ot-209 unlocked successfully with 3 combinations! - GSM-Forum

datalife2000 · 09-09-2011, 22:02

UNLOCKED WITH 3 COMBINATIONS!!!!

1. do scratch and short two wires
2. connect testmeter probe in hole and unlock
3. phone now flicks on ALCATEL screen, then do imei repair and VOILA!!!

COM2 [VCP0] selected
module v4.01
Device: Alcatel-209X
Checking data, wait...
advanced flash detection enabled
Action: rebuild security area
====> Boot ...
Press and HOLD Power button now !
19200 fixed
Connecting, wait...
Initializing [6223:8A05:8A00]...
CPU: MT6223
high speed boot On
chip: 0011:76F2:A00C
status: 01
boot packet size: 0400
Release Power button now !
Boot Done
====> Initialize ...
detecting chip #00 in region #00...
flash: 8C22F60000000D:2BEA0000000000
flash: AMD/Fujitsu std [T 0008x002000 003Fx010000] 4Mb
otp offset: 003F0000
number of flash chip/regions detected: 01/01
Initialize Done
====> Set baud ...
115200
Set baud Done
====> Initialize bootcode ...
Initialize bootcode Done
====> Check firmware integrity ...
usb bootloader detect...
..
usb bootloader detect (phase #2)...
..
usb bootloader (chip) is absent
searching rom info...
search rom info finished
rom info structure: [standard] type (05)
TCL-ID is present
rom info detection finished
TCL-ID detection...
TCL-ID detection done
rom info ver: 05
sw version: JRD23_NEP_08A_PCB01_GSM_MT6223_S00.MAUI_08A_W08_36 _SP1_V28_F1.BIN
project-id: MAUI.08A.W08.36.SP1.V28.F1, 00000000
code offset: 00000000
ffs offset/size [01]: 003A0000/00058000
TCL-ID identification
version: 76G
provider: 209X-2ERGBW1
customization: CM76CE80
customization: XM76CE80
TCL-ID identification done
rom info structure: [standard] type (05)
TCL-ID is present
ffs/eeprom address assigned: 003A0000
sec info (detailed) detection...
searching sec info#1...
search sec info#1 finished
sim-lock status: enabled
product id: JRD_COMMUNICATION_U91X_PRODUCTS
area1 is valid
area2 is valid
area3 is valid
area4 is valid
searching sec info#2...
.
search sec info#2 finished
security area (sec info, cust) calculation...
identification header detected
customization: XM76CE80
customization name adjusted
flash: 8C22F60000000D:2BEA0000000000
flash: 8C22F60000000D:2BEA0000000000
Write: security area (sec info, cust)
security area (sec info, cust) calculation done
security area (sec info, hash) calculation...
..................security area (sec info, hash) detecting size...
security area (sec info, hash) detecting parameters...
security area (sec info, hash) encoding...
done
flash: 8C22F60000000D:2BEA0000000000
flash: 8C22F60000000D:2BEA0000000000
Write: security area (sec info, hash)
security area (sec info, hash) calculation done
Check firmware integrity Done
====> Check firmware content ...
Check firmware content Done
====> Backup required data ...
original imei: FFFFFFFFFFFFFF
flash: 8C22F60000000D:2BEA0000000000
Backup required data Done
====> Patch required data ...
Patch required data Done
====> Special operation ...
Special operation Done
====> Write ...
Write Done
====> Finalization ...
ffs formatting...
flash: 8C22F60000000D:2BEA0000000000
Finalization Done
file saved: C:\Program Files\InfinityBox\MModule\backup_security\Alcatel-209X_JRD23_NEP_08A_PCB01_GSM_MT6223_S00.MAUI_08A_W 08_36_SP1_V28_F1__system_log__00000000_20110909-223324.B0X.bin
Finished, time used: 8 min 31 sec
Remove/Install battery now !

File system has been modified !
It is need to press and HOLD phone "Power" button
during long time (up to 1 min) to make phone Powered-On !

