Unable to calc the Skey of E71 with papuas

  • Thread starter Thread starter s4sajii
  • Start date Start date
S

s4sajii

Guest
Hi,

Unable to calc the Skey of E71 with papuas.

Here is the log:


Erhalte Informationen:
Model: BENQ-SIEMENS E71 37 lg35
Telefon ist im "Normal Mode"
IMEI: 351776010684900
SecurityStatus: CustomerMode
HWID: 413
Achtung: HWID passt nicht zum Telefon!
Achtung: Erst den Akku laden!
Akkuspannung: 3687 mV.
EELITE Info: free buffer 191232 bytes, free at all 222624 bytes, free for deleted 222624 bytes.
EEFULL Info: free buffer 104064 bytes, free at all 466176 bytes, free for deleted 204096 bytes.
Map Info: Date: 20/09/06, Variant: A 303, Std-Map/SW: 1/37, D-Map/Prov.: 191/98
F
 
1. Enter any skey, for example 12345678 , on page "Codes".
2. Check box "Recalculate Keys in Flash" on page "Flash".
3. Make test point.
 
Hi, i have found the 1.11 ver.

here is log:

Transfer boot...
Auto Ignition...
Boot not loaded!
Boot released.
Auto Ignition...
Transfer boot...
Boot not loaded!
Invalid BootKEY or not properly joined TP!!
Boot released.
Auto Ignition...
Transfer boot...
BOOT is loaded...
Pause 2 sec...
Getting Information...
FlashID: 0089,887E (64Mb)
CFI: 1 : 256*262144,
E71 BENQ-SIEMENS 351776010684900
HASH: 9DDBF0DA1A48C3AA728A399D5C08757F
OTP ESN: D4385496
OTP IMEI: 351776010684900
At occurrence of mistakes reduce speed of port!
Established speed 921600 Baud.
FullFlash reading 64Mb ( 12 min. 8 sec. )...
FullFlash preserve in D4385496_FULLFLASH_070423184700.bin
Boot released. Everything is closed.!
Checking values entered...
Calculate HASH and BootKEY from ESN and SKEY...
New HASH: 149C18C1DFC80557DD41EF12E38C725F
New BootKEY:EBC4D6DE5AB94C8F592B4A31F79D138B
Checking value of SKEY from page "Codes"...
Auto Ignition...
Transfer boot...
BOOT is loaded...
Pause 2 sec...
Getting Information...
FlashID: 0089,887E (64Mb)
CFI: 1 : 256*262144,
E71 BENQ-SIEMENS 351776010684900
HASH: 9DDBF0DA1A48C3AA728A399D5C08757F
OTP ESN: D4385496
OTP IMEI: 351776010684900
At occurrence of mistakes reduce speed of port!
Established speed 921600 Baud.
Bcore x85 series found.
Reading of segment BCORE...
BCORE segment are kept in D4385496_A0000000_BCORE_070423191334.bin
Search of a segment EELITE...
Search of a segments EEFULL...
Find blocks: 52,76,5008,5009,5077,5121,5122,5123,5468
In total EEP blocks: 144
SKEY in block 5122 = "S" 33965454
HASH in block 5468 = 9DDBF0DA1A48C3AA728A399D5C08757F
EEPROM Blocks saved in .\Backup\D4385496_EEP_070423191346.eep
Replacement of blocks EEPROM in the buffer ...
EEPROM: Block 52 replaced.
EEPROM: Block 76 does not require replacement.
EEPROM: Block 5009 does not require replacement.
EEPROM: Block 5008 replaced.
EEPROM: Block 5077 replaced.
EEPROM: Block 5121 replaced.
New Master codes:
*#0000*12345678#
*#0001*12345678#
*#0002*12345678#
*#0003*12345678#
*#0004*12345678#
*#0005*12345678#
EEPROM: Block 5122 replaced.
EEPROM: Block 5123 replaced.
EEPROM: Block 5468 replaced.
Work with BCORE in the buffer ...
BCORE: HASH replaced to 149C18C1DFC80557DD41EF12E38C725F.
BCORE: IMEI does not require replacemen.
ATTENTION! After change HASH the pone can not Power On at once in NormalMode!
First load in ServiseMode and then pass to Normal
Record of the changed blocks in phone...
No answer to a command of reception of data A0000000!
Write: addr:A0000000,size:00040000, buf:FF FF FF FF FF
BCORE write Error!
Repeat operation!

then i lower the baud rate. and log:

Checking value of SKEY from page "Codes"...
Auto Ignition...
Transfer boot...
BOOT is loaded...
Pause 2 sec...
Getting Information...
FlashID: 0089,887E (64Mb)
CFI: 1 : 256*262144,
E71 BENQ-SIEMENS 351776010684900
HASH: 9DDBF0DA1A48C3AA728A399D5C08757F
OTP ESN: D4385496
OTP IMEI: 351776010684900
At occurrence of mistakes reduce speed of port!
Bcore x85 series found.
Reading of segment BCORE...
Errror of reception of the buffer of data A0000000,00010000
Failure of process of communication with phone
Error at data reading of segment Bcore!
In total Errors I/O 1


Br
 
Hi,
you have on this forum:
http:///vbb/showthread.php?t=247951&page=6
http:///vbb/showthread.php?t=392399

Br,
dagos
 
Hi to all.

Does following log mean Bcore damaged? but the pone still power on

Checking value of SKEY from page "Codes"...
Auto Ignition...
Transfer boot...
BOOT is loaded...
Pause 2 sec...
Getting Information...
FlashID: 0089,887E (64Mb)
CFI: 1 : 256*262144,
E71 BENQ-SIEMENS 351776010684900
HASH: 9DDBF0DA1A48C3AA728A399D5C08757F
OTP ESN: D4385496
OTP IMEI: 351776010684900
At occurrence of mistakes reduce speed of port!
Bcore x85 series found.
Reading of segment BCORE...
Errror of reception of the buffer of data A0000000,00010000
Failure of process of communication with phone
Error at data reading of segment Bcore!
In total Errors I/O 1



One more question is the full flash readed with the papuas is usable in vklay or x65flasher ?

Thanks
Br
 
Hi,

Treid with the x65flasher to calc the skey but it takes about 21 min but could not calc the skey.
Br
 
..somebody loose his time for this action...
The more posts (provided from this guy) it is only "please help me" , more letters or "thank you".... nothing more.

dagos
 
Hi to all again:

Finnally the prob. is solved and phone unlocked and working.
Thanks for all who listen and bear me.


Br
 
hi guys
i have el71. i'm use read with last version papusa soft and calculate skey. put now i can't write to my phone. entering test mode normal mode no result, please help me write to my phone calculated skey
thanks a lot
 
It was the fidi port that is creating prob. even at lowring the baud rate and change of computer result in same.

use simple com port and the following method make it work.
as describe by yousaf22us in early post:


1. Enter any skey, for example 12345678 , on page "Codes".
2. Check box "Recalculate Keys in Flash" on page "Flash".
3. Make test point.

ofcouse the backup is good if any thing goes wrong.

Br
 
its supported with bsreader i unlocked many phones just try and tell its lot easy they making TP bro
 
my phone version is 31. how to upload calculated skey to my phone . tell me step by step
thanks a lot
 
its supported with bsreader i unlocked many phones just try and tell its lot easy they making TP bro
 
Back
Top