Work fine for me:
Getting Information:
Model: SIEMENS C75 13 lg1
Phone is in "Normal Mode" mode
IMEI: 356272002204712
SecurityStatus: CustomerMode
HWID: 341
Accumulator Voltage: 3715 mV.
Additional Information:
Code(05): OTP is Closed for write
Code(0A): Record BootKEY misses from EEPROM
Code(0D): Keys are stored in BCORE
Code(10): BFC functions are inaccessible
Code(15): Full mode (not SC)
Code(19): Monitoring is ON
Code(1D): Blocks 512x are present
EELITE Info:
Free buffer 90484 bytes, free at all 111156 bytes, free for deleted 111156 bytes.
EEFULL Info:
Free buffer 107472 bytes, free at all 209957 bytes, free for deleted 78917 bytes.
MAP info:
Date: 28/12/05, Variant: A 145,
Std-Map/SW: 1/13, D-Map/Prov.: 8/103
To Get Extended Info - Enter Skey into the phone!
Phone operated: 2058 sec.
Total Talk time: 0 sec.
FlashID(1) - Fact. code: 0089 (Intel), type: 880D.
DisplayID(1,60): Philips Philips PCF8882 serial.
SimSim activated
Awaiting answer from Chaos midlet...
IMEI: 356272002204712
ESN: 747631B4
HASH: 7790F31EF1EED2DD8B98053590478E01
Proceed using "Calculate SKEY and BootKEY"...
Calculation of keys...
Keys calculated successfully:
BootKEY: B6B6E51BDA512B677306F464E573D31A
SKEY: 81020570
Checking values entered...
Test "Service key" (SKEY)...
Sending "Service key"(SKEY) to the phone...
SKEY entered!
Pause 1 second(s)...
SecurityStatus: FactoryMode
Reading block 5121...
OTP ESN: 747631B4
OTP IMEI: 356272002204712
Reading block 5121...
Calculate "Master codes".
Phone can be turned off!
If Service mode fail, don't worry look all my procedure, you don't need to use service mode.
1- Swicht Phone On
2- Upload Midlet
3- Run papuas (get info to probe communication)
3- Simulate Sim
4- Run midlet (wait 10 seconds To get ESN and HASH)
5- Press Px65v4 in papuas to get ESN and HASH
6- Calc Skey and Bkey
7- Enter Skey in Phone
8- 5121, 5008, freia.log or whatever you want. (I prefere 5121)
Regards