|
Welcome to the GSM-Forum forums. You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. Only registered members may post questions, contact other members or search our database of over 8 million posts. Registration is fast, simple and absolutely free so please - Click to REGISTER! If you have any problems with the registration process or your account login, please contact contact us . |
|
Register | FAQ | Donate | Forum Rules | Root any Device | ★iPhone Unlock★ | ★ Direct Codes ★ | Direct Unlock Source | Today's Posts | Search |
GSM / HSDPA Modems and Routers GSM , HSDPA , WCDMA, LTE Modems and Routers Unlock And Firmwares |
View Poll Results: Is this useful for E1732(E173u-2) Idea 3G Data Card ??? | |||
Yes | 146 | 71.92% | |
No | 61 | 30.05% | |
Multiple Choice Poll. Voters: 203. You may not vote on this poll |
| LinkBack | Thread Tools | Display Modes |
08-05-2011, 05:15 | #31 (permalink) |
No Life Poster Join Date: Feb 2010 Location: india Age: 44
Posts: 1,527
Member: 1229072 Status: Offline Sonork: 100.1624007 Thanks Meter: 1,644 | 15.15.35 : --------------- Read device information ----------------------- 15.15.35 : Model: KPRBL 15.15.35 : IMEI: 355445-04-042214-7 15.15.35 : Firmware ID: 11.126.16.00.356 15.15.35 : Build: MAR 04 201112:28:46MAR 04 201112:28:46 15.15.35 : --------------- Flash-mode operations ------------------------ 15.15.35 : • Nck: 61365550 15.15.35 : Unlocking device... OK 15.15.38 : --------------------------- E N D. -------------------------------- |
The Following User Says Thank You to gsm junction For This Useful Post: |
08-18-2011, 13:10 | #33 (permalink) | |
Freak Poster Join Date: Aug 2009 Location: kanpur
Posts: 405
Member: 1108057 Status: Offline Sonork: harvinder Thanks Meter: 131 | Quote:
after this the modem is not unlocked aaf | |
08-30-2011, 21:02 | #37 (permalink) |
Junior Member Join Date: Aug 2011
Posts: 6
Member: 1645720 Status: Offline Thanks Meter: 2 | E1732 The mystery continues. Till now there's no easy and permanent solution for the new custom Firmware (F****dware) Huawei E1732 Data card (Idea Cellular, India).All the solutions requires the use of JTAG Boxes or there is some other temporary stuff like Sola GSM Calculator.Both solutions are worthless since the first is out of reach for most of us and the other is only a Temporary solution.There is only one unlocked E1732 RAW dump available for download and that too for JTAG based Flashers. I downloaded the raw dump analysed it under revskills and was able to retrieve the partition info which is as below: 0:MIBIB --------------------------------------------------------- Page: 0x0 Size: 0xA Address: 0x00000000 - 0x00140000 Block: 0x00000000 - 0x00000280 Flash: 0x00FFFFFF 0:SIM_SECURE --------------------------------------------------------- Page: 0xA Size: 0x6 Address: 0x00140000 - 0x00200000 Block: 0x00000280 - 0x00000400 Flash: 0x00FFFFFF 0:QCSBL --------------------------------------------------------- Page: 0x10 Size: 0x4 Address: 0x00200000 - 0x00280000 Block: 0x00000400 - 0x00000500 Flash: 0x00FFFFFF 0:OEMSBL1 --------------------------------------------------------- Page: 0x14 Size: 0x6 Address: 0x00280000 - 0x00340000 Block: 0x00000500 - 0x00000680 Flash: 0x00FFFFFF 0:OEMSBL2 --------------------------------------------------------- Page: 0x1A Size: 0x6 Address: 0x00340000 - 0x00400000 Block: 0x00000680 - 0x00000800 Flash: 0x00FFFFFF 0:AMSS --------------------------------------------------------- Page: 0x20 Size: 0x86 Address: 0x00400000 - 0x014C0000 Block: 0x00000800 - 0x00002980 Flash: 0x00FFFFFF 0:FOTA --------------------------------------------------------- Page: 0xA6 Size: 0x2 Address: 0x014C0000 - 0x01500000 Block: 0x00002980 - 0x00002A00 Flash: 0x00FFFFFF 0:EFS2 --------------------------------------------------------- Page: 0xA8 Size: 0x34 Address: 0x01500000 - 0x01B80000 Block: 0x00002A00 - 0x00003700 Flash: 0x00FFFFFF 0:MMC --------------------------------------------------------- Page: 0xDC Size: 0x312 Address: 0x01B80000 - 0x07DC0000 Block: 0x00003700 - 0x0000FB80 Flash: 0x00FFFFFF 0:OEMINFO --------------------------------------------------------- Page: 0x3EE Size: 0x11 Address: 0x07DC0000 - 0x07FE0000 Block: 0x0000FB80 - 0x0000FFC0 Flash: 0x00FFFFFF --------------------------------------------------------- however there remains a problem with the above mentioned data, since I absolutely have no Idea about the Page sum and page size for the device all the partition offsets are wrong.If someone could help me with that I will be able to extract the independent partitions of exact size and boundary. Finally I can compare it with the factory locked Firmware dump and come up to a plausible solution.I have tried to contact Nirav on this matter but there's no response from his side.If you have any information regarding the topic please mention here. |
The Following User Says Thank You to mattcool For This Useful Post: |
09-02-2011, 18:17 | #38 (permalink) |
Junior Member Join Date: Aug 2011
Posts: 6
Member: 1645720 Status: Offline Thanks Meter: 2 | It has been more than six months since Idea cellular (India) released the customized firmware version 11.126.16.00.356 for the Huawei E1732 (E173du-1) 7.2 Mbps USB modem,till this date there's no unlocking solution for the device due to this customization. On doing some research on the subject I came across the fact that the device is not asking for the unlock code when a locked SIM/UIM is inserted in it because its maximum unlock retries left has already been set to 0. I tried various tools but none of them was able to reset the counter. I was able to extract the NVR using QPST and the EFS using Revskills (though I'm not sure I was able to extract the EFS completely) and perso.txt from the efs using EFS Explorer. One more thing there's no firmware upgrade or downgrade available anywhere to solve this problem.The only firmware available is the locked one its a 7zip based installer so the stuff inside it can be extracted using software like universal extractor. Maybe I need to edit any specific NV item to enable the Unlock request. That I can do to but I just need to know which one. BTW in a couple of days I am going to buy a new unlocked E1732 then I will be able to compare the EFS and the NV Items and maybe then I will be able to generate a plausible solution. Wish me luck. I am attaching the stuff I have extracted from the modem and the locked Firmware itself.Any kind of help or guidance is welcomed. Perso.txt perso.txt EFS efs_read.rar NVRAM DEADD00D_0.qcn Firmware E1732Update.11.126.16.00.356.B427.exe Last edited by mattcool; 09-02-2011 at 18:26. |
The Following User Says Thank You to mattcool For This Useful Post: |
09-03-2011, 05:23 | #39 (permalink) | |
Freak Poster Join Date: Jun 2010
Posts: 136
Member: 1324316 Status: Offline Thanks Meter: 23 | Quote:
Idea 1732 3g 7.2 modem successfully unlocked with riff IDEA 1732 3G 7.2 MODEM SUCCESSFULLY UNLOCKED WITH RIFF DLL MODEL SELECTED AS E153U PINOUT ALSO SAME AS E153U WHICH IS GIVEN IN RIFF JTAG MANAGER AND DUMP FILE USED IN THE LINK GIVEN BELOW 173u unlocked.rar - 4shared.com - online file sharing and storage - download SPECIAL THANKS TO JAGRITISHARMA FOR THE DUMP AND TO LALIT GUPTA FOR HELPING ME OUT TO DO THIS SUCCESSFULLY [9/2/2011 12:43:27 PM] Open serial port...OK [9/2/2011 12:43:27 PM] Connecting to the RIFF Box...OK [9/2/2011 12:43:27 PM] Firmware Version: 1.26, JTAG Manager Version: 1.29 [9/2/2011 12:43:27 PM] Selected Resurrector: [USB