TUTORIAL cid49,51to52 CONVERT !!!

|

Tutorial on converting DB2020 cid49/cid51 to cid 52 and unlock
Since that the unlocking of DB2020 cid52 is free, you can unlock cid49/cid51 without using or wasting log credits by converting it to cid52.
Note:
Use DCU-60 cable.
Procedure:
1. identify phone first by ticking "Identify" button.
Code:



v0.914014/UNI
Card serial:000xxxxx
Loaded 51 flash descriptors
Open COM port OK
ChipID:9900,EMP protocol:0301
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP LOCKED:1 CID:51 PAF:1 IMEI:35463701962686 CERT:N/A
FLASH CID:51 COLOR:RED
Model:K610i
MAPP CXC article: R1GB001 prgCXC1250374_GENERIC_TH
MAPP CXC version: R1GB001
Language Package:T_MOB_INT_A
CDA article: CDA102497/8
CDA version: R12A
Default article: cxc1250376
Default version: R1GB001
Extended LOCKED
Operator: MULTIPLE
RESTORATION FILE PRESENT FOR DETECTED FIRMWARE
Elapsed:5 secs.



2.goto "settings" tab then tick "use server for csca flash/unlock and empty user/password section


3. write this misc. files "DB2020_CID49_51_to_CID52" then tick "write script"
* you can find this file in script folder
Code:



SERVER SUPPORT ENABLED.
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:51
Speed:921600
OTP LOCKED:1 CID:51 PAF:1 IMEI:35463701962686 CERT:RED
FLASH CID:51 COLOR:RED
PATCH:061205 1523 HANCXC9876543210_DB2020_MEM_PATCHER_R2A006 0
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:897E
Flash props sent ok
LDR:070410 1557 HANCXC1250562_DB2020_CSLOADER_R3A009
loader startup: executed
loader GDFS startup: executed
loader filesystem startup: executed
loader unlock: executed
Will execute script now.
Writing GDFS var 0001:084E len:010B
Success
Phone detached
Elapsed:29 secs.



4. tick "identify" button again and the result is like this
Code:



SERVER SUPPORT ENABLED.
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP LOCKED:1 CID:51 PAF:1 IMEI:35463701962686 CERT:RED
FLASH CID:52 COLOR:RED
Model:K610i
MAPP CXC article: R1GB001 prgCXC1250374_GENERIC_TH
MAPP CXC version: R1GB001
Language Package:T_MOB_INT_A
CDA article: CDA102497/8
CDA version: R12A
Default article: cxc1250376
Default version: R1GB001
Extended LOCKED
Operator: MULTIPLE
RESTORATION FILE PRESENT FOR DETECTED FIRMWARE
SECURITY UNITS BACKUP CREATED.



Now your phone is cid52... The phone is ready to unlock..
Unlocking Procedure:

1. In "Settings" Tab tick "Complete phone after flash", "Unlock After Flash", "Use sever for csca unlock/flash", "Enable alternative security bypass" and empty user/password area.
2. Add flash files Main & fs (you need to put main & fs files if you don't have the same files that the phone is presently using, but if you have files then you can use the main file only.)
3. then click "Flash" button and follow all instructions and wait until it finished.
Code:

SERVER SUPPORT ENABLED.
ALTERNATIVE SECURITY BYPASS ENABLED.
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
OTP LOCKED:1 CID:51 PAF:1 IMEI:35463701962686 CERT:RED
FLASH CID:52 COLOR:RED
PATCH:061205 1523 HANCXC9876543210_DB2020_MEM_PATCHER_R2A006 0
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:897E
Flash props sent ok
CID52 BYPASS PROCEDURE STARTED
Processing part1...
Processing part2...
Processing part3....
OTP LOCKED:1 CID:51 PAF:1 IMEI:35463701962686 CERT:RED
FLASH CID:52 COLOR:RED
PATCH:061205 1523 HANCXC9876543210_DB2020_MEM_PATCHER_R2A006 0
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:897E
Flash props sent ok
REMOVE CABLE FROM PHONE
REMOVE BATTERY FROM PHONE, THEN INSERT IT BACK
HOLD "C" BUTTON AND ATTACH AGAIN
CID52 BYPASS PROCEDURE FINISHED
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:52
Speed:921600
Trying to launch embedded bootloader...
Embedded flashloader:
DB2020_PRELOADER_FOR_SETOOL2
Flash ID check:897E
Flash props sent ok
writing D:\Downloads\setool3 flash files\k610\cid52\R1JG001_1250540_CHINA_TH.ssw
CURRENT FLASH FILE CID:52
SSW uses complete hash, hash len is:9200
Will flash 460 blocks...
SSW loading returns:0
writing D:\Downloads\setool3 flash files\k610\cid52\R1JG001_FS_APAC_TH_RED_CID52.ssw
CURRENT FLASH FILE CID:52
SSW uses complete hash, hash len is:2740
Will flash 137 blocks...
SSW loading returns:0
full sig complete.
USERCODE RESET TO "0000"
Searching...
Firmware lock check determined.
loader startup: executed
loader GDFS startup: executed
loader filesystem startup: executed
loader unlock: executed
writing tpa/preset/custom/C3_PCA_G3v2.cer
writing tpa/preset/custom/CONTENT_DOWNLOAD_HOOK_2.itm
writing tpa/preset/custom/customize.xml
writing tpa/preset/custom/DESKTOP_HOOK_2.itm
writing tpa/preset/custom/Entrust.net Root Certificate.cer
writing tpa/preset/custom/Entrust.net_WTLS_Root_Certificate.wcrt
writing tpa/preset/custom/FM_PICTURES_HOOK_3.itm
writing tpa/preset/custom/FM_SOUNDS_HOOK_3.itm
writing tpa/preset/custom/FM_THEMES_HOOK_3.itm
writing tpa/preset/custom/FM_VIDEOS_HOOK_3.itm
writing tpa/preset/custom/GAMES_HOOK_3.itm
writing tpa/preset/custom/GTE_CyberTrust_Root.cer
writing tpa/preset/custom/GTE_Cybe_Trust_Root_WTLS.wcrt
writing tpa/preset/custom/Root.cer
writing tpa/preset/custom/SEMC_E2E_Root_CA.crt
writing tpa/preset/custom/SETT_RINGTONE_HOOK_3.itm
writing tpa/preset/custom/ThawtePremium.der
writing tpa/preset/custom/ThawteServerCA.cer
writing tpa/preset/custom/Utiroot.cer
writing tpa/preset/custom/VeriSignClass3Root.cer
writing tpa/preset/custom/Verisign_Class_3_CA_WTLS.wcrt
Phone detached
Elapsed:989 secs.

You have now working unlocked DB2020 cid52 phones....
Happy unlocking.

0 comments: