BB5 Broadcom Unlock ATF v7.90 Update!! Public Discussion Thread: - GSM-Forum

**gsmfun** · 11-04-2011, 17:07

BB5 Broadcom Unlock !! First In The World!!

Decrypt PM 120 HASHES for ALL Broadcom BB5 Phones
Bruteforce Unlock for ALL Broadcom BB5 Phones (via ATF Server or via LBF Servers)
Stand Alone Super Dongle Repair for ALL Broadcom BB5 Phones
Stand Alone SX-4 Authorize for ALL Broadcom BB5 Phones
Full Phone Authorization via ATF Network for ALL Broadcom BB5Phones
Read FULL NAND Chip Flash for ALL Broadcom BB5 Phones

Now The ATF Network Supports ALL BB5 CPUs Released By Nokia!!!

Here is a List of Broadcom Based BB5 Phones:

C3-00 RM-614
X2-00 RM-618
X2-01 RM-709
X2-03 RM-709
X2-01.1 RM-717
2710c RM-586
7020 RM-497

************************************************** ********************************
*** IMPORTANT NOTES ABOUT BROADCOM AUTHORIZE PHONE VIA THE ATF NETWORK ***
************************************************** ********************************

1. Since NO other team can even Dream of releasing Broadcom Loaders before ATF Team, all Broadcom Phones Authorized by The ATF Network will require 5 ATF Network Credits.

*** Note that it requires 5 ATF Network Credits and NOT 5 SL3 BF Credits...

2. You NEED ATF Network Activation in order to:

a. Authorize Phone
b. Decrypt PM 120 Hashes for BF Unlock
c. Stand Alone Super Dongle RPL Repair
d. Stand Alone SX-4 Authorize

3. You DO NOT NEED ATF Network Activation if you just want to:
a. Read FULL NAND Flash Chip and extract files etc...

4. If you Authorize a Broadcom Phone more than 1 time, then you will be charged and charged again and again and again with 5 credits each time.

5. Some Broadcom Phones will get stuck when Reading Phone info in Normal Mode. The correct way to do it is to change phone mode to TEST MODE before attempting to Decrypt PM 120 HASHES, Super Dongle Repairs etc...

Here is a QUICK way on How to Correct Set a Broadcom Phone into TEST MODE from Normal Mode (RF Inactive) Condition.

a. Put Battery to Phone and Power it On
b. Connect USB Cable and Connect to PC
C. Wait while Windows is Installing the Drivers...
d. Go to ATF Software "Settings" --> "Nokia Settings"
--> Put a check on "Skip Full Phone Information Sweep for BB5 Phones"
e. Go back to "Nokia Service" and click Scan Phone...

*** Once the phone is detected, you can select "Test" on that DropDown
list on the LEFT SIDE of "Backup RPL" Button. This will make your
Phone enter into TEST MODE....

************************************************** ********************************
************************************************** ********************************
************************************************** ********************************

What Else Is New?

N900 FIASCO Flashing has been moved from iTablets into the BB5 Section.
--> Now you can Flash N900 just like any other BB5 Phone... Super EASY!
--> The Current MAEMO Flash ENGINE does not support EMMC (VANILLA) Flashing Yet, this will be Ported on the Next Update.

What was Fixed?
1. Infineon Self Test Hang on Exit: FIXED!
2. Box Activation (Activate New Box) FIXED!

Whats Up?
Try using the XFactor.skn skin... it Rocks!

Who will buy this if you can get more in ATF?

