GSM-Forum

GSM-Forum (https://forum.gsmhosting.com/vbb/)
-   S-Gold Based Phones (https://forum.gsmhosting.com/vbb/f340/)
-   -   el71 imei patch (https://forum.gsmhosting.com/vbb/f340/el71-imei-patch-502764/)

ardagul 02-16-2008 10:26

el71 imei patch
 
2 Attachment(s)
:)I need to make el71 imei patch;

I have 2 one of V17 other V41 phones working with orj imei,here is the phones information:

Getting Information:
Model: SIEMENS EL71 17 lg1
Phone is in "Normal Mode". SecurityStatus: "FactoryMode"
IMEI: 358941001102865
HWID: 407
Attention: Charge Accumulator!
Accumulator Voltage: 3614 mV.
Code(05): OTP is Closed for write
Code(09): BootKEY is stored in EEPROM
Code(0D): Keys is stored in BCORE
Code(13): Full access to BFC functions
Code(15): Full mode (not SC)
Code(19): The control is On
Code(1D): 512x blocks presents
EELITE Info: free buffer 185952 bytes, free at all 206240 bytes, free for deleted 206240 bytes.
EEFULL Info: free buffer 192160 bytes, free at all 466432 bytes, free for deleted 204352 bytes.
MAP info: Date: 04/07/06, Variant: A 113, Std-Map/SW: 1/17, D-Map/Prov.: 118/64
Factory (OTP) IMEI: 358941001102865 - matches to flash data.
ESN: 86265044
HASH: EDD6AF52238706EF8876FAC5B5C241C4
BKEY in block 320 = 1C6E0BA24642907E267BF48A645F58D7
SKEY in 5122 = "X" 65143800
Minimum number of firmware: 17.
Bcore ID: 0300, version: main_1.0_V9".
Phone operated: 87579 sec.. Total Talk time: 3498 sec.
FlashID(1) - Manufact. code:0089 (Intel), type: 887E. DisplayID(1,65): Sharp Sharp LHH9168.



Getting Information:
Model: SIEMENS EL71 41 lg1
Phone is in "Normal Mode". SecurityStatus: "FactoryMode"
IMEI: 358941001097420
HWID: 407
Attention: Charge Accumulator!
Accumulator Voltage: 3457 mV.
Code(05): OTP is Closed for write
Code(09): BootKEY is stored in EEPROM
Code(0D): Keys is stored in BCORE
Code(13): Full access to BFC functions
Code(15): Full mode (not SC)
Code(19): The control is On
Code(1F): E71 or EL71sw41(Block 5468)
EELITE Info: free buffer 151200 bytes, free at all 206240 bytes, free for deleted 206240 bytes.
EEFULL Info: free buffer 196832 bytes, free at all 466272 bytes, free for deleted 204192 bytes.
MAP info: Date: 04/07/06, Variant: A 113, Std-Map/SW: 1/41, D-Map/Prov.: 200/245
Factory (OTP) IMEI: 358941001097420 - matches to flash data.
ESN: 7FB8BE51
HASH: A823B2FBFA363E63A7F06634C153CAEA
BKEY in 5468 = "X" 4ADC8650C3CCCFC2A350FBBCDA5D882B
SKEY in 5122 = "
Minimum number of firmware: 17.
Bcore ID: 0300, version: main_1.0_V9".
Phone operated: 2340670 sec.. Total Talk time: 2946 sec.
FlashID(1) - Manufact. code:0089 (Intel), type: 887E. DisplayID(1,65): Sharp Sharp LHH9168.

after patch only bızz:)

where is the wrong? here patch files :
first phone
1 A0D40000.bin orj
el71 1 v41.bin patched

second
2 A0D00000.bin orj
el71 2 v17.bin patched

I think patch is not good ,any help siemens masters pls

regards

dagos 02-16-2008 14:33

Quote:

Originally Posted by ardagul (Post 3092437)
:)I need to make el71 imei patch;

I have 2 one of V17 other V41 phones working with orj imei,here is the phones information:

Getting Information:
Model: SIEMENS EL71 17 lg1
Phone is in "Normal Mode". SecurityStatus: "FactoryMode"
IMEI: 358941001102865
HWID: 407
Attention: Charge Accumulator!
Accumulator Voltage: 3614 mV.
Code(05): OTP is Closed for write
Code(09): BootKEY is stored in EEPROM
Code(0D): Keys is stored in BCORE
Code(13): Full access to BFC functions
Code(15): Full mode (not SC)
Code(19): The control is On
Code(1D): 512x blocks presents
EELITE Info: free buffer 185952 bytes, free at all 206240 bytes, free for deleted 206240 bytes.
EEFULL Info: free buffer 192160 bytes, free at all 466432 bytes, free for deleted 204352 bytes.
MAP info: Date: 04/07/06, Variant: A 113, Std-Map/SW: 1/17, D-Map/Prov.: 118/64
Factory (OTP) IMEI: 358941001102865 - matches to flash data.
ESN: 86265044
HASH: EDD6AF52238706EF8876FAC5B5C241C4
BKEY in block 320 = 1C6E0BA24642907E267BF48A645F58D7
SKEY in 5122 = "X" 65143800
Minimum number of firmware: 17.
Bcore ID: 0300, version: main_1.0_V9".
Phone operated: 87579 sec.. Total Talk time: 3498 sec.
FlashID(1) - Manufact. code:0089 (Intel), type: 887E. DisplayID(1,65): Sharp Sharp LHH9168.



