GSM Shop GSM Shop
GSM-Forum  

Welcome to the GSM-Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features.
Only registered members may post questions, contact other members or search our database of over 8 million posts.

Registration is fast, simple and absolutely free so please - Click to REGISTER!

If you have any problems with the registration process or your account login, please contact contact us .

Go Back   GSM-Forum > Product Support Sections > No More Supported Solutions (Dead Products) > No More Supported H/W Products > Advance-Box


 
 
LinkBack Thread Tools Display Modes
Old 04-01-2011, 08:21   #1 (permalink)
No Life Poster
 
Frenzy_2020's Avatar
 
Join Date: Jun 2008
Location: Wish i was on Mars
Age: 40
Posts: 1,686
Member: 789089
Status: Offline
Sonork: 100.1617***
Thanks Meter: 267
Wink N8 Delima


Hi Guys,

Got this N8 for unlock. Can this phone be unlock via ATF or I have to do it through code

Code:
MCU: V 92PS1_10w34.3 10-09-10 RM-596 (c) Nokia
IMEI: 35268404700*****
Model : Nokia N8-00
Product Serial Number: CBM315398
Product Code         : 059C2K8
Basic Production Code: 0596826
Default SN Type      : 0
PPM Version          : V 92PS1_10w34.3 10-09-10 RM-596 (c) Nokia
HW Version           : 7100
RFIC Version         : |Alli_4.3.4
DSP Version          : TB92PS1_10w34.1
APE BT Version       : HCI Version 4 (rev. 0). LMP Version 4 (rev. 7455). Manufacturer 13.
AHNE Version         : 11
APE SW Core Version  : 011.012
APE Variant Version  : 011.012.00.01011.012.11.01011.012.214.06
APE Test Version     : rm596_ENO_2010wk34v136
Retu Version         : 35
Tahvo Version        : 00
APE HW Version       : 256
APE ADSP SW Version  : 256

   ********   Reading SimLock   ******** 
CONFIG KEY:  0000000000000000
PROVIDER KEY:  2140100000000000
Provider  :  Vodafone / Airtel Movil;Spain
Counters  :  0/3  ,  0/10
   Block [1]  1:Close
   Block [2]  1:Close
SP Lock Status :  Locked

SIMLOCK_TYPE             : PA_SL3 (15-digit NCK)
SIMLOCK_TEST             : PASSED
SECURITY_TEST           : PASSED
PHONE_MODE              : LOCAL MODE


Make sure you have installed the
COMPLETE Flash Package for this Phone...

Goto "Settings" --> "Nokia Settings" and verify that
the Folder where you installed your Flash Files are
in the "PRODUCT PATH TO SCAN" List...
Plz advice how do i unlock this
 
Old 04-01-2011, 08:26   #2 (permalink)
No Life Poster
 
Advance-Box's Avatar
 
Join Date: Dec 2007
Posts: 7,598
Member: 651945
Status: Offline
Thanks Meter: 20,118
@Frenzy_2020



You can unlock this phone via ATF using 5 credits to Authorize this phone
via The ATF Network using FBUS CABLE. Then you can extract the PM 120
HASHES from it using FBUS CABLE and bruteforce the CODE from it.



ALL BB5 PHONES that support FBUS CABLES are supported in ATF.


IT DOES NOT MATTER WHAT HASH IS INSIDE THE PHONE!!!

IF YOU CAN CONNECT FBUS CABLE TO THE PHONE, THEN ATF SUPPORT IT.
 
The Following User Says Thank You to Advance-Box For This Useful Post:
Old 04-01-2011, 09:40   #3 (permalink)
No Life Poster
 
Frenzy_2020's Avatar
 
Join Date: Jun 2008
Location: Wish i was on Mars
Age: 40
Posts: 1,686
Member: 789089
Status: Offline
Sonork: 100.1617***
Thanks Meter: 267
any tutorial for this procedure..abit of a newbie here
 
Old 04-01-2011, 10:51   #4 (permalink)
No Life Poster
 
xerraco's Avatar
 
Join Date: Nov 2008
Location: RVIII
Posts: 11,696
Member: 890926
Status: Offline
Thanks Meter: 2,053
Look here mate...http://forum.gsmhosting.com/vbb/f609...force-1222925/
 
Old 04-01-2011, 17:33   #5 (permalink)
No Life Poster
 
Frenzy_2020's Avatar
 
Join Date: Jun 2008
Location: Wish i was on Mars
Age: 40
Posts: 1,686
Member: 789089
Status: Offline
Sonork: 100.1617***
Thanks Meter: 267
succusfully activated ATF network account with 99 credits and authorised the phone hope i am able to get the code soon.