__________________________________________________ ________________________

Buy only from ATF [Advance Turbo Flasher] authorized resellers:
ATF [Advance Turbo Flasher] Authorized Distributors and Resellers List

ATF [Advance Turbo Flasher] official web sites:
International - http://www.advance-box.com/

ATF [Advance Turbo Flasher] official support forums:
World Wide: Advance Turbo Flasher - GSM-Forum
Indonesia: ATF (Advance Turbo Flasher))
Philippine: Gsmph
Syria: Arabic Support (Syria) GsmVIP
Chinese support forum : ATF Box
Vietnam: Saigonmobile
India: Advance Box - .:: GsmIndia ::.
Official Iran Support Forum : ASANGSM FORUM
Bangladesh: Advance Box - Dhaka Mobile
Chinese Support forum : www.yananliuhuan.com

The Master Piece

..::Angel::.. · 11-04-2011, 17:19

Official download links:

Offical Hotfile Mirror
Offical Mirrorcreator Mirror

pradeep_kus · 11-04-2011, 17:21

what about activation bug when we use letest varison new box not activate ( Oppss... NOT ACTIVATED )............

**Advance-Box** · 11-04-2011, 17:22

Quote:

Originally Posted by pradeep_kus

what about activation bug when we use letest varison new box not activate ( Oppss... NOT ACTIVATED )............

What was Fixed?
1. Infineon Self Test Hang on Exit: FIXED!
2. Box Activation (Activate New Box) FIXED!

pradeep_kus · 11-04-2011, 17:24

Quote:

Originally Posted by Advance-Box

What was Fixed?
1. Infineon Self Test Hang on Exit: FIXED!
2. Box Activation (Activate New Box) FIXED!

Thanks For Fixed This Bug.

Really Atf Grate N ROck

hoang · 11-04-2011, 17:24

Really amazing

)
Thank ATF team!

P/S: Your gift still works great

Nonoyxp · 11-04-2011, 17:29

Wow early Xmas Gift

MDK23 · 11-04-2011, 17:30

good work thx atf team
if i am not wrong reading log file for lbf need 5 credits?

juvenile · 11-04-2011, 17:36

where can i buy the network credits?? in atf store??, only atf network activation 49 credits!!!!

br
juvenile

celumaster. · 11-04-2011, 17:37

Quote:

Originally Posted by MDK23

good work thx atf team
if i am not wrong reading log file for lbf need 5 credits?

Yes, you will need to autorize the phone first before decrypt the pm120 and read lbf data, and to autorize you need 5 credits

libertycell · 11-04-2011, 17:37

bib , bang boommmmmmmmmmmmmmmm update

thanks bye bye fenix s..h.i.t and cyclone

Unlockemall · 11-04-2011, 17:41

is this BROADCOM unlocking is from USB or USB/FBUS COMBO
Please kindly let me know if I have to buy the fbus/usb still or I can use the usb cable only for unlocking this models!

Thank you

mfq · 11-04-2011, 17:42

any one tell me what is name ( device_

**Advance-Box** · 11-04-2011, 17:42

N900 RX-51 FIASCO Flashing...

Code:


Number of Image Files: 1
Processing Image File : 
RX-51_2009SE_20.2010.36-2_PR_COMBINED_MR0_ARM.bin
CMT Type : 
CMT Algorithm : 
Secondary Sending Speed : 0Hz
Algorithm Sending Speed : 0Hz
Program Sending Speed : 0Hz
Message Reading Speed : 0Hz
Number of Blocks : 1
Entry Point: 0x003C
Page Format : -1
MAX PAGE : 0x001AA700
======================================================
======================================================
MAEMO BB5 USB Flashing 
======================================================
======================================================

SW: RX-51_20.2010.36.2 V 0.0.000 RX-51 (c) NOKIA
IMEI: 356938031561088
CONFIG KEY : 0000000000000000
PROVIDER KEY : 2440700000000000
NETWORK NAME : Nokia Default;Finland
LOCK COUNTERS : KEYPRESS 0/3, FBUS 0/10
SIMLOCK TABLE :
Block [1] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [2] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [3] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [4] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [5] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [6] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [7] 1:Open 2:Open 3:Open 4:Open 5:Open
SIMLOCK STATE : Not Locked
SIMLOCK_TEST : PASSED
SECURITY_TEST : PASSED
SUPER_DONGLE_TEST : PASSED
SECURITY_CODE : 12345
================================================
SL3 Phone detected 
================================================

