هنا الهواتف التي تم فك شفيرتها بواسطة BB5 King

**NasirNS** · 16-11-2008, 12:16 PM

تم فك شفرة e50_rm-170 بنجاح على الاصدارة 10.4

jaf box atmega firmware version: 1b0
searching for phone ...
Phone found on fbus interface
reading phone info ...
Sp lock status:
Block 1: Closed type 5 data: 00101f
read phone info ok
searching for phone ...
Phone found on fbus interface
reading phone info ...
Reading pm field 308 subfield 1 with length 8192 bytes
saving to file: Rm-170_351892010821929_locked_keycnt_0_fbuscnt_0__v_2.26.01_04-07-06_rm-170_(c)_nokia.__16_11_2008__12_57_26.bin
pm308 backup ok
searching for jaf box ...
Jaf box detected
jaf box atmega firmware version: 1b0
initialize jaf box ...
Jaf box jafbox_bb5_flash_bb5challenge ...

Asic id: 000000010000022600010006010c192101001101
hash: Baf3a9c3dbfa8454937db77f2b8852b1
rom id: 191ec665dfaaf68f
sending loader...
Rap3gv3 selected.
Bb5_flash_cmtbootload
jaf cmt boot ready

hello ok
ok
get card info ...
Verify card ok
get card info ...
Verify card ok
hello ok
hello ok
pm send.
Test call...
Cpsr - 0x0000001f
p15_1 - 0x0005307f
p15_2 - 0x0005117f
p15_3 - 0x0005317f
esn_init ret - 0x00000001, <tmp_buff2> - 0x00000001
esn_read ret - 0x00000001, <tmp_buff2> - 0x00000001
normal bb5 found - 0x00332090
lr - ffff3688, param - 0x03, size - 0x00
updslock - 0x00000001
ret - 0x01, <tmp_buff2> - 0x23
pm_308 crc - 0x0016ac57
reciving pm
hello ok
pm buff recived
after unlock.
Jaf box atmega firmware version: 1b0
searching for phone ...
Phone found on fbus interface
writting pm field 308 subfield 1 with length 8192 bytes
reset phone ...
Pm field 308 subfield 1 written ok
operation time: 01:02.
Successfully done.
Thread phone exit.
Jaf box atmega firmware version: 1b0
searching for phone ...
Phone found on fbus interface
reading phone info ...
Sp lock status:
Block 1: Open type 5 data: Ffffff
block 2: Open type 5 data: Ffffff
block 3: Open type 5 data: Ffffff
block 4: Open type 5 data: Ffffff
block 5: Open type 5 data: Ffffff
block 6: Open type 5 data: Ffffff
block 7: Open type 5 data: Ffffff
read phone info ok
operation time: 00:20.
Successfully done.
Thread phone exit.

16-11-2008 12:16 PM

**NasirNS** · 17-11-2008, 12:08 PM

تم فك شفرة 5500_RM-86 بنجاح على الاصدارة 10.4

كود PHP:


[center]  CMT Boot Data:
Asic ID: 000000010000022600010006010C192101001101
Asic Mode ID: 00
Asic EM ID: 00000352
Asic Public ID: 16600111A1360058101B19D85D8B1DF88AA04CC9
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 191EC665DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 22FE00EC <=> SAMSUNG (SEC) -> K8S5615ETA
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Done!
Restarting phone...Done!
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
Switching to serial...
Powering the phone...
Reading...
MCU SW version: V  03.55
23-11-06
RM-86
(c) Nokia.        
HW version: 0952
PCI version: 
RFIC version: &#208; 17211721
DSP version: &#208;pb05w46v43.1_rm86
Retu version: 32
Tahvo version: 52
Production serial number: 2EI070677
Product code: 0543934
Module code: 
Basic production code: 0521596
Flash code: [/center]
Order number: 
Product specific data: 
Long production SN: 
ATO: 
Default SN type: 
IMEI plain: 351855014696407
IMEI spare to net: 3A 15 58 05 41 96 46 00 
IMEI SV to net: 33 15 58 05 41 96 46 10 F6 
LOCK STATUS:
CONFIG KEY: 8000000000000000
PROVIDER KEY: 2341500000000000
Provider: Vodafone;United Kingdom
Key Code count: 0, FBUS Code count: 0
Block 1:
Lock 1: CLOSED -> Lock Data: 23415F 
Searching for saved ini...
Checking for file C:\Program Files\ODEON\JAF\JAF_RM-86.ini
Saved INI not found, loading INI list...
Searching for JAF saved ******** of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\\
Searching for default ******** of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\\
Searching for JAF saved ******** of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\\
No ini files found...
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
Done!
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status: 
    Block 1: CLOSED  Type 5      Data: 23415F
Read Phone Info OK
Operation time: 00:14.
Successfully done.
Thread phone exit.
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status: 
    Block 1: OPEN    Type 5      Data: FFFFFF
    Block 2: OPEN    Type 5      Data: FFFFFF
    Block 3: OPEN    Type 5      Data: FFFFFF
    Block 4: OPEN    Type 5      Data: FFFFFF
    Block 5: OPEN    Type 5      Data: FFFFFF
    Block 6: OPEN    Type 5      Data: FFFFFF
    Block 7: OPEN    Type 5      Data: FFFFFF
Read Phone Info OK
Operation time: 00:21.
Successfully done.
Thread phone exit.

