unlocking the huawei e585 mifi 3g device from three uk, for free _ techwizzardry

An IT/Security/Android/Technology blog, by Darryl Leaningstay updated via rss

Posted: June 18, 2011 in Phones/Telecoms18

MiFi is a wireless 3G access point, which allows several devices to use a 3G connection over Wireless.The Huawei E585 is sold by Three (http://www.three.co.uk/Mobile_Broadband/MiFi) in the UK, andof course comes locked to the network.

There are different versions of the software on the device, but luckily (at the time of writing), theunlock code is stored unencrypted in the firmware in all current versions. You just have to read thecode our from the device.

So, on to the unlock procedure. You will need either one, or two pieces of software (available below),depending on the firmware version. New devices require one extra step and the extra software, whichis free.

Firstly, this procedure comes without warranty. The chances of you breaking anything are slim, butundertake everything at your own risk.

What you will need:

A MiFi device, locked to Three (or another provider, however this has only been tested on Three)PSAS – Available HERE (http://dl.dropbox.com/u/11046179/E585/psas.zip)DC‐Unlocker (for the newer software versions) – Available HERE (http://dl.dropbox.com/u/11046179/E585/dc‐unlocker_client‐1.00.0664.exe)Notepad – built in to Windows

Step 1, required for all versions:

The first thing you need to do, is plug in the MiFi device to your PC using a USB cable. Make sure thatnothing is connected to the MiFi via wireless for all of the following steps . Let Windows automaticallyinstall the communication drivers. If Autorun is disabled, manually run the autorun.exe file on thevirtual CD drive that appears when you plug the MiFi in. These drivers are required for the followingsteps.

Confirm the drivers are all installed by unplugging, and plugging the device back in at least once. Whenthe drivers and software are installed, put a different SIM into the MiFi & turn it on. Plug it in to yourPC again using the USB cable.

At this point, a quick check in device manager (click start and type devmgmt.msc into the run/search

Unlocking the Huawei E585 MiFi 3G Device from Three UK, for free | ... http://techwizzardry.wordpress.com/2011/06/18/unlocking-the-huawei-...

1 din 9 10.11.2014 00:58

box) should show some ports related to the MiFi which appear and disappear when you plug/unplugthe device.

Make sure that the connection manager isn’t running (it may not be, but check the system tray near theclock just in case). Click the ‘Safely remove hardware’ icon in the tray too, and disconnect the virtualCD drive.

Step 2, required before step 3, for newer firmware versions only. Try step 3 FIRST, and come backhere if you can’t read the EFS data. If you just received the device, the chances are that this step willbe required, as your software will likely be the new version. (1026.11.64.18.505sp01 is an example of thenew firmware version)

Install the DC‐Unlocker client. After it has installed, right‐click the shortcut and choose “Run asadministrator” if using Vista/Win7. XP users can just double‐click it.

When the DC‐Unlocker software opens, click the search (magnifying glass button). After a fewseconds, you should have the details of your device listed in the software, as shown below:


2 din 9 10.11.2014 00:58

If you don’t get a full reading, check again that device is on, the connection manager software isn’trunning, and that the ports are showing in device manager. Having already unlocked my device usingthis method, the SIM Lock status above shows “unlocked”

Leave the software open just as it is, and move on to the next step.

Step 3, reading the firmware from the phone.

Install the PSAS (Phone System Analysis Software) tool from the link above. Run it as administratorfrom the right‐click menu.

Choose “Hardware Forensics” from the menu at the top, and select “Use Mobile Ports”

From the dropdown I chose the selected option in blue, however some have reported the other“Com10″ option worked for them. The port number may not be the same for you, but you should beable to identify the MiFi device port for yourself pretty easily. It will be one of a maximum 3 options.

For the baud rate, 115200, & 57600 allowed me to read the filesystem, but be warned that it takesaround 5 minutes or so to complete.

Now click the “Diag Port” tab, and click the “Send” button. This should return a result similar to this:


3 din 9 10.11.2014 00:58

If you don’t get a response similar to this, you may need to go through Step 2. If you followed Step 2with success, try changing the port, or the baud rate and try again.

Next choose “Read EFS” & “Use alternate method” in the software as below:

Click the “lets go” button, and choose a filename and location for the firmware dump that you willlocate easily (like Desktop).

The software will say “Please Wait…” and take several minutes to complete. Be patient. When theprocess is complete, “successfully read EFS” wil be displayed. If you have trouble and the softwarecrashes, try setting the lines to 250, but this only works for older firmware with the unlock code thatisn’t at the end. New firmware (SP01 in the version) needs the whole file. The whole file is around742kb.


4 din 9 10.11.2014 00:58

Step 4, finding the unlock code

For this step, you will need the file you read from the MiFi, and notepad to read the file. Open the filein Notepad Click start and type notepad into the run/search box). It may take a while for the file toopen.

If you have the earlier firmware versions, the code can be found by using the “find” feature under thenotepad edit menu. Search for PST, the number after PST is the unlock code.

For later firmware, the code is located at the and of the file, scroll to the bottom of the file with notepadmaximised, as shown below (the code is 54951935 in this case)

Step 6, Entering the code

Connect to the MiFi with no other internet connections on your PC, and the Simlock page should showup. Simply enter the code.

Alternatively, type http://192.168.1.1/simlock.asp (http://192.168.1.1/simlock.asp) into the address barand press enter.

If that fails, you can follow the instructions and use the software HERE(http://virginmobile.custhelp.com/app/answers/detail/a_id/444/~/unlocking‐your‐e5832‐mobile‐broadband‐modem).

The device will now reboot and is unlocked.

