Remove SIM-lock patch generator

[golddickaz]

Did the Falsh again on my w580i, this i could start the phone again, but its still Locked..damn
Color: Red ; OTP CID: 51
EROM CID: 52
Phone Model: W580i
Operator: EUROPE_4
CDA: CDA102426/12 R2A
Phone Firmware: R6BC002
Firmware CXC: R6BC002_prgCXC1123362_GENERIC_LA
Firmware supported for patch unlocking.
MCC+MNC: 238-01 - USIM
NCK: - Unlocked - 5
NSCK: - Locked - 5
SPCK: - Unlocked - 5
CCK: - Unlocked - 5
PCK: - Unlocked - 5
ESL: - Unlocked - 5
Phone Code: - Empty
Phone Code lock state: - Unlocked

Log from Setool..

REMOVE CABLE FROM PHONE
REMOVE BATTERY FROM PHONE, THEN INSERT IT BACK
THEN PRESS "READY"

HOLD "C" BUTTON AND ATTACH PHONE

CID52 BYPASS PROCEDURE FINISHED

ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Trying to launch embedded bootloader...
INT LDR:DB2020_PRELOADER_FOR_SETOOL2
LDR:DB2020 LOADER FOR SETOOL2
Flash ID check:897E
Flash props sent ok
writing F:\_Upload\_MOBIL\_Flash_Files\W580_R6BC002_MAIN_G ENERIC_LA_RED52\W580_R6BC002_MAIN_GENERIC_LA_RED52 .mbn
CURRENT FLASH FILE CID:52
SSW uses complete hash, hash len is:9200
Will flash 460 blocks...
SSW loading returns:0
Going to execute VKP script....
Starting to process VKP patch script: F:\_Upload\SIMLockPatchGen\vkp\Remove_SIM_lock_W58 0_R6BC002.vkp
VKP script loaded OK. Lines: 6
Patch structure created OK. Determining blocks to read...
New block #0000 added: $44600000
Blocks selected OK. Reading blocks: 1
Blocks readed to memory OK. Checking contents...
Blocks patched OK. Start writing...
Block 0 written
VKP script executed OK
Elapsed:679 secs.
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP LOCKED:1 CID:51 PAF:1 IMEI:*********** CERT:RED
FLASH CID:52 COLOR:RED

Model:W580i
Brand:Generic
MAPP CXC article: R6BC002 prgCXC1123362_GENERIC_LA
MAPP CXC version: R6BC002
Language Package:EUROPE_4
CDA article: CDA102426/12
CDA version: R2A
Default article: cxc1123364
Default version: R6BC002

Network subset LOCKED
Operator: MULTIPLE

Elapsed:9 secs.


Damn... any suggestions

[simox]

k550_R1JD001 cid52 need this patch simox .:) thx i got this message :
Entry point cannot be found. Probably it is not a MAIN firmware, but if you are sure
that it is, then please contact the author.

You found a bug. I will check it tomorrow, because it is too late here. I'm going to sleep :)

[IsAaCCéSaR]

]Did the Falsh again on my w580i, this i could start the phone again, but its still Locked..damn
Color: Red ; OTP CID: 51
EROM CID: 52
Phone Model: W580i
Operator: EUROPE_4
CDA: CDA102426/12 R2A
Phone Firmware: R6BC002
Firmware CXC: R6BC002_prgCXC1123362_GENERIC_LA
Firmware supported for patch unlocking.
MCC+MNC: 238-01 - USIM
NCK: - Unlocked - 5
NSCK: - Locked - 5
SPCK: - Unlocked - 5
CCK: - Unlocked - 5
PCK: - Unlocked - 5
ESL: - Unlocked - 5
Phone Code: - Empty
Phone Code lock state: - Unlocked

Log from Setool..

REMOVE CABLE FROM PHONE
REMOVE BATTERY FROM PHONE, THEN INSERT IT BACK
THEN PRESS "READY"

