Repair ALL A70 here

  • Thread starter Thread starter BB-gsm
  • Start date Start date
Hi @BB-gsm, who is the pass for this flash file? http://www.evil-hackers.com/BB-gsm/A70_4MB_221D_FF.rar

tnx

by Alfa Mobil...
 
my phone is BENQ.. do you know whats the different of A70 siemens and BENQ? thanks before..

fastlink..

big thanks for the link from hackgsm.. i will try it and will post the result..

fastlink
 
I try with different speed but not sucess

How i know if the Phone have the original FSN, PhoneID and HASH ?? ?
How i can restore this codes if are incorrect??

WBR
 
THANK YOU

I CONVERTED TO IT IN ENGLISH AND UPLOADING HERE

THIS MAY HELP OTHER MEMBERS

THANKS TO dagos

EXIT: E002 08 6
 
I have an A70 that already him(her) hisieron test point and it was working suddenly well I extinguish only, using the softwares for this model as the jokers, they detect it read it and realize the flash but jamas manages to light the cellular one since(as,like) I must use the jokers in order that it(he,she) could take? Do all the softwares read it well and the cable this one perfectly, the correct solution of since(as,like) these jokers use which(who) is?
 
Hello everybody,

I have a STRANGE SITUATION. Don't ask why!
I must block a A70 cellphone on a network ( it happend to me ) ). So i make a testpoint and put some flash ( soft) on the phone. After that the phone is unbarred ( that's the problem). How could I lock back the phone on my network. I used flash:A70lg4Sw32_80-40_FF.bin, Joker JokerV0341.exe and a cable USB F30032P465A1. The SST v6.50 doesn't recognise A70.

Please help. It's another software that I can use, or the cable is not right, or ......???

Thanx
 
i have A 70 set after unloking hang write full flash use otp imei but problem same.



Loading BootsModel(A70)...
Sending StartBoot Ok.
Sending Boot2 Ok.
Sending Boot3 Ok.
Sending MainBoot Ok.
Write Flash addr:800000 size:010000 - Ok.
Start...
Loading BootsModel(A70)...
Sending StartBoot Ok.
Sending Boot2 Ok.
Sending Boot3 Ok.
Sending MainBoot Ok.
Write Flash addr:BC0000 size:030000 - Ok.
Start...
Loading BootsModel(A70)...
Sending StartBoot Ok.
Sending Boot2 Ok.
Sending Boot3 Ok.
Sending MainBoot Ok.
Write Flash addr:A00000 size:040000 - Ok.
Start...
Loading BootsModel(A70)...
Sending StartBoot Ok.
Sending Boot2 Ok.
Sending Boot3 Ok.
Sending MainBoot Ok.
Write Flash addr:AB0000 size:050000 - Ok.
Start...
Loading BootsModel(A70)...
Sending StartBoot Ok.
Sending Boot2 Ok.
Sending Boot3 Ok.
Sending MainBoot Ok.
Write Flash addr:AB0000 size:050000 - Ok.
Start...
Loading BootsModel(A70)...
Sending StartBoot Ok.
Sending Boot2 Ok.
Sending Boot3 Ok.
Sending MainBoot Ok.
FlashID: 0001/227E
HASH: 45F91915DCA76F41B1BA10265E4F6397
SIEMENS A70 lg7
Use OTP IMEI: 359068005521764
FSN: 1E8D802C -> PhoneID: 2C808D1E
EEP IMEI: 359068005429216
Write New EEPBlock 76,5008,5009,5077 Ok.
Boot terminated.
Repair Ok!


any one help me plz.
 
a siemens a 70 was wrong software. i have flashed my phone then unlocked

now phone is dead. here is the log. what may be the problem.in service mode. phone displays service modecan anyone

help me??




Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.
HWID: 241 (A70)
A70 lg1 Sw32 18.08.05 10:44:18
IMEI: 359068005652338
DisplayID: 52, Hyundai D0986EF
Code(05): OTP closed
Code(09): BootKEY is written in EEPROM
Code(0D): Keys are registered in BCORE
Code(10): Minimal access to BFB
Code(15): Complete condition
Code(19): Monitoring is switched on
Code(1C): Block 5123 is not found
Battery Voltage 4164 mV.
SecurityMode: Customer
Start...
Phone off...
Not write Com1!
Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.
MobileMode: Service
HWID: 241 (A70)
A70 lg1 Sw32 18.08.05 10:44:18
IMEI: 359068005652338
DisplayID: 52, Hyundai D0986EF
FSN: CF88E84F
SW FlashID: 0001/221D
Code(05): OTP closed
Code(09): BootKEY is written in EEPROM
Code(0D): Keys are registered in BCORE
Code(13): Complete access to BFB
Code(15): Complete condition
Code(19): Monitoring is switched on
Code(1D): Blocks 5121,5122,5123 are present
Battery Voltage 4168 mV.
SecurityMode: Factory
Get Info...
MobileMode: Service
HWID: 241 (A70)
A70 lg1 Sw32 18.08.05 10:44:18
IMEI: 359068005652338
DisplayID: 52, Hyundai D0986EF
FSN: CF88E84F
SW FlashID: 0001/221D
Code(05): OTP closed
Code(09): BootKEY is written in EEPROM
Code(0D): Keys are registered in BCORE
Code(13): Complete access to BFB
Code(15): Complete condition
Code(19): Monitoring is switched on
Code(1D): Blocks 5121,5122,5123 are present
Battery Voltage 4175 mV.
SecurityMode: Factory
DSP Firmware Version 00, Power Asic Project ID: 21, RF Chipset ID: 0B
EELITE Info: free buffer 5092 bytes, free at all 9108 bytes, free for deleted 9108 bytes.
EEFULL Info: free buffer 68434 bytes, free at all 68670 bytes, free for deleted 3278 bytes.
Battery Ri measurement: CutOff Idle: 3446mV, CutOff Talk: 3618mV, CutOff Idle: 3415mV, CutOff Talk: 3535mV, CutOff Idle: 3415mV, CutOff Talk: 3535mV, CutOff Idle: 3415mV, CutOff Talk: 3535mV.
Operating time: Total 19 sec, Current SW 19 sec.
Talk time: Total 0 sec, Current SW 0 sec.
CSD: Total 0 bytes, Current SW 0 bytes.
GPRS: Total 4294967295 bytes, Current SW 4294967295 bytes.
Start...
Loading BootsModel(A70)...
Sending StartBoot Ok.
Sending MainBoot Ok.
SIEMENS A70 lg1 Sw32
Soft FlashID: 0001/221D
FlashID: 0001/227E-221D-2200
Flash Size: 4Mb, WriteBuffer: 32 bytes
Region(1): Blocks 64, Size 64Kb
Start EEPROM segments at addres 0xBC0000
FSN: CF88E84F -> PhoneID: 4FE888CF
OTP IMEI: 359068005652338
HASH: C0B09DFFD0A58AE30D87FBAADD13A7B5
Use OTP IMEI: 359068005652338
USE SKEY: 12345678
*#0000*12345678# - Network Lock
*#0001*12345678# - Service Provider Lock
*#0002*12345678# - Corporate Code
*#0003*12345678# - Phone Code
*#0004*12345678# - Network Subset Lock
*#0005*12345678# - Only Sim
BCORE HASH is equivalent - not change.
Read EEPROM addr: 0xBC0000 size: 0x030000...
EEPROM backup in ".\Backup\A70lg1Sw32_EEPROM_070813095541.bin" file.
Write EEPROM addr: 0xBC0000 size: 0x030000...
Change BOOTKEY - Ok.
Change EEP0076 - Ok.
Change EEP5009 - Ok.
Change EEP5077 - Ok.
