|
Welcome to the GSM-Forum forums. You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. Only registered members may post questions, contact other members or search our database of over 8 million posts. Registration is fast, simple and absolutely free so please - Click to REGISTER! If you have any problems with the registration process or your account login, please contact contact us . |
|
Register | FAQ | Donate | Forum Rules | Root any Device | ★iPhone Unlock★ | ★ Direct Codes ★ | Direct Unlock Source |
| LinkBack | Thread Tools | Display Modes |
12-17-2007, 10:33 | #1 (permalink) |
No Life Poster Join Date: Aug 2006 Location: Hackers hell
Posts: 1,040
Member: 327309 Status: Offline Sonork: 100.54567 Thanks Meter: 177 | Usefull info about NOKIA tool - HERE! - Solution for problem with LOCAL MODE http://forum.gsmhosting.com/vbb/showthread.php?t=479685 - Video backup PM BB5 with NokiaTool http://forum.gsmhosting.com/vbb/showthread.php?t=479809 Last edited by Multi-box TEAM; 12-17-2007 at 11:16. |
The Following 3 Users Say Thank You to Multi-box TEAM For This Useful Post: |
12-17-2007, 18:47 | #2 (permalink) |
No Life Poster Join Date: Jan 2006 Location: Saigonmobile.vn Age: 42
Posts: 538
Member: 223718 Status: Offline Thanks Meter: 40 | Unlocked 1208 with Nokia Tool 4B ================================================== ========= Flash you phone with unlock_img. Done Use Nokia Tool unlock it. ================================================== ========= Product RH-105 MCU Version V 3.72 MCU Compilation Date 14-09-07 Product Manufacturer (c) 'FT Phone is in: Local mode OTP IMEI 35808801044xxxx PPM Variant SWITCH-ON COUNTER -16203524 HWID 1600 PRODUCT CODE 0554784 BASIC PRODUCT CODE 0515534 PRODUCTION S/N DBM762953 MODULE CODE 0203484 UEM 2341 BATTERY 85% UPP 8850 RFIC 0700 DSP P06w45.v37 LCD SDI:NAXv89 S6B33BD SIMLOCK 505020 ASIC 2 SIMLOCK Key Count 3 SIMLOCK FBUS Count 0 SIMLOCK Server SIMLOCK SERVER Attached OK, Operation took 2 seconds Executing Post-attach procedures ================================================== =============== 1. LCD Pattern settings not found, setting Defaults 2. ADC Channels settings not found, setting Defaults 3. Calculating unlock codes #pw+ 727 400 454 516 216 +1# #pw+ 949 092 470 752 105 +2# #pw+ 777 930 704 531 047 +3# #pw+ 706 230 333 404 645 +4# #pw+ 902 432 135 056 244 +5# #pw+ 347 466 373 566 276 +6# #pw+ 408 857 035 650 465 +7# 4. Auto-RPL Backup Backing up Flash-Area RPL... OTP IMEI: 35808801044xxxx This function is not supported by this Product! 5. MCUSW CRC Backup Phone does not have MCUSW CRC Checking Procedure! 6. Security Code Mastercode: 0464427073 ================================================== =============== Post-attach procedures done Unlock started IMEI: 35808801044xxxx Product: RH-105 ASIC: 2 MCU Version (V 3.72) - supported Local mode set Unlock mode: Server Signed -> Connecting to Typhoon Server... => Typhoon Server v8.3, (c) 2004-2007 KarwosGSM -> Sending Hash Request... OK -> Received hash OK -> Connection closed Writing locks... OK, Status: Opened, MCC-MNC: 00101 Repowering... Unlock finished ================================================== = After that, reflash phone with unlock_img+ppm+cnt All done! Phone unlocked! |
12-17-2007, 20:38 | #3 (permalink) |