[center]  [/center]

**NasirNS** · 18-11-2008, 01:14 PM

تم فك شفرة 3110_RM-237 بنجاح على الاصدارة 10.4

كود PHP:


CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B21
Asic Public ID: 12A0020B97B600545E2CECB1241416BC37E8DDD5
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
Error in MSG id...
Error in cmt get id...
Booting phone...
APE Boot Data:
Asic ID: 17100708
Asic Mode ID: 00
Asic Public ID: 685B452688044DC434BE0E1886D7F285BDD53622
HASH: 49A97E826B93BA20B7ED0B082475C00500000000
ROM ID: 1DFD66132C872FD4
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B21
Asic Public ID: 12A0020B97B600545E2CECB1241416BC37E8DDD5
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 22E800EC <=> SAMSUNG (SEC) -> K5G2829ATC
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
APE Boot: C:\Program Files\ODEON\JAF\Flash\helen3_2nd.fg
Loader version: 01.23.00 -> Revision: 0000
Patching APE boot step1...
Patching APE boot step2...
Patching APE boot step3...
APE Boot Ready
APE Flash ID: 00A100EC <=> SAMSUNG (SEC) -> K5E1G12ACM
APE Flash Data: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Done!
Restarting phone...Done!
Changing mode...Done!
Changing mode...Done!
Changing mode...Done!
Changing mode...Done!
Booting phone...
CMT Boot Data:
Asic ID: 000000010000022600010006010C192101001101
Asic Mode ID: 00
Asic EM ID: 00000353
Asic Public ID: 2DE0001353A86D562A2AB0D648B15D5B2A0B5A89
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 191EC665DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 881C0020 <=> ST -> M39L0R807
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Done!
Restarting phone...Done!
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status: 
    Block 1: CLOSED  Type 5      Data: 21901F
Read Phone Info OK
Operation time: 00:14.
Successfully done.
Thread phone exit.
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status: 
    Block 1: CLOSED  Type 5      Data: 21901F
Read Phone Info OK
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Reading PM Field 308 Subfield 1 with length 8192 bytes
Saving to file: RM-237_356975019320640_Locked_Keycnt_0_Fbuscnt_0__V_05.50_14-08-07_RM-237_(c)_Nokia.__18_11_2008__13_14_57.bin
PM308 backup OK
Searching for JAF box ...
JAF box detected
JAF box ATmega firmware version: 1B0
Initialize JAF box ...
JAF box JAFBOX_BB5_FLASH_bb5challenge ...
  
