PDA

View Full Version : For those who brought a SIM MAX


wombat
08-11-2007, 09:43 PM
Hi all,

I have a Jaycar smartcard programmer to do the silvercarding, but before I got it, I'd ordered a neat little thing called a SIM MAX.

Now, this SIM MAX device is a neat little thing, but I'm pretty sure it can't write silvercards. I will give it a try on Monday, but until then, let's assume it can't.

Ok, so I thought I'd make a thread here for all those who brought one of these and are looking for a good use for it.

First off, you need to download a program called GSM SIM Utility 5.15. It's freely available on the web, and I've posted a link right below this block of text to where you can download it. The reason you need this, is that the CD that comes with the SIM MAX is in Chinese (which is great if you can speak Chinese), and it's one of those small discs that doesn't fit in any slot loading drive.

With the GSM Sim Utility, you don't really want to use any of the utilities they provide you unless you want to clone a sim straight up (maybe it works, but not the way I like it to), or manage a phone book, or do other general boring stuff - you want it because it contains the USB to Serial emulator you need to run it. Just install this sucker and you're on your way.

http://www.fileden.com/files/2007/7/17/1273115/GSM_SIM_Utility_515.zip

Now, after installing the USB/Serial emu, you will notice that the SIM MAX reader is probably on either COM 3 or COM 4.

With this information, you can then load WoronScan or SIM Emu and they will recognise the reader. With regards to SIM Emu, because I don't have my silvercards yet at the time of writing this, I can only say that it will successfully recognise that you don't have a silvercard installed - in exactly the same series of error messages you get when you have the smartcard programmer in it's place.

With regards to WoronScan, go to the settings, and select either COM3 or COM4, and then select the 16XXX baud speed setting. It will only run at 14400, but for some reason it needs it to be set like this. With WoronScan, this device can easily extract IMSI, ICCID and KI without a problem, just like the smartcard reader/writers.

Now, if you're like me, then by this stage you're already bored with it and thinking you paid $15-20 for something that probably only really does very basic stuff without giving you any control over it. Well, surprise, there is a piece of software out there called SimEasy. Now, this is a fairly difficult piece of software to obtain these days, because the developer seems to have fallen off the planet, and his domain is completely gone now. This means that even if you can get a hold of the software, it's useless because it requires registration - which cannot be done because the developer has disappeared! It's a cache-22.

So it just so happens that I managed to find the last version he made which for some unknown reason doesn't require registration... anyway, this software is now considered legacy and there is no way to get in contact with the developer to get him to 'correct' this problem. If you can manage to get in contact with him, I do recommend that you donate the registration fee of $10 to him, as it is a fairly nice piece of software.

http://www.fileden.com/files/2007/7/17/1273115/SimEasy.rar

Now, with this uber-rare piece of software in hand, along with your super budget 5000 sim max reader/writer, you can have some fun.

Let's just run over a quick 'how to clone' demo shall we.

1. Open WoronScan and obtain IMSI, ICCID and KI in the normal fashion.
2. Insert the blue SIM MAX sim which came with the device in the reader slot.
3. Open SimEasy and select 'Connect'
4. In SimEasy, select 'Magic'
5. In the field on the bottom right of the screen, select line number 1 and double click it.
6. In the box which opens up, enter IMSI, ICCID, KI and SMSC (SMSC is SMS Gateway - Just enter your SMS Gateway, minus the + symbol, as it won't accept it - for example, +61 becomes just 61 - it will appear correctly on the phone).
7. Click OK then click 'Disconnect'
8. Enjoy cloned sim

With SimEasy you can add up to 12 sim card ids in that field I mentioned, and you can individually modify the details of each line item - so you can have a Telstra registered KI with an Optus created IMSI - I have no idea why you'd do that, but you can - it's very flexible considering the 'quality' of the SIM MAX reader.

