V3re unlock reported

[Danation]

At M?, somebody posted that they've successfully unlocked two v3re's with P2kEasyTools. Modnmotos and I tried it unsuccessfully on 4 v3re's, but another member, dohs, tried it and reports that it worked.

Would anybody be willing to try it? My unsuccessful attempts have not resulted in bricks.

Here is a link to the thread in question:

http://www.modmymoto.com/forums/showthread.php?t=54837&page=2

Starting with post #22.

I would love to hear from V3re users here at MMus. Please try this and we'll see if it works for more people :)

[Danation]

Surely somebody wants to try to unlock their V3re? And post their results?

[GBL]

I dont't need to try this out to know that it doesn't work. Forget it. Beside IMEI it needs testpoint adapter together with new software from smartclip/rocker/mss.

[Danation]

Well, if you looked at the thread, you will know the answer ;) For old V3re phones, it'll work. Like the first group ever made.

[vermsky]

No it won't. They must have mistaken their V3re with the V3r or V3e. There is no possible way for p2keasy to write into ROM4 phones.

MSS, Smartclip, rocker are boxes that you can buy to unlock these phones. They had to write code specifically for ROM4 and Argon phones. Not only was that necessary, but they also needed to utilize a special TP adapter that grounds the TP using the pinouts on the box.

I have used smartclip to unlock the V3rE when they first came out. I was successful at putting the phone in blank mode using the same Easy Testpoint button for V3/V3i/V3r. The problem was, when you run smartclip to unlock it, it reads boot version 3.00 then it will give you an error. If you use the correct method (tp adapter and different TP location) you will read boot version as 0.00.

I said in another thread that this is sort of a "special" blank mode to bypass the security of ROM4 and Argon Chips. Regular blank mode no longer works for these phones. That is the reason why you don't end up with bricks when you try it since you can't write anything to the chip in the first place.

Btw, I haven't gone through the whole thread yet. I got bored after the first 2 pages.

[Danation]

Alright, well, it appears that they are liars and I have been given incorrect information. I can accept that.

But I really would like to know how to duplicate the special TP method. Do you have any more information about it? Any kind of procedure I can try? Any place to start at all?

I would very much appreciate any help you can give. I know it's an old phone with not very many good features. But there are many people with that phone, and I'd like to help them out.

[vermsky]

It's easy to replicate the TP Adapter. However, that is not the only case. Before unlocking this phone to enable the use of the correct TP location inside under the shield, it goes through a "Prepare" Cycle. This prepare cycle writes something in the phone. Only the guys who made the boxes know exactly what is written there.

I also found it odd that MSS and Smartclip uses different TP locations tho they are on the same line. Just different points.

[Danation]

I see. So the problem at this point is software, not hardware.

For the TP adapter, does it merely ground the TP? I don't understand why two cables are needed to ground one point. Or why it needs a special adapter at all. I'm sorry if this is a dumb question.

Thanks again for your help.

[vermsky]

It is both software and hardware.

The TP Adapter is connected to the box as well. The TP adapter will not work if connected to a USB port. Each TP adapter's pinout is different for each of the unlock boxes. The reason for this is that the TP adapter uses the pinout of the box as well for grounding and powering purposes. I really have no idea on what happens or what communication happens between the box and the TP adapter internally but I do suspect that it is there.

[Danation]

That would make sense. Do you have any ideas for how to go about finding out what I need? The only idea I've had so far is to buy a box and reverse engineer its processes.

[vermsky]

You can try that but I don't think it would be easy since the codes in them are protected as well. Each box I mentioned earlier uses some sort of smartcard protection.

[Danation]

That's a good point. Um...... what should I do now? Any ideas?