AL21 DEAD After unlock

  • Thread starter Thread starter dog_****
  • Start date Start date
D

dog_****

Guest
i have AL21 Phonecode Blocked
here the Log unlock with model AL21 in Joker :
Start...
Loading BootsModel(AL21)...
Sending StartBoot Ok.
Sending MainBoot Ok.
SIEMENS AL21 lg1 Sw11
Soft FlashID: 0001/2221
FlashID: 0001/227E-2221-2201
Flash Size: 16Mb, WriteBuffer: 32 bytes
Region(1): Blocks 128, Size 128Kb
Start EEPROM segments at addres 0x7A0000
Warning: Not valid addres Start EEPROM in set phone model!
FSN: 01506A9B -> PhoneID: 9B6A5001
OTP IMEI: 004400016870949
HASH: 51546CB83519F58714721F3FDF008FF8
Use OTP IMEI: 004400016870949
Error: Not valid addres EELITE in set phone model!

try unlock with C110 :

Start...
Loading BootsModel(C110)...
Sending StartBoot Ok.
Sending MainBoot Ok.
SIEMENS AL21 lg1 Sw11
Soft FlashID: 0001/2221
FlashID: 0001/227E-2221-2201
Flash Size: 16Mb, WriteBuffer: 32 bytes
Region(1): Blocks 128, Size 128Kb
Start EEPROM segments at addres 0x7A0000
FSN: 01506A9B -> PhoneID: 9B6A5001
OTP IMEI: 004400016870949
HASH: 51546CB83519F58714721F3FDF008FF8
Use EXT IMEI: 123456789012347
USE SKEY: 12345678
*#0000*12345678# - Network Lock
*#0001*12345678# - Service Provider Lock
*#0002*12345678# - Corporate Code
*#0003*12345678# - Phone Code
*#0004*12345678# - Network Subset Lock
*#0005*12345678# - Only Sim
Read BCORE addr: 0x800000 size: 0x020000...
BCORE backup in ".\Backup\AL21lg1Sw11_BCORE_080524165502.bin" file.
Write BCORE at addr: 0x800000...
Change BCORE HASH - Ok.
Read EEPROM addr: 0x7A0000 size: 0x060000...
EEPROM backup in ".\Backup\AL21lg1Sw11_EEPROM_080524165634.bin" file.
Write EEPROM addr: 0x7A0000 size: 0x060000...
Change BOOTKEY - Ok.
Change EEP0076 - Ok.
Change EEP5009 - Ok.
Change EEP5077 - Ok.
Change EEP5121 - Ok.
Change EEP5122 - Ok.
Change EEP5123 - Ok.
But after that phone is DEAD
pls help
Thanks.
 
Hi,

Answer for your question in Yellow BOLD lines!

OTP IMEI: 004400016870949
Use EXT IMEI: 123456789012347

Use ORIGINAL IMEI (OTP IMEI) and your phone alive again!

Or, patch firmware to change IMEI.

BR.
 
thank for fast reply
i will try use OTP IMEI to unlock but can you help me for " Patch FW to change IMEI " ?
and how to Patch OTP IMEI? (OTP IMEI: 004400016870949)
Thank again!
 
...this operation is dangerous (use patch IMEI), if you don't know how to make it!
My sugestion is to unlock with Joker, ckeck in "Sky" menu "Use OTP IMEI" and click to "ReCalc All Keys". Of course, you need to push shortly Power On button after world "Start" appair in the Joker window...
dagos
 
Mr Dagos
thank for " Sugestion " but i take phone from china. i can read, write, unlock phone without testpoint(and without cut track) with normal mode of Joker(After full flash with another flash file phone need TP for unlock or flash)
pls tell me why?(if you need i will post log)
Thank Advance!
 
Guy,

Please, more attention!

Your phone is damaged, because you simply marked option Use EXT IMEI (SEE YOU SECOND LOG). Is enough to mark USE OTP IMEI in Joker and to again make the UNLOCK in your phone, and the same it will come back to function!

See the picture!

Goodbye.
 
...it is true, JoAoOpAuLo!
@ dog_****: make only presented three steps and your phone is working again. If you write fullflash from the other phone, this have "inside" in the fields, other IMEI,HASH, SKEY...In this case you neded to unlock using testpoint or SKEY calculation. If you write bootcore (without checked bootcore protection) you need to make the other suplimentary steps to unlock your phone.
That is,
dagos
 
Thanks Mr JoAoOpAuLo and Dagos!
phone live again but my question is : i can play phone(Read, write full flash,unlock...) with joker without TP and Cut Track with Normal mode
Why?
 
@ dog_****

Your phone in Factory Mode, no need TP for "play".

Normal BOOT is "normal" in your case.

BR.
 
