el71 imei patch - GSM-Forum

ardagul · 02-16-2008, 10:26

I need to make el71 imei patch;

I have 2 one of V17 other V41 phones working with orj imei,here is the phones information:

Getting Information:
Model: SIEMENS EL71 17 lg1
Phone is in "Normal Mode". SecurityStatus: "FactoryMode"
IMEI: 358941001102865
HWID: 407
Attention: Charge Accumulator!
Accumulator Voltage: 3614 mV.
Code(05): OTP is Closed for write
Code(09): BootKEY is stored in EEPROM
Code(0D): Keys is stored in BCORE
Code(13): Full access to BFC functions
Code(15): Full mode (not SC)
Code(19): The control is On
Code(1D): 512x blocks presents
EELITE Info: free buffer 185952 bytes, free at all 206240 bytes, free for deleted 206240 bytes.
EEFULL Info: free buffer 192160 bytes, free at all 466432 bytes, free for deleted 204352 bytes.
MAP info: Date: 04/07/06, Variant: A 113, Std-Map/SW: 1/17, D-Map/Prov.: 118/64
Factory (OTP) IMEI: 358941001102865 - matches to flash data.
ESN: 86265044
HASH: EDD6AF52238706EF8876FAC5B5C241C4
BKEY in block 320 = 1C6E0BA24642907E267BF48A645F58D7
SKEY in 5122 = "X" 65143800
Minimum number of firmware: 17.
Bcore ID: 0300, version: main_1.0_V9".
Phone operated: 87579 sec.. Total Talk time: 3498 sec.
FlashID(1) - Manufact. code:0089 (Intel), type: 887E. DisplayID(1,65): Sharp Sharp LHH9168.

Getting Information:
Model: SIEMENS EL71 41 lg1
Phone is in "Normal Mode". SecurityStatus: "FactoryMode"
IMEI: 358941001097420
HWID: 407
Attention: Charge Accumulator!
Accumulator Voltage: 3457 mV.
Code(05): OTP is Closed for write
Code(09): BootKEY is stored in EEPROM
Code(0D): Keys is stored in BCORE
Code(13): Full access to BFC functions
Code(15): Full mode (not SC)
Code(19): The control is On
Code(1F): E71 or EL71sw41(Block 5468)
EELITE Info: free buffer 151200 bytes, free at all 206240 bytes, free for deleted 206240 bytes.
EEFULL Info: free buffer 196832 bytes, free at all 466272 bytes, free for deleted 204192 bytes.
MAP info: Date: 04/07/06, Variant: A 113, Std-Map/SW: 1/41, D-Map/Prov.: 200/245
Factory (OTP) IMEI: 358941001097420 - matches to flash data.
ESN: 7FB8BE51
HASH: A823B2FBFA363E63A7F06634C153CAEA
BKEY in 5468 = "X" 4ADC8650C3CCCFC2A350FBBCDA5D882B
SKEY in 5122 = "
Minimum number of firmware: 17.
Bcore ID: 0300, version: main_1.0_V9".
Phone operated: 2340670 sec.. Total Talk time: 2946 sec.
FlashID(1) - Manufact. code:0089 (Intel), type: 887E. DisplayID(1,65): Sharp Sharp LHH9168.

after patch only bızz

where is the wrong? here patch files :
first phone
1 A0D40000.bin orj
el71 1 v41.bin patched

second
2 A0D00000.bin orj
el71 2 v17.bin patched

I think patch is not good ,any help siemens masters pls

regards

dagos · 02-16-2008, 14:33

Quote:

Originally Posted by ardagul

I need to make el71 imei patch;

I have 2 one of V17 other V41 phones working with orj imei,here is the phones information:

Getting Information:
Model: SIEMENS EL71 17 lg1
Phone is in "Normal Mode". SecurityStatus: "FactoryMode"
IMEI: 358941001102865
HWID: 407
Attention: Charge Accumulator!
Accumulator Voltage: 3614 mV.
Code(05): OTP is Closed for write
Code(09): BootKEY is stored in EEPROM
Code(0D): Keys is stored in BCORE
Code(13): Full access to BFC functions
Code(15): Full mode (not SC)
Code(19): The control is On
Code(1D): 512x blocks presents
EELITE Info: free buffer 185952 bytes, free at all 206240 bytes, free for deleted 206240 bytes.
EEFULL Info: free buffer 192160 bytes, free at all 466432 bytes, free for deleted 204352 bytes.
MAP info: Date: 04/07/06, Variant: A 113, Std-Map/SW: 1/17, D-Map/Prov.: 118/64
Factory (OTP) IMEI: 358941001102865 - matches to flash data.
ESN: 86265044
HASH: EDD6AF52238706EF8876FAC5B5C241C4
BKEY in block 320 = 1C6E0BA24642907E267BF48A645F58D7
SKEY in 5122 = "X" 65143800
Minimum number of firmware: 17.
Bcore ID: 0300, version: main_1.0_V9".
Phone operated: 87579 sec.. Total Talk time: 3498 sec.
FlashID(1) - Manufact. code:0089 (Intel), type: 887E. DisplayID(1,65): Sharp Sharp LHH9168.

