Remove SIM-lock patch generator

[JimKarvo]

Could you help me more?
I have downloaded Top Sony Forums , but as I can see, I can't flash it with XS++

What I have to do?

[riders4sia]

show us the log, post the log you got from xs and we could give you a guide

[JimKarvo]

Hello. I used the FAR manager to add the custom file to phone, and it is works! Thank you :)

[odeseus]

Hi I have a major problem and despite struggling with my phone for the last 1 day, uing FarManager, SeTool2, SeTool2Lite and XS++ i am still not able to resolve my issue !!

1 I had a sony ericsson phone (W580i ) from Rogers Telecom (bought in Dec 2007), which i had unlocked in Feb 2008.

2. It was unlocked perfectly and was working fine until i decided to automatically upgrade it. I used SEUS ( the automatic update service ) to update my phone. After the update, I used the phone on Rogers network, and later kept it aside since I had gotten another phone.

3. Now almost after 1 year I took out the W580 phone again, bought a Fido SIM and tried using it, only to realize that it will not accept any non-Rogers SIM.

4. I researched on forums and tried checking my firmware to realize that W580 security had been automatically upgraded to CD53 and the phone was relocked to Rogers ( perhaps during the SEUS update).


5. I have used FarManager to Flash W580 with a new CD53 Firmware and FS, but the phone is still locked.

6. I also generated a phone unlocking TKP patch using SIMLockPatchGen_v2.2.rar ( for the new CD53 firmware / MBN ) but i am unable to apply it using setool2lite ....

Please help me with this, as I am really confused and need to fix this ASAP !!
find below the logs ...

welcome to setool2 lite edition v 1.08
supported DB2010/DB2012 CID49/50/51/52, DB2020 CID49/51/52
Loaded 51 flash descriptors
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:53
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP LOCKED:1 CID:51 PAF:1 IMEI:35928501525966 CERT:RED
FLASH CID:53 COLOR:RED

MAPP CXC article: R8BA024 prgCXC1123362_GENERIC_LA
MAPP CXC version: R8BA024
Language Package:T_MOB_INT_B
CDA article: CDA102774/165
CDA version: R2A
Default article: cxc1123364
Default version: R8BA024

Network LOCKED
Operator: 302-72

Elapsed:28 secs.
Will backup GDFS now.
<< I cancelled the operation since it doesn't work beyon this point >>>
Abort all operations.
phone pre-boot failed,possible RECOVERY needed.
Elapsed:8 secs.


Basically, after identifying the phone succesfully setool2lite is not able to do any other
operation, neither can it read GDFS properly, nor can it write the TKP script !!!

( after IDENTIFYING the phone, I disconnect the phone, plug the battery again, press "READ GDFS" and insert cable while pressing in C key )

Will backup GDFS now.
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:53
Speed:921600
OTP LOCKED:1 CID:51 PAF:1 IMEI:35928501525966 CERT:RED
FLASH CID:53 COLOR:RED
Can't build loaders chain ;(
Elapsed:6 secs.

( after IDENTIFYING the phone, I disconnect the phone, plug the battery again, press "WRITE SCRIPT" and insert cable while pressing in C key )

Going to execute VKP script....
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:53
Speed:921600
OTP LOCKED:1 CID:51 PAF:1 IMEI:35928501525966 CERT:RED
FLASH CID:53 COLOR:RED
Can't build loaders chain ;(
Elapsed:0 secs.

( after IDENTIFYING the phone, I disconnect the phone, plug the battery again, press "READ GDFS" and insert cable while pressing in C key )

Also, i wanted to to know if above steps are the right way to use setool2
As far as FarMNanager is concerned, once the phone it identified i donot have to dicsonnect everytime after flashing firmwares or uploading XML files ???
So does, setool2 reauire me to connect the phone everytime again for each new operation ?

Also would it be possible to generate the unlock code based on the IMEI number ??( perhaps decoding the tkp patch info may help)

thanks for the help
Hasan

[riders4sia]

you need to do all operations with FAR+Jdflasher, none of the software work on CID53 phone
Read here : Flash K800 CID53 with K810 software CID53 (for begginers) - Top Sony Forums but use files only for w580
here for unlocking procedure : Patching CID53 (DB2020)DB2010,2012 - Top Sony Forums

[strontium9]

Please help...I'm trying to unlock a w850i locked to Orange UK, but even when I follow instructions, the .bin file I have created, when I put it in qamaker.exe. it says "not a BABE".....also sim lock generator says "is not valid firmware"
Here is log

ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP LOCKED:1 CID:51 PAF:1 IMEI:35536301592425 CERT:RED
FLASH CID:52 COLOR:RED

Model:W850i
Brand:Orange
MAPP CXC article: R1JC002 prgCXC1250202_ORANGE_CY
MAPP CXC version: R1JC002
Language Package:ORANGE_GEN
CDA article: CDA102677/36
CDA version: R11A
Default article: cxc1250489
Default version: R1JC002

Network LOCKED
Operator: 234-33

Elapsed:11 secs.
Will backup GDFS now.
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
OTP LOCKED:1 CID:51 PAF:1 IMEI:35536301592425 CERT:RED
FLASH CID:52 COLOR:RED
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:897E
Flash props sent ok
CSloader version:
070410 1557 HANCXC1250562_DB2020_CSLOADER_R3A009
loader startup: executed
loader GDFS startup: executed
stated number of vars:1414
Found:663 variables
Found:676 variables
Found:75 variables
GDFS read all done, GDFS_35536301592425.BIN written
Phone detached
Elapsed:54 secs.