Sir, phone not in Factory Mode
Log here :
****** Joker Siemens EGOLD Phone Version 0.3.5.6 Inofficial opened. ******
****** Tuesday, May 27, 2008, at 15:10:17 ******
Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.
HWID: 250 (AL21)
AL21 lg7 Sw11 10.07.06 13:36:16
IMEI: 359165001754231
DisplayID: 62, Sharp Nec PD161700
Code(05): OTP closed
Code(09): BootKEY is written in EEPROM
Code(0D): Keys are registered in BCORE
Code(10): Minimal access to BFB
Code(15): Complete condition
Code(19): Monitoring is switched on
Code(1D): Blocks 5121,5122,5123 are present
Battery Voltage 3930 mV.
SecurityMode: Customer
Start...
Loading BootsModel(C110)...
Sending StartBoot Ok.
Sending MainBoot Ok.
SIEMENS AL21 lg7 Sw11
Soft FlashID: 0001/2221
FlashID: 0001/227E-2221-2201
Flash Size: 16Mb, WriteBuffer: 32 bytes
Region(1): Blocks 128, Size 128Kb
Start EEPROM segments at addres 0x7A0000
FSN: 82194B71 -> PhoneID: 714B1982
OTP IMEI: 359165001754231
HASH: 51546CB83519F58714721F3FDF008FF8
Read Flash addr: 0x800000 size: 0x020000 - Ok.
Data is written in "E:\Siemens\Joker_356\AL21lg7Sw11_80-02_BC.bin" file.
Start...
Loading BootsModel(C110)...
Sending StartBoot Ok.
Sending MainBoot Ok.
SIEMENS AL21 lg7 Sw11
Soft FlashID: 0001/2221
FlashID: 0001/227E-2221-2201
Flash Size: 16Mb, WriteBuffer: 32 bytes
Region(1): Blocks 128, Size 128Kb
Start EEPROM segments at addres 0x7A0000
FSN: 82194B71 -> PhoneID: 714B1982
OTP IMEI: 359165001754231
HASH: 51546CB83519F58714721F3FDF008FF8
Read Flash addr: 0x7A0000 size: 0x060000 - Ok.
Data is written in "E:\Siemens\Joker_356\AL21lg7Sw11_7A-06_EE.bin" file.
Start...
Loading BootsModel(C110)...
Sending StartBoot Ok.
Sending MainBoot Ok.
SIEMENS AL21 lg7 Sw11
Soft FlashID: 0001/2221
FlashID: 0001/227E-2221-2201
Flash Size: 16Mb, WriteBuffer: 32 bytes
Region(1): Blocks 128, Size 128Kb
Start EEPROM segments at addres 0x7A0000
FSN: 82194B71 -> PhoneID: 714B1982
OTP IMEI: 359165001754231
HASH: 51546CB83519F58714721F3FDF008FF8
Boot terminated.
Test and Calc Skey...
Skey not found! BCORE HASH incorrect for this phone FSN!
Use ReCalc Keys in BCORE!
Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.
HWID: 250 (AL21)
AL21 lg7 Sw11 10.07.06 13:36:16
IMEI: 359165001754231
DisplayID: 62, Sharp Nec PD161700
Code(05): OTP closed
Code(09): BootKEY is written in EEPROM
Code(0D): Keys are registered in BCORE
Code(10): Minimal access to BFB
Code(15): Complete condition
Code(19): Monitoring is switched on
Code(1D): Blocks 5121,5122,5123 are present
Battery Voltage 3926 mV.
SecurityMode: Customer
 
...don't try to calculate SKEY, just click on ReCalc Keys. Post log after this operation.
BTW: if use Joker version 0.3.5.6.c you have settings for AL21 phone.
dagos
 
...before post, search first, bro!
http://forum.gsmhosting.com/vbb/showthread.php?t=347071

dagos
 
Mr Dagos
log unlock phone already in my first post
all phones come me from china
some phone full working with joker without Cut track and testpoint some phone not work
log again :
****** Joker Siemens EGOLD Phone Version 0.3.5.6 Inofficial opened. ******
****** ذائعثؤ, خهشآ 29, 2008, at 18:30:19 ******
Start...
Loading BootsModel(C110)...
StartBoot does not answer!
Start...
Loading BootsModel(C110)...
StartBoot does not answer!
Start...
Loading BootsModel(C110)...
StartBoot does not answer!
Start...
Loading BootsModel(C110)...
StartBoot does not answer!
Start...
Loading BootsModel(C110)...
StartBoot does not answer!
Start...
Loading BootsModel(C110)...
StartBoot does not answer!
Start...
Loading BootsModel(C110)...
StartBoot does not answer!
Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.
HWID: 250 (AL21)
AL21 lg7 Sw11 10.07.06 13:36:16
IMEI: 359165000453306
DisplayID: 62, Sharp Nec PD161700
Code(05): OTP closed
Code(08): BootKEY is unknown
Code(0D): Keys are registered in BCORE
Code(10): Minimal access to BFB
Code(15): Complete condition
Code(19): Monitoring is switched on
Code(1D): Blocks 5121,5122,5123 are present
Incorrect Battery Voltage! 4579 mV!
SecurityMode: Customer
Phone off...
Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.
HWID: 250 (AL21)
AL21 lg7 Sw11 10.07.06 13:36:16
IMEI: 359165000453306
DisplayID: 62, Sharp Nec PD161700
Code(05): OTP closed
Code(08): BootKEY is unknown
Code(0D): Keys are registered in BCORE
Code(10): Minimal access to BFB
Code(15): Complete condition
Code(19): Monitoring is switched on
Code(1D): Blocks 5121,5122,5123 are present
Incorrect Battery Voltage! 4575 mV!
SecurityMode: Customer
Start...
Loading BootsModel(AL21)...
StartBoot does not answer!
Start...
Loading BootsModel(AL21)...
StartBoot does not answer!
Start...
Loading BootsModel(AL21)...
StartBoot does not answer!
****** Joker Siemens EGOLD Phone Version 0.3.5.6 Inofficial closed. ******
****** ذائعثؤ, خهشآ 29, 2008, at 18:44:44 ******
Mr Dagos, thank for your help
 
Back
Top