BB5King software ready for download

[DAIPHUC]

ead Phone Info OK
UFS box version: 208
UFS box SN: FC2E
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Reading PM Field 308 Subfield 1 with length 8192 bytes
Saving to file: RM-174_357689010733060_Unlocked_Keycnt_0_Fbuscnt_0__V _05.00_27-04-07_RM-174_(c)_Nokia.__04_12_2008__21_03_04.bin
PM308 backup OK
Searching for UFS box ...
UFS box detected
UFS box version: 208
UFS box SN: FC2E
Sending loader...
Rap3Gv2 selected.
UFS box UFSBOX_BB5_FLASH_bb5challenge ...

ASIC ID: 000000010000022600010006010C192101001101
HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
ROM ID: 191EC665DFAAF68F
UFS box UFSBOX_BB5_FLASH_CMTbootload ...
UFSx CMT Boot Ready

Hello ok
ok
Get card info ...
Verify card OK
Get card info ...
Verify card OK
Hello ok
Hello ok
PM send.
Test call...
cpsr - 0x0000001F
p15_1 - 0x0005307F
p15_2 - 0x0005117F
p15_3 - 0x0005317F
esn_init ret - 0x00000001, <tmp_buff2> - 0x00000001
esn_read ret - 0x00000001, <tmp_buff2> - 0x00000001
Normal BB5 found - 0x0002B400
LR - FFFF3688, param - 0x03, size - 0x00
UpdSLock - 0x00000001
ret - 0x01, <tmp_buff2> - 0x23
PM_308 CRC - 0x00196104
Reciving PM
đây là log làm lại nhé vì cái đầu tiên xóa mất tiêu roài

[GSM Hai Phong]