Change EEP5121 - Ok.
Change EEP5122 - Ok.
Change EEP5123 - Ok.
Open file "C:\Documents and Settings\Administrator\Desktop\A70_4MB_220C_FF\A70_4MB_lg98Sw13_220C_FF.bin" for write in Flash.
FullFlash file info:
FlashID: 0001/220C
SIEMENS A70 Sw13 lg98
RealLgPack: lg1
Start...
Loading BootsModel(A70)...
Sending StartBoot Ok.
Sending MainBoot Ok.
SIEMENS A70 lg1 Sw32
Soft FlashID: 0001/221D
FlashID: 0001/227E-221D-2200
Flash Size: 4Mb, WriteBuffer: 32 bytes
Region(1): Blocks 64, Size 64Kb
Start EEPROM segments at addres 0xBC0000
FSN: CF88E84F -> PhoneID: 4FE888CF
OTP IMEI: 359068005652338
HASH: C0B09DFFD0A58AE30D87FBAADD13A7B5
Read EEP0067 block (ver00), size 20 bytes - Ok.
Read EEP0076 block (ver00), size 10 bytes - Ok.
Read EEP5005 block (ver00), size 64 bytes - Ok.
Read EEP5007 block (ver00), size 10 bytes - Ok.
Read EEP5008 block (ver00), size 224 bytes - Ok.
Read EEP5009 block (ver00), size 10 bytes - Ok.
Read EEP5012 block (ver00), size 12 bytes - Ok.
Read EEP5077 block (ver00), size 232 bytes - Ok.
Read EEP5093 block (ver00), size 76 bytes - Ok.
Read EEP5121 block (ver00), size 56 bytes - Ok.
Read EEP5122 block (ver00), size 6 bytes - Ok.
Read EEP5123 block (ver00), size 12 bytes - Ok.
EEPROM blocks is written in ".\Backup\A70lg1Sw32_Backup070813095822.eep" file.
Restore EEP0067 - Ok.
Restore EEP5005 - Ok.
Restore EEP5007 - Ok.
Restore EEP5012 - Ok.
Restore EEP5093 - Ok.
Data file "C:\Documents and Settings\Administrator\Desktop\A70_4MB_220C_FF\A70_4MB_lg98Sw13_220C_FF.bin".
Write Flash addr: 0x800000 size: 0x400000 - Ok.
Start...
Loading BootsModel(A70)...
Sending StartBoot Ok.
Sending MainBoot Ok.
SIEMENS A70 lg98 Sw13
Soft FlashID: 0001/220C
FlashID: 0001/227E-221D-2200
Flash Size: 4Mb, WriteBuffer: 32 bytes
Region(1): Blocks 64, Size 64Kb
Start EEPROM segments at addres 0xBC0000
FSN: CF88E84F -> PhoneID: 4FE888CF
OTP IMEI: 359068005652338
HASH: C0B09DFFD0A58AE30D87FBAADD13A7B5
Use OTP IMEI: 359068005652338
USE SKEY: 12345678
*#0000*12345678# - Network Lock
*#0001*12345678# - Service Provider Lock
*#0002*12345678# - Corporate Code
*#0003*12345678# - Phone Code
*#0004*12345678# - Network Subset Lock
*#0005*12345678# - Only Sim
BCORE HASH is equivalent - not change.
Read EEPROM addr: 0xBC0000 size: 0x030000...
EEPROM backup in ".\Backup\A70lg98Sw13_EEPROM_070813101151.bin" file.
Write EEPROM addr: 0xBC0000 size: 0x030000...
Change BOOTKEY - Ok.
Change EEP0076 - Ok.
Change EEP5009 - Ok.
Change EEP5077 - Ok.
Change EEP5121 - Ok.
Change EEP5122 - Ok.
Change EEP5123 - Ok.
Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.
HWID: 241 (A70)
A70 lg98 Sw13 25.05.05 16:29:10
IMEI: 359068005652338
DisplayID: 52, Hyundai D0986EF
Code(05): OTP closed
Code(09): BootKEY is written in EEPROM
Code(0D): Keys are registered in BCORE
Code(10): Minimal access to BFB
Code(15): Complete condition
Code(19): Monitoring is switched on
Code(1C): Block 5123 is not found
Battery Voltage 4150 mV.
SecurityMode: Customer
 