LOG
Code:
17:31:39 : MCU: V 92PS1_10w34.3 10-09-10 RM-596 (c) Nokia
17:31:39 : IMEI: 352684047******
17:31:39 : Model : Nokia N8-00
17:31:39 : Product Serial Number: CBM315398
17:31:39 : Product Code         : 059C2K8
17:31:39 : Basic Production Code: 0596826
17:31:39 : Default SN Type      : 0
17:31:40 : PPM Version          : V 92PS1_10w34.3 10-09-10 RM-596 (c) Nokia
17:31:40 : HW Version           : 7100
17:31:40 : RFIC Version         : |Alli_4.3.4
17:31:40 : DSP Version          : TB92PS1_10w34.1
17:31:40 : APE BT Version       : HCI Version 4 (rev. 0). LMP Version 4 (rev. 7455). Manufacturer 13.
17:31:40 : AHNE Version         : 11
17:31:41 : APE SW Core Version  : 011.012
17:31:41 : APE Variant Version  : 011.012.00.01011.012.11.01011.012.214.06
17:31:41 : APE Test Version     : rm596_ENO_2010wk34v136
17:31:41 : Retu Version         : 35
17:31:41 : Tahvo Version        : 00
17:31:41 : APE HW Version       : 256
17:31:41 : APE ADSP SW Version  : 256
17:31:41 : 
17:31:41 :    ********   Reading SimLock   ******** 
17:31:41 : CONFIG KEY:  0000000000000000
17:31:41 : PROVIDER KEY:  2140100000000000
17:31:41 : Provider  :  Vodafone / Airtel Movil;Spain
17:31:41 : Counters  :  0/3  ,  0/10
17:31:41 :    Block [1]  1:Close
17:31:41 :    Block [2]  1:Close
17:31:41 : SP Lock Status :  Locked
17:31:41 : 
17:31:41 : SIMLOCK_TYPE             : PA_SL3 (15-digit NCK)
17:31:41 : SIMLOCK_TEST             : PASSED
17:31:41 : SECURITY_TEST           : PASSED
17:31:42 : PHONE_MODE              : LOCAL MODE
17:31:42 : 
17:31:46 : 
17:31:46 : Make sure you have installed the
17:31:46 : COMPLETE Flash Package for this Phone...
17:31:46 : 
17:31:46 : Goto "Settings" --> "Nokia Settings" and verify that
17:31:46 : the Folder where you installed your Flash Files are
17:31:46 : in the "PRODUCT PATH TO SCAN" List...
17:31:54 : 
17:31:54 : AdvanceBox SendBootCodeEx
17:31:54 : InitialiseBootstrap_DCT5 DIR
17:31:54 : BootFlashMode_DCT5
17:31:54 : 
17:31:54 : ******************************************************
17:31:54 :                  TIME STARTS HERE                      
17:31:54 : ******************************************************
17:31:54 : 
17:31:54 : BootFlashModeDCT5Ex Succeeded First Time
17:31:54 : SYSTEM_ID_RESPONSE_BB5 (0xC0) - 0  (0x00) bytes returned
17:31:54 : Number of Sub Blocks 7  (0x07)
17:31:54 :   1  SYSTEM_ASIC_ID 01
17:31:54 :      Block Length  : 21  (15)
17:31:54 :      BB ASIC Index : 0  (00)  CMT
17:31:54 :      ID DWORD    0 : 00000003
17:31:54 :      ID DWORD    1 : 00000226
17:31:54 :      ID DWORD    2 : 00010007
17:31:54 :      ID DWORD    3 : 600C1921
17:31:54 :      ID DWORD    4 : 02031104
17:31:54 :   2  ROM_ID 15
17:31:54 :      Block Length  : 5  (05)
17:31:54 :      BB ASIC Index : 0  (00)  CMT
17:31:54 :      ID DWORD    0 : 00000C35
17:31:54 :   3  ROM_ID 15
17:31:54 :      Block Length  : 5  (05)
17:31:54 :      BB ASIC Index : 0  (00)  CMT
17:31:55 :      ID DWORD    0 : 00000C30
17:31:55 :   4  PUBLIC_ID 12
17:31:55 :      Block Length  : 21  (15)
17:31:55 :      BB ASIC Index : 0  (00)  CMT
17:31:55 :      ID DWORD    0 : 18700205
17:31:55 :      ID DWORD    1 : C2A40344
17:31:55 :      ID DWORD    2 : 44664FF6
17:31:55 :      ID DWORD    3 : 0C321970
17:31:55 :      ID DWORD    4 : 71D2B777
17:31:55 :   5  ASIC_MODE_ID 13
17:31:55 :      Block Length  : 2  (02)
17:31:55 :      BB ASIC Index : 0  (00)  CMT
17:31:55 :      Mode Id       : 00
17:31:55 :   6  ROOT_KEY_HASH 14
17:31:55 :      Block Length  : 17  (11)
17:31:55 :      BB ASIC Index : 0  (00)  CMT
