Printable View
Hi all.
1. What is the best way to unlock my w810i phone?
I would like to use a different sim.
2. Does debranding unlock it or will I still need to patch it.
3.Also what is the best unlocking program and method..
4. Also is there a way to use far manager without constanting patching main with x++ everytime I want to customise my phone.
1)Patch it.
2)Don't know .
3)SetooLite.
4)No.
1. If your phone's EROM CID is 49 then you can unlock it by patch.
2. Debranding WILL NOT unlock it.
3. Remove SIM-lock patch generator to generate an unlock patch and How to apply patchs with Se Tool 2 Lite on DB2010 phones to apply it.
4. No way...
thanks for the quick reply guys..
good job on your app simox...
You should add the link to tutorial (w810i) on your program thread cos i was uncertain about the db2020 guide you put..due to the fact that w810i is db2010 phone..perhaps you could add more guide for d2010 or a link to pink's guide for future noobs.
I already customise my phone with flash menu and it looks cool. I hate the branded phone but thanks to researching other peoples guides I now have cool flash menus.
A few more questions..
1. In what instance do u lose the patch and need to re apply? ie flashing main or fs.
2. Do I need to debrand first b4 patching?
oh and simox you say you need setools 1.11? But the guide link you gave me has a pic of 1.08?
3. I am from australia which firmware (fs and main) do I need and the cust pack?
4. Which camera driver and audio do you think is best? Can you please give me a link.
I've been reading good stuff about the super camera driver.. but the link on the chengrong blog is dead.Also do you know where to get more flash menus..
5. Is there a safe way to stop from bricking or a safe recovery for a brick phone..I read about you (Simox) saying back up gdfs first..
6. Also I download this rar of patches on this site.. is it safe to apply these patches?
btw I saw this fm radio patch didn't knew that the phone radio works without the headphone as an antenna..?
thx guys in advance...
Thanx for hint, I put a link to DB2010 patching tutorial...
1. You loose all patches if you reflash the MAIN firmware. If you reflash the FS, then you will loose the user data (any settings, contact list, ringtones, ect.) from phone's internal memory.
2. If you want to apply the 'unlock' patch generated by my tool then no need to debrand, just use a proper MAIN firmware to generate the patch. However if you want to put other patches, then it is required to use a generic(unbranded) firmware. Also it is required to match the firmware version with the patch.
Here is an example: Open the *.vkp patch with Notepad, and in first line you will see something like ;W810 SW-R4EA031. This means that you need to have a W810 phone with R4EA031 generic firmware (W810_R4EA031_MAIN_GENERIC_HN_RED49.mbn) to be able to apply the patch.
SETool2 Lite v1.11 is needed for applying patches to DB2020 phones only. To apply patches to DB2010 phones you can use the v1.08 as well.
3. MAIN: W810_R4EA031_MAIN_GENERIC_HN_RED49.mbn (R4EA031 can be any version, but for this one there are the most of patches)
FS: It depends what language you want(I suppose that you use english) so basically you can use ANY FS, because you will get the English with any FS. E.g.: W810_R4EA031_FS_EUROPE_1_RED49 (instead of EUROPE_1 can be anything)
Custom pack: The custom pack must patch with the FS: CDA102555/10 (EUROPE_1)
Here is the CDA List to find the required custom pack.
Just look at download section, and you will see what firmwares, custom packs exists for your phone...
4. Good question, don't know. Maybe someone will help you with this, sorry...
5. It is always a good practice to backup the GDFS and put it to a safe place e.g. a CD/DVD disc, USB thumb/flash/pen drive (choose the name you like :) ) etc.
If you brick your phone by damaging the GDFS, then you can restore the backup, so it will bring back your dead phone to life.
6. That patch is good for nothing, because like you said, the headphone is the FM antenna, and without it neither of radio stations will work ...
thanks for taking the time to answer my question simox...
but...
1. So that means that everytime I decide to customise my phone, by flashing the main with the breakloader then using far manager then reflashing with the main file I will lose my patch? And I will need to use setools2 to repatch. Anyway to use x++ instead to shorten the step..with a pre patched main..
2. Anyway to backup the patched main to re use
3. Is debranding flashing the main with a generic main or is it flashing the fs or both? I know that if I just flash the main, the branded logos are still on the phone.
So the only way to get rid of the logos is to flash the fs. Are few quides told be to be careful about flash the fs cause it can cos a brick..is it safe?
Plus how can I keep my contacts, calendar or back it up and re send it?
4. Are most serious bricks cause by the gdfs flashing..whereas if your main or fs flashing corrupts you can just reflash again..
