Remove SIM-lock patch generator

[jonner]

your the man. firmware is valid. however, when using setool2lt. i am not getting the apply patch dialog box.then when i try to write script...... the embedded flash loader doesn't respond. And when using XS++, main firmware flashes ok then fails when flashing the file system.... header type damaged/unknown. still locked on orange but working again thanx

[jonner]

01:12:02| XS++ v3.1 (Darwin) Ready !

01:12:02| Executed on Microsoft Windows XP

01:16:31| Shutting down...

01:46:32| XS++ v3.1 (Darwin) Ready !

01:46:32| Executed on Microsoft Windows XP

01:46:55|

01:46:55| Attempting to open the interface...

01:46:55|

01:46:55| TURN OFF PHONE!

01:46:55| Hold 'C' button on phone and connect phone NOW.

01:46:55| You have 30 seconds...

01:46:55|

01:46:56| Baseband ID: 9900

01:46:56| Protocol Version: 3.1

01:46:57| Phone name detected!

01:46:57|

01:46:57| Profiling SEMC phone...

01:46:57| Platform: DB2020

01:46:57| OTP CID: 49

01:46:57| EROM CID: 52

01:46:57| EROM Color: Red

01:46:57| IMEI: 35170701xxxxxx

01:46:57| Phone ID: K800

01:46:57| Region: ORANGE_GEN

01:46:57| CDA: CDA102511/47 R13A

01:46:57| Firmware Version: R1CB001

01:46:57| EROM: R3A011

01:46:57| Ready for operation!

01:47:48|

01:47:48| Sending db2020_cid01_prodid_p3j.bin...

01:47:48| Applet ID: 070129 0950 NGUCXC1250330_DB2020_PRODUCTIONIDLOADER_P3J

01:47:48| This is a PRODUCTION_ID loader

01:47:48|

01:47:48| Sending db2020_mem_patcher_cid52_r2a006.bin...

01:47:49| Applet ID: 061205 1523 HANCXC9876543210_DB2020_MEM_PATCHER_R2A006 0

01:47:49| This is a MEM_PATCHER loader

01:47:49|

01:47:49| Sending db2020_red52_cs_r3a009.bin...

01:47:51| Applet ID: 070410 1557 HANCXC1250562_DB2020_CSLOADER_R3A009

01:47:51| This is a CHIPSELECT loader

01:47:51| Activating loader...

01:47:51| Activating GDFS...

01:48:06| This loader is UNLOCKED

01:48:06| Backing up the GDFS...

01:48:08| Stated variables: 1517

01:48:10| Variables found: 657

01:48:13| Variables found: 632

01:48:14| Variables found: 206

01:48:14| Variables found: 22

01:48:14| Wrote backup to .\Backup\K800_35170701xxxxxx_GDFS_BACKUP.bin

01:48:14| GDFS was backed up successfully!

01:48:14| GDFS operation was successful

01:48:16| Disconnected... Unplug the phone

01:50:26|

01:50:26| Attempting to open the interface...

01:50:26|

01:50:26| TURN OFF PHONE!

01:50:26| Hold 'C' button on phone and connect phone NOW.

01:50:26| You have 30 seconds...

01:50:26|

01:50:30| Did not receive 0x5a. Continuing

01:50:35| Disconnected... Unplug the phone

01:50:50|

01:50:50| Attempting to open the interface...

01:50:50|

01:50:50| TURN OFF PHONE!

01:50:50| Hold 'C' button on phone and connect phone NOW.

01:50:50| You have 30 seconds...

01:50:50|

01:50:54| Did not receive 0x5a. Continuing

01:51:01| Disconnected... Unplug the phone

01:51:18|

01:51:18| Attempting to open the interface...

01:51:18|

01:51:18| TURN OFF PHONE!

01:51:18| Hold 'C' button on phone and connect phone NOW.

01:51:18| You have 30 seconds...

01:51:18|

01:51:18| Baseband ID: 9900

01:51:18| Protocol Version: 3.1

01:51:18| Phone name detected!

01:51:18|

01:51:18| Profiling SEMC phone...

