How to Unlock Vogue CDMA - Touch CDMA Windows Mobile ROM Development

Buy HTC Vogue Clean ESN CDMA Set to eaby.com . & how to Use This Phone In India in CDMA Network. pls tell
I m read another Indian forum. HTC 6800/6900 convert to tata CDMA
here is detail
SID, NID, Primay Channer A & B, Secondary Channel A & B loaded Nam 1 & Nam 2 PRL, SPC = 000000
I got all above Parameter from Tata Customer Care and they told any Foreign ESN Handset can work if you are able to change the above Parameters, After that I Get an GSK (Getting Started Kit) of Tata which have 14 Digit Activation Number, then Dialed *228 and followed the Instruction, After 2 Hours (Tipical 10 Minutes they say) Received a SMS to Restart the Phone. Voila my HTC Mogul is Working on TATA
Will load my QPST .qct file (Ready made Setting for TATA) so every buddy can easily Activate Mogul on TATA
Everybody now Welcome to World of Tata Indicom
( Attached TATA.rar contains Nam1 PRL, Nam2 PRL, and Ready made QCN file for QPST Service Programming, also have GetSPC [ Run in PPC6800 / Mogul Type the ESN in Capital and get the Service Programming Code] )
Pls Help me

Sounds interesting but I'm just wondering
OK.... can u explore more on that.
How does one go about creating/editing the PRL settings contained here if they want to use this thing on a different network than Tata?
thx

This method work on Cricket in USA and in TATA in India
Just follow the Process and Activate using *228 Loading TATA Prl is needed or else it will not catch TATA Tower range.
Go on and take it into TATA
I already have activated so many Phones
Both Cricket and TATA accept non Allocated ESN and Activate the OTA and INsert the new ESN against users Services, Here in India Reliance dont activate any phone which ESN is not pre Registered in Reliance Network

I was wondering if this will solve my issue. I have bought a touch with a bad ESN and is unable to put it on my account. Will this clear the ESN?

I used this ..so easy

so if you activated your phone for india service, would you be able to use it in the United States?
--James

I did this for my Sprint Touch. I am still using it in the USA but my phone has been modified to support other carriers with no problem.
The steps are simple:
Here is what you need to do:
1. Download GetSPC(attached below)
2. Unzip to desktop
3. Turn off phone and remove battery.
4. Write down your HEX ESN
5. Power your device back on
6. Connect via ActiveSync or WMDC
7. Copy entire folder to main memory on device.
8. Run GetSPC.exe
9. In the top box type in your HEX ESN(make sure caps is on)
10. Click generate or whatever the button is named
11. The resulting number should be a 6 digit number, your MSL, write it down.
12. Search for, download and install Qualcomm's QPST tool.(not freeware)
THE FOLLOWING STEPS ARE VERY DANGEROUS SO MAKE SURE YOU FOLLOW MY DIRECTIONS EXACTLY.
13. Run QPST Configuration(run as admin if Vista)
14. From the Dialpad, dial ##3424#(##diag#)
15. Connect device to computer via USB(this will install drivers)
16. In QPST Configuration, click ports.
17. Continue to add ports until the QPST Configuration detects your phone
18. Under active phones it should display your phone.
19. Click Start Clients/Service Programming
20. Select phone and click ok.
DO NOT LEAVE FIRST TAB, THE SETTINGS TAB. THIS IS THE ONLY TAB WE WILL NEED TO CHANGE ANY SETTINGS
21. Under the settings tab, click Read from phone.
22. Input your MSL you got from GetSPC earlier.
23. Under codes where it says Service Programming, change this to 000000
24. Click Write to Phone
25. Wait 1 minute
26. Close Qualcomm QPST one window at a time.
27. Disconnect the USB cable from your device
28. Perform Soft reset once
29. Test new MSL(##000000#)
30. If new code does not go through, hard reset.
31. Depending on what device you have, follow the necessary steps to unlock your phone so you can flash a new ROM to it.
32. Install OEM ROM from carrier of choice or build your own custom ROM using the new carrier's information.
33. Follow instructions to flash new OS to device.
34. Call service provider and do some sweet talking to get them to activate the phone on their network. You may need to do some serious sweet talking because Sprint ESNs are not in Verizon's database and vice versa. This goes for all CDMA carriers.
Good luck.

dharvey4651 said:
I did this for my Sprint Touch. I am still using it in the USA but my phone has been modified to support other carriers with no carriers.
Good luck.
Click to expand...
Click to collapse
are u then able to have both NAM1 & NAM2 on the phone?

NAM
You have to enable dual NAMs through the registry. And use QPST or CDMA Workshop to set them up.

Thanks a million time to Shadomite
He had Cracked and changed the ESN
I have POsted the Simplified Method Just have a look
http://www.mobile-files.com/forum/showpost.php?p=355534&postcount=82

Quick question. Is there any chance of doing something similar to a Verizon World Edition Blackberry? I live in Ghana and i have had a few of these on my table in the last few months. Any ideas?

''Originally Posted by dharvey4651''
32. Install OEM ROM from carrier of choice or build your own custom ROM using the new carrier's information.''
What information i need from my carrier to build my own rom and how can i make it. Is there a way to build a rom and make a CDMA phone to work in Europe?
I have an HTC TOUCH CDMA ver in Greece!
Help..

Having HTC P3050
you have given the file i have downloaded it but now how to use it and activate on tata can u help me

Need English Viva ROM for Vogue (MP6900SP)
Thank you for this great post. I followed the instructions without bricking my phone. I looked at the 'simpler' one linked to here, but found the one on this thread much easier to follow and use.
Now all I need is the ROM for Viva (North America or Carribbean). Where can I find this? Thanks,
WMT

Hey Hetal
can't find your post on mobile-files.com. Is there any other link.
Will this method work on reliance network too???
Thanks

puneet_july30 said:
Hey Hetal
can't find your post on mobile-files.com. Is there any other link.
Will this method work on reliance network too???
Thanks
Click to expand...
Click to collapse
Mobile-Files was taken down a few months ago.

dharvey4651 said:
I did this for my Sprint Touch. I am still using it in the USA but my phone has been modified to support other carriers with no problem.
The steps are simple:
Here is what you need to do:
1. Download GetSPC(attached below)
2. Unzip to desktop
3. Turn off phone and remove battery.
4. Write down your HEX ESN
5. Power your device back on
6. Connect via ActiveSync or WMDC
7. Copy entire folder to main memory on device.
8. Run GetSPC.exe
9. In the top box type in your HEX ESN(make sure caps is on)
10. Click generate or whatever the button is named
11. The resulting number should be a 6 digit number, your MSL, write it down.
12. Search for, download and install Qualcomm's QPST tool.(not freeware)
THE FOLLOWING STEPS ARE VERY DANGEROUS SO MAKE SURE YOU FOLLOW MY DIRECTIONS EXACTLY.
13. Run QPST Configuration(run as admin if Vista)
14. From the Dialpad, dial ##3424#(##diag#)
15. Connect device to computer via USB(this will install drivers)
16. In QPST Configuration, click ports.
17. Continue to add ports until the QPST Configuration detects your phone
18. Under active phones it should display your phone.
19. Click Start Clients/Service Programming
20. Select phone and click ok.
DO NOT LEAVE FIRST TAB, THE SETTINGS TAB. THIS IS THE ONLY TAB WE WILL NEED TO CHANGE ANY SETTINGS
21. Under the settings tab, click Read from phone.
22. Input your MSL you got from GetSPC earlier.
23. Under codes where it says Service Programming, change this to 000000
24. Click Write to Phone
25. Wait 1 minute
26. Close Qualcomm QPST one window at a time.
27. Disconnect the USB cable from your device
28. Perform Soft reset once
29. Test new MSL(##000000#)
30. If new code does not go through, hard reset.
31. Depending on what device you have, follow the necessary steps to unlock your phone so you can flash a new ROM to it.
32. Install OEM ROM from carrier of choice or build your own custom ROM using the new carrier's information.
33. Follow instructions to flash new OS to device.
34. Call service provider and do some sweet talking to get them to activate the phone on their network. You may need to do some serious sweet talking because Sprint ESNs are not in Verizon's database and vice versa. This goes for all CDMA carriers.
Good luck.
Click to expand...
Click to collapse
Thanks a ton, I have completed all the steps 30, now how can I run the other network on my phone.
Do I have fill all the network details in the QPST Config step..???

that's great thank you man

Thank you. it was more then easy.
Now it works.

help me
How can I use this file for my HTC Hero CDMA? this QCN file giving error.
help me.

