Develop Bugs

Blueangel: Idea to SIMLOCK.EXE

Hello!
I had an idea to the horrible "simlock.exe" from the blueangel:
We all know that the "simlock.exe" is write-protected in the rom. So i have searched (with Total-Commander CE) in which other files is standing "simlock.exe" too. And i found the "rilgsm.dll". But this "rilgsm.dll" is write-protected too.
Ok.
I searched now the registry and wooow: I found "rilgsm.dll" in "HKLM\Drivers\BuiltIn\RIL" under the String-value called "dll". When I renamed this "dll" to "xdll" (described in much other things under BA-Hacks) the GSM-Phone isn't working.
My solution:
I copied the "rilgsm.dll" to my PC, opened it with Ultra-Edit 32 and found "\Windows\simlock.exe". I wrote now "\Window2\simlock.exe" in this "rilgsm.dll" and saved it as "rilgsm2.dll" and copied this new "rilgsm2.dll" back to the Blueangel under "\Windows". In the registry i wrote under "HKLM\Drivers\BuiltIn\RIL" under "dll" now "rilgsm2.dll" so that the system now will start my modified "rilgsm2.dll". I also made a new directory called "\Window2" and copied the "AddRingtone.exe" as "simlock.exe" in this new directory "Window2".
So now when I reset the Blueangel it works with my T-Mobile-SIM-Card. So now i haven't another SIM-Card from an other provider, this i will test tomorrow.
But maybe someone can use my idea and will build an crack for this horrible "simlock.exe"
Who knows....
==========
Please let me know when you test my idea and when it works or not...
THANK YOU!!!!!

Ischovits said:
Hello!
I had an idea to the horrible "simlock.exe" from the blueangel:
We all know that the "simlock.exe" is write-protected in the rom. So i have searched (with Total-Commander CE) in which other files is standing "simlock.exe" too. And i found the "rilgsm.dll". But this "rilgsm.dll" is write-protected too.
Ok.
I searched now the registry and wooow: I found "rilgsm.dll" in "HKLM\Drivers\BuiltIn\RIL" under the String-value called "dll". When I renamed this "dll" to "xdll" (described in much other things under BA-Hacks) the GSM-Phone isn't working.
My solution:
I copied the "rilgsm.dll" to my PC, opened it with Ultra-Edit 32 and found "\Windows\simlock.exe". I wrote now "\Window2\simlock.exe" in this "rilgsm.dll" and saved it as "rilgsm2.dll" and copied this new "rilgsm2.dll" back to the Blueangel under "\Windows". In the registry i wrote under "HKLM\Drivers\BuiltIn\RIL" under "dll" now "rilgsm2.dll" so that the system now will start my modified "rilgsm2.dll". I also made a new directory called "\Window2" and copied the "AddRingtone.exe" as "simlock.exe" in this new directory "Window2".
So now when I reset the Blueangel it works with my T-Mobile-SIM-Card. So now i haven't another SIM-Card from an other provider, this i will test tomorrow.
But maybe someone can use my idea and will build an crack for this horrible "simlock.exe"
Who knows....
Click to expand...
Click to collapse
i wish i had enough time on my hands like u! id love to be able to do stuff like that!
how do u get to view and change registry settings?

I#ve edited the registry qith "PHM RegEdit". It's freeware, search in Google...

Looks interesting (HappyGoat? what do you think?)
This looks very interesting, did anybody else try it?
HappyGoat? what do you think?

Status: Blueangel: Idea to SIMLOCK.EXE
This message is for everybody who is interesting what i've found out:
The "rilgsm.dll" is the "Radio Interface Layer". In the BlueAngel this "rilgsm.dll" calls the "simlock.exe" for the correct SIM-Card. The "simlock.exe" gives a lot of result-codes back to the "rilgsm.dll".
My solution in the moment (I hope that i'm on the right way):
On my phone I've modified the "rilgsm.dll" so that it doesn't call the simlock.exe anymore. In this moment when i put in a other sim-card as T-Mobile the phone asks me for the PIN-Code of the new sim BUT then the phone brings me an error "unknown sim-status".
So I hope now that i find out what is necesary for the BlueAngel that it will accept a sim-card from an other provider.
If aomebody has an idea pleas feel free to write me...

good job!
yeah,i think you are are on the right way,i will test your idea.

I dont know if this is any help but i found it on a rival forum (GSM-forums)
Unlock pocket pc PPC 4100 solution here ...
--------------------------------------------------------------------------------
u just need to replace a file on windows folder file name is ( rilgsm.dll )
1. sync your PPC with your computer
2. Download the attached file in this post, rilgsm.dll
3. In active Sync - hit the "EXPLORE" button
4. Double click on PPC and then on the "windows"
directory
5. Copy rilgsm.dll into that directoy , and replace
the existing one
6. Turn off the PPC and then do a soft reset - take
the stylus and breifly poke it in the "reset" hole on
the rear of the unit ( opposite side of the antena).
The unit should then reboot
7. Take out your battery- put in your sim card
8. DONE!!!!!
Here is a files u will need
seeing as the phones look similar and both have the same files - could this be a solution or a place to start looking ie comparing the 2 files

Audiovox rilgsm.dll
keytor69 said:
I dont know if this is any help but i found it on a rival forum (GSM-forums)
Unlock pocket pc PPC 4100 solution here ...
...
seeing as the phones look similar and both have the same files - could this be a solution or a place to start looking ie comparing the 2 files
Click to expand...
Click to collapse
I tried it, but it doesn't work on the BlueAngel. After you replace the dll, the wireless radio switch of the phone turns on/off the Bluetooth :lol:
As for the phone functions: it says a wireless radio needs to be attached to use them...
Could be a place to start, although from what I've learned here so far, you can't (read: shouldn't be able to) unlock the phone just by hacking the rilgsm.dll. Or am I mistaken?

Status: Blueangel: Idea to SIMLOCK.EXE
Hello!
What is the status for my idea to hack the simlock?
I can't hack correct the "rilgsm.dll" only with a hex-editor. And I haven't the tools to dump the communications between the "rilgsm.dll" and the "simlock.exe". As I say in my last post in the moment the solution is that the BlueAngels doesn't ask anymore for the unlock code, but it says "Unknown sim status" when I put in an other sim-card from an other provider.
So in the moment i'll try to get a unlocked version of the BlueAngel. I know somebody who has unlocked versions of the BlueAngel.
When I get such a device first I will make a rom backup.
Then I will compare the file "rilgsm.dll" from the unlocked device with the file from the locked device.
Maybe i must flash my locked device with the complete rom of an unlocked device, i don't know.
I can't say I'm on the right way, but I will not give up in this moment.
I think to get the unlocked device will last approximately two weeks. So wish me luck!
Greetings, Peter

Here is rilgsm.dll from my unlocked device

Any news on your procedure......?

here you have some imei numbers from devices i unlocked (imei-check.co.uk)
35481900014849901
6115794
35481900013359001
93709129
35303000075896101
8540099
35303000067058801
10107856
35481900164713501
72385674
35481900167464201
5337494
35303000141098401
50429213
35481900048168401
32553958
3530300008219901
65418022
if it would help...

wow.. :shock:
can i too
my imei is 353030002939023
thanks

htvi,
Could you provide the .uif file that was extracted by the imei-check tool for each imei/unlock code combination? with those it should be possible to figure out how the people at www.imei-check.co.uk are extracting the unlock code!
Thanks in advance,
JDH
P.S. If anyone else has such information i.e. IMEI, Unlock code and the imei-check .uif data file (as extracted from each Blue Angel) that would be of a great help!

JohnnyDH
unfortunatelly i was too stupid to save all of them...(
but i'm unlocking 2-3 phones each week
i have now 2 orange m500 to unlock (htc magician)
i'll post imei numbers, unlock codes and files tommorow

@htvi
Ok, so I have downloaded both Windows mobile 2005 versions for Himalaya(probiably modified by some guy whose name I forgot), and the other official which i guess can be installed on all devices that have a bit faster processor and enough RAM.
I didnt want to install it before knowing if my m2000 is still gonna be sim-unlocked. Can you tell me htvi, or anyone else?
Thanks in advance

I don't know if it helps but, you may check this one out on http://unlock.nokiafree.org/ :
Download binaries for windows of NokiaFREE unlock codes calculator version 3.10
released on 4th, October, 2004
Maby the calculation steps just work...

ok, so here is one of them:
IMEI 354819002404379
UNLOCK-CODE: 60597866
i'll post the second later
note: it was an orange m500 (htc magician)

@htvi
Sorry about the delayed response, I'm often away for periods of time and have only just had an opportunity to check!
Thanks for that first set; have you processed any further phones and can therefore provide the details? the more the better really! if it would be easier for you, PM me and I'll provide my e-mail.
Cheers, JDH

Unlocking data
Here's th info of a recently unlocked MDA III (BlueAngel):
IMEI: 353030002519296
Unlock code: 5809468
Hope this helps.

T mobile MDA Compact II unlock please!!!

Hi All!!
Would really appreciate some advice on how i go about unlocking my T-mobile MDA Compact II. Just had it back from repair, having purchased unlocked (also supplied unlocking files). Not sure if maybe software more up to date but software doesn't work now, neither does the link you have all kindly posted above! When running 'lokiwiz' batch file, lists error - transfer error.
My info is:
Rom Version 2.6.2.27WWE
Rom Date 3/9/06
Radio version 02.19.21
Protocol version 4.1.13.19
Extrom version 2.6.2.110
Please, please can anyone help me as without a phone!!! Thanks so much for your help.
Regards.
Rosco.

Have you tried the whole process according to the instruction? I dont know that which Lokiwiz you are trying but my sister have bought the pink MDA compact II from t-mobile in october and I have successfully unlocked my device.
Try this one but please go point to point.
Sidd

Cheers Sidd!!!
Hey thanks so much Sidd!!!
After days of trying so many different files and methds of trying to get the dam thing working, finally the zip file you listed worked like a treat!!!
Can't thank you enough mate!! If you were close enough i'd buy you a drink or five!!!!
Hopefully this will help others to with the same problem!
Thanks again!!
Regards.
Rosco.

My pleasure, enjoy

perfect thx m8.

Unlock T-Mobile MDA Compact II
I am looking at the notepad file Lokiwiz03 and it says
"2 - Copy EnableRapi.cab to your Wizard"
Which wizard and where do I find it? (Sorry if I sound thick but have never done this before)
Thanks!

I am out of my computer, hopefully I will reply on this problem tomorrow.

bill Copy EnableRapi.cab to your mda compact 2
then klick on it then start the bat file on your pc
after getting a dos windows on your pc
look for a code between the lines
copy the code and use it to unlock it
that is what i did to unlock my t-mobile mda compact 2

Hello Sidd,
I did download the ZIP folder, But I can't unziped...
and and getting following massage "File skipped unknown Compression method"
Please help me out....
Thanks

I did have Zipped this file on WinZip 10, download the attached file, now I have zipped it on a normal compression
GoodLuck
Sidd

not working
i tried this so many times. every time i tapped on the enablerapi.cab file, my mda compact just removes it. what am i doing wrong?

Obviously it is gonna dissappear after the installation. Please follow the steps 1 by 1.
Suggestion 01
1 - Connect your device with ur PC and make sure activeSync recognise it.
2 - Unzip lokiwiz.zip to somewhere in your computer
3 - Copy EnableRapi.cab to your Wizard
4 - Execute the EnableRapi.cab in your phone. Wait for it to finish
5 - Execute lokiwiz.bat and follow the instructions on your screen...
Suggestion 02
For those of you having problems with lockiwiz 3a not unlocking your phone, well i was having the same problem, but not for long because i discoverd what i was doing wrong.
when you download lokiwiz 3a you have 2 things, lockiwiz and a folder called utils, now in the folder utils you will find a file called enablerapi its about 70kb in size, copy this to your MDA vario in the my documents folder, once there run it by tapping on it in my documents on your MDA saying Ok to everything, once youve done that, then and only then try running the lockiwiz application on your main pc making sure your connected via ActiveSync and look for the SIM unlock code in the black command promt box and jot this number down, then put SIM card in thats different from the one you use and switch on, when asked for the unlock code just type in the number you have written down earlier.
GoodLuck
Sidd

hi sidd,
it did not work on my mda compact. i tried both suggestions 1 and 2. but i didn't get any unlock code when i ran lokiwiz. i will give it another try one of these days. maybe i need to remove my tmobile simcard first? anyway.... thanks a lot. and happy new year.

Well I have downloaded the whole solution from this same forum and applied on my sister's Mda and it did work.
Happy New Year to you all as well
Sidd

jadey said:
hi sidd,
it did not work on my mda compact. i tried both suggestions 1 and 2. but i didn't get any unlock code when i ran lokiwiz. i will give it another try one of these days. maybe i need to remove my tmobile simcard first? anyway.... thanks a lot. and happy new year.
Click to expand...
Click to collapse
Copy and paste the output from the unlocking program here. Anyway, if it doesn't give you a code, probably your phone is already unlocked.

Thanks Sid
Hello Sidd,
Thank you so much I be able to unlock mu MDA...
ROMI

this program is not workin my Qtek s110..
error report : Cert_SPCS not a windows CE aplication
and error Lokowiz
pls help me

martindimitrof said:
this program is not workin my Qtek s110..
Click to expand...
Click to collapse
QTek s110 is a Magician and NOT a Charmer. Try the Magician section and wiki. You are lucky that you are not flashing your phone or else you may have got yourself an expensive brick.

This works a treat
Thanks loads for this walkthrough m8 its flawless. Great work m8.

It works with IPL 3.x!
After many tries and misses... I tryed everything but can't unlock my charmer with IPL 3.x... BUT THIS METHOD WORKS PERFECTLY !!!!!! In 5 minutes charmer was unlocked! THANKS!!!!!!!!!!!!!!

Need help on unlocking please,thanks!!

Hello all,
I tried post at the "sim unlock" thread for two days but no responds and hopefully might get some help here,here is my problem:
Just pick up an used SX66 and its locked to Cingular and I need to unlock it so I can use it with Rogers up here in Canada.
I have model number: PH20B1
ROM version: 1.32.10 WWE
RADIO version: 1.02.10
PROTOCOL version: 1337.35
ExtROM version: 1.32.115 WWE
I have spend two hours reading all 85 pages on the"all in one sim unlock tool" thread but can't find a definite answer.
I want to know should I leave the sim in or without when running the file.
Also, can I save the file on the SD card and run it with the file explorer or I have to save it on the pc and sync to the BA?
If someone knows which version of the file I need to unlock this phone please post and any help will be very much appreciated because I have never done this before and don't want to turn this into a paper weight on the my desk!
Thank you in advance!

I had my SIM in.
You can put it anywhere as long as you can find it with file explorer. Its really easy to do and it won't harm anything.

thejaredhuang said:
I had my SIM in.
You can put it anywhere as long as you can find it with file explorer. Its really easy to do and it won't harm anything.
Click to expand...
Click to collapse
Thank you for your post!
Do you have the SX66?
How did you do it?
Some said sync it with the usb cradle and some said use SD card and some said reboot before run the file explorer and reboot after its loaded so many different version and I am just lost!
Any help will be very much appreciate!!!

run the file from your device, and it should work

xplode said:
run the file from your device, and it should work
Click to expand...
Click to collapse
Hi xplode,
Do you mind me tell me what exactly should I do?
Can I save the file directly onto the SD card from my pc and from the SD card save on my phone and use the file explorer locate it and run it?
This phone is currently locked to Cingular and should I leave my Rogers sim in or out when I run the file?
What about someone mention about the phone could be suddenly lock and mentioned the code could be "00000000"?
Any help will be very much appreciated!
Thanks!!!!

dont you read wiki before asking ?
http://wiki.xda-developers.com/index.php?pagename=BA_Unlock_Sim
I will explain it as simple as possible
1.Download unlocker
2.Connect your device with activesync to the computer
3.Copy the exe to the device or sd card, i don't think it matters
4.run the exe
5.your phone is now inlocked
Here is the thread for unlocking, there is newer version of unlock tool with some resolved bugs

xplode said:
dont you read wiki before asking ?
http://wiki.xda-developers.com/index.php?pagename=BA_Unlock_Sim
I will explain it as simple as possible
1.Download unlocker
2.Connect your device with activesync to the computer
3.Copy the exe to the device or sd card, i don't think it matters
4.run the exe
5.your phone is now inlocked
Here is the thread for unlocking, there is newer version of unlock tool with some resolved bugs
Click to expand...
Click to collapse
Hi xplode,
Thanks for your reply!
Actually I bite the bullet and did manage to unlock the phone last night!
You can see my post several post above I did spend two hours reading the entire thread but still not 100% sure that's why I post.
I did the same thing like you mention and after I run the file there's nothing happen no message no indication the phone is unlock so I soft reset and turn it on again it pop a message to insert sim.
And I turn the phone off and put in the sim card "Viola!" it recognise my rogers sim and try a few test call eveyrthing is great!
I use the lastest 1.6 version on my SX66 and I really appreciate all the help from you guys here!
Thanks again and have a wonderful day!

