GSM Shop GSM Shop
GSM-Forum  

Welcome to the GSM-Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features.
Only registered members may post questions, contact other members or search our database of over 8 million posts.

Registration is fast, simple and absolutely free so please - Click to REGISTER!

If you have any problems with the registration process or your account login, please contact contact us .

Go Back   GSM-Forum > Product Support Sections > No More Supported Solutions (Dead Products) > No More Supported H/W Products > MXKEY (by Alim Hape) > MXKEY Nokia Flasher and Unlocker (by Alim Hape)

Reply
 
LinkBack Thread Tools Display Modes
Old 05-31-2013, 10:34   #1 (permalink)
PSG
No Life Poster
 
PSG's Avatar
 
Join Date: May 2003
Location: POLAND
Posts: 1,256
Member: 27761
Status: Offline
Thanks Meter: 54
Nokia 8800 Arte killed by mxkey during flashing


this nokia 8800 Arte works OK but during flashing via mxkey something went wrong and phone can't powerON.
Also phone can't be flashed in DEAD Mode via phonenix

this is log from mxkey 3.5 rev26:

Code:
MXKEY [MxKey Team HTI Flasher Interface (WinUSB) 0], SN: XXXXX
Using device: USB Phonet  and HTI, FW ver: 00.50, SN: XXXX
Connection status: UHCI:HUB:USB 2.00 (Full-speed)
Driver: nmwcdc, ver: 7.1.32.84 
Module ver: 1.0.0.21719(09-05-2013), Library ver: 1.0.0.14397(09-05-2013)
Reading Important data ...
NPC_DATA is empty.
SIMLOCK_DATA saved OK
SIMLOCK_KEY_DATA saved OK
WMDRM_PD_DATA saved OK
RF_DATA saved OK
WARRANTY_DATA saved OK
PROD_DATA saved OK
BT_DATA saved OK
LOCK_DATA saved OK
LOCK120_DATA saved OK
BB_DATA saved OK
RPL saved to "C:\mobileEx\3.5\data\backup\BB5_358645015XXXXX_PM.rpl" 
Processing MCU file: rm233__10.00.mcusw 
 [BB5,BB5 ALGORITHM]  size: 18.95 MB
 Supported Ids: 0103192101003000, 010C192101003000, 030C192101023000
NOR page size in the phone is 128 K.
Battery voltage: 3953 mV
Phone type: RM-233 (Nokia 8800e-1)
Product code: 0563491
SW version: V 10.00 - 28-04-09 - RM-233 - (c) Nokia
LanguagePkg version: 0 - 28-04-09 - RM-233 - (c) Nokia             - B
Version from phone: 10.00
Version from file: 10.00
CMT BOOT ID: 0803000002010000
CMT PUBLIC ID: 16C0000EF16F7B562D61339F289C0ABB0DAB0C73
CMT ROOT KEY HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
CMT PAPUBKEYS HASH: 35533D51D73D1D01227E11385E72D4AFDFAE6E7A
Storage0: 00EC 220C  - 0000 8921 [Samsung K8F1215ETM,512 Mbits] type: NOR, asic:CMT 
Storage0: 0000 0000  - 0000 0000 [unused/removed] type: NAND, asic:APE 
Flashing CMT Update Server Data, UPDAPP: 0x47380 bytes
Update Server code succesfully sent to phone.
Waiting for USB device removal ...OK
Waiting for USB device arrival ...OK
Device connected: nmwcdnsuc\Nokia BB5 ADL Loader USB Generic, PORT_ID: 2A74C2BA
Verifying communication to device OK.
Erase size: 21.12 MB
CMT FLASH,NOR area [00000000-0001FFFF] erased in 0.010 s
CMT FLASH,NOR area [00040000-000BFFFF] erased in 0.030 s
CMT FLASH,NOR area [000C0000-0013FFFF] erased in 0.030 s
CMT FLASH,NOR area [013C0000-0153FFFF] erased in 4.412 s
CMT FLASH,NOR area [00140000-013BFFFF] erased in 50.310 s
Flash programming ...
CMT NOLO block sent
CMT KEYS block sent
CMT PRIMAPP block sent
CMT PASUBTOC block sent
CMT PAPUBKEYS: 35533D51 [RAP Certificate 70 v1] sent
CMT UPDAPP block sent
CMT DSP0 block sent
CMT MCUSW block sent
Programming completed in 2 min 23.521 s
Processing PPM file: rm233__10.00.ppm_b 
 [BB5,BB5 ALGORITHM]  size: 5.06 MB
 Supported Ids: 0103192101003000, 010C192101003000, 030C192101023000
Erase size: 6.50 MB
CMT FLASH,NOR area [01540000-01BBFFFF] erased in 15.090 s
Flash programming ...
Programming completed in 38.794 s
Processing CNT file: rm233__10.00_ISM_006.image_b_carbon 
 [BB5,XSR 1.5] page size: 128 K size: 36.86 MB
 Supported Ids: 0103192101003000, 010C192101003000
Erase size: 35.87 MB
CMT FLASH,NOR area [01EC0000-03F9FFFF] erased in 1 min 36.350 s
CMT FLASH,NOR area [01BC0000-01EBFFFF] erased in 8.870 s
Converting UCP blocks to 128 K.
Flash programming ...
Error while programming [00] at 0x00020000, Result: 0000
  Reply With Quote
Old 05-31-2013, 11:56   #2 (permalink)
PSG
No Life Poster
 
