Siemens A70/A75/AX75 unlocking (post only here!)

[dagos]

Yes,
cut the testpoint and unlock it.
dagos

 

[bello]

Big Thanks!
A70 v14 with joker 009 wrong software, but with 001 phone alive and unlock done.

 

[mrfixit]

"think" is not good enough, yes or no, for sure

 

[Chip_mg]

Yes, but use Joker 3.5.6. , this is good version!

 

[guedes666]

error open the file

can someone get a another link


full file plsss


thks

 

[354boyo]

i have ax75 with different pcb, it is not like TPoint cf110 or Tpoint a75.
where i cut TP on this board, i try to search forum i got nothing, anybody help me ?

 

[BCcommunication]

successfull unlock A70 version 14 with jocker v007
only cut write testpoint

 

[Chris02]

Maybe at nextBVers. manual enter S_Key will be possible?

I already have got the S_key for my SX1 (calculated with Martech) and I'm too lazy to open my phone again for testing

 

[aslamkotla]

hi a70 unlock pl......help me thanks

 

[BB-gsm]

@ 354boyo

Next time just search better !

TP AX7x


Regards,
B

 

[alexmam_80]

with joker and tp....................

 

[354boyo]

okey, thank u my friend, i try this night.....
best forum n best moderator

 

[ViperGSM]

Remove txt extension,then use total commander to combine files
WBR From Zemun

 

[systemworm]

Same same same enough??

 

[alexmam_80]

cut TP and press " ReCalc all keys"

 

[Chris02]

Here is another and better pic of the testpoint! Again from SST-GSM Team!

Also working with A70 (already test by myself)

 

[golumbu]

Hy

Here are some usefoull links:

Jocker Siemens Egold Phone 0.0.9

http://www.u n l o c k e a s y.com/modules.php?name=Downloads&d_op=viewdownloaddetails&lid=706&title=Joker%20Siemens%20EGold%20Phone%200.0.9

Siemens Test Point Station 1.0

http://www.u n l o c k e a s y.com/modules.php?name=Downloads&d_op=viewdownloaddetails&lid=705&title=Siemens%20TP%20Station%201.0

regards

 

[JIPC]

Cut test point
use JokerV0341
ReCalculate All Keys

You should see this:

Start...
Loading BootsModel(A75)...
Sending StartBoot Ok.
Sending MainBoot Ok.
SIEMENS A75 lg98 Sw20
Soft FlashID: 0001/220C
FlashID: 0001/227E-220C-2201
Flash Size: 8Mb, WriteBuffer: 32 bytes
Region(1): Blocks 128, Size 64Kb
Start EEPROM segments at addres 0xFC0000
FSN: EB07C7D6 -> PhoneID: D6C707EB
OTP IMEI: 356474006770603
HASH: F6B08C4919CAA5B53D925CBB1C0A4F02
Use OTP IMEI: 356474006770603
USE SKEY: 12345678
*#0000*12345678# - Network Lock
*#0001*12345678# - Service Provider Lock
*#0002*12345678# - Corporate Code
*#0003*12345678# - Phone Code
*#0004*12345678# - Network Subset Lock
*#0005*12345678# - Only Sim
Read BCORE addr: 0x800000 size: 0x010000...
BCORE backup in ".\Backup\A75lg98Sw20_BCORE_060302153516.bin" file.
Write BCORE at addr: 0x800000...
Change BCORE HASH - Ok.
Read EEPROM addr: 0xFC0000 size: 0x030000...
EEPROM backup in ".\Backup\A75lg98Sw20_EEPROM_060302153603.bin" file.
Write EEPROM addr: 0xFC0000 size: 0x030000...
Change BOOTKEY - Ok.
Change EEP0076 - Ok.
Change EEP5009 - Ok.
Change EEP5077 - Ok.
Change EEP5121 - Ok.
Change EEP5122 - Ok.
Change EEP5123 - Ok.

Unlocked Done

 

[Gsmserver]

pls download DBSS at www.dreambox.hk - you can find the TP picture for this phone in there

 

[sunnyc]

U r Right same with me v13 but problam aloved with 001 ..