All about EL71 here and only here ! - Page 3 - GSM-Forum

BouRRi_GSM · 12-11-2006, 16:53

@Abe
solution is tested by me , i confirm 100% working

@rango
same for me, maybe Skey have 32 hex like SSMC0509 said in other thread

----------

some server can give Skey from IMEI!! i forget the link, is this possible???

rango · 12-11-2006, 18:42

Quote:

Originally Posted by BouRRi_GSM

@Abe
solution is tested by me , i confirm 100% working

@rango
same for me, maybe Skey have 32 hex like SSMC0509 said in other thread

----------

some server can give Skey from IMEI!! i forget the link, is this possible???

Martech can unlock e71 (I didnt tried but that's what they say) via testpoint, so it is probably posible to unlock it via xflasher knowing the right address for stored bootkey and skey in flash...

Any idea where?

Afzaal · 12-11-2006, 19:46

Quote:

Originally Posted by BouRRi_GSM

connect phone to papua using TP, check only pause 2s
and post log

(for repairing eeprom block u must send skey to phone, phone must be in factory mode, i skey not sended to phone , u can't acces to some block in eeprom)

post log, i will try to help u

Quote:

Originally Posted by Abe

Unlock solution 100% EL71 with "FlashID(1) - Hersteller: 0020 (ST), Typ: 8819"

1. Send BSreader midelt to the phone and read HASH and ESN
2. Write HASH and ESN to the X65 flasher 2103
3. Go to KEYS-CALCULATE SKEY AND BOOTKEY- write ESN and HASH
4. You will get the SKEY
5. Copy the ESN and SKEY to Papua 0.9.3b
6. Click on the "Berechne HASH und BOOTKEY aus ESN and SKEY" button
7. After u get all new keys calculated klik on "Sende SKEY"
8. 5008 unlock and freia.log to be sure

Done.

P.S. If u go with ESN and HASH directly formk the midlet to the Papua u wont get Skey calculated so u have to use X65 flasher.

Both guys Method going against one n other
So is there someone else can write few words to clear mis Understanding.
Plz someone be nice to solve this mystery.
with thanks
Afzaal.

BouRRi_GSM · 12-11-2006, 20:26

in Sgold section, just 3 or 4 thread about EL71

read these thred u will understand , this will take just 15mn

we speak about different Flash cheap, because EL71 have 2 different Flash chip, Intel & ST, the second chip is not detected with Papua and papua can't read ESN & Flash id from it.

about unlock method is same with papua like old Sgold, use always the latest version of papua

Afzaal · 12-12-2006, 05:09

OK i got it right now
Appriciated Clearance.
Regards.

Abe · 12-12-2006, 16:49

I treid today C81 with this solution. Work 100%.

Model: SIEMENS C81 38 lg4

FlashID(1) - Hersteller: 0089 (Intel), Typ: 880D,
FlashID(2) - Hersteller: 0089 (Intel), Typ: 881C.

So i think this solution is working on INTEL and ST even this isn's an EL71.

snsoftkiller · 12-12-2006, 22:32

I apreciate too much the way that you ignore my question. But I still want to know if there is another tp method, I need to flash 1 piece.

BouRRi_GSM · 12-12-2006, 22:56

Quote:

Originally Posted by SNSOFTKILLER

I apreciate too much the way that you ignore my question. But I still want to know if there is another tp method, I need to flash 1 piece.

what's exactly the problem, dead phone or why u wan't to flash??

in all case,u need make bcore backup, and if u haven't any pro tool like SST (tested for repair eeprom imei), u must have also eeprom backup

snsoftkiller · 12-13-2006, 03:24

Phone is in dead condition. I use martech but the tp is under one IC. I dont have the skill to remove it. Is there any other way to flash this phone ?
Thanks in advance !

