求助HASH码怎么会是32个F

heynew

新买的E71,想打几个补丁,用bsReader.jar算出的HASH码怎么会是32个F,通过软件"x65PapuaUtilsV111b.exe"无法算出SKEY.
请高手指教我应该怎样操作?

jpg001

在本版搜索关键词 暴力破解、修复EEP、hash等，大概有很多文章讲这个了

大众甲壳虫

e71 没有不被暴力过的

xueyj

搭车问

手机可以正常使用，EL71  v41  orange版
通过bsread得到的HASH全是FFFF  和ESN
需要刷补丁，连不上
按http://mobile.0110.cn/viewthread ... page%3D2&page=2一楼的第一步，就显示不一样，缺少 factory(otp)  esn  hash  bkey  skey 等那几行
显示如下：
Getting Information:
Model: SIEMENS ELC1 41 lg8
Phone is in "Normal Mode". SecurityStatus: "CustomerMode"
IMEI: 358941005652436
HWID: 407
Accumulator Voltage: 3810 mV.
Code(04): OTP is Open for write
Code(0B): BootKEY is unknown. Block 320 is absent.
Code(0D): Keys is stored in BCORE
Code(10): BFC functions are inaccessible
Code(15): Full mode (not SC)
Code(19): The control is On
Code(1F): E71 or EL71sw41(Block 5468)
EELITE Info: free buffer 200128 bytes, free at all 206304 bytes, free for deleted 206304 bytes.
EEFULL Info: free buffer 162464 bytes, free at all 465920 bytes, free for deleted 203840 bytes.
MAP info: Date: 10/09/06, Variant: S 804, Std-Map/SW: 1/36, D-Map/Prov.: 178/41
To Get Extended Info - Enter Skey into the phone!
Phone operated: 2728002 sec.. Total Talk time: 19613 sec.
FlashID(1) - Manufact. code:0089 (Intel), type: 887E. DisplayID(1,65): Sharp Sharp LHH9168.

执行第二步
显示
Auto Ignition...
Transfer boot...
Boot not loaded!
Invalid BootKEY or not properly joined TP!!
Boot released.
后面的步骤也无法执行

问题出在哪里
能进 service mode
用format  ffs 的BCORE  也不行
显示 Do not work on 85 series!

怎么回事