Step 1. Download the Pantech Curitel USB drivers

Step1.5 Dial *#7678 click MTP Default and Disable

Step 2. Open qpst add the port that the Curitel Driver is using

(Follow this for ESN Repair)

Step 1. Close QPST and Open CDMA Workshop

Step 2. Connect to the comm port

Step 3. Navigate to Security and Send the SPC 000000

Step 4. read the ESN change it to all 0's in the LG method

Step 5. Write it again as The Default Method.

Step 6. Send the SPC again
Keep Alternating between the 2 methods and between 2-5 tries you will have successfully written the new ESN
Close CDMA workshop

Step 7. Open qpst then QXDM Pro

Step 8. Open NV Browser

Step 9. Open the System section of NV

Step 10. Navigate to Mobile Equipment Identifier and change it to whatever you wish or fix it to what it should be.

Power Cycle the Phone it should now be whatever you wanted it to be.


(Changing the PRL and other Service tasks to activate it on MetroPCS)

Close QXDM as it is too powerful for what you need to do.

Edit the settings as you would for any metro flash phone from QPST.

just tried this and i cant get the esn to write we need the password to get that to work

password

Chance to find 16 Digit password is in not encrypted AMSS. :)
AMSS is "Firmware"...

I NEVER seen the Firmware for it.

Maybe someone has the Original Update or can dump/read from handset the Firmware...

ummm 000000 if its verizon
otherwise use qxdm to find it

6 Digits is SPC I think... (NV item 85)

Security Password is 16 Digits. No NV item, it is in AMSS (Firmware integrated)
1122334455667788 (fantasy example)

But it could be. That NO Password is set. :D
Without Firmware we could never confirm these theories. :o

Best Regards

This doesn't work... it resets the phone... :\

If handset restarts after wrong Password.
So it is the evidence. That Security Password is set and active.


But now the 100000000. time...

If nobody has the Firmware on PC or can dump Firmware from Handset... :rolleyes:

So we have nothing to research.
Security Password is in AMSS, nowhere else...


I have no Blitz to check it self....

i need pinout for this model.....

6 Digits is SPC I think... (NV item 85)

Security Password is 16 Digits. No NV item, it is in AMSS (Firmware integrated)
1122334455667788 (fantasy example)

But it could be. That NO Password is set. :D
Without Firmware we could never confirm these theories. :o

Best Regards

The security password should be 2007112120080625. Credit goes to amoamare [Only Registered Users Can See Links]