So I don't want to hear any complaining from anyone who brought a SIM MAX because they were like me and just felt like wasting $15 'just to see' if the SIM MAX would do the job with its free blue sim card. Well, I can safely say, it doesn't do the SIM Emu with the free blue sim card, but it does do other useful things for legitimate duplication - like if you want a cloned sim for a car phone like my dear old dad does.

I'll be testing the SIM MAX reader with a silversim tomorrow, as I've gotten SIM Emu to seem to speak to it alright, so be on alert ok :) Don't hold your breath though - treat this thread as a 'maximum amount of things you can possibly do with a SIM MAX writer' informational post. It's my community service annoucement ;)

-Adam

pendalf
08-12-2007, 04:15 AM
does it work with v2 v3 sims?

thariman
08-12-2007, 05:06 AM
does it work with v2 v3 sims?
I don't think so. Only the proxy method work for v2,v3 sims.

Wombat: Can't wait for you test result since sim max is easily attainable locally and I have the old version (Serial) sim max. At least it is useful to test for sim version.

kshehzad
08-12-2007, 08:55 AM
Well I have it as well and I have tried it. The problem is that yes you can clone a SIM but I still haven't found anything to be able to write the SIM with the flash and eprom files created by sim_emu. All you can do is to program the card with your provider's IMSI, KI and ICCD but still cannot use it with ATT IMSI. Does anyone know where to enter it and how to?

wombat
08-12-2007, 10:14 AM
The idea is to test it out with SIM Emu using a silver card, and see if it writes it. I can get SIM Emu to recognise the device, so there is a slim chance I think.

Kshehzad, have you played around with SimEasy yet? (The second link I posted)

-Adam

kshehzad
08-12-2007, 10:51 AM
Yes, I did play with SimEasy and was able to easily clone my SIM. The issue is that there is no place to enter ATT IMSI and you can only enter one. If you combine ATT IMSI with data from your own SIM, it can't be validated.

I am sure that if I can get hold of a silver card, I can use this programmer as Sim_Emu does recognize it.

I am in Pakistan and don't know where to find Silver card here:-(

wombat
08-12-2007, 10:58 AM
There are plenty of places to buy a silver card on the web. Check out this thread for places to buy: http://www.hackint0sh.org/forum/showthread.php?t=2252

wombat
08-13-2007, 11:34 PM
Update on SIM MAX. Yes, as I suspected, you can't write Silvercards with the old SIM MAX.

And here's the exciting story...

I plugged my SIM MAX in and tried all the usual suspects (SIM Emu, etc - even the Infinity USB Unlimited and Phoenix tools) and no go. Those programs all flat-out refuse to recognise it. I then started searching and using some more exotic programs - WinPhoenix, PicCard, FMCard (totally scary), and finally ICProg 1.05E. Now, none of these programs work to do anything, with the exception of ICProg 1.05E.

ICProg is so hardcore, I managed to wipe the actual SIM MAX reader/writer itself. Now, that is an amazing achievement for a piece of software, considering the hardware is expecting to be the one doing all the writing. If you haven't experienced the awesomeness that is ICProg, then I suggest you all do, as it is your ticket to writing ANY card you can find, directly from file (flash, eprom). It is simply an impressive piece of software. It's a little bit hack-ish, but once you figure out it's quirks, it's amazing.

Ok, so at the end of my testing, I successfully destroyed one useless SIM MAX reader/writer, and had a great time doing it.

Lesson learned: If you want to do something, do it right, and don't buy just any old piece of crap from China. Remember, if it looks like it cost $5 to make, then it probably cost 2.

