GSM-Forum  

Welcome to the GSM-Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features.
Only registered members may post questions, contact other members or search our database of over 8 million posts.

Registration is fast, simple and absolutely free so please - Click to REGISTER!

If you have any problems with the registration process or your account login, please contact contact us .

Go Back   GSM-Forum > Product Support Sections > Hard/Software Products (official support) > MXKEY (by Alim Hape) > MXKEY Nokia Flasher and Unlocker (by Alim Hape)

Reply
 
LinkBack Thread Tools Display Modes
Old 03-15-2012, 10:27   #1 (permalink)
Product Supporter
 
gbluez's Avatar
 
Join Date: Jul 2004
Posts: 11,037
Member: 73565
Status: Offline
Thanks Meter: 5,053
Arrow HTI On USB, what this box can do?

For those who didn't noticed.
HTI can do BACKUP/RESTORE RPL, SX4 AUTH, SUPER SD AUTH, REPAIR SD, BB5 SL3 phones by using only USB cable.

Support USB just like on FBUS for RAPUv1, RAPUv2, BCM21351, RAP3Gv4.


Example, let's play with backup-erase-downgrade.

Step 1.
Connect phone ALIVE to USB. Select phonet device as interface.
Launch Nokia Module, press SCAN



!! Make sure flash files are loaded after phone scanned !!

Step 2.
After phone is scanned, Read PM




Step 3.
Preceed to Backup RPL




Disconnect phone. Close phonet. Choose Nokia USB ROM

Step 4.
Do erase phone.





Click ABORT after erasing is done.

That erase file is nasty, will erase the flash chip fully. Applicable for all BB5 single CPU with NAND flash chip.

After this, you will need to close mobileex, and re-open it. Or simply right click on title bar, choose "Restart App"
Now choose USB ROM as interface


:::: Phone is erased. Now flash any version ::::::

