Как разблокировать Oyster T72 3G от МТС

[renat_d]

Планшет Oysters T72 3G залоченный под МТС.

Перепробовал разные варианты, в том числе пробовал и CM2

Operation : SP Unlock [ v1.37 ]
Mode : Direct Unlock

1. Power Off Phone , Remove battery , Insert back
2. Insert USB cable. In some cases require hold BootKey

Wait for phone...
Phone found! [ 75 ]
Sync...
Inital regs read done
Boot Info : 
BB_CPU_ID : 6582
BB_CPU_HW : CA01
BB_CPU_SW : 8A00
BB_CPU_SB : 0001
BB_CPU_NM : [MediaTek] MT6582_S00
Processing BROM stage
SecCfgVal : 0x00000000
BromVersion : 0xFF
BLVersion : 0x01
Preloader Status : Alive
Processing DA stage
DA Select done , sending 
DA Ver : MTK_AllInOne_DA_v7.1533.03
NAND_ID : 00000000000000000000000000000000
eMMC_ID : 8801034E436172642032D20327626173
DA Stat : v4.2 on BBID : 0x87
DA Sent. Configure setting now ... 
DA started successuflly
eMMC FlashIC initialized
[eMMC] : FLASH_VEN : 0088 , OEM : 0103
[eMMC] : FLASH_INF : [NOT_IN_BASE] , draC
[eMMC] : FLASH_CID : 8801034E436172642032D20327626173
[eMMC] : FLASH_EXT : 0x00200000 , 0x00200000 , 0x00000000
[eMMC] : FLASH_LEN : 0x00000000E7400000
[eMMC] : FLASH_UCP : 3700 MiB
INT RAM    : 0x00020000
EXT RAM    : 0x20000000
BOOT TYPE  : EMMC_FLASH_BOOT
SOC VERIFY : C1
Boot Ok!

Lock Status : Locked!
Unlocking ... 
Unlock done!

Done!
Elapsed: 00:00:54
Reconnect Power/Cable!

SP код не снялся , при считывании SP_Code_reader пишет следущее:

Operation : SP Unlock [ v1.37 ]
Mode : Read Codes

1. Power Off Phone , Remove battery , Insert back
2. Insert USB cable. In some cases require hold BootKey

Wait for phone...
Phone found! [ 75 ]
Sync...
Inital regs read done
Boot Info : 
BB_CPU_ID : 6582
BB_CPU_HW : CA01
BB_CPU_SW : 8A00
BB_CPU_SB : 0001
BB_CPU_NM : [MediaTek] MT6582_S00
Processing BROM stage
SecCfgVal : 0x00000000
BromVersion : 0xFF
BLVersion : 0x01
Preloader Status : Alive
Processing DA stage
DA Select done , sending 
DA Ver : MTK_AllInOne_DA_v7.1533.03
NAND_ID : 00000000000000000000000000000000
eMMC_ID : 8801034E436172642032D20327626173
DA Stat : v4.2 on BBID : 0x87
DA Sent. Configure setting now ... 
DA started successuflly
eMMC FlashIC initialized
[eMMC] : FLASH_VEN : 0088 , OEM : 0103
[eMMC] : FLASH_INF : [NOT_IN_BASE] , draC
[eMMC] : FLASH_CID : 8801034E436172642032D20327626173
[eMMC] : FLASH_EXT : 0x00200000 , 0x00200000 , 0x00000000
[eMMC] : FLASH_LEN : 0x00000000E7400000
[eMMC] : FLASH_UCP : 3700 MiB
INT RAM    : 0x00020000
EXT RAM    : 0x20000000
BOOT TYPE  : EMMC_FLASH_BOOT
SOC VERIFY : C1
Boot Ok!


SIM [1] codes : 
[1] Level , [Locked] : False
[2] Level , [Locked] : False
[3] Level , [Locked] : False
[4] Level , [Locked] : False
[5] Level , [Locked] : False
[6] Level , [Locked] : False
[7] Level , [Locked] : False

SIM [2] codes : 
[1] Level , [Locked] : False
[2] Level , [Locked] : False
[3] Level , [Locked] : False
[4] Level , [Locked] : False
[5] Level , [Locked] : False
[6] Level , [Locked] : False
[7] Level , [Locked] : False

При последующей разлочки SP_Direct_unlock

Operation : SP Unlock [ v1.37 ]
Mode : Direct Unlock

1. Power Off Phone , Remove battery , Insert back
2. Insert USB cable. In some cases require hold BootKey

Wait for phone...
Phone found! [ 75 ]
Sync...
Inital regs read done
Boot Info : 
BB_CPU_ID : 6582
BB_CPU_HW : CA01
BB_CPU_SW : 8A00
BB_CPU_SB : 0001
BB_CPU_NM : [MediaTek] MT6582_S00
Processing BROM stage
SecCfgVal : 0x00000000
BromVersion : 0xFF
BLVersion : 0x01
Preloader Status : Alive
Processing DA stage
DA Select done , sending 
DA Ver : MTK_AllInOne_DA_v7.1533.03
NAND_ID : 00000000000000000000000000000000
eMMC_ID : 8801034E436172642032D20327626173
DA Stat : v4.2 on BBID : 0x87
DA Sent. Configure setting now ... 
DA started successuflly
eMMC FlashIC initialized
[eMMC] : FLASH_VEN : 0088 , OEM : 0103
[eMMC] : FLASH_INF : [NOT_IN_BASE] , draC
[eMMC] : FLASH_CID : 8801034E436172642032D20327626173
[eMMC] : FLASH_EXT : 0x00200000 , 0x00200000 , 0x00000000
[eMMC] : FLASH_LEN : 0x00000000E7400000
[eMMC] : FLASH_UCP : 3700 MiB
INT RAM    : 0x00020000
EXT RAM    : 0x20000000
BOOT TYPE  : EMMC_FLASH_BOOT
SOC VERIFY : C1
Boot Ok!

Lock Status : Not Locked!

Done!
Elapsed: 00:00:20
Reconnect Power/Cable!

PS выше способ ( Пост от romaprost ) не пробовал, так как наткнулся на эту тему уже после решения проблемы.

На 4_pda нашёл прошивку с вычищенным хламом и с разлоченными слотами по обе SIM . Ссылка ( _ убрать )

Прямая ссылка на прошивку.