...::: HOT HOT - FREE BB5 Unlock, NO TP, NO PKEY :::...
LOGS of TEST all worked without PKEY on JAF and UFS BOX only
12/9/2008 2:59:19 PM JAF box ATmega firmware version: 1B0
12/9/2008 2:59:33 PM Searching for phone ...
12/9/2008 2:59:33 PM Phone found on FBUS interface
12/9/2008 2:59:33 PM Reading phone info ...
12/9/2008 2:59:33 PM Type: RM-208
12/9/2008 2:59:33 PM Version: V_1.0615.25_10-01-07_RM-208_©_Nokia.
12/9/2008 2:59:33 PM IMEI: 354832010790523
12/9/2008 2:59:34 PM SP LOCK status:
12/9/2008 2:59:34 PM Config Key: 2440700000000000
12/9/2008 2:59:34 PM Block 1: OPEN Type 5 Data: FFFFFF
12/9/2008 2:59:34 PM Block 2: OPEN Type 5 Data: FFFFFF
12/9/2008 2:59:34 PM Block 3: OPEN Type 5 Data: FFFFFF
12/9/2008 2:59:34 PM Block 4: OPEN Type 5 Data: FFFFFF
12/9/2008 2:59:34 PM Block 5: OPEN Type 5 Data: FFFFFF
12/9/2008 2:59:34 PM Block 6: OPEN Type 5 Data: FFFFFF
12/9/2008 2:59:34 PM Block 7: OPEN Type 5 Data: FFFFFF
12/9/2008 2:59:34 PM Key counter: 0/3
12/9/2008 2:59:34 PM Cable counter: 0/10
12/9/2008 2:59:34 PM Read Phone Info OK
12/9/2008 2:59:34 PM Operation time: 00:16.
12/9/2008 2:59:34 PM Successfully done.
12/9/2008 3:00:15 PM JAF box ATmega firmware version: 1B0
12/9/2008 3:00:29 PM Searching for phone ...
12/9/2008 3:00:29 PM Phone found on FBUS interface
12/9/2008 3:00:29 PM Reading phone info ...
12/9/2008 3:00:29 PM Type: RM-208
12/9/2008 3:00:29 PM Version: V_1.0615.25_10-01-07_RM-208_©_Nokia.
12/9/2008 3:00:29 PM IMEI: 354832010790523
12/9/2008 3:00:29 PM SP LOCK status:
12/9/2008 3:00:29 PM Config Key: 2440700000000000
12/9/2008 3:00:29 PM Block 1: OPEN Type 5 Data: FFFFFF
12/9/2008 3:00:29 PM Block 2: OPEN Type 5 Data: FFFFFF
12/9/2008 3:00:29 PM Block 3: OPEN Type 5 Data: FFFFFF
12/9/2008 3:00:29 PM Block 4: OPEN Type 5 Data: FFFFFF
12/9/2008 3:00:29 PM Block 5: OPEN Type 5 Data: FFFFFF
12/9/2008 3:00:29 PM Block 6: OPEN Type 5 Data: FFFFFF
12/9/2008 3:00:29 PM Block 7: OPEN Type 5 Data: FFFFFF
12/9/2008 3:00:29 PM Key counter: 0/3
12/9/2008 3:00:29 PM Cable counter: 0/10
12/9/2008 3:00:29 PM Read Phone Info OK
12/9/2008 3:00:29 PM Searching for phone ...
12/9/2008 3:00:29 PM Phone found on FBUS interface
12/9/2008 3:00:29 PM Reading phone info ...
12/9/2008 3:00:30 PM Reading PM Field 308 Subfield 1 with length 8192 bytes
12/9/2008 3:00:33 PM Saving to file: RM-208_354832010790523_Unlocked_Keycnt_0_Fbuscnt_0__V _1.0615.25_10-01-07_RM-208_©_Nokia.__09_12_2008__15_00_33.bin
12/9/2008 3:00:33 PM PM308 backup OK
12/9/2008 3:00:33 PM Searching for JAF box ...
