krusty.spritz
09-28-2004, 16:06
keep hearing some one is unlocking the 313 in the london area, so who is holding out on us lot?
so lets look at it between us all, somebody must know something........so here are my findings!!!
necwcdma.exe for 606 and 808 etc.
baudrate 19400 (i get most reliable data at this speed)
8 databits and 1 stop bit
no parity.
when i run necwcdma and use the unlock button on pc 1 with pc 2 sniffing at the tx line (with lookrs232 running) i can see 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FLOODING THE BUFFER. now and again there is a 3F (?in ascii) (does anyone have the answer to what its doing?).
so now the prog displays "scanning"
if i connect the battery fone sends 3f, 12 times and the 00 00 flooding changes to 21 21 21 etc (still the odd 3f tho) the prog says "unlocking" at that point i see 1502 bits of hex sent to the fone, you can clearly see words like "unknown command" "??#info....(p c)" and "ready" in there. (is this a bootloader anyone?) the very last part says ...8(p c).
then is the responce FROM THE FONE i can read in ascii : respdata+ok+....(hw)
the pc then sends : done....(p c)
then fone sends : respdone+ok+....(hw)ready
then pc sends : A (41 in hex)
fone responce is RR
then pc sends : \ (5c in hex)
fone : . R (DONT FORGET THE .)
PC : R
can some person out there please explain whats happening? i am sure other people would like to learn about this to!! :)
maybe we could get a little open source project going :eek: :eek:
so lets look at it between us all, somebody must know something........so here are my findings!!!
necwcdma.exe for 606 and 808 etc.
baudrate 19400 (i get most reliable data at this speed)
8 databits and 1 stop bit
no parity.
when i run necwcdma and use the unlock button on pc 1 with pc 2 sniffing at the tx line (with lookrs232 running) i can see 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FLOODING THE BUFFER. now and again there is a 3F (?in ascii) (does anyone have the answer to what its doing?).
so now the prog displays "scanning"
if i connect the battery fone sends 3f, 12 times and the 00 00 flooding changes to 21 21 21 etc (still the odd 3f tho) the prog says "unlocking" at that point i see 1502 bits of hex sent to the fone, you can clearly see words like "unknown command" "??#info....(p c)" and "ready" in there. (is this a bootloader anyone?) the very last part says ...8(p c).
then is the responce FROM THE FONE i can read in ascii : respdata+ok+....(hw)
the pc then sends : done....(p c)
then fone sends : respdone+ok+....(hw)ready
then pc sends : A (41 in hex)
fone responce is RR
then pc sends : \ (5c in hex)
fone : . R (DONT FORGET THE .)
PC : R
can some person out there please explain whats happening? i am sure other people would like to learn about this to!! :)
maybe we could get a little open source project going :eek: :eek: