New Version 9.2.17 C139 Trafone Firmware Dump!!! UNLOCKED!

[IvyLou2006]

Originally Posted by dump101

Here is the FULL Memory DUMP of the Firmware;

BOOT.90.04

Lets get together and figure this out..

Or Contact that LAWYER GUY.. From Last Software he published..

Here is some code I found in file..

#02#
*#06#
**16379#
*#15284#
#09#
*#23220#
*#23221#
*#23222#
*#2317#
*#23100#
*#23101#
*#23102#
**0102#
#090#
#08#
#88#
#00000#
#00#
**0101#
#78#
#03#
#04#
**0108#
**0105#
**0109#
**16378#
*#33248#
#55#
#11#
#22884646#
#22#
#10#
*#2061#
*#2062#


*31#
#31#
*333? ÀF#333? ÀF*#333? À*332? ÀF#332? ÀF*#332? À*#331? À*331? ÀF#331? ÀF*#330? À*330? ÀF#330? ÀF*33? ÀFÀ#33? ÀFÀ*#33? ÀF*353? ÀF#353? ÀF*#353? À*351? ÀF#351? ÀF*#351? À*35? ÀFÀ#35? ÀFÀ*#35? ÀF*03*333? ÀFÀ*03*332? ÀFÀ*03*331? ÀFÀ*03*330? ÀFÀ*03*33? *03*353? ÀFÀ*03*351? ÀFÀ*03*35? *03*? ÀF**03*333? ÀF**03*332? ÀF**03*331? ÀF**03*330? ÀF**03*33? ÀFÀ**03*353? ÀF**03*351? ÀF**03*35? ÀFÀ**03*? À**042? À**04? ÀF**052? À**05? ÀF*77742? #77742? *#06# ÀF*002? ÀF#002? ÀF**002? À##002? À*#002? À*004? ÀF#004? ÀF**004? À##004? À*#004? À*21? ÀFÀ#21? ÀFÀ**21? ÀF##21? ÀF*#21? ÀF*67? ÀFÀ#67? ÀFÀ**67? ÀF##67? ÀF*#67? ÀF*61? ÀFÀ#61? ÀFÀ**61? ÀF##61? ÀF*#61? ÀF*62? ÀFÀ#62? ÀFÀ**62? ÀF##62? ÀF*#62? ÀF*#31# ÀF*#30# ÀF*30# ÀFÀ#30# ÀFÀ*#77# ÀF*77# ÀFÀ#77# ÀFÀ*#76# ÀF*76# ÀFÀ#76# ÀFÀ*43? ÀFÀ#43? ÀFÀ*#43? ÀF*55# ÀFÀ#55# ÀFÀ#*91*0# #*91*1# #*43*0# #*43*1# #*88* ÀF*1# *1*0# ÀF*1*1# ÀF*1*4# ÀFMANUAL ÀAUTO ÀFÀSPLMN ÀF*#77742#


#02#
#06#
**16379#
*#15284#
#09#
*#23220#
*#23221#
*#23222#
*#2317#
*#23100#
*#23101#
*#23102#
**0102#
#090#
#08#
#88#
#00000# #00#
**0101# #78#
#03#
#04#
**0108#
**0105#
**0109#
**16378#
*#33248#
#55#
#11#
#22884646#
#22#
#10#
*#2061# *#2062#

Old SW to unlock
http://rapidshare.com/files/127072426/mot931c.rar.html

U MUST USE THE USB T191 CABLE!!! NOT SERIAL..

Here is the Memory Dump for the New UART Locked phone..
http://rapidshare.com/files/12707067..._C139.rar.html

Including the BOOT OF THE NEW C139 is in the file..
AND EVERYTHING ELSE!!

HAPPY PATCHING!!!

How are we going to use this files that you give? Are we going to write it or flash it on the phone??????


TIA

[el_venga]

c139 cingular 1.9.24 can be done easilly with acer tool or compal tool. no need to dump it, i think.

[mrfixit]

we talking about 9.2.17 not 1.9.24

[myh]

thaaaaaaaaaaaaaaaaaaaaaaaaanx ..............

[el_venga]

Originally Posted by mrfixit

we talking about 9.2.17 not 1.9.24

i meant that for dump101 cause he is gonna dump the cingular firmware. i think is not necesary cause it can be unlocked for free using compal or acer tool. sorry for the mistake.

[Orange_Dominica]

Steps........

Divide the above .bin full dump, into the appropriate 3 files..... MAIN, FLEX , LP

Now..we must convert our 3 new .bins into SREC_( Do the BIN2MOT or you can do the BIN2SREC)

Flash the 3 newly created MAIN FLEX LP into a C139 that you would like to sacrifice.