17:31:55 :      Hash          :  91 6F 75 21 7F 32 08 12 48 B1 5C 38 DF C8 E8 1B 
17:31:55 :   7  ROM_ID 15
17:31:55 :      Block Length  : 9  (09)
17:31:55 :      BB ASIC Index : 0  (00)  CMT
17:31:55 :      CRC         0 : E693EF0D
17:31:55 :      CRC         1 : AC22615B
17:31:55 : Checksum           EB
17:31:55 : 
17:31:55 : SearchForBootstrap_DCT5..
17:31:55 : C:\AdvanceBox Turbo Flasher\Nokia\BB5_Loader\New\RAPUv11_2nd.fg
17:31:55 : Boot File - Version  010.050.00
17:31:55 : Boot File - Revision 0x0003 (3)
17:31:55 : eBB5ProtocolType == New
17:31:55 : PrepareBootstrapFile_DCT5 replaced "SILO" with "2ND\0"
17:31:55 : PrepareBootstrapFile_DCT5 replaced "BOOT_MEDIAX" with "BOOT_MEDIA0"
17:31:55 : SearchForBootstrap_DCT5  : No Error - 0 (0x00)
17:31:55 : Secondary Loader Sent...
17:31:55 : TransmissionTypeRequest_DCT5_NewProtocol
17:31:55 : TRANSMISSION_TYPE_REQUEST_BB5 GET_PROTOCOLS_BB5
17:31:55 : TRANSMISSION_TYPE_REQUEST_BB5 : 59 01 3E 00 C0
17:31:55 : TransmissionTypeRequest_DCT5_NewProtocol
17:31:55 : FPIF_TRANSMISSION_MODE_LIST_BB5 using default mode 04 DDRand2TX
17:31:55 : TRANSMISSION_TYPE_REQUEST_BB5 : 59 02 41 02 04 00 36 03 00 00 61 1C 
17:31:55 : Transmission Type Request Sent...
17:31:55 : ConfigurationRequest_DCT5 (RAM_SIZE_BB5 0x0000)..
17:31:55 : MCU_CONFIGURATION_RESPONSE_BB5:
17:31:55 :  MessageID  : C1
17:31:55 :  SubBlocks  : 06
17:31:55 :  1 Sub Block ID      : 10  STORAGE_DEVICE_ID_BB5
17:31:55 :    Block Length      : 0B
17:31:55 :    BB ASIC Index     : CMT  00
17:31:55 :    Device Type       : RAM  05
17:31:55 :    Device Index      : 00
17:31:55 :    Manufacturer Code : 0000 -> Flash
17:31:55 :    Device ID         : 0000 -> not detected
17:31:55 :    Extended/Fixed ID : 0000
17:31:55 :    Revision ID       : 0000
17:31:55 :  2 Sub Block ID      : 10  STORAGE_DEVICE_ID_BB5
17:31:55 :    Block Length      : 0B
17:31:55 :    BB ASIC Index     : CMT  00
17:31:55 :    Device Type       : MMC  04
17:31:55 :    Device Index      : 00
17:31:55 :    Manufacturer Code : FFFF -> Flash
17:31:55 :    Device ID         : 0000 -> BAD FLASH TYPE
17:31:55 :    Extended/Fixed ID : 0000
17:31:55 :    Revision ID       : 0000
17:31:55 :  3 Sub Block ID      : 10  STORAGE_DEVICE_ID_BB5
17:31:55 :    Block Length      : 0B
17:31:55 :    BB ASIC Index     : CMT  00
17:31:55 :    Device Type       : NOR  00
17:31:55 :    Device Index      : 00
17:31:55 :    Manufacturer Code : 0000 -> Flash
17:31:55 :    Device ID         : 0000 -> not detected
17:31:55 :    Extended/Fixed ID : 0000
17:31:55 :    Revision ID       : 0000
17:31:55 :  4 Sub Block ID      : 10  STORAGE_DEVICE_ID_BB5
17:31:55 :    Block Length      : 0B
17:31:55 :    BB ASIC Index     : CMT  00
17:31:55 :    Device Type       : NOR  00
17:31:55 :    Device Index      : 01
17:31:55 :    Manufacturer Code : 0000 -> SPANSION
17:31:55 :    Device ID         : 0001 -> not used
17:31:55 :    Extended/Fixed ID : 0000
17:31:55 :    Revision ID       : 0000
17:31:55 :  5 Sub Block ID      : 10  STORAGE_DEVICE_ID_BB5
17:31:55 :    Block Length      : 0B
17:31:55 :    BB ASIC Index     : CMT  00
17:31:55 :    Device Type       : MuxOneNAND  03
17:31:55 :    Device Index      : 00
17:31:55 :    Manufacturer Code : 00EC -> 
17:31:55 :    Device ID         : 0050 -> Type not in database
17:31:55 :    Extended/Fixed ID : 0000
17:31:55 :    Revision ID       : 0031
17:31:55 :  6 Sub Block ID      : 35  NAND_DRIVER_VERSION_BB5
17:31:55 :    Block Length      : 09
17:31:55 :    BB ASIC Index     : CMT  00
17:31:55 :    Data              : XSR 1.6 
17:31:55 :  Checksum   : 09