* Firmware Version Downgrade will KILL PHONE !!!
* Manual Full Erase WILL KILL PHONE!!! 
* Simlocks are in PM 120 Only... 
* PM 308 is Write Protected... 
Communication Link Established!
Reading Product Info...
prod_code: RX-51
hw_rev: 2101
SW-Release: RX-51_2009SE_20.2010.36-2_PR_MR0
Sending xloader (14848) bytes...
Sending secondary (109440) bytes...
Sending kernel (1746688) bytes...
Sending cmt-2nd (81408) bytes...
Sending cmt-algo (519808) bytes...
Sending cmt-mcusw (5966464) bytes...
Sending rootfs (190185472) bytes...
Device Status: Erasing FLASH Areas...
Device Status: Programming FLASH Areas...
Total Flashing Time (Erase + Flashing) : 00:01:29
(Booting time is NOT Included)
Waiting for Phone to Start-Up..(Max 150 seconds)
　
SW: RX-51_20.2010.36.2 V 0.0.000 RX-51 (c) NOKIA
IMEI: 356938031561088
CONFIG KEY : 0000000000000000
PROVIDER KEY : 2440700000000000
NETWORK NAME : Nokia Default;Finland
LOCK COUNTERS : KEYPRESS 0/3, FBUS 0/10
SIMLOCK TABLE :
Block [1] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [2] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [3] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [4] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [5] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [6] 1:Open 2:Open 3:Open 4:Open 5:Open
Block [7] 1:Open 2:Open 3:Open 4:Open 5:Open
SIMLOCK STATE : Not Locked
SIMLOCK_TEST : PASSED
SECURITY_TEST : PASSED
SUPER_DONGLE_TEST : PASSED
SECURITY_CODE : 12345
================================================
SL3 Phone detected 
================================================

* Firmware Version Downgrade will KILL PHONE !!!
* Manual Full Erase WILL KILL PHONE!!! 
* Simlocks are in PM 120 Only... 
* PM 308 is Write Protected... 
　
FACTORY SET TO : Full Factory Set
OK
FACTORY SET TO : User Data
OK
FACTORY SET TO : Leave Factory
OK
FACTORY SET TO : Service Center
OK
FACTORY SET TO : Software Upgrade
OK
FACTORY SET TO : Production Tune
OK

Some things about N900 (MAEMO) Phones...

1. Entire PM area is WRITE PROTECTED, so you cannot change Life Timer,
Lock Counters, Product Code... Manually...

2. Security Code inside PM area is not used by the MAEMO OS. Security Code
will always read back as 12345 even after you change the SEC CODE inside
the Phone...

3. SX-4 Authorize will still not allow you to write to PM 1 and 309

jokers5 · 11-04-2011, 17:43

How to authorize the C3-00?