You will need to create a profile for the network providers and input the APN (including Three again)to connect to the internet.


5 din 9 10.11.2014 00:58

Step 7, Adding network profiles

Make sure that you are connected to the MiFi, preferably by cable.

Open http://3.home, (http://3.home, ) or Click http://192.168.1.1 (http://192.168.1.1/)Find the section ‘Change Your Settings’Enter admin password (By default the password is ‘Admin’)Click Log InClick Advanced Settings > Connection Settings > Profile Settings > New‘Profile Name’ – Anything you want (e.g. Vodafone )‘Connection Number’‐ *99#‘UserName’ – Your network operator’s username (See below)‘Password’ – Your network operator’s password (See below)‘Authntication’ – PAPAPN – Your network operator’s APN (See below)IP Address – DynamicClick Save > Continue > Advance Settings > Connection Settings > Connection SettingsSelect your new profile from the ‘Profile List’ drop down menu (e.g. Vodafone)Click Apply

Please see This page (http://www.unlocked‐dongle.co.uk/Settings/access‐point‐name‐apn‐settings‐for‐uk‐mobile‐network‐providers.html) for APN settings.

If you want the MiFi device to work on 2G too (required in some countries, like T‐Mobile USA), go tothe following setting:

Advanced Settings > Mobile Network Settings > Network Settings > Select “3G Preferred > Apply

All that there is left to do is enjoy your unlocked MiFi Device!

CommentsOwie says:June 25, 2011 at 10:26 am

Hi there, what do you mean by this “New firmware (SP01 in the version) needs the whole file. Thewhole file is around 742kb.”? What would be the number under “Max Page”

Thanks

Replycadwizzard says:June 26, 2011 at 12:33 am

@owie – Leave it at the default (40000)

ReplyTaisir Khalil says:August 8, 2011 at 12:51 am

Thank you very much , it is useful information , i put the page on my favoriteHope you all the success.

ReplyMartin Harvey says:November 16, 2011 at 6:47 pm

Worked a treat, but I have a related issue.

:)


6 din 9 10.11.2014 00:58

The cheapest package on Three for mobile broadband is £10.87 / month for 1gb, but Three offer Simonly Internet 2GB for £5.11 a month. The problem is this SIM is somehow blocked from working inmy Huawei E585 even after unlocking. Any Suggestions?

Replycadwizzard says:November 25, 2011 at 11:47 am

If it is unlocked, the sim should work in it just fine. Locking is done on the hardware. It wouldnot make any sense financially for the provider to stop you using their sim in as many devices aspossible.

ReplyJon says:December 12, 2011 at 9:53 am

Thanks very much for your effort, worked for me! I found additional instructions on the net thatexplained that the code could also sometimes be found near the string “LT P” (without quotes). Itturned out that it was, *and* it was adjacent to the “PST” string as well. So this provided a usefulcheck I had the code right, before using up any of my precious unlock attempts.

Thanks again TW

Replycadwizzard says:December 28, 2011 at 2:26 pm

Glad I could help!

ReplyJayden says:December 28, 2011 at 1:56 pm

hi,many problems here; the port shows my mifi (com7) but does not get detected by dc unlocker ( i geterror 47);also in psas i get error opening com port, every time i try and press something for example when iopen the program it says error opening com port and when i click elets go its says the same

ReplyJayden says:December 28, 2011 at 1:56 pm

hi sorry my bad i get error 49 not 47 in dc unlocker


I’d try it in a different computer for a quick fix Com port issues are normally computer dependant and can be fixed by using a differentmachine.

Replyjayden says:December 28, 2011 at 2:36 pm

Hi; tried on 2 other pcs and still same error; isit possible you would be able to get my unlock code if Igave you my imei? Thanks,Jayden

:‐)

;)


7 din 9 10.11.2014 00:58


No, because the whole point of the guide is to get it from the software inside your personal dongle.Sorry.

Replyjayden says:December 28, 2011 at 8:02 pm

Ahhh okay; no worries do you have any other ideas why it won’t detect the modem in dcunlocker though?


Not without it in my hand to play with, sorry again. Might be worth just paying a few quid to unlockit.

ReplyJohnny says:June 20, 2012 at 9:58 am

Worked for me only when i set Max page to 4000 – the code was at the bottom of the pagenot near PST or LT P string.All unlocked now – it doesn’ work yet with an O2 sim, even after setting the profile, it saysConnecting and then Disconnected.Any advice? Could it be the Sim?I will try with with other Sims on different providers and post back.Thanks for your instructions !

ReplyDan says:September 10, 2012 at 11:34 pm

Thanks for this. Took a while but finally got it working. You have to use revskills now, thereplacement for psas, but that works similarly and got the unlock code! Cheers again.

ReplyJohn OʹNolan says:November 15, 2012 at 5:26 am

Amazing. Could not have done this without this page. Thank you.

ReplyWhich MIFI ? ‐ Page 2 ‐ MotorhomeFun says:October 21, 2013 at 3:03 pm[…] This is how I unlocked mine but it wasnʹt quite as straightforward as the web site suggests. Itʹs alittle while ago so I canʹt remember exactly but the PST sequence wasnʹt where it ʺshouldʺ havebeen. Other devices use other methods and you may have to go via the phone company and pay.Caveat: If something goes wrong it can lock the device, you only get so many goes. For anyonebuying new itʹs probably easier to buy one ready unlocked. […]

Reply

:/


8 din 9 10.11.2014 00:58

Blog at WordPress.com. | The Greyzed Theme.Follow

Build a website with WordPress.com


9 din 9 10.11.2014 00:58

unlocking the huawei e585 mifi 3g device from three uk, for free _ techwizzardry

Documents