Jump to content


Photo

[Need helpers!] Searching for keyword "simlock" in "mmcblk0" shows things...

- - - - -

  • Please log in to reply
34 replies to this topic

#1
glossywhite

glossywhite

    Hardcore

  • Members
  • PipPipPipPipPipPip
  • 1,878 posts
Okay y'all?

#### UPDATE ####

Who's willing to help me with this? I now have my OSD, and I am willing to put in some leg work to find whatever is needed to unlock the OSD, so long as I have some backing from other hackers?

#### /UPDATE ####

Right, back to being British, and earning my keep here (and stuck on Orange... or is it Tee-immobilised?). Okay; I rooted my OSD, and then did:

./adb pull /dev/block/mmcblk0 ./

To pull the /dev/block/mmcblk0 from 'phone to my PC...

and then I did...

strings mmcblk0 | grep "simlock"

... and look what came up...

strings mmcblk0 | grep simlock
Enter: func_simlock_virgin_extension
Exit: func_simlock_virgin_extension
b_simlock_data
Enter: func_si_chk_simlock
`Error reading simlock signature from flash
Exit: func_si_chk_simlock
Enter: func_simlock_virgin
Error: func_simlock_virgin_extension failed.
Exit: func_simlock_virgin
Enter: func_simlock_tickets_written
Exit: func_simlock_tickets_written


So, some strings pertaining to SIMlock are *definitely* inside that block device. I'm just flying blind for now, but if anyone else wants to try, and has Linux, I'd recommend:


man strings


... which explains how to run "strings" on a file (our local copy of the mmcblk0) and filter through "grep" to see what transpires.



#### EDIT ####


More...


$ strings mmcblk0 | grep "si_chk"
Enter: func_si_chks
Exit: func_si_chks
Enter: func_si_chk_virgin
Enter: func_si_chk_valid_system_ticket
Enter: func_si_chk_rnd
Exit: func_si_chk_rnd
Enter: func_si_chk_mid
Exit: func_si_chk_mid
Enter: func_si_chk_simlock
Exit: func_si_chk_simlock
Enter: func_si_chk_ticket_sm
Exit: func_si_chk_ticket_sm
Enter: func_si_chk_ticket_cp
Exit: func_si_chk_ticket_cp
Enter: func_si_chk_ticket_sp
Exit: func_si_chk_ticket_sp
Enter: func_si_chk_ticket_ns
Exit: func_si_chk_ticket_ns
Enter: func_si_chk_ticket_no
Exit: func_si_chk_ticket_no
Enter: func_si_chk_imei
Exit: func_si_chk_imei
Enter: func_si_chk_ticket_sec
Exit: func_si_chk_ticket_sec
Enter: func_si_chk_ticket_boot
Exit: func_si_chk_ticket_boot
Enter: func_si_chk_ticket_test
Exit: func_si_chk_ticket_test
Enter: func_si_chks_extension
Exit: func_si_chks_extension
Enter: func_si_chk_restricted_mode
Exit: func_si_chk_restricted_mode



### EDIT 2 ###

Even MORE:


$ strings mmcblk0 | grep "virgin"
Enter: func_imei_virgin_extension
SEC module access overrides virgin check
Presence of valid RnD cert overrides virgin check
Exit: func_imei_virgin_extension
Enter: func_simlock_virgin_extension
SEC module access overrides virgin check
Presence of valid RnD cert overrides virgin check
Exit: func_simlock_virgin_extension
s_virgin_mode
Enter: func_si_chk_virgin
Enter: func_simlock_virgin
Error: func_simlock_virgin_extension failed.
Exit: func_simlock_virgin
Enter: func_imei_virgin
Error: func_imei_virgin_extension failed.
Exit: func_imei_virgin





