benq-siemens a31 unlocking
 

Hi Friends I want to unlock a-31 which have network lock , can anyone one please help me?

waiting for reply

for unlock a31
 

use JOKER software best for a31

....hmmm,
before post the question, first search bro....
http://forum.gsmhosting.com/vbb/showthread.php?t=297259

dagos

Hi Dagos I have a problem unlocking a31 using joker siemens egold version 0.3.5.6 inofficial , i have cut the testpoint as shown in pic posted in this forum , use model ax72/ax75 - c110/cf110 , com speed set to 57600 but the software always show me this error report
error read flash block:0X800000 size:0X004000!
the phone is working fine with locked sim . I atteched here the log of joker

please guide me to unlock this phone:(:(:(

You can also use Dream SE box

Hi,
set speed to 115200 bauds, not 57600 bauds. Joker working properly with this value.
dagos

you must choose c110 in joker,and press recalculate all skeys and phone is unlocked.
If you choose a31 you will always receive that error.
Enjoy

thank you my friend for reply , look in my post I have already select c110 model but same problem

thank you dagos for quick reply , select all of baud rates include 115200 but always have error read flash block . while baud rate set to 115200 software say error in baud rate set , not supporting.

I forgot to tell you that I am using directcom for ufs software & using clone ufs as com interface

please help me man:(:(:(

...hmmm,
seems to be someting wrong in the bootcore area...
Question: you correctly cut testpoint?
If not working, remain to fullflash your phone and unlock it after....
dagos

it's working fine with it's own locked sim , so I think it's not a problem in bootcore area
testpoint cutting is ok , I am affried to flash the phone using joker because I didn't done it before .
can you please tell me the step by step flashing & unlock process using joker? please also send me the flash file
can I use com cable?

waiting for reply

...before fullflash your phone, I propouse to try unlock your phone using serial com cable and set baudrate to 115200, because Joker working well with this speed in E-Gold phones. Try to "Calculate SKey" and after calculation, "Send SKey" in phone.
Error like "Error Read Flash block 0x800000 size 0x004000!" appair if speed is hight, flash chip not good supported by Joker or Com port not set corectly. Try to use other COM port (if your PC have two). Try to set from Control Panel -> System -> Hardware -> Device Manager -> Ports... and click on "Restore Defaults".
Go to: http://forum.gsmhosting.com/vbb/show...ight=Guide+A31 and download it. You have inside the all informations and fullflash file.
dagos

sorry man for not noticing that you have tried the c110.
So try the advices of Dagos(this man really masters siemens).
If not working,contact me to give you fullflash.
BR

ok friends I will try & post the result soon

Your problem is 100% the emulated port you are using.
Try to get a serial cable and attach it directly to comport.

Reason:
I have make correct tp of mc60 and A52.I use Directcom and ufs interface to unlock phones.
Always get errors.Even to reflash the own FUBU into phones,i always get error.As i change and use a serial cable,all went successfully.No error more.

See here the kind of error i get with directcom(part of the log)