Getting Information:
Model: SIEMENS EL71 41 lg1
Phone is in "Normal Mode". SecurityStatus: "FactoryMode"
IMEI: 358941001097420
HWID: 407
Attention: Charge Accumulator!
Accumulator Voltage: 3457 mV.
Code(05): OTP is Closed for write
Code(09): BootKEY is stored in EEPROM
Code(0D): Keys is stored in BCORE
Code(13): Full access to BFC functions
Code(15): Full mode (not SC)
Code(19): The control is On
Code(1F): E71 or EL71sw41(Block 5468)
EELITE Info: free buffer 151200 bytes, free at all 206240 bytes, free for deleted 206240 bytes.
EEFULL Info: free buffer 196832 bytes, free at all 466272 bytes, free for deleted 204192 bytes.
MAP info: Date: 04/07/06, Variant: A 113, Std-Map/SW: 1/41, D-Map/Prov.: 200/245
Factory (OTP) IMEI: 358941001097420 - matches to flash data.
ESN: 7FB8BE51
HASH: A823B2FBFA363E63A7F06634C153CAEA
BKEY in 5468 = "X" 4ADC8650C3CCCFC2A350FBBCDA5D882B
SKEY in 5122 = "
Minimum number of firmware: 17.
Bcore ID: 0300, version: main_1.0_V9".
Phone operated: 2340670 sec.. Total Talk time: 2946 sec.
FlashID(1) - Manufact. code:0089 (Intel), type: 887E. DisplayID(1,65): Sharp Sharp LHH9168.

after patch only bızz

where is the wrong? here patch files :
first phone
1 A0D40000.bin orj
el71 1 v41.bin patched

second
2 A0D00000.bin orj
el71 2 v17.bin patched

I think patch is not good ,any help siemens masters pls

regards

...I'm sorry, but I don't understand. For what you need to patch your phones???
Which program you used to patch this phones? Used V_Klay???
To solve this situation (because I see on EL71 FW41 missing SKEY), use papuautils (v.111b) and recalculate SKEY and BKEY and write in the phone.
dagos

dagos · 02-16-2008, 14:48

....and bellow you have the calculated keys:
SIEMENS EL71 41 lg1
IMEI: 358941001102865
HASH: EDD6AF52238706EF8876FAC5B5C241C4
ESN: 86265044
BootKEY: 1C6E0BA24642907E267BF48A645F58D7
SKEY: 65143800

SIEMENS EL71 41 lg1
IMEI: 358941001097420
ESN: 7FB8BE51
HASH: A823B2FBFA363E63A7F06634C153CAEA
BootKEY: 4ADC8650C3CCCFC2A350FBBCDA5D882B
SKEY: 64417246

If don't working after write SKEY and BKEY in the phones, you need to fullflash your phones, use calculated keys and UNLOCK your phones.
dagos

ardagul · 02-16-2008, 15:08

Quote:

Originally Posted by dagos

...I'm sorry, but I don't understand. For what you need to patch your phones???
Which program you used to patch this phones? Used V_Klay???
To solve this situation (because I see on EL71 FW41 missing SKEY), use papuautils (v.111b) and recalculate SKEY and BKEY and write in the phone.
dagos

for imei chancing;

skey was calculated also for V41 ;SKEY: 64417246 was ok.

problem is after imei patch phone not work,because patch is not good I think.
I use for patch service software x65 ver1.1b

it works perfect with sl75 ,but el71 not .because after mapping phone not work.

only service mode works.and I check imei was chanced good but patch not ok because normal mode not work .only bızz

I can repair normal mode only with orj imei .I chanceback phone works normal with orj imei.

but I need to chance imei.

thanks your time,regards

ardagul · 02-17-2008, 23:50

any idea ? el71 is has more than 1 check imei in eeprom? or in bootloder must be writen again?

how can I patch this ?

siemens masters thanks your opinion (knowledge)

regards

LoveLess · 07-08-2008, 18:04

Quote:

Originally Posted by ardagul

any idea ? el71 is has more than 1 check imei in eeprom? or in bootloder must be writen again?

how can I patch this ?

siemens masters thanks your opinion (knowledge)

regards

hi sir...

did u solve ur pb..? will u change ur el71 imei..?

i have to change it... sw41...

ardagul · 07-08-2008, 18:30

no,not yet problem is in patch

regards

mishkah22 · 07-08-2008, 20:58

can anyonwe help....plssss
need mastercode
imei 35207900-176679-7

mishkah22 · 07-08-2008, 20:58

can anyonwe help....plssss
need mastercode
imei 35207900-176679-7
siemans sx1

dikey · 07-08-2008, 21:09

Quote:

