Strange C75 v24

[*MaTeOoSh*]

Hi

Just encountered very strange C75 v24 (AMD Spansion). Phone doesn't want to accept SKEY (!). I'm using 079g (the only version working with spansion) but the same is with older versions.

Here are the informations:

Model: SIEMENS C75 24 lg4
Phone is in "Service Mode" mode
IMEI: 356270007492845
SecurityStatus: CustomerMode
HWID: 341
Accumulator Voltage: 3805 mV.
Getting Information:
Model: SIEMENS C75 24 lg4
Phone is in "Service Mode" mode
IMEI: 356270007492845
SecurityStatus: CustomerMode
HWID: 341
Accumulator Voltage: 3796 mV.
Additional Information:
Code(05): OTP is Closed for write
Code(0A): Record BootKEY misses from EEPROM
Code(0D): Keys are stored in BCORE
Code(10): BFC functions are inaccessible
Code(15): Full mode (not SC)
Code(19): Monitoring is ON
Code(1E): Missing block 5121
EELITE Info:
Free buffer 109916 bytes, free at all 111156 bytes, free for deleted 111156 bytes.
EEFULL Info:
Free buffer 83503 bytes, free at all 206458 bytes, free for deleted 75418 bytes.
MAP info:
Date: 04/06/06, Variant: S 403,
Std-Map/SW: 1/24, D-Map/Prov.: 27/154
To Get Extended Info - Enter Skey into the phone!
Phone operated: 1689 sec.
Total Talk time: 0 sec.
FlashID(1) - Manufact. code: 0001 (amd), type: 227E2230.
DisplayID(1,60): Philips Philips PCF8882 serial.

the keys are calculated:
[356270007492845]
SKEY=44796494
BKEY=23B1B9C5F156A6F3A57DF834835358A9
HASH=1F6B1CBC63C2DFA5D0DE07E3B3B7A472
ESN=F2F5B63D
Phone=SIEMENS C75 24 lg4
HWID=341
BOOTKEY=23B1B9C5F156A6F3A57DF834835358A9

..but after trying to enter SKEY - phone remains in customermode :

Checking values entered...
Test "Service key" (SKEY)...
Sending "Service key"(SKEY) to the phone...
SKEY entered!
Pause 32 second(s)...
SecurityStatus: CustomerMode

Writing new bootcore is also impossible :

Auto Ignition...
Boot not loaded!
Boot released.
Auto Ignition...
Transfer boot...
BOOT is loaded...
Getting Information...
FlashID: 0001,227E (32Mb) ...(amd)
C75 SIEMENS 356270007492845
HASH: 1F6B1CBC63C2DFA5D0DE07E3B3B7A472
OTP ESN: F2F5B63D
OTP IMEI: 356270007492845
Established speed 921600 Baud.
Test data bus D0..D15...OK.
Test address bus A2..A22...OK.
It was BCORE version: "main_1.0_V26 "
Write BCORE version: "main_1.0_V26 "
Error in confirmation code to command Erase segment A0000000!
No confirmation for command to Write segment A0000000!
Error writing segment BCORE!

any help, guyz ?

br

Mati

 

[Chris02]

Try to calc skey again.

Just enter bootkey, go to flash, mark only pause and go.

Now go to main window and calc keys again

 

[*MaTeOoSh*]

hi,

already done many times - calculated skey always the same ... and not accepted.

will try again tomorrow ....

 

[*MaTeOoSh*]

...beginning to understand the problem.

there is

Code(1E): Missing block 5121

5121 stores the data needed to validate the skey - so if there no such data, key can't be validated.

so, I will try fullflash the phone to restore 5121 ...

 

[*MaTeOoSh*]

ok, problem solved after fullflash with recalculated all keys.

thanks !