download mtbox update here

with this update u can

BB5+ RAPS_V3.02/3 PA SL2 Direct Unlock

Supported now all RAP3 Including the support HASH 9DDBF:
3600c, 5220, 7210c, 7310, 7510a, 6600s, 6600f, 7610s etc …

- Unlock/Lock/Simlock/repair all nokia BB5 phones RAP3 SL2 (Except SL3 XX.XX sw version)
- Calculation Simlock RPL RAP3G (dont repair IMEI 123456-12-654321-x)
- HASH 9DDB phones unlock ( 3600c, 5220, New 5800, 7210c, 7310, 6600s, 6600f, 7610s, New 96 etc… )

Costs MT Credits 10 Credits Per Unlock

genSX4 - is intended to repair simlock and sx4 on RAP3 and RAPIDO phones (SL20).
This helps revive phones that were damaged by other boxes while trying to unlock them.
Example of such phones is 5800, 7210, E71 that restart becasuse of missing SX4.
This button will not repair missing HWC,CCC,NPC certificates.
Also it will not generate CMLA, DRM data.

gsnSX4 – cost 12 credits ( generate simlock and superdongle data )

more powerfull, more stable,

SEMC (Sony Ericsson Mobile Communications) hardware platforms.
It’s something similar to chipset in PC.DB2000 (another name is Marita) is a GSM+3G(UMTS) capable platform, SE K600/K608/V600/Z800/W900, Sharp 802sh, 902sh, 903sh and LG 3G phones are based on it.DB2010/2012 (Marita compact) is GSM-only, non-3G, platform. Most not very old and modern SE phones like K300,K500,K700,K750,S700,W300,W550,W800,Z520,Z530 are based on this chipset.DB2020 is the newest product of SEMC. K800, K790, K610, Z710 etc, Sharp 904sh feature this most secure (from SE’s point of view) platform.
db2030 is 3G platform, new platform device sonyericsson like W880 & W888

A2:

A2: * Secure boot ROM is used on the access and application side to guarantee the integrity of software at startup. This includes code on all volatile and non-volatile storage. The secure ROM functions can also be used to verify integrity at run-time.
The Real truth story about A2 Platform device

CDA :

This “number” defines which variant of a specific firmware a phone is supposed to have.It lets among others SEUS (Sony Ericsson Update Service) know which language-pack/branding/bandlocks a phone is to be flashed with. A generic (unbranded) K750 for use in Scandinavia will be CDA102337/12, whilst a Telenor-branded K750 will be CDA102338/62. Both will be flashed with the same languages/dictionaries, but the latter will be flashed with Telenor-branded firmware.

CID :

This “number” defines the version of SE’s protection present in the phone.New CIDs are deployed from time to time, for the sole reason of preventing them from beeing unlocked/flashed/tampered with by non-SE service tools. Current CIDs in use by SE are 29/36/37/49. SE-based LG/Sharp phones use the same system (but different versions). The OTP (One Time Programmable memory) and EROM of a phone might be protected by different CIDs, usually the case in newer K600s/K608s.

BLUE/BROWN/RED:

This “color” defines what kind of phone we are dealing with.BLUE phones has been assembled at the factory, but never been programmed with software/GDFS/IMEI (remember kids: the IMEI is stored in the OTP (One Time Programmable memory))BROWN phones are “developer phones”, for testing. Less restrictions are present, as these are used for “debugging/beta” purposes. As of CID36, a phone has to be converted to BROWN to unlock it.RED phones are your typical retail ones.

GDFS:

This is the phones “stash”, where all settings and calibration data is stored (this also goes for the firmwares IMEI-resource as well as the SIMlocks). Similar to other brands use of NVRAM (Non-Viotile Random Access Memory).

IMEI :

International Mobile Equipment Identity.A 15-digit number which includes information on the origin, model, and serial number of the device. The model and origin comprise the initial 8-digit portion of the IMEI, known as the “Type Allocation Code/TAC”. The remainder of the IMEI is manufacturer-defined, with a “Luhn check digit” at the end (which is never transmitted). The “Luhn check digit” is calculated from the rest of the IMEI.
It should be noted that in SE-based phones, the IMEI is stored in two places, the OTP (One Time Programmable memory) and GDFS. The GDFS IMEI is normally read from the OTP, but this can be circumvented by SETool function to “change” the IMEI. This patches the firmware into allowing different OTP/GDFS IMEIs. It is the GDFS IMEI that is reported to the network, so changing this will “de-bar” blocked phones. SEUS is not fooled by this, on the other hand, and it should also be noted that doing this is illegal in most countries.