PSG's Avatar
 
Join Date: May 2003
Location: POLAND
Posts: 1,256
Member: 27761
Status: Offline
Thanks Meter: 54
i have 2 RPL files made as a backup by mxkey but can't fix imei/simlock using this files
how to fix this 8800 now?
  Reply With Quote
Old 05-31-2013, 12:55   #3 (permalink)
PSG
No Life Poster
 
PSG's Avatar
 
Join Date: May 2003
Location: POLAND
Posts: 1,256
Member: 27761
Status: Offline
Thanks Meter: 54
no phone look like this:

Code:
Phone type: RM-233 (Nokia 8800e-1)
SW version: V 10.00 28-04-09 RM-233 (c) Nokia             
Imei plain: 12345610654321-?
Product code: 0563491
Battery voltage: 4793 mV, current: 118 mA
Language Pack:
- not available.

SLPA ver[2]: PA_SL2 (15 digit NCK)
 
SIMLOCK invalid!
SUPERDONGLE_KEY seems to be valid
CMLA_KEY seems to be valid
WMDRM_PD seems to be valid
SIMLOCK_TEST passed
SECURITY_TEST failed!
 
 
Imei plain is invalid !!!
SIMLOCK_DATA corrupted!
SIMLOCK_DATA corrupted!
  Reply With Quote
Old 05-31-2013, 14:44   #4 (permalink)
PSG
No Life Poster
 
PSG's Avatar
 
Join Date: May 2003
Location: POLAND
Posts: 1,256
Member: 27761
Status: Offline
Thanks Meter: 54
after write pm backup in rpl format i got this:

Code:
Restoring RF/BB DATA from backup ...
Updating RF ...OK
Updating BB ...OK
Updating WARRANTY ...OK
Updating PROD ...OK
Updating BT ...OK
missing NPC data in the RPL file, CERT write skipped.
 
Updating PRODUCTCODE (0563491)... OK
Updating PSN (MXH897560)... OK
Updating HWID (1006)... OK
Updating SIMLOCK ...error 0x1
Updating WMDRM_PD ...OK
 
Phone type: RM-233 (Nokia 8800e-1)
SW version: V 10.00 28-04-09 RM-233 (c) Nokia             
Imei plain: 12345610654321-?
Product code: 0563491
Battery voltage: 4793 mV, current: 107 mA
Language Pack:
- not available.