No Life Poster Join Date: Feb 2005 Location: HOME OF PEACE
Posts: 661
Member: 113732 Status: Offline Thanks Meter: 90 | Nokia 6233 flashing by MULTI-BOX Video pls. I try with file from multi-box but can not start. nothing starts. help pls, even with any BB5 FLASHING VIDEO |
12-17-2007, 23:29 | #4 (permalink) |
No Life Poster Join Date: Feb 2005 Location: Poland Age: 34
Posts: 4,943
Member: 117496 Status: Offline Sonork: 100.83919 Thanks Meter: 22,689 | Unlock procedure for NEW SECURITY phones: 1. Attach phone 2. Click "Locks" 3. Click "yes" to download proper unlock partial 4. Flash this partial with any flashing device (UFS, JAF, etc) 5. Get back to Nokia Tools, click Attach Again and "Locks" again, signature will be received froms server and SP area will be recalculated 6. Phone unlocked Unlock procedure for OLD SECURITY phones: 1. Attach phone 2. Click "Locks" 3. Click "yes" to download proper unlock partial 4. Flash this partial with any flashing device (UFS, JAF, etc) 5. Get back to Nokia Tools, click Attach Again and "Locks" again, signature will be received froms server and SP area will be recalculated 6. Reflash phone with regular firmware or write restore img 7. Phone unlocked Supported models/versions for unlock: RH-64 1600 v6.46 ( NEW SECURITY ) ASIC 11 RH-86 2610 v3.71 ( OLD SECURITY ) ASIC 11 RH-86 2610 v3.75 ( OLD SECURITY ) ASIC 11 RH-86 2610 v3.77 ( OLD SECURITY ) ASIC 11 RH-86 2610 v4.50 ( OLD SECURITY ) ASIC 11 RH-86 2610 v4.51 ( OLD SECURITY ) ASIC 11 RH-86 2610 v4.90 ( OLD SECURITY ) ASIC 11 RH-86 2610 v5.65 ( NEW SECURITY ) ASIC 11 RH-86 2610 v5.90 ( OLD SECURITY ) ASIC 11 RH-86 2610 v6.70 ( OLD SECURITY ) ASIC 11 RH-87 2610b v3.71 ( OLD SECURITY ) ASIC 11 RH-87 2610b v3.75 ( OLD SECURITY ) ASIC 11 RH-87 2610b v3.77 ( OLD SECURITY ) ASIC 11 RH-87 2610b v4.50 ( OLD SECURITY ) ASIC 11 RH-87 2610b v4.51 ( OLD SECURITY ) ASIC 11 RH-87 2610b v4.90 ( OLD SECURITY ) ASIC 11 RH-87 2610b v5.65 ( NEW SECURITY ) ASIC 11 RH-87 2610b v5.90 ( OLD SECURITY ) ASIC 11 RH-87 2610b v6.70 ( OLD SECURITY ) ASIC 11 RH-92 1112i v5.03 ( OLD SECURITY ) ASIC 11 RH-93 1112 v5.03 ( OLD SECURITY ) ASIC 2 RH-93 1112 v5.50 ( OLD SECURITY ) ASIC 2 RH-93 1112 v5.53 ( OLD SECURITY ) ASIC 2 RH-93 1112 v5.54 ( OLD SECURITY ) ASIC 2 RH-93 1112 v6.00 ( OLD SECURITY ) ASIC 2 RH-93 1112 v6.01 ( OLD SECURITY ) ASIC 2 RH-93 1112 v6.40 ( OLD SECURITY ) ASIC 2 RH-93 1112 v6.41 ( OLD SECURITY ) ASIC 2 RH-93 1112 v6.46 ( NEW SECURITY ) ASIC 11 RH-93 1112 v6.93 ( OLD SECURITY ) ASIC 2 RH-93 1110i v5.03 ( OLD SECURITY ) ASIC 2 RH-93 1110i v5.50 ( OLD SECURITY ) ASIC 2 RH-93 1110i v5.53 ( OLD SECURITY ) ASIC 2 RH-93 1110i v5.54 ( OLD SECURITY ) ASIC 2 RH-93 1110i v6.00 ( OLD SECURITY ) ASIC 2 RH-93 1110i v6.01 ( OLD SECURITY ) ASIC 2 RH-93 1110i v6.40 ( OLD SECURITY ) ASIC 2 RH-93 1110i v6.41 ( OLD SECURITY ) ASIC 2 RH-93 1110i v6.46 ( NEW SECURITY ) ASIC 11 RH-93 1110i v6.93 ( OLD SECURITY ) ASIC 2 RH-94 1112b v3.00 ( OLD SECURITY ) ASIC 2 RH-94 1112b v3.11 ( OLD SECURITY ) ASIC 2 RH-94 1112b v3.30 ( OLD SECURITY ) ASIC 2 RH-97 6060 v3.03 ( OLD SECURITY ) ASIC 11 RH-98 6060b v3.03 ( OLD SECURITY ) ASIC 11 RH-99 1200 v3.12 ( NEW SECURITY ) ASIC 11 RH-99 1200 v3.40 ( NEW SECURITY ) ASIC 11 RH-99 1200 v3.44 ( NEW SECURITY ) ASIC 11 