4. I am always interested in learning...how does the sim lock work? ie. how does the phone know you got a sim that is not allowed.? if the check is in the phone main, how does your patch work?
thanks simox
btw I just patched my phone with your unlocking software...
thanks alot simox...
now I am using my old sim card.. :)
...but if I decide to customise my phone I will need to repatch right??
1. If you reflash the MAIN file then you will loose the patches. However if you flash the breakloader, customize your phone with FAR + SEFP and at the end flash the rest(restore) file instead of the MAIN, then your patches will stay. So again, you loose your patches only if you reflash the ENTIRE MAIN firmware.
Or you can use XS++ v3.x to customize your phone and you will not loose the patches.
2. Probably yes, but I haven't tried it.
3. You can backup and restore your data with MyPhoneExplorer. This software will not backup the MMS/WAP/Internet settings(profiles), but you can backup them manually: download all files from /system/wap/profile/ (phone memory)
4. The trick is, that every GDFS is unique, so you cannot just flash another GDFS, because your phone will not work. But if you have a GDFS backup, and your phone's GDFS will be damaged, you can restore that backup, so you can unbrick the phone.
If you have a backup, then no need to worry, you cannot kill your phone :) .
5. The original patch is not mine, IronMaster is who created, and my tool ports it.
Every service provider has a code what identify it, and it is stored in SIM card. In protected area of GDFS is stored what SIM cards are allowed. Yes, the check is in MAIN firmware. In normal conditions(without the unlock patch) the phone reads the SIM-lock codes from GDFS and compare them with the codes read from SIM card, and you know what is the result :D
The patch will deactivate the mechanism, and give an "unlocked" code to phone, so it thinks that the SIM is allowed to use. The whole thing is a bit more complicated, but this is the main point.
Simox quote:
"at the end flash the rest(restore) file instead of the MAIN, then your patches will stay. So again, you loose your patches only if you reflash the ENTIRE MAIN firmware.
Or you can use XS++ v3.x to customize your phone and you will not loose the patches."
1. Can you tell me how to restore file instead of flashing main which loses the patch?
And also how to use xs ++ v3 to customise without losing the patch?
2. So if I want to add different patches, just add them one after the another?
3. Another helpful hint to improve your thread is to add "DB2010 is phones : w810i" DB2020 is phone : ... etc.. this would help noobs out since when I went in your thread I wasn't sure if phone was 2010 or 2020, all I know for certain it was w810i.
Also some little info about what CID 49 (numbers means) etc. btw are the CID security levels pre programmed by SE during manufacturing?
4. So this patch to use an analogy is like eg. You(unauthorise sim card) go to a nightclub and the bouncer (main firmware) ask for the passcode...
you give passcode (vodaphone) , bouncer looks at guestlist (GDFS) sees that cingular (branded code) is the only code so he rejects you..
but when we patch the main (bouncer)...we give the bouncer a bogus code before the bouncer has a chance to ask you. but somehow the bogus code passes in the GDFS (guestlist)?
note: I learn complex stuff best with analogies hehe :)
4. btw how does the network unlock the phone for you after your contract expired?
Do they give you a code that changes the GDFS
How do they permanently unlock the phone without patching?
5. Are you working engineering or computer programming or student of some engineering or IT computer science? I also got some background in electrical engineering and IT from studies..
6. Do you have any other projects you are doing or just this patching program?
Anyways I got my phone unlocked (thanks for your help), I got flash menus etc..
I am pretty happy.. :)
I might do some driver customisation..
I wonder what other stuff can you do with the phone (hacking wise)?
Your answers have been really informative and helpful...
I hope this thread helps others...or get put the top or sticky to help other noobs...
1. FAR+SEFP tutorial: DB2010 cid49 with Far + SEFP, Tested with k750
XS++ v3.x file upload/download tutorial: [GUIDE]File uploading tutorial using XS++ v3.0 or V3.1. These tutorials are in Tutorials & Guides section...
2. Exactly.
3. Good analogy :D. Basically this is the point.
4. They(network operators) somehow compute an unlock code(some sort of hash code) based on your phone's IMEI, and you can input that code in phone(you can access the menu with <**< key combination). If the code is good, the phone will update the network locks located in GDFS with the "unlocked" one, so the phone will allow you to use any SIM card.
5. I studied IT enginering.
The advanced SE phone hacking(patch porting etc.) is just a hobby of mine, and I started it in a few months ago, so I'm a noob :)
6. I published only this one so far. I planning to make other tools too, but don't know when, because I don't have much free time.
The "other stuff" are the patches. You can find a lot of them for your phone...
I'm glad to hear that you succeeded :)
You can add a link to this site:
Platform and cid of sony ericsson phones - Top Sony Forums
Mosts phone's CID and DB is listed there ;)
Congratulations, it seems like you two have created the thread with the longest posts here :D
Thanks for link, justme.
