View Single Post
  #8  
Old 08-30-2004, 22:02
McS2oo4
 
Posts: n/a
It is reading IMEI, PSN, TSP code with this info and algo you generate generates NCK unclock code. Algo is tooo complicated. I have old Sagems (this is actualy from original) algo and it is way way complex to solve by one man...

To "armmad8":
t191 is Motorola but ACER, probubly Motola ownes licence (like Siemens and Bosch, s series like s30 s40 are Bosch!) Unlock sequence is not 5 bytes, 5 bytes is signaling srting then comes responce from phone - eeprom read state OK ack arives sw sends eeprom unlocked state bin, then ack from phone, program then send reset command, phone restarts... unlocked. This is only for t191 and t190 (ACER inside!) Motorola not other model. Similar unlock swquence is for all C3x0 (also ACER inside).

To "truth":
I can send you Sagem algo if you are interested to see how it is done.
Best Regards
Reply With Quote