NOW PHONE FLICKS!!!
---------------------------
imei repair:

COM2 [VCP0] selected
module v4.01
Device: Alcatel-209X
Checking data, wait...
advanced flash detection enabled
Action: "repair imei"
new imei: 353667041206227
====> Boot ...
Press and HOLD Power button now !
19200 fixed
Connecting, wait...
Initializing [6223:8A05:8A00]...
CPU: MT6223
high speed boot On
chip: 0011:76F2:A00C
status: 01
boot packet size: 0400
Release Power button now !
Boot Done
====> Initialize ...
detecting chip #00 in region #00...
flash: 8C22F60000000D:2BEA0000000000
flash: AMD/Fujitsu std [T 0008x002000 003Fx010000] 4Mb
otp offset: 003F0000
number of flash chip/regions detected: 01/01
Initialize Done
====> Set baud ...
115200
Set baud Done
====> Initialize bootcode ...
Initialize bootcode Done
====> Check firmware integrity ...
usb bootloader detect...
..
usb bootloader detect (phase #2)...
..
usb bootloader (chip) is absent
searching rom info...
search rom info finished
rom info structure: [standard] type (05)
TCL-ID is present
rom info detection finished
TCL-ID detection...
TCL-ID detection done
rom info ver: 05
sw version: JRD23_NEP_08A_PCB01_GSM_MT6223_S00.MAUI_08A_W08_36 _SP1_V28_F1.BIN
project-id: MAUI.08A.W08.36.SP1.V28.F1, 00000000
code offset: 00000000
ffs offset/size [01]: 003A0000/00058000
TCL-ID identification
version: 76G
provider: 209X-2ERGBW1
customization: CM76CE80
customization: XM76CE80
TCL-ID identification done
rom info structure: [standard] type (05)
TCL-ID is present
ffs/eeprom address assigned: 003A0000
sec info (detailed) detection...
searching sec info#1...
warning: wrong cs at 0x0000AC00, retry...
read error recovered
search sec info#1 finished
sim-lock status: disabled
product id: JRD_COMMUNICATION_U91X_PRODUCTS
area1 is valid
area2 is valid
area3 is valid
area4 is valid
searching sec info#2...
.
search sec info#2 finished
Check firmware integrity Done
====> Check firmware content ...
Check firmware content Done
====> Backup required data ...
original imei: FFFFFFFFFFFFFF
flash: 8C22F60000000D:2BEA0000000000
Backup required data Done
====> Patch required data ...
.........
pass #1
firmware remap[01]: 08000000
pass #2
firmware remap[01]: 08000000
.....
Patch required data Done
====> Special operation ...
Special operation Done
====> Write ...
flash: 8C22F60000000D:2BEA0000000000
flash: 8C22F60000000D:2BEA0000000000
Write: imei
flash: 8C22F60000000D:2BEA0000000000
flash: 8C22F60000000D:2BEA0000000000
Write: imei
sec info (fast) detection...
searching sec info#1...
search sec info#1 finished
searching sec info#2...
.
search sec info#2 finished
security area (sec info, cust) calculation...
identification header detected
relocation table detected
name table[00] #7000000 detected
customization: CM76CE80
customization name adjusted
customization: CM76CE80
customization name adjusted
customization detected: CM76CE80
customization: CM76CE80
flash: 8C22F60000000D:2BEA0000000000
flash: 8C22F60000000D:2BEA0000000000
Write: security area (sec info, cust)
security area (sec info, cust) calculation done
security area (sec info, hash) calculation...
..................security area (sec info, hash) detecting size...
security area (sec info, hash) detecting parameters...
security area (sec info, hash) encoding...
done
flash: 8C22F60000000D:2BEA0000000000
flash: 8C22F60000000D:2BEA0000000000
Write: security area (sec info, hash)
security area (sec info, hash) calculation done
Write Done
====> Finalization ...
ffs formatting...
flash: 8C22F60000000D:2BEA0000000000
Finalization Done
file saved: C:\Program Files\InfinityBox\MModule\backup_security\Alcatel-209X_JRD23_NEP_08A_PCB01_GSM_MT6223_S00.MAUI_08A_W 08_36_SP1_V28_F1__system_log__00000000_20110909-224931.B0X.bin
Finished, time used: 2 min 50 sec
Remove/Install battery now !

File system has been modified !
It is need to press and HOLD phone "Power" button
during long time (up to 1 min) to make phone Powered-On !
--------------------
at 3. u might get the following... keep on trying until successful, ALSO CHECK THAT BATTERY HAS AT LEAST 2 BARS!!
COM2 [VCP0] selected
module v4.01
Device: Alcatel-209X
Checking data, wait...
advanced flash detection enabled
Action: "repair imei"
new imei: 353667041206227
====> Boot ...
Press and HOLD Power button now !
19200 fixed
Connecting, wait...
Initializing [6223:8A05:8A00]...
CPU: MT6223
high speed boot On
chip: 0011:76F2:A00C
status: 01
boot packet size: 0400
error: bootcode load error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
Release Power button now !
Boot Done
====> Initialize ...
detecting chip #00 in region #00...
error: wrong answer: 6C
error: wrong answer: E0 : wrong answer after chip id request
error: wrong answer: E0
error: wrong answer: E0 : wrong answer after chip cfi request
error: wrong answer: E0 : wrong answer after chip id request
number of flash chip/regions detected: 00/01
flash chip is unknown or damaged.

Fault reasons:
1. flash chip is damaged: replace or resolder/reball flash chip
2. hardware is damaged: check hardware, water inside etc.
3. unknown hardware: set "Advanced chip detection method" box [un-checked] and try again
4. wrong model selection, try 'NAND' selection
Initialize Fail
Finished, time used: 1 min 2 sec
Remove/Install battery now !

-------------

ENJOY AND THANKS!!!

RCB Telecom · 09-10-2011, 11:54

congrats sir nice info...........................

