PDA

S75 Please Help, Can't get HASH & ESN S75 fw40





View Full Version: S75 Please Help, Can't get HASH & ESN S75 fw40


arzanulhaq
23.08.2006, 07:47
Hi all.
I got my S75. The product date is 2006-07-07 n the firmware is 40.
It's not locked for any GSM provider.

The problem is, I can't get the HASH & ESN key no matter what I do.

px75v1 give this code :
java.lang.IndexOutOfBoundsException: read area exceed buffer

New x65 midlet_Viper n X65-X75BootPass give this code:
java.lang.NoClassDefFoundError: com/siemens/mp/io/File

I try to downgrade to firmware 24, 31, 35, (condition On / OFF) but winsup give this message :
Software update denied by mobile

I try to flash with winsup firmware 40, it's succesfull.

My friend said, Siemens changed the bootcore so my S75 can't downgrade.

So, what can I do to get HASH & ESN?

No Test Point Please.

Thanx a lot.



foosoomin
23.08.2006, 08:02
i'm facing this problem too.

I have a S75, under S7C product type, A800 variant, FW, FFS & MAP on 20

i could not run the px75v1 midlet, which makes me not able to obtain the vkd file for patching.

Please advice what should i do !!!


It shows the following

java.lang.Exception: Incorrect installation

I really need help here.........too

BuG
23.08.2006, 09:51
So, what can I do to get HASH & ESN?

No Test Point Please.Nothing. Testpoint is the only way on a firmware greater than 24.

hilmi01
23.08.2006, 09:56
My friend said, Siemens changed the bootcore so my S75 can't downgrade.
Usually a downgrade is possible at least to the FW-version the phone had when it was produced. A complete change of the bootcore is not known until now.

The px75v1 works for FW-versions up to FW24 (look here (http://forum.modopo.com/showthread.php?t=11760)).

foosoomin
23.08.2006, 10:03
To : Bug & hilmi01,


Then, how do you explain on my S75 with FW20 ? (see my Post : #2)

hilmi01
23.08.2006, 10:10
Maybe S7C is the problem? :-k

foosoomin
23.08.2006, 10:18
Maybe S7C is the problem? :-k


I have tried to flash to S75 using Winswup 4.19, but i still face the same problem as threadstarter "Software denied by phone"


1) What should i do ?
2) Can you give me the tips for Test Point (without tearing the phone apart) ?

foosoomin
23.08.2006, 13:16
Guys,


On behalf & myself too, is there any other way we can calculate our HASH or ESN value ?

hilmi01
23.08.2006, 14:10
Unfortunately there is nothing more to say but:
Testpoint is the only way on a firmware greater than 24.

BuG
23.08.2006, 17:40
A complete change of the bootcore is not known until now.You can, but you need the keys first. :)

@foosoomin
Try S75 map and FFS, too. No other idea, this problem was also reported on older phones like the C75. Never found out the reason.

hilmi01
23.08.2006, 22:03
You can, but you need the keys first. :)
That's true, but he said: Siemens changed the bootcore so a downgrade is impossible. And that's not true, isn't it?

(isn't it => was für ein perfektes Schulenglisch :-D )

Fetz Braun
23.08.2006, 22:17
No, i can downgrade my S75 from FW40. Foosmin´s Problem is the Type S7C. So a FW for a S75 is denied by the mobile. He have to chance the naming with xflasher to S75, before he can downgrade ith a FW for S75. But to do this, he needs the key´s, and he can´t get it, because x75v1 does not run with his FW.

The only way is testpiont, but i didn´t know the complete howto yet. I still have this Picture (http://papuas.allsiemens.com/TP_S75.jpg).

hilmi01
23.08.2006, 22:31
Fetz, there's no need for him to downgrade: he still has FW20 (read this (http://forum.modopo.com/showpost.php?p=137313&postcount=2)).
The problem is, that px75v1 doesn't work on his S7[X]v20.

Or am I standing on the tube? :mrgreen:

Fetz Braun
23.08.2006, 22:50
The problem is, that px75v1 doesn't work on his S7[X]v20.
Yes, that´s the problem, and he want´s to use the patches for S75. So he has to flash to a S75 with a FW for S75.
Or am I standing on the tube? :mrgreen: Or I ?? :lol:

BuG
23.08.2006, 23:06
That's true, but he said: Siemens changed the bootcore so a downgrade is impossible. And that's not true, isn't it?Ah, misunderstood. :) Sure, that's not true.

foosoomin
24.08.2006, 03:56
@foosoomin
Try S75 map and FFS, too. No other idea, this problem was also reported on older phones like the C75. Never found out the reason.


Do you mean that i flash my S7C FFS & MAP to other Russian variant ?


Can you explain in more details please, will it help ?

arzanulhaq
27.08.2006, 14:19
Thx for helping me Guys.

