CX65 => CX70(支持PTT和Java3D)
by brandiber

Use x65 Flasher 1060, generate boot password and use "Advanced" > "Change phone model"
Afterwards you'll be able to update and map with CX70 Firmware and mappings

PTT won't work for your provider until you map your mobile...
maps are provider dependent preferences you transmit via mapr65 or Acid mrp's map65.
the latest mappings for your softwareversion (the jounger the better ) can be found on http://allsiemens.com/flash/
map65 you'll find on http://www.gsmdev.de (http://www.siediyer.com/Tools/Mobile/MAP65.rar)
So first of all
1. change phone model on your x65 with SWV <36
2. perform FFSInit for the desired phone model before you update (to avoid problems with your filesystem)
3. update with winswup update of the desired phone model (answer the "phone-model-change-dialog" with yes)
4. map your mobile with map65 by Acid[mrp] (write Standard map first and then write your provider's map to your phone)
5. if you want to change phone model in status-monitor do the following (*#06# > More: "Product")

Read your phone's flash with the following preferences (x65 flasher)
from 80000 size 20000 (128kb)
go to adress FD04 of your readed flashblock and reverse the folowing three bytes in order to get an firmwareaddress. For example you get 88 FD 09 (88 is address FD04). Reverse the bytes (always two digits): 09 FD 88 > this is the firmwareaddress where product is stored so we edit our read flashblock and rewrite it to the phone (cause 09 FD 88 is in our flashblock... otherwise you'll have to repeate read-process with new firmwareadresses and size)
so we go to 01 FD 88 of our Flashblock (09FD88 - 80000 = 01 FD 88) with our hexeditor.. some addresses before you'll find your Product (example CX65.1.0 or CX6V.4.0 or like that) so we change this to the desired phone model and flash the modified flashblock back to our phone (in our example from 80000 with size 20000... of course! If you are not sure, create a fullbackup before you write anything wrong to your phone!!)
Now *#06# > More > Product is changed, too

PTT:Push and Talk (walkie talkie) function
===============================
ÌáÐÑ!
1¡¢×ÔÐÐË¢»úÉý¼¶ÓзçÏÕ£¬ÇëÉ÷ÖØ£¡
2¡¢³¢ÊÔÉý¼¶Ö®Ç°Ò»¶¨ÒªÏȱ¸·ÝÊÖ»úµÄfilesystemºÍeeprom£¬×îºÃÊDZ¸·Ýfullflash!
3¡¢ÓÃFFSInit_CX70_2_de-BRDHandel_43_0363.EXE³õʼ»¯ÊÖ»úÓû§ÎļþÇø
4¡¢ÓÃx65flasher-RestoreÉý¼¶Firmware_050528_0906_v43.fbkÎļþ

http://www.siediyer.com/Fubu/FFSInit_CX70.rar
http://www.siediyer.com/Fubu/CX70_Mappings.rar