What can I do?

Look...It worked after all...just need someone to give me the .vpd file to turn the briwser from orange to o2.....thanks

[lockfree]

Hi folks,
I use Setool Lite 1.11 to unlock S500i which is locked to multiple operator when I identify phone. I follow the the instructions carefully and the process was finished successfully. But the phone is still locked. Could it be the reason because my phone is locked to multiple operator.??
Please help me. I have include the log, thanks in advance.
Welcome to SEtool2 ( LITE edition ) v 1.11
supported DB2010/DB2012 CID49/50/51/52, DB2020 CID49/51/52
Loaded 51 flash descriptors

if you like LITE edition - please visit http://www.setool.net and buy FULL.

ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP LOCKED:1 CID:51 PAF:1 IMEI:xxxxxxxxxxxxxxx CERT:RED
FLASH CID:52 COLOR:RED

Model:S500i
MAPP CXC article: R8BE001 prgCXC1123326_GENERIC_LY
MAPP CXC version: R8BE001
Language Package:EUROPE_5
CDA article: CDA102765/129
CDA version: R3A
Default article: cxc1123328
Default version: R8BH001

Network LOCKED
Operator: MULTIPLE

Elapsed:7 secs.
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
OTP LOCKED:1 CID:51 PAF:1 IMEI:xxxxxxxxxxxxxxx CERT:RED
FLASH CID:52 COLOR:RED
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:897E
Flash props sent ok

CID52 BYPASS PROCEDURE STARTED
Processing part1...
CSloader version:
070410 1557 HANCXC1250562_DB2020_CSLOADER_R3A009
Processing part2...
Processing part3....
OTP LOCKED:1 CID:51 PAF:1 IMEI:xxxxxxxxxxxxxxx CERT:RED
FLASH CID:52 COLOR:RED
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:897E
Flash props sent ok

REMOVE CABLE FROM PHONE
REMOVE BATTERY FROM PHONE, THEN INSERT IT BACK
THEN PRESS "READY"

HOLD "C" BUTTON AND ATTACH PHONE

CID52 BYPASS PROCEDURE FINISHED

ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Trying to launch embedded bootloader...
INT LDR:DB2020_PRELOADER_FOR_SETOOL2
LDR:DB2020 LOADER FOR SETOOL2
Flash ID check:897E
Flash props sent ok
writing D:\SElite2\qamaker\S500_R8BE001_MAIN_GENERIC_LY_RE D52.mbn
CURRENT FLASH FILE CID:52
SSW uses complete hash, hash len is:9200
Will flash 460 blocks...
SSW loading returns:0
Going to execute VKP script....
Starting to process VKP patch script: D:\SElite2\qamaker\quick_access_S500_R8BE001.vkp
VKP script loaded OK. Lines: 1637
Patch structure created OK. Determining blocks to read...
New block #0000 added: $44140000
New block #0001 added: $45C00000
Blocks selected OK. Reading blocks: 2
Blocks readed to memory OK. Checking contents...
Blocks patched OK. Start writing...
Block 0 written
Block 1 written
VKP script executed OK
Elapsed:892 secs.
Going to execute VKP script....
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Trying to launch embedded bootloader...
INT LDR:quick access patch by den_po
FLASH CID:52 COLOR:RED
OTP LOCKED:1 CID:51 PAF:1 IMEI:xxxxxxxxxxxxxxxx CERT:RED
LDR:DB2020 LOADER FOR SETOOL2
Starting to process VKP patch script: D:\SElite2\SIMLockPatchGen\vkp\Remove_SIM_lock_S50 0_R8BE001.vkp
VKP script loaded OK. Lines: 6
Patch structure created OK. Determining blocks to read...
New block #0000 added: $44600000
Blocks selected OK. Reading blocks: 1
Blocks readed to memory OK. Checking contents...
Blocks patched OK. Start writing...
Block 0 written
VKP script executed OK
Elapsed:27 secs.
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP LOCKED:1 CID:51 PAF:1 IMEI:xxxxxxxxxxxxxxx CERT:RED
FLASH CID:52 COLOR:RED

:confused:The identify log after patch unlocking is pratically the same:(

Model:S500i
MAPP CXC article: R8BE001 prgCXC1123326_GENERIC_LY
MAPP CXC version: R8BE001
Language Package:EUROPE_5
CDA article: CDA102765/129
CDA version: R3A
Default article: cxc1123328
Default version: R8BH001

Network LOCKED
Operator: MULTIPLE

Elapsed:19 secs.

[philzfog]

it will be as the patch only fools the phone in to thinking its unlocked :-)
did u add the main and patch then tick the bypass box then press flash

[lockfree]

I guess I did, as you can read in the log.

I will try to unlock it again and post the results.

[c4r_dr1v3r]

OK, when trying to follow the steps to unlock a k550i (locked to a portuguese network) I got carried away and did something I wasn't supposed to (it wasn't even part of the steps... doh!)... now the phone doesn't seem to work and I can't even find the gdfs file that I'm supposed to use to fix the thing...
why?? I definitely did the "read GDFS"... I thought it would save that gdfs_IMEI file automatically...

what can I do? I'm like a 8 year old to this stuff so please explain it to me with that in mind.