Code:
MXKEY [MxKey Team HTI PLUS Flasher Interface 0], SN: C0696666
Using device: USB ROM  and HTI, FW ver: 00.50, SN: 01001EF9
Connection status: NUSB3XHC:NUSB3HUB::USB 2.00 (High-speed)
Driver: NMWCD, ver: 7.1.32.73 
Module ver: 1.0.0.20454(13-03-2012), Library ver: 1.0.0.13962(12-03-2012)
Processing MCU file: rm614__03.35.mcusw 
 [BB5,XSR 1.6]  size: 27.66 MB
 Supported Ids: 2200050920030000, 22000509200C0000
Make sure USB cable, Battery and charger are removed from device.
Insert USB cable, Battery back to device(make sure to have fully charged battery).
Insert Charger or Press phone's power button(if flashing doesnt start automatically)
Waiting for USB ROM device ...
CMT SYSTEM ASIC ID: 000000000000000022000509200C0000 [BCM213x1 ver: 1.0]
CMT EM0 ID: 00005361
CMT PUBLIC ID: 0000000000104BBD512FD69E4686046DD0DBD26F
CMT ASIC MODE ID: 00
CMT ROOT KEY HASH: 1B0D74C532CA1C6133940C740E8C786E
CMT ROM ID: DE56D582BDDE7A3A
Loading CMT secondary boot code
 SecondaryBoot: BCM21351_usb2nd.fg [BB5]  version: 11.14.0 revision: 2.1 size: 0x3940
 Supported Ids: 22000209200C0000, 2200020920030000, 22000509200C0000, 2200050920030000
eBB5ProtocolType: NEW
Secondary boot loaded.
Storage0: 0000 0000  - 0000 0000  type: RAM, asic:CMT 
Storage1: FFFF 0000  - 0000 0000  type: MMC, asic:CMT 
Storage2: FFFF FFFF  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage3: 0000 0001  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage4: 00EC 0030  - 0000 0431 [Samsung K5W1G13ACM-DJ60,1 Gbits] type: FLASH,MuxOneNAND, asic:CMT 
Suggested algorithm: XSR 1.6
Loading CMT update server data
 Algorithm: BCM21351_XSR16_usbalg.fg [XSR 1.6]  version: 11.14.0 revision: 2.1 size: 0x8FC7D
 Supported Ids: 22000209200C0000, 2200020920030000, 22000509200C0000, 2200050920030000
Update server code loaded.
Waiting for USB device removal ...OK
Waiting for USB device arrival ...OK
Device connected: nmwcdnsucx64\Nokia USB Flashing Generic, PORT_ID: 106B0A9
FUR: Adding Asic CMT as client OK.
CMT PAPUBKEYS is blank/erased.
Storing certificate [NPC, CCC, HWC, RND, R&D] ...OK
Partitioning....
Partitioning complete
Erase size: 33.88 MB
CMT FLASH,MuxOneNAND area [00000000-0001FFFF]
CMT FLASH,MuxOneNAND area [00020000-000203FF]
CMT FLASH,MuxOneNAND area [00060000-012FFFFF]
CMT FLASH,MuxOneNAND area [01300000-01DFFFFF]
CMT FLASH,MuxOneNAND area [02600000-029FFFFF]
Formating partition ...
Flash programming ...
CMT KEYS block sent
CMT ADA block sent
CMT PRIMAPP block sent
CMT RAP3NAND block sent
CMT PASUBTOC block sent
Selecting first CMT PAPUB block with matching RootKey.
CMT PAPUBKEYS: 697F7477 [RAP Certificate v1 232] sent
CMT UPDAPP block sent
CMT MCUSW block sent
CMT MCUSW1 block sent
CMT GENIO_INIT block sent
CMT ISA+DYNSW block sent
Programming completed in 5.842 s
Processing PPM file: rm614__03.35.ppm_x 
 [BB5,XSR 1.6]  size: 7.16 MB
 Supported Ids: 2200050920030000, 22000509200C0000
Erase size: 8 MB
CMT FLASH,MuxOneNAND area [01E00000-025FFFFF]
Flash programming ...
Programming completed in 1.489 s
Processing CNT file: rm614__03.35.image_x_0598883 
 [BB5,XSR 1.6]  size: 12.36 MB
 Supported Ids: 2200050920030000, 22000509200C0000
Erase size: 75.31 MB
CMT FLASH,MuxOneNAND area [02A00000-0753FFFF]
Formating partition ...
Flash programming ...
Programming completed in 2.723 s
Total time for flashing process(boot+erase+write) was 18.090 s
Waiting for USB device removal ...OK
Waiting for USB device arrival ...OK
[RebootFromFlashMode] Please press "OK" or "Accept" on your phone (if SIM Card is not inserted to the phone) !
 
Waiting for device boot up ...
Device connected: nmwcdc\Nokia C3-00 USB Phonet, PORT_ID: 1FCB7364
Verifying communication to device OK.
 
 
Phone type: RM-614 (C3-00)
SW version: V 03.35 15-05-10 RM-614 (c) Nokia             
Imei plain: 12345610654321-?
Product code: 059G6Z1
Battery voltage: 3983 mV, current: 162 mA
Language Pack:
- not available.

SLPA ver[4]: PA_SL3/PA_SIMLOC30 (15 digit NCK)
warning: avoid SW Downgrade & manual erase to this phone !
Camera config: NI00BC0000040102F201, ver: 001.006
 
SIMLOCK invalid!
SUPERDONGLE_KEY seems to be valid
WMDRM_PD seems to be valid
SIMLOCK_TEST passed
SECURITY_TEST passed
 
 
Imei plain is invalid !!!
SIMLOCK_DATA corrupted!
SIMLOCK_DATA corrupted!



Step 5.
Phone is alive, with corrupted security. Time to restore.
Write readed PM backup on first step.