****** Joker Siemens EGOLD Phone Version 0.3.5.2 Test Only opened. ******
****** Donnerstag, Mai 22, 2008, at 03:08:03 ******
Start...
Loading BootsModel(A51)...
Sending StartBoot Ok.
Sending MainBoot Ok.
Error: SetSpeedBaud answer code 0xE2F36A!
Start...
Loading BootsModel(A51)...
Sending StartBoot Ok.
Sending MainBoot Ok.
Warning: HASH data error!
SIEMENS A52 lg1 Sw09
Soft FlashID: 002C/0016
FlashID: 002C/0016
Flash Size: 4Mb, WriteBuffer: 32 bytes
Region(1): Blocks 32, Size 128Kb
Start EEPROM segments at addres 0xBA0000
FSN: C40FD54E -> PhoneID: 4ED50FC4
OTP IMEI: 353616008767580
HASH: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Use OTP IMEI: 353616008767580
USE SKEY: 12345678
*#0000*12345678# - Network Lock
*#0001*12345678# - Service Provider Lock
*#0002*12345678# - Corporate Code
*#0003*12345678# - Phone Code
*#0004*12345678# - Network Subset Lock
*#0005*12345678# - Only Sim
Read BCORE addr: 0x800000 size: 0x020000...
BCORE Table Error!
Read EEPROM addr: 0xBA0000 size: 0x060000...
EEPROM backup in ".\Backup\A52lg1Sw09_EEPROM_080522031157.bin" file.
Write EEPROM addr: 0xBA0000 size: 0x060000...
ClearFlashSeg at 0xBA0000 does not answer!
Open file "F:\FLASH FILES\Joker Own FF\A52lg1Sw09_80-40_FF.bin" for write in Flash.
FullFlash file info:
FlashID: 002C/0016
SIEMENS A52 Sw09 lg1
RealLgPack: lg1
Start...
Cancel.
Open file "F:\FLASH FILES\Joker Own FF\A52lg1Sw09_80-40_FF.bin" for write in Flash.
FullFlash file info:
FlashID: 002C/0016
SIEMENS A52 Sw09 lg1
RealLgPack: lg1
Start...
Loading BootsModel(A51)...
Sending StartBoot Ok.
Sending MainBoot Ok.
Com1 115200 BAUD: Ok.
Warning: HASH data error!
SIEMENS A52 lg1 Sw09
Soft FlashID: 002C/0016
FlashID: 002C/0016
Flash Size: 4Mb, WriteBuffer: 32 bytes
Region(1): Blocks 32, Size 128Kb
EEPROM segments not found!
FSN: C40FD54E -> PhoneID: 4ED50FC4
OTP IMEI: 353616008767580
HASH: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Error: EEP0067 not found!
Error: EEP0076 not found!
Error: EEP5005 not found!
Error: EEP5007 not found!
Error: EEP5008 not found!
Error: EEP5009 not found!
Error: EEP5012 not found!
Error: EEP5077 not found!
Error: EEP5093 not found!
Error: EEP5121 not found!
Error: EEP5122 not found!
Error: EEP5123 not found!
ClearFlashSeg at 0x820000 does not answer!
Open file "F:\FLASH FILES\SIEMENS FLASH PACKS\BACKUP_ JOKER\A52lg1Sw09_BCORE_060116152752.bin" for write in Flash.
Start...
Loading BootsModel(A51)...
Sending StartBoot Ok.
Sending MainBoot Ok.
Com1 115200 BAUD: Ok.
Warning: HASH data error!
SIEMENS A52 lg1 Sw09
Soft FlashID: 002C/0016
FlashID: 002C/0016
Flash Size: 4Mb, WriteBuffer: 32 bytes
Region(1): Blocks 32, Size 128Kb
EEPROM segments not found!
FSN: C40FD54E -> PhoneID: 4ED50FC4
OTP IMEI: 353616008767580
HASH: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
ClearFlashSeg at 0x800000 does not answer!
Open file "F:\FLASH FILES\SIEMENS FLASH PACKS\BACKUP_ JOKER\A52lg1Sw09_EEPROM_060116152839.bin" for write in Flash.
Start...
Loading BootsModel(A51)...
Sending StartBoot Ok.
Sending MainBoot Ok.
Com1 115200 BAUD: Ok.
Warning: HASH data error!
SIEMENS A52 lg1 Sw09
Soft FlashID: 002C/0016
FlashID: 002C/0016
Flash Size: 4Mb, WriteBuffer: 32 bytes
Region(1): Blocks 32, Size 128Kb
EEPROM segments not found!
FSN: C40FD54E -> PhoneID: 4ED50FC4
OTP IMEI: 353616008767580
HASH: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Error: EEP0067 not found!
Error: EEP0076 not found!
Error: EEP5005 not found!
Error: EEP5007 not found!
Error: EEP5008 not found!
Error: EEP5009 not found!
Error: EEP5012 not found!
Error: EEP5077 not found!
Error: EEP5093 not found!
Error: EEP5121 not found!
Error: EEP5122 not found!
Error: EEP5123 not found!
ClearFlashSeg at 0xBA0000 does not answer!
Open file "F:\FLASH FILES\SIEMENS FLASH PACKS\BACKUP_ JOKER\A52Vlg92Sw06_EEPROM_060222121626.bin" for write in Flash.
Not valid file size! (size=393216).
Open file "F:\FLASH FILES\SIEMENS FLASH PACKS\BACKUP_ JOKER\A52Vlg92Sw06_EEPROM_060222121626.bin" for write in Flash.
Not valid file size! (size=393216).
Open file "F:\FLASH FILES\Joker Own FF\A52lg1Sw09_80-40_FF.bin" for write in Flash.
FullFlash file info:
FlashID: 002C/0016
SIEMENS A52 Sw09 lg1
RealLgPack: lg1
Start...
Loading BootsModel(A51)...
Sending StartBoot Ok.
Sending MainBoot Ok.
Com1 115200 BAUD: Ok.
Warning: HASH data error!
SIEMENS A52 lg1 Sw09
Soft FlashID: 002C/0016
FlashID: 002C/0016
Flash Size: 4Mb, WriteBuffer: 32 bytes
Region(1): Blocks 32, Size 128Kb
EEPROM segments not found!
FSN: C40FD54E -> PhoneID: 4ED50FC4
OTP IMEI: 353616008767580
HASH: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Error: EEP0067 not found!
Error: EEP0076 not found!
Error: EEP5005 not found!
Error: EEP5007 not found!
Error: EEP5008 not found!
Error: EEP5009 not found!
Error: EEP5012 not found!
Error: EEP5077 not found!
Error: EEP5093 not found!
Error: EEP5121 not found!
Error: EEP5122 not found!
Error: EEP5123 not found!
ClearFlashSeg at 0x820000 does not answer!
(with the last sentence,the procedure just brake up with directcom)