01:51:18| Platform: DB2020

01:51:18| OTP CID: 49

01:51:18| EROM CID: 52

01:51:18| EROM Color: Red

01:51:18| IMEI: 35170701xxxxxx

01:51:18| Phone ID: K800

01:51:18| Region: ORANGE_GEN

01:51:18| CDA: CDA102511/47 R13A

01:51:18| Firmware Version: R1CB001

01:51:18| EROM: R3A011

01:51:18| Ready for operation!

01:51:54| ~~~~~~~~~~ Custpack information ~~~~~~~~~~

01:51:54| Custpack: EUROPE_4 (CDA102511/101) (K800)

01:51:54| Generic(non-branded) custpack: Yes

01:51:54| Allowed languages: en, da, fi, is, sv, no,

01:51:54| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

01:51:56|

01:51:56| Sending db2020_cid01_prodid_p3j.bin...

01:51:56| Applet ID: 070129 0950 NGUCXC1250330_DB2020_PRODUCTIONIDLOADER_P3J

01:51:56| This is a PRODUCTION_ID loader

01:51:57|

01:51:57| Sending db2020_mem_patcher_cid52_r2a006.bin...

01:51:57| Applet ID: 061205 1523 HANCXC9876543210_DB2020_MEM_PATCHER_R2A006 0

01:51:57| This is a MEM_PATCHER loader

01:51:57|

01:51:57| Sending db2020_cid52red_flash_r2a005.bin...

01:51:57| Applet ID: 061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005

01:51:57| This is a FLASH loader

01:51:57| Now flashing firmware main...

01:51:57| Flashing c:\documents and settings\colin\software\setool2litev1.11\qamaker\k 800_r1cb001_main_generic_red52.mbn

01:51:57| Header type: BABE

01:51:58| 455 flashblocks

01:55:40| Finishing flash

01:55:41| Done flashing

01:55:41| Now flashing filesystem...

01:55:41| Flashing c:\documents and settings\colin\software\xs++\backup\k800_35170701x xxxxx_gdfs_backup.bin

01:55:41| Header type: Unknown/damaged

01:55:41| 292 flashblocks

01:55:41| Binary acknowledge failed with: 89

01:55:41| Failed

01:55:41| Binary acknowledge failed with: 68

01:55:41| Command: Error 0x68

01:55:41| Failed sending flashblock 1. Returnvalue 0x1733814

01:55:41| Finishing flash

01:55:41| Binary acknowledge failed with: 02

01:55:41| Failed

01:55:41| Failed

01:58:15| Error: Flashing failed

01:58:15| Disconnected... Unplug the phone

[SeaMonkey]

01:12:02| XS++ v3.1 (Darwin) Ready !

01:12:02| Executed on Microsoft Windows XP

01:16:31| Shutting down...

01:46:32| XS++ v3.1 (Darwin) Ready !

01:46:32| Executed on Microsoft Windows XP

01:46:55|

01:46:55| Attempting to open the interface...

01:46:55|

01:46:55| TURN OFF PHONE!

01:46:55| Hold 'C' button on phone and connect phone NOW.

01:46:55| You have 30 seconds...

01:46:55|

01:46:56| Baseband ID: 9900

01:46:56| Protocol Version: 3.1

01:46:57| Phone name detected!

01:46:57|

01:46:57| Profiling SEMC phone...

01:46:57| Platform: DB2020

01:46:57| OTP CID: 49

01:46:57| EROM CID: 52

01:46:57| EROM Color: Red

01:46:57| IMEI: 35170701xxxxxx

01:46:57| Phone ID: K800

01:46:57| Region: ORANGE_GEN

01:46:57| CDA: CDA102511/47 R13A

01:46:57| Firmware Version: R1CB001

01:46:57| EROM: R3A011

01:46:57| Ready for operation!

01:47:48|

01:47:48| Sending db2020_cid01_prodid_p3j.bin...