SLPA ver[2]: PA_SL2 (15 digit NCK)
 
Imei plain is invalid !!!
SIMLOCK_DATA corrupted!
SIMLOCK_DATA corrupted!
how is that possible mxkey killed this 8800 during usb flashing, any why this RPL can't fix simlock data, before flashing phone was 100% OK
  Reply With Quote
Old 05-31-2013, 14:54   #5 (permalink)
No Life Poster
 
..::Angel::..'s Avatar
 
Join Date: Dec 2006
Location: Karachi, Pakistan
Age: 33
Posts: 16,237
Member: 643472
Status: Offline
Sonork: 100.96901
Thanks Meter: 16,590
Code:
eading Important data ...
NPC_DATA is empty.
SIMLOCK_DATA saved OK
SIMLOCK_KEY_DATA saved OK
WMDRM_PD_DATA saved OK
RF_DATA saved OK
WARRANTY_DATA saved OK
PROD_DATA saved OK
BT_DATA saved OK
LOCK_DATA saved OK
LOCK120_DATA saved OK
BB_DATA saved OK
Looks like IMEI was already corrupted...

BR
  Reply With Quote
Old 05-31-2013, 15:09   #6 (permalink)
PSG
No Life Poster
 
PSG's Avatar
 
Join Date: May 2003
Location: POLAND
Posts: 1,256
Member: 27761
Status: Offline
Thanks Meter: 54
no phone works ok, no problems just need to flash it.
i always used phoenix but i didn't had flash file v10.00 so i used mxkey to download and then to flash 8800 via usb

i made full erase and flash via FBUS but this i've got now:

Code:
Module ver: 1.0.0.21719(09-05-2013), Library ver: 1.0.0.14397(09-05-2013)
CMT Data :
SYSTEM ASIC ID: 000000010000022600010006010C192101003000 [RAP3G ver: PA 3.0]
EM0 ID: 00000295
EM1 ID: 00000B22
PUBLIC ID: 16C0000EF16F7B562D61339F289C0ABB0DAB0C73
ASIC MODE ID: 00
ROOT KEY HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
ROM ID: 273F6D55DFAAF68F
 SecondaryBoot: RAP3Gv3_2nd.fg [BB5]  version: 9.11.1 revision: 0.0 size: 0x3C00
 Supported Ids: 0103192101003000, 010C192101003000, 0103192101013000, 010C192101013000, 0103192101003100, 010C192101003100, 0303192101023000, 030C192101023000, 0303192101033000, 030C192101033000, 0103192101001101, 010C192101001101, 0003192101001002, 000C192101001002, 0013192101001002, 001C192101001002
eBB5ProtocolType: OLD
Storage0: 00EC 220C  - 0000 8921 [Samsung K8F1215ETM,512 Mbits] type: FLASH,NOR, asic:CMT 
Storage content: FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF 
Storage1: FFFF 0000  - 0000 0000  type: MMC, asic:CMT 
TransmissionMode: 16Bit
 Algorithm: RAP3Gv3_algo.fg [BB5 ALGORITHM]  version: 9.50.0 revision: 0.0 size: 0x23010
 Supported Ids: 0103192101003000, 010C192101003000, 0103192101013000, 010C192101013000, 0103192101003100, 010C192101003100, 0303192101023000, 030C192101023000, 0303192101033000, 030C192101033000, 0003192101002000, 000C192101002000, 0003192101002100, 000C192101002100, 0003192101002200, 000C192101002200, 0003192101012200, 000C192101012200, 0103192101001101, 010C192101001101, 0003192101001002, 000C192101001002, 0013192101001002, 001C192101001002
CMT PAPUBKEYS is blank/erased.
TransmissionMode: DDR&TX2
Processing MCU file: rm233__10.00.mcusw 
 [BB5,BB5 ALGORITHM]  size: 18.95 MB
 Supported Ids: 0103192101003000, 010C192101003000, 030C192101023000
Erase size: 21.12 MB
CMT FLASH,NOR area [00000000-0001FFFF]
CMT FLASH,NOR area [00040000-000BFFFF]
CMT FLASH,NOR area [000C0000-0013FFFF]
CMT FLASH,NOR area [013C0000-0153FFFF]
CMT FLASH,NOR area [00140000-013BFFFF]
erased in 4.863 s
Prog.status for Asic CMT ...
 NOR: OK
Flash programming ...
CMT NOLO block sent
CMT KEYS block sent
CMT PRIMAPP block sent
CMT PASUBTOC block sent
Selecting first CMT PAPUB block with matching RootKey.
CMT PAPUBKEYS: 35533D51 [RAP Certificate 70 v1] sent
CMT UPDAPP block sent
CMT DSP0 block sent
CMT MCUSW block sent
Prog.status for Asic CMT ...
 NOR: OK
Programming completed in 1 min 57.235 s
Processing PPM file: rm233__10.00.ppm_b 
 [BB5,BB5 ALGORITHM]  size: 5.06 MB
 Supported Ids: 0103192101003000, 010C192101003000, 030C192101023000
Erase size: 6.50 MB
CMT FLASH,NOR area [01540000-01BBFFFF]
erased in 1.502 s
Prog.status for Asic CMT ...
 NOR: OK
Flash programming ...
Prog.status for Asic CMT ...
 NOR: OK
Programming completed in 31.600 s
Processing CNT file: rm233__10.00_ISM_006.image_b_carbon 
 [BB5,XSR 1.5] page size: 128 K size: 36.86 MB
 Supported Ids: 0103192101003000, 010C192101003000
Storing certificate [NPC, CCC, HWC, R&D] ...OK
Erase size: 35.87 MB
CMT FLASH,NOR area [01EC0000-03F9FFFF]
CMT FLASH,NOR area [01BC0000-01EBFFFF]
erased in 8.244 s
Prog.status for Asic CMT ...
 NOR: OK
Flash programming ...
Error while programming [00] at 0x00000000, Result: 0000
Warning: programming MMC failed, please check if MicroSD exist !
Programming completed in 20.139 s
Total time for flashing process(boot+erase+write) was 3 min 30.620 s
 
