Answer to your first question is here Top Sony Forums - Announcements in Forum : Tutorials Guides
and custpack can be this: Top Sony Forums
or any other K800-vodafone UK
Printable View
Answer to your first question is here Top Sony Forums - Announcements in Forum : Tutorials Guides
and custpack can be this: Top Sony Forums
or any other K800-vodafone UK
So I flashed Main and VKP using SeToll2Lite. After everything went OK I disconnected, then reconnected and did Identify, the log says Network: Locked. (Logs posted below). Is it possible it is unlocked but still says Locked?
Quote:
welcome to setool2 lite edition v 1.08
supported DB2010/DB2012 CID49/50/51/52, DB2020 CID49/51/52
Loaded 51 flash descriptors
ChipID:8040,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:49
Speed:921600
OTP LOCKED:1 CID:49 PAF:1 IMEI:359064xxxxxxx CERT:RED
PATCH:061204 1529 HAN_DB2010_MEM_PATCHER_R2A007_CXC9876543210 0
LDR:060718 0842 LIE_DB2010_FLASHLOADER_R2A003_CXC1326738
Flash ID check:2019
Flash props sent ok
DETACH CABLE FROM PHONE.
REMOVE BATTERY FROM PHONE, THEN INSERT IT BACK
THEN PRESS "READY"
ChipID:8040,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:49
Speed:921600
Trying to launch embedded bootloader...
Embedded flashloader:
COMPACT_ID_LOADER_CRIPPLED_SETOOL2_R2
Flash ID check:2019
Flash props sent ok
FOUND: R4DB005_CXC1250321_ORANGE_HN
Restore from:R4DB005_CXC1250321_ORANGE_HN
writing E:\Cell Phone Unlock\Firmware\W810_R4DB005_MAIN_ORANGE_HN_RED49\ W810_R4DB005_MAIN_ORANGE_HN_RED49.mbn
CURRENT FLASH FILE CID:49
SSW uses dynamic hash, dynamic hash len is:343
Will flash 343 blocks...
SSW loading returns:0
CSloader version:
SETOOL2 LITE COMPACT_SEMC_FS_LOADER (FAT V26)
loader startup: executed
loader filesystem startup: executed
loader GDFS startup: executed
Processing script...
Will execute script now.
Phone detached
Elapsed:280 secs.
ChipID:8040,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:49
Speed:921600
Flash ID check:2019
Flash props sent ok
OTP LOCKED:1 CID:49 PAF:1 IMEI:35906400278672 CERT:RED
FLASH CID:49 COLOR:RED
MAPP CXC article: R4DB005 prgCXC1250321_ORANGE_HN
MAPP CXC version: R4DB005
Language Package:ORANGE_GEN
CDA article: CDA102494/51
CDA version: R12A
Default article: cxc1250324
Default version: R4DB005
Network LOCKED
Operator: 234-33
USERCODE:0000
Elapsed:7 secs.
When Setool finished he ask you to apply patch,did you click on YES or NO (must be NO )
Yes, and it is a normal behaviour, because the SIM locks in GDFS are still locked, we 'just' cheat modifying the MAIN firmware.Quote:
Is it possible it is unlocked but still says Locked?
To check if the phone is unlocked, try another SIM card. Also you can check in service ( >*<<*<*) menu, then Service Info then SIM Lock. Here all the padlock should be open.
I clicked NO. I think it has worked (Simox says it is normal for it to still say LOCKED), but the only way I'll be sure is to get another Sim from adifferent carrier. Thanks for all your quick responses.
hi. i have a k800i locked to orange uk but cannot unlock it. when i try to flash the main firmware i keep getting an invalid firmware message, i have tried finding my exact version R1CB001 but cannot find it on the site supplied by mobile unlock codes. help anyone?please
Hi
You are a true gent and genius.
Saved my Orange k800 brick, I can now use my Vodaphone sim.
Not sure if this is covered but only slight problem is that I seem to now have a white background when it goes in to standby. This chews up battery life. Any suggestions appreciated.
Dave :)
Hi Mate
Just been through this nightmare. Try menu_original_k800.rar Download - iProTebe.cz - VÅ*E pro Sony Ericssony | Czech by SiViN
your the man. firmware is valid. however, when using setool2lt. i am not getting the apply patch dialog box.then when i try to write script...... the embedded flash loader doesn't respond. And when using XS++, main firmware flashes ok then fails when flashing the file system.... header type damaged/unknown. still locked on orange but working again thanx
01:12:02| XS++ v3.1 (Darwin) Ready !