Related

Htc droid incredible on boost mobile [how to]

THIS IS FOR EDUCATIONAL PURPOSE ONLY​
Guide on Flashing HTC Droid Incredible to Boost Mobile
What you NEED
QPST
QXDM 3.11 (Google is your friend)
CDMA Tools 2.7 (Demo is good too)
Patience
HTC Diagnostic or HTC USB MODEM Drivers (I will include Win7 x64 Driver)
Donor Phone Driver (Google is your friend)
Winhex (Again, Google )
Boost Mobile Account [seems difficult for those without it]
What you DONT NEED
Wife
Kids
*Install all drivers and programs**
If you do not know how to manually install a driver, I suggest you stop where you are now.
Step 1: Donor Phone MSL/SPC
This one is really simple, call Boost Mobile Customer Rep. (To get directly to them after the guy says "For espanol press 5", just press 5, then press 2, and wait for it to ask you "To chat with a Boost Customer Rep press 0") and tell them your phone needs to be programmed and they will tell you to dial ##MSL#. SAVE THAT NUMBER and then just hang up on them.
Step 1.5:
Incase you are scared to talk with boost mobile, or you don't know your 6 digit MSL/SPC code you will have to find it manually. *Sigh*
Open QPST, click [Add New Port] on the bottom right, then uncheck [Show serial...] on the bottom left corner and on the screen to the left you should see your Donor's Port number, add it and make note of it.
Next open CDMA workshop, connect to your phones Port (COM) number, click read and your phone information will be displayed on the left.
Click on the memory tab, under memory/Eeprom put start Address: 0363:0000 leave the size at 65536 bytes, now click read and save the .bin files on your desktop.
FINALLY, open up Win Hex, open the memory file you just saved, click on specialist- Gather Text; Recognize text by "6" uncheck everything expect for " Numbers" press "OK", save the file anywhere you like. You should end up with a .txt document with 1 or more 6 digit numbers; one of them is the SPC for your phone, write it or them down.
Step 2: NV Items
Open CDMA Workshop again, go to Security under SPC write your MSL code and click SPC -> Send. It should say phone is unlocked.
Now go to Memory tab, and click Read NV_Items, and you will read NV_Items 455, 466, 1192, and 1194. Save them all.
Step 3: NAM 1 & 2
Stay in CDMA Workshop, and click the NAM Tab. Click “Read” this will display all your phones information inside of “NAM 1” Save the filename as NAM 1 and do the same for NAM 2.
Step 4: M.IP
Close Cdma Workshop. Open Service Programming and enter your Donor phones SPC. Click Read and navigate to the “MIP” Tab, we need your Donor phones NAI. Click on Profile 1 and copy down everything just to be safe. Do the same for Profile 0 if available.
Step 5: HA & AAA Passwords
HA Password for both Profiles will be "secret" in text formatClose Service Programming and open QXDM. Now in the Command Prompt on the top screen type in "SPC [MSL]" Then type in “Requestnvitemread ds_mip_ss_user_prof 1” to retrieve your Profile 1 AAA 6 Digit password. It will be the first 6 Digits in DIAG RX, which is written in HEX mode. For Profile 0, simply open NV_Item 466 all numbers after the number 10 and before the last pair of 0's will be your Profile 0 AAA. Or you can type in QXDM Requestnvitemread ds_mip_ss_user_prof and it will be all the Digits in AAA SHared DIAG RX.
If it says Access Denied it means you do not have a Profile 0. *Dont worry about it*
DONT EVER TURN ON THE DONOR PHONE'S RADIO AGAIN, PUT IT ON AIRPLANE MODE OR SOMETHING
Step 6: Root your HTC DROID INREDIBLE
Follow directions --> http://androidforums.com/incredible...ked-3-rooting-stock-incredible-evo-2-2-a.html
Step 7: Writing NAM and NV Items
Plug in your Droid Incredible to the PC. Open QPST and add its port number. Open CDMA and connect then read the Incredible, next go to Security Tab and under SPC write 000000 and send SPC.
Next go to the "Memory" tab, NV Items and write the 4 NV Items we saved from your donor phone earlier.465, 466, 1192, and 1194. Then navigate to the “NAM” TAB and Write the Nam 1 and Nam 2 Files we saved earlier by clicking Load before each on of them. If done correctly it should display your donor’s phone number and other information.
TYPE IN ##DIAG# IN YOUR DROID TO GO INTO MODEM MODE
Step 8: Zero'ing ESN & MEID
Close CDMA Workshop and open QXDM, Options- Communications- Target Port/ select your Droid Incredible's Port, click OK. You should now be connected to your phone. (if you have any trouble connecting to QXDM make sure you set your com port in QPST Configuration and use the same in Qxdm's communications, So you can actually see what's going on from the View drop down screen, select Command Output. Press F4 to get to the memory view, Change Rows from 8 to 16, Find you HEX MEID and ESN by calling ##786# it will look something like this...
MEID: A1000009C57FQZ
ESN: 8373B5C5
They might have an "0x" in front of them, just ignore that, Now pay close attention, following the example MEID and ESN I provided above you are going to separate every 2 characters and then you are going to flip a few to make it backwards just follow my model and do the same to your numbers.
Original: Separated: Flipped:
MEID A1000009C57FQZ MEID A1 00 00 09 C5 7F QZ MEID QZ 7F C5 09 00 00 A1
ESN 8373B5C5 ESN 83 73 B5 C5 ESN C5 B5 73 83
*Note* Your Meid and Esn will differ from the one used in this guide please find your own and use the same method you will need this to find you Meid and Esn in the memory.
Now the tricky part, you may have to Zero them out several times so it will stick (I would consider zero'ing them several times before restarting the phone)
These are all possible ESN and MEID Locations, [ATTACHED]
At each location, find your Meid or ESN and replace it with Zeros (0) then click Write and goto the next Meid or ESN. Do not alter anything but meids or ESNS. After you Zero'ed them out type the command "Requestnvitemread MEID" and "Requestnvitemread ESN". If its Zero'ed restart the phone, if its not, you missed a spot.
To make sure its been Zero'ed out FOR SURE restart the phone and when is back on dial ##778# click View, then Display and make sure your MEID and ESN is all 0. If its not, then try again.
Step 9: Writing MEID
After you get a message that it's zero than u can proceed to write your ESN or MEID which ever you prefer.
Commands are
requestnvitemwrite scm 0x3a
requestnvitemwrite meid 0x0(Your MEID)
MEID = actual 14 digit meid (not in reverse)
If u are writing MEID no need to write the ESN.
requestnvitemwrite esn 0x(Your ESN)
esn= actual 8 digit esn (not in reverse)
Step 10: Configuring Data
Close QXDM, open Service Programming. Navigate to the M.IP tab.
3G Donor PHONES ONLY: Click profile 0 and click edit. Check and make sure your “NAI” is the correct one for boost mobile. Enter your HA Shared password first, then enter your AAA Password into the text box, next Enter all information that you saved earlier and put them in the required box’s. (it may be different for your area)
NAI:[email protected]
Home address: 0.0.0.0
Primary HA address: 68.28.15.12
Secondary HA address: 68.28.31.12
SPI: 4D2
SPI: 4D2
Rev Tunnel Preferred: Checked now with both passwords hit ok.
Enter your HA Shared password first, then enter your AAA Password into the text box, next Enter all information that you saved earlier and put them in the required box’s
NAI:[email protected] (May varie)