Getting Information:
Model: SIEMENS EL71 41 lg1
Phone is in "Normal Mode". SecurityStatus: "FactoryMode"
IMEI: 358941001097420
HWID: 407
Attention: Charge Accumulator!
Accumulator Voltage: 3457 mV.
Code(05): OTP is Closed for write
Code(09): BootKEY is stored in EEPROM
Code(0D): Keys is stored in BCORE
Code(13): Full access to BFC functions
Code(15): Full mode (not SC)
Code(19): The control is On
Code(1F): E71 or EL71sw41(Block 5468)
EELITE Info: free buffer 151200 bytes, free at all 206240 bytes, free for deleted 206240 bytes.
EEFULL Info: free buffer 196832 bytes, free at all 466272 bytes, free for deleted 204192 bytes.
MAP info: Date: 04/07/06, Variant: A 113, Std-Map/SW: 1/41, D-Map/Prov.: 200/245
Factory (OTP) IMEI: 358941001097420 - matches to flash data.
ESN: 7FB8BE51
HASH: A823B2FBFA363E63A7F06634C153CAEA
BKEY in 5468 = "X" 4ADC8650C3CCCFC2A350FBBCDA5D882B
SKEY in 5122 = "
Minimum number of firmware: 17.
Bcore ID: 0300, version: main_1.0_V9".
Phone operated: 2340670 sec.. Total Talk time: 2946 sec.
FlashID(1) - Manufact. code:0089 (Intel), type: 887E. DisplayID(1,65): Sharp Sharp LHH9168.

after patch only bızz:)

where is the wrong? here patch files :
first phone
1 A0D40000.bin orj
el71 1 v41.bin patched

second
2 A0D00000.bin orj
el71 2 v17.bin patched

I think patch is not good ,any help siemens masters pls

regards

...I'm sorry, but I don't understand. For what you need to patch your phones???
Which program you used to patch this phones? Used V_Klay???
To solve this situation (because I see on EL71 FW41 missing SKEY), use papuautils (v.111b) and recalculate SKEY and BKEY and write in the phone.
dagos

dagos 02-16-2008 14:48

....and bellow you have the calculated keys:
SIEMENS EL71 41 lg1
IMEI: 358941001102865
HASH: EDD6AF52238706EF8876FAC5B5C241C4
ESN: 86265044
BootKEY: 1C6E0BA24642907E267BF48A645F58D7
SKEY: 65143800

SIEMENS EL71 41 lg1
IMEI: 358941001097420
ESN: 7FB8BE51
HASH: A823B2FBFA363E63A7F06634C153CAEA
BootKEY: 4ADC8650C3CCCFC2A350FBBCDA5D882B
SKEY: 64417246

If don't working after write SKEY and BKEY in the phones, you need to fullflash your phones, use calculated keys and UNLOCK your phones.
dagos

ardagul 02-16-2008 15:08

Quote:

Originally Posted by dagos (Post 3092961)
...I'm sorry, but I don't understand. For what you need to patch your phones???
Which program you used to patch this phones? Used V_Klay???
To solve this situation (because I see on EL71 FW41 missing SKEY), use papuautils (v.111b) and recalculate SKEY and BKEY and write in the phone.
dagos

for imei chancing;

skey was calculated also for V41 ;SKEY: 64417246 was ok.

problem is after imei patch phone not work,because patch is not good I think.
I use for patch service software x65 ver1.1b

it works perfect with sl75 ,but el71 not .because after mapping phone not work.

only service mode works.and I check imei was chanced good but patch not ok because normal mode not work .only bızz:confused:

I can repair normal mode only with orj imei .I chanceback phone works normal with orj imei.

but I need to chance imei.

thanks your time,regards

ardagul 02-17-2008 23:50

any idea ? el71 is has more than 1 check imei in eeprom? or in bootloder must be writen again?

how can I patch this ?


siemens masters thanks your opinion (knowledge)


regards

LoveLess 07-08-2008 18:04

Quote:

Originally Posted by ardagul (Post 3096092)
any idea ? el71 is has more than 1 check imei in eeprom? or in bootloder must be writen again?

how can I patch this ?


siemens masters thanks your opinion (knowledge)


regards

hi sir...

did u solve ur pb..? will u change ur el71 imei..?

i have to change it... sw41...

ardagul 07-08-2008 18:30

no,not yet problem is in patch




regards

mishkah22 07-08-2008 20:58

can anyonwe help....plssss
need mastercode
imei 35207900-176679-7

mishkah22 07-08-2008 20:58

can anyonwe help....plssss
need mastercode
imei 35207900-176679-7
siemans sx1

dikey 07-08-2008 21:09

Quote:

Originally Posted by ardagul (Post 3463041)
no,not yet problem is in patch




regards

change flash - from sonyericcson - after that just flash and recalc phone :D

LoveLess 03-22-2012 21:06

hi all..

thread is old but we need it now.. :) or at least i need it.. i need advices about EL71...

as far as i see this device 2 types Flash ics. one of them is Intel ( 897E_897E ) and the other one is ST ( 2019_2019 ) and i think one of them is not supported with imei operation.. or we need CORRECT adress.. i have 3 x EL71 which has ST flash chip and 17sw... and not supported imei operation.. as the topic starter says phone is not power on after patch.. but main problem is otp area changes according to software.. i mean if i flash it with 06 sw only one adress ( Address= A0840000 Legth= 00040000 ) has OTP area.. if i flash it with 17 sw only one adress ( Address=A0D00000 Legth= 00040000 ) has OTP area.. and the first adress has not the OTP area.. and phone is not power on after these patch files..

anyone has correct adress for this device.? or where is the imei section on flash..? EEFULL or EELITE..?

EEFULL is on the A3F40000 and A3F80000 and
EELITE is on the A0040000

w.b.r.


All times are GMT +1. The time now is 01:22.


vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2024 DragonByte Technologies Ltd.
- GSM Hosting Ltd. - 1999-2023 -

Page generated in 0.16757 seconds with 6 queries

SEO by vBSEO