Unlock and repair x65 v41 series 100% tested

  • Thread starter Thread starter s4sajii
  • Start date Start date
no need to fullflash, read thread... but you can full flash it too, for repair or for unlock if you cant by patching eep

b.r.
 
Hi!

I got a Siemens S65 too, with the original Firmware v.43

I don't understand everything about this.
is it possible with this description to read the bootpassword from the mobile, so it's possible for me to patch it / edit the software?

Merlin

p.s.
SJS, your from Austria? Speaking german?
Ich komme aus Deutschland, w
 
The new version of papuaUtils 0.46 works with chip AMD

it does not need to register itself
 
You see now man that woz my problem to.
But can you write here how did you fix the phone.?
 
you do not need to downgrade soft!
after step 4, on first tab papua start service mode, you will saw service mode started, secuity status "Customer mode", then use send skey buton , and phone will open security status "Factory mode", (wich meen that ful eprom is opened) then save freia log, calculate map, run epprom tools upload map! procedure over!
if phone don't open security status "Factory mode", that meen that in phone is not original epprom block 5122, and you need to patch flash to open eeful!!!!!
 
...That is the best news for long time off go. Is that true? If is true, I must pay You a lunch>good by Martech, good by SST
Cheers
@Kriza
What are You say? You gona trash the phone or You now gona fix the phone?
PAPUA TEAM YOU'R THE BEST!!!!!
 
AutoIgnition...
Transmit Boot...
Boot loaded ...
Pause 2 sec...
Retrieve information...
FlashID: 0089,880D
SIEMENS S65 353912003743951
HASH: FC6D063F9B677A2B49ACAB0E5C6AF04C
OTP ESN: DA1C22A0
OTP IMEI: 353912003743951
Boot unlock .
Calculate KEYS..
Keys calculated good :
BOOTKEY: F4FDCDFD8810EEE7D8EB64AFC8BA9131
SKEY: 1
Checking entry values.....
Recalculate HASH&BKey from ESN & SKey
New HASH: FC6D063F9B677A2B49ACAB0E5C6AF04C
New BOOTKEY: F4FDCDFD8810EEE7D8EB64AFC8BA9131
Iieo
 
because you need to be regestred for amd flash tipe,
but for now I thing that is not for "free"
 
@kriza
with calculated boot key you can boot phone via x65 flasher, then download part of flash where is the epp protection, patch that part, write patched part to phone and epp will be ful opened and ready to upload created map!
 
have you disconnected test point when start reading? please try and try some times...

I think it doesn't work on x70 but we have to be sure

regards

thecult
 
The purpose of this forum is to advice .
My advice for people that unlock and want to unlock only one phone is to go to the service centre and spend about 5-10
 
OK today tested S65 v41 new boot

tested new DIODE TESTPOINT (on link on first post of this thread), I have tested it WITHOUTH diode, simply shortcircuit those points, used autoignition cable

s65 v41 100% unlocked 15 mins by optimized eeprom method

and tested repairing on s65 by vklay papuas method

all working fine, fully service and unlockeable...

enjoy
 
...ask You for help.
Today I have two CX70 sw41 to unlock(it's not my first one, for now I do it about 50 pc's using the same method like You). Fully charged baterry, TP, PapuaUtilits0.45a(I have all off it), EepromTools3.15 by SkyLord....
The first one is done without any problems(like allways), but the second one at first time I try to write MAP using EepromTool says some error on field5008. I'm abort operation, go again to Papua to check is Factory mode activated-YES. Again EepromTool, write selected(notALL), everithing go just fine, but....phone just "bip". I can conect hem on V_Klay, EepromTool(service mode) but Papua shows Customer mode and can't switch to Factory mode. FlasherX651060 can't boot the phone. I wrote fullbeckup sw16(from Landy) with V_Klay, but the same thing again.
Until now I'm did not use Patching option in any prog(V_Klay) and not understan what U meen by "patch the eeprom blocks to open..". Pl's a litle help to do right and revive the phone.
How to patch eeprom a litle guide?
Somebody?
Cheers
 
Back
Top