nova75c · 12-13-2006, 06:16

BouRRi_GSM , please help me unlock my EL71
Autostart...
Übertrage Boot...
BOOT geladen...
Testpoint bitte lösen!
Weiter in 2 Sec...
Erhalte Informationen...
FlashID: 0089,887E (64Mb)
BCORE Sauber!
OTP ESN: 469C5D6F
OTP IMEI: 358941000938624
Fehler mit dieser Geschwindigkeit 921600 Baud!
Prüfe die eingegebenen Daten...
Berechne HASH und BootKEY aus ESN und SKEY...
Neuer HASH: 2DC362C80BE74EC6588C385FE7863340
Neuer BootKEY: 0B8227C9282C7C6FDBF1F17408E704A1
Prüfe die eingegebenen Daten...
Bitte SKEY prüfen...
Sende Skey an das Telefon...
Sende SKEY!
Falscher schlüssel!
Prüfe die eingegebenen Daten...
Bitte SKEY prüfen...
Sende Skey an das Telefon...
Sende SKEY!
Pause 0 Sekunde(n)...
SecurityStatus: CustomerMode
Starte den "Service Mode"...
Rote Taste drücken!
Autostart...
Achtung: Unterstützung für "S"75 befindet sich noch in der Beta Phase!
Übertrage boot...
Gestartet im "Service Mode" Ok
Erwarte Start des Telefons...
Erhalte Informationen:
Model: SIEMENS EL71 09 lg91
Telefon ist im "Format FFS?"
IMEI: 358941000938624
SecurityStatus: CustomerMode
HWID: 407
Akkuspannung: 3967 mV.
IMEI: 358941000938624
Erst SKEY senden!

Afzaal · 12-13-2006, 12:26

i am sure your Phone Mut be Passed away
m i ryte bro?
BR.

Afzaal · 12-13-2006, 12:31

Quote:

Originally Posted by Abe

I treid today C81 with this solution. Work 100%.

Model: SIEMENS C81 38 lg4

FlashID(1) - Hersteller: 0089 (Intel), Typ: 880D,
FlashID(2) - Hersteller: 0089 (Intel), Typ: 881C.

So i think this solution is working on INTEL and ST even this isn's an EL71.

So how can v kno Chip info b4 perform Unlocking Steps.
N E idea?
BR.

nova75c · 12-13-2006, 12:36

BouRRi_GSM PLEASE HELP ME !!

Gehstock · 12-13-2006, 15:42

Send Me the first 512k from ur FUBU ,ur Backups and all logs to [email protected]
the BCORE hash is not ok

Read fullflash over Testpoint

BouRRi_GSM · 12-13-2006, 20:33

@nova75c
ur phone is working now??
if it's ok just check X85 in unlock tab, then do Job and check only pause 2s

if it's dead , tell me how? maybe u have Bcore Backup in backup folder of papua

if u haven't backup, send first 512k from Fubu to Gehstock

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
..:: Setool All Latast Models Flash Files [Only Here] ::..	nasirkhan007	SETool2	148	05-30-2017 13:51
All Other Phones Pinouts Request [Only Here]	shahzaadbutt	Various	36	10-07-2010 19:07
All BB5 Flash Files Post Only Here	zahed1978	Nokia Base Band 5 ( BB-5 )	149	03-01-2009 14:51
Re: All Nokia PM Files Request [Only Here]	florim	Nokia Hardware & Hardware Repair	3	12-02-2007 00:31

12-11-2006, 16:53	#31 (permalink)
BouRRi_GSM Registered User Join Date: Jan 2005 Location: TuNiSiA Age: 43 Posts: 4,342 Member: 111457 Status: Offline Thanks Meter: 967	@Abe solution is tested by me , i confirm 100% working @rango same for me, maybe Skey have 32 hex like SSMC0509 said in other thread ---------- some server can give Skey from IMEI!! i forget the link, is this possible???

12-11-2006, 20:26	#34 (permalink)
BouRRi_GSM Registered User Join Date: Jan 2005 Location: TuNiSiA Age: 43 Posts: 4,342 Member: 111457 Status: Offline Thanks Meter: 967	in Sgold section, just 3 or 4 thread about EL71 read these thred u will understand , this will take just 15mn we speak about different Flash cheap, because EL71 have 2 different Flash chip, Intel & ST, the second chip is not detected with Papua and papua can't read ESN & Flash id from it. about unlock method is same with papua like old Sgold, use always the latest version of papua

12-12-2006, 05:09	#35 (permalink)
Afzaal No Life Poster Join Date: Mar 2005 Location: lets See. Posts: 3,399 Member: 128918 Status: Offline Thanks Meter: 282	OK i got it right now Appriciated Clearance. Regards.