Èç¹û²»ÄÜ¿ª»ú£¬ÊÔÊÔ»Ö¸´eeprom
»Ö¸´Ô­À´µÄcx6cϵͳ£ºÓÃx65flasherË¢»Ø±¸·ÝµÄfullflash

ÍêÕûÉý¼¶CX7CµÄ·½·¨
supilot

ÓÉÓÚ×Ô¼ºÔÚÉý¼¶³ÉCX7CµÄ¹ý³ÌÖгöÁËÎÊÌâ,ËùÒÔдÏÂÕâ¸ö½Ì³Ì,Ï£ÍûÒÔºóÅóÓÑÉý¼¶Ê±²»»áÔÙÕâôÂé·³
1)CX6C±ØÐëÊÇ43ÒÔϵİ汾·ñÔò²»ÐÐ,×îºÃÊÇ25°æ,½«ÊÖ»úÍêÈ«¸ñʽ»¯
2)ÓÃX65flasher½«ÊÖ»úÐͺŸÄΪCX7C(×¢Òâ´óд):
Á¬ÉÏÊÖ»úºóÑ¡ADVANCEDϵÄCHANGE PHONE MODEL,¸ÄΪCX7C
3)´ò²¹¶¡,Ò»¹²Á½¸ö,¶¼ÊÇ25°æµÄ
0X0008fc72:36 37
0x0009017d:43583643003800300000 43583743003800300000;CX7C
4)ÖØÐ¿ª»ú,Á¬ÉÏÊý¾ÝÏß,ÔËÐÐÏÂÔØµÄCX7CµÄ¹Ù·½Éý¼¶³ÌÐò,ÏÂÔØµØÖ·Îª:
http://communications.siemens.com/repository/967/96732/CX7C430800xbz_update.exe
5)Ö±µ½Éý¼¶½áÊø,Èç¹ûûÓÐ×Ô¶¯¿ª»ú,ÇëÈ¡ÏÂµç³Ø,È»ºóÔÙ×°ÉÏ.
6)ÏÂÔØÁ½¸ö¶«Î÷:
http://download.allsiemens.com/map/CX70/Mappings_CX70_SW43.ZIP
http://www.siediyer.com/Tools/Mobile/MAP65.rar
7)±¸·ÝºÃ×Ô¼ºµÄEEPROM,ÇмÇ!!!
¹ØÊÖ»úÔËÐÐMAP65,Ñ¡ºÃ¶Ë¿ÚÁ¬½ÓÉÏÒÔºó°´µÚ¶þ¸ö°´Å¥
ÕÒµ½ÏÂÔØµÄÄÇЩMAPÎļþÖеÄCX70_1_Standard_43_0001.map,Ë¢½øÊÖ»ú
È»ºóÔÙÕÒµ½CX70_2_ru-Russian-Retail_43_0363.map,Ë¢½øÊÖ»ú
8)ÇëÏÂÔØÒÔÏÂÎļþ
http://download.allsiemens.com/ffsinit/CX70/FFSInit_CX70_2_ru-Russian-Retail_43_0363.EXE
¿ª»úÔËÐÐËü,Õâ´Î×îºÃʹÓÃ540µÄÏß,»á¿ìһЩ,Ñ¡ºÃ¶Ë¿ÚÒÔºó¾ÍµÈËüÍê³ÉÁË,³öÏÖµÄËùÓÐÌáʾ´°¿Ú¶¼Ñ¡"ÊÇ"
9)×îºó¹Ø»úÓÃX65flasher°Ñ×Ô¼º¸Õ²Å±¸·ÝµÄEEPROMË¢»ØÊÖ»ú
10)¹§Ï²Äã!ÖÁ´ËÄãµÄÊÖ»úÒѾ­ÊǺÍÕæÕýµÄCX7CÒ»ÑùÁË!(ÖйúµçÐÅ»¹²»Ö§³ÖPTT,ҲûÓÐÖйúÁãÊÛ°æµÄCX7CµÄMAP,ËùÒÔPTT¹¦Äܲ»ÄÜÓÃ)
×îºóÏ£Íû´ó¼Ò¶¼ÄÜÏíÊÜ×Ô¼ºµÄCX65,ÒòΪÎ÷ÃÅ×ÓûÓз¢»Ó³öËü×î´óµÄÄÜÁ¦,µ«ÎÒÃDz»ÒªÍü¼ÇÖ§³ÖÎ÷ÃÅ×Ó
¾­¹ýÎÒµÄÊÔÑé,ÒѾ­¿ÉÒԱȽÏÍêÕûµØ°ÑCX6C±ä³ÉCX7C
ÏÖÔÚ³ýÁËûÓÐPTT¹¦ÄܺÍÍâ¿ÇÑÕÉ«²»Ò»ÑùÖ®ÍâÒѾ­ºÍÕæÕýµÄCX7CÍêȫһÑùÁË
Éý¼¶·½·¨²ÎÕÕÎÒ֮ǰ·¢µÄÌû×Ó,Èç¹û²½¾Û²»Í¬»òÊÇÓÐÊ¡ÂÔ,¿ÉÄÜ»á³öÏÖһЩĪÃûÆäÃîµÄÎÊÌâ

==============
CX6CÉý¼¶CX7C Ë¢MAPʵÏÖ¼´°´¼´ËµºÍС°ïÊÖ¹¦ÄÜ...¼ÓÈëÆµÂÊ,Ïß·,GPRS,Ñ¡Ïî....
devil_997 (ÎûÎû)

