Help - Search - Members - Calendar
Full Version: How To Unlock W200i
SE-NSE Forums > SE Firmware > Firmware & Flashing Discussion
Immortal_Baron
okay, i wanna unlcok my w200i,

chk the log file to see if it can be patch unlocked plese....

and give a quick procedure aswell...

thanks.

CODE
Welcome to SEtool2 ( LITE edition ) v 1.11
supported DB2010/DB2012 CID49/50/51/52, DB2020 CID49/51/52
Loaded 51 flash descriptors

if you like LITE edition - please visit www.setool.net and buy FULL.

ChipID:8040,EMP protocol:0301
NEW SECURITY MODEL DETECTED
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:51
Speed:921600
Flash ID check:2019
Flash props sent ok
OTP LOCKED:1 CID:51 PAF:1 IMEI:************** CERT:RED
FLASH CID:51 COLOR:RED

Model:W200i
Brand:T-mobile
MAPP CXC article: R4GB001     prgCXC1250719_GENERIC_ME
MAPP CXC version: R4GB001
Language Package:T_MOB_INT_A
CDA article: CDA102738/58
CDA version: R8A
Default article: cxc1250728
Default version: R4GB001

Extended LOCKED
Operator: MULTIPLE

USERCODE:0000

RESTORATION FILE NOT PRESENT
"R4GB001_CXC1250719_GENERIC_ME"
YOU MUST PERFORM FULL FLASHING FOR PATCH UNLOCK

Elapsed:19 secs.
Boysie
Please edit out your IMEI. wink.gif
Immortal_Baron
oh that really helped!!

happie now???
cchaos
QUOTE (Immortal_Baron @ 2009-06-28 16:10) *
oh that really helped!!

happie now???

First: drop the attitude!

Second: Script that up to CID52 with XS++, then search for R4HA014 firmware (Meaning main, FS and custom pack, make sure it is genric) flash it.

Find FAR and JD flasher: install both (set jd flasher up properly - see tuts and guides section "JD flasher: general usage")

Find anycid thread: download: anycid.rar, REST_for_R4HA014.rar and db2012_CID52_and_CID53.rar extract all.

REST: goes into 2010_49 folder of JD flasher (and keep a copy located where you will remember it)
db2012/xml: Scripts folder of JD flasher (overwrite the old one)

Download SIMOXautopatcher, extract and open, drag the main into the windows, move patch to same place as other stuff

Anycid folder:
Extract db2012.zip. Go through the folders, move the files to the same location as the REST file thats where you will remember it.
W200, extract R4HA014.zip, go through the folders, move the files to the same location as the REST file thats where you will remember it.

Upload the contents of the remembered folder into tpa/preset/custom (but not the REST file or the patch) disconnect in usual manager, turn phone on and go to games and run executor (phone should turn off)

Use jd flasher, db2012 script, uncheck RSA, and enter bflash.

In the other pane, find the directory with the REST file in it. Drag that over (flash as BABE), then drag the patch over (as vkp patch), disconnect by clicking on the .. at are you sure say yes, REST will be flashed again (just to be sure) and then unplug. Take battery out, put everything back in, and robert should be your fathers brother
Boysie
Don't get sarcastic with me. glare.gif Anyone can quite easily disable your phone permanently with your IMEI. Look in R+D section for AnyCID patching.
Immortal_Baron
Done!!

thanx a lot!!

Boysie
Reported. Again. angry.gif
dogorri
QUOTE (cchaos @ 2009-06-28 15:25) *
First: drop the attitude!

Second: Script that up to CID52 with XS++, then search for R4HA014 firmware (Meaning main, FS and custom pack, make sure it is genric) flash it.

Find FAR and JD flasher: install both (set jd flasher up properly - see tuts and guides section "JD flasher: general usage")

Find anycid thread: download: anycid.rar, REST_for_R4HA014.rar and db2012_CID52_and_CID53.rar extract all.

REST: goes into 2010_49 folder of JD flasher (and keep a copy located where you will remember it)
db2012/xml: Scripts folder of JD flasher (overwrite the old one)

Download SIMOXautopatcher, extract and open, drag the main into the windows, move patch to same place as other stuff

Anycid folder:
Extract db2012.zip. Go through the folders, move the files to the same location as the REST file thats where you will remember it.
W200, extract R4HA014.zip, go through the folders, move the files to the same location as the REST file thats where you will remember it.