Home address: 0.0.0.0
Primary HA address: 255.255.255.255
Secondary HA address: 68.28.89.76
SPI: 4D2
SPI: 4D2
Rev Tunnel Preferred: Checked now with both passwords hit ok
Make Active User 1.
Write to phone, and restart the Droid Incredible.
Now give yourself a pat in the back because you just Fully Flashed your Droid Incredible to Boost Mobile
I have yet to Know how to configure the USE of MMS, but if you know how to drop it in here .
***THIS GUIDE WAS TAKEN FROM A GUIDE I BOUGHT ON EBAY FOR FLASHING HTC EVO TO BOOST MOBILE, AND MODIFIED TO FIT THE HTC DROID INCREDIBLE***
Any questions?
EDIT** Incase your Data isnt working try this and MAKE SURE, you have this.
1. Make sure your ACTIVE USER is 1.
2. Make sure your HTC INCREDIBLE has the same PRL as your donor phone! (THIS IS HIGHLY IMPORTANT) To extract the PRL from your donor phone simply:
Connect your donor phone, Open 'Service Programming' click 'Read from Phone' enter your MSL, and then click 'Save to File' save it anywhere. You will get a qcn file, and a rl0 file. The 'rl0' file will be the PRL.
Also this happened to me before, lol, MAKE SURE MOBILE NETWORK in 'Menu -> Settings -> Wireless and Networks is TURNED ON !!
Any more questions let me know
UPDATE: Try this by igotanmp3 to get MMS working. NOTE* It does not work with Custom Themes http://forum.xda-developers.com/showpost.php?p=16440594&postcount=69
UPDATE: For Droid Incredible S & 2 FOLLOW --> http://forum.xda-developers.com/showpost.php?p=21668680&postcount=145
So did you ever figure out the mms settings? I've seen some guy in New Jersey doing full flashes on HTC Incredibles on Boost Mobile. I tried to contact him, but it seems like he is somewhat of a prick. I've been racking my brains trying to get the mms working. So far my Dinc has talk, text, internet and Sprint TV working.
I have not yet. How did you get Sprint TV running on the Incredible though?
And i think the guide to flash a HTC Hero to alltel i believe might help... changing the APN username adress and whatnot with APN Manager apk, havent gotten around it though been too busy will try tomorrow.
Sent from my ADR6300 using XDA App
eljean said:
I have not yet. How did you get Sprint TV running on the Incredible though?
And i think the guide to flash a HTC Hero to alltel i believe might help... changing the APN username adress and whatnot with APN Manager apk, havent gotten around it though been too busy will try tomorrow.
Sent from my ADR6300 using XDA App
Click to expand...
Click to collapse
I downloaded the Sprint TV Apk file and that was pretty much it
TRY THIS FOR MMS
MMS
************************************************** *******************************
(My original work)
After making sure web works,
1. Download APN Backup & Restore(Android Market)
2. Click Backup APNs
3. Goto your sdcard/ApnBackupRestore
4. Click the apn file and edit under windows or on your phone.
5. Look for the line that says Production and edit.....
<apn name="Production" numeric="00000" mcc="310" mnc="00" apn="1"
user="[email protected]"(may varie) server="null" password="null proxy="null"
port="" mmsproxy="" mmsport="" mmsprotocol="2.0"
mmsc="http://mm.myboostmobile.com" type="mms" />
6. Save the file(make sure you save it)
7. Open the APN Backup & Restore program
8. Click delete APNs(Very important)
9. Click Restore APNs
10. Close the program
11. Goto messages>menu>settings>connection settings. Make sure everything is as you edited. You should see Name(Production), MMSC(http://mm.myboostmobile.com), MMS proxy(not set), MMS port(not set), MMS protocol(WAP 2.0).
12. If everything is just as it is, viola you are all set...
Taken from http://www.howardforums.com/showthr...lashed-to-Revol-with-working-Internet-and-MMS and fixed to the Boost Mobile apn settings... correct it if its wonrg, Im not 100% sure on the settings...
I haven't tried it yet im still waiting for my MicroSD Card from Ebay :\... lol you be the guinnea pig let me know how it goes
this would go a lot better in the dev section
JoelZ9614 said:
this would go a lot better in the dev section
Click to expand...
Click to collapse
Ahh, I didnt know where else to put it
this is awesome.. what about PTT? does it work?
remy2501 said:
this is awesome.. what about PTT? does it work?
Click to expand...
Click to collapse
Yeah it should
DRIVERS
FORGOT to attach the DRIVERS sorry
Any possible way to go back to verizon MEID?
mttmelton said:
Any possible way to go back to verizon MEID?
Click to expand...
Click to collapse
Just write the original MEID and the phone would provision itself IF it has a clean esn
Sent from my ADR6300 using XDA App
Still no mms on the HTC Droid Incredible on Boost
Just wonder if anyone has figured out the mms settings for the HTC Droid Incredible on Boost Mobile. I paid some guy on Ebay and he emailed me back "here sorry all you do is this:
##3282#
change mms "hxxp;//mm . myboostmobile . com
reboot your phone and test the pics"
I was like WTF ##3282# does not even work on the Incredible, but I already knew the mmsc url. So has anyone figured this little speed bump? I have talk, text, internet & sprint TV working now I just need mms working.
roclikewhat said:
Just wonder if anyone has figured out the mms settings for the HTC Droid Incredible on Boost Mobile. I paid some guy on Ebay and he emailed me back "here sorry all you do is this:
##3282#
change mms "hxxp;//mm . myboostmobile . com
reboot your phone and test the pics"
I was like WTF ##3282# does not even work on the Incredible, but I already knew the mmsc url. So has anyone figured this little speed bump? I have talk, text, internet & sprint TV working now I just need mms working.
Click to expand...
Click to collapse
Same here. I used APN Manager and changed the mmsc url but then it would just give me access denied.
Sent from my ADR6300 using XDA App
Hello,
I read all posts above, but I couldn't understand completely. It is possible use htc incredible 2 on boost mobile?
I can buy one from ebay with clean esn and use it on Boost mobile?
thank you
idk
mttmelton said:
Any possible way to go back to verizon MEID?
Click to expand...
Click to collapse
to be honest with you, I am not entirely sure, theoretically it should be possible but at this moment I do not know since it is a new phone with new software etc etc. And I heard HTC is starting to lock their esn locations with some type of encryption so u cant read it.
Google around u might be able to and if u find someone who says and has backup that is possible come back to this guide and follow it .
for example. Can I activate this on boost mobile?
hxxp://xpressphones.vstore.ca/product_info.php?products_id=379
armars said:
for example. Can I activate this on boost mobile?
hxxp://xpressphones.vstore.ca/product_info.php?products_id=379
Click to expand...
Click to collapse
I did a little bit of research and so far I can conclude that it is not possible. I may be wrong though. I am 90% positive it is not posible YET lol
***THIS GUIDE WAS TAKEN FROM A GUIDE I BOUGHT ON EBAY FOR FLASHING HTC EVO TO BOOST MOBILE, AND MODIFIED TO FIT THE HTC DROID INCREDIBLE***
Click to expand...
Click to collapse
So you could flash it to boost mobile, but couldn't activate?
armars said:
So you could flash it to boost mobile, but couldn't activate?
Click to expand...
Click to collapse
Yeah if your donor phone is already activated

[Q] My cspire r800x(cdma) thinks its a Verizon phone.

Earlier today I had a successful attempt at installing FXP's CM9 126 build. As a requirement I had to flash the R800x_4.0.2.E.57_Verizon.ftf via Flashtool to my phone before I could flash the Rom. My phone's provider is Cspire(formally Cellular South), and after the ftf my phone is trying to make contact with Verizon for activation, leaving my unable to call or text on my own provider. I've tried flashing a nand backup I had of one of Codename Andriod that I created when everything was working perfectly, but it didn't fix the problem.
Thank you for your time and please let me know what I can to fix this.
Sincerely,
Frag_Bag
Frag_Bag said:
Earlier today I had a successful attempt at installing FXP's CM9 126 build. As a requirement I had to flash the R800x_4.0.2.E.57_Verizon.ftf via Flashtool to my phone before I could flash the Rom. My phone's provider is Cspire(formally Cellular South), and after the ftf my phone is trying to make contact with Verizon for activation, leaving my unable to call or text on my own provider. I've tried flashing a nand backup I had of one of Codename Andriod that I created when everything was working perfectly, but it didn't fix the problem.
Thank you for your time and please let me know what I can to fix this.
Sincerely,
Frag_Bag
Click to expand...
Click to collapse
You'll need to change the build.prop and apn settings. Found this from a quick search with someone that has a working verizon build.prop that is said to work on cspire
https://www.dropbox.com/s/dgteu3ziweifix8/build.prop
and his working apn settings:
https://www.dropbox.com/s/6cs5tqwdlcstt3s/apns-conf.xml
Also found this:
You could push the apn with ADB but i just edited mine with root explorer in /System/etc and restarted the phone.
As for CDMA Workshop is a service software for CDMA phones it is used for flashing phones to different carriers to put it plain as possible in my mind but it can be used for countless useful tasks, just Google it to read more. But the below method was much easier.
Dialing ##7764726(##program) is used to manually program your phone.
After dialing ##7764726 press call it will prompt for a SPC password it should be 000000
Then click User Activation
MIN1 I put the last 7 digits of my phone number.
MIN2 put the first three of phone number(area code).
MDN is your 10 digit phone number.
CDMA Sys ID put 1996
IMSI_11_12 put 12
Then hit back and click on SID/NID Pairs:
SID_1: put 1996
NID_1: put 65535
After this hit back till you exit all the way back out of the menu the phone will reboot after it reboots i dialed *22801 it didn't say anything just sat at the activation screen for about 30sec. Then it said reprogramming the phone then rebooted agin after that i was back on C spire.
Links are a little old but this is all I could find:
SID Database if you need to find a different carrier
http://www.the-answerman.com/sidlist/index.asp
Also the SID/NID I used was found in this PRL breakdown:
http://www.howardforums.com/showthread.php/1700374-New-PRL-60575-50575
The Second post of the page explains a lot more about PRL and SID/NID just good to understand what your kinda messing with:
http://forum.xda-developers.com/showthread.php?p=19537266
Also i don't know if this is the best way to accomplish this task but it took me awhile to figure out this fix it worked for me but i can't guarantee anything also im not responsible if something goes wrong and you brick(its always possible) but i am willing to help to the best of my abilities
Good Luck and sorry for such a long post.
agraceful said:
You'll need to change the build.prop and apn settings. Found this from a quick search with someone that has a working verizon build.prop that is said to work on cspire
https://www.dropbox.com/s/dgteu3ziweifix8/build.prop
and his working apn settings:
https://www.dropbox.com/s/6cs5tqwdlcstt3s/apns-conf.xml
Also found this:
You could push the apn with ADB but i just edited mine with root explorer in /System/etc and restarted the phone.
As for CDMA Workshop is a service software for CDMA phones it is used for flashing phones to different carriers to put it plain as possible in my mind but it can be used for countless useful tasks, just Google it to read more. But the below method was much easier.
Dialing ##7764726(##program) is used to manually program your phone.
After dialing ##7764726 press call it will prompt for a SPC password it should be 000000
Then click User Activation
MIN1 I put the last 7 digits of my phone number.
MIN2 put the first three of phone number(area code).
MDN is your 10 digit phone number.
CDMA Sys ID put 1996
IMSI_11_12 put 12
Then hit back and click on SID/NID Pairs:
SID_1: put 1996
NID_1: put 65535
After this hit back till you exit all the way back out of the menu the phone will reboot after it reboots i dialed *22801 it didn't say anything just sat at the activation screen for about 30sec. Then it said reprogramming the phone then rebooted agin after that i was back on C spire.
Links are a little old but this is all I could find:
SID Database if you need to find a different carrier
http://www.the-answerman.com/sidlist/index.asp
Also the SID/NID I used was found in this PRL breakdown:
http://www.howardforums.com/showthread.php/1700374-New-PRL-60575-50575
The Second post of the page explains a lot more about PRL and SID/NID just good to understand what your kinda messing with:
http://forum.xda-developers.com/showthread.php?p=19537266
Also i don't know if this is the best way to accomplish this task but it took me awhile to figure out this fix it worked for me but i can't guarantee anything also im not responsible if something goes wrong and you brick(its always possible) but i am willing to help to the best of my abilities
Good Luck and sorry for such a long post.
Click to expand...
Click to collapse
I was able to enter all the values for MIN2, MDN, CDMA, and IMSI, but the MIN1 Keeps telling me "Unable to set new parameter, I made sure there was a 1 before my 7 digit number. Thoughts?
Frag_Bag said:
I was able to enter all the values for MIN2, MDN, CDMA, and IMSI, but the MIN1 Keeps telling me "Unable to set new parameter, I made sure there was a 1 before my 7 digit number. Thoughts?
Click to expand...
Click to collapse
I don't think you'll need the 1. Just the last 7 numbers. Try that to see if it works. And just so you know, I'm on verizon so all my answers are coming from google at the moment lol
I left the number the way it was and finished the steps, everything is working as it should and I can call and text. Thank you very much. Now i just have to find a fix for Mobile data. I really do appreciate it.
Frag_Bag said:
I left the number the way it was and finished the steps, everything is working as it should and I can call and text. Thank you very much. Now i just have to find a fix for Mobile data. I really do appreciate it.
Click to expand...
Click to collapse
Mobile data would be in the build.prop and the apn settings, You should be able to use pieces from the build.prop I posted to work whatever rom you're on. I got to assume verizon and cspire are close to identical since they're both cdma. Half way there right?
agraceful said:
Mobile data would be in the build.prop and the apn settings, You should be able to use pieces from the build.prop I posted to work whatever rom you're on. I got to assume verizon and cspire are close to identical since they're both cdma. Half way there right?
Click to expand...
Click to collapse
Are these settings still current cspire settings... I lost 3g connectivity and would love to troubleshoot to figure out whats wrong with it... I did the ##Program and here are my settings
USER ACTIVATION MENU
MIN-my number with area code
IMSI_11_12 =23
MDN - my number with area code
CDMA system ID - 1996
EXTENDED NAM MENU
MIN = another local number
TRUE IMSI - 000000000007809
IMSI_11_12 = 23
MDN - my number with area code
CDMA system ID - 1996
Country code - 311
CDMA network - 65535
1st channel A - 283
1st channel B - 384
2nd channel A - 691
2nd channel B - 777
Access overload class 0
URGENT
im having the same issue when i use ##program and dail it does nothing but act like a collect call HELP
on cm9
Thanks...
agraceful said:
You'll need to change the build.prop and apn settings. Found this from a quick search with someone that has a working verizon build.prop that is said to work on cspire
https://www.dropbox.com/s/dgteu3ziweifix8/build.prop
and his working apn settings:
https://www.dropbox.com/s/6cs5tqwdlcstt3s/apns-conf.xml
Also found this:
You could push the apn with ADB but i just edited mine with root explorer in /System/etc and restarted the phone.
As for CDMA Workshop is a service software for CDMA phones it is used for flashing phones to different carriers to put it plain as possible in my mind but it can be used for countless useful tasks, just Google it to read more. But the below method was much easier.
Dialing ##7764726(##program) is used to manually program your phone.
After dialing ##7764726 press call it will prompt for a SPC password it should be 000000
Then click User Activation
MIN1 I put the last 7 digits of my phone number.
MIN2 put the first three of phone number(area code).
MDN is your 10 digit phone number.
CDMA Sys ID put 1996
IMSI_11_12 put 12
Then hit back and click on SID/NID Pairs:
SID_1: put 1996
NID_1: put 65535
After this hit back till you exit all the way back out of the menu the phone will reboot after it reboots i dialed *22801 it didn't say anything just sat at the activation screen for about 30sec. Then it said reprogramming the phone then rebooted agin after that i was back on C spire.
Links are a little old but this is all I could find:
SID Database if you need to find a different carrier
http://www.the-answerman.com/sidlist/index.asp
Also the SID/NID I used was found in this PRL breakdown:
http://www.howardforums.com/showthread.php/1700374-New-PRL-60575-50575
The Second post of the page explains a lot more about PRL and SID/NID just good to understand what your kinda messing with:
http://forum.xda-developers.com/showthread.php?p=19537266
Also i don't know if this is the best way to accomplish this task but it took me awhile to figure out this fix it worked for me but i can't guarantee anything also im not responsible if something goes wrong and you brick(its always possible) but i am willing to help to the best of my abilities
Good Luck and sorry for such a long post.
Click to expand...
Click to collapse
Thanks for copying and pasting all this from my thread you could have atleast acknowledged me since it's basically word for word
http://forum.xda-developers.com/showthread.php?t=1624990