LAST STEP
Restore IMEI


Code:
RPL: "C:\mobileEx\3.5\data\backup\BB5_35536604659684_BACK.rpl"
Imei: 35536604659684
Updating PRODUCTCODE (059G6Z1)... OK
Updating PSN (752E236AI)... OK
Updating HWID (2009)... OK
Updating SIMLOCK(PA_SL3)...error 0x17
Trying to write SIMLOCK as PM(PA_SL3)...OK
Updating WMDRM_PD ...OK
MXKEY [MxKey Team HTI PLUS Flasher Interface 0], SN: C0696666
Using device: USB Phonet  and HTI, FW ver: 00.50, SN: 01001EF9
Connection status: NUSB3XHC:NUSB3HUB:USB 2.00 (High-speed)
Driver: nmwcdc, ver: 7.1.32.73 
Module ver: 1.0.0.20454(13-03-2012), Library ver: 1.0.0.13962(12-03-2012)
Battery voltage: 4011 mV
Phone type: RM-614 (Nokia C3-00)
Product code: 059G6Z1
SW version: V 03.35 - 15-05-10 - RM-614 - (c) Nokia
LanguagePkg version: 5 - 15-05-10 - RM-614 - (c) Nokia             - X
Waiting for USB device removal ...OK
Waiting for USB device arrival ...OK
CMT SYSTEM ASIC ID: 000000000000000022000509200C0000 [BCM213x1 ver: 1.0]
CMT EM0 ID: 00005361
CMT PUBLIC ID: 0000000000104BBD512FD69E4686046DD0DBD26F
CMT ASIC MODE ID: 00
CMT ROOT KEY HASH: 1B0D74C532CA1C6133940C740E8C786E
CMT ROM ID: DE56D582BDDE7A3A
Loading CMT secondary boot code
 SecondaryBoot: BCM21351_usb2nd.fg [BB5]  version: 11.14.0 revision: 2.1 size: 0x3940
 Supported Ids: 22000209200C0000, 2200020920030000, 22000509200C0000, 2200050920030000
eBB5ProtocolType: NEW
Secondary boot loaded.
Storage0: 0000 0000  - 0000 0000  type: RAM, asic:CMT 
Storage1: FFFF 0000  - 0000 0000  type: MMC, asic:CMT 
Storage2: 0000 0000  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage3: 0000 0001  - 0000 0000 [unused/removed] type: FLASH,NOR, asic:CMT 
Storage4: 00EC 0030  - 0000 0431 [Samsung K5W1G13ACM-DJ60,1 Gbits] type: FLASH,MuxOneNAND, asic:CMT 
Suggested algorithm: XSR 1.6
Loading CMT update server data
 Algorithm: BCM21351_XSR16_usbalg.fg [XSR 1.6]  version: 11.14.0 revision: 2.1 size: 0x8FC7D
 Supported Ids: 22000209200C0000, 2200020920030000, 22000509200C0000, 2200050920030000
Update server code loaded.
Waiting for USB device removal ...OK
Waiting for USB device arrival ...OK
Device connected: nmwcdnsucx64\Nokia USB Flashing Generic, PORT_ID: 106B0A9
FUR: Adding Asic CMT as client OK.
Updating CMT  NPC ...OK
Updating CMT  CCC ...OK
Updating CMT  HWC ...OK
Waiting for USB device removal ...OK
Waiting for USB device arrival ...OK
[RebootFromFlashMode] Please press "OK" or "Accept" on your phone (if SIM Card is not inserted to the phone) !
 
Waiting for device boot up ...
Device connected: nmwcdnsucx64\Nokia USB Flashing Generic, PORT_ID: 106B0A9
Waiting for USB device removal ... 
Device connected: nmwcdc\Nokia C3-00 USB Phonet, PORT_ID: 18ECCDC1
Verifying communication to device OK.
 
 
Phone type: RM-614 (C3-00)
SW version: V 03.35 15-05-10 RM-614 (c) Nokia             
Imei plain: 35536604659684-3
Product code: 059G6Z1
Battery voltage: 4011 mV, current: 1 mA
Language Pack:
- not available.