01:12:02| Executed on Microsoft Windows XP
01:16:31| Shutting down...
01:46:32| XS++ v3.1 (Darwin) Ready !
01:46:32| Executed on Microsoft Windows XP
01:46:55|
01:46:55| Attempting to open the interface...
01:46:55|
01:46:55| TURN OFF PHONE!
01:46:55| Hold 'C' button on phone and connect phone NOW.
01:46:55| You have 30 seconds...
01:46:55|
01:46:56| Baseband ID: 9900
01:46:56| Protocol Version: 3.1
01:46:57| Phone name detected!
01:46:57|
01:46:57| Profiling SEMC phone...
01:46:57| Platform: DB2020
01:46:57| OTP CID: 49
01:46:57| EROM CID: 52
01:46:57| EROM Color: Red
01:46:57| IMEI: 35170701xxxxxx
01:46:57| Phone ID: K800
01:46:57| Region: ORANGE_GEN
01:46:57| CDA: CDA102511/47 R13A
01:46:57| Firmware Version: R1CB001
01:46:57| EROM: R3A011
01:46:57| Ready for operation!
01:47:48|
01:47:48| Sending db2020_cid01_prodid_p3j.bin...
01:47:48| Applet ID: 070129 0950 NGUCXC1250330_DB2020_PRODUCTIONIDLOADER_P3J
01:47:48| This is a PRODUCTION_ID loader
01:47:48|
01:47:48| Sending db2020_mem_patcher_cid52_r2a006.bin...
01:47:49| Applet ID: 061205 1523 HANCXC9876543210_DB2020_MEM_PATCHER_R2A006 0
01:47:49| This is a MEM_PATCHER loader
01:47:49|
01:47:49| Sending db2020_red52_cs_r3a009.bin...
01:47:51| Applet ID: 070410 1557 HANCXC1250562_DB2020_CSLOADER_R3A009
01:47:51| This is a CHIPSELECT loader
01:47:51| Activating loader...
01:47:51| Activating GDFS...
01:48:06| This loader is UNLOCKED
01:48:06| Backing up the GDFS...
01:48:08| Stated variables: 1517
01:48:10| Variables found: 657
01:48:13| Variables found: 632
01:48:14| Variables found: 206
01:48:14| Variables found: 22
01:48:14| Wrote backup to .\Backup\K800_35170701xxxxxx_GDFS_BACKUP.bin
01:48:14| GDFS was backed up successfully!
01:48:14| GDFS operation was successful
01:48:16| Disconnected... Unplug the phone
01:50:26|
01:50:26| Attempting to open the interface...
01:50:26|
01:50:26| TURN OFF PHONE!
01:50:26| Hold 'C' button on phone and connect phone NOW.
01:50:26| You have 30 seconds...
01:50:26|
01:50:30| Did not receive 0x5a. Continuing
01:50:35| Disconnected... Unplug the phone
01:50:50|
01:50:50| Attempting to open the interface...
01:50:50|
01:50:50| TURN OFF PHONE!
01:50:50| Hold 'C' button on phone and connect phone NOW.
01:50:50| You have 30 seconds...
01:50:50|
01:50:54| Did not receive 0x5a. Continuing
01:51:01| Disconnected... Unplug the phone
01:51:18|
01:51:18| Attempting to open the interface...
01:51:18|
01:51:18| TURN OFF PHONE!
01:51:18| Hold 'C' button on phone and connect phone NOW.
01:51:18| You have 30 seconds...
01:51:18|
01:51:18| Baseband ID: 9900
01:51:18| Protocol Version: 3.1
01:51:18| Phone name detected!
01:51:18|
01:51:18| Profiling SEMC phone...
01:51:18| Platform: DB2020
01:51:18| OTP CID: 49
01:51:18| EROM CID: 52
01:51:18| EROM Color: Red
01:51:18| IMEI: 35170701xxxxxx
01:51:18| Phone ID: K800
01:51:18| Region: ORANGE_GEN
01:51:18| CDA: CDA102511/47 R13A
01:51:18| Firmware Version: R1CB001
01:51:18| EROM: R3A011
01:51:18| Ready for operation!
01:51:54| ~~~~~~~~~~ Custpack information ~~~~~~~~~~
01:51:54| Custpack: EUROPE_4 (CDA102511/101) (K800)
01:51:54| Generic(non-branded) custpack: Yes
01:51:54| Allowed languages: en, da, fi, is, sv, no,
01:51:54| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
01:51:56|
01:51:56| Sending db2020_cid01_prodid_p3j.bin...
01:51:56| Applet ID: 070129 0950 NGUCXC1250330_DB2020_PRODUCTIONIDLOADER_P3J
01:51:56| This is a PRODUCTION_ID loader
01:51:57|
01:51:57| Sending db2020_mem_patcher_cid52_r2a006.bin...
01:51:57| Applet ID: 061205 1523 HANCXC9876543210_DB2020_MEM_PATCHER_R2A006 0
01:51:57| This is a MEM_PATCHER loader
01:51:57|
01:51:57| Sending db2020_cid52red_flash_r2a005.bin...
01:51:57| Applet ID: 061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
01:51:57| This is a FLASH loader
01:51:57| Now flashing firmware main...
01:51:57| Flashing c:\documents and settings\colin\software\setool2litev1.11\qamaker\k 800_r1cb001_main_generic_red52.mbn
01:51:57| Header type: BABE
01:51:58| 455 flashblocks
01:55:40| Finishing flash
01:55:41| Done flashing
01:55:41| Now flashing filesystem...
01:55:41| Flashing c:\documents and settings\colin\software\xs++\backup\k800_35170701x xxxxx_gdfs_backup.bin
01:55:41| Header type: Unknown/damaged
01:55:41| 292 flashblocks
01:55:41| Binary acknowledge failed with: 89
01:55:41| Failed
01:55:41| Binary acknowledge failed with: 68
01:55:41| Command: Error 0x68
01:55:41| Failed sending flashblock 1. Returnvalue 0x1733814
01:55:41| Finishing flash
01:55:41| Binary acknowledge failed with: 02
01:55:41| Failed
01:55:41| Failed
01:58:15| Error: Flashing failed
01:58:15| Disconnected... Unplug the phone
Hi Jonner
I had this problem, you need a later version of SE tool, I got SeTool_2_Lite_1.11 with a quick search in google, it had the patch tick box in that.
Other than that the Tutorial at the begining of this section worked a treat. I had tried several other tutorials most were written in a way that confused my poor old brain.
Do you get the white screen for the sleep mode, I also seem to have a menu.ml problem.
Good luck
Dave
:)
do i need to download the fs file that matches R1CB001?
mlm122
You can try with another MAIN firmware as well, but if all the padlocks are open, then the patch works. Also I think the problem is that the other network operator(s) are blocking the phone's IMEI...Quote:
Keiji, I have tried the simlock patch gen several times on my my 580i, and it shows all the padlocks unlocked, but stiill won't recognize another operator's sim. What Main file did you use, please?
By the way what error message you get? The 'original' SIM card still works? If you have more SIM cards form different networks try all of them.
i'm using the new version, and tried following the tutorial to the letter with no joy. so i used XS++ with the correct fw main and fs(many thanks for the download) and followed the tutorial that came with XS++, worked first time. am getting the menu.ml error message when i switchon,just glad my phone is unbricked and unlocked:D
Hi, Simox, I know your patch generator works, which is why I'm really puzzled. I get "Insert Sim Or Press Demo" message on 2 different T-Mobile Sims. That is the default message on a 580, when there is no sim at all in the phone. My native Sim is AT&T and that works just fine. I know the phone is actually unlocked, because all the padlocks are open. I have, so far, tried 2 different MAINS, and 2 or 3 different combos of custom packs. The resulting error message is always exactly the same.
The most recent MAIN I tried was W580_R8BE001_MAIN_NAM_1_LA_RED52.mbn, but I have also tried W580_R8BE001_MAIN_GENERIC_LA_RED52.mbn
The one thing I will double check with you : Typically when using SETool lite, you take Sim, out, of course. During applying this particular patch, there is no reason to leave it in the phone, is there?
Thanks for trying to help, I do apprec your work on that program.:)
CAn this be used to unlock a s710
Can u use xs++?
@01Maurice
No, but you can use FAR manager + jdflasher and/or SEFP plugin to apply the patches instead of SETool2 Lite.Quote:
Can u use xs++?
Will there be a new version of this tool to create unlock patches for Cid53 phones? It would be well appreciated by many just as the current versions are.
Of course , but first they must make a free program , that supports cid 53 unlocking.
Nice day
Cool. Lots of folks are waiting for both.