With a serial cable:it accepts the same fubu and i write new Bootcore and unlock
oading BootsModel(A51)...
Sending StartBoot Ok.
Sending MainBoot Ok.
Com1 115200 BAUD: Ok.
Warning: HASH data error!
SIEMENS A52 lg1 Sw09
Soft FlashID: 002C/0016
FlashID: 002C/0016
Flash Size: 4Mb, WriteBuffer: 32 bytes
Region(1): Blocks 32, Size 128Kb
Start EEPROM segments at addres 0xBA0000
FSN: C40FD54E -> PhoneID: 4ED50FC4
OTP IMEI: 353616008767580
HASH: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Data file "F:\FLASH FILES\SIEMENS FLASH PACKS\BACKUP_ JOKER\A52lg1Sw09_BCORE_060116152752.bin".
Write Flash addr: 0x800000 size: 0x020000 - Ok.
Start...
Loading BootsModel(A51)...
Sending StartBoot Ok.
Sending MainBoot Ok.
Com1 115200 BAUD: Ok.
SIEMENS A52 lg1 Sw09
Soft FlashID: 002C/0016
FlashID: 002C/0016
Flash Size: 4Mb, WriteBuffer: 32 bytes
Region(1): Blocks 32, Size 128Kb
Start EEPROM segments at addres 0xBA0000
FSN: C40FD54E -> PhoneID: 4ED50FC4
OTP IMEI: 353616008767580
HASH: E49EFC89AEF6ED4F36D9BFDE2064CBBF
Use OTP IMEI: 353616008767580
USE SKEY: 12345678
*#0000*12345678# - Network Lock
*#0001*12345678# - Service Provider Lock
*#0002*12345678# - Corporate Code
*#0003*12345678# - Phone Code
*#0004*12345678# - Network Subset Lock
*#0005*12345678# - Only Sim
Read BCORE addr: 0x800000 size: 0x020000...
BCORE backup in ".\Backup\A52lg1Sw09_BCORE_080522034142.bin" file.
Write BCORE at addr: 0x800000...
Change BCORE HASH - Ok.
Read EEPROM addr: 0xBA0000 size: 0x060000...
EEPROM backup in ".\Backup\A52lg1Sw09_EEPROM_080522034228.bin" file.
Write EEPROM addr: 0xBA0000 size: 0x060000...
Change BOOTKEY - Ok.
Change EEP0076 - Ok.
Change EEP5009 - Ok.
Change EEP5077 - Ok.
Change EEP5121 - Ok.
Change EEP5122 - Ok.
Change EEP5123 - Ok.




Change your cable and enjoy.