Remove SIM-lock patch generator

[vojar]

It isn't PhoneXS++ just XS++;)
You can backup the GDFS with SETool2 Lite too. Select the phone model and click on Read GDFS (be careful, press the right button) and follow the instructions. But you can use XS++ as well.



This cannot be done without MAIN firmware. Read this tutorial How to apply patches with SETool2 Lite V1.11.

Tanks for the intruction. so I did what was wrote on the topic, but when the SETOOL2lite was writing the srcipt who was generated with the qamaker. it show me a message like "some patch value diferet". the a click no a my phone wasn't turning on, so a just reflash the main without the script and the phone is still don't turnig on :confused:
what is wrong?? there are the two logs who was generated:

first log:
Welcome to SEtool2 ( LITE edition ) v 1.11
supported DB2010/DB2012 CID49/50/51/52, DB2020 CID49/51/52
Loaded 51 flash descriptors

if you like LITE edition - please visit Index of ./ and buy FULL.

ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
OTP LOCKED:1 CID:51 PAF:1 IMEI:XXXXXXXXXXXXXX CERT:RED
FLASH CID:52 COLOR:RED
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:897E
Flash props sent ok

CID52 BYPASS PROCEDURE STARTED
Processing part1...
CSloader version:
070410 1557 HANCXC1250562_DB2020_CSLOADER_R3A009
Processing part2...
Processing part3....
OTP LOCKED:1 CID:51 PAF:1 IMEI:XXXXXXXXXXXXXX CERT:RED
FLASH CID:52 COLOR:RED
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:897E
Flash props sent ok

REMOVE CABLE FROM PHONE
REMOVE BATTERY FROM PHONE, THEN INSERT IT BACK
THEN PRESS "READY"

HOLD "C" BUTTON AND ATTACH PHONE

CID52 BYPASS PROCEDURE FINISHED

ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Trying to launch embedded bootloader...
INT LDR:DB2020_PRELOADER_FOR_SETOOL2
LDR:DB2020 LOADER FOR SETOOL2
Flash ID check:897E
Flash props sent ok
Going to execute VKP script....
Starting to process VKP patch script: C:\Users\Gustavo\Desktop\setool2lite1.11www.se-tuning.net\qamaker\quick_access_K550_R6BC002.vkp
VKP script loaded OK. Lines: 1637
Patch structure created OK. Determining blocks to read...
New block #0000 added: $44140000
New block #0001 added: $45A00000
Blocks selected OK. Reading blocks: 2
Blocks readed to memory OK. Checking contents...
Elapsed:525 secs.



second log:

Welcome to SEtool2 ( LITE edition ) v 1.11
supported DB2010/DB2012 CID49/50/51/52, DB2020 CID49/51/52
Loaded 51 flash descriptors

if you like LITE edition - please visit Index of ./ and buy FULL.

ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
OTP LOCKED:1 CID:51 PAF:1 IMEI:XXXXXXXXXXXXXX CERT:RED
FLASH CID:52 COLOR:RED
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:897E
Flash props sent ok

CID52 BYPASS PROCEDURE STARTED
Processing part1...
CSloader version:
070410 1557 HANCXC1250562_DB2020_CSLOADER_R3A009
Processing part2...
Processing part3....
OTP LOCKED:1 CID:51 PAF:1 IMEI:XXXXXXXXXXXXXX CERT:RED
FLASH CID:52 COLOR:RED
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:897E
Flash props sent ok

REMOVE CABLE FROM PHONE
REMOVE BATTERY FROM PHONE, THEN INSERT IT BACK
THEN PRESS "READY"

HOLD "C" BUTTON AND ATTACH PHONE

CID52 BYPASS PROCEDURE FINISHED

ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Trying to launch embedded bootloader...
INT LDR:DB2020_PRELOADER_FOR_SETOOL2
LDR:DB2020 LOADER FOR SETOOL2
Flash ID check:897E
Flash props sent ok
CSloader version:
DB2020_FILESYSTEMLOADER_FOR_SETOOL2
loader startup: executed
wrong response, break.
loader fs startup failed, that is fatal
Elapsed:508 secs.

[Shitblast]

Same result. Still "Inactive SIM." This time's SEtool-output:

Welcome to SEtool2 ( LITE edition ) v 1.11
supported DB2010/DB2012 CID49/50/51/52, DB2020 CID49/51/52
Loaded 51 flash descriptors

if you like LITE edition - please visit Index of ./ and buy FULL.

CID52 BYPASS PROCEDURE STARTED
Processing part1...
CSloader version:
070410 1557 HANCXC1250562_DB2020_CSLOADER_R3A009
Processing part2...
Processing part3....
OTP LOCKED:1 CID:49 PAF:1 IMEI:35240101272487 CERT:RED
FLASH CID:52 COLOR:RED
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:897E
Flash props sent ok

REMOVE CABLE FROM PHONE
REMOVE BATTERY FROM PHONE, THEN INSERT IT BACK
THEN PRESS "READY"

HOLD "C" BUTTON AND ATTACH PHONE

CID52 BYPASS PROCEDURE FINISHED

ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Trying to launch embedded bootloader...
INT LDR:DB2020_PRELOADER_FOR_SETOOL2
LDR:DB2020 LOADER FOR SETOOL2
Flash ID check:897E
Flash props sent ok
writing C:\Documents and Settings\Administrator\Desktop\W850_R1KG001_MAIN_G ENERIC_RED52.mbn
CURRENT FLASH FILE CID:52
SSW uses complete hash, hash len is:9200
Will flash 460 blocks...
SSW loading returns:0
Going to execute VKP script....
Starting to process VKP patch script: C:\Documents and Settings\Administrator\Desktop\Remove_SIM_lock_W85 0_R1KG001.vkp
VKP script loaded OK. Lines: 6
Patch structure created OK. Determining blocks to read...
New block #0000 added: $44740000
Blocks selected OK. Reading blocks: 1
Blocks readed to memory OK. Checking contents...
Blocks patched OK. Start writing...
Block 0 written
VKP script executed OK
Elapsed:644 secs.