ASIC ID: 000000010000022600010006010C192101001101
HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
ROM ID: 191EC665DFAAF68F
Sending loader...
Rap3Gv3 selected.
BB5_FLASH_CMTbootload
JAF CMT Boot Ready
  
Hello ok
ok
Get card info ...
Verify card OK
Get card info ...
Verify card OK
Hello ok
Hello ok
PM send.
Test call...
cpsr - 0x0000001F
p15_1 - 0x0005307F
p15_2 - 0x0005117F
p15_3 - 0x0005317F
esn_init ret - 0x00000001, <tmp_buff2> - 0x00000001
esn_read ret - 0x00000001, <tmp_buff2> - 0x00000001
Normal BB5 found - 0x0002B400
LR - FFFF3688, param - 0x03, size - 0x00
UpdSLock - 0x00000001
ret - 0x01, <tmp_buff2> - 0x23
PM_308 CRC - 0x00191043
Reciving PM
Hello ok
PM buff recived
After unlock.
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Writting PM Field 308 Subfield 1 with length 8192 bytes
Reset phone ...
PM Field 308 Subfield 1 written OK
Operation time: 01:09.
Successfully done.
Thread phone exit.
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status: 
    Block 1: OPEN    Type 5      Data: FFFFFF
    Block 2: OPEN    Type 5      Data: FFFFFF
    Block 3: OPEN    Type 5      Data: FFFFFF
    Block 4: OPEN    Type 5      Data: FFFFFF
    Block 5: OPEN    Type 5      Data: FFFFFF
    Block 6: OPEN    Type 5      Data: FFFFFF
    Block 7: OPEN    Type 5      Data: FFFFFF
Read Phone Info OK
Operation time: 00:21.
Successfully done.
Thread phone exit.

**hmd007** · 19-11-2008, 05:06 PM

JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status:
Block 1: CLOSED Type 5 Data: 20801F
Block 2: CLOSED Type 5 Data: 20801F
Read Phone Info OK
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Reading PM Field 308 Subfield 1 with length 8192 bytes
Saving to file: RM-159_358064015728607_Locked_Keycnt_0_Fbuscnt_0__V_06wk41v43.3_04-01-08_RM-159_(c)_Nokia__19_11_2008__15_54_48.bin
PM308 backup OK
Searching for JAF box ...
JAF box detected
JAF box ATmega firmware version: 1B0
Initialize JAF box ...
JAF box JAFBOX_BB5_FLASH_bb5challenge ...

ASIC ID: 000000010000022600010006400C192101021103
HASH: CAEEBB65D3C48E6DC73B49DC5063A2EE
ROM ID: A8C1D6713E691FF8
bb5king SW v1.05
Sending loader...
RAPIDO_OLD selected.
BB5_FLASH_CMTbootload
JAF CMT Boot Ready

Hello ok
bb5king ldr start
bb5king send code ok
Get card info ...
Verify card OK
Get card info ...
Verify card OK
Hello ok
Hello ok
PM send.
Test call...
cpsr - 0x0000001F
p15_1 - 0x00C5387A
p15_2 - 0x00C5197E
p15_3 - 0x00C5397E
esn_init ret - 0x00000001, <tmp_buff2> - 0x00000027
esn_read ret - 0x00000001, <tmp_buff2> - 0x00000022
Normal BB5 found - 0x000B21F0
LR - FFFF89C4, param - 0x03, size - 0x00
yeknom - found, aierf - found, noom - found
UpdSLock - 0x00000001
ret - 0x01, <tmp_buff2> - 0x23
PM_308 CRC - 0x001933FE
Reciving PM
Hello ok
PM buff recived
After unlock.
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Writting PM Field 308 Subfield 1 with length 8192 bytes
Error. 0x13040023
Operation time: 01:09.
Done with error(s).
Thread phone exit.