17:31:55 : SearchForBootstrap_DCT5  : No Error - 0 (0x00)
17:31:55 : FLS1SendAlgoCodeEx..
17:31:55 : SendAlgoCode_DCT5..
17:31:55 : SearchForAlgorithm_DCT5..
17:31:55 : Looking for ALL Devices...
17:31:55 : Searching Algorithm Files MuxOneNAND (03) ManID :00EC DevID :0050 ExtID :0000 RevID :0031
17:31:55 : Flash Descriptor
17:31:55 :    Manufacturer Code : 00EC
17:31:55 :    Device ID         : 0050
17:31:55 :    Extended/Fixed ID : 0000
17:31:55 :    Revision ID       : 0000
17:31:55 :    Size              : 20000000 (512 MB)
17:31:55 :    VPP Info          : 0000
17:31:55 :    Erase10s          : 1E
17:31:55 :    Block1s           : 32
17:31:55 :    BErase1s          : 02
17:31:55 :    Reserved0         : 00
17:31:55 :    Reserved1         : 00
17:31:55 :    Reserved2         : 00
17:31:55 : C:\AdvanceBox Turbo Flasher\Nokia\BB5_Loader\New\RAPUv11_XSR17_alg.fg
17:31:55 : Algorithm File - Version  010.050.00
17:31:55 : Algorithm File - Revision 0x0003 (3)
17:31:55 : eBB5ProtocolType == New
17:31:56 : Patch Loader Found!
17:31:56 : C:\AdvanceBox Turbo Flasher\Nokia\loader\CustomLoader_RAPUv11.ldr
17:31:57 : Algo Loader Sent...
17:31:57 : SendCodeStart_NewProtocol :
17:31:58 : SendCodeStart_NewProtocol_DCT5 : No Error - 0 (0x00)
17:31:58 : TransmissionTypeRequest_DCT5_NewProtocol
17:31:58 : TRANSMISSION_TYPE_REQUEST_BB5 GET_PROTOCOLS_BB5
17:31:58 : TRANSMISSION_TYPE_REQUEST_BB5 : 59 01 3E 00 C0
17:31:58 : TransmissionTypeRequest_DCT5_NewProtocol
17:31:58 : FPIF_TRANSMISSION_MODE_LIST_BB5 using default mode 04 DDRand2TX
17:31:58 : TRANSMISSION_TYPE_REQUEST_BB5 : 59 02 41 02 04 00 36 03 00 00 61 1C 
17:31:58 : SendAlgoCodeFile_DCT5 : No Error - 0 (0x00)
17:31:58 : FUR_Control_AddClient_BB5() ASIC_INDEX_CMT (Ready)
17:31:58 : FUR control Ok...
17:31:58 : VPP Enabled by Software
17:31:58 : Using Internal VPP
17:31:58 : VPP Enabled by Software 
17:31:58 : FLASH_VOLTAGE_INIT_BB5 : 5C 01 26 04 00 00 00 00 D4
17:31:58 : Pabub KEY Request 
17:31:58 : PhoneInfoRequest_BB5 (Asic Index 00 )
17:31:58 : PHONE_INFO_RESPONSE_BB5
17:31:58 :    PAPUB_KEYS_HASH_RESP_BB5 2A
17:31:58 :    BB Asic Index   : 00
17:31:58 : CMT PAPUBKEYS HASH: 
17:31:58 : D172C32473AE199B213465ABB3853246F9631231
17:31:59 : Reading NPC IMEI...
17:31:59 : 352684047006189
17:31:59 : Connecting to The ATF Network
17:32:01 : Network Connection Accepted
17:32:02 : Requesting Authorization Code
17:32:04 : Authorization Code Received
17:32:04 : Verifying Authorization Code
17:32:04 : Authorization Code is OK
17:32:04 : Saving Authorization Code
17:32:06 : File Saving Complete!!!
17:32:06 : 
17:32:06 : 
17:32:06 : ======================================================
17:32:06 :           Phone was Successfully Authorized           
17:32:06 : ======================================================
17:32:06 :     Super Dongle Repair and Stand Alone SX-4          
17:32:06 :          is NOW ENABLED for this Phone...             
17:32:06 : ======================================================
17:32:06 :                                                       
17:32:06 :          Thank you for using The ATF Network          
17:32:06 :                                                       
17:32:06 :                                                       
17:32:06 : FlashInfo.RestartMode : 2
17:32:07 : 
17:32:07 : Time Taken to Complete Tasks: 00:00:13
17:41:04 : 
17:41:04 : MCU: V 92PS1_10w34.3 10-09-10 RM-596 (c) Nokia
17:41:04 : IMEI: 35268404700****
17:41:04 : Model : Nokia N8-00
17:41:04 : Product Serial Number: CBM315398
17:41:04 : Product Code         : 059C2K8
17:41:04 : Basic Production Code: 0596826
