I have built one max232 interface to unlocked my T43 but i'm very noob in DOS.
Can someone explain me exactly what i must typing when the DOS window apppear?
i understand vaguely that the program (rpc8394.exe) need some instructions to work properly but i clearly don't know how to manage that.
Dear my friend!
I speak little English but I will try to explain to you.
First run cmd: 1. Step START. Step 2 RUN. a window appears and enter the path to the rpc8394.exe file, but you have to type the name of the new .bin file
example:
C: \ PC8394 \ rpc8394 / ibmt60.bin
Press OK
After you go to that path on the HDD and find the new ibmt60 file and find the BIOS cipher in IBMpas.exe
example:
step 1.
Start IBMpas.exe
step 2
File - Open - ibmt60.bin
step 3
Press the "AA Off"
Look in line 0x330 and 0x340. and read Code
good!
@throwaway111
I have checked your save.zip files inside and none of them is correct.
Are you connecting the interface to the points indicated in picture included in PDF file (under bottom RAM slot)? Long time ago had unlocked this same ThinkPad R52 model, I remember that I had to scratch a little those TPM1 and TPM2 contacts.
At what addresses in ibmpass to look for a password?
From the RPC8394T/WPC8394T interface manual:
Open the dump file you've created before in IBMpass, activate the A-A button and search for 0x330, 0x340 lines. The password is located on 0x338 and 0x340 in scan code.
When the pass phrase is activated, the password is encrypted using TCPA RSA-SHA1 algorithm. In this case the dump must be modified and the TPM chip reprogrammed.
I'm about to try my luck with a Thinkpad T40, but there's something that bugs me.
If you read the diagram, the top schematic caps C4 and C5, are somehow inverted as how the manufacturer schematic connects them at the bottom. I'm no longer sure what the orientation of the Caps are.
C5 should be neg. connected to the chip pin 6 on the bottom schema, but in the top diagram is clearly C5 pos. connected to pin 6.
C1 and C2 and C3 (C5 at bottom) are wired the same in both schemas. Since bottom looks official, now I'm unsure. I've followed the top schematic until completion, but it is right?
Comment