**hmd007** · 23-11-2008, 10:43 PM

23/11/2008 09:31:50 م 0x10110103
23/11/2008 09:31:50 م ROM ID: A8C1D6713E691FF8
23/11/2008 09:31:50 م ROM ID: A8C1D6713E691FF8
23/11/2008 09:31:50 م ROM ID: A8C1D6713E691FF8
23/11/2008 09:31:50 م Operation time: 00:43.
23/11/2008 09:31:50 م Done with error(s).
23/11/2008 09:31:56 م JAF box ATmega firmware version: 1B0
23/11/2008 09:32:08 م Searching for phone ...
23/11/2008 09:32:09 م Phone found on FBUS interface
23/11/2008 09:32:09 م Reading phone info ...
23/11/2008 09:32:09 م Type: RM-159
23/11/2008 09:32:09 م Version: V_06wk41v59.1_02-06-08_RM-159_(c)_Nokia
23/11/2008 09:32:09 م IMEI: 358064019789902
23/11/2008 09:32:10 م SP LOCK status:
23/11/2008 09:32:10 م Config Key: 2081000000000000
23/11/2008 09:32:10 م Block 1: CLOSED Type 5 Data: 20810F
23/11/2008 09:32:10 م Block 2: CLOSED Type 5 Data: 20810F
23/11/2008 09:32:10 م Block 3: CLOSED Type 5 Data: 64710F
23/11/2008 09:32:10 م Block 4: CLOSED Type 5 Data: 64710F
23/11/2008 09:32:10 م Key counter: 0/3
23/11/2008 09:32:10 م Cable counter: 0/10
23/11/2008 09:32:10 م Read Phone Info OK
23/11/2008 09:32:10 م Searching for phone ...
23/11/2008 09:32:10 م Phone found on FBUS interface
23/11/2008 09:32:10 م Reading phone info ...
23/11/2008 09:32:12 م Reading PM Field 308 Subfield 1 with length 8192 bytes
23/11/2008 09:32:15 م Saving to file: RM-159_358064019789902_Locked_Keycnt_0_Fbuscnt_0__V_06wk41v59.1_02-06-08_RM-159_(c)_Nokia__23_11_2008__21_32_15.bin
23/11/2008 09:32:15 م PM308 backup OK
23/11/2008 09:32:15 م Searching for JAF box ...
23/11/2008 09:32:15 م JAF box detected
23/11/2008 09:32:16 م JAF box ATmega firmware version: 1B0
23/11/2008 09:32:16 م Initialize JAF box ...
23/11/2008 09:32:16 م JAF box JAFBOX_BB5_FLASH_bb5challenge ...
23/11/2008 09:32:18 م
23/11/2008 09:32:18 م ASIC ID: 000000010000022600010006400C192101021103
23/11/2008 09:32:18 م HASH: CAEEBB65D3C48E6DC73B49DC5063A2EE
23/11/2008 09:32:18 م ROM ID: A8C1D6713E691FF8
23/11/2008 09:32:18 م bb5king SW v1.05
23/11/2008 09:32:18 م Sending loader...
23/11/2008 09:32:18 م RAPIDO_OLD selected.
23/11/2008 09:32:18 م BB5_FLASH_CMTbootload
23/11/2008 09:32:18 م JAF CMT Boot Ready
23/11/2008 09:32:18 م
23/11/2008 09:32:19 م Hello ok
23/11/2008 09:32:19 م bb5king ldr start
23/11/2008 09:32:19 م bb5king send code ok
23/11/2008 09:32:38 م Hello ok
23/11/2008 09:32:39 م Hello ok
23/11/2008 09:32:39 م PM send.
23/11/2008 09:32:39 م Test call...
23/11/2008 09:32:39 م cpsr - 0x0000001F
23/11/2008 09:32:39 م p15_1 - 0x00C5387A
23/11/2008 09:32:40 م p15_2 - 0x00C5197E
23/11/2008 09:32:40 م p15_3 - 0x00C5397E
23/11/2008 09:32:40 م esn_init ret - 0x00000001, <tmp_buff2> - 0x00000027
23/11/2008 09:32:40 م esn_read ret - 0x00000001, <tmp_buff2> - 0x00000022
23/11/2008 09:32:40 م Normal BB5 found - 0x000B21F0
23/11/2008 09:32:40 م LR - FFFF89C4, param - 0x03, size - 0x00
23/11/2008 09:32:40 م yeknom - found, aierf - found, noom - found
23/11/2008 09:32:41 م UpdSLock - 0x00000001
23/11/2008 09:32:41 م ret - 0x01, <tmp_buff2> - 0x23
23/11/2008 09:32:41 م PM_308 CRC - 0x00192D30
23/11/2008 09:32:41 م Reciving PM
23/11/2008 09:32:43 م Hello ok
23/11/2008 09:32:43 م PM buff recived
23/11/2008 09:32:43 م After unlock.
23/11/2008 09:32:44 م JAF box ATmega firmware version: 1B0
23/11/2008 09:32:56 م Searching for phone ...
23/11/2008 09:32:56 م Phone found on FBUS interface
23/11/2008 09:32:57 م Writting PM Field 308 Subfield 1 with length 8192 bytes
23/11/2008 09:33:00 م Reset phone ...
23/11/2008 09:33:09 م PM Field 308 Subfield 1 written OK
23/11/2008 09:33:09 م Operation time: 01:13.
23/11/2008 09:33:09 م Successfully done.
23/11/2008 09:33:15 م JAF box ATmega firmware version: 1B0
23/11/2008 09:33:27 م Searching for phone ...
23/11/2008 09:33:28 م Phone found on FBUS interface
23/11/2008 09:33:28 م Reading phone info ...
23/11/2008 09:33:28 م Type: RM-159
23/11/2008 09:33:28 م Version: V_06wk41v59.1_02-06-08_RM-159_(c)_Nokia
23/11/2008 09:33:28 م IMEI: 358064019789902
23/11/2008 09:33:35 م SP LOCK status:
23/11/2008 09:33:35 م Config Key: 2440700000000000
23/11/2008 09:33:35 م Block 1: OPEN Type 5 Data: FFFFFF
23/11/2008 09:33:35 م Block 2: OPEN Type 5 Data: FFFFFF
23/11/2008 09:33:35 م Block 3: OPEN Type 5 Data: FFFFFF
23/11/2008 09:33:35 م Block 4: OPEN Type 5 Data: FFFFFF
23/11/2008 09:33:35 م Block 5: OPEN Type 5 Data: FFFFFF
23/11/2008 09:33:35 م Block 6: OPEN Type 5 Data: FFFFFF
23/11/2008 09:33:35 م Block 7: OPEN Type 5 Data: FFFFFF
23/11/2008 09:33:35 م Key counter: 0/3
23/11/2008 09:33:35 م Cable counter: 0/10
23/11/2008 09:33:35 م Read Phone Info OK
23/11/2008 09:33:35 م Operation time: 00:20.
23/11/2008 09:33:35 م Successfully done.

