11/10/2011

[Tutorial] Unlocking Xperia Ray's Bootloader without Losing DRM

Unlocking Bootloader is one of famous android hacking. A bootloader is usually locked on an Android device because although it’s an open source OS, still the manufacturers want you to stick to their Android OS version specifically designed for the device. In this case, manufacturers lock the bootloader. With a locked bootloader, it is impossible to flash a Custom ROM and forced attempts void warranty as well as usually end up in bricks.
Warning: Unlocking your phone’s bootloader may void its warranty. Do it with your own risk!!!
Step by step to Unlock Bootloader on Xperia Ray:

A) Preparation :
- Cable with a length of not more than 10cm
- microUSB X-Ray
- Paper Clip or test pointer

B) Instruction:
1) Before Unlocking
- Install PC Companion, Install Gordon Gate
- Wrap the tin with a wire or paper clip / test pointer

- Plug in microUSB to your Xperia Ray.

- Remove battery cover and pull the battery...

2) Unlocking

- Download, Extract S1Tool and then run s1tool.exe
- Connect the test pointer to ground (negative of the battery connector) as shown below

- On s1tool, click "Patch SEMCboot"
- Click "Testpoint Ready" then attach microUSB cable to PC
- When the PC has detected a new device, the PC may ask to install drivers. Find and install the drivers in the folder extract...
- Follow the next steps until you find the following results:

This is My Log on S1Tool:

[CODE]10/10/2011 4:58:11 AM Welcome to S1 tool.
10/10/2011 4:58:11 AM That is small and crippled subset of SETOOL2 service tool.
10/10/2011 4:59:24 AM
10/10/2011 4:59:24 AM DETACH USB CABLE FROM PHONE
10/10/2011 4:59:24 AM REMOVE BATTERY FROM PHONE
10/10/2011 4:59:24 AM ATTACH TESTPOINT
10/10/2011 4:59:24 AM PRESS "READY", THEN ATTACH USB CABLE TO PHONE
10/10/2011 4:59:24 AM
10/10/2011 4:59:47 AM PROCESSING ...
10/10/2011 4:59:48 AM REMOVE TESTPOINT NOW, THEN PRESS "READY"
10/10/2011 4:59:48 AM
10/10/2011 5:00:03 AM
10/10/2011 5:00:03 AM TO CONNECT NEXT PHONES
10/10/2011 5:00:03 AM X10 Xperia,E10 Mini,E15 Xperia X8,U20 Mini Pro
10/10/2011 5:00:03 AM LT15 Xperia ARC,MT15 Xperia NEO,R800 Xperia PLAY
10/10/2011 5:00:03 AM PRESS AND HOLD "BACK" BUTTON...
10/10/2011 5:00:03 AM
10/10/2011 5:00:03 AM ST18 Xperia RAY,ST15 Xperia Mini,SK17 Xperia Mini Pro
10/10/2011 5:00:03 AM PRESS AND HOLD "Volume Down" BUTTON...
10/10/2011 5:00:03 AM
10/10/2011 5:00:03 AM PLEASE ATTACH TURNED OFF PHONE NOW
10/10/2011 5:00:03 AM
10/10/2011 5:00:03 AM
10/10/2011 5:00:03 AM RUNNING S1_LOADER VER "R4A062"
10/10/2011 5:00:03 AM LOADER AID: 0001
10/10/2011 5:00:05 AM FLASH ID: "00EC/00B3"
10/10/2011 5:00:05 AM LOADER VERSION: "r4A069"
10/10/2011 5:00:05 AM
10/10/2011 5:00:05 AM
10/10/2011 5:00:05 AM SEMC SIMLOCK CERTIFICATE, PROCEEDING
10/10/2011 5:00:05 AM FINISHED
10/10/2011 5:00:05 AM Elapsed:40 secs.
[/CODE] [/spoiler]

On Loader Version, written r4A062, it shows us that X-Ray bootloader has already unlocked. Although on the service menu, Unlocked status has not been obtained. This method is called ALTERNATIVE SECURITY BY PASS

Note:
- This is the easiest and the best way for unlocking Xperia Ray Bootloader...
- Password for Download Link if needed: huryiw
- Do not accept the Firmware upgrade OTA or U will brick your phone.

That's all... Happy Unlocking...

2 comments:

  1. Does this method depend on the bootloader being shown as unlockable in the Service Info -> Configuration screen? Mine is a branded Ray with a locked bootloader. (No fastboot support)

    ReplyDelete
  2. Thanks 4 d'question... Sorry, late to reply..

    No. With this method, Service Info -> Configuration -> Rooting Status was not changed...

    ReplyDelete