$ strings mmcblk0 | grep "mcc"
$bool, mcc
!aemccc+
0aBmccc
grr_si_in_tbf=not allowed for this mcc
grr_si_in_tbf=this mcc is allowed
.mcc
grr_si_in_tbf=off mcc=all
grr_si_in_tbf=off mcc=0x%.1X%.1X%.1X
3Damcc nitzMcc=%d,mnc nitzMnc=%d
`mcc:%d,mnc: %d
3Da[C-AT]: NITZ mcc write to NVM failed
`mcc:%d,mnc: %d
3Da[C-AT]: NITZ mcc write to NVM failed
` HPLMN EF mcc and mnc are= %02d %02d
dyn_msap_mcc_update_table
dyn_msap_mcc_update_table
dyn_msap_mcc_update_table
nitz_mcc
mcc_table
mcc_list
application/vnc.cmcc.dcd+xml
"application/vnd.cmcc.bombing+wbxml
"application/vnd.cmcc.setting+wbxml
mccmnc
mccmncCode
updateMccMncConfiguration: mcc=
_ZNKSt8time_putIwSt19ostreambuf_iteratorIwSt11char_traitsIwEEE6do_putES3_RSt8ios_basewPK2tmcc
_ZNKSt8time_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE6do_putES3_RSt8ios_basecPK2tmcc
pmcclcoltkunnhkafhprfrkrferpfwlbfvbaftspflahutavtcjctiniserpgilcsvbaswlbstspnlahmvbamwlbtsid
esacltitpmcclcoltrevmunlmunomunpmuntorezcs2cpcms87pj38pj09pj40pjtpxeojohkclndartmantpmisankhankvdiwfdiwhdiwqdiwtdiwpankplatigilragilgilcgildgilhpspctlaplapvkramkmkmnrek


Adios! :D

Edited by glossywhite, 01 April 2013 - 10:27 PM.

  • 0

#2
jikobutsu

jikobutsu

    Hardcore

  • Members
  • PipPipPipPipPipPip
  • 3,704 posts
  • Gender:Male
  • Devices:OSD
Very good glossywhite, keep it up :)

  • 0

#3
BlueMoonRising

BlueMoonRising

    Hardcore

  • Members
  • PipPipPipPipPipPip
  • 1,516 posts
  • Gender:Male
  • Location:Here, there and everywhere...
  • Devices:Orange San Diego, OSF
Hmm, I tried adb pull /dev/mmcblk0 ./ which comes back as file does not exist. I did a search and it shows the file as being in /dev/block/ with a bunch of other similar titled files, however it wont let me pull it(or indeed do anything with it). I might add that I'm SIM unlocked.

  • 0
Whoever exalts himself will be humbled, and whoever humbles himself will be exalted.

Matthew 23:12

#4
topcat07

topcat07

    Diehard

  • Members
  • PipPipPipPip
  • 304 posts
Brilliant stuff must be something flagging it then. I have very basic knowledge but would it be possible for bluemoon and you to compare strings somehow to see the difference? Just my 2ps worth

  • 0

#5
BlueMoonRising

BlueMoonRising

    Hardcore

  • Members
  • PipPipPipPipPipPip
  • 1,516 posts
  • Gender:Male
  • Location:Here, there and everywhere...
  • Devices:Orange San Diego, OSF

Brilliant stuff must be something flagging it then. I have very basic knowledge but would it be possible for bluemoon and you to compare strings somehow to see the difference? Just my 2ps worth

Only if it lets me pull it, at the moment I can't see why I can't. I'm open to suggestions(as long as they're clean :D).

  • 0
Whoever exalts himself will be humbled, and whoever humbles himself will be exalted.

Matthew 23:12

#6
brokebloke

brokebloke

    Newbie

  • Members
  • Pip
  • 23 posts
  • Gender:Male
  • Devices:ZTE Blade, Orange San Diego
I Have the same problem, but after waiting about 20 mins it seems to have pulled 5.4g of data and is working.

Only if it lets me pull it, at the moment I can't see why I can't. I'm open to suggestions(as long as they're clean :D).


  • 0

#7
glossywhite

glossywhite

    Hardcore

  • Members
  • PipPipPipPipPipPip
  • 1,878 posts
OP fixed to reflect

/dev/block/mmcblk0


### A word of caution ###

Do not pull /dev/block/mmcblk0p7 - that appears to be our storage area "/sdcard", and will pull 10Gb+, and likely contain nothing valuable.

Edited by glossywhite, 01 April 2013 - 03:51 PM.

  • 0

#8
shootomanUK

shootomanUK

    Diehard

  • Members
  • PipPipPipPip
  • 454 posts
  • Gender:Male
  • Location:Salford, Manchester
  • Devices:AZ210A , WT19i , DynaTAC 8000X
  • Twitter:@not got one
Miracles through faith in glossywhite :D

  • 0

#9
glossywhite

glossywhite

    Hardcore

  • Members
  • PipPipPipPipPipPip
  • 1,878 posts

Miracles through faith in glossywhite :D


How kind of you :)

Want to help?

  • 0

#10
shootomanUK

shootomanUK

    Diehard

  • Members
  • PipPipPipPip
  • 454 posts
  • Gender:Male
  • Location:Salford, Manchester
  • Devices:AZ210A , WT19i , DynaTAC 8000X
  • Twitter:@not got one
id love to, however my hacking skills are pretty lame aswell as my usage of the linux os :-/

i will have a try though tommorow night after work :-)

  • 1

#11
glossywhite

glossywhite

    Hardcore

  • Members
  • PipPipPipPipPipPip
  • 1,878 posts

id love to, however my hacking skills are pretty lame aswell as my usage of the linux os :-/

i will have a try though tommorow night after work :-)


"Good on ya, sport!" ;)

Spread the word - this is one step closer to victory!

Thank you for helping too :)

  • 0

#12
glossywhite

glossywhite

    Hardcore

  • Members
  • PipPipPipPipPipPip
  • 1,878 posts
Okay, so this string seems to bring up some results:

$ strings mmcblk0 | grep ticket

Shows...



M`Security ticket: %s
Security ticket: Undefined name for security ticket (%d)
Error validating phonelock ticket 0x%08x
Enter: func_system_tickets_written
Error reading the system test ticket from flash
No test ticket definition available
Error reading the bootcore ticket from flash
No bootcore ticket definition available
Error reading the security module ticket from flash
No security module ticket definition available
Exit: func_system_tickets_written
Enter: func_systicket_count_minute
`Global system ticket reset
M`%s[10]:sec_ticket
Enter: func_systicket_data_clear
;N`Exit: func_systicket_data_clear
Enter: func_systicket_count_reset
`Exit: func_systicket_count_reset
Access denied in sec_opcode_flush (ticket 0x%08x)
Access denied in sec_opcode_program (ticket 0x%08x)
Error validating ticket for id %08x
Access denied in sec_opcode_get_hw_details (ticket 0x%08x)
Access denied in sec_opcode_freeze_imei (ticket 0x%08x)
Access denied in sec_opcode_freeze_imiei (ticket 0x%08x)
Access denied in sec_opcode_store_soft_imei (ticket 0x%08x)
Access denied in sec_opcode_clear_sec_area (ticket 0x%08x)
Enter: func_systicket_count_pwrup
Error: Cannot remove ticket
Exit: func_systicket_count_pwrup
Enter: func_systicket_clear_code
Exit: func_systicket_verify_code
Error reseting system ticket counter
Error clearing system ticket data
Enter: func_systicket_verify_code
Error: Wrong ticket id 0x%08x
Exit: func_systicket_verify_code
`Error validating ticket for id %08x
s_valid_system_ticket
Enter: func_si_chk_valid_system_ticket
Enter: func_si_chk_ticket_sm
Exit: func_si_chk_ticket_sm
Enter: func_si_chk_ticket_cp
Exit: func_si_chk_ticket_cp
Enter: func_si_chk_ticket_sp
Exit: func_si_chk_ticket_sp
Enter: func_si_chk_ticket_ns
Exit: func_si_chk_ticket_ns
Enter: func_si_chk_ticket_no
Exit: func_si_chk_ticket_no
Enter: func_si_chk_ticket_sec
Exit: func_si_chk_ticket_sec
Enter: func_si_chk_ticket_boot
Exit: func_si_chk_ticket_boot
Enter: func_si_chk_ticket_test
Exit: func_si_chk_ticket_test
Invalid tickets. Service mode set to SEC_SERVICE_FACTORY.
`Error reading ticket id 0x%08x data from flash
Error, ticket is invalid due to (0xFFFFFFFF)
;N`Exit: func_verify_ticket
Expected ticket id different from ticket id 0x%08x , 0x%08x
Storing ticket in flash
9IaFunction is deprecated - Use [email protected]_ticket? instead.
Enter: func_simlock_tickets_written
Error reading the ticket from flash
No ticket definition available
Exit: func_simlock_tickets_written
Access denied in sec_opcode_verify_fuseregisters and sec_opcode_set_fuseregisters (ticket 0x%08x)
Enter: func_verify_ticket (input ticket 0x%08x) (Present ticket 0x%08x)
Exit: func_systicket_count_minute (minutes back %d before reset)
tls1_process_ticket
SSL_set_session_ticket_ext_cb
SSL_set_session_ticket_ext
ssl3_get_new_session_ticket
SSL_set_session_ticket_ext
invalid ticket keys length
krb5 server bad ticket
ssl3_get_new_session_ticket
tls1_process_ticket
invalid ticket keys length
krb5 server bad ticket


~~~ ALSO ~~~


strings mmcblk0 | grep func_
Error: func_id has been tampered
SaEnter: func_validate_cert
Exit: func_validate_cert
func_sec_process entering while(1) loop
func_process_running: UtaOsThreadGetCurrent(...) returned %d.
Error: NULL pointer send func_id.
Enter: func_pkcs_validate
Exit: func_pkcs_validate
Enter: func_rsa_decrypt
Exit: func_rsa_decrypt
Enter: func_read_data_pointer
Exit: func_read_data_pointer
func_ThreadDeletedHandler: UtaOsSemRelease(Done) returned %d.
Enter: func_get_lock_profiles
`Exit: func_get_lock_profiles
Enter: func_get_file_profile file_id %d
`Exit: func_get_file_profile
Enter: func_compare_lock_data
`Exit: func_compare_lock_data
Error: func_id has been tampered
Error: func_id has been tampered
Error: func_id has been tampered
Error: func_id has been tampered
Error: func_id has been tampered
Enter: func_byte_reverse
Exit: func_byte_reverse
@~SaEnter: func_utasec_rsa_pub
Exit: func_utasec_rsa_pub
X~SaEnter: func_utasec_hash
Exit: func_utasec_hash
Enter: func_pkcs_der_type
}SaExit: func_pkcs_der_type
Enter: func_verify_cert_data
Exit: func_verify_cert_data
Enter: func_put_to_lock_action_list
Exit: func_put_to_lock_action_list
`Enter: func_test_sim_inserted
{SaExit: func_test_sim_inserted
Enter: func_req_data_present_on_sim
Exit: func_req_data_present_on_sim
Enter: func_perform_lock_data_cmp
Exit: func_perform_lock_data_cmp
Enter: func_change_control_key
`Exit: func_change_control_key
Enter: func_ptst_lock_control tag 0x%xl
`Exit: func_ptst_lock_control
Enter: func_calculate_tickkey
Exit: func_calculate_tickkey
Enter: func_system_tickets_written
Exit: func_system_tickets_written
Enter: func_systicket_count_minute
Enter: func_minute_tick
`Exit: func_minute_tick
Enter: func_module_test_func opcode %d
Exit: func_module_test_func
Terminating func_sec_process
Enter: func_handle_no_comp
Exit: func_handle_no_comp
Enter: func_store_armed_code_groups
`Exit: func_store_armed_code_groups
Enter: func_perform_control_key_verification
Exit: func_perform_control_key_verification
Enter: func_perform_control_key_change
SaExit: func_perform_control_key_change
Enter: func_handle_sm_comp
Exit: func_handle_sm_comp
Enter: func_imei_virgin_extension
Exit: func_imei_virgin_extension
Enter: func_simlock_virgin_extension
Exit: func_simlock_virgin_extension
Enter: func_create_hmac
Error: func_utasec_sha1_hash failed!
Error: func_utasec_wrap_data failed!
Exit: func_create_hmac
Enter: func_validate_hmac
Error: func_create_hmac failed!
Exit: func_validate_hmac
Enter: func_TLV_read
Exit: func_TLV_read
Enter: func_tag_id_to_path
Exit: func_tag_id_to_path
func_sec_init: UtaOsThreadGetCurrent(...) returned %d.
`func_sec_init: UtaOsThreadDelete(...) returned %d.
Enter: func_comp_no_data
Exit: func_comp_no_data
Enter: func_handle_sp_comp
Exit: func_handle_sp_comp
Enter: func_handle_ns_comp
Exit: func_handle_ns_comp
Enter: func_comp_sm_data
Exit: func_comp_sm_data
Enter: func_init_storage
Exit: func_init_storage
Enter: func_systicket_data_clear
;N`Exit: func_systicket_data_clear
Enter: func_systicket_count_reset
`Exit: func_systicket_count_reset
}SaEnter: func_utasec_sha1_hash
Exit: func_utasec_sha1_hash
~SaEnter: func_utasec_wrap_data
Exit: func_utasec_wrap_data
~SaEnter: func_utasec_make_hmac
Exit: func_utasec_make_hmac
Enter: func_imei_read_ascii
Exit: func_imei_read_ascii
Enter: func_imei_read
`Exit: func_imei_read
Enter: func_hwid_baseband
SaExit: func_hwid_baseband
Enter: func_signature_check_at_if
Exit: func_signature_check_at_if
Enter: func_new_concept_func
Warning: Security data invalid (func_new_concept_func)
Error func_update_data_begin
Error func_buffer_sec_data
Error func_update_data_completed
`Exit: func_new_concept_func
Enter: func_tlv_iterator_validate_hw_details
Exit: func_tlv_iterator_validate_hw_details
Enter: func_tlv_iterator_setup_and_validate
Exit: func_tlv_iterator_setup_and_validate
Enter: func_comp_ns_data
Exit: func_comp_ns_data
Enter: func_handle_cp_comp
Enter: func_comp_sp_data
Exit: func_comp_sp_data
Enter: func_systicket_count_pwrup
Exit: func_systicket_count_pwrup
Enter/Exit: func_ata_sec_init
Enter/Exit: func_ata_sec_kill
Enter: func_init_storage_extension
Exit: func_init_storage
Enter: func_systicket_clear_code
Exit: func_systicket_verify_code
Error func_update_data_begin
Error func_buffer_sec_data
Enter: func_imei_read_ascii_mult
Exit: func_imei_read_ascii_mult
Enter: func_imei_read_mult
`Exit: func_imei_read_mult
Enter: func_comp_cp_data
Exit: func_comp_cp_data
Enter: func_systicket_verify_code
Exit: func_systicket_verify_code
Enter: func_validate_pre_program
Exit: func_validate_pre_program
Enter: func_ata_create_var
`Exit: func_ata_create_var
Enter: func_ata_set_format
Exit: func_ata_set_format
Enter: func_ata_code_verify
Exit: func_ata_code_verify
Enter: func_ata_code_clear
Exit: func_ata_code_clear
Enter: func_ata_imei_read
Exit: func_ata_imei_read
Enter: func_ata_imei_label
Exit: func_ata_imei_label
Enter: func_ata_hw_details
Exit: func_ata_hw_details
Enter: func_ata_status_info
Exit: func_ata_status_info
Enter: func_ata_state_info
Exit: func_ata_state_info
Enter: func_ata_flash_io
Exit: func_ata_flash_io
Enter: func_ata_ptest_generic
Exit: func_ata_ptest_generic
Enter: func_ata_module_test
Exit: func_ata_module_test
Enter: func_ata_fus_script
Exit: func_ata_fus_script
Enter: func_ata_imei_read
Exit: func_ata_imei_read
Enter: func_si_chks
Exit: func_si_chks
Enter: func_secblk_available_length
Exit: func_secblk_available_length
Enter: func_secblk_read
Exit: func_secblk_read
Enter: func_secblk_write
Exit: func_secblk_write
Enter: func_si_chk_virgin
Enter: func_si_chk_valid_system_ticket
Enter: func_si_chk_rnd
Exit: func_si_chk_rnd
Enter: func_si_chk_mid
Exit: func_si_chk_mid
Enter: func_si_chk_simlock
Exit: func_si_chk_simlock
Enter: func_si_chk_ticket_sm
Exit: func_si_chk_ticket_sm
Enter: func_si_chk_ticket_cp
Exit: func_si_chk_ticket_cp
Enter: func_si_chk_ticket_sp
Exit: func_si_chk_ticket_sp
Enter: func_si_chk_ticket_ns
Exit: func_si_chk_ticket_ns
Enter: func_si_chk_ticket_no
Exit: func_si_chk_ticket_no
Enter: func_si_chk_imei
Exit: func_si_chk_imei
Enter: func_si_chk_ticket_sec
Exit: func_si_chk_ticket_sec
Enter: func_si_chk_ticket_boot
Exit: func_si_chk_ticket_boot
Enter: func_si_chk_ticket_test
Exit: func_si_chk_ticket_test
Enter: func_si_chks_extension
Exit: func_si_chks_extension
Enter: func_si_chk_restricted_mode
Exit: func_si_chk_restricted_mode
func_process_running: UtaOsThreadGetCurrent(...) returned %d.
func_process_running: UtaOsThreadGetName(...) returned %d.
func_exec_function: UtaOsThreadGetCurrent(...) returned %d.
func_exec_function: UtaOsThreadGetName(...) returned %d.
`func_exec_function: UtaOsSemObtain(call) returned %d.
`func_exec_function: UtaOsSemRelease(call) returned %d.
Error: func_id has been tampered
Enter: func_system_access_level
`Exit: func_system_access_level
Error: func_id has been tampered
Error: func_id has been tampered
Error: func_id has been tampered
Error: func_id has been tampered
Error: func_id has been tampered
Error: func_id has been tampered
Error: func_id has been tampered
Error: func_id has been tampered
Error: func_id has been tampered
Error: func_id has been tampered
Error: func_id has been tampered
Enter: func_glob_sec_init
SaExit: func_glob_sec_init
Enter: func_simlock_virgin
Error: func_simlock_virgin_extension failed.
Exit: func_simlock_virgin
Enter: func_update_data_begin
Exit: func_update_data_begin
Enter: func_get_data_block
Exit: func_get_data_block
Enter: func_get_block_info
Exit: func_get_block_info(id=%02x,offset=0x%x,length=0x%x)
;N`Exit: func_verify_ticket
Enter: func_init_lock_action
`Exit: func_init_lock_action
Enter: func_get_from_lock_action_list
`Exit: func_get_from_lock_action_list
Enter: func_update_data_completed
Exit: func_update_data_completed
Enter: func_store_data_block
Exit: func_store_data_block
Enter: func_get_hwids
Exit: func_get_hwids
Enter: func_verify_MID_cert_data
Exit: func_verify_MID_cert_data
Enter: func_validate_signature
Exit: func_validate_signature
func_malloc(...) failed.
func_create_thread: UtaOsSemCreate(done) returned %d.
func_create_thread: UtaOsThreadCreate(...) returned %d.
func_create_thread: UtaOsThreadStart(...) returned %d.
func_create_thread: UtaOsSemObtain(done) returned %d.
func_create_thread: UtaOsSemDelete(func) returned %d.
Enter: func_verify_control_key
`Exit: func_verify_control_key
Enter: func_get_symkey
Exit: func_get_symkey
Enter: func_write_dyn_sta_block block_id(0x%x)
Exit: func_write_dyn_sta_block
Enter: func_read_dyn_sta_block block_id(0x%x)
Exit: func_read_dyn_sta_block
Enter: func_eep_get_sec_status
Exit: func_eep_get_sec_status
Enter: func_eep_store_sec_status
exit: func_eep_store_sec_status
Enter: func_get_nof_imeis
Exit: func_get_nof_imeis
Enter: func_get_data_offset_length
Exit: func_get_data_offset_length
Enter: func_failsafe_imei_prepare
{SaExit: func_failsafe_imei_prepare
Enter: func_buffer_sec_data
Exit: func_buffer_sec_data
Enter: func_get_MID_imei
Exit: func_get_MID_imei
Enter: func_get_system_access_level
SaExit: func_get_system_access_level
Enter: func_imei_virgin
Error: func_imei_virgin_extension failed.
Exit: func_imei_virgin
Enter: func_fetch_imei_from_flash
Exit: func_fetch_imei_from_flash
Enter: func_ata_switch_process
Error: func_id has been tampered
Exit: func_ata_switch_process
Enter: func_ata_approve_access
Exit: func_ata_approve_access
Enter: func_ata_print_bin_data
Exit: func_ata_print_bin_data
Enter: func_simlock_tickets_written
Exit: func_simlock_tickets_written
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_build_mac_cfg_func_ehs.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
i`urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_trch_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
urrcdc:urrcdc_db_cfg_phych_func_edch.c
func_hwid_baseband: scu_feat_serial_number_get(...) returned %d.
Error starting write session to data buffer (func_update_data_begin)
func_malloc: malloc(%d) failed.
func_create_thread: UtaOsThreadRegisterDeletedHandler(...) returned %d.
Enter: func_verify_ticket (input ticket 0x%08x) (Present ticket 0x%08x)
Exit: func_systicket_count_minute (minutes back %d before reset)
android.app.func_name
ERR_func_error_string
Unable to seek to export_func_name_list section for writing.
Unable to write export_func_name_list section to cache file.
Unable to allocate for export_func_name_list
Unable to seek to export_func_name_list section
Unable to read export_func_name_list.
GL_ARB_blend_func_extended
return this.func_;
ERR_func_error_string
services4/srvclient/env/linux/common/osfunc_um.c

Edited by glossywhite, 02 April 2013 - 04:27 PM.

  • 0

#13
grizzlyflea

grizzlyflea

    Enthusiast

  • Members
  • PipPipPip
  • 209 posts
  • Gender:Male
  • Devices:Huawei Ascend G300
Is that good or bad? I'm a noob when it comes to this stuff

  • 0

#14
glossywhite

glossywhite

    Hardcore

  • Members
  • PipPipPipPipPipPip
  • 1,878 posts

Is that good or bad? I'm a noob when it comes to this stuff


I'd say *good* :)

  • 0

#15
topcat07

topcat07

    Diehard

  • Members
  • PipPipPipPip
  • 304 posts
When it says func is this a function you can access? As it states in code above func_ xxxxx xxxxxx