12-12-2006, 16:49	#36 (permalink)
Abe No Life Poster Join Date: Apr 2001 Location: Croatia Age: 45 Posts: 1,114 Member: 4185 Status: Offline Thanks Meter: 3	I treid today C81 with this solution. Work 100%. Model: SIEMENS C81 38 lg4 FlashID(1) - Hersteller: 0089 (Intel), Typ: 880D, FlashID(2) - Hersteller: 0089 (Intel), Typ: 881C. So i think this solution is working on INTEL and ST even this isn's an EL71.

12-12-2006, 22:32	#37 (permalink)
snsoftkiller No Life Poster Join Date: Mar 2006 Location: Inside facebook Age: 47 Posts: 2,618 Member: 250468 Status: Offline Sonork: 100.110362 Thanks Meter: 96	I apreciate too much the way that you ignore my question. But I still want to know if there is another tp method, I need to flash 1 piece.

12-13-2006, 03:24	#39 (permalink)
snsoftkiller No Life Poster Join Date: Mar 2006 Location: Inside facebook Age: 47 Posts: 2,618 Member: 250468 Status: Offline Sonork: 100.110362 Thanks Meter: 96	Phone is in dead condition. I use martech but the tp is under one IC. I dont have the skill to remove it. Is there any other way to flash this phone ? Thanks in advance !

12-13-2006, 06:16	#40 (permalink)
nova75c Freak Poster Join Date: Mar 2004 Age: 42 Posts: 155 Member: 57358 Status: Offline Thanks Meter: 1	BouRRi_GSM , please help me unlock my EL71 Autostart... Übertrage Boot... BOOT geladen... Testpoint bitte lösen! Weiter in 2 Sec... Erhalte Informationen... FlashID: 0089,887E (64Mb) BCORE Sauber! OTP ESN: 469C5D6F OTP IMEI: 358941000938624 Fehler mit dieser Geschwindigkeit 921600 Baud! Prüfe die eingegebenen Daten... Berechne HASH und BootKEY aus ESN und SKEY... Neuer HASH: 2DC362C80BE74EC6588C385FE7863340 Neuer BootKEY: 0B8227C9282C7C6FDBF1F17408E704A1 Prüfe die eingegebenen Daten... Bitte SKEY prüfen... Sende Skey an das Telefon... Sende SKEY! Falscher schlüssel! Prüfe die eingegebenen Daten... Bitte SKEY prüfen... Sende Skey an das Telefon... Sende SKEY! Pause 0 Sekunde(n)... SecurityStatus: CustomerMode Starte den "Service Mode"... Rote Taste drücken! Autostart... Achtung: Unterstützung für "S"75 befindet sich noch in der Beta Phase! Übertrage boot... Gestartet im "Service Mode" Ok Erwarte Start des Telefons... Erhalte Informationen: Model: SIEMENS EL71 09 lg91 Telefon ist im "Format FFS?" IMEI: 358941000938624 SecurityStatus: CustomerMode HWID: 407 Akkuspannung: 3967 mV. IMEI: 358941000938624 Erst SKEY senden!

12-13-2006, 12:26	#41 (permalink)
Afzaal No Life Poster Join Date: Mar 2005 Location: lets See. Posts: 3,399 Member: 128918 Status: Offline Thanks Meter: 282	i am sure your Phone Mut be Passed away m i ryte bro? BR.

12-13-2006, 12:36	#43 (permalink)
nova75c Freak Poster Join Date: Mar 2004 Age: 42 Posts: 155 Member: 57358 Status: Offline Thanks Meter: 1	BouRRi_GSM PLEASE HELP ME !!

12-13-2006, 15:42	#44 (permalink)
Gehstock Freak Poster Join Date: Jul 2005 Age: 46 Posts: 366 Member: 163721 Status: Offline Thanks Meter: 148	Send Me the first 512k from ur FUBU ,ur Backups and all logs to [email protected] the BCORE hash is not ok Read fullflash over Testpoint

12-13-2006, 20:33	#45 (permalink)
BouRRi_GSM Registered User Join Date: Jan 2005 Location: TuNiSiA Age: 43 Posts: 4,342 Member: 111457 Status: Offline Thanks Meter: 967	@nova75c ur phone is working now?? if it's ok just check X85 in unlock tab, then do Job and check only pause 2s if it's dead , tell me how? maybe u have Bcore Backup in backup folder of papua if u haven't backup, send first 512k from Fubu to Gehstock