Test your phone after flash, and VERIFY that the dump above is really version 9.2.17... and not just an (edited) older version.

If our dump is the real deal 9.2.17, disassemble the above .bin using IDA ,set with the TI ARM settings.

Quick Tests After Flashing

Try and communicate with you newly flashed 9.2.17.

If we have no COMMS, then this means that the Software is inhibiting the COMM and NOT the Hardware...(proceed with IDA)

If we can establish good COMM, then we have a mainboard hardware change prohibiting COMM...(could be a new Processor or Mainboard mod ) involving
C139 9.2.17 versions.


;smokin

[dump101]

http://rapidshare.com/files/12994631...cfone.rar.html

Here ya go dogs... Have fun Dissembling it..


This is the FULL Memory dump for this phone...

удача

[dump101]

YES IT'S THE REAL DEAL!

I don't post cr@p...

I am just trying to help....

удача

[dump101]

......mega*****upload.com/?d=FVNOFA4A
......turbo*****upload.com/download/gqNHqhOyLky9/C170_Full_DUMP_Tracfone.rar

remove *****


Check the board If any modifications have been made... grounded or removed tx rx chip..

ÀF*333? ÀF#333? ÀF*#333? À*332? ÀF#332? ÀF*#332? À*#331? À*331? ÀF#331? ÀF*#330? À*330? ÀF#330? ÀF*33? ÀFÀ#33? ÀFÀ*#33? ÀF*353? ÀF#353? ÀF*#353? À*351? ÀF#351? ÀF*#351? À*35? ÀFÀ#35? ÀFÀ*#35? ÀF*03*333? ÀFÀ*03*332? ÀFÀ*03*331? ÀFÀ*03*330? ÀFÀ*03*33? *03*353? ÀFÀ*03*351? ÀFÀ*03*35? *03*? ÀF**03*333? ÀF**03*332? ÀF**03*331? ÀF**03*330? ÀF**03*33? ÀFÀ**03*353? ÀF**03*351? ÀF**03*35? ÀFÀ**03*? À**042? À**04? ÀF**052? À**05? ÀF*77742? #77742? *#06# ÀF*002? ÀF#002? ÀF**002? À##002? À*#002? À*004? ÀF#004? ÀF**004? À##004? À*#004? À*21? ÀFÀ#21? ÀFÀ**21? ÀF##21? ÀF*#21? ÀF*67? ÀFÀ#67? ÀFÀ**67? ÀF##67? ÀF*#67? ÀF*61? ÀFÀ#61? ÀFÀ**61? ÀF##61? ÀF*#61? ÀF*62? ÀFÀ#62? ÀFÀ**62? ÀF##62? ÀF*#62? ÀF*#31# ÀF*#30# ÀF*30# ÀFÀ#30# ÀFÀ*#77# ÀF*77# ÀFÀ#77# ÀFÀ*#76# ÀF*76# ÀFÀ#76# ÀFÀ*43? ÀFÀ#43? ÀFÀ*#43? ÀF##37? ÀF*#37? ÀF*55# ÀFÀ#55# ÀFÀ#*91*0# #*91*1# #*43*0# #*43*1# #*88* ÀF*1# *1*0# ÀF*1*1# ÀF*1*4# ÀFMANUAL ÀAUTO ÀFÀSPLMN ÀF*#77742#

[dump101]

ÀFUART Disable!! ÀTracfoneTK Reset:
Production Mode! ÀFÀTracfoneTK Reset:
Testing Mode! ÀFTracfoneTK Reset:
Toolkit Init!

ÀFBI:%u
W_Dog:OFF
ÀW_Dog:nexist,ON
ÀFÀW_Dog:flexNL ON
ÀFÀW_Dog:ON
ÀDSC:flex OFF
ÀFDSC:flex ON
ÀFÀ%s
UART Disable ÀFÀUART Enable #2747#* *073887* ÀFÀ*#33248#

FA_ENG_MODE_OPTION À**0106#

[Orange_Dominica]

Quote: Check the board If any modifications have been made... grounded or removed tx rx chip..
You can remove flash chip, connect to programmer and dump , but you know nothing about the hardware...(TX RX Chip)

http://i304.photobucket.com/albums/n...st/C139MCU.jpg

[shakeelajmal]

we don't understand what you are talking about ..

[nicacel]

@dump101


UART Disable ÀFÀUART Enable #2747#* *073887* ÀFÀ*#33248#

U mean we can enable UART just pressing #2747#* *073887* *#33248#

[dump101]

Quote: Check the board If any modifications have been made... grounded or removed tx rx chip..
You can remove flash chip, connect to programmer and dump , but you know nothing about the hardware...(TX RX Chip)
NLASB3157DFT2 U11, U12 Microchip

O I am sorry dude...

