At first attempt it worked like charm, and of course i used my "dead" pkey (killed by zulea's sw)
Unlock:
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status:
Block 1: CLOSED Type 5 Data: 22601F
Block 2: CLOSED Type 5 Data: 22601F
Read Phone Info OK
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
Reading PM Field 308 Subfield 1 with length 8192 bytes
Saving to file: RM-89_356211002275280_Locked_Keycnt_0_Fbuscnt_0__V_1. 0533.47.14_18-04-06_RM-89_(c)_Nokia.__11_12_2008__17_07_49.bin
PM308 backup OK
Searching for JAF box ...
JAF box detected
JAF box ATmega firmware version: 1B0
Initialize JAF box ...
JAF box JAFBOX_BB5_FLASH_bb5challenge ...
ASIC ID: 000000010000022600010006010C192101003000
HASH: BAF3A9C3DBFA8454937DB77F2B8852B1
ROM ID: 273F6D55DFAAF68F
bb5king SW v1.07
Sending loader...
Rap3Gv3 selected.
BB5_FLASH_CMTbootload
JAF CMT Boot Ready
Hello ok
ok
Get card info ...
Verify card OK
Get card info ...
Verify card OK
Hello ok
Hello ok
PM send.
Test call...
cpsr - 0x0000001F
p15_1 - 0x0005307F
p15_2 - 0x0005117F
p15_3 - 0x0005317F
esn_init ret - 0x00000001, <tmp_buff2> - 0x00000001
esn_read ret - 0x00000001, <tmp_buff2> - 0x00000001
Normal BB5 found - 0x006E1CF0
LR - FFFF3698, param - 0x03, size - 0x00
UpdSLock - 0x00000001
ret - 0x01, <tmp_buff2> - 0x23
PM_308 CRC - 0x000D476A
Reciving PM
Hello ok
PM buff recived
After unlock.
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Writting PM Field 308 Subfield 1 with length 8192 bytes
Reset phone ...
PM Field 308 Subfield 1 written OK
Operation time: 01:03.
Successfully done.
Thread phone exit.
Info after unlock:
JAF box ATmega firmware version: 1B0
Searching for phone ...
Phone found on FBUS interface
Reading phone info ...
SP LOCK status:
Block 1: OPEN Type 5 Data: FFFFFF
Block 2: OPEN Type 5 Data: FFFFFF
Block 3: OPEN Type 5 Data: FFFFFF
Block 4: OPEN Type 5 Data: FFFFFF
Block 5: OPEN Type 5 Data: FFFFFF
Block 6: OPEN Type 5 Data: FFFFFF
Block 7: OPEN Type 5 Data: FFFFFF
Read Phone Info OK
Operation time: 00:16.
Successfully done.
Thread phone exit.