kasamiko
10-18-2007, 13:34
Guys,
Just want to share my unlocking of Chinese Nokia N95..
Pinout I used:
N95 PDA 1x18 pin
1,2 ---- Ground to pin 7 and 8 of RJ45
7 ------ TX to Pin 3 of RJ45
9 ------ RX to Pin 2 of RJ45
Using Standard Method:
http://i82.photobucket.com/albums/j249/Rhonn_2006/My%20Images/n95.jpg
logs:
COM1 [Serial0] selected
Device: Autodetect 6205-6227 NOR
Checking data, wait...
advanced flash detection active
Action: unlock
unlock method: standard
Boot...
Press and HOLD Power button now !
baud autodetection active
19200
Connecting, wait...
Initializing[6226:8A02:8A01]...
high speed disabled
boot step size: 0002
Release Power button now !
Boot Done
Initialize...
detecting chip #00 in region #00...
flash: EC257E25082501:2AEA0000000000
flash: Samsung AMD/Fujitsu std [D 0008x002000 00FEx010000 0008x002000] 16Mb
number of flash chip/regions detected: 01/01
Initialize Done
Set baud...
115200
Set baud Done
Identification...
device parameters autodetection in progress..
detecting chip #00 in region #00...
flash: EC257E25082501:2AEA0000000000
flash: Samsung AMD/Fujitsu std [D 0008x002000 00FEx010000 0008x002000] 16Mb
number of flash chip/regions detected: 01/01
total flash region size: 01000000
detect device identification, method #1...
detection phase #1...
detect device parameters finished
structure: 2nd [enhanced] (or higher) generation
identification data Ok
identification data backup saved: id.BB231C42.[E553_XZY1PA2_E553_GPRS_MT6226_S01.V23_00_0.BIN_6B9 C8E5C].rpl
New firmware detected: E553_XZY1PA2_E553_GPRS_MT6226_S01.V23_00_0.BIN
- make "Read detailed information, ask/rpl" operation
- send "backup_system_log_..." file to support
- make "Read full flash" operation
- send flash backup file(s) to support
- include in your e-mail full text from phone back label (phone name etc.)
identification detection finished
device-id: BB231C42
protocol ver: 04
ver. sw1: E553_XZY1PA2_E553_GPRS_MT6226_S01.V23_00_0.BIN
ver. sw2: E553_XZY1PA2.V23.00.0
ffs offset/size: 00E00000/00200000
detecting eeprom area in 1 chip(s)...
flash: EC257E25082501:2AEA0000000000
checking area[00000000]: 00000000-00FFFFFF...
eeprom found near: 00E00000
detecting eeprom size...
eeprom size: 00200000
eeprom chip: 00
eeprom area: 00000000:00E00000-00FFFFFF
detecting structure pass 1...
..................
detect standard fat location pass #1...
.................................................. ......
detect extended fat location pass #1...
.................................................
detect standard fat offset pass #1...
detect standard fat data...
fat layout detection complete
eeprom element #1 detected ok
reading [eeprom[E553_XZY1PA2_E553_GPRS_MT6226_S01.V23_00_0.BIN]]...
file saved: backup_eeprom[E553_XZY1PA2_E553_GPRS_MT6226_S01.V23_00_0.BIN]_20071018-181504.B0E.bin
flash: EC257E25082501:2AEA0000000000
Identification Done
Manipulation...
detection procedure, wait...
detection procedure completed
Manipulation Done
Finalization...
Finalization Done
Write...
flash: EC257E25082501:2AEA0000000000
Write: eeprom
Write Done
file saved: backup_system_log_BB231C42_E553_XZY1PA2_E553_GPRS_ MT6226_S01.V23_00_0.BIN_6B9C8E5C_20071018-181806.B0X.bin
Finished, time used: 476 sec
Remove/Install battery now !
Smart Fast Method:
http://i82.photobucket.com/albums/j249/Rhonn_2006/My%20Images/N95c.jpg
COM1 [Serial0] selected
Phone should be Switched OFF !
Press and HOLD Power button now !
19200
Initializing[6226:8A02]...
Connecting, wait...
Release Power button now !
Phone detected, wait...
Hardware: MT6226,E02
Date: 2005.04.12
Version: 1.0
Version: MAUI.06B.W07.12.MP.V32
Version: M500Z_06B_HW
detecting structure #2...
warning: wrong packet checksum
done
imei: 13579024681122
detecting structure #1...
done
Finished, time used: 15 sec
Remove/Install battery now !