UNLOCK SIM FOR HTC Artemis/Hero(T-Mobile MDA Compact3, HTC P3300)

READ THIS http://[U]www.imei-check.co.uk/c3unlock.php[/U]
Step 1 - Enter Data for unlocking your HTC Artemis/Hero
HTC Artemis/Hero(T-Mobile MDA Compact3, SPV M650, XDA Orbit, Dopod P800, HTC P3300)
(removes SIM/NETWORK LOCK - use any provider, removes CID lock - flash any firmware)
A key file matching your IMEI will be send to the paypal account email address
DO NOT USE the IMEI from the BOX as it may be different from that of the phone.
IMEI:
.
Note that the unlocker work only under Windows 2000/XP/VISTA.
How To:
1. Save the UNL file received from us. Save the C3v2Unlock.zip to your computer and unzip it.
2. turn phone on and connect to pc (green ActiveSync icon in system tray)
WHAT THEY MEAN BY SAYING A KEY FILE FOR THE IMEI . JUST VISIT YOUR SUPPLIER SITE.
: I DO NOT HAVE A KEY FILE.....!!!!
ANY ONE CAN CONFIRM THAT CAN UNLOCK BLOCKED T-Mobile MDA Compact III....!!! ASAP
THANKS YOU IN ADVANCE.
Regards,
KINGBACK

Unlocking the phone will make a number of options available to you such as using a different network SIM card etc. If the phone has been blocked by the network (usually - but not allways due to theft or it being reported lost) - there is very little you can do with it - Mike

Experience available?
Hi there, is there anybody in Nederland who tried the mentioned www.imei-check.co.uk/c3unlock.php for a dutch T-mobile compact3 ?

I unlocked my German MDA Compact III With imei check some months ago and it worked perfectly. Now SIM Free and i installed the official german O2 WM6 Image without any trouble and without using USPL or anything like this.

you should always be able to install the official roms without using USPL. but then again, if your phone is SIM unlocked, it's also CID unlocked and doesnt need USPL anymore (at least that's how i understand it )

Softbank X02HT App Unlock

hello...
i have 1 Softbank X02HT from Japan which came out lock to provider from softbank.. i want to unlock this phone, so i bought unlocking codes from a friend but when the codes arrived and i want to enter it but i cant figure out how to key in those codes,, ive searched a lot of forums how to enter those codes but it seems like my phone is "Counter Blocked" some says i had to flash other roms to be able to enter those codes until i read this http://forum.xda-developers.com/showthread.php?t=398945 now the problem is i cant Application Unlock my phone when i use SDA Application and i gives me error like "Phone is not unlockable"
my phones info :
CAVA100
IPL-0.04
CAVA100
SPL-1.00.0000
please help me to get through with it...
thanks...

LiquidSky said:
hello...
i have 1 Softbank X02HT from Japan which came out lock to provider from softbank.. i want to unlock this phone, so i bought unlocking codes from a friend but when the codes arrived and i want to enter it but i cant figure out how to key in those codes,, ive searched a lot of forums how to enter those codes but it seems like my phone is "Counter Blocked" some says i had to flash other roms to be able to enter those codes until i read this http://forum.xda-developers.com/showthread.php?t=398945 now the problem is i cant Application Unlock my phone when i use SDA Application and i gives me error like "Phone is not unlockable"
my phones info :
CAVA100
IPL-0.04
CAVA100
SPL-1.00.0000
please help me to get through with it...
thanks...
Click to expand...
Click to collapse
so u r able to unlock the sim or not?