SLPA ver[4]: PA_SL3/PA_SIMLOC30 (15 digit NCK)
warning: avoid SW Downgrade & manual erase to this phone !
Camera config: NI00BC0000040102F201, ver: 001.006
 
SIMLOCK seems to be valid
SUPERDONGLE_KEY seems to be valid
WMDRM_PD seems to be valid
SIMLOCK_TEST passed
SECURITY_TEST passed
 
 
Imei net: 355366046596843
Version: SIMLOCK SERVER
Counter: 0/3, 0/10
 
CONFIG_DATA: 2440700000000000
PROFILE_BITS: 0000000000000000
 
BLOCK1: 1=OPEN, 2=OPEN, 3=OPEN, 4=OPEN, 5=OPEN
BLOCK2: 1=OPEN, 2=OPEN, 3=OPEN, 4=OPEN, 5=OPEN
BLOCK3: 1=OPEN, 2=OPEN, 3=OPEN, 4=OPEN, 5=OPEN
BLOCK4: 1=OPEN, 2=OPEN, 3=OPEN, 4=OPEN, 5=OPEN
BLOCK5: 1=OPEN, 2=OPEN, 3=OPEN, 4=OPEN, 5=OPEN
BLOCK6: 1=OPEN, 2=OPEN, 3=OPEN, 4=OPEN, 5=OPEN
BLOCK7: 1=OPEN, 2=OPEN, 3=OPEN, 4=OPEN, 5=OPEN


:::::::::: BACKUP-ERASE-DOWNGRADE-RESTORE DONE ::::::::::::


Can i Repair SD by USB? YES! You can!

How to repair SD by USB



Step 1.
Connect phone ALIVE to USB. Select phonet device as interface.
Launch Nokia Module, press SCAN

!! Make sure flash files are loaded after phone scanned !!

Step 2.
As usual, nothing special




ALL DONE

http://forum.gsmhosting.com/vbb/atta...8&d=1331792308
limited to using 10 images


All mentioned functions above are actually exist long time ago. Made this post for those who didn't noticed

These work applicable for RAPUv1, RAPUv2, BCM21351, RAP3Gv4.
Precaution on RAP phone with DCC, you might be will need FBUS to write DCC in this version.

BR
  Reply With Quote
The Following 36 Users Say Thank You to gbluez For This Useful Post:
Show/Hide list of the thanked
Old 03-15-2012, 10:28   #2 (permalink)
Product Supporter
 
gbluez's Avatar
 
Join Date: Jul 2004
Posts: 11,037
Member: 73565
Status: Offline
Thanks Meter: 5,053
Almost forgot.
here is the nasty erase file.

this file can be use with OTHER FLASHER. placed as MCU.


use on your own risk

will post later more tips by USB
Attached Files
File Type: rar mobileex_NAND_uni_erase_BB5.XSR1.rar (384 Bytes, 2821 views)
  Reply With Quote
The Following 33 Users Say Thank You to gbluez For This Useful Post:
Show/Hide list of the thanked
Old 03-15-2012, 10:30   #3 (permalink)
Product Supporter
 
gbluez's Avatar
 
Join Date: Jul 2004
Posts: 11,037
Member: 73565
Status: Offline
Thanks Meter: 5,053
===== reserved page for next tips ==========
  Reply With Quote
The Following 3 Users Say Thank You to gbluez For This Useful Post:
Show/Hide list of the thanked
Old 03-15-2012, 10:44   #4 (permalink)
Freak Poster
 
Join Date: Jun 2006
Posts: 269
Member: 291029
Status: Offline
Thanks Meter: 97
firs in the world?by mx key
  Reply With Quote
Old 03-15-2012, 11:02   #5 (permalink)
No Life Poster
 
specta's Avatar
 
Join Date: Oct 2009
Posts: 1,121
Member: 1149800
Status: Offline
Thanks Meter: 210
Quote:
Originally Posted by raditya View Post
firs in the world?by mx key
i guess rev 1.5 already support this feature...






br
  Reply With Quote
Old 03-15-2012, 11:19   #6 (permalink)
Junior Member
 
Join Date: Dec 2011
Posts: 5
Member: 1706454
Status: Offline
Sonork: marsiyem
Thanks Meter: 10
so simple so strong,,,,,
  Reply With Quote
Old 03-15-2012, 11:44   #7 (permalink)
Product Supporter
 
gbluez's Avatar
 
Join Date: Jul 2004
Posts: 11,037
Member: 73565
Status: Offline
Thanks Meter: 5,053
Quote:
Originally Posted by specta View Post
i guess rev 1.5 already support this feature...