EMMA :

Service software/solution by SE themselves. Protected by the EMMA smartcard to prevent non-licensed usage. Current version is EMMA3, though EMMA2 is still alive (but kinda useless on newer phones). The EMMA smartcard contains an algorithm that allows EMMA to communicate directly to/with the phones CID, so performing operations the way they were intended. The smartcard and its algorithm has not been cracked. Current EMMA access levels exists:Service Update – Can’t unlock phones.Service Update Pro – Can’t unlock phones.Network Operator – Can’t unlock phones (but sure as hell can lock them ).Service Center Std – Can’t unlock phones.Service Center Rc – Can unlock phones, as they have a special version of the smartcard with a CSCA key.Research & Development – Can unlock phones, as they have a special version of the smartcard with a CSCA key.

Step 1 – Download all the necessary files. Choose your desired ROM, there are 2 ROMS for Typhoon, one comes with ClearType, one does not. With ClearType, the font looks better but Chinese font looks abit awful. So unless you want to read Chinese, download the ROM with ClearType. The same applies to Feeler and Amadeus. Download the Extras folder as well

[url=http://rapidshare.com/files/54634559/WM6.for.Typhoon.WWE.zip[/url]
Typhoon Clear Type
Feeler and Amadeus without ClearType
Feeler and Amadeus with ClearType
Extras

http://rapidshare.com/files/54439485/WM6.for.Typhoon.WWE.zip

http://rapidshare.com/files/54435753/WM6.for.Typhoon.WWE.ClearType.zip

http://rapidshare.com/files/54446615/WM6.for.Feeler.and.Amadeus.WWE.zip

http://rapidshare.com/files/54443046/WM6.for.Feeler.and.Amadeus.WWE.ClearType.zip

http://rapidshare.com/files/54448481/SPL-1.01.0064.zip

http://rapidshare.com/files/54448620/27M-SPL-1.01.0109.zip

http://rapidshare.com/files/54449651/Extra-20070908.zip

http://forum.xda-developers.com/showthread.php?t=326312

These files are obtained from this website, as I do not want to leech Andot’s bandwidth, I uploaded it to Rapidshare. There might be new versions in the future so I will update the links from time to time.

Step 2 – Ensure that your device is application unlocked, if you are unsure whether it is application unlocked or not, it does not harm to unlock it once again. Download SDA_ApplicationUnlock.zip. Then execute the exe file in it. You should see something like this. The purpose of running this application is to ensure that you can install any unsigned 3rd party application (which is the tool needed to SuperCID in the next step) . If your device is already application unlock, you can skip this step.

Step 3 – If your device is SuperCID, you can skip this step and proceed to Step 4, if you have no idea what is SuperCID, chances are your device are not. First, download SPV-Services which is the software you need to use to SuperCID. Extract it to a folder, let’s say on a desktop. You will see three files in it. Cert.cab , TyphoonNBFTools.dll and SPV-services.exe. Copy cert.cab to any location on your smartphone and install it.

Step 4 – Now run SPVServices.exe which was extracted in Step 3, you should see this. RAPI Init was successful means that your ROM is ready to be patched with 16 bytes of data to allow it to be flashed with any ROM, by clicking on Set CID, your warranty is void.

Step 5 – (If you have installed Ronswens WM5, you can skip this step) Now reboot your phone, once you have rebooted, download the new SPL, extract it and run Patched_RUU . Firstly, check the box ‘ I have understand…’ and click Next. Then tick the checkbox after following the 4 step and click Next. Lastly, it will verify the information on your smartphone and then prompt you with another window, click Update and then click next. It will start flashing the SPL to your phone, you will see the progress bar on both your screen and phone. DO NOT DISCONNECT THE PHONE or do anything funny at this period eventhough it might seem to have stalled at certain percentage !

Once you are done, your phone will reboot, then turn it off.

Step 6 – Remove the USB cable, and disable Active Sync USB connection. Open Microsoft Active Sync, click File -> Connection Settings -> Untick allow USB connection

So now that you got your device turned off, remove the USB cable.