cruzzmz said:
so u r able to unlock the sim or not?
Click to expand...
Click to collapse
hello...
i just able to sim unlock the phone via code after flashing this firmware http://rapidshare.com/files/14940579...0_182_Test.exe
but still i cant app unlock the phone... i want to flash WWE rom..
i tried using mtty but then it shows:
CMD>task 32
"Level=FF"
please do help me...
thanks

LiquidSky said:
hello...
i just able to sim unlock the phone via code after flashing this firmware http://rapidshare.com/files/14940579...0_182_Test.exe
but still i cant app unlock the phone... i want to flash WWE rom..
i tried using mtty but then it shows:
CMD>task 32
"Level=FF"
please do help me...
thanks
Click to expand...
Click to collapse
try the hard SPL thread ... there is a program to unlock the phone

cruzzmz said:
try the hard SPL thread ... there is a program to unlock the phone
Click to expand...
Click to collapse
thanks...
the phone is SIM Unlocked now...
but i got this error after using HardSPL-Cavalier-1.0-JockyW
thanks...

LiquidSky said:
thanks...
the phone is SIM Unlocked now...
but i got this error after using HardSPL-Cavalier-1.0-JockyW
thanks...
Click to expand...
Click to collapse
Error 270 ... U must do HardSPL first ... Pls follow instruction on the Hard SPL thread

Regarding the App Unlocking, I ran into the same problem. In my case, I could not complete the registry edits that were required to app unlock the phone.
I used the following app, unzip it, copy it into the main memory on your phone and run it via File Explorer on your phone.
Then edit the following registry keys:
HKLM\Security\Policies\Policies\00001001 = 1
HKLM\Security\Policies\Policies\00001005 = 40

yukster said:
Regarding the App Unlocking, I ran into the same problem. In my case, I could not complete the registry edits that were required to app unlock the phone.
I used the following app, unzip it, copy it into the main memory on your phone and run it via File Explorer on your phone.
Then edit the following registry keys:
HKLM\Security\Policies\Policies\00001001 = 1
HKLM\Security\Policies\Policies\00001005 = 40
Click to expand...
Click to collapse
Have u tried tis tool?
http://forum.xda-developers.com/attachment.php?attachmentid=91644&d=1213100403

what's the end of the story ?
these japanese guys just gone with the wind.

Maybe it's work, because I just did a test on my x02ht. I’m able to modify register through CeRegEditor after SDA_ApplicationUnlock.

Need help to Flash X02HT from JAPAN
HI,
I have been trying desperately to unlock this phone. Before I buy code I need to know it it can be unlocked. When I power on the phone a window keeps popping up with or without asking for SIM unlock code.
I tried JumpSPL and keep get an error: CreateProcess failed with errorcode =30123 - UNKNOWNERROR 0X000075ab.
I still tried HARD SPL -Cavalier 1.0 JockyW and keep getting an error :-
ERROR (270): UPDATE ERROR. The image file is corrupted. Please check your Update Utility.
Please LiquidSky have a file that he used from rapidshare and flashed his phone successfully can anyone share with me please?
I need urgent help
Thanks

I have the same problem. I would appreciate if someone knows how to solve it.
Thanks!
Totalelectronics said:
HI,
I have been trying desperately to unlock this phone. Before I buy code I need to know it it can be unlocked. When I power on the phone a window keeps popping up with or without asking for SIM unlock code.
I tried JumpSPL and keep get an error: CreateProcess failed with errorcode =30123 - UNKNOWNERROR 0X000075ab.
I still tried HARD SPL -Cavalier 1.0 JockyW and keep getting an error :-
ERROR (270): UPDATE ERROR. The image file is corrupted. Please check your Update Utility.
Please LiquidSky have a file that he used from rapidshare and flashed his phone successfully can anyone share with me please?
I need urgent help
Thanks
Click to expand...
Click to collapse

yukster said:
Regarding the App Unlocking, I ran into the same problem. In my case, I could not complete the registry edits that were required to app unlock the phone.
I used the following app, unzip it, copy it into the main memory on your phone and run it via File Explorer on your phone.
Then edit the following registry keys:
HKLM\Security\Policies\Policies\00001001 = 1
HKLM\Security\Policies\Policies\00001005 = 40
Click to expand...
Click to collapse
TESTED and working.......

good ..................................................