Modem E153U] [9/2/2011 12:43:27 PM] [9/2/2011 12:43:27 PM] Connecting to the dead body...OK [9/2/2011 12:43:27 PM] Detected dead body ID: 0x301C00E1 - IGNORED! [9/2/2011 12:43:27 PM] Set I/O Voltage reads as 3.01V, TCK Frequency is RTCK [9/2/2011 12:43:27 PM] Adaptive Clocking RTCK Sampling is: [Sample at MAX] [9/2/2011 12:43:27 PM] [9/2/2011 12:43:27 PM] Resurrection sequence started. [9/2/2011 12:43:27 PM] Establish communication with the phone...OK [9/2/2011 12:43:27 PM] Initializing internal hardware configuration...OK [9/2/2011 12:43:27 PM] Uploading resurrector data into memory...OK [9/2/2011 12:43:27 PM] Starting communication with resurrector...OK [9/2/2011 12:43:27 PM] [9/2/2011 12:43:27 PM] Detected an Initialized FLASH1 Chip ID: 0x00AD/0x00A1 (128MB) [9/2/2011 12:43:27 PM] [9/2/2011 12:43:27 PM] Writting FLASH1 memory from 0x00000000 to 0x07FFFFFF [9/2/2011 12:43:27 PM] ERROR: Timeout while waiting for DCC Loader response. Trying to recover...FAILED [9/2/2011 12:43:27 PM] ERROR: Failed due to multiple communication errors. Terminating at 0x05160000 [9/2/2011 12:43:27 PM] [FINISH OPERATION_ID = DCC_WRITE_MEMORY] [9/2/2011 12:43:41 PM] [START OPERATION_ID = DCC_WRITE_MEMORY] [9/2/2011 12:45:32 PM] Open serial port...OK [9/2/2011 12:45:32 PM] Connecting to the RIFF Box...OK [9/2/2011 12:45:32 PM] Firmware Version: 1.26, JTAG Manager Version: 1.29 [9/2/2011 12:45:32 PM] Selected Resurrector: [USB Modem E153U] [9/2/2011 12:45:32 PM] [9/2/2011 12:45:32 PM] Connecting to the dead body...OK [9/2/2011 12:45:32 PM] Detected dead body ID: 0x301C00E1 - IGNORED! [9/2/2011 12:45:32 PM] Set I/O Voltage reads as 3.00V, TCK Frequency is RTCK [9/2/2011 12:45:32 PM] Adaptive Clocking RTCK Sampling is: [Sample at MAX] [9/2/2011 12:45:32 PM] [9/2/2011 12:45:32 PM] Resurrection sequence started. [9/2/2011 12:45:32 PM] Establish communication with the phone...OK [9/2/2011 12:45:32 PM] Initializing internal hardware configuration...OK [9/2/2011 12:45:32 PM] Uploading resurrector data into memory...OK [9/2/2011 12:45:32 PM] Starting communication with resurrector...OK [9/2/2011 12:45:32 PM] [9/2/2011 12:45:32 PM] Detected an Initialized FLASH1 Chip ID: 0x00AD/0x00A1 (128MB) [9/2/2011 12:45:32 PM] [9/2/2011 12:45:32 PM] Resuming write FLASH1 memory from 0x00000000 to 0x07FFFFFF on 0x05160000 [9/2/2011 12:45:32 PM] Completed in 00:01:49.281 (Average Transfer Rate: 1236.88 kB/s) | |
09-03-2011, 05:24 | #40 (permalink) | |
Freak Poster Join Date: Jun 2010
Posts: 136
Member: 1324316 Status: Offline Thanks Meter: 23 | Quote:
IDEA 1732 3G 7.2 MODEM SUCCESSFULLY UNLOCKED WITH RIFF DLL MODEL SELECTED AS E153U PINOUT ALSO SAME AS E153U WHICH IS GIVEN IN RIFF JTAG MANAGER AND DUMP FILE USED IN THE LINK GIVEN BELOW BY RAHUL_ ROCKS ALIAS PAWAN AGARWAL 173u unlocked.rar - 4shared.com - online file sharing and storage - download SPECIAL THANKS TO JAGRITISHARMA FOR THE DUMP AND TO LALIT GUPTA FOR HELPING ME OUT TO DO THIS SUCCESSFULLY [9/2/2011 12:43:27 PM] Open serial port...OK [9/2/2011 12:43:27 PM] Connecting to the RIFF Box...OK [9/2/2011 12:43:27 PM] Firmware Version: 1.26, JTAG Manager Version: 1.29 [9/2/2011 12:43:27 PM] Selected Resurrector: [USB Modem E153U] [9/2/2011 12:43:27 PM] [9/2/2011 12:43:27 PM] Connecting to the dead body...OK [9/2/2011 12:43:27 PM] Detected dead body ID: 0x301C00E1 - IGNORED! [9/2/2011 12:43:27 PM] Set I/O Voltage reads as 3.01V, TCK Frequency is RTCK [9/2/2011 12:43:27 PM] Adaptive Clocking RTCK Sampling is: [Sample at MAX] [9/2/2011 12:43:27 PM] [9/2/2011 12:43:27 PM] Resurrection sequence started. [9/2/2011 12:43:27 PM] Establish communication with the phone...OK [9/2/2011 12:43:27 PM] Initializing internal hardware configuration...OK [9/2/2011 12:43:27 PM] Uploading resurrector