J
jacob magembe
Guest
hello i tried to unlock siemens cx65 with papua via test point,but now it dont power on only beep.please can someone help me to revive it.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
D
dagos
Guest
...try to make the following steps:
-connect the service cable, open papuautils and go to the "Flash" menu. NOT PUSH TO POWER ON BUTTON NOW!!!
-check only "??????OTP", "Recalculate Keys" (all 4 options) and "Pause".
-make testpoint, click on "Do the Job!", push shortly power on button and see on the right windows from papua.
-disconnect testpoint (see message - you have three secconds...) and wait to finished. Be carrefully, in the unlocking process you have one pause with somme secconds between reading and writing eeprom blocks. Not disconnect!!!!
Maybe after this your HASH will be FFFFFFFFFFFFFF, not important. Appeare because SKEY is forced with 12345678 combination (tipically because you force unlocking with testpoint)....
dagos
-connect the service cable, open papuautils and go to the "Flash" menu. NOT PUSH TO POWER ON BUTTON NOW!!!
-check only "??????OTP", "Recalculate Keys" (all 4 options) and "Pause".
-make testpoint, click on "Do the Job!", push shortly power on button and see on the right windows from papua.
-disconnect testpoint (see message - you have three secconds...) and wait to finished. Be carrefully, in the unlocking process you have one pause with somme secconds between reading and writing eeprom blocks. Not disconnect!!!!
Maybe after this your HASH will be FFFFFFFFFFFFFF, not important. Appeare because SKEY is forced with 12345678 combination (tipically because you force unlocking with testpoint)....
dagos
J
jacob magembe
Guest
hello mr dagos i have tried as you say in the post but it still the same .see papua log
Boot not loaded!
Boot released.
Auto Ignition...
Transfer boot...
BOOT is loaded...
Pause 2 sec...
Getting Information...
Correctly release TestPoint!
Boot released.
Auto Ignition...
Transfer boot...
BOOT is loaded...
Pause 2 sec...
Getting Information...
Correctly release TestPoint!
Boot released.
Auto Ignition...
Transfer boot...
BOOT is loaded...
Pause 2 sec...
Getting Information...
FlashID: 0089,880D (32Mb)
BCORE Cleared!
OTP ESN: 572D9399
OTP IMEI: 353538009051964
Test data bus D0..D15...OK.
Test address bus A2..A22...OK.
Bcore R65 series found
Search of a segment EELITE...
Search of a segments EEFULL...
Find blocks: 52,76,5008,5009,5077,5121,5122,5123
In total EEP blocks: 233
EEPROM Blocks saved in .\Backup\572D9399_EEP_090105182937.eep
Boot released. Everything is closed.!
Calculation of keys...
Keys calculated successfully:
BootKEY: 0B41DA33DBC341B950BB1F9D0B5051A0
SKEY: 84211256
Checking values entered...
Calculate HASH and BootKEY from ESN and SKEY...
New HASH: D04494F3B25D30CDDD7276A4F1283279
New BootKEY:0B41DA33DBC341B950BB1F9D0B5051A0
Checking values entered...
Calculate HASH and BootKEY from ESN and SKEY...
New HASH: D04494F3B25D30CDDD7276A4F1283279
New BootKEY:0B41DA33DBC341B950BB1F9D0B5051A0
Checking values entered...
Calculate HASH and BootKEY from ESN and SKEY...
New HASH: D04494F3B25D30CDDD7276A4F1283279
New BootKEY:0B41DA33DBC341B950BB1F9D0B5051A0
Checking values entered...
Test "Service key" (SKEY)...
Sending SKEY/BKEY to the phone...
Phone was switched off on error:
EXIT: 0002:9ECC
FILE:
imei
CPSR: 60000030
CepId: FFFF
No answer from the phone
Check port number, cable, phone, mode!
Boot not loaded!
Boot released.
Auto Ignition...
Transfer boot...
BOOT is loaded...
Pause 2 sec...
Getting Information...
Correctly release TestPoint!
Boot released.
Auto Ignition...
Transfer boot...
BOOT is loaded...
Pause 2 sec...
Getting Information...
Correctly release TestPoint!
Boot released.
Auto Ignition...
Transfer boot...
BOOT is loaded...