I ment the two Micro switches that control the TX RX... Check to see if they are cut or modified...

PS I do also have the Intel Jtag for this phone.. JTAGs are not locked out. From all the bull$hit everyone is made to believe..
With proper modifications, DMTool has the ability to jtag.
Some DLL file are required..

http://rapidshare.com/files/13015395...WITCH.jpg.html

http://rapidshare.com/files/13015438...matic.rar.html

[dump101]

ROM:0028B45B aRepeatNewPin2 DCB "+Repeat New PIN2",0
ROM:0028B46C aReEnterNewCode DCB "Re-enter New Code",0
ROM:0028B47E aFenterSimPin DCB "+FEnter SIM PIN",0
ROM:0028B48E aFenterSimPin2 DCB "+FEnter SIM PIN2",0
ROM:0028B49F aSimPuk1 DCB "+SIM PUK1",0
ROM:0028B4A9 aFSimPuk2 DCB "+F+SIM PUK2",0
ROM:0028B4B5 aFSimCardInvali DCB "+F+Sim Card Invalid !",0
ROM:0028B4CB aPressMenuThenT DCB "+Press Menu then * to unlock keypad",0
ROM:0028B4EF aPressMenuThe_0 DCB "+Press Menu then * to lock or unlock keypad",0
ROM:0028B51B aNewPassword DCB "+New Password",0
ROM:0028B529 aFEnterNewPin DCB "+F+Enter New PIN",0
ROM:0028B53A aFenterNewPin2 DCB "+FEnter New PIN2",0
ROM:0028B54B aNewSecurityCod DCB "+New Security Code",0
ROM:0028B55E aFnewUnlockCode DCB "+FNew Unlock Code",0
ROM:0028B570 aEnterPassword DCB "Enter Password",0
ROM:0028B57F aEnterOldPin DCB "+Enter Old PIN",0
ROM:0028B58E aFenterOldPin2 DCB "+FEnter Old PIN2",0
ROM:0028B59F aOldSecurityCod DCB "+Old Security Code",0
ROM:0028B5B2 aFoldUnlockCode DCB "+FOld Unlock Code",0
ROM:0028B5C4 aSimUnlocked DCB "SIM Unlocked",0
ROM:0028B5D1 aFPin2Unblocked DCB "+F+Pin2 Unblocked",0
ROM:0028B5E3 aPuk1Error_TryA DCB "+PUK1 error. Try again!",0
ROM:0028B5FB aPuk2Error_TryA DCB "+PUK2 error. Try again!",0
ROM:0028B613 aSimOperationFa DCB "+SIM operation fail!",0
ROM:0028B628 aSimLockedAskFo DCB "Sim Locked!",0xD,0xA
ROM:0028B628 DCB "Ask for Service",0xD,0xA
ROM:0028B628 DCB "Provider!",0
ROM:0028B650 DCB 0x53 ; S
ROM:0028B651 aImOperationOk DCB "IM operation ok!",0
ROM:0028B662 aFsimPinIncorre DCB "+FSIM PIN Incorrect. Try Again.",0
ROM:0028B682 aFpasswordIncor DCB "+FPassword incorrect. Try Again!",0
ROM:0028B6A3 aSubsidyPasswor DCB "+Subsidy Password:",0
ROM:0028B6B6 aFchanged DCB "+FChanged",0
ROM:0028B6C0 aAdd DCB "ADD",0
ROM:0028B6C4 aAnswer DCB "ANSWER",0
ROM:0028B6CB aBack DCB "+BACK",0
ROM:0028B6D1 aFBrowse DCB "+F+BROWSE",0
ROM:0028B6DB aCall DCB "+CALL",0
ROM:0028B6E1 aFCancel DCB "+F+CANCEL",0
ROM:0028B6EB aChange DCB "+CHANGE",0
ROM:0028B6F3 aClear DCB "+CLEAR",0
ROM:0028B6FA aFdelete DCB "+FDELETE",0
ROM:0028B703 aDetails DCB "+DETAILS",0
ROM:0028B70C aDisable DCB "DISABLE",0
ROM:0028B714 aDone DCB "DONE",0
ROM:0028B719 aFEdit DCB "+F+EDIT",0
ROM:0028B721 aFEnable DCB "+F+ENABLE",0
ROM:0028B72B aEnd DCB "+End",0
ROM:0028B730 aExit DCB "EXIT",0
ROM:0028B735 DCB 0xC0 ; +
ROM:0028B736 aFGoto DCB "F+GOTO",0