SIEMENS C55....bzzzzzzz on start

  • Thread starter Thread starter moder10
  • Start date Start date
M

moder10

Guest
Siemens C55.....don't work and i can't read it

The mobile SIEMENS C55, at startup make all automatically, start "siemens be inspired", click ok ( i can't click it) and the turn off.
When i try to read it with joker, the result is:

Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.
IMEI:
Error Get Battery Voltage!
SecurityMode: Error!

So i decided to make cut on board, but the result is the same:

Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.
IMEI:
Error Get Battery Voltage!
SecurityMode: Error!

In the NORMAL MODE, instead the result is:

Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.
HWID: 130 (C55)
C55 lg1 Sw21 07.04.03 13:47:35
IMEI: *************
Code(05): OTP closed
Code(08): BootKEY is unknown
Code(0D): Keys are registered in BCORE
Code(10): Minimal access to BFB
Code(15): Complete condition
Code(19): Monitoring is switched on
Code(1D): Blocks 5121,5122,5123 are present
Battery Voltage 4036 mV.
SecurityMode: Customer

I decided to make the FULLFLASH, with "C55_v14_lp4_00890017"

Open file "C:\Downloads\Siemens\C55\C55_v14_lp4_00890017\c55_v14_lp4_full.bin" for write in Flash.
FullFlash file info:
FlashID: 0089/0017
SIEMENS C55 Sw14 lg1
RealLgPack: lg4
Start...
Loading BootsModel(C55)...
Sending StartBoot Ok.
Sending MainBoot Ok.
SIEMENS C55 lg1 Sw21
Soft FlashID: 0089/0017
FlashID: 0089/0017
Flash Size: 8Mb, WriteBuffer: 32 bytes
Region(1): Blocks 64, Size 128Kb
Start EEPROM segments at addres 0xFA0000
FSN: FE8A5BA0 -> PhoneID: A05B8AFE
OTP IMEI: 351011707084333
HASH: 96FA5AD4F01C10DF917043665FA9924E
Read EEP0067 block (ver00), size 20 bytes - Ok.
Read EEP0076 block (ver00), size 10 bytes - Ok.
Read EEP5005 block (ver00), size 64 bytes - Ok.
Read EEP5007 block (ver00), size 10 bytes - Ok.
Read EEP5008 block (ver00), size 224 bytes - Ok.
Read EEP5009 block (ver00), size 10 bytes - Ok.
Read EEP5012 block (ver00), size 12 bytes - Ok.
Read EEP5077 block (ver00), size 232 bytes - Ok.
Read EEP5093 block (ver00), size 32 bytes - Ok.
Read EEP5121 block (ver00), size 56 bytes - Ok.
Read EEP5122 block (ver00), size 6 bytes - Ok.
Read EEP5123 block (ver00), size 14 bytes - Ok.
EEPROM blocks is written in ".\Backup\C55lg1Sw21_Backup080210213158.eep" file.
Restore EEP0067 - Ok.
Restore EEP5005 - Ok.
Restore EEP5007 - Ok.
Restore EEP5012 - Ok.
Restore EEP5093 - Ok.
Data file "C:\Downloads\Siemens\C55\C55_v14_lp4_00890017\c55_v14_lp4_full.bin".
Write Flash addr: 0x800000 size: 0x800000 - Ok.

After the full flash i make the unlock:

Start...
Loading BootsModel(C55)...
Sending StartBoot Ok.
Sending MainBoot Ok.
SIEMENS C55 lg1 Sw14
Soft FlashID: 0089/0017
FlashID: 0089/0017
Flash Size: 8Mb, WriteBuffer: 32 bytes
Region(1): Blocks 64, Size 128Kb
Start EEPROM segments at addres 0xFA0000
FSN: FE8A5BA0 -> PhoneID: A05B8AFE
OTP IMEI: 351011707084333
HASH: 96FA5AD4F01C10DF917043665FA9924E
Use OTP IMEI: 351011707084333
USE SKEY: 12345678
*#0000*12345678# - Network Lock
*#0001*12345678# - Service Provider Lock
*#0002*12345678# - Corporate Code
*#0003*12345678# - Phone Code
*#0004*12345678# - Network Subset Lock
*#0005*12345678# - Only Sim
Read BCORE addr: 0x800000 size: 0x020000...
BCORE backup in ".\Backup\C55lg1Sw14_BCORE_080210220609.bin" file.
Write BCORE at addr: 0x800000...
Change BCORE HASH - Ok.
Read EEPROM addr: 0xFA0000 size: 0x060000...
EEPROM backup in ".\Backup\C55lg1Sw14_EEPROM_080210220741.bin" file.
Write EEPROM addr: 0xFA0000 size: 0x060000...
Change BOOTKEY - Ok.
Change EEP0076 - Ok.
Change EEP5009 - Ok.
Change EEP5077 - Ok.
Change EEP5121 - Ok.
Change EEP5122 - Ok.
Change EEP5123 - Ok.

After this, i wanted to read the firmware in the SERVICE MODE, but nothing.

Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.

IMEI:
Error Get Battery Voltage!
SecurityMode: Error!