Have unlock two Ax75 and three A70 using joker 0343

Press
1- calc sky
2-Send Key
service selection:
3-Service Mode
4-Read and Cal keys

Phones allways turn up dead. what do I next is
write back its own backup-eprom, which is generated
when click Send Key e.g. EEPROM backup in ".\Backup\***.
And phone power-on again and unloked.
 
try to see settings (meybe there r silent or "groving") - full factory or something...
 
...curious. Fullflash files including eeprom parts. Maybe you have the hardware problem. Try to rehot microcontroller and fullflash again (included bootcore area) and check only "ReCalk Keys" option....
Download from http://rapidshare.com/files/144556634/a70_v32_4M.rar the all necesarly files (fullflash,eeprom,bootcore,T9...).
dagos
 
BIG THANKS...... HACKGSM..

your file working.. phone working now.
this is result of joker 3.43

Open file "C:\a70\benq\A70_80-40_FFBNQ.bin" for write in Flash.
FullFlash file info:
FlashID: 0001/221D
SIEMENS A70 Sw32 lg98
RealLgPack: lg4
Start...
Loading BootsModel(A70)...
Sending StartBoot Ok.
Sending MainBoot Ok.
Com1 115200 BAUD: Ok.
SIEMENS A70 lg98 Sw13
Soft FlashID: 0001/220C
FlashID: 0001/227E-221D-2200
Flash Size: 4Mb, WriteBuffer: 32 bytes
Region(1): Blocks 64, Size 64Kb
Start EEPROM segments at addres 0xBC0000
FSN: 875392BA -> PhoneID: BA925387
OTP IMEI: 359068007651098
HASH: 1B60DCF79E8FF6A4517792FA8798AEE2
Read EEP0067 block (ver00), size 20 bytes - Ok.
Read EEP0076 block (ver00), size 10 bytes - Ok.
Read EEP5005 block (ver00), size 64 bytes - Ok.
Read EEP5007 block (ver00), size 10 bytes - Ok.
Read EEP5008 block (ver00), size 224 bytes - Ok.
Read EEP5009 block (ver00), size 10 bytes - Ok.
Read EEP5012 block (ver00), size 12 bytes - Ok.
Read EEP5077 block (ver00), size 232 bytes - Ok.
Read EEP5093 block (ver00), size 76 bytes - Ok.
Read EEP5121 block (ver00), size 56 bytes - Ok.
Read EEP5122 block (ver00), size 6 bytes - Ok.
Read EEP5123 block (ver00), size 12 bytes - Ok.
EEPROM blocks is written in ".\Backup\A70lg98Sw13_Backup060730154335.eep" file.
USE SKEY: 12345678
*#0000*12345678# - Network Lock
*#0001*12345678# - Service Provider Lock
*#0002*12345678# - Corporate Code
*#0003*12345678# - Phone Code
*#0004*12345678# - Network Subset Lock
*#0005*12345678# - Only Sim
WriteFlash: Segment Size error=0x00 at block 0x800000!
Open file "C:\a70\benq\A70_80-40_FFBNQ.bin" for write in Flash.
FullFlash file info:
FlashID: 0001/221D
SIEMENS A70 Sw32 lg98
RealLgPack: lg4
Start...
Loading BootsModel(A70)...
Sending StartBoot Ok.
Sending MainBoot Ok.
Com1 115200 BAUD: Ok.
SIEMENS A70 lg98 Sw13
Soft FlashID: 0001/220C
FlashID: 0001/227E-221D-2200
Flash Size: 4Mb, WriteBuffer: 32 bytes
Region(1): Blocks 64, Size 64Kb
Start EEPROM segments at addres 0xBC0000
FSN: 875392BA -> PhoneID: BA925387
OTP IMEI: 359068007651098
HASH: 1B60DCF79E8FF6A4517792FA8798AEE2
Read EEP0067 block (ver00), size 20 bytes - Ok.
Read EEP0076 block (ver00), size 10 bytes - Ok.