[GinnCorvus]

Same result. Still "Inactive SIM." This time's SEtool-output:

Welcome to SEtool2 ( LITE edition ) v 1.11
supported DB2010/DB2012 CID49/50/51/52, DB2020 CID49/51/52
Loaded 51 flash descriptors

if you like LITE edition - please visit Index of ./ and buy FULL.

CID52 BYPASS PROCEDURE STARTED
Processing part1...
CSloader version:
070410 1557 HANCXC1250562_DB2020_CSLOADER_R3A009
Processing part2...
Processing part3....
OTP LOCKED:1 CID:49 PAF:1 IMEI:35240101272487 CERT:RED
FLASH CID:52 COLOR:RED
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:897E
Flash props sent ok

REMOVE CABLE FROM PHONE
REMOVE BATTERY FROM PHONE, THEN INSERT IT BACK
THEN PRESS "READY"

HOLD "C" BUTTON AND ATTACH PHONE

CID52 BYPASS PROCEDURE FINISHED

ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Trying to launch embedded bootloader...
INT LDR:DB2020_PRELOADER_FOR_SETOOL2
LDR:DB2020 LOADER FOR SETOOL2
Flash ID check:897E
Flash props sent ok
writing C:\Documents and Settings\Administrator\Desktop\W850_R1KG001_MAIN_G ENERIC_RED52.mbn
CURRENT FLASH FILE CID:52
SSW uses complete hash, hash len is:9200
Will flash 460 blocks...
SSW loading returns:0
Going to execute VKP script....
Starting to process VKP patch script: C:\Documents and Settings\Administrator\Desktop\Remove_SIM_lock_W85 0_R1KG001.vkp
VKP script loaded OK. Lines: 6
Patch structure created OK. Determining blocks to read...
New block #0000 added: $44740000
Blocks selected OK. Reading blocks: 1
Blocks readed to memory OK. Checking contents...
Blocks patched OK. Start writing...
Block 0 written
VKP script executed OK
Elapsed:644 secs.

The "Inactive SIM" is NOT "Insert corret usim"!! This patch remove the SIM Network lock and NOT USIM-Lock feature of H3G Network!!
You can use only the 3-usim provided with the phone. Olny after few months you can use other usim of the same network H3G.
Try another SIM of other Network, (exe. Vodafone..) and working... :D

[Shitblast]

There a way to kill a USIM-lock?

[joao_ladei]

tested on k610 R1GB001 and it works great :):):):):)
i have 2 unlocked phones now thanks simox :)

[mackydon]

iv tested this for w810, k530, k610 & w660 firmware, all work fine :D

[dan409]

Tested it on w580i with original firmware and worked GREAT !!! I didn't have to flash the phone first with the generic MAIN CDA and FS files !!! You are the MAN Simox..

All 5 locks are ulocked !!! Thanks for your work!

Selected firmware: C:\w580i\flashfiles\W580_R8BA024_MAIN_GENERIC_LA_R ED52.mbn
Analyzing firmware...
BABE header found and seems ok.
Flash Platform: DB2020
Flash CID: 52
Flash Color: Red
Base address: 44140000
Generating raw firmware...
Firmware generated.
Searching for required addresses...
Addresses found.
Generating vkp patch...
"C:\SimUnlockgen\SIMLockPatchGen\vkp\Remove_SIM_lo ck_W580_R8BA024.vkp" patch file created.
FINISHED.

[simox]

Tanks for the intruction. so I did what was wrote on the topic, but when the SETOOL2lite was writing the srcipt who was generated with the qamaker. it show me a message like "some patch value diferet". the a click no a my phone wasn't turning on, so a just reflash the main without the script and the phone is still don't turnig on :confused:
what is wrong??

Well, the first problem can be solved if you use jdflasher instead of SETool2 Lite(it is a SETool2 Lite bug????). The second problem is that the flashing failed(so it is normal that your phone doens't turn on), because your FS is probably corrupted. So first reflash your phone completely(MAIN, FS, cust pack) with XS++, because it is easier to do with it. Then you can try again with SETool2 Lite, but probably it will fail again, so use jdflasher instead...

[Shitblast]

I've checked the lock-status of my phone through "services" and then "SIM-lock." All five padlock-icons are shown as unlocked. I just now tried flashing with jdflasher, just to try, but still get the same error-message after entering PIN: "Inactive SIM," and a phone-handle with a bar over it.

[vojar]

Well, the first problem can be solved if you use jdflasher instead of SETool2 Lite(it is a SETool2 Lite bug????). The second problem is that the flashing failed(so it is normal that your phone doens't turn on), because your FS is probably corrupted. So first reflash your phone completely(MAIN, FS, cust pack) with XS++, because it is easier to do with it. Then you can try again with SETool2 Lite, but probably it will fail again, so use jdflasher instead...

Tanks for the help, but I solve the problemin on this way, first I brought it back to life with SESU. :D, but I decide to try again and now my phone is unlocked!!! :D tanks for every thing

the mistake was that I wasn't put the MAIN on the field of files, but I was puting that on the field of firmeware upgrade!!! :p

and tanks again!!!:)