Now it makes in this way, both in Service Mode that in Normale Mode.
The mobile when i try to make power on....make BZZZZ and then turn off automatically.

The cut on board is ok, i've gone also deeper...is the new c55...not the old one...if possible attach the immagine for repair bad cut, so i try to make it better, but i'm sure that's good.

Now...i wait your help


PS....i have opened this post, only because in the other there was too much confusion, too many things regarding different situations....this post instead is dedicated to MOBILE SIEMENS C55.


Br, Moder
 
...hmmm,
it is funny
You make fullflash with the FW14 LP4 and after fullflash, your phone recognise language pack1. To eliminate confusion, I will make one fullflash file from my C55 phone (working) and I send to you link for this...
Maybe you use the bad fullflash file, maybe your phone don't like low version firmware. I don't know on this moment....
Br,
dagos
 
All ok,
I've downloaded the ff till now.
I have joker working with fullflash...i think in 30minutes i'll public the result..........i hope...POSITIVE

Br, Moder
 
Hi dagos, this is the log:

Reading in SERVICE MODE:

Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.

IMEI:
Error Get Battery Voltage!
SecurityMode: Error!
Phone off...

Making FULLFLASH with your file:

Open file "C:\Downloads\Siemens\C55\Nuova cartella\C55lg4Sw24_FF\C55lg4Sw24_FF.bin" for write in Flash.
FullFlash file info:
FlashID: 0089/0017
SIEMENS C55 Sw24 lg4
RealLgPack: lg4
Start...
Loading BootsModel(C55)...
Sending StartBoot Ok.
Sending MainBoot Ok.
SIEMENS C55 lg1 Sw14
Soft FlashID: 0089/0017
FlashID: 0089/0017
Flash Size: 8Mb, WriteBuffer: 32 bytes
Region(1): Blocks 64, Size 128Kb
Start EEPROM segments at addres 0xFA0000
FSN: FE8A5BA0 -> PhoneID: A05B8AFE
OTP IMEI: 351011707084333
HASH: 7C3D880A8F23CB0798205610BCFEAA5D
Read EEP0067 block (ver00), size 20 bytes - Ok.
Read EEP0076 block (ver00), size 10 bytes - Ok.
Read EEP5005 block (ver00), size 64 bytes - Ok.
Read EEP5007 block (ver00), size 10 bytes - Ok.
Read EEP5008 block (ver00), size 224 bytes - Ok.
Read EEP5009 block (ver00), size 10 bytes - Ok.
Read EEP5012 block (ver00), size 12 bytes - Ok.
Read EEP5077 block (ver00), size 232 bytes - Ok.
Read EEP5093 block (ver00), size 32 bytes - Ok.
Read EEP5121 block (ver00), size 56 bytes - Ok.
Read EEP5122 block (ver00), size 6 bytes - Ok.
Read EEP5123 block (ver00), size 14 bytes - Ok.
EEPROM blocks is written in ".\Backup\C55lg1Sw14_Backup080211123549.eep" file.
Restore EEP0067 - Ok.
Restore EEP5005 - Ok.
Restore EEP5007 - Ok.
Restore EEP5012 - Ok.
Restore EEP5093 - Ok.
Data file "C:\Downloads\Siemens\C55\Nuova cartella\C55lg4Sw24_FF\C55lg4Sw24_FF.bin".
Write Flash addr: 0x800000 size: 0x800000 - Ok.

After fullflash, i have tried to read mobile in SERVICE MODE:

Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.

IMEI:
Error Get Battery Voltage!
SecurityMode: Error!
Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.

IMEI:
Error Get Battery Voltage!
SecurityMode: Error!
Start...
Phone off...

After fullflash, i have tried to read mobile in NORMAL MODE:

Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.
The phone was switched off on an error:
EXIT: E002 08 6C
Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.
The phone was switched off on an error:
EXIT: E002 08 6C



At this point, i don't know what to do more


Br, Moder
 
After Unlock...the resulti in ServiMode is always the same, while the result in Normal Mode is:

Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.
MobileMode: Normal
HWID: 130 (C55)
C55 lg4 Sw24 03.06.03 13:52:42
IMEI: 351011707084333
DisplayID: 29, Philips PCF8813
FSN: FE8A5BA0
SW FlashID: 0089/0017
Code(05): OTP closed
Code(09): BootKEY is written in EEPROM
Code(0D): Keys are registered in BCORE
Code(13): Complete access to BFB
Code(15): Complete condition
Code(19): Monitoring is switched on
Code(1D): Blocks 5121,5122,5123 are present
Battery Voltage 3956 mV.
SecurityMode: Factory

I've turn on the mobile, all ok, it works also, but the botton on the left (that is for reading sms when arrive) and the botton on the right (for menu)...NOT WORK.
The mobile makes me call, but is slow to take network.

I think there's something to do for repairing the board of C55.

