[8125, K-JAM, P4300, MDA Vario Software Upgrading] mestrini:
DATA CRASHES PROJECT:

If you have a G3 device in "Data Crashes" state check the CID collection to find the matching file to flash. Read bellow for the complete explanation about the theory and the procedure.

Theory:

Basis:

It's a known fact that the Wizard (and maybe Prophet) uses a DES encryption key from a list of 100 possible keys to decrypt the info of a CID block which is then verified by the cprog.exe utility. The 'key index' (list position) is calculated using the values from the DOC chip uniqueid which is a permanent value and the CID block must have been encrypted with same key otherwise the phone will never get to understand it and go in "Data Crashes" mode.

Theory:

There are two possibilities to get the "Data Crashes":

1- Corrupted CID block with invalid checksum;

2- Good CID block encrypted with different key index other than the one generated by the DOC chip uniqueid.

In scenario 2 if one is able to flash a good CID block encrypted with the correct key index then the problem will go away.

Purpose:

Since i've tested myself that it's possible to flash another phone's CID block with same key index and have phone work normally i purpose to make a collection of 100 good SuperCID blocks to cover all the 100 DES keys.

Even though only G3 devices downgraded to SPL 1.x allow to flash the CID block i won't discourage G4 members to contribute their CID blocks as they can be used in G3 devices (tested myself)

So i ask you to please contribute with dumps (unlocked or not) from the CID block of your devices.

In case you don't know how to provide what i'm looking for this is how to:

HOW TO SHARE:

1- Make the dump:

Get Wizard Service Tool (LINK) and use the "Read ROM" button to read the CID block (see pic below)

or... get itsme's pdocread.exe and make the dump with: pdocread.exe -n 1 0 0x10000 [filename.bin] using windows 'DOS' console (command)

2- Read the key index: (optional)

Use Wizard Service Tool and read "Device Info" to check the key index of your phone and post it along with the dump.

3- Share it:

Removed the email address as i no longer have time to assist this project (sorry)

You can still leave the file here as i get mail notifications but...

NOTE: For all those that have used lokiwiz you might have the file already since lokiwiz makes a backup and also creates new (unlocked) file to flash to the phone. It's the one of the *.bin files.

For all those afraid of sharing the file i assure you that there's no danger since i can mask the CID IMEI present in the dump so that it shows all FF's and your anonymity is guaranteed :D

HOW TO FLASH:

1- Get the CID file corresponding to your wizard's key index:

Use Wizard Service Tool and read "Device Info" to check the key index of your phone and, if you're lucky, get it from the collection in post bellow

2- Upload CID file with Wizard Service Tool:

Select "Write ROM" button and then "CID block (bdk 1)" to flash the file already in your hard-drive (SPL must be 1.xx !!!!)

3- Soft-reset the phone:

final step either via WST button or wizards side hole

mestrini

The theory has been confirmed! :D

2007/07/04 - emiconi recovered his wizard for FREE by flashing the apropriate CID block (http://xdaforums.com/showpost.php?p=1348533&postcount=41 )

2007/10/18 - Another one bytes the dust. Kheops_974 fixed his phone after 3!! months of waiting for key #1

(http://xdaforums.com/showpost.php?p=1594845&postcount=186)

2007/11/01 - And one more for the fixing count (http://xdaforums.com/showpost.php?p=1630368&postcount=203) hehe

2007/11/28 - Once again a phone comes back to life after a LONG time of inactivity (http://xdaforums.com/showpost.php?p=1697325&postcount=226)

2008/09/25 - Another success story (http://xdaforums.com/showpost.php?p=2689813&postcount=303)