**NasirNS** · 24-11-2008, 05:23 PM

N73-RM-133 فك الشفرة على اصدار 1.07

كود PHP:


  JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status: 
    Block 1: CLOSED  Type 5      Data: 00101F
Read Phone Info OK
Operation time: 00:16.
Successfully done.
Thread phone exit.
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status: 
    Block 1: CLOSED  Type 5      Data: 00101F
Read Phone Info OK
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Reading PM Field 308 Subfield 1 with length 8192 bytes
Saving to file: RM-133_355506015984237_Locked_Keycnt_0_Fbuscnt_0__V_05wk47v38.1_19-01-07_RM-133_(c)_Nokia.__24_11_2008__17_45_45.bin
PM308 backup OK
Searching for JAF box ...
JAF box detected
JAF box ATmega firmware version: 1B0
Initialize JAF box ...
JAF box JAFBOX_BB5_FLASH_bb5challenge ...
  
ASIC ID: 000000010000022600010006010C192101003000
HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
ROM ID: 273F6D55DFAAF68F
bb5king SW v1.07
Sending loader...
Rap3Gv3 selected.
BB5_FLASH_CMTbootload
JAF CMT Boot Ready
  
Hello ok
ok
Get card info ...
Verify card OK
Get card info ...
Verify card OK
Hello ok
Hello ok
PM send.
Test call...
cpsr - 0x0000001F
p15_1 - 0x0005307F
p15_2 - 0x0005117F
p15_3 - 0x0005317F
esn_init ret - 0x00000001, <tmp_buff2> - 0x00000027
esn_read ret - 0x00000001, <tmp_buff2> - 0x00000001
Normal BB5 found - 0x000D20C0
LR - FFFF3698, param - 0x03, size - 0x00
UpdSLock - 0x00000001
ret - 0x01, <tmp_buff2> - 0x23
PM_308 CRC - 0x000BB919
Reciving PM
Hello ok
PM buff recived
After unlock.
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Writting PM Field 308 Subfield 1 with length 8192 bytes
Reset phone ...
PM Field 308 Subfield 1 written OK
Operation time: 01:11.
Successfully done.
Thread phone exit.
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status: 
    Block 1: OPEN    Type 5      Data: FFFFFF
    Block 2: OPEN    Type 5      Data: FFFFFF
    Block 3: OPEN    Type 5      Data: FFFFFF
    Block 4: OPEN    Type 5      Data: FFFFFF
    Block 5: OPEN    Type 5      Data: FFFFFF
    Block 6: OPEN    Type 5      Data: FFFFFF
    Block 7: OPEN    Type 5      Data: FFFFFF
Read Phone Info OK
Operation time: 00:16.
Successfully done.
Thread phone exit.

