If you were to create a Simcard with a IMEI generator, then create a new offset from the code which looks for a IMEI to the Simcard then in theory we could bypass the stored IMEI on the chip?