Yes, it just happed, it wasn't premeditated I sware :D :DQuote:
Congratulations, it seems like you two have created the thread with the longest posts here :D
Cheers this has helped me to
Hey simox
1. After I patched my phone,
I can't seem to backup my contact list to memory stick..
Do you know what could be the problem or cause of the backup failure?
2. Also the thread you sent me... it uses phonexs not x++v3 but if I use
using x++ v3 is that brute force method so it doesn't require repatching the main file? I thought that in order to use far manager will need to patch a break loader and the only way to get our phone working again is to reflash a main file?
Could you tell me exactly how I restore my patched main file rather reflashing a new main...the tutorial you sent had some indescrepancy.
3. Also what phone do you have simox?
Also in regard to the longest post....I thought I saw in simox thread there is a lot of post there...anyway is it a bad thing?
I hope it help others ...cos it definely helped me.. :)
:rolleyes:Indeed it helps a lot in the forum, its just shsring, thanks simox happy that u r IITian;), more patch in your spare time plz:p. We are vey gretful that u r've chosen this top sony site, we are lucky to be with u. have a long stay.:)
madmax2:
1. Good question. First of all restart your phone, and try again. Also clean the contacts of memory stick.
Your memory stick is working properly? If you can read from and write to memstick, then the error can be caused by file system corruption(to solve this, backup your memory stick's content, reformat it, then copy the files back). I'm just guessing, but try it, there is nothing to loose... If this doesn't helps, the only option left is to reflash your phone completely(MAIN, FS, custom pack).
2. I know, the tutorial use PhoneXS, but you can use XS++ or even SETool Lite(be a little creative ;) ).
If you want to use FAR manager then you are right, exept, there are two ways to revive the phone: reflash the MAIN firmware or flash the rest file. If you flash the rest file, the patches will remain. You need a rest file(in rest folder) what match with your MAIN firmware.Quote:
I thought that in order to use far manager will need to patch a break loader and the only way to get our phone working again is to reflash a main file?
Also you can use the XS++ ONLY to upload/download the files without any extra flashing. Check the second tutorial what I linked.
Hope I cleared the confusion...
The long posts aren't bad things, I think the contrarily is the true. In that post I was joking only :D
Taurus3:
I'm working on it, and hope I will finish it soon...Quote:
more patch in your spare time plz:p.
I will because I like this forum, and you too guys :)Quote:
have a long stay.:)
first try to unbrand the phone and then path it
Hey simox
1. I don't think it is the memory card, cos I tested it with a spare 32mb memory card I had lying around, and I format the memstick with phone software.
I think it is either the patched, or the main firmware...not sure...
It isn't as big a deal cos I can sync it, but it just concerns me a bit cos I like my phone to be all good, and it would be nice to backup to memory stick..
I am not sure if the prob caused because my phone is still branded (ie I didn't flash the fs folder.
Reason why I didn't unbranded it full cos I can't download the customisation files here cos I don't have enough post plus I don't want to lose my calendar appointments, contacts etc.. (Do you know where I can get the customisation files,firmware/fs files besides here or nse..cos I don't have enough post..)
2. Is the upload/download method of x++ (ie fsx) is that the brute force method that takes hours to just send a file?
Also sending the restore file to the flash using FAR, once that is done does that stop you from using FAR again, until you reflash breakloader again?
The rest file is that in the firmware....so I have to extract it using some main2raw or something...
3. Which method do you like best: flash the rest or using x++(fsx)?
You back up all your information (contacts, message, calling history) using my phone explorer
1. Then maybe the mixed MAIN and FS is the problem. Or simply it is a bug of MAIN firmware. But the patch is excluded. Debrand it with XS++. It has the required custom pack incorporated, so you no need to download any custom pack, just select one in XS++. I cannot give you any link because it is against of forum rules.
Like 93bh said, you can backup all those things with MyPhoneExplorer(a free program). I linked it already in some earlier post.
2. Use XS++ v3.1. This doesn't use bruteforce, and it is fast.
If you flash the rest file, you cannot connect to FAR until you flash the breakloader.
The rest file is the first few blocks from MAIN firmware. It can be created with rest.exe what comes with SEFP.
3. I like more the XS++ method, but this is my personal preference only.
Thanks simox..
Like I said it isn't a big deal..and I rather have an unlocked phone than this backup feature...I might try what you said...
BTW The main is the generic, and the FS is the default one that came with the phone (Australia, I think is Europe 2 FS though)..
Possibly the reason why it fails cos the mixed firmware (like you said).
If you figure out the actual reason, then let me know thanks..