Br, Moder
 
Hi, Moder.
I search on my documentations and I hope to give you the correct answer:
C55 use two type PCB's. One is old PCB (you need only to desolder resistor to make unlock / flash), and other is new (you need to cut exactly the track on the correct possition). Remember, Siemens PCB's have ways on the four levels!!! Is possible to damaged the other way..... In attachemment you have the picture for repair this ways. You need to measure the continuity to the each way. Be carrefully to the solder/ desolder the IC's BGA. Is possible to don't working after desoldering, because is possible to don't create the good contacts the solder balls (this balls execution contacts between PCB pads and IC). I destroyed manny phones ( on the begining...). Download "Siemens-Testpoint Station 3" from http://rapidshare.com/files/18403650/Siemens-Testpoint_Station_3.rar and search in your phone if the components position ( between microcontroller and filter) is the same with the picture. In this case you have the "new" PCB and is needed to cut track). If is not, you need only to remove resistor.
I don't help you more, because is the first time when I see this malfunction ( don't connected in the service mode -> maked fullflash; maked unlock without to enter in service mode -> phone unlocked). IT IS UNREAL !
IT IS THE TWILLIGH ZONE

Bye,
dagos
 
Hi (again) Moder,
create the fullflash file from your phone and place to rapidshare. Send link to me. I will try to *******te your problem.
Br,
dagos
 
Dear dagos, you're unik.
After reading FULLFLASH, the file where is saved?

Br, Moder
 
Sorry for this post, i'm tired.
This is the link of my FF...siemens c55...named...
C55lg4Sw24_80-80_FF_Moder...NO.Work

http://rapidshare.com/files/91915947/C55lg4Sw24_80-80_FF_Moder...NO.Work.rar


Br,
Moder
 
Hi Moder,
I tested fullflash provided by you and this is good. See the log file:
Open file "D:\C55lg4Sw24_80-80_FF_Moder...NO.Work.bin" for write in Flash.
FullFlash file info:
FlashID: 0089/0017
SIEMENS C55 Sw24 lg4
RealLgPack: lg4
Start...
Loading BootsModel(C55)...
Sending StartBoot Ok.
Sending MainBoot Ok.
Com1 115200 BAUD: Ok.
SIEMENS C55 lg4 Sw24
Soft FlashID: 0089/0017
FlashID: 0089/0017
Flash Size: 8Mb, WriteBuffer: 32 bytes
Region(1): Blocks 64, Size 128Kb
Start EEPROM segments at addres 0xFA0000
FSN: BE95A29B -> PhoneID: 9BA295BE
OTP IMEI: 351************
HASH: D1F859F3FC6213A65A43E1BBA2372EA9
Data file "D:\C55lg4Sw24_80-80_FF_Moder...NO.Work.bin".
Write Flash addr: 0x800000 size: 0x800000 - Ok.
Start...
Loading ServiceBoot...
Sending ServiceBoot Ok.
BFB Speed 115200 Baud - Ok.
HWID: 130 (C55)
C55 lg4 Sw24 03.06.03 13:52:42
IMEI: 351************
Code(05): OTP closed
Code(09): BootKEY is written in EEPROM
Code(0D): Keys are registered in BCORE
Code(10): Minimal access to BFB
Code(15): Complete condition
Code(19): Monitoring is switched on
Code(1D): Blocks 5121,5122,5123 are present
Battery Voltage 4015 mV.
SecurityMode: Customer

Read Keys...
SecurityMode: Customer
Work only in FactoryMode! Use Skey!

Start...
Phone off!
Loading BootsModel(C55)...
Sending StartBoot Ok.
Sending MainBoot Ok.
Com1 115200 BAUD: Ok.
SIEMENS C55 lg4 Sw24
Soft FlashID: 0089/0017
FlashID: 0089/0017
Flash Size: 8Mb, WriteBuffer: 32 bytes
Region(1): Blocks 64, Size 128Kb
Start EEPROM segments at addres 0xFA0000
FSN: BE95A29B -> PhoneID: 9BA295BE
OTP IMEI: 351************
HASH: D1F859F3FC6213A65A43E1BBA2372EA9
Use OTP IMEI: 351************
USE SKEY: 12345678
*#0000*12345678# - Network Lock
*#0001*12345678# - Service Provider Lock
*#0002*12345678# - Corporate Code
*#0003*12345678# - Phone Code
*#0004*12345678# - Network Subset Lock
*#0005*12345678# - Only Sim
Read BCORE addr: 0x800000 size: 0x020000...
BCORE backup in ".\Backup\C55lg4Sw24_BCORE_080215064442.bin" file.
Write BCORE at addr: 0x800000...
Change BCORE HASH - Ok.
Read EEPROM addr: 0xFA0000 size: 0x060000...
EEPROM backup in ".\Backup\C55lg4Sw24_EEPROM_080215064529.bin" file.
Write EEPROM addr: 0xFA0000 size: 0x060000...
Change BOOTKEY - Ok.
Change EEP0076 - Ok.
Change EEP5009 - Ok.
Change EEP5077 - Ok.
Change EEP5121 - Ok.
Change EEP5122 - Ok.
Change EEP5123 - Ok.

So, now I'm sure. Not is the software problems, this is the only hardware...
Open your PM. I give to you my e-mail address for more discuttions.
dagos
 
Back
Top