data into memory...OK [9/2/2011 12:43:27 PM] Starting communication with resurrector...OK [9/2/2011 12:43:27 PM] [9/2/2011 12:43:27 PM] Detected an Initialized FLASH1 Chip ID: 0x00AD/0x00A1 (128MB) [9/2/2011 12:43:27 PM] [9/2/2011 12:43:27 PM] Writting FLASH1 memory from 0x00000000 to 0x07FFFFFF [9/2/2011 12:43:27 PM] ERROR: Timeout while waiting for DCC Loader response. Trying to recover...FAILED [9/2/2011 12:43:27 PM] ERROR: Failed due to multiple communication errors. Terminating at 0x05160000 [9/2/2011 12:43:27 PM] [FINISH OPERATION_ID = DCC_WRITE_MEMORY] [9/2/2011 12:43:41 PM] [START OPERATION_ID = DCC_WRITE_MEMORY] [9/2/2011 12:45:32 PM] Open serial port...OK [9/2/2011 12:45:32 PM] Connecting to the RIFF Box...OK [9/2/2011 12:45:32 PM] Firmware Version: 1.26, JTAG Manager Version: 1.29 [9/2/2011 12:45:32 PM] Selected Resurrector: [USB Modem E153U] [9/2/2011 12:45:32 PM] [9/2/2011 12:45:32 PM] Connecting to the dead body...OK [9/2/2011 12:45:32 PM] Detected dead body ID: 0x301C00E1 - IGNORED! [9/2/2011 12:45:32 PM] Set I/O Voltage reads as 3.00V, TCK Frequency is RTCK [9/2/2011 12:45:32 PM] Adaptive Clocking RTCK Sampling is: [Sample at MAX] [9/2/2011 12:45:32 PM] [9/2/2011 12:45:32 PM] Resurrection sequence started. [9/2/2011 12:45:32 PM] Establish communication with the phone...OK [9/2/2011 12:45:32 PM] Initializing internal hardware configuration...OK [9/2/2011 12:45:32 PM] Uploading resurrector data into memory...OK [9/2/2011 12:45:32 PM] Starting communication with resurrector...OK [9/2/2011 12:45:32 PM] [9/2/2011 12:45:32 PM] Detected an Initialized FLASH1 Chip ID: 0x00AD/0x00A1 (128MB) [9/2/2011 12:45:32 PM] [9/2/2011 12:45:32 PM] Resuming write FLASH1 memory from 0x00000000 to 0x07FFFFFF on 0x05160000 [9/2/2011 12:45:32 PM] Completed in 00:01:49.281 (Average Transfer Rate: 1236.88 kB/s) | |
09-03-2011, 18:23 | #42 (permalink) |
Junior Member Join Date: Aug 2011
Posts: 6
Member: 1645720 Status: Offline Thanks Meter: 2 | @justcdma : Thanks but I already knew about the solution only problem with this is E153U is a 3.6 Mbps modem while E1732 is a 7.2 Mbps one isn't this solution supposedly reduces the download speeds to half.If I am wrong please prove your point. Thanks |
10-08-2011, 12:05 | #43 (permalink) |
Crazy Poster Join Date: Feb 2008 Location: india Age: 46
Posts: 56
Member: 696199 Status: Offline Thanks Meter: 3 | hi all masters need perfect solution for idea net setter E1732 unlock/ unlocked firmware-not dashboard any have perfect solution pls upload, don't post fake solution............. |
10-18-2011, 08:18 | #44 (permalink) |
Registered User Join Date: Mar 2006 Location: tuljapur
Posts: 130
Member: 246286 Status: Offline Thanks Meter: 14 | use dc-unlocker work 100% i test 100% DC - Unlocker 2 Client 1.00.0717 Detecting card : selection : manufacturer - Huawei modems model - Auto detect (recommended) Found modem : E1732 Model : Huawei E1732 (Idea) IMEI : 355445042050185 Serial NR. : M5U4CA1180303658 Firmware : 11.126.16.01.356 Compile date / time : Jun 09 2011 15:40:11 Dashboard version : UTPS21.005.11.00.356_MAC21.005.11.00.356_LNX21.005 .11.01.356 Chipset : Qualcomm MSM6290 Voice feature : enabled SIM Lock status : unlocked Wrong codes entered : 0 (unlock attempts left : 10) |
Bookmarks |
| |
Similar Threads | ||||
thread | Thread Starter | Forum | Replies | Last Post |
I neeeeed NCDS 2.0!!!! plzz!!!! | ratzfatz | Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) | 3 | 02-27-2022 22:12 |
How to upload a new firmware... | Brand | Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) | 8 | 06-08-2012 18:29 |
Need info for unliocking 2 lock (with pic microprocesors) | Tomas | Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) | 1 | 06-26-1999 01:00 |
|