Regards...
Just want to share my unlocking of Chinese Nokia N95..
Pinout I used:
N95 PDA 1x18 pin
1,2 ---- Ground to pin 7 and 8 of RJ45
7 ------ TX to Pin 3 of RJ45
9 ------ RX to Pin 2 of RJ45
Using Standard Method:
http://i82.photobucket.com/albums/j249/Rhonn_2006/My%20Images/n95.jpg
logs:
COM1 [Serial0] selected
Device: Autodetect 6205-6227 NOR
Checking data, wait...
advanced flash detection active
Action: unlock
unlock method: standard
Boot...
Press and HOLD Power button now !
baud autodetection active
19200
Connecting, wait...
Initializing[6226:8A02:8A01]...
high speed disabled
boot step size: 0002
Release Power button now !
Boot Done
Initialize...
detecting chip #00 in region #00...
flash: EC257E25082501:2AEA0000000000
flash: Samsung AMD/Fujitsu std [D 0008x002000 00FEx010000 0008x002000] 16Mb
number of flash chip/regions detected: 01/01
Initialize Done
Set baud...
115200
Set baud Done
Identification...
device parameters autodetection in progress..
detecting chip #00 in region #00...
flash: EC257E25082501:2AEA0000000000
flash: Samsung AMD/Fujitsu std [D 0008x002000 00FEx010000 0008x002000] 16Mb
number of flash chip/regions detected: 01/01
total flash region size: 01000000
detect device identification, method #1...
detection phase #1...
detect device parameters finished
structure: 2nd [enhanced] (or higher) generation
identification data Ok
identification data backup saved: id.BB231C42.[E553_XZY1PA2_E553_GPRS_MT6226_S01.V23_00_0.BIN_6B9 C8E5C].rpl
New firmware detected: E553_XZY1PA2_E553_GPRS_MT6226_S01.V23_00_0.BIN
- make "Read detailed information, ask/rpl" operation
- send "backup_system_log_..." file to support
- make "Read full flash" operation
- send flash backup file(s) to support
- include in your e-mail full text from phone back label (phone name etc.)
identification detection finished
device-id: BB231C42
protocol ver: 04
ver. sw1: E553_XZY1PA2_E553_GPRS_MT6226_S01.V23_00_0.BIN
ver. sw2: E553_XZY1PA2.V23.00.0
ffs offset/size: 00E00000/00200000
detecting eeprom area in 1 chip(s)...
flash: EC257E25082501:2AEA0000000000
checking area[00000000]: 00000000-00FFFFFF...
eeprom found near: 00E00000
detecting eeprom size...
eeprom size: 00200000
eeprom chip: 00
eeprom area: 00000000:00E00000-00FFFFFF
detecting structure pass 1...
..................
detect standard fat location pass #1...
.................................................. ......
detect extended fat location pass #1...
.................................................
detect standard fat offset pass #1...
detect standard fat data...
fat layout detection complete
eeprom element #1 detected ok
reading [eeprom[E553_XZY1PA2_E553_GPRS_MT6226_S01.V23_00_0.BIN]]...
file saved: backup_eeprom[E553_XZY1PA2_E553_GPRS_MT6226_S01.V23_00_0.BIN]_20071018-181504.B0E.bin
flash: EC257E25082501:2AEA0000000000
Identification Done
Manipulation...
detection procedure, wait...
detection procedure completed
Manipulation Done
Finalization...
Finalization Done
Write...
flash: EC257E25082501:2AEA0000000000
Write: eeprom
Write Done
file saved: backup_system_log_BB231C42_E553_XZY1PA2_E553_GPRS_ MT6226_S01.V23_00_0.BIN_6B9C8E5C_20071018-181806.B0X.bin
Finished, time used: 476 sec
Remove/Install battery now !
Smart Fast Method:
http://i82.photobucket.com/albums/j249/Rhonn_2006/My%20Images/N95c.jpg
COM1 [Serial0] selected
Phone should be Switched OFF !
Press and HOLD Power button now !
19200
Initializing[6226:8A02]...
Connecting, wait...
Release Power button now !
Phone detected, wait...
Hardware: MT6226,E02
Date: 2005.04.12
Version: 1.0
Version: MAUI.06B.W07.12.MP.V32
Version: M500Z_06B_HW
detecting structure #2...
warning: wrong packet checksum
done
imei: 13579024681122
detecting structure #1...
done
Finished, time used: 15 sec
Remove/Install battery now !
Regards...