savvy 188w7...

[timitiz]

Hi to all..

is it possible to unlock this phone ?? i tried many sofy, entered many codes, but still locked... phone now says : one trie left...

can somebody help ??

Greetingz Timitiz

[Invader]

It's can be done by two ways :
1.Edit Security section 11 with TCD Edit - Just Change one byte from 01 to 00.Put this section in this topic and then I can say to you, which byte must be changed.

OR

2.Flash it with 188 or 168 flash (If your phone after flashing don't power on, simply flash it again, tested on 7 phones)
Now your phone "Permanently blocked", Don't worry!
Run TCD-Edit, Put phone in TAT mode and replace section 11 with this data :

73 05 31 32 33 34 00 FF 00 FF 00 FF 00 FF 09 10
10 10 32 54 76 98 18 08 75 70 FF 85 02 36 00 00
05 05 FF FF FF FF FF FF FF FF 00 01 05 05 FF FF
FF FF FF FF FF FF 00 02 05 05 FF FF FF FF FF FF
FF FF 00 03 05 05 FF FF FF FF FF FF FF FF 00 04
05 05 0A 00 00 00 00 01 02 F8 00 10 00 FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF
- And your phone will be unlocked !!!
(Tested on 100 phones by me !!!)

Second way - if you need change language,
First way - simply unlock

[Invader]

Sorry, fogot about one thing, all phones from D2, Germany, 188/W7 , 188/DP.
Best regards, Alexander "Metal Invader"

[cole]

Hi

I have some 188W7 code reader.I don`t know is it fake you can mail me I will send it.
Regards
Cole

[timitiz]

Hi there Metal Invader...

Thanks for replying... but there is one problem... only with philips service soft i get the phone in tat mode... not with any other prog.. when i use tcd edit i wont be able to tat mode.. the phone powers up when prog says: wating for ignition...

which byte do i have to change in the security section ??

can you send me the soft & flashfile for this phone 188 dp & 188 w7

Thanks & greetingz Timitiz

[Invader]

Hi !
Strange problem.... My phones entered to TAT mode without any problems.Check your cable, may be something wrong.
Write to me and I send flash file for 188/168 to you (mbgsm@usa.net), but remember, when you flash phone , you loose games (other functions like vibra,voice dialing- OK ).I have problems only with philips from CellNet - Entering in TAT mode, but I can't read nothing from EEprom sections... :-(.
Try to enter in TAT mode using service software and then run TCD edit, may be it can help you.
You can see in security section 11 something like this :

F 08 31 32 33 34 78 70 12 30 59 76 42 19 00 00
FF FF FF FF FF FF FF FF 00 01 05 05 01 19 22 18
FF FF FF FF 01 04 05 05 0A 00 FF FF FF FF FF FF
FF FF 00 03 05 05 FF FF FF FF FF FF FF FF 00 02
05 05 FF FF FF FF FF FF FF FF 00 00 05 05 00 00
62 F2 00 20 01 91 00 F2 00 FF 00 FF 00 FF 00 FF
00 FF 00 FF 00 FF 62 F2 00 20 02 92 02 F2 00 FF
00 FF 00 FF 00 FF 00 FF 00 FF 00 FF 62 F2 00 20
53 93 02 F2 00 FF 00 FF 00 FF 00 FF 00 FF 00 FF
00 FF 62 F2 00 20 03 96 03 F3 00 FF 00 FF 00 FF
00 FF 00 FF 00 FF 00 FF 62 F2 00 20 07 98 02 F2
00 FF 00 FF 00 FF 00 FF 00 FF 00 FF 00 FF FF FF
FF FF FF FF 00 FF 00 FF 00 FF 00 FF 00 FF 00 FF
00 FF 00 FF FF FF FF FF FF FF 00 FF 00 FF 00 FF
00 FF 00 FF 00 FF 00 FF 00 FF FF FF FF FF FF FF
00 FF 00 FF 00 FF 00 FF 00 FF 00 FF 00 FF 00 FF
FF FF FF FF FF FF 00 FF 00 FF 00 FF 00 FF 00 FF
00 FF 00 FF 00 FF FF FF FF FF FF FF 00 FF 00 FF
00 FF 00 FF 00 FF 00 FF 00 FF 00 FF

-------------------------------------------------------
1. byte: 00 - unlocked
01 - locked

2. byte: 00 - NCK
01 - NSCK
02 - SPCK
03 - CCK
04 - PCK

3. byte: 00 to 05 (rest of tries)

4. byte: always 05 (max tries)

You must only change first byte (01 with 00 ) for unlock or/and 3. byte
(00 with 01 -05 ) for repairing "Call Castimer Service".
Program recalculate checksum!
----------------------------------------------------------------

May be your section 11 will be another , but in 188/W7 I find 01 01 05 05 (Lock to NSCK,5 tries rest, 5 tries max).Then I change it to 00 01 05 05 - and phone unlocked!
If you phone asks PCK and only 1 try left , you see something like this : 01 04 01 05, change it to 00 04 05 05 or 00 04 01 05.Save original section before you change something


Best regards , Alexander "Metal Invader"

[timitiz]

Hi there invader..

I cannot change the values in section 11 ,
the program responces : incorrect data or file size ...

can you send me the flash file + prog to flash savvy 188 , or downgrade to 168... with flash instructions please ??

Thanks Timitiz

[Liquid]

TCD 188/W7, D2...

Forget tcd_edit and others,
just use Savvy Tools 1.5 Cracked by CyberPhreack, this tool can read NSCK (more then 8 numbers, I think 10) !

Regards.

[Invader]

Mail me to mbgsm@usa.net, I send all to you, of course

[robinhood]

hello
anybody please can send me the savvy 188 flash file
regards