Cuối cùng thì con 6161 RM-200 cũng ok

11/3/2008 11:53:01 PM JAF box ATmega firmware version: 1B0
11/3/2008 11:53:05 PM Searching for phone ...
11/3/2008 11:53:05 PM Phone found on FBUS interface
11/3/2008 11:53:05 PM Reading phone info ...
11/3/2008 11:53:05 PM Type: RM-200
11/3/2008 11:53:05 PM Version: V_03.91_25-09-06_RM-200_(c)_Nokia
11/3/2008 11:53:05 PM IMEI: 356297016439590
11/3/2008 11:53:06 PM SP LOCK status:
11/3/2008 11:53:06 PM Config Key: 2342000000000000
11/3/2008 11:53:06 PM Block 1: CLOSED Type 5 Data: 23420F
11/3/2008 11:53:06 PM Block 2: CLOSED Type 5 Data: 23594F
11/3/2008 11:53:06 PM Key counter: 0/3
11/3/2008 11:53:06 PM Cable counter: 0/10
11/3/2008 11:53:06 PM Read Phone Info OK
11/3/2008 11:53:08 PM JAF box ATmega firmware version: 1B0
11/3/2008 11:53:10 PM Searching for phone ...
11/3/2008 11:53:10 PM Phone found on FBUS interface
11/3/2008 11:53:10 PM Reading phone info ...
11/3/2008 11:53:11 PM Reading PM Field 308 Subfield 1 with length 8192 bytes
11/3/2008 11:53:14 PM Saving to file: RM-200_356297016439590_Locked_Keycnt_0_Fbuscnt_0__V_0 3.91_25-09-06_RM-200_(c)_Nokia__03_11_2008__23_53_14.bin
11/3/2008 11:53:14 PM PM308 backup OK
11/3/2008 11:53:14 PM Searching for JAF box ...
11/3/2008 11:53:14 PM JAF box detected
11/3/2008 11:53:15 PM JAF box ATmega firmware version: 1B0
11/3/2008 11:53:15 PM Initialize JAF box ...
11/3/2008 11:53:15 PM Sending loader...
11/3/2008 11:53:15 PM Rap3Gv2 selected.
11/3/2008 11:53:15 PM JAF box JAFBOX_BB5_FLASH_bb5challenge ...
11/3/2008 11:53:16 PM
11/3/2008 11:53:16 PM ASIC ID: 000000010000022600010006010C192101003000
11/3/2008 11:53:16 PM HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
11/3/2008 11:53:16 PM ROM ID: 273F6D55DFAAF68F
11/3/2008 11:53:17 PM JAF CMT Boot Ready
11/3/2008 11:53:17 PM
11/3/2008 11:53:18 PM Hello ok
11/3/2008 11:53:18 PM ok
11/3/2008 11:53:26 PM Hello ok
11/3/2008 11:53:27 PM Hello ok
11/3/2008 11:53:27 PM PM send.
11/3/2008 11:53:27 PM Test call...
11/3/2008 11:53:27 PM cpsr - 0x0000001F
11/3/2008 11:53:27 PM p15_1 - 0x0005307F
11/3/2008 11:53:27 PM p15_2 - 0x0005117F
11/3/2008 11:53:27 PM p15_3 - 0x0005317F
11/3/2008 11:53:28 PM esn_init ret - 0x00000001, <tmp_buff2> - 0x00000001
11/3/2008 11:53:28 PM esn_read ret - 0x00000001, <tmp_buff2> - 0x00000001
11/3/2008 11:53:28 PM Normal BB5 found - 0x0002B790
11/3/2008 11:53:28 PM LR - FFFF3698, param - 0x03, size - 0x00
11/3/2008 11:53:28 PM UpdSLock - 0x00000001
11/3/2008 11:53:28 PM ret - 0x01, <tmp_buff2> - 0x23
11/3/2008 11:53:28 PM PM_308 CRC - 0x000C71E1
11/3/2008 11:53:28 PM Reciving PM
11/3/2008 11:53:30 PM Hello ok
11/3/2008 11:53:30 PM PM buff recived
11/3/2008 11:53:30 PM After unlock.
11/3/2008 11:53:31 PM JAF box ATmega firmware version: 1B0
11/3/2008 11:53:33 PM Searching for phone ...
11/3/2008 11:53:34 PM Phone found on FBUS interface
11/3/2008 11:53:35 PM Writting PM Field 308 Subfield 1 with length 8192 bytes
11/3/2008 11:53:38 PM Reset phone ...
11/3/2008 11:53:40 PM PM Field 308 Subfield 1 written OK
11/3/2008 11:53:40 PM Operation time: 00:40.
11/3/2008 11:53:40 PM Successfully done.

[hungphongmobile™]