RH-99 1200 v4.00 ( NEW SECURITY ) ASIC 11 RH-99 1200 v4.11 ( NEW SECURITY ) ASIC 11 RH-105 1208 v3.72 ( NEW SECURITY ) ASIC 11 RH-105 1208 v4.00 ( NEW SECURITY ) ASIC 11 RH-105 1208 v4.11 ( NEW SECURITY ) ASIC 11 RM-189 2310 v2.10 ( OLD SECURITY ) ASIC 2 RM-189 2310 v3.10 ( OLD SECURITY ) ASIC 2 RM-189 2310 v3.21 ( OLD SECURITY ) ASIC 2 RM-189 2310 v3.31 ( OLD SECURITY ) ASIC 2 RM-189 2310 v5.10 ( OLD SECURITY ) ASIC 2 RM-189 2310 v5.90 ( OLD SECURITY ) ASIC 2 RM-189 2310 v6.30 ( OLD SECURITY ) ASIC 2 RM-189 2310 v6.33 ( OLD SECURITY ) ASIC 2 RM-189 2310 v6.50 ( OLD SECURITY ) ASIC 2 RM-225 6030b v5.24 ( OLD SECURITY ) ASIC 2 RM-225 6030b v5.25 ( OLD SECURITY ) ASIC 2 RM-291 2626 v3.51 ( OLD SECURITY ) ASIC 11 RM-291 2626 v4.61 ( OLD SECURITY ) ASIC 11 (if phone lost its ASIC due to full erase or SP corrupt, use values above) Report Post Edit/Delete Message |
12-17-2007, 23:31 | #5 (permalink) | |
No Life Poster Join Date: Feb 2005 Location: Poland Age: 34
Posts: 4,943
Member: 117496 Status: Offline Sonork: 100.83919 Thanks Meter: 22,689 | Quote:
2. Select FLASHER tab 3. Click ADD IMAGE and add 3 image files, 1st: MCU, 2nd: PPM, 3rd: CNT 4. Select platform: "BB5 CMT, APE" 5. Inject battery to phone, and press "power-on" - wait about 4-5 minutes. If needed, you can attach to phone before/after flash to make needed actions (pm read, factory defaults, etc). MAKE SURE NOKIA CONNECTIVITY CABLE DRIVRERS are installed! BR, karwos | |
12-18-2007, 09:32 | #11 (permalink) |
No Life Poster Join Date: Feb 2005 Location: Poland Age: 34
Posts: 4,943
Member: 117496 Status: Offline Sonork: 100.83919 Thanks Meter: 22,689 | Sure, dead usb method dont support phones with erased certificates, only FBUS flashing can revive such units Its just technically not possible, ADL loader will not spawn due to security pass failure. |
12-18-2007, 23:06 | #12 (permalink) |
Freak Poster Join Date: Sep 2004 Location: Croatia / Rijeka
Posts: 243
Member: 83831 Status: Offline Thanks Meter: 11 | Will You add FBUS flashing in near future? I don't have any other flashing device for Nokia exept Multi-Box so I cannot unlock any of this phones. My Multi-Box isn't useful for Nokia to me ...and, yes...thanx for all great work you allready done ! |
12-19-2007, 09:50 | #13 (permalink) |
Freak Poster Join Date: Sep 2004 Location: Kosovo, Pristina Age: 42
Posts: 120
Member: 83335 Status: Offline Thanks Meter: 1 | Mr. Karwos how can we repair Contact Service on 2610b after trying to unlock it by JAF or MT-Box... direct unlock, patch unlock, flashing as RH-86 etc... Now only CS on display and I'm trying to unlock it like standart NEW Security and entered manually ASIC 11, then get this: Product RH-86 MCU Version V 05.65 MCU Compilation Date 06-07-07 Product Manufacturer (c) Nokia. Phone is in: Selftest Fail mode Set Local mode failed OTP IMEI 011287005374921 PPM Variant V SECURITY CODE 12345 SEC. CODE BAD ATTEMPTS 0 HWID 0601 PRODUCT CODE 0540044 BASIC PRODUCT CODE 0530409 PRODUCTION S/N KND658174 MODULE CODE 0202930 PRODUCTION DATE 21845.85 PURCHASE DATE 21845.85 REPAIR DATE 21845.85 UEM 1328 BATTERY 100% UPP 12352 RFIC 0500 DSP P05w45.v49 LCD ELBE SIMLOCK 000000 ASIC 0 SIMLOCK Key Count 0 SIMLOCK FBUS Count 0 SIMLOCK Server Attached OK, Operation took 7 