**NasirNS** · 25-11-2008, 02:28 PM

تم اصلاح سيكوريتى اريا وفك التشفير لجهاز 6300_RM-217 على الاصدارة V1.07

كود PHP:


JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status: 
    Block 1: CLOSED  Type 5      Data: 00101F
Read Phone Info OK
Operation time: 00:15.
Successfully done.
Thread phone exit.
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status: 
    Block 1: CLOSED  Type 5      Data: 00101F
Read Phone Info OK
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Reading PM Field 308 Subfield 1 with length 8192 bytes
Saving to file: RM-217_356401018962142_Locked_Keycnt_0_Fbuscnt_0__V_04.71_28-02-07_RM-217_(c)_Nokia.__25_11_2008__15_03_47.bin
PM308 backup OK
Searching for JAF box ...
JAF box detected
JAF box ATmega firmware version: 1B0
Initialize JAF box ...
JAF box JAFBOX_BB5_FLASH_bb5challenge ...
  
ASIC ID: 000000010000022600010006010C192101001101
HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
ROM ID: 191EC665DFAAF68F
bb5king SW v1.07
Sending loader...
Rap3Gv3 selected.
BB5_FLASH_CMTbootload
JAF CMT Boot Ready
  
Hello ok
ok
Get card info ...
Verify card OK
Get card info ...
Verify card OK
Hello ok
Hello ok
PM send.
Test call...
cpsr - 0x0000001F
p15_1 - 0x0005307F
p15_2 - 0x0005117F
p15_3 - 0x0005317F
esn_init ret - 0x00000001, <tmp_buff2> - 0x00000001
esn_read ret - 0x00000001, <tmp_buff2> - 0x00000001
Normal BB5 found - 0x0002B400
LR - FFFF3688, param - 0x03, size - 0x00
UpdSLock - 0x00000001
ret - 0x01, <tmp_buff2> - 0x23
PM_308 CRC - 0x00193FEE
Reciving PM
Hello ok
PM buff recived
After unlock.
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Writting PM Field 308 Subfield 1 with length 8192 bytes
Reset phone ...
PM Field 308 Subfield 1 written OK
Operation time: 01:05.
Successfully done.
Thread phone exit.
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status: 
    Block 1: OPEN    Type 5      Data: FFFFFF
    Block 2: OPEN    Type 5      Data: FFFFFF
    Block 3: OPEN    Type 5      Data: FFFFFF
    Block 4: OPEN    Type 5      Data: FFFFFF
    Block 5: OPEN    Type 5      Data: FFFFFF
    Block 6: OPEN    Type 5      Data: FFFFFF
    Block 7: OPEN    Type 5      Data: FFFFFF
Read Phone Info OK
Operation time: 00:16.
Successfully done.
Thread phone exit.