 
Phone type: RM-233 (Nokia 8800e-1)
SW version: V 10.00 28-04-09 RM-233 (c) Nokia             
Imei plain: 12345610654321-?
Battery voltage: 4863 mV, current: 108 mA
Language Pack:
- not available.

SLPA ver[1]: PA_SL (15 digit NCK)
 
SIMLOCK invalid!
SUPERDONGLE_KEY invalid!
- WD timer enabled, phone will reboot itself after 3 min.
SIMLOCK_TEST passed
SECURITY_TEST passed
 
 
Imei plain is invalid !!!
SIMLOCK_DATA corrupted!
SIMLOCK_DATA corrupted!
i remember during USB flash i had same error:

Code:
Error while programming [00] at 0x00000000, Result: 0000
this error came when mxkey want to flash: rm233__10.00_ISM_006.image_b_carbon

Last edited by PSG; 05-31-2013 at 15:14.
  Reply With Quote
Old 05-31-2013, 18:10   #7 (permalink)
No Life Poster
 
.::ZUBER::.'s Avatar
 
Join Date: Apr 2006
Location: MXBOX THUNDER Helpdesk
Age: 50
Posts: 4,273
Member: 262425
Status: Offline
Sonork: 100.1617691
Thanks Meter: 1,264
Bro.,

Already recommended, Backup all Important Data before Flash,

You have Flashed with Untick Safe Flash, may be the reason,

So no way then buy Factory RPL.


BR,
ZUBER
  Reply With Quote
Old 05-31-2013, 22:51   #8 (permalink)
No Life Poster
 
gbluez's Avatar
 
Join Date: Jul 2004
Posts: 11,049
Member: 73565
Status: Offline
Thanks Meter: 5,062
Dear PSG,
I am sorry for you. This kinda fancy phone is based with RAP3Gv3 should be handled by FBUS. USB is recommended only for updating.

Code:
RPL saved to "C:\mobileEx\3.5\data\backup\BB5_358645015XXXXX_PM.rpl"
PM.rpl. means you made backup the whole important pm field in RPL format. BUT you do not YET have the RAP certificate. (NPC, CCC, HWC) which can only be extracted in flash mode. RAP3Gv3 and all older platform SHOULD USE FBUS.

I see you also using FBUS cable. Did you made backup with this cable too?
The only FATAL mistake is that you erase this phone without paying attention to the backup you made.

About error while flashing:
Do not load cnt file for mmc.