01:47:48| Applet ID: 070129 0950 NGUCXC1250330_DB2020_PRODUCTIONIDLOADER_P3J

01:47:48| This is a PRODUCTION_ID loader

01:47:48|

01:47:48| Sending db2020_mem_patcher_cid52_r2a006.bin...

01:47:49| Applet ID: 061205 1523 HANCXC9876543210_DB2020_MEM_PATCHER_R2A006 0

01:47:49| This is a MEM_PATCHER loader

01:47:49|

01:47:49| Sending db2020_red52_cs_r3a009.bin...

01:47:51| Applet ID: 070410 1557 HANCXC1250562_DB2020_CSLOADER_R3A009

01:47:51| This is a CHIPSELECT loader

01:47:51| Activating loader...

01:47:51| Activating GDFS...

01:48:06| This loader is UNLOCKED

01:48:06| Backing up the GDFS...

01:48:08| Stated variables: 1517

01:48:10| Variables found: 657

01:48:13| Variables found: 632

01:48:14| Variables found: 206

01:48:14| Variables found: 22

01:48:14| Wrote backup to .\Backup\K800_35170701xxxxxx_GDFS_BACKUP.bin

01:48:14| GDFS was backed up successfully!

01:48:14| GDFS operation was successful

01:48:16| Disconnected... Unplug the phone

01:50:26|

01:50:26| Attempting to open the interface...

01:50:26|

01:50:26| TURN OFF PHONE!

01:50:26| Hold 'C' button on phone and connect phone NOW.

01:50:26| You have 30 seconds...

01:50:26|

01:50:30| Did not receive 0x5a. Continuing

01:50:35| Disconnected... Unplug the phone

01:50:50|

01:50:50| Attempting to open the interface...

01:50:50|

01:50:50| TURN OFF PHONE!

01:50:50| Hold 'C' button on phone and connect phone NOW.

01:50:50| You have 30 seconds...

01:50:50|

01:50:54| Did not receive 0x5a. Continuing

01:51:01| Disconnected... Unplug the phone

01:51:18|

01:51:18| Attempting to open the interface...

01:51:18|

01:51:18| TURN OFF PHONE!

01:51:18| Hold 'C' button on phone and connect phone NOW.

01:51:18| You have 30 seconds...

01:51:18|

01:51:18| Baseband ID: 9900

01:51:18| Protocol Version: 3.1

01:51:18| Phone name detected!

01:51:18|

01:51:18| Profiling SEMC phone...

01:51:18| Platform: DB2020

01:51:18| OTP CID: 49

01:51:18| EROM CID: 52

01:51:18| EROM Color: Red

01:51:18| IMEI: 35170701xxxxxx

01:51:18| Phone ID: K800

01:51:18| Region: ORANGE_GEN

01:51:18| CDA: CDA102511/47 R13A

01:51:18| Firmware Version: R1CB001

01:51:18| EROM: R3A011

01:51:18| Ready for operation!

01:51:54| ~~~~~~~~~~ Custpack information ~~~~~~~~~~

01:51:54| Custpack: EUROPE_4 (CDA102511/101) (K800)

01:51:54| Generic(non-branded) custpack: Yes

01:51:54| Allowed languages: en, da, fi, is, sv, no,

01:51:54| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

01:51:56|

01:51:56| Sending db2020_cid01_prodid_p3j.bin...

01:51:56| Applet ID: 070129 0950 NGUCXC1250330_DB2020_PRODUCTIONIDLOADER_P3J

01:51:56| This is a PRODUCTION_ID loader

01:51:57|

01:51:57| Sending db2020_mem_patcher_cid52_r2a006.bin...

01:51:57| Applet ID: 061205 1523 HANCXC9876543210_DB2020_MEM_PATCHER_R2A006 0

01:51:57| This is a MEM_PATCHER loader

01:51:57|

01:51:57| Sending db2020_cid52red_flash_r2a005.bin...

01:51:57| Applet ID: 061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005

01:51:57| This is a FLASH loader

01:51:57| Now flashing firmware main...