**sky7** · 27-11-2008, 06:57 PM

unlock don 6233

MCU SW version : V 05.60
14-09-07
RM-145
(c) Nokia
IMEI : 354821015717342
CONFIG KEY: 8000000000000000
PROVIDER KEY: 2620100000000000
Provider : DeTeMobile D1 T-Mobile;Germany
Counters : 0/3 , 0/10
SP Lock Status : Locked
================== AUTO Backup PM-308 ========================
MCU SW version : V 05.60
14-09-07
RM-145
(c) Nokia
IMEI : 354821015717342
Reading PM 308
PM 308 Size : 8192
PM 308 save to D:\jaf\Jafsupport_v1.03\bb5\backup\354821015717342_74140.pm
PM 308 reading done.
================== 1st Boot ========================
RAPx ID : 000000010000022600010006010C192101003000
EM ID 1 : 00000232
EM ID 2 : 00000353
RAPx PubID : 13A00016119E0154E1E5A6326D974CF281937DDB
RAPx HASH : BAF3A9C3DBFA8454937DB77F2B8852B1
RAPx ROM ID: 273F6D55DFAAF68F
Boot OK
Selected rap3gv3
================== 2nd Boot ========================
Write PATCH 1 ..
- Phone-ACK 0x550200003D3D
Server verification..
Write PATCH 2 ..
PKEY Verified OK..
- Phone-ACK 0x550200E402E6
Write PATCH 3 ..
- Phone-ACK 0x550200483971
>>> phone reply : HELLO U
>> : ok
Write PATCH 4 ..
>>> phone reply : 550200040004
- Phone-ACK 0x550200F054A4
>>> phone reply : 550200010001
>>> phone reply : 550200010001
>>> phone reply : HELLO U
Sending PM308 buffer in flash mode...
>>> phone reply : HELLO
Test Custom Code
>> : Test call...
>> : cpsr - 0x0000001F
>> : p15_1 - 0x0005307F
>> : p15_2 - 0x0005117F
>> : p15_3 - 0x0005317F
>> : esn_init ret - 0xFFFFFFFF, <tmp_buff2> - 0x00000000
>> : esn_read ret - 0x00000001, <tmp_buff2> - 0x00000001
>> : Normal BB5 found - 0x00016070
>> : LR - FFFF3698, param - 0x03, size - 0x00
>> : UpdSLock - 0x00000001
>> : ret - 0x01, <tmp_buff2> - 0x23
>> : PM_308 CRC - 0x000CB837
Test custom done..
Please wait while reading calculated SPData..
Read Done!..
Unlock Data saved to : D:\jaf\Jafsupport_v1.03\bb5\Unlock Data\354821015717342_ 74207 _unlocked.pm
Rebooting Phone
sending unlock data..
MCU SW version : V 05.60
14-09-07
RM-145
(c) Nokia
IMEI : 354821015717342
>>> phone reply : 5512000023000C103600030001
Rebooting Phone
Reading phone information after unlocking process..
MCU SW version : V 05.60
14-09-07
RM-145
(c) Nokia
IMEI : 354821015717342
CONFIG KEY: 0000000000000000
PROVIDER KEY: 2440700000000000
Provider : AT&T;U.S.A. (3650)
Counters : 0/3 , 0/10
SP Lock Status : Not Locked
Unlocking Done....
===========================================
Operation time started : 7:41:27 PM
Operation time End : 7:42:29 PM
===========================================
Phone Not Locked

**elmoubarak** · 12-12-2008, 05:36 PM

Get card info ...
Verify card OK
Card SN: ********
Card is activated
Card usage: 0%
Searching for JAF box ...
JAF box detected
Box firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Type: RM-217
Version: V_05.50_14-08-07_RM-217_(c)_Nokia.
IMEI: 35486**********
SP LOCK status:
Config Key: 8000000000000000
Provider Key: 2341500000000000
Block 1: CLOSED Type 5 Data: 23415F
Country: United Kingdom
Operator: Vodafone
Counters: 0/3, 0/10
Phone is Locked
Read Phone Info OK
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Type: RM-217
Version: V_05.50_14-08-07_RM-217_(c)_Nokia.
IMEI: 354864021822250
SP LOCK status:
Config Key: 8000000000000000
Provider Key: 2341500000000000
Counters: 0/3, 0/10
Phone is Locked
Reading PM Field 308 Subfield 1 with length 8192 bytes
Saving to file: RM-217_354864021822250_Locked_Keycnt_0_Fbuscnt_0__V_05.50_14-08-07_RM-217_(c)_Nokia.__11_12_2008__17_12_19.bin
PM308 backup OK
BB5 FLASH bb5challenge ...
ASIC ID: 000000010000022600010006010C192101001101
HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
ROM ID: 191EC665DFAAF68F
CMT Boot Ready
HELLO
ok
Get card info ...
Verify card OK
Card SN: 90005E98
Card is activated
Card usage: 0%
Get card info ...
Verify card OK
HELLO
HELLO
PM send.
Test call...
cpsr - 0x0000001F
p15_1 - 0x0005307F
p15_2 - 0x0005117F
p15_3 - 0x0005317F
esn_init ret - 0x00000001, <tmp_buff2> - 0x00000001
esn_read ret - 0x00000001, <tmp_buff2> - 0x00000001
Normal BB5 found - 0x0002B400
LR - FFFF3688, param - 0x03, size - 0x00
UpdSLock - 0x00000001
ret - 0x01, <tmp_buff2> - 0x23
PM_308 CRC - 0x00193398
Reciving PM
PM buff recived
After unlock.
Searching for phone ...
Phone found on FBUS interface
Writting PM Field 308 Subfield 1 with length 8192 bytes
Reset phone ...
PM Field 308 Subfield 1 written OK
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Type: RM-217
Version: V_05.50_14-08-07_RM-217_(c)_Nokia.
IMEI: 354864*********
SP LOCK status:
Config Key: 0000000000000000
Provider Key: 2440700000000000
Block 1: OPEN Type 5 Data: FFFFFF
Block 2: OPEN Type 5 Data: FFFFFF
Block 3: OPEN Type 5 Data: FFFFFF
Block 4: OPEN Type 5 Data: FFFFFF
Block 5: OPEN Type 5 Data: FFFFFF
Block 6: OPEN Type 5 Data: FFFFFF
Block 7: OPEN Type 5 Data: FFFFFF
Country: U.S.A. (3650)
Operator: AT&T
Counters: 0/3, 0/10
Phone is Unlocked
Read Phone Info OK
Successfully done.

