| zzzzzzzzzzzz! just update
I unlock and repair phone.. hereis complete logs and for reference
BB5king:
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status:
Block 1: CLOSED Type 5 Data: 00101F
Read Phone Info OK
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Reading PM Field 308 Subfield 1 with length 4096 bytes
Saving to file: RM-109_357061000199654_Locked_Keycnt_0_Fbuscnt_0__V_0 5wk07v40.1_05-02-06_RM-109_(c)_Nokia.__20_11_2008__21_08_33.bin
PM308 backup OK
Searching for JAF box ...
JAF box detected
JAF box ATmega firmware version: 1B0
Initialize JAF box ...
Sending loader...
Rap3Gv2 selected.
JAF box JAFBOX_BB5_FLASH_bb5challenge ...
ASIC ID: 000000010000022600010006000C192101002100
HASH: E9EFF4BFAA5393217CA6B17755FC3E14
ROM ID: F28A211FAC901AEE
BB5_FLASH_CMTbootload
JAF CMT Boot Ready
Hello ok
start
ok
Get card info ...
Verify card OK
Get card info ...
Verify card OK
Hello ok
Hello ok
PM send.
Test call...
cpsr - 0x0000001F
p15_1 - 0x0005307F
p15_2 - 0x0005117F
p15_3 - 0x0005317F
esn_init ret - 0x00000001, <tmp_buff2> - 0x00000001
esn_read ret - 0x00000001, <tmp_buff2> - 0x00000001
Normal BB5 found - 0x006E1CD0
LR - FFFF2C68, param - 0x03, size - 0x00
UpdSLock - 0x00000001
ret - 0x01, <tmp_buff2> - 0x23
PM_308 CRC - 0x0006AA0F
Reciving PM
Hello ok
PM buff recived
After unlock.
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Writting PM Field 308 Subfield 1 with length 4096 bytes
Reset phone ...
PM Field 308 Subfield 1 written OK
Operation time: 01:17.
Successfully done.
Thread phone exit.
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status:
Block 1: OPEN Type 5 Data: 23420F
Block 2: OPEN Type 5 Data: 23594F
Block 3: OPEN Type 5 Data: 23420F
Block 4: OPEN Type 5 Data: 23594F
Read Phone Info OK
Operation time: 00:09.
Successfully done.
Thread phone exit.
..........After unlock...........
Jaf log
Info on jaf after unlock on bb5king
JAF version 1.98.61
Detected PKEY: 90007CF5
Card life counter: 93.04%
P-key nokia module version 01.02
Detected JAF INTERFACE version: 01.B0, Driver version: 40000, Library version: 30107
JAF DCT4/BB5 LOADERS DIR: C:\Program Files\ODEON\JAF\Flash\
JAF DCT4/BB5 PRODUCT DIR: C:\Program Files\Nokia\Phoenix\Products\
JAF USB LOADERS DIR: C:\Program Files\ODEON\JAF\FlashUSB\
JAF DCT3/DCTL LOADERS DIR: C:\Program Files\ODEON\JAF\Flash3\
USB Cable Driver version: 7.0.2.0
Changing mode...Done!
Booting phone...
APE Boot Data:
Asic ID: 17100701
Asic Mode ID: 00
Asic Public ID: B5A945532B643D5CB3B555495422438E5F7EC6F4
HASH: 2C05369F57CC3C4CF9E783E83D9B512B00000000
ROM ID: AB5E4ADB27A06946
CMT Boot Data:
Asic ID: 000000010000022600010006000C192101002100
Asic Mode ID: 00
Asic EM ID: 00000352
Asic Public ID: 0C0001131D874651C2D5108009AD8E5A7BB8A0C8
HASH: E9EFF4BFAA5393217CA6B17755FC3E1400000000
ROM ID: F28A211FAC901AEE
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv2_2nd.fg
Loader version: 01.15.00 -> Revision: 0000
Patching CMT boot step2...
CMT Boot Ready
CMT Flash ID: 00020001 <=> SPANSION -> Type not in database
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
CMT Loader Ready
APE Boot: C:\Program Files\ODEON\JAF\Flash\helen3_2nd.fg
Loader version: 01.23.00 -> Revision: 0000
Patching APE boot step2...
APE Boot Ready
APE Flash ID: 003500EC <=> SAMSUNG (SEC) -> K5E5657ACB
APE Flash Data: 00020000000600000000000000000000
Done!
Restarting phone...Done!
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
Switching to serial...
Powering the phone...
Reading...
MCU SW version: V 05wk07v40.1
05-02-06
RM-109
(c) Nokia.
PCI version:
RFIC version: 150a160e
DSP version: pb05w07v26
Retu version: 32
Tahvo version: 52
Production serial number:
Product code:
Module code:
Basic production code:
Flash code:
Order number:
Product specific data:
Long production SN:
ATO:
Default SN type:
IMEI plain: 357061000199654
IMEI spare to net: 3A 75 60 01 00 91 69 05
IMEI SV to net: 33 75 60 01 00 91 69 05 F6
LOCK STATUS:
CONFIG KEY: 0000000000000000
PROVIDER KEY: 2342000000000000
Provider: Hutchinson 3G (3);United Kingdom
Key Code count: 0, FBUS Code count: 0
Block 1:
Lock 1: OPEN
Block 2:
Lock 1: OPEN
Block 3:
Lock 1: OPEN
Block 4:
Lock 1: OPEN
Searching for saved ini...
Checking for file C:\Program Files\ODEON\JAF\JAF_RM-109.ini
Saved INI not found, loading INI list...
Setting local mode...
Reading product code...
Product Code:
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-109\
Searching for default location of ini...
Checking path: C:\Program Files\Common Files\Nokia\DataPackage\Products\RM-109\
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-109\
No ini files found...
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
Done!
Yehey! first to unlock NM850iG from japan and result is positive! Direct unlock on bb5 king 1.02 not on new update 1.06 software close on 1.06 so i use 1.02... |