Nokia X6 RM-551 20.2.005 Hacked By Theone PNHT Method

[TheOne]

UDA Method

1 - Download your Firmware by NaviFirm
http://www.symbiantalk.net/showthread.php?6251-NAVIFIRM-A-tool-for-obtaining-firmware-product-codes-more

2 - Create this directory "C:\Program Files\Nokia\Phoenix\Products\RM-551
Copy all firmware file there

3 - replace uda file from attachment

4. Flash With Jaf
http://www.symbiantalk.net/showthread.php?20542-How-To-Flash-Dead-Phones-Using-Phoenix-Or-JAF-Service-Suite

5. Sign RomPatcherPlus_2.3_LiteVersion install
http://www.symbiantalk.net/attachment.php?attachmentid=18706&d=1278634562
For Sign Get Dev Cer From Here
http://www.symbiantalk.net/showthread.php?9298-Post-Your-Requests-To-RAMISUMI-for-Symbian-Developer-Certificate-from-OPDA-for-Sign-sis-files-and-hacking-your-Phone-.

6. copy this patches
www.symbiantalk.net/attachment.php?attachmentid=15882&d=1274048014

to e:/patches
open rompatcher apply both patch you are done
your phone now hacked..


Important :
If JAF doesn't find the RM-551, just add the following two lines to the end of the file jaf_nok4models.ini (normally found in C:\Program Files\ODEON\JAF\):

[RM-551]
Description=Nokia X6 CABLE


Nokia X6 RM-559 V21.0.004 Hacked By Theone PNHT Method
http://www.symbiantalk.net/showthread.php?36531-Nokia-X6-RM-559-V21.0.004-Hacked-By-Theone-PNHT-Method&p=81150#post81150

[akbisw]

sweetness bro, X6 owners in USA are now finally relieved. But one question, is there a way to back up ur phone so u can restore if u fail?

[irin]

yes you can backup file by pc suite

[akbisw]

Theone i need some major help, the phone doesnt pool. It doesnt restart when using JAF. I think i bricked my phone or something, it flashes a couple of times in the end but doesnt restart. Please help me out bro.
Detected P-KEY: 9000AAC9
P-key nokia module version 01.02
Init usb communication...
PRESS POWER ON NOW!
Searching for phone...Found
Sending RAW loader...
Using 009.012.005
Elf2flash 09.11.000
CMT RAW loader...
Patching RAW boot step1...
Patching RAW boot step2...
Patching RAW boot step3...
Sending RAW Loader...
....................Loader Sent!
Stage 2 starting................PUBKEYS already sent...
PUBKEYS already sent...
PUBKEYS already sent...
PUBKEYS already sent...
..........Phone prepared OK!
Waiting for the phone to boot...
Searching for phone...
Status byte: 8000
Selecting CMT flash...
Result: 0000
Phone is in flash mode...
CMT blocks: 619, APE blocks: 0
Erasing cmt...
Processing C:\Program Files (x86)\Nokia\Phoenix\Products\RM-551\RM-551_20.2.005_prd.core.C00...
Erasing cmt zone 00040000 - 00082FFF ... Erase result: 0000
Erasing cmt zone 00083400 - 003FFFFF ... Erase result: 0000
Erasing cmt zone 00800000 - 00D5FFFF ... Erase result: 0000
Erasing cmt zone 00D60000 - 0B71FFFF ... Erase result: 0000
Partition result: 0014
Processing C:\Program Files (x86)\Nokia\Phoenix\Products\RM-551\RM-551_20.2.005_prd.rofs2.V17...
Erasing cmt zone 07920000 - 0A2FFFFF ... Erase result: 0000
Processing C:\Program Files (x86)\Nokia\Phoenix\Products\RM-551\RM-551_20.2.005.204.02.rofs3.fpsx...
Erasing cmt zone 0A300000 - 0B71FFFF ... Erase result: 0000
Processing C:\Program Files (x86)\Nokia\Phoenix\Products\RM-551\RM551_20.2.005_001_000_U001.uda.fpsx...
Erasing cmt zone 0B720000 - 1EF7FFFF ... Erase result: 0000
Send CMT CFG...

Writing cmt...
Processing C:\Program Files (x86)\Nokia\Phoenix\Products\RM-551\RM-551_20.2.005_prd.core.C00...
Sending CMT HASH for ADA
Sending CMT HASH for KEYS
Sending CMT HASH for PRIMAPP
Sending CMT HASH for RAP3NAND
Sending CMT HASH for PASUBTOC
cmt->PAPUB_CERTIFICATE_DATA_BB5 block detected
cmt->PAPUB_CERTIFICATE_DATA_BB5 block detected
cmt->PAPUB_CERTIFICATE_DATA_BB5 block detected
cmt->PAPUB_CERTIFICATE_DATA_BB5 block detected, sending...
cmt->PAPUB keys already sent...
Sending CMT HASH for SOS*UPDAPP
Sending CMT HASH for SOS*DSP0
Sending CMT HASH for SOS*ISASW
Sending CMT HASH for SOS+CORE
Sending CMT HASH for SOS+ROFS1
Processing C:\Program Files (x86)\Nokia\Phoenix\Products\RM-551\RM-551_20.2.005_prd.rofs2.V17...
Sending CMT HASH for SOS+ROFS2
Write result 27: 1701
Processing C:\Program Files (x86)\Nokia\Phoenix\Products\RM-551\RM-551_20.2.005.204.02.rofs3.fpsx...
Sending CMT HASH for SOS+ROFS3
Write result 27: 1701
Processing C:\Program Files (x86)\Nokia\Phoenix\Products\RM-551\RM551_20.2.005_001_000_U001.uda.fpsx...
Rebooting...
Finishing CMT session...
Restarting CMT...
Pooling phone...
Phone not found...
Second try...
Phone not found...
Done!

[akbisw]

never mind theone, i got it to work. Turns out that my version was v3, not v2, that i downloaded previously from naviphone. Thanks so much. and sorry for being a dumbass. Good Day.

[alviraph]

I already hacked my NOKIA X6. Thanks for this guide. How can I unlock the sim? Please help me!

[tjyeo]

i just wan ask when the phone is hacked,it just can see english only??the other language will delete?

[mali8682]

I successfully hacked my X6 today, thanks for this great guide!
I now await my cert for rompatcher, cant wait :)

[tkhuong]

after replacing the uda file, when flashing, there is a error "does not match the checksum in data-package" what to do?

NVM, found the solution. =P

http://www.symbiantalk.net/showthread.php?45535-CRC-Checksum-Error-Solution-For-Phoenix-When-Flashing-CFW

[tkhuong]

How do i get sign cert?
The thread above is closed