seconds Executing Post-attach procedures ================================================== =============== 1. Found product LCD Pattern settings 2. Found product ADC Channels settings 3. Calculating unlock codes #pw+ 719 060 643 752 771 +1# #pw+ 209 505 531 717 012 +2# #pw+ 787 030 517 522 741 +3# #pw+ 805 851 330 330 366 +4# #pw+ 209 455 030 746 264 +5# #pw+ 319 066 042 732 470 +6# #pw+ 105 524 630 367 533 +7# 4. Auto-RPL Backup Backing up Flash-Area RPL... OTP IMEI: 011287005374921 RPL Read OK 011287005374921_Flash_Area_IMEI_094737.pm Written OK! 5. MCUSW CRC Backup Phone does not have MCUSW CRC Checking Procedure! 6. Security Code Mastercode: 4435222244 ================================================== =============== Post-attach procedures done Unlock started IMEI: 011287005374921 Product: RH-86 ASIC: 0 ASIC Recovery Mode Started Target ASIC: 11, Current ASIC: 11 MCU Version (V 05.65) Partial download link: http://www.karwossuite.pl/partials/RH-86_V Set Local mode failed Unlock mode: Server Signed HwSig corrupted, Aborting! In browser i see: 404 Not Found The request /partials/RH-86_V 05.65_44169d699e25940fcfce8c9ea540c0d6.unlock_img was not found on this server. Where is the problem? |
12-19-2007, 11:08 | #14 (permalink) | |
No Life Poster Join Date: Mar 2004 Location: pccomp Age: 42
Posts: 1,399
Member: 59173 Status: Offline Sonork: 100.1585568 Thanks Meter: 225 | Quote:
| |
12-19-2007, 11:57 | #15 (permalink) |
No Life Poster Join Date: Jan 2006 Location: Saigonmobile.vn Age: 42
Posts: 538
Member: 223718 Status: Offline Thanks Meter: 40 | Repair ok Nokia 6233 can't powwer on! ============================================ Phone not found 1. Check whether phone is in LOCAL MODE/Powered on 2. Check whether MultiBox is in Nokia mode 3. Check whether cable is plugged into Special socket 4. Check whether cable is ok 5. Check the USB Cable length (should not exceed 0,5 meters!) 6. Check whether MultiBox is plugged into Mainboard directly (not any hubs, or front of PC Case) 7. Check and clean if needed phone socket pads 8. If you are trying to connect to NMP Symbian based phone, wait until phone boot-up [BB5 BootRom]: Found 1 active devices. [Nokia USB ROM Generic]: Opening Connection [Nokia USB ROM Generic]: Port opened OK! [Nokia USB ROM Generic]: BootRom Verified! RAP_SYSTEM_ASIC_ID: 000000010000022600010006010C192101003000 RAP_EM_ASIC_ID: 00000232 RAP_EM_ASIC_ID: 00000353 RAP_PUBLIC_ID: 03C00104CE950154832A265B1EFC34A7FF4C3E13 RAP_ASIC_MODE_ID: 00 RAP_ROOT_KEY_HASH: BAF3A9C3DBFA8454937DB77F2B8852B1 RAP_ROM_ID: 273F6D55DFAAF68F RawLoaderExtract: Processing rm123_145_30005.430.mcusw RawLoaderExtract: Image found (17349 bytes), matching with RootKey Hash... RawLoaderExtract: Image matches with RootKey Hash, Extraction is done UpdateAgentDataExtract: Processing rm123_145_30005.430.mcusw UpdateAgentDataExtract: Found matching Rootkey Hash CERT Block UpdateAgentDataExtract: Found DATA Block UpdateAgentDataExtract: Warning: Data is splitted into bricks! PASUBTOCCertExtract: Processing rm123_145_30005.430.mcusw PASUBTOCCertExtract: Found matching Rootkey Hash CERT Block RAW Loader @ 00000C16:00003880 Update Agent Cert @ 0001683F:00000400 Update Agent Payload @ 00016C52:00004000, Data Bricked! PASUBTOC Certificate @ 