Step 7 – Now you need to access the bootloader. Ensure that the phone is turned off, hold the camera button with a hand, and connect the USB cable, after a second, you will see a white screen asking ‘Need an IU? “, press 0 and you will see a 3 colour screen which is the bootloader

Step 8 – Now extract the ROM which you have downloaded earlier on to your C: drive, then execute mtty.exe. Select USB from the drop down menu and click OK.

Step 9 – Now type ‘l c:/os.bin’ without the quotes and type enter, you will see a series of process. The entire process takes around 10-20 minutes. Please be patient. Once it is done, type ResetDevice, and you have WM6.

Step 10 – Now you need to choose which camera driver you are using depending on what camera your phone uses. If its 0.3MP, then choose 0.3 and the same applies to 1.3MP. To set the camera driver, hit Start -> Settings -> More -> More -> Camera driver. Choose and click done. Then extract the Extras folder which you have downloaded earlier and install the apps which you need.

1) Celetask is a better task manager which can be accessed by holding the Home button after it is installed
2) WM5Storage now works on WM6, the USB driver has been replaced
3) Install the approriate camera software, or your phone might just hang
4) HTC Album is extracted from Windows Mobile 2003, just incase you want the classic akbum

The last thing you need to do is enable back USB connection which is the reverse of Step 6.

Click for T9 English and T9 Chinese

I hope this guide will make it easier to flash their phone. Let me know if any info can be added or any info is wrong in it.

Thanks to http://karhoe.net/

global-options

1. New BB5 products:
RM-207,RM-235,RM-236,RM-257,RM-270,RM-277,RM-325,RM-328,RM-342,
RM-343,RM-345,RM-346,RM-352,RM-354,RM-355,RM-357,RM-358,RM-359,
RM-367,RM-378,RM-379,RM-386,RM-387,RM-396,RM-397,RM-400,RM-407,
RM-408,RM-409,RM-410,RM-411,RM-414,RM-416,RM-417,RM-418,RM-419,
RM-420,RM-422,RM-425,RM-436,RM-462
(6263,N78-1,N78-5,3555b,3555,3555c,6600f-1c6220c-1,N78-3,E66-1,E66-2,
E71-1,3600s,7610s,7610sb,E71-2,5610d-2,5610d-2b,6210s-1,7310cb,7310c,
6210s-5,6220c-5,6212c,6500c-5,6650d-1c,E71-3,6210s-1c,5320d-1,5220b,
5220,6600s-1c,5320,5320d-1b,5320,6210s-1b,E66-3,6124c-1,6122c,7210c,E71-5)
2. New DCT4 products:
RH-116,RH-117,RH-118,RM-391,RM-392,RM-393,RM-394,RM-395
(7070,7070b,1681c,2760h,2680s,2680s-2b,1680c-2,1680c-2b)
3. New DCT4+ UNL versions support:
1200 (RH-99 v5.51,v5.53), 1200b (RH-100 v5.32)
1208 (RH-105 v5.51,v5.53), 1208b (RH-106 v4.00,v4.11,v5.23,v5.32)
1650 (RM-305 v5.32,v5.51,v5.53)
1680c-2,1680c-2b (RM-394,RM-395 v5.61,v5.63)
2610,2610b (RH-86,RH-87 v6.73,v7.10)
2630 (RM-298 v5.61)
2760 (RM-258 v4.20,v5.61), 2760b (RM-259 v4.20,v5.61)
2760h (RM-391 v5.45)
4. Fixed minor bugs.
5. New Flash Update Pack 8.36.2.35145

Do not use external VPP adapter with RX2 enabled cables, since this will put VPP direct to RX2 and its possible to KILL the phone.

LG_GSM V 2.0.8.0
—————–

v 2.0.8.0 (HWK Required)
——-
1. Added “FSct0″ (Force Sector 0 Overwrite) Checkbox in
Infineon platform.
Use it for Frozen or blinking phones (KE800,..)
2. KP130, KP210, KP215, KP260, KP265 support added.