br
That kind USB protocols exist since version 3.4.
But new routines for newer phones was added later after that.
  Reply With Quote
Old 03-15-2012, 11:51   #8 (permalink)
Freak Poster
 
pshycoboy's Avatar
 
Join Date: Jun 2011
Location: ilution
Posts: 204
Member: 1597314
Status: Offline
Thanks Meter: 54
nice share om mbul
  Reply With Quote
Old 03-15-2012, 14:34   #9 (permalink)
Crazy Poster
 
Join Date: Feb 2012
Location: indonesia sulawesi
Posts: 54
Member: 1722172
Status: Offline
Thanks Meter: 15
explanation is very simple and clear bro
was still much too well aware of and has not been any excess usb
  Reply With Quote
Old 03-16-2012, 02:04   #10 (permalink)
Junior Member
 
Join Date: Apr 2010
Posts: 33
Member: 1278618
Status: Offline
Thanks Meter: 7
very clear although for newbie like me.
Keep on share
  Reply With Quote
Old 03-16-2012, 11:46   #11 (permalink)
No Life Poster
 
Join Date: Oct 2010
Posts: 579
Member: 1423200
Status: Offline
Thanks Meter: 53
i think you should sticky this
  Reply With Quote
Old 03-16-2012, 23:10   #12 (permalink)
Freak Poster
 
rio_wp's Avatar
 
Join Date: May 2008
Location: Bukittinggi-Indonesia
Posts: 105
Member: 783663
Status: Offline
Sonork: Ahmad Noer Asyadda
Thanks Meter: 29
Hopefully also apply to other types
  Reply With Quote
Old 03-17-2012, 00:26   #13 (permalink)
Freak Poster
 
rizalaa's Avatar
 
Join Date: Sep 2008
Location: In The World
Posts: 226
Member: 861211
Status: Offline
Sonork: 000000
Thanks Meter: 127
How about if offline,for sx4 for This type RAPUv1, RAPUv2, BCM21351, RAP3Gv4.

tq,
  Reply With Quote
Old 03-17-2012, 01:20   #14 (permalink)
Product Supporter
 
gbluez's Avatar
 
Join Date: Jul 2004
Posts: 11,037
Member: 73565
Status: Offline
Thanks Meter: 5,053
Quote:
Originally Posted by rio_wp View Post
Hopefully also apply to other types
Yes, all types on mentioned baseband support only by 100% USB.
Even RAPIDO. But will need help from HTI FBUS after


Quote:
Originally Posted by rizalaa View Post
How about if offline,for sx4 for This type RAPUv1, RAPUv2, BCM21351, RAP3Gv4.

tq,
Riza,
For stand alone mode, no need internet.
You can always use Repair SD + Super SD Auth button anytime from your computer.
Same function as SX4


BR
  Reply With Quote
Old 03-17-2012, 01:46   #15 (permalink)
Freak Poster
 
rizalaa's Avatar
 
Join Date: Sep 2008
Location: In The World
Posts: 226
Member: 861211
Status: Offline
Sonork: 000000
Thanks Meter: 127
Quote:
Originally Posted by gbluez View Post

Riza,
For stand alone mode, no need internet.
You can always use Repair SD + Super SD Auth button anytime from your computer.
Same function as SX4


BR
this is a solution... for Mx-key user so do not to be afraid to delete all data in the mobile phone nokia.

thank's kang for replay my question....
  Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
thread Thread Starter Forum Replies Last Post
6110 power does not stay on sc~micro Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) 5 04-10-2013 02:07
How can I do a Welcome note for my 6110 a dosn't have any one ? Viper Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) 7 07-18-2012 07:57
Seeking for flash nokia 5110 old version (3 version) can exchange for new Tomas Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) 6 11-04-2011 23:50
how the **** do i make wintesla 6.03 work Ravetrancer Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) 0 06-16-1999 08:41

 



All times are GMT +1. The time now is 03:12.



Powered by Searchlight © 2014 Axivo Inc.
vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2014 DragonByte Technologies Ltd.
- GSM Hosting Ltd. - 1999-2014 -
Page generated in 0.41404 seconds with 9 queries

SEO by vBSEO