Edit

Func_sim,

Edited by topcat07, 02 April 2013 - 09:21 PM.

  • 0

#16
shootomanUK

shootomanUK

    Diehard

  • Members
  • PipPipPipPip
  • 454 posts
  • Gender:Male
  • Location:Salford, Manchester
  • Devices:AZ210A , WT19i , DynaTAC 8000X
  • Twitter:@not got one
could someone who has had the osd unlocked already
please try these commands that glossywhite posted , but alternatively
try:


strings mmcblk0 | grep "used unlock code"


strings mmcblk0 | grep "your imei"

and please post the results, but obviously protect you personal details with alternative characters i.e *****

thanks

  • 0

#17
glossywhite

glossywhite

    Hardcore

  • Members
  • PipPipPipPipPipPip
  • 1,878 posts

When it says func is this a function you can access? As it states in code above func_ xxxxx xxxxxx

Edit

Func_sim,


I've no idea yet. All I know is that these function calls seem to be the ones commanding the simlock to unlock itself, but I've no idea how to do this... yet :)

  • 0

#18
BlueMoonRising

BlueMoonRising

    Hardcore

  • Members
  • PipPipPipPipPipPip
  • 1,516 posts
  • Gender:Male
  • Location:Here, there and everywhere...
  • Devices:Orange San Diego, OSF

could someone who has had the osd unlocked already
please try these commands that glossywhite posted , but alternatively
try:


strings mmcblk0 | grep "used unlock code"


strings mmcblk0 | grep "your imei"

and please post the results, but obviously protect you personal details with alternative characters i.e *****

thanks

OK, I tried adb pull /dev/block/mmcblk0 ./ again but get a "is not a file or directory" message. In root browser it gives a file name of "18:00 mmcblk0" and size of 0.00B, in ES file explorer it doesn't show the "18:00" bit but still shows it as 0.00B again. I even tried copying it to the root so I could transfer via USB but it just seems to sit in a loop. Any suggestions?

Edited by BlueMoonRising, 06 April 2013 - 08:01 AM.

  • 0
Whoever exalts himself will be humbled, and whoever humbles himself will be exalted.

Matthew 23:12

#19
BlueMoonRising

BlueMoonRising

    Hardcore

  • Members
  • PipPipPipPipPipPip
  • 1,516 posts
  • Gender:Male
  • Location:Here, there and everywhere...
  • Devices:Orange San Diego, OSF

OK, I tried adb pull /dev/block/mmcblk0 ./ again but get a "is not a file or directory" message. In root browser it gives a file name of "18:00 mmcblk0" and size of 0.00B, in ES file explorer it doesn't show the "18:00" bit but still shows it as 0.00B again. I even tried copying it to the root so I could transfer via USB but it just seems to sit in a loop. Any suggestions?

Nobody?

Edit :- Never mind I just found a 1.3GB file sitting in root. Just need to find some way of reading it in Windows now.

Edited by BlueMoonRising, 08 April 2013 - 08:22 AM.

  • 0
Whoever exalts himself will be humbled, and whoever humbles himself will be exalted.

Matthew 23:12

#20
BlueMoonRising

BlueMoonRising

    Hardcore

  • Members
  • PipPipPipPipPipPip
  • 1,516 posts
  • Gender:Male
  • Location:Here, there and everywhere...
  • Devices:Orange San Diego, OSF
OK, I've got the file and now need some way of reading it to compare to Glossywhites output, is there any relatively simple way to do this on Windows? I've tried a command line tool from SysInternals called strings(surprise, surprise) which has thrown up an interesting line "SI_SIM_UNLOCK_DISABLED" although this may be in every instance.
I do have a small 60GB HD that I could clear for a Linux install but I'm trying to avoid that if possible.
Any suggestions?

  • 0
Whoever exalts himself will be humbled, and whoever humbles himself will be exalted.

Matthew 23:12




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users