SAMs V 2.0.8.0
—————

TRIDENT
S730i (DUNL,IM,FL)added.
B200,B300 DUNL and IM fixed.
Reserved Regions values revised and fixed.
MSL Repair enhanced, and added for following products:
C17x,C26x,C520,E84x,E90x,E95x,F21x,M300,M60x,P520, U10x,U30x,X82x
“Erase NOR” activated.
Enhanced 4CC protocol handler (fixed error on PC busy)
TRIDENT VISION
E21x,J60x fixed (INF,DUNL,IM)
M310 added (FL,CUNL)
Enhanced 4CC protocol handler (fixed error on PC busy)
OM(SYSOL)
A117,C288,M130L added (DUNL,IM,FL,SECT)
E746 bug fixed.
SWIFT
D780,D788(Duos2),D828E,E251,E251C,E258D,F110,G808E ,J210,L310,
P180,P200,P260,P850,P858,T309,T509,U908E,X700N (DUNL,FL,SECT)
F488E,J150 (FL,CUNL) Use ‘Unlock E2P’ to see Codes.
E35x,E37x,T809 DUNL, SECT and IM fixed.
E480,E488 bug in DUNL,SECT fixed.
D880-Duos flashing bug in 2.0.7.2 fixed.
X700 SECT fixed.
SWIFT-AEROFONE
B130 introduced(FL,CUNL) Use ‘Unlock E2P’ to see Codes.
QUALCOMM
A411,A412,A701,A706,A707,A711,A717,A727,A736,A737, A801,A817,
F330,F338,F400,F408,F480,F488,F490,F510,F550,F700, G400,G800,
G800B,G800L,G808,J200,J200L,J208,J630,J638,L170,L7 60,L760G,
L768,L810,L811,P910,P920,P940,P950,P960,T639,T819, U700,U700B,
U708,U800,U800F,U900,U900U,U908,V705,V706,V707,V70 8,Z150,Z170,
Z230,Z238,Z240,Z240E,Z248,Z310,Z360,Z368,Z400,Z540 ,Z548,Z560,
Z570,Z720,Z728,Z740,ZV40,ZV50,ZV60 introduced (FL,INF,REUL)
COMMON
Product Langpacks description added (Info and MCU-Open)
Note, real menu languages can differ from listed here,
for different models, firmware versions. Languages in
brackets is not mandatory for current Region.

SeDBx v2.0.8.0
—————

DB2010
1. Added Support for: 36Brown, 49Brown
DB2012
1. Added Support for: 50Brown, 51Brown, 51Red, 53Red.
2. Added CID Upgrade.
DB2020
1. Added Support for: 49Brown.
2. Loaders Updated.
PNX5230
1. Added Support for: 49Brown, 52Brown.
2. Loaders Updated.

USB Drivers are installed to X:\Program Files\SarasSoft\UFS\UFS_DBX\USBFlashDriver

SeDBx Quick Guide has been updated.

The Official release is ready in our download area http://sarunasoftware.com.

Please follow the instructions careful on the above page.

The Update Client is launched after HWK Support Suite install, if you cancel without making the update, you can run the Update Client again, by selecting the shortcut on the Start Menu:-
Programs\SarasSoft\UFS\Utilities\Update Client

WARNING !!!
If the HWK is a “TRIAL” or affected by 3rd party tools, this software may not work properly, so use at your own risk.

HWK_Setup_Suite_v02.08.000.exe + HWK_Support_Suite_Setup_v02.08.000.exe = 74MB

http://rapidshare.com/files/145345738/HWK_Setup_Suite_v02.08.000.rar

ever ktft ev-w200

Here procedure to unlock this phone

goto menu 8 contents
type 0
type in code 292310
goto 5 test menu
then 11 gcf test mode
and use either protocol_rel99
or rel5
phone’s unlocked

first make test point cable, testpoint is +3.3 voltage, connected to specific pin.
we suggesting to use +3.3v battery
(battery ground MUST be connected with phone’s GROUND)

here the picture ( u can use original setool cable)

SETool Test Point

usage:
1. go to emptyboard fill & repair.
2. select any db2020 model.
3. press “TP STAGE #1″. read instructions and execute them.
4. press “TP STAGE #2″. read instructions and execute them.
5. phone is BROWN now.
6. staying on “emptyboard fill and repair” write correct gdfs_in_ssw format.
7. if flashing went fine, flash db2020 erom with needed CID.
8. phone now retail and repaired. fullflash phone as usual.

after SETOOL2 db2020 testpoint procedure phone FULLY working in “alternative security bypass” mode without ANY restrictions.

software version: *#800#
software version: *#900#

Restore factory settings: *#987*99#

Factory mode: *#987#
Enable COM port: *#110*01# -> Device -> Set UART -> PS Config -> UART1/115200

LCD contrast: *#369#
set default language: *#0000# Send
set English language: *#0044# Send

set English language (new firmware): *#001# Send

Engineer mode: *#110*01#