Remove SIM-lock patch generator

[simox]

Don't worry, your phone isn't really dead, and it can be easily revived ;) The problem is that there is no restoration file in [SeTool2Lite_folder]\rest folder for your MAIN. However you can make one with [SeTool2Lite_folder]\make_rest\ssw2rest.exe
Open a command prompt and invoke it as:

ssw2rest [path_to_MAIN]\K510_R4EC001_MAIN_GENERIC_CO_RED49.mbn 44140000

You will get a R4EC001_CXC1250231_GENERIC_CO file in [SeTool2Lite_folder]\make_rest\ folder. Copy it to [SeTool2Lite_folder]\rest folder. Reflash the MAIN firmware, then apply the unlock patch again. If everything goes well, the phone will work and will be unlocked too.

[mba2431]

Don't worry, your phone isn't really dead, and it can be easily revived ;) The problem is that there is no restoration file in [SeTool2Lite_folder]\rest folder for your MAIN. However you can make one with [SeTool2Lite_folder]\make_rest\ssw2rest.exe
Open a command prompt and invoke it as:

ssw2rest [path_to_MAIN]\K510_R4EC001_MAIN_GENERIC_CO_RED49.mbn 44140000

You will get a R4EC001_CXC1250231_GENERIC_CO file in [SeTool2Lite_folder]\make_rest\ folder. Copy it to [SeTool2Lite_folder]\rest folder. Reflash the MAIN firmware, then apply the unlock patch again. If everything goes well, the phone will work and will be unlocked too.

thanks mr simox. but when i flash main and patch vkp, my phone stuck in "PLEASE WAIT".
help me please...

[simox]

When a phone stuck at "PLEASE WAIT" screen, it is usually a GDFS problem. I hope you made a GDFS backup, before any flashing/patching attempt. Restore that GDFS backup(but DO NOT flash any other GDFS) and it should work.

By the way, and if you only flash the MAIN without applying the patch do you still get that "PLEASE WAIT" screen?

[mba2431]

i did backup my GDFS by phone xs but now i flash it by SETOOL get this error:

ChipID:8040,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:49
Speed:921600
OTP LOCKED:1 CID:49 PAF:1 IMEI:35238********* CERT:RED
PATCH:061204 1529 HAN_DB2010_MEM_PATCHER_R2A007_CXC9876543210 0
LDR:060718 0842 LIE_DB2010_FLASHLOADER_R2A003_CXC1326738
Flash ID check:2019
Flash props sent ok
 
DETACH CABLE FROM PHONE.
REMOVE BATTERY FROM PHONE, THEN INSERT IT BACK
THEN PRESS "READY"
 
Trying to launch embedded bootloader...
INT LDR:COMPACT_ID_LOADER_CRIPPLED_SETOOL2_R2
Flash ID check:2019
Flash props sent ok
FOUND: R4EC001_CXC1250231_GENERIC_CO
Restore from:R4EC001_CXC1250231_GENERIC_CO
CSloader version:
SETOOL2 LITE  COMPACT_SEMC_FS_LOADER (FAT V26)
loader startup: executed
loader GDFS startup: executed
Will write GDFS now.
will write 1091 variables
gdfsWrite err:11,block:1,unit:3CA
gdfsWrite err:11,block:3,unit:FAF
gdfsWrite err:11,block:3,unit:138F
gdfsWrite err:11,block:4,unit:1778
gdfsWrite err:11,block:4,unit:1B6D
gdfsWrite err:11,block:5,unit:1F54
gdfsWrite err:11,block:6,unit:2720
gdfsWrite err:11,block:6,unit:2726
done
Phone detached
Elapsed:132 secs.

[simox]

Try to restore the GDFS with XS++. If doesn't works, then reflash the phone completely(MAIN, FS, custom pack), and then restore the GDFS.

[doedelkong]

hey there,

since a friend got a new mobile phone, he gave me his old K800i with O2-network addiction. I have a T-mobile SIM, so I wanted to unlock it. I tried it as good as I could considering it is my first time doing something like that. But thanks to the great guide here, I made my way through it. The problem is: It doesn't work. I'm still asked for the phone lock code.

As for the SeTOOL Logs:

Welcome to SEtool2 ( LITE edition ) v 1.11
supported DB2010/DB2012 CID49/50/51/52, DB2020 CID49/51/52
Loaded 51 flash descriptors

if you like LITE edition - please visit Index of ./ and buy FULL.

ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP LOCKED:1 CID:49 PAF:1 IMEI:35170701925139 CERT:RED
FLASH CID:52 COLOR:RED

Model:K800i
MAPP CXC article: R1CB001 prgCXC1250210_GENERIC_WI
MAPP CXC version: R1CB001
Language Package:EUROPE_2
CDA article: CDA102511/74
CDA version: R7A
Default article: cxc1250490
Default version: R1CB001

Operator: 000-00

Elapsed:201 secs.
Will backup GDFS now.
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
OTP LOCKED:1 CID:49 PAF:1 IMEI:35170701925139 CERT:RED
FLASH CID:52 COLOR:RED
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:897E
Flash props sent ok
CSloader version:
070410 1557 HANCXC1250562_DB2020_CSLOADER_R3A009
loader startup: executed
loader GDFS startup: executed
stated number of vars:1593
Found:672 variables
Found:628 variables
Found:199 variables
Found:94 variables
GDFS read all done, GDFS_35170701925139.BIN written
Phone detached
Elapsed:45 secs.
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP LOCKED:1 CID:49 PAF:1 IMEI:3517blablabla CERT:RED
FLASH CID:52 COLOR:RED

Model:K800i
MAPP CXC article: R1CB001 prgCXC1250210_GENERIC_WI
MAPP CXC version: R1CB001
Language Package:EUROPE_2
CDA article: CDA102511/74
CDA version: R7A
Default article: cxc1250490
Default version: R1CB001

Operator: 000-00

Elapsed:1 secs.


____________________


Welcome to SEtool2 ( LITE edition ) v 1.11
supported DB2010/DB2012 CID49/50/51/52, DB2020 CID49/51/52
Loaded 51 flash descriptors

if you like LITE edition - please visit Index of ./ and buy FULL.

ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP LOCKED:1 CID:49 PAF:1 IMEI:35170blabla CERT:RED
FLASH CID:52 COLOR:RED

Model:K800i
MAPP CXC article: R1CB001 prgCXC1250210_GENERIC_WI
MAPP CXC version: R1CB001
Language Package:EUROPE_2
CDA article: CDA102511/74
CDA version: R7A
Default article: cxc1250490
Default version: R1CB001

Operator: 000-00

Elapsed:7 secs.
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
OTP LOCKED:1 CID:49 PAF:1 IMEI:35170blabla CERT:RED
FLASH CID:52 COLOR:RED
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:897E
Flash props sent ok

CID52 BYPASS PROCEDURE STARTED
Processing part1...
CSloader version:
070410 1557 HANCXC1250562_DB2020_CSLOADER_R3A009
Processing part2...
Processing part3....
OTP LOCKED:1 CID:49 PAF:1 IMEI:3517blabla CERT:RED
FLASH CID:52 COLOR:RED
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:897E
Flash props sent ok

REMOVE CABLE FROM PHONE
REMOVE BATTERY FROM PHONE, THEN INSERT IT BACK
THEN PRESS "READY"

HOLD "C" BUTTON AND ATTACH PHONE

CID52 BYPASS PROCEDURE FINISHED

ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Trying to launch embedded bootloader...
INT LDR:DB2020_PRELOADER_FOR_SETOOL2
LDR:DB2020 LOADER FOR SETOOL2
Flash ID check:897E
Flash props sent ok
writing C:\Dokumente und Einstellungen\deadz\Desktop\K800_R1KG001_MAIN&FS_E UROPE_2_RED52\K800_R1KG001_MAIN_GENERIC_WI_RED52.m bn
CURRENT FLASH FILE CID:52
SSW uses complete hash, hash len is:9200
Will flash 460 blocks...
SSW loading returns:0
Going to execute VKP script....
Starting to process VKP patch script: C:\Dokumente und Einstellungen\deadz\Desktop\setool2lite1.11www.se-tuning.net\qamaker\quick_access_K800_R1KG001.vkp
VKP script loaded OK. Lines: 1637
Patch structure created OK. Determining blocks to read...
New block #0000 added: $44140000
New block #0001 added: $45C40000
New block #0002 added: $45C80000
Blocks selected OK. Reading blocks: 3
Blocks readed to memory OK. Checking contents...
Blocks patched OK. Start writing...
Block 0 written
Block 1 written
Block 2 written
VKP script executed OK
Elapsed:782 secs.
Going to execute VKP script....
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Trying to launch embedded bootloader...
INT LDR:quick access patch by den_po
FLASH CID:52 COLOR:RED
OTP LOCKED:1 CID:49 PAF:1 IMEI:35170blabla CERT:RED
LDR:DB2020 LOADER FOR SETOOL2
Starting to process VKP patch script: C:\Dokumente und Einstellungen\deadz\Desktop\SIMLockPatchGen_v2.1\S IMLockPatchGen\vkp\Remove_SIM_lock_K800_R1KG001.vk p
VKP script loaded OK. Lines: 6
Patch structure created OK. Determining blocks to read...
New block #0000 added: $44740000
Blocks selected OK. Reading blocks: 1
Blocks readed to memory OK. Checking contents...
Blocks patched OK. Start writing...
Block 0 written
VKP script executed OK
Elapsed:26 secs.

__________________________

So where is my mistake and what can I do? :confused:

[SeaMonkey]

Phone lock code (like you write) or SIM lock code ?

[doedelkong]

I put my SIM-card into the phone, turn it on, enter my password for the SIM-card and then the phone asks me for the "phone lock code".

[SeaMonkey]

That means- your phone is locked. Ask your friend for phone lock code( you can reset phone lock code - if you forgot PIN with XS++)

[super-pat]

how can i copy the firmware of my w850i and patch it using simox SIM-Lock remover patch generator