0000F04B:00006700 PatchRAWLoader: Found matching RootkeyHash substitution data, ID:E5 PatchRAWLoader: Found matching RootkeyHash substitution data, ID:EA PatchRAWLoader: Patched OK ExtractBrickedUA: New Size=0x00036AC0 BootRom Prepared OK, WAIT PLEASE NOW for ADL Loader Start... [BB5 ADL Loader]: Found 1 active devices. [Nokia BB5 ADL Loader USB Generic]: Opening Connection [Nokia BB5 ADL Loader USB Generic]: Port opened OK! ADL Server has confirmed its flashmode EraseFile: Processing rm123_145_30005.430.mcusw EraseFile: 1 flash chips to erase EraseFile: Found 7 areas to erase Erasing area 0x00000000 - 0x000006BF, Type: NOR, Subsystem: CMT Erasing area 0x000006C0 - 0x0000FFFF, Type: NOR, Subsystem: CMT Erasing area 0x00010000 - 0x0007FFFF, Type: NOR, Subsystem: CMT Erasing area 0x000A0000 - 0x0021FFFF, Type: NOR, Subsystem: CMT Erasing area 0x00220000 - 0x011DDFFF, Type: NOR, Subsystem: CMT Erasing area 0x011DE000 - 0x011DEFFF, Type: NOR, Subsystem: CMT Erasing area 0x011DF000 - 0x011DFFFF, Type: NOR, Subsystem: CMT EraseFile: Processing rm123_145_3005.43.ppm_v EraseFile: 1 flash chips to erase EraseFile: Found 1 areas to erase Erasing area 0x011E0000 - 0x016DFFFF, Type: NOR, Subsystem: CMT EraseFile: Processing rm123_145_30005.43.image_v EraseFile: 1 flash chips to erase EraseFile: Found 2 areas to erase Erasing area 0x016E0000 - 0x01E7FFFF, Type: NOR, Subsystem: CMT Erasing area 0x01E80000 - 0x01FDFFFF, Type: NOR, Subsystem: CMT All areas erased OK! WriteFile: Processing rm123_145_30005.430.mcusw WriteFile: Counting data+cert blocks... WriteFile: Total 1060 data+cert blocks to write, writing... WriteFile: Writing matching Rootkey Hash CERT (NOLO) WriteFile: Writing matching Rootkey Hash CERT (KEYS) WriteFile: Writing matching Rootkey Hash CERT (PRIMAPP) WriteFile: Writing matching Rootkey Hash CERT (PASUBTOC) WriteFile: Writing matching Rootkey Hash CERT (PAPUBKEYS) WriteFile: Patching PAPUBKEYS Prologue WriteFile: Writing matching Rootkey Hash CERT (UPDAPP) WriteFile: Writing matching Rootkey Hash CERT (DSP0) WriteFile: Writing matching Rootkey Hash CERT (MCUSW) WriteFile: Writing matching Rootkey Hash CERT (PMM_CONF) WriteFile: Writing matching Rootkey Hash CERT (SBIF_CONF) WriteFile: Processing rm123_145_3005.43.ppm_v WriteFile: Counting data+cert blocks... WriteFile: Total 310 data+cert blocks to write, writing... WriteFile: Processing rm123_145_30005.43.image_v WriteFile: Counting data+cert blocks... WriteFile: Total 208 data+cert blocks to write, writing... All areas written OK! Flashing finished, Restarting phone in TEST mode... RestartMCU: Success! |
Bookmarks |
| |
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
USEFULL INFO ABOUT Service Provider Codes | DEBLOQUETOUT | Phone Unlocking Codes & Maps | 3 | 12-13-2008 21:40 |
USEFULL INFO ABOUT Service Provider Codes | DEBLOQUETOUT | Phone Unlocking Codes & Maps | 1 | 08-08-2007 11:07 |
Looking for info about Nokia 3650/7650 Display | ncmaothvez | WD2 & APE (Symbian Phones) | 3 | 03-18-2004 08:30 |
Looking for info about Nokia 3650/7650 Display | ncmaothvez | WD2 & APE (Symbian Phones) | 2 | 12-04-2003 19:11 |
Let's Collect info about Contact Service Here . | makona | Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) | 4 | 01-07-2001 10:25 |
|