All about papua here-->newest versions-->questions

[Byte]

to all :

can i revive my dead cx70 v 16 killed by cracked sst using papus utility ...?

 

[Frank White]

C81 is Supported since v 0.8.1 by Gehstock older versions are from Papuas

 

[xcom]

I unlock C75 sw.11 and cx70 sw.43 with this method:
1. connect tp (c65 tp) and run x65PapuaUtilsV051_DE
with ''ersetze blocke 76,5008,5009,5077'' and ''pause'' checked
and start - pause 2 sec discconect tp - SKEY+BKEY - HASH+BKEY - power on
phone - send SKEY and phone unlocked
without use siemens eeprom tool and freia log and map.

 

[_caine]

2dspmobile
There are new troubles discovered, now regarding keys recalculation on "g" version (maybe earlier). Originally posted here

 Getting Information...
FlashID: 0001,227E (32Mb) ...(amd)
C75 SIEMENS 35627xxxxxxxxx
HASH: 8F812BE1C6425936AEEDE91Dxxxxxx
OTP ESN: A694xxxx
OTP IMEI: 35627xxxxxxxxxx
Test data bus D0..D15...OK.
Test address bus A2..A22...OK.
Total EEP blocks: 234
Blocks 52,76,5008,5009,5077,5121,5122,5123 found.
Block 5009 does not require replacement!
Old block 5008 saved in C75_35627xxxxxxxxxxx_EEP_060606092428_5008
Error code to command Write segment 00003FDF!
Impossible to replace block 5008!
Replacement unsuccessful - inspect phone!

Similar problems on S75 with intel flash (if it could be actual).

 

[macoveii]

this is a tutorial,for me was a big help

 

[jamsou]

Please help me
i need pinout data cable C75
tancks

 

[Afzaal]

Brother its Dutch Version When English translated will be available ?
thanks for excellent work.
Best Regards.
HAPPAY NEW YEAR.

 

[Frank White]

Only Testversion Please make Bugreport the Programmer have no Testdevices

-Spansion Flash added
-read 64mb Fubu
-Write Eeprom
-Capturing Function Test (not Stable working)

 

[dspmobile]

You sould be also aware that "SL75 in not fully tested" as Papuas web site says...

Could be that the original BootCore was a greater version that the one with "New BCore" is flashed ?

 

[dspmobile]

A fully translated to English version of "x65PapuaUtils075" can be found here :

http://forum.gsmhosting.com/vbb/showpost.php?p=1563952&postcount=10

 

[jesusangel]

There is an V0.5.1 with messages in log window translated too but, of course, is older.

Search, I've donwloaded from here.

Regards

 

[Afzaal]

oh yes its supported in latest one.
But if u check 7.9g thats also stated x85 so why it was missin C81.
BR

 

[xcom]

also I repaired with this method one cx70 sw.43 dead after upload map with siemens eeprom tool from freia map (phone only beep).

 

[dspmobile]

There was some issue regarding "New BCORE ...." option in page 'Flash' for some of the newer R65 like ME75 or C72 !

These models had a BootCore of type 02 ( Byte 0x200=02 ) where all other R65 models have BootCore of type 00 ( Byte 0x200=00 ). The program used a V22 bootcore of older type 00 for all R65 anyway...

Normally X75 (S75/SL75) have a bootcore of type 02, but Not used for R65, which might be different from that of ME75/C72...

So in order to be safe, I have included a clean V26 BootCore of an ME75, which will be used in any case that we have a newer R65 with bootcore type 02 and we have chosed Option "New BCORE ..." in page 'Flash' !

It is here : ( 079f updated version of x65PapuaUtils )
http://briefcase.pathfinder.gr/download/529080

.

 

[hacktek]

Thanks dspmobile!
I think my phone is one with this new type of bootcore.

I flashed it with x65flasher with a FullFlash; After that, I Tryed FREEZE method described in NewBoot.exe;
This is what x65PapuaUtilsV079e gives me:

Auto Ignition...
Transfer boot...
BOOT is loaded...
Pause 2 sec...
Getting Information...
FlashID: 0089,880D (64Mb) ...(Intel)
BCORE clean!
OTP ESN: 6228C2E2
OTP IMEI: 356702001618074
Write BCORE version: "main_1.0_V7"
BCORE enable...
New BCORE is written.
Do not forget to Freeze!
Boot released. Everything is closed.

after that, entered in service mode, and send Skey, it says:
Boot in "Service mode"...
Press RED key (Power ON)!
Auto Ignition...
Attention: For the new "S"75 work is done in Beta mode!
Transfer boot...
Boot in "Service mode" Ok
Awaiting Power On phone...
Getting Information:
Model: SIEMENS S75 23 lg4
Phone is in "Format FFS?" mode
IMEI: 356702001618074
SecurityStatus: FactoryMode
HWID: 400
Bcore model area is clean !!!
Accumulator Voltage: 4071 mV.
Accumulator Voltage: 4062 mV.
Checking values entered...
Test "Service key" (SKEY)...
Sending "Service key"(SKEY) to the phone...
SKEY entered!
Pause 1 second(s)...
SecurityStatus: FactoryMode

and that is happening when I try to freeze after I read the IMEI from phone:
SecurityStatus: FactoryMode
Getting Information:
Model: SIEMENS S75 23 lg4
Phone is in "Service Mode" mode
IMEI: 356702001618074
SecurityStatus: FactoryMode
HWID: 400
Bcore model area is clean !!!
Accumulator Voltage: 4029 mV.
Checking values entered and necessary blocks...
IMEI: 356702001618074
Impossible to get Security information!

I converted a FullFlash in UserSwup with Papuas, as described in AllBugSGold.exe; I flashed the phone with this UserSwup, then wroted a good FFS, then use the FFS format from x65flasher;
Now phone is alive again but still can't use FREEZE !
I will try with this method described by U!

 

[dspmobile]

But you can find sources at Papuas site :
http://papuas.allsiemens.com/PapuaUtils.htm

Thanks to his generosity to provide source code, an English translation could be made !....

 

[EL_DIABLO]

Do you have english version of this nice software?





B.r

 

[systemworm]

Posted many times use search button

 

[systemworm]

U can also unlock your phone without diassembling it

 

[paullovinicius]

yeah, it's the famous "10 sec midlet" or other name... but it's not px75v2...
like px75v1, it not work with newest phones...