09-09-2011, 22:02	#1 (permalink)
datalife2000 No Life Poster Join Date: Jan 2002 Location: Africa Posts: 2,053 Member: 8843 Status: Offline Thanks Meter: 117	ot-209 unlocked successfully with 3 combinations! UNLOCKED WITH 3 COMBINATIONS!!!! 1. do scratch and short two wires 2. connect testmeter probe in hole and unlock 3. phone now flicks on ALCATEL screen, then do imei repair and VOILA!!! COM2 [VCP0] selected module v4.01 Device: Alcatel-209X Checking data, wait... advanced flash detection enabled Action: rebuild security area ====> Boot ... Press and HOLD Power button now ! 19200 fixed Connecting, wait... Initializing [6223:8A05:8A00]... CPU: MT6223 high speed boot On chip: 0011:76F2:A00C status: 01 boot packet size: 0400 Release Power button now ! Boot Done ====> Initialize ... detecting chip #00 in region #00... flash: 8C22F60000000D:2BEA0000000000 flash: AMD/Fujitsu std [T 0008x002000 003Fx010000] 4Mb otp offset: 003F0000 number of flash chip/regions detected: 01/01 Initialize Done ====> Set baud ... 115200 Set baud Done ====> Initialize bootcode ... Initialize bootcode Done ====> Check firmware integrity ... usb bootloader detect... .. usb bootloader detect (phase #2)... .. usb bootloader (chip) is absent searching rom info... search rom info finished rom info structure: [standard] type (05) TCL-ID is present rom info detection finished TCL-ID detection... TCL-ID detection done rom info ver: 05 sw version: JRD23_NEP_08A_PCB01_GSM_MT6223_S00.MAUI_08A_W08_36 _SP1_V28_F1.BIN project-id: MAUI.08A.W08.36.SP1.V28.F1, 00000000 code offset: 00000000 ffs offset/size [01]: 003A0000/00058000 TCL-ID identification version: 76G provider: 209X-2ERGBW1 customization: CM76CE80 customization: XM76CE80 TCL-ID identification done rom info structure: [standard] type (05) TCL-ID is present ffs/eeprom address assigned: 003A0000 sec info (detailed) detection... searching sec info#1... search sec info#1 finished sim-lock status: enabled product id: JRD_COMMUNICATION_U91X_PRODUCTS area1 is valid area2 is valid area3 is valid area4 is valid searching sec info#2... . search sec info#2 finished security area (sec info, cust) calculation... identification header detected customization: XM76CE80 customization name adjusted flash: 8C22F60000000D:2BEA0000000000 flash: 8C22F60000000D:2BEA0000000000 Write: security area (sec info, cust) security area (sec info, cust) calculation done security area (sec info, hash) calculation... ..................security area (sec info, hash) detecting size... security area (sec info, hash) detecting parameters... security area (sec info, hash) encoding... done flash: 8C22F60000000D:2BEA0000000000 flash: 8C22F60000000D:2BEA0000000000 Write: security area (sec info, hash) security area (sec info, hash) calculation done Check firmware integrity Done ====> Check firmware content ... Check firmware content Done ====> Backup required data ... original imei: FFFFFFFFFFFFFF flash: 8C22F60000000D:2BEA0000000000 Backup required data Done ====> Patch required data ... Patch required data Done ====> Special operation ... Special operation Done ====> Write ... Write Done ====> Finalization ... ffs formatting... flash: 8C22F60000000D:2BEA0000000000 Finalization Done file saved: C:\Program Files\InfinityBox\MModule\backup_security\Alcatel-209X_JRD23_NEP_08A_PCB01_GSM_MT6223_S00.MAUI_08A_W 08_36_SP1_V28_F1__system_log__00000000_20110909-223324.B0X.bin Finished, time used: 8 min 31 sec Remove/Install battery now ! File system has been modified ! It is need to press and HOLD phone "Power" button during long time (up to 1 min) to make phone Powered-On ! NOW PHONE FLICKS!!! --------------------------- imei repair: COM2 [VCP0] selected module v4.01 Device: Alcatel-209X Checking data, wait... advanced flash detection enabled Action: "repair imei" new imei: 353667041206227 ====> Boot ... Press and HOLD Power button now ! 19200 fixed Connecting, wait... Initializing [6223:8A05:8A00]... CPU: MT6223 high speed boot On chip: 0011:76F2:A00C status: 01 boot packet size: 0400 Release Power button now ! Boot Done ====> Initialize ... detecting chip #00 in region #00... flash: 8C22F60000000D:2BEA0000000000 flash: AMD/Fujitsu std [T 0008x002000 003Fx010000] 4Mb otp offset: 003F0000 number of flash chip/regions detected: 01/01 Initialize Done ====> Set baud ... 