HOLD "C" BUTTON AND ATTACH PHONE

CID52 BYPASS PROCEDURE FINISHED

ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Trying to launch embedded bootloader...
INT LDRB2020_PRELOADER_FOR_SETOOL2
LDRB2020 LOADER FOR SETOOL2
Flash ID check:897E
Flash props sent ok
writing F:\_Upload\_MOBIL\_Flash_Files\W580_R6BC002_MAIN_G ENERIC_LA_RED52\W580_R6BC002_MAIN_GENERIC_LA_RED52 .mbn
CURRENT FLASH FILE CID:52
SSW uses complete hash, hash len is:9200
Will flash 460 blocks...
SSW loading returns:0
Going to execute VKP script....
Starting to process VKP patch script: F:\_Upload\SIMLockPatchGen\vkp\Remove_SIM_lock_W58 0_R6BC002.vkp
VKP script loaded OK. Lines: 6
Patch structure created OK. Determining blocks to read...
New block #0000 added: $44600000
Blocks selected OK. Reading blocks: 1
Blocks readed to memory OK. Checking contents...
Blocks patched OK. Start writing...
Block 0 written
VKP script executed OK
Elapsed:679 secs.
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP LOCKED:1 CID:51 PAF:1 IMEI:*********** CERT:RED
FLASH CID:52 COLOR:RED

Model:W580i
Brand:Generic
MAPP CXC article: R6BC002 prgCXC1123362_GENERIC_LA
MAPP CXC version: R6BC002
Language Package:EUROPE_4
CDA article: CDA102426/12
CDA version: R2A
Default article: cxc1123364
Default version: R6BC002

Network subset LOCKED
Operator: MULTIPLE

Elapsed:9 secs.


Damn... any suggestions

Test Now some other sim-card.

[golddickaz]

Yes mannn, it Worked...hehe thx alot, and thx too simox, Very nice work m8, thx ;) keep up the good work

[yurais]

So, is it obbligatory to FLASH Main to th phon ? If I create teh patch from the same FW version the phone is running cant I just apply the patch ?

And can someone please tell me in few words how to upgrade CID 50 to CID52 without for examplel giving some credits to seking server?

And... after I upgrade CID, will the patching stuff work? with OTP CID50 andn EROM CID 52?

Simoxx, is there any way to read MAIN from the phone using setool lt and then Generate the patch from that created file ? is this possible ?

otherwise one has to download every possible firmware from the inteernet and this is not an easy task, after you have released this latest version, nobody wants to continue sharing their patches of teh firmwares they already have :((

[Shitblast]

Flashed my 3-locked w850i with firmware and fast-access script with SEtool 2.11 according to seunlock's guide, then wrote the simox-generated script to unlock it to it by "quick access." This rid it of the 3-screens and gained me access to all phone-functions except making calls. It displays "Inactive SIM" and won't let me pick my network. Any ideas?

SeTool output:

Going to execute VKP script....
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Trying to launch embedded bootloader...
INT LDR:quick access patch by den_po
FLASH CID:52 COLOR:RED
OTP LOCKED:1 CID:49 PAF:1 IMEI:35240101272487 CERT:RED
LDR:DB2020 LOADER FOR SETOOL2
Starting to process VKP patch script: C:\Documents and Settings\Administrator\Desktop\Remove_SIM_lock_W85 0_R1KG001.vkp
VKP script loaded OK. Lines: 6
Patch structure created OK. Determining blocks to read...
New block #0000 added: $44740000
Blocks selected OK. Reading blocks: 1
Blocks readed to memory OK. Checking contents...
Blocks patched OK. Start writing...
Block 0 written
VKP script executed OK
Elapsed:14 secs.

Read Flash:
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Trying to launch embedded bootloader...
INT LDR:quick access patch by den_po
FLASH CID:52 COLOR:RED
OTP LOCKED:1 CID:49 PAF:1 IMEI:35240101272487 CERT:RED
LDR:DB2020 LOADER FOR SETOOL2
Will read 00020000 bytes from 44000000
Reading:131072 bytes
Done
Phone is detached.
Elapsed:5 secs.

[gurinder]

i m getting error while patching w200i with version r4a

check this sir and tell me where i m wrong?

any good patch for w200i


log from setool2lite 1.11


Welcome to SEtool2 ( LITE edition ) v 1.11
supported DB2010/DB2012 CID49/50/51/52, DB2020 CID49/51/52
Loaded 51 flash descriptors

if you like LITE edition - please visit Index of ./ and buy FULL.