[WIP] Unlocking Note 2 modem for GSM/AWS

This is NOT in relation to changing IMEI/ESN as that is ILLEGAL! This thread is about enabling our baseband/modems to operate on different frequencies/couriers.
Trying the VZW unlock thread first HERE
I'm flashing a VZW ROM right now to check APN menu, etc. Sprint even with hack doesn't show APN.
There are several threads on how to unlock Verizon/Tmobile/ATT modems to work on each other with varying levels of success. I feel that we have a iPhone 4s/5 like device that has the same chipset just different locks around the software to prevent unlocking. I was moved by the community's involvement in adding a SIM card slot to the Note 2 and want this mod to work on US couriers.
Basically put, I want to make any US variant S3/Note 2 an international version. The hardware is the same, it's the NVRAM/Firmware prohibiting us.
This is the SIM card mod for the SPR N2:
http://forum.xda-developers.com/showthread.php?t=1959005
Enabling AWS (T-Mobile) on ATT Note 2:
http://forum.xda-developers.com/showthread.php?p=35933247
Verizon S3 on T-Mobile:
http://forum.xda-developers.com/showthread.php?t=2013647
Verizon S3 on world GSM:
http://forum.xda-developers.com/showthread.php?t=1809314
The primary method of unlocking modem bands is flashing a QCN file that modifies NVRAM params. In the ATT T-Mobile thread the hack works by flashing over a ESN/IMEI stripped T-Mobile qcn backup file.
I tried following this process but was blocked by a "Roaming Lists could not be read" error at 16% when trying to backup my NVRAM using QPST. I attempted flashing the file anyway and received a "Could not Communicate in Diagnostic Mode" error. My modem then would not see any networks. I then flashed a ATT modem which bootlooped my device.
I feel the Roaming List could not be read is the main issue into how Sprint locked down this device for US GSM. In SIM tech, the courier provides a preferred list of up to 80 couriers the phone is to connect to first when roaming due to courier roaming agreements instead of the strongest signal first. As the Spr model uses a chip for a SIM it's possible that the "SIM" could not be read to provide roaming lists and GSM could be blacklisted in this chip as it is more sophisticated then a SIM smartcard. Now that I flashed a ATT modem I'm going to try to download the NVItems again using QPST.
I restored my TWRP backup and sideloaded a SPR modem, back at stock all working.
The alternative is to use the "IMEI/ESN" backup tool:
http://forum.xda-developers.com/showthread.php?t=1867442
I will continue experimenting and will report progress.
When writing back my NVRAM dump I get this list of readonly/locked items:
(NV Items http://forum.xda-developers.com/showthread.php?t=1954029)
Writing NV-items from a file:
Unsuccessfully written NV-items:
00000 (0x0000) - Password (16 digits) is required
0^"Electronic Serial Number"^"Security*"
00001 (0x0001) - Read only item
1^"Electronic Serial Number Checksum"^"Security*"
01943 (0x0797) - Password (16 digits) is required
797^"DCS TX Burst Ramp Down Index 11"^"GSM*"
05597 (0x15DD) - Read only item
05598 (0x15DE) - Read only item
These two are unknown but people get them when doing AWS unlocks:
http://forum.xda-developers.com/showpost.php?p=36078971&postcount=81
Found a AWS/ATT modified TXT file, I flashed it and reset
http://forum.xda-developers.com/showpost.php?p=36008901&postcount=49
Mobile networks show a previously unselectable item WCDMA only as selected which is not in the menu, the network status is unknown. I have a feeling the nv-item is trying to reference a menu item that is not in my ROM.
Next I'm going to ODIN the stock ATT rom over and see what happens.
FAIL! modem.bin won't flash.
Flashed Stock AIO modem+firmware+rom, etc odin to phone and flashed LJC modem manually. No data and was reporting WCDMA only from the last NV items hack. It seems NV-ITEMS are persistent across a complete and total stock restore+modem flash (twice) wipes and bricks. I restored my backup TXT for nv items and stock network has returned.
I'm flashing CM next for Sprint as it has "- Removed preset Network mode/selection (allows for more network modes)"
http://forum.xda-developers.com/showthread.php?t=2047667
Hopefully with the NV Items hack and a ROM without network modes locked w/ a SIM card board I should be gold.
Here is NV Items when flashing on stock ODIN:
Writing NV-items from a file:
Unsuccessfully written NV-items:
00000 (0x0000) - Password (16 digits) is required
00001 (0x0001) - Read only item
00005 (0x0005) - Command failed
00018 (0x0012) - Command failed
00031 (0x001F) - Command failed
00032 (0x0020) - Read only item
00033 (0x0021) - Read only item
00034 (0x0022) - Command failed
00035 (0x0023) - Command failed
00036 (0x0024) - Command failed
00037 (0x0025) - Read only item
00048 (0x0030) - Command failed
00049 (0x0031) - Command failed
00050 (0x0032) - Command failed
00176 (0x00B0) - Read only item
00177 (0x00B1) - Read only item
00178 (0x00B2) - Command failed
00209 (0x00D1) - Read only item
00210 (0x00D2) - Command failed
00211 (0x00D3) - Command failed
00212 (0x00D4) - Command failed
00213 (0x00D5) - Command failed
00215 (0x00D7) - Command failed
00258 (0x0102) - Command failed
00259 (0x0103) - Command failed
00260 (0x0104) - Command failed
00261 (0x0105) - Command failed
00262 (0x0106) - Read only item
00263 (0x0107) - Read only item
00264 (0x0108) - Read only item
00265 (0x0109) - Read only item
00266 (0x010A) - Read only item
00296 (0x0128) - Command failed
01943 (0x0797) - Password (16 digits) is required
05597 (0x15DD) - Read only item
05598 (0x15DE) - Read only item
Done.
1/10/13 6:17pm
http://forum.xda-developers.com/showthread.php?t=2016575
Trying new international ATT rom. CM10 didn't have what I needed for network selections.
I have successfully detected a GSM network type although it's going to need some work.. I got to go home and eat.
1/11/13 11:14am
Using the RF NV editor from QPST I can edit all NV-Items with no roaming lists error.
BY FOLLOWING THESE INSTRUCTIONS YOU ARE INTENTIONALLY BRICKING YOUR DEVICE. I HAVE TESTED RECOVERY BACK TO STOCK WITH A ODIN FLASH AND RESTORATION OF MY NV-ITEMS BACKUP. I TAKE NO RESPONSIBILITY FOR YOUR DEVICE AND THESE INSTRUCTIONS ARE PROVIDED AS-IS.
That being said I have ODIN flashshed ATT firmwares over, international firmwares over, changed numerous NVItems settings and have been successful in restoring my device to fully operational stock with working radio/service. At one point I had to go into download mode and odin TWRP and ADB sideload a modem due to a boot loop but I was still able to recover.
*DO NOT PROCEED UNLESS YOU ARE AWARE OF HOW TO UNBRICK YOUR DEVICE AND RESTORE IMEI/NV-ITEMS*
To enable USB file transfer at anytime dial *#7284# Qualcomm USB Settings and select MTP+ADB
Here is a howto/recap of what I have accomplished:
**YOU MUST BE ROOTED**
You need the SIM card board for this to work otherwise you are simply experimenting. Get one HERE
1. Get the Note 2 toolkit and drivers per your device HERE This is the easiest method of getting all required tools/software for a brick restore and other flashes.
2. Get the Samsung NV Items tool HERE
3. Get your MSL using the *root required* Get my MSL app HERE Write it down and keep it in a safe place!
4. Dial *#7284# go to Qualcomm USB Settings and select RNDIS+DM+MODEM
5. Plug or Replug your device and wait for drivers to install
6. Open Device Manager and expand Ports (COM & LPT) (windows xp/7/8), make a note of which COM SAMSUNG Mobile USB Serial Port (COM*) (If you do not see the port listed then you didn't install drivers, wait for driver install or you didn't enable Qualcomm diag properly)
7. Open NV-items_reader_writer.exe and select your COM* from Port: dropdown. Put your MSL # in where it says 000000. Make sure BOTH checkboxes are checked and click connect. Click Read. Should say in console "Log message: > SPC is correct. Phone unlocked".
If you get "Log message: > Phone does not accept SPC. SPC is not correct" then try 000000 as MSL
8. Click Read and wait 5-10 mins for your nvitems to be read. SAVE THE TEXT FILE somewhere where you won't loose it and MAKE A BACKUP. Email it to yourself and upload it to dropbox. If you loose this file then you could permabrick your device!
9. Download the AWS ATT NvItems unlock file HERE Click DOWNLOAD and save the txt file to your desktop or somewhere where you will remember.
10. Open or go to NV-items_reader_writer.exe. Do the connect, MSL, read and select com port if you closed the app. Click WRITE and select the text file you downloaded in step 9 "nv aftr qxdm removed imei.txt". After writing click on Mode and Reboot or simply reboot your phone.
At this point you are on a Sprint Rom/Kernel/Modem with a GSM compatible radio. Your Sprint software has no idea what is going on and most likely won't connect to GSM even with a SIM card inserted. If you go into Settings->Mobile networks you wont see options to set APN. This is because the Sprint ROM/Radio isn't setup to connect to GSM. Try THIS to "unlock" US GSM couriers on Sprint ROM
11. Flash this ATT ROM: (others may work, although you need a ROM with NO included Kernel/Modem)
HERE
This is the [ROM][4.1.2][XXDLL1] Asylum TJ v1ROM with no modem/kernel/etc. Wipe Dalvik, factory reset, cache. I also wiped system before installing but you may not need to.
12. Boot and verify the rom boots.
At this point you can experiment with the Mobile Networks settings and should see APN options. Change your Network mode and see if you can get any listings for "Network operators" when selecting manual. If you can see ATT/T-MOBILE then report your findings!
13. Next is to flash over a ATT modem/radio in TWRP. Download the modem HERE
THIS MODEM WILL CAUSE YOUR DEVICE TO BOOT LOOP. Although I found on my device it only rebooted every 5 mins or so.
14. After booting you should be able to see ATT/TMOBILE in your network operators settings. Make sure to play with Network mode. I don't have a SIM card and so my lockscreen said "Emergency Calls Only" and I couldn't get into the Mobile Networks menu as it told me to "Please insert SIM card"
At this step I'm fairly certian the GSM bands are unlocked as most people only see Emergency Calls Only when their device is not registered. Normally this is caused by invalid or unauthorized SIM/IMEI/APN settings on a normal GSM phone.
RECOVERY
1. Download Sprint firmware HERE
2. Extract the ZIP to your desktop so you have the "COMBINATION_L900VPLJ1_L900VPALJ1_CL265523_HWID04_HW-Rev0406_user_low_ship.tar.md5" file on your desktop
3. Go into download mode HOW TO
4. Open Odin from C:\Samsung Galaxy Note2 ToolKit\Odin3_v3.07.exe
5. Connect your device
6. Click PDA and select "COMBINATION_L900VPLJ1_L900VPALJ1_CL265523_HWID04_HW-Rev0406_user_low_ship.tar.md5"
It will check MD5 and it'll take a minute
7. Click Start and wait for your device to flash & reboot.
8. Dial *#7284# and go to Qualcomm USB Settings and select RNDIS+DM+MODEM.
9. Open NV-items_reader_writer.exe
10. Find your COM port from earlier in your device manager, same as last time
11. Connect, Read. IF YOU GET SPC ERROR TYPE YOUR MSL or TRY 000000