BR
  Reply With Quote
Old 06-03-2013, 09:40   #9 (permalink)
PSG
No Life Poster
 
PSG's Avatar
 
Join Date: May 2003
Location: POLAND
Posts: 1,256
Member: 27761
Status: Offline
Thanks Meter: 54
i never flashed mxkey without SAFE Flash option enabled, this is standard info
i allways use usb flashing via phonenix because mxkey could make errors just like now, but for this time i download files so didn't change to phonenix for flash
i don't load cnt file just mcu+ppm+image

i flashed many 8800 via phoenix and NEVER killed it by this app

i have NPC, CCC,HWC backup + two RPL files containing PM fields made for backup before i made anything with 8800.

but can't use this RPL to fix 8800 becasue mxkey display:
Code:
Updating SIMLOCK ...error 0x1


also i still can't flash FBUS this 8800 becasue for ISM file mxkey display this:

Code:
Error while programming [00] at 0x00000000, Result: 0000
i think mxkey has got some problems with flashing for 8800 not matter USB or FBUS or this 8800 died just "under" flashing period and problem with flashing error came from phone memory (anyway other filels mcu/ppm were wrote ok to this memory)

this is quite expensive phone so you know what you did by your mxkey tool.

Last edited by PSG; 06-03-2013 at 09:46.
  Reply With Quote
Old 06-03-2013, 16:30   #10 (permalink)
No Life Poster
 
gbluez's Avatar
 
Join Date: Jul 2004
Posts: 11,049
Member: 73565
Status: Offline
Thanks Meter: 5,062
Try1:
- backup rpl: select RAP.
- erase flash: get addr > select all, do not mark safe erase.
- reflash MCU only with FBUS
- Restore IMEI MANUALLY, use rpl from 1st step above.
- Repair SpLock
- Repair SD
Phone is now should alive (but blank) and security are OK.
Flashing resurrection:
Proceed full flashing by USB with phoenix.

p.s;
on any error when doing simlock:
- Play some function on IMEI & Security > Simlock tab. It's old security, don't worry.

Last edited by gbluez; 06-04-2013 at 02:06.
  Reply With Quote
Old 06-04-2013, 15:36   #11 (permalink)
PSG
No Life Poster
 
PSG's Avatar
 
Join Date: May 2003
Location: POLAND
Posts: 1,256
Member: 27761
Status: Offline
Thanks Meter: 54
can't fix using recovery cert:

Code:
CMT Data :
SYSTEM ASIC ID: 000000010000022600010006010C192101003000 [RAP3G ver: PA 3.0]
EM0 ID: 00000295
EM1 ID: 00000B22
PUBLIC ID: 16C0000EF16F7B562D61339F289C0ABB0DAB0C73
ASIC MODE ID: 00
ROOT KEY HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
ROM ID: 273F6D55DFAAF68F
 SecondaryBoot: RAP3Gv3_2nd.fg [BB5]  version: 9.11.1 revision: 0.0 size: 0x3C00
 Supported Ids: 0103192101003000, 010C192101003000, 0103192101013000, 010C192101013000, 0103192101003100, 010C192101003100, 0303192101023000, 030C192101023000, 0303192101033000, 030C192101033000, 0103192101001101, 010C192101001101, 0003192101001002, 000C192101001002, 0013192101001002, 001C192101001002
eBB5ProtocolType: OLD
Storage0: 00EC 220C  - 0000 8921 [Samsung K8F1215ETM,512 Mbits] type: FLASH,NOR, asic:CMT 
Storage content: 0000 0000 0000 0000 0000 0000 0000 0000 
Storage1: FFFF 0000  - 0000 0000  type: MMC, asic:CMT 
TransmissionMode: 16Bit
 Algorithm: RAP3Gv3_algo.fg [BB5 ALGORITHM]  version: 9.50.0 revision: 0.0 size: 0x23010
 Supported Ids: 0103192101003000, 010C192101003000, 0103192101013000, 010C192101013000, 0103192101003100, 010C192101003100, 0303192101023000, 030C192101023000, 0303192101033000, 030C192101033000, 0003192101002000, 000C192101002000, 0003192101002100, 000C192101002100, 0003192101002200, 000C192101002200, 0003192101012200, 000C192101012200, 0103192101001101, 010C192101001101, 0003192101001002, 000C192101001002, 0013192101001002, 001C192101001002
CMT PAPUBKEYS HASH: 35533D51D73D1D01227E11385E72D4AFDFAE6E7A
TransmissionMode: DDR&TX2
 
Begin Certificate Request ...
 