17:41:04 : Default SN Type      : 0
17:41:05 : PPM Version          : V 92PS1_10w34.3 10-09-10 RM-596 (c) Nokia
17:41:05 : HW Version           : 7100
17:41:05 : RFIC Version         : |Alli_4.3.4
17:41:05 : DSP Version          : TB92PS1_10w34.1
17:41:05 : APE BT Version       : HCI Version 4 (rev. 0). LMP Version 4 (rev. 7455). Manufacturer 13.
17:41:05 : AHNE Version         : 11
17:41:06 : APE SW Core Version  : 011.012
17:41:06 : APE Variant Version  : 011.012.00.01011.012.11.01011.012.214.06
17:41:06 : APE Test Version     : rm596_ENO_2010wk34v136
17:41:06 : Retu Version         : 35
17:41:06 : Tahvo Version        : 00
17:41:06 : APE HW Version       : 256
17:41:06 : APE ADSP SW Version  : 256
17:41:06 : 
17:41:06 :    ********   Reading SimLock   ******** 
17:41:06 : CONFIG KEY:  0000000000000000
17:41:06 : PROVIDER KEY:  2140100000000000
17:41:06 : Provider  :  Vodafone / Airtel Movil;Spain
17:41:06 : Counters  :  0/3  ,  0/10
17:41:06 :    Block [1]  1:Close
17:41:06 :    Block [2]  1:Close
17:41:06 : SP Lock Status :  Locked
17:41:06 : 
17:41:06 : SIMLOCK_TYPE             : PA_SL3 (15-digit NCK)
17:41:06 : SIMLOCK_TEST             : PASSED
17:41:06 : SECURITY_TEST           : PASSED
17:41:06 : PHONE_MODE              : TEST MODE
17:41:06 : 
17:41:07 : 
17:41:07 : AdvanceBox SendBootCodeEx
17:41:07 : InitialiseBootstrap_DCT5 DIR
17:41:07 : BootFlashMode_DCT5
17:41:07 : 
17:41:07 : ******************************************************
17:41:07 :                  TIME STARTS HERE                      
17:41:07 : ******************************************************
17:41:07 : 
17:41:07 : BootFlashModeDCT5Ex Succeeded First Time
17:41:07 : SYSTEM_ID_RESPONSE_BB5 (0xC0) - 0  (0x00) bytes returned
17:41:07 : Number of Sub Blocks 7  (0x07)
17:41:07 :   1  SYSTEM_ASIC_ID 01
17:41:07 :      Block Length  : 21  (15)
17:41:07 :      BB ASIC Index : 0  (00)  CMT
17:41:07 :      ID DWORD    0 : 00000003
17:41:07 :      ID DWORD    1 : 00000226
17:41:07 :      ID DWORD    2 : 00010007
17:41:07 :      ID DWORD    3 : 600C1921
17:41:07 :      ID DWORD    4 : 02031104
17:41:07 :   2  ROM_ID 15
17:41:07 :      Block Length  : 5  (05)
17:41:07 :      BB ASIC Index : 0  (00)  CMT
17:41:07 :      ID DWORD    0 : 00000C35
17:41:07 :   3  ROM_ID 15
17:41:07 :      Block Length  : 5  (05)
17:41:07 :      BB ASIC Index : 0  (00)  CMT
17:41:07 :      ID DWORD    0 : 00000C30
17:41:08 :   4  PUBLIC_ID 12
17:41:08 :      Block Length  : 21  (15)
17:41:08 :      BB ASIC Index : 0  (00)  CMT
17:41:08 :      ID DWORD    0 : 18700205
17:41:08 :      ID DWORD    1 : C2A40344
17:41:08 :      ID DWORD    2 : 44664FF6
17:41:08 :      ID DWORD    3 : 0C321970
17:41:08 :      ID DWORD    4 : 71D2B777
17:41:08 :   5  ASIC_MODE_ID 13
17:41:08 :      Block Length  : 2  (02)
17:41:08 :      BB ASIC Index : 0  (00)  CMT
17:41:08 :      Mode Id       : 00
17:41:08 :   6  ROOT_KEY_HASH 14
17:41:08 :      Block Length  : 17  (11)
17:41:08 :      BB ASIC Index : 0  (00)  CMT
17:41:08 :      Hash          :  91 6F 75 21 7F 32 08 12 48 B1 5C 38 DF C8 E8 1B 
17:41:08 :   7  ROM_ID 15
17:41:08 :      Block Length  : 9  (09)
17:41:08 :      BB ASIC Index : 0  (00)  CMT
17:41:08 :      CRC         0 : E693EF0D
17:41:08 :      CRC         1 : AC22615B
17:41:08 : Checksum           EB
17:41:08 : 
17:41:08 : SearchForBootstrap_DCT5..
17:41:08 : C:\AdvanceBox Turbo Flasher\Nokia\BB5_Loader\New\RAPUv11_2nd.fg
17:41:08 : Boot File - Version  010.050.00
17:41:08 : Boot File - Revision 0x0003 (3)
17:41:08 : eBB5ProtocolType == New
