Logré la comunicación del phone xs con el fono gracias al driver, muchas gracias.
Sin embargo no estoy seguro si pasó algo o nada, aquí va el log:

Phone-XS GUI Build V2.01 Beta Ready!
System Diagnostics check: OK!
Hold 'C' and connect cable to phone. You have 30seconds...
Phone-XS GUI Build V2.01 Beta Ready!
System Diagnostics check: OK!
Hold 'C' and connect cable to phone. You have 30seconds...
Hold 'C' and connect cable to phone. You have 30seconds...
Hold 'C' and connect cable to phone. You have 30seconds...
***** Wait for 0x5a
***** ?
DBID : 9900 (db2020)
proto : 3.1
pad : ffffffff
***** ?
***** ICO0 Read OTP
Raw answer is: 631300013100013335333831333031313631393631
Closed: 1
CID : 49
PAF : 1
IMEI : 35381301xxxxxx (unknown model)
***** IC30 Read EROM color
Raw answer is: 630404000000
Color : 0 (
red)
***** IC40 Read EROM CID
Raw answer is: 630431000000
CID : 49
***** PRODUCTION_ID_LOADER
sending loaders\db2010_cid00_prodid_p3h.bin
QH00 Header
Wait for EsB
Wait for EhM
Failed
Apparently there is a file missing
***** CERTLOADER
sending loaders\db2020_cid01_cert_p3g.bin
QH00 Header
Wait for EsB
Wait for EhM
QA00 Prologue 7524 bytes
Wait for EaTEbS
QD00 Payload 52566 bytes
Wait for EdQ
060712 1258 ALU4_CXC1329130_DB2020_SEMC_CERTLOADER_P3G
This is a CERT loader
***** Read flash vendor & id (cmd 0D)
Binary answer is: 0a (897E)
***** Authentication challenges are saved to authresponses_0.bin
***** CS_LOADER
binary sending loaders\db2020_cid49red_cs_r3a003.bin
Header
Prologue 7484 bytes
Payload 415047 bytes
060901 1704 HANCXC1250562_DB2020_CSLOADER_R3A003
This is a CS loader
***** Loader activation (cmd 01-09)
Binary answer is: 01-ff err=00
***** GDFS activation (cmd 04-05)
Binary answer is: 04-ff err=00
***** Read GDFS (cmd 04-01) variable 02-0c8f: phone model (e.g. K750i)
Binary answer is: 04-ff err=1e
This loader is LOCKED (errorcode=30)
***** Auth startup (cmd 05-50)
Binary answer is: 05-02 (4500)
***** AuthA (cmd 05-42) hacking
500...
1000...
1500...
2000...
2500...
3000...
3500...
4000...
4500...
El numero aumentó en intervalos de 500 por muuucho rato así que al
137000... lo corté. Lo intenté denuevo y lo mismo.

No puedo comprobar que los certificados se copiaron al custom ya que el far no puede ver el fono.
Sabes que ha pasado?