12. Click Write and select your NV-ITEMS BACKUP .txt FILE
13. After writing click on Mode and Reboot or simply reboot your phone.
14. Dial *#7284# Qualcomm USB Settings and select MTP+ADB
You should now have a fully operational Stock device.
To enable USB file transfer at anytime dial *#7284# Qualcomm USB Settings and select MTP+ADB
If you have issues past this point then you didn't follow instructions completely or you experienced something different then what I experienced. The most important step of unbricking is restoring your NV-ITEMS. Odin flashing of stock firmware/etc is normal procedures as per any unbrick. You are welcome to try modifying the ATT modem to not bootloop (most likely LTE issues as Sprint radio doesn't operate on ATT LTE frequencies) by following THIS post. You can also try the Sprint ROM/Modem by following the Verizon APN/Network hack HERE
Some roms won't let you do *#7284# for ADB/MTP. The way around this (if you need to transfer files and MTP isnt anabled) is to sideload files from TWRP or find the verizon method for dialer codes for Qualcomm USB settings menu. There was a dialer only instruction post but I can't find it now. If all else fails then simply ODIN to stock.
Impressive work you are attempting. It would def be cool to have the same radio functionality that Iphone 5 peeps have. I am on AT&T, but it would be cool to be able to load the CDMA and related stuff to a GSM phone as well. Good luck, I will be foloowing your thread, mostly out of curiosity.
Sent from my SAMSUNG-SGH-I317 using xda app-developers app
I can successfully see a ATT/T-Mobile GSM network type with the NV-Items hack. I need to do the sim card mod now. I'll order parts this weekend and until then there isn't too much I can do.
rockerrock said:
I can successfully see a ATT/T-Mobile GSM network type with the NV-Items hack. I need to do the sim card mod now. I'll order parts this weekend and until then there isn't too much I can do.
Click to expand...
Click to collapse
Great news! Excellent work by the way, would love to see this end up working!
I can now run a ATT flashed modem. When selecting Mobile Networks it tells me to insert a sim card. I'm getting reboots every 3-5 minutes but I think it's kernel related. The ROM is half the battle, ATT modem boot looped on SPR ROM. I should be able to connect to GSM once I do the SIM hack for proof of concept.
Recap:
NV-Items of the ATT to T-Mobile flashed (AWS/GSM unlock, use both ATT and Tmobile on ATT GN2)
Flashed ATT ROM
Failed flashing ATT Persues kernel (stuck at samsung logo)
Flashed Sprint Persues kernel
Flashed ATT modem
I desperately need the NV-ITEMS from an international phone in txt format.
http://forum.xda-developers.com/showthread.php?p=36559274
this may have nothing to do with what your doing but ill ask anyway I ported a verizon note 2 rom over to sprint galaxy note 2 and everything works but LTE is it possible to get it to work? Its the JellyBeans Rom in the sprint forum
From my understanding the customization of the chipset is in relation to LTE frequencies which are hawdware related. It's the same for the Nexus 4, it supports LTE unofficially on band 4 due to LG keeping in their Optimus LTE chip. Nexus 4 on LTE only works in certain areas in the country due to ATT only providing LTE band 4 in very limited areas.
I doubt I can "unlock" to the point where a Sprint/Verizon phone can see each other's LTE frequencies as LTE is a different chip in question (most frequently) as LTE courier customization is specific to the courier/device.
I may be wrong as it depends on the chip in question and how it's implemented. I need to find a photo of both Sprint/Verizon mainboards and compare. My work focuses on GSM/AWS bands for HSDPA+ and 3G as it is more likely to work as the chipset known supports these bands. Please feel free to post pics of the boards or chipset info and I'll look into it.
Due to my NV-Items trick I now can use QPST to dump a full nvitems+more. I cannot restore items though
When in GSM mode I'm getting an Emergency Calls Only/Enter SIM which means it should work with a SIM chip.
ATT modem + ATT/AWS nvitems unlock on ATT ROM; SPR Kernel.
Buying a cracked screen working ATT Note 2 sometime today for $325 for additional testing
rockerrock said:
Due to my NV-Items trick I now can use QPST to dump a full nvitems+more. I cannot restore items though
When in GSM mode I'm getting an Emergency Calls Only/Enter SIM which means it should work with a SIM chip.
ATT modem + ATT/AWS nvitems unlock on ATT ROM; SPR Kernel.
Buying a cracked screen working ATT Note 2 sometime today for $325 for additional testing
Click to expand...
Click to collapse
Seems like your making progress
Sent from my SPH-L900 using xda premium
I'm following your thread with a lot of enthusiasm.
Sent from SHV-E250/N7105 w/ SJKernel using XDA apps developers app premium.
Post #2 contains instructions.
I have just found a Verizon hack thread to get US GSM data/voice working without all this hacking. I'll try it out and report back
http://forum.xda-developers.com/showthread.php?t=2044449
Flashed Deodex Vzw ROM:
http://forum.xda-developers.com/showthread.php?t=2044351
Flashed APN editor:
http://forum.xda-developers.com/showthread.php?t=2044449
I can see verizon networks, no LTE. Trying GSM now.
Yeah, I really doubt you will get VZW LTE working as for one you will not Auth with their system. Second I am sure the transceiver in our version of the phone is not capable of that frequency on the LTE path.
-- "Sensorly or it didn't happen!"
digiblur said:
Yeah, I really doubt you will get VZW LTE working as for one you will not Auth with their system. Second I am sure the transceiver in our version of the phone is not capable of that frequency on the LTE path.
-- "Sensorly or it didn't happen!"
Click to expand...
Click to collapse
Agreed, my goal is to get HSDPA GSM data working on Sprint Note 2. Verizon allready has a method of unlocking http://forum.xda-developers.com/showthread.php?t=2044449. I do agree that it's impossible for LTE to work on any method as LTE chip is a whole different ballgame than what I'm attempting. It may be possible but someone would have to start by getting a VZW and SPR mainboard and comparing chips. Even if you somehow get the radio working you would might need to hack the ESN which is ILLEGAL, although VZW does use SIM cards..
However I can see VZW frequencies on my Note 2 right now. Alternating between EVDOa and eHRPD.
rockerrock said:
Agreed, my goal is to get HSDPA GSM data working on Sprint Note 2. Verizon allready has a method of unlocking http://forum.xda-developers.com/showthread.php?t=2044449. I do agree that it's impossible for LTE to work on any method as LTE chip is a whole different ballgame than what I'm attempting. It may be possible but someone would have to start by getting a VZW and SPR mainboard and comparing chips. Even if you somehow get the radio working you would might need to hack the ESN which is ILLEGAL, although VZW does use SIM cards..
However I can see VZW frequencies on my Note 2 right now. Alternating between EVDOa and eHRPD.
Click to expand...
Click to collapse
Side note... Altering an ESN isn't just caps illegal, it is caps/bold/underscored/red font illegal. A federal felony from what I've read.
Sent from my SPH-L900 using Tapatalk HD
Skripka said:
Side note... Altering an ESN isn't just caps illegal, it is caps/bold/underscored/red font illegal. A federal felony from what I've read.
Sent from my SPH-L900 using Tapatalk HD
Click to expand...
Click to collapse
Yup, modifying ESN has absolutely nothing to do with my research. My goal is to utilize a provider's SIM on GSM to connect to ATT/TMobile with stock IMEI/ESN. Verizon uses a SIM in their Note2/S3 in which if they accept your ESN/IMEI with their SIM is their discretion. ESN/IMEI, etc is stored in NV Items which is in the modem baseband, not the ASIC. Swapping SIM cards are perfectly legal so removal/replacement of the embedded SIM is legal. ESN/IMEI is like a car's VIN which is illegal to touch, SIM is more like a license plate on a car. I'm a firm believer in its your device do what you want but once you enable your modem to interact with the public infrastructure you are bound to it's rules, period.
On another note I have a ATT Note 2 now but I sold the Sprint Note 2 to get the Nexus 4. I can continue my research into GSM on my Sprint S3 and provide dumps for the ATT Note 2.
I'm fairly certain that I have accomplished a US GSM unlock on my Sprint Note 2 as it exhibits the same symptoms as a Unlocked phone without a SIM, Emergency Calls Only. However I do not see ATT/T-Mobile in my network operators menu which I'm sure the VZW APN hack will fix or it's because I don't have a SIM.
It's going to take someone with a Sprint S3/Note 2 with SIM mod and some tinkering around to get this to work. I'll get a SIM board for my S3 but it's going to take some time as I'm busy with work and my girlfriend. If anything was learned, it was that the S3/Note 2 is pretty much damn near unbrickable. I've flashed every firmware known to man, trashed my NV ITEMS, wiped my ESN/MSL and recovered to absolutely working activationable stock. Don't be afraid to experiment, just BACKUP and BACKUP your BACKUPS.
I am stuck at this step:
13. Next is to flash over a ATT modem/radio in TWRP. Download the modem HERE
THIS MODEM WILL CAUSE YOUR DEVICE TO BOOT LOOP. Although I found on my device it only rebooted every 5 mins or so.
It does cases boot loop, only it's not every 5 minutes, but instantenious, right after "Android is upgrading" Am i missing something?
Update: with ATT ROM, it does give me 2-3 minutes before reboot, however it won't see the Sprint SIM with ATT modem file. I've also tried few other modems from Verizon and some other GN2 carriers, same story. currently i have no SIM mode installed, but I think it should still see SPRINT chip/SIM because it is emmulating a LTE/GSM SIM. SIM manager says SIM state unknown.
Is this the same for you? how are you able to see the T-mobile and AT&T , if you can't get n to the mobile networks menu?
rockerrock said:
Agreed, my goal is to get HSDPA GSM data working on Sprint Note 2. Verizon allready has a method of unlocking http://forum.xda-developers.com/showthread.php?t=2044449. I do agree that it's impossible for LTE to work on any method as LTE chip is a whole different ballgame than what I'm attempting. It may be possible but someone would have to start by getting a VZW and SPR mainboard and comparing chips. Even if you somehow get the radio working you would might need to hack the ESN which is ILLEGAL, although VZW does use SIM cards..
However I can see VZW frequencies on my Note 2 right now. Alternating between EVDOa and eHRPD.
Click to expand...
Click to collapse
Seeing PCS and CLR VZW is easy. I don't think you will auth on ehrpd though.
Did you ever get past the failure to read roaming list issue. Was curious if you found a way to read the PRL from the Note2.
-- "Sensorly or it didn't happen!"
Let me know if you would like me to test your theory.
sent from my phone using rocket fuel

