[glicos]

Tested on N73 Softbank 05wk47v39.2 (unsupported)

1. After backup using JAF, upgrade phone to 05wk47v48.3, (4.0727.2.2.1)
2. Unlock phone using BB5box.

Here's log (JAF)

JAF version 1.98.35
Detected PKEY: 9XXXXXXX
Card life counter: 76.75%
P-key nokia module version 01.00
Detected JAF INTERFACE version: 01.B0, Driver version: 40000, Library version: 30107
JAF DCT4/BB5 LOADERS DIR: C:\Program Files\ODEON\JAF\Flash\
JAF DCT4/BB5 PRODUCT DIR: C:\Program Files\Nokia\Phoenix\products\
JAF USB LOADERS DIR: C:\Program Files\ODEON\JAF\FlashUSB\
JAF DCT3/DCTL LOADERS DIR: C:\Program Files\ODEON\JAF\Flash3\
Changing mode...Done!
Backing up CRT data...
Setting FLASH MODE
Loader version: 01.15.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
Loader version: 01.16.00 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
Getting CMT Public Keys...
CMT Loader Ready
Reading CMT NPC certificate...
Reading CMT VARIANT certificate...
Reading CMT CCC certificate...
CCC not available...
Reading CMT HWC certificate...
HWC not available...
Saved to C:\Program Files\ODEON\JAF\ProgData\35XXXXXXXXXXXX_CRT_backup _147510.rpl
Backup CRT OK!
Backing up SIMLOCK data...
Setting local mode...
Reading IMEI...
C:\Program Files\ODEON\JAF\ProgData\35XXXXXXXXXXXXX_CRT_backu p_148510.pm
Done!
Backup LCK OK!
Reading SW version...05wk47v39.2
Done!
Total time: 0 Minutes, 0 Seconds

DCT4/BB5 counter: 493
After flash processing...
Waiting for phone to boot...
Reading...
Phone type: RM-133, Software version: 05wk47v39.2
IMEI: 35XXXXXXXXXXXXX
APE Ver: V 3.0706.1.5.3
12-02-2007
RM-133

Variant Ver: V 3.0706.1.5.3-55
12-02-2007
RM-133

Product Code: 0514865
Done!
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
Switching to serial...
Powering the phone...
Reading...
MCU SW version: V 05wk47v39.2
11-01-07
RM-133
(c) Nokia.
HW version: 6019
PCI version:
RFIC version: 17191719
DSP version: scarfe_05wk46v41
APE SW Core version: V 3.0706.1.5.3
12-02-2007
RM-133

APE Variant version: V 3.0706.1.5.3-55
12-02-2007
RM-133

Retu version: 15
Tahvo version: 21
APE HW version: 1
APE ADSP SW version: 256
Camera version: 1
APE BT version: HCI Version 3 (rev. 1740). LMP Version 3 (rev. 1740). Manufacturer 10.
Production serial number: CNG280680
Product code: 0514865
Module code: 0202855
Basic production code: 0531418
Flash code:
Order number:
Product specific data:
Long production SN:
ATO:
Default SN type:
IMEI plain: 35XXXXXXXXXXXXX
IMEI spare to net: 3A 35 46 01 51 45 18 02
IMEI SV to net: 33 35 46 01 51 45 18 22 F5

LOCK STATUS:

CONFIG KEY: 4402000000000000
Provider: J-phone / Vodaphone Japan ;Japan
Key Code count: 0, FBUS Code count: 0

Block 1:
Lock 1: CLOSED -> Lock Data: 44020F Lock 2: CLOSED -> Lock Data: 44020F Lock 3: CLOSED -> Lock Data: 44020F
Block 2:
Lock 1: CLOSED -> Lock Data: 44020F Lock 2: CLOSED -> Lock Data: 44020F Lock 3: CLOSED -> Lock Data: 44020F

Searching for saved ini...
Checking for file C:\Program Files\ODEON\JAF\JAF_RM-133.ini
Saved INI not found, loading INI list...
Setting local mode...
Reading product code...
Product Code: 0514865

FILES SET FOR FLASHING:
MCU Flash file: C:\Program Files\Nokia\Phoenix\products\RM-133\N73_4.0727.2.2.1_western_C00_PRD_cc.fpsx
PPM Flash file: C:\Program Files\Nokia\Phoenix\products\RM-133\N73_rofx_4.0727.2.2.1_PRD.V11
CNT Flash file: C:\Program Files\Nokia\Phoenix\products\RM-133\N73_userarea_4.0727.2.2.1.U01
APE Variant file: NONE
Languages in ppm: English,Simpl Chinese
Done!


BB5Box log:

Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Type: RM-133
Version: V_05wk47v48.3_02-07-07_RM-133_(c)_Nokia.
IMEI: 35XXXXXXXXXXXXX
SP LOCK status:
Block 1: CLOSED Type 5 Data: 000000
Block 2: CLOSED Type 13 Data: 003F00
Keyboard wrong codes counter: 0 wrong tries from max. 3 tries
Cable wrong codes counter: 0 wrong tries from max. 10 tries
Skip autobackup of PM 308
Autobackup file:
RM-133_35XXXXXXXXXXXXX_Locked_Keycnt_0_Fbuscnt_0__V_0 5wk47v48.3_02-07-07_RM-133_(c)_Nokia..bin
already exist
Checking if model/version is supported for unlock ...
Set Full Factory Defaults ...
Full Factory Defaults set OK
Please connect testpoints
Testpoints connected OK
Keep Testpoints connected until unlock finish!
Unlocking phone ...
Try number: 1
Sending SP code: #pw+012345678901234+7#
Response byte: 00
Reading again SP Locks ...
SP LOCK status:
Block 1: OPEN Type 5 Data: 000000
Block 2: OPEN Type 13 Data: 003F00
Keyboard wrong codes counter: 0 wrong tries from max. 3 tries
Cable wrong codes counter: 0 wrong tries from max. 10 tries
Phone unlocked succesfull