Upload the contents of the remembered folder into tpa/preset/custom (but not the REST file or the patch) disconnect in usual manager, turn phone on and go to games and run executor (phone should turn off)

Use jd flasher, db2012 script, uncheck RSA, and enter bflash.

In the other pane, find the directory with the REST file in it. Drag that over (flash as BABE), then drag the patch over (as vkp patch), disconnect by clicking on the .. at are you sure say yes, REST will be flashed again (just to be sure) and then unplug. Take battery out, put everything back in, and robert should be your fathers brother


This looks great, i will test this, can you tell me if this procedure woks with cid53, i have done alot of procedures and can't unlock that phone sad.gif , but i will try this, hope this work for me, some steps from here i haven't done, and have some problems using the db2012 that comes with others JD flasher.

Tried to change the xml's using other bin files but didn't work, mabe was my jdflasher version

will try and i will replay, great reply from cchaos

sorry for my english
cchaos
QUOTE (dogorri @ 2009-07-20 20:29) *
This looks great, i will test this, can you tell me if this procedure woks with cid53, i have done alot of procedures and can't unlock that phone sad.gif , but i will try this, hope this work for me, some steps from here i haven't done, and have some problems using the db2012 that comes with others JD flasher.

Tried to change the xml's using other bin files but didn't work, mabe was my jdflasher version

will try and i will replay, great reply from cchaos

sorry for my english

Apart from the "drop the attitude" part of it (as youre being nice smile.gif)

Im assuming you have a w200?

It should work with CID53 w200 as well as CID52 ones
dogorri
QUOTE (cchaos @ 2009-07-20 20:07) *
Apart from the "drop the attitude" part of it (as youre being nice smile.gif)

Im assuming you have a w200?

It should work with CID53 w200 as well as CID52 ones


Thanks for the reply, and yes, i have a w200 with CID53

I have problems for entering to bflash, like other people around internet looking for some answers have the same problem.

Do you have a solution for that?, the problem with the famous getblock(time exceed)'

i used your script db2012 and have the same problem as with other scripts.

Thanks for the help smile.gif
cchaos
No idea. The only thing I can suggest is to keep trying
Boysie
I remember somewhere that someone used a DCU65 and that seemed to work better. Or maybe I'm wrong! tongue.gif
cchaos
Yeah, but I done mine on DCU60 tongue.gif so I think its still very much "hit or miss"
santae3
i heard w200 (db2012) cannot be patched and the newer w200 are in db2020 platform and so only these are patchable
Boysie
QUOTE (santae3 @ 2009-07-21 13:33) *
i heard w200 (db2012) cannot be patched and the newer w200 are in db2020 platform and so only these are patchable

You heard wrong.
totalgsm.org
QUOTE (santae3 @ 2009-07-21 12:33) *
i heard w200 (db2012) cannot be patched and the newer w200 are in db2020 platform and so only these are patchable


All w200i are db2012
santae3
QUOTE (Boysie99 @ 2009-07-21 18:12) *
You heard wrong.

i doubt it, atleast the first part of what i said may be tru becoz i'm not even getting any google results of any ppl who have sucessfully patch unlocked a w200i, someone should pull here this guy totalgsm.org, he might give a correct answer

EDIT but can it be patch unlocked
Boysie
It CAN be patched (though it is difficult) so it Can be patch unlocked.
dogorri
I know there are some users on the net that have w200 that are not patched

Including me, is there any way to know if there's something wrong with my w200, this is a CID53

When i purchased this phone, it was already a CID53, the companies can sell you phones
with CID53 or at first there are all CID52?

I know that some W200 are not able or really more difficult to patch, so is there some difference
from some w200 to anothers?
dogorri
I used a recent downloaded program:

downloaded a2uploader

This says that have support to CID53

But sends me the next report:

======================
ChipID:8040,EMP protocol:0301
NEW SECURITY (MARITA RESPIN) PHONE

PHONE STATE: "RETAIL"
FLASH CID: 0053
FLID fail
Elapsed:34 secs.
======================

Can you tell me from this report if there's a problem with my w200?

Like i said in the other post, i read on other forums that is not possible to patch SE w200 that have been already flashed or patched with setool box, or other method i don't remember.