Read EEP5005 block (ver00), size 64 bytes - Ok.
Read EEP5007 block (ver00), size 10 bytes - Ok.
Read EEP5008 block (ver00), size 224 bytes - Ok.
Read EEP5009 block (ver00), size 10 bytes - Ok.
Read EEP5012 block (ver00), size 12 bytes - Ok.
Read EEP5077 block (ver00), size 232 bytes - Ok.
Read EEP5093 block (ver00), size 76 bytes - Ok.
Read EEP5121 block (ver00), size 56 bytes - Ok.
Read EEP5122 block (ver00), size 6 bytes - Ok.
Read EEP5123 block (ver00), size 12 bytes - Ok.
EEPROM blocks is written in ".\Backup\A70lg98Sw13_Backup060730154403.eep" file.
USE SKEY: 12345678
*#0000*12345678# - Network Lock
*#0001*12345678# - Service Provider Lock
*#0002*12345678# - Corporate Code
*#0003*12345678# - Phone Code
*#0004*12345678# - Network Subset Lock
*#0005*12345678# - Only Sim
Change BOOTKEY - Ok.
Change EEP0076 - Ok.
Change EEP5009 - Ok.
Change EEP5077 - Ok.
Change EEP5121 - Ok.
Change EEP5122 - Ok.
Change EEP5123 - Ok.
BCORE prepared for Freeze - Ok.
Restore EEP0067 - Ok.
Restore EEP5005 - Ok.
Restore EEP5007 - Ok.
Restore EEP5012 - Ok.
Restore EEP5093 - Ok.
Data file "C:\a70\benq\A70_80-40_FFBNQ.bin".
Write Flash addr: 0x800000 size: 0x400000 - Ok.
Use Freeze!
Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.
BFB Speed 115200 Baud - Ok.
MobileMode: Service
HWID: 241 (A70)
A70 lg98 Sw32 18.08.05 10:40:31
IMEI: 359068007651098
DisplayID: 52, Hyundai D0986EF
FSN: 875392BA
SW FlashID: 0001/221D
Code(05): OTP closed
Code(09): BootKEY is written in EEPROM
Code(0C): Keys miss in BCORE (CleanBCORE)
Code(13): Complete access to BFB
Code(15): Complete condition
Code(1A): Block 76 is accessible
Code(1C): Block 5123 is not found
Battery Voltage 4084 mV.
SecurityMode: Factory
Get IMEI...
IMEI: 359068007651098
Freeze...
Use IMEI: 359068007651098
Freeze: IMEI Freeze Failed or OTP IMEI is already written!
Freeze BCORE data - Ok.
Start...
Phone off!
Loading BootsModel(A70)...
Sending StartBoot Ok.
Sending MainBoot Ok.
Com1 115200 BAUD: Ok.
SIEMENS A70 lg98 Sw32
Soft FlashID: 0001/221D
FlashID: 0001/227E-221D-2200
Flash Size: 4Mb, WriteBuffer: 32 bytes
Region(1): Blocks 64, Size 64Kb
Start EEPROM segments at addres 0xBC0000
FSN: 875392BA -> PhoneID: BA925387
OTP IMEI: 359068007651098
HASH: 1B60DCF79E8FF6A4517792FA8798AEE2
Use OTP IMEI: 359068007651098
USE SKEY: 12345678
*#0000*12345678# - Network Lock
*#0001*12345678# - Service Provider Lock
*#0002*12345678# - Corporate Code
*#0003*12345678# - Phone Code
*#0004*12345678# - Network Subset Lock
*#0005*12345678# - Only Sim
BCORE HASH is equivalent - not change.
Read EEPROM addr: 0xBC0000 size: 0x030000...
EEPROM backup in ".\Backup\A70lg98Sw32_EEPROM_060730155314.bin" file.
Write EEPROM addr: 0xBC0000 size: 0x030000...
Change BOOTKEY - Ok.
Change EEP0076 - Ok.
Change EEP5009 - Ok.
Change EEP5077 - Ok.
Change EEP5121 - Ok.
Change EEP5122 - Ok.
Change EEP5123 - Ok.
 
I have found a lot of a70 which are ""no network"" after flash.is there any other flash file for a70.
 
Back
Top