So there is no other way but Test Point.

@ hilmi01, can you explain me bout the link here http://forum.modopo.com/showthread.php?t=11760

I cant understand the language.

hilmi01
27.08.2006, 16:36
@ hilmi01, can you explain me bout the link here http://forum.modopo.com/showthread.php?t=11760
I cant understand the language.
Better now? (http://translate.google.com/translate?u=http%3A%2F%2Fforum.modopo.com%2Fshowthread.php?t =11760&langpair=de%7Cen&hl=en&ie=UTF-8&oe=UTF-8&prev=%2Flanguage_tools) :-D


[edit]
Muahaha, was wird denn da aus Fetz und BuG: Fetz brown und Nose. :lolschil:

..und WAD-max :shock:

[WAD-max] "from vmaxy202 WAD-max became, otherwise changes nix" sollte ich übernehmen :lol:[/]

pip@
27.08.2006, 22:25
I solving same problem, I bought S75 with FW35 and I can't downgrade FW to 24. Russians give me suggestion:
http://forum.siemens-club.org/viewtopic.php?TopicID=61679
you must extract *.xbi from winswup with FW24 with smelter
you must apply file CRACK.HEX to *.xbi file with V_Klay
you must create winswup from *.xbi file with Papua utils...
with some S75 it is going, but with some S75 (like my S75) it doesn't go, and it write message "Device protected. Only secure update allowed".

Probably I will have to make testpoint, it isn't difficult, from x65 series needn't cutting motherboard, only connect two places with diode, so you don't lost guarantee.

foosoomin
24.09.2006, 08:57
Anyway,


I'm able to decode/unlock my S75 (S7C, A800), managed to obtain HASH & ESN value through px75v1 midlet


Fetz Braun, thank you for the TP recommendation, i don't need this method anymore

herry potter
27.09.2006, 12:19
Below is one idea offered by siemensmania.cz.
http://www.siemensmania.cz/content.php?id=828
The alternative is
http://www.s75.ic.cz/soubory/S75_v40_elfpack.exe

Hopefully you can get your HASH and ESN for S75_40.
PhoneID = ESN.
Please try...let us know what will be happened.

Regards,

Herry Potter

Fetz Braun
27.09.2006, 12:50
Yes, Büffel tried this. But it seems, Elfpack.exe can only be installed, when the phone is in the factory mode, that means: the Skey is still sended :-? Can it be? :-k

herry potter
28.09.2006, 03:18
You can try the following steps.
1. Apply WINSWUP S75_v40_elfpack.exe to handset in off condition and SKIP Pre-check & Post-check.
2. Switch on handset then extract file MMC.ZIP from http://avkiev.kiev.ua/Siemens/Patches/s75/mmc.zip and copy to handset MMC.
After that several directories will be found as follows :
4:/ZBin/daemons/
4:/ZBin/etc/
4:/ZBin/games/
4:/ZBin/playconv/
4:/ZBin/screensavers/
4:/ZBin/TED/
4:/ZBin/utilities/

3. Copy file "FFsaver.elf" to 4:/ZBin/utilities/ then start it from My Stuff or File system explorer.
* This application file (as the name) when started will make FUBU file (FF.bin) for the next step inquiry on MMC 64 MB.
After finish, copy to PC.

4. Open FF.bin has been created from step 2 with SMELTER v8.12
a. Select Tools -> Calculate -> PhoneID
* PhoneID = ESN
** This process may take long time (about 10 minutes)

b. Select Tools -> Calculate -> SKEY & BKEY, input IMEI then OK.

5. By using PapuaUtils v7.9, input IMEI, ESN, HASH, we get from step 3.
Then click "Calculate HASH + Bootkey from ESN & SKEY"
After success, then click "New VKD" and save to V_Klay/data/loaders (in order to connect between V_Klay and S75).


ALTERNATIVE for Point 1:
If point 1 can’t be appllied, try this step :
A. Extract file XBI from file winswup S75_v40_elfpack.exe using SMELTER v8.12 by select Tools -> Winswup -> "Extract XBI from service.exe" and save.
B. Start software Winswup v4.18 from ... and Open that XBI file.
- Select Option -> Update-Concept -> Force BSL, unsecured Mode
- Make sure handset is full charge & in OFF condition, set COM port where data cable plug in, skip precheck & postcheck
then click START. Push ignition button /red button softly to starting the process.
C. If you are success, continue to point 2 from main explanation above.

Have a nice trial!

Regards,

Herry Potter

BuG
28.09.2006, 10:58
As Fetz wrote above, it doesn't work without a sent SKEY. Be patient, there will be a new MIDlet for all newer phones in one or two weeks.

View Full Version: S75 Please Help, Can't get HASH & ESN S75 fw40