01:51:57| Flashing c:\documents and settings\colin\software\setool2litev1.11\qamaker\k 800_r1cb001_main_generic_red52.mbn

01:51:57| Header type: BABE

01:51:58| 455 flashblocks

01:55:40| Finishing flash

01:55:41| Done flashing

01:55:41| Now flashing filesystem...

01:55:41| Flashing c:\documents and settings\colin\software\xs++\backup\k800_35170701x xxxxx_gdfs_backup.bin

01:55:41| Header type: Unknown/damaged

01:55:41| 292 flashblocks

01:55:41| Binary acknowledge failed with: 89

01:55:41| Failed

01:55:41| Binary acknowledge failed with: 68

01:55:41| Command: Error 0x68

01:55:41| Failed sending flashblock 1. Returnvalue 0x1733814

01:55:41| Finishing flash

01:55:41| Binary acknowledge failed with: 02

01:55:41| Failed

01:55:41| Failed

01:58:15| Error: Flashing failed

01:58:15| Disconnected... Unplug the phone

You put wrong file for FS,you must put FS not GDFS backup

[vidmag]

Hi Jonner

I had this problem, you need a later version of SE tool, I got SeTool_2_Lite_1.11 with a quick search in google, it had the patch tick box in that.

Other than that the Tutorial at the begining of this section worked a treat. I had tried several other tutorials most were written in a way that confused my poor old brain.

Do you get the white screen for the sleep mode, I also seem to have a menu.ml problem.

Good luck

Dave
:)

[jonner]

do i need to download the fs file that matches R1CB001?

[SeaMonkey]

do i need to download the fs file that matches R1CB001?

YES Main and FS must be same version and don' forget to finalize flashing with custpack

[simox]

mlm122

Keiji, I have tried the simlock patch gen several times on my my 580i, and it shows all the padlocks unlocked, but stiill won't recognize another operator's sim. What Main file did you use, please?

You can try with another MAIN firmware as well, but if all the padlocks are open, then the patch works. Also I think the problem is that the other network operator(s) are blocking the phone's IMEI...

By the way what error message you get? The 'original' SIM card still works? If you have more SIM cards form different networks try all of them.

[jonner]

YES Main and FS must be same version and don' forget to finalize flashing with custpack

unlocked first time, used the same fw main inthe fs box. didn't have a chance using setool2 on its own. now on o2 p&g free calls and txts

[jonner]

Hi Jonner

I had this problem, you need a later version of SE tool, I got SeTool_2_Lite_1.11 with a quick search in google, it had the patch tick box in that.

Other than that the Tutorial at the begining of this section worked a treat. I had tried several other tutorials most were written in a way that confused my poor old brain.

Do you get the white screen for the sleep mode, I also seem to have a menu.ml problem.

Good luck

Dave
:)

i'm using the new version, and tried following the tutorial to the letter with no joy. so i used XS++ with the correct fw main and fs(many thanks for the download) and followed the tutorial that came with XS++, worked first time. am getting the menu.ml error message when i switchon,just glad my phone is unbricked and unlocked:D

[mlm122]

mlm122

You can try with another MAIN firmware as well, but if all the padlocks are open, then the patch works. Also I think the problem is that the other network operator(s) are blocking the phone's IMEI...

By the way what error message you get? The 'original' SIM card still works? If you have more SIM cards form different networks try all of them.

Hi, Simox, I know your patch generator works, which is why I'm really puzzled. I get "Insert Sim Or Press Demo" message on 2 different T-Mobile Sims. That is the default message on a 580, when there is no sim at all in the phone. My native Sim is AT&T and that works just fine. I know the phone is actually unlocked, because all the padlocks are open. I have, so far, tried 2 different MAINS, and 2 or 3 different combos of custom packs. The resulting error message is always exactly the same.

The most recent MAIN I tried was W580_R8BE001_MAIN_NAM_1_LA_RED52.mbn, but I have also tried W580_R8BE001_MAIN_GENERIC_LA_RED52.mbn

The one thing I will double check with you : Typically when using SETool lite, you take Sim, out, of course. During applying this particular patch, there is no reason to leave it in the phone, is there?

Thanks for trying to help, I do apprec your work on that program.:)