Originally Posted by ardagul

no,not yet problem is in patch

regards

change flash - from sonyericcson - after that just flash and recalc phone

LoveLess · 03-22-2012, 21:06

hi all..

thread is old but we need it now..

or at least i need it.. i need advices about EL71...

as far as i see this device 2 types Flash ics. one of them is Intel ( 897E_897E ) and the other one is ST ( 2019_2019 ) and i think one of them is not supported with imei operation.. or we need CORRECT adress.. i have 3 x EL71 which has ST flash chip and 17sw... and not supported imei operation.. as the topic starter says phone is not power on after patch.. but main problem is otp area changes according to software.. i mean if i flash it with 06 sw only one adress ( Address= A0840000 Legth= 00040000 ) has OTP area.. if i flash it with 17 sw only one adress ( Address=A0D00000 Legth= 00040000 ) has OTP area.. and the first adress has not the OTP area.. and phone is not power on after these patch files..

anyone has correct adress for this device.? or where is the imei section on flash..? EEFULL or EELITE..?

EEFULL is on the A3F40000 and A3F80000 and
EELITE is on the A0040000

w.b.r.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
how to EL71 imei change	turkcellgsm	x6x and x7x Flashpatching	2	11-02-2008 09:22
new siemens el71 otp patch area adress	turkgsmteam	S-Gold Based Phones	5	11-03-2007 11:47
deleted thread on dct4 imei patch flash for imei change - where is it	dluik	Nokia Digital Core Technology 4 ( DCT-4 )	31	11-21-2004 21:47

02-16-2008, 14:48	#3 (permalink)
dagos No Life Poster Join Date: Dec 2006 Posts: 2,424 Member: 416908 Status: Offline Thanks Meter: 398	....and bellow you have the calculated keys: SIEMENS EL71 41 lg1 IMEI: 358941001102865 HASH: EDD6AF52238706EF8876FAC5B5C241C4 ESN: 86265044 BootKEY: 1C6E0BA24642907E267BF48A645F58D7 SKEY: 65143800 SIEMENS EL71 41 lg1 IMEI: 358941001097420 ESN: 7FB8BE51 HASH: A823B2FBFA363E63A7F06634C153CAEA BootKEY: 4ADC8650C3CCCFC2A350FBBCDA5D882B SKEY: 64417246 If don't working after write SKEY and BKEY in the phones, you need to fullflash your phones, use calculated keys and UNLOCK your phones. dagos

02-17-2008, 23:50	#5 (permalink)
ardagul No Life Poster Join Date: Nov 2001 Location: türkiye Age: 59 Posts: 1,814 Member: 7114 Status: Offline Thanks Meter: 51	any idea ? el71 is has more than 1 check imei in eeprom? or in bootloder must be writen again? how can I patch this ? siemens masters thanks your opinion (knowledge) regards

07-08-2008, 18:30	#7 (permalink)
ardagul No Life Poster Join Date: Nov 2001 Location: türkiye Age: 59 Posts: 1,814 Member: 7114 Status: Offline Thanks Meter: 51	no,not yet problem is in patch regards

07-08-2008, 20:58	#8 (permalink)
mishkah22 Junior Member Join Date: Jul 2008 Posts: 2 Member: 809931 Status: Offline Thanks Meter: 0	can anyonwe help....plssss need mastercode imei 35207900-176679-7

07-08-2008, 20:58	#9 (permalink)
mishkah22 Junior Member Join Date: Jul 2008 Posts: 2 Member: 809931 Status: Offline Thanks Meter: 0	can anyonwe help....plssss need mastercode imei 35207900-176679-7 siemans sx1

03-22-2012, 21:06	#11 (permalink)
LoveLess No Life Poster Join Date: May 2005 Age: 40 Posts: 9,816 Member: 146708 Status: Offline Sonork: 100.108221 Thanks Meter: 1,603	hi all.. thread is old but we need it now.. or at least i need it.. i need advices about EL71... as far as i see this device 2 types Flash ics. one of them is Intel ( 897E_897E ) and the other one is ST ( 2019_2019 ) and i think one of them is not supported with imei operation.. or we need CORRECT adress.. i have 3 x EL71 which has ST flash chip and 17sw... and not supported imei operation.. as the topic starter says phone is not power on after patch.. but main problem is otp area changes according to software.. i mean if i flash it with 06 sw only one adress ( Address= A0840000 Legth= 00040000 ) has OTP area.. if i flash it with 17 sw only one adress ( Address=A0D00000 Legth= 00040000 ) has OTP area.. and the first adress has not the OTP area.. and phone is not power on after these patch files.. anyone has correct adress for this device.? or where is the imei section on flash..? EEFULL or EELITE..? EEFULL is on the A3F40000 and A3F80000 and EELITE is on the A0040000 w.b.r.