Pause 2 sec...
Getting Information...
FlashID: 0089,880D (32Mb)
BCORE Cleared!
OTP ESN: 572D9399
OTP IMEI: 353538009051964
Test data bus D0..D15...OK.
Test address bus A2..A22...OK.
Bcore R65 series found
Search of a segment EELITE...
Search of a segments EEFULL...
Find blocks: 52,76,5008,5009,5077,5121,5122,5123
In total EEP blocks: 233
EEPROM Blocks saved in .\Backup\572D9399_EEP_090105182937.eep
Boot released. Everything is closed.!
Calculation of keys...
Keys calculated successfully:
BootKEY: 0B41DA33DBC341B950BB1F9D0B5051A0
SKEY: 84211256
Checking values entered...
Calculate HASH and BootKEY from ESN and SKEY...
New HASH: D04494F3B25D30CDDD7276A4F1283279
New BootKEY:0B41DA33DBC341B950BB1F9D0B5051A0
Checking values entered...
Calculate HASH and BootKEY from ESN and SKEY...
New HASH: D04494F3B25D30CDDD7276A4F1283279
New BootKEY:0B41DA33DBC341B950BB1F9D0B5051A0
Checking values entered...
Calculate HASH and BootKEY from ESN and SKEY...
New HASH: D04494F3B25D30CDDD7276A4F1283279
New BootKEY:0B41DA33DBC341B950BB1F9D0B5051A0
Checking values entered...
Test "Service key" (SKEY)...
Sending SKEY/BKEY to the phone...
Phone was switched off on error:
EXIT: 0002:9ECC
FILE:
imei
CPSR: 60000030
CepId: FFFF
No answer from the phone
Check port number, cable, phone, mode!
D
dagos
Guest
...tht is: Bootcore area damaged (you loose checket "clean bootcore" )
Remain to flash your phone using good fullflash (included bootcore area) or only bootcore part and unlock again using presented steps. To flash with bootcore, use MS-DOS command "x65flasher /b" . Use testpoint to connect with x65flasher software!
dagos
Remain to flash your phone using good fullflash (included bootcore area) or only bootcore part and unlock again using presented steps. To flash with bootcore, use MS-DOS command "x65flasher /b" . Use testpoint to connect with x65flasher software!
dagos
J
jacob magembe
Guest
please mr Dagos are there no other way to repair bootcore than using dos,it is hard to use dos comand.i have tried full flash but it still the same
D
dagos
Guest
...doesn't exist the other way to repair bootcore area...
D
dagos
Guest
Make the following steps (see to the bold characters):
-unrar X65flasher archive in the root of C drive or D drive.
-rename this folder with x65flasher name.
-if you use Windows XP, click on Start-> Run and type -> cmd
MS-DOS prompter will be opened. Type here the following commands:
C: (if you extract in the C drive root) or D: (if you extract in the D drive root).
Push on the "Enter" taste after.
cd x65flasher
Push on the "Enter" taste after.
x65flasher /b
Push on the "Enter" taste after.
Now is oppened the x65flasher window with the writing bootcore option enabled...
That is...
dagos
-unrar X65flasher archive in the root of C drive or D drive.
-rename this folder with x65flasher name.
-if you use Windows XP, click on Start-> Run and type -> cmd
MS-DOS prompter will be opened. Type here the following commands:
C: (if you extract in the C drive root) or D: (if you extract in the D drive root).
Push on the "Enter" taste after.
cd x65flasher
Push on the "Enter" taste after.
x65flasher /b
Push on the "Enter" taste after.
Now is oppened the x65flasher window with the writing bootcore option enabled...
That is...
dagos
J
jacob magembe
Guest
hello mr Dagos i have tried all the dos command but i failed ,try to folllow your instruction it doesnt open or detect x65flasher as internal or external comand.afterall aim not good dos plogram but being helped with other expert but x65flasher not opened.help
S
shagar
Guest
changed d runing CX-65 flasher & moved it.
D
dagos
Guest
...unzip rar file. After this run "x65flasher.exe" sfx file. Automatically is opened x65flasher window and now you have possibility to fullflash bootcore. If you will see in D drive, after running this executable, you have one new folder "x65flasher". Here save your config.ini file...
dagos
dagos