You mention that SIMLockPatchGen.exe needs the MAIN firmware but SE Tool only provides bin file.
Where can I get the MAIN firmware - how do I download from the phone?
The output from XS++ for my phone is
21:35:24| Baseband ID: 8040
21:35:24| Protocol Version: 3.1
21:35:24|
21:35:24| Sending db2010_cid00_prodid_p3l.bin...
21:35:24| Applet ID: 061113 1250 ALUCXC125872_COMPACTPRODUCTION_ID_LOADER P3L
21:35:24| This is a PRODUCTION_ID loader
21:35:24| Activating GDFS...
21:35:25| Phone name detected!
21:35:25|
21:35:25| Profiling SEMC phone...
21:35:25| Platform: DB2010
21:35:25| OTP CID: 49
21:35:25| EROM CID: 49
21:35:25| EROM Color: Red
21:35:25| IMEI: 35286101xxxxxx
21:35:25| Phone ID: W300
21:35:25| Region: ANZ
21:35:25| CDA: CDA102499/123 R2A
21:35:25| Firmware Version: R4EA031
21:35:25| EROM: n/a
21:35:25| Ready for operation!
21:37:50|
21:37:50| Sending db2010_cid49red_cs_r3a010.bin...
21:37:52| Applet ID: 070524 1030 AN2CXC1327364_COMPACT_SEMC_CS_LOADER__R3A010
21:37:52| This is a CHIPSELECT loader
21:37:52| Activating loader...
21:37:52| Activating GDFS...
21:38:12| This loader is UNLOCKED
21:38:12| Backing up the GDFS...
21:38:15| Stated variables: 1109
21:38:19| Variables found: 830
21:38:20| Variables found: 257
21:38:20| Variables found: 22
21:38:20| Wrote backup to .\Backup\W300_35286101xxxxxx_GDFS_BACKUP.bin
21:38:20| GDFS was backed up successfully!
21:38:20| GDFS operation was successful
21:38:22| Disconnected... Unplug the phone
21:41:20| Shutting down...
@selops
You can get firmware for your phone in download section on this site
I have applied the unlock to my w300i and it can now operate on a different network. However, SE tool still indicates it is network locked - why is this the case ?
.....
Model:W300i
MAPP CXC article: R4EA031 prgCXC1123260_GENERIC_JE
MAPP CXC version: R4EA031
Language Package:ANZ
CDA article: CDA102499/123
CDA version: R2A
Default article: cxc1123203
Default version: R4EA031
Network LOCKED
Operator: 505-02
USERCODE:0000
It is an absolutely normal behavior, because SETool2 Lite reads the information about SIM locks from GDFS, but it still contain the network locks, because it is untouched. However we modified(unlocked by patch) the MAIN firmware, thus it will allow any SIM card, independently from the GDFS content.
Hi
I have a question
I have an k200i and I want to unlock is this posibble ?
Thanks
Hiya, I have a CID52 k800i with f/w R1KG001 that I wish to unlock. I have downloaded the f/w from this site and tried applying it to the Sim-Lock Gen. The Gen asks for .mbn or .bin files but the f/w I got is a .fbn file. Any ideas?
You have wrong file(FS is .fbn) and you need MAIN
one of this files:K800_R1KG001_MAIN_CHINA_WI_RED52
K800_R1KG001_MAIN_GENERIC_WI_RED52
K800_R1KG001_MAIN_HUTCHISON_WI_RED52
K800_R1KG001_MAIN_ORANGE_WI_RED52
K800_R1KG001_MAIN_TAIWAN_WI_RED52
K800_R1KG001_MAIN_VODAFONE_WI_RED52
K800_R1KG001_MAIN_YOIGO_WI_RED52
Hi there
I have managed to unlock my w810i (CID: 49). I would like to upgrade the firmware. If I do this, will my phone still be unlocked?
Also, I noticed since unlocking the phone it switches itself off every now and again. What might be causing this?
Thanks
Tristan
If you flash/upgrade/debrand the phone, then it will be relocked, so you need to unlock it again.Quote:
I would like to upgrade the firmware. If I do this, will my phone still be unlocked?
Probably this is a software problem. Reflash your phone completely(MAIN, FS, custom pack), and then unlock it. It should work then.Quote:
Also, I noticed since unlocking the phone it switches itself off every now and again. What might be causing this?
Before reflashing the phone, backup the user data(contact list, pictures, ring tones etc.) from phone's internal memory, because during flash it will be lost.
when cid53 pach will be posible?