11-04-2011, 17:07	#1 (permalink)
gsmfun Product Manager Join Date: Oct 1999 Location: Shenzhen, Hong Kong, Bangkok Age: 42 Posts: 1,855 Member: 611 Status: Offline Sonork: 100.33333 Thanks: 13 Thanked 16,517 Times in 742 Posts	BB5 Broadcom Unlock ATF v7.90 Update!! Public Discussion Thread: BB5 Broadcom Unlock !! First In The World!! Decrypt PM 120 HASHES for ALL Broadcom BB5 Phones Bruteforce Unlock for ALL Broadcom BB5 Phones (via ATF Server or via LBF Servers) Stand Alone Super Dongle Repair for ALL Broadcom BB5 Phones Stand Alone SX-4 Authorize for ALL Broadcom BB5 Phones Full Phone Authorization via ATF Network for ALL Broadcom BB5Phones Read FULL NAND Chip Flash for ALL Broadcom BB5 Phones Now The ATF Network Supports ALL BB5 CPUs Released By Nokia!!! Here is a List of Broadcom Based BB5 Phones: C3-00 RM-614 X2-00 RM-618 X2-01 RM-709 X2-03 RM-709 X2-01.1 RM-717 2710c RM-586 7020 RM-497 ************************************************ **************************** * IMPORTANT NOTES ABOUT BROADCOM AUTHORIZE PHONE VIA THE ATF NETWORK * ********************************************** **************************** 1. Since NO other team can even Dream of releasing Broadcom Loaders before ATF Team, all Broadcom Phones Authorized by The ATF Network will require 5 ATF Network Credits. * Note that it requires 5 ATF Network Credits and NOT 5 SL3 BF Credits... 2. You NEED ATF Network Activation in order to: a. Authorize Phone b. Decrypt PM 120 Hashes for BF Unlock c. Stand Alone Super Dongle RPL Repair d. Stand Alone SX-4 Authorize 3. You DO NOT NEED ATF Network Activation if you just want to: a. Read FULL NAND Flash Chip and extract files etc... 4. If you Authorize a Broadcom Phone more than 1 time, then you will be charged and charged again and again and again with 5 credits each time. 5. Some Broadcom Phones will get stuck when Reading Phone info in Normal Mode. The correct way to do it is to change phone mode to TEST MODE before attempting to Decrypt PM 120 HASHES, Super Dongle Repairs etc... Here is a QUICK way on How to Correct Set a Broadcom Phone into TEST MODE from Normal Mode (RF Inactive) Condition. a. Put Battery to Phone and Power it On b. Connect USB Cable and Connect to PC C. Wait while Windows is Installing the Drivers... d. Go to ATF Software "Settings" --> "Nokia Settings" --> Put a check on "Skip Full Phone Information Sweep for BB5 Phones" e. Go back to "Nokia Service" and click Scan Phone... * Once the phone is detected, you can select "Test" on that DropDown list on the LEFT SIDE of "Backup RPL" Button. This will make your Phone enter into TEST MODE.... ********************************************** **************************** ********************************************** **************************** ********************************************** **************************** What Else Is New? N900 FIASCO Flashing has been moved from iTablets into the BB5 Section. --> Now you can Flash N900 just like any other BB5 Phone... Super EASY! --> The Current MAEMO Flash ENGINE does not support EMMC (VANILLA) Flashing Yet, this will be Ported on the Next Update. What was Fixed? 1. Infineon Self Test Hang on Exit: FIXED! 2. Box Activation (Activate New Box) FIXED! Whats Up? Try using the XFactor.skn skin... it Rocks! Who will buy this if you can get more in ATF? __________________________________________________ ________________________ Buy only from ATF [Advance Turbo Flasher] authorized resellers: ATF [Advance Turbo Flasher] Authorized Distributors and Resellers List ATF [Advance Turbo Flasher] official web sites: International - http://www.advance-box.com/ ATF [Advance Turbo Flasher] official support forums: World Wide: Advance Turbo Flasher - GSM-Forum Indonesia: ATF (Advance Turbo Flasher)) Philippine: Gsmph Syria: Arabic Support (Syria) GsmVIP Chinese support forum : ATF Box Vietnam: Saigonmobile India: Advance Box - .:: GsmIndia ::. Official Iran Support Forum : ASANGSM FORUM Bangladesh: Advance Box - Dhaka Mobile Chinese Support forum : www.yananliuhuan.com The Master Piece**

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
thread	Thread Starter	Forum	Replies	Last Post
Unlocking 5190	Ryu	Nokia Legacy Phones ( DCT-1 , DCT-2 , DCT-3 , DCT-L )	19	02-10-2012 08:21
UNLOCKING SP LOCK AND LOCKS 1234	andrew bennett	Nokia Legacy Phones ( DCT-1 , DCT-2 , DCT-3 , DCT-L )	6	09-12-2011 20:20
FAQ about unlock n0kia	man0n	Nokia Legacy Phones ( DCT-1 , DCT-2 , DCT-3 , DCT-L )	6	11-29-2010 18:06
$50 Reward for unlocking my 6150!!!	TheDon	Nokia Legacy Phones ( DCT-1 , DCT-2 , DCT-3 , DCT-L )	4	07-09-1999 22:08

