\
USB Cable Driver version: 6.85.10.0
Changing mode...Done!
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
Searching for default location of ini...
Checking path: C:\Program Files\Common Files\Nokia\DataPackage\Products\RM-217\
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
Scanning ini files...
Searching for default location of ini...
Checking path: C:\Program Files\Common Files\Nokia\DataPackage\Products\RM-217\
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-217\
FILES SET FOR FLASHING:
MCU Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__07.21.mcusw
PPM Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__07.21.ppm_a
CNT Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__07.21.image_a
APE Variant file: NONE
Languages in ppm: English,German,Finish,Swedish,Danish,Norwegian,Icelandic
Manual mode selected, version can't be checked!
Booting phone...
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101001101
Asic Mode ID: 00
Asic EM ID: 00000353
Asic Public ID: 10C0000F3F9C6D565FD10FD46554885FEFDA4D51
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 191EC665DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220800EC <=> SAMSUNG (SEC) -> K8F5615ETM/K5G5629ATD
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
Sending CRT data...
No convertion block detected or file already converted.
Erasing...
Operation took 0 minutes 39 seconds...
Writing...
Stage 1
Sending CMT HASH for NOLO
Sending CMT HASH for KEYS
Sending CMT HASH for PRIMAPP
Sending CMT HASH for PASUBTOC
Sending CMT PUB KEYS...
Sending CMT HASH for UPDAPP
Sending CMT HASH for DSP0
Sending CMT HASH for MCUSW
Sending CMT HASH for PMM_CONF
Sending CMT HASH for SBIF_CONF
Operation took 6 minutes 1 seconds...
Reseting phone...
PPM: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__07.21.ppm_a
Booting phone...
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101001101
Asic Mode ID: 00
Asic EM ID: 00000353
Asic Public ID: 10C0000F3F9C6D565FD10FD46554885FEFDA4D51
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 191EC665DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220800EC <=> SAMSUNG (SEC) -> K8F5615ETM/K5G5629ATD
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 4 seconds...
No convertion block detected or file already converted.
Erasing...
Operation took 0 minutes 12 seconds...
Writing...
Stage 1
Operation took 1 minutes 51 seconds...
Reseting phone...
CNT: C:\Program Files\Nokia\Phoenix\Products\RM-217\rm217__07.21.image_a
Booting phone...
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101001101
Asic Mode ID: 00
Asic EM ID: 00000353
Asic Public ID: 10C0000F3F9C6D565FD10FD46554885FEFDA4D51
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 191EC665DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220800EC <=> SAMSUNG (SEC) -> K8F5615ETM/K5G5629ATD
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 4 seconds...
Erasing...
Operation took 0 minutes 17 seconds...
Writing...
Writing converted flash to 128k page
Operation took 1 minutes 59 seconds...
Reseting phone...
Done!
Total time: 11 Minutes, 15 Seconds
DCT4/BB5 counter: 1598
After flash processing...
Waiting for phone to boot...
Reading...
Phone type: RM-217, Software version: 07.21
IMEI: 359538017854627
APE Ver: (null)
Variant Ver: (null)
Product Code: 0537631
Done!


And if you need to Write PM Without Using SX4, so i already posted
how to Pm will right without SX4 Auth Service:
Read Here: http://forum.gsmhosting.com/vbb/show...ite+bb5+pm+sx4



Cheers!

http://www.freeimagehosting.net/uploads/24a7048e4e.jpg

If you want to pay "Thanks" so plz Click To "Thanks" button.

B.R.,
kashi4gul :)



good work thanks for info!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

urshobhit 01-20-2009 08:42

gsmhosting is very lucky who got a gr8 guy like kashi.
he shoud be the moderaor of gsmhosting.

kashi4gul 01-20-2009 13:24

3500c RM-272 Flash Via Dead Usb (Without Box/Interface)

Log 3500c Dead Usb

Quote:

JAF version 1.98.62
Detected PKEY: 9000C9BC
Card life counter: 99.99%
P-key nokia module version 01.02
FBUS INTERFACE NOT CONNECTED!!!
USB Cable Driver version: 6.85.10.0
Changing mode...Done!
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-272\

