| Re: Post #1
I have unlocked most N95s no problem but this one will not unlock (I had 1 other one that did not unlock).
I am now using powered USB hub, bench power supply via diode to +batt terminal, 7.5k resistor to BSI and now phone is being detected. I can do CRT backup in JAF and CHK is ok.
I have to click Unlock several time before the procedure finds phone and starts.
I am running out of ideas. Here is log:
JAF box ATmega firmware version: 1B1
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status:
Block 1: CLOSED Type 5 Data: 23420F
Block 2: CLOSED Type 5 Data: 23420F
Block 3: CLOSED Type 5 Data: 23594F
Block 4: CLOSED Type 5 Data: 23594F
Read Phone Info OK
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Reading PM Field 308 Subfield 1 with length 8192 bytes
Saving to file: RM-159_358998015873568_Locked_Keycnt_0_Fbuscnt_0__V_0 6wk41v43.1_15-10-07_RM-159_(c)_Nokia__10_04_2009__03_34_46.bin
PM308 backup OK
Searching for JAF box ...
JAF box detected
JAF box ATmega firmware version: 1B1
Initialize JAF box ...
JAF box JAFBOX_BB5_FLASH_bb5challenge ...
ASIC ID: 000000010000022600010006400C192101021103
HASH: CAEEBB65D3C48E6DC73B49DC5063A2EE
ROM ID: A8C1D6713E691FF8
JAF no TP v1.04
Sending loader...
RAPIDO_OLD selected.
BB5_FLASH_CMTbootload
JAF CMT Boot Ready
Hello ok
bb5king ldr start
bb5king send code ok
Get card info ...
Verify card OK
Get card info ...
Verify card OK
Hello ok
Hello ok
PM send.
Test call...
cpsr - 0x0000001F
p15_1 - 0x00C5387A
p15_2 - 0x00C5197E
p15_3 - 0x00C5397E
PM_308 CRC - 0x000C7E0B
ki - 0x00000001
ri - 0x00000001
pi - 0x00000001
param - 0x03, size - 0x00
UpdSLock - 0x00000001
PM_308 CRC - 0x0019251B
Reciving PM
Hello ok
PM buff recived
After unlock.
JAF box ATmega firmware version: 1B1
Searching for phone ...
ERROR: Cannot detect phone on FBUS interface
Operation time: 00:42.
Done with error(s).
Thread phone exit. |