All about EL71 here and only here !

  • Thread starter Thread starter Abe
  • Start date Start date
search for viper-gsm midlet.
for java transfer use this application

anything else ask here anytime.
 
hi guys
i have el71 locked. i'm read with papuas x65papuautilsv111b_190 my phone and calculated skey. now i can't enter skey to my phone. entering test mode and can't enter to normal mode
help me
thanks a lot
 
i have 1 to flash, should I remove the circuit ? Any other solution to flash this phone. I also have martech.
 
Thanks.

Here is the error if I try with this .vkd.

http://www.boulogne92.com/lolo/Sans%20titre2.bmp
 
Here phone succesfully unlocked:

Code: 
Boot in "Normal mode"...
Press RED key (Power ON)!
Auto Ignition...
Transfer boot...
Boot in "Normal mode" Ok
Awaiting Power On phone...
Getting Information:
Model: SIEMENS EL71 41 lg1
Phone is in "Normal Mode". SecurityStatus: "CustomerMode"
IMEI: 358941001368656
HWID: 407
Accumulator Voltage: 4019 mV.
Calculation of keys...
Keys calculated successfully:
BootKEY: 19B20B34B6923EBAEEE6B1E6ADF2ABCE
SKEY: 59036038
Boot in "Service mode"...
Press RED key (Power ON)!
Auto Ignition...
Transfer boot...
Boot in "Service mode" Ok
Awaiting Power On phone...
Getting Information:
Model: SIEMENS EL71 41 lg1
Phone is in "Service Mode". SecurityStatus: "CustomerMode"
IMEI: 358941001368656
HWID: 407
Accumulator Voltage: 4081 mV.
Checking values entered...
Test "Service key" (SKEY)...
Sending SKEY/BKEY to the phone...
BootKEY it is entered, wait...
Pause 1 second(s)...
SecurityStatus: FactoryMode
BootKEY entered!
Getting Information:
Model: SIEMENS EL71 41 lg1
Phone is in "Service Mode". SecurityStatus: "FactoryMode"
IMEI: 358941001368656
HWID: 407
Accumulator Voltage: 4057 mV.
Full BFC mode
ESN: C3C1FC40
HASH: AD915C9485D5212714AF3628AB4A6E13
Reading block 5121...
OTP ESN: C3C1FC40
OTP IMEI: 358941001368656
Reading block 5121...
Calculate "Master codes".
*#0000*43187106# - Network Lock.
*#0001*00000000# - Service provider lock.
*#0002*00000000# - Personalization of services supplier.
*#0003*14139567# - Phone Code (Lock).
*#0004*00000000# - Network subset lock.
*#0005*00000000# - Only this SIM.
Calculation finished.
And witch cable?

- Tried with Siemens A31 serial cable -> phone doesn't boot.

- Dissasamble cable. Only 3 pins used: RX, TX and GND. Tried with these pins, soldered and connected to my RS232 circuit with MAX3232. -> But phone doesn't boot.

- Last try: These 3 pins, soldered and connected to a cable to my UFS. Use DirectCOM, for using UFS as a serial port. And phone now boots!

I have unlock with middlet bsReader and Papuas 1.1.1b
 
...I suggest to not change anything in Eeprom. Just change the MAP or fulflash your phone (without bootcore) and unlock it after.
Br,
dagos
 
Hi, Can anyone help me debrand EL71 phone on orange (shows ELF1 when i type in imei display code). Problem is, i read using x65flasher you can change ELF1 to EL71 and then the winswup will work and debrand but i cannot connect to x65flasher it just says turn off phone and then when i turn off and press red the phone starts up as normal and i keep going round in circles. I used papautils and sent skey to phone after getting codes from the java file and i can do other functions with it except get it in service mode for a new firmware! any help? i've read about testpoint but not sure how to do this.
 
sorry it's my mistake

forget the first loader, and use this one EL71(SKey).vkd

and choose phone model EL71 (Skey) instead of EL71 BootKey, Skey and ......:

it will be ok 100%%%%%%%%


next time save pic on jpg format instead of bmp


vite fait
 
Hi!
I have el71 with fw45.
I have dca-110 (serial) and dca-140 (usb) too.
In the last week, i have patched the phone with flashes and it was working good.
But now I find a new patch which I want to apply, but now the serial cabel don't working....
The AT commands are working with usb and via bluetooth. (ex: AT+CMGR=1), but with serial no.
If I send +++ the phone respons +++
send ATE0, phone sends ATE0.
Everything I send the phone via serial, it sends back, so I can not apply any patch, because PaupaSoft works neither.

What can be the problem, is serial port damaged in my phone, or just some settings was changed in the phone?
This forum is my last hope..
 
Yes it's ok solution for el71, but what about e71.
I tried to calculate skey with xflasher but my computer were on for a whole night calculating and nothing...
 
OK, let see.
If you have SKEY and BKEY from papuautils (using java midlet) not needed testpoint, just go to the Codes menu and click on x65flasher.ini button. Save config.ini file on the root of the X65flasher folder.
Open x65flasher executable file and select your IMEI. Now select com port, click on Connect button, push shortly the red button and your phone enter in Service Mode. Now you have posibility to flash or change the phone name in the bootcore area. If you flash your phone, you need after to unlock it again.
dagos
 
Still no luck with that unfortunately it still says turn phone off and hit red and keeps repeating this. i tried service mode in papautils and after loading skey this is what it said:

Checking values entered...
Test "Service key" (SKEY)...
Sending SKEY/BKEY to the phone...
SKEY it is entered, wait...
Pause 1 second(s)...
SecurityStatus: FactoryMode
SKEY entered!
Getting Information:
Model: SIEMENS ELF1 25 lg41
Phone is in "Normal Mode". SecurityStatus: "FactoryMode"
IMEI: 358941001637969
HWID: 407
Accumulator Voltage: 3741 mV.
Full BFC mode
ESN: A98A1D96
HASH: F930BD2BD820D161E9D9258D626C094E
Boot in "Service mode"...
Press RED key (Power ON)!
Auto Ignition...
Boot Not loaded!
Boot in Format FFS Mode or?"!

Is something missing in phone a boot?
 
hi guys
please tell me i can unlock el71 v24 with easy TP using papuas soft?
any one tell me papuas can unlock el71 v24 ????
thanksa lot
 
...seems somme fields to be corrupted (blank flash).
Remain only to fullflash your phone using one good fullflash and unlock it after using papuautils, but not in the normal way (enter in flash menu, check only Pause,??????OTP, Recalculate Keys - in Flash and click on Do the Job!). Flash normarly your phone (without bootcore area). Otherwise...you need to use the testpoint for unlock your phone.

dagos
 
Back
Top