CX6C Éý¼¶CX7CµÄ·½·¨ÔÚÂÛ̳ÒÔǰµÄÌû×Ó¶¼ÒѾ­ÓкÜÏ꾡µÄ˵Ã÷ÁË...
µ«Éý¼¶ºó»áÓÐÁ½¸öÎÊÌâ..
1.Ë¢ÁËMAPºó..P,-Date»áÊÇ2015ÄêµÄ..VariantµÈ¼¸¸ö²ÎÊý»áÂÒÂë..Ҫˢ»ØEEPROM²ÅÕý³£ µ«Ò²Ã»ÓÐÁËС°ïÊÖ..
2.²»Ë¢MAP..ûÓÐС°ïÊÖ...¼´°´¼´Ëµ.....

Ë¢MAP.²ÎÊý»áÂÒ.Ö÷ÒªÊÇдÈëBlock 5005µÄÊý¾ÝºóÒýÆðµÄ..
ËùÒÔË¢MAP֮ǰҪÐÞ¸ÄBlock 5005ºóË¢»ØÊÖ»ú²Å²»»áÒýÆðһЩ²ÎÊýÏÔʾ²»Õý³£

ÐÞ¸ÄMAPÎļþ:
1.ÓÃSmelter´ò¿ª×ÔÒÑÊÖ»úµÄ fullflash È»ºóÔÚEEPROMÀïÕÒ³ö 5005°´ÓÒ¼ü"±£´æÇø¿éÓÚÎļþ"
2.ÓÃUltraEdit-32.µÈÊ®ÁùλÎı¾±à¼­Æ÷..´ò¿ª¸Õ¸Õ±£´æ³öÀ´µÄÎļþ...Îļþ¸ñʽӦ¸ÃÊÇ.bin»á¿´µ½
ÀàËÆÏÂÃæµÄ×ÊÁÏ..
×¢Òâ:ÏÂÃæµÄÊý¾ÝÖ»ÊǾÙÀýÓò»ÊÇÕæÊµÊý¾Ý²»Òª½«ÏÂÃæµÄÊý¾ÝдÈëMAPÎļþ...
´ò¿ªÎļþÄã»á¿´µ½µÄÊÇÀàËÆÕâÀïµÄÓÉ"02"....µ½×îºó"2D" Ò»¹²64¸ö..Ê®Áù½øµÄÊýÖµ

;=======================================================
00000000h: 02 00 01 02 03 04 FF FF 05 01 01 01 01 01 04 00 ; ......ÿÿ........
00000010h: 03 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ; .ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00000020h: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ; ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00000030h: FF FF FF FF FF FF FF FF FF FF FF FF FF 01 05 2D ; ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
;========================================================
3.ÓÃ"¼Çʱ¾"´ò¿ªÏÂÔØµÄMAPÎļþ..ÓòéÕÒ,²éÕÒ[5005]»áÕÒµ½ÀàËÆÏÂÃæµÄ×ÊÁÏ..
;================================================
[5005] ; Initialisation & Info +NEW+ (Bearbeiter: Christian Abke (PV))
Offset = 0 ; Offset
Memory = 8 ; EEFullBlock
PStufe = 2 ; ST
Service = 0 ; Block nicht beachten
Version = 1 ; Version
DataSize = 64 ; Anzahl der Datenbytes
Data {
0xFF 0xFF 0xFF 0x00 0x00 0xFF 0xFF 0xFF 0xFF 0xFF
0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
0xFF 0xFF 0xFF 0xFF
}
;==================================================
¶øÔÚ²éÕÒ[5005]µÄÏÂÃæData{.........}ÀïÒ²ÊÇÓÐ64¸öÀàËÆ0xFF ÊýÖµ