ChipID:8040,EMP protocol:0301
NEW SECURITY MODEL DETECTED
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
OTP LOCKED:1 CID:51 PAF:1 IMEI:35426901169312 CERT:RED
LDR:061205 1354 HAN_DB2012_FLASHLOADER_R2B012_CXC1326738
Flash ID check:897E
Flash props sent ok
writing C:\Documents and Settings\National Computers\Desktop\W200_R4JA011_MAIN_GENERIC_ME_RED 52\W200_R4JA011_MAIN_GENERIC_ME_RED52.mbn
CURRENT FLASH FILE CID:52
SSW uses complete hash, hash len is:6360
Will flash 318 blocks...
SSW loading returns:0
writing C:\Documents and Settings\National Computers\Desktop\W200_R4JA011_FS_CENT_EUROPE_RED5 2\W200_R4JA011_FS_CENT_EUROPE_RED52.fbn
CURRENT FLASH FILE CID:52
SSW uses complete hash, hash len is:2500
Will flash 125 blocks...
SSW loading returns:0
Going to execute VKP script....
Starting to process VKP patch script: G:\kaku from 10 month\sony ericcson\SIMLockPatchGen_v2.1\SIMLockPatchGen\vkp\ Remove_SIM_lock_W200_R4JA011.vkp
VKP script loaded OK. Lines: 6
Patch structure created OK. Determining blocks to read...
New block #0000 added: $44CC0000
Blocks selected OK. Reading blocks: 1
Block @ $44CC0000 read error. Have only: 00000000 bytes
Elapsed:242 secs.
Going to execute VKP script....
ChipID:8040,EMP protocol:0301
NEW SECURITY MODEL DETECTED
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
OTP LOCKED:1 CID:51 PAF:1 IMEI:3542690xxxxxxx CERT:RED
LDR:061205 1354 HAN_DB2012_FLASHLOADER_R2B012_CXC1326738
Flash ID check:897E
Flash props sent ok
Starting to process VKP patch script: G:\kaku from 10 month\sony ericcson\SIMLockPatchGen_v2.1\SIMLockPatchGen\vkp\ Remove_SIM_lock_W200_R4JA011.vkp
VKP script loaded OK. Lines: 6
Patch structure created OK. Determining blocks to read...
New block #0000 added: $44CC0000
Blocks selected OK. Reading blocks: 1
Block @ $44CC0000 read error. Have only: 00000000 bytes
Elapsed:12 secs.
Abort all operations.
phone pre-boot failed,possible RECOVERY needed.
Elapsed:2 secs.
ChipID:8040,EMP protocol:0301
NEW SECURITY MODEL DETECTED
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
OTP LOCKED:1 CID:51 PAF:1 IMEI:35426901xxxxxxx CERT:RED
LDR:061205 1354 HAN_DB2012_FLASHLOADER_R2B012_CXC1326738
Flash ID check:897E
Flash props sent ok
writing C:\Documents and Settings\National Computers\Desktop\W200_R4JA011_MAIN_GENERIC_ME_RED 52\W200_R4JA011_MAIN_GENERIC_ME_RED52.mbn
CURRENT FLASH FILE CID:52
SSW uses complete hash, hash len is:6360
Will flash 318 blocks...
SSW loading returns:0
Going to execute VKP script....
Starting to process VKP patch script: C:\Documents and Settings\National Computers\Desktop\Unlock_Patch_DB2010_DB2012_DB202 0\W200_R4JA011_RED52.vkp
VKP script loaded OK. Lines: 5
Patch structure created OK. Determining blocks to read...
New block #0000 added: $44CC0000
Blocks selected OK. Reading blocks: 1
Block @ $44CC0000 read error. Have only: 00000000 bytes
Elapsed:176 secs.

[seunlock]

i m getting error while patching w200i with version r4a

check this sir and tell me where i m wrong?

any good patch for w200i


log from setool2lite 1.11


Welcome to SEtool2 ( LITE edition ) v 1.11
supported DB2010/DB2012 CID49/50/51/52, DB2020 CID49/51/52
Loaded 51 flash descriptors

if you like LITE edition - please visit Index of ./ and buy FULL.