-Adam

freeproductions
08-14-2007, 05:20 AM
Hi all; Im fairly new to this forum but have already read virtually all threads related to SIM Cloning for the iPhone.
So, I have a fair degree of success using a sim reader from Jaycar, their Smartcard reader/writer, a Silvercard, Telstra prepaid sim, Woronscan, Simemu 6, Icprog, a LOT of patience and perseverance and ever more help and reference to this forum and it's generous contributers.
I think I'm about half a step away from having a fully functioning cloned sim for my shiney iPhone!
The first wall so hit was in trying to get Iprog to upload my Simemu generated flash .hex file to the silvercard without always coming up with "Validation Failed at xxxh" persistent attempts aventually yeilded a varification failure that was far down the hex code as it would go(?!)
The EEPROM .hex file then loaded no problem so I thought I would cut it out and give it a go.
When I got the sim warning I tried the reccomended 1111 as seen in Simemu, it failed three times (first promblem) and asked for PUK, which did work, changed SIM then off! Searching, searching, seaching then, some signal bars! Then...... "SIM Registration failed" ) -:
"No Service" ... Bugga
Any ideas? Maybe code corruption at upload? When created with Simemu?
BTW does anyone know if Iprog requires any particular com port settings etc?
In the meantime Ill write another card and try again!
Any further advice or guidance would be great!

Thanks again for everyones time and generous sharing of all information!
Free the iPhone!
"No service" Bugga!

wombat
08-14-2007, 12:49 PM
freeproductions,
have a look at what you are setting as the pin before you write the card. if it is blank, specify it. it's not magically 1111, it's set that way manually :)

for all using the jaycar writer, try this:
http://www.fileden.com/files/2007/7/17/1273115/jaycar.zip

freeproductions
08-14-2007, 02:39 PM
Wombat: Thanks for your reply for this and all previous info.
I am pretty sure I had manually set the pin to 1111 in positions 0 and 9 as per the instructions.
I'm a little further along now in that my new sim works in my normal unlocked GSM, however sadly still comes up with "No Service" in the iPhone, despite having undergone the "10 steps" Jailbreak etc.
Hmmm.

wombat
08-14-2007, 03:55 PM
Ahh I think I know what's wrong :)

First of all, you have a couple of modes with the Jaycar writer, as I'm sure you're aware of. The first is a jumper setting, where you can select either 3.5795Mhz/6.0Mhz and Phoenix/Smartmouse. Not sure which is which, I think it's 3.5795Mhz = Phoenix setting, and the other is 6.0Mhz = Smartmouse setting. Not sure. Anyway, moving on...

The next thing you have is a selectable switch which will let you choose between the read/write to PIC mode, and the read/write to EPROM mode. I submit to you that your programmer is currently set correctly jumperwise, being Phoenix, but is set to EPROM mode.

Here's what you have to do.

First, do all the usual with SIM Emu, then flick the switch to the opposite of the mode you have it set to right now, so that it goes from EPROM mode to PIC mode. Do the usual bit now, and select the PIC16F877 or 76 (whichever - why do you have a 76! lol) Now, load your flash file (the first file created in SIM Emu), and even put the word flash in the name, just so it's clear to the program (doesn't matter in IC Prog I'm pretty sure, but matters in some older writing progs). Now, whilst in PIC mode, write the FLASH hex file only. Do not attempt to write the EPROM hex file. Also, a guide that I'm reading about it says that you must turn code protection off (CP OFF) to the right of the screen. I'd recommend you do this to minimise burn errors - at least for this first write attempt. That should all write correctly now, so burn the sucker. If it doesn't write, flick the switch and try again, just in case you accidently set it to EPROM mode FROM PIC mode (it can happen, we all play with things on circuit boards, best to be sure). If that again doesn't work, then you check your jumper settings, and IC Prog interface settings. It should have worked at the first attempt though ;)

Ok, now that you're written your FLASH, time to write the EPROM. First, load in the 24LC64 setting, and load in your EPROM from SIM Emu. Now, flick that switch on your programmer to the EPROM read/write setting and write again. You should end up with the same working result you had when you first could ONLY get the EPROM to write :)

Again, make sure you have CP OFF.

The two modes on the switch should read PGM PIC and NORMAL (EPROM).

THEN try to activate your phone as per instructions.

And if that doesn't work properly still - don't stress! Try rewriting your PIC ONLY (FLASH file) to the card again.