[InternalErrorFault] CERT not found, Certificate is null or empty (case id=0xCE00)
 
[InternalErrorFault] CERT not found, Certificate is null or empty (case id=0xCE00)
 
[InternalErrorFault] CERT not found, Certificate is null or empty (case id=0xCE00)
 
[InternalErrorFault] CERT not found, Certificate is null or empty (case id=0xCE00)
i attached RPL made as a backup before flash, there is something for simlock but why i can't fix simlock section
Attached Files
File Type: zip BB5_35864501579426_PM.zip (11.2 KB, 29 views)
  Reply With Quote
Old 06-04-2013, 15:48   #12 (permalink)
No Life Poster
 
gbluez's Avatar
 
Join Date: Jul 2004
Posts: 11,049
Member: 73565
Status: Offline
Thanks Meter: 5,062
Your RPL attached here doesn't contain any RAP certificate. Are you sure you have good backup? Please read again post #8 above.
Quote:
you made backup the whole important pm field in RPL format. BUT you do not YET have the RAP certificate. (NPC, CCC, HWC) which can only be extracted in flash mode. RAP3Gv3 and all older platform SHOULD USE FBUS.
Fix IMEI first, proceed to simlock fix after.
  Reply With Quote
Old 06-04-2013, 16:01   #13 (permalink)
PSG
No Life Poster
 
PSG's Avatar
 
Join Date: May 2003
Location: POLAND
Posts: 1,256
Member: 27761
Status: Offline
Thanks Meter: 54
backup which i attached was auto read via usb before i start flashing (with safe option enabled)
i don't have any other backup because i just wanted to flash this 8800 nothing more and due to error during ISM file flash:

Code:
Error while programming [00] at 0x00000000, Result: 0000
i stuck now.
mxkey don't want to create RAP backup in BACKUP section because NPC/CCC is empty
i little tired so could you expand: "Fix IMEI first"
  Reply With Quote
Old 06-05-2013, 07:45   #14 (permalink)
No Life Poster
 
.::ZUBER::.'s Avatar
 
Join Date: Apr 2006
Location: MXBOX THUNDER Helpdesk
Age: 50
Posts: 4,273
Member: 262425
Status: Offline
Sonork: 100.1617691
Thanks Meter: 1,264
Quote:
Originally Posted by PSG View Post
backup which i attached was auto read via usb before i start flashing (with safe option enabled)
i don't have any other backup because i just wanted to flash this 8800 nothing more and due to error during ISM file flash:

Code:
Error while programming [00] at 0x00000000, Result: 0000
i stuck now.
mxkey don't want to create RAP backup in BACKUP section because NPC/CCC is empty
i little tired so could you expand: "Fix IMEI first"
Bro.

You cannot come out from this problem,

From your Logs, NPC Certificates not Backup in saved RPL,

This only happens when one have not selected "ALL Section" while Backup RPL or only saved Simlock RPL,

The Phone is Expensive, so you may try get Factory RPL without wait anymore for any solution.


BR,
ZUBER
  Reply With Quote
Old 06-05-2013, 09:24   #15 (permalink)
PSG
No Life Poster
 
PSG's Avatar
 
Join Date: May 2003
Location: POLAND
Posts: 1,256
Member: 27761
Status: Offline
Thanks Meter: 54
Dear Zuber i told you i just wanted to flash that 8800 so i connect USB cable , SCAN, download firmware v10.00 for product code, check safe flash enabled and made flash.... and during ISM write i've got:

Code:
Error while programming [00] at 0x00000000, Result: 0000
so after this mxkey left me simlock corrupted and just this backup which mxkey made before flash nothing more.

i didn't planned to make anything else just reflash via USB , now i know i should use phonenix
  Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


 



All times are GMT +1. The time now is 05:10.



Powered by Searchlight © 2024 Axivo Inc.
vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2024 DragonByte Technologies Ltd.
- GSM Hosting Ltd. - 1999-2023 -
Page generated in 0.24583 seconds with 9 queries

SEO by vBSEO