**elmoubarak** · 15-12-2008, 05:55 PM

Get card info ...
Verify card OK
Card SN: ********
Card is activated
Card usage: 0%
Searching for JAF box ...
JAF box detected
Box firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Type: RM-180
Version: V_05wk07v42.2_13-04-06_RM-180_(c)_Nokia.
IMEI: 35972...............
SP LOCK status:
Config Key: FFFFFFFFFFFFFFFF
Provider Key: FFFFFFFFFFFFFFFF
Block 1: CLOSED Type 5 Data: 00101F
Country: Unknown Country
Operator: Unknown Operator
Counters: 0/3, 0/10
Phone is Locked
Read Phone Info OK
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Type: RM-180
Version: V_05wk07v42.2_13-04-06_RM-180_(c)_Nokia.
IMEI: 3597260...........
SP LOCK status:
Config Key: FFFFFFFFFFFFFFFF
Provider Key: FFFFFFFFFFFFFFFF
Counters: 0/3, 0/10
Phone is Locked
Reading PM Field 308 Subfield 1 with length 4096 bytes
Saving to file: RM-180_359726000573086_Locked_Keycnt_0_Fbuscnt_0__V_05wk07v42.2_13-04-06_RM-180_(c)_Nokia.__15_12_2008__15_51_03.bin
PM308 backup OK
BB5 FLASH bb5challenge ...
ASIC ID: 000000010000022600010006000C192101012200
HASH: E9EFF4BFAA5393217CA6B17755FC3E14
ROM ID: F28A211FCEA7B19D
CMT Boot Ready
HELLO
start
ok
Get card info ...
Verify card OK
Card SN: 90005E98
Card is activated
Card usage: 0%
Get card info ...
Verify card OK
HELLO
HELLO
PM send.
Test call...
cpsr - 0x0000001F
p15_1 - 0x0005307F
p15_2 - 0x0005117F
p15_3 - 0x0005317F
esn_init ret - 0x00000001, <tmp_buff2> - 0x00000001
esn_read ret - 0x00000001, <tmp_buff2> - 0x00000001
Normal BB5 found - 0x006E1CD0
LR - FFFF2C68, param - 0x03, size - 0x00
UpdSLock - 0x00000001
ret - 0x01, <tmp_buff2> - 0x23
PM_308 CRC - 0x0006ABF1
Reciving PM
PM buff recived
After unlock.
Searching for phone ...
Phone found on FBUS interface
Writting PM Field 308 Subfield 1 with length 4096 bytes
Reset phone ...
PM Field 308 Subfield 1 written OK
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Type: RM-180
Version: V_05wk07v42.2_13-04-06_RM-180_(c)_Nokia.
IMEI: 3597260...........
SP LOCK status:
Config Key: 0000000000000000
Provider Key: 2342000000000000
Block 1: OPEN Type 5 Data: 23420F
Block 2: OPEN Type 5 Data: 23594F
Block 3: OPEN Type 5 Data: 23420F
Block 4: OPEN Type 5 Data: 23594F
Country: United Kingdom
Operator: Hutchinson 3G (3)
Counters: 0/3, 0/10
Phone is Unlocked
Read Phone Info OK
Successfully done.