I bet you one single dorito chip (nacho cheese flavour) it will work.

-Adam

freeproductions
08-15-2007, 05:01 AM
Adam: hi and thanks for all of that!
If only I'd had that message at 3am The other night!
It did indeed take me a while to figure all that out!
I have since definately been doing all of the above, including repeatedly unchecking CP in IcProg, changing modes devices etc.
Despite all my best efforts though, I still can't acheive a varified PIC burn! )-:
My Eeprom burn works every time.
My card still only works in my unlocked GSM and not the iPhone.
I can't find any reccomended com port settings for icprog?
Wandering if that's why?
Thanks again.

wombat
08-15-2007, 05:55 PM
Hi dude,

Give Jaycar a call and tell them you're having trouble burning a silver sim and suspect a device fault. Secured is having probs too.

I've heard of probs using XP if that helps. I'll just pull out the Jaycar kit and try burn a silver ok, cause Secured is having troubles also.

I'll be back in 10.

wombat
08-15-2007, 06:01 PM
Ok, Win XP is doing shit things and frustrating the bejeezus out of me. It's giving me a device (something or other) error. I'm not going to waste time with it, I'll reinstall Win 98 and set it up exactly how we used to do the silvers for the aus* 'backups'.

freeproductions
08-16-2007, 02:17 AM
Ah! Well I am using XP so that might be at the root of it, thanks!
My problem now is with OSX! I can't for the life of me get Jailbreak to run (can't "execute binary")
I'm now pretty confident that my supersim is working as it works in any other phone!
Arghhh! So close... Help!

Free the iPhone

wombat
08-16-2007, 07:52 AM
I installed Windows 98 in the old pc, and it had no network drivers, etc, etc, so I couldn't do crap!

I'm getting one of those things.. a floppy disk.. with drivers so I can run it all again.

Man Windows sucks.

freeproductions
08-16-2007, 09:18 AM
I installed Windows 98 in the old pc, and it had no network drivers, etc, etc, so I couldn't do crap!

I'm getting one of those things.. a floppy disk.. with drivers so I can run it all again.

Man Windows sucks.

I hear ya! I only use it if there is absolutely no alternative. IE Serial Port!

Secured
08-16-2007, 12:20 PM
Wombat,

I had the same problem with Win XP saying that device is not found... I thought first that there was a burned chip on the device so I replaced the two hex inverters and still the same!

What I ended up doing is connect the jay car programmer to a totally different xp machine and so far Woron scan can pic it up and read cards fine... I managed to get the ki value from it and icc imsi...

Now... how do I write to the hex files to the blank silver card again??

I created the hex files already for my sim. Do I use "Sim-Emu 6.01 Configurator v2.1" to write to the card? if yes which file to load flash or ep??

Cheers,
Marwan

TheGuide
08-16-2007, 03:41 PM
Ok 80% done building my Jaycar kit, has ANYONE got it to work on Win XP? *worried look* I dont have a spare PC I can use to install 98!

If anyone has can they do a step by step for the rest of us? Or direct me to the link if there is already one?

Thanks in advance!

Might even be worth starting a new "Jaycar kit thread?"

TG

wombat
08-16-2007, 04:11 PM
Hi all,

Yes, I'm having a bastard of a time with this thing. I'm going to call in reinforcements tomorrow from a mate of mine who knows more about this than I do. I've burned goldies with this kit before back when aus* was still crackable, and the occasional silver write, but I can't for the life of me get this bastard of a thing working again.

I'm now remembering why I knew I had to buy a better writer - these things were a prick to set up :p

I'm digging up the old info as fast as I can, and I'm pasting it here as a general 'spew' of information.

Spew number 1, info from the austech forums:
http://www.austech.info/archive/index.php/t-53464.html

wombat
08-16-2007, 04:12 PM
Spew number 2:
http://www.austech.info/archive/index.php/t-48682.html