17:41:08 : PrepareBootstrapFile_DCT5 replaced "SILO" with "2ND\0"
17:41:08 : PrepareBootstrapFile_DCT5 replaced "BOOT_MEDIAX" with "BOOT_MEDIA0"
17:41:08 : SearchForBootstrap_DCT5  : No Error - 0 (0x00)
17:41:08 : Secondary Loader Sent...
17:41:08 : TransmissionTypeRequest_DCT5_NewProtocol
17:41:08 : TRANSMISSION_TYPE_REQUEST_BB5 GET_PROTOCOLS_BB5
17:41:08 : TRANSMISSION_TYPE_REQUEST_BB5 : 59 01 3E 00 C0
17:41:08 : TransmissionTypeRequest_DCT5_NewProtocol
17:41:08 : FPIF_TRANSMISSION_MODE_LIST_BB5 using default mode 04 DDRand2TX
17:41:08 : TRANSMISSION_TYPE_REQUEST_BB5 : 59 02 41 02 04 00 36 03 00 00 61 1C 
17:41:08 : Transmission Type Request Sent...
17:41:08 : ConfigurationRequest_DCT5 (RAM_SIZE_BB5 0x0000)..
17:41:08 : MCU_CONFIGURATION_RESPONSE_BB5:
17:41:08 :  MessageID  : C1
17:41:08 :  SubBlocks  : 06
17:41:08 :  1 Sub Block ID      : 10  STORAGE_DEVICE_ID_BB5
17:41:08 :    Block Length      : 0B
17:41:08 :    BB ASIC Index     : CMT  00
17:41:08 :    Device Type       : RAM  05
17:41:08 :    Device Index      : 00
17:41:09 :    Manufacturer Code : 0000 -> Flash
17:41:09 :    Device ID         : 0000 -> not detected
17:41:09 :    Extended/Fixed ID : 0000
17:41:09 :    Revision ID       : 0000
17:41:09 :  2 Sub Block ID      : 10  STORAGE_DEVICE_ID_BB5
17:41:09 :    Block Length      : 0B
17:41:09 :    BB ASIC Index     : CMT  00
17:41:09 :    Device Type       : MMC  04
17:41:09 :    Device Index      : 00
17:41:09 :    Manufacturer Code : FFFF -> Flash
17:41:09 :    Device ID         : 0000 -> BAD FLASH TYPE
17:41:09 :    Extended/Fixed ID : 0000
17:41:09 :    Revision ID       : 0000
17:41:09 :  3 Sub Block ID      : 10  STORAGE_DEVICE_ID_BB5
17:41:09 :    Block Length      : 0B
17:41:09 :    BB ASIC Index     : CMT  00
17:41:09 :    Device Type       : NOR  00
17:41:09 :    Device Index      : 00
17:41:09 :    Manufacturer Code : 0000 -> Flash
17:41:09 :    Device ID         : 0000 -> not detected
17:41:09 :    Extended/Fixed ID : 0000
17:41:09 :    Revision ID       : 0000
17:41:09 :  4 Sub Block ID      : 10  STORAGE_DEVICE_ID_BB5
17:41:09 :    Block Length      : 0B
17:41:09 :    BB ASIC Index     : CMT  00
17:41:09 :    Device Type       : NOR  00
17:41:09 :    Device Index      : 01
17:41:09 :    Manufacturer Code : 0000 -> SPANSION
17:41:09 :    Device ID         : 0001 -> not used
17:41:09 :    Extended/Fixed ID : 0000
17:41:09 :    Revision ID       : 0000
17:41:09 :  5 Sub Block ID      : 10  STORAGE_DEVICE_ID_BB5
17:41:09 :    Block Length      : 0B
17:41:09 :    BB ASIC Index     : CMT  00
17:41:09 :    Device Type       : MuxOneNAND  03
17:41:09 :    Device Index      : 00
17:41:09 :    Manufacturer Code : 00EC -> 
17:41:09 :    Device ID         : 0050 -> Type not in database
17:41:09 :    Extended/Fixed ID : 0000
17:41:09 :    Revision ID       : 0031
17:41:09 :  6 Sub Block ID      : 35  NAND_DRIVER_VERSION_BB5
17:41:09 :    Block Length      : 09
17:41:09 :    BB ASIC Index     : CMT  00
17:41:09 :    Data              : XSR 1.6 
17:41:09 :  Checksum   : 09
17:41:09 : SearchForBootstrap_DCT5  : No Error - 0 (0x00)
17:41:09 : FLS1SendAlgoCodeEx..
17:41:09 : SendAlgoCode_DCT5..
17:41:09 : SearchForAlgorithm_DCT5..
17:41:09 : Looking for ALL Devices...
17:41:09 : Searching Algorithm Files MuxOneNAND (03) ManID :00EC DevID :0050 ExtID :0000 RevID :0031
17:41:09 : Flash Descriptor
17:41:09 :    Manufacturer Code : 00EC
17:41:09 :    Device ID         : 0050
17:41:09 :    Extended/Fixed ID : 0000
17:41:09 :    Revision ID       : 0000
17:41:09 :    Size              : 20000000 (512 MB)
17:41:09 :    VPP Info          : 0000