Searching for default location of ini...
Checking path: C:\Program Files\Common Files\Nokia\DataPackage\Products\RM-272\
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-272\
Scanning ini files...
Searching for default location of ini...
Checking path: C:\Program Files\Common Files\Nokia\DataPackage\Products\RM-272\
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-272\
FILES SET FOR FLASHING:
MCU Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-272\rm272__06.01.mcusw
PPM Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-272\rm272__06.01.ppm_s
CNT Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-272\rm272__06.01.image_s_pink
APE Variant file: NONE
Languages in ppm: English,Chinese Trad ,Chinese Simpl,Malaysian
Detected P-KEY: 9000C9BC
P-key nokia module version 01.02
Init usb communication...
PRESS POWER ON NOW!
Searching for phone...Found
Sending RAW loader...
Using 06.02.002
Elf2flash 02.33.000 RAW loader...
Patching RAW boot step1...
Patching RAW boot step3...
Sending RAW Loader...
...................Loader Sent!
Stage 2 starting.......................................... .....................Loader Sent!
Stage 3 starting..................Phone prepared OK!
Waiting for the phone to boot...
Searching for phone...
Status byte: 0400
Selecting CMT flash...
Result: 0000
Phone is in flash mode...
CMT blocks: 1669, APE blocks: 0
Erasing cmt...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-272\rm272__06.01.mcusw...
Erasing cmt zone 00000000 - 000006BF ... Erase result: 0000
Erasing cmt zone 000006C0 - 0001FFFF ... Erase result: 0000
Erasing cmt zone 00020000 - 0007FFFF ... Erase result: 0000
Erasing cmt zone 00080000 - 000DFFFF ... Erase result: 0000
Erasing cmt zone 00100000 - 001FFFFF ... Erase result: 0000
Erasing cmt zone 00200000 - 0031FFFF ... Erase result: 0000
Erasing cmt zone 00320000 - 0105FFFF ... Erase result: 0000
Erasing cmt zone 01060000 - 01067FFF ... Erase result: 0000
Erasing cmt zone 01068000 - 0107FFFF ... Erase result: 0000
Processing C:\Program Files\Nokia\Phoenix\Products\RM-272\rm272__06.01.ppm_s...
Erasing cmt zone 01080000 - 0151FFFF ... Erase result: 0000
Processing C:\Program Files\Nokia\Phoenix\Products\RM-272\rm272__06.01.image_s_pink...
Erasing cmt zone 01520000 - 01FDFFFF ... Erase result: 0000
Send CMT CFG...
Writing cmt...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-272\rm272__06.01.mcusw...
Sending CMT HASH for NOLO
Sending CMT HASH for KEYS
Sending CMT HASH for PRIMAPP
Sending CMT HASH for PASUBTOC
cmt->PAPUB_CERTIFICATE_DATA_BB5 block detected
cmt->PAPUB_CERTIFICATE_DATA_BB5 block detected
cmt->PAPUB_CERTIFICATE_DATA_BB5 block detected, sending...
cmt->PAPUB keys already sent...
Sending CMT HASH for UPDAPP
Sending CMT HASH for DSP0
Sending CMT HASH for MCUSW
Sending CMT HASH for PMM_CONF
Sending CMT HASH for SBIF_CONF
Processing C:\Program Files\Nokia\Phoenix\Products\RM-272\rm272__06.01.ppm_s...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-272\rm272__06.01.image_s_pink...
Rebooting...
Restarting CMT...
Pooling phone...
MCUSW: V 06.01
16-01-08
RM-272
(c) Nokia.
APESW: (null)
VariantSW: (null)
Prodcode: 0549248
Done!
ofcourse it can also downgrade via usb only. . .

B.R.,
kashi4gul

Makave 01-20-2009 13:43

this is crap cracked things doesn't do somthing complete

mobile-phone-service 01-20-2009 14:41

So f.....k...i....g SUNDAYS are you happy now???You will unlock now phones for 1 euro yes?You are worst than parazites........
I think Zulea is a KING OF SUNDAY UNLOCKERS!

MYUNLOCKING 01-20-2009 14:45

thanks for nice info .. its really good for us.. we will try and then post results ..

techno-gsm 01-20-2009 14:45

Quote:

Originally Posted by makave (Post 4076904)
this is crap cracked things doesn't do somthing complete

ur link downlod ;OGM_JAF_PKEY_Emulator_v4 & ur hread based on jaf v1.98.62.exe ............................complet ur work


All times are GMT +1. The time now is 01:14.


vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2024 DragonByte Technologies Ltd.
- GSM Hosting Ltd. - 1999-2023 -

Page generated in 0.29167 seconds with 6 queries

SEO by vBSEO