One V CDMA - Problem in enabling data connection

I am using a HTC One V CDMA (Virgin Mobile USA) in India on Reliance CDMA network. The phone was flashed to Reliance and everything is working fine ie I can make/receive calls/sms etc. 1x / EVDO credentials have already been written to the phone.
Now the issue is that I am not able to enable data or the data connection doesn't get enabled automatically. When I try to enable data it says "Disconnected because service is unavailable". But if I press the "Activate this device" button in the settings section, an activation screen 1..2..3 comes up, then wait for 3-4 sec, the 3G symbol gets displayed meaning its able to make a data connection. Now if I go back to the settings page and enable data it successfully connects, and I am able to access internet at EVDO speeds. But after some idle time, the data connection is automatically disconnected and to reconnect I need to repeat the above process. Even if I intentionally disconnect data and try to reconnect, it doesn't happen and I need to go through the "Activate this device" process.
I believe some sort of initialization is missing which is done during the "Activate this device" phase and hence I am able to connect. What could be the reason for this? Is it some setting/configuration that needs to be enabled?
Please pour your valuable tips to resolve this issue.
Thanks
Fixed the issue with auto connection of data, not sure what fixed it exactly, but here are the last changes that I made after which it started working.
You need to use the tool QPST (I used version 2.7.378, an older version didn't work) for this.
In the M.IP tab, disable all profiles except profile 1
Then edit profile 1 and make changes (check attachment)
Then in RmNet tab enable auto connect for device 0 and 1.
After that
PPP Config --> Um --> Enter user/pass as "net" (Req Pw enc should be unchecked)
PPP Config --> AN --> Enter the EVDO credentials given by the MEID registrar (Req Pw enc should be unchecked)
Please note that I got it working merely by trial and error and some of the above changes may not be required and I am not even sure why they are necessary , but with the above configuration I am able to enable data without any problem.
iamvarkey said:
Fixed the issue with auto connection of data, not sure what fixed it exactly, but here are the last changes that I made after which it started working.
You need to use the tool QPST (I used version 2.7.378, an older version didn't work) for this.
In the M.IP tab, disable all profiles except profile 1
Then edit profile 1 and make changes (check attachment)
Then in RmNet tab enable auto connect for device 0 and 1.
After that
PPP Config --> Um --> Enter user/pass as "net" (Req Pw enc should be unchecked)
PPP Config --> AN --> Enter the EVDO credentials given by the MEID registrar (Req Pw enc should be unchecked)
Please note that I got it working merely by trial and error and some of the above changes may not be required and I am not even sure why they are necessary , but with the above configuration I am able to enable data without any problem.
Click to expand...
Click to collapse
Thanks for the above method .. Did you use this method after loading the NVDump file given by the registrar ? ... ALso when i edit the UM and AM feilds and issue write to the phone its showing as the phone has a read only NV ITEMS.
yakaaithiri said:
Thanks for the above method .. Did you use this method after loading the NVDump file given by the registrar ? ... ALso when i edit the UM and AM feilds and issue write to the phone its showing as the phone has a read only NV ITEMS.
Click to expand...
Click to collapse
Well, I had loaded the NVDump earlier, but as I had mentioned it would connect first but if you disconnect or get disconnected it wouldn't reconnect.
Check if the SPC is correct, cause I never got any error like that.
iamvarkey said:
Well, I had loaded the NVDump earlier, but as I had mentioned it would connect first but if you disconnect or get disconnected it wouldn't reconnect.
Check if the SPC is correct, cause I never got any error like that.
Click to expand...
Click to collapse
OP, I am taking a HTC One V for my dad and plan to use it with reliance, could you please tell me what I need to do ?
I already unlocked and rooted the phone. Do I just walk into a reliance store or do something more on computer etc before going there ?
experx said:
OP, I am taking a HTC One V for my dad and plan to use it with reliance, could you please tell me what I need to do ?
I already unlocked and rooted the phone. Do I just walk into a reliance store or do something more on computer etc before going there ?
Click to expand...
Click to collapse
You are talking about Reliance CDMA right?
If yes you need to get the MEID registered, will cost you about Rs 500. Reliance store guys will not do it, have to get it done through some 3rd party provider.
It says Read only NV Items for me too
2kool2btrue said:
It says Read only NV Items for me too
Click to expand...
Click to collapse
That's fine. Its only for one particular NVITEM. Just ignore it.
Hello varkey bhai,
Please Help me with the problem.
1. my meid is registered with reliance.
2. my prl is 00005
3. i am using the handset since 10 months.
4. evdo is also activated on my number.
But i am just getting 1x speeds.
Only thing i feel, i am missing out is on the username,Password,NV file,akey etc.
I have not received the above details from my reigstrar
Can u please guide me how this can be done to start evdo speeds.
Thanks in advance
vakubhai said:
Only thing i feel, i am missing out is on the username,Password,NV file,akey etc.
I have not received the above details from my reigstrar
Click to expand...
Click to collapse
Without the correct EVDO credentials, you won't be able to get EVDO speeds. You need to check with your MEID registrar.
NV dump is not really required and the same can be configured manually if you have the credentials as I have described above. Since you are able to make and receive calls, it looks like the Akey is already set.
so that means if i dont get the credentials from the registrar EVDO can never be started on this handset??
iamvarkey said:
Without the correct EVDO credentials, you won't be able to get EVDO speeds. You need to check with your MEID registrar.
NV dump is not really required and the same can be configured manually if you have the credentials as I have described above. Since you are able to make and receive calls, it looks like the Akey is already set.
Click to expand...
Click to collapse
vakubhai said:
so that means if i dont get the credentials from the registrar EVDO can never be started on this handset??
Click to expand...
Click to collapse
You could check with some other person who does MEID registration, maybe they can retrieve the credentials. But without it, EVDO will not work.
i have an htc droid incredible and i am facing the same problem as mentioned above are the steps above same for my phone also
vikisharma said:
i have an htc droid incredible and i am facing the same problem as mentioned above are the steps above same for my phone also
Click to expand...
Click to collapse
Try it out. It should work.
NVITEM Dump file
iamvarkey said:
That's fine. Its only for one particular NVITEM. Just ignore it.
Click to expand...
Click to collapse
Hello iamvarkey,
i have a sprint htc one that i have flashed but still dont have signal for voice and data. will the nv dump file help resolve this issue and how can i get it.
thanks
jewelman said:
Hello iamvarkey,
i have a sprint htc one that i have flashed but still dont have signal for voice and data. will the nv dump file help resolve this issue and how can i get it.
thanks
Click to expand...
Click to collapse
Simply by loading the Reliance PRL file, you should have voice signal, if not you are doing something wrong.
iamvarkey said:
Simply by loading the Reliance PRL file, you should have voice signal, if not you are doing something wrong.
Click to expand...
Click to collapse
i had done that but didnt work. the phone was sent to me without activating it first with sprint, can this affect it
jewelman said:
i had done that but didnt work. the phone was sent to me without activating it first with sprint, can this affect it
Click to expand...
Click to collapse
I don't think that would be a problem.
Make sure you are using the right PRL file.
No above steps required.
You must have flashed NV Dump already.
Your phone must be activated via *228 already.
Just perform below mentioned steps :
1) Put your phone in Diag Mode by dialing ##3424#
2) Get HTC Diag Mode driver if you don't have it already
3) Download DFS Demo version from DFS Website
4) Connect your phone with DFS, send SPC
5) Now, go to Programming tab -> Data ->
6) Click Read
7) At PPP tab, write "net" (without quotes) to SIP NAI, UID, Pwd field.
Restart the device and here you go, your device would get connected to internet instantly.
keval32 said:
No above steps required.
You must have flashed NV Dump already.
Your phone must be activated via *228 already.
Just perform below mentioned steps :
1) Put your phone in Diag Mode by dialing ##3424#
2) Get HTC Diag Mode driver if you don't have it already
3) Download DFS Demo version from DFS Website
4) Connect your phone with DFS, send SPC
5) Now, go to Programming tab -> Data ->
6) Click Read
7) At PPP tab, write "net" (without quotes) to SIP NAI, UID, Pwd field.
Restart the device and here you go, your device would get connected to internet instantly.
Click to expand...
Click to collapse
Keval,
I recently bought a HTC One E8 and am using Reliance CDMA on Slot-1 and facing this issue.
Would the steps jotted by you help me?
Thanks,
Vinay

Stopping Hands Free Activation!