17:41:09 :    Erase10s          : 1E
17:41:09 :    Block1s           : 32
17:41:09 :    BErase1s          : 02
17:41:09 :    Reserved0         : 00
17:41:09 :    Reserved1         : 00
17:41:09 :    Reserved2         : 00
17:41:09 : C:\AdvanceBox Turbo Flasher\Nokia\BB5_Loader\New\RAPUv11_XSR17_alg.fg
17:41:09 : Algorithm File - Version  010.050.00
17:41:09 : Algorithm File - Revision 0x0003 (3)
17:41:09 : eBB5ProtocolType == New
17:41:10 : Algo Loader Sent...
17:41:10 : SendCodeStart_NewProtocol :
17:41:11 : SendCodeStart_NewProtocol_DCT5 : No Error - 0 (0x00)
17:41:11 : TransmissionTypeRequest_DCT5_NewProtocol
17:41:11 : TRANSMISSION_TYPE_REQUEST_BB5 GET_PROTOCOLS_BB5
17:41:11 : TRANSMISSION_TYPE_REQUEST_BB5 : 59 01 3E 00 C0
17:41:11 : TransmissionTypeRequest_DCT5_NewProtocol
17:41:11 : FPIF_TRANSMISSION_MODE_LIST_BB5 using default mode 04 DDRand2TX
17:41:11 : TRANSMISSION_TYPE_REQUEST_BB5 : 59 02 41 02 04 00 36 03 00 00 61 1C 
17:41:11 : SendAlgoCodeFile_DCT5 : No Error - 0 (0x00)
17:41:11 : FUR_Control_AddClient_BB5() ASIC_INDEX_CMT (Ready)
17:41:11 : FUR control Ok...
17:41:11 : VPP Enabled by Software
17:41:11 : Using Internal VPP
17:41:11 : VPP Enabled by Software 
17:41:11 : FLASH_VOLTAGE_INIT_BB5 : 5C 01 26 04 00 00 00 00 D4
17:41:11 : Pabub KEY Request 
17:41:11 : PhoneInfoRequest_BB5 (Asic Index 00 )
17:41:11 : PHONE_INFO_RESPONSE_BB5
17:41:11 :    PAPUB_KEYS_HASH_RESP_BB5 2A
17:41:11 :    BB Asic Index   : 00
17:41:11 : CMT PAPUBKEYS HASH: 
17:41:11 : D172C32473AE199B213465ABB3853246F9631231
17:41:11 : 
17:41:11 : Scanning Simlock Applet Type...
17:41:15 : OK
17:41:15 : 
17:41:15 : =================================================
17:41:15 :              PA_SL3 Applet detected              
17:41:15 : =================================================
17:41:15 : 
17:41:15 : Dumping RSA Modulus...
17:41:16 : OK
17:41:16 : 
17:41:16 : =================================================
17:41:16 :                 RSA Modulus OK                   
17:41:16 : =================================================
17:41:16 : FlashInfo.RestartMode : 2
17:41:16 : 
17:41:17 : ===================================================
17:41:17 :  Decrypt SL3 PM 120 HASHES for Brute Force Unlock  
17:41:17 : ===================================================
17:41:17 : Decrypting PM 120...                               
17:41:17 : (This may take upto 30 Seconds on New RAPIDO HASH) 
17:41:17 : 
17:41:17 : PM 120 HASHES Extracted Successfully
17:41:17 : 
17:41:17 : 7B3407A0235120ECB869B0D04ABD251A915C3922
17:41:17 : DD7730EF3EC0E6D5040F5A7A69CB0A4B91877229
17:41:17 : D54F160EF9A1E395BA4CC691FFAC41299EFA97AA
17:41:17 : EC183C4FB7711525622F066DE8838F979CC31847
17:41:17 : D14A37DA6EC27C148335B85097164C2EAB41A427
17:41:17 : 28F50BB99AC88DA1E2189341DF8E8A26063C8A5A
17:41:17 : 1EAF0C6CB84383582FC746A53432E366D68A2567
17:41:17 : 0C0BB68ECC4633526ADD999EADD2625AFC5D95D5
17:41:17 : 
17:41:17 : 
17:41:17 : 
17:41:17 : Log Files for Local Brute Force Saved to:
17:41:17 : C:\AdvanceBox Turbo Flasher\Nokia\Bruteforce\352684047006189\352684047006189.log
17:41:17 : C:\AdvanceBox Turbo Flasher\Nokia\Bruteforce\352684047006189\352684047006189.bcl
17:41:17 : C:\AdvanceBox Turbo Flasher\Nokia\Bruteforce\352684047006189\352684047006189.sha
17:41:17 : 
17:41:17 : Command Line for ighashgpu:
17:41:17 : ighashgpu -t:sha1 -salt:003526840470061800 -h:7B3407A0235120ECB869B0D04ABD251A915C3922 -uh:00010203040506070809 -min:15 -max:15
17:41:17 : 
17:41:17 : Saved as MS Batch File: 352684047006189_ighashgpu.bat
17:41:17 : 
17:41:17 : Process Done!