ChipID:8040,EMP protocol:0301
NEW SECURITY MODEL DETECTED
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
OTP LOCKED:1 CID:51 PAF:1 IMEI:35426901169312 CERT:RED
LDR:061205 1354 HAN_DB2012_FLASHLOADER_R2B012_CXC1326738
Flash ID check:897E
Flash props sent ok
writing C:\Documents and Settings\National Computers\Desktop\W200_R4JA011_MAIN_GENERIC_ME_RED 52\W200_R4JA011_MAIN_GENERIC_ME_RED52.mbn
CURRENT FLASH FILE CID:52
SSW uses complete hash, hash len is:6360
Will flash 318 blocks...
SSW loading returns:0
writing C:\Documents and Settings\National Computers\Desktop\W200_R4JA011_FS_CENT_EUROPE_RED5 2\W200_R4JA011_FS_CENT_EUROPE_RED52.fbn
CURRENT FLASH FILE CID:52
SSW uses complete hash, hash len is:2500
Will flash 125 blocks...
SSW loading returns:0
Going to execute VKP script....
Starting to process VKP patch script: G:\kaku from 10 month\sony ericcson\SIMLockPatchGen_v2.1\SIMLockPatchGen\vkp\ Remove_SIM_lock_W200_R4JA011.vkp
VKP script loaded OK. Lines: 6
Patch structure created OK. Determining blocks to read...
New block #0000 added: $44CC0000
Blocks selected OK. Reading blocks: 1
Block @ $44CC0000 read error. Have only: 00000000 bytes
Elapsed:242 secs.
Going to execute VKP script....
ChipID:8040,EMP protocol:0301
NEW SECURITY MODEL DETECTED
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
OTP LOCKED:1 CID:51 PAF:1 IMEI:3542690xxxxxxx CERT:RED
LDR:061205 1354 HAN_DB2012_FLASHLOADER_R2B012_CXC1326738
Flash ID check:897E
Flash props sent ok
Starting to process VKP patch script: G:\kaku from 10 month\sony ericcson\SIMLockPatchGen_v2.1\SIMLockPatchGen\vkp\ Remove_SIM_lock_W200_R4JA011.vkp
VKP script loaded OK. Lines: 6
Patch structure created OK. Determining blocks to read...
New block #0000 added: $44CC0000
Blocks selected OK. Reading blocks: 1
Block @ $44CC0000 read error. Have only: 00000000 bytes
Elapsed:12 secs.
Abort all operations.
phone pre-boot failed,possible RECOVERY needed.
Elapsed:2 secs.
ChipID:8040,EMP protocol:0301
NEW SECURITY MODEL DETECTED
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
OTP LOCKED:1 CID:51 PAF:1 IMEI:35426901xxxxxxx CERT:RED
LDR:061205 1354 HAN_DB2012_FLASHLOADER_R2B012_CXC1326738
Flash ID check:897E
Flash props sent ok
writing C:\Documents and Settings\National Computers\Desktop\W200_R4JA011_MAIN_GENERIC_ME_RED 52\W200_R4JA011_MAIN_GENERIC_ME_RED52.mbn
CURRENT FLASH FILE CID:52
SSW uses complete hash, hash len is:6360
Will flash 318 blocks...
SSW loading returns:0
Going to execute VKP script....
Starting to process VKP patch script: C:\Documents and Settings\National Computers\Desktop\Unlock_Patch_DB2010_DB2012_DB202 0\W200_R4JA011_RED52.vkp
VKP script loaded OK. Lines: 5
Patch structure created OK. Determining blocks to read...
New block #0000 added: $44CC0000
Blocks selected OK. Reading blocks: 1
Block @ $44CC0000 read error. Have only: 00000000 bytes
Elapsed:176 secs.

setool2 lite only supports DB2012 CID49

[simox]

So, is it obbligatory to FLASH Main to th phon ? If I create teh patch from the same FW version the phone is running cant I just apply the patch ?

And can someone please tell me in few words how to upgrade CID 50 to CID52 without for examplel giving some credits to seking server?

And... after I upgrade CID, will the patching stuff work? with OTP CID50 andn EROM CID 52?

Simoxx, is there any way to read MAIN from the phone using setool lt and then Generate the patch from that created file ? is this possible ?

otherwise one has to download every possible firmware from the inteernet and this is not an easy task, after you have released this latest version, nobody wants to continue sharing their patches of teh firmwares they already have :((

I suggest you to read the following tutorial before you try to do anything How to apply patches with SETool2 Lite V1.11. And don't forget to backup your GDFS(it is very important to have a backup, otherwise you can brick your phone forever.)
You can upgrade the CID with XS++ v3.x versions. When you connect the phone to XS++ it will ask you if you want to upgrade the CID or not. Yes, after your EROM CID will be 52 you can apply the patch...

Shitblast: The generated patch is good, I know for sure because that patch was tested on sen-se forum under v2.1 development. First reflash your MAIN firmware, then read this thread How to apply patches with SETool2 Lite V1.11, and follow the instruntions. Is should work. If not try jdflasher. Just read above a few posts and you will find the link for jdflasher...

xulos: I'm working on your problem...

[gurinder]

setool2 lite only supports DB2012 CID49

i m using setool2lite v1.11

then i m getting this message,if this software supports only cid49 then why other people saying that it supports db2020 also. anyother solution plz..................