4.Ìæ»»ÊýÖµ¾ÍÊǰÑData{...........}ÀïÃæµÄÊýÖµÌæ»»³ÉUltraEditÀïµÄÊýÖµ¸ñʽΪ
0xFF->0x02 0xFF->0x00.......Ö±µ½×îºó
Íê³Éºó¾ÍÈç....
×¢Òâ:ÏÂÃæµÄÊý¾ÝÖ»ÊǾÙÀýÓò»ÊÇÕæÊµÊý¾Ý²»Òª½«ÏÂÃæµÄÊý¾ÝдÈëMAPÎļþ...
;================================================
[5005] ; Initialisation & Info +NEW+ (Bearbeiter: Christian Abke (PV))
Offset = 0 ; Offset
Memory = 8 ; EEFullBlock
PStufe = 2 ; ST
Service = 0 ; Block nicht beachten
Version = 1 ; Version
DataSize = 64 ; Anzahl der Datenbytes
Data {
0x02 0x00 0x01 0x02 0x03 0x04 0xFF 0xFF 0x05 0x01
0x01 0x01 0x01 0x01 0x04 0x00 0x03 0xFF 0xFF 0xFF
0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
0xFF 0x01 0x05 0x2D
}
;==================================================

ÉÏÃæµÄÖ»ÊÇÒ»¸öÀý×Ó..»òÕßÓÐÆäËü¸ü¼òµ¥µÄ·½·¨...
ÎÒ·¢µÄMAPûÓиÄ[5005]ÀïµÄÊý¾ÝÊÇÒòΪ²»ÊÇÿ¸öÈËÀïµÄµÄÊý¾Ý¶¼ÊÇÒ»ÑùµÄ..ËùÒÔÐèÒª´ó¼Ò×Ô¼ºÐÞ¸ÄÕâЩÊý¾Ý
Ð޸ĺóȷʵÊý¾ÝÕýÈ·ºó¾Í¿ÉÒÔ±£´æMAPÎļþ...

¾Í¿ÉÒÔˢдMAPÎļþÁË...ֻҪˢÕâÒ»¸ö¾Í¿ÉÒÔÁË....
Èç¹û²»¸Ä[5005]µÄ»°..Ë¢Õâ¸öÎļþÒ²¿ÉÒÔ..µ«..VariantµÈµÈÊý¾Ý»¹ÊÇ»áÂÒµÄ..
Õâ¸ö·½·¨.ÎÒÖ»ÔÚÎÒµÄÊÖ»úÉÏÊÔ¹ý..Ë¢ºó..Variant.µÈ²ÎÊýÏÔʾΪ×Ô¼ºÊÖ»ú±¾À´ÏÔʾµÄ...
ÔÚ¸½¼Ó¹¦ÄÜÖлá¶àÒ»Ïî ¼´°´¼´Ëµ...ºÍÔÚÆäËüÉ趨Öжà³öÒ»ÏîС°ïÊÖ...
µ«ÊÇ....δ֪ÆäËüÊÖ»úË¢ºó»áÓÐʲôÎÊÌâ..ËùÒÔË¢MAPǰÇë×¢Òⱸ·Ý×Ô¼ºµÄEEPROM..ÒÔ·ÀÍòÒ»..

==========
CX7C 43°æ ²¹¶¡
supilot

µçÄÔ·ÃÎÊÊÖ»úÒþ²ØÄ¿Â¼:
013c979c:02 03

¿ª¹¤³Ìģʽ:
13a090c:040090E5 0000A0E3

¿ªÊ¼Â¼ÏñʱȡÏûÉùÒô:
008e1af0:1a 1d

Çý¶¯Æ÷Ãû¸ÄΪĿ¼Ãû:
190bfa:44726976652030 44617461000000
190c18:44726976652031 43616368650000
190c36:44726976652032 436F6E66696700

È¡Ïû¿ª»ú·¢³öµÄ3ÉùÒôÏì:
166c0cc:5C03 FFFF

ÊÖ»úÓÀ¾Ã´ò¿ªÒþ²ØÄ¿Â¼:
00975d74:0900000A000055E30E00001A48108FE20D 000055E3000055E30E00001A48108FE20D
00975dd0:353436310000000061626F7574000000 200036310000000061626F7574000000

ͨ»°ÎåÊ®Ãë²¹¶¡:
1011b02:00 32

ÓÃSIMOCO¶ÁÈ¡ÊÖ»úͨѶ¼:
00090185:43583743003800300000 43583730003800300000