Alcatel OT-208p

[fernandesx]

Hi,

I´m trying read akey and after repair ESN in Alcatel 208p, but not work.
I tried all methods but no work.
How you can see in the picture, scan RAM stop in adress 0080:0000.
Anybody can help me?

[fernandesx]

Print screen of the chipset of my cell phone.

[fernandesx]

Hi. I am trying discover the akey and SSD (A and B) in this phone model.
First I did a dump of the RAM (0000:0000 - 0080:0000).
After I loaded the file and searched by keyboard codes searched. I saw the results below:

ESN (pESN):
- 0x3EB2B8C1 - location: 0x0060B13C

MEID:
- nothing found.

IMEI:
- nothing found.

Bluetooth:
- nothing found.

WiFi MAC:
- nothing found.

******

User lock:
- 0000 - location: 0x00617504

SPC:
- 737738 - location: 0x0060A81E
- 000000 - location: 0x0074F3F1

FSC:
- nothing found.

OTKSL:
- nothing found.

******

CAVE keys for NAM1:
- found probable A-key: 0DE61DE605B7A80E - location: 0x0061513F
- SSD_A: nothing found.
- SSD_B: nothing found.

CAVE keys for NAM2:
- nothing found.

******

PAP User:
- nothing found.

PAP Pass:
- nothing found.

PPP User:
- nothing found.

PPP Pass:
- nothing found.

HDR NAI short:
- nothing found.

HDR Pass short:
- nothing found.

HDR User long:
- nothing found.

HDR Pass long:
- nothing found.

HDR PPP User obsolete:
- nothing found.

HDR PPP Pass obsolete:
- nothing found.

Tethered NAI simple IP:
- nothing found.

******

Mobile IP profiles:

Profiles:
- nothing found.

After this I sent the SPC and wrote akey=11111...., SSDA=2222222..... and SSDB=333333...., and I saw the results below:

ESN (pESN):
- 0x3EB2B8C1 - location: 0x00640C56

MEID:
- nothing found.

IMEI:
- nothing found.

Bluetooth:
- nothing found.

WiFi MAC:
- nothing found.

******

User lock:
- 0000 - location: 0x0063F304

SPC:
- 737738 - location: 0x00632E1E
- 000000 - location: 0x0074F3F1

FSC:
- nothing found.

OTKSL:
- nothing found.

******

CAVE keys for NAM1:
- found probable A-key: 0DE61DE605B7A80E - location: 0x0063CF3F
- found probable A-key: 1111111111111111 - location: 0x007BD13F
- found probable SSD_A: 2222222222222222 - location: 0x007C02E8
- found probable SSD_B: 3333333333333333 - location: 0x007C3DB8

CAVE keys for NAM2:
- nothing found.

******

PAP User:
- nothing found.

PAP Pass:
- nothing found.

PPP User:
- nothing found.

PPP Pass:
- nothing found.

HDR NAI short:
- nothing found.

HDR Pass short:
- nothing found.

HDR User long:
- nothing found.

HDR Pass long:
- nothing found.

HDR PPP User obsolete:
- nothing found.

HDR PPP Pass obsolete:
- nothing found.

Tethered NAI simple IP:
- nothing found.

******

Mobile IP profiles:

Profiles:
- nothing found.




So, what the corret address to akey, SSDA and SSDB?

Thanks

[Pluton]

fernandesx

If you want to find addre_sses in RAM for SSD key, then write unique vaules of SSD keys (not 1111... 2222... etc).

After that you will be able to find these keys (and as a result addre_sses in RAM) by using "Universal RAM" method in "CAVE" section under "CAVE" tab in CDMA Workshop.

Find more details about this method in Help file.

[fernandesx]

Ok, thank you.

Do you know what method for change ESN work to this model?

I tried all in CDMA workshop but not worked.

[joficha]

alguem tem solucao para alcatel 208p