My friend Jeremy helped me with getting rid of the "Hands Free Activation" pop-up and I thought I would share it. It especially comes in handy when you are flashed to another carrier. If you are on one of the new custom ZVB Roms you probably don't have to worry about it. All you have to do is:
1) Get a Root File Browser .... I like Rom Tool Box
2) Go to "System" folder
3) Go to "App" folder .... (not Apps)
4) Scroll down and find "OmaDmclient.apk" and rename it to "OmaDmclient.bak"
5) Reboot and you should not get that aggravating ass pop up any more
:silly::laugh:
I hope I've helped someone because a lot of people have damn sure helped me!
Just Showing Off
Since this thread is my posting I wanted to show off my Speedtest results of 3g being "legally" flashed to Page Plus
http://i43.tinypic.com/ezg6l3.jpg
I could use some help through this process
devo3d said:
Since this thread is my posting I wanted to show off my Speedtest results of 3g being "legally" flashed to Page Plus
Honestly, I'd like to start with getting any data (non-wifi) working on this phone...
What I have tools wise? CDMA Workshop
LGNPST (not working) frustrated as heck about this
My LS970 - updated to Page Plus PRL and making and recieving calls...
Can someone point me in the right direction?
Click to expand...
Click to collapse
eagleveteran said:
devo3d said:
Since this thread is my posting I wanted to show off my Speedtest results of 3g being "legally" flashed to Page Plus
Honestly, I'd like to start with getting any data (non-wifi) working on this phone...
What I have tools wise? CDMA Workshop
LGNPST (not working) frustrated as heck about this
My LS970 - updated to Page Plus PRL and making and recieving calls...
Can someone point me in the right direction?
Click to expand...
Click to collapse
have you try DFS Tools? I always use this tools flashing from sprint to smartfren (Indonesian provider)
Click to expand...
Click to collapse
eagleveteran said:
devo3d said:
Since this thread is my posting I wanted to show off my Speedtest results of 3g being "legally" flashed to Page Plus
Honestly, I'd like to start with getting any data (non-wifi) working on this phone...
What I have tools wise? CDMA Workshop
LGNPST (not working) frustrated as heck about this
My LS970 - updated to Page Plus PRL and making and recieving calls...
Can someone point me in the right direction?
Click to expand...
Click to collapse
I know I'm late responding to this but what service provider are you flashed to? ( if you haven't found a solution yet )
Click to expand...
Click to collapse
Page Plus
devo3d said:
eagleveteran said:
I know I'm late responding to this but what service provider are you flashed to? ( if you haven't found a solution yet )
Click to expand...
Click to collapse
Page Plus
Click to expand...
Click to collapse
Thank You
I was really annoyed with the popup.
Thanks for the solution :good::good:
lnxnubie said:
I was really annoyed with the popup.
Thanks for the solution :good::good:
Click to expand...
Click to collapse
No Probelem....The guy I use to use to flash phones figured it out....he was the only one (entire USA) that knew how to flash the OG to Verizon and get full data (3G). He quit flashing phones from where he was living so now I can't get in touch with him...he could flash any freakin phone..
eagleveteran said:
devo3d said:
Page Plus
Click to expand...
Click to collapse
With Page Plus and Straight Talk you have to have certain APN's set. Is your APN correctly set for Page Plus?
EDIT: ( I don't even know if I can post this but I sure admin will let me know...LOL)
I found this in my files, used it long ago and am not sure if it still is applicable but there may some information in it that may be able to lead you in the right direction......
PP
3G data speeds (HOW TO)
This guide is to get evdo data or 3g data speeds on phones flashed to page plus cellular this is not a beginers guide by no means this guide is assuming both spc codes are set to 000000.
things you will need:
1.A donor phone of your own that will ota program and one that you can swap the esn number to that of the target phone. I used a samsung i500
2.Target phone that you own
3.qpst and dfs 4.0.0.4 demo
4.drivers for both phones
Pre-Setup:
1.pull battery out of the target phone and LEAVE it out
2.place that esn number on the donor phone
3.Deactivate then reactivate the target phones esn number
4.OTA program the donor phone that has the swapped esn number on it.
5.Verify that 3g speeds are working on the donor phone
Phase 1:
1.Place donor phone in diagnostic mode and plug into computer
2.Open qpst configuration add the port
3.Go to start clients then efs explorer
4.Open the DMU folder and copy the 10.key file to your computer then exit qpst
Phase 2:
1.Open DFS and select the port that the phone is on
2.Send the spc you should see a device unlocked message in the log.
3.Go to the programming tab then the nam tab and read that page.
4.Read the Data tab and Mobile IP tab as well.
5.Do not close the dfs tab
6.Revert esn back to normal or smash the donor phone into a lot of pieces
Final Phase: (Non-Verizon and Sprint)
1.Power on target phone and place in diagnostic mode and plug into computer
2.Open qpst configuration add the port
3.Go to start clients then efs explorer
4.Now on the Left side of the efs explorer right click the screen go to new and directory
5.Name the directory "DMU" without the quotation marks then place the 10.key file into that directory by drag and drop then exit qpst
6.Now go back into dfs do not add the target phone yet and go to mobile ip nothing else on the screen should change
7.Now select the port the target phone is on in dfs and send the spc code
8.Write the nam tab to target phone after verifing it doesnt say home only then go to data tab and check the box next to pwd on the ppp section only which will change the pwd to hex format then write the data tab
9.Go to the mobile ip tab and right click the red stop sign looking thing on the second bubble and enable it and set active profile to 1 then click "write current profile settings" and click the write button on the left side of the screen
10.Now go back to the Nam tab and load the prl file I prefer using 00002 but you can experiment
Final Phase: (Verizon 4gLTE)
1.Power on target phone and place in diagnostic mode and plug into computer
2.Open qpst configuration add the port
3.Go to start clients then efs explorer
4.Now on the Left side of the efs explorer right click the screen go to new and directory
5.Name the directory "DMU" without the quotation marks then place the 10.key file into that directory by drag and drop then exit qpst
6.Now go back into dfs do not add the target phone yet
7.Now select the port the target phone is on in dfs and send the spc code
8.Write the nam tab to target phone after verifying it doesn't say home only then go to data tab and check the box next to pwd on the ppp section only which will change the pwd to hex format then write the data tab
9.Go to the mobile ip tab click "write current profile settings" and click the write button on the left side of the screen
10.Now go back to the Nam tab and load the prl file i recommend 00002 but experiment with what you want and reboot phone and enjoy
Having issues try getting 1x first on lte phones you will need a sim card unactivated by verizon and it should pop up after a minute or two should never take longer than 15 minutes the first time
make sure you have it set to nv only on lte handsets.
Need a guide for a specific model name it I'll write it for you step by step for a small fee.
Note I have not tested this on any apple product so cannot support them.
Between getting 1x and then going to target phone must be on airplane mode after esn on account is switched back
Read more: http://www.cricketusers.com/page-plus-cellular/38824-page-plus-3g-data-speeds-how.html#ixzz2VLa0LfsP
ANOTHER EDIT : SOMETHING I FORGOT ABOUT YOUR MMS
Steps to MMS (picture mail) configuration: This is only one way, but it works...
1. Open the messaging app and press menu and select settings.
2. Uncheck EVERY item in the settings and exit the app with the back button.
3. Open your browser and go to the URL "mms.ihavegreat.info" and download
4. Pull down the top of your screen and wait for the app to finish downloading
5. Tap the app to install and let it authorize and setup
6. Remove the stock messaging app from homescreen and replace with this new one.....(may also disable the original message app)
7. Reboot the phone and you should have working MMS
Click to expand...
Click to collapse

Categories

Resources