N75 unlocked successfully without TP

11/3/2008 2:29:38 PM JAF box ATmega firmware version: 1B0
11/3/2008 2:29:42 PM Searching for phone ...
11/3/2008 2:29:42 PM Phone found on FBUS interface
11/3/2008 2:29:42 PM Reading phone info ...
11/3/2008 2:29:42 PM Type: RM-128
11/3/2008 2:29:42 PM Version: V_06wk15v45.1_17-10-07_RM-128_(c)_Nokia.
11/3/2008 2:29:42 PM IMEI: 354815013254613
11/3/2008 2:29:45 PM SP LOCK status:
11/3/2008 2:29:45 PM Config Key: 3101700000000000
11/3/2008 2:29:45 PM Block 1: CLOSED Type 5 Data: 310150
11/3/2008 2:29:45 PM Block 2: CLOSED Type 5 Data: 310150
11/3/2008 2:29:45 PM Block 3: CLOSED Type 5 Data: 310170
11/3/2008 2:29:45 PM Block 4: CLOSED Type 5 Data: 310170
11/3/2008 2:29:45 PM Block 5: CLOSED Type 5 Data: 310410
11/3/2008 2:29:45 PM Block 6: CLOSED Type 5 Data: 310410
11/3/2008 2:29:45 PM Block 7: CLOSED Type 5 Data: 311180
11/3/2008 2:29:45 PM Block 8: CLOSED Type 5 Data: 311180
11/3/2008 2:29:45 PM Key counter: 0/3
11/3/2008 2:29:45 PM Cable counter: 0/10
11/3/2008 2:29:45 PM Read Phone Info OK
11/3/2008 2:29:46 PM JAF box ATmega firmware version: 1B0
11/3/2008 2:29:48 PM Searching for phone ...
11/3/2008 2:29:48 PM Phone found on FBUS interface
11/3/2008 2:29:48 PM Reading phone info ...
11/3/2008 2:29:51 PM Reading PM Field 308 Subfield 1 with length 8192 bytes
11/3/2008 2:29:54 PM Saving to file: RM-128_354815013254613_Locked_Keycnt_0_Fbuscnt_0__V_0 6wk15v45.1_17-10-07_RM-128_(c)_Nokia.__03_11_2008__14_29_54.bin
11/3/2008 2:29:54 PM PM308 backup OK
11/3/2008 2:29:54 PM Searching for JAF box ...
11/3/2008 2:29:54 PM JAF box detected
11/3/2008 2:29:55 PM JAF box ATmega firmware version: 1B0
11/3/2008 2:29:55 PM Initialize JAF box ...
11/3/2008 2:29:55 PM Sending loader...
11/3/2008 2:29:55 PM Rap3Gv2 selected.
11/3/2008 2:29:55 PM JAF box JAFBOX_BB5_FLASH_bb5challenge ...
11/3/2008 2:29:56 PM
11/3/2008 2:29:56 PM ASIC ID: 000000010000022600010006010C192101003000
11/3/2008 2:29:56 PM HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
11/3/2008 2:29:56 PM ROM ID: 273F6D55DFAAF68F
11/3/2008 2:29:57 PM JAF CMT Boot Ready
11/3/2008 2:29:57 PM
11/3/2008 2:29:58 PM Hello ok
11/3/2008 2:29:58 PM ok
11/3/2008 2:30:16 PM Hello ok
11/3/2008 2:30:17 PM Hello ok
11/3/2008 2:30:17 PM PM send.
11/3/2008 2:30:17 PM Test call...
11/3/2008 2:30:17 PM cpsr - 0x0000001F
11/3/2008 2:30:17 PM p15_1 - 0x0005307F
11/3/2008 2:30:17 PM p15_2 - 0x0005117F
11/3/2008 2:30:17 PM p15_3 - 0x0005317F
11/3/2008 2:30:17 PM esn_init ret - 0x00000001, <tmp_buff2> - 0x00000001
11/3/2008 2:30:18 PM esn_read ret - 0x00000001, <tmp_buff2> - 0x00000001
11/3/2008 2:30:18 PM Normal BB5 found - 0x000D20E0
11/3/2008 2:30:18 PM LR - FFFF3698, param - 0x03, size - 0x00
11/3/2008 2:30:18 PM UpdSLock - 0x00000001
11/3/2008 2:30:18 PM ret - 0x01, <tmp_buff2> - 0x23
11/3/2008 2:30:18 PM PM_308 CRC - 0x000C519A
11/3/2008 2:30:18 PM Reciving PM
11/3/2008 2:30:20 PM Hello ok
11/3/2008 2:30:20 PM PM buff recived
11/3/2008 2:30:20 PM After unlock.
11/3/2008 2:30:21 PM JAF box ATmega firmware version: 1B0
11/3/2008 2:30:23 PM Searching for phone ...
11/3/2008 2:30:24 PM Phone found on FBUS interface
11/3/2008 2:30:25 PM Writting PM Field 308 Subfield 1 with length 8192 bytes
11/3/2008 2:30:28 PM Reset phone ...
11/3/2008 2:30:33 PM PM Field 308 Subfield 1 written OK
11/3/2008 2:30:33 PM Operation time: 00:57.
11/3/2008 2:30:33 PM Successfully done.