Thanks for your help
santae3
as the name itself says, its for a2 phones. u use jdflasher
dogorri
QUOTE (santae3 @ 2009-07-21 15:12) *
as the name itself says, its for a2 phones. u use jdflasher



sorry, i didn't know that there was some phones a2

well, i will keep trying with jdflasher sad.gif
cchaos
QUOTE (santae3 @ 2009-07-21 14:03) *
i doubt it, atleast the first part of what i said may be tru becoz i'm not even getting any google results of any ppl who have sucessfully patch unlocked a w200i

Well, if thats not true, please explain how I managed to patch unlock mine? Though I dont have the phone anymore (I sold it afterwards)
dogorri
cchaos,

when you patch your w200, did you press the convination 2+5 keys of your phone before trying to connect to bflash.

I see that in other tutorial, they add this step to force the connection to bflash, did you do something like that?
cchaos
No I used c
dilfred
Thanks for the guide, it all works well until the part when I untick RSA, click rabbit holes and then when I click on the bflash option I get a timeout error SetDirectory red message in FAR.

setdirectory setdir setmode doscript ldr cmd3c hdr cmd3cbody get89data or words to that effect.

I don't have a screenshot of it right this minute as I don't have the phone on me to create the error

Is this a problem with the phone, FAR or scripts/rest files? I am using a w200 script at the moment when pressing alt f1 in far

For information I have an unbranded, MAIN W200_R4HA014_MAIN_GENERIC_ME_RED52.mbn, FS W200_R4HA014_FS_MEDITERR_RED52.fbn and Melinda_Generic_CDA102737_4_R1A_GENERIC_MEDITERR custom pack installed currently
It is a
08:57:16| Profiling SEMC phone...
08:57:16| Platform: DB2010
08:57:16| OTP CID: 51
08:57:16| EROM CID: 52
08:57:16| EROM Color: Red
08:57:16| IMEI: 35735401xxxxxx
08:57:16| Phone ID: W200
08:57:16| Region: MEDITERR
08:57:16| CDA: CDA102737/4 R1A
08:57:16| Firmware Version: R4HA014
08:57:16| EROM: n/a
08:57:16| Ready for operation!

I am trying to unlock it, as it's listed as a padlock 5 against sim currently and only works with orange sims.
The unlock vkp I planned to use is Remove_SIM_lock_W200_R4HA014_GENERIC.vkp


Any ideas please? I hope i've attached everything (except the screenshot which i'm irritated about and will do asap)
From what I have read on the error and w200 phones with CID52 it seems to be luck more than judgement, does this mean if I constantly connect/reconnect the phone eventually I'll get past the timeout, or is there something more "scientific"?

Thanks in advance for your help
cchaos
Thats the theory, so keep trying
dilfred
QUOTE (cchaos @ 2009-10-21 21:43) *
Thats the theory, so keep trying


Hmm, ok, well it's been a week and goodness knows how many reconnection's, sometimes using the same FAR programme still running from last connection, sometimes start Far each time try to connect, with different DB200 and DB2012 files, also with different 2010_f_r2b and 2010_f_p5g

None with success so far.
Has anyone rewritten the script to give a longer time before timeout?
Have any of the people who get this error actually ever managed to break in?


GRRRR, so frustrating to be so close, yet so far. I've not given up yet, but getting close.
Boysie
Try with the scripts in cchaos' FAR + JDflasher...
http://cid-5cd35f5520496ed4.skydrive.live....E_JDflasher.rar
dilfred
QUOTE (Boysie @ 2009-10-27 12:47) *
Try with the scripts in cchaos' FAR + JDflasher...
http://cid-5cd35f5520496ed4.skydrive.live....E_JDflasher.rar

Thank you for that, I had already looked at the files on the skydrive and tried them, to no avail either.

Starting to give up now, what is the cheapest option to goto next?
Loads of mentions about davinci team, but that looks like still 20euro's or so... The phone is bearly worth that much new.
cchaos
QUOTE (Boysie @ 2009-10-27 11:47) *
Try with the scripts in cchaos' FAR + JDflasher...
http://cid-5cd35f5520496ed4.skydrive.live....E_JDflasher.rar

The scripts in that (I think) havent been moddified, or would be the same as the db2012.xml I uploaded at the time I had my w200
dilfred
officially given up now, and resorted to the davinciteam which unlocked it in the space of 5mins or so.
not the ideal free solution i was after, but at least the phone works on all sims now

thanks for the help, shame the phone w200i seems to be so intermittent with unlocking between different people
Boysie
It does seem the w200 is notoriously difficult to patch, very hit and miss. At least you managed to unlock albeit not for free. smile.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.