11-04-2011, 17:19	#2 (permalink)
..::Angel::.. Product Supporter Join Date: Dec 2006 Location: Karachi, Pakistan Age: 21 Posts: 9,809 Member: 643472 Status: Offline Sonork: 100.96901 Thanks: 5 Thanked 12,034 Times in 2,772 Posts	Official download links: Offical Hotfile Mirror Offical Mirrorcreator Mirror

11-04-2011, 17:21	#3 (permalink)
pradeep_kus No Life Poster Join Date: Mar 2007 Location: --G--vv--/-\--L--i--0--\|?-- Age: 7 Posts: 1,146 Member: 459784 Status: Online Sonork: 100.1592448 Thanks: 645 Thanked 686 Times in 335 Posts	what about activation bug when we use letest varison new box not activate ( Oppss... NOT ACTIVATED )............

11-04-2011, 17:24	#6 (permalink)
hoang Product Supporter Join Date: Mar 2002 Location: SL3 BF-29min/code! SAM CODE Age: 32 Posts: 1,732 Member: 10485 Status: Offline Sonork: 100.66876 Thanks: 86 Thanked 300 Times in 195 Posts	Really amazing ) Thank ATF team! P/S: Your gift still works great

11-04-2011, 17:29	#7 (permalink)
Nonoyxp Product Supporter Join Date: Apr 2005 Location: www.gsmpinoy.com.ph Posts: 1,782 Member: 141973 Status: Offline Sonork: 100.1579084 Thanks: 2,148 Thanked 2,216 Times in 494 Posts	Wow early Xmas Gift

11-04-2011, 17:30	#8 (permalink)
MDK23 Product Supporter Join Date: Mar 2007 Location: ALGERIA Age: 5 Posts: 2,297 Member: 467636 Status: Offline Sonork: Double Kanon Thanks: 446 Thanked 2,458 Times in 689 Posts	good work thx atf team if i am not wrong reading log file for lbf need 5 credits?

11-04-2011, 17:36	#9 (permalink)
juvenile Freak Poster Join Date: Jul 2007 Location: USULUTAN, EL SALVADOR. Age: 35 Posts: 397 Member: 545374 Status: Offline Thanks: 80 Thanked 31 Times in 18 Posts	where can i buy the network credits?? in atf store??, only atf network activation 49 credits!!!! br juvenile

11-04-2011, 17:37	#11 (permalink)
libertycell Freak Poster Join Date: Jan 2010 Posts: 160 Member: 1202409 Status: Offline Thanks: 36 Thanked 22 Times in 17 Posts	bib , bang boommmmmmmmmmmmmmmm update thanks bye bye fenix s..h.i.t and cyclone

11-04-2011, 17:41	#12 (permalink)
Unlockemall Freak Poster Join Date: Sep 2008 Posts: 463 Member: 862130 Status: Offline Thanks: 35 Thanked 161 Times in 80 Posts	is this BROADCOM unlocking is from USB or USB/FBUS COMBO Please kindly let me know if I have to buy the fbus/usb still or I can use the usb cable only for unlocking this models! Thank you

11-04-2011, 17:42	#13 (permalink)
mfq Freak Poster Join Date: Jul 2009 Location: www.qureshimobiles.com Posts: 424 Member: 1083358 Status: Offline Thanks: 183 Thanked 164 Times in 89 Posts	any one tell me what is name ( device_

11-04-2011, 17:43	#15 (permalink)
jokers5 Freak Poster Join Date: Jul 2003 Location: Hungary Age: 36 Posts: 302 Member: 36035 Status: Online Thanks: 7 Thanked 8 Times in 7 Posts	How to authorize the C3-00?