[HVmobi]

Test máy Unlock rồi:


Giao tiếp UFS:

UFS box version: 206
UFS box SN: HOANGVIET@
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status:
Block 1: OPEN Type 5 Data: 23420F
Block 2: OPEN Type 5 Data: 23594F
Block 3: OPEN Type 5 Data: 23420F
Block 4: OPEN Type 5 Data: 23594F
Read Phone Info OK
UFS box version: 206
UFS box SN: HOANGVIET@
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Reading PM Field 308 Subfield 1 with length 8192 bytes
Saving to file: RM-146_354567010486769_Unlocked_Keycnt_0_Fbuscnt_0__V _05.51_05-09-07_RM-146_(c)_Nokia.__04_11_2008__09_45_02.bin
PM308 backup OK
Searching for UFS box ...
UFS box detected
UFS box version: 206
UFS box SN: HOANGVIET@
Sending loader...
Rap3Gv2 selected.
UFS box UFSBOX_BB5_FLASH_bb5challenge ...

ASIC ID: 000000010000022600010006010C192101001101
HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
ROM ID: 191EC665DFAAF68F
UFS box UFSBOX_BB5_FLASH_CMTbootload ...
UFSx CMT Boot Ready

Hello ok
ok
Get card info ...
Verify card OK
Get card info ...
Verify card OK
Hello ok
Hello ok
PM send.
Test call...
cpsr - 0x0000001F
p15_1 - 0x0005307F
p15_2 - 0x0005117F
p15_3 - 0x0005317F
esn_init ret - 0x00000001, <tmp_buff2> - 0x00000001
esn_read ret - 0x00000001, <tmp_buff2> - 0x00000001
Normal BB5 found - 0x0002B400
LR - FFFF3688, param - 0x03, size - 0x00
UpdSLock - 0x00000001
ret - 0x01, <tmp_buff2> - 0x23
PM_308 CRC - 0x0008FB38
Reciving PM
Hello ok
PM buff recived
After unlock.
UFS box version: 206
UFS box SN: 701A
Searching for phone ...
Phone found on FBUS interface
Writting PM Field 308 Subfield 1 with length 8192 bytes
Reset phone ...
PM Field 308 Subfield 1 written OK
Operation time: 01:46.
Successfully done.

Giao tiếp JAF:

JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status:
Block 1: OPEN Type 5 Data: 23420F
Block 2: OPEN Type 5 Data: 23594F
Block 3: OPEN Type 5 Data: 23420F
Block 4: OPEN Type 5 Data: 23594F
Read Phone Info OK
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Reading PM Field 308 Subfield 1 with length 8192 bytes
Saving to file: RM-146_354567010486769_Unlocked_Keycnt_0_Fbuscnt_0__V _05.51_05-09-07_RM-146_(c)_Nokia.__04_11_2008__09_50_26.bin
PM308 backup OK
Searching for JAF box ...
JAF box detected
JAF box ATmega firmware version: 1B0
Initialize JAF box ...
Sending loader...
Rap3Gv2 selected.
JAF box JAFBOX_BB5_FLASH_bb5challenge ...

ASIC ID: 000000010000022600010006010C192101001101
HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
ROM ID: 191EC665DFAAF68F
JAF CMT Boot Ready

Hello ok
ok
Get card info ...
Verify card OK
Get card info ...
Verify card OK
Hello ok
Hello ok
PM send.
Test call...
cpsr - 0x0000001F
p15_1 - 0x0005307F
p15_2 - 0x0005117F
p15_3 - 0x0005317F
esn_init ret - 0x00000001, <tmp_buff2> - 0x00000001
esn_read ret - 0x00000001, <tmp_buff2> - 0x00000001
Normal BB5 found - 0x0002B400
LR - FFFF3688, param - 0x03, size - 0x00
UpdSLock - 0x00000001
ret - 0x01, <tmp_buff2> - 0x23
PM_308 CRC - 0x0009147A
Reciving PM
Hello ok
PM buff recived
After unlock.
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Writting PM Field 308 Subfield 1 with length 8192 bytes
Reset phone ...
PM Field 308 Subfield 1 written OK
Operation time: 00:45.
Successfully done.

[duybang]

Huhu buồn cho MTBox quá đi, thấy mọi người unlock rầm rầm vui thiệt.

[vanquang]

không gì mt mà pkey em bị khùng không updata được củng nhìn cho vui đây nè