115200 Set baud Done ====> Initialize bootcode ... Initialize bootcode Done ====> Check firmware integrity ... usb bootloader detect... .. usb bootloader detect (phase #2)... .. usb bootloader (chip) is absent searching rom info... search rom info finished rom info structure: [standard] type (05) TCL-ID is present rom info detection finished TCL-ID detection... TCL-ID detection done rom info ver: 05 sw version: JRD23_NEP_08A_PCB01_GSM_MT6223_S00.MAUI_08A_W08_36 _SP1_V28_F1.BIN project-id: MAUI.08A.W08.36.SP1.V28.F1, 00000000 code offset: 00000000 ffs offset/size [01]: 003A0000/00058000 TCL-ID identification version: 76G provider: 209X-2ERGBW1 customization: CM76CE80 customization: XM76CE80 TCL-ID identification done rom info structure: [standard] type (05) TCL-ID is present ffs/eeprom address assigned: 003A0000 sec info (detailed) detection... searching sec info#1... warning: wrong cs at 0x0000AC00, retry... read error recovered search sec info#1 finished sim-lock status: disabled product id: JRD_COMMUNICATION_U91X_PRODUCTS area1 is valid area2 is valid area3 is valid area4 is valid searching sec info#2... . search sec info#2 finished Check firmware integrity Done ====> Check firmware content ... Check firmware content Done ====> Backup required data ... original imei: FFFFFFFFFFFFFF flash: 8C22F60000000D:2BEA0000000000 Backup required data Done ====> Patch required data ... ......... pass #1 firmware remap[01]: 08000000 pass #2 firmware remap[01]: 08000000 ..... Patch required data Done ====> Special operation ... Special operation Done ====> Write ... flash: 8C22F60000000D:2BEA0000000000 flash: 8C22F60000000D:2BEA0000000000 Write: imei flash: 8C22F60000000D:2BEA0000000000 flash: 8C22F60000000D:2BEA0000000000 Write: imei sec info (fast) detection... searching sec info#1... search sec info#1 finished searching sec info#2... . search sec info#2 finished security area (sec info, cust) calculation... identification header detected relocation table detected name table[00] #7000000 detected customization: CM76CE80 customization name adjusted customization: CM76CE80 customization name adjusted customization detected: CM76CE80 customization: CM76CE80 flash: 8C22F60000000D:2BEA0000000000 flash: 8C22F60000000D:2BEA0000000000 Write: security area (sec info, cust) security area (sec info, cust) calculation done security area (sec info, hash) calculation... ..................security area (sec info, hash) detecting size... security area (sec info, hash) detecting parameters... security area (sec info, hash) encoding... done flash: 8C22F60000000D:2BEA0000000000 flash: 8C22F60000000D:2BEA0000000000 Write: security area (sec info, hash) security area (sec info, hash) calculation done Write Done ====> Finalization ... ffs formatting... flash: 8C22F60000000D:2BEA0000000000 Finalization Done file saved: C:\Program Files\InfinityBox\MModule\backup_security\Alcatel-209X_JRD23_NEP_08A_PCB01_GSM_MT6223_S00.MAUI_08A_W 08_36_SP1_V28_F1__system_log__00000000_20110909-224931.B0X.bin Finished, time used: 2 min 50 sec Remove/Install battery now ! File system has been modified ! It is need to press and HOLD phone "Power" button during long time (up to 1 min) to make phone Powered-On ! -------------------- at 3. u might get the following... keep on trying until successful, ALSO CHECK THAT BATTERY HAS AT LEAST 2 BARS!! COM2 [VCP0] selected module v4.01 Device: Alcatel-209X Checking data, wait... advanced flash detection enabled Action: "repair imei" new imei: 353667041206227 ====> Boot ... Press and HOLD Power button now ! 19200 fixed Connecting, wait... Initializing [6223:8A05:8A00]... CPU: MT6223 high speed boot On chip: 0011:76F2:A00C status: 01 boot packet size: 0400 error: bootcode load error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elease Power button now ! Boot Done ====> Initialize ... detecting chip #00 in region #00... error: wrong answer: 6C error: wrong answer: E0 : wrong answer after chip id request error: wrong answer: E0 error: wrong answer: E0 : wrong answer after chip cfi request error: wrong answer: E0 : wrong answer after chip id request number of flash chip/regions detected: 00/01 flash chip is unknown or damaged. Fault reasons: 1. flash chip is damaged: replace or resolder/reball flash chip 2. hardware is damaged: check hardware, water inside etc. 3. unknown hardware: set "Advanced chip detection method" box [un-checked] and try again 4. wrong model selection, try 'NAND' selection Initialize Fail Finished, time used: 1 min 2 sec Remove/Install battery now ! ------------- ENJOY AND THANKS!!!

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Unlocking 5190	Ryu	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	23	01-07-2018 17:14
Help with 6110	paulomt1	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	2	05-25-2009 16:29
Netmonitor with FBus????	ratzfatz	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	4	06-09-1999 17:04

09-10-2011, 11:54	#2 (permalink)
RCB Telecom Registered User Join Date: Feb 2009 Location: Craiova(Romania) Age: 18 Posts: 597 Member: 972420 Status: Offline Sonork: manole Thanks Meter: 134	congrats sir nice info...........................