Thanks ATF

Br

frenZy
 
Old 04-01-2011, 18:05   #6 (permalink)
No Life Poster
 
tito millo's Avatar
 
Join Date: Nov 2006
Location: Where money is made
Age: 33
Posts: 3,045
Member: 390642
Status: Offline
Sonork: 100.1573430
Thanks Meter: 2,476
Quote:
Originally Posted by Advance-Box View Post
@Frenzy_2020



You can unlock this phone via ATF using 5 credits to Authorize this phone
via The ATF Network using FBUS CABLE. Then you can extract the PM 120
HASHES from it using FBUS CABLE and bruteforce the CODE from it.



ALL BB5 PHONES that support FBUS CABLES are supported in ATF.


IT DOES NOT MATTER WHAT HASH IS INSIDE THE PHONE!!!

IF YOU CAN CONNECT FBUS CABLE TO THE PHONE, THEN ATF SUPPORT IT.
What about support for BoardComm phones as C3,X2,etc.

Br,
Tito Millo
 
Old 04-01-2011, 18:51   #7 (permalink)
Freak Poster
 
surinder's Avatar
 
Join Date: Jan 2006
Location: india
Age: 48
Posts: 117
Member: 224632
Status: Offline
Sonork: 100.1594422
Thanks Meter: 16
Quote:
Originally Posted by tito millo View Post
What about support for BoardComm phones as C3,X2,etc.

Br,
Tito Millo
as he said if you can connect with fbus cable you can unlock broadcom phones dosn't connect with fbus cable
 
Old 04-01-2011, 18:57   #8 (permalink)
No Life Poster
 
tito millo's Avatar
 
Join Date: Nov 2006
Location: Where money is made
Age: 33
Posts: 3,045
Member: 390642
Status: Offline
Sonork: 100.1573430
Thanks Meter: 2,476
Quote:
Originally Posted by surinder View Post
as he said if you can connect with fbus cable you can unlock broadcom phones dosn't connect with fbus cable
I already know that but i am asking cuase coder wrote in an other post that he's working on a solution to use USB cable.

Br,
Tito Millo
 
Old 04-01-2011, 19:18   #9 (permalink)
No Life Poster
 
Frenzy_2020's Avatar
 
Join Date: Jun 2008
Location: Wish i was on Mars
Age: 40
Posts: 1,686
Member: 789089
Status: Offline
Sonork: 100.1617***
Thanks Meter: 267
If broadcom can be connected via Fbus then it wud be just great to unlock those phone.....
 
 

Bookmarks


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Nec N8 c0c0 NEC 9 11-17-2003 11:14
NEC N8 & SAMSUNG v200 c0c0 Wanted Products 1 07-03-2003 17:05
nec n8 c0c0 NEC 1 06-26-2003 10:52
i am loooking for Nec N8 xj7 NEC 0 05-02-2003 15:15
New connector ALC OT525/NKI3650/N8.. pcsos Main Sales Section 0 02-05-2003 04:09

 



All times are GMT +1. The time now is 11:28.



Powered by Searchlight © 2024 Axivo Inc.
vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2024 DragonByte Technologies Ltd.
- GSM Hosting Ltd. - 1999-2023 -
Page generated in 0.32977 seconds with 10 queries

SEO by vBSEO