12/9/2008 3:00:33 PM JAF box detected
12/9/2008 3:00:34 PM JAF box ATmega firmware version: 1B0
12/9/2008 3:00:34 PM Initialize JAF box ...
12/9/2008 3:00:34 PM JAF box JAFBOX_BB5_FLASH_bb5challenge ...
12/9/2008 3:00:35 PM
12/9/2008 3:00:35 PM ASIC ID: 000000010000022600010006010C192101003000
12/9/2008 3:00:35 PM HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
12/9/2008 3:00:35 PM ROM ID: 273F6D55DFAAF68F
12/9/2008 3:00:35 PM bb5king SW v1.07
12/9/2008 3:00:35 PM Sending loader...
12/9/2008 3:00:35 PM Rap3Gv3 selected.
12/9/2008 3:00:35 PM BB5_FLASH_CMTbootload
12/9/2008 3:00:36 PM JAF CMT Boot Ready
12/9/2008 3:00:36 PM
12/9/2008 3:00:37 PM Hello ok
12/9/2008 3:00:37 PM ok
12/9/2008 3:00:37 PM Get card info ...
12/9/2008 3:00:37 PM Verify card OK
12/9/2008 3:00:37 PM Get card info ...
12/9/2008 3:00:37 PM Verify card OK
12/9/2008 3:00:42 PM Hello ok
12/9/2008 3:00:43 PM Hello ok
12/9/2008 3:00:43 PM PM send.
12/9/2008 3:00:43 PM Test call...
12/9/2008 3:00:43 PM cpsr - 0x0000001F
12/9/2008 3:00:44 PM p15_1 - 0x0005307F
12/9/2008 3:00:44 PM p15_2 - 0x0005117F
12/9/2008 3:00:44 PM p15_3 - 0x0005317F
12/9/2008 3:00:44 PM esn_init ret - 0x00000001,
12/9/2008 3:00:44 PM esn_read ret - 0x00000001,
12/9/2008 3:00:44 PM Normal BB5 found - 0x000D20E0
12/9/2008 3:00:44 PM LR - FFFF3698, param - 0x03, size - 0x00
12/9/2008 3:00:44 PM UpdSLock - 0x00000001
12/9/2008 3:00:45 PM ret - 0x01,
12/9/2008 3:00:45 PM PM_308 CRC - 0x000D34E3
12/9/2008 3:00:45 PM Reciving PM
12/9/2008 3:00:46 PM Hello ok
12/9/2008 3:00:46 PM PM buff recived
12/9/2008 3:00:46 PM After unlock.
12/9/2008 3:00:48 PM JAF box ATmega firmware version: 1B0
12/9/2008 3:01:02 PM Searching for phone ...
12/9/2008 3:01:02 PM Phone found on FBUS interface
12/9/2008 3:01:03 PM Writting PM Field 308 Subfield 1 with length 8192 bytes
12/9/2008 3:01:06 PM Reset phone ...
12/9/2008 3:01:12 PM PM Field 308 Subfield 1 written OK
12/9/2008 3:01:12 PM Operation time: 00:58.
12/9/2008 3:01:12 PM Successfully done.
12/9/2008 3:11:38 PM Searching for UFS box ...
12/9/2008 3:11:38 PM UFS box detected
12/9/2008 3:11:42 PM UFS box version: 208
12/9/2008 3:11:42 PM UFS box SN: -------
12/9/2008 3:11:42 PM UFS box UFSBOX_BB5_FLASH_bb5challenge ...
12/9/2008 3:11:49 PM
12/9/2008 3:11:49 PM ASIC ID: PM_308 CRC - 0x000D34E3
12/9/2008 3:11:49 PM HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
12/9/2008 3:11:49 PM ROM ID: 273F6D55DFAAF68F
12/9/2008 3:11:49 PM Operation time: 00:11.
12/9/2008 3:11:49 PM Successfully done.
How to use.
1. Open software with a Box attached JAF or UFS.
2. Go to Phone tag and select Automatic
3. Go to Device tab and select BOX
4. Go Back to Phone tab do